Edit tour

Windows Analysis Report
http://scamwebsite.com/

Overview

General Information

Sample URL:	http://scamwebsite.com/
Analysis ID:	1466478
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML body with high number of embedded SVGs detected

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5988 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2104 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5604 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6484 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6836 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://scamwebsite.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://scamwebsite.com/

Avira URL Cloud: detection malicious, Label: malware

Antivirus detection for URL or domain

Source: https://scamwebsite.com/Robuxb.png	Avira URL Cloud: Label: malware
Source: https://scamwebsite.com/Robux.png	Avira URL Cloud: Label: malware
Source: https://scamwebsite.com/Untitled.png	Avira URL Cloud: Label: malware
Source: https://scamwebsite.com/baddesign.gif"	Avira URL Cloud: Label: malware
Source: https://scamwebsite.com/style.css	Avira URL Cloud: Label: malware
Source: http://scamwebsite.com	Avira URL Cloud: Label: malware
Source: https://scamwebsite.com/baddesign.gif	Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://scamwebsite.com

LLM: Score: 9 brands: Roblox Reasons: The URL 'https://scamwebsite.com' is highly suspicious and does not match the legitimate domain 'roblox.com' associated with the brand Roblox. The website prominently displays the brand's imagery (Roblox currency) but does not have a legitimate domain. The presence of a suspicious link ('scamwebsite.com') and the use of social engineering techniques (e.g., misleading users with fake currency images) strongly indicate that this is a phishing site. DOM: 13.20.pages.csv

Source: https://www.youtube.com/watch?v=dQw4w9WgXcQ	HTTP Parser: Total embedded SVG size: 101260
Source: https://www.youtube.com/	HTTP Parser: Total embedded SVG size: 142627

Source: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/api2/aframe	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en&ifkv=AS5LTASjShyb1B8LpZdafjGt9TI3NPUIANxzvsDvQ3fcfAoIDwMs7j61MJwlObjdyXtv4dXIDjuGeA&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S1141296641%3A1719959112807969&ddm=0	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon
Source: http://www.addesigner.com/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49729 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style.css HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robux.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Untitled.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adban.gif HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robuxb.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Untitled.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /adban.gif HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robux.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Robuxb.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20240626/r20110914/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-3935057531723584&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1718826837&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&plas=404x714_l%7C404x714_r&format=0x0&url=https%3A%2F%2Fscamwebsite.com%2F&pra=5&wgl=1&easpi=0&aihb=0&asro=0&ailel=28~30~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aiael=28~30~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aifxl=28_13~30_23&aiixl=28_4~30_6&aslmct=0.7&asamct=0.7&aisaib=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1719959089120&bpp=6&bdt=1923&idt=2094&shv=r20240626&mjsv=m202406260101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=8551177816592&frm=20&pv=2&ga_vid=24467173.1719959091&ga_sid=1719959091&ga_hid=1438390344&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44795921%2C95334508%2C95334524%2C95334571%2C95334581%2C31084926%2C31084184%2C95336522%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=229817751475580&tmod=322256741&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2139 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-3935057531723584&output=html&h=600&slotname=6407757917&adk=730000781&adf=3025194257&pi=t.ma~as.6407757917&w=1200&abgtt=6&cr_col=4&cr_row=2&fwrn=2&lmt=1718826837&rafmt=9&format=1200x600&url=https%3A%2F%2Fscamwebsite.com%2F&crui=image_stacked&fwr=0&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1719959089126&bpp=2&bdt=1929&idt=2140&shv=r20240626&mjsv=m202406260101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8551177816592&frm=20&pv=1&ga_vid=24467173.1719959091&ga_sid=1719959091&ga_hid=1438390344&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=863&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44795921%2C95334508%2C95334524%2C95334571%2C95334581%2C31084926%2C31084184%2C95336522%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=229817751475580&tmod=322256741&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEe%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=2198 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.png HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dQw4w9WgXcQ HTTP/1.1Host: youtu.beConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch?v=dQw4w9WgXcQ&feature=youtu.be HTTP/1.1Host: www.youtube.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/71059424/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/webcomponents-sd.vflset/webcomponents-sd.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: rr4---sn-ab5l6nk6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?conn2 HTTP/1.1Host: rr4---sn-ab5l6nk6.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/intersection-observer.min.vflset/intersection-observer.min.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/scheduler.vflset/scheduler.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/71059424/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/cssbin/www-main-desktop-watch-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/cssbin/www-main-desktop-player-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/cssbin/www-onepick.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.HO55zwvfmNc.L.B1.O/am=AAABWg/d=0/rs=AGKMywFQq8RH1zBq3HWnpbjP0ByYJMzZdQ HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/spf.vflset/spf.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/network.vflset/network.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/71059424/player_ias.vflset/en_US/offline.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/71059424/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/71059424/player_ias.vflset/en_US/miniplayer.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/71059424/player_ias.vflset/en_US/captions.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/71059424/player_ias.vflset/en_US/endscreen.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /sb/dQw4w9WgXcQ/storyboard3_L1/M0.jpg?sqp=-oaymwENSDfyq4qpAwVwAcABBqLzl_8DBginqfCoBg==&sigh=rs%24AOn4CLBDzoUQQHE8XWHw2U31Ra19yy-sOg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=1 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sb/dQw4w9WgXcQ/storyboard3_L1/M0.jpg?sqp=-oaymwENSDfyq4qpAwVwAcABBqLzl_8DBginqfCoBg==&sigh=rs%24AOn4CLBDzoUQQHE8XWHw2U31Ra19yy-sOg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&ctier=L&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1Host: rr1---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1Host: rr1---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=2 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/playback?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=0.031&fmt=397&fs=0&rt=2.123&euri&lact=413&cl=648221806&mos=0&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&fexp=v1%2C23986021%2C18623%2C204121%2C230596%2C104308%2C6789%2C16229%2C133212%2C14625955%2C11684381%2C7111%2C24166%2C12177%2C9954%2C1192%2C7913%2C18310%2C273%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C29151%2C2197%2C621%2C7961%2C1414%2C19%2C2%2C1082%2C4081%2C2872%2C101%2C10943%2C2471%2C6008%2C150%2C1388%2C713%2C2585%2C8134%2C1233%2C1375%2C3761%2C3157%2C3975%2C681%2C1590%2C3542%2C8162%2C3259&rtn=7&feature=youtu.be&afmt=251&muted=0&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1719959111745X-YouTube-Page-CL: 648613515X-Goog-Event-Time: 1719959111745X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.01.00X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3DX-YouTube-Ad-Signals: dt=1719959110085&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /ptracking?html5=1&video_id=dQw4w9WgXcQ&cpn=PrsgaOatqma7291e&ei=Pn6EZtv-HI_Ii9oP38isiA8&ptk=youtube_single&oid=QuEoptyF_C_7jHTEUMsRjA&ptchn=uAXFkgsw1L7xaCfnd5JJOw&pltype=content&m=ArNU00MqJSI-SiRYtjN_6TLhfkGvPSo3yFBShQdQL-oMhPh9ZkZ89i45o47sF6QNBeOUyCEtsafsC0wXfZsfMTIx HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00sec-ch-ua-arch: "x86"X-YouTube-Page-CL: 648613515sec-ch-ua-platform-version: "10.0.0"X-YouTube-Utc-Offset: -240sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.01.00X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3DX-YouTube-Ad-Signals: dt=1719959109306&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=670751145&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00sec-ch-ua-arch: "x86"X-YouTube-Page-CL: 648613515sec-ch-ua-platform-version: "10.0.0"X-YouTube-Utc-Offset: -240sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.01.00X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3DX-YouTube-Ad-Signals: dt=1719959109306&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&ctier=L&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1Host: rr1---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1Host: rr1---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/serviceworker-kevlar-appshell.vflset/serviceworker-kevlar-appshell.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /api/stats/playback?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=0.031&fmt=397&fs=0&rt=2.123&euri&lact=413&cl=648221806&mos=0&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&fexp=v1%2C23986021%2C18623%2C204121%2C230596%2C104308%2C6789%2C16229%2C133212%2C14625955%2C11684381%2C7111%2C24166%2C12177%2C9954%2C1192%2C7913%2C18310%2C273%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C29151%2C2197%2C621%2C7961%2C1414%2C19%2C2%2C1082%2C4081%2C2872%2C101%2C10943%2C2471%2C6008%2C150%2C1388%2C713%2C2585%2C8134%2C1233%2C1375%2C3761%2C3157%2C3975%2C681%2C1590%2C3542%2C8162%2C3259&rtn=7&feature=youtu.be&afmt=251&muted=0&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1719959111816X-YouTube-Page-CL: 648613515X-Goog-Event-Time: 1719959111745X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.01.00X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3DX-YouTube-Ad-Signals: dt=1719959110085&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s48-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/QMW4AqbuSGg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD0bomMOfrJhL8N-GImSSj3RuroVw HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/djV11Xbc914/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCUVjcnPQDSHGvb0uU0snHDJaVnYg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEWCKgBEF5IWvKriqkDCQgBFQAAiEIYAQ==&rs=AOn4CLBf45ycDkHw60O072DkeCeAw0TV-w HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/izGwDsrQ1eQ/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLAPEMSx8W9_-QGlw_ZFUf3cYVKl6w HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/aGCdLKXNF3w/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDWMtGhP23PIbaoWnTfRS2rx0038Q HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1Host: rr1---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&ctier=L&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1Host: rr1---sn-q4flrnee.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=670751145&utuid=uAXFkgsw1L7xaCfnd5JJOw&cv_attributed=0 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00sec-ch-ua-arch: "x86"X-YouTube-Page-CL: 648613515sec-ch-ua-platform-version: "10.0.0"X-YouTube-Utc-Offset: -240sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.01.00X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3DX-YouTube-Ad-Signals: dt=1719959109306&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /vi/JmcA9LIIXWw/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLA-sVJGX5CmBao1iTU9Bd3X9Ud5Xg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/Bx51eegLTY8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDnxVk8Ys7btiIk02iFYM_HN4SLSA HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/fNFzfwLM72c/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD3tub5tA7yLzokq5mj66fzUS1czg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: youtube.comConnection: keep-alivePragma: no-cacheCache-Control: no-cachesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: test_cookie=CheckForPermission
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&ctier=L&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1Host: rr3---sn-q4fl6nde.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1Host: rr3---sn-q4fl6nde.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1Host: rr3---sn-q4fl6nde.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&ctier=L&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1Host: rr3---sn-q4fl6nde.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
Source: global traffic	HTTP traffic detected: GET /vi/QMW4AqbuSGg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD0bomMOfrJhL8N-GImSSj3RuroVw HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app_shell HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /vi/djV11Xbc914/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCUVjcnPQDSHGvb0uU0snHDJaVnYg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEWCKgBEF5IWvKriqkDCQgBFQAAiEIYAQ==&rs=AOn4CLBf45ycDkHw60O072DkeCeAw0TV-w HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s48-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/aGCdLKXNF3w/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDWMtGhP23PIbaoWnTfRS2rx0038Q HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/izGwDsrQ1eQ/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLAPEMSx8W9_-QGlw_ZFUf3cYVKl6w HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1Host: rr3---sn-q4fl6nde.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&ctier=L&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1Host: rr3---sn-q4fl6nde.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=4.834&fmt=397&fs=0&rt=7.01&euri&lact=4861&cl=648221806&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=17&feature=youtu.be&afmt=251&idpj=-6&ldpj=-8&rti=7&st=0&et=4.834&muted=0&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1719959116663X-YouTube-Page-CL: 648613515X-Goog-Event-Time: 1719959116631X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.01.00X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3DX-YouTube-Ad-Signals: dt=1719959110085&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
Source: global traffic	HTTP traffic detected: GET /vi/Bx51eegLTY8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDnxVk8Ys7btiIk02iFYM_HN4SLSA HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/fNFzfwLM72c/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD3tub5tA7yLzokq5mj66fzUS1czg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/JmcA9LIIXWw/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLA-sVJGX5CmBao1iTU9Bd3X9Ud5Xg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/www-tampering.vflset/www-tampering.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/cssbin/www-main-desktop-home-page-skeleton.css HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /manifest.webmanifest HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/player/71059424/player_ias.vflset/en_US/annotations_module.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
Source: global traffic	HTTP traffic detected: GET /s/search/audio/failure.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/search/audio/no_input.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/open.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /s/search/audio/success.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.beAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&is_vtc=0&ptype=f_view&random=479255847&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
Source: global traffic	HTTP traffic detected: GET /js/th/jRfVs40gTXMRpWu0B8K2-2MIOM9vkusCAZGFEOBnG6M.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
Source: global traffic	HTTP traffic detected: GET /an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/mIHHfNVfhPk/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/QJjrf9RkzGo/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/jsbin/www-searchbox.vflset/www-searchbox.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&is_vtc=0&ptype=f_view&random=479255847&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=3 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=4 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/QJjrf9RkzGo/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/mIHHfNVfhPk/maxresdefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/desktop/a7b1ec23/img/favicon.ico HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=OAhaJtZA1lc6HB1wHfesaFHaBsUcIogrdB6nBhy3TPrgUm4UyJWi-MrP1F7ftNTmdvLDxaBb0VP5hRRLgLrl7VZZOFRCcGiE_hBgE-ae_K_fdFaCbhO7THgvbXfuO98u7XYkhL46gLZ3zmrWVikAhO5ccGZZXlQvJbvpG6jpP3A
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtxY3CFK7ixpUrPS1lHwPzur3pDlcy5Zx0XqW5-1SNwkUeWh7D5el9IkjJktOWkkVZqep_r9QLpklLTHUpqEuRl6bh8UmQ&req_ts=1719959102&pg=MainAppBootstrap%3AWatch&az=1&sigh=AB9vU42uXSefyeBj-5rvOh-8JgRegagJxQ HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=OAhaJtZA1lc6HB1wHfesaFHaBsUcIogrdB6nBhy3TPrgUm4UyJWi-MrP1F7ftNTmdvLDxaBb0VP5hRRLgLrl7VZZOFRCcGiE_hBgE-ae_K_fdFaCbhO7THgvbXfuO98u7XYkhL46gLZ3zmrWVikAhO5ccGZZXlQvJbvpG6jpP3A
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=OAhaJtZA1lc6HB1wHfesaFHaBsUcIogrdB6nBhy3TPrgUm4UyJWi-MrP1F7ftNTmdvLDxaBb0VP5hRRLgLrl7VZZOFRCcGiE_hBgE-ae_K_fdFaCbhO7THgvbXfuO98u7XYkhL46gLZ3zmrWVikAhO5ccGZZXlQvJbvpG6jpP3A
Source: global traffic	HTTP traffic detected: GET /sw.js_data HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/sw.jsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=14.832&fmt=397&fs=0&rt=17.008&euri&lact=14859&cl=648221806&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=27&feature=youtu.be&afmt=251&idpj=-6&ldpj=-8&rti=17&st=4.834&et=14.832&muted=0&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1719959126630X-YouTube-Page-CL: 648613515X-Goog-Event-Time: 1719959126630X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.01.00X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3DX-YouTube-Ad-Signals: dt=1719959110085&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=5 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=6 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtxY3CFK7ixpUrPS1lHwPzur3pDlcy5Zx0XqW5-1SNwkUeWh7D5el9IkjJktOWkkVZqep_r9QLpklLTHUpqEuRl6bh8UmQ&req_ts=1719959102&pg=MainAppBootstrap%3AWatch&az=1&sigh=AB9vU42uXSefyeBj-5rvOh-8JgRegagJxQ HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /notindex.html HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /notindex HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-3935057531723584&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1713318382&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=404x510_l%7C404x510_r&format=0x0&url=https%3A%2F%2Fscamwebsite.com%2Fnotindex&pra=5&wgl=1&easpi=0&aihb=0&asro=0&ailel=30~27~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aiael=30~27~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aifxl=30_5~27_9&aiixl=30_6~27_3&aslmct=0.7&asamct=0.7&aisaib=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1719959132017&bpp=3&bdt=119&idt=47&shv=r20240626&mjsv=m202406260101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=4418651587544&frm=20&pv=2&ga_vid=217761386.1719959132&ga_sid=1719959132&ga_hid=1053661181&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44795922%2C95332586%2C95334508%2C95334526%2C95334572%2C31084926%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4404938672204642&tmod=322256741&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=89 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://scamwebsite.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
Source: global traffic	HTTP traffic detected: GET /generate_204?089dbw HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /generate_204?qL5-qA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=7 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ltu HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /baddesign.gif HTTP/1.1Host: scamwebsite.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://scamwebsite.com/ltuAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /baddesign.gif HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=8 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/html/r20240626/r20110914/zrt_lookup_fy2021.html HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-8002465305224946&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1719959146&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=289x816_l%7C327x816_r&format=0x0&url=http%3A%2F%2Fwww.addesigner.com%2F&pra=7&wgl=1&easpi=0&aihb=0&asro=0&ailel=28~30~27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aiael=28~30~27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aifxl=28_16~30_23~27_8~29_10&aiixl=28_4~30_6~27_3~29_5&aslmct=0.7&asamct=0.7&aisaib=1&dt=1719959143946&bpp=5&bdt=5182&idt=2588&shv=r20240626&mjsv=m202406250101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=4420800425693&frm=20&pv=2&ga_vid=641628429.1719959147&ga_sid=1719959147&ga_hid=776677513&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44795922%2C95330414%2C95334511%2C95334527%2C95334571%2C95334579%2C31078668%2C31078670&oid=2&pvsid=911835154683008&tmod=1496751293&uas=0&nvt=2&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=2613 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
Source: global traffic	HTTP traffic detected: GET /pagead/ads?client=ca-pub-8002465305224946&output=html&h=90&slotname=3303653530&adk=110678862&adf=2436630289&pi=t.ma~as.3303653530&w=728&lmt=1719959150&url=http%3A%2F%2Fwww.addesigner.com%2F&wgl=1&dt=1719959141385&bpp=2561&bdt=2621&idt=5145&shv=r20240626&mjsv=m202406250101&ptt=5&saldr=sd&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=4420800425693&frm=20&pv=1&ga_vid=641628429.1719959147&ga_sid=1719959147&ga_hid=776677513&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=268&ady=955&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44795922%2C95330414%2C95334511%2C95334527%2C95334571%2C95334579%2C31078668%2C31078670&oid=2&pvsid=911835154683008&tmod=1496751293&uas=0&nvt=2&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=d%7C%7CeEbr%7C&abl=CS&pfx=0&fu=0&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&btvi=1&fsb=1&dtd=8634 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
Source: global traffic	HTTP traffic detected: GET /recaptcha/api2/aframe HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: http://www.addesigner.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=9 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-arch: "x86"sec-ch-ua-platform: "Windows"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-wow64: ?0sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Service-Worker-Navigation-Preload: trueX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /generate_204 HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/failure.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/Accept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-6528If-Modified-Since: Wed, 12 Jan 2022 21:08:00 GMT
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=4581972203&ei=qyvBC93ppxgUgu10a4k234w&ip=61.13.7.84&id=o-AFtjcSa3x2zb5uKQaFekizlmTOrIugbhCH7qGTsCBFRCT&itag=18&source=youtube&requiressl=yes&mh=X6&mm=494%2C62492%2C95770&mn=fv02Y%2CGb8nR%2CiNzp7&ms=fv02Y%2CGb8nR%2CiNzp7&mv=B&mvi=9&pl=51&ctier=L&initcwndbps=4862956&siu=9&spc=t9zf7iGtAeF6OdTiSqlz-8TBrInsodnlkIeV5UtRwQD8&vprv=9&svpuc=9&mime=video%2Fmp4&ns=JRh1FwYt0P0WVzo1Vm2rkGYj&cnr=51&ratebypass=yes&dur=40906517&lmt=0402040931096722&mt=4581972203&fvip=3&c=WEB&txp=4862956&n=tWNpU0fGYqrVkYvp&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd HTTP/1.1Host: rr4---sn-hgn7rn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=4581972203&ei=qyvBC93ppxgUgu10a4k234w&ip=61.13.7.84&id=o-AFtjcSa3x2zb5uKQaFekizlmTOrIugbhCH7qGTsCBFRCT&itag=18&source=youtube&requiressl=yes&mh=X6&mm=494%2C62492%2C95770&mn=fv02Y%2CGb8nR%2CiNzp7&ms=fv02Y%2CGb8nR%2CiNzp7&mv=B&mvi=9&pl=51&initcwndbps=4862956&siu=9&spc=t9zf7iGtAeF6OdTiSqlz-8TBrInsodnlkIeV5UtRwQD8&vprv=9&svpuc=9&mime=video%2Fmp4&ns=JRh1FwYt0P0WVzo1Vm2rkGYj&cnr=51&ratebypass=yes&dur=40906517&lmt=0402040931096722&mt=4581972203&fvip=3&c=WEB&txp=4862956&n=tWNpU0fGYqrVkYvp&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd HTTP/1.1Host: rr4---sn-hgn7rn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=24.832&fmt=397&fs=0&rt=27.007&euri&lact=8575&cl=648221806&state=playing&volume=100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=65&feature=youtu.be&afmt=251&idpj=-6&ldpj=-8&rti=27&st=14.832%2C19.056&et=19.056%2C24.832&muted=0%2C0&vis=0%2C3&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1719959159741X-YouTube-Page-CL: 648613515X-Goog-Event-Time: 1719959136628X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.01.00X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSj2_JG0BjIKCgJVUxIEGgAgXw%3D%3DX-YouTube-Ad-Signals: dt=1719959157854&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=imageAccept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /s/search/audio/no_input.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/Accept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-6952If-Modified-Since: Wed, 12 Jan 2022 21:08:00 GMT
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=10 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=11 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=4581972203&ei=qyvBC93ppxgUgu10a4k234w&ip=61.13.7.84&id=o-AFtjcSa3x2zb5uKQaFekizlmTOrIugbhCH7qGTsCBFRCT&itag=18&source=youtube&requiressl=yes&mh=X6&mm=494%2C62492%2C95770&mn=fv02Y%2CGb8nR%2CiNzp7&ms=fv02Y%2CGb8nR%2CiNzp7&mv=B&mvi=9&pl=51&initcwndbps=4862956&siu=9&spc=t9zf7iGtAeF6OdTiSqlz-8TBrInsodnlkIeV5UtRwQD8&vprv=9&svpuc=9&mime=video%2Fmp4&ns=JRh1FwYt0P0WVzo1Vm2rkGYj&cnr=51&ratebypass=yes&dur=40906517&lmt=0402040931096722&mt=4581972203&fvip=3&c=WEB&txp=4862956&n=tWNpU0fGYqrVkYvp&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd HTTP/1.1Host: rr4---sn-hgn7rn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=4581972203&ei=qyvBC93ppxgUgu10a4k234w&ip=61.13.7.84&id=o-AFtjcSa3x2zb5uKQaFekizlmTOrIugbhCH7qGTsCBFRCT&itag=18&source=youtube&requiressl=yes&mh=X6&mm=494%2C62492%2C95770&mn=fv02Y%2CGb8nR%2CiNzp7&ms=fv02Y%2CGb8nR%2CiNzp7&mv=B&mvi=9&pl=51&ctier=L&initcwndbps=4862956&siu=9&spc=t9zf7iGtAeF6OdTiSqlz-8TBrInsodnlkIeV5UtRwQD8&vprv=9&svpuc=9&mime=video%2Fmp4&ns=JRh1FwYt0P0WVzo1Vm2rkGYj&cnr=51&ratebypass=yes&dur=40906517&lmt=0402040931096722&mt=4581972203&fvip=3&c=WEB&txp=4862956&n=tWNpU0fGYqrVkYvp&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd HTTP/1.1Host: rr4---sn-hgn7rn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/guide?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/feedback?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=4581972203&ei=qyvBC93ppxgUgu10a4k234w&ip=61.13.7.84&id=o-AFtjcSa3x2zb5uKQaFekizlmTOrIugbhCH7qGTsCBFRCT&itag=18&source=youtube&requiressl=yes&mh=X6&mm=494%2C62492%2C95770&mn=fv02Y%2CGb8nR%2CiNzp7&ms=fv02Y%2CGb8nR%2CiNzp7&mv=B&mvi=9&pl=51&initcwndbps=4862956&siu=9&spc=t9zf7iGtAeF6OdTiSqlz-8TBrInsodnlkIeV5UtRwQD8&vprv=9&svpuc=9&mime=video%2Fmp4&ns=JRh1FwYt0P0WVzo1Vm2rkGYj&cnr=51&ratebypass=yes&dur=40906517&lmt=0402040931096722&mt=4581972203&fvip=3&c=WEB&txp=4862956&n=tWNpU0fGYqrVkYvp&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd HTTP/1.1Host: rr4---sn-hgn7rn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/open.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/Accept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-6166If-Modified-Since: Wed, 12 Jan 2022 21:08:00 GMT
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=4581972203&ei=qyvBC93ppxgUgu10a4k234w&ip=61.13.7.84&id=o-AFtjcSa3x2zb5uKQaFekizlmTOrIugbhCH7qGTsCBFRCT&itag=18&source=youtube&requiressl=yes&mh=X6&mm=494%2C62492%2C95770&mn=fv02Y%2CGb8nR%2CiNzp7&ms=fv02Y%2CGb8nR%2CiNzp7&mv=B&mvi=9&pl=51&ctier=L&initcwndbps=4862956&siu=9&spc=t9zf7iGtAeF6OdTiSqlz-8TBrInsodnlkIeV5UtRwQD8&vprv=9&svpuc=9&mime=video%2Fmp4&ns=JRh1FwYt0P0WVzo1Vm2rkGYj&cnr=51&ratebypass=yes&dur=40906517&lmt=0402040931096722&mt=4581972203&fvip=3&c=WEB&txp=4862956&n=tWNpU0fGYqrVkYvp&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=CFKUkx71g9kgU60T4-_KEirs1izfGXK0ty1-mkwvM-7CtekqSKDSsiC_MvOfqCwJV3uDo8D_JPSsCvyGtPACXJl9tsqh8jzQyeUwQ-Wlddkd HTTP/1.1Host: rr4---sn-hgn7rn7y.googlevideo.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/search/audio/success.mp3 HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: /*X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://www.youtube.com/Accept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_YorkRange: bytes=0-6635If-Modified-Since: Wed, 12 Jan 2022 21:08:00 GMT
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtzZsIKmHRkyUkQIRup6Ep_7IUXYPR7U2tS9-Kex0isV_rgARVnHtg4SqEDan3CnnVpIZoUxIJ85M6oKqEcxVXWPJP_Fwg&req_ts=1719959158&pg=MainAppBootstrap%3AHome&az=1&sigh=AB9vU41HvgPuT3NqyAnZ2WHRwDV1YbX6Yg HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /generate_204?SttVDg HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /generate_204?46ojOA HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /pagead/lvz?evtid=ACd6KtzZsIKmHRkyUkQIRup6Ep_7IUXYPR7U2tS9-Kex0isV_rgARVnHtg4SqEDan3CnnVpIZoUxIJ85M6oKqEcxVXWPJP_Fwg&req_ts=1719959158&pg=MainAppBootstrap%3AHome&az=1&sigh=AB9vU41HvgPuT3NqyAnZ2WHRwDV1YbX6Yg HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /opensearch?locale=en_US HTTP/1.1Host: www.youtube.comConnection: keep-aliveSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /sw.js HTTP/1.1Host: www.youtube.comConnection: keep-aliveCache-Control: max-age=0Accept: /Service-Worker: scriptX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: serviceworkerReferer: https://www.youtube.com/sw.jsUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=12 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=13 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=14 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=62.819&fmt=397&fs=0&rt=65.015&euri&lact=46583&cl=648221806&state=playing&volume=100%2C100%2C100%2C100%2C100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=105&feature=youtu.be&afmt=251&idpj=-6&ldpj=-8&rti=65&st=24.832%2C25.68%2C29.936%2C30.036%2C35.487%2C54.936%2C55.138&et=25.68%2C29.936%2C30.036%2C35.487%2C54.936%2C55.138%2C62.819&muted=0%2C0%2C0%2C0%2C0%2C0%2C0&vis=3%2C3%2C0%2C3%2C3%2C0%2C3&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00sec-ch-ua-arch: "x86"X-Goog-Request-Time: 1719959174637X-YouTube-Page-CL: 648613515X-Goog-Event-Time: 1719959174637X-YouTube-Utc-Offset: -240sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""X-YouTube-Time-Zone: America/New_Yorksec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-full-version: "117.0.5938.132"X-YouTube-Client-Name: 1X-YouTube-Client-Version: 2.20240702.01.00X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3DX-YouTube-Ad-Signals: dt=1719959110085&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&wgl=true&ca_type=imageAccept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/watch?v=dQw4w9WgXcQAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=15 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; PREF=tz=America.New_York
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=16 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=17 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso
Source: global traffic	HTTP traffic detected: GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=18 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: scamwebsite.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.addesigner.comConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-samp.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/logo.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-des.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-tips.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-free.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-help.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/hdr-welc.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/housead3l.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-link.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-blnk.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/blank.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butsamp2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/but-line2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butdes2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buttips2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butfree2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/buthelp2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butlink2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/1bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/1bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/1bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/3bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bullstr2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/blank.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-samp.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/inf-help.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/butsamp2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/3bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/bullstr2.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/2bullet.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/blank.gif HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.addesigner.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://www.addesigner.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_499.2.dr	String found in binary or memory: "")\|\|XCa(this.rf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=aB(d,h,qVa):h&&(d="embedded");this.Ma=d;Eva();h=null;d=b?b.playerStyle:a.ps;f=g.Eb(rVa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.va=(this.K=g.Eb(rVa,this.playerStyle))&&this.playerStyle!=="play"&&this.playerStyle!=="jamboard";this.zp=!this.va;this.Sa=$A(!1,a.disableplaybackui);this.disablePaidContentOverlay=$A(!1,b==null?void 0:b.disablePaidContentOverlay); equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: "&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+rb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: "&sig="+tb+"&ad_cpn=[AD_CPN]&id="+Zc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+la},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Zc+"&avm="+la+"&dc_pubid="+la+"&dc_exteid="+ub+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: "&uga="+mb+"&vm="+dc},videostatsDelayplayUrl:{baseUrl:"https://s.youtube.com/api/stats/delayplay?cl="+tc+"&docid="+z+"&ei="+V+"&feature="+m+"&fexp="+Ie+"&ns="+Ia+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Uc+"&el="+zd+"&len="+ac+"&of="+Ha+"&uga="+mb+"&vm="+dc},videostatsWatchtimeUrl:{baseUrl:"https://s.youtube.com/api/stats/watchtime?cl="+tc+"&docid="+z+"&ei="+V+"&feature="+m+"&fexp="+Ie+"&ns="+Ia+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: "=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Vc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(ne.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ia+"&origin=www.youtube.com&ata_theme="+Je,ne),trackingParams:pb+"="}},popupType:"DIALOG"}},trackingParams:pb+"="}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: "="},trackingParams:pb+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:Mf},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+rb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],layoutId:"1ID7Gdwk2vV7OZ1A"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: "="}},hoverText:{runs:[{text:Da}]},trackingParams:pb+"="}},adVideoId:Gc,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=video_companion_reshow_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Sd},isContentVideoCompanion:!0,associatedCompositePlayerBytesLayoutId:hd}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Je}}}],adBreakHeartbeatParams:"Q0FBJTNE",frameworkUpdates:{entityBatchUpdate:{mutations:[{entityKey:Wd, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ia+"&origin=www.youtube.com&ata_theme="+Je,kg),trackingParams:pb+"="}},popupType:"DIALOG"}},icon:{iconType:"INFO_OUTLINE"},trackingParams:pb+"="}},hoverText:{runs:[{text:ve}]},trackingParams:pb+"="}},flyoutCtaRenderer:{flyoutCtaRenderer:{image:{thumbnail:{thumbnails:[{url:"https://yt3.ggpht.com/ytc/"+Ke+"=s176-c-k-c0x00ffffff-no-rj"}]},trackingParams:pb+"="},headline:{text:rd,isTemplated:!1,trackingParams:pb+"="},description:{text:Da, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: "https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ia+"&origin=www.youtube.com&ata_theme="+Je,wh),trackingParams:pb+"="}},popupType:"DIALOG"}},trackingParams:pb+"="}},hoverText:{runs:[{text:hd}]},trackingParams:pb+"="}},adVideoId:Gc,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Je},associatedCompositePlayerBytesLayoutId:hd}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: $gc.idomCompat=!0;var ahc={LIKE:"LIKE",NOTIFICATION_BELL:"NOTIFICATION_BELL"};function bhc(a){var b=a.animatedIconType;var c=a.active;var d=a.themeOverride;var e=a.animationRef===void 0?{}:a.animationRef;var g=a.staticIconFn;var k=function(){a:{var J=b();var O=d==null?void 0:d(),V;O=(O==null?void 0:O.useDarkTheme)\|\|((V=sq().resolve(rq(QH)))==null?void 0:V());V=F("enable_cairo_refresh_signature_moments_web");switch(J){case"LIKE":J="animated_like_icon_";J=V?J+(O?"dark_v4":"light_v4"):J+(O?"v2_dark":"v2_light");J={lottiePlayerProps:{animationConfig:{name:J,path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+ equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: (g.qq(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.qq(c,"www.youtube.com"),d=c.toString()):(c=fDa(d),PI(c)&&(d=c));c=new g.eP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_422.2.dr	String found in binary or memory: ;var Q=A.window,R,S,T=(Q==null?void 0:(R=Q.yt)==null?void 0:R.config_)\|\|(Q==null?void 0:(S=Q.ytcfg)==null?void 0:S.data_)\|\|{};B("yt.config_",T);var U=Object.freeze("document.appendChild document.body.appendChild document.querySelector document.querySelectorAll history.back history.go".split(" ")),V=Object.freeze("fonts.googleapis.com s0.2mdn.net securepubads.g.doubleclick.net ssl.google-analytics.com static.doubleclick.net www.google-analytics.com www.googletagservices.com www.youtube.com youtube.com".split(" ")),W=Object.freeze(["pkedcjkdefgpdelpbcmbmeomcjbeemfm","fjhoaacokmgbjemoflkofnenfaiekifl","enhhojjnijigcajfphajepfemndkmdlo"]),X= equals www.youtube.com (Youtube)
Source: chromecache_449.2.dr	String found in binary or memory: <?xml version="1.0" encoding="UTF-8"?><OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/"><ShortName>YouTube</ShortName><Description>Search for videos on YouTube</Description><Tags>youtube video</Tags><Image height="16" width="16" type="image/vnd.microsoft.icon">https://www.youtube.com/favicon.ico</Image><Url type="text/html" template="https://www.youtube.com/results?search_query={searchTerms}&page={startPage?}&utm_source=opensearch"></Url><Query role="example" searchTerms="cat"></Query></OpenSearchDescription> equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+la+"&ns="+la+"&event="+la+"&device="+la+"&content_v="+z+"&el="+zd+"&ei="+V+"&devicever="+c+"&bti="+rb+"&format="+mc+"&break_type="+la+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+la+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+sb+"&slot_pos="+la+"&slot_len="+la+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+Cd+"&ad_len="+Xb+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+rb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}], equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: Cd+"&ad_len="+Xb+"&ad_mt=[AD_MT]&ad_sys=YT%3AAdSense-Viral%2CAdSense-Viral&ad_v="+Gc+"&aqi="+V+"&ad_rmp="+la+"&sli="+la}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: DPb.prototype.openToast=function(){var a;(a=this.currentToast)!=null&&a.opened\|\|(this.queue.length?(this.currentToast=this.queue.shift(),this.currentToast.open()):this.currentPersistentToast&&this.currentPersistentToast.open())};var GPb=new qq("TOAST_MANAGER_TOKEN");var HPb=["https://fonts.gstatic.com","https://tv.youtube.com","https://www.gstatic.com","https://www.youtube.com"],IPb=Ml("wil_icon_max_concurrent_fetches",Infinity),KPb=function(a,b){var c=this;this.iconSet=a;this.appDirection=b;this.responsePromises={};this.iconCache={};this.queuedResponseResolvers={};this.numFetches=this.counter=0;this.cacheStorageAvailable=!!Ba.caches;this.cacheStorageAsync=Promise.resolve(void 0);this.cacheStorageSync=void 0;this.requestAninmationFrameResolver=null;this.renderingMode= equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: ER.prototype.publish=function(a,b){return this.isDisposed()?!1:this.pubSub_.publish.apply(this.pubSub_,arguments)};var X8b=ea(["https://www.youtube.com/iframe_api"]),FR=function(){this.playerResolver_=yj();this.playerPromise_=this.playerResolver_.promise;this.playerVars_=null;this.playbackEndedCallback_=bh;this.playbackDurationSeconds_=0},Y8b=function(a){var b=function(){return window.YT&&typeof window.YT.ready==="function"}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: Gc+"&aqi="+V+"&ad_rmp="+la+"&sli="+la}],errorPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=videoplayfailed[ERRORCODE]"}],mutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=admute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: H_.prototype.navigateToAboutTheseResultsPage=function(){var a=wba("https://www.youtube.com/howyoutubeworks/product-features/search/");a?Kc(window,a,"_blank"):Cl(Error("Could not get url for 'About These Results' help center"))}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: J+".json",loop:!1,autoplay:!1,rendererSettings:{viewBoxOnly:!0,className:"animated-like-icon"}}},totalFrames:V?60:119,lazyLoad:!0};break a;case"NOTIFICATION_BELL":J={lottiePlayerProps:{animationConfig:{name:O?"notification_bell_dark":"notification_bell_light",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_"+(O?"dark":"light")+".json",loop:!1,autoplay:!1,rendererSettings:{className:"animated-subscribe-icon"}}},totalFrames:79,lazyLoad:!1};break a;}J=void 0}return J}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: Object.assign({},{name:"INCORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json",renderer:"svg"},Fec,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"26 26 80 80"}});a.correctnessAnimationProps=[];a.correctnessAnimationRefs=[];return a}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: Uc+"&el="+zd+"&len="+ac+"&of="+Ha+"&uga="+mb+"&vm="+dc},ptrackingUrl:{baseUrl:"https://www.youtube.com/ptracking?ei="+V+"&m="+kb+"&oid="+Ha+"&plid="+J+"&pltype="+cd+"&ptchn="+Ha+"&ptk="+H+"&video_id="+z},qoeUrl:{baseUrl:"https://s.youtube.com/api/stats/qoe?cl="+tc+"&docid="+z+"&ei="+V+"&event="+Ed+"&feature="+m+"&fexp="+Ie+"&ns="+Ia+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Uc},atrUrl:{baseUrl:"https://s.youtube.com/api/stats/atr?docid="+z+"&ei="+V+"&feature="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: Zc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Zc+"&dc_pubid="+la+"&dc_exteid="+ub+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: ["NOTIFICATION_BELL",{name:"notification_bell_light",nameDarkTheme:"notification_bell_dark",path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"NOTIFICATION_BELL",totalFrames:79,lazyLoad:!1}]]);var fub=ea(["https://www.gstatic.com/external_hosted/lottie/lottie_light.js"]),gub=hh(fub),iH;function hub(){return iH?iH:window.lottie?iH=Promise.resolve(window.lottie):iH=new Promise(function(a,b){var c=document.createElement("script");c.addEventListener("load",function(){a(lottie)}); equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.zo(a,{hl:d})),this.Dd(MV(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Dd(g.KV(a.errorMessage)):this.Dd(MV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.zo(c, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: a.content.firstChild);return Aec=a},{mode:2});var Eec;var Fec={autoplay:!1,loop:!1},Gec={simpleText:""},Hec=function(){var a=N.apply(this,arguments)\|\|this;a.isLoading=!1;a.usesPanelLockup=!1;a.enableRefreshWeb=F("enable_cairo_refresh_web");a.selectedItemIndex=-1;a.baseCorrectLottiePlayerAnimationConfig=Object.assign({},{name:"CORRECT",path:"https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json",renderer:"svg"},Fec,{rendererSettings:{viewBoxOnly:!0,viewBoxSize:"12 20 80 80"}});a.baseIncorrectLottiePlayerAnimationConfig= equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: a.content.firstChild);return Jzc=a},{mode:1});var Mzc;var Nzc=function(){var a=N.apply(this,arguments)\|\|this;a.rightSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg";a.rightSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg";a.leftSquigglyDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg";a.leftSquigglyLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg";a.leftSquiggly=a.leftSquigglyLight;a.rightSquiggly=a.rightSquigglyLight; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: a.content.firstChild);return Mzc=a},{mode:1});var Ozc;var Pzc=function(){var a=N.apply(this,arguments)\|\|this;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.image0DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg";a.image0LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg";a.image1DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg";a.image1LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg"; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: a.content.firstChild);return iFc=a},{mode:nG("kevlar_poly_si_batch_j033")?1:2});var kFc;var lFc=mD($B("DELETE_FROM_DOWNLOADS",{},"Delete from downloads"));var mFc={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: a.content.firstChild);return lMc=a},{mode:1});var nMc;var v1=function(){var a=N.apply(this,arguments)\|\|this;a.dark=!1;a.headerBackgroundLight="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.headerBackgroundDark="https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return Qzc=a},{mode:1});var Szc;var Tzc=function(){var a=N.apply(this,arguments)\|\|this;a.JSC$16177_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg";a.JSC$16177_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg";a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};a.squigglyBackground=a.JSC$16177_squigglyBackgroundLight;return a}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: a.content.insertBefore(W().content.cloneNode(!0),a.content.firstChild);return Szc=a},{mode:nG("kevlar_poly_si_batch_j022")?1:2});var Uzc;var Vzc=function(){var a=N.apply(this,arguments)\|\|this;a.JSC$16180_squigglyBackgroundDark="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg";a.JSC$16180_squigglyBackgroundLight="https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg";a.squigglyBackground=a.JSC$16180_squigglyBackgroundLight;a.actionMap={"yt-dark-mode-toggled-action":"onDarkModeToggledAction"};return a}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: a.image3DarkSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg";a.image3LightSquigglyBackground="https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg";a.image0SquigglyBackground=a.image0LightSquigglyBackground;a.image1SquigglyBackground=a.image1LightSquigglyBackground;a.image3SquigglyBackground=a.image3LightSquigglyBackground;return a}; equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: a.severity,e,EJ(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Sd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.hC)(),tX(a,"manifest",function(h){b.K=!0;b.oa("pathprobe",h)},function(h){b.Sd(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"65",offsetEndMilliseconds:"30"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"51",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"LigQMVuP3nAx3LwQfSGhgYmqsEWANi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_START",adTimeOffset:{offsetStartMilliseconds:"330100",offsetEndMilliseconds:"594666"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"0",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"by"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"73",offsetEndMilliseconds:"64"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"67",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"cn"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"59",offsetEndMilliseconds:"8"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"26",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"fp"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"66",offsetEndMilliseconds:"35"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"98",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"go"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"14",offsetEndMilliseconds:"87"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"79",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nh"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:"25",offsetEndMilliseconds:"13"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"32",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"nl"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"50",offsetEndMilliseconds:"67"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"96",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ov"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"13",offsetEndMilliseconds:"2"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"52",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"ti"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"47",offsetEndMilliseconds:"84"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"uc"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"10",offsetEndMilliseconds:"zo"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"22",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wg"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"56",offsetEndMilliseconds:"86"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"25",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wi"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"34",offsetEndMilliseconds:"12"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"27",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: adSlotLoggingData:{serializedSlotAdServingDataEntry:"wz"}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:"84",offsetEndMilliseconds:"90"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"92",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: animationConfig:{name:"animated-actions-background",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_container_"+(gfc()?"dark":"light")+(F("enable_cairo_refresh_signature_moments_web")?"_v4":"")+".json"}}})}),d),Ct(a,function(){return K(ffc,{lottiePlayerProps:{animationRef:c, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: animationConfig:{name:"animated-actions-foreground",autoplay:!1,loop:!1,path:F("enable_cairo_refresh_signature_moments_web")?"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkles_"+(gfc()?"dark":"light")+"_v4.json":"https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkle_"+(gfc()?"dark":"light")+".json"}}})}))} equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: b.includes("<anonymous>"))return!0;if(b.includes("https://www.youtube.com"))return!1;a=b.split("\n");if(!a.length)return!1;if(a.length<=3&&b.includes("s.onloadeddata"))return!0;b=0;for(var c=h(a),d=c.next();!d.done;d=c.next())d=d.value,(d.includes("https://")\|\|d.includes("http://"))&&b++;return b/a.length>.95}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: b.includes("youtube_home_page")\|\|b.includes("is_youtube_video_no_longer_available")\|\|b.includes("switchScreenSizeHack")\|\|b.includes("yt_main_big_banner.js")\|\|b.includes("YouTubeCenter.js")\|\|b.includes("/mytube.js")\|\|b.includes("JSON.parseWrapper")\|\|b.includes("/inj_js/common.js")\|\|b.includes("firebug-lite")\|\|b.includes(".repl.co/")\|\|b.includes("linkfix")\|\|a.message.includes("Access is denied for this document")&&b.includes("<anonymous>")\|\|a.message.includes("cannot be created in a document with origin 'https://www.youtube.com' and URL 'about:blank'")&& equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: b:{d=/api\/stats\/ads/;var p,q,r,x;e=(m=ED().objectRepresentation.adPlacements)==null?void 0:(p=m[0])==null?void 0:(q=p.adPlacementRenderer)==null?void 0:(r=q.renderer)==null?void 0:(x=r.linearAdSequenceRenderer)==null?void 0:x.linearAds;if(e!=null&&e.length&&(m=G(e[0],H3a))&&(m=m.pings,m!=null&&m.impressionPings))for(p=[].concat(ha(m.impressionPings)),m.progressPings&&(p=[].concat(ha(p),ha(m.progressPings))),m=h(p),p=m.next();!p.done;p=m.next())if(p=p.value,p.baseUrl&&d.test(p.baseUrl)){m=p.baseUrl.replace("https://www.youtube.com", equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.yR(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.jT(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.$I("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: c+"&m_pos_ms="+mc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Da}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:mc,offsetEndMilliseconds:mc},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Nb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: c+"&m_pos_ms="+mc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Ed}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:mc,offsetEndMilliseconds:mc},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Nb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: c+"&m_pos_ms="+mc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Jd}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:mc,offsetEndMilliseconds:mb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Nb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: c+"&m_pos_ms="+mc}},adSlotLoggingData:{serializedSlotAdServingDataEntry:rd}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_END",adTimeOffset:{offsetStartMilliseconds:mb,offsetEndMilliseconds:mb},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+mb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewTracking:{trafficType:"ACTIVE_VIEW_TRAFFIC_TYPE_VIDEO"}},clickthroughEndpoint:{clickTrackingParams:Vc, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: endFullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=vast_exit_fullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],activeViewMeasurablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+tb+"&ad_cpn=[AD_CPN]&id="+Zc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+la},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Zc+"&avm="+la+"&dc_pubid="+la+"&dc_exteid="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: f.created=function(){this.embedHost_=Nsd[yl("INNERTUBE_CLIENT_NAME")]\|\|"www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: f.maybeInitializeQuizLotties=function(a){var b=this;this.isDarkTheme&&(this.baseCorrectLottiePlayerAnimationConfig.path="https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_DarkTheme_01a.json",this.baseIncorrectLottiePlayerAnimationConfig.path="https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_DarkTheme_01a.json");this.correctnessAnimationProps=a.map(function(c){return{animationConfig:c.isCorrect?b.baseCorrectLottiePlayerAnimationConfig:b.baseIncorrectLottiePlayerAnimationConfig, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+tb+"&ad_cpn=[AD_CPN]&id="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: function ICc(a){return K("div",{class:"MessageRendererWizChatbot"},Ct(!1,function(){return K("img",{class:"MessageRendererWizChatbotIcon",alt:"Chatbot icon",src:"https://www.gstatic.com/youtube/img/chat/2x/sparkle_red.png"})}),K("div",{class:"MessageRendererWizChatbotText"},K(nCc,{text:a.text}),Ct(a.webResponseData,function(){return K(JCc,{data:a.webResponseData})})))} equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: function b9b(a){if(a.urlEndpoint){if(a=Fl(a.urlEndpoint.url),a.adurl)return Sc(a.adurl)}else if(a.watchEndpoint)return"//www.youtube.com/watch?v="+a.watchEndpoint.videoId;return null} equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: function lJb(a){a="loading_animation_"+a;return{name:a,path:"https://www.gstatic.com/youtube/img/lottie/playables_loading_animation/"+a+".json",loop:!0,autoplay:!0}} equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: function mgb(){var a,b,c,d,e,g,k,m,p,q,r;return t(function(x){switch(x.nextAddress){case 1:pa(x,2),a=h(Bgb()),b=a.next();case 4:if(b.done)return x.return(1);d=c=b.value;e=d.jsonRepresentation;g=d.objectRepresentation;k=btoa(e);m="data:application/json;base64,"+k;p=new Request(m);Object.defineProperty(p,"url",{get:function(){return"https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=false"}}); equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: g.KR=function(a){var b=g.yR(a);GVa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",kmb);var QCa=pa(["//tpc.googlesyndication.com/sodar/",""]);var nPa={O7a:0,L7a:1,I7a:2,J7a:3,K7a:4,N7a:5,M7a:6};var Rqa=(new Date).getTime();var Uka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Vka=/\bocr\b/;var Xka=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var lmb=0,mmb=0,nmb=0;var ev;ev=null;g.gv=!1;g.jla=1;g.uv=Symbol("SIGNAL");g.vv={version:0,IZ:0,al:!1,rg:void 0,ly:void 0,Um:void 0,UK:0,Yi:void 0,Bu:void 0,Dt:!1,HO:!1,Y0:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.yR(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.sR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),xC&&(a=Eqa())&&(b.ebc=a));return g.zo(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: g.yR=function(a){a=wR(a.Ha);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: hoverText:{runs:[{text:zd}]},trackingParams:pb+"="}},adVideoId:Gc,impressionPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=video_companion_impression_tracking"}],adLayoutLoggingData:{serializedAdServingDataEntry:Gc},associatedCompositePlayerBytesLayoutId:hd}},adSlotLoggingData:{serializedSlotAdServingDataEntry:hd}}},{adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_SELF_START"}},renderer:{actionCompanionAdRenderer:{headline:{text:ve, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: if(b){var c=aub.get(b);c\|\|(c=[],aub.set(b,c));var d=yl("ELEMENT_POOL_CONFIG")\|\|{};c.length>=(d[b]!==void 0?d[b]:yl("ELEMENT_POOL_DEFAULT_CAP",0))\|\|c.push(a)}else Hq(new Jm("Element pool should only handle custom elements:",a.nodeName))},aub=new Map,cub=0,bub=0;var eub=F("enable_cairo_refresh_signature_moments_web"),hH=new Map([["FACE_HAPPY",{name:"animated_face_happy_light",nameDarkTheme:"animated_face_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_HAPPY",totalFrames:121,lazyLoad:!1}],["FACE_MEH",{name:"animated_face_meh_light", equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: isTemplated:!0,trackingParams:pb+"="}},trackingParams:pb+"="}},adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,serviceEndpoint:{clickTrackingParams:Vc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(Xf.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ia+"&origin=www.youtube.com&ata_theme="+Je,Xf),trackingParams:pb+"="}},popupType:"DIALOG"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: ja+"&label=adrewind&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: l(iyd,N);f=iyd.prototype;f.created=function(){var a=sq();F("kevlar_clear_duplicate_pref_cookie")&&Nm(Ui,function(){var b=xi.get("PREF");b&&!/f\d=/.test(b)&&(b=Xl("kevlar_duplicate_pref_cookie_domain_override"),document.cookie=b?"PREF=null;domain="+b+";expires=Thu, 01 Jan 1970 00:00:01 GMT":"PREF=null;domain=.www.youtube.com;expires=Thu, 01 Jan 1970 00:00:01 GMT")}); equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: l(qcc,N);qcc.prototype.maybeLoadAnimationBackground=function(){this.useAnimationBackground?this.lottieAnimation\|\|(this.lottieAnimation=lottie.loadAnimation({container:this.animationBackground,loop:!0,renderer:"svg",path:"https://www.gstatic.com/youtube/img/livestream/live_chat/lottie_animation/shimmer_background.json",autoplay:!0})):this.lottieAnimation&&this.lottieAnimation.destroy()}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: la+"&cid="+ja+"&ad_cpn=%5BAD_CPN%5D&sig="+Y+"&adurl="+ld+"&label=video_click_to_advertiser_site&ctype="+Nb+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:pb+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:pb+"="},abandonCommands:{commands:[{clickTrackingParams:Vc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],thirdQuartilePings:[{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mc+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],completePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=videoplaytime100&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mc+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],unmutePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=adunmute&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mc+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Vc,commandExecutorCommand:{commands:[{clickTrackingParams:Vc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=video_card_endcap_impression"}],pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:cd,isTemplated:!1,trackingParams:pb+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_UNHAPPY",totalFrames:121,lazyLoad:!1}],["FACE_VERY_HAPPY",{name:"animated_face_very_happy_light",nameDarkTheme:"animated_face_very_happy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_very_happy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_very_happy.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_VERY_HAPPY", equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: lottiePlayerProps:{animationRef:k,animationConfig:{name:e.uniqueId+"-background",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_container_"+(jCb()?"dark":"light")+".json",rendererSettings:{viewBoxOnly:!0}}}}))}),K("div",{class:"smartimation__content"},a))} equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: loudnessDb:-3.7800007}]},playerAds:[{playerLegacyDesktopWatchAdsRenderer:{playerAdParams:{showContentThumbnail:!0,enabledEngageTypes:"3,6,4,5,17,1"},gutParams:{tag:"\\4061\\ytpwmpu"},showCompanion:!0,showInstream:!0,useGut:!0}}],playbackTracking:{videostatsPlaybackUrl:{baseUrl:"https://s.youtube.com/api/stats/playback?cl="+tc+"&docid="+z+"&ei="+V+"&feature="+m+"&fexp="+Ie+"&ns="+Ia+"&plid="+J+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+Uc+"&el="+zd+"&len="+ac+"&of="+Ha+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: m+"&len="+ac+"&ns="+Ia+"&plid="+J+"&ver="+la,elapsedMediaTimeSeconds:5},videostatsScheduledFlushWalltimeSeconds:[10,20,30],videostatsDefaultFlushIntervalSeconds:40},captions:{playerCaptionsTracklistRenderer:{captionTracks:[{baseUrl:"https://www.youtube.com/api/timedtext?v="+z+"&caps="+Sb+"&opi="+tc+"&xoaf="+la+"&hl="+Ia+"&ip="+sb+"&ipbits="+la+"&expire="+Gb+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+sb+"&key="+Sb+"&lang="+Aa,name:{simpleText:cd},vssId:".en-US",languageCode:"en-US",isTranslatable:!0, equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: nUa=function(a,b){if(!a.j["0"]){var c=new TJ("0","fakesb",{video:new PJ(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new hQ(new g.eP("http://www.youtube.com/videoplayback"),c,"fake"):new sQ(new g.eP("http://www.youtube.com/videoplayback"),c,new VP(0,0),new VP(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: nameDarkTheme:"animated_face_meh_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_meh.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_meh.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_MEH",totalFrames:121,lazyLoad:!1}],["FACE_SAD",{name:"animated_face_sad_light",nameDarkTheme:"animated_face_sad_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_sad.json", equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: null?void 0:H.baseUrl);var J;q.push(p==null?void 0:(J=p.qoeUrl)==null?void 0:J.baseUrl);var O;q.push(p==null?void 0:(O=p.atrUrl)==null?void 0:O.baseUrl);z=h(q);for(B=z.next();!B.done;B=z.next())if((B=B.value)&&m.test(B)){z=B.replace("https://www.youtube.com","").replace("https://s.youtube.com","");break b}}z=void 0}z&&c.push({testUrl:""+Ba.location.origin+z,baseUrl:Ba.location.origin+"/feed/download",method:"GET"})}c=c.length!==0?c[Math.floor(Math.random()*c.length)]:void 0;return(a=c)?b.return(Fgb(a.testUrl, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: oL.prototype.getUrl=function(a,b){return"https://www.gstatic.com/youtube/img/icons/web/"+b.style+"/"+a+"/v"+b.version+"/"+b.size+"px.svg"}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_sad.json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"FACE_SAD",totalFrames:121,lazyLoad:!1}],["FACE_UNHAPPY",{name:"animated_face_unhappy_light",nameDarkTheme:"animated_face_unhappy_dark",path:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_unhappy.json",pathDarkTheme:"https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_unhappy.json", equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: pausePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=adpause&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],rewindPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: pingingEndpoint:{hack:!0}}]}}},skipButton:{skipButtonRenderer:{message:{text:zd,isTemplated:!1,trackingParams:pb+"="},trackingParams:pb+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:Da},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid="+tc+";dc_trk_cid="+tc+";dc_dbm_token="+x+";ord="+Gb+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";dc_rui="+la+";dc_exteid="+ub+";dc_av="+Nb+";dc_sk="+la+";dc_ctype="+mb+";dc_ref=http://www.youtube.com/video/"+Gc+";dc_pubid="+la+";dc_btype=23?gclid="+Qa+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"},{baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=video_skip_shown&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]",offsetMilliseconds:5E3},{baseUrl:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+B+"____________"+D+"AxAA&ase=2&num="+la+"&cid="+ja+"&ad_cpn=%5BAD_CPN%5D&sig="+Y+"&adurl="+ld+"&ctype="+Nb+"&ms=[CLICK_MS]&label=video_10s_engaged_view&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=",offsetMilliseconds:1E4, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+mb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+c+"&m_pos_ms="+Xb}},adSlotLoggingData:{serializedSlotAdServingDataEntry:Gc}}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: resumePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=adresume&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: return K("yt-smartimation",{class:uCb(p,r,e)},Ct(e.experimentEnabled,function(){return K("div",{class:"smartimation__border"},K(Oub,{className:"smartimation__border-gradient",lottiePlayerProps:{animationRef:g,animationConfig:{name:e.uniqueId+"-border",autoplay:!1,loop:!1,path:"https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_border_"+(jCb()?"dark":"light")+(F("enable_cairo_refresh_signature_moments_web")?"_v2":"")+".json"}}}))}),Ct(e.experimentEnabled&&r,function(){return K("div", equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: rootVe:83769}},urlEndpoint:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+B+"____________"+D+"AxAA&ase=2&num="+la+"&cid="+ja+"&ad_cpn=%5BAD_CPN%5D&sig="+Y+"&adurl="+ld+"&label=video_click_to_advertiser_site&ctype="+Nb+"&ms=[CLICK_MS]",target:"TARGET_NEW_WINDOW",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}},trackingParams:pb+"="}},durationMilliseconds:7E3,countdownRenderer:{timedPieCountdownRenderer:{trackingParams:pb+"="}},navigationEndpoint:{clickTrackingParams:Vc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: tc+";dc_dbm_token="+x+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";ord="+tc+";dc_rui="+la+";dc_exteid="+ub+";dc_av="+la+";dc_sk="+la+";dc_ctype="+mb+";dc_pubid="+la+";dc_btype=3?gclid="+Qa+"&ase=2"},{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=video_card_endcap_action_headline_click"}],commandMetadata:{webCommandMetadata:{url:"https://www.googleadservices.com/pagead/aclk?sa=L&ai=C"+B+"____________"+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: tc+";dc_trk_cid="+tc+";dc_dbm_token="+x+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";ord="+tc+";dc_rui="+la+";dc_exteid="+Rb+";dc_av="+la+";dc_sk="+la+";dc_ctype="+mb+";dc_pubid="+la+";dc_btype=3?gclid="+Qa+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}],fullscreenPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=adfullscreen&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: this.X.Da&&(a.authuser=this.X.Da);this.X.pageId&&(a.pageid=this.X.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.ra=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(VQ(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.ra=!1);b="";g.OQ(this.B)?NQ(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: this.hostLanguage=b?b.hostLanguage\|\|"en":cB("en",a.host_language);this.pp=!this.Cc&&Math.random()<g.nI(this.experiments,"web_player_api_logging_fraction");this.Ya=!this.Cc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(b==null\|\|!b.deviceIsAudioOnly);this.Yd=bB(this.Yd,a.ismb);this.zp?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=wR(this.Ha)\|\|"www.youtube.com")):r="video.google.com";this.An=r;vVa(this,a,!0);this.Oa=new XQ;g.M(this,this.Oa);q=b?b.innertubeApiKey:cB("",a.innertube_api_key); equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: totalFrames:121,lazyLoad:!1}],["LIKE",{name:"animated_like_light",nameDarkTheme:"animated_like_dark",path:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(eub?"animated_like_icon_light_v4":"animated_like_icon_v2_light")+".json",pathDarkTheme:"https://www.gstatic.com/youtube/img/lottie/animated_like_icon/"+(eub?"animated_like_icon_dark_v4":"animated_like_icon_v2_dark")+".json",lottiePlayerProps:{animationConfig:{loop:!1,autoplay:!1}},type:"LIKE",totalFrames:eub?60:119,lazyLoad:F("web_animated_like_lazy_load")}], equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: trackName:""},{baseUrl:"https://www.youtube.com/api/timedtext?v="+z+"&caps="+Sb+"&opi="+tc+"&xoaf="+la+"&hl="+Ia+"&ip="+sb+"&ipbits="+la+"&expire="+Gb+"&sparams=ip,ipbits,expire,v,caps,opi,xoaf&signature="+sb+"&key="+Sb+"&kind="+Sb+"&lang="+Ia,name:{simpleText:Sd},vssId:"a.it",languageCode:"it",kind:"asr",isTranslatable:!0,trackName:""}],audioTracks:[{captionTrackIndices:[0,1],defaultCaptionTrackIndex:0,visibility:"UNKNOWN",hasDefaultTrack:!0,captionsInitialState:"CAPTIONS_INITIAL_STATE_OFF_RECOMMENDED"}], equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: trackingParams:pb+"=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Vc,openPopupAction:{popup:{aboutThisAdRenderer:{url:(Lh.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+O+"&hl="+Ia+"&origin=www.youtube.com&ata_theme="+Je,Lh),trackingParams:pb+"="}},popupType:"DIALOG"}},trackingParams:pb+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: trackingParams:pb+"=",backgroundImage:{thumbnail:{thumbnails:[{url:""}]},trackingParams:pb+"="},abandonCommands:{commands:[{clickTrackingParams:Vc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: ub+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+z+"&cid="+ja+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+ equals www.youtube.com (Youtube)
Source: chromecache_499.2.dr	String found in binary or memory: var A3={};var pib=/[&\?]action_proxy=1/,oib=/[&\?]token=([\w-])/,qib=/[&\?]video_id=([\w-])/,rib=/[&\?]index=([\d-])/,sib=/[&\?]m_pos_ms=([\d-])/,uib=/[&\?]vvt=([\w-]*)/,gib="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),tib="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),jib={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: var DLb={url:"https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.gif"}; equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: weight:0},{messageRegExp:/.wtd-div./,weight:0},{messageRegExp:/.Blocked a frame with origin "https:\/\/www.youtube.com" from accessing a cross-origin frame./,weight:0},{messageRegExp:/.disguiseToken./,weight:0}],callbackWeights:[{callback:function(a){var b=a.stack;if(b.includes("chrome://")\|\|b.includes("chrome-extension://")\|\|a.message.includes("chrome-extension://")\|\|b.includes("moz-extension://")\|\|b.includes("local.adguard.org")\|\|b.includes("auctioneer3.50million.club")\|\|b.includes("youtubedownloader")\|\| equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: weight:500},{callback:function(a){if(!a.stack)return!1;var b=a.stack.trim().split("\n");b.length&&b[0].endsWith("Error: "+a.message)&&b.shift();b.length&&b[b.length-1].includes("at window.onerror (")&&b.pop();if(!b.length)return!0;if(a.message==="Script error.")return b[0].includes("www.youtube.com")\|\|b.length>=2&&b[0].startsWith("at new")&&b[1].startsWith("at window.onerror");if(a.message==="Unexpected token")return!0;a=h(b);for(b=a.next();!b.done;b=a.next())if(b=b.value,!(b.includes("<anonymous>")\|\| equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: yE&&yE.snapshotAndFlush()}},b),(c.flush_logs={callback:function(){Dq()}},c))}},uRb);var wRb={},xRb=(wRb.rendered={priority:0,callback:function(){var a=new XJa;a.increment("STARTED");if(yl("LOGGED_IN")&&yl("SERVER_VERSION")!=="test"&&yl("SERVER_VERSION")!=="dev"&&!Uja()&&!Tja()){a.increment("EXECUTING");var b=document.createElement("iframe");b.style.display="none";oca(b,2,Tb("https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid="+yl("INNERTUBE_CONTEXT_CLIENT_NAME")));document.body&&document.body.appendChild(b);a.increment("DONE")}}},wRb);var yRb={},zRb=(yRb.rendered={callback:function(){bNb().resume()}},yRb);var ARb={acknowledgeChannelTouStrikeCommand:UE(hN),addToPlaylistServiceEndpoint:UE(hO),addToPlaylistEndpoint:UE(hO),addUpcomingEventReminderEndpoint:UE(IN),browseEndpoint:UE(XLb),channelCreationFormEndpoint:UE(aN),channelCreationServiceEndpoint:UE(bN),claimLegacyYoutubeChannelEndpoint:UE(OM),clearSearchHistoryEndpoint:UE(AN),clearWatchHistoryEndpoint:UE(BN),commerceActionCommand:VE(nO),createBackstagePostEndpoint:UE(IM),createCommentEndpoint:UE(XM),createCommentReplyEndpoint:UE(WM),createLiveChatPollEndpoint:UE(JN), equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: z+"/maxresdefault.jpg",width:1280,height:720}]},embed:{iframeUrl:"https://www.youtube.com/embed/"+Gc,width:1280,height:720},title:{simpleText:zd},description:{simpleText:bb},lengthSeconds:"1156",ownerProfileUrl:"http://www.youtube.com/@"+Sd,externalChannelId:lb,isFamilySafe:!0,availableCountries:"AD AE AF AG AI AL AM AO AQ AR AS AT AU AW AX AZ BA BB BD BE BF BG BH BI BJ BL BM BN BO BQ BR BS BT BV BW BY BZ CA CC CD CF CG CH CI CK CL CM CN CO CR CU CV CW CX CY CZ DE DJ DK DM DO DZ EC EE EG EH ER ES ET FI FJ FK FM FO FR GA GB GD GE GF GG GH GI GL GM GN GP GQ GR GS GT GU GW GY HK HM HN HR HT HU ID IE IL IM IN IO IQ IR IS IT JE JM JO JP KE KG KH KI KM KN KP KR KW KY KZ LA LB LC LI LK LR LS LT LU LV LY MA MC MD ME MF MG MH MK ML MM MN MO MP MQ MR MS MT MU MV MW MX MY MZ NA NC NE NF NG NI NL NO NP NR NU NZ OM PA PE PF PG PH PK PL PM PN PR PS PT PW PY QA RE RO RS RU RW SA SB SC SD SE SG SH SI SJ SK SL SM SN SO SR SS ST SV SX SY SZ TC TD TF TG TH TJ TK TL TM TN TO TR TT TV TW TZ UA UG UM US UY UZ VA VC VE VG VI VN VU WF WS YE YT ZA ZM ZW".split(" "), equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: z,target:"TARGET_NEW_WINDOW"}},trackingParams:pb+"="}},trackingParams:pb+"="}}}},endscreen:{endscreenRenderer:{elements:[{endscreenElementRenderer:{style:"CHANNEL",image:{thumbnails:[{url:"https://yt3.ggpht.com/"+Na+"=s250-c-k-c0x00ffffff-no-rj",width:250,height:250},{url:"https://yt3.ggpht.com/"+Na+"=s400-c-k-c0x00ffffff-no-rj",width:400,height:400}]},icon:{thumbnails:[{url:"https://www.gstatic.com/youtube/img/annotations/youtube.png"}]},left:.030214407,width:.15438597,top:.37587035,aspectRatio:1, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: zE.prototype.remove=function(a){this.JSC$10619_expiringStorage.remove(a)};var Qjb=ea(["https://www.youtube.com/",""]),Rjb=ea(["https://studio.youtube.com/",""]);function Sjb(){if(Tjb())Hq(Error("persist identity iframe is inserted more than once"));else{var a=document.createElement("iframe");a.style.display="none";var b=b===void 0?window.location.href:b;var c=Tk(yl("PERSIST_IDENTITY_IFRAME_URL"));b=c?c:new URL(b).host.indexOf("studio")===0?hh(Qjb,"persist_identity"):hh(Rjb,"persist_identity");oca(a,1,b);a.id="persist_identity";var d;(d=document.body)==null\|\|d.appendChild(a)}} equals www.youtube.com (Youtube)
Source: chromecache_645.2.dr	String found in binary or memory: {"name":"YouTube","short_name":"YouTube","background_color":"#FFFFFF","display":"minimal-ui","start_url":"/?feature\u003dytca","scope":"/","icons":[{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png","sizes":"144x144","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_192x192.png","sizes":"192x192","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_16x16.png","sizes":"16x16","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_32x32.png","sizes":"32x32","type":"image/png","purpose":"monochrome"},{"src":"https://fonts.gstatic.com/s/i/googlematerialicons/video_youtube/v11/white-48dp/1x/gm_video_youtube_white_48dp.png","sizes":"48x48","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_512x512.png","sizes":"512x512","type":"image/png","purpose":"monochrome"}],"theme_color":"#FF0000","gcm_sender_id":"402845223712","gcm_user_visible_only":true,"related_applications":[],"capture_links":"none","shortcuts":[{"name":"Subscriptions","url":"/feed/subscriptions?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/subscriptions_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]},{"name":"Explore","url":"/feed/explore?feature\u003dapp_shortcuts","icons":[{"src":"https://www.gstatic.com/youtube/img/web/shortcuts/explore_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]}]} equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"AD_PLACEMENT_KIND_MILLISECONDS",adTimeOffset:{offsetStartMilliseconds:mc,offsetEndMilliseconds:mc},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"10000",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei="+V+"&m_pos="+Nb+"&token=ALHj"+ca+"&index="+la+"&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: {adPlacementRenderer:{config:{adPlacementConfig:{kind:"zf",adTimeOffset:{offsetStartMilliseconds:"63",offsetEndMilliseconds:"83"},hideCueRangeMarker:!0}},renderer:{adBreakServiceRenderer:{prefetchMilliseconds:"59",getAdBreakUrl:"https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVxobLOmsF6L503baqxgf8zHtyL78tfro_JRoNlfUoKtHWX2jso_GFC-H_ls4xj56iIKpT0KTxmL6pBydJcB_KTnotW1Kxo4HXObZOq6QB1pko2sTXpiLrkJms8CUEhtmyJi4JLbzgqpKLHDEPl661jo3yXCRv0JEFo_M8Kbs-NJqqhNk-CRJ_s8hTmbiMZPaPBDZtVQ-NB0zXsJDIwj2XvPAaTetL-zmXE540lFCFBTmjXZ_xJyO2NATx6lkN7RoJZL2oRwXCH1rZDjXoOvFwjXFWV9JSPwCRzajtfJUVyGROxkM6BX896KoL4rFXfYzJZBZ1QOvbMxJD4laKN5xMb5KPz5Jq54KXXO76NpvMuOlkHb5qf-k2-Z&index=2&cpn=[CPN]&lact=[LACT]&vis=[VIS]&ad_block=[AD_BLOCK]&tsla=[TSLA]&bid=[BISCOTTI_ID]&dt=[DT]&flash=[FLASH]&frm=[FRM]&ca_type=[CA_TYPE]&u_tz=[U_TZ]&u_his=[U_HIS]&u_java=[U_JAVA]&u_h=[U_H]&u_w=[U_W]&u_ah=[U_AH]&u_aw=[U_AW]&u_cd=[U_CD]&u_nplug=[U_NPLUG]&u_nmime=[U_NMIME]&p_w=[P_W]&p_h=[P_H]&c=WEB&cver=2.20231003.02.02&m_pos_ms=330200"}}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewFullyViewableAudibleHalfDurationPings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+tb+"&ad_cpn=[AD_CPN]&id="+Zc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avgm="+la},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Zc+"&dc_pubid="+la+"&dc_exteid="+ub+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],activeViewViewablePings:[{baseUrl:"https://www.youtube.com/pcs/activeview?xai="+q+"&sig="+tb+"&ad_cpn=[AD_CPN]&id="+Zc+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+Zc+"&dc_pubid="+la+"&dc_exteid="+ub+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}], equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: {baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+la+";dc_exteid="+ub+";met="+la+";ecn"+la+"="+la+";etm1="+la+";eid1="+mb+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],pingingEndpoint:{hack:!0}}]},adRendererCommands:{impressionCommand:{clickTrackingParams:Vc,commandExecutorCommand:{commands:[{clickTrackingParams:Vc,loggingUrls:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&label=video_card_endcap_impression"}], equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: {baseUrl:"https://www.youtube.com/pagead/adview?ai=C"+B+"____________"+D+"AxAA&sigh="+Gc+"&cid="+ja+"&ad_cpn=[AD_CPN]&lact=[LACT]"},{baseUrl:"https://www.youtube.com/api/stats/ads?ver="+la+"&ns="+la+"&event="+la+"&device="+la+"&content_v="+z+"&el="+zd+"&ei="+V+"&devicever="+c+"&bti="+rb+"&format="+mc+"&break_type="+la+"&conn=[CONN]&cpn=[CPN]&lact=[LACT]&m_pos="+la+"&mt=[MT]&p_h=[P_H]&p_w=[P_W]&rwt=[RWT]&sdkv="+sb+"&slot_pos="+la+"&slot_len="+la+"&vis=[VIS]&vol=[VOL]&wt=[WT]&ad_cpn=[AD_CPN]&ad_id="+ equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: {instreamVideoAdRenderer:{skipOffsetMilliseconds:5E3,pings:{impressionPings:[{baseUrl:"https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid="+tc+";dc_trk_cid="+tc+";ord="+Gb+";dc_lat=;dc_rdid=;tag_for_child_directed_treatment=;tfua=;ltd=;dc_tdv="+la+";dc_rui="+la+";dc_exteid="+ub+";dc_av="+Nb+";dc_sk="+la+";dc_ctype="+mb+";dc_ref=http://www.youtube.com/video/"+Gc+";dc_pubid="+la+";dc_btype=23?gclid="+Qa+"&ase=2",attributionSrcMode:"ATTRIBUTION_SRC_MODE_LABEL_CHROME"}, equals www.youtube.com (Youtube)
Source: chromecache_316.2.dr	String found in binary or memory: {query:a.browseEndpoint.query})),e&&a.browseEndpoint.params&&(e=Px(e,{params:a.browseEndpoint.params}));else{if(a.urlEndpoint)return a.urlEndpoint.url;a.signInEndpoint?(e="https://accounts.google.com/ServiceLogin",d={},uc.extend(d,b\|\|{},{"continue":window.location.href.split("#")[0],action_handle_signin:!0,passive:!0}),b=d):a.uploadEndpoint?e="//www.youtube.com/upload":a.liveChatEndpoint?(e=a.liveChatEndpoint,d=uc.clone(e),Oa(e.continuation)&&(g=Object.keys(e.continuation)[0],d.continuation=e.continuation[g].continuation), equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: scamwebsite.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: youtu.be
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: rr4---sn-ab5l6nk6.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: rr5---sn-ab5l6nkd.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: rr1---sn-q4flrnee.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: rr3---sn-q4fl6nde.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.addesigner.com
Source: global traffic	DNS traffic detected: DNS query: rr4---sn-hgn7rn7y.googlevideo.com

Source: unknown

HTTP traffic detected: POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=1 HTTP/1.1Host: rr5---sn-ab5l6nkd.googlevideo.comConnection: keep-aliveContent-Length: 1631sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-arch: "x86"sec-ch-ua-full-version: "117.0.5938.132"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-bitness: "64"sec-ch-ua-model: ""sec-ch-ua-wow64: ?0sec-ch-ua-platform: "Windows"Accept: */*Origin: https://www.youtube.comX-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:13 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:13 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:15 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:15 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:16 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:16 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:17 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:17 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:17 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:17 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:18 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:25:18 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:26:01 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:26:01 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:26:03 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:26:03 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:26:04 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Tue, 02 Jul 2024 22:26:04 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 02 Jul 2024 22:25:50 GMTServer: Apache/2.2.15 (CentOS)Accept-Ranges: bytesConnection: closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8Data Raw: 37 0d 0a 3c 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 7<html>

Source: chromecache_449.2.dr	String found in binary or memory: http://a9.com/-/spec/opensearch/1.1/
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: http://google.com
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_316.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_316.2.dr	String found in binary or memory: http://i1.ytimg.com/vi/
Source: chromecache_382.2.dr, chromecache_316.2.dr, chromecache_593.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_316.2.dr	String found in binary or memory: http://mths.be/fromcodepoint
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_428.2.dr, chromecache_425.2.dr	String found in binary or memory: http://pagead2.googlesyndication.com/pagead/show_ads.js
Source: chromecache_316.2.dr, chromecache_304.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_316.2.dr, chromecache_304.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_316.2.dr, chromecache_304.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_316.2.dr, chromecache_304.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_552.2.dr	String found in binary or memory: http://scamwebsite.com
Source: chromecache_552.2.dr	String found in binary or memory: http://scamwebsite.com"><img
Source: chromecache_381.2.dr, chromecache_499.2.dr, chromecache_316.2.dr, chromecache_320.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_399.2.dr	String found in binary or memory: http://www.addesigner.com
Source: chromecache_316.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_316.2.dr, chromecache_320.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_381.2.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_316.2.dr	String found in binary or memory: http://www.youtube.com/
Source: chromecache_316.2.dr	String found in binary or memory: http://www.youtube.com/video/
Source: chromecache_499.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_499.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_499.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_499.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_499.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_316.2.dr	String found in binary or memory: https://accounts.google.com/AddSession
Source: chromecache_316.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_316.2.dr	String found in binary or memory: https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid=
Source: chromecache_316.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackclk/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_316.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid
Source: chromecache_316.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_316.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid=
Source: chromecache_499.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_384.2.dr, chromecache_433.2.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_512.2.dr, chromecache_395.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/spf/2.4.0/LICENSE
Source: chromecache_499.2.dr, chromecache_316.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_316.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_316.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_316.2.dr	String found in binary or memory: https://clients2.google.com/gr/gr_sync.js
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_499.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_316.2.dr	String found in binary or memory: https://docs.google.com/picker
Source: chromecache_316.2.dr	String found in binary or memory: https://embeddedassistant-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssistant/YTAssi
Source: chromecache_316.2.dr	String found in binary or memory: https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista
Source: chromecache_316.2.dr	String found in binary or memory: https://embeddedassistant-frontend-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAs
Source: chromecache_316.2.dr	String found in binary or memory: https://embeddedassistant-webchannel.googleapis.com/google.assistant.embedded.v1.EmbeddedAssistant/Y
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.google.com/license/googlerestricted
Source: chromecache_593.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_593.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_316.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto
Source: chromecache_316.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:300italic
Source: chromecache_316.2.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Roboto:400
Source: chromecache_316.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_316.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/
Source: chromecache_316.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey200-36dp/2x/gm_alert_gm_grey200_3
Source: chromecache_316.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/alert/v11/gm_grey600-36dp/2x/gm_alert_gm_grey600_3
Source: chromecache_316.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey200-24dp/1x/gm_close_gm_grey200_2
Source: chromecache_316.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/close/v19/gm_grey600-24dp/1x/gm_close_gm_grey600_2
Source: chromecache_645.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/i/googlematerialicons/video_youtube/v11/white-48dp/1x/gm_video_youtube_w
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc-CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc0CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc1CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc2CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc3CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc5CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_431.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_410.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_QOW4Ep0.woff2)
Source: chromecache_410.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_R-W4Ep0.woff2)
Source: chromecache_410.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_ROW4.woff2)
Source: chromecache_410.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_S-W4Ep0.woff2)
Source: chromecache_410.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_SeW4Ep0.woff2)
Source: chromecache_410.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_SuW4Ep0.woff2)
Source: chromecache_476.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/youtubesans/v30/Qw38ZQNGEDjaO2m6tqIqX5E-AVS5_rSejo46_PCTRspJ0OosolrBEJL3
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/%
Source: chromecache_316.2.dr	String found in binary or memory: https://gamesnacks.com
Source: chromecache_316.2.dr	String found in binary or memory: https://garlo.com/enapa2%3Fgc_id%3D20599670093&label=video_click_to_advertiser_site&ctype=110
Source: chromecache_316.2.dr	String found in binary or memory: https://github.com/dmoscrop/fold-case
Source: chromecache_316.2.dr	String found in binary or memory: https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p
Source: chromecache_381.2.dr, chromecache_499.2.dr, chromecache_316.2.dr, chromecache_320.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_384.2.dr, chromecache_382.2.dr, chromecache_433.2.dr, chromecache_593.2.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_316.2.dr	String found in binary or memory: https://i.ytimg.com/an/
Source: chromecache_316.2.dr	String found in binary or memory: https://i.ytimg.com/sb/
Source: chromecache_316.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_316.2.dr	String found in binary or memory: https://i.ytimg.com/vi/AERLXaPKn_U/mqdefault.jpg
Source: chromecache_499.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_316.2.dr	String found in binary or memory: https://mathiasbynens.be/
Source: chromecache_499.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_316.2.dr	String found in binary or memory: https://myaccount-autopush.corp.google.com
Source: chromecache_316.2.dr	String found in binary or memory: https://myaccount-dev.corp.google.com
Source: chromecache_316.2.dr	String found in binary or memory: https://myaccount-staging.corp.google.com
Source: chromecache_316.2.dr	String found in binary or memory: https://myaccount.google.com
Source: chromecache_316.2.dr	String found in binary or memory: https://oauth-redirect-sandbox.googleusercontent.com
Source: chromecache_316.2.dr	String found in binary or memory: https://oauth-redirect-test.googleusercontent.com
Source: chromecache_316.2.dr	String found in binary or memory: https://oauth-redirect.googleusercontent.com
Source: chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/activeview_ext?id=
Source: chromecache_556.2.dr, chromecache_581.2.dr, chromecache_615.2.dr, chromecache_555.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/bg/%
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=dv&
Source: chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=17
Source: chromecache_316.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_384.2.dr, chromecache_382.2.dr, chromecache_433.2.dr, chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_322.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_556.2.dr, chromecache_581.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=224
Source: chromecache_615.2.dr, chromecache_555.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=sodar2&v=225
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_322.2.dr, chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_399.2.dr, chromecache_587.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3935057531723584
Source: chromecache_384.2.dr, chromecache_382.2.dr, chromecache_433.2.dr, chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_384.2.dr, chromecache_382.2.dr, chromecache_433.2.dr, chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_593.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_405.2.dr, chromecache_317.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?
Source: chromecache_556.2.dr, chromecache_581.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=224
Source: chromecache_615.2.dr, chromecache_555.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/sodar?id=sodar2&v=225
Source: chromecache_316.2.dr	String found in binary or memory: https://play.google.com
Source: chromecache_316.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_316.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_499.2.dr, chromecache_316.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_499.2.dr, chromecache_316.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_499.2.dr, chromecache_316.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_316.2.dr	String found in binary or memory: https://rr3---sn-n4v7sns7.googlevideo.com/videoplayback?expire=1697267654&source=youtube&requiressl=
Source: chromecache_316.2.dr	String found in binary or memory: https://s.youtube.com
Source: chromecache_316.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/atr?docid=
Source: chromecache_316.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/delayplay?cl=
Source: chromecache_316.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/playback?cl=
Source: chromecache_316.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/qoe?cl=
Source: chromecache_316.2.dr	String found in binary or memory: https://s.youtube.com/api/stats/watchtime?cl=
Source: chromecache_552.2.dr	String found in binary or memory: https://scamwebsite.com/baddesign.gif
Source: chromecache_552.2.dr	String found in binary or memory: https://scamwebsite.com/baddesign.gif"
Source: chromecache_316.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_316.2.dr	String found in binary or memory: https://ssl.gstatic.com/docs/doclist/images/icon_10_generic_list.png
Source: chromecache_316.2.dr	String found in binary or memory: https://studio.youtube.com/
Source: chromecache_316.2.dr	String found in binary or memory: https://support.google.com
Source: chromecache_316.2.dr	String found in binary or memory: https://support.google.com/
Source: chromecache_322.2.dr	String found in binary or memory: https://support.google.com/adsense/answer/9190028.
Source: chromecache_499.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_499.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_499.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_499.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_316.2.dr	String found in binary or memory: https://support.google.com/youtube/bin/answer.py?answer=140536
Source: chromecache_555.2.dr	String found in binary or memory: https://tpc.googlesyndication.com
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_615.2.dr, chromecache_555.2.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Source: chromecache_316.2.dr	String found in binary or memory: https://tv.youtube.com
Source: chromecache_316.2.dr	String found in binary or memory: https://uberproxy-pen-redirect.corp.google.com/uberproxy/pen?url=
Source: chromecache_499.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_316.2.dr	String found in binary or memory: https://www.google-analytics.com/analytics.js
Source: chromecache_555.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_384.2.dr, chromecache_433.2.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_316.2.dr	String found in binary or memory: https://www.google.com/get/videoqualityreport/
Source: chromecache_316.2.dr	String found in binary or memory: https://www.google.com/get/videoqualityreport/?v=
Source: chromecache_316.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api.js?trustedtypes=true
Source: chromecache_382.2.dr, chromecache_615.2.dr, chromecache_555.2.dr, chromecache_593.2.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_316.2.dr	String found in binary or memory: https://www.google.com/tools/feedback
Source: chromecache_316.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=C
Source: chromecache_316.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/aclk?sa=L&ai=C3OQpfbUyZYWKL_Ken8RMFbClwAyRha6dc6fw7oP7EbaQHx
Source: chromecache_316.2.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_499.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_316.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-5KBDVVN
Source: chromecache_316.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-TGBSZFB
Source: chromecache_593.2.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/arrow_left_24px_grey_800.svg
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/close_24px_grey_700.svg
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_blue_600.svg
Source: chromecache_593.2.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_grey_800.svg
Source: chromecache_316.2.dr, chromecache_590.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/external_hosted/lottie/lottie_light.js
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/google_guarantee_grey600_48dp.png
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/local_shipping_grey600_48dp.png
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/location_on_grey600_48dp.png
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/images/icons/material/system/1x/undo_grey600_48dp.png
Source: chromecache_382.2.dr, chromecache_593.2.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/%
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/uservoice/feedback/client/web/
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/annotations/youtube.png
Source: chromecache_645.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png
Source: chromecache_645.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/branding/favicon/favicon_192x192.png
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/chat/2x/sparkle_red.png
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_DarkTheme_01a.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizCorrect_LightTheme_01a.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_DarkTheme_01a.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/creator/posts/Lottie_QuizIncorrect_LightTheme_01a.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_dark_v1.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_curl_section_illustration_light_v1.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_dark_v1.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_1_light_v1.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_dark_v1.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_2_light_v1.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_dark.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_3_light.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_dark.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_4_light.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_dark.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_5_light_v2.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_dark.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/handles/handles_squiggle_6_light.svg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/icons/web/
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/labs/early_access_web_background_expanded_ai_2x.jpg
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/livestream/live_chat/lottie_animation/shimmer_background.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/animated_like_icon/
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/playables_loading_animation/
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_border_
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/smartimations/smartimation_container_
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_dark.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_bell_icon_light.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_container_
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkle_
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkles_
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_happy.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_meh.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_sad.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_unhappy.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/dark_mode/face_very_happy.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_happy.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_meh.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_sad.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_unhappy.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/surveys/lottie/animated_smileys/light_mode/face_very_happy.json
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.gif
Source: chromecache_316.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/useredu/smart_downloads_optin_banner.svg
Source: chromecache_645.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/monochrome/logo_16x16.png
Source: chromecache_645.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/monochrome/logo_32x32.png
Source: chromecache_645.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/monochrome/logo_512x512.png
Source: chromecache_645.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/shortcuts/explore_512x512.png
Source: chromecache_645.2.dr	String found in binary or memory: https://www.gstatic.com/youtube/img/web/shortcuts/subscriptions_512x512.png
Source: chromecache_499.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A
Source: chromecache_499.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/api/stats/ads?ver=
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/api/timedtext?v=
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/embed/
Source: chromecache_449.2.dr	String found in binary or memory: https://www.youtube.com/favicon.ico
Source: chromecache_499.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/get_midroll_info?ei=
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/get_midroll_info?ei=l3FgBarVGsIphxLPxuRduBc&m_pos=330&token=RLJjkrMhTDF1XyVx
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/howyoutubeworks/product-features/search/
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/pagead/adview?ai=C
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/pagead/interaction/?ai=C
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/pcs/activeview?xai=
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/ptracking?ei=
Source: chromecache_449.2.dr	String found in binary or memory: https://www.youtube.com/results?search_query=
Source: chromecache_316.2.dr	String found in binary or memory: https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f
Source: chromecache_499.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_399.2.dr	String found in binary or memory: https://youtu.be/dQw4w9WgXcQ
Source: chromecache_316.2.dr	String found in binary or memory: https://youtube.com
Source: chromecache_499.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_499.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_316.2.dr	String found in binary or memory: https://yt3.ggpht.com/
Source: chromecache_316.2.dr	String found in binary or memory: https://yt3.ggpht.com/ytc/
Source: chromecache_499.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50268 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49968
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 50246 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50291 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50303 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50269 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50280 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 49922 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49968 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50293 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50270 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 50282 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50259 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50302 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 50277 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50254 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50225 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50229
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50228
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50100
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50101
Source: unknown	Network traffic detected: HTTP traffic on port 50243 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50225
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50103
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50224
Source: unknown	Network traffic detected: HTTP traffic on port 50289 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50238
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50239
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 50255 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50241
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50240
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50243
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50245
Source: unknown	Network traffic detected: HTTP traffic on port 50224 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50246
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50266 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50250
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50306 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50267 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50304
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50303
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50306
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50308
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50307
Source: unknown	Network traffic detected: HTTP traffic on port 50278 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50309
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50300
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50302
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50304 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50279 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50311
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50310
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50245 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49931 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50203
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50290 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50295
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50298
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50297
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50263 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50286 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50274 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50240 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50308 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50275 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50297 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50241 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50259
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49916 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50254
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50253
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50255
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50260
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50253 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50263
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50262
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50265
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50264
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50267
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50266
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50269
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50268
Source: unknown	Network traffic detected: HTTP traffic on port 50264 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50270
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50272
Source: unknown	Network traffic detected: HTTP traffic on port 50103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50298 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50274
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50273
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50276
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50275
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50278
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50277
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50279
Source: unknown	Network traffic detected: HTTP traffic on port 50265 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50280
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50283
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50282
Source: unknown	Network traffic detected: HTTP traffic on port 50104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50307 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50203 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50276 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50043
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50287
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50286
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50289
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50290
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50291
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50294
Source: unknown	Network traffic detected: HTTP traffic on port 50287 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50293
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50311 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50260 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50283 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50300 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50272 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50100 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50294 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50229 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50238 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 50309 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49931
Source: unknown	Network traffic detected: HTTP traffic on port 50310 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 50250 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49922
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50262 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 50295 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49916
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 50228 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50239 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 50273 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 50101 -> 443

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49729 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@37/576@73/33

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://scamwebsite.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6484 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6836 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6484 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6836 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://scamwebsite.com/	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label
https://www.youtube.com/	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://support.google.com	0%	URL Reputation	safe
https://www.youtube.com/embed/	0%	URL Reputation	safe
http://polymer.github.io/AUTHORS.txt	0%	URL Reputation	safe
https://www.youtube.com	0%	URL Reputation	safe
https://admin.youtube.com	0%	URL Reputation	safe
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://youtube.com/	0%	URL Reputation	safe
https://yurt.corp.google.com	0%	URL Reputation	safe
https://www.youtube.com/generate_204?cpn=	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
http://polymer.github.io/PATENTS.txt	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
https://support.google.com/youtube/?p=report_playback	0%	URL Reputation	safe
http://youtube.com/streaming/metadata/segment/102015	0%	URL Reputation	safe
https://apis.google.com	0%	URL Reputation	safe
http://polymer.github.io/CONTRIBUTORS.txt	0%	URL Reputation	safe
https://scamwebsite.com/Robuxb.png	100%	Avira URL Cloud	malware
https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/endscreen.js	0%	Avira URL Cloud	safe
https://www.youtube.com/sw.js	0%	Avira URL Cloud	safe
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=4.834&fmt=397&fs=0&rt=7.01&euri&lact=4861&cl=648221806&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=17&feature=youtu.be&afmt=251&idpj=-6&ldpj=-8&rti=7&st=0&et=4.834&muted=0&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM	0%	Avira URL Cloud	safe
https://s.youtube.com/api/stats/delayplay?cl=	0%	Avira URL Cloud	safe
https://support.google.com/adsense/answer/9190028.	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
http://www.addesigner.com/images/inf-tips.gif	0%	Avira URL Cloud	safe
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=62.819&fmt=397&fs=0&rt=65.015&euri&lact=46583&cl=648221806&state=playing&volume=100%2C100%2C100%2C100%2C100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=105&feature=youtu.be&afmt=251&idpj=-6&ldpj=-8&rti=65&st=24.832%2C25.68%2C29.936%2C30.036%2C35.487%2C54.936%2C55.138&et=25.68%2C29.936%2C30.036%2C35.487%2C54.936%2C55.138%2C62.819&muted=0%2C0%2C0%2C0%2C0%2C0%2C0&vis=3%2C3%2C0%2C3%2C3%2C0%2C3&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/71059424/www-player.css	0%	Avira URL Cloud	safe
https://www.google.com/get/videoqualityreport/?v=	0%	Avira URL Cloud	safe
https://scamwebsite.com/Robux.png	100%	Avira URL Cloud	malware
https://www.youtube.com/favicon.ico	0%	Avira URL Cloud	safe
https://www.youtube.com/youtubei/v1/feedback?prettyPrint=false	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/captions.js	0%	Avira URL Cloud	safe
https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj	0%	Avira URL Cloud	safe
https://i.ytimg.com/an/	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ	0%	Avira URL Cloud	safe
https://s.youtube.com	0%	Avira URL Cloud	safe
https://fundingchoicesmessages.google.com/i/%	0%	Avira URL Cloud	safe
https://www.youtube.com/api/stats/ads?ver=	0%	Avira URL Cloud	safe
https://www.youtube.com/generate_204?46ojOA	0%	Avira URL Cloud	safe
https://www.google.com/tools/feedback	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	0%	Avira URL Cloud	safe
https://cdn.ampproject.org/amp4ads-host-v0.js	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/base.js	0%	Avira URL Cloud	safe
https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg	0%	Avira URL Cloud	safe
https://www.youtube.com/pagead/interaction/?ai=C	0%	Avira URL Cloud	safe
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js?trustedtypes=true	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/a7b1ec23/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	0%	Avira URL Cloud	safe
http://www.addesigner.com/images/blank.gif	0%	Avira URL Cloud	safe
http://www.addesigner.com/images/2bullet.gif	0%	Avira URL Cloud	safe
https://s.youtube.com/api/stats/qoe?cl=	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/a7b1ec23/jsbin/webcomponents-sd.vflset/webcomponents-sd.js	0%	Avira URL Cloud	safe
https://www.google.com/adsense/search/async-ads.js	0%	Avira URL Cloud	safe
https://www.youtube.com/generate_204?SttVDg	0%	Avira URL Cloud	safe
https://www.youtube.com/ptracking?ei=	0%	Avira URL Cloud	safe
https://docs.google.com/picker	0%	Avira URL Cloud	safe
https://www.youtube.com/pcs/activeview?xai=	0%	Avira URL Cloud	safe
https://www.youtube.com/app_shell	0%	Avira URL Cloud	safe
https://www.youtube.com/youtubei/v1/notification_registration/set_registration?prettyPrint=false	0%	Avira URL Cloud	safe
http://www.addesigner.com	0%	Avira URL Cloud	safe
https://i.ytimg.com/an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a	0%	Avira URL Cloud	safe
http://googleads.g.doubleclick.net	0%	Avira URL Cloud	safe
https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A	0%	Avira URL Cloud	safe
https://www.youtube.com/s/search/audio/success.mp3	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/a7b1ec23/jsbin/intersection-observer.min.vflset/intersection-observer.min.js	0%	Avira URL Cloud	safe
https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be	0%	Avira URL Cloud	safe
https://scamwebsite.com/Untitled.png	100%	Avira URL Cloud	malware
https://s.youtube.com/api/stats/watchtime?cl=	0%	Avira URL Cloud	safe
http://google.com	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw	0%	Avira URL Cloud	safe
https://play.google.com	0%	Avira URL Cloud	safe
https://www.youtube.com/pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=670751145&utuid=uAXFkgsw1L7xaCfnd5JJOw	0%	Avira URL Cloud	safe
https://scamwebsite.com/baddesign.gif"	100%	Avira URL Cloud	malware
https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/remote.js	0%	Avira URL Cloud	safe
https://youtu.be/	0%	Avira URL Cloud	safe
http://mths.be/fromcodepoint	0%	Avira URL Cloud	safe
https://scamwebsite.com/style.css	100%	Avira URL Cloud	malware
http://a9.com/-/spec/opensearch/1.1/	0%	Avira URL Cloud	safe
http://scamwebsite.com	100%	Avira URL Cloud	malware
https://i.ytimg.com/vi/izGwDsrQ1eQ/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLAPEMSx8W9_-QGlw_ZFUf3cYVKl6w	0%	Avira URL Cloud	safe
https://www.youtube.com/youtubei/v1/guide?prettyPrint=false	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/a7b1ec23/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js	0%	Avira URL Cloud	safe
https://scamwebsite.com/baddesign.gif	100%	Avira URL Cloud	malware
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEWCKgBEF5IWvKriqkDCQgBFQAAiEIYAQ==&rs=AOn4CLBf45ycDkHw60O072DkeCeAw0TV-w	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/mIHHfNVfhPk/maxresdefault.jpg	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/a7b1ec23/jsbin/scheduler.vflset/scheduler.js	0%	Avira URL Cloud	safe
https://oauth-redirect-test.googleusercontent.com	0%	Avira URL Cloud	safe
https://mathiasbynens.be/	0%	Avira URL Cloud	safe
https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s48-c-k-c0x00ffffff-no-rj	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
rr4.sn-ab5l6nk6.googlevideo.com	74.125.0.137	true	false	unknown
addesigner.com	107.161.28.66	true	false	unknown
i.ytimg.com	142.250.185.86	true	false	unknown
rr1.sn-q4flrnee.googlevideo.com	209.85.165.198	true	false	unknown
rr3.sn-q4fl6nde.googlevideo.com	173.194.140.232	true	false	unknown
static.doubleclick.net	142.250.184.198	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
youtube.com	142.250.186.110	true	false	unknown
youtu.be	142.250.186.78	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
youtube-ui.l.google.com	216.58.206.46	true	false	unknown
googleads.g.doubleclick.net	142.250.185.194	true	false	unknown
play.google.com	142.250.181.238	true	false	unknown
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.34	true	false	unknown
scamwebsite.com	198.51.233.1	true	true	unknown
photos-ugc.l.googleusercontent.com	216.58.212.129	true	false	unknown
rr5.sn-ab5l6nkd.googlevideo.com	74.125.0.170	true	false	unknown
www.google.com	172.217.18.4	true	false	unknown
rr4.sn-hgn7rn7y.googlevideo.com	172.217.133.9	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
rr4---sn-ab5l6nk6.googlevideo.com	unknown	unknown	false	unknown
rr5---sn-ab5l6nkd.googlevideo.com	unknown	unknown	false	unknown
rr3---sn-q4fl6nde.googlevideo.com	unknown	unknown	false	unknown
rr4---sn-hgn7rn7y.googlevideo.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
www.addesigner.com	unknown	unknown	false	unknown
rr1---sn-q4flrnee.googlevideo.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=4.834&fmt=397&fs=0&rt=7.01&euri&lact=4861&cl=648221806&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=17&feature=youtu.be&afmt=251&idpj=-6&ldpj=-8&rti=7&st=0&et=4.834&muted=0&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/sw.js	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/Robuxb.png	true	Avira URL Cloud: malware	unknown
https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/endscreen.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/api/stats/watchtime?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=62.819&fmt=397&fs=0&rt=65.015&euri&lact=46583&cl=648221806&state=playing&volume=100%2C100%2C100%2C100%2C100%2C100%2C100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=105&feature=youtu.be&afmt=251&idpj=-6&ldpj=-8&rti=65&st=24.832%2C25.68%2C29.936%2C30.036%2C35.487%2C54.936%2C55.138&et=25.68%2C29.936%2C30.036%2C35.487%2C54.936%2C55.138%2C62.819&muted=0%2C0%2C0%2C0%2C0%2C0%2C0&vis=3%2C3%2C0%2C3%2C3%2C0%2C3&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/	true		unknown
http://www.addesigner.com/images/inf-tips.gif	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/71059424/www-player.css	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/Robux.png	true	Avira URL Cloud: malware	unknown
http://www.addesigner.com/	false		unknown
https://i.ytimg.com/vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ	false	Avira URL Cloud: safe	unknown
https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/captions.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false	URL Reputation: safe	unknown
https://www.youtube.com/youtubei/v1/feedback?prettyPrint=false	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?46ojOA	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/base.js	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	Avira URL Cloud: safe	unknown
https://youtube.com/	false	URL Reputation: safe	unknown
https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg	false	Avira URL Cloud: safe	unknown
http://www.addesigner.com/images/blank.gif	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/a7b1ec23/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/a7b1ec23/jsbin/webcomponents-sd.vflset/webcomponents-sd.js	false	Avira URL Cloud: safe	unknown
http://www.addesigner.com/images/2bullet.gif	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?SttVDg	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/	false	URL Reputation: safe	unknown
https://www.youtube.com/youtubei/v1/notification_registration/set_registration?prettyPrint=false	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/app_shell	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/search/audio/success.mp3	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/a7b1ec23/jsbin/intersection-observer.min.vflset/intersection-observer.min.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/Untitled.png	true	Avira URL Cloud: malware	unknown
https://googleads.g.doubleclick.net/pagead/html/r20240626/r20110914/zrt_lookup_fy2021.html	false		unknown
https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=670751145&utuid=uAXFkgsw1L7xaCfnd5JJOw	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/remote.js	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/style.css	true	Avira URL Cloud: malware	unknown
https://scamwebsite.com/ltu	true		unknown
https://i.ytimg.com/vi/izGwDsrQ1eQ/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLAPEMSx8W9_-QGlw_ZFUf3cYVKl6w	false	Avira URL Cloud: safe	unknown
https://scamwebsite.com/baddesign.gif	true	Avira URL Cloud: malware	unknown
https://www.youtube.com/youtubei/v1/guide?prettyPrint=false	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/a7b1ec23/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEWCKgBEF5IWvKriqkDCQgBFQAAiEIYAQ==&rs=AOn4CLBf45ycDkHw60O072DkeCeAw0TV-w	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/mIHHfNVfhPk/maxresdefault.jpg	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/watch?v=dQw4w9WgXcQ	false		unknown
https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s48-c-k-c0x00ffffff-no-rj	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/a7b1ec23/jsbin/scheduler.vflset/scheduler.js	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_499.2.dr, chromecache_316.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/delayplay?cl=	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com	chromecache_316.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/embed/	chromecache_316.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_316.2.dr, chromecache_304.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com	chromecache_316.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/adsense/answer/9190028.	chromecache_322.2.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/get/videoqualityreport/?v=	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/i/%	chromecache_382.2.dr, chromecache_593.2.dr	false	Avira URL Cloud: safe	unknown
https://admin.youtube.com	chromecache_499.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/favicon.ico	chromecache_449.2.dr	false	Avira URL Cloud: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_499.2.dr, chromecache_316.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/an/	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/api/stats/ads?ver=	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_382.2.dr, chromecache_593.2.dr	false	Avira URL Cloud: safe	unknown
https://yurt.corp.google.com	chromecache_499.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/tools/feedback	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/google/closure-library/wiki/goog.module:-an-ES6-module-like-alternative-to-goog.p	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/pagead/interaction/?ai=C	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_499.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_316.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_316.2.dr, chromecache_304.2.dr	false	URL Reputation: safe	unknown
https://s.youtube.com/api/stats/qoe?cl=	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://docs.google.com/picker	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_316.2.dr	false	URL Reputation: safe	unknown
http://mathiasbynens.be/	chromecache_382.2.dr, chromecache_316.2.dr, chromecache_593.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/adsense/search/async-ads.js	chromecache_382.2.dr, chromecache_593.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/ptracking?ei=	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
http://tools.ietf.org/html/rfc1950	chromecache_381.2.dr, chromecache_499.2.dr, chromecache_316.2.dr, chromecache_320.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/pcs/activeview?xai=	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
http://www.addesigner.com	chromecache_399.2.dr	false	Avira URL Cloud: safe	unknown
http://googleads.g.doubleclick.net	chromecache_382.2.dr, chromecache_593.2.dr	false	Avira URL Cloud: safe	unknown
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/youtube/?p=report_playback	chromecache_499.2.dr	false	URL Reputation: safe	unknown
http://google.com	chromecache_382.2.dr, chromecache_593.2.dr	false	Avira URL Cloud: safe	unknown
http://youtube.com/streaming/metadata/segment/102015	chromecache_499.2.dr	false	URL Reputation: safe	unknown
https://scamwebsite.com/baddesign.gif"	chromecache_552.2.dr	true	Avira URL Cloud: malware	unknown
https://youtu.be/	chromecache_499.2.dr	false	Avira URL Cloud: safe	unknown
http://mths.be/fromcodepoint	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
http://a9.com/-/spec/opensearch/1.1/	chromecache_449.2.dr	false	Avira URL Cloud: safe	unknown
http://scamwebsite.com	chromecache_552.2.dr	false	Avira URL Cloud: malware	unknown
https://embeddedassistant-frontend-clients6.youtube.com/google.assistant.embedded.v1.EmbeddedAssista	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com	chromecache_316.2.dr	false	URL Reputation: safe	unknown
http://polymer.github.io/CONTRIBUTORS.txt	chromecache_316.2.dr, chromecache_304.2.dr	false	URL Reputation: safe	unknown
https://oauth-redirect-test.googleusercontent.com	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown
https://mathiasbynens.be/	chromecache_316.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
209.85.165.198	rr1.sn-q4flrnee.googlevideo.com	United States	15169	GOOGLEUS	false
107.161.28.66	addesigner.com	United States	3842	RAMNODEUS	false
142.250.185.226	unknown	United States	15169	GOOGLEUS	false
142.250.186.110	youtube.com	United States	15169	GOOGLEUS	false
142.250.185.66	unknown	United States	15169	GOOGLEUS	false
142.250.186.78	youtu.be	United States	15169	GOOGLEUS	false
142.250.184.198	static.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.18.4	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.110	unknown	United States	15169	GOOGLEUS	false
216.58.206.46	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
142.250.185.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
142.250.184.238	unknown	United States	15169	GOOGLEUS	false
173.194.140.232	rr3.sn-q4fl6nde.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.185.78	unknown	United States	15169	GOOGLEUS	false
74.125.0.137	rr4.sn-ab5l6nk6.googlevideo.com	United States	15169	GOOGLEUS	false
74.125.0.170	rr5.sn-ab5l6nkd.googlevideo.com	United States	15169	GOOGLEUS	false
216.58.212.129	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.181.238	play.google.com	United States	15169	GOOGLEUS	false
216.58.212.130	unknown	United States	15169	GOOGLEUS	false
142.250.185.86	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.74.196	unknown	United States	15169	GOOGLEUS	false
216.58.212.132	unknown	United States	15169	GOOGLEUS	false
142.250.186.162	unknown	United States	15169	GOOGLEUS	false
172.217.23.118	unknown	United States	15169	GOOGLEUS	false
198.51.233.1	scamwebsite.com	United States	395409	NEOCITIESUS	true
142.250.185.174	unknown	United States	15169	GOOGLEUS	false
172.217.133.9	rr4.sn-hgn7rn7y.googlevideo.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.5
192.168.2.10

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1466478
Start date and time:	2024-07-03 00:23:50 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://scamwebsite.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@37/576@73/33
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://youtu.be/dQw4w9WgXcQ Browse: https://scamwebsite.com/notindex.html Browse: http://www.addesigner.com/ Browse: https://scamwebsite.com/ltu Browse: https://www.youtube.com/

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 74.125.71.84, 142.250.185.206, 34.104.35.123, 216.58.206.34, 142.250.181.225, 172.217.16.130, 142.250.185.193, 216.58.206.66, 13.85.23.86, 88.221.110.91, 2.16.100.168, 192.229.221.95, 20.166.126.56, 199.232.210.172, 142.250.185.106, 142.250.185.131, 142.250.186.74, 142.250.185.170, 142.250.185.138, 172.217.18.10, 142.250.185.74, 172.217.18.106, 172.217.16.138, 216.58.206.42, 142.250.184.234, 142.250.186.106, 142.250.186.138, 142.250.186.42, 172.217.16.202, 216.58.206.74, 172.217.23.106, 142.250.184.202, 142.250.185.202, 216.58.212.138, 142.250.185.234, 142.250.186.170, 142.250.181.234, 172.217.16.142, 142.250.185.238, 20.242.39.171, 142.250.186.174, 216.58.212.174, 142.250.185.99, 142.250.186.99, 142.250.186.66, 93.184.221.240, 142.250.185.67, 142.250.185.65, 216.58.212.161, 216.58.206.67, 172.217.16.206
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, a767.dspw65.akamai.net, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ctldl.windowsupdate.com.delivery.microsoft.com, fonts.gstatic.com, encrypted-tbn0.gstatic.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, encrypted-tbn2.gstatic.com, pagead2.googlesyndication.com, jnn-pa.googleapis.com, download.windowsupdate.com.edgesuite.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, tpc.googlesyndication.com, clients.l.google.com
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://scamwebsite.com/

Input	Output
URL: https://www.youtube.com/watch?v=dQw4w9WgXcQ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form explicitly requesting sensitive information.","The text does not create a sense of urgency or interest by offering to view documents or invoices.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Rick Astley - Never Gonna Give You Up (Official Music Video) - YouTube OCR: Search Sign in Rick Astley - Together Forever (Official HD Video) Rick Astley 12M views 4 years ago 3:24 The Story of the Best Meme THE GREAtEST EVER: 'Never Gonna Give youm EME OF Alfo M81ia L-TJME 4.6M views 4 yearsago 11:08 a-ha - Take On Me (Official Video) [Remastered in 4K] 1.9B views 14 years ago Mix - Rick Astley - Never Gonna RICK ASTLEY Give You Up (Official Musicm Cyndi Lauper, Rick Astley, A-ha, and more Mix 11 O " 0:04 '3:32 George Michael - Careless Whisper (Official Video) Rick Astley - Never Gonna Give You Up (Official Music Video) W)rgemichael 1.2B views 14 years ago 5:01 Rick Astley Subscribe Share 17M Save Tears For Fears - Everybody 4.12M subscribers Wants To Rule The Worldm 1,550,241,944 views 14 years ago #NeverGonnaGiveYouUp #RickAstley #0fficialMusicVideo Tears For Fears 462M views 10 years ago The official video for "Never Gonna Give You up" by Rick Astley. Culture Club - Karma The new album Are We There Yet?' is out now: Download here: https://RickAstley.lnk.to/AreWeThereY Chameleon (Official Music. Culture Club Shop the Rick Astley store 761M views 15 years ago Rick Astley ARE Berlin - Take My Breath Away S15.99 (Official Video - Top Gun) Merchbar Berlin 429M views 10 years ago 4:12
URL: https://scamwebsite.com/ltu Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,"captcha": false,"reasons": ["The title 'FREE ROBUC' is attention-grabbing and could create a sense of urgency.","The text 'to scamwebsite.cpm' suggests that the link may lead to a scam website.","The text '303542754 F 303542754 F 303542754 F OX OX OX 303542754 F ' is nonsensical and does not provide any valuable information.","The presence of the phrase 'click here' in the text 'click here to view document' creates a sense of urgency."]}
Title: FREE ROBUC OCR: it mywe ox ox ADOESIGNER OX ox 'hrefhttp : / / scamwebsite . ht s: // scamwebsite . com/baddesgn : kif e" to scamwebsite.cpm a > ger ate ve back ox OX ox 303542754 F 303542754 F 303542754 F OX OX OX 303542754 F ' , OX OX , OX 30351-2754 F 303542754 F 30351-2754 F
URL: https://www.youtube.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form, as it does not request any sensitive information.","The text does not create a sense of urgency, as it only suggests searching and watching videos.","There is no CAPTCHA or anti-robot detection mechanism present on the webpage."]}
Title: YouTube OCR: YouTube @ Sign in Search Try searching to get started Start watching videos to help us build a feed of videos you'll love.
URL: https://scamwebsite.com Model: gpt-4o	```json{ "phishing_score": 9, "brands": "Roblox", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": false, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "roblox.com", "reasons": "The URL 'https://scamwebsite.com' is highly suspicious and does not match the legitimate domain 'roblox.com' associated with the brand Roblox. The website prominently displays the brand's imagery (Roblox currency) but does not have a legitimate domain. The presence of a suspicious link ('scamwebsite.com') and the use of social engineering techniques (e.g., misleading users with fake currency images) strongly indicate that this is a phishing site."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jul 2 21:24:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.986571055234504
Encrypted:	false
SSDEEP:	48:8Jd9Tl9oHridAKZdA19ehwiZUklqehHy+3:8xjwoy
MD5:	4816947338E0F1E694B65C3BCECBE37C
SHA1:	5BBAA0E34C76FA689DED2115575954553C31C878
SHA-256:	82BEA4F864278E588BDB844B2DC3B1E10972FBA6A5E692E35740F923A539FCDA
SHA-512:	F96D64A4211213992410A6B810E21BA236F3E7652316BB608074C385954117C225C19E0CD69671E700F43B5D2AA965B3D72558D7417D13D4C7AFC5F1FB51389A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............1......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jul 2 21:24:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	4.000823363520688
Encrypted:	false
SSDEEP:	48:8Yd9Tl9oHridAKZdA1weh/iZUkAQkqehYy+2:86jK9Qdy
MD5:	A5029B18EC564632231827AC4180DCDA
SHA1:	105D0D51A39746EC2EC4FC28F0EF3EC3A7CDD1A4
SHA-256:	713EAC9442EB60859060E5034B7B0D5624A711680F5C6E3B60311571EFF73CEC
SHA-512:	9C7D7A1BEA78449219E7F77B07C765B9C6041EEC62A816C36B1DC04B867FA79D857E1A89423100F46341753C32C4E1CFB3A0A220A27DCAEB7F549559EBEC7200
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....4......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............1......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0096691844612495
Encrypted:	false
SSDEEP:	48:8xud9Tl9sHridAKZdA14tseh7sFiZUkmgqeh7s2y+BX:8xIjOnky
MD5:	FB96AA764202A9D1CC4366F3769AD353
SHA1:	D9116E8F2C46DCEAB8F0B3D6EB5C5AFF7C831B5C
SHA-256:	6328939E3D07AF36906774D6E9AC5E40BEFD7BD75919FF7F86BAEAF3718964DC
SHA-512:	65D54C15F381930D75D13C5DFA89965DFD5FAC731DEA49516EB21E39BBF9244E69C0F85923AF4753A9151752916DFDC3A7EC721DE91E2DF71F924E960B42696F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............1......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jul 2 21:24:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.000729387026424
Encrypted:	false
SSDEEP:	48:89d9Tl9oHridAKZdA1vehDiZUkwqehcy+R:8NjRuy
MD5:	1F8C9DA1DF4FC2E7525A18CA75738EC5
SHA1:	1E0383A6D86AAEB8DDE91577F8B99403D2C360CE
SHA-256:	4251B249E8721808F462DFD0E5C3D7C1CE4DDAF61815DF4CD094DB839A0CC81A
SHA-512:	3FD3A42F398BA3F590023D166F9EC4F33152E668642E8850C2A63B410276444B9848B0B094362B06FFD455F60430E95684672242070D42194FA3A7C049AA327E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............1......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jul 2 21:24:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9866583803520816
Encrypted:	false
SSDEEP:	48:8H4d9Tl9oHridAKZdA1hehBiZUk1W1qehyy+C:8Hajx9Sy
MD5:	BDD2A11BCFB355AE826B92474DAC2994
SHA1:	DA12783CFEDFBE21A2A794E7A30C9302532BFF29
SHA-256:	6FC91377145A04C3D5AD38690F76BE0D2E27B58ECE1E4075828EE9B7EFB89217
SHA-512:	C6ACC873C912DDBAF876F1A21044924AC3B576CC883C3A9592A0BDCF19C78D3B19185F5F87B50BC1CF9F3321499B8045C70487345DB19BE5C4ABACCB74DE804B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....G:.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............1......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Tue Jul 2 21:24:46 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	4.001637402182012
Encrypted:	false
SSDEEP:	48:8md9Tl9oHridAKZdA1duT+ehOuTbbiZUk5OjqehOuTbky+yT+:8gjtT/TbxWOvTbky7T
MD5:	D3188BB060923F63267D5C130FDBBE14
SHA1:	510B039155C1C1AE917B993486DDFE593B2A0554
SHA-256:	440C03F35E1165BB6F270A46FB4F7BF3284212058B2EFA2CDE032BC63EC6BB1C
SHA-512:	C1508BA8EF14A801B09B1137712B063915E53A8D92040428C86C4AFC309E44DAD3BFA07652119D069F8B7C0C3DE22EE81B359CC4D0B48E167141A036C943B9B4
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....v......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.X......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............1......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	4.966965284633015
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHtRUhVNBz2SVMzLSQQQEK/:tI9mc4slhohC/vmI4LUhVNBz1VOGQQQz
MD5:	36830448E3F7A1A3A2D487003A091E9C
SHA1:	5E890C51BC88F472775B79639B6C1FC51F08DC05
SHA-256:	31264354C77C510E3AE936076B8C10048515F7F6F5B6EE3EC34FD184144DF96E
SHA-512:	D3AA088237953AC48F2E66B6C3DFBB3A18A11F508E2F2DC650596EE5CE5908D2BEDF2AA01107F0A89DC7B113BBF63C2CB71DA113AD6625047707D3C3E4690F5B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/download/v9/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17 18v1H6v-1h11zm-.5-6.6-.7-.7-3.8 3.7V4h-1v10.4l-3.8-3.8-.7.7 5 5 5-4.9z"/></svg>

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	39394
Entropy (8bit):	7.995205731003871
Encrypted:	true
SSDEEP:	768:4Z94/2G2SJnl5rHV0draVclh/TSz3DhqMbsItOAHxkllkr:p/2cJnlt1oBlB2zzhbbfB6c
MD5:	475BE0BF53370635D16D69D6B84EC563
SHA1:	E581A6940A42D33EF264C929B05D85E02BF9FB26
SHA-256:	0343517E8FEDE5FF841FC7A4DC53D7D5D09E4F74157331ADDE5B67FE08806492
SHA-512:	6D3813F780D1D89DA715AFC0E247BB1C6C187E9D6B6BAD9D21EFB3CF3DE8D3934307EA3A20062318A7585F1DCF7C1C8903E18A0959376BAB0B45F4FC27038753
Malicious:	false
Reputation:	low
Preview:	RIFF...WEBPVP8 ........* ...>.X.N.../.2.....M.8._Lr..7...g3.v.B. .An.=..L.........z....W.Ia..P....v...f............t..... +#......W.o.g4....9?..{./....o.....z....#....z..3.[.7...]..R..3NG...y..iY..I.b...t.....amX..K....X....%nY..Of.[m...L.G.W/.A.....}d....%y.U..W.<..S/..^4.A.n.{...m..YZ9.sl..m].....@0.-....S{........>.p.b...2..g.p...........y....I.-.,..=_..x...Sn...:6.XAQ.D..?....U...u.._.nH..-f...@...<.5...s.{tEIO..VI2..=Q.[.t...........iZ.}.....y.....9;zf...\|}.... A$...v...{..9...yH..(..r......5....v.p?....Y&.P.[..to.{....w)=~.\| 9.I...w..&/J.a.Tr........>..R.U.^...}../vEH.............s..z7..8..Q.(.\|.N.R....p....[\|..S+.!V..`.k....M.D.1.e...u..].[..}...=..y)w.IuB...;..{..Q...h....E0-....t.H...;.o.\|...q...St...w.v.4.....;......`.&..0..[[......4.y<....&.-.m.U.$..$.[.x..m.`...%...S.U..~.@...B.! ....$A.d.....\|3..b.,\|..b..+.R..................[GON... ..a..N..yC.I.\|..m#..E..C..i.....oG4S.@...K0.#6..0i..-...^]_..k.m..g5...3...I~v..H

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	182
Entropy (8bit):	4.96992883918624
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHPaWzKU2IoQfaUXxRTnRuOZ1zcN/:tI9mc4slhohC/vmI4PaV99HUXxqW1wN/
MD5:	54F9C6C4788C54E7AEB26919C5C2C24F
SHA1:	3883C98E351DF0B47E9B79CD4403073914311327
SHA-256:	CFBF09095F6C33F6917DEEAD4CBAD82F4BE3F538E528980C0300A5B6A3409B3A
SHA-512:	CE0772B5CF958706075AE2C05DF1DD26A272909589113F57050A344DF6776F97505368733C57047554AE59CCB5B32213A973880E7D00A3108B589A40E61670A5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M21 21H3V3h9v2H5v14h14v-7h2v9zM15 3v2h2.61l-6.68 6.68 1.41 1.41L19 6.44V9h2V3h-6z"/></svg>

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (607)
Category:	downloaded
Size (bytes):	34410
Entropy (8bit):	5.379317814525588
Encrypted:	false
SSDEEP:	384:pm8eJh/qfiNTJJJ3lvOvtvv2puaRfQM1VamTnWWOFh03pAmyllyP+CreR:pm8Uq6N+tvv2pu8N0UW70UbR
MD5:	A0C7AF33B242CE3C5BE36E92995B1DF2
SHA1:	827D508C8EFFB1F71F962798DB120BE768A4B062
SHA-256:	5B8CAA89923A57C0635189D80F7FC27EA66CBF20D5FE237C929039BC97BB9F93
SHA-512:	AF96EE6673C5598466BB8ECE1FAD8B2E47F26005520932C35F0DABE595BB23CCB2F76BA05B7EBCAC0CB05AFA3640AA733BEF80208AE5D3423E93CCFE68BA048A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/endscreen.js
Preview:	(function(g){var window=this;'use strict';var Lwb=function(a,b){a.jb("onAutonavCoundownStarted",b)},i6=function(a,b,c){g.Nv(a.element,"ytp-suggestion-set",!!b.videoId);.var d=b.playlistId;c=b.gh(c?c:"mqdefault.jpg");var e=null,f=null;b instanceof g.cS&&(b.lengthText?(e=b.lengthText\|\|null,f=b.Bx\|\|null):b.lengthSeconds&&(e=g.HF(b.lengthSeconds),f=g.HF(b.lengthSeconds,!0)));var h=!!d;d=h&&g.tWa(d).type==="RD";var l=b instanceof g.cS?b.isLivePlayback:null,m=b instanceof g.cS?b.isUpcoming:null,n=b.author,p=b.shortViewCount,q=b.publishedTimeText,r=[],t=[];n&&r.push(n);p&&(r.push(p),t.push(p));q&&t.push(q);c={title:b.title,author:n,author_and_views:r.join(" \u2022 "),aria_label:b.ariaLabel\|\|.g.$I("Watch $TITLE",{TITLE:b.title}),duration:e,timestamp:f,url:b.ql(),is_live:l,is_upcoming:m,is_list:h,is_mix:d,background:c?"background-image: url("+c+")":"",views_and_publish_time:t.join(" \u2022 "),autoplayAlternativeHeader:b.nt};b instanceof g.bS&&(c.playlist_length=b.playlistLength);a.update(c)},j6

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio
Category:	downloaded
Size (bytes):	6167
Entropy (8bit):	4.4514990753759855
Encrypted:	false
SSDEEP:	48:3ZCiNo0UQX1uXwGtjvjvDd3ti/F/0nP7/vEcKhirGGb7m/8sDM4UF9YX:Ai6nQX1uXZjvjLzGF8Pzv4E71EM4UP6
MD5:	81DFE7BB0CBBBC7468DDE13D3F649273
SHA1:	457BDF6F22B4C51255FBB5F198CA610B1037A932
SHA-256:	3B1F3E116BB9E9FBDD0D1643D703CAA562E235EBC0B814214A83C23B8CC271D6
SHA-512:	5BC6D25943EAE352363ED0123B9B178790AE2834A25178DA68603DC60E98FA531EA5148A2D93403A09829E0B387BC7E80A53CF8151CCB372A1386A1857F5F118
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/search/audio/open.mp3:2f7ae178db3451:0
Preview:	... ftypM4A ....M4A mp42isom.......gmoov...lmvhd.............D..8.................................................@...................................trak...\tkhd....................8.................................................@...............mdia... mdhd.............D..8.U......"hdlr........soun.................?minf....smhd...........$dinf....dref............url ........stbl...gstsd...........Wmp4a.........................D.....3esds........"........@.............................stts....................stsc.......................Lstsz...................................i...................z...w...m...M....stco................udta....meta......."hdlr........mdirappl.............rilst...!.nam....data........speak_now....cpil....data.............pgap....data.............tmpo....data.............(.too... data........iTunes 12.3.1.23....----....mean....com.apple.iTunes....name....iTunSMPB....data........ 00000000 00000840 00000151 0000000000002E6F 00000000 00000000 00000000 0000

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (511)
Category:	downloaded
Size (bytes):	2051
Entropy (8bit):	5.245569770149611
Encrypted:	false
SSDEEP:	48:x2npr4QxmTJsIxHPTNSxf0gzu590yKECxex3XZKE+:x44wmTJsYH7NGf0gKT0yKE2K3pJ+
MD5:	A94E7CD86F5824E27720F5D3C712DF9A
SHA1:	7BF52949685727D7133F452B432A57615E40978F
SHA-256:	59CE6BDF8E3D17BB68667499C34A3EC32B9F7836DBCA59D03237A4C9FFFEFD35
SHA-512:	726D7BB3C7D356453A10D590EE4806BDE864FC7E909BA8F03E194B1F1BAA0D65AE8FC89E9E393F2300ED3536969E7445AC39860E3BB0EA338EF19F4B51139B9F
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js
Preview:	'use strict';/.. Copyright (c) 2016 The Polymer Project Authors. All rights reserved.. This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt. The complete set of authors may be found at http://polymer.github.io/AUTHORS.txt. The complete set of contributors may be found at http://polymer.github.io/CONTRIBUTORS.txt. Code distributed by Google as part of the polymer project is also. subject to an additional IP rights grant found at http://polymer.github.io/PATENTS.txt./.(()=>{if(window.customElements){var h=window.HTMLElement,m=window.customElements.define,n=window.customElements.get,k=new Map,l=new Map,e=!1,f=!1;window.HTMLElement=function(){if(!e){var a=k.get(this.constructor);a=n.call(window.customElements,a);f=!0;return new a}e=!1};window.HTMLElement.prototype=h.prototype;window.HTMLElement.es5Shimmed=!0;Object.defineProperty(window,"customElements",{value:window.customElements,configurable:!0,writable:!0});Object.defineProperty(window.

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3935057531723584&output=html&adk=1812271804&adf=3025194257&abgtt=6&lmt=1713318382&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=404x510_l%7C404x510_r&format=0x0&url=https%3A%2F%2Fscamwebsite.com%2Fnotindex&pra=5&wgl=1&easpi=0&aihb=0&asro=0&ailel=30~27~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aiael=30~27~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aifxl=30_5~27_9&aiixl=30_6~27_3&aslmct=0.7&asamct=0.7&aisaib=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1719959132017&bpp=3&bdt=119&idt=47&shv=r20240626&mjsv=m202406260101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=4418651587544&frm=20&pv=2&ga_vid=217761386.1719959132&ga_sid=1719959132&ga_hid=1053661181&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1280&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44795922%2C95332586%2C95334508%2C95334526%2C95334572%2C31084926%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4404938672204642&tmod=322256741&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=89
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2434
Entropy (8bit):	4.737059133849761
Encrypted:	false
SSDEEP:	48:owOGkjKLAltP84lPMYxznNoCGVShuKJpn2:MLvtPhlPMYFNoAJp2
MD5:	06360FF211B374AFC9473FAEA2886095
SHA1:	6E40EC924C7CA539185ADBF78566DAEFEB5B97BC
SHA-256:	EEA10F57C4E2A6677142FEEC3F9353399D500BE403C61C5456881396ADF6FEE3
SHA-512:	3F1A3497714CA8C028469439CEF0B1DAE3805B34447CB96BC2C973A7C98F06EE9F75C91D2DC7DB334ACEB7031888727091B9700E1BEFCE71B5C9A431830CEDA2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <radialGradient cx="5.4%" cy="7.11%" r="107.93%" fx="5.4%" fy="7.11%" gradientTransform="matrix(.70653 0 0 1 .016 0)">. <stop offset="0%" stop-color="#FFF"></stop>. <stop offset="100%" stop-color="#FFF" stop-opacity="0"></stop>. </radialGradient>. </defs>. <g fill="none" fill-rule="evenodd">. <path d="M1 1h21.77v22H1z"></path>. <g fill-rule="nonzero">. <path fill="#F00" d="M22.54 7.6s-.2-1.5-.86-2.17c-.83-.87-1.75-.88-2.18-.93-3.04-.22-7.6-.2-7.6-.2s-4.56-.02-7.6.2c-.43.05-1.35.06-2.18.93-.65.67-.86 2.18-.86 2.18S1.04 9.4 1 11.18v1.66c.04 1.78.26 3.55.26 3.55s.2 1.5.86 2.18c.83.87 1.9.84 2.4.94 1.7.15 7.2.2 7.38.2 0 0 4.57 0 7.6-.22.43-.05 1.35-.06 2.18-.93.65-.67.86-2.18.86-2.18s.22-1.77.24-3.55v-1.66c-.02-1.78-.24-3.55-.24-3.55z"></path>. <path fill="#FAFAFA" d="M9.68 8.9v6.18l5.84-3.1"></path>. <path fill="#000" fill-opacity=".12" d="M9.68 8.88l5.13 3.48.73-.38"></path>. <path fill="#FFF"

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	6170
Entropy (8bit):	7.965346264222445
Encrypted:	false
SSDEEP:	192:5hQFCVhc4uVF7YjmXgvXZiAS1yq5TVKeHK/:5yYhc/VV9ik9hKeHa
MD5:	3FD5DF1BA1468D22EF336F5649C7C843
SHA1:	5DE51BF70505602EFE9E7C856F19A8AC4C27E6B1
SHA-256:	2BD2C7B23B5491CFD6AD9A1F887AE4C548E69589DB50A828EBBBDFD31EE6EB8C
SHA-512:	B8AAD6AF8697D53B81D91ABEE6916FE9C98CF9DFD94A572770A15EC22685C8FD5D4469B47520DF582AEE0F668922E7EEB0AF6D1C6E6A763E91DB8FDB98FFF3E7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....O.....^.>M..I..QLx(......nv.\O..j.Y.......<.D~.............?.g.........=k.W..\|.=...Z.p.......?.....=........=..k......h.2>o.'.V....:...I.....N.}...P.h~...............{.........?.?....y...o..............g...o...}.}?.O.G./.W............O.....x?....E...Y..;.....t.7.3+..JrI^.f.ogv......>gR..Mpv..d....[n..^..U.......?.h......2A...O....[.>..4..~F.h"..W...g_...\|!'..O...Y......e(.....w..I.^..y.1:.z6.,8l...W......W..;...4^.tg/..p5...Hd..sK....]v..)pT..^d1.x..%.d..=.._c........a.?.o.1xR.?.`\|.....9.....Fi......Ei..z.R....A.........A._h4%.5:....S........E...cX9......K....U.P..m.c.=..r..A........h.5.`....S.)P....MiP..G...#........1kpL.!.q.z.tc.6.a.>.p.....s...9.u.\Qp.8.t..^..w.U....yx0.i...+<..."12xQ.[..0....I.B..x!a....8-..K...g..#.?1.]..j...8>.g..Z<&^.....*..(G...#..:.y....t......a.P\|s..<..\|?.O.;........x.Dg..6..v.&...?....d..-...A.1.X.....z<...'..W..:<(.....w@.....X.s......A..Ey.?n'....dx./....g.I./.Y..W.j.......x#..?...H...$.;m.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 218
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	6.845708371283886
Encrypted:	false
SSDEEP:	3:FttrreyXBVxPdhtYM6aglwRiP4jlb8cYRpfsNNCLWc6u5yVI5mhh42xkrSOoF0j/:Xt/pnlhs8YP4h5K6qLWcp0X42xjOo682
MD5:	7FE1350605F066791D93A6A4F0631AD4
SHA1:	5BF5186EF9DFD9A27DA23A5CB801CE3EE2613D58
SHA-256:	93858CB81E414846B4F7936B0072D86C165EC1DB46F5FA348582DA57DF9CAFE0
SHA-512:	28C71F9FB952FE37183835FE6BE0CB6FC10AA3A913AF724C1367C90B50F1C9F3E9870B15B354B9BCAD3B116DB77C3E63005A1F479FC8A1F3B532A11714EC22BE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/message_bubble_alert/v6/24px.svg
Preview:	..........MN...0...(..qi.R.C'...8T...I...:UgY.lYW.R.>a.^......9g....^.RJ......F.......==*>...~x......X.C......._..G._\.K....Wm.>.`.$L.....ak.P.66.BX7.......i.kM......2.".b...../........

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	593
Entropy (8bit):	4.524151373929859
Encrypted:	false
SSDEEP:	12:t47N9U/vmRGtKL62ZG3XcZsRq6JoNiLrRKMszLgWEajiexYNjbv:t4jU/vNKLgXc6RqCKkE+qTCn
MD5:	CD203C4E6B3788438827E21F28380A98
SHA1:	374FE8D0C91F9C94E8FEDA631E20D11C55E1C9B0
SHA-256:	396B1892EBAA72D0874C8D0A3AFB87B803560058D84FAB6A29761A4D6238F8ED
SHA-512:	2E4278A0355E84888561BABF3D0FDABD29AEF0FEFDA84199E794D4CBFC6E01FEEA9C0E91F5EC521E0197F1569788FD36DFC2A0F0BC7186A4D805EB8A9763579A
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/broadcast/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M6 12c0-3.31 2.69-6 6-6s6 2.69 6 6c0 1.66-.67 3.16-1.77 4.25l-.71-.71C16.44 14.63 17 13.38 17 12c0-2.76-2.24-5-5-5s-5 2.24-5 5c0 1.38.56 2.63 1.47 3.54l-.71.71C6.67 15.16 6 13.66 6 12zm8 0c0-1.1-.9-2-2-2s-2 .9-2 2c0 .74.4 1.38 1 1.72V22h2v-8.28c.6-.34 1-.98 1-1.72zm-9.06 7.08.71-.71C4.01 16.74 3 14.49 3 12c0-4.96 4.04-9 9-9s9 4.04 9 9c0 2.49-1.01 4.74-2.65 6.37l.71.71C20.88 17.27 22 14.77 22 12c0-5.52-4.48-10-10-10S2 6.48 2 12c0 2.77 1.12 5.27 2.94 7.08z"/></svg>

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 168x94, components 3
Category:	downloaded
Size (bytes):	6534
Entropy (8bit):	7.9328587621794515
Encrypted:	false
SSDEEP:	192:Q00JHimBq/IG/Ujt1wmTKhS6T7gh3On5heBLeeK8:Q1imBbew/6s3Ym08
MD5:	0407C3C34AB269B6C6B9DE6E90CE5FAF
SHA1:	0CFA4DE56DD5886B39ADF08888123DDC7D3E6F92
SHA-256:	4525D0187E42D7B4139D2768BF00E2078C67E8ACA03A61DD71D050C1CDC94BC3
SHA-512:	D36DEA264FCF20BCF2F2488A2AD83A934EBD85AD8E7B66949E13056C4EC1744F4600EFD6265457720F63A32E1522FC15BD7841CF03F4D655A8F34DDFC160C525
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEWCKgBEF5IWvKriqkDCQgBFQAAiEIYAQ==&rs=AOn4CLBf45ycDkHw60O072DkeCeAw0TV-w
Preview:	......JFIF......................................................................................................................................................^..............................................A.........................!.1A..."a2Qq..#....BRbrs....$3....%4c.................................6......................!..1AQaq.."2........B...br.#$4............?...;.....5Xod...~.3,j>.I.dt.om.9...1.Q%....j<....s...J..J2'.^...q.G....u,.;X.c......g.q...G.$.B..G...)h..(..\x.<.........l.....\|.=,<..\|c.R.......sl-......gJ..6.,....k..B~G...h..,..jv.l.....E.{...S-4....eI.q...,v`9..k....6..V.Mg:L...+..N...@.w.U.v.F...&..;.jkj .LO;..{...@.3..].u.....#.. uX..UM.l......!m..Py.ia..O...$..-...z...L.g.9.7IT2..>....;.\|wT*......O.q..9..h.U..M.1.^I...BR...'e].W../...`.. . ...kt....`n=..._.D..w..c..e....R..........qL..0....9&.....GX..D..-bL..9.-....<...ECv......EN3f9.......Y..T...H...1.O....l..,.....x.+...5.fQ...4..SY....i)).3.b..TT...$@.H.M.p.MJc..Jt.Tc..Z..y....o..]S3K

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	78
Entropy (8bit):	4.858681545591168
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5KVErcHghI4KuP0WTC:tI9mc4slmR4rTC
MD5:	5FFB1290441ED5E56850CC92DB640DBA
SHA1:	ABD55D2B6EE392BBC8A89FDCE5B8560E37119D90
SHA-256:	C74EF8500A3AE98D1E16F03B030BFD6726DE72A8911FC397D3301E4B9D86369B
SHA-512:	83826FC55AF7335F3AE5E14CAD4056942F3F9C3FA3781258A771710DE1D32EB3412897F6AC3E09090192BE11EB490F996EB475E7B563EB6CD6B15A8F3A1B008F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M8 5v14l11-7z"></path></svg>.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	220
Entropy (8bit):	4.95427055782646
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4VJD2zPdqUQx+dt:t47N9U/vmRf2bQxS
MD5:	64C5CFD76908E80E8D1C35BB65CF26CB
SHA1:	DCDA22BE3CFBA2AF2C7CD98465F601E8B3C5888A
SHA-256:	59BD8FAC9261910ADAE788A1BA4E550544F05A84312049D2C254FC37A7596CC1
SHA-512:	37C54AF2F2D644BBA688775BC77FB0AED604F9ED4675FF89117A0AA264C62A0291AFC145A7D20C4C4D14F13E6C460CF6D39B1F925E442BD7A3A190BA77B98DE7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 4v9.38c-.73-.84-1.8-1.38-3-1.38-2.21 0-4 1.79-4 4s1.79 4 4 4 4-1.79 4-4V8h6V4h-7z"/></svg>

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	219
Entropy (8bit):	4.761347757859317
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4T7HVaar7D93JnGLXeSV:t4noU/vmRT70arpUXNV
MD5:	366B82D23090B2A9BA414E77922CE82B
SHA1:	1EC32038785C0B7E0591E910D0BCB5BDA337F37D
SHA-256:	BF44FEFE6CEA80E391078F4DC8DA39A1CC34704B2B88F2D6402E3CA9F6DCFA47
SHA-512:	2DD8EE2C7DBD8CD86C99210C733B33CDE0FD32CAF813E55A74E4C007241CC261EF32B3C091924AE735C50D9A4C80E82DCC38FA643185BF0434B57005C5FAC6F8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/check_circle/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 2C6.5 2 2 6.5 2 12s4.5 10 10 10 10-4.5 10-10S17.5 2 12 2zM9.8 17.3l-4.2-4.1L7 11.8l2.8 2.7L17 7.4l1.4 1.4-8.6 8.5z"/></svg>

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 328
Category:	downloaded
Size (bytes):	234
Entropy (8bit):	6.994941215447575
Encrypted:	false
SSDEEP:	6:Xthkq4bhI1Q6pt+cZ2noQtSX3prJhSqaKodrVkrb7GwZa:X/kq4bOTpMcZdQmprJhSqaFZVkP7GwZa
MD5:	9284C5D7C50105DCB31E2D93900FA13A
SHA1:	81ED85EDEF9705A797BB82AC27ECB95B2376BD4A
SHA-256:	65287C6FB1E7A86B45FB7DEFBBD30BBC99A076624225066345CE9D081821A36A
SHA-512:	BBB1134405B2EBD3977DA3EEC81B67BD9AEA02386944FDE6B50616AE54701F45634B45E3F0D8A56E909A9D70027A0BAAD03C6926C43F18B4CB5A3C75CEDB1021
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/search/v8/24px.svg
Preview:	..........MP..0...+w.8.B+..~....R...T..:pY9..x.O.r}..O.Z.a...,.1R..<..h.3.P...u.....s..o....Z.89..n.R.....,.J...x...G.. +.Il>Qa.S.vh.(...094...8..h.T....R...Pp.H$.L>H.%m...t[..)%...8..s.....r0.$...~...A.>.#.?*...A...?."H...

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	415
Entropy (8bit):	4.495473856679165
Encrypted:	false
SSDEEP:	12:t4noU/vmRIESMmpa8gQL8nJK18IyNzT+OjHf8:t4oU/vwSMcNgQL8nJKCzN1jHf8
MD5:	AEBBF536BB5109D9C8BA51BB520CC801
SHA1:	EEF20371B44CC4E85027D01DBB2690DED70DF957
SHA-256:	E2A570823965E0A19930FAED9A0C8213AF0092327BFE7041F5A50D7E6312360F
SHA-512:	A65789396E46C765EC4874AAE6996C12145CBD9C8C2E17E0B47AB80E33FD4F6D0FC13B9F282B72AC1A8F32A1D5953E97C1CF483E36A04B2C2E68E921E48B8510
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m17.77 10.32-1.2-.5L18 9.06c1.84-.96 2.53-3.23 1.56-5.06s-3.24-2.53-5.07-1.56L6 6.94c-1.29.68-2.07 2.04-2 3.49.07 1.42.93 2.67 2.22 3.25.03.01 1.2.5 1.2.5L6 14.93c-1.83.97-2.53 3.24-1.56 5.07.97 1.83 3.24 2.53 5.07 1.56l8.5-4.5c1.29-.68 2.06-2.04 1.99-3.49-.07-1.42-.94-2.68-2.23-3.25zM10 14.65v-5.3L15 12l-5 2.65z"/></svg>

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65405)
Category:	downloaded
Size (bytes):	8972683
Entropy (8bit):	5.6251686823150395
Encrypted:	false
SSDEEP:	49152:jIwbbZpPvFBnu7wGQ/iUILoZcF0SoqvGO3AAYgq9X+9+HLkO2cnLpft+ArNU9DF1:Xc5Y9HLk2DhsOqYTSCDhCywl
MD5:	2C0BCFEB29BD281EF6B7DC692878237C
SHA1:	06620D76D5F2DE76A8CE2A1E64EC9D3248CD79C8
SHA-256:	E0227457605B87C676851CF6C5E58CF4005E003B410D452D2A9B96B3A9E31686
SHA-512:	93E9250848BC693E187E13F7BB8529F96D5D3587BE739DB8E64FF578BE294A1C9DCBBB623C7859D9DFE074C8135F716A35623FA553F1D64C6DEBDD7C79B0AC7A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/desktop_polymer.vflset/desktop_polymer.js
Preview:	(function(){./* HTML content inlined from HTML import */.const d=document.createElement("div");.d.setAttribute("inlined-html","");.const finalStyleText="html:not(.style-scope) {\n --primary-text-color: var(--light-theme-text-color);\n --primary-background-color: var(--light-theme-background-color);\n --secondary-text-color: var(--light-theme-secondary-color);\n --disabled-text-color: var(--light-theme-disabled-color);\n --divider-color: var(--light-theme-divider-color);\n --error-color: #dd2c00;\n --primary-color: #3f51b5;\n --light-primary-color: #c5cae9;\n --dark-primary-color: #303f9f;\n --accent-color: #ff4081;\n --light-accent-color: #ff80ab;\n --dark-accent-color: #f50057;\n --light-theme-background-color: #fff;\n --light-theme-base-color: #000;\n --light-theme-text-color: #212121;\n --light-theme-secondary-color: #737373;\n --light-theme-disabled-color: #9b9b9b;\n --light-theme-divider-color: #dbdbdb;\n --dark-theme-background-color: #212121;\n --dark-theme-b

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.3947789275691225
Encrypted:	false
SSDEEP:	24:4HksQq5/Jz2pRNrBZJuvu8goqc0ioNhc+34+mI:2zz2bNrVENtmN+3+j
MD5:	398F0973B4175AE52E7197E2C34667A1
SHA1:	474B319E1A758EE56BFF169B8D5EBF983A487D8A
SHA-256:	029E3BA197E74C0243A9964280ADBD09C3629D0CB4736CE51ACEDE68747DD27F
SHA-512:	9EED761238C0CE9B0E10E4F4BE63127F98606DC3040CD553BE90471658CEDFBC9543CCC18EFB4BE8166AB0DD680EE81BB12ECF7A7F06550D9C675DD3244A19CB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="Ayn5IU3J1cmIl9TQPV_ylA">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1719959153477');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	259
Entropy (8bit):	4.934032927917805
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4K+tlq2LwkzdO+iEuUDXpzBX6RlUFDA:t4noU/vmRxxVzMHUFX4Q0
MD5:	F3AFFCB5D33857F7701EA77BB03026C8
SHA1:	18EEE961EA2690791898EBE6A1BEE7C6DF0DA051
SHA-256:	E3B0DCD76E8387AC87E54B1153DF400D9D5D2079DBA7AFB04AB0A31F8E50B173
SHA-512:	D07A81CD18096FB5C3B6549950EAB68DA45651E1209F1CDF6441CFDE01050C6E5A0FC596A45B761F3D387902DF3F1706BBE7F97DDBBBD11AAEEC83A70D08F3DC
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M18 5V2H6v3H3v6l3.23 1.61c.7 2.5 2.97 4.34 5.69 4.38L8 19v3h8v-3l-3.92-2.01c2.72-.04 4.99-1.88 5.69-4.38L21 11V5h-3zM6 11.38l-2-1V6h2v5.38zm14-1-2 1V6h2v4.38z"/></svg>

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	190
Entropy (8bit):	4.7187854291824936
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHlbRvFjonQFWL4UUk+uUQRNru7u5WLp+:tI9mc4slhohC/vmVR9MQF1Nk+bQLL0LA
MD5:	DFF69AA895E01665A126FC2141C94FE5
SHA1:	4064D2365E13C8A346B1D4BBE31BECD3A18CF5B1
SHA-256:	811E9985BE1AC4E4D630F4B232CEEE366801CB5F82EE306A574C1CE9F844F673
SHA-512:	CDC9FC460CBDA1DA0EF8E7A079FCBBF717E800F732923607DFBFA57E00FD3E8A2B487E9D2FEA95294DEDBA9DA5CFD42491BD3AC65219AEC954A20CB90FDE49B5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><polygon points="19.35,11.5 11.5,3.65 3.65,11.5 4.35,12.21 11,5.56 11,20 12,20 12,5.56 18.65,12.21"/></svg>

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1942)
Category:	downloaded
Size (bytes):	165053
Entropy (8bit):	5.619746830690226
Encrypted:	false
SSDEEP:	3072:gODAdHfgpoJQcaLorr6BW7lCV/l5ml0PrqzwPpuxb/hLh0QV:gODAdHfpJQcaLorr6BW7kV/7mUrqzwPy
MD5:	75DF95F99A466EBA6FC9CB255967975E
SHA1:	A6B12A778EB4D441BD240EF773C1427CF0392789
SHA-256:	8687E4141C6895A2B7AD3A3766335A822FACCA55DB9ED0BB780362CFB8D1CEEC
SHA-512:	0D6602B3D6A131AAC8464171DCD258E781E8E624A2DACF0B4286B2D3BA0431D82A2E9E4CF1CD2A000328F798A1063D889A167925E82EFAB478671F7AF21E5710
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/serviceworker-kevlar-appshell.vflset/serviceworker-kevlar-appshell.js
Preview:	'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ca=ba(this);function da(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&aa(c,a,{configurable:!0,writable:!0,value:b})}}.function ea(a){function b(d){return a.next(d)}.function c(d){return a.throw(d)}.return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(b,c).then(f,e)}.f(a.next())})}.function r(a){return ea(a())}.function fa(a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	187
Entropy (8bit):	5.110752654085156
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHAquqFbV9jXReHFAATcvXjXRHRcBHoNcHVaocoaQgeFOK/:tI9mc4slhohgqWHiA4vmI4VPgq
MD5:	590C4B291CE0B9AD72E436BD0777D562
SHA1:	974DC251B395357A38A0EC06CB87C28F70A23CB1
SHA-256:	F40804CDE31FC6CE2B19B2E4DE7189916146031A5D7958B4512D30751B767D00
SHA-512:	5DE6F1C10AF2C9EAD02B9DCA07FC4B23E0B34872CB1904FE2EED57BD2C4739CAC0A5FEE24401B457F146F5A6D43DE807E1D44DD4D33AA3B8BBA33B107428AF77
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><path d="M9 5.87 18.2 12 9 18.13V5.87M8 4v16l12-8L8 4z"/></svg>

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5470)
Category:	downloaded
Size (bytes):	26574
Entropy (8bit):	5.500938100090161
Encrypted:	false
SSDEEP:	768:eV2ux3Mp6Pbb9aXYTsnL7+p+uPKZ04xLXI3zQbsaulmC2o8:w33yx2o43YGY
MD5:	24C7B1293F8CBCA624622943A6F5FDB5
SHA1:	6949853781D79EDD2601D61918575C0BD8FF9A3F
SHA-256:	C5F26EE7362B4609CA45C9FC7E65B4D5EA14A1F8237A411506F53C3C4141E3FC
SHA-512:	14BAABA2EA46D9BC9BE6AA09A3FD3E92FEF820CADCDAB9F5C5DE747E4519E094EC5BBED4E5742A7995A29E39FB1B2F5899A19FDCC16C8DA747474CCD1E106C57
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/show_ads.js
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var m=this\|\|self;function ba(a,b){a:{var c=["CLOSURE_FLAGS"];for(var d=m,f=0;f<c.length;f++)if(d=d[c[f]],d==null){c=null;break a}c=d}a=c&&c[a];return a!=null?a:b}function ca(a){return a};var da=ba(610401301,!1),ea=ba(188588736,ba(1,!0));var p;const fa=m.navigator;p=fa?fa.userAgentData\|\|null:null;function ha(a){return da?p?p.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function t(a){var b;a:{if(b=m.navigator)if(b=b.userAgent)break a;b=""}return b.indexOf(a)!=-1};function w(){return da?!!p&&p.brands.length>0:!1}function ja(){!t("Safari")\|\|ka()\|\|(w()?0:t("Coast"))\|\|(w()?0:t("Opera"))\|\|(w()?0:t("Edge"))\|\|(w()?ha("Microsoft Edge"):t("Edg/"))\|\|w()&&ha("Opera")}function ka(){return w()?ha("Chromium"):(t("Chrome")\|\|t("CriOS"))&&!(w()?0:t("Edge"))\|\|t("Silk")};function la(a){la[" "](a);return a}la[" "]=function(){};var ma=w()?!1:t("Trident")\|\|t("MSIE");!t("Androi

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	260
Entropy (8bit):	5.004023285375928
Encrypted:	false
SSDEEP:	6:tI9mc4sliHFhC/vmIj5tpS/riWcm94BkOoEg6YaJAME:t4IlU/vmwezL6yME
MD5:	4C03F409D2394DDE00F50B3EBA37F175
SHA1:	602F037E50C8E4FDEDFC2DF1D486C6F362332FC6
SHA-256:	F232790335F76F7D938BEE8C4A8B12EBFFFFB555B005B7A8B7FC1465B4BB9380
SHA-512:	E0D389BE485482A9CB9B6F90135D5E5208177C826C92E1933452629EBEBAE9D20B5729AA1BDD9600B3CCD81B2DF9D5082F0349427499F99E3AC1BE5CC3A7E1C7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" height="24" viewBox="0 0 24 24" width="24"><path clip-rule="evenodd" d="M16.296 16.996a8 8 0 11.707-.708l3.909 3.91-.707.707-3.909-3.909ZM18 11a7 7 0 11-14 0 7 7 0 0114 0Z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	127
Entropy (8bit):	4.930844660349543
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHL1FId/cIS0:tI9mc4slhohC/vmI4spn
MD5:	2C360266A09D79360E247507EF3D2D60
SHA1:	AC14D7F9042F470FEE0D48B3D9E6EDBC505285BC
SHA-256:	A1C7A119AC9C663E0CD98E8BA6992F8B876F19D92252EB4FDFB1AF0594B70061
SHA-512:	FEFE8721063067B784D713E43FF5C05928AFCC19ED2BB5B07536F39523B7F3B2C61E8E98EC68F0E8BF8E406262D00F5A77A0A5A7DA07A2D49EF479FF04D2B1CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M9 19H7V5h2Zm8-14h-2v14h2Z"/></svg>

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	259
Entropy (8bit):	4.710851372205651
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4zmgwDe4btnRm31IE2l0kjMswple9SY:t4noU/vmRzmgw3tnRm31IEURwpY
MD5:	AA228455232ACB0A6378FED3354869AB
SHA1:	3447461B1713396150ED0DB5067AE45BFE9F024B
SHA-256:	1C594744993B086F8C4D3ABE3A4EF2794F1D1BF0D680A354EC0561AFCE427140
SHA-512:	CE2D4D2D8204EEB68E702F71D87B56CE970B4ACDF547AB20FA4A8B281C655FF41BC175A7949F6B453D7ED4A7EF8DE28C2B6774A67708DB8B7047DB3DFDFC2991
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/add_circle/v3/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17 13h-4v4h-2v-4H7v-2h4V7h2v4h4v2zM12 3c-4.96 0-9 4.04-9 9s4.04 9 9 9 9-4.04 9-9-4.04-9-9-9m0-1c5.52 0 10 4.48 10 10s-4.48 10-10 10S2 17.52 2 12 6.48 2 12 2z"/></svg>

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	251
Entropy (8bit):	5.1580903557505975
Encrypted:	false
SSDEEP:	6:tI9mc4slhohgqWHiA4vmI4hi6Dd7kC0qmjWpYp:t4noOAvmRnJ7l0pWpYp
MD5:	931DADAA2F58D46D80735C58183888D0
SHA1:	FDB576A133B05B9E28D71E7901B1971CB0335A7C
SHA-256:	D59C1758BAFD761AC0CFAE8C33F29DD4F1229F6369E4C36FB3DF9C2DAC2E394F
SHA-512:	D4C09F78A450717FEF762941DD897AD5CB3BBE23308E9092DC23E872285F3A17E74FDCCE4492E1ADFAEA0DB2C57229A7469F02816DF5D10092CCFEF26B5F6728
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><path d="M14 13h-3v3H9v-3H6v-2h3V8h2v3h3v2zm3-7H3v12h14v-6.39l4 1.83V8.56l-4 1.83V6m1-1v3.83L22 7v8l-4-1.83V19H2V5h16z"/></svg>

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 20
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	5.478306809033545
Encrypted:	false
SSDEEP:	3:Co7t9d9Vll9dFlVdi9uD6QAat/k+2IaMX4vtuJSapFuhlD9PG1slrmnOtg/KJpFR:J7A9vQAat/k+vaD586Z7D0gzqa+h2YFe
MD5:	96A3CC347CEFA089243090A9CE5A8BAB
SHA1:	93B8AA240204121DB761A659ABDD206733C9C0AC
SHA-256:	06E8541389EB295DC73310C9BC60DEAC0E92BE076F7820B079EB8EFE882C45DB
SHA-512:	702D49916FA9CA3497DB7B217520842AACBC043DDD319D679AEB05CDE82C056DC4638FBA93461584ABFC3B92C2636AD040CDA38AF438F5C5C7097603AE14F3B0
Malicious:	false
Reputation:	low
URL:	http://www.addesigner.com/images/2bullet.gif
Preview:	GIF89a............. .00.@@.PP.``.pp.........................................................................!..Ulead GIF SmartSaver Ver 2.0.,..........o .di.h..l...@.....0.8(.CIw.4.........%C.......Gb D.....nEH.b:.8.....s.Hi...`.IaOQ{..VXm.......Lp>;=z@.#1357$!.;

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	16702
Entropy (8bit):	6.016871436761521
Encrypted:	false
SSDEEP:	384:PmjvVGg9dDhU7q6C7Ts0HwnYxw3FUPoJFx3oUgcAcZ6PwZx:+jVGg9dcq5s0HcY1PKf3BZ6Psx
MD5:	97C265898113C9248081449F11B1B9DA
SHA1:	F962C5DBFB77ADD206A847934B44C6CE0BC8B94F
SHA-256:	4509BBABE4A208FE350E96A66DAB0212BEAF8365904DD6DEFF791C4E8C098715
SHA-512:	4DD28521FC6C3FA25074D1D71DD9BC73F4D1A9F90C38AF59BE5DA3571B0AC41DD1C4EE824D8D7D49C4E9419237FF48EE1B79969D8F440807145F176A14F8F421
Malicious:	false
Reputation:	low
Preview:	{"sodar_query_id":"cH6EZpDXDemU78EPj6-VoAU","injector_basename":"sodar2","bg_hash_basename":"dxMqtuO9QfQ3IwLpzYuTdghGsPjmqbjttN7KHczDD84","bg_binary":"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

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (1120)
Category:	downloaded
Size (bytes):	5598
Entropy (8bit):	4.293279469529671
Encrypted:	false
SSDEEP:	96:04JsH5RGMp9UC96s4AJu4m35PznhTJAxfxZN0rDRMW8R0aaQWD3rKivMt:0ai9UCgs4AJ/mpzcNx/eMw1QWD70t
MD5:	2FC13E5E6B51277D7A39CD7AD7D14158
SHA1:	0C9A5C613E5B853376CF2B96D8501EE5960D09C9
SHA-256:	9073602654785DE3537C4AA85E69847A0BDC871F8DAECB053C7698D4AFE8F6DE
SHA-512:	A1F8493CFC4F9C619785D9E39F0E9A54420643C3905193E6D5FFD7531184CA5E5B0FE1B43E7307506ADC01CBB397E4A1CCEA63ACD37304360AACAD8FF06D6DB8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/yt-logo-updated/v2/24px.svg
Preview:	LINT.IfChange-->.<svg xmlns="http://www.w3.org/2000/svg" id="yt-logo-updated-svg" class="external-icon" viewBox="0 0 90 20">. <svg id="yt-logo-updated" viewBox="0 0 90 20" preserveAspectRatio="xMidYMid meet" xmlns="http://www.w3.org/2000/svg">. <g>. <path d="M27.9727 3.12324C27.6435 1.89323 26.6768 0.926623 25.4468 0.597366C23.2197 2.24288e-07 14.285 0 14.285 0C14.285 0 5.35042 2.24288e-07 3.12323 0.597366C1.89323 0.926623 0.926623 1.89323 0.597366 3.12324C2.24288e-07 5.35042 0 10 0 10C0 10 2.24288e-07 14.6496 0.597366 16.8768C0.926623 18.1068 1.89323 19.0734 3.12323 19.4026C5.35042 20 14.285 20 14.285 20C14.285 20 23.2197 20 25.4468 19.4026C26.6768 19.0734 27.6435 18.1068 27.9727 16.8768C28.5701 14.6496 28.5701 10 28.5701 10C28.5701 10 28.5677 5.35042 27.9727 3.12324Z" fill="#FF0000"></path>. <path d="M11.4253 14.2854L18.8477 10.0004L11.4253 5.71533V14.2854Z" fill="white"></path>. </g>. <g>. <g id="youtube-paths">. <path d="M34.6024 13.0036L31.3945

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15744, version 1.0
Category:	downloaded
Size (bytes):	15744
Entropy (8bit):	7.986588355476176
Encrypted:	false
SSDEEP:	384:z1TLklSElcS5V6qQTMUP07JwirW6RlLwK79/:p7EJ5E2bJwi5jLwK79/
MD5:	15D9F621C3BD1599F0169DCF0BD5E63E
SHA1:	7CA9C5967F3BB8BFFEAB24B639B49C1E7D03FA52
SHA-256:	F6734F8177112C0839B961F96D813FCB189D81B60E96C33278C1983B6F419615
SHA-512:	D35A47162FC160CD5F806C3BB7FEB50EC96FDFC81753660EAD22EF33F89BE6B1BFD63D1135F6B479D35C2E9D30F2360FFC8819EFCA672270E230635BCB206C82
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......=........t..=..........................d..d..^.`.. .T..<.....\|..{........6.$.... ..t. ..I.3.%.....8..&....4Z.\|t .8.........D...$.uNE.P.E.Ak...=.x.9Xz.`.I..R....#F+B`..}.RP\|E...Z\.W[.............C...QB....m...cm.?.F.g.......Q....3......p...L2.[......!+@U..^~.......D.?.......j...U...c..U.l.6{...m.CD].h.t.....Q8.....@P...L.c.....+...ZD..2.K...:..4{g..:..~....v......<..H^.R.'....8....?.;...uy.VW..8=.".F..*.....@E....c....=..Ib.....y8$.a){.......KiIW.&..~.}..1..w.M..{.4......!..{..F.H.5#K...t..5.w...ve;. '......NJ......'(%;...?...D...M.Cq,<.=?.f......._...V..bA.(..37..v....+.uY.C.b.w8AF..3.n.-..'..U%.2....o.l."...^bj..aoF.!`....A....j...'.:Z.u...[..p.GW:U%.Ejq...:I...C........S.C...sJe.6D...<.UM,..&h..z}.y\|..9...D..j...n..B.$..T....?../.Q..=B...C._.f.#.:Bo.@]T.(..v..F..+d...". ......R..R..R....!..~A....X............>!`p..,08. 9.../.....r..Q.......Qpg.\ko...C..3..Y.y..t'.d9..>#\|..3..?.#..$....i........g5.z....S....{3..Sp..S2..w.6........

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	311
Entropy (8bit):	4.773843844737949
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4tSSJhrtldwFSrSLwKTksQchiR29UZqbivGSY:t4noU/vmRtXrtvwFSgTksJh42K9pY
MD5:	D5E9A724519F1A72A4FEECDEA710B2D7
SHA1:	75040CDBB6269D16066A1CC97973CBD35FB3EAF6
SHA-256:	119BEF082F4459AC47AC8C95CC7F5901D60BF2AFE47DE7314E479BDA835CD593
SHA-512:	55A2C26244423311D30C64F06E1AFAD3035D318F7948FED5F2D386FFE9AF1C48077F59036FB1B8BD368875F953CC2F2BE627CD6F5231CEE5119961CA523E8716
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M14.97 16.95 10 13.87V7h2v5.76l4.03 2.49-1.06 1.7zM12 2C8.73 2 5.8 3.44 4 5.83V3.02H2V9h6V7H5.62C7.08 5.09 9.36 4 12 4c4.41 0 8 3.59 8 8s-3.59 8-8 8-8-3.59-8-8H2c0 5.51 4.49 10 10 10s10-4.49 10-10S17.51 2 12 2z"/></svg>

Chrome Cache Entry: 333

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	416
Entropy (8bit):	4.4998346788589245
Encrypted:	false
SSDEEP:	6:tI9mc4slmOVIhSXX5xkgm2OCOuLQcTVgXF78Q46yAajyBxQkm3nKYKM1xE5LQI06:t4IjEXX1OC/QcuXFYFjyrQw15L2n6
MD5:	DEDDD7D24561E4F2792208764242D5FA
SHA1:	DA1A06B033CE9F27DD891B49E71FF3269A9F148C
SHA-256:	73C8A18F388DF73D60C4AF2CF0700F889AD24D1557F79C63E37E9C9EAFC9C63F
SHA-512:	8A738BB011625C122919C4D8216E285A51CDBA0EAEC6EBF1D16CE367312CCB13C8FD61BE1FACE96FE9746DF2F106BB788182F31C2222F7840A7EEC5A9731A94C
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/volume-off/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M16.5 12c0-1.77-1.02-3.29-2.5-4.03v2.21l2.45 2.45c.03-.2.05-.41.05-.63zm2.5 0c0 .94-.2 1.82-.54 2.64l1.51 1.51C20.63 14.91 21 13.5 21 12c0-4.28-2.99-7.86-7-8.77v2.06c2.89.86 5 3.54 5 6.71zM4.27 3L3 4.27 7.73 9H3v6h4l5 5v-6.73l4.25 4.25c-.67.52-1.42.93-2.25 1.18v2.06c1.38-.31 2.63-.95 3.69-1.81L19.73 21 21 19.73l-9-9L4.27 3zM12 4L9.91 6.09 12 8.18V4z"></path></svg>.

Chrome Cache Entry: 334

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	175
Entropy (8bit):	4.966965284633015
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHtRUhVNBz2SVMzLSQQQEK/:tI9mc4slhohC/vmI4LUhVNBz1VOGQQQz
MD5:	36830448E3F7A1A3A2D487003A091E9C
SHA1:	5E890C51BC88F472775B79639B6C1FC51F08DC05
SHA-256:	31264354C77C510E3AE936076B8C10048515F7F6F5B6EE3EC34FD184144DF96E
SHA-512:	D3AA088237953AC48F2E66B6C3DFBB3A18A11F508E2F2DC650596EE5CE5908D2BEDF2AA01107F0A89DC7B113BBF63C2CB71DA113AD6625047707D3C3E4690F5B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17 18v1H6v-1h11zm-.5-6.6-.7-.7-3.8 3.7V4h-1v10.4l-3.8-3.8-.7.7 5 5 5-4.9z"/></svg>

Chrome Cache Entry: 335

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 48x48, components 3
Category:	downloaded
Size (bytes):	1491
Entropy (8bit):	7.577945425151368
Encrypted:	false
SSDEEP:	24:uMyRFkCmZcDufwohtxQW5T8ZU/FGkdw/mavSWQIAMktf6rr6jWQ3CdF:Oei25X5T8ZU/FG8GmavTySv6jrydF
MD5:	BB75629EE817F89ED3B5D5584EFF44E9
SHA1:	55156138035FC79E69729650D37B77D36B87C976
SHA-256:	CD5065F06E081FB6B1BA8A212F16D7EA52DE1ED61DB18AF1E83B296A7CF4B443
SHA-512:	62E97EEC4EFAA85219F4DDB659401148E7C18F17652C21A37EDE2CD525F9EF17B501C63734DDA33E1B8895E12624320E5E9BDDED2444EE476BB8744B977DB57B
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s48-c-k-c0x00ffffff-no-rj
Preview:	......JFIF......................................................................................................................................................0.0.........................................2.........................!.1A.Q.."2a......#Bbq..................................+.......................!1..Qq..Aa.....2.$............?....H..i~.?j...C/. .c...y%.K.{z..>...g..Gj...x....C4.0..b@.c..'....3y.i[..LC.#...}.6&.......z..Wn...ION..jy.3....M..:F1.V.Ds8.^C....\;.....,.^~......up.e9...@...].GT.......QPS.Z.8.`q...`...ELw-]...P\|.R...P.C.2......p....'d.hs4i...E.t.6C..p5...e.......kf....V.im..$`!...f..H'....Xh...h4.....$[....e.L:....u{.K..%.$....\../4....d.!O\|j.W.G~....>..R\|...m*.XU...u..!..\|y...e....Z..gt1..D.Zi.'...%.......Ui0..0.N.....H...k.1....@0S.<Cf.7....n.?.}6.(..J...$.52u...pp..#......y"[O..F.uP....KO...#.dU.D...7j.\|EP.9l...Wcbi.....a..N#.F.h.......K`.......e\.b5I^..z....o.8X..%........v....=.[nq....}5...Z.b....b.KH).....`...j...F

Chrome Cache Entry: 336

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (576)
Category:	downloaded
Size (bytes):	160267
Entropy (8bit):	5.643955729780041
Encrypted:	false
SSDEEP:	1536:ARMBshTDgK03E8gqlOfHSrCPzqNnLBDA5hAnvpjnz3aoMo0ILeS7J:ARMegK03yqlzC7qpLBDA5hAvh3aoi4J
MD5:	23F2EAEF46D8D63300A356FF58414239
SHA1:	3F2B0A302F4098F2957F22CC32A0D1C9233C928A
SHA-256:	8073BB3185AD6664CA8A846E8B10A993291D139FF636C4A7C8677A6DB2CF53E0
SHA-512:	799E4ACECABE6BA0A76ED5DB08FFC7FDEC8BC45FF8008BD968CB2EC4020CA67BFC1AD23F8AB0C10D0FDFF117C558F1DCAD5240BFEE0AF25A2AA38F1063A7150D
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/offline.js
Preview:	(function(g){var window=this;'use strict';var Yxb=function(a){var b=new g.NO("und",new g.tQ("Default","und",!0));b.captionTracks=a.captionTracks;return b},Zxb=function(a){return new g.fg(function(b,c){var d=a.length,e=[];.if(d)for(var f=function(n,p){d--;e[n]=p;d==0&&b(e)},h=function(n){c(n)},l=0,m;l<a.length;l++)m=a[l],g.ica(m,g.jb(f,l),h);.else b(e)})},K6=function(a){this.j=a},L6=function(){K6.apply(this,arguments)},$xb=function(){L6.apply(this,arguments)},ayb=function(){L6.apply(this,arguments)},byb=function(){L6.apply(this,arguments)},cyb=function(){K6.apply(this,arguments)},dyb=function(){L6.apply(this,arguments)},eyb=function(){L6.apply(this,arguments)},fyb=function(){L6.apply(this,arguments)},gyb=function(){L6.apply(this,arguments)},hyb=function(){L6.apply(this,arguments)},iyb=function(){L6.apply(this,arguments)},jyb=function(){L6.apply(this,.arguments)},kyb=function(){L6.apply(this,arguments)},lyb=function(){L6.apply(this,arguments)},myb=function(){L6.apply(this,arguments)},nyb

Chrome Cache Entry: 337

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	579
Entropy (8bit):	4.50640845727472
Encrypted:	false
SSDEEP:	12:t47N9U/vmRprcQLVhjrAY5uiK8KnnY8/4U0wRJIAoZ6iiMUV0TDoc:t4jU/vycQrjrAY3/Kt/4U0OIFoUzTD3
MD5:	C0CCA7B6C1295E79FE9BBE405122AC53
SHA1:	69C36F5A0F8E20DC556123F6AF6E0B5AE7DBC18B
SHA-256:	6151B1FC5DE0D15BEF2AEAC1B8743AD6A54D9BD44FF5C507321450528D212749
SHA-512:	82C80A388F7900F73F38DEA8C0AA92D4EFF9D96D99C4BB8821689E041582D8E885EDE4618CD24C802C4ABE599F6E187801D5AB04D4751D062BAEED06551B0185
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/fire/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M19 3.87v9.77C19 17.7 15.86 21 12 21s-7-3.3-7-7.37v-.13c0-1.06.22-2.13.62-3.09.5-1.19 1.29-2.21 2.27-2.97.85-.66 1.83-1.14 2.87-1.65.39-.19.77-.38 1.15-.58.36-.19.72-.38 1.08-.56v3.22l1.55-1.04L19 3.87M20 2l-6 4V3c-.85.44-1.7.88-2.55 1.33-1.41.74-2.9 1.34-4.17 2.32-1.13.87-2.02 2.05-2.58 3.37-.46 1.09-.7 2.29-.7 3.48v.14C4 18.26 7.58 22 12 22s8-3.74 8-8.36V2zM9.45 12.89 14 10v5.7c0 1.82-1.34 3.3-3 3.3s-3-1.47-3-3.3c0-1.19.58-2.23 1.45-2.81z"/></svg>

Chrome Cache Entry: 338

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51672)
Category:	downloaded
Size (bytes):	52940
Entropy (8bit):	5.711712100952266
Encrypted:	false
SSDEEP:	768:jxScyqPHe6uiyJoSZAdSp26qgajaVHeC8qVWGJv2jvXTS1j1NWFxJ/jaeXuXQT/B:jxkq26aKldSpVbwqVWNj7S1yRuXQIMuq
MD5:	9B7198586525D83C3548E38DBBF8F80C
SHA1:	0D3D2FB35749DE5B974833C5BE31C9789838B1CE
SHA-256:	77132AB6E3BD41F4372302E9CD8B93760846B0F8E6A9B8EDB4DECA1DCCC30FCE
SHA-512:	191A99BBBC480B5CCBA83641EF9D77E37396A96F4E8D8D71C78237E676B274EF6D3C75BF81E3BB29B70A1BCF8AC47B69D68D78DB7E2D38C61C94EE70B8127D63
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/dxMqtuO9QfQ3IwLpzYuTdghGsPjmqbjttN7KHczDD84.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function k(Y){return Y}var G=function(Y){return k.call(this,Y)},f=this\|\|self,V=function(Y,d,C,b,x,Q,D,u,T,P,r,v){for(v=Y,r=90;;)try{if(v==C)break;else if(v==d)v=u&&u.createPolicy?89:81;else if(v==b)r=90,v=85;else if(v==Y)T=D,u=f.trustedTypes,v=d;else{if(v==81)return T;if(v==6)f.console[x](P.message),v=18;else{if(v==18)return r=90,T;v==85?v=f.console?6:18:v==89&&(r=66,T=u.createPolicy(Q,{createHTML:G,createScript:G,createScriptURL:G}),v=18)}}}catch(R){if(r==90)throw R;r==66&&(P=R,v=b)}};(0,eval)(function(Y,d){return(d=V(36,5,57,11,"error","bg",null))&&Y.eval(d.createScript("1"))===1?function(C){return d.createScript(C)}:function(C){return""+C}}(f)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;char

Chrome Cache Entry: 339

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3666
Entropy (8bit):	7.944434458171149
Encrypted:	false
SSDEEP:	96:79dMDO5GkVttoeE7+q7i2cgVWvnwrVF+Dq87nykxb:7ZwkVttoeQF+l2WvS+Dq87PN
MD5:	0AB2DF2234847FCA898AE1835A6CBCD7
SHA1:	EF78048C722463A71B709D0C13CA7506DF651674
SHA-256:	D86DA4F88B869EA73B513EBE1B51271AF6BF3BA30E2EA8875331F4C4FC2689AD
SHA-512:	68F1A3074BE09B93BF5EEA6E61E4F5A6C081727B3BC3E57A8BABF06148B4CF1965C24A5508AD3294F82D721BB0635FA237DF2E6962738A483E5E68B4EB5E395B
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/izGwDsrQ1eQ/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLAPEMSx8W9_-QGlw_ZFUf3cYVKl6w
Preview:	RIFFJ...WEBPVP8 >...P9.....^.>Q..J#....8....i.G..S..<.......}.....z`uN.H`1vO...W.+?'..'..j;.?./.-.p.....E?".....[..j.z.{U._.....:...........&..............r.%.................W.o...W...G.../e..FLT..h.v..@..:}p..u\.;cP..O..}i.....[J.......O...o...i..y..lX..h..m.....b....-...t...]...t.../...m.N...C...U..}..5..s..M.\|.2.}..M<{.W.)..1<.uv'.......F#.....T.c...mm4...z-.?...][<o.3k.W.TM....2...H......(..l......w...d@...~..g.:.....%%.)..)...z...$..i..,n..C..)9 M....C[P.....Bh.......tQx.T^.@l....bq.....3.....].7 ..X!(.7.TF.$.)6..D3........=..SK.B.....S.N....!3......Y...H.q...BJ......i........UM..Wf..)....N..e.b..@..7.u..vw~{>.R.:....1c}.ST...u/{.Y^0@.\|}XR.,....J....lL........j.....id...x.W..A=..~.d.n.z"...n.#'....}l[...\..:}q......4.a;1._..-W.......<]w.w..X.V_.....jH}..._.........IV....".....S.Rd....hH)...............E...4.x%.o.G.Rl.9c......3...:......h.A..W.w......!.e..........EC..3P-..K?.k.e..;<...Z.\|........(.....H.#i%c.3...Tw../<.s~H..W...t....

Chrome Cache Entry: 340

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	208
Entropy (8bit):	5.110480219410639
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4PaVRLUUkJUaBSY:t47N9U/vmRPaVRwUqUwz
MD5:	F5C29B3D10DCCAB880085999FDBB6302
SHA1:	779A18F5C8FCBA076D1F341DE5F0CD67AFDC7CCA
SHA-256:	177CADE5695A4267C5F90F5BA834636B75C32295DF99AC58B1EA1B97068E8058
SHA-512:	0428E50266C32E9825071A940FFC85DAA454106931B7E3873C3187D95FCFF97D64088D50344B4B7CAD6DDF1FA4210C1A3BEC39F0F524B73AE31FDB065E5E3726
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/open_new/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M21 21H3V3h9v1H4v16h16v-8h1v9zM15 3v1h4.32l-8.03 8.03.71.71 8-8V9h1V3h-6z"/></svg>

Chrome Cache Entry: 341

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 127
Category:	downloaded
Size (bytes):	135
Entropy (8bit):	6.5007086525262725
Encrypted:	false
SSDEEP:	3:FtttezVODzHFzS7P2Vjn/dMQas3NJ/mHp6baat:XtteQHFoe1lMVs3NJeJde
MD5:	20EE99A77D8E09B3F4DC0BC6FB1C2D47
SHA1:	418A0C795678FAC3191501592E0C1319978C5533
SHA-256:	612F79B668EF576B958A3B08113766F6722455FBD882C8C35AA7599DA4F87FE1
SHA-512:	3D83326D5A51D0C23F54C9E5B67A882C8C01504B6976B1B511A6F31248734B9B8545C002B909BD66D0C0F30FDD6272A11C31E23EB7EA63CDA1AF01C85E26C087
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/pause/v6/24px.svg
Preview:	...............0.E....&5AP.d`bae..*.D..V..e..9G.%.6~.5 .,7cT..S=..!k.....rb.H...A.....rp0.._G......l.i......U../uh.?~..........

Chrome Cache Entry: 342

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	5834
Entropy (8bit):	7.966477478463108
Encrypted:	false
SSDEEP:	96:fagVwDdVqtqfQjl8iqxKJZTMcvk1CmHgQmd2NK9J/K+97SFanNoc4FxC6ibWpbj:y1fQRbq8TPsHgZdXf/K+FganNQFxC6LH
MD5:	46C4612DADF06D444C9BC651C9A59C14
SHA1:	52D322F2A5403F5BFCAB65EFB0487E6CF2B23061
SHA-256:	4FD3C1CEE3361BBBC0B80D77906729DE679D577BFC70CD4A832AB58BFD6A676A
SHA-512:	A73609FD11551AA4E8A1C382ABF23C68E43AE52FD88AA1F605091B0AFBB2670EFE1CEEA77BE905C4EF377DA5043FF1B13EE713429C150AF3405BCCE35C9BFBF7
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/aGCdLKXNF3w/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDWMtGhP23PIbaoWnTfRS2rx0038Q
Preview:	RIFF....WEBPVP8 ....0L.....^.>Q..J#...8........z.......#.m.J.~\|....a......j..o.x/.......v..[.............{K....D.!...S...C.p%...........s.........?........7.?./".............?...o._K.....;.U...O.....\|..4.....?.../..[^..r=..g.n.^....N.\.9..k../.g...."u....`Q..z.vx......6J.b)..=AF.%..)....#...tJ..Av...Eh. ..OO..9k.Ay..&.l.L..8s.........%.t...g.....99.~v;...R.I...m...K9x.&......^d...k[!...N....++.....-...L5..h-.oc.~Zu..0.^..Q.T.._....,.U.t.l..Z..Hm.:........>.....<..)T....n>m_..y..X..&..6R#.....yti.:Z.....@..M...(.7.!em..y.-...5.B\|2/;f..?y.L..:.[#$u{..'a..Ma........BO..}.........k6.n..9.Q.X....P9...r./.@......CE.zT....h.U..Y....HX.y.....;...cq..%.dQ.j..W...]......o.~FM....p....K..;...v.\.W.....K....J[Gm....i.")....6...h......R.^........Wr.......H.j.7................N..x...O..bZ.....9.Y....=...Igcv...qhuy0......r(.NTN........\_P~.M....w.......W.....(..2....{.?....(..n...i."b.D.=.....;m.+1..MC=.+E.......^.....A..Rke..e..AfO...<t.&D...&>.

Chrome Cache Entry: 343

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 20
Category:	downloaded
Size (bytes):	215
Entropy (8bit):	6.2502620940159135
Encrypted:	false
SSDEEP:	3:CoM//V9Vll9dFll/RguD6QAaQ82IaMX4vrtDodrZz5b+RRe5N+LGb/28zXAu/4gU:JpvQAaQ8vaWIRRe50LM+8b7iZ
MD5:	D41E8F7384E351F069C8F18A4AA4AB5F
SHA1:	3FFC904F34783929AF8ECAE82D8FD846C009385B
SHA-256:	A1E04C5635296C5934C6260585C0E064BD1BFDD63836A556CF255DC5DDB9E536
SHA-512:	86798C34B0EE89E2EB178D72C00FEA1499996B3B7AF790A7F21CCE4CC71716BB903023A9A994EC72CD6C0E9157F4EF0C69CABD4EFD320104FEC2C4BB8CECB17C
Malicious:	false
Reputation:	low
URL:	http://www.addesigner.com/images/3bullet.gif
Preview:	GIF89a............. .00.@@.PP.``............................!..Ulead GIF SmartSaver Ver 2.0.,..........l..I..8.....<.B\.... .NR.I@..)0.t4..A.(.....a..$..$.p>Z..CYpH.........b!.N..3.....OC......k.;=~+-/1.!#%J...;

Chrome Cache Entry: 344

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	511
Entropy (8bit):	4.622942488641842
Encrypted:	false
SSDEEP:	12:trwdU/gKup+tiHD6x2wiHDXx2wiHDi25iHDV25iHDc:tYU/duItq68wqMwqt5qw5qc
MD5:	A229E3CF403001E92CB1EA441D880E54
SHA1:	1C4518AA326967D4BC424FD14C65D1A3276B5100
SHA-256:	952AC1A0AE07753F75FA27BBE483E71C43B29DF5C160AAE33BB447C0E5B5E751
SHA-512:	6B30EE9BECA55C6FC5A92330CEB5AAA3F70E1B1A166A6CE7FF0059F619F525673B8160D2A6D35E6D6B35CB52FDB547F3EEB8F960B2E7356C4C2C699115FEBA66
Malicious:	false
Reputation:	low
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect x="11" y="2" width="2" height="20" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="15" y="6" width="2" height="12" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="7" y="6" width="2" height="12" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="3" y="10" width="2" height="4" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="19" y="10" width="2" height="4" rx="1" fill="white" fill-opacity="0.3"/>.</svg>.

Chrome Cache Entry: 345

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	181
Entropy (8bit):	5.06529992919399
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHPKlxaUUNNdfNfxHA8:tI9mc4slhLJ9hC/vmI4PKl7UDdffH8i
MD5:	ABEE7BCA48C50F4966F1D6E4052CF829
SHA1:	B35BD0A701086E7500C813DCCE03BCD5C59039D5
SHA-256:	3F7E5963F0493D7D23A5BA1F6D28E6198CE1B5FDD125DB31BFB6A05B3503CD59
SHA-512:	9C2CD42413CAB6830E7424F61752A1F8F2C1DB3DE2B3EA089D350FD5B28DA57D225DF819C16CAF970372EDCB3CE86FEF27327589C526CDC1253A4730EAF1F9B5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M21 6H3V5h18v1zm-6 5H3v1h12v-1zm-6 6H3v1h6v-1z"/></svg>

Chrome Cache Entry: 346

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 347

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	441
Entropy (8bit):	4.728282635502173
Encrypted:	false
SSDEEP:	12:t47N9U/vmRR9jRxmHRLkCsL9IxflMwhT2fLrYVMdubTci:t4jU/vJHNklhIwwhqgVMEci
MD5:	B15A744B5ED7D5D8A779E411F513E24C
SHA1:	F156A8D2F03E4FFB072FF7D2241DDCA911664B0E
SHA-256:	43B5B8ECC8D128FDD2DF4366CBE6FDD8ED0067DC117438290F59F5A0FFAF715D
SHA-512:	3381EC00EEE98892B08E5C47929FFC27129A92ACF486CC33DB7E7DE1128ACBADDCCAA75115A40BC6A91B97CA39FCB42E0661341BF433299720C80DBB3EDBFF20
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/bell/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 20h4c0 1.1-.9 2-2 2s-2-.9-2-2zm10-2.65V19H4v-1.65l2-1.88v-5.15C6 7.4 7.56 5.1 10 4.34v-.38c0-1.42 1.49-2.5 2.99-1.76.65.32 1.01 1.03 1.01 1.76v.39c2.44.75 4 3.06 4 5.98v5.15l2 1.87zm-1 .42-2-1.88v-5.47c0-2.47-1.19-4.36-3.13-5.1-1.26-.53-2.64-.5-3.84.03C8.15 6.11 7 7.99 7 10.42v5.47l-2 1.88V18h14v-.23z"/></svg>

Chrome Cache Entry: 348

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	207
Entropy (8bit):	5.099700989024115
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4u2U6PTkY5fUgNOJNu:t47N9U/vmR0kTkYZUg2M
MD5:	D9BB191D7185DB63EC946298DE7F9AF9
SHA1:	CDE1E715177A55F8F7C9CE0BB1766481EF215D8A
SHA-256:	40829C1F6F101B7122AB0D9EDC7A4EDB6368448259A74831C2FAD26D865DD90F
SHA-512:	7B8B57273161CA8EC550E7C04AAFA34A8C48CE66FBFB5123C48F84AE4A5C9B43C5820EC5D00E62B12D3AFF946ACCC4F1501132FDB034A9E39F83B18E6A7CDAB0
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m11 7 6 3.5-6 3.5V7zm7 13H4V6H3v15h15v-1zm3-2H6V3h15v15zM7 17h13V4H7v13z"/></svg>

Chrome Cache Entry: 349

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	266
Entropy (8bit):	4.797247518898457
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4vTPA2ofxCn3WYkRMY3yDRN:t4noU/vmRLPAHfxCbNOI
MD5:	A3B684329F6257A0A9FF54F185991799
SHA1:	8CA96BBB54E47B3546606E810DA940D7CD0CFDE2
SHA-256:	BA36CDD43863E4654A0FF2098293481E10D1F8EB5F6A68EB0008243EF2BB0213
SHA-512:	FE402EAB94C58F58871F990D2EC95EDA862F6CB89DD65504DC20743D2E7578A7BE4D5BE648012D5BDF32E4FB518759911D5CF7C8E67F77EC7D36571F86176382
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M15 5.63 20.66 12 15 18.37V14h-1c-3.96 0-7.14 1-9.75 3.09 1.84-4.07 5.11-6.4 9.89-7.1l.86-.13V5.63M14 3v6C6.22 10.13 3.11 15.33 2 21c2.78-3.97 6.44-6 12-6v6l8-9-8-9z"/></svg>

Chrome Cache Entry: 350

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	182
Entropy (8bit):	4.96992883918624
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHPaWzKU2IoQfaUXxRTnRuOZ1zcN/:tI9mc4slhohC/vmI4PaV99HUXxqW1wN/
MD5:	54F9C6C4788C54E7AEB26919C5C2C24F
SHA1:	3883C98E351DF0B47E9B79CD4403073914311327
SHA-256:	CFBF09095F6C33F6917DEEAD4CBAD82F4BE3F538E528980C0300A5B6A3409B3A
SHA-512:	CE0772B5CF958706075AE2C05DF1DD26A272909589113F57050A344DF6776F97505368733C57047554AE59CCB5B32213A973880E7D00A3108B589A40E61670A5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/open_new/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M21 21H3V3h9v2H5v14h14v-7h2v9zM15 3v2h2.61l-6.68 6.68 1.41 1.41L19 6.44V9h2V3h-6z"/></svg>

Chrome Cache Entry: 351

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	531
Entropy (8bit):	4.517890434004929
Encrypted:	false
SSDEEP:	12:t4tM65EVlUbal0YClBze4gKCqRaMcmt+BOgyy9e5PhwWU:t4tMMbS0TBAMdc1QgcdrU
MD5:	D8AB2A29ED285F79AF11A250D2536BC1
SHA1:	B394B72270ECA95336C5780E1F97C0CAD051C0FF
SHA-256:	AAAEF8F774A256E546C1178D91EBBA27FA0F7A7420D7E54DCC4F26D6DD7AB31A
SHA-512:	3F376435B591FCB848D4D259A0DA5BAE15EB8583572C00C6E3041DDB64C1756E48A333EB6144042A45D23E2A45DB623CD78DB5467579051CA674F93C8964FCE2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.5 3C4.11929 3 3 4.11929 3 5.5V21.5C3 22.8807 4.11929 24 5.5 24H22.5L26.7474 28.5741C27.5513 29.4399 29 28.871 29 27.6895V24V5.5C29 4.11929 27.8807 3 26.5 3H5.5ZM8 10.5C8 9.67157 8.67157 9 9.5 9H22.5C23.3284 9 24 9.67157 24 10.5C24 11.3284 23.3284 12 22.5 12H9.5C8.67157 12 8 11.3284 8 10.5ZM8 16.5C8 15.6716 8.67157 15 9.5 15H18.5C19.3284 15 20 15.6716 20 16.5C20 17.3284 19.3284 18 18.5 18H9.5C8.67157 18 8 17.3284 8 16.5Z"></path></svg>.

Chrome Cache Entry: 352

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/pagead/lvz?evtid=ACd6KtxY3CFK7ixpUrPS1lHwPzur3pDlcy5Zx0XqW5-1SNwkUeWh7D5el9IkjJktOWkkVZqep_r9QLpklLTHUpqEuRl6bh8UmQ&req_ts=1719959102&pg=MainAppBootstrap%3AWatch&az=1&sigh=AB9vU42uXSefyeBj-5rvOh-8JgRegagJxQ
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 353

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 190
Category:	downloaded
Size (bytes):	156
Entropy (8bit):	6.650410872541994
Encrypted:	false
SSDEEP:	3:FtteaAGWYwYmRUSSe4IUOzH9VeAmhZQ/bBuxbpn2r+5mUoie:XteLGW4q4xsVUvC6bOxt
MD5:	FBC2775234437DD2C58863E8373EBAA9
SHA1:	0B23CF47A0F171C27E2B07990F3BFA40E15A9619
SHA-256:	D225A228F29FD357589ADD5EAFB2522DA0C0B0D94D85815D716E42131CAA0763
SHA-512:	67D49F875EADE759B44C15554AE4E6920296C0EF2DDAD6762D11275BA0BB47C6BAB0B98B16832C72C58A95C8EBB81B449613BD9FB17E7EA98AC2D537EC948F17
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/arrow_up/v2/24px.svg
Preview:	..........-.... .E....@[0.E}.....3...../..7.....Y.6....T.,...k.#...n..Q....9..1...6p....U{...6.X....2J..Hv=.7Z.=......DM'M..@..?{.+'.4\oM?..C....

Chrome Cache Entry: 354

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 196
Category:	downloaded
Size (bytes):	177
Entropy (8bit):	6.682184363593431
Encrypted:	false
SSDEEP:	3:FttrruJud5zPoThF1lMqmToHjLSXl2CIz1YCeKorPOcqKOUOiGtnA1N4L6lll:XtXuYaRxHjsllMuCeBbOCOFiGOKL6/l
MD5:	E1C15F504C3C1A82889F28563AE28742
SHA1:	52379B0B96178953BB86E3B734107C7125AB56F9
SHA-256:	C77AE894296A623A75F9303A53A5EC9E814B39799D11F63187524B15D44839EF
SHA-512:	422BF0048739A8D5CD1201E0ACFE87C466566D6AA92EB95BB91D514FB89B13762F2678293DB005AD4AA94EFF09AAFAC0FAB03971DA88E17C58C59745B6EAB62F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/subscriptions/v7/24px.svg
Preview:	..........M....0.._e.=.G.i1.z..w[CV.Q4M.o...\|.2..,...6M....X.1.y6..I.9K...u...g.z.u..^.g".$Y$.@3X...9.&..].?........y...!9.M...c. ...l.(.1.....<.1.i.e.(x.....9....u......

Chrome Cache Entry: 355

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	364
Entropy (8bit):	4.5307728192386865
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4wFs0BIiV2DTFVRrZjih9gCqzOfHLVlZ7YoPV3aXtJlIXtz3:t4noU/vmRwFs0BIXDJHNjihnbH7Z7YOn
MD5:	9EDB56221B5B65134491A96453F9407C
SHA1:	323001B08DF5DF6962781334D9BDDDBDCFC9E0AA
SHA-256:	5E020ADF6151A4814846CB07EC91E9902C8860F1445F5F9321C5FDD81A06F102
SHA-512:	373A6F0D45A1B955DF57858CCCAB05503FA31962BA47D5FDE6F5039D8E7E7FF72EF7B2FF4BA261E80C7DA630016BE142C4E319FE7CE66B0FCE9C317E77016053
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 3c3.31 0 6 2.69 6 6 0 3.83-4.25 9.36-6 11.47C9.82 17.86 6 12.54 6 9c0-3.31 2.69-6 6-6m0-1C8.13 2 5 5.13 5 9c0 5.25 7 13 7 13s7-7.75 7-13c0-3.87-3.13-7-7-7zm0 5c1.1 0 2 .9 2 2s-.9 2-2 2-2-.9-2-2 .9-2 2-2m0-1c-1.66 0-3 1.34-3 3s1.34 3 3 3 3-1.34 3-3-1.34-3-3-3z"/></svg>

Chrome Cache Entry: 356

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	338
Entropy (8bit):	5.081456518478992
Encrypted:	false
SSDEEP:	6:tI9mc4slbWKJAOBUtTxGjxAOyVov2RtNI8MobBWDyewVR2OsXdfDRUEubz5JM:t40rOQojGOsov2fCy9GyekahDRqzc
MD5:	344BD6131BA252992E7B43DB8ACF0EF4
SHA1:	AE9762E6C8B2582AC06B72E1056F93394F1E7528
SHA-256:	F45C028690DE48FA989AA16E372FA580806B168114800CCCF6BF967C1B73C7E8
SHA-512:	49EE13BAF8D5E0847DDC4CE980F33540EE405784432E6027310224290FC1B9D835B80D8F9C7CE02D5A2692411B9B230BE65FF8DF6F63CCD92287D109673C1888
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <circle fill="#FF0000" cx="12" cy="12" r="10"></circle>. <polygon fill="#FFFFFF" points="10,14.65 10,9.35 15,12 "></polygon>. <path fill="#FFFFFF" d="M12,7c2.76,0,5,2.24,5,5s-2.24,5-5,5s-5-2.24-5-5S9.24,7,12,7 M12,6c-3.31,0-6,2.69-6,6s2.69,6,6,6s6-2.69,6-6 S15.31,6,12,6L12,6z"></path>.</svg>.

Chrome Cache Entry: 357

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3935057531723584&output=html&h=600&slotname=6407757917&adk=730000781&adf=3025194257&pi=t.ma~as.6407757917&w=1200&abgtt=6&cr_col=4&cr_row=2&fwrn=2&lmt=1718826837&rafmt=9&format=1200x600&url=https%3A%2F%2Fscamwebsite.com%2F&crui=image_stacked&fwr=0&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1719959089126&bpp=2&bdt=1929&idt=2140&shv=r20240626&mjsv=m202406260101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8551177816592&frm=20&pv=1&ga_vid=24467173.1719959091&ga_sid=1719959091&ga_hid=1438390344&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=863&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44795921%2C95334508%2C95334524%2C95334571%2C95334581%2C31084926%2C31084184%2C95336522%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=229817751475580&tmod=322256741&uas=0&nvt=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CEe%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=2198
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 358

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 359

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (546)
Category:	downloaded
Size (bytes):	73086
Entropy (8bit):	5.578119991739716
Encrypted:	false
SSDEEP:	1536:M4RPu6GVeBPTnHmn6A5rkRVv2R6kmx22SuVof6:7m/VemHkRVt02FV9
MD5:	41B7F4E453BF63B44D9BA994F385F29B
SHA1:	2FFA93FC745C35E3E9030FC49D612DD9459694AA
SHA-256:	16B94599FEE5E716287A71A56F4D4672B90282D4F99C3EDD0B8F98F83540277D
SHA-512:	1972A20817AD0947ACA876E6A2B79C028D29C2F4870BD73958550A80F457FCA61878DA9723163E65310549A37934F95157361A608CC28AB4A38ECCE596BB841C
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/captions.js
Preview:	(function(g){var window=this;'use strict';var j4=function(a){a.isActive()\|\|a.start()},qsb=function(a,b){return b?a.captionsInitialState:"CAPTIONS_INITIAL_STATE_UNKNOWN"},rsb=function(a,b){var c=new g.SR;.c.languageCode=a.languageCode;c.languageName=a.languageName;c.name=a.name;c.displayName=a.displayName;c.kind=a.kind;c.isDefault=!1;c.j=a.j;c.isTranslateable=a.isTranslateable;c.vssId=a.vssId;c.url=a.url;c.translationLanguage=b;a.xtags&&(c.xtags=a.xtags);a.captionId&&(c.captionId=a.captionId);return c},ssb=function(a,b){var c,d,e;.return g.G(function(f){if(f.j==1)return c=a+"\|"+b,g.z(f,g.AC(),2);if(f.j!=3){d=f.B;if(!d)throw g.dC("gct");return g.z(f,g.hS(d),3)}e=f.B;return f.return(e.get("captions",c))})},tsb=function(a,b,c){ssb(a,b).then(function(d){d&&c(d.trackData,new g.SR(d.metadata))})},wsb=function(a){if(!usb.test(a))throw Error("'"+a+"' is not a valid hex color");.a.length==4&&(a=a.replace(vsb,"#$1$1$2$2$3$3"));a=a.toLowerCase();a=parseInt(a.slice(1),16);return[a>>16,a>>8&255,a&25

Chrome Cache Entry: 360

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	789
Entropy (8bit):	4.4194384212801
Encrypted:	false
SSDEEP:	24:t4takfIIJEGBA8rb0CklxqTaccoUZ/ES2mM:kGGSVC8Giu
MD5:	B552B4C85CA1E2238DB395B9A49411FF
SHA1:	D8D5C6B8E8253732F1DD1CCE2F8C4F3C1F1BB1BE
SHA-256:	949AF1BF7118AF3ADA0A087666E6E763CA627DBEFB1EB2E3B978210CFE808FBA
SHA-512:	62DC81FC15CE62AFD2C22C36A05C5C5CC6BB4E5231C8BDF11143CFA8C950A6A161B693BE7B93AF6BFD9A0C348D6B4A49D9956706029E1307135B4D191869D837
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill="red" d="M11.13 1.21c.48-.28 1.26-.28 1.74 0l8.01 4.64c.48.28.87.97.87 1.53v9.24c0 .56-.39 1.25-.87 1.53l-8.01 4.64c-.48.28-1.26.28-1.74 0l-8.01-4.64c-.48-.28-.87-.97-.87-1.53V7.38c0-.56.39-1.25.87-1.53l8.01-4.64z"/><path fill="#fff" d="m12.71 18.98 4.9-2.83c.41-.24.64-.77.64-1.24V9.24c0-.47-.23-1-.64-1.24l-4.9-2.82c-.41-.23-1.02-.23-1.42 0L6.39 8c-.4.23-.64.77-.64 1.24v5.67c0 .47.24 1 .64 1.24l4.9 2.83c.2.12.46.18.71.18.26-.01.51-.07.71-.18z"/><path fill="red" d="m12.32 5.73 4.89 2.83c.16.09.41.31.41.67v5.67c0 .37-.25.54-.41.64l-4.89 2.83c-.16.09-.48.09-.64 0l-4.89-2.83c-.16-.09-.41-.34-.41-.64V9.24c.02-.37.25-.58.41-.68l4.89-2.83c.08-.05.2-.07.32-.07s.24.02.32.07z"/><path fill="#fff" d="M9.88 15.25 15.5 12 9.88 8.75z"/></svg>.

Chrome Cache Entry: 361

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	4.915607757159961
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHC/TFicZHLpsTLXcA1:tI9mc4slhohC/vmI4CbFxIcK
MD5:	D4FE0331328D6ADCB2D4B88D0996420C
SHA1:	BF668E3964C3BCD702650BB20E28FD303296124F
SHA-256:	616130E8A2BE44E0FDCFA1D3C7661172F2FED1471597820F8A3CAF01F4FBE2DF
SHA-512:	16DA047FE96F9808AF68EF19E64736114FD3620127964A86973A86401375E128CA99F6C937D1123AE4FD10EEE5079B24BF6C721028582EDEE37176254EE5E3D9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/chevron_left/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M14.96 18.96 8 12l6.96-6.96.71.71L9.41 12l6.25 6.25-.7.71z"/></svg>

Chrome Cache Entry: 362

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3752
Entropy (8bit):	7.9462953650922685
Encrypted:	false
SSDEEP:	96:MGK5H+AthKuFv8OfNqf3o050jjjwq3t6ioNNq:Mb5H+AT1lfFqt50P/dINY
MD5:	A34EF11F1F6337BE831801DF814577E9
SHA1:	49500BADF52A9D96CF9971201433D32D2E766984
SHA-256:	F629D774ECAD63124EC9CC9A6160D4870563645E1DCAD6A0E2908EAFBCD33726
SHA-512:	9AEFC5455412F66A873E537DD0C2A331729F2B22DABC4E0BE2BC412A7893E9B0F698F0EBFC5B348EAFECFFE86163CE455AE974783B56D03F544C29E0EF272F76
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....=.....^.>Q..J#...8....`-..K<...O._Y.Wt.....J>`\|.<............s.c.....'.....D.C.j.._@..W.O.O.?.{.~......3P+..Wx..Q.5.N.[....H.3...[....vG..Q05S..^.~.S.....$....@d.\.1.k.BX.......m.._........H.%...6.P..X4}....z.Gj.9.Y}...\..........u...m...Us...+.J(.A../g.........ts..............gS..bG..w....~ej.3.(;L.G!q..~..0....T{Y....P.m.3.R.u6....q....Mk5K...^k...\|'...@.H1&I...1r^.]...N.N.U..0Z._py..8y............9.......%[...z....2.."./1uyFG&C.j..R.....xxL..d...R...nm....}.\....Z.......5<Q`&...o......K.q.#s....C.h#.Z...........E...#....%..D#..../D@....~,~.?...o....u`..f..h!...HY..nk......[.n....o3.iRc.xL..J....Q.`...?..".o.o.!.KJd..z/O"6.....;......Q.+_..j2.0..V...xjf...}G....\.1..Wc@....&p..7.W.b...C5...5.U..N/.X&.......N.....c..89.0...8,D.).^G.-P..t..d.m..".>g..{V.y.U.Q]H...^.k:P.C....l..;...ol.z..b.bWk..bP.....&Nd.x...k..LEp...L...-...........\t....D.n....{ql.`....iW...M.fT,.M.(9.%.Z.c../.K.V...Or...O.2G.v..SG.K...*

Chrome Cache Entry: 363

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	729
Entropy (8bit):	7.234317148111566
Encrypted:	false
SSDEEP:	12:6v/753iqqqqqqqqqqqqqq8apRTOe/RlzL064pdYTCrQQXHth6oHS0iwPuOb254iu:u3iqqqqqqqqqqqqqq8sdOe/RBL0NpdAM
MD5:	F6E5A9215D13C4AEF31D125532228410
SHA1:	CF2AA58CCDDC2B414CAD4A28394EF66CD2AE9FFF
SHA-256:	8639DB0DBAA462E7BC11D7884C3A6CB84275DC988811CD2BFAF5CF2E65BC0FE0
SHA-512:	2468FD00812806E44A2EB1AEF7F408D643DCFBEE655802E69B62DCE21F84AE3EC6E50F6612F332CB35FF53EC4792104C27DFD6DA36327FBEADE9D7FABC7C3412
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...................cPLTE.......................................................PP.......... ..........@@....``.00.......pp........tRNS.@0 p.....P..`....Y.....IDATx...Ub.0.EQC.(.2..W9%......Y...eg.1..c.1H.C..$z.. ?......M......R.. +.}.}t_0.m#.....T.....gje.9.7u..%.7...y..Q.D.Z..^vW..x......(.G..!R^..)..j4P...B.(H...igA(j.d...?...,.....DM8ZZ........:8...uCG.'...P....\....=..\<.\......=c.......H..`...+YD_.H...6vHa ur.....&.vJ.@.R.p..Ni.@.)..i......#.vJ.@.)...tJ......+.......-.S#...u.....}-.\.N..{.....m._.A.."n)..l...a...CmzV.ma....-D..K.....3...x...VH.i...V.2..u2..).J..cU4.....VX......\BC.`...V..:.(:.Y.(..h.O.\..dcC.Q..:..~Lm..&..{v]z0....9=....-/.O.g.1..c.1D..b..;...F....IEND.B`.

Chrome Cache Entry: 364

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	364
Entropy (8bit):	4.5307728192386865
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4wFs0BIiV2DTFVRrZjih9gCqzOfHLVlZ7YoPV3aXtJlIXtz3:t4noU/vmRwFs0BIXDJHNjihnbH7Z7YOn
MD5:	9EDB56221B5B65134491A96453F9407C
SHA1:	323001B08DF5DF6962781334D9BDDDBDCFC9E0AA
SHA-256:	5E020ADF6151A4814846CB07EC91E9902C8860F1445F5F9321C5FDD81A06F102
SHA-512:	373A6F0D45A1B955DF57858CCCAB05503FA31962BA47D5FDE6F5039D8E7E7FF72EF7B2FF4BA261E80C7DA630016BE142C4E319FE7CE66B0FCE9C317E77016053
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/location_point/v5/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 3c3.31 0 6 2.69 6 6 0 3.83-4.25 9.36-6 11.47C9.82 17.86 6 12.54 6 9c0-3.31 2.69-6 6-6m0-1C8.13 2 5 5.13 5 9c0 5.25 7 13 7 13s7-7.75 7-13c0-3.87-3.13-7-7-7zm0 5c1.1 0 2 .9 2 2s-.9 2-2 2-2-.9-2-2 .9-2 2-2m0-1c-1.66 0-3 1.34-3 3s1.34 3 3 3 3-1.34 3-3-1.34-3-3-3z"/></svg>

Chrome Cache Entry: 365

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	552
Entropy (8bit):	4.4354471280851335
Encrypted:	false
SSDEEP:	12:t4tM65JA+KtIeDBmtMsZkvRP8x0iup0LELeyw5c+QU:t4tMMJALH8MsqJUtDoie+QU
MD5:	A57A74B00971D94B2CCA706685A9FBF6
SHA1:	8F24E8FAB4F92F58C23D451C3C8C6966C3A7B3E2
SHA-256:	2C13665427EA079DB0437534FD5C3F43E144D4707F129267C56F0352FF582EC0
SHA-512:	0A64ACB3697FBF5EC6A6D8DC46587E1A2A044F43D8DE0168F733B6276101F4A623D494E250D0C60A9E76C556ED288014530401A7C42F00F6CF5CBBE4AAD30748
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/shorts-share/v2/32px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M17.7375 5.26556L28.6745 15.2624C29.1083 15.6589 29.1083 16.3422 28.6745 16.7387L17.7375 26.7356C17.0958 27.3222 16.0628 26.8669 16.0628 25.9975V21.6217C16.0628 21.6217 16.0627 21.6217 16.0626 21.6217C9.92564 21.6217 6.69114 23.9378 5.1615 25.5968C4.80726 25.981 3.97329 25.7343 4.00015 25.2125C4.22558 20.8321 5.86088 10.8892 16.0626 10.8892C16.0627 10.8892 16.0628 10.8892 16.0628 10.8892V6.00368C16.0628 5.13426 17.0958 4.67898 17.7375 5.26556Z"></path></svg>.

Chrome Cache Entry: 366

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	231
Entropy (8bit):	5.077824311544019
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4G93gkIk6wy7Ndc8:t47N9U/vmRk3gBnV
MD5:	455D4C6D10C83A1C3F62725C71F25BB9
SHA1:	61F339D3E56879E1B4680D7229BF8B88BE9CBC8D
SHA-256:	7834ADC55F57ED2863E9F0BF3D4944458EDD13D85F3207F7FE8BA2B2BFFBA464
SHA-512:	C0C7A0378A799AB3D867B4FD63D6133564E1BB35C797D59DA621B235A73C18D4B90E308731CD09A1731175212D75CF9CDA31DF539230048BA60108A1069E8673
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/flag/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m13.18 4 .24 1.2.16.8H19v7h-5.18l-.24-1.2-.16-.8H6V4h7.18M14 3H5v18h1v-9h6.6l.4 2h7V5h-5.6L14 3z"/></svg>

Chrome Cache Entry: 367

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	335
Entropy (8bit):	4.848782964528927
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4K+tlq2LwkzdO+iEuUDXpzBX6xjU5SWcYISJ2gLGpnQEVRp3:t4noU/vmRxxVzMHUFXMU5SWclS4AuQQv
MD5:	9F4AFB8B5C116B8C96AD6A0BF69021DB
SHA1:	DA12B34E4705D9875C8CC67EFE0058698E537A78
SHA-256:	61B18613E4A65CB373AED90B59C16370DF577861FBA91C5029B2BFFE6E14EAEB
SHA-512:	3839B172D4A4C0A1D07829DF590C8B3F780DCED47C3C17C79B2B07E71DA35CAED39338E4FDF5A7D6A38C327DB481CD7C41BC601EABB9E01F6FED5D02BE083FE2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M18 5V2H6v3H3v6l3.23 1.61c.7 2.5 2.97 4.34 5.69 4.38L8 19v3h8v-3l-3.92-2.01c2.72-.04 4.99-1.88 5.69-4.38L21 11V5h-3zM6 11.38l-2-1V6h2v5.38zM15 21H9v-1.39l3-1.54 3 1.54V21zm2-10c0 2.76-2.24 5-5 5s-5-2.24-5-5V3h10v8zm3-.62-2 1V6h2v4.38z"/></svg>

Chrome Cache Entry: 368

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	241
Entropy (8bit):	5.137838894912298
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4hNpDCbNBdANjcmgTLMAqY:t47N9U/vmRhNpCsYNLzqY
MD5:	2BEBB6EA2A23E97C81427106D9722D4E
SHA1:	38DC371BFBF0DCA768A702E89ED00877F34621E7
SHA-256:	4C4B6AEA58201D13608EEB52B960E052E9C7D677B7281CAF0E6B713A3E2F223B
SHA-512:	F4BE381ECF6616EB82FC4B139BC67E6EEE70B1B71581150FF4E69E09E0B6EDA8729536413CDAAB38642F0616944089F96A3DA8369B56870D1118E91B67C2FEC9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M3 3.03V21h14l4-4V3.03H3zM6 6h12v2H6V6zm7 9v-2h5v2h-5zm0-3v-2h5v2h-5zm-1 6H6v-8h6v8zm4-2h3.99L16 19.99V16z"/></svg>

Chrome Cache Entry: 369

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	151
Entropy (8bit):	5.020176826819927
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHqJtxTcR+NkzlFWttxci:tI9mc4slhohC/vmI4ItxTcM6D0Ci
MD5:	ABCB07D23B020A9464DD70FA10C0D9D3
SHA1:	38EC787E83181D5907C71676C2C4A21EF4D5B72D
SHA-256:	D721B8669114FBCDA49F612047DC68869FD406A82AC9BAA420ECF35FFEB05C2E
SHA-512:	5218BB6A31E50DA5F42ADD673562C03B970C77FC85E9037ECB85ED9B005015EB754017B27351F04DA7622FBE2EED0CC4CCCF82CF73F6EFAD6C1665789AFD9E51
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/copy/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M19 6v15H8V6h11m-4-4H4v16h1V3h10V2zm5 3H7v17h13V5z"/></svg>

Chrome Cache Entry: 370

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	165
Entropy (8bit):	4.914928959846639
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcH0wvl7MJJTTtX+nIVrtXypS0:tI9mc4slhohC/vmI4PSTTl+n8le7
MD5:	A64DE7E4B8E12D0201357414E2ED618D
SHA1:	2DEE7B56217F540787CA82D03AB6171D08E23BE1
SHA-256:	BA0D0E7E11AC72A801626946BE1B061DD59D990DD33077A37A08149917A7E930
SHA-512:	A947F3619B2150621376D0CAC479AB6F522CAE7E651A917565050A4BC5ABCE6E60B3652DAC4D1CF90C0255FA09FC8EAA9B31EB6EF6A23D2E31AB497C86AAACB4
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/list_play_arrow/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M15 19v-8l7 4-7 4Zm7-12H2v2h20V7Zm-9 6H2v-2h11v2Zm0 4H2v-2h11v2Z"/></svg>

Chrome Cache Entry: 371

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-8002465305224946&output=html&h=90&slotname=3303653530&adk=110678862&adf=2436630289&pi=t.ma~as.3303653530&w=728&lmt=1719959150&url=http%3A%2F%2Fwww.addesigner.com%2F&wgl=1&dt=1719959141385&bpp=2561&bdt=2621&idt=5145&shv=r20240626&mjsv=m202406250101&ptt=5&saldr=sd&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=4420800425693&frm=20&pv=1&ga_vid=641628429.1719959147&ga_sid=1719959147&ga_hid=776677513&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=268&ady=955&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44795922%2C95330414%2C95334511%2C95334527%2C95334571%2C95334579%2C31078668%2C31078670&oid=2&pvsid=911835154683008&tmod=1496751293&uas=0&nvt=2&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=d%7C%7CeEbr%7C&abl=CS&pfx=0&fu=0&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&btvi=1&fsb=1&dtd=8634
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 372

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	648
Entropy (8bit):	4.380679704687561
Encrypted:	false
SSDEEP:	12:t4noU/vmRfhAZY75jQOglOfYcgUKa1rTdnSbzUMoElCInaGLKphWXpVn1:t4oU/vCOa75cOglOfWUzddnSXkUaGLYS
MD5:	3DFBA54305D790EEE8D1ED17694E3796
SHA1:	8D0B1DDEE9A50BA3AAA040F11859C2543325C97F
SHA-256:	BDBC7B228AFDC12B4290348DEE94F07413262E4EAC967AB91946823E45710748
SHA-512:	0FDBB45059C9036353594B3D4F5CEDC908AA5FB332B594D66C654821BFF09E50C739E274B744CFCD5F91ACF2B39D190E2B32EC84697EA9F04FB6A2720F9E7291
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m3.15 3.85 4.17 4.17L6.16 9H3v6h3.16L12 19.93v-7.22l2.45 2.45c-.15.07-.3.13-.45.18v1.04c.43-.1.83-.27 1.2-.48l1.81 1.81c-.88.62-1.9 1.04-3.01 1.2v1.01c1.39-.17 2.66-.71 3.73-1.49l2.42 2.42.71-.71-17-17-.71.71zM11 11.71v6.07L6.52 14H4v-4h2.52l1.5-1.27L11 11.71zm-.67-4.92-.71-.71L12 4.07v4.39l-1-1V6.22l-.67.57zM14 8.66V7.62c2 .46 3.5 2.24 3.5 4.38 0 .58-.13 1.13-.33 1.64l-.79-.79c.07-.27.12-.55.12-.85 0-1.58-1.06-2.9-2.5-3.34zm0-3.58V4.07c3.95.49 7 3.85 7 7.93 0 1.56-.46 3.01-1.23 4.24l-.73-.73c.61-1.03.96-2.23.96-3.51 0-3.52-2.61-6.43-6-6.92z"/></svg>

Chrome Cache Entry: 373

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 374

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	219
Entropy (8bit):	4.761347757859317
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4T7HVaar7D93JnGLXeSV:t4noU/vmRT70arpUXNV
MD5:	366B82D23090B2A9BA414E77922CE82B
SHA1:	1EC32038785C0B7E0591E910D0BCB5BDA337F37D
SHA-256:	BF44FEFE6CEA80E391078F4DC8DA39A1CC34704B2B88F2D6402E3CA9F6DCFA47
SHA-512:	2DD8EE2C7DBD8CD86C99210C733B33CDE0FD32CAF813E55A74E4C007241CC261EF32B3C091924AE735C50D9A4C80E82DCC38FA643185BF0434B57005C5FAC6F8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 2C6.5 2 2 6.5 2 12s4.5 10 10 10 10-4.5 10-10S17.5 2 12 2zM9.8 17.3l-4.2-4.1L7 11.8l2.8 2.7L17 7.4l1.4 1.4-8.6 8.5z"/></svg>

Chrome Cache Entry: 375

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3752
Entropy (8bit):	7.9462953650922685
Encrypted:	false
SSDEEP:	96:MGK5H+AthKuFv8OfNqf3o050jjjwq3t6ioNNq:Mb5H+AT1lfFqt50P/dINY
MD5:	A34EF11F1F6337BE831801DF814577E9
SHA1:	49500BADF52A9D96CF9971201433D32D2E766984
SHA-256:	F629D774ECAD63124EC9CC9A6160D4870563645E1DCAD6A0E2908EAFBCD33726
SHA-512:	9AEFC5455412F66A873E537DD0C2A331729F2B22DABC4E0BE2BC412A7893E9B0F698F0EBFC5B348EAFECFFE86163CE455AE974783B56D03F544C29E0EF272F76
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/JmcA9LIIXWw/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLA-sVJGX5CmBao1iTU9Bd3X9Ud5Xg
Preview:	RIFF....WEBPVP8 .....=.....^.>Q..J#...8....`-..K<...O._Y.Wt.....J>`\|.<............s.c.....'.....D.C.j.._@..W.O.O.?.{.~......3P+..Wx..Q.5.N.[....H.3...[....vG..Q05S..^.~.S.....$....@d.\.1.k.BX.......m.._........H.%...6.P..X4}....z.Gj.9.Y}...\..........u...m...Us...+.J(.A../g.........ts..............gS..bG..w....~ej.3.(;L.G!q..~..0....T{Y....P.m.3.R.u6....q....Mk5K...^k...\|'...@.H1&I...1r^.]...N.N.U..0Z._py..8y............9.......%[...z....2.."./1uyFG&C.j..R.....xxL..d...R...nm....}.\....Z.......5<Q`&...o......K.q.#s....C.h#.Z...........E...#....%..D#..../D@....~,~.?...o....u`..f..h!...HY..nk......[.n....o3.iRc.xL..J....Q.`...?..".o.o.!.KJd..z/O"6.....;......Q.+_..j2.0..V...xjf...}G....\.1..Wc@....&p..7.W.b...C5...5.U..N/.X&.......N.....c..89.0...8,D.).^G.-P..t..d.m..".>g..{V.y.U.Q]H...^.k:P.C....l..;...ol.z..b.bWk..bP.....&Nd.x...k..LEp...L...-...........\t....D.n....{ql.`....iW...M.fT,.M.(9.%.Z.c../.K.V...Or...O.2G.v..SG.K...*

Chrome Cache Entry: 376

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 377

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio
Category:	downloaded
Size (bytes):	6529
Entropy (8bit):	4.679709782974826
Encrypted:	false
SSDEEP:	96:xm6jey1gwRj0yKmn1Z2rUKO5YhhzFEyDeg5n:M6CIgwJ0xm1wS5Yvzt
MD5:	BFC8E752C754A9B52D6BD4A963A7B9C3
SHA1:	7DDEF10D9AD3F43C89164B7DEBBC9CE26512B036
SHA-256:	704A5E15AE1068E4DF52A8BCFF04270EFDAD595CF685E0ECCFF86AB335471A46
SHA-512:	FF6415C30F7839666CE0BDB20FEA71D19630EA75904A4AAD710DC6431604532FBA48CFDA4B326BEAA6502ED727A0A9208DD624A4AC37B7601526BD611D7364BA
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/search/audio/failure.mp3:2f7ae178cedb6f:0
Preview:	... ftypM4A ....M4A mp42isom........moov...lmvhd.............D..T.................................................@...................................trak...\tkhd....................T.................................................@...............mdia... mdhd.............D..T.U......"hdlr........soun.................[minf....smhd...........$dinf....dref............url ........stbl...gstsd...........Wmp4a.........................D.....3esds........"........@.............................stts....................stsc.......................hstsz.......................~.......k...................a...c...[...Z...c...`...d..._...^...\...e..."....stco................udta....meta......."hdlr........mdirappl.............nilst.....nam....data........error....cpil....data.............pgap....data.............tmpo....data.............(.too... data........iTunes 12.3.1.23....----....mean....com.apple.iTunes....name....iTunSMPB....data........ 00000000 00000840 00000063 0000000000004B5D 0000000

Chrome Cache Entry: 378

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 640 x 25
Category:	dropped
Size (bytes):	1220
Entropy (8bit):	7.625736564373093
Encrypted:	false
SSDEEP:	24:l76w/BB3U6cRmYASMo9ax1zUmtA0kheOKyVjYOg64knD+5KhcWdeh+A7U+rPX:ltpKFMLSMoM1wEkz8O36Khn++P+r
MD5:	F5B3BB8735280E8113FDD64AABB99676
SHA1:	8B0C5C1F3920E99CCD0794A6CCE03A4DB956CEBB
SHA-256:	A5B1657F055C156B05E1F44855F47FFFF5C8795996C129CB44CC3FF5E6D72E18
SHA-512:	5D592F672E5DC0A4809E9B3ECE7E7D8990957C1EEAD9E9B92622007C0715511C0526F12A82DF0E6851FF6E1878B287782F9882B92496E4D2E457F5FB2A2E9620
Malicious:	false
Reputation:	low
Preview:	GIF89a.............uuuDDD......000...... ......eee......UUU...ggg..........................................!.......,........... .di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL....z..............M...l.....6...U.%...h.......W......(..#.".`..b...e.........E..."..s.\|..$.xp#..(.z&x$..-..#....../n..'.&.....".......&.w...v...%......H...I.N0 .`.....<L.i..d..9.&......9....C....(.X@......y.....g. P...v.......L...A...%.D..n.U1..a..l..@AP..D%.:TD'.b.x.....>...S.C....r.....iI......<..-;b.... ... .J....j..A.9..i..mP...?%.(.[T......tW.V..... cK.E%..d.f...$9...w.I.)..l.k... @`..&.."f..r2D.K....:..d.^?.@,....0!...).S.v.UL"... .~.AfRy...m.I.....&.g.5U.+...KI$4.@..92KF..g.l..u.#.q..y0..pOm.#...xc..pT.B..F...M2.rN..`....$..e......NL.) ......#S.9.."..y.I6.$.8.Q..I"&.....V.@\.8r..<.0.p$...W...9....o.....GB.....G..6.m...i+.UIc.An).]h.I!_..@....y....n.mB^....).)..m..JX.Q.fl.m'X8.w.y..d...,.].[W......;,..n..wX.0. ... z,e........J.\|..I...[.YL..U._.L...}.TBV !.......o8.b....

Chrome Cache Entry: 379

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	484
Entropy (8bit):	4.378279176071406
Encrypted:	false
SSDEEP:	12:t4noU/vmRhChc2LX7pC52k+N4ezW0qw9DIRSY:t4oU/vYqVG2kCCw2Rz
MD5:	2739BB8635C4631E78B240C8B83D102A
SHA1:	38B8FDB6A8444513D18378E789547B377CA46DDB
SHA-256:	FDE8C85A62FB4E29C3CD902167B791D0D06C3AEEF85C8DDDF3212287FB771A0B
SHA-512:	A2A5F5AF163E487943608C9646A6F30BF870607FC7753C14621BC9592483713D9E2F4B40A63030AC820F56E310D3116E78E3E959AD869E9F77FFE9EC6C133CD8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/gear/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M19.56 12c0-.39-.03-.77-.09-1.14l2.19-2.13-2-3.46-2.92.83c-.6-.48-1.27-.87-2-1.14L14 2h-4l-.74 2.96c-.73.27-1.4.66-2 1.14l-2.92-.83-2 3.46 2.19 2.13c-.06.37-.09.75-.09 1.14s.03.77.09 1.14l-2.19 2.13 2 3.46 2.92-.83c.6.48 1.27.87 2 1.14L10 22h4l.74-2.96c.73-.27 1.4-.66 2-1.14l2.92.83 2-3.46-2.19-2.13c.06-.37.09-.75.09-1.14zM12 16c-2.21 0-4-1.79-4-4s1.79-4 4-4 4 1.79 4 4-1.79 4-4 4z"/></svg>

Chrome Cache Entry: 380

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	4754
Entropy (8bit):	7.95530785559178
Encrypted:	false
SSDEEP:	96:A77QyuTlwi1WgKqJhrj6A8gx7z105PFQiXIKzsMirR6MZy2TJtRHqLL:IEXdK29xV0RFX/GrPZ90L
MD5:	41E6497F70D1ECA8A71A62A90629ED25
SHA1:	8F565F34D16988DCD4C119C22C41E45598DEE968
SHA-256:	5089D7B8CFAA7155DDB25118AE2FFC76FCFDC694369D4EEE287662171A231AB9
SHA-512:	EDAF2D3DB4448438D8305DC103FB8D0E2AB800C9DC34E3EEBDA4D052D14FFCAE928217239784CB3DA9E2767793FEAD7C6C3EABEAD1885322DFFEC93E18DC3F95
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ~...pD.....^.>Q..J#...8....c.!...F..=(........g..[g..'.W..O...o.?1.O..X.K.../}kjG......o.."?........;O...#.......7......~.?..C.o...g....>.n.G.....W............G...?....G........].g.._......1.s.,.a.q.rl..0P.9.W.CM.Y..J......(\.......nm;t[.5.u..kv8.].............z~.L..._.b..q`....."(y.2.E.....$..$..'._;.&.:Y..XiBVMXI_$...M..^'1.....R..Yf..........Yv.....m.G...&...$............x...6."%9"..>.m....M.P....z...`....(...RX...Na.Y...;.......^U..u!...W..P.1g.....L.b.!c...q..=.._v.,.:i_h.-..9.. ..[.g?HR.....8..~.....].G{....<Y.e..=.K.....D4y..?N......De'. ...Ppm.:.H..Wl#TS.-.TZ.\..{u....;..T)..+..8....ZO...58.qv.fW+..m.'....I....o!4...(.4...Nn3.....c.... ...=.....:r.X......f..Xr.4V....7...z.j.>N.2....<..to.S.......,......1..f.. /..zD....5...n.cgY..@....S. ...y..2.).3\LO.....w.rGQ...~.V.M....C..N<....y)Xo..w.^/E....u.i.>..$.~"!.n}L........s..v.Zy....B.X.Uw..E.CP.p..3}.J...<ww;.s..w...152^..\Vl..F._.w-.C/.S...k.BZ...j.=.....F..3X\

Chrome Cache Entry: 381

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1430)
Category:	downloaded
Size (bytes):	278881
Entropy (8bit):	5.637718268727953
Encrypted:	false
SSDEEP:	3072:A4sblLiFbev8vNiQVj14ejoLFMYs9MzeOWDvRSynbCVff2vSeR:6bp8lijLCYBzeOWDEtVfO9R
MD5:	7DDBE419B9150C930C273C92EBF5622A
SHA1:	E33B5AE412569C4613A1DA683B590EDB46267887
SHA-256:	3F6E10538B256796D857F4640478E426DD88426D8DBEA4727C1BC9A7B2E88CA4
SHA-512:	521CD22108C5394320394A27CEA53D1E19DA9F1BE47F4507EE418EE57A3582CB772028F66AC9E27A138D3E2D2AC777EB4B9F924155E568118BCFA69F12C68E7A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/www-searchbox.vflset/www-searchbox.js
Preview:	(function(){'use strict';var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function da(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var ea=da(this);function v(a,b){if(b)a:{var c=ea;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 382

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1921)
Category:	downloaded
Size (bytes):	434853
Entropy (8bit):	5.596572510115611
Encrypted:	false
SSDEEP:	12288:cNRjzaHTwdVvPgTqFUgCPXkeMlE8lLO9AUGQAtszFOhzuho3uZCL5a5qtP2TJPkz:cNRjzaHTwdVvPgTqFUgQXkeMlE8lLO63
MD5:	3D613C3BE4C4CFA80C8F586A8AF5CE26
SHA1:	5D3377F7852851ABFE2852F6A408F85A826FD7C2
SHA-256:	80596E6D8AECFDC13671424C614CA8AC8BCACF41D11757D90E9D0DD36A3520DE
SHA-512:	40B0A2A0A1DDF1DA7391EADAE9254DD76F9E805E7DC55417DF7773D7703E2C8D66A825CDB51197D93BBDF7345E6BD012301389E75C34B3EABE0428087324B860
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202406260101/show_ads_impl_fy2021.js?bust=31084926
Preview:	(function(sttc){'use strict';var r,aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ha={},ja={};function ka(a,b,c){if(!c\|\|a!=null){c=ja[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ma(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ha?f=ha:f=ca;for(e=0;e<d.length-1;e++){var h=d[e];if(!(h in f))break a;f=f[h]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ha,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ja[d]===void 0&&(a=Math.random()*1E9>>>0,ja[d]=da?ca.Symbol(d):"$jscp$"+a+"

Chrome Cache Entry: 383

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	511
Entropy (8bit):	4.622942488641842
Encrypted:	false
SSDEEP:	12:trwdU/gKup+tiHD6x2wiHDXx2wiHDi25iHDV25iHDc:tYU/duItq68wqMwqt5qw5qc
MD5:	A229E3CF403001E92CB1EA441D880E54
SHA1:	1C4518AA326967D4BC424FD14C65D1A3276B5100
SHA-256:	952AC1A0AE07753F75FA27BBE483E71C43B29DF5C160AAE33BB447C0E5B5E751
SHA-512:	6B30EE9BECA55C6FC5A92330CEB5AAA3F70E1B1A166A6CE7FF0059F619F525673B8160D2A6D35E6D6B35CB52FDB547F3EEB8F960B2E7356C4C2C699115FEBA66
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_outline/waveform/v1/24px.svg
Preview:	<svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect x="11" y="2" width="2" height="20" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="15" y="6" width="2" height="12" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="7" y="6" width="2" height="12" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="3" y="10" width="2" height="4" rx="1" fill="white" fill-opacity="0.3"/>.<rect x="19" y="10" width="2" height="4" rx="1" fill="white" fill-opacity="0.3"/>.</svg>.

Chrome Cache Entry: 384

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3975)
Category:	downloaded
Size (bytes):	160905
Entropy (8bit):	5.595762074168817
Encrypted:	false
SSDEEP:	3072:wTZfkfhWD3UhN89YBMSm4WEevNHNOjkvvag68Ktl97lLdXt6GSlSzhRi8Gyr5S:wTZfkfhWD3UhN89YBMSm4iFHNOjkHagp
MD5:	327CF4D8B11C4D84C75E3DF0E5C754C3
SHA1:	78DB99FB03B6F566DE92E4CEFD6423DE08292FB9
SHA-256:	D2E7DAA936E287222C7E7B03EDBF84EFDB4A667FA1D621DA460A473C4A82EA7F
SHA-512:	949D42DAD897379046ACA1C6A6CDB702E37398E0DEF307F0E2BDE3166F825FA258F1CC1B73876B15D5405F0376815B7B7FEE37F183E3F56F62EFC3FA97CD4F04
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var p=this\|\|self;function ba(a,b){var c=ca("CLOSURE_FLAGS");a=c&&c[a];return a!=null?a:b}function ca(a){a=a.split(".");for(var b=p,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b}function da(a){var b=typeof a;return b=="object"&&a!=null\|\|b=="function"}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(Math.random()1E9>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(arguments.length>2){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&Function.prototype.bind.toString().indexOf("native code")!=-1?ia:ja;return ka.apply(null,ar

Chrome Cache Entry: 385

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1210)
Category:	downloaded
Size (bytes):	78674
Entropy (8bit):	5.41270458083184
Encrypted:	false
SSDEEP:	1536:s/Q5U5FBINDiV3dRyGeweFfBJ9YDf4URzeFVhMqqp4kjIW:fekN4Sib
MD5:	1CBB61ABC8A412C3B3451158D00F9815
SHA1:	43E5658968BE86252D48B4C431C2B595129D7077
SHA-256:	FB87B198456171C713437E7E440CBD94D72F263AD190F12CD9720A06FC540D0C
SHA-512:	24169C0D0004B8FCF8CF198FEBC5CFBB35C2C3F33FF46B852F3FEDA5796E0ADE6141CB87F394A4D5D7910E3F8C8A959D56CDC60CBCE19B7F8B898C65048A9386
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/webcomponents-sd.vflset/webcomponents-sd.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length=="number")return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function q(a){if(!(a instanceof Array)){a=p(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this);function r(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};/*..Copyright (c) 2016 The Polymer Project Authors. All rights reserved..This code may only be used unde

Chrome Cache Entry: 386

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 387

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	380684
Entropy (8bit):	5.188705236149285
Encrypted:	false
SSDEEP:	1536:ayi8ZHMCbS/SgVABEILJPptpJKztM6oyi+MOn4y2Ox5juDEnXrDJc7MsByDh+TzR:ayi8ZiSgeB1SoyJufvJckQohN
MD5:	FCF38A570817128BEDD9A271806528E8
SHA1:	038412FA53DF5548B81A3CC419E9C827CB85A040
SHA-256:	05B373AECBA402509752252B9CFFF73A326769B38D05E8BF3FA6125AEF203A4A
SHA-512:	C2F3CB77230DD0F858EA625EA671A4BA55CE6F6E26C0621954E609F942A01CFBFB08AA0D93E534E6C6E8FFEFFA33906F638ACCE92BA426FD8F2353256026E95E
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/71059424/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 388

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	331
Entropy (8bit):	4.856840067199089
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4bib4Gt/6qnFJ+5LZ9i3JvGUuWLV1iDQ38:t47N9U/vmReb4s6qbmqvVU8M
MD5:	F7D38F81D0E430C65C517D480A82DEC2
SHA1:	61A70D1586756FC2570A6DF4B440C10EBE3312B0
SHA-256:	D63DF87F634535A4731B74CD9893C855373507C3250FF485E982442DAB0380BA
SHA-512:	273652346614D9F8DE8B0AAB7BD13D4F5EBFBA1D27338D87E4F27DA58925FA9699E0367C9C0B74BCF6AF95AD5B9A48ECCEE0710F1593ABB96B705A551D202FE9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M13 18.93V21h-2v-2.07c-3.9-.49-6-3.8-6-6.93h2c0 1.93 1.36 5 5 5s5-3.07 5-5h2c0 3.13-2.1 6.44-6 6.93zM12 15c1.66 0 3-1.37 3-3.07V6.07C15 4.37 13.66 3 12 3S9 4.37 9 6.07v5.86c0 1.7 1.34 3.07 3 3.07z"/></svg>

Chrome Cache Entry: 389

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	266
Entropy (8bit):	4.797247518898457
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4vTPA2ofxCn3WYkRMY3yDRN:t4noU/vmRLPAHfxCbNOI
MD5:	A3B684329F6257A0A9FF54F185991799
SHA1:	8CA96BBB54E47B3546606E810DA940D7CD0CFDE2
SHA-256:	BA36CDD43863E4654A0FF2098293481E10D1F8EB5F6A68EB0008243EF2BB0213
SHA-512:	FE402EAB94C58F58871F990D2EC95EDA862F6CB89DD65504DC20743D2E7578A7BE4D5BE648012D5BDF32E4FB518759911D5CF7C8E67F77EC7D36571F86176382
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/share/v9/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M15 5.63 20.66 12 15 18.37V14h-1c-3.96 0-7.14 1-9.75 3.09 1.84-4.07 5.11-6.4 9.89-7.1l.86-.13V5.63M14 3v6C6.22 10.13 3.11 15.33 2 21c2.78-3.97 6.44-6 12-6v6l8-9-8-9z"/></svg>

Chrome Cache Entry: 390

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (739), with no line terminators
Category:	downloaded
Size (bytes):	739
Entropy (8bit):	4.982024876095791
Encrypted:	false
SSDEEP:	12:WWkW8Kd11i/Kd1viCcdxCRp8NDuDO5JuDOv3Kd1OLF6Kd1+inKd1IsKd17QKd1nx:WyoGKn3Qp8NKOWOvOOpx+FUDx+W
MD5:	9ACE9CA4E10A48822A48955CBD3F94D0
SHA1:	1F0EFA2EE544E5B7A98DE5201FB8254B6F3EB613
SHA-256:	F8FDBB9C5CDCEB1363BB04C5E89B3288EA30D79EF1A332E7A06C7195DD2E0EC4
SHA-512:	25354AEECB224FD6D863C0253CD7AD382DCE7067F4147790EE0CE343F8C3E0EFB84E54DD174116E7AD52D4A7E05735039FA1085B739ABBE80F9E318E432EED73
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/cssbin/www-onepick.css
Preview:	.picker-frame{width:100%;height:100%;border:0;overflow:hidden}.picker.modal-dialog-bg{position:absolute;top:0;left:0;background-color:#FFF}.picker.modal-dialog{position:absolute;top:0;left:0;background-color:#FFF;border:1px solid #ACACAC;width:auto;padding:0;z-index:1001;overflow:auto;-webkit-box-shadow:rgba(0,0,0,.2) 0 4px 16px;box-shadow:rgba(0,0,0,.2) 0 4px 16px;-webkit-transition:top .5s ease-in-out;transition:top .5s ease-in-out}.picker-min{position:absolute;z-index:1002}.picker.modal-dialog-content{font-size:0;padding:0}.picker.modal-dialog-title{height:0;margin:0}.picker.modal-dialog-title-text,.picker.modal-dialog-buttons{display:none}.picker.modal-dialog-bg,.picker.modal-dialog.picker-dialog{z-index:1999999999}sentinel{}

Chrome Cache Entry: 391

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 648
Category:	downloaded
Size (bytes):	407
Entropy (8bit):	7.45328316636602
Encrypted:	false
SSDEEP:	12:XqAYTUEFK9PiOMgzytYGihRpYmGl+fJt/:XqAYDwwWytY7zpYl+hd
MD5:	BBA03FF1E21344B63F924C6EF669A2C5
SHA1:	E5C2F69B57C1D4E1045219B4684E05363641B9A2
SHA-256:	C0998AB7AB783486683AFCDB590AD3903881A7FB39C8B2FBB73B367365F10ACF
SHA-512:	D4C7E27DB1252689861C81B3DC54F38F489DD996855FB1D05F0B96786A24EBF1959F354C4486F4D1E73AC79BC281993011FA68EE9436B68048287EFFB9C1E601
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/volume_off/v4/24px.svg
Preview:	..........4R.n.@...Bw>......rp...J`....6..__Pi.....}...m.}?.....c.[......e.)..}..4._/..0...\..._.!Q"u..z}{L.........0.....29.n.T ...-e2H9..tt[.BuVx.`#C2Re....!m.$....4ch%.2..&.ld...,...lH..H.Q`.c.E).*d.....^...J.Xj<TA...IhKA.(YI....I.u.d.h=..\|.....+.+.......3.....D..Wqj(.\QtT..2.R.7.a..!7........=h.V.....7.2%..........-.!.sL6.z.w...T...r..y..P#.nM-hD.s2.(..4d....F@.......v.}\|..........\|.....

Chrome Cache Entry: 392

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16614
Entropy (8bit):	6.016750126817914
Encrypted:	false
SSDEEP:	384:OKHGQlWtRqUDpdiWVdUaEk+8Jbhp8O3SosuhgJK+wK0:zhlWtTDpcQpEkLbAkSosuOJMr
MD5:	E2959CA7B0A404B2A19A866DF3D64091
SHA1:	0B62A8072BDCA6C66D6B5ED8B785C5EA72D5841B
SHA-256:	B25EB82F1458050F67DED449534948CCCA24FA646EEBE18A8DB49AE4513742F1
SHA-512:	D700F794B6E0A83576E8AF2C6D6E3AA54FEE50BE77FB24DD6F3985B290917D26C374EF83B2AD0B1D1B394D32BFFE526FF244BFD342249F981169D354CF76C5B3
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20240626&st=env
Preview:	{"sodar_query_id":"X36EZpj6F_qWxdwPzfmPsAU","injector_basename":"sodar2","bg_hash_basename":"dxMqtuO9QfQ3IwLpzYuTdghGsPjmqbjttN7KHczDD84","bg_binary":"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

Chrome Cache Entry: 393

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	211
Entropy (8bit):	4.924417291349329
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4mqUEUKFI8mRKuw6Y8:t4noU/vmREaI8Kw6Y8
MD5:	DBF72CAC4571210883C7748A6E8B9C71
SHA1:	984DFE134C779FD952ED67C1CEAB88D14FDCF122
SHA-256:	62714BADF737F2D069588724ADE1CB6B79AEF821C432875C614997E351F76341
SHA-512:	AD53CBDD55542FCCD83387639BAD59372949B1933F603B44EB6859F1EB344B8F2F11241EC954628F9025E88CB308F67051C408151800176B45F49A398140744E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/clapperboard/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m22.01 4.91-.5-2.96L1.64 5.19 2 8v13h20V8H3.06l18.95-3.09zM5 9l1 3h3L8 9h2l1 3h3l-1-3h2l1 3h3l-1-3h3v11H3V9h2z"/></svg>

Chrome Cache Entry: 394

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 395

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2214)
Category:	downloaded
Size (bytes):	14953
Entropy (8bit):	5.445567946414759
Encrypted:	false
SSDEEP:	192:swlxEwSEsYJLo7D/42IFKLgBBwKne8WIO9udcd9jtus91GxiqhYNo:vJJLID/DIFKQWKnjWI5JsfoR
MD5:	6084F9DDE4DA508B0DD3876D3A560286
SHA1:	900498368C448FCA108B3E259BABD629A3430A96
SHA-256:	30171BB40DFD302F11FE055CBAE26C0AFA1A1066412962CFB37C027B64E90AD4
SHA-512:	6679B32664BD0885ABB1223EC2AE7D8B4C7C448452F554B3EDC28B05AF73EB979BDABAC598F5C95E83629A8CF6C9DEEB1B57FA19CE719F2CCE36F66187832F5B
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/network.vflset/network.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof n&&n];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var p=ba(this);function r(a,b){if(b)a:{var c=p;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&l(c,a,{configurable:!0,writable:!0,value:b})}}.r("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,h){this.g=f;l(this,"description",{configurable:!0,writable:!0,value:h})}if(a)return a;c.prototype.toS

Chrome Cache Entry: 396

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	324
Entropy (8bit):	4.519025420255455
Encrypted:	false
SSDEEP:	6:tI9mc4sl5RINAvxm6lzjQewRNGBvLl1ZX1i0dTnUMSdR+trpYmQkDEJM:t4vqNAJXpQewC5pDpU6VYFG7
MD5:	DDABFA57FD16BDBA85E2FD30B2B0FEFF
SHA1:	9FC8CD1D34223C54E0C86922F2DE68AACBE6E57A
SHA-256:	B60F66156BC26031D7F02CC7CAAA6D7277D56F1821ED55280F67446AA3643640
SHA-512:	1AD6D890CADC461D74821065143FBE1AFC882C106ED646F41CB2BC12D00D6FCC6E9C68C7FAA7F260F2FABAFF68689EA0DF48CEA54FF40AF505B4A632D67F1B5B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path d="M13 9v2h7V4h-2v2.74C16.53 5.07 14.4 4 12 4c-2.21 0-4.21.9-5.66 2.34S4 9.79 4 12c0 4.42 3.58 8 8 8 2.21 0 4.21-.9 5.66-2.34l-1.42-1.42C15.15 17.33 13.65 18 12 18c-3.31 0-6-2.69-6-6 0-1.65.67-3.15 1.76-4.24C8.85 6.67 10.35 6 12 6c2.21 0 4.15 1.21 5.19 3H13z"></path>.</svg>.

Chrome Cache Entry: 397

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4493), with no line terminators
Category:	dropped
Size (bytes):	4493
Entropy (8bit):	4.4856643879376055
Encrypted:	false
SSDEEP:	48:YLGjj7OnR8vh614S8hTWsWsW2Y8uYY2FeXN4CqhF9DIXqzHHDzSz7zNWotzeWotO:4iaELTPHhFpXOXpan9RZQ
MD5:	C7AC086AAF139A1E36D3187561E7183A
SHA1:	D451DA2C6096DC316FC78B14CE1C11AFE03841A8
SHA-256:	86BE1C9A3C5CDC119F4993EDB521970476AAEB7E79AA6B484C2C29585286234A
SHA-512:	76E974068475E5D8B4B8D71DCF078DE42C8E5DA653058DFA720DE704445348522DCC947BABA4AF05E825B3E08E546EB806EE2C27577D45ECD0A70A5DC68866A8
Malicious:	false
Reputation:	low
Preview:	{"v":"5.9.1","fr":60,"ip":0,"op":125,"w":180,"h":96,"nm":"SubscribeAction_Container_LightTheme","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Sub_Container 5","td":1,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":1,"k":[{"i":{"x":0,"y":1},"o":{"x":0.05,"y":0},"t":60,"s":[90,48,0],"to":[3.074,0,0],"ti":[-3.074,0,0]},{"t":84,"s":[108.443,48,0]}],"ix":2,"l":2},"a":{"a":0,"k":[249.943,-54.365,0],"ix":1,"l":2},"s":{"a":0,"k":[168,168,100],"ix":6,"l":2}},"ao":0,"shapes":[{"ty":"gr","it":[{"ty":"rc","d":1,"s":{"a":1,"k":[{"i":{"x":[0,0],"y":[1,1]},"o":{"x":[0.05,0.05],"y":[0,0]},"t":60,"s":[156,64]},{"t":84,"s":[120,64]}],"ix":2},"p":{"a":0,"k":[0,0],"ix":3},"r":{"a":0,"k":186,"ix":4},"nm":"Rectangle Path 1","mn":"ADBE Vector Shape - Rect","hd":false},{"ty":"st","c":{"a":0,"k":[1,1,1,1],"ix":3},"o":{"a":0,"k":0,"ix":4},"w":{"a":0,"k":2,"ix":5},"lc":1,"lj":1,"ml":4,"bm":0,"nm":"Stroke 1","mn":"ADBE Vector Graphic - Stroke","hd":false},{"ty":"fl","c":{

Chrome Cache Entry: 398

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 399

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	2321
Entropy (8bit):	5.234601639605703
Encrypted:	false
SSDEEP:	48:gBVgMg5bOxDZXmR6MHgJ66/TbHYbH0Sl9Wc:gBVgRbOxDZXmIMAJ68b4bPbV
MD5:	D5983D44F7590D28BF33108EE3825F13
SHA1:	26D0C222D22A8FC7926A1922F27BCF49F33AB40D
SHA-256:	6D68EFB7212D16E3D9D1A7368D09614850EF32DFA98B17ECFD56E91BC489B2B2
SHA-512:	1EDB8772D1D9EF7DE272A706FB2A6CAE61B27FCEF6B3EA2B950C88DCDA58A4797A9AEA55893667403F44F8F1C524C0E4B14EDBC552B5076D5F2DF5F8395647F7
Malicious:	false
Reputation:	low
URL:	https://scamwebsite.com/
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>FREE ROBUC</title>. The style.css file allows you to change the look of your web pages.. If you include the next line in all your web pages, they will all share the same look.. This makes it easier to make new pages for your site. -->. <link href="/style.css" rel="stylesheet" type="text/css" media="all">. <link rel="icon" type="image/x-icon" href="favicon.png">. <style>. body {. text-align: center;. background-image: url("Robuxb.png");. color: black;.}..block {. display: block;. width: 100%;. border: none;. background-color: #04AA6D;. color: white;. padding: 14px 28px;. font-size: 16px;. cursor: pointer;. text-align: center;.}...block:hover {. background-color: #ddd;. color: black;.}. </style>. </head>. <body>. <h1>CLICK THE BUTTON FOR ROBUX</h1>. <h4>*sadly fake ): roblox owns rob

Chrome Cache Entry: 400

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 468 x 60
Category:	dropped
Size (bytes):	8415
Entropy (8bit):	7.933009385669305
Encrypted:	false
SSDEEP:	192:qSMLXwI5DDWi48BrSXv2NE0wv2Y1skGxMk/dKIGEim:q/XwI5z48BrSEnwOY1sx70IGRm
MD5:	934BC0E46FEE16162FD270FB1AFB0B6F
SHA1:	07E1B139869A9AA6280D62703339D3F582792711
SHA-256:	18DEF5FD6E99E0E43DFA5BF2F497A2492B97F3A767135144758917554A0E8AC8
SHA-512:	B71DD421CAC63C9BE119E491CFD3682697344BDD594F26829E566421AC5C342FF614A7E58A7A2A24A37C6A1E17806DA8181F7FBD0953B1E7FD219084D4654DE4
Malicious:	false
Reputation:	low
Preview:	GIF89a..<....................ff.33..f.f.....f3f33.ff....33...33..f...33.......ff....333fffff3....f..f..f!..NETSCAPE2.0.....!.......,......<.....!.di.h..l.p,.Cm.x..\|....pH,....7k:..t:ZZ..v..z..xL6y..z...........v....z....x....4.....D............q.?...........B...`.9........5...M..........6......9..8..........5.....................:....5................#Y1a....hC...8,...])e.@...q..P..(..d...HF.X#..Z......GG........6..F.46j .R.+..xrd..5nb. j#..`....3.J.'.2U;.\.ab=N.k.).g..4.-.0.SmTE.f..,...".c.%b...e..J.B...qR.....}q...TG.l...."....q D..1_fs.w/].k.S.3..]....."`S1......:S.Y..e...#.~!b\.z......e....Q..J.>2...).ZV...LuX..S.w...^R..g....z.Y..\|.n..l.).]....[W.J..E7...k..C...m..4....F.q.x^L(...u..".4C.`..DYD[.X..)..f=..t...Y_#>.#5.EIP2.....`.{K.y.U...m....V..d.(..U{......D.]O9#Vm..`f)..p.....v~.T(~..e.s.9..SB..".i..6.5].<.J K..Wp..E...b.i...d.L..X.g...'..c..c.P..X....<....kt.6.?t.;V....w.uC..+.A ...,...nh..........R..b$...0,1.......g.

Chrome Cache Entry: 401

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	2542
Entropy (8bit):	7.915019608970432
Encrypted:	false
SSDEEP:	48:I40gavsIBc3DK+Sdw/+PMIe4CixgkOnwbDgslBIaLSCBzEqNooVFBpEZ:IXvEIwDK5K+PM+CEgk4s/IANzrNooVF6
MD5:	FE9834FF45E282E2BF6B8F192D356B3E
SHA1:	23BAC03AB33FB66B78BCBCDA9E36786D83BCD14A
SHA-256:	499870AE03BC691D0191F7B6B9F0C3ACAF0552DC82A2A47EF8A088A7F6FD7129
SHA-512:	D98DE887FF6DB8B6406C9BBC897EF80CB4A2F3AD3CC843944E77E8DD013CA5934CF18C3E57E5638A5B904808DC99AB120D391F2D2BB678DF8C04D662DA91F649
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/Bx51eegLTY8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDnxVk8Ys7btiIk02iFYM_HN4SLSA
Preview:	RIFF....WEBPVP8 ....p0.....^.>Q..J#.#...p..el.T.6.r[w..!.M.y.>"......7.o...!f..^.3...3.{...~.~....U.w.-..y..>.".d..6.bo-...........0.l6..Q..\|.../?z..Q.u;UyA...+_..V!..{K...E.\| ..xf.n....%.i.W4..'....6R..z>...$.2.'.. Q..U..p.......T.$W.a.Q..(p.......tw...ruC...Bs...h!E..n.5...'....p. Qj>j...{....l...-..4.T...B/.\.5....F...".<Q....Y...].W}K....Aj\|..G....i..k..K..n..H,a..Z...\.....I...c}.S..R.]..>0....... ..8.fv..hy@D..N...(_..............L..hNu.O.sO..._.2q:0W........r.X.?..W...0....\._C..%I!P...9j2...y.g......-.....5.F..].V..j$:]...C@..M.j...!..Y..:...M6*...lv...{.}h.......... ..f...k.[.b!rM.B6+....J...G....?o.{..../N.g..G+.z.{..^P........X.......<...E..qG.c_(,. .}.-K.l.^...3..+..[...?..K..]\|.T....9&r.h..:.M.R...........+s....5[>..A..$.........b..T..}a.EF.Y....Z.qne..........yJ...,zR.:\|mk.)......H.& ... 2..v..I...kw.g....f..L.Ut.. z.S%.zt.....6x.......4..YHO......<.T..9G...oX....X..[.8..A&....gn..f......t.#.&...Q)..V#.u.............A!5.g..q

Chrome Cache Entry: 402

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1134
Entropy (8bit):	7.313244282036759
Encrypted:	false
SSDEEP:	24:9oOYeZ0C/BfRCDqBgS4m4j+6x2MPo9rvICggHU1:/WaV8+4S2N+kpgHW
MD5:	EC4ED4E1CC9A76A7B189D26085879805
SHA1:	448544CF30EB7B0331B301333B3640EF28559C1E
SHA-256:	E396F451145C79948D6F4C07E7A242E98DC4635EC0FF7924539B0B900103D02B
SHA-512:	98D1F9A203A35B5434959AB1546634D6F9FE53EBE6CA58C3148911E5334A114E8827728FBF5565FD9F7A52C41114D50A3F438576C8034E585B11D78FF116EF6F
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d....%IDATx...?.]E....K..,,4K.Sh.M")."l I.l.K....... .@l.Me....!!..D.......5.hpU6..n..3wf.}.....%..s..y...3..................................................................................................................>.%].6&...t6.......R.nf.JZ..a.NM..W...A.k%.JH:5......f...Y..+.....G..5^.&.f..q....G...R3...g..A.....E..AJRm.".wq?..%}Y..nm...t..o..$I.}..b"~yWK.....=/...>....W...R...%..z.l_k....=..;.w.G..Jk.......h..^.....k.Ry;'7.G..wqo...k..vP..\.....mX.....kQ5.%.$y...s...^.x.t.G...aC../..$...h>?2.".xN..Z.Qg.9.....B...yaI.....Y..<...vm]w.......\|.;....L^.)ZXsL......~J5..S........<j(......U...}..s..\.w..R{......6..........U...t.>.z,.[\/...q.k.#.a[....{..;...i....gC....v.&.t.wm.i.o;,.......'h....W'.ooIzz.k..1..^I.$...Q./.sy..).3.9r.^.#.(O.i.Y3{...)I.j..?.j.-.../.`./X\k.y.^P....K.k.Pt...N...d.L%+4:bE.f.......p..fvyl.)S...9z..Xc.XO&.....}.w.ff.J.H..j_.uL/.rj.....K[u=..GR....3s.h...W..K.!S....N

Chrome Cache Entry: 403

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	3718
Entropy (8bit):	7.886912704438469
Encrypted:	false
SSDEEP:	96:O4XC5FcW7WvuVREiTDtqRtCHcgO5cD5IaRGPXfrKD:PCjd7WWVREgBYFv56SmuvG
MD5:	981B2DC40BEEDD859A8F58D45A594162
SHA1:	58DD4F3E8E287BD9B7A7F4A3285D205B07BFB783
SHA-256:	910AC923A71CFD684F8DFC02AAE8A7ABF1421D5193AC8D8C7827538A933028B2
SHA-512:	F2FD1D1381EEC740AF533328AB788FF46EA7ADAAE39573D1185153A8F3D4F8D41745D3C98F82AB14A770EAC64913340E84190BE1BB46120B6245471C8FA6260C
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn0.gstatic.com/shopping?q=tbn:ANd9GcS40zGalLP8-81e3sSk4eKcsFNMLB_f4mquAVI0ZMxKQ79vyHdtIXSQmlNZ7T5mtEpwseig0DU
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777..........."........................................A........................!..1.AQ."#6aq..2Bst....3b.....CRd...cr................................-........................1!A.".23Qaq....#...............?..j=..V6r.\.".y.....B8..G.MZ....x.F...n........<W.4.J.n..+."8.?...o..%1..[....Xd7.>.`.......{W.q>.,...n..b.p..z..X...<y..<U.D..gl.o...zSk.Ph..7^.yH.8.}g......onc...s..5..BW..a;.h.....Z.Z....... .v.#...#89..5.qN..\|.......:......#Qr...4..#y....jK>y.[......x.\...i.E4.....yL'............{R.D').....K.*,.o.GR-\..N=.....W......w..)..K.hDmsx..x.e<>..qo...`".'.ln......LS.&F.+....~.p..5...P.. .t0..'....@..4Z.qO....Rj.%K.%E.S...R.<g..Q....%.....).$.....N..n}"...Q........On......~...X.D3MI..>.K{).g&G....-.D9.O4...4.G...NCeXu..)`CR.....2..9..............5..k.j../...:..mz..".V8..?.X&..T...-t....)=(.:..h..k....

Chrome Cache Entry: 404

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	341
Entropy (8bit):	4.845385553639442
Encrypted:	false
SSDEEP:	6:tI9mc4slhohgqWHiA4vmI4lAwuQgQIVY6Wqx5Xt6M0TRcmQTIfyuETUrNmraXnPt:t4noOAvmRHnIq6JmM0T7QobETUrsOpk8
MD5:	A83C2EDA381FB2C86BE7587C8D53C330
SHA1:	ECA052D4491403B1731D2FA36176CDAA4DD76F11
SHA-256:	B011A7CD5658F11324619697CE2EA15178B057622074AE6CB687A0E95D978EC2
SHA-512:	03C807382DC1320EFE94B3B47F30988F9153DDB655245139ECF40D90C97760FBCCFB117933736137BA4280D8964896B0ABBB64278BDA324A75BA7CD27557FDBE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/fashion/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><path d="M12.5 6.44v-.5C13.36 5.71 14 4.93 14 4c0-1.1-.9-2-2-2s-2 .9-2 2h1c0-.55.45-1 1-1s1 .45 1 1-.45 1-1 1h-.5v1.44L4 13h2v6h1v2h1v-2h2v3h1v-3h2v2h1v-2h1v-3h3v-3h2l-7.5-6.56zM6.66 12 12 7.33 17.34 12H6.66z"/></svg>

Chrome Cache Entry: 405

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (829), with no line terminators
Category:	downloaded
Size (bytes):	829
Entropy (8bit):	5.399322818161697
Encrypted:	false
SSDEEP:	24:4HksBVq5/Jz2pRNrBZJuvu8goqc0ioNhc+84+mI:2Gz2bNrVENtmN+0+j
MD5:	696DEFF63967C2954B09D4924F1B35C3
SHA1:	813B96E6DD48CE3A68D53712CC848A7E8C32987B
SHA-256:	CA2F963C2853B92E80A419E6C8AD2359535B0AD695D42098FF6132C51D74BA1D
SHA-512:	377D56531549687C6222D2D6836DF7F466D77CBD26EF0DAB55453A3D042948CEC543FFD718F1EC02BFD32111AE1B2876B3A23E5F9F70650BC9112FED4FFD64FB
Malicious:	false
Reputation:	low
URL:	https://www.google.com/recaptcha/api2/aframe
Preview:	<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="E-H7WFn0_izJ7VL52we70w">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha / try{var clients={'sodar':'https://pagead2.googlesyndication.com/pagead/sodar?'};window.addEventListener("message",function(a){try{if(a.source===window.parent){var b=JSON.parse(a.data);var c=clients[b['id']];if(c){var d=document.createElement('img');d.src=c+b['params']+'&rc='+(localStorage.getItem("rc::a")?sessionStorage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1719959097497');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "");}catch(b){}</script></body></html>

Chrome Cache Entry: 406

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 274
Category:	downloaded
Size (bytes):	216
Entropy (8bit):	6.988845733725833
Encrypted:	false
SSDEEP:	6:Xt8iP5wIgyHsENeL6urRrevnmWbI83TSO/:Xbxw9yME0LFYbI83e+
MD5:	56DE5A68FA5B04C57FB09797F0FD6A4D
SHA1:	1C5CB93F0A8B37E87C11A53B26F6C99E9B43838A
SHA-256:	668FFBDEA12A7C7000CE52593C2B68D03E0E9EFFFA844D925FC67EF768446983
SHA-512:	399460D2CEC57D12F26CB2624C3B813A19E69BE97AF843056EAF4E82DF38C92C5EFAE1B96D202850CE757D82DB7EBF9098CE4179A9D3DA6928EA00E32474DB26
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/news/v2/24px.svg
Preview:	..........M.;..0......k;Nr...hh.....xD.o....B;.~..HS.x..<-.RP../.SJ*9.>.m.1:'..Kw.zy.~~.....K...L>..P?..K..<..{}......cW.....A.D...e ?..:......8p..".....5..Q]..T..j...[O..YZ.uh..e....$O,-.>(.....}j..vw~.....

Chrome Cache Entry: 407

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	651
Entropy (8bit):	4.46155201399217
Encrypted:	false
SSDEEP:	12:t47N9U/vmnqMViiuJJsUG0aLn+djONWQismTRIaZmU5SuX6RfM3FLvTkwWEarekr:t4jU/vns0aLn+djqWQismiaZ5SuKNMFo
MD5:	C34B523D2E0170B739016B744ECD8132
SHA1:	F7CA671F70271C053516306DF1820618C279E657
SHA-256:	55C9BBA2243E3B97567B36A6F9C888A52805E5B6C391168C892D5D024BC01266
SHA-512:	01AE29522C00F9761ECE2399306313A85BB5E65797011BAFFC40BBA54540B718F423F5707A67EB16B43B78EFFE1D40906B4E422D1AF7FCE8BBC0C32A8F9BAF46
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M14 12c0 1.1-.9 2-2 2s-2-.9-2-2 .9-2 2-2 2 .9 2 2zM8.48 8.45l-.71-.7C6.68 8.83 6 10.34 6 12s.68 3.17 1.77 4.25l.71-.71C7.57 14.64 7 13.39 7 12s.57-2.64 1.48-3.55zm7.75-.7-.71.71c.91.9 1.48 2.15 1.48 3.54s-.57 2.64-1.48 3.55l.71.71C17.32 15.17 18 13.66 18 12s-.68-3.17-1.77-4.25zM5.65 5.63l-.7-.71C3.13 6.73 2 9.24 2 12s1.13 5.27 2.95 7.08l.71-.71C4.02 16.74 3 14.49 3 12s1.02-4.74 2.65-6.37zm13.4-.71-.71.71C19.98 7.26 21 9.51 21 12s-1.02 4.74-2.65 6.37l.71.71C20.87 17.27 22 14.76 22 12s-1.13-5.27-2.95-7.08z"/></g></svg>

Chrome Cache Entry: 408

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 409

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 800x450, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	39394
Entropy (8bit):	7.995205731003871
Encrypted:	true
SSDEEP:	768:4Z94/2G2SJnl5rHV0draVclh/TSz3DhqMbsItOAHxkllkr:p/2cJnlt1oBlB2zzhbbfB6c
MD5:	475BE0BF53370635D16D69D6B84EC563
SHA1:	E581A6940A42D33EF264C929B05D85E02BF9FB26
SHA-256:	0343517E8FEDE5FF841FC7A4DC53D7D5D09E4F74157331ADDE5B67FE08806492
SHA-512:	6D3813F780D1D89DA715AFC0E247BB1C6C187E9D6B6BAD9D21EFB3CF3DE8D3934307EA3A20062318A7585F1DCF7C1C8903E18A0959376BAB0B45F4FC27038753
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/sb/dQw4w9WgXcQ/storyboard3_L1/M0.jpg?sqp=-oaymwENSDfyq4qpAwVwAcABBqLzl_8DBginqfCoBg==&sigh=rs%24AOn4CLBDzoUQQHE8XWHw2U31Ra19yy-sOg
Preview:	RIFF...WEBPVP8 ........* ...>.X.N.../.2.....M.8._Lr..7...g3.v.B. .An.=..L.........z....W.Ia..P....v...f............t..... +#......W.o.g4....9?..{./....o.....z....#....z..3.[.7...]..R..3NG...y..iY..I.b...t.....amX..K....X....%nY..Of.[m...L.G.W/.A.....}d....%y.U..W.<..S/..^4.A.n.{...m..YZ9.sl..m].....@0.-....S{........>.p.b...2..g.p...........y....I.-.,..=_..x...Sn...:6.XAQ.D..?....U...u.._.nH..-f...@...<.5...s.{tEIO..VI2..=Q.[.t...........iZ.}.....y.....9;zf...\|}.... A$...v...{..9...yH..(..r......5....v.p?....Y&.P.[..to.{....w)=~.\| 9.I...w..&/J.a.Tr........>..R.U.^...}../vEH.............s..z7..8..Q.(.\|.N.R....p....[\|..S+.!V..`.k....M.D.1.e...u..].[..}...=..y)w.IuB...;..{..Q...h....E0-....t.H...;.o.\|...q...St...w.v.4.....;......`.&..0..[[......4.y<....&.-.m.U.$..$.[.x..m.`...%...S.U..~.@...B.! ....$A.d.....\|3..b.,\|..b..+.R..................[GON... ..a..N..yC.I.\|..m#..E..C..i.....oG4S.@...K0.#6..0i..-...^]_..k.m..g5...3...I~v..H

Chrome Cache Entry: 410

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	2134
Entropy (8bit):	5.507213070755754
Encrypted:	false
SSDEEP:	48:8OLNKWMOLNKNFFZLOLNKE3JOLNK33OLNK4RVc+u1OLNKPN0oD:8OLNKWMOLNKXFZLOLNKE3JOLNKHOLNKt
MD5:	81EEF3A68E6EA5131932245EDB5E75E2
SHA1:	06A1E2FE3FEC268FD69122D8B2DA67ABA8EBBF56
SHA-256:	F195EADE4059E1446EEEB8C16C8FDB17A540C2243AE3A37B63D55C4D93971382
SHA-512:	261D5619A6FD2DAA3D125664F0F0B8CA85F6648AA544C3F04ED6489F29B1C8E70106525C3F498826D60F41C83E68C6968B5A51312D31E6CF39EB4EA03E4752A2
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css?family=Roboto+Mono:400
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto Mono';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_SeW4Ep0.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto Mono';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_QOW4Ep0.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek /.@font-face {. font-family: 'Roboto Mono';. font-style: normal;. font-weight: 400;. src: url(https://fonts.gstatic.com/s/robotomono/v23/L0xuDF4xlVMF-BfR8bXMIhJHg45mwgGEFl0_3vq_R-W4Ep0.woff2) format('woff2');. unicode-range: U+0370-0377, U+037A-037F, U+0384-038A, U+038C, U+038E-03A1, U+03A3-03FF;.}./ vietnamese */.@font-face {. font-family: 'Roboto Mono';. f

Chrome Cache Entry: 411

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64698)
Category:	downloaded
Size (bytes):	146532
Entropy (8bit):	5.273634762055897
Encrypted:	false
SSDEEP:	1536:kvSxr+NgOqngKq8f1HDxERsarqhZUsOLFkj75kb8DcEDAjMknjPu+lHlG+9YwTyV:eHEesOLFkj75kb93ZxyM2zZMO
MD5:	4014D049851B4B6EC0BA7EED8872732D
SHA1:	96F2BA0212CCE0FD0A9ED9465B7BE7414FBC17A1
SHA-256:	F885AA9C8EF261689AF96CB5F0896DB880EDB2F6657C390ADCBCFF2F4056BDB1
SHA-512:	C9FFAA9547108EDDD74C785E40CDED6716DE2E557F5AA770E5E919AFD09CDF47A2547CA4561AB2316D3F3806F7C43FE932501A4254B290EF2EC01CB3BAA96B55
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/external_hosted/lottie/lottie_light.js
Preview:	/*. @license. * Copyright 2015 Bodymovin. * SPDX-License-Identifier: MIT. /../. @license. * Copyright 2014-2015, Epistemex by Ken Fyrstenberg and contributions by leeoniya. * SPDX-License-Identifier: MIT. /../. @license. * Copyright 2014 David Bau. * SPDX-License-Identifier: MIT. /../. @license. * Copyright 2014 - 2015, BezierEasing by Ga.tan Renaudeau. * SPDX-License-Identifier: MIT. /..(typeof navigator !== "undefined") && (function(root, factory) {. if (typeof define === "function" && define.amd) {. define(function() {. return factory(root);. });. } else if (typeof module === "object" && module.exports) {. module.exports = factory(root);. } else {. root.lottie = factory(root);. root.bodymovin = root.lottie;. }.}((window \|\| {}), function(window) {.."use strict";var h,e="http://www.w3.org/2000/svg",A="",s=-999999,i=!0,n=/^((?!chrome\|android).)safari/i.test(navigator.userAgent),_=Math.pow,k=Math.sqrt,f=Math.

Chrome Cache Entry: 412

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 221
Category:	downloaded
Size (bytes):	191
Entropy (8bit):	6.783456364728183
Encrypted:	false
SSDEEP:	3:FttrZ1hjP3+JHrF7eywNCHBXf2Gx93+B2VzCS2ArQvOqNXEWlsCwdBLyI7EI0l:Xt1XkewH99kS2T2UUWlsCwDLyIox
MD5:	0C50A309F42D09B73AD16B8DF7678F7E
SHA1:	45ABDC2CF35895FF576A4EDA1254E27C6389B33B
SHA-256:	73841D3F0C28C587A848EAAC716691A1666F9CD85CE98F238ED397B47BF70E63
SHA-512:	7DA8EDC9B91B7A816D9B8777D71F5C7A4902E4F4BCBC870E4E934F89D2612FCC6D4574C2C268C48282AF5020D21161FE382F7653450D02612D32059075EFDEF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/home/v7/24px.svg
Preview:	..........M.;..0.D.b._{1...(Rq.z....'...r..T.N1.{.m.......'.W)C.".b{.R!...gv...B....k{.C.W...S:.3..H..g..............9bqbI..Bk.1#.h..h..).i.....9..-..H...,L..2Q$...6A...9...e]._._........

Chrome Cache Entry: 413

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	251
Entropy (8bit):	4.807326238374636
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4hLBIl/qVs+RLjUjUX:t47N9U/vmRYiVswfUjUX
MD5:	05A720716D71F9F56D6C0E5C4B47680A
SHA1:	D24611C11E8CC3B158EB518F2298D1E35CE03E48
SHA-256:	B90706D55C1E8B616BF8D677C195D09AF8AA75BC669BA3A36A25480CA86F6926
SHA-512:	D0DA0CCC993DB255F96AC9CCDDA35DAADA2928F17A1262F5954B6A3C54B57080544E5A9C3808275749ED15A118AAA9B44B50B0AD8A1F2BE668F9D7614A0456B1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/x_mark/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m12.71 12 8.15 8.15-.71.71L12 12.71l-8.15 8.15-.71-.71L11.29 12 3.15 3.85l.71-.71L12 11.29l8.15-8.15.71.71L12.71 12z"/></svg>

Chrome Cache Entry: 414

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 419 x 186, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	105581
Entropy (8bit):	7.985724439421167
Encrypted:	false
SSDEEP:	3072:NYKwD0X7i57MDoVCP2PGfIsWfOgxGiDw9o:NYd0OOT2+dW2o
MD5:	6F18705BEE709F1F4B180E83AD85054C
SHA1:	F2B9D18B0EC71A6CB42AFBD38E2CE9E3B765EA52
SHA-256:	F45D0DAE759C1E915F715654C883245090AFC57A9A0B37B63C10F87672AB0A34
SHA-512:	6F556557DD9BCAA6A41452760B99943FAFB0956E1D031154513CB8C8AED509735A80A18A88D390E36E28856CA5D9384BE4083F256F67EC8768BD4A86BD3BD376
Malicious:	false
Reputation:	low
URL:	https://scamwebsite.com/Robuxb.png
Preview:	.PNG........IHDR..............;".....bKGD.......C......pHYs...t...t..f.x.. .IDATx..g.$.%v].H.%[Nw.....>~..$....X.....L....2..~0w.......!.....pav..5s.sx......z...../.0.....p=\..3z......z......<\....p=\....z......zpF.C.p=\....p=8....z.......=....p=\...........z....g.0.....p=\..3z......z.......;....~.1v.....<....W..q....t..........&...o.._....~.-.u.x>...3.^.G.m....o.o.......b?..?....5x......._:h?......5r.d.}....]..u\|8+...~......sqo..\|.........../........O._j....KFv0l.......6..b~.N.m;$I.4M...Q..._Lf......p. ..c..9.`..3.._........`.......k..1.....x...........[..........U......a....o\|....v.;X[...Ck...~N...[...,.X?Wn../..\|Wz.{.H..0..~.~8......g...~.;x..8.........8..t.{.......O..?L....s..bp.4!>.s_....".`..qp.`......x.C....9..u..}...{..X./l....w..3....Km...}.9;x..........x.....".................i.y.}9.5..q..",.g...}x.3..\xy....9...f....._.....................7.q.1........q.kEt.......ZZ.V.Xkb..6...8.M.l>..`..1.....cp...$....{.c!....j....g......!A...

Chrome Cache Entry: 415

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 10 x 10
Category:	dropped
Size (bytes):	125
Entropy (8bit):	3.7509138143209344
Encrypted:	false
SSDEEP:	3:C8sU//e/Lyl0y+2IaMX4vBtov:tP2bNvau
MD5:	10D3F33CE94DC0BD36C479B4C2B4C43C
SHA1:	DAE1FA54556C616D0F95E9034C3AB6A46D9A2D38
SHA-256:	1407F21522CA02CDB6CECA3B60F963DBB46BB1859EA22F4700F1C1A1FA42C7CA
SHA-512:	AC377F9448B2077676A656CBE48EF2A7FD1F023A40B267D5E38897271C893F637C0FFDC321C46443FEA9B064D9D603850CC6C710C3440E6C9450C707F4BF1AF8
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................!.......!..Ulead GIF SmartSaver Ver 2.0.,........@..p.I..8..{..;

Chrome Cache Entry: 416

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	367
Entropy (8bit):	4.678729266974906
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4uZBPeRPbmcsstyLTngAV99WTc6XzQuJ3/vh7QrS3/IUp+wb:t4noU/vmRyPeR9YngQ9Ec6jhJ3XBAUp5
MD5:	A28E7BAA1C8C78EFFBDB2D0AB01D9EF3
SHA1:	F3408C777CFED5C38AF966596750F675637B012E
SHA-256:	7A7A47330CB72F09686EDF979205FA844FA134556F81F046EFECF07B1401A557
SHA-512:	14AE281980FA9715DFFF5BB4F22EE6B4959F3C15355B71AA65E43392E598F40DFFDDFBC0670D02D29A7C7A238B0066064174385439D0291275FAEDCE26808146
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/bag/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M7 8c0 2.76 2.24 5 5 5s5-2.24 5-5h-1c0 2.21-1.79 4-4 4s-4-1.79-4-4H7zm9.9-2c-.46-2.28-2.48-4-4.9-4S7.56 3.72 7.1 6H4v14c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2V6h-3.1zM12 3c1.86 0 3.43 1.27 3.87 3H8.13c.44-1.73 2.01-3 3.87-3zm7 17c0 .55-.45 1-1 1H6c-.55 0-1-.45-1-1V7h14v13z"/></svg>

Chrome Cache Entry: 417

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	60060
Entropy (8bit):	7.9934088971964545
Encrypted:	true
SSDEEP:	1536:0oa2w5XFqWgt0+hH2JgW+gD37TFWv+bhPT:xvkqhS+sJ1+S3PkSPT
MD5:	2CFC61AB66687601A8743E3866499243
SHA1:	274ECDBDAF7938F06F1D28EEEEDE5E129FD7B0A2
SHA-256:	4CDF51FE1530046673982B5DAEBF5D716D7BEEE39D656C08BFA7E06F70EA9212
SHA-512:	8C632123AD619EA8BA06BE8ACD1FF605F30AAB72E7AB25A168D48C815D479D2EC369712837DE1A12988278B1DD80EEA1371652DF9245EC2E903B23C9B2BC76CD
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi_webp/QJjrf9RkzGo/maxresdefault.webp
Preview:	RIFF....WEBPVP8 .....%.......>m2.H.".#.Kq@..gnP..^.s.s...3.P4...}.l.+..+...K......!....?.}Y...}...E..6_....?.z..'..q.......C.1........_...?..}&zm.zrA.S.3......_._.=......?...~....[......z.L......A.K......6qq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.~......S?..=.f...U....9D..6..(...<sD......b%.-."Q...<..x.!1&g.h%u`.OE..2..zf..2.........%......;..+V.hQ.g..;....N.<R..\|....E].U...m..F..#.>...loE..6z.$F.hF...-...C .<..Jb{k.:.o..]\|...x.s.................8..}.3.......\..R.`...C...Zg_P...;.N.#Lm..2.._.y&Q._........."CF.^.!lc...1....P.WXx..k....7......&....9.N......+v...z.K.eb....=.\....1Q...../{.A.I...`..#....I.....g.3...........-.....V)..&7......9U.,..b..V...._gF^ev......~.....7..=.qz...&%.1...r..j:7.k....s.-8.Jw...@7u...%$KMs.+... ...G......x...,..v.W.......4..>...W.......o..Gs.?.d

Chrome Cache Entry: 418

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 419

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 251
Category:	downloaded
Size (bytes):	214
Entropy (8bit):	6.935842556523057
Encrypted:	false
SSDEEP:	6:XtX2zd2DUMVTHV2fGigRdeHDY9iUPE/cwNpASiB6/:X3UiTHIOPdWY9iT0wNp7/
MD5:	A9F352A930DF327536F1570DF901E510
SHA1:	052E2192411C955D34DDE9F69B04E4CE81B9DDB7
SHA-256:	EE1B434B8E48DD4DE4E2FABFA7B7C2399F5DB77C642263D47489D4BB7DBA3A97
SHA-512:	2362A9CB9E70538FDE58D57F09BEE73EF40E9645F624CF48BCF6CD3DA0380E36E4E8510ABD091C447027A717047C4C0FCFA5BB43B778E91AC47146B67DCD210C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/video_camera_add/v1/24px.svg
Preview:	..........=OMo.0..+Q.I.MS..N..k.tD.-@U2.._VM.}x_~...'q_...b...I).z.M...09!..y..J(...w...p.^]....}..i.I.y..."..>.n.V..R.y......I..\|...H..........+.FB....#[ [.r..Ot.3....#n..2f.. .\eG=.[.p>.u.i.........M....

Chrome Cache Entry: 420

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	442
Entropy (8bit):	4.813019877520226
Encrypted:	false
SSDEEP:	12:t4noOAvmnqtXy+R/Ro1ImoXHNR50buAD2NfnRimbf:t4o7vNC+R/cImoXHN1Nf
MD5:	8508DD8336C60695AFCF1158C2EF0EF2
SHA1:	32CC87A7AE016449C6038284CEDDBA3E3D0B1791
SHA-256:	DEBC90222AA11F028051B9E116A7AD054ED560854FB326A5C38254DA354CFDEF
SHA-512:	35DE791E5CE1F47AD1FF89A594DB6FE055920481ED73001EAB97C12A7DC31077A6C5B64740FBFC682923BD98149F4A67AD0C027532EA1BF7EAA3C4D45579E930
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/arrow_time/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><g><path d="M14.97 16.95 10 13.87V7h2v5.76l4.03 2.49-1.06 1.7zM22 12c0 5.51-4.49 10-10 10S2 17.51 2 12h1c0 4.96 4.04 9 9 9s9-4.04 9-9-4.04-9-9-9C8.81 3 5.92 4.64 4.28 7.38c-.11.18-.22.37-.31.56L3.94 8H8v1H1.96V3h1v4.74c.04-.09.07-.17.11-.25.11-.22.23-.42.35-.63C5.22 3.86 8.51 2 12 2c5.51 0 10 4.49 10 10z"/></g></svg>

Chrome Cache Entry: 421

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	259
Entropy (8bit):	4.710851372205651
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4zmgwDe4btnRm31IE2l0kjMswple9SY:t4noU/vmRzmgw3tnRm31IEURwpY
MD5:	AA228455232ACB0A6378FED3354869AB
SHA1:	3447461B1713396150ED0DB5067AE45BFE9F024B
SHA-256:	1C594744993B086F8C4D3ABE3A4EF2794F1D1BF0D680A354EC0561AFCE427140
SHA-512:	CE2D4D2D8204EEB68E702F71D87B56CE970B4ACDF547AB20FA4A8B281C655FF41BC175A7949F6B453D7ED4A7EF8DE28C2B6774A67708DB8B7047DB3DFDFC2991
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17 13h-4v4h-2v-4H7v-2h4V7h2v4h4v2zM12 3c-4.96 0-9 4.04-9 9s4.04 9 9 9 9-4.04 9-9-4.04-9-9-9m0-1c5.52 0 10 4.48 10 10s-4.48 10-10 10S2 17.52 2 12 6.48 2 12 2z"/></svg>

Chrome Cache Entry: 422

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (645)
Category:	downloaded
Size (bytes):	11022
Entropy (8bit):	5.399193856035386
Encrypted:	false
SSDEEP:	192:FslVQj/Uwu+oCqYBuZ08sdOqntlMrG0v8X6JPRACZE:rU6oCfBnJoG0vDnzK
MD5:	4A717B1104B7C162E2D019AEF5AD0FA5
SHA1:	6FB2F0DCE050C58030E372E57E0D120052EB2EB9
SHA-256:	A10A23562C32F59D941ECB07AC7D3714FC64313591DDFD83807C4463C6391FCA
SHA-512:	3FF892B33C9D02116CCEB689EBAE18D143692559DE03A1231A68DA0C736B46C5F782F207D5C434EB15B29F6790167991A789FBF8368ABE5F996758DF58D03E3A
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/www-tampering.vflset/www-tampering.js
Preview:	(function(){'use strict';function n(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function q(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var r=q(this);function t(a,b){if(b)a:{var c=r;a=a.split(".");for(var e=0;e<a.length-1;e++){var h=a[e];if(!(h in c))break a;c=c[h]}a=a[a.length-1];e=c[a];b=b(e);b!=e&&b!=null&&p(c,a,{configurable:!0,writable:!0,value:b})}}.t("Symbol",function(a){function b(l){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(e+(l\|\|"")+"_"+h++,l)}.function c(l,m){this.g=l;p(this,"description",{configurable:!0,writable:!0,value:m})}.if(a)

Chrome Cache Entry: 423

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 16x16, 32 bits/pixel
Category:	downloaded
Size (bytes):	1150
Entropy (8bit):	1.6001495726289154
Encrypted:	false
SSDEEP:	12:XFeeeQL5555555555dWr555555555555b5555r555555b555Lr555553r555Lh5k:X2uD
MD5:	F2A495D85735B9A0AC65DEB19C129985
SHA1:	F2E22853E5DA3E1017D5E1E319EEEFE4F622E8C8
SHA-256:	8BB1D0FA43A17436D59DD546F6F74C76DC44735DEF7522C22D8031166DB8911D
SHA-512:	6CA6A89DE3FA98CA1EFCF0B19B8A80420E023F38ED00F4496DC0F821CEA23D24FB0992CEE58C6D089F093FDEFCA42B60BB3A0A0B16C97B9862D75B269AE8463B
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/img/favicon.ico
Preview:	............ .h.......(....... ..... ........................................................................................................................................................................@...@...p.......................@...@...................`...................................................`.......0...........................................................0...P...........................................................`................................PP...................................................................... .............................................................. ......................................................@@.................................P...........................................................`...0...........................................................0.......`...................................................`...................@...@...........................@...@......................................................

Chrome Cache Entry: 424

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	11824
Entropy (8bit):	4.306765430849705
Encrypted:	false
SSDEEP:	192:F26SMbW4XFKQfjJ1yXczqPm55zYc3OQQiWp4L7w3DeMFWJov6dHmhr:F26SXyjfjusW+vYcUiWS+eMFWWvAur
MD5:	FDC41C1E6C6AE5E5580F16DDBF54B8FF
SHA1:	22AC53E9CD9C5B62127E26A67F00F0C20C656785
SHA-256:	50F120F926C1520EC05A1C63CAB4B2C00FD7B1E8F94A3ECA839D7973A144F88B
SHA-512:	885271FBD1B79E33B2FC91C2AF6A1285C42E08EC2276C942F784165B1389E66D5D56A66DBF99787234773B80370FA4F38F7085CADBF381C16FA54CC15E042BF4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 192 195" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <path id="a" d="M0 194.555V.675h191.961v193.88z"></path>. <path d="M.668 18.586C8.545 12.047 15.125 3.19 25.082.49v20.673H.668v-2.577z" id="c"></path>. </defs>. <g fill="none" fill-rule="evenodd">. <path d="M63.227 57.833s-4.403 1.068-5.938 1.483c-1.456.393-4.553 1.79-4.443 6.532.112 4.74.112 4.463.223 5.85.11 1.389 1.11 3.444 3.053 3.999 1.944.555 2.834 1.777 2.444 6.386-.389 4.609 17.055-6.552 17.055-6.552l-5.41-15.82-6.984-1.878z" fill="#DDD"></path>. <g transform="translate(0 -.341)">. <mask id="b" fill="#fff">. <use xlink:href="#a"></use>. </mask>. <path d="M96.24.675c-17.36 0-24.86 17.956-38.835 24.25-9.382 4.226-31.732.669-39.879 14.75C9.38 53.757 20.86 65.52 15.12 74.544 9.38 83.568-.48 85.263.02 99.774c.5 14.51 20.374 19.494 22.32 30.4 1.946 10.908-4.853 13.059 0 28.997s18.193 17.626 35.867 18.065c17.673.439 14.368 12.34 32.52

Chrome Cache Entry: 425

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (575), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	12045
Entropy (8bit):	4.974213367770859
Encrypted:	false
SSDEEP:	192:oULklTv3u5+YMljZ+LDgR+kWrYBU1gGs348uYs77d:oUA0eh+qzWCU1gGsH5Wd
MD5:	F45C16D17E82954AFFD9B2ABAD06A5C4
SHA1:	C34AE861596B80083A7C663A29E95E0CEF349460
SHA-256:	23943248140450C420CA980CD7778926808D59B470E54860630E117B854E77A5
SHA-512:	91360CE9911827A784B56103D7D168D522B16692069C40E1C569C170D5FEE6F1040F690CD72702CDBD9A009A53AD382EFE3DF89ABD65BB5876CDED8777371B28
Malicious:	false
Reputation:	low
URL:	http://www.addesigner.com/
Preview:	<html>.<head>.<title>AdDesigner.com - Design and download free banners in seconds!</title>.<meta name="description" content="FREE banner ads for your website in seconds! Choose from 91 unique, fully-animated designs, customized with the text and fonts you want. Perfect for banner exchanges like LinkExchange or for anywhere else!">.<meta name="keywords" content="free banners, free banner, banner ads, free ads, banner ad, website promotion, advertising, free ads, banner exchange, AdDesigner.com, ad exchange, website ads, web ads, web banners">.</head>.<body bgcolor="#000000" link="#FFFFFF" vlink="#FFFFFF" alink="#FFFFFF" text="#99FFFF">.<style type="text/css"> a:hover {color:#FFFF00;}a:link {color:#FFFFFF;}--></style>..<script language="JavaScript">. .img_samples_on = new Image(); img_samples_on.src = "/images/inf-samp.gif";.img_design_on = new Image(); img_design_on.src = "/images/inf-des.gif";.img_tips_on = new Image(); img_tips_on.src = "/images/inf-tips.gif";.img_free_on = new

Chrome Cache Entry: 426

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1607
Entropy (8bit):	5.2664981782617755
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehDK:3q3+pUAew85zvc/hDK
MD5:	83B245AFEA6EF5AC011B6DBD39842145
SHA1:	8AD58E85482E8FF4A5AE30DF12F473CD9196ED35
SHA-256:	471DDB393DFE34D8334A8A0B9E4AB62D5F8B14AA9154F3DF2AC215278DBFFCED
SHA-512:	45546E57E7D6763EBE837138ED60DE2EACB66C7670C5DA650CECF997A445E71E8EFEC88ED308FD1EA2597DD773B8BFB7046DA949CEBAF12BAA36C5C8690FF769
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 427

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	4.306765430849705
Encrypted:	false
SSDEEP:	192:F26SMbW4XFKQfjJ1yXczqPm55zYc3OQQiWp4L7w3DeMFWJov6dHmhr:F26SXyjfjusW+vYcUiWS+eMFWWvAur
MD5:	FDC41C1E6C6AE5E5580F16DDBF54B8FF
SHA1:	22AC53E9CD9C5B62127E26A67F00F0C20C656785
SHA-256:	50F120F926C1520EC05A1C63CAB4B2C00FD7B1E8F94A3ECA839D7973A144F88B
SHA-512:	885271FBD1B79E33B2FC91C2AF6A1285C42E08EC2276C942F784165B1389E66D5D56A66DBF99787234773B80370FA4F38F7085CADBF381C16FA54CC15E042BF4
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/offline_no_content/v1/192px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 192 195" xmlns:xlink="http://www.w3.org/1999/xlink">. <defs>. <path id="a" d="M0 194.555V.675h191.961v193.88z"></path>. <path d="M.668 18.586C8.545 12.047 15.125 3.19 25.082.49v20.673H.668v-2.577z" id="c"></path>. </defs>. <g fill="none" fill-rule="evenodd">. <path d="M63.227 57.833s-4.403 1.068-5.938 1.483c-1.456.393-4.553 1.79-4.443 6.532.112 4.74.112 4.463.223 5.85.11 1.389 1.11 3.444 3.053 3.999 1.944.555 2.834 1.777 2.444 6.386-.389 4.609 17.055-6.552 17.055-6.552l-5.41-15.82-6.984-1.878z" fill="#DDD"></path>. <g transform="translate(0 -.341)">. <mask id="b" fill="#fff">. <use xlink:href="#a"></use>. </mask>. <path d="M96.24.675c-17.36 0-24.86 17.956-38.835 24.25-9.382 4.226-31.732.669-39.879 14.75C9.38 53.757 20.86 65.52 15.12 74.544 9.38 83.568-.48 85.263.02 99.774c.5 14.51 20.374 19.494 22.32 30.4 1.946 10.908-4.853 13.059 0 28.997s18.193 17.626 35.867 18.065c17.673.439 14.368 12.34 32.52

Chrome Cache Entry: 428

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (575), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	12045
Entropy (8bit):	4.974213367770859
Encrypted:	false
SSDEEP:	192:oULklTv3u5+YMljZ+LDgR+kWrYBU1gGs348uYs77d:oUA0eh+qzWCU1gGsH5Wd
MD5:	F45C16D17E82954AFFD9B2ABAD06A5C4
SHA1:	C34AE861596B80083A7C663A29E95E0CEF349460
SHA-256:	23943248140450C420CA980CD7778926808D59B470E54860630E117B854E77A5
SHA-512:	91360CE9911827A784B56103D7D168D522B16692069C40E1C569C170D5FEE6F1040F690CD72702CDBD9A009A53AD382EFE3DF89ABD65BB5876CDED8777371B28
Malicious:	false
Reputation:	low
URL:	http://www.addesigner.com/favicon.ico
Preview:	<html>.<head>.<title>AdDesigner.com - Design and download free banners in seconds!</title>.<meta name="description" content="FREE banner ads for your website in seconds! Choose from 91 unique, fully-animated designs, customized with the text and fonts you want. Perfect for banner exchanges like LinkExchange or for anywhere else!">.<meta name="keywords" content="free banners, free banner, banner ads, free ads, banner ad, website promotion, advertising, free ads, banner exchange, AdDesigner.com, ad exchange, website ads, web ads, web banners">.</head>.<body bgcolor="#000000" link="#FFFFFF" vlink="#FFFFFF" alink="#FFFFFF" text="#99FFFF">.<style type="text/css"> a:hover {color:#FFFF00;}a:link {color:#FFFFFF;}--></style>..<script language="JavaScript">. .img_samples_on = new Image(); img_samples_on.src = "/images/inf-samp.gif";.img_design_on = new Image(); img_design_on.src = "/images/inf-des.gif";.img_tips_on = new Image(); img_tips_on.src = "/images/inf-tips.gif";.img_free_on = new

Chrome Cache Entry: 429

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 430

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	190
Entropy (8bit):	4.734767648393338
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHlbRvxXUjvuoVFMScupjUJEFNJFyOXV/:tI9mc4slhohC/vmVR5XUjvuoVFbpjUJc
MD5:	117AB951A6D6204AC74B0A8A2DEBB839
SHA1:	0EBD5BAB716E8A101783C60471EA52745CB8459F
SHA-256:	988C2499EC07A895EA5B31AB308610995B4F4480142571A47FCD0FFA1A0EFA41
SHA-512:	2CC4D015CE64DF7D8390ABF7BD7339B4DFA090E89C37135692C8652E59A46C4BBCD7A451C8B6E45F070A4C3F46935EA51B78F67DAC181B0C38CA1CBC62F000DD
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><polygon points="20.21,11.79 12,3.59 3.79,11.79 5.21,13.21 11,7.41 11,20 13,20 13,7.41 18.79,13.21"/></svg>

Chrome Cache Entry: 431

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	8816
Entropy (8bit):	5.436678491959421
Encrypted:	false
SSDEEP:	192:ylNOClN1lNzlN33nlNLlNjAlNOkNfCkNRkN+kN23nkN6kN+AkNIPNKCPNBPNXPNH:yLOCL1LzLnnLLLsLOifCiRi+iEni6i5d
MD5:	AE497D5B41E511A0C483D361F08C36A4
SHA1:	0ECCD2799595112C5B8169CC3370A2F0E384C028
SHA-256:	C05133DA71148E748CBFB62FBE60097B7FF257B76B0369CAFBB7F0C1C5C2F13B
SHA-512:	7316310406CAC1A179E3DE13AFFBA49FBE9B0B1A217A71AB1B6D7AB6287909E80010D4221209E526D939309C0CD21D7DDE7A1FF4E84D4ED146EE005FA0F672D5
Malicious:	false
Reputation:	low
URL:	"https://fonts.googleapis.com/css?family=Roboto:300italic,400italic,500italic,700italic"
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc3CsTKlA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc-CsTKlA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc2CsTKlA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: italic;. font-weight: 300;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc5CsTKlA.woff2) format('woff2');.

Chrome Cache Entry: 432

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2743), with no line terminators
Category:	downloaded
Size (bytes):	2743
Entropy (8bit):	5.0809525098147175
Encrypted:	false
SSDEEP:	48:FXfBBn6ZnC92rKWEBNjuS/K+MIzDMrg3KSsKrgpKswBCYcpDBboxcASEzMRrD4pz:FXfBBn6ZnC92GWEBNjuR+MGDMr1SsKrr
MD5:	BC588241AF4924EFD9DC6E3E76C0EA4A
SHA1:	1D24B3FB1F653B08999657BCE3E4CE37EDCF29D1
SHA-256:	E855DCB4953FC7357621B64AC3958176B51B59E830A30430D7ADE498E99A200D
SHA-512:	3ED41D10ED476A2A7347BF2D798EFAC48EEF8B5223E3633B225719E32224A5B4337697AB64259FED8B64319CC453376CC207A02975B981152EAD5E06B79F0573
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/cssbin/www-main-desktop-player-skeleton.css
Preview:	#player.skeleton{position:relative;z-index:1;margin:80px auto 0}@media (min-width:882px){#player.skeleton.theater{margin-top:56px;margin-bottom:16px}}#player.skeleton embed{width:100%;height:100%}#player.skeleton.theater.full-window-mode{height:100vh;width:100vw;max-height:none;margin:0}#player.skeleton.theater.full-window-mode .player-api{height:100vh;width:100vw}@media (max-width:999px){#player.skeleton{width:854px}#player.skeleton .player-api{width:854px;height:480px}}@media (max-width:856px){#player.skeleton{width:640px}#player.skeleton .player-api{width:640px;height:360px}}@media (max-width:656px){#player.skeleton{width:426px}#player.skeleton .player-api{width:426px;height:240px}}@media (min-width:1000px){#player.skeleton{width:1066px}#player.skeleton .player-api{width:640px;height:360px}}@media (min-width:1294px) and (min-height:630px){#player.skeleton{width:1280px}#player.skeleton .player-api{width:854px;height:480px}}@media (min-width:1720px) and (min-height:980px){#player.skel

Chrome Cache Entry: 433

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3975)
Category:	downloaded
Size (bytes):	161221
Entropy (8bit):	5.595907533954583
Encrypted:	false
SSDEEP:	3072:wTZfkfhWD3UhN89YBMSm4Ni6cvLZfaswF0Qz+F0Wm7li9LV+T3sgbv3RBtGr57:wTZfkfhWD3UhN89YBMSm4poLZfnw+QzW
MD5:	B19F47CAE8F4710869C45F1D974EE71A
SHA1:	B9771A6CAF0B6BECF157A455B2918396B7C61986
SHA-256:	F033D7E5F5ED31D40B35F534D5DBFA807859229B6304D1F3A6D6AF809349014C
SHA-512:	8E79D1723F4C1507CF60F1718D4A7AE043817EFA5594B5A45415FA23AE32486A1AB6434EBBE562D9BDD8BFCC6A9F373E4F936BBDD39402C879BBE12FACBA6F5B
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=ca-pub-3935057531723584
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var p=this\|\|self;function ba(a,b){var c=ca("CLOSURE_FLAGS");a=c&&c[a];return a!=null?a:b}function ca(a){a=a.split(".");for(var b=p,c=0;c<a.length;c++)if(b=b[a[c]],b==null)return null;return b}function da(a){var b=typeof a;return b=="object"&&a!=null\|\|b=="function"}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(Math.random()1E9>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(arguments.length>2){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&Function.prototype.bind.toString().indexOf("native code")!=-1?ia:ja;return ka.apply(null,ar

Chrome Cache Entry: 434

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	154
Entropy (8bit):	4.827221770489101
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHTdEBhHIHWlYqY:tI9mc4slhohC/vmI45EBho+u
MD5:	FFFE8FD3C6ACCC2FCFDD7B66EA25B99A
SHA1:	13C31200084CB1EED7A746428D2B79AD34FF6790
SHA-256:	55A060294343CAFA3539424536540547F25EFD13A1D2373D7A5E966CE74C5699
SHA-512:	A6D8EB0393B4FB56D4B6025865F542B29AFEFAF7BB2B26E55C5B54974EB3B913E9A17AD54A8FE33525345AF3AD16EC60C06356582F72B3864731EC22C1838662
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m9.4 18.4-.7-.7 5.6-5.6-5.7-5.7.7-.7 6.4 6.4-6.3 6.3z"/></svg>

Chrome Cache Entry: 435

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 436

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 437

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	372
Entropy (8bit):	4.852483300837517
Encrypted:	false
SSDEEP:	6:tI9mc4slhohgqWHiA4vmI4lAwuQgQIVY6Wqx5Xt6M0TRcmQTIfyuETUrNmraXnPZ:t4noOAvmRHnIq6JmM0T7QobETUrsOpka
MD5:	388308EEFFE6F910D8A30CA28F6A4306
SHA1:	864144A8145338E37C1DEF12177A02EECBABA4A2
SHA-256:	A78851FF5ED5AB0CB2DE879F608214C4C33BC41841F279B1F622835407AEA643
SHA-512:	460C26A65AB98BAD2574A5A3405CBFEC71465544632887C388E982E84EBEC2E45F21D703767783199186C51A2998965EAB3A66F5ECD4753E26D6B257ECDAD0DD
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/fashion/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><path d="M12.5 6.44v-.5C13.36 5.71 14 4.93 14 4c0-1.1-.9-2-2-2s-2 .9-2 2h1c0-.55.45-1 1-1s1 .45 1 1-.45 1-1 1h-.5v1.44L4 13h2v6h1v2h1v-2h2v3h1v-3h2v2h1v-2h1v-3h3v-3h2l-7.5-6.56zM6.66 12 12 7.33 17.34 12H6.66zM14 18H7v-5h7v5zm1-3v-2h2v2h-2z"/></svg>

Chrome Cache Entry: 438

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 651
Category:	downloaded
Size (bytes):	397
Entropy (8bit):	7.4213064466622285
Encrypted:	false
SSDEEP:	12:XtAcV76OqbKI9k4Ljus+EMNcE6Gdy+EAn:XtRVIHuMM6EL+An
MD5:	4B19C6556C95B51F63A3FEAEAA0D01C1
SHA1:	8E5BA4AF9979D9548118C080DD056ECF2B5570F8
SHA-256:	1AD96CA7FB227C870C3DCF272E6FA47AEB88EECE49EB4BD3744B2A2D626DD95F
SHA-512:	F3DD736F49E4D476F204FF9C41CAA9BBEDD7F37FA3DA704AB9FE930B5E8A3E48846D4B5D1F058BF814BE243BACB78902CFC280526A21763E2CE121C93E26C165
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/radar_live/v6/24px.svg
Preview:	..........LR..@...+wW...+....P@.c4.Q.~.0..S..........z...y.....4M."..}.!.vx..........?......n....D..:...y\7......n~..q</.......f'.D........+..s..H>%.w.RG.R.2L..-(.t..I@L.:..!F.3J.\|}.dk.F.P..ID..: .....qD...`.a...UP.9)$.XDN.....om..<1D%.K...KY....Ib.5.k...)...W.6B".X$..?...........;&.%).D.wM..=A9..(....7.H_.\|........Udq..n'...2..{K...>.V...$.7eo..tn...7+.c.......!.. ....

Chrome Cache Entry: 439

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	274
Entropy (8bit):	5.064374319451513
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4LyS7NHTZORTIhRJUTT6kg2AfI1NIfdAf7:t47N9U/vmRLy2NHTsYffLV6
MD5:	A2ACF270DAF56F6484C50C1F74C5B676
SHA1:	BD3B6DB51B936C0D49E293CB482CC2839A0D7D94
SHA-256:	DB8400A38C08118E2FD10E60F84A2B4DE09A64721A665E23C37E03F092F41F94
SHA-512:	6C94E190FA493AF676930E76713C5511FAD174C62506C7988072044C217ACC83847E8BCB4CC873A8B2B29D7B9FCB90CFE48336FB2450CFD7AE34C4F9C02A6CD8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M11 11v6H7v-6h4m1-1H6v8h6v-8zM3 3.03V21h14l4-4V3.03M20 4v11.99l-.01.01H16v3.99l-.01.01H4V4h16zm-2 4H6V6h12v2zm0 7h-5v-2h5v2zm0-3h-5v-2h5v2z"/></svg>

Chrome Cache Entry: 440

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 9, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	73
Entropy (8bit):	4.591150251972653
Encrypted:	false
SSDEEP:	3:yionv//thPl92tnlTN9syxdNplok2up:6v/lhPWtlJ9BHlJVp
MD5:	1AC109B6FF317018BCE49629568D8E9F
SHA1:	FBB809D7DC34E6FBEA8F0D8E8C8780EB1B09ED25
SHA-256:	5A5B7DF0C476A034FA67289203339A2E37916067F57ABD930ED44C236AF35F31
SHA-512:	8B45B60DC300E0CBBBA3BE4BC44801886B4F9C2DCF0625B07BC78084280585C1AE5B589FBFA25F9E0F7FD46A9594144EAE2AC647B654A2521FFC3477050147A2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............H;e....IDATx.cP#.......@.@!..\.....IEND.B`.

Chrome Cache Entry: 441

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 468 x 60
Category:	downloaded
Size (bytes):	9902
Entropy (8bit):	7.876114214714877
Encrypted:	false
SSDEEP:	192:6/I+ncflwX9oezkViiYIeaAicN4lUvxIYzysOI56t7JabqJabqJabqJabA:6/I+2SXXS8Ieis4l2zmm07779
MD5:	D228E97B1D7A35717DA145BC6C8091C7
SHA1:	AB3E63553BB5275F37925F5B5500F41C81B051CB
SHA-256:	B638F68332C4EDD47566C28B2649BEB975EAB0470A6EE4F0DE36C270995E5A6A
SHA-512:	46429D79CA6136AB2F22A3D8F1F96296AB0665416C8E6941EE9B442C89DEBE80A6D297A2831B934AEA25518DF119F9F0DA6B2C34B4FF8C421AD5EA66D67CA6EA
Malicious:	false
Reputation:	low
URL:	https://scamwebsite.com/adban.gif
Preview:	GIF89a..<........fff33..f33.ff3333......fff.f.f3.ff..3.f.3.f...33f......f3f...3f.f...........3.ff....ff.33.!..NETSCAPE2.0.....!...X...,......<.... .di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..h._o#C.p..z.n...0.B'...A{....C.t....v...v..........uw...w......M............z...../....................................v..g..[..D....v.......w...%..1... P..A....@..)U.G....@.....P.1A...v1.%]@.....HGN.@.'....oE7.2...WBf.(.>...........bE..)b....W...W!h.t.H<lA-..kKO.4.. ....h.....ag.=1T...A..........Y`...K......E.O..d.H..&KtS..D....0.M0.....="_k....4......_.^.0..\0W.#N..S..6.Px.u......9..I,........'..\c..H.......h...?E..e.....@.H.. K.[s.0.5.7.y..{..P\.%..1...._....>.Z8B.....:.....#.......7<....rU.]n..eJ...C.y=u.bXG^.#9...$\|"...X..Q....d....0.E.Yt.e.8...Y.J"........._..$.V.%d^....]F..n..?s%J.v,.U.]...i.%.(.b."[..\|....6h.."..j.........<..gq.!..A..Jh....J2 1.......E.U..g.....J.u.{.m...Z.....$B......N*.1.n....n^..[..r..[Z....Z..p..v.a...$h.@.N.a..{.

Chrome Cache Entry: 442

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 443

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1134
Entropy (8bit):	7.313244282036759
Encrypted:	false
SSDEEP:	24:9oOYeZ0C/BfRCDqBgS4m4j+6x2MPo9rvICggHU1:/WaV8+4S2N+kpgHW
MD5:	EC4ED4E1CC9A76A7B189D26085879805
SHA1:	448544CF30EB7B0331B301333B3640EF28559C1E
SHA-256:	E396F451145C79948D6F4C07E7A242E98DC4635EC0FF7924539B0B900103D02B
SHA-512:	98D1F9A203A35B5434959AB1546634D6F9FE53EBE6CA58C3148911E5334A114E8827728FBF5565FD9F7A52C41114D50A3F438576C8034E585B11D78FF116EF6F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............<.q.....sBIT....\|.d....%IDATx...?.]E....K..,,4K.Sh.M")."l I.l.K....... .@l.Me....!!..D.......5.hpU6..n..3wf.}.....%..s..y...3..................................................................................................................>.%].6&...t6.......R.nf.JZ..a.NM..W...A.k%.JH:5......f...Y..+.....G..5^.&.f..q....G...R3...g..A.....E..AJRm.".wq?..%}Y..nm...t..o..$I.}..b"~yWK.....=/...>....W...R...%..z.l_k....=..;.w.G..Jk.......h..^.....k.Ry;'7.G..wqo...k..vP..\.....mX.....kQ5.%.$y...s...^.x.t.G...aC../..$...h>?2.".xN..Z.Qg.9.....B...yaI.....Y..<...vm]w.......\|.;....L^.)ZXsL......~J5..S........<j(......U...}..s..\.w..R{......6..........U...t.>.z,.[\/...q.k.#.a[....{..;...i....gC....v.&.t.wm.i.o;,.......'h....W'.ooIzz.k..1..^I.$...Q./.sy..).3.9r.^.#.(O.i.Y3{...)I.j..?.j.-.../.`./X\k.y.^P....K.k.Pt...N...d.L%+4:bE.f.......p..fvyl.)S...9z..Xc.XO&.....}.w.ff.J.H..j_.uL/.rj.....K[u=..GR....3s.h...W..K.!S....N

Chrome Cache Entry: 444

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	328
Entropy (8bit):	4.751341136067324
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4TnMvnY0eLZ72LYMF5fcX1FCG/hd9qCWz:t47N9U/vmRjMvQZ7Bcpc/FqCu
MD5:	DB10DFA9A782446C2C69099E4CBEBDFF
SHA1:	92B57DC3DD3C747BEB1B8EB98D1CBC3D6AE9B7D4
SHA-256:	A6BDEE4CE3188A10940EDC0B870B2898CA2E4311836712341546E3CDD08E3971
SHA-512:	96499DB26CF175255484317AFC93B2CC96A5D18E235FC67B9ACBBB3E00B46B3A7E1E6C551764EEBB0A48856FFC2DB5DCA1EFFE478BB417B581E89D435A70449B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m21.24 19.83-5.64-5.64c.88-1.17 1.4-2.62 1.4-4.19 0-3.87-3.13-7-7-7s-7 3.13-7 7 3.13 7 7 7c1.57 0 3.02-.52 4.19-1.4l5.64 5.64 1.41-1.41zM5 10c0-2.76 2.24-5 5-5s5 2.24 5 5-2.24 5-5 5-5-2.24-5-5z"/></svg>

Chrome Cache Entry: 445

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	474
Entropy (8bit):	4.7449073607550805
Encrypted:	false
SSDEEP:	12:t47N9U/vmRGLHuojuMUMU2lX9KuMUMU2lZzrvCJig/I3n8:t4jU/vjtuM5JlX9KuM5JlZ/qwX38
MD5:	CF92CBEE09BC23E2B2EAE3EF6A9DFF40
SHA1:	E9EEB3AE2294064FD7B0A5026B5AE02A6564C9AD
SHA-256:	60FC606F480F263CDC9CF180089D42E4A070395B47D0331E7C869A9F6FD2208A
SHA-512:	EF4944E4E9FE78DD00D379EE192FEF915BC3AA45E6029AC21CA858C5C8D65EBDFA70F78CF87F00A623D311CC3ABF453CFD5DFFEC442F1A87EAE23E548DF92295
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/gaming/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 12H8v2H6v-2H4v-2h2V8h2v2h2v2zm7 .5c0-.83-.67-1.5-1.5-1.5s-1.5.67-1.5 1.5.67 1.5 1.5 1.5 1.5-.67 1.5-1.5zm3-3c0-.83-.67-1.5-1.5-1.5S17 8.67 17 9.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5zm-3.03-4.35-4.5 2.53-.49.27-.49-.27-4.5-2.53L3 7.39v6.43l8.98 5.04 8.98-5.04V7.39l-3.99-2.24m0-1.15 4.99 2.8v7.6L11.98 20 2 14.4V6.8L6.99 4l4.99 2.8L16.97 4z"/></svg>

Chrome Cache Entry: 446

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 211
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	6.806234067031923
Encrypted:	false
SSDEEP:	3:Fttr/773Gg9bVEaYR7c/CA+BTIWfNXPbK0jCfm9S00PPONgcXXQKvebMbsYlkzO:Xtf73pJo7j/BzjCfV02WOmAKvWYeO
MD5:	4D4A71D908FB2B012C65587365E2E7D0
SHA1:	28CEB6DB21B66819E820FF077D3DEAB64A42200D
SHA-256:	7DD2C81346C416777A6E481527E0C1DA8EC643CDF114E91A0CDF2FD92524E024
SHA-512:	0BF94CFF9B7B944B7710A64B2C15B4D9A47E3FCEF767269258B5EF5388EA9EA747D3CC24B4E48EF2CDC40D6671464404EA1E5DC6761645AED91E48A6EF282F60
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/trash_can/v5/24px.svg
Preview:	..........M....0.._%........N,].C.0..4A<}C.....N.v.c..h.z..{..8Z..K!...J...am.z........F.....z.%....?......:.?..."..O..Y...J...b9.@(..R..2p..N.D+T:.4\.91I...$.B''.Uq.Z}..\.7....

Chrome Cache Entry: 447

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	159
Entropy (8bit):	4.915607757159961
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHC/TFicZHLpsTLXcA1:tI9mc4slhohC/vmI4CbFxIcK
MD5:	D4FE0331328D6ADCB2D4B88D0996420C
SHA1:	BF668E3964C3BCD702650BB20E28FD303296124F
SHA-256:	616130E8A2BE44E0FDCFA1D3C7661172F2FED1471597820F8A3CAF01F4FBE2DF
SHA-512:	16DA047FE96F9808AF68EF19E64736114FD3620127964A86973A86401375E128CA99F6C937D1123AE4FD10EEE5079B24BF6C721028582EDEE37176254EE5E3D9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M14.96 18.96 8 12l6.96-6.96.71.71L9.41 12l6.25 6.25-.7.71z"/></svg>

Chrome Cache Entry: 448

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 449

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	XML 1.0 document, ASCII text, with very long lines (540), with no line terminators
Category:	downloaded
Size (bytes):	540
Entropy (8bit):	5.0953958403229755
Encrypted:	false
SSDEEP:	12:TMHd2yqNZNNUrS7n4nuL0EGuSl6FGYdB2GSuh43JPYa0:2d2PNdUrS7nfcuSQ8YdqXya0
MD5:	AABAC4B67E56DCAAA0C06DCEA2C8C7EC
SHA1:	4AEC6ABB0BCB8B6828F0CFE62637D3B270FDEA6C
SHA-256:	96D0C3380F81C5C429B2FAB04F6A9961F83287D1922A1B44A1DBD4A4004D62B6
SHA-512:	C9709D6C0A2EE21148E5D8826A3093E3A353B7D2BA0C135924EA8079982A8475F71B5926AFE6F21FF67C2538574D2F6EC0C20C97ED836F6A67799EA05D20AC6D
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/opensearch?locale=en_US
Preview:	<?xml version="1.0" encoding="UTF-8"?><OpenSearchDescription xmlns="http://a9.com/-/spec/opensearch/1.1/"><ShortName>YouTube</ShortName><Description>Search for videos on YouTube</Description><Tags>youtube video</Tags><Image height="16" width="16" type="image/vnd.microsoft.icon">https://www.youtube.com/favicon.ico</Image><Url type="text/html" template="https://www.youtube.com/results?search_query={searchTerms}&page={startPage?}&utm_source=opensearch"></Url><Query role="example" searchTerms="cat"></Query></OpenSearchDescription>

Chrome Cache Entry: 450

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 20
Category:	dropped
Size (bytes):	215
Entropy (8bit):	6.2502620940159135
Encrypted:	false
SSDEEP:	3:CoM//V9Vll9dFll/RguD6QAaQ82IaMX4vrtDodrZz5b+RRe5N+LGb/28zXAu/4gU:JpvQAaQ8vaWIRRe50LM+8b7iZ
MD5:	D41E8F7384E351F069C8F18A4AA4AB5F
SHA1:	3FFC904F34783929AF8ECAE82D8FD846C009385B
SHA-256:	A1E04C5635296C5934C6260585C0E064BD1BFDD63836A556CF255DC5DDB9E536
SHA-512:	86798C34B0EE89E2EB178D72C00FEA1499996B3B7AF790A7F21CCE4CC71716BB903023A9A994EC72CD6C0E9157F4EF0C69CABD4EFD320104FEC2C4BB8CECB17C
Malicious:	false
Reputation:	low
Preview:	GIF89a............. .00.@@.PP.``............................!..Ulead GIF SmartSaver Ver 2.0.,..........l..I..8.....<.B\.... .NR.I@..)0.t4..A.(.....a..$..$.p>Z..CYpH.........b!.N..3.....OC......k.;=~+-/1.!#%J...;

Chrome Cache Entry: 451

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	709
Entropy (8bit):	4.22525639505645
Encrypted:	false
SSDEEP:	12:t4noU/vmRhHmsiPU0BSMmpa8gQL8nJK18IyNzT+OfIXSVHIvEdQF60hRp2BquDnc:t4oU/vgHIBBSMcNgQL8nJKCzN1f/H2uk
MD5:	DB14717F8EB9721D86499B6B2C41E379
SHA1:	069496D31A0A689D73513F90E5BD72E2843581EC
SHA-256:	15308D594C7B489C6AC3F05C0CB895EEF01DC2F0589FF08B3332C9500CDF7152
SHA-512:	A089FD02232B9276377DA115205BC35DF666582F3697558E109A660DDB2AA8215DCB5D81CA54DCC2451E8688555B6DC19316C4D4098D12803B6379DC42C78178
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M10 14.65v-5.3L15 12l-5 2.65zm7.77-4.33-1.2-.5L18 9.06c1.84-.96 2.53-3.23 1.56-5.06s-3.24-2.53-5.07-1.56L6 6.94c-1.29.68-2.07 2.04-2 3.49.07 1.42.93 2.67 2.22 3.25.03.01 1.2.5 1.2.5L6 14.93c-1.83.97-2.53 3.24-1.56 5.07.97 1.83 3.24 2.53 5.07 1.56l8.5-4.5c1.29-.68 2.06-2.04 1.99-3.49-.07-1.42-.94-2.68-2.23-3.25zm-.23 5.86-8.5 4.5c-1.34.71-3.01.2-3.72-1.14-.71-1.34-.2-3.01 1.14-3.72l2.04-1.08v-1.21l-.69-.28-1.11-.46c-.99-.41-1.65-1.35-1.7-2.41-.05-1.06.52-2.06 1.46-2.56l8.5-4.5c1.34-.71 3.01-.2 3.72 1.14.71 1.34.2 3.01-1.14 3.72L15.5 9.26v1.21l1.8.74c.99.41 1.65 1.35 1.7 2.41.05 1.06-.52 2.06-1.46 2.56z"/></svg>

Chrome Cache Entry: 452

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	252
Entropy (8bit):	4.749518607468393
Encrypted:	false
SSDEEP:	6:tI9mc4slmKkmPUtlXX5xiUSdztsG4J5GXyAajYUNrLVKLbrwPtOTC:t4IrmPoXXmUSBaYaj/rL8LvE
MD5:	F8F3636F756E2E0E0892FD9E35174490
SHA1:	6C735659FF64B530A9DA358FEFBF75CB6B14B300
SHA-256:	2634B0DB38CF06C1261C115FD4B5D56177988D8F4E0CD2597A23EF7A44A94D37
SHA-512:	47834E3B35CE2C0B1315E637F81AD7996E738C429AFA4E9FBFAC2BD08C26097381F3353F746923FEA16B045117AC4C615726203063CFB8654E7D4C19A273BB52
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/volume-up/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M3 9v6h4l5 5V4L7 9H3zm13.5 3c0-1.77-1.02-3.29-2.5-4.03v8.05c1.48-.73 2.5-2.25 2.5-4.02zM14 3.23v2.06c2.89.86 5 3.54 5 6.71s-2.11 5.85-5 6.71v2.06c4.01-.91 7-4.49 7-8.77s-2.99-7.86-7-8.77z"></path></svg>.

Chrome Cache Entry: 453

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 454

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	315
Entropy (8bit):	4.648861696465887
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4LIPGDQyIlOWLVJ1WnkX2Wtti0+DrTwtDZi:t4noU/vmRLIO8yIlVVuPWI0gTGQ
MD5:	9F40343399D2331A8E5DE01251A1F258
SHA1:	FF3A3A2AB18BAFA30B09E09A083C3699263A10FC
SHA-256:	CB4F6AB460370D669DE4694A4FB0090C3FADBCDB8C395C813A0680C90C29BFF3
SHA-512:	3F888927E6DE57D021AA124C5894CAFB54BEE195047D12AB55FDED7C6444AB14C3CE4F3DCAB9E9D06E785EA82FC7A96BE4EAAB6639BF721FF6F698D8760486ED
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 3c-1.66 0-3 1.37-3 3.07v5.86c0 1.7 1.34 3.07 3 3.07s3-1.37 3-3.07V6.07C15 4.37 13.66 3 12 3zm6.5 9h-1c0 3.03-2.47 5.5-5.5 5.5S6.5 15.03 6.5 12h-1c0 3.24 2.39 5.93 5.5 6.41V21h2v-2.59c3.11-.48 5.5-3.17 5.5-6.41z"/></svg>

Chrome Cache Entry: 455

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 468 x 60
Category:	dropped
Size (bytes):	9902
Entropy (8bit):	7.876114214714877
Encrypted:	false
SSDEEP:	192:6/I+ncflwX9oezkViiYIeaAicN4lUvxIYzysOI56t7JabqJabqJabqJabA:6/I+2SXXS8Ieis4l2zmm07779
MD5:	D228E97B1D7A35717DA145BC6C8091C7
SHA1:	AB3E63553BB5275F37925F5B5500F41C81B051CB
SHA-256:	B638F68332C4EDD47566C28B2649BEB975EAB0470A6EE4F0DE36C270995E5A6A
SHA-512:	46429D79CA6136AB2F22A3D8F1F96296AB0665416C8E6941EE9B442C89DEBE80A6D297A2831B934AEA25518DF119F9F0DA6B2C34B4FF8C421AD5EA66D67CA6EA
Malicious:	false
Reputation:	low
Preview:	GIF89a..<........fff33..f33.ff3333......fff.f.f3.ff..3.f.3.f...33f......f3f...3f.f...........3.ff....ff.33.!..NETSCAPE2.0.....!...X...,......<.... .di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..h._o#C.p..z.n...0.B'...A{....C.t....v...v..........uw...w......M............z...../....................................v..g..[..D....v.......w...%..1... P..A....@..)U.G....@.....P.1A...v1.%]@.....HGN.@.'....oE7.2...WBf.(.>...........bE..)b....W...W!h.t.H<lA-..kKO.4.. ....h.....ag.=1T...A..........Y`...K......E.O..d.H..&KtS..D....0.M0.....="_k....4......_.^.0..\0W.#N..S..6.Px.u......9..I,........'..\c..H.......h...?E..e.....@.H.. K.[s.0.5.7.y..{..P\.%..1...._....>.Z8B.....:.....#.......7<....rU.]n..eJ...C.y=u.bXG^.#9...$\|"...X..Q....d....0.E.Yt.e.8...Y.J"........._..$.V.%d^....]F..n..?s%J.v,.U.]...i.%.(.b."[..\|....6h.."..j.........<..gq.!..A..Jh....J2 1.......E.U..g.....J.u.{.m...Z.....$B......N*.1.n....n^..[..r..[Z....Z..p..v.a...$h.@.N.a..{.

Chrome Cache Entry: 456

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 259
Category:	downloaded
Size (bytes):	214
Entropy (8bit):	7.0581963813324755
Encrypted:	false
SSDEEP:	6:XtiplDiwlV+CkcNFP1xVfzXvWftYzIqTwGKVA:Xkphiwn+CrFPBe+I/GgA
MD5:	1A39E24D98523528898B61835A18FA95
SHA1:	A4D98EEA8D2865EE2AEFF9D0A701E8269BBA289D
SHA-256:	8C65F5D1BE0AC4A00B51324D1900E4124C58BED2C8464A855BAB3DF6F61F8B7E
SHA-512:	BB11C13E708023920B21FAAA55DE32D5CFC02356402A8B25616F7EBEBD8AE6C115A0AC085490948492881DB2335E84CD6F502F66B3787A8E124E326F09A03FB8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/trophy/v1/24px.svg
Preview:	..........%.1n.0.E.Bh'-R.,...N...{.......A.\|...@....+..?.A...MSJ.b..;7..njCA.-sL... /...x.J......\S<.c..N...:..v....d.[...&...@...:.d,........D..h(..i..u..m-..L.....00OmD..]...(....mw..(..viS.....o.....

Chrome Cache Entry: 457

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	563
Entropy (8bit):	4.367744360532535
Encrypted:	false
SSDEEP:	12:t4noU/vmRTKd2aCJAzyXDMhkVFCzzZvSbeW03LxgI:t4oU/vo49yXghf5UTI
MD5:	3102D9E6EB6482A42839EFF1E5F4CB83
SHA1:	151E7A7B018C590EFF801936C8B3165E21D1F388
SHA-256:	A79054C0A39DB68BD70F2277EE512312190F32D0CCFB12B2B15A8DC833DA4772
SHA-512:	4131362A77102F48C615E40ECC95599300A239BF339831DA47E85A328929EAAB6AC63B67D64CE6FCBEB120D85865F5415C2188877822861BADCE5B908D206A0B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/person_circle/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm0 1c4.96 0 9 4.04 9 9 0 1.42-.34 2.76-.93 3.96-1.53-1.72-3.98-2.89-7.38-3.03A3.996 3.996 0 0016 9c0-2.21-1.79-4-4-4S8 6.79 8 9c0 1.97 1.43 3.6 3.31 3.93-3.4.14-5.85 1.31-7.38 3.03C3.34 14.76 3 13.42 3 12c0-4.96 4.04-9 9-9zM9 9c0-1.65 1.35-3 3-3s3 1.35 3 3-1.35 3-3 3-3-1.35-3-3zm3 12c-3.16 0-5.94-1.64-7.55-4.12C6.01 14.93 8.61 13.9 12 13.9c3.39 0 5.99 1.03 7.55 2.98C17.94 19.36 15.16 21 12 21z"/></svg>

Chrome Cache Entry: 458

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	190
Entropy (8bit):	4.7187854291824936
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHlbRvFjonQFWL4UUk+uUQRNru7u5WLp+:tI9mc4slhohC/vmVR9MQF1Nk+bQLL0LA
MD5:	DFF69AA895E01665A126FC2141C94FE5
SHA1:	4064D2365E13C8A346B1D4BBE31BECD3A18CF5B1
SHA-256:	811E9985BE1AC4E4D630F4B232CEEE366801CB5F82EE306A574C1CE9F844F673
SHA-512:	CDC9FC460CBDA1DA0EF8E7A079FCBBF717E800F732923607DFBFA57E00FD3E8A2B487E9D2FEA95294DEDBA9DA5CFD42491BD3AC65219AEC954A20CB90FDE49B5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/arrow_up/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><polygon points="19.35,11.5 11.5,3.65 3.65,11.5 4.35,12.21 11,5.56 11,20 12,20 12,5.56 18.65,12.21"/></svg>

Chrome Cache Entry: 459

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	183
Entropy (8bit):	5.04119913967567
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHmAIb0WNUoOUGf7/:tI9mc4slhLJ9hC/vmI4mtb0PCGz
MD5:	DB8E084413F0D763A3EFBF3573AFC33A
SHA1:	FF8264FCAAC48F90B0CB74E09D65655EFE09488B
SHA-256:	A058F9F44A83FDF8074494F9322A40EF1B6E159DBEEF1E30BDECCE736AFD1E2D
SHA-512:	28A6102E54D20BBAE6D0A4D98971FE4170392A3354B55FD504C0DD1A0896CB5E786D85AFD64EA9EC308009795EB4C8392F2CE22CCD8A6DC4B84CEBFC4929CDEE
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m10 8 6 4-6 4V8zm11-5v18H3V3h18zm-1 1H4v16h16V4z"/></svg>

Chrome Cache Entry: 460

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	154
Entropy (8bit):	4.827221770489101
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHTdEBhHIHWlYqY:tI9mc4slhohC/vmI45EBho+u
MD5:	FFFE8FD3C6ACCC2FCFDD7B66EA25B99A
SHA1:	13C31200084CB1EED7A746428D2B79AD34FF6790
SHA-256:	55A060294343CAFA3539424536540547F25EFD13A1D2373D7A5E966CE74C5699
SHA-512:	A6D8EB0393B4FB56D4B6025865F542B29AFEFAF7BB2B26E55C5B54974EB3B913E9A17AD54A8FE33525345AF3AD16EC60C06356582F72B3864731EC22C1838662
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/chevron_right/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m9.4 18.4-.7-.7 5.6-5.6-5.7-5.7.7-.7 6.4 6.4-6.3 6.3z"/></svg>

Chrome Cache Entry: 461

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 462

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	196
Entropy (8bit):	5.091943569663142
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHOoZKbVDCjG1UfJQNK:tI9mc4slhLJ9hC/vmI4pZKeG/i
MD5:	93255FE74E40903D5D6D53BDCB39798D
SHA1:	3782892EA18A26A0117F1D206964B0CBA9E9E445
SHA-256:	C7ED29A9FD41A91422C00A05C48EEE65C48F5CFF70D57D1424F00D1D70A3B85C
SHA-512:	BC200854BF7F3570874CD2122B25DBC5DA1816DCF4CD2E2FB2549DB90EB9B279CAFF7F10C854F78D64B4742E1CCB0A3FF0D78D0833E57EE7DF5A80C78B9F66A4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M20 7H4V6h16v1zm2 2v12H2V9h20zm-7 6-5-3v6l5-3zm2-12H7v1h10V3z"/></svg>

Chrome Cache Entry: 463

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	221
Entropy (8bit):	5.051880229825864
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4Bo0NiGcrlSnfa9I7LKY:t47N9U/vmRBo0crlsfaq7n
MD5:	83D9AAA5E179D445E561E8167CEB4D7A
SHA1:	CBD241357B025084C9B107CC5ED0803B0A776C3B
SHA-256:	AA910C07266E14040CA7215E0070769E61A15B724868E1060AE081E8160AB25D
SHA-512:	9071196C5F5CB17BEE54A65712CE1CA63BFDE00EB7892B9056028854C010C57F4BFE59526512266BD11910D65D834425CAEB08529479F96CB52BC49ABC94A48E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m12 4.44 7 6.09V20h-4v-6H9v6H5v-9.47l7-6.09m0-1.32-8 6.96V21h6v-6h4v6h6V10.08l-8-6.96z"/></svg>

Chrome Cache Entry: 464

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 406
Category:	downloaded
Size (bytes):	285
Entropy (8bit):	7.168159809005171
Encrypted:	false
SSDEEP:	6:Xti3H3bPDv2GFbAj7ZCw836lV01gUA6Kbx56UCPfdkuQ+a:Xk3H3bPD+GFSNCX36lq1Abv6UCdhQR
MD5:	BE3096DE3D7E8739D7BF1C93185C5CD4
SHA1:	8945145D594BD44399E70F14546B070D3376CDB1
SHA-256:	5E6AEDB947148195CEA940802669FB37A46E20BC5A989F015BF105823C3BFA7C
SHA-512:	EDBA3D10A656707E9DBEDBE91B90384C3D0C5D5D2ADEB10ECD31734689F131CE7BE92FBAA1C843F6573059F82A2BAE8F675DE9E1CB9DFDA980F98B940D1D06EE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/volume_on/v3/24px.svg
Preview:	..........5P.n.0...+....$.D9.....O...1.Z..S.%yy~~~..1..y..yt.....i.y......s.Q..r.........4...q...*7_.cY....k,p.... .T.$...1....};).d ..(^UA..W......VY....}....J...9..X.K..l.>"E...}.^....\-.dA....N&):..D..S.Gd^.L.5.....@...^.[...n.!.B..C.GR(...NVq.U.4t.n..b..~..........

Chrome Cache Entry: 465

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1280x720, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	60060
Entropy (8bit):	7.9934088971964545
Encrypted:	true
SSDEEP:	1536:0oa2w5XFqWgt0+hH2JgW+gD37TFWv+bhPT:xvkqhS+sJ1+S3PkSPT
MD5:	2CFC61AB66687601A8743E3866499243
SHA1:	274ECDBDAF7938F06F1D28EEEEDE5E129FD7B0A2
SHA-256:	4CDF51FE1530046673982B5DAEBF5D716D7BEEE39D656C08BFA7E06F70EA9212
SHA-512:	8C632123AD619EA8BA06BE8ACD1FF605F30AAB72E7AB25A168D48C815D479D2EC369712837DE1A12988278B1DD80EEA1371652DF9245EC2E903B23C9B2BC76CD
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....%.......>m2.H.".#.Kq@..gnP..^.s.s...3.P4...}.l.+..+...K......!....?.}Y...}...E..6_....?.z..'..q.......C.1........_...?..}&zm.zrA.S.3......_._.=......?...~....[......z.L......A.K......6qq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.....9...s......... ..\@'8..Nqq.~......S?..=.f...U....9D..6..(...<sD......b%.-."Q...<..x.!1&g.h%u`.OE..2..zf..2.........%......;..+V.hQ.g..;....N.<R..\|....E].U...m..F..#.>...loE..6z.$F.hF...-...C .<..Jb{k.:.o..]\|...x.s.................8..}.3.......\..R.`...C...Zg_P...;.N.#Lm..2.._.y&Q._........."CF.^.!lc...1....P.WXx..k....7......&....9.N......+v...z.K.eb....=.\....1Q...../{.A.I...`..#....I.....g.3...........-.....V)..&7......9U.,..b..V...._gF^ev......~.....7..=.qz...&%.1...r..j:7.k....s.-8.Jw...@7u...%$KMs.+... ...G......x...,..v.W.......4..>...W.......o..Gs.?.d

Chrome Cache Entry: 466

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	3727
Entropy (8bit):	7.874568988212526
Encrypted:	false
SSDEEP:	96:q45H5G3FdMCzI6ODTg3+NTmYDwEeOTK9ipz18:qmKFChpcYMgeipze
MD5:	69AF4B2D4B742C569E5D4278A800F70A
SHA1:	9C55EF5F7C09811358E8B5716F25AA3DC99CDBB0
SHA-256:	60D72C0F4941B078AC884C9B4F458AA65C1450826A292D6B1FBD774F1064B5AB
SHA-512:	B70BD42AD2025F05A139FF58A82907311866C9DFFD164635C4BBE9C7254DC2B50B7B8B2A16B30DBC8AC787482419430AC8C8E72E38FC8C11CAD29277D1676DE8
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777...........".......................................7........................!1.A."Qa2q...B.....#Rb...$3S...............................+......................!1A..Q.q"2a....................?.L.N...<jEjG58.G.9.)c...c.u...i.X.1. j zQK...@d...U...d,.ug.F9`;{~.k...w.V..-J.w0......z...A.d....U.......dG...[.@..MX...;..D.7...KZGb..'..JS..6W.ruc?Ja<.Y.'....ydg...\|.,Uv.uI8...-...A..4..uX..L..J.q.....1.P...y.0eo].O.kj.....>.$...b..7=>...RJ.Y.+..Y..C_.Gn!..FxfR.]pF......./'I....._....T..-..(.0\.4m.2.n...]5.Z.Z.........Ki.6....}(0..q....C.I.JGI..u8.:23P.<X\..-.c..'...;. ..Y.,.Jd1.>..2P..E.=....^...IU...z.y.9XG.....jI#.F.....#V.y.t,.......A.j]Bv.....&'9..P~...d..t.w.6s.&...1...;.H.V..C.m....F...Ov.}..Y#....5..Tr.N[.....jE..x.##>...DW{..~\..4x...}F.N].._./....3.[x=;.."..r...+!g>..._......?...x..K mX`.....r......

Chrome Cache Entry: 467

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 415
Category:	downloaded
Size (bytes):	277
Entropy (8bit):	7.19967135192147
Encrypted:	false
SSDEEP:	6:Xtza9fxoUwJAW9dJYGIjx+ylwqIKIQDR9NBir3pI:XH8jxnbJtN9Nu3pI
MD5:	4E15AC59D5FACC07FE028D967BD2880C
SHA1:	385F3E5857A53A01D81DFFB5BC91B0CE7E6D57E4
SHA-256:	BF45D0831BD037AF7620D292CA502F41056D4A4C23B85F958BCB79F76BBC5AAC
SHA-512:	8D82F1E1272FEC0F03906FF1E69938DCE198AD44F5D1D00EC3A413438B4114EEF0B24C59D2918E268FCA14256759B314A8DF4A4B98C812F7F62E7BC0EBA5E583
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/youtube_shorts/v8/24px.svg
Preview:	..........%..n.0.E...>&q^...].... 1..DF...3.$.c..t.9....^-...j.R......!cL.....:/G..+8.k.~.ze..y....c.x....^.l...t.-..0..2.8Yl....08..X.Q....^W.u.B.....dP..26..6...}..'..(....ph,C....0.Q...s....e k9..5..5..[.A{...h...(N.y.Z......Y..T....k.!..ot.e3.t...V......L.....

Chrome Cache Entry: 468

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8711)
Category:	downloaded
Size (bytes):	9035
Entropy (8bit):	4.8674445707757314
Encrypted:	false
SSDEEP:	192:Uu4FKEmMFBbIwMEn3HtqETYDbKIeIbkLsS6SxS/lBHBvH7NJuJw:UpmMFBEyqETYDbKKbkLspkklBHnJuJw
MD5:	8DEEA46AF638BE7193B6BB6C45B6BFCA
SHA1:	A207A120CB2571A0A7109572AE0F59D1C3643BC8
SHA-256:	0287394785E1E23B3DC30740DED726EBBC8BD69B79E46A5E9E3CB8940A4AF0CD
SHA-512:	CA66D18222F6E9E24CC19A1EF37ECDD9B76DBB38F55085495B48F0CA701AE038D4FFF863E5A59007F55577756894FAAB82FCB20FB8987AC5363CEA95D44D8A41
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/sw.js
Preview:	/** 6115635180759565855 */self.document = self; self.window = self;var ytcfg={d:function(){return window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k]:o},set:function(){var a=arguments;if(a.length>1)ytcfg.d()[a[0]]=a[1];else{var k;for(k in a[0])ytcfg.d()[k]=a[0][k]}}};.ytcfg.set({"EXPERIMENT_FLAGS":{"H5_enable_full_pacf_logging":true,"H5_use_async_logging":true,"ab_det_apb_b":true,"ab_det_el_h":true,"ab_det_gen_re":true,"ab_sig_bit_dea":true,"action_companion_center_align_description":true,"allow_skip_networkless":true,"att_web_record_metrics":true,"check_login_info_at_app_init_time":true,"clean_up_manual_attribution_header":true,"clear_user_partitioned_ls":true,"compress_gel":true,"copy_login_info_to_st_cookie":true,"csi_config_handling_infra":true,"deprecate_csi_has_info":true,"disable_cached_masthead_data":true,"disable_child_node_auto_formatted_strings":true,"disable_enf_isd":true,"disable_log_to_visitor_layer":true,"disable_pac

Chrome Cache Entry: 469

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	406
Entropy (8bit):	4.6370422082139235
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4zRhDhjIa5Ql9NNhLkOaXM+1RJ3OrWF13VmUoUfxHA8:t4noU/vmR9hDhjIaOl9oJR5pbUkHb
MD5:	AF8D41053A79258B40CCDBCB3CBDE0EE
SHA1:	361362BC0BFFC588E0F7D4DC04BFBAC7C02EBBE4
SHA-256:	FEA70943AFE49FDAABE42FA012B7EC8F0D1551A12BA88C8A310FEB4F792281BB
SHA-512:	7021D8EAAA7EE73DE9ECC89A92793D8EA01260F7C0A714E9C7A2969DCDB969D6F165DFF6A5F3701300E0BFA3F988DA828276E6DAA5F3EEAD99627101684E24F7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M4 20h14v1H3V6h1v14zM6 3v15h15V3H6zm2.02 14c.36-2.13 1.93-4.1 5.48-4.1s5.12 1.97 5.48 4.1H8.02zM11 8.5a2.5 2.5 0 015 0 2.5 2.5 0 01-5 0zm3.21 3.43A3.507 3.507 0 0017 8.5C17 6.57 15.43 5 13.5 5S10 6.57 10 8.5c0 1.69 1.2 3.1 2.79 3.43-3.48.26-5.4 2.42-5.78 5.07H7V4h13v13h-.01c-.38-2.65-2.31-4.81-5.78-5.07z"/></svg>

Chrome Cache Entry: 470

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3
Category:	dropped
Size (bytes):	24873
Entropy (8bit):	7.972251938810565
Encrypted:	false
SSDEEP:	384:HzcqSdaf15cM6zkf8Ys4/EcNUDIiFXWA1uEV657I0gB3F3wofxXZVrtOoQ/6BSHl:TcdatSZzq/EcNUDZuKEk93FPXNBdfm
MD5:	25124BFEB241628AF7B24A119445DCF7
SHA1:	B09A049D979BD84FF115A6110CE439017C06CA98
SHA-256:	8AF40B92AD689F388093916BBF95C3DAA76EF96C868570073CD606015626FD9C
SHA-512:	02C4C9502751AC6FB56C2B25AEC39A72836679AE94787389E9D46BD2454CC3CAE1F9DF5A70294292D6DCAA39080866E2ACFF08BD7937817EBCF31454DB44DBC0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....................................................................................................................................................................................................E.........................!1..AQaq......".....2.#BRrb.....3..Cc.....................................-........................!1.A"Q.#23aq...................?..k..u_=+..n...h.P.3......Z.`Z.D j,-...%F3............CA.@.&..."....V.xOD#...R....A......{...#..a.....2..\x.z.R......:..:.m.......J.....^.....r......7..IIjnZ...~...,..w..^W.S...X..%.?m.q......b.....'.YU.4..m\|...Xn7. .p9'g....,..8...)...A.....C...t.~.r...k..4...L...Qa./...+.R!X...0..,"N\|X..Vrn$....H."...B.].z........G.<6......T.W...v.k].h.3..w..d.....J.cJ4...U.DiTA.z...Z^%=....9.b.Q.:.. )~.k4.....r.C..Q...f;wLS.`u.H.C..h.I..k....T...v......>...w...w..:.[..Z.A.........HU..SN..?..L...k..>.@..8t.....k=.3pe.f+...T.9.8.rNc...5<.:...C92../t.".k(.@....;...Wz...7.....d...b.9...B\.zW.yq.1........<.

Chrome Cache Entry: 471

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	789
Entropy (8bit):	4.4194384212801
Encrypted:	false
SSDEEP:	24:t4takfIIJEGBA8rb0CklxqTaccoUZ/ES2mM:kGGSVC8Giu
MD5:	B552B4C85CA1E2238DB395B9A49411FF
SHA1:	D8D5C6B8E8253732F1DD1CCE2F8C4F3C1F1BB1BE
SHA-256:	949AF1BF7118AF3ADA0A087666E6E763CA627DBEFB1EB2E3B978210CFE808FBA
SHA-512:	62DC81FC15CE62AFD2C22C36A05C5C5CC6BB4E5231C8BDF11143CFA8C950A6A161B693BE7B93AF6BFD9A0C348D6B4A49D9956706029E1307135B4D191869D837
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/creator_studio_red_logo/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill="red" d="M11.13 1.21c.48-.28 1.26-.28 1.74 0l8.01 4.64c.48.28.87.97.87 1.53v9.24c0 .56-.39 1.25-.87 1.53l-8.01 4.64c-.48.28-1.26.28-1.74 0l-8.01-4.64c-.48-.28-.87-.97-.87-1.53V7.38c0-.56.39-1.25.87-1.53l8.01-4.64z"/><path fill="#fff" d="m12.71 18.98 4.9-2.83c.41-.24.64-.77.64-1.24V9.24c0-.47-.23-1-.64-1.24l-4.9-2.82c-.41-.23-1.02-.23-1.42 0L6.39 8c-.4.23-.64.77-.64 1.24v5.67c0 .47.24 1 .64 1.24l4.9 2.83c.2.12.46.18.71.18.26-.01.51-.07.71-.18z"/><path fill="red" d="m12.32 5.73 4.89 2.83c.16.09.41.31.41.67v5.67c0 .37-.25.54-.41.64l-4.89 2.83c-.16.09-.48.09-.64 0l-4.89-2.83c-.16-.09-.41-.34-.41-.64V9.24c.02-.37.25-.58.41-.68l4.89-2.83c.08-.05.2-.07.32-.07s.24.02.32.07z"/><path fill="#fff" d="M9.88 15.25 15.5 12 9.88 8.75z"/></svg>.

Chrome Cache Entry: 472

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HmnY:OY
MD5:	C13E70783B272C1B1F38DF78789CB038
SHA1:	7F182E8DA5EE7FB00A151AC0D205D71E9C017D94
SHA-256:	8800EFDDF6F05E9F2F4263946E6C5AB296C955138B006CE3A74D3B0F143BE92A
SHA-512:	A7F5941549D283934D49EE8BF8FA069D387FBDF3BBB86F884F14FD4E10EB5F6E754F55E0F3F94DCE79EF84FA2787A5F9DB8A24C74BA13BAF379DB66BF35FB8F9
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAk8yq_jFOmFmxIFDfGjW-M=?alt=proto
Preview:	CgkKBw3xo1vjGgA=

Chrome Cache Entry: 473

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (3409)
Category:	downloaded
Size (bytes):	9162
Entropy (8bit):	5.521169167025883
Encrypted:	false
SSDEEP:	192:zluJcdKb0rm7SkBFB+v7HeZgnV4k3fSeya2iG+Kl:BuCIb0rm7SUFBKKWV4k3fSha2B+Kl
MD5:	307067BB185B8C4381BC881ECD8D99BA
SHA1:	BDF29E33A7B9423732B4C697F08DAB1F0B198D75
SHA-256:	FBB0578EF98EDEB8ACAC009E1473157DC5EAFEBE4A39049A5224B7B6007620DB
SHA-512:	3A8CA7181A1904076B0801D3EF02F788EB1B400FBF79B6203E27918C7126B3C26D98425D29211C5DF3D4531C57B755590401F06FBF03C764B35AE9606638143F
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20240626/r20110914/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=this\|\|self;function m(a){return a};var n,v;a:{for(var ca=["CLOSURE_FLAGS"],z=k,A=0;A<ca.length;A++)if(z=z[ca[A]],z==null){v=null;break a}v=z}var da=v&&v[610401301];n=da!=null?da:!1;function ea(){var a=k.navigator;return a&&(a=a.userAgent)?a:""}var B;const fa=k.navigator;B=fa?fa.userAgentData\|\|null:null;function C(a){return n?B?B.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function E(a){return ea().indexOf(a)!=-1};function F(){return n?!!B&&B.brands.length>0:!1}function G(){return F()?C("Chromium"):(E("Chrome")\|\|E("CriOS"))&&!(F()?0:E("Edge"))\|\|E("Silk")};function ha(a,b){Array.prototype.forEach.call(a,b,void 0)};function H(a){H[" "](a);return a}H[" "]=function(){};var ia=ea().toLowerCase().indexOf("webkit")!=-1&&!E("Edge");!E("Android")\|\|G();G();E("Safari")&&(G()\|\|(F()?0:E("Coast"))\|\|(F()?0:E("Opera"))\|\|(F()?0:E("Edge"))\|\|(F()?C("Microsoft E

Chrome Cache Entry: 474

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3234
Entropy (8bit):	7.93877638039708
Encrypted:	false
SSDEEP:	96:nZs1NInCIDtSyU5dU/ldF05FgKRTzsdbLghL9:ZFnvDgyU5CNL2F5zMb49
MD5:	7E2BC18D59C9A814FBC390E07899A7AF
SHA1:	D5E91AC6E22CA6A926951976511949AA08B53061
SHA-256:	5D7D00FEE5C4AE878529427120A46B1B64107B76876880B176AB1CA1AFB5F6A2
SHA-512:	372ECC1E55DCED0FB65587C2BA10F0E817A9BEF140129962301AFEB7BE57D59453FEAB0AB7A5E51DA2E26F33B1541BD82D03400751F74FA8EC891AAEAB64FBE1
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/fNFzfwLM72c/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD3tub5tA7yLzokq5mj66fzUS1czg
Preview:	RIFF....WEBPVP8 ....08.....^.>Q..J#.#..@p..c..k.m?....W....w....].....2...5...o.R..l.Q...m......G.7W.....R.O....^.....s....>.i..<y..o....~;.)......Yn...!@.v.B..e.y.Y,U"._2.....d~...3.....L.c'...+~M._./....-....x..oA.O.5.\|(....&Yn.Au../.on....V.:......M.....Ep8...Z.......>.ll....`...ADA..SH9...X...G.....F.]..v..4._......P.....,2.....[.\|.....d\rq".4.".\c@g.U....P.......W.....;#82.hv=XAG......i9.&....6.!..6e_.?.<.U:<n....O.^..U.0B......}..M$.6X......`.9.l.Vhwr......{k+.....{....n.....qm...?.s.).C5.NJ..z.}EJ.D.hf.-y>......c...z.~E+../T.\|b\|......B.L8z.~N...'vR..fLP.."t+ 8=s..m).V...n....K...\.j.\|.....>U.&.(....z...G...]u.8.....i.WD......62.z..v8.....Q.+...g.=Qu.]PZ..T.e.n..WZ.)..A.....M..Ik..@.<^.....X.:..F.n.ZXb......N.m..r2./.Q#/..{.......`E.W...L..kS...v...D.....`...e%m...IX]..!....!..h..Y..O..J.L..~$..+..w..9p..s>......U.c...6'..}.~.m:.`.c..h.......I\..e..-...;.1.s7&..R.W...Q_.>.......FB.Y1tT.`.O.AC.:.-..`.l.VyO.4..m...1.f..:...X

Chrome Cache Entry: 475

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3666
Entropy (8bit):	7.944434458171149
Encrypted:	false
SSDEEP:	96:79dMDO5GkVttoeE7+q7i2cgVWvnwrVF+Dq87nykxb:7ZwkVttoeQF+l2WvS+Dq87PN
MD5:	0AB2DF2234847FCA898AE1835A6CBCD7
SHA1:	EF78048C722463A71B709D0C13CA7506DF651674
SHA-256:	D86DA4F88B869EA73B513EBE1B51271AF6BF3BA30E2EA8875331F4C4FC2689AD
SHA-512:	68F1A3074BE09B93BF5EEA6E61E4F5A6C081727B3BC3E57A8BABF06148B4CF1965C24A5508AD3294F82D721BB0635FA237DF2E6962738A483E5E68B4EB5E395B
Malicious:	false
Reputation:	low
Preview:	RIFFJ...WEBPVP8 >...P9.....^.>Q..J#....8....i.G..S..<.......}.....z`uN.H`1vO...W.+?'..'..j;.?./.-.p.....E?".....[..j.z.{U._.....:...........&..............r.%.................W.o...W...G.../e..FLT..h.v..@..:}p..u\.;cP..O..}i.....[J.......O...o...i..y..lX..h..m.....b....-...t...]...t.../...m.N...C...U..}..5..s..M.\|.2.}..M<{.W.)..1<.uv'.......F#.....T.c...mm4...z-.?...][<o.3k.W.TM....2...H......(..l......w...d@...~..g.:.....%%.)..)...z...$..i..,n..C..)9 M....C[P.....Bh.......tQx.T^.@l....bq.....3.....].7 ..X!(.7.TF.$.)6..D3........=..SK.B.....S.N....!3......Y...H.q...BJ......i........UM..Wf..)....N..e.b..@..7.u..vw~{>.R.:....1c}.ST...u/{.Y^0@.\|}XR.,....J....lL........j.....id...x.W..A=..~.d.n.z"...n.#'....}l[...\..:}q......4.a;1._..-W.......<]w.w..X.V_.....jH}..._.........IV....".....S.Rd....hH)...............E...4.x%.o.G.Rl.9c......3...:......h.A..W.w......!.e..........EC..3P-..K?.k.e..;<...Z.\|........(.....H.#i%c.3...Tw../<.s~H..W...t....

Chrome Cache Entry: 476

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1116)
Category:	downloaded
Size (bytes):	74033
Entropy (8bit):	5.495613795437632
Encrypted:	false
SSDEEP:	768:4GIr9iykWXc8VV4ucbxiyXdpGupDoPCf+/h0spG9PG320bVjENfkS3il+97I0ygH:pQ1/rPzRQUSENM9xiiyQqby9
MD5:	E716E0F058573851D03609717B046749
SHA1:	A4A9CAE96031022448710C459A6FB47A682A77DC
SHA-256:	B023B0B064105ADB8BDE503331C646594AC2CA372B961529F94F2FAC74D862D2
SHA-512:	B98D1EA960DCD6A7743069186E798974295E0E2D0BB1637A36362876B5D06284D63D87F372AA65AB3CA59D292954F4D659CBE9F772642EF8459B5BD061F5BD84
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Roboto:wght@300;400;500;700&family=YouTube+Sans:wght@300..900&display=swap
Preview:	/. See: https://fonts.google.com/license/googlerestricted. /./ cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2) format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2) format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2) format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. f

Chrome Cache Entry: 477

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (3409)
Category:	downloaded
Size (bytes):	9162
Entropy (8bit):	5.521169167025883
Encrypted:	false
SSDEEP:	192:zluJcdKb0rm7SkBFB+v7HeZgnV4k3fSeya2iG+Kl:BuCIb0rm7SUFBKKWV4k3fSha2B+Kl
MD5:	307067BB185B8C4381BC881ECD8D99BA
SHA1:	BDF29E33A7B9423732B4C697F08DAB1F0B198D75
SHA-256:	FBB0578EF98EDEB8ACAC009E1473157DC5EAFEBE4A39049A5224B7B6007620DB
SHA-512:	3A8CA7181A1904076B0801D3EF02F788EB1B400FBF79B6203E27918C7126B3C26D98425D29211C5DF3D4531C57B755590401F06FBF03C764B35AE9606638143F
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20240626/r20110914/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=this\|\|self;function m(a){return a};var n,v;a:{for(var ca=["CLOSURE_FLAGS"],z=k,A=0;A<ca.length;A++)if(z=z[ca[A]],z==null){v=null;break a}v=z}var da=v&&v[610401301];n=da!=null?da:!1;function ea(){var a=k.navigator;return a&&(a=a.userAgent)?a:""}var B;const fa=k.navigator;B=fa?fa.userAgentData\|\|null:null;function C(a){return n?B?B.brands.some(({brand:b})=>b&&b.indexOf(a)!=-1):!1:!1}function E(a){return ea().indexOf(a)!=-1};function F(){return n?!!B&&B.brands.length>0:!1}function G(){return F()?C("Chromium"):(E("Chrome")\|\|E("CriOS"))&&!(F()?0:E("Edge"))\|\|E("Silk")};function ha(a,b){Array.prototype.forEach.call(a,b,void 0)};function H(a){H[" "](a);return a}H[" "]=function(){};var ia=ea().toLowerCase().indexOf("webkit")!=-1&&!E("Edge");!E("Android")\|\|G();G();E("Safari")&&(G()\|\|(F()?0:E("Coast"))\|\|(F()?0:E("Opera"))\|\|(F()?0:E("Edge"))\|\|(F()?C("Microsoft E

Chrome Cache Entry: 478

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	181
Entropy (8bit):	4.799280796786745
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHMkRTRcAyIXNAXTRDTwIdiXxlFU2:tI9mc4slhohC/vmI4DmAyqNAD+giqdw
MD5:	D51D57E6E5F714031C043C01844470E2
SHA1:	B99E1486E9C5D49B2C0EC04474ECE07DC0F9AADA
SHA-256:	170F019DA207EFEABFE69EBEB8C4AD6B8A2299FE96E248D75BCA161465B2805D
SHA-512:	503DC16F4725CAB41616A739354693244E0A869CDC94A4E5827C494595A80D57F4927E86989A4911E0D69DF183EDA243B254D3ABC4481312376DF25158FCB970
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M22 13h-4v4h-2v-4h-4v-2h4V7h2v4h4v2zm-8-6H2v1h12V7zM2 12h8v-1H2v1zm0 4h8v-1H2v1z"/></svg>

Chrome Cache Entry: 479

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	78
Entropy (8bit):	4.858681545591168
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5KVErcHghI4KuP0WTC:tI9mc4slmR4rTC
MD5:	5FFB1290441ED5E56850CC92DB640DBA
SHA1:	ABD55D2B6EE392BBC8A89FDCE5B8560E37119D90
SHA-256:	C74EF8500A3AE98D1E16F03B030BFD6726DE72A8911FC397D3301E4B9D86369B
SHA-512:	83826FC55AF7335F3AE5E14CAD4056942F3F9C3FA3781258A771710DE1D32EB3412897F6AC3E09090192BE11EB490F996EB475E7B563EB6CD6B15A8F3A1B008F
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/play-arrow/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M8 5v14l11-7z"></path></svg>.

Chrome Cache Entry: 480

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	384
Entropy (8bit):	4.820720215490487
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4CpBSNwLSoD0pVhyVLT7UiHQ3aju2lQjGVT7UinwFju2li:t47N9U/vmRqBKbsL3RQKju2lQ03VwFjs
MD5:	BD5B52813BF62EC230C9EF682AD48DA5
SHA1:	AB4B59D9F48A229B4D5C6C6DE9E4BF8D4AF32605
SHA-256:	179E849AAD715CEDDED335BFB09228C4985D113BC1EC61FB7C95785B8E6D941A
SHA-512:	7AABEFC130160D98B3EF047EAB303D13DCD0BDEC71A24372716FA060FE35AA91D86B1C10CAACC36B0332E9B3B6E59141EC1B32DF7E50543D0927ED0ACAB881F1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/gaming/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m16.97 4-4.99 2.8L6.99 4 2 6.8v7.6l9.98 5.6 9.98-5.6V6.8L16.97 4zM10 12H8v2H6v-2H4v-2h2V8h2v2h2v2zm5.5 2c-.83 0-1.5-.67-1.5-1.5s.67-1.5 1.5-1.5 1.5.67 1.5 1.5-.67 1.5-1.5 1.5zm3-3c-.83 0-1.5-.67-1.5-1.5S17.67 8 18.5 8s1.5.67 1.5 1.5-.67 1.5-1.5 1.5z"/></svg>

Chrome Cache Entry: 481

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	192
Entropy (8bit):	5.1052862366626295
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHEkRY4zf9UJtTzWNRI:tI9mc4slhLJ9hC/vmI4zRqj/CIIHZY
MD5:	326BF908127D15320C80C12962A91DCD
SHA1:	D346CFA4AE456C3E070206472F06E90A9DAA8C25
SHA-256:	97DC7B49E38E2084B1877557AF54EBA95BF7FAF06980E0DCCDCA2EAD81E35B60
SHA-512:	E4835907B72B75C09F32416911A4B3535791B54C6BDD0BFA9C0A48399A8E4930CDBD0B32FD13A67002F49F99199FBE358D5B4B89E4609C837E73799FF0D46F08
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M4 20h14v1H3V6h1v14zM21 3v15H6V3h15zm-4 7.5L11 7v7l6-3.5z"/></svg>

Chrome Cache Entry: 482

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	https://www.google.com/pagead/lvz?evtid=ACd6KtzZsIKmHRkyUkQIRup6Ep_7IUXYPR7U2tS9-Kex0isV_rgARVnHtg4SqEDan3CnnVpIZoUxIJ85M6oKqEcxVXWPJP_Fwg&req_ts=1719959158&pg=MainAppBootstrap%3AHome&az=1&sigh=AB9vU41HvgPuT3NqyAnZ2WHRwDV1YbX6Yg
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 483

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 214
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	6.856741251192648
Encrypted:	false
SSDEEP:	3:FttrZpgvU1xeXKPXyKryOhCTBs+LQnTciacNzUrWCaafc7x4VYv5LXB/HFvP6KjC:Xt1OvUyOCKDCe+8acNzUaCaafc7x4yR6
MD5:	95FCC836930DEAF4291A00F22C5319B0
SHA1:	2D497385CD8AF9D407836E56E49A08ABF111F6F7
SHA-256:	0967AA18B95031B73CAFAA6439B808AE8432BCAB150E89E384B8BCC55566A537
SHA-512:	355FD0305553B21E4CAFD1F5CB3D7830219C4BE9B1DED904E8AD8EA8FAE2F7D2457362BD2F386036C05B7A1B7DB939390CEDEE5EC4662958AF0791CFF0B92535
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/subscriptions/v7/24px.svg
Preview:	..........M....0.E.......m...XX.D... M._.....k9.m..4.{.1.s.\.d.l=......57..y..m..].f..}...VC.M....=.#g...:..v.....OT.@7.$c.2.}Ni@q.Z..G....J..'aIh....$.j.',eMx2^d.....T.....

Chrome Cache Entry: 484

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 336x188, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	8178
Entropy (8bit):	7.973410048023401
Encrypted:	false
SSDEEP:	192:7Nqas0IInKNVPHXvgrCTVVuO8MwTcfj/Yt+e6/jw5a:98hLpDZfVfrUIT
MD5:	44FDE90CC036A4C4FAA69A5E74289A0C
SHA1:	7F4DE7B2E04AF5E80EE31A72952C6CE69B28ADAE
SHA-256:	885C740D7DB9DA6A3F434AF65DAC5FB7677931CEAC8D0AB04716E9AF4F00DA2E
SHA-512:	4A960EF11E15197BEB16944FF4E4ADD5A7B1A8152E8442C1D89871D34A706BE8593F8DBEFBD30BD69A0CBC7388A971EF1A73D4CFC2BDBA5AD8101B9F161DB7B9
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .........P...>Q&.E..#.$.....en10h.._.P..'....D.W..........'..Q_...?.z2...n.....w......Lw...~........"_..._........5.........=-.._.o.........._..V>i.V.@.M..[....H.`...................?:.K.+...G..?..........u.{...O-NqZ n.v.....kK%).7.s.)UG.<..K:.%.....A..5....Z....I.&.F....DX...%.n0.k.@..o&....:..k.e.P.=o.In..+...l.9.;~j....0.z)...^.u...N.v..NX.D.5..:G..]d.@..8.Y..H./.3.qo&..c.........P...6b..[......o.M}.......B.W`...."&.mp..kW)<......./.p`R/...c.[`m.......Q..P)-..D..8..z'SUs8..O.O.L.[.{.0,..I.......^NK.6yg.Y..F...WM.:....7gm....5.Nj.......<.$..[.....+.....b.......f..........U...U..z<..4r.........Rh..<..,5.p..w$O.c.HB.m`..0 P(Jz.n..\|Q5..Rv.}.u-!...U....,.....5.....x.MHq..kf.XR.........r.^...P.P\|....p....`....i.....W.......O>.;d..Jr/..Gh..H.......'.'..5../.Uu..T..%3.wXi..............oz.v...t/LSj...\|....'.......M..."\.w7...........A.X..M._#...s..uo...^.. ..@^..9._.8..i...xOMhP.=~...eV..........u..S...J.F.....a.X.....0).

Chrome Cache Entry: 485

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 486

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 144 x 144, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	729
Entropy (8bit):	7.234317148111566
Encrypted:	false
SSDEEP:	12:6v/753iqqqqqqqqqqqqqq8apRTOe/RlzL064pdYTCrQQXHth6oHS0iwPuOb254iu:u3iqqqqqqqqqqqqqq8sdOe/RBL0NpdAM
MD5:	F6E5A9215D13C4AEF31D125532228410
SHA1:	CF2AA58CCDDC2B414CAD4A28394EF66CD2AE9FFF
SHA-256:	8639DB0DBAA462E7BC11D7884C3A6CB84275DC988811CD2BFAF5CF2E65BC0FE0
SHA-512:	2468FD00812806E44A2EB1AEF7F408D643DCFBEE655802E69B62DCE21F84AE3EC6E50F6612F332CB35FF53EC4792104C27DFD6DA36327FBEADE9D7FABC7C3412
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png
Preview:	.PNG........IHDR...................cPLTE.......................................................PP.......... ..........@@....``.00.......pp........tRNS.@0 p.....P..`....Y.....IDATx...Ub.0.EQC.(.2..W9%......Y...eg.1..c.1H.C..$z.. ?......M......R.. +.}.}t_0.m#.....T.....gje.9.7u..%.7...y..Q.D.Z..^vW..x......(.G..!R^..)..j4P...B.(H...igA(j.d...?...,.....DM8ZZ........:8...uCG.'...P....\....=..\<.\......=c.......H..`...+YD_.H...6vHa ur.....&.vJ.@.R.p..Ni.@.)..i......#.vJ.@.)...tJ......+.......-.S#...u.....}-.\.N..{.....m._.A.."n)..l...a...CmzV.ma....-D..K.....3...x...VH.i...V.2..u2..).J..cU4.....VX......\BC.`...V..:.(:.Y.(..h.O.\..dcC.Q..:..~Lm..&..{v]z0....9=....-/.O.g.1..c.1D..b..;...F....IEND.B`.

Chrome Cache Entry: 487

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (612)
Category:	downloaded
Size (bytes):	6072
Entropy (8bit):	5.3358954969419585
Encrypted:	false
SSDEEP:	96:h5F+xIg1vivMjZBt7qRy1CJFzcTTgRq0hHJb2XrLt4G3L1k2ND+IH+f4X64kPpMH:h5kxc4OROUcF7LGyLGI9/Gp43
MD5:	C830550B15E5AC5DCF37B370FE5AB1C1
SHA1:	A20E141D66DDF9DD246DE291C02E643BD6C8B06F
SHA-256:	52276E089E0BC9667715F64905BC12FD823DE38F485169FA73EDA6ED265E531D
SHA-512:	6A83115D0EB6E8B9CEC9972BB2E5496A9BEF3A14D1D5181C80A7FEA582BDA9EC0E06C2D5779E2EBE70012A5E7F74977177B751C72FD81F602FDE38270EADA936
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/miniplayer.js
Preview:	(function(g){var window=this;'use strict';var Vxb=function(a,b){g.W.call(this,{I:"button",La:["ytp-miniplayer-expand-watch-page-button","ytp-button","ytp-miniplayer-button-top-left"],W:{title:"{{title}}","data-tooltip-target-id":"ytp-miniplayer-expand-watch-page-button","aria-keyshortcuts":"i","data-title-no-tooltip":"{{data-title-no-tooltip}}"},V:[{I:"svg",W:{height:"24px",version:"1.1",viewBox:"0 0 24 24",width:"24px"},V:[{I:"g",W:{fill:"none","fill-rule":"evenodd",stroke:"none","stroke-width":"1"},V:[{I:"g",W:{transform:"translate(12.000000, 12.000000) scale(-1, 1) translate(-12.000000, -12.000000) "},.V:[{I:"path",W:{d:"M19,19 L5,19 L5,5 L12,5 L12,3 L5,3 C3.89,3 3,3.9 3,5 L3,19 C3,20.1 3.89,21 5,21 L19,21 C20.1,21 21,20.1 21,19 L21,12 L19,12 L19,19 Z M14,3 L14,5 L17.59,5 L7.76,14.83 L9.17,16.24 L19,6.41 L19,10 L21,10 L21,3 L14,3 Z",fill:"#fff","fill-rule":"nonzero"}}]}]}]}]});this.J=a;this.listen("click",this.onClick,this);this.updateValue("title",g.yT(a,"Expand","i"));this.update(

Chrome Cache Entry: 488

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	332
Entropy (8bit):	4.296126422761529
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4FCvslQHcUiC7Q3ajuWskpwpWvWuMUMU2ldUiiW8kWuMUMUy:t4noU/vmRUslQ8+QKjupkpwpWvWuMUMk
MD5:	F94123242618D16B950113BD6F22229D
SHA1:	28B2E7A4ADB970446E442AE187E07328A68C1687
SHA-256:	EC4C1E58EBA5A80E78C1B52486930F60634B4940322F230C236ABDCFD9F92DEC
SHA-512:	E54B679A15465BEF172F1C364E34337B0C97D92C0F6C444253C8B69CD7147FD728DFEB1CDFA0DB64F0C13DC04999FB7CCE3C6CF49E77B4D1BA50798D9EDB3D94
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/overflow_horizontal/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M7.5 12c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5.67-1.5 1.5-1.5 1.5.67 1.5 1.5zm4.5-1.5c-.83 0-1.5.67-1.5 1.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5-.67-1.5-1.5-1.5zm6 0c-.83 0-1.5.67-1.5 1.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5-.67-1.5-1.5-1.5z"/></svg>

Chrome Cache Entry: 489

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	146
Entropy (8bit):	4.927838870881226
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHPPQGZYurgvCo0/:tI9mc4slhohC/vmI4PPQG7rQCz
MD5:	F00EABC2D958B20D27018698E9EE9D5A
SHA1:	F1924FD47C49C7B40C3AC7B983137345C7D36D4F
SHA-256:	36EDBAF2D04F3475DE1BA1B3EEADDCA06F232CA0B35AF734A218A8974B9F0D9A
SHA-512:	4532BE68AF977C96DF2A768C2059827142A8F0773F2010CBF160B9F81B2AEEEBD635AFC2092DBA38CF355B0912DEF6DD51E601FE6112EE944BE28A122FD4B60E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/bars_3/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M21 7H3V5h18v2zm0 4H3v2h18v-2zm0 6H3v2h18v-2z"/></svg>

Chrome Cache Entry: 490

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 193
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	6.6867937642824025
Encrypted:	false
SSDEEP:	3:Ftt0r6gaAwddbrPnDbDTZ5KtYGQN3oMepCoXVo6MUKXTLwkPOo4ugzZSwlWanMkt:XtmLwdFvXPZ5dp38pCoXEUMv1OZ1Swlp
MD5:	2836190AE3FD82E996C45147E04425C7
SHA1:	5F003A9BCF43B68CCC151DC381CDC7679311227D
SHA-256:	5B89D9602DF035DC101353E4567A8712CCDB07062D23CE7C0FF649B2D4083BE2
SHA-512:	274C5527BFA25F09543EF85ABA854F26AF06DE58E19A8B8493DEB1C9035FEF2EF391C6D5979DBB7BFE5705F7E5FE6B0A69F217787E27CB1B2E8AECC8192074E9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/arrow_down/v2/24px.svg
Preview:	..........5.... .E.........x.....3.u.?...=...v....y.......Yr/.'(.Z......bq...=M....4...8.J<mo.<.C^`.i)....6t.U...+.m0.x..........-...$...D.By.>.?+.O.....

Chrome Cache Entry: 491

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 20 x 20
Category:	downloaded
Size (bytes):	275
Entropy (8bit):	5.446489665412635
Encrypted:	false
SSDEEP:	6:E9vQAat/Lp9/va26tNkqH4PE2hojvyXBgo0We7E:E9vvO99LMRH4PVGvgpeI
MD5:	DABA552C648362819D5444972D621D9D
SHA1:	ED27B6D71E331F37826A9417371A1B6E17B176D1
SHA-256:	58EBB6D98C548DF10B3AE38426F0A56CAF460843F6C211A7A61F53286F560C1B
SHA-512:	6899729880B75A4B2F2E2BC193F3C567C0791EDB3B767B207101113033C7BB0CB8438E50AC97F7AB4977E40A1CEFB8883D25E66FD6354379AC0180AB1A7FA017
Malicious:	false
Reputation:	low
URL:	http://www.addesigner.com/images/bullstr2.gif
Preview:	GIF89a........... .00..@.@@.PP.``.pp.......................................................................@!.......!..Ulead GIF SmartSaver Ver 2.0.,..........p.'.di.h..l....\|A+... .Y.p.}..Q".H!.M.........(4....P.....Hl.......(....P.8...`"7...(...e....M5).u...;...3.(!.;

Chrome Cache Entry: 492

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 493

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	287
Entropy (8bit):	4.942964715795682
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4z7yg0AiICpOTRKOFI38:t47N9U/vmRTDiI6mKOGM
MD5:	1B72B0A3A3280DBE3DF3FB5DF68F90E7
SHA1:	4F79E7A51FF1920839B106DC9848BB7BE3702445
SHA-256:	781BA2DA6DA2698EE6727A646CC2B903A848EDCF729376419007185023E4A0F0
SHA-512:	32257B5EE24DFCA90170D4AF48F2C3091EE83277F0F584B4CB46D4290BF6BF4FAE6FEB0D803D6A8B35EEE69E8F292EABE8C3632EAF782B07A8572D1C32BDCC2E
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/lightbulb/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M16 21h-2.28c-.35.6-.98 1-1.72 1s-1.38-.4-1.72-1H8v-1h8v1zm4-11c0 2.96-1.61 5.54-4 6.92V19H8v-2.08C5.61 15.54 4 12.96 4 10c0-4.42 3.58-8 8-8s8 3.58 8 8z"/></svg>

Chrome Cache Entry: 494

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 32216, version 1.0
Category:	downloaded
Size (bytes):	32216
Entropy (8bit):	7.993185785933707
Encrypted:	true
SSDEEP:	768:KG3IB65w1AxPokqZ1g9EQnV6a50/jou32tQayETUrku0o6Yf:KRB6OACkqZ1IdXJvFyETUrkNG
MD5:	2D0CBCD956062756B83EA9217D94F686
SHA1:	AEDC241A33897A78F90830EE9293A7C0FD274E0E
SHA-256:	4670BFAC0AEAEC7193CE6E3F3DE25773077A438DA5F7098844BF91F8184C65B2
SHA-512:	92EDCE017AAF90E51811D8D3522CC278110E35FED457EA982A3D3E560A42970D6692A1A8963D11F3BA90253A1A0E222D8818B984E3FF31F46D0CDD6E0D013124
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/youtubesans/v30/Qw38ZQNGEDjaO2m6tqIqX5E-AVS5_rSejo46_PCTRspJ0OosolrBEJL3HO_T7fE.woff2
Preview:	wOF2......}.......K...}c..........................'...2..j?HVAR...`?STAT..'..&/\.....X.E..b.0....6.$..@. ..&..u..[18q....Qz.p.w.{P...on..eYfD.;..8.$X.y......d..~`.e.Kp-....D?}....!...\e....+....{Z..U.,.r.E..]z...{5.e...q.^.f,.^F ..4.t...C-.....!.....z..1........[......^........;.........).!A........`.Z..=>t........v.C....y.o..m6.].vY.e..AA....8E.0.&ZE..8.,..H.....cx..?t.f}..d.u.G.pdH...r.\._.k......iN.E.b-..P...T..u&Y..........!!.\r...$.....KR.D..$..O..=`9`ErvNL".....;.>.+.C.V.N.....X.h.M....%...&.c...$.l..l.YF.1.6..c..Cx!...{.9..t:..d'...@.....Kp....y/".%..{.....{B...(.Y'.?..Sg...`:.V#`!..Ua%...~s.s....W.G.1._..A')....Ab.v.O.s....q...$&.d....-.]J..@...g.(.1.X8..saLMM..#1g....cP1.c..1e.?.6.F.TR$v....P.O..B..K...m..\;.U.]Dg...0..n.vL.L.L.....,..V..!..<....7..w...:]...%K.V..e......>..7.h.q....&..t7.S...TW.........,-&.,..5.6+.7.QX........yw..LJ..1&'B!.....}..?<..JJk.DER.........i{..Q.G...V8.$.~.2...V...R...)...Zov&.*'......}{.

Chrome Cache Entry: 495

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	181
Entropy (8bit):	4.799280796786745
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHMkRTRcAyIXNAXTRDTwIdiXxlFU2:tI9mc4slhohC/vmI4DmAyqNAD+giqdw
MD5:	D51D57E6E5F714031C043C01844470E2
SHA1:	B99E1486E9C5D49B2C0EC04474ECE07DC0F9AADA
SHA-256:	170F019DA207EFEABFE69EBEB8C4AD6B8A2299FE96E248D75BCA161465B2805D
SHA-512:	503DC16F4725CAB41616A739354693244E0A869CDC94A4E5827C494595A80D57F4927E86989A4911E0D69DF183EDA243B254D3ABC4481312376DF25158FCB970
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/list_add/v5/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M22 13h-4v4h-2v-4h-4v-2h4V7h2v4h4v2zm-8-6H2v1h12V7zM2 12h8v-1H2v1zm0 4h8v-1H2v1z"/></svg>

Chrome Cache Entry: 496

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	146
Entropy (8bit):	4.938964132950675
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHPKlhQtNNUunhjQAZi:tI9mc4slhohC/vmI4PKlGtNNUunJQ8i
MD5:	0BB6E79FC4160D867A915A7D17A564FC
SHA1:	E91CB173C9EEDDBFB2E61674DB09618A2479A053
SHA-256:	DD08185E1339EA9B3EEA5B27FC3401E2171CE008523F8038B6B08681B4E05906
SHA-512:	E1CB076164D3013612B36B41EAA43839A463C75104A85262CCC73B250ADEF1EC88D04D2A8F65D99D7EB89D4229022ECB4D3E370EE8BAC272426288A6F68C30F6
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/bars_3/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M21 6H3V5h18v1zm0 5H3v1h18v-1zm0 6H3v1h18v-1z"/></svg>

Chrome Cache Entry: 497

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	293
Entropy (8bit):	4.8755880591325855
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4VJD2zPdqUQx+dfYLnIsy2RRWdxWqOQF:t47N9U/vmRf2bQxC6Is/7WdQqOQF
MD5:	4881148D1D44126355C7CC134FD58441
SHA1:	DF5775C8A3DA221FAD474807432534FA6CB5C1E5
SHA-256:	57678BA3491574C18E14F5B0CF26215F1233BAACD2373A10A8F7C58A4D5DE65E
SHA-512:	3CD013A210871E199F5BB68B10072BFA92FCB8648D3CFAB5D47889006ADE956D0F6FB9501AEF1326780EBA47B99F95023CDC0EEEB5093A1788EE9D730A5B64CB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/audio/v5/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 4v9.38c-.73-.84-1.8-1.38-3-1.38-2.21 0-4 1.79-4 4s1.79 4 4 4 4-1.79 4-4V8h6V4h-7zM9 19c-1.66 0-3-1.34-3-3s1.34-3 3-3 3 1.34 3 3-1.34 3-3 3zm9-12h-5V5h5v2z"/></svg>

Chrome Cache Entry: 498

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3508
Entropy (8bit):	7.9382029523756765
Encrypted:	false
SSDEEP:	96:TqRAuLCaNuakClHkGzJITo2z9n5go4fFnUHxl:uDCOdDl/aTo2R5J4tnyP
MD5:	27D8CB9AE31E7381417E4F74496F3432
SHA1:	117FF93BFE389674192EE2926C737131BD48B5F8
SHA-256:	3ADFA27FF187CB9887EBE7FF0E695D3DA5FFB9FFE7CCD48CDCA1B6BC6BBD9718
SHA-512:	5969B6108F7E0AF9106B8A3D49132B3A35304634522215676E983A78E4CDF10C025514A2D04A2AE7B58030E59CCB932645CB05FCAB867D7910CE2949FEA48D2C
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 .....8.....^.>Q..J#...8....X......1.U.j.%..\|../.?.>.<.9...z........M...o...../C...N.././...(..:.......o......{'.G.x......O...9...r.O`?.....~^...b........?....%........._....n..w...w.9..<..;..]Q.:wL(...."p..w0.d...8X.$:..E..C.6S....R....-......E.....$(.#.j.s......\|....1...x..!..>3.....q....h..Yy@\".LX.?.wV...HL..i`\..I.pz.<....^,.....T..3.,h.P.m.s..>.g...d.qJ..=a.aw..R.x...>XP.........6..V..kU..v.....].....s"..{4.....d..1...b)CL.NI...44.....c+.8.k.<....g.y.}..O>.h......N/......u..J........2....##.<.....R4.....F.....8.1.<...j.....<..K.u#@. mw..8]...m).4.....I+.....u...3.mC.H.W......C..bZ.K..$G.X..5l.V...D.Jo.mu.h.C..U.......,.Y...A..6R+.[.X. ......QP==\|..,:...L8..%...+C...R)...m\|.A#.+.P...WL"@\K..MBj..Dn...[l=..`N........@._....r..f...@..A_AfCf.m..\|....^.......4......,Q......N.E..9..[....[y..}.hr{3p:j]...w...(....#.......t.5.\.0.....!A..x.b..=....n.r'.V7..........}.\|..l..}\|$..H.yf.e.R.:\.$..%U..)f.>.

Chrome Cache Entry: 499

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	2617012
Entropy (8bit):	5.660173988487234
Encrypted:	false
SSDEEP:	24576:DR+kV1oRcKBGYsWJ0uXlv4PN1Vp8kH0BRiesmn:l+kV1oWKB76uXl81Vpa
MD5:	5A60DD4A5881BD18BD91ECB4C9727E8B
SHA1:	7A6366FE819684FAD5722EE3DE8CE9DBB410401C
SHA-256:	0F851BE577287247C772AD6074575A4877A7A3BAC8EC20181E238667F82D1E96
SHA-512:	EE99F4382C592164E859EA0BD3B97FC0A913F8078516F4C7618887E2B1BBD0F9A9AB9DEAAD6E3F5A47D1DC9FA532EB9E8B8D286DE675C8F1536ED079AD579DB0
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWAR

Chrome Cache Entry: 500

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 20 x 20
Category:	dropped
Size (bytes):	275
Entropy (8bit):	5.446489665412635
Encrypted:	false
SSDEEP:	6:E9vQAat/Lp9/va26tNkqH4PE2hojvyXBgo0We7E:E9vvO99LMRH4PVGvgpeI
MD5:	DABA552C648362819D5444972D621D9D
SHA1:	ED27B6D71E331F37826A9417371A1B6E17B176D1
SHA-256:	58EBB6D98C548DF10B3AE38426F0A56CAF460843F6C211A7A61F53286F560C1B
SHA-512:	6899729880B75A4B2F2E2BC193F3C567C0791EDB3B767B207101113033C7BB0CB8438E50AC97F7AB4977E40A1CEFB8883D25E66FD6354379AC0180AB1A7FA017
Malicious:	false
Reputation:	low
Preview:	GIF89a........... .00..@.@@.PP.``.pp.......................................................................@!.......!..Ulead GIF SmartSaver Ver 2.0.,..........p.'.di.h..l....\|A+... .Y.p.}..Q".H!.M.........(4....P.....Hl.......(....P.8...`"7...(...e....M5).u...;...3.(!.;

Chrome Cache Entry: 501

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	595
Entropy (8bit):	4.329698845198318
Encrypted:	false
SSDEEP:	12:t4noU/vmRZcdJiuJJsUG0aLn+djONWQismTRIaZmU5SuX6RfM3FLvTkwWEarekt5:t4oU/v4cRs0aLn+djqWQismiaZ5SuKN1
MD5:	59BE1A6C339935F5CE8864D780FFC050
SHA1:	567E4ABCBD3C2577AC876AEF2A61404D20C3387D
SHA-256:	D788961A2C6097C992AE2FEAC9676ED77729FDAAA539CFD1E5EFFDA688B5C5C6
SHA-512:	819BE490FF31DD5D5194633503309EAA146D1C23B4384ADDFDFA211677AA6A8C82E3ACD12EE580268F586A33426D40D324E0DD119512763F54719F0DF67D7F70
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/youtube_mix/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M10.5 14.41V9.6l4.17 2.4-4.17 2.41zM8.48 8.45l-.71-.7C6.68 8.83 6 10.34 6 12s.68 3.17 1.77 4.25l.71-.71C7.57 14.64 7 13.39 7 12s.57-2.64 1.48-3.55zm7.75-.7-.71.71c.91.9 1.48 2.15 1.48 3.54s-.57 2.64-1.48 3.55l.71.71C17.32 15.17 18 13.66 18 12s-.68-3.17-1.77-4.25zM5.65 5.63l-.7-.71C3.13 6.73 2 9.24 2 12s1.13 5.27 2.95 7.08l.71-.71C4.02 16.74 3 14.49 3 12s1.02-4.74 2.65-6.37zm13.4-.71-.71.71C19.98 7.26 21 9.51 21 12s-1.02 4.74-2.65 6.37l.71.71C20.87 17.27 22 14.76 22 12s-1.13-5.27-2.95-7.08z"/></svg>

Chrome Cache Entry: 502

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3
Category:	dropped
Size (bytes):	3718
Entropy (8bit):	7.886912704438469
Encrypted:	false
SSDEEP:	96:O4XC5FcW7WvuVREiTDtqRtCHcgO5cD5IaRGPXfrKD:PCjd7WWVREgBYFv56SmuvG
MD5:	981B2DC40BEEDD859A8F58D45A594162
SHA1:	58DD4F3E8E287BD9B7A7F4A3285D205B07BFB783
SHA-256:	910AC923A71CFD684F8DFC02AAE8A7ABF1421D5193AC8D8C7827538A933028B2
SHA-512:	F2FD1D1381EEC740AF533328AB788FF46EA7ADAAE39573D1185153A8F3D4F8D41745D3C98F82AB14A770EAC64913340E84190BE1BB46120B6245471C8FA6260C
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777..........."........................................A........................!..1.AQ."#6aq..2Bst....3b.....CRd...cr................................-........................1!A.".23Qaq....#...............?..j=..V6r.\.".y.....B8..G.MZ....x.F...n........<W.4.J.n..+."8.?...o..%1..[....Xd7.>.`.......{W.q>.,...n..b.p..z..X...<y..<U.D..gl.o...zSk.Ph..7^.yH.8.}g......onc...s..5..BW..a;.h.....Z.Z....... .v.#...#89..5.qN..\|.......:......#Qr...4..#y....jK>y.[......x.\...i.E4.....yL'............{R.D').....K.*,.o.GR-\..N=.....W......w..)..K.hDmsx..x.e<>..qo...`".'.ln......LS.&F.+....~.p..5...P.. .t0..'....@..4Z.qO....Rj.%K.%E.S...R.<g..Q....%.....).$.....N..n}"...Q........On......~...X.D3MI..>.K{).g&G....-.D9.O4...4.G...NCeXu..)`CR.....2..9..............5..k.j../...:..mz..".V8..?.X&..T...-t....)=(.:..h..k....

Chrome Cache Entry: 503

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	146
Entropy (8bit):	4.927838870881226
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHPPQGZYurgvCo0/:tI9mc4slhohC/vmI4PPQG7rQCz
MD5:	F00EABC2D958B20D27018698E9EE9D5A
SHA1:	F1924FD47C49C7B40C3AC7B983137345C7D36D4F
SHA-256:	36EDBAF2D04F3475DE1BA1B3EEADDCA06F232CA0B35AF734A218A8974B9F0D9A
SHA-512:	4532BE68AF977C96DF2A768C2059827142A8F0773F2010CBF160B9F81B2AEEEBD635AFC2092DBA38CF355B0912DEF6DD51E601FE6112EE944BE28A122FD4B60E
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M21 7H3V5h18v2zm0 4H3v2h18v-2zm0 6H3v2h18v-2z"/></svg>

Chrome Cache Entry: 504

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	293
Entropy (8bit):	4.8755880591325855
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4VJD2zPdqUQx+dfYLnIsy2RRWdxWqOQF:t47N9U/vmRf2bQxC6Is/7WdQqOQF
MD5:	4881148D1D44126355C7CC134FD58441
SHA1:	DF5775C8A3DA221FAD474807432534FA6CB5C1E5
SHA-256:	57678BA3491574C18E14F5B0CF26215F1233BAACD2373A10A8F7C58A4D5DE65E
SHA-512:	3CD013A210871E199F5BB68B10072BFA92FCB8648D3CFAB5D47889006ADE956D0F6FB9501AEF1326780EBA47B99F95023CDC0EEEB5093A1788EE9D730A5B64CB
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 4v9.38c-.73-.84-1.8-1.38-3-1.38-2.21 0-4 1.79-4 4s1.79 4 4 4 4-1.79 4-4V8h6V4h-7zM9 19c-1.66 0-3-1.34-3-3s1.34-3 3-3 3 1.34 3 3-1.34 3-3 3zm9-12h-5V5h5v2z"/></svg>

Chrome Cache Entry: 505

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-3935057531723584&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1718826837&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&plas=404x714_l%7C404x714_r&format=0x0&url=https%3A%2F%2Fscamwebsite.com%2F&pra=5&wgl=1&easpi=0&aihb=0&asro=0&ailel=28~30~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aiael=28~30~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aifxl=28_13~30_23&aiixl=28_4~30_6&aslmct=0.7&asamct=0.7&aisaib=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1719959089120&bpp=6&bdt=1923&idt=2094&shv=r20240626&mjsv=m202406260101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=8551177816592&frm=20&pv=2&ga_vid=24467173.1719959091&ga_sid=1719959091&ga_hid=1438390344&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44795921%2C95334508%2C95334524%2C95334571%2C95334581%2C31084926%2C31084184%2C95336522%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=229817751475580&tmod=322256741&uas=0&nvt=1&fsapi=1&fc=1920&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&tdf=0&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=2139
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 506

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1605
Entropy (8bit):	5.267731896790209
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehq:3q3+pUAew85zvc/hq
MD5:	34A05309E10878781A76F3793010D70A
SHA1:	AAE3464E7969FB7115B936C274E9E6E471CC5CE7
SHA-256:	E56A073B617303AEE8E2C36466B6B06B3FAAEBD41AF0ABDEC0254FBC0E51B29D
SHA-512:	EF843F89005B8E2D598D627C12A196169421B29A06B83C7D1B3AABF407D3A23FE03B2FF4F34BC6DDB838C793F419B212D73B401E6473CC780B505D2F91E2C61C
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 507

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	216
Entropy (8bit):	4.800786010781648
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4TK4G2aCM0xt0WGSSJhEi:t4noU/vmRTKd2aCJiWGXEi
MD5:	4769BF33E9F7764A9E55468B4B2FDD43
SHA1:	018175AA909257C549153A1488B9C7FFFDEDA23E
SHA-256:	53A433282E4E3F47144F41EAA4143F35763DB4616DF7791008A1AF78D32C975A
SHA-512:	C78FA4DF431A81B903586FCA21B3315E781AE374B1443147EDAE2F961CBEB4A021F2BF363F39516380D596C3C448B9350D8FCE8A3A2C2CC1B28ED0FF11D26FCD
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/clock/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm2.97 14.95L10 13.87V7h2v5.76l4.03 2.49-1.06 1.7z"/></svg>

Chrome Cache Entry: 508

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	398
Entropy (8bit):	4.820547366953078
Encrypted:	false
SSDEEP:	12:t47N9U/vmRTDiI6mKOG7bTJ1XUfCRimfDqQehW:t4jU/v0rdGHTJCfCw+qi
MD5:	2A0EC6EB2D5A6F6DEF85A2B9A667C42F
SHA1:	08BA82555D8CA056757BEAC3F8B443A1F60C6061
SHA-256:	85357D329507B0542A21870A328E20F77E6E991BC97D86EC0ACD2521A3C12332
SHA-512:	60AD37CE0204D2F8C60E8F91405E97913E6481E09B4AFF28809573420B988E5AEAB5D77E6B55C8CFAE38D2EA0B228AE7A2EF2CF47FD2B461996B894834BFE9C9
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/lightbulb/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M16 21h-2.28c-.35.6-.98 1-1.72 1s-1.38-.4-1.72-1H8v-1h8v1zm4-11c0 2.96-1.61 5.54-4 6.92V19H8v-2.08C5.61 15.54 4 12.96 4 10c0-4.42 3.58-8 8-8s8 3.58 8 8zm-5 8v-1.66l.5-.29C17.66 14.8 19 12.48 19 10c0-3.86-3.14-7-7-7s-7 3.14-7 7c0 2.48 1.34 4.8 3.5 6.06l.5.28V18h6z"/></svg>

Chrome Cache Entry: 509

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	193
Entropy (8bit):	4.760511517259426
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHlbRviTOnQFOaZ0mbtUUWcFtTcFM4UXo:tI9mc4slhohC/vmVR6q8ZvNbfQfirc
MD5:	9C452955A4281F736C8786F3C0876419
SHA1:	104D443B65C15A1CA934FA449520DC81D3C067DF
SHA-256:	5968B4C826F14A991A83B0FF27573BD4A20FD5BB16F79140D399C2E7413BED10
SHA-512:	F66BB34FA7FDAFBF4516105B2AA65315BF6836A71EB98043872E454988A2B17CF7F62254E234C7F07FC282C8926E690388F7F65F186823FD8478D7902ABC7B65
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><polygon points="18.65,11.65 12,18.29 12,4 11,4 11,18.29 4.35,11.65 3.65,12.35 11.5,20.21 19.35,12.35"/></svg>

Chrome Cache Entry: 510

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 16 x 20
Category:	dropped
Size (bytes):	266
Entropy (8bit):	5.478306809033545
Encrypted:	false
SSDEEP:	3:Co7t9d9Vll9dFlVdi9uD6QAat/k+2IaMX4vtuJSapFuhlD9PG1slrmnOtg/KJpFR:J7A9vQAat/k+vaD586Z7D0gzqa+h2YFe
MD5:	96A3CC347CEFA089243090A9CE5A8BAB
SHA1:	93B8AA240204121DB761A659ABDD206733C9C0AC
SHA-256:	06E8541389EB295DC73310C9BC60DEAC0E92BE076F7820B079EB8EFE882C45DB
SHA-512:	702D49916FA9CA3497DB7B217520842AACBC043DDD319D679AEB05CDE82C056DC4638FBA93461584ABFC3B92C2636AD040CDA38AF438F5C5C7097603AE14F3B0
Malicious:	false
Reputation:	low
Preview:	GIF89a............. .00.@@.PP.``.pp.........................................................................!..Ulead GIF SmartSaver Ver 2.0.,..........o .di.h..l...@.....0.8(.CIw.4.........%C.......Gb D.....nEH.b:.8.....s.Hi...`.IaOQ{..VXm.......Lp>;=z@.#1357$!.;

Chrome Cache Entry: 511

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	16550
Entropy (8bit):	6.016901572411922
Encrypted:	false
SSDEEP:	384:nP8bWZHb+v7R/YJkFT6pLHqVUads1MdCwtQrkl:nP8bWFb+v7rFE0s1ICwtQkl
MD5:	7673379E734A93F2AFF66C871076AAF6
SHA1:	054BD375CAF506D8E376F57C74EAE640C9A8F8C6
SHA-256:	E21989DA9D240B88CCE1F8018CEDB45D951D0EE13471AA77C12D2A27ADE37D98
SHA-512:	4732B3711D99CAF4A43DADCE4495E5DBDCBE84A6A84ED6275800781EAEE59BA92D0C740D1B28317F27547F0737208184B16094FEA8C72775EA4498F20AA5F872
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/getconfig/sodar?sv=200&tid=gda&tv=r20240626&st=env
Preview:	{"sodar_query_id":"b36EZsuABObp78EPjuG4iAM","injector_basename":"sodar2","bg_hash_basename":"dxMqtuO9QfQ3IwLpzYuTdghGsPjmqbjttN7KHczDD84","bg_binary":"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

Chrome Cache Entry: 512

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2339)
Category:	downloaded
Size (bytes):	39846
Entropy (8bit):	5.397267278583563
Encrypted:	false
SSDEEP:	768:uqKbUtOcQg0hAIhun+isqxGYgEg7vjiwOpNFt6btRb:u+mg0hNaxG/nmdpHti
MD5:	BF025EF658DDB27110200E1687069834
SHA1:	DA4204F7ADAB89B2805B193FF5E843BE51E692C0
SHA-256:	BD0AA35D6B45603AF59C4D945DC2E8A672827ACA624AE6E8E7B8E9B212B1BF72
SHA-512:	F6A1F96709144D14D1964A4DE8DF900E908A2D146CF7EA38F38FBE5D00E2EECDCE7808D556661188B769AD64327378A1E4A50EDFFFAFABC1DF66DA5282CF166D
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/spf.vflset/spf.js
Preview:	(function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof l&&l];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var da=ca(this);function ea(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.ea("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"description",{configurable:!0,writable:!0,value:g})}if(a)return a;c.protot

Chrome Cache Entry: 513

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 514

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 9, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	73
Entropy (8bit):	4.591150251972653
Encrypted:	false
SSDEEP:	3:yionv//thPl92tnlTN9syxdNplok2up:6v/lhPWtlJ9BHlJVp
MD5:	1AC109B6FF317018BCE49629568D8E9F
SHA1:	FBB809D7DC34E6FBEA8F0D8E8C8780EB1B09ED25
SHA-256:	5A5B7DF0C476A034FA67289203339A2E37916067F57ABD930ED44C236AF35F31
SHA-512:	8B45B60DC300E0CBBBA3BE4BC44801886B4F9C2DCF0625B07BC78084280585C1AE5B589FBFA25F9E0F7FD46A9594144EAE2AC647B654A2521FFC3477050147A2
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/annotations/element_placeholder.png
Preview:	.PNG........IHDR..............H;e....IDATx.cP#.......@.@!..\.....IEND.B`.

Chrome Cache Entry: 515

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	778
Entropy (8bit):	4.260772867505465
Encrypted:	false
SSDEEP:	12:t4tM65jghuamzC41gZVz1QDUQ2R6a2qanGgmonPQ/0:t4tMMjwuamzz1gZLQER6lLmoI/0
MD5:	C912F19C8AAE23F530DFDDD4D7BBA780
SHA1:	40C607FABFDE63E2A4D92462FEC123A2D52D1F8E
SHA-256:	E593ED5B1D641EA4F61CD2308346A608EE088E293AC177881E4CB43969B87E05
SHA-512:	377D00EF8981C127EB1A573731B1EC22DA072DED23E7D920834C88F280FEFD160885D9EFEF3F8C6B942DB280685ACED73B2D7240ED55FB85947D8180A1FFBC37
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M6.15895 20.0023C5.32221 20.0023 4.54031 19.586 4.07317 18.8918C3.30492 17.7502 3.31241 16.255 4.09205 15.1211L4.82045 14.0617L4.14538 12.4963C3.74297 11.5632 3.84031 10.4898 4.40399 9.64424L5.50013 8.00004L5.50013 6.00231C5.50013 4.89774 6.39557 4.00231 7.50014 4.00232L20.0001 4.00239C21.1047 4.0024 22.0001 4.89783 22.0001 6.0024L22.0001 19.1736C22.0001 20.0073 21.7396 20.8201 21.2551 21.4985L16.1368 28.6641C15.9224 28.9643 15.5279 29.0747 15.1888 28.9294C13.4238 28.1729 12.4653 26.2504 12.9234 24.3856L14.0001 20.0024L6.15895 20.0023ZM27 18.5001C28.1046 18.5001 29 17.6046 29 16.5001L29 6.00006C29 4.89549 28.1046 4.00006 27 4.00006L24 4.00006L24 18.5001L27 18.5001Z"></path></svg>.

Chrome Cache Entry: 516

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (533)
Category:	downloaded
Size (bytes):	5547
Entropy (8bit):	5.234472249184341
Encrypted:	false
SSDEEP:	96:+E8YzVlHsfws8HYgwtG3I4yVdbaBsNF2LSaAuEe1zgf5j6YJR79hamQlWqlvWTQ:+azsfws8HDg22N9hzmgf5jhJR79hazYe
MD5:	E02D881229F4E5BCEE641ED3A2F5B980
SHA1:	29093656180004764FC2283A6565178EB91B5EF3
SHA-256:	8037C1F1E0E4D3D7955F591A14A4B4D090141F1D210EF8B793CE5B345F08F7F5
SHA-512:	F4E8E21B91EE33879A2295215CBA91E12851891165FE3F9F98913022280EF8192FD3F5DEF06AA8AC1FBE6D43D09034B0BB8E29E8703366A012E1FDE6FF2828DB
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/intersection-observer.min.vflset/intersection-observer.min.js
Preview:	/.. Copyright 2016 Google Inc. All Rights Reserved... Licensed under the W3C SOFTWARE AND DOCUMENT NOTICE AND LICENSE... https://www.w3.org/Consortium/Legal/2015/copyright-software-and-document../.(function(f,h){function t(a){this.time=a.time;this.target=a.target;this.rootBounds=a.rootBounds;this.boundingClientRect=a.boundingClientRect;this.intersectionRect=a.intersectionRect\|\|q();this.isIntersecting=!!a.intersectionRect;a=this.boundingClientRect;a=a.widtha.height;var b=this.intersectionRect;b=b.widthb.height;this.intersectionRatio=a?b/a:this.isIntersecting?1:0}function d(a,b){b=b\|\|{};if(typeof a!="function")throw Error("callback must be a function");if(b.root&&b.root.nodeType!=1)throw Error("root must be an Element");.this.g=y(this.g.bind(this),this.B);this.D=a;this.h=[];this.i=[];this.s=this.L(b.rootMargin);this.thresholds=this.J(b.threshold);this.root=b.root\|\|null;this.rootMargin=this.s.map(function(c){return c.value+c.unit}).join(" ")}function y(a,b){var c=null;return function

Chrome Cache Entry: 517

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	484
Entropy (8bit):	4.378279176071406
Encrypted:	false
SSDEEP:	12:t4noU/vmRhChc2LX7pC52k+N4ezW0qw9DIRSY:t4oU/vYqVG2kCCw2Rz
MD5:	2739BB8635C4631E78B240C8B83D102A
SHA1:	38B8FDB6A8444513D18378E789547B377CA46DDB
SHA-256:	FDE8C85A62FB4E29C3CD902167B791D0D06C3AEEF85C8DDDF3212287FB771A0B
SHA-512:	A2A5F5AF163E487943608C9646A6F30BF870607FC7753C14621BC9592483713D9E2F4B40A63030AC820F56E310D3116E78E3E959AD869E9F77FFE9EC6C133CD8
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M19.56 12c0-.39-.03-.77-.09-1.14l2.19-2.13-2-3.46-2.92.83c-.6-.48-1.27-.87-2-1.14L14 2h-4l-.74 2.96c-.73.27-1.4.66-2 1.14l-2.92-.83-2 3.46 2.19 2.13c-.06.37-.09.75-.09 1.14s.03.77.09 1.14l-2.19 2.13 2 3.46 2.92-.83c.6.48 1.27.87 2 1.14L10 22h4l.74-2.96c.73-.27 1.4-.66 2-1.14l2.92.83 2-3.46-2.19-2.13c.06-.37.09-.75.09-1.14zM12 16c-2.21 0-4-1.79-4-4s1.79-4 4-4 4 1.79 4 4-1.79 4-4 4z"/></svg>

Chrome Cache Entry: 518

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	146
Entropy (8bit):	4.938964132950675
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHPKlhQtNNUunhjQAZi:tI9mc4slhohC/vmI4PKlGtNNUunJQ8i
MD5:	0BB6E79FC4160D867A915A7D17A564FC
SHA1:	E91CB173C9EEDDBFB2E61674DB09618A2479A053
SHA-256:	DD08185E1339EA9B3EEA5B27FC3401E2171CE008523F8038B6B08681B4E05906
SHA-512:	E1CB076164D3013612B36B41EAA43839A463C75104A85262CCC73B250ADEF1EC88D04D2A8F65D99D7EB89D4229022ECB4D3E370EE8BAC272426288A6F68C30F6
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M21 6H3V5h18v1zm0 5H3v1h18v-1zm0 6H3v1h18v-1z"/></svg>

Chrome Cache Entry: 519

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1971
Entropy (8bit):	4.140265923170004
Encrypted:	false
SSDEEP:	48:4uxgftjRvYQn94Cz5pdVw8jV/cu745MJzis0rR+ToGq/SJKF:aR5pPvtc2fd0YT+
MD5:	8F64411A9AC7F40E18967F620AE1B546
SHA1:	4C3FCE32CE99FAACEA1BADF35BE7091BD2F09384
SHA-256:	B77B4C9A17FB16DDADEC307F40FE8B37F806D80E97E3F8854142CDA91662708B
SHA-512:	3DE4780539E5C9850987401436A8F5D16177393C1AF930B01B7E9987CE2CB875ABD2490116DE0B6597C2A1B0D0D11E7AC872B652E5D8EF3B84C23146FAA0FA16
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/youtube_kids_round/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path fill="#FF0000" d="M21.39,13.19c0-0.08,0-0.15,0-0.22c-0.01-0.86-0.5-5-0.78-5.74c-0.32-0.85-0.76-1.5-1.31-1.91 c-0.9-0.67-1.66-0.82-2.6-0.84l-0.02,0c-0.4,0-3.01,0.32-5.2,0.62C9.28,5.4,6.53,5.8,5.88,6.04c-0.9,0.33-1.62,0.77-2.19,1.33 c-1.05,1.04-1.18,2.11-1.04,3.51c0.1,1.09,0.69,5.37,1.02,6.35c0.45,1.32,1.33,2.12,2.47,2.24c0.28,0.03,0.55,0.05,0.82,0.05 c1,0,1.8-0.21,2.72-0.46c1.45-0.39,3.25-0.87,6.97-0.87l0.09,0h0.02c0.91,0,3.14-0.2,4.16-2.07C21.44,15.12,21.41,13.91,21.39,13.19 z"></path>. <path fill="#000" d="M21.99,13.26c0-0.08,0-0.16-0.01-0.24c-0.01-0.92-0.54-5.32-0.83-6.11c-0.34-0.91-0.81-1.59-1.4-2.03 C18.81,4.17,17.99,4.02,17,4l-0.02,0c-0.43,0-3.21,0.34-5.54,0.66c-2.33,0.32-5.25,0.75-5.95,1C4.53,6.01,3.76,6.48,3.16,7.08 c-1.12,1.1-1.25,2.25-1.11,3.74c0.11,1.16,0.73,5.71,1.08,6.75c0.48,1.41,1.41,2.25,2.63,2.38C6.06,19.98,6.34,20,6.63,20 c1.07,0,1.91-0.23,2.89-0.49c1.54-0.41,3.46-0.93,7.41-0.93l0.1,0h0.02c0.97,0,3.34-0.21,4.42-2.2 C22.

Chrome Cache Entry: 520

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 191
Category:	downloaded
Size (bytes):	158
Entropy (8bit):	6.578911602525333
Encrypted:	false
SSDEEP:	3:FtturR/WYc+mZCiqmYtYN4kbdzUzjqkQeOYYrZuMfwwmV3u414kZhZ/Zkp/ln:XturZnlmZcNqN7dYzj4eOYYoMYFu4Bit
MD5:	40F7D7213F34BD4101DAF15360CC376B
SHA1:	8CF18DEFC71F0BF5BDB00A53194A4F158CDFF462
SHA-256:	4D1C8F7DA22ABC3E488035638219C3A83E91BFC0B97C66AFA176B99A1B72D984
SHA-512:	698D26B8D11A417932B8B0A0CE40BDE964D53A55E1603C0E43CFC7A303160F7581F8F7278956A3031D7559D7319E53B0DED9AE9DC8C342D171D9B5887796CEF2
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/arrow_down/v2/24px.svg
Preview:	..........-....0.._%.Z.$u8G.b.2i...,..l..!\|..mwp..e..Oi}h.s.l0~..".gB....iP..........PX...=.5._..XcX..w......6.wH.h.....P..3.!.1.4B.3.Z....m.k..tK.....

Chrome Cache Entry: 521

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 416 x 184, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	138965
Entropy (8bit):	7.9925937133455305
Encrypted:	true
SSDEEP:	3072:zJ8mVVf3KV1THdhb6eP0refrVInZ53dVx3O2:t8mk1LPYezVInpz
MD5:	683D7CBB895FBFDC0026502D07580B2D
SHA1:	9D52F2C97C69E78669E3530C5405CE3DCCB5CD7E
SHA-256:	30930A80C46300F32AFA658D94721C1191DD20B4C863EA60B69C9895A7A0B58E
SHA-512:	5A68545BA144A104856E426E58C5DE8D189747B5ABEA8BAE0CCE18F1306C76DB45CACAEFAB3C01677EF6C109C689265B9FD72610797EF79F74CFAFEAC7D07631
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............8.....sRGB.........gAMA......a.....pHYs...t...t..f.x....IDATx^...VG..[..0........M6.q.......4Xpww..g...f..Fo....,K...{..~.....s..............???....W....\..........3%2"..p...L**.........N..g........3..>.QTTd....p.............k...........M;.)..o._.....>.\|....,............N?K..O}...t.....l..}.3.wup8.q.7..g....[....>G.........RQu.......-qp..{No..g...O...A.=...]=..o7....7..S\|....l.8.9h..JE../0:.v.A.....p....8(..........3x..7....\s.s...{...G....)..,.~r.~....:...._.Y.......u........s...v.Px...o...<.R.;....]..k....M....Mq.}...ts...<_.RPh..w..}.M...W.i9z._.}.Y........tg..y...:.g.......t...Xh.....C.o....w...=.....).]....3p...1"....>..\|..q..........l..+H.>.s-,,LJJJ...+...o..uS...?..w..........s...{%88....w\|....mrP...........\|.:..\|....v.+.K..u.N_=.q..^....\|.....o..(.u@..4.=..7.w.1..7~....\;..............?...{..}S._.p4...x.?..'....}.....*.P@..=......7.......jp...m.....8...[..x..:...y..=.P\..]...O.9''.,.._.y....Vx.

Chrome Cache Entry: 522

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	531
Entropy (8bit):	4.517890434004929
Encrypted:	false
SSDEEP:	12:t4tM65EVlUbal0YClBze4gKCqRaMcmt+BOgyy9e5PhwWU:t4tMMbS0TBAMdc1QgcdrU
MD5:	D8AB2A29ED285F79AF11A250D2536BC1
SHA1:	B394B72270ECA95336C5780E1F97C0CAD051C0FF
SHA-256:	AAAEF8F774A256E546C1178D91EBBA27FA0F7A7420D7E54DCC4F26D6DD7AB31A
SHA-512:	3F376435B591FCB848D4D259A0DA5BAE15EB8583572C00C6E3041DDB64C1756E48A333EB6144042A45D23E2A45DB623CD78DB5467579051CA674F93C8964FCE2
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/shorts-comment/v2/32px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M5.5 3C4.11929 3 3 4.11929 3 5.5V21.5C3 22.8807 4.11929 24 5.5 24H22.5L26.7474 28.5741C27.5513 29.4399 29 28.871 29 27.6895V24V5.5C29 4.11929 27.8807 3 26.5 3H5.5ZM8 10.5C8 9.67157 8.67157 9 9.5 9H22.5C23.3284 9 24 9.67157 24 10.5C24 11.3284 23.3284 12 22.5 12H9.5C8.67157 12 8 11.3284 8 10.5ZM8 16.5C8 15.6716 8.67157 15 9.5 15H18.5C19.3284 15 20 15.6716 20 16.5C20 17.3284 19.3284 18 18.5 18H9.5C8.67157 18 8 17.3284 8 16.5Z"></path></svg>.

Chrome Cache Entry: 523

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	187
Entropy (8bit):	5.110752654085156
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHAquqFbV9jXReHFAATcvXjXRHRcBHoNcHVaocoaQgeFOK/:tI9mc4slhohgqWHiA4vmI4VPgq
MD5:	590C4B291CE0B9AD72E436BD0777D562
SHA1:	974DC251B395357A38A0EC06CB87C28F70A23CB1
SHA-256:	F40804CDE31FC6CE2B19B2E4DE7189916146031A5D7958B4512D30751B767D00
SHA-512:	5DE6F1C10AF2C9EAD02B9DCA07FC4B23E0B34872CB1904FE2EED57BD2C4739CAC0A5FEE24401B457F146F5A6D43DE807E1D44DD4D33AA3B8BBA33B107428AF77
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/play_arrow/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><path d="M9 5.87 18.2 12 9 18.13V5.87M8 4v16l12-8L8 4z"/></svg>

Chrome Cache Entry: 524

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 200, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15124
Entropy (8bit):	7.919622269344001
Encrypted:	false
SSDEEP:	384:pLDdjK+LcEvHZE3s7TK/ow2ocsUTKoUoMtouwLMWm:1dFcEvQs7G0LsU+uuodLMWm
MD5:	1F67EE865D46FBA22A5DB05F43E7593E
SHA1:	8F8B7206EEF4C01E633B64D895090676E5296D3E
SHA-256:	204A2DFE5441529869F719F4DA8D296A5F65D79F4B498F4DBFB6C4DE09E5A5F9
SHA-512:	08F5A16B418EC828162D5A4DBAA6F1798D5F0F03212F10D6B4D3BB98ACF498A6AEAB664219F43867EBBCE9AFB557AB928E38747C8B5AE01B52A4F89195A5A862
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.....................sRGB.........gAMA......a.....pHYs...t...t..f.x..:.IDATx^...4E.>....s.E@...D....$'.9. ..... 9#Q..$.H. ..D.9....O..f.<3.=..s..lwuu..}.9.......@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! ...g......tG..8Q....@ ....7B@..@`f....%........! .@I8.....tE...(.F...@`:".d....i.@ .1..!.d...cY ..L7n...../C'.......! .P.".e.@`.....*B@:..%......E...MU...P........C...6...R@..O.....B...6....@..O.....A..:.TC.H.....&..........o..[..{.Uo..v..[o%..;.S}....?.......>...._......w.M.........T....f.9q.n..z.._.......z..:......7......tl....([y.l.v.R..=:O}._`.(..N6...RC.wk..@./..Ru..wT......C.U..rKu.y.U..x`..V[U.....o}.[....V.n..n.U'.pBu..V.>.h". \e....b.-V...j..n...g.}.c.=...+...~8.2...x.T.r.-W..~.i..V.z...;.\m..&.k.Y-...#.fK-.T.\|...;......y.D.u..........O?=....{T.n.i..:.TK...Le/.......t.A.U.\pA.....{.....?.M%...@.A...x..../....p.]v..._.z5.sV_.....\|.3.'>..c..X.

Chrome Cache Entry: 525

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 192
Category:	downloaded
Size (bytes):	175
Entropy (8bit):	6.778361934907439
Encrypted:	false
SSDEEP:	3:Fttrv6gEZnrtCvkTuo4G1uhou2mO81as2zfXacx6vayzfbNMPyqDc2wsll/:XtWgSxCQulGMouBOkass/aAzyzfxMPyi
MD5:	D67148560BCCF394AF498B870D925702
SHA1:	FC12055013FEF0278D1FCBBA5142395FC05032BD
SHA-256:	9D4E858D406A14613CED6508C968D768B74767BBB4AF2580F8A70BC5D285FD0B
SHA-512:	A6F9ED7F8A15AE3A88C7E7BAA02F962B46C16693AEF92D437A68733086E3139CE1AE261721B8140F9DDDB9503E46B1FC6E86A6F50AF080AF31EF6BD116C5075B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/library/v6/24px.svg
Preview:	..........M.... .._......4.......0U4J....N..p.w.\....yr.....Fi..DN...1FS.#..a...?.f[>.....\$cd.h.W..a......8....Z{oQ.h.b.D..w....ls@<.l..[...T...@e(.".D....u...._.\....

Chrome Cache Entry: 526

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 207
Category:	downloaded
Size (bytes):	183
Entropy (8bit):	6.718904551245108
Encrypted:	false
SSDEEP:	3:FttrnOx3SDtey41oY4zntIHgqCO50drzQ8Z7RCP3fS1vA57D4gJryXtc/nWNOn:XtbOxWeZoY+nWAqCOWQgVCPvS1k7D4MV
MD5:	B7921C83C2F28994FCD4568E177EECFA
SHA1:	691E14675B8AB53B6EA16D7C3DD1F448B8593914
SHA-256:	29F2B2E23950650450CBECBC99E0D6379CB5BB22C64B7BACBA51B608F34B3A04
SHA-512:	DCE5D3519CBBD40B3CC4CF7D2A1A0F0B03CE067694DDB984779D3171010F9811EF8D993BB6FB608BA91DAD57937C799B0CCB3E07C9A67DD6F92E5A9D948C556C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/library/v6/24px.svg
Preview:	..........M....0.D.e.=.5j.......]kH.&..........,.......v..vn}0.BH.O.M.,MS......,..?j[.v.....8Y......&......._....;n..w.b.A..%..v.4...yW..c....O.i...N,.Wd.F....O.........-....

Chrome Cache Entry: 527

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	332
Entropy (8bit):	4.296126422761529
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4FCvslQHcUiC7Q3ajuWskpwpWvWuMUMU2ldUiiW8kWuMUMUy:t4noU/vmRUslQ8+QKjupkpwpWvWuMUMk
MD5:	F94123242618D16B950113BD6F22229D
SHA1:	28B2E7A4ADB970446E442AE187E07328A68C1687
SHA-256:	EC4C1E58EBA5A80E78C1B52486930F60634B4940322F230C236ABDCFD9F92DEC
SHA-512:	E54B679A15465BEF172F1C364E34337B0C97D92C0F6C444253C8B69CD7147FD728DFEB1CDFA0DB64F0C13DC04999FB7CCE3C6CF49E77B4D1BA50798D9EDB3D94
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M7.5 12c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5.67-1.5 1.5-1.5 1.5.67 1.5 1.5zm4.5-1.5c-.83 0-1.5.67-1.5 1.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5-.67-1.5-1.5-1.5zm6 0c-.83 0-1.5.67-1.5 1.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5-.67-1.5-1.5-1.5z"/></svg>

Chrome Cache Entry: 528

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 529

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 468 x 60
Category:	downloaded
Size (bytes):	8415
Entropy (8bit):	7.933009385669305
Encrypted:	false
SSDEEP:	192:qSMLXwI5DDWi48BrSXv2NE0wv2Y1skGxMk/dKIGEim:q/XwI5z48BrSEnwOY1sx70IGRm
MD5:	934BC0E46FEE16162FD270FB1AFB0B6F
SHA1:	07E1B139869A9AA6280D62703339D3F582792711
SHA-256:	18DEF5FD6E99E0E43DFA5BF2F497A2492B97F3A767135144758917554A0E8AC8
SHA-512:	B71DD421CAC63C9BE119E491CFD3682697344BDD594F26829E566421AC5C342FF614A7E58A7A2A24A37C6A1E17806DA8181F7FBD0953B1E7FD219084D4654DE4
Malicious:	false
Reputation:	low
URL:	https://scamwebsite.com/baddesign.gif
Preview:	GIF89a..<....................ff.33..f.f.....f3f33.ff....33...33..f...33.......ff....333fffff3....f..f..f!..NETSCAPE2.0.....!.......,......<.....!.di.h..l.p,.Cm.x..\|....pH,....7k:..t:ZZ..v..z..xL6y..z...........v....z....x....4.....D............q.?...........B...`.9........5...M..........6......9..8..........5.....................:....5................#Y1a....hC...8,...])e.@...q..P..(..d...HF.X#..Z......GG........6..F.46j .R.+..xrd..5nb. j#..`....3.J.'.2U;.\.ab=N.k.).g..4.-.0.SmTE.f..,...".c.%b...e..J.B...qR.....}q...TG.l...."....q D..1_fs.w/].k.S.3..]....."`S1......:S.Y..e...#.~!b\.z......e....Q..J.>2...).ZV...LuX..S.w...^R..g....z.Y..\|.n..l.).]....[W.J..E7...k..C...m..4....F.q.x^L(...u..".4C.`..DYD[.X..)..f=..t...Y_#>.#5.EIP2.....`.{K.y.U...m....V..d.(..U{......D.]O9#Vm..`f)..p.....v~.T(~..e.s.9..SB..".i..6.5].<.J K..Wp..E...b.i...d.L..X.g...'..c..c.P..X....<....kt.6.?t.;V....w.uC..+.A ...,...nh..........R..b$...0,1.......g.

Chrome Cache Entry: 530

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	298
Entropy (8bit):	4.585765816924023
Encrypted:	false
SSDEEP:	6:Usx9YRi1p+V0YgDvNaYRrXjMFOWo4dY2oLOS2KvMFhRD/1gssfY:UM92EpGbgBRvTLAY2oKStkFLZ+Y
MD5:	9F062D2ED9E2DD38A806AB1DCD3FAD47
SHA1:	E516457ACDB0D00710AB62CC257109EF67209CE8
SHA-256:	7F2BA9B15B2486CF338D5CC144D4575796E6D23C90D6D3567997D92F56D97830
SHA-512:	8F68E8D5C4510BF8A82EC14D94B0266DB3D6A119F7D10FD96A8560EAF7507CD80A8859A10BE253D9F9E95E952F5C7F2EDBB349AAD13A87DA86328564537ED7D0
Malicious:	false
Reputation:	low
URL:	https://scamwebsite.com/style.css
Preview:	/* CSS is how you can add style to your website, such as colors, fonts, and positioning of your. HTML content. To learn how to do something, just try searching Google for questions like. "how to change link color." */..body {. background-color: white;. color: black;. font-family: Verdana;.}

Chrome Cache Entry: 531

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1608
Entropy (8bit):	5.269959270192774
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehV:3q3+pUAew85zvc/hV
MD5:	0C8F9DAB60FD75FE04E980AD76F248B0
SHA1:	57E9F90C4EB668395496CA27EFA91D667FB268F1
SHA-256:	0AADE99CE944F60E052E85DCE595C9E6DB23AC162FAEB8ACCD4888E04E4E62A4
SHA-512:	1B42282BCBC0CFC421F8FF8EAA6B9F25922258945FC801B9ABEFBA89BBB294C94F3228D325BA1671B396A8C0A03DC67FF6A1F702122F88C0C1AFF48E7BA88628
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 532

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	726
Entropy (8bit):	4.339020219837034
Encrypted:	false
SSDEEP:	12:t4tM65hacbIQEJzqgnuTx9DcwBCkrcE+DDuqE3kjZRpQNtdhlwcf9iSBcG7BihbX:t4tMMt9EgFEFu+eq7fpQNtdMcf9iSqku
MD5:	1B8EC16A3060F8866E64FCDC09FF7185
SHA1:	B5E017E0D46F2DB0FC18A5E74F740D69FEED0372
SHA-256:	4E4AAE10A6FD5B8F86E1565507983459C3D0F474313547C9DAB176F83261A523
SHA-512:	07CD2A5466B397E612EB7A9827646BF0606031ECAE1771DCD93360BFF0F14477ABCD0F70B215C21879C9C5BA5E64BA9114CB036D7D401BE873DE1F84CC40B888
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/shorts-like/v2/32px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.8411 11.9977C26.6778 11.9977 27.4597 12.414 27.9268 13.1082C28.6951 14.2498 28.6876 15.745 27.908 16.8789L27.1796 17.9383L27.8546 19.5037C28.257 20.4368 28.1597 21.5102 27.596 22.3558L26.4999 24V25.9977C26.4999 27.1023 25.6044 27.9977 24.4999 27.9977L11.9999 27.9976C10.8953 27.9976 9.99987 27.1022 9.99987 25.9976V12.8264C9.99987 11.9927 10.2604 11.1799 10.7449 10.5015L15.8632 3.33586C16.0776 3.03569 16.4721 2.92531 16.8112 3.07062C18.5762 3.82706 19.5347 5.74955 19.0766 7.6144L17.9999 11.9976L25.8411 11.9977ZM5 13.4999C3.89543 13.4999 3 14.3954 3 15.4999V25.9999C3 27.1045 3.89543 27.9999 5 27.9999H8V13.4999H5Z"></path></svg>.

Chrome Cache Entry: 533

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	4.979692330240301
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHELK9hrqgrNI2fSb8:tI9mc4slhLJ9hC/vmI42shrlrNI26b8
MD5:	BE80E385F4A43E39B89AA315010E5AFC
SHA1:	C48EF18CD412B3F8E96C8A9F10418C10BDC01557
SHA-256:	6EC0894C8BEEEE04A033DFFBE2E54E1BC3C6C8CE4A75738F4E5A13EBA571B2D9
SHA-512:	73FBC9F5EC906A6F95A2BCF002A021DA499AEB87023A77345416CA04FFA8148C776E90ADC0CE9F45FBF093F2D6506D0803ED5E73DC46A3DC747FCF71CFEB96DC
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/message_bubble_alert/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M4 2v20l5-5h11V2H4zm9 12h-2v-2h2v2zm0-3h-2V5h2v6z"/></svg>

Chrome Cache Entry: 534

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	downloaded
Size (bytes):	17560
Entropy (8bit):	7.954865714632017
Encrypted:	false
SSDEEP:	384:xrCaYqIalh+O+geazhBHDnRMth0L11fnVwvqzLfhz:xr1j1reazhFRMthAPfVwiXF
MD5:	074E969BB4B56ACD26091B19784DF7E2
SHA1:	0B8F66FD70F29859EA25EE481FF33F93BB84D512
SHA-256:	405893B0BF0B3E87141E7048E1CB6665CA5593FEA1B159CA0CE90E77D049C51A
SHA-512:	0E7286126446B64EFB16D8891AE2A649E4CCCE337510EBA812294E78B78D3D2680F4504BFCAC7A8347E809C2E3FD905215ED711F60894B25A5BEEFF252372C8F
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg
Preview:	......JFIF......................................................................................................................................................h...."........................................T.........................!.1A..Qaq.."2RS.....#Bs.......3b......Cr...$45Tt..%...cd.................................1........................!1..AQaq."#23R....B................?....B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ...6../i..ag.4.\^......,{.d+W.Y..........q{O.h...8..U...........~.....?......SB........Y..Q...?.....C.QB..Oj<.}......G.....v.Z....r..p<.Typ.O.k?.....i...._.....r...uQ...?...j<.}...r.~P..LB.~-.\|.=.=............r..wo&u>\...g.cS...I..T.E...^G&.>\...g._U. ...H.\|..S.QP.G...9..'.G..A.I..T...>........{R{.~+..?.'.K...9.}."..rYU.)..=....S.R{.r.;....!_..5^r...,.**..?.'.G/S.s4.dP.

Chrome Cache Entry: 535

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	406
Entropy (8bit):	4.6370422082139235
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4zRhDhjIa5Ql9NNhLkOaXM+1RJ3OrWF13VmUoUfxHA8:t4noU/vmR9hDhjIaOl9oJR5pbUkHb
MD5:	AF8D41053A79258B40CCDBCB3CBDE0EE
SHA1:	361362BC0BFFC588E0F7D4DC04BFBAC7C02EBBE4
SHA-256:	FEA70943AFE49FDAABE42FA012B7EC8F0D1551A12BA88C8A310FEB4F792281BB
SHA-512:	7021D8EAAA7EE73DE9ECC89A92793D8EA01260F7C0A714E9C7A2969DCDB969D6F165DFF6A5F3701300E0BFA3F988DA828276E6DAA5F3EEAD99627101684E24F7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/person_account/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M4 20h14v1H3V6h1v14zM6 3v15h15V3H6zm2.02 14c.36-2.13 1.93-4.1 5.48-4.1s5.12 1.97 5.48 4.1H8.02zM11 8.5a2.5 2.5 0 015 0 2.5 2.5 0 01-5 0zm3.21 3.43A3.507 3.507 0 0017 8.5C17 6.57 15.43 5 13.5 5S10 6.57 10 8.5c0 1.69 1.2 3.1 2.79 3.43-3.48.26-5.4 2.42-5.78 5.07H7V4h13v13h-.01c-.38-2.65-2.31-4.81-5.78-5.07z"/></svg>

Chrome Cache Entry: 536

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	183
Entropy (8bit):	5.04119913967567
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHmAIb0WNUoOUGf7/:tI9mc4slhLJ9hC/vmI4mtb0PCGz
MD5:	DB8E084413F0D763A3EFBF3573AFC33A
SHA1:	FF8264FCAAC48F90B0CB74E09D65655EFE09488B
SHA-256:	A058F9F44A83FDF8074494F9322A40EF1B6E159DBEEF1E30BDECCE736AFD1E2D
SHA-512:	28A6102E54D20BBAE6D0A4D98971FE4170392A3354B55FD504C0DD1A0896CB5E786D85AFD64EA9EC308009795EB4C8392F2CE22CCD8A6DC4B84CEBFC4929CDEE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/my_videos/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m10 8 6 4-6 4V8zm11-5v18H3V3h18zm-1 1H4v16h16V4z"/></svg>

Chrome Cache Entry: 537

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	220
Entropy (8bit):	4.95427055782646
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4VJD2zPdqUQx+dt:t47N9U/vmRf2bQxS
MD5:	64C5CFD76908E80E8D1C35BB65CF26CB
SHA1:	DCDA22BE3CFBA2AF2C7CD98465F601E8B3C5888A
SHA-256:	59BD8FAC9261910ADAE788A1BA4E550544F05A84312049D2C254FC37A7596CC1
SHA-512:	37C54AF2F2D644BBA688775BC77FB0AED604F9ED4675FF89117A0AA264C62A0291AFC145A7D20C4C4D14F13E6C460CF6D39B1F925E442BD7A3A190BA77B98DE7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/audio/v5/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 4v9.38c-.73-.84-1.8-1.38-3-1.38-2.21 0-4 1.79-4 4s1.79 4 4 4 4-1.79 4-4V8h6V4h-7z"/></svg>

Chrome Cache Entry: 538

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 335
Category:	downloaded
Size (bytes):	259
Entropy (8bit):	7.094610990513645
Encrypted:	false
SSDEEP:	6:Xt0eLtNYnh6i6YPaevaWF7raIx/xF/UYVHSnCQOO0jhdol+8PE:Xr/Yhe4vaWBraInF/UkHaC
MD5:	C5DCEE79DEFBCB33167385047A7B637D
SHA1:	C9E3DCD33FAF59AE4908ACA3A14DD1BCF149741E
SHA-256:	34BAB7CCA5765A0BE7685775C1C877E9218EE1E722027F05FBEFCDABDCFB7E36
SHA-512:	FC16FC59BF90BB6092B20D40CB69DAE1F8A056CB353EF3A365BF5A4E4BA6F921E2FD4F1CDC3B137BFDD68FC0BF7955B1DE101EB66410C5744A40891E7FBA29D7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/trophy/v1/24px.svg
Preview:	..........%P.n.0...B.h..d..=t...$..8MP.r./..._w.........y~}4.,..>.o.;..E.(....ao...........V[........\:s..a.c.r..GA. .t....Zn..x..........T..V0.ettfl........s..a..!.+.)j....!..A..D....*U.(.MM....P.;.5.F].G.. L6.0H!W....QU...M.j..........eO...

Chrome Cache Entry: 539

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (936)
Category:	downloaded
Size (bytes):	5862
Entropy (8bit):	5.542763138681179
Encrypted:	false
SSDEEP:	96:eT4jdAw1xFVObYrhlvSSt0531195315WnGIjkC4EBBIjKuKSwXr6:fdAMFVObYrjHm19D5WnGIj8OByKD6
MD5:	877A2B1590385D79323EF992ABE9E961
SHA1:	F2F65882785537D6F3EEBA7F02EA233F9E55672F
SHA-256:	FF474DB3EA4409F034CBAE6AE738BC80FB18734CCD38F87FCDE90D02E11CFAC3
SHA-512:	C7B9BDA266C59A19476D7EAA3F6BC10D8D916345FF4195EE5932F5D5D884A487407552A29D576A9DD53DFD2588069C7376F660800F5AB7F8E1BEA78CDD146E14
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js
Preview:	(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var e=this\|\|self;function f(c,b){c=c.split(".");var a=e;c[0]in a\|\|typeof a.execScript=="undefined"\|\|a.execScript("var "+c[0]);for(var d;c.length&&(d=c.shift());)c.length\|\|b===void 0?a[d]&&a[d]!==Object.prototype[d]?a=a[d]:a=a[d]={}:a[d]=b}.;var g={YEAR_FULL:"y",YEAR_FULL_WITH_ERA:"y G",YEAR_MONTH_ABBR:"MMM y",YEAR_MONTH_FULL:"MMMM y",YEAR_MONTH_SHORT:"MM/y",MONTH_DAY_ABBR:"MMM d",MONTH_DAY_FULL:"MMMM dd",MONTH_DAY_SHORT:"M/d",MONTH_DAY_MEDIUM:"MMMM d",MONTH_DAY_YEAR_MEDIUM:"MMM d, y",WEEKDAY_MONTH_DAY_MEDIUM:"EEE, MMM d",WEEKDAY_MONTH_DAY_YEAR_MEDIUM:"EEE, MMM d, y",DAY_ABBR:"d",MONTH_DAY_TIME_ZONE_SHORT:"MMM d, h:mm\u202fa zzzz"},h=g;h=g;var k={ERAS:["BC","AD"],ERANAMES:["Before Christ","Anno Domini"],NARROWMONTHS:"JFMAMJJASOND".split(""),STANDALONENARROWMONTHS:"JFMAMJJASOND".split(""),MONTHS:"January February March April May June July August September October November December

Chrome Cache Entry: 540

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 419 x 186, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	105581
Entropy (8bit):	7.985724439421167
Encrypted:	false
SSDEEP:	3072:NYKwD0X7i57MDoVCP2PGfIsWfOgxGiDw9o:NYd0OOT2+dW2o
MD5:	6F18705BEE709F1F4B180E83AD85054C
SHA1:	F2B9D18B0EC71A6CB42AFBD38E2CE9E3B765EA52
SHA-256:	F45D0DAE759C1E915F715654C883245090AFC57A9A0B37B63C10F87672AB0A34
SHA-512:	6F556557DD9BCAA6A41452760B99943FAFB0956E1D031154513CB8C8AED509735A80A18A88D390E36E28856CA5D9384BE4083F256F67EC8768BD4A86BD3BD376
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............;".....bKGD.......C......pHYs...t...t..f.x.. .IDATx..g.$.%v].H.%[Nw.....>~..$....X.....L....2..~0w.......!.....pav..5s.sx......z...../.0.....p=\..3z......z......<\....p=\....z......zpF.C.p=\....p=8....z.......=....p=\...........z....g.0.....p=\..3z......z.......;....~.1v.....<....W..q....t..........&...o.._....~.-.u.x>...3.^.G.m....o.o.......b?..?....5x......._:h?......5r.d.}....]..u\|8+...~......sqo..\|.........../........O._j....KFv0l.......6..b~.N.m;$I.4M...Q..._Lf......p. ..c..9.`..3.._........`.......k..1.....x...........[..........U......a....o\|....v.;X[...Ck...~N...[...,.X?Wn../..\|Wz.{.H..0..~.~8......g...~.;x..8.........8..t.{.......O..?L....s..bp.4!>.s_....".`..qp.`......x.C....9..u..}...{..X./l....w..3....Km...}.9;x..........x.....".................i.y.}9.5..q..",.g...}x.3..\xy....9...f....._.....................7.q.1........q.kEt.......ZZ.V.Xkb..6...8.M.l>..`..1.....cp...$....{.c!....j....g......!A...

Chrome Cache Entry: 541

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	287
Entropy (8bit):	5.015529132385196
Encrypted:	false
SSDEEP:	6:tI9mc4sl5RtOU0p4nEVkK+CJ1JrycDQnVkxGjU2ZIvhC:t4vfOADKPn5yB5jPMhC
MD5:	64090EE2574D7F41444485BDD8E4A04B
SHA1:	D2342EBF52614F1EAFD07BBFDC72E3F65A1963B8
SHA-256:	483E819776ECFED148800D9E881C1C72F4279D74264B49A38346C26358EF98DC
SHA-512:	E936442EBA58D4438749791365F38CE7D39B7291F3BB032D35FBB4FAED6AF7E14C9CA7D4FC57A62B90A950C3868AF0755C4530BB5DF8A05CA9FC27044BD522C6
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path fill="#FF0000" d="M6,18h12v1H6V18z M22,6.2v9.6c0,0.66-0.54,1.2-1.2,1.2H3.2C2.54,17,2,16.46,2,15.8V6.2C2,5.54,2.54,5,3.2,5 h17.6C21.46,5,22,5.54,22,6.2z"></path>. <polygon fill="#FFFFFF" points="15,11 10,8.35 10,13.65 "></polygon>.</svg>.

Chrome Cache Entry: 542

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	726
Entropy (8bit):	4.339020219837034
Encrypted:	false
SSDEEP:	12:t4tM65hacbIQEJzqgnuTx9DcwBCkrcE+DDuqE3kjZRpQNtdhlwcf9iSBcG7BihbX:t4tMMt9EgFEFu+eq7fpQNtdMcf9iSqku
MD5:	1B8EC16A3060F8866E64FCDC09FF7185
SHA1:	B5E017E0D46F2DB0FC18A5E74F740D69FEED0372
SHA-256:	4E4AAE10A6FD5B8F86E1565507983459C3D0F474313547C9DAB176F83261A523
SHA-512:	07CD2A5466B397E612EB7A9827646BF0606031ECAE1771DCD93360BFF0F14477ABCD0F70B215C21879C9C5BA5E64BA9114CB036D7D401BE873DE1F84CC40B888
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M25.8411 11.9977C26.6778 11.9977 27.4597 12.414 27.9268 13.1082C28.6951 14.2498 28.6876 15.745 27.908 16.8789L27.1796 17.9383L27.8546 19.5037C28.257 20.4368 28.1597 21.5102 27.596 22.3558L26.4999 24V25.9977C26.4999 27.1023 25.6044 27.9977 24.4999 27.9977L11.9999 27.9976C10.8953 27.9976 9.99987 27.1022 9.99987 25.9976V12.8264C9.99987 11.9927 10.2604 11.1799 10.7449 10.5015L15.8632 3.33586C16.0776 3.03569 16.4721 2.92531 16.8112 3.07062C18.5762 3.82706 19.5347 5.74955 19.0766 7.6144L17.9999 11.9976L25.8411 11.9977ZM5 13.4999C3.89543 13.4999 3 14.3954 3 15.4999V25.9999C3 27.1045 3.89543 27.9999 5 27.9999H8V13.4999H5Z"></path></svg>.

Chrome Cache Entry: 543

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	5834
Entropy (8bit):	7.966477478463108
Encrypted:	false
SSDEEP:	96:fagVwDdVqtqfQjl8iqxKJZTMcvk1CmHgQmd2NK9J/K+97SFanNoc4FxC6ibWpbj:y1fQRbq8TPsHgZdXf/K+FganNQFxC6LH
MD5:	46C4612DADF06D444C9BC651C9A59C14
SHA1:	52D322F2A5403F5BFCAB65EFB0487E6CF2B23061
SHA-256:	4FD3C1CEE3361BBBC0B80D77906729DE679D577BFC70CD4A832AB58BFD6A676A
SHA-512:	A73609FD11551AA4E8A1C382ABF23C68E43AE52FD88AA1F605091B0AFBB2670EFE1CEEA77BE905C4EF377DA5043FF1B13EE713429C150AF3405BCCE35C9BFBF7
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....0L.....^.>Q..J#...8........z.......#.m.J.~\|....a......j..o.x/.......v..[.............{K....D.!...S...C.p%...........s.........?........7.?./".............?...o._K.....;.U...O.....\|..4.....?.../..[^..r=..g.n.^....N.\.9..k../.g...."u....`Q..z.vx......6J.b)..=AF.%..)....#...tJ..Av...Eh. ..OO..9k.Ay..&.l.L..8s.........%.t...g.....99.~v;...R.I...m...K9x.&......^d...k[!...N....++.....-...L5..h-.oc.~Zu..0.^..Q.T.._....,.U.t.l..Z..Hm.:........>.....<..)T....n>m_..y..X..&..6R#.....yti.:Z.....@..M...(.7.!em..y.-...5.B\|2/;f..?y.L..:.[#$u{..'a..Ma........BO..}.........k6.n..9.Q.X....P9...r./.@......CE.zT....h.U..Y....HX.y.....;...cq..%.dQ.j..W...]......o.~FM....p....K..;...v.\.W.....K....J[Gm....i.")....6...h......R.^........Wr.......H.j.7................N..x...O..bZ.....9.Y....=...Igcv...qhuy0......r(.NTN........\_P~.M....w.......W.....(..2....{.?....(..n...i."b.D.=.....;m.+1..MC=.+E.......^.....A..Rke..e..AfO...<t.&D...&>.

Chrome Cache Entry: 544

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	561
Entropy (8bit):	4.664076278294878
Encrypted:	false
SSDEEP:	12:t47N9U/vmRBoGaBoVOLgbvSFWeGzE+5OPiufVKJXbsUFSQiYHUloL:t4jU/vRGaBoc2SLX9fUb12NSL
MD5:	627CBC730DA8617E4FDA79BB7FC35F2F
SHA1:	C1CF15F3D7BD2AC64B329E353D26771F5C13FE77
SHA-256:	817119ECC2BC54779A271A53B347E8AF33C2544934D642D7877E99267BB0745B
SHA-512:	FB2299DC0272ECE197FE5656C0ABF1E6CF96F5D25F3D135D2DCE3D7CF50C189BC0C9C73D1B042020DB47B2FD680230C61F9A6D599D385CEFFAC87F20CEB69555
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/thumb_up/v17/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M18.77,11h-4.23l1.52-4.94C16.38,5.03,15.54,4,14.38,4c-0.58,0-1.14,0.24-1.52,0.65L7,11H3v10h4h1h9.43 c1.06,0,1.98-0.67,2.19-1.61l1.34-6C21.23,12.15,20.18,11,18.77,11z M7,20H4v-8h3V20z M19.98,13.17l-1.34,6 C18.54,19.65,18.03,20,17.43,20H8v-8.61l5.6-6.06C13.79,5.12,14.08,5,14.38,5c0.26,0,0.5,0.11,0.63,0.3 c0.07,0.1,0.15,0.26,0.09,0.47l-1.52,4.94L13.18,12h1.35h4.23c0.41,0,0.8,0.17,1.03,0.46C19.92,12.61,20.05,12.86,19.98,13.17z"/></svg>

Chrome Cache Entry: 545

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 241
Category:	downloaded
Size (bytes):	202
Entropy (8bit):	6.777752881041712
Encrypted:	false
SSDEEP:	3:FttrwVOvvWMMbppL/+kk2ZIk04ejI8bffcbP1tAWQWKpoHAtvi+1jL0ymi3KfxK9:Xt82+1LhZIk0ZjFT0bNKsgtvJl3Oxa/
MD5:	B98B1C94751AD2CD1AD09DD75455E60D
SHA1:	50B2637D2BFBD516A05CC00E4F6423519D1E17F1
SHA-256:	C78ADA75800366D2458528AAC18BCB2D8EEC87BEFE53B654CA44B0850C75C6D6
SHA-512:	67C53F20AF1A3811767BD5AEF40858345909AC4FB1E7B472A0A7C88133FF504A304E256D0F481670A7D29291C29DCBCCE7C0DBE2812F02C6784A808CA57CF654
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/news/v2/24px.svg
Preview:	..........M.;..0......'.9%).J.m..V6"/.....9W..bF.j..^a..<-......1.".b}.BK)E.`...:9~.o...{...Afi....q _......S./.....T[..r..).."e'.m.......A..a..P....4.C.%7.+...?..S.mF.(.BPe6...DS.K.?...p....

Chrome Cache Entry: 546

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 400x400, components 3
Category:	downloaded
Size (bytes):	24873
Entropy (8bit):	7.972251938810565
Encrypted:	false
SSDEEP:	384:HzcqSdaf15cM6zkf8Ys4/EcNUDIiFXWA1uEV657I0gB3F3wofxXZVrtOoQ/6BSHl:TcdatSZzq/EcNUDZuKEk93FPXNBdfm
MD5:	25124BFEB241628AF7B24A119445DCF7
SHA1:	B09A049D979BD84FF115A6110CE439017C06CA98
SHA-256:	8AF40B92AD689F388093916BBF95C3DAA76EF96C868570073CD606015626FD9C
SHA-512:	02C4C9502751AC6FB56C2B25AEC39A72836679AE94787389E9D46BD2454CC3CAE1F9DF5A70294292D6DCAA39080866E2ACFF08BD7937817EBCF31454DB44DBC0
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.....................................................................................................................................................................................................E.........................!1..AQaq......".....2.#BRrb.....3..Cc.....................................-........................!1.A"Q.#23aq...................?..k..u_=+..n...h.P.3......Z.`Z.D j,-...%F3............CA.@.&..."....V.xOD#...R....A......{...#..a.....2..\x.z.R......:..:.m.......J.....^.....r......7..IIjnZ...~...,..w..^W.S...X..%.?m.q......b.....'.YU.4..m\|...Xn7. .p9'g....,..8...)...A.....C...t.~.r...k..4...L...Qa./...+.R!X...0..,"N\|X..Vrn$....H."...B.].z........G.<6......T.W...v.k].h.3..w..d.....J.cJ4...U.DiTA.z...Z^%=....9.b.Q.:.. )~.k4.....r.C..Q...f;wLS.`u.H.C..h.I..k....T...v......>...w...w..:.[..Z.A.........HU..SN..?..L...k..>.@..8t.....k=.3pe.f+...T.9.8.rNc...5<.:...C92../t.".k(.@....;...Wz...7.....d...b.9...B\.zW.yq.1........<.

Chrome Cache Entry: 547

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	182
Entropy (8bit):	4.923041841279974
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHaxhTIQfaaiBFbCcD8o+fmQGq18i:tI9mc4slhohC/vmI4OhEQfR6Fb3Y1OQV
MD5:	D6F15B1444CE6B4DBC711AC9E9041F17
SHA1:	98D8A4EAB8E132C5894592992F532CF36D71810D
SHA-256:	2BE645A9C201E31B43E28FD5541E36B73175D503362ACBA96CF578B95DB8DD8A
SHA-512:	89F41624C92CB68B716287E74ADD7DEEF7BD67E8FB68BBF7DF93BB84AE1478248CDFC35C26F45A0A6DE347808E9E6431CA771EC9A18E0FF6869843D66B2B4E77
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/download/v9/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M18 18v2H6v-2h12zm-.6-6.3L16 10.3l-3 2.9V4h-2v9.2l-3-2.9-1.4 1.4 5.4 5.4 5.4-5.4z"/></svg>

Chrome Cache Entry: 548

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	616
Entropy (8bit):	4.417992592628411
Encrypted:	false
SSDEEP:	12:t47N9U/vmRRSpPiaYjmnjdCOmwT2IgpEQx5nnQvqsRihtnRm31IEURwpY:t4jU/vtPnYynsrwT/ox5nnSVaZ+IN5
MD5:	2E6B195059996451CC198378775A73BD
SHA1:	D1F68BBCF0F62130D235D26F30D99BC1891C96AC
SHA-256:	77729CACF85AB5D50BEB76F8C66D44DEAEEE396796F6F659CEB5A5AA2B1A8DA8
SHA-512:	317D2E52F04F6FE420E5D6D38E849CE9B8E33602191A85954BB4CCB57976FDFFAF85ED654A6D3B58ABF5FB9A94440FA397850AF73D88728B39484BADA0F9E776
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M15.36 9.96c0 1.09-.67 1.67-1.31 2.24-.53.47-1.03.9-1.16 1.6l-.04.2H11.1l.03-.28c.14-1.17.8-1.76 1.47-2.27.52-.4 1.01-.77 1.01-1.49 0-.51-.23-.97-.63-1.29-.4-.31-.92-.42-1.42-.29-.59.15-1.05.67-1.19 1.34l-.05.28H8.57l.06-.42c.2-1.4 1.15-2.53 2.42-2.87 1.05-.29 2.14-.08 2.98.57.85.64 1.33 1.62 1.33 2.68zM12 18c.55 0 1-.45 1-1s-.45-1-1-1-1 .45-1 1 .45 1 1 1zm0-15c-4.96 0-9 4.04-9 9s4.04 9 9 9 9-4.04 9-9-4.04-9-9-9m0-1c5.52 0 10 4.48 10 10s-4.48 10-10 10S2 17.52 2 12 6.48 2 12 2z"/></svg>

Chrome Cache Entry: 549

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	363
Entropy (8bit):	4.49126552549198
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4CCUljullQ5dUiC7KITuMUxldUiiiC1ofuMUxldUiiiC17:t47N9U/vmRXKjullQ5d+puMUxldbfuMh
MD5:	82A60FADA6F7957329BEEE85E0453CAF
SHA1:	6882C6B5F04787D57F3B59C1D1559623BC40E146
SHA-256:	98901DDFF67E245769A3E1F47ABA0210653F817436CE288646FC0BB88E859CFA
SHA-512:	646BE4874078FB5B9072DF552DA8CF0A1E5533D1B65392E06008676D8B06CA3E5EAFAC14C89BB580E0A7EAAEE94B3EC0825174328C3B30FC92D66730FBAD373F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/overflow_vertical/v10/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 16.5c.83 0 1.5.67 1.5 1.5s-.67 1.5-1.5 1.5-1.5-.67-1.5-1.5.67-1.5 1.5-1.5zM10.5 12c0 .83.67 1.5 1.5 1.5s1.5-.67 1.5-1.5-.67-1.5-1.5-1.5-1.5.67-1.5 1.5zm0-6c0 .83.67 1.5 1.5 1.5s1.5-.67 1.5-1.5-.67-1.5-1.5-1.5-1.5.67-1.5 1.5z"/></svg>

Chrome Cache Entry: 550

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	252
Entropy (8bit):	4.749518607468393
Encrypted:	false
SSDEEP:	6:tI9mc4slmKkmPUtlXX5xiUSdztsG4J5GXyAajYUNrLVKLbrwPtOTC:t4IrmPoXXmUSBaYaj/rL8LvE
MD5:	F8F3636F756E2E0E0892FD9E35174490
SHA1:	6C735659FF64B530A9DA358FEFBF75CB6B14B300
SHA-256:	2634B0DB38CF06C1261C115FD4B5D56177988D8F4E0CD2597A23EF7A44A94D37
SHA-512:	47834E3B35CE2C0B1315E637F81AD7996E738C429AFA4E9FBFAC2BD08C26097381F3353F746923FEA16B045117AC4C615726203063CFB8654E7D4C19A273BB52
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M3 9v6h4l5 5V4L7 9H3zm13.5 3c0-1.77-1.02-3.29-2.5-4.03v8.05c1.48-.73 2.5-2.25 2.5-4.02zM14 3.23v2.06c2.89.86 5 3.54 5 6.71s-2.11 5.85-5 6.71v2.06c4.01-.91 7-4.49 7-8.77s-2.99-7.86-7-8.77z"></path></svg>.

Chrome Cache Entry: 551

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	208
Entropy (8bit):	5.110480219410639
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4PaVRLUUkJUaBSY:t47N9U/vmRPaVRwUqUwz
MD5:	F5C29B3D10DCCAB880085999FDBB6302
SHA1:	779A18F5C8FCBA076D1F341DE5F0CD67AFDC7CCA
SHA-256:	177CADE5695A4267C5F90F5BA834636B75C32295DF99AC58B1EA1B97068E8058
SHA-512:	0428E50266C32E9825071A940FFC85DAA454106931B7E3873C3187D95FCFF97D64088D50344B4B7CAD6DDF1FA4210C1A3BEC39F0F524B73AE31FDB065E5E3726
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M21 21H3V3h9v1H4v16h16v-8h1v9zM15 3v1h4.32l-8.03 8.03.71.71 8-8V9h1V3h-6z"/></svg>

Chrome Cache Entry: 552

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1569
Entropy (8bit):	5.137804313417724
Encrypted:	false
SSDEEP:	24:hYejCi0AuVFIIUzwgRB5bLKeSEoZXE0n2ecEqRyehfwqJl8Wj:gBVgMg5bOxDZXfJqy3G8Wj
MD5:	8BE7FB7EFADF5D1143AC0A5B5CFA53B0
SHA1:	B77EFD0A67078FAECE56AAD90A59077E0220CFCD
SHA-256:	651077A7ECA22B17507CAAA9D3CF634F246F8106CFF5BAE163299559275E40FB
SHA-512:	0C2F08EBDC8D509948468ADD38F72E81DD3840ED3939C33A80DC68C5E0F5114BE3EF45D47215D7AECDEA344D64C6A4E533C345B986846269BB2EA160D7A1A314
Malicious:	false
Reputation:	low
URL:	https://scamwebsite.com/ltu
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>FREE ROBUC</title>. The style.css file allows you to change the look of your web pages.. If you include the next line in all your web pages, they will all share the same look.. This makes it easier to make new pages for your site. -->. <link href="/style.css" rel="stylesheet" type="text/css" media="all">. <link rel="icon" type="image/x-icon" href="favicon.png">. <style>. body {. text-align: center;. background-image: url("Robuxb.png");. color: black;.}..block {. display: block;. width: 100%;. border: none;. background-color: #04AA6D;. color: white;. padding: 14px 28px;. font-size: 16px;. cursor: pointer;. text-align: center;.}...block:hover {. background-color: #ddd;. color: black;.}. </style>. </head>. <body>. <h1>Link to my weird website</h1>. <br>. <pre><br><a href="http://scam

Chrome Cache Entry: 553

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	181
Entropy (8bit):	5.0971144323973805
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHeQR+Hmy7NdURsoDCb:tI9mc4slhLJ9hC/vm+Qqmy7NdcE
MD5:	FE331A9DBB967C0CF9B8F9393194706D
SHA1:	AD46D5C48638D094B7CB6065748F2F0DC13379D3
SHA-256:	7BB86F0FED70C3026F3D41D1ED0ADC304A4EBA489901226658C65A9244A4E22A
SHA-512:	E67196D4A808B2E82EBEFD6922A5822F9FC11C9F030B7E0C75D079A700339D1D0300B12DADEA7DFF9833BB27FCCFA1C4E026783091484FD6E6F7B1078251D057
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/flag/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M14 3H5v18h1v-9h6.6l.4 2h7V5h-5.6L14 3z"/></g></svg>

Chrome Cache Entry: 554

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	669
Entropy (8bit):	4.392258836691397
Encrypted:	false
SSDEEP:	12:t47N9U/vmnqMVveSuXqVytjpdIYnX1Gcekt+7lUJJsUGF7pmAqjb6mUz:t4jU/vfSundBX8wt+osujsz
MD5:	2FC469BBFA86F0452A71C0841D764880
SHA1:	ED84D8A8D42D04498588E03C666FADED521DF292
SHA-256:	27C9E5810D545D84F4968F1DDED0421E78F2B3C28C6C89DEF47D57E079AB1E90
SHA-512:	30C0A81DF9B6BE79670031F934D364575E1A94ED4BB120032687794B15A48EA6C6130F1BFD29D71A094B35DF2FE4E8FDF470F87D0B2140641168CEF3B90DC04C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/radar_live/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M14 12c0 1.1-.9 2-2 2s-2-.9-2-2 .9-2 2-2 2 .9 2 2zM6.36 6.33 4.95 4.92C3.13 6.73 2 9.24 2 12s1.13 5.27 2.95 7.08l1.41-1.41C4.9 16.22 4 14.21 4 12s.9-4.22 2.36-5.67zm12.69-1.41-1.41 1.41C19.1 7.78 20 9.79 20 12s-.9 4.22-2.36 5.67l1.41 1.41C20.87 17.27 22 14.76 22 12s-1.13-5.27-2.95-7.08zM9.19 9.16 7.77 7.75C6.68 8.83 6 10.34 6 12s.68 3.17 1.77 4.25l1.41-1.41C8.46 14.11 8 13.11 8 12s.46-2.11 1.19-2.84zm7.04-1.41-1.41 1.41C15.54 9.89 16 10.89 16 12s-.46 2.11-1.19 2.84l1.41 1.41C17.32 15.17 18 13.66 18 12s-.68-3.17-1.77-4.25z"/></g></svg>

Chrome Cache Entry: 555

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 556

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 557

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 10 x 10
Category:	downloaded
Size (bytes):	125
Entropy (8bit):	3.7509138143209344
Encrypted:	false
SSDEEP:	3:C8sU//e/Lyl0y+2IaMX4vBtov:tP2bNvau
MD5:	10D3F33CE94DC0BD36C479B4C2B4C43C
SHA1:	DAE1FA54556C616D0F95E9034C3AB6A46D9A2D38
SHA-256:	1407F21522CA02CDB6CECA3B60F963DBB46BB1859EA22F4700F1C1A1FA42C7CA
SHA-512:	AC377F9448B2077676A656CBE48EF2A7FD1F023A40B267D5E38897271C893F637C0FFDC321C46443FEA9B064D9D603850CC6C710C3440E6C9450C707F4BF1AF8
Malicious:	false
Reputation:	low
URL:	http://www.addesigner.com/images/blank.gif
Preview:	GIF89a.......................................................!.......!..Ulead GIF SmartSaver Ver 2.0.,........@..p.I..8..{..;

Chrome Cache Entry: 558

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	373
Entropy (8bit):	4.744613189871505
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4aC/foF8mw4U0bW5RJDURmodj6iiYp1GTDWbyLsji:t47N9U/vmRtnY8/4U0wRJIAoZ6iiYp1U
MD5:	25F33107B1ABE585D6667013A5EE0156
SHA1:	08CA62806C11E78AFA36E27F4334593A721CDA78
SHA-256:	D00CC0FA93D30CF63610BF1B33BB689DB1693D0B79968954EC376CB67E636D46
SHA-512:	75851CAB4DCDEF5E5AB0DBCE7FED43007EBDD28DC79AF33BFD9F4D5C8CF714660822BBB17CACCA02DC7E1B8CF85A74122481BE30A901F35ACB3D61C5845D5983
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/fire/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M14 6V3c-.85.44-1.7.88-2.55 1.33-1.41.74-2.9 1.34-4.17 2.32-1.13.87-2.02 2.05-2.58 3.37-.46 1.09-.7 2.29-.7 3.48v.14C4 18.26 7.58 22 12 22s8-3.74 8-8.36V2l-6 4zm0 9.7c0 1.82-1.34 3.3-3 3.3s-3-1.47-3-3.3c0-1.19.58-2.24 1.45-2.82L14 10v5.7z"/></svg>

Chrome Cache Entry: 559

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1134
Entropy (8bit):	7.743142541199294
Encrypted:	false
SSDEEP:	24:TXSqyHaVdWjEY0EJXXbhJaesZzYdHj5GY5STGtRDpAP4nM7AAyCH0kUIp8z:TXSHHaVYYREJbhhsKdD5z5SiRdAcM0Ai
MD5:	8E13264BE5D4E53490AD922B5D882AC5
SHA1:	C38AA0EAE96CBFF954A3408E1854D48E3F15B90B
SHA-256:	DE4E610608FFC5295EDBD2B9B6256D4C14E2D13D46BEE2071B031D69A6DF7109
SHA-512:	77A2CA479893BDBDF983E51D53B6290F4E3420C7233DF90C68F9DEC7A404E2A97E8EF4B54A1D51C29C45B0093CC5C94868DDF69D23504AE166AD0F91940A27A9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....sRGB.........gAMA......a.....pHYs...t...t..f.x....IDATXG.W.O.Q..oq.4.1j...E..5..'.1!.......F.q%.f...AY"."..aHE@F.....~-...."'9.....w...0.....J..+P..3i.6..6...T.l.WP.^.e...5,.....j.........(...84......Q.i..&.l...k.1}.%.W...o..Vp...b..K.... .....i^..4./j.8...f....D..xAwJc(......$.....(\).wW..FS....[jhB..4GMM...o..e..a.4oo.........-....B.5Y....q.n..~.K:Q..f.W}......F.Ju\|....Z.....0.Q..r.?.sT..Vr.....k....ks8wV.V...e..Q..i..t.....z....g.m..BhWw.W.f@<.`0.....V.....3h~.^..&.8....\|....&.l.._#y...i~6W...j.c...@\..g\|..H...7r..0..q.w..L..zZ.....}..'.1....$.....U).4r.Wbg.Y.Z.....d...A...,J.%\...J.V..R.."...Y..xA.?EU.....n.c.&...n.e..D5...?....../.....3.y..&....3`..r...!..X.I^/...<v..h.Y.B........x..5}c.W.....sPME L.....P...>.....Tz.....p.T......9..z..6.....k-.....p_...I...-..`.!.]..7#.Rk..{a.......N..._......z..z....,kj..kxR...O.o..W\.K.^...$i...l.X......\|l(..*..4..R.......eW29.....:Z`...Q.!.@%!...US....=.

Chrome Cache Entry: 560

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	441
Entropy (8bit):	4.728282635502173
Encrypted:	false
SSDEEP:	12:t47N9U/vmRR9jRxmHRLkCsL9IxflMwhT2fLrYVMdubTci:t4jU/vJHNklhIwwhqgVMEci
MD5:	B15A744B5ED7D5D8A779E411F513E24C
SHA1:	F156A8D2F03E4FFB072FF7D2241DDCA911664B0E
SHA-256:	43B5B8ECC8D128FDD2DF4366CBE6FDD8ED0067DC117438290F59F5A0FFAF715D
SHA-512:	3381EC00EEE98892B08E5C47929FFC27129A92ACF486CC33DB7E7DE1128ACBADDCCAA75115A40BC6A91B97CA39FCB42E0661341BF433299720C80DBB3EDBFF20
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 20h4c0 1.1-.9 2-2 2s-2-.9-2-2zm10-2.65V19H4v-1.65l2-1.88v-5.15C6 7.4 7.56 5.1 10 4.34v-.38c0-1.42 1.49-2.5 2.99-1.76.65.32 1.01 1.03 1.01 1.76v.39c2.44.75 4 3.06 4 5.98v5.15l2 1.87zm-1 .42-2-1.88v-5.47c0-2.47-1.19-4.36-3.13-5.1-1.26-.53-2.64-.5-3.84.03C8.15 6.11 7 7.99 7 10.42v5.47l-2 1.88V18h14v-.23z"/></svg>

Chrome Cache Entry: 561

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 562

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	211
Entropy (8bit):	5.119467255389257
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI42IBIAFzKVN/YWAIQfgZi:t47N9U/vmR2I+jVyIKg8
MD5:	914B3584E764344B898D1431747A8A4C
SHA1:	C870050A1AEB28C22867785E93A304794375FCD2
SHA-256:	B9E9D5F5F7AF96C4272B4ECE21F8B568F8B03D70D6ABA3DEBA5F823E81796F15
SHA-512:	A8040E77D002823D9D190822C23A4619052CAB4DB0E18658ED62DD50254E96ECB47A7D0F776977F404D60DF839AFD447A5061B564CC8DBA4A0F6A1B47BA5D2AA
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M11 17H9V8h2v9zm4-9h-2v9h2V8zm4-4v1h-1v16H6V5H5V4h4V3h6v1h4zm-2 1H7v15h10V5z"/></svg>

Chrome Cache Entry: 563

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 416 x 184, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	138965
Entropy (8bit):	7.9925937133455305
Encrypted:	true
SSDEEP:	3072:zJ8mVVf3KV1THdhb6eP0refrVInZ53dVx3O2:t8mk1LPYezVInpz
MD5:	683D7CBB895FBFDC0026502D07580B2D
SHA1:	9D52F2C97C69E78669E3530C5405CE3DCCB5CD7E
SHA-256:	30930A80C46300F32AFA658D94721C1191DD20B4C863EA60B69C9895A7A0B58E
SHA-512:	5A68545BA144A104856E426E58C5DE8D189747B5ABEA8BAE0CCE18F1306C76DB45CACAEFAB3C01677EF6C109C689265B9FD72610797EF79F74CFAFEAC7D07631
Malicious:	false
Reputation:	low
URL:	https://scamwebsite.com/Robux.png
Preview:	.PNG........IHDR...............8.....sRGB.........gAMA......a.....pHYs...t...t..f.x....IDATx^...VG..[..0........M6.q.......4Xpww..g...f..Fo....,K...{..~.....s..............???....W....\..........3%2"..p...L**.........N..g........3..>.QTTd....p.............k...........M;.)..o._.....>.\|....,............N?K..O}...t.....l..}.3.wup8.q.7..g....[....>G.........RQu.......-qp..{No..g...O...A.=...]=..o7....7..S\|....l.8.9h..JE../0:.v.A.....p....8(..........3x..7....\s.s...{...G....)..,.~r.~....:...._.Y.......u........s...v.Px...o...<.R.;....]..k....M....Mq.}...ts...<_.RPh..w..}.M...W.i9z._.}.Y........tg..y...:.g.......t...Xh.....C.o....w...=.....).]....3p...1"....>..\|..q..........l..+H.>.s-,,LJJJ...+...o..uS...?..w..........s...{%88....w\|....mrP...........\|.:..\|....v.+.K..u.N_=.q..^....\|.....o..(.u@..4.=..7.w.1..7~....\;..............?...{..}S._.p4...x.?..'....}.....*.P@..=......7.......jp...m.....8...[..x..:...y..=.P\..]...O.9''.,.._.y....Vx.

Chrome Cache Entry: 564

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 640 x 25
Category:	downloaded
Size (bytes):	1446
Entropy (8bit):	7.64145265008895
Encrypted:	false
SSDEEP:	24:lJlow/B/7ZocFD9p35KHNJaWmau5SSFo936dzpdTGa2w6m59HZLZOCe:lJBpNFD9pQH9mauw393sp5Gq6mb5oR
MD5:	60AC2D9F2C4CDA82F08127C76CD76167
SHA1:	CBF6E2FCDD04B6F701EFA03D5AC304B82F9F61FA
SHA-256:	DE6CFFFFC1D3F3C25003218D19A6A4481B6C62303E07EC6761EDD4B24FD46853
SHA-512:	7B73D36518C16405A6EC20BA2C1DC98E6AE1D108FD2B8E4F551F760B19A14ECD2147F49E40444E63080C4AE450C9E8B8087F7E7C057EFA72E30ED97595A2FE2B
Malicious:	false
Reputation:	low
URL:	http://www.addesigner.com/images/inf-samp.gif
Preview:	GIF89a.............DDDuuu...000......... ...............eeeUUUggg.........................................!.......,........... .di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL....z.n... a..v...h....e.0.w4..U..p..m....U...9...G...1..e./..5...R.....c......S..7...0.1..0.d.-..5..tS...Z..%v$.'.#}(....#...'}......".).$.'..../.....=....H. ..n&.mc..."................J<..`..$..\.(b...w..:p`..Q.>.Dp..."...R...&..ruGR..;{.(0u..O?}J...l..C.\2..'Y.%.80.S....0:vU..U..F...Y_..x.\:...D..#P....b$........M.1E......%a....SJ(c..........5........P.@.OQ..>..P........(..j-.E...l$....jAr....[k..`IX....xI..........D.z#.2.n.....{f....x.t.O.yb]...3...T..-...Yn....#.Vg_...@Ik.b.Vr,..[O.x..D...#.....\|r.Bd.q..Ib"hE.0..(.0..B.(..wZ.....^..S...h%.....I.....f..p.M...$..q..ngF...\..e....`tk.`.X.\Y....%.k..P...(...4..H.(.........c...0P....P...2..C.t....3@O{...96.L.k...[>..xI...(b.*...g.......G......~.z.b..Z.=...l.N.\|.zK..#.X.0....e....qb..M...{.id.3 .....+.,..3.v.........Q..o&.

Chrome Cache Entry: 565

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	311
Entropy (8bit):	4.773843844737949
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4tSSJhrtldwFSrSLwKTksQchiR29UZqbivGSY:t4noU/vmRtXrtvwFSgTksJh42K9pY
MD5:	D5E9A724519F1A72A4FEECDEA710B2D7
SHA1:	75040CDBB6269D16066A1CC97973CBD35FB3EAF6
SHA-256:	119BEF082F4459AC47AC8C95CC7F5901D60BF2AFE47DE7314E479BDA835CD593
SHA-512:	55A2C26244423311D30C64F06E1AFAD3035D318F7948FED5F2D386FFE9AF1C48077F59036FB1B8BD368875F953CC2F2BE627CD6F5231CEE5119961CA523E8716
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/arrow_time/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M14.97 16.95 10 13.87V7h2v5.76l4.03 2.49-1.06 1.7zM12 2C8.73 2 5.8 3.44 4 5.83V3.02H2V9h6V7H5.62C7.08 5.09 9.36 4 12 4c4.41 0 8 3.59 8 8s-3.59 8-8 8-8-3.59-8-8H2c0 5.51 4.49 10 10 10s10-4.49 10-10S17.51 2 12 2z"/></svg>

Chrome Cache Entry: 566

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 336x188, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	8178
Entropy (8bit):	7.973410048023401
Encrypted:	false
SSDEEP:	192:7Nqas0IInKNVPHXvgrCTVVuO8MwTcfj/Yt+e6/jw5a:98hLpDZfVfrUIT
MD5:	44FDE90CC036A4C4FAA69A5E74289A0C
SHA1:	7F4DE7B2E04AF5E80EE31A72952C6CE69B28ADAE
SHA-256:	885C740D7DB9DA6A3F434AF65DAC5FB7677931CEAC8D0AB04716E9AF4F00DA2E
SHA-512:	4A960EF11E15197BEB16944FF4E4ADD5A7B1A8152E8442C1D89871D34A706BE8593F8DBEFBD30BD69A0CBC7388A971EF1A73D4CFC2BDBA5AD8101B9F161DB7B9
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw
Preview:	RIFF....WEBPVP8 .........P...>Q&.E..#.$.....en10h.._.P..'....D.W..........'..Q_...?.z2...n.....w......Lw...~........"_..._........5.........=-.._.o.........._..V>i.V.@.M..[....H.`...................?:.K.+...G..?..........u.{...O-NqZ n.v.....kK%).7.s.)UG.<..K:.%.....A..5....Z....I.&.F....DX...%.n0.k.@..o&....:..k.e.P.=o.In..+...l.9.;~j....0.z)...^.u...N.v..NX.D.5..:G..]d.@..8.Y..H./.3.qo&..c.........P...6b..[......o.M}.......B.W`...."&.mp..kW)<......./.p`R/...c.[`m.......Q..P)-..D..8..z'SUs8..O.O.L.[.{.0,..I.......^NK.6yg.Y..F...WM.:....7gm....5.Nj.......<.$..[.....+.....b.......f..........U...U..z<..4r.........Rh..<..,5.p..w$O.c.HB.m`..0 P(Jz.n..\|Q5..Rv.}.u-!...U....,.....5.....x.MHq..kf.XR.........r.^...P.P\|....p....`....i.....W.......O>.;d..Jr/..Gh..H.......'.'..5../.Uu..T..%3.wXi..............oz.v...t/LSj...\|....'.......M..."\.w7...........A.X..M._#...s..uo...^.. ..@^..9._.8..i...xOMhP.=~...eV..........u..S...J.F.....a.X.....0).

Chrome Cache Entry: 567

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	exported SGML document, ASCII text, with very long lines (1120)
Category:	dropped
Size (bytes):	5598
Entropy (8bit):	4.293279469529671
Encrypted:	false
SSDEEP:	96:04JsH5RGMp9UC96s4AJu4m35PznhTJAxfxZN0rDRMW8R0aaQWD3rKivMt:0ai9UCgs4AJ/mpzcNx/eMw1QWD70t
MD5:	2FC13E5E6B51277D7A39CD7AD7D14158
SHA1:	0C9A5C613E5B853376CF2B96D8501EE5960D09C9
SHA-256:	9073602654785DE3537C4AA85E69847A0BDC871F8DAECB053C7698D4AFE8F6DE
SHA-512:	A1F8493CFC4F9C619785D9E39F0E9A54420643C3905193E6D5FFD7531184CA5E5B0FE1B43E7307506ADC01CBB397E4A1CCEA63ACD37304360AACAD8FF06D6DB8
Malicious:	false
Reputation:	low
Preview:	LINT.IfChange-->.<svg xmlns="http://www.w3.org/2000/svg" id="yt-logo-updated-svg" class="external-icon" viewBox="0 0 90 20">. <svg id="yt-logo-updated" viewBox="0 0 90 20" preserveAspectRatio="xMidYMid meet" xmlns="http://www.w3.org/2000/svg">. <g>. <path d="M27.9727 3.12324C27.6435 1.89323 26.6768 0.926623 25.4468 0.597366C23.2197 2.24288e-07 14.285 0 14.285 0C14.285 0 5.35042 2.24288e-07 3.12323 0.597366C1.89323 0.926623 0.926623 1.89323 0.597366 3.12324C2.24288e-07 5.35042 0 10 0 10C0 10 2.24288e-07 14.6496 0.597366 16.8768C0.926623 18.1068 1.89323 19.0734 3.12323 19.4026C5.35042 20 14.285 20 14.285 20C14.285 20 23.2197 20 25.4468 19.4026C26.6768 19.0734 27.6435 18.1068 27.9727 16.8768C28.5701 14.6496 28.5701 10 28.5701 10C28.5701 10 28.5677 5.35042 27.9727 3.12324Z" fill="#FF0000"></path>. <path d="M11.4253 14.2854L18.8477 10.0004L11.4253 5.71533V14.2854Z" fill="white"></path>. </g>. <g>. <g id="youtube-paths">. <path d="M34.6024 13.0036L31.3945

Chrome Cache Entry: 568

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	184
Entropy (8bit):	5.038914846080771
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHeQR+HEp3JdZFQENIfCyHn:tI9mc4slhLJ9hC/vm+QqaXFXaKyHSbE
MD5:	C71D43D3179551ACAFF38A6A24DEDA71
SHA1:	9BE42687E42147DBFEA9C1CA9486CCFE6DAB9F96
SHA-256:	4402C4D35A422097E5AC692FF4EF5182F2E3B72F5A0F710C230A18D6449C688A
SHA-512:	11BBD2FAC3FF1C144F3F18C60975DD679DEC6C23081621DB874DD1057906A5085B73E998332E1B2C2E511AE55D481980DC3E011588487D2779297B6119BCC79B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/home/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M4 21V10.08l8-6.96 8 6.96V21h-6v-6h-4v6H4z"/></g></svg>

Chrome Cache Entry: 569

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51672)
Category:	downloaded
Size (bytes):	52940
Entropy (8bit):	5.711712100952266
Encrypted:	false
SSDEEP:	768:jxScyqPHe6uiyJoSZAdSp26qgajaVHeC8qVWGJv2jvXTS1j1NWFxJ/jaeXuXQT/B:jxkq26aKldSpVbwqVWNj7S1yRuXQIMuq
MD5:	9B7198586525D83C3548E38DBBF8F80C
SHA1:	0D3D2FB35749DE5B974833C5BE31C9789838B1CE
SHA-256:	77132AB6E3BD41F4372302E9CD8B93760846B0F8E6A9B8EDB4DECA1DCCC30FCE
SHA-512:	191A99BBBC480B5CCBA83641EF9D77E37396A96F4E8D8D71C78237E676B274EF6D3C75BF81E3BB29B70A1BCF8AC47B69D68D78DB7E2D38C61C94EE70B8127D63
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/bg/dxMqtuO9QfQ3IwLpzYuTdghGsPjmqbjttN7KHczDD84.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function k(Y){return Y}var G=function(Y){return k.call(this,Y)},f=this\|\|self,V=function(Y,d,C,b,x,Q,D,u,T,P,r,v){for(v=Y,r=90;;)try{if(v==C)break;else if(v==d)v=u&&u.createPolicy?89:81;else if(v==b)r=90,v=85;else if(v==Y)T=D,u=f.trustedTypes,v=d;else{if(v==81)return T;if(v==6)f.console[x](P.message),v=18;else{if(v==18)return r=90,T;v==85?v=f.console?6:18:v==89&&(r=66,T=u.createPolicy(Q,{createHTML:G,createScript:G,createScriptURL:G}),v=18)}}}catch(R){if(r==90)throw R;r==66&&(P=R,v=b)}};(0,eval)(function(Y,d){return(d=V(36,5,57,11,"error","bg",null))&&Y.eval(d.createScript("1"))===1?function(C){return d.createScript(C)}:function(C){return""+C}}(f)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;char

Chrome Cache Entry: 570

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	631
Entropy (8bit):	4.523426024540581
Encrypted:	false
SSDEEP:	12:t47N9U/vmRlNAz9Cf2+uFNxLjRJqpOyaIj24iexYNjbnME:t4jU/vwAz9C2NDx7MraCvC/ME
MD5:	CF8624D2CB9D056B69F4240D26676F42
SHA1:	B6D1C7111D039427E2605490C40992C47021E1C7
SHA-256:	384FBC48B9DAAAAE43546C01BAAC0F19EAF764549ABC66FE69A9E9675A14D0A3
SHA-512:	8500302D48ACDDAD24B051A44482305D92B349A054BF006E0FCA901DC55CC06DF826D28A39432ED7A92B7FB76E1D351945606DA87A0F0D3127E66D1CF2DDC90B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/broadcast/v2/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M13 13.72V22h-2v-8.28c-.6-.35-1-.98-1-1.72 0-1.1.9-2 2-2s2 .9 2 2c0 .74-.4 1.38-1 1.72zm-5.23 2.53 1.42-1.42C8.45 14.11 8 13.11 8 12c0-2.21 1.79-4 4-4s4 1.79 4 4c0 1.11-.45 2.11-1.18 2.83l1.42 1.42C17.33 15.16 18 13.66 18 12c0-3.31-2.69-6-6-6s-6 2.69-6 6c0 1.66.67 3.16 1.77 4.25zm-2.83 2.83 1.42-1.42C4.9 16.21 4 14.21 4 12c0-4.41 3.59-8 8-8s8 3.59 8 8c0 2.21-.9 4.21-2.35 5.66l1.42 1.42C20.88 17.27 22 14.77 22 12c0-5.52-4.48-10-10-10S2 6.48 2 12c0 2.77 1.12 5.27 2.94 7.08z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 571

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	669
Entropy (8bit):	4.392258836691397
Encrypted:	false
SSDEEP:	12:t47N9U/vmnqMVveSuXqVytjpdIYnX1Gcekt+7lUJJsUGF7pmAqjb6mUz:t4jU/vfSundBX8wt+osujsz
MD5:	2FC469BBFA86F0452A71C0841D764880
SHA1:	ED84D8A8D42D04498588E03C666FADED521DF292
SHA-256:	27C9E5810D545D84F4968F1DDED0421E78F2B3C28C6C89DEF47D57E079AB1E90
SHA-512:	30C0A81DF9B6BE79670031F934D364575E1A94ED4BB120032687794B15A48EA6C6130F1BFD29D71A094B35DF2FE4E8FDF470F87D0B2140641168CEF3B90DC04C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M14 12c0 1.1-.9 2-2 2s-2-.9-2-2 .9-2 2-2 2 .9 2 2zM6.36 6.33 4.95 4.92C3.13 6.73 2 9.24 2 12s1.13 5.27 2.95 7.08l1.41-1.41C4.9 16.22 4 14.21 4 12s.9-4.22 2.36-5.67zm12.69-1.41-1.41 1.41C19.1 7.78 20 9.79 20 12s-.9 4.22-2.36 5.67l1.41 1.41C20.87 17.27 22 14.76 22 12s-1.13-5.27-2.95-7.08zM9.19 9.16 7.77 7.75C6.68 8.83 6 10.34 6 12s.68 3.17 1.77 4.25l1.41-1.41C8.46 14.11 8 13.11 8 12s.46-2.11 1.19-2.84zm7.04-1.41-1.41 1.41C15.54 9.89 16 10.89 16 12s-.46 2.11-1.19 2.84l1.41 1.41C17.32 15.17 18 13.66 18 12s-.68-3.17-1.77-4.25z"/></g></svg>

Chrome Cache Entry: 572

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 640 x 25
Category:	downloaded
Size (bytes):	1220
Entropy (8bit):	7.625736564373093
Encrypted:	false
SSDEEP:	24:l76w/BB3U6cRmYASMo9ax1zUmtA0kheOKyVjYOg64knD+5KhcWdeh+A7U+rPX:ltpKFMLSMoM1wEkz8O36Khn++P+r
MD5:	F5B3BB8735280E8113FDD64AABB99676
SHA1:	8B0C5C1F3920E99CCD0794A6CCE03A4DB956CEBB
SHA-256:	A5B1657F055C156B05E1F44855F47FFFF5C8795996C129CB44CC3FF5E6D72E18
SHA-512:	5D592F672E5DC0A4809E9B3ECE7E7D8990957C1EEAD9E9B92622007C0715511C0526F12A82DF0E6851FF6E1878B287782F9882B92496E4D2E457F5FB2A2E9620
Malicious:	false
Reputation:	low
URL:	http://www.addesigner.com/images/inf-help.gif
Preview:	GIF89a.............uuuDDD......000...... ......eee......UUU...ggg..........................................!.......,........... .di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL....z..............M...l.....6...U.%...h.......W......(..#.".`..b...e.........E..."..s.\|..$.xp#..(.z&x$..-..#....../n..'.&.....".......&.w...v...%......H...I.N0 .`.....<L.i..d..9.&......9....C....(.X@......y.....g. P...v.......L...A...%.D..n.U1..a..l..@AP..D%.:TD'.b.x.....>...S.C....r.....iI......<..-;b.... ... .J....j..A.9..i..mP...?%.(.[T......tW.V..... cK.E%..d.f...$9...w.I.)..l.k... @`..&.."f..r2D.K....:..d.^?.@,....0!...).S.v.UL"... .~.AfRy...m.I.....&.g.5U.+...KI$4.@..92KF..g.l..u.#.q..y0..pOm.#...xc..pT.B..F...M2.rN..`....$..e......NL.) ......#S.9.."..y.I6.$.8.Q..I"&.....V.@\.8r..<.0.p$...W...9....o.....GB.....G..6.m...i+.UIc.An).]h.I!_..@....y....n.mB^....).)..m..JX.Q.fl.m'X8.w.y..d...,.].[W......;,..n..wX.0. ... z,e........J.\|..I...[.YL..U._.L...}.TBV !.......o8.b....

Chrome Cache Entry: 573

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15860, version 1.0
Category:	downloaded
Size (bytes):	15860
Entropy (8bit):	7.988022700476719
Encrypted:	false
SSDEEP:	384:S7qmPTF4N21t//YW2FS6+1XxrsbGmjlAbvqMmtCN:S621tHY4xwbGmjloSM7N
MD5:	E9F5AAF547F165386CD313B995DDDD8E
SHA1:	ACDEF5603C2387B0E5BFFD744B679A24A8BC1968
SHA-256:	F5AEBDFEA35D1E7656EF4ACC5DB1F243209755AE3300943EF8FC6280F363C860
SHA-512:	2A71EDB5490F286642A874D52A1969F54282BC43CB24E8D5A297E13B320321FB7B7AF5524EAC609CF5F95EE08D5E4EC5803E2A3C8D13C09F6CC38713C665D0CE
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2
Preview:	wOF2......=...........=..........................d.....^.`.. .H..<........8........6.$.... ..~. ..)..~E......6..J..`.. :.....8.;..5......!.l.j.%SX.SDm...RXh...&.X......5..._...............@...8...Gi..g.;9..'.Q......1..5.U.....w.+.hn..........c.....5.#{..%.#.JP..i.J..U(.6.D5V.<"Ex6"...k..[..{.?.d2....{.........W.......S...hT,.l..'.9.;[@..._.L..\|+...)......S...9F......T..t...-=X.:FtZ..uZ.[.?..f<.....@.....'...I...e..........8.?..-R.3,%X...I2\|.Wk{i...V2C....H$.H.LH.{.........(...6U..%W[t.R....j.........iS..%..L....rf.=..7..9i.I...1.Mj..C..u.B.........vJ.....+.u$.=..3..T..R.._.gs...6).$.-.PUH..Hl....WDd.......fK.(B.F1>..5.._[..]}VA#X...c.....%.(s50...m...^...1...'.$U*H.t...H...s.AZu...'...8.p...@.@.....q..Y.#.....#.....G.....G@..o8. A........:.........S.:..N.S.j.....tav.}.9h..s.....he.......{,~k...,eK.z}.......5%G...l.uCK.....V..............m.....U}.Sz..Z.c.{.....:..g......>h..'\|Z........a....^.b...o.>...g........f../w'....Ja.o(

Chrome Cache Entry: 574

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	181
Entropy (8bit):	5.06529992919399
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHoNcHPKlxaUUNNdfNfxHA8:tI9mc4slhLJ9hC/vmI4PKl7UDdffH8i
MD5:	ABEE7BCA48C50F4966F1D6E4052CF829
SHA1:	B35BD0A701086E7500C813DCCE03BCD5C59039D5
SHA-256:	3F7E5963F0493D7D23A5BA1F6D28E6198CE1B5FDD125DB31BFB6A05B3503CD59
SHA-512:	9C2CD42413CAB6830E7424F61752A1F8F2C1DB3DE2B3EA089D350FD5B28DA57D225DF819C16CAF970372EDCB3CE86FEF27327589C526CDC1253A4730EAF1F9B5
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/menu_sort/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M21 6H3V5h18v1zm-6 5H3v1h12v-1zm-6 6H3v1h6v-1z"/></svg>

Chrome Cache Entry: 575

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15920, version 1.0
Category:	downloaded
Size (bytes):	15920
Entropy (8bit):	7.987786667472439
Encrypted:	false
SSDEEP:	384:sShqOXQlaSchOwK0uFvRqq3xR/xb5OY3aU/lHS9WE2YeK1os:sShJKaScJK0uFvRvxb5OY3aU/lHkmK
MD5:	3A44E06EB954B96AA043227F3534189D
SHA1:	23CEF6993DDB2B2979E8E7647FC3763694E2BA7D
SHA-256:	B019538234514166EC7665359D097403358F8A4C991901983922FB4D56989F1E
SHA-512:	FAB970B250DD88064730BD2603C530F3503ABB0AF4E4095786877F9660A159BF4AD98C5ABEA2E95EB39AE8C13417736B5772FCB9F87941FF5E0F383CB172997F
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......>0.......T..=..........................d.....^.`.. .\..<.................6.$.... .... ..S.!.%c.......\|y...6..;.s#.....x_<..o..........l...J.`p.m..6...h....U.pD...R.J.$...W..`7w...[..qD....<P......J.x.+J-^....va...:.KW..Ph...."....{.W4C....p..1..........CH.....P.............Q%.=.F.....1.%J....d..X..J.<AU..b.N...<l...d...f..^Y..]..&...VQ.<.....F..{.....&{.+J;.... .2P.:.5..?.o.\|....V[t..M..#..d.fv...........4..`.).h..h......@u........4......~.....r.B...p1.P.T..<....r....Y..8...GQ1.t.....%..-Wh..:W.....1l-...@..hL}...lN.._.j...D`..sn.=(...W..?.Z..p.52..H...X...)..CJ...V..7.....<\|..i...{...R.M+[..\|..x-..M3...~!\.l6}.T.o.R'$.)..-.W.T....A...5?.{.2.bR.../....*l..;...{..I>.n..MJ.2........U&. ..(L]].%P.$..p59.LD.f.........V.....z.5~.2\......#.4....9_....%wp.OU.0.....CK..../.x. ..A2e...@...(.i..f./.....`1.......!......@....0 vbt.e v./!...N=>:..A...(...f....?.....iH.F..!k.6.O6S..54.^c..2.G.?6....)b......lv.,h....Y.}.?..uk....L.4d.g..6.\.1u..

Chrome Cache Entry: 576

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 48x48, components 3
Category:	dropped
Size (bytes):	1491
Entropy (8bit):	7.577945425151368
Encrypted:	false
SSDEEP:	24:uMyRFkCmZcDufwohtxQW5T8ZU/FGkdw/mavSWQIAMktf6rr6jWQ3CdF:Oei25X5T8ZU/FG8GmavTySv6jrydF
MD5:	BB75629EE817F89ED3B5D5584EFF44E9
SHA1:	55156138035FC79E69729650D37B77D36B87C976
SHA-256:	CD5065F06E081FB6B1BA8A212F16D7EA52DE1ED61DB18AF1E83B296A7CF4B443
SHA-512:	62E97EEC4EFAA85219F4DDB659401148E7C18F17652C21A37EDE2CD525F9EF17B501C63734DDA33E1B8895E12624320E5E9BDDED2444EE476BB8744B977DB57B
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................0.0.........................................2.........................!.1A.Q.."2a......#Bbq..................................+.......................!1..Qq..Aa.....2.$............?....H..i~.?j...C/. .c...y%.K.{z..>...g..Gj...x....C4.0..b@.c..'....3y.i[..LC.#...}.6&.......z..Wn...ION..jy.3....M..:F1.V.Ds8.^C....\;.....,.^~......up.e9...@...].GT.......QPS.Z.8.`q...`...ELw-]...P\|.R...P.C.2......p....'d.hs4i...E.t.6C..p5...e.......kf....V.im..$`!...f..H'....Xh...h4.....$[....e.L:....u{.K..%.$....\../4....d.!O\|j.W.G~....>..R\|...m*.XU...u..!..\|y...e....Z..gt1..D.Zi.'...%.......Ui0..0.N.....H...k.1....@0S.<Cf.7....n.?.}6.(..J...$.52u...pp..#......y"[O..F.uP....KO...#.dU.D...7j.\|EP.9l...Wcbi.....a..N#.F.h.......K`.......e\.b5I^..z....o.8X..%........v....=.[nq....}5...Z.b....b.KH).....`...j...F

Chrome Cache Entry: 577

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	168781
Entropy (8bit):	7.970624125424753
Encrypted:	false
SSDEEP:	3072:HvSBAOMKk3O1FHwBCZsuMCqq5NuRAuC3Tvbc7yXOOe3:HqHM2HIqsuMQuOTTcW+O6
MD5:	F5E4FDC37173CDDE55EE01FDF6F9B0B6
SHA1:	89B1F7B087877ABB32EC00A8204A9B6111AAC3B2
SHA-256:	6A9B293F14948A84A2F0BD9B6EE86AA6D8877C9D4C5E520DA630B5D92B7D0729
SHA-512:	966F4E5DBEDF1FB23B4A6BBE0A00377DCAC1025CF07A685137B5FCBC844647647575A9C91A1FE90D2755668E7D133D73B3DBE2E9682EC79009AF14EB71124EBF
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/mIHHfNVfhPk/maxresdefault.jpg
Preview:	......JFIF.............C....................................................................C............................................................................"..........................................R.........................!1.A."Qa.q...2...#B....R....$3b.Cr..%......4...Scs.6Ddt..............................+....................!1.AQaq.."2....B..R..............?..UE.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P

Chrome Cache Entry: 578

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	111
Entropy (8bit):	4.980379097367065
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5KVErcHgDXFUVLUJRVFiAdFUvuII9rP0WTC:tI9mc4slmgSVLU9FRF0ul5TC
MD5:	7A85DE03D089077BC1F895B1EA91907F
SHA1:	B86AF0404FED40A12228084B3B090DF8DBE50C0B
SHA-256:	179FAF7C791CF27682668324B60182039191B22B3AC85069C8BEBBA418DB9A1D
SHA-512:	8669E2B41453760B0C67C0701C4EFB4DCF6F544FDB84259383B5E9C64DA4E99DA37CDEC717ECC02E7BB919390E8187877EA125C367456C94B0245BD04E7FB4D4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"></path></svg>.

Chrome Cache Entry: 579

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 640 x 25
Category:	dropped
Size (bytes):	1446
Entropy (8bit):	7.64145265008895
Encrypted:	false
SSDEEP:	24:lJlow/B/7ZocFD9p35KHNJaWmau5SSFo936dzpdTGa2w6m59HZLZOCe:lJBpNFD9pQH9mauw393sp5Gq6mb5oR
MD5:	60AC2D9F2C4CDA82F08127C76CD76167
SHA1:	CBF6E2FCDD04B6F701EFA03D5AC304B82F9F61FA
SHA-256:	DE6CFFFFC1D3F3C25003218D19A6A4481B6C62303E07EC6761EDD4B24FD46853
SHA-512:	7B73D36518C16405A6EC20BA2C1DC98E6AE1D108FD2B8E4F551F760B19A14ECD2147F49E40444E63080C4AE450C9E8B8087F7E7C057EFA72E30ED97595A2FE2B
Malicious:	false
Reputation:	low
Preview:	GIF89a.............DDDuuu...000......... ...............eeeUUUggg.........................................!.......,........... .di.h..l.p,.tm.x..\|....pH,...r.l:..tJ.Z..v..z..xL....z.n... a..v...h....e.0.w4..U..p..m....U...9...G...1..e./..5...R.....c......S..7...0.1..0.d.-..5..tS...Z..%v$.'.#}(....#...'}......".).$.'..../.....=....H. ..n&.mc..."................J<..`..$..\.(b...w..:p`..Q.>.Dp..."...R...&..ruGR..;{.(0u..O?}J...l..C.\2..'Y.%.80.S....0:vU..U..F...Y_..x.\:...D..#P....b$........M.1E......%a....SJ(c..........5........P.@.OQ..>..P........(..j-.E...l$....jAr....[k..`IX....xI..........D.z#.2.n.....{f....x.t.O.yb]...3...T..-...Yn....#.Vg_...@Ik.b.Vr,..[O.x..D...#.....\|r.Bd.q..Ib"hE.0..(.0..B.(..wZ.....^..S...h%.....I.....f..p.M...$..q..ngF...\..e....`tk.`.X.\Y....%.k..P...(...4..H.(.........c...0P....P...2..C.t....3@O{...96.L.k...[>..xI...(b.*...g.......G......~.z.b..Z.=...l.N.\|.zK..#.X.0....e....qb..M...{.id.3 .....+.,..3.v.........Q..o&.

Chrome Cache Entry: 580

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	513
Entropy (8bit):	4.619088850166001
Encrypted:	false
SSDEEP:	12:t4noU/vmRcflkfrh2iA/QFcVTb7BDr/KWnoQ6WCf6fUWmbm4eK37:t4oU/vvl04icj2MoD/OPm2K37
MD5:	79C1545ECBFC2D900DB084A7428DE563
SHA1:	54972C73865787230A5C293228AA74D16FFBAF20
SHA-256:	2486C8B2D43E68A240C0BFD38B4CD6D073B9FEDB2F5A592C01C26157B8BC4C40
SHA-512:	633DB3818A8D96D21CA374FA056FBF3E4010B481FD370DD69577D3FD29708C64F9202B3517BC35F68803ED6F087744AF22CDBD0F22A6A33F5A8B9F84347903BA
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17,4h-1H6.57C5.5,4,4.59,4.67,4.38,5.61l-1.34,6C2.77,12.85,3.82,14,5.23,14h4.23l-1.52,4.94C7.62,19.97,8.46,21,9.62,21 c0.58,0,1.14-0.24,1.52-0.65L17,14h4V4H17z M10.4,19.67C10.21,19.88,9.92,20,9.62,20c-0.26,0-0.5-0.11-0.63-0.3 c-0.07-0.1-0.15-0.26-0.09-0.47l1.52-4.94l0.4-1.29H9.46H5.23c-0.41,0-0.8-0.17-1.03-0.46c-0.12-0.15-0.25-0.4-0.18-0.72l1.34-6 C5.46,5.35,5.97,5,6.57,5H16v8.61L10.4,19.67z M20,13h-3V5h3V13z"/></svg>

Chrome Cache Entry: 581

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2020)
Category:	downloaded
Size (bytes):	12817
Entropy (8bit):	5.34459161517544
Encrypted:	false
SSDEEP:	192:Gq6KPV24ZKs86O/DfVcOfFmI46coWCTGdhFKdbsWkzY:GkxI603wI46xWSGdhUr
MD5:	1D3D22DF067F5219073F9C0FABB74FDD
SHA1:	D5C226022639323D93946DF3571404116041E588
SHA-256:	55A119C0394F901A8A297E109C17B5E5402689708B999AB10691C16179F32A4A
SHA-512:	0B6B13B576E8CC05BD85B275631879875A5DBCB70FD78E6C93B259317ED6FD5D886F37D0CC6E099C3D3A8B66FEA2A4C2C631EB5548C1AB2CD7CB5FA4D41EA769
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2/225/runner.html
Preview:	<!DOCTYPE html>.<meta charset=utf-8><script>.(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function m(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,d){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=d.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var d=a[b];if(d&&d.Math==Math)return d}throw Error("Cannot find global object");}var r=aa(this),u="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),v={},w={};function x(a,b){var d=w[b];if(null==d)return a[b];d=a[d];return void 0!==d?d:a[b]}.function y(a,b,d){if(b)a:{var e=a.split(".");a=1===e.length;var g=e[0],k;!a&&g in v?k=v:k=r;for(g=0;g<e.length-1;g++){var c=e[g];if(!(c in k))break a;k=k[c]}e=e[

Chrome Cache Entry: 582

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	315
Entropy (8bit):	4.648861696465887
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4LIPGDQyIlOWLVJ1WnkX2Wtti0+DrTwtDZi:t4noU/vmRLIO8yIlVVuPWI0gTGQ
MD5:	9F40343399D2331A8E5DE01251A1F258
SHA1:	FF3A3A2AB18BAFA30B09E09A083C3699263A10FC
SHA-256:	CB4F6AB460370D669DE4694A4FB0090C3FADBCDB8C395C813A0680C90C29BFF3
SHA-512:	3F888927E6DE57D021AA124C5894CAFB54BEE195047D12AB55FDED7C6444AB14C3CE4F3DCAB9E9D06E785EA82FC7A96BE4EAAB6639BF721FF6F698D8760486ED
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/mic/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 3c-1.66 0-3 1.37-3 3.07v5.86c0 1.7 1.34 3.07 3 3.07s3-1.37 3-3.07V6.07C15 4.37 13.66 3 12 3zm6.5 9h-1c0 3.03-2.47 5.5-5.5 5.5S6.5 15.03 6.5 12h-1c0 3.24 2.39 5.93 5.5 6.41V21h2v-2.59c3.11-.48 5.5-3.17 5.5-6.41z"/></svg>

Chrome Cache Entry: 583

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	218
Entropy (8bit):	5.088157969445009
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4SDJhK+WkjWp2IGLb:t47N9U/vmRWhKdkjs2db
MD5:	46911EFE9CA3F93489D0C1927BBD5B98
SHA1:	A587985F1FD3DC99B495BCC620E2351F9BAA13E2
SHA-256:	B202492060B933CE3BCD93EED56F46AB442C61ACBBA6D4C47921417A06439096
SHA-512:	AA70F29C404DF62CCC4514ED432B4315E423FFEF7AB79DFD8985C58909CFA6263EE5F2A8D0A251A4BF0ECB491C9A39D6A6E2A99307A4A75F910530F60633023A
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M13 14h-2v-2h2v2zm0-9h-2v6h2V5zm6-2H5v16.59l3.29-3.29.3-.3H19V3m1-1v15H9l-5 5V2h16z"/></svg>

Chrome Cache Entry: 584

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 331
Category:	downloaded
Size (bytes):	247
Entropy (8bit):	7.133790877430696
Encrypted:	false
SSDEEP:	6:Xth1RjHFPdGCu507vhl02+Awdomd8W0tuGY6yUCwRZvoQxl:X/l3h82+AwdeW0ADU5vvDxl
MD5:	7009406566BD247F03B3308576D0FDF6
SHA1:	26CA96FF1F5478787580BBA160D814C041B01243
SHA-256:	A4F029E00DED2F675DE8FFA5EAAAE8A631CF2CB7DFCF5E3E83B1F0F8B47CA600
SHA-512:	C67F8C261EAAA50BC93B34DDEFCBE081658C7570A8319D2B420820B93EF4FBF8F57C0744C4C7A01F4F946BFD6551821FFB61D092737E03C08A827A87FF67A880
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/mic/v8/24px.svg
Preview:	..........MP.n.0...+..8N.L.a;.4.wJ.A.....s.e.e?...Ei.}...m.Z.b...EJI%R.c..`..q./.Q^..kz.?...@s..) ...b+2..1...V......{.......R5...ivi...I.....3..zf.3h@.\..9&...t...K xe....^'4.n@.=?.$......s.@.6.2....g.7.!Sv.*......JG{..k..u.J.s.K...

Chrome Cache Entry: 585

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 312
Category:	downloaded
Size (bytes):	247
Entropy (8bit):	7.08256707957889
Encrypted:	false
SSDEEP:	6:XthiwvX6zDxCW0chZsyJKPiO5Lmn7IcwgWhHBcXQQmjYqm9fGMbkQc:X/L6CWdZsvaOqIXBLwv9f/kQc
MD5:	A882085D8068EA818DC982021263F542
SHA1:	DA215626BF47B5B74B9D76F39DEC4BD4567D9844
SHA-256:	AB5E644D0148265A61304991909069765545117ACBE06577F915FB984CB6E886
SHA-512:	955B1082DAFAEFB479D4E106736100B910113A1B3526F6C53BFEB9D7E5666C864AF98D5801DE6E2A07B2E08AC39146E9CBD0439658F2B09254878FCBEF3B7368
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/thumb_up/v17/24px.svg
Preview:	..........MP.n.@....w../.......;I..J!J(....T.....g.rs.G....{+.]_."....z.....oH1,.i...?....{..r..@....4.....^.G+...t...k....[..".v'\|..DOq...2...3.7.jw...R..%..SN..;k._).....q:.......>....L.A.".+V.R.....q.u:..q.".2.T.....).....~.[u.8...

Chrome Cache Entry: 586

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1115)
Category:	downloaded
Size (bytes):	70514
Entropy (8bit):	5.578052620533423
Encrypted:	false
SSDEEP:	1536:p9lon9l+q9FcdkZIFYw9d3DMHtYSvFDAWbjeVPdIrx36:p9IPeC+VStKMK
MD5:	52E4713E955542282FADF4E443DF6775
SHA1:	B2BC0AC9096DCE988B713A2AC3F30C0018951276
SHA-256:	18EFDF274F4E1C8315698FBB3EABFF576F0647DBED021C643915A0843A86A124
SHA-512:	5CA6D13FD96CBC7F1856F0B92F142EA940E8C28041F40AB25DE16E9D7E0A98B6A71C759864F20590FF3FF60816976D3E9415FCD72F2D9246E107F21C9B93D439
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/annotations_module.js
Preview:	(function(g){var window=this;'use strict';var B3=function(a){a.publish("cardstatechange",a.Xk()&&a.Cp()?1:0)},C3=function(a,b){var c=g.bb(b),d=c?b:arguments;.for(c=c?0:1;c<d.length;c++){if(a==null)return;a=a[d[c]]}return a},Eqb=function(a){var b=g.Vs(a);.a=g.Ys(a);return new g.Js(b.x,b.y,a.width,a.height)},Fqb=function(a,b,c){var d=d===void 0?{}:d;.var e;return e=g.nB(a,b,function(){g.oB(e);c.apply(a,arguments)},d)},F3=function(a){a=g.fb(a);.delete D3[a];g.gd(D3)&&E3&&E3.stop()},Hqb=function(){E3\|\|(E3=new g.Cv(function(){Gqb()},20));.var a=E3;a.isActive()\|\|a.start()},Gqb=function(){var a=g.kb();.g.Tc(D3,function(b){Iqb(b,a)});.g.gd(D3)\|\|Hqb()},G3=function(a,b,c,d){g.Ov.call(this);.if(!Array.isArray(a)\|\|!Array.isArray(b))throw Error("Start and end parameters must be arrays");if(a.length!=b.length)throw Error("Start and end points must be the same length");this.B=a;this.N=b;this.duration=c;this.G=d;this.coords=[];this.progress=this.K=0;this.D=null},Iqb=function(a,b){b<a.startTime&&(a.end

Chrome Cache Entry: 587

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	1489
Entropy (8bit):	4.991654390540316
Encrypted:	false
SSDEEP:	24:hYejCRazuVFIIUzwARB5bLKeSEoZXEULUc8dofjw4FpRonsQ1g:3yVgMA5bOxDZXN8KfjNbHt
MD5:	F6D8530093308A4641792F2EF39D4112
SHA1:	7509833A00E35BDD160566267572595FE6AB286B
SHA-256:	267D27F93E73BA4A54D80FED48ACEF556D11638749B07490CEE09B5D445171BF
SHA-512:	DE9E62989775289DD83584811D795C1F29A4BC25D73AB7E506A00FAEA4A1BCA01C1C6C20224169DF265EB05816162857140B0D7B3D10393054746923945BE3A8
Malicious:	false
Reputation:	low
URL:	https://scamwebsite.com/notindex
Preview:	<!DOCTYPE html>.<html>. <head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>other stuff on scamwebsite.com</title>. The style.css file allows you to change the look of your web pages.. If you include the next line in all your web pages, they will all share the same look.. This makes it easier to make new pages for your site. -->. <link href="/style.css" rel="stylesheet" type="text/css" media="all">. <link rel="icon" type="image/x-icon" href="favicon.png">. <style>. body {. text-align: center;. background-image: url("Robuxb.png");. color: black;.}..block {. display: block;. width: 100%;. border: none;. background-color: #04AA6D;. color: white;. padding: 14px 28px;. font-size: 16px;. cursor: pointer;. text-align: center;.}...block:hover {. background-color: #ddd;. color: black;.}. </style>. </head>. <h1>Welcome</h1>.<p>This is where the other pages of my

Chrome Cache Entry: 588

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (516)
Category:	downloaded
Size (bytes):	9648
Entropy (8bit):	5.436869875474973
Encrypted:	false
SSDEEP:	192:HJlexXjC65PAile/mco5wsNLkkSkcZkXK7aAERN9dDXxdZ7G92tXL74dESC:BoJLfMkdXK7aAe9dDXxdZ7G0tXL74dE9
MD5:	D5A5CA414481BC2B5EE20A9832BB3891
SHA1:	BAACA397448053AC572C4A138A6E9891BF9DF28A
SHA-256:	4381BA43B6022797ED5EFBA1CE0430ED86B8F2B1B5760A3052CEEE5FD346CFDD
SHA-512:	52AFFDAA0BF81B761E7BA35E00E73180EE1566E29C93406AF8C013C1E7BB4CDAEC7D26E9EF48013A5E9D017E8EE2F9654AD9E7F2C760263B6AE203480EFB04CB
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/scheduler.vflset/scheduler.js
Preview:	(function(){'use strict';var g;function h(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function aa(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var l=aa(this);function m(a,b){if(b)a:{var c=l;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&k(c,a,{configurable:!0,writable:!0,value:b})}}.m("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,y){this.g=f;k(this,"description",{configurable:!0,writable:!0,value:y}

Chrome Cache Entry: 589

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4493), with no line terminators
Category:	downloaded
Size (bytes):	4493
Entropy (8bit):	4.4856643879376055
Encrypted:	false
SSDEEP:	48:YLGjj7OnR8vh614S8hTWsWsW2Y8uYY2FeXN4CqhF9DIXqzHHDzSz7zNWotzeWotO:4iaELTPHhFpXOXpan9RZQ
MD5:	C7AC086AAF139A1E36D3187561E7183A
SHA1:	D451DA2C6096DC316FC78B14CE1C11AFE03841A8
SHA-256:	86BE1C9A3C5CDC119F4993EDB521970476AAEB7E79AA6B484C2C29585286234A
SHA-512:	76E974068475E5D8B4B8D71DCF078DE42C8E5DA653058DFA720DE704445348522DCC947BABA4AF05E825B3E08E546EB806EE2C27577D45ECD0A70A5DC68866A8
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_container_light.json
Preview:	{"v":"5.9.1","fr":60,"ip":0,"op":125,"w":180,"h":96,"nm":"SubscribeAction_Container_LightTheme","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Sub_Container 5","td":1,"sr":1,"ks":{"o":{"a":0,"k":100,"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":1,"k":[{"i":{"x":0,"y":1},"o":{"x":0.05,"y":0},"t":60,"s":[90,48,0],"to":[3.074,0,0],"ti":[-3.074,0,0]},{"t":84,"s":[108.443,48,0]}],"ix":2,"l":2},"a":{"a":0,"k":[249.943,-54.365,0],"ix":1,"l":2},"s":{"a":0,"k":[168,168,100],"ix":6,"l":2}},"ao":0,"shapes":[{"ty":"gr","it":[{"ty":"rc","d":1,"s":{"a":1,"k":[{"i":{"x":[0,0],"y":[1,1]},"o":{"x":[0.05,0.05],"y":[0,0]},"t":60,"s":[156,64]},{"t":84,"s":[120,64]}],"ix":2},"p":{"a":0,"k":[0,0],"ix":3},"r":{"a":0,"k":186,"ix":4},"nm":"Rectangle Path 1","mn":"ADBE Vector Shape - Rect","hd":false},{"ty":"st","c":{"a":0,"k":[1,1,1,1],"ix":3},"o":{"a":0,"k":0,"ix":4},"w":{"a":0,"k":2,"ix":5},"lc":1,"lj":1,"ml":4,"bm":0,"nm":"Stroke 1","mn":"ADBE Vector Graphic - Stroke","hd":false},{"ty":"fl","c":{

Chrome Cache Entry: 590

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120844
Entropy (8bit):	5.47548953298156
Encrypted:	false
SSDEEP:	3072:Hi38wqZNPsPdK3/VQl4m4MIT3TJ4DRiB+uUedI04Syya:HHBkPdK3tQl4m4MIT3TJ4DRiB+uUedIx
MD5:	3B71FADD2D39A0A32512DAC0A0BA2D94
SHA1:	5C0BFC781318D0C65B8571C144ABC80E9CE38BBA
SHA-256:	0E8DA2D496A7C69278963A5D7738521799889E8EDB539AAC9487F4E5437AE257
SHA-512:	71BC30AC549EF8233CB8FC1BFEFD05A6D9D108CD387E5B20B8F65042EA03730084A4969CB6FBD51FFB947F946866375EC5C699B13FA6F5CDBF13B365B412AF21
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/71059424/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var b8=function(a){g.wq(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.kb()).toString(36));return a},c8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.Jga(a.C,b,c)},WDb=function(a){if(a instanceof g.Lt)return a;.if(typeof a.lm=="function")return a.lm(!1);if(g.bb(a)){var b=0,c=new g.Lt;c.next=function(){for(;;){if(b>=a.length)return g.n2;if(b in a)return g.Mt(a[b++]);b++}};.return c}throw Error("Not implemented");},XDb=function(a,b,c){if(g.bb(a))g.Zb(a,b,c);.else for(a=WDb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},YDb=function(a,b){var c=[];.XDb(b,function(d){try{var e=g.dw.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.Vla(e)&&c.push(d)},a);.return c},ZDb=function(a,b){YDb(a,b).forEach(function(c){g.dw.prototype.remove.call(this,c)},a)},$Db=function(a){if(a.ra){if(a.ra.locationOverri

Chrome Cache Entry: 591

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	552
Entropy (8bit):	4.4354471280851335
Encrypted:	false
SSDEEP:	12:t4tM65JA+KtIeDBmtMsZkvRP8x0iup0LELeyw5c+QU:t4tMMJALH8MsqJUtDoie+QU
MD5:	A57A74B00971D94B2CCA706685A9FBF6
SHA1:	8F24E8FAB4F92F58C23D451C3C8C6966C3A7B3E2
SHA-256:	2C13665427EA079DB0437534FD5C3F43E144D4707F129267C56F0352FF582EC0
SHA-512:	0A64ACB3697FBF5EC6A6D8DC46587E1A2A044F43D8DE0168F733B6276101F4A623D494E250D0C60A9E76C556ED288014530401A7C42F00F6CF5CBBE4AAD30748
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M17.7375 5.26556L28.6745 15.2624C29.1083 15.6589 29.1083 16.3422 28.6745 16.7387L17.7375 26.7356C17.0958 27.3222 16.0628 26.8669 16.0628 25.9975V21.6217C16.0628 21.6217 16.0627 21.6217 16.0626 21.6217C9.92564 21.6217 6.69114 23.9378 5.1615 25.5968C4.80726 25.981 3.97329 25.7343 4.00015 25.2125C4.22558 20.8321 5.86088 10.8892 16.0626 10.8892C16.0627 10.8892 16.0628 10.8892 16.0628 10.8892V6.00368C16.0628 5.13426 17.0958 4.67898 17.7375 5.26556Z"></path></svg>.

Chrome Cache Entry: 592

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1971
Entropy (8bit):	4.140265923170004
Encrypted:	false
SSDEEP:	48:4uxgftjRvYQn94Cz5pdVw8jV/cu745MJzis0rR+ToGq/SJKF:aR5pPvtc2fd0YT+
MD5:	8F64411A9AC7F40E18967F620AE1B546
SHA1:	4C3FCE32CE99FAACEA1BADF35BE7091BD2F09384
SHA-256:	B77B4C9A17FB16DDADEC307F40FE8B37F806D80E97E3F8854142CDA91662708B
SHA-512:	3DE4780539E5C9850987401436A8F5D16177393C1AF930B01B7E9987CE2CB875ABD2490116DE0B6597C2A1B0D0D11E7AC872B652E5D8EF3B84C23146FAA0FA16
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path fill="#FF0000" d="M21.39,13.19c0-0.08,0-0.15,0-0.22c-0.01-0.86-0.5-5-0.78-5.74c-0.32-0.85-0.76-1.5-1.31-1.91 c-0.9-0.67-1.66-0.82-2.6-0.84l-0.02,0c-0.4,0-3.01,0.32-5.2,0.62C9.28,5.4,6.53,5.8,5.88,6.04c-0.9,0.33-1.62,0.77-2.19,1.33 c-1.05,1.04-1.18,2.11-1.04,3.51c0.1,1.09,0.69,5.37,1.02,6.35c0.45,1.32,1.33,2.12,2.47,2.24c0.28,0.03,0.55,0.05,0.82,0.05 c1,0,1.8-0.21,2.72-0.46c1.45-0.39,3.25-0.87,6.97-0.87l0.09,0h0.02c0.91,0,3.14-0.2,4.16-2.07C21.44,15.12,21.41,13.91,21.39,13.19 z"></path>. <path fill="#000" d="M21.99,13.26c0-0.08,0-0.16-0.01-0.24c-0.01-0.92-0.54-5.32-0.83-6.11c-0.34-0.91-0.81-1.59-1.4-2.03 C18.81,4.17,17.99,4.02,17,4l-0.02,0c-0.43,0-3.21,0.34-5.54,0.66c-2.33,0.32-5.25,0.75-5.95,1C4.53,6.01,3.76,6.48,3.16,7.08 c-1.12,1.1-1.25,2.25-1.11,3.74c0.11,1.16,0.73,5.71,1.08,6.75c0.48,1.41,1.41,2.25,2.63,2.38C6.06,19.98,6.34,20,6.63,20 c1.07,0,1.91-0.23,2.89-0.49c1.54-0.41,3.46-0.93,7.41-0.93l0.1,0h0.02c0.97,0,3.34-0.21,4.42-2.2 C22.

Chrome Cache Entry: 593

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1921)
Category:	downloaded
Size (bytes):	435019
Entropy (8bit):	5.596462760674148
Encrypted:	false
SSDEEP:	12288:EN/jzaPEwhV5MTTjFZgCPXweMlE8lRJHEFamBKdfRsbYHR5T91oybJ4HHVFTy4Um:EN/jzaPEwhV5MTTjFZgQXweMlE8lRJkF
MD5:	F763668D70BC74E7D03C6950F2C7613A
SHA1:	3AC06BA6FDFF4221155D0DFDF602372CC5EC42EC
SHA-256:	CAB897A53746F081AE30361D123111BE637DE01AE1A0A25D9CA744619A3D6FBE
SHA-512:	42128F54E5CBCE7BCE65F370CBD6B393C420B5244CEBAB1364FC42738A17C5F83B38C7BBAA7B9A438EA78FEB34C43858A9DEF31D72EB8130ED0675149C1ACB9E
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202406250101/show_ads_impl_fy2021.js
Preview:	(function(sttc){'use strict';var r,aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da=typeof Symbol==="function"&&typeof Symbol("x")==="symbol",ha={},ja={};function ka(a,b,c){if(!c\|\|a!=null){c=ja[b];if(c==null)return a[b];c=a[c];return c!==void 0?c:a[b]}} .function ma(a,b,c){if(b)a:{var d=a.split(".");a=d.length===1;var e=d[0],f;!a&&e in ha?f=ha:f=ca;for(e=0;e<d.length-1;e++){var h=d[e];if(!(h in f))break a;f=f[h]}d=d[d.length-1];c=da&&c==="es6"?f[d]:null;b=b(c);b!=null&&(a?aa(ha,d,{configurable:!0,writable:!0,value:b}):b!==c&&(ja[d]===void 0&&(a=Math.random()*1E9>>>0,ja[d]=da?ca.Symbol(d):"$jscp$"+a+"

Chrome Cache Entry: 594

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	216
Entropy (8bit):	4.947192163768535
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4mqUEUKFI8iyNd1LkBEo8:t4noU/vmREaI83O8
MD5:	FAF3B1C051434D1FC1CFC3335A1015AF
SHA1:	A04C68D74A3CCD626617EFEC131D004F4594EF53
SHA-256:	C32E7D6B3FC895BB9D822E322CD3D39C49CAEFA647E4FABFC3DD8926FAEB89A4
SHA-512:	23BDBD1C69E5B225A417646E742D7F238D7E311A17C866CE563CC82791054CF065F7C0CCD0970E8CAF75A340F1D3D5164BE257578BBE0AC0E8C15A2BCF862022
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/clapperboard/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m22.01 4.91-.5-2.96L1.64 5.19 2 8v13h20V8H3.06l18.95-3.09zM18 9l1 3h-3l-1-3h3zm-5 0 1 3h-3l-1-3h3zM8 9l1 3H6L5 9h3z"/></svg>

Chrome Cache Entry: 595

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (8554), with no line terminators
Category:	downloaded
Size (bytes):	8554
Entropy (8bit):	4.953163641596351
Encrypted:	false
SSDEEP:	96:P2cQbeDakdZkyyMdRLhnxTu8bJzKUebwlobsi5HiJtKDUCbO/7px3uyFu7BtumrK:pOkdZkZMdRLHTtbJmxhMewC0
MD5:	64C8E3B11CFFFC8EBF2240E4F46AB492
SHA1:	71276680811731F983502E477A87E87CFE72D75F
SHA-256:	3ACC199C41EB3C884EE9884C15E6B78975499BE2255AA203DBA38EF24440181C
SHA-512:	497A48233BB198E05517E2CBA003C2C5BA25183E1654B5B8252B9823F0859497CCAB66A77E243238B27EA6EB826AE4FC72EFB2F32B2B378EDEE7F9DFB87F4756
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/cssbin/www-main-desktop-watch-page-skeleton.css
Preview:	#watch-page-skeleton{position:relative;z-index:1;margin:0 auto}#watch-page-skeleton,#watch-page-skeleton #info-container,#watch-page-skeleton #grid-container-skeleton,#watch-page-skeleton #side-info-container,#watch-page-skeleton #related{-webkit-box-sizing:border-box;box-sizing:border-box}.watch-skeleton .text-shell{height:20px;border-radius:8px}.watch-skeleton .skeleton-bg-color{background-color:hsl(0,0%,89%)}.watch-skeleton .skeleton-light-border-bottom{border-bottom:1px solid hsl(0,0%,93.3%)}html[dark] .watch-skeleton .skeleton-bg-color{background-color:hsl(0,0%,16%)}html[dark] .watch-skeleton .skeleton-light-border-bottom{border-bottom:1px solid hsla(0,100%,100%,.08)}#watch-page-skeleton #side-info-container.hidden,#watch-page-skeleton #grid-container-skeleton.hidden{display:none}#grid-container-skeleton.hidden:not(.layered){opacity:0}#grid-container-skeleton{background-color:#fff;width:calc(100vw - 474px);overflow:hidden}#grid-container-skeleton .text-shell{border-radius:2px}#gri

Chrome Cache Entry: 596

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4264), with no line terminators
Category:	downloaded
Size (bytes):	4264
Entropy (8bit):	5.023352101476255
Encrypted:	false
SSDEEP:	48:cMR3GqZFZlZuAwkQ29BR6WtFfH/2Ff8FfSiY3hUgxJu8OJ/:cxC3wkQ29XtEmgiUhUgxJu8OJ/
MD5:	9DEAE13C40798DFCA19BD14ED7039D60
SHA1:	4BA302A1435B094031E4F2E1BCE1B6198F0CF825
SHA-256:	CDAC5527DC3C1A9F38C6B00086B2A10B9E7EAA1E062314E548C1FA602D17BBBD
SHA-512:	95B093D926535FA9454E3776A3E219B61502CE67AA2E659175AE879133DD35A6EFA1BFDBE5B6D3E3DD8BA1F0663892B44FD6F21BE17FEFA9725A234DFF3C5D0C
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/cssbin/www-main-desktop-home-page-skeleton.css
Preview:	#home-page-skeleton{position:relative;z-index:0;pointer-events:none;min-width:0;width:100%;opacity:1;margin:56px 0 0;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-webkit-flex-direction:row;flex-direction:row}#home-page-skeleton.hidden:not(.layered){opacity:0}#guide-skeleton{display:none;background-color:#fff;width:240px;-webkit-flex-shrink:0;flex-shrink:0;-webkit-box-orient:vertical;-webkit-box-direction:normal;-webkit-flex-direction:column;flex-direction:column}#guide-skeleton.collapsed{width:72px}#guide-skeleton .guide-item-ghost{padding:10px;width:100%}#guide-skeleton .guide-ghost{padding:10px 30px;display:-webkit-box;display:-webkit-flex;display:flex}#guide-skeleton .guide-ghost-icon{height:40px;width:40px;min-width:40px;margin-right:15px;border-radius:50%;background-color:hsl(0,0%,100%)}#guide-skeleton .guide-ghost-text{height:36px;width:100%;border-radius:8px;background-color:hsl(0,0%,100%)}@media (min-width:792p

Chrome Cache Entry: 597

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	111
Entropy (8bit):	4.980379097367065
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5KVErcHgDXFUVLUJRVFiAdFUvuII9rP0WTC:tI9mc4slmgSVLU9FRF0ul5TC
MD5:	7A85DE03D089077BC1F895B1EA91907F
SHA1:	B86AF0404FED40A12228084B3B090DF8DBE50C0B
SHA-256:	179FAF7C791CF27682668324B60182039191B22B3AC85069C8BEBBA418DB9A1D
SHA-512:	8669E2B41453760B0C67C0701C4EFB4DCF6F544FDB84259383B5E9C64DA4E99DA37CDEC717ECC02E7BB919390E8187877EA125C367456C94B0245BD04E7FB4D4
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_outline/keyboard-arrow-up/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M7.41 15.41L12 10.83l4.59 4.58L18 14l-6-6-6 6z"></path></svg>.

Chrome Cache Entry: 598

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 599

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	3234
Entropy (8bit):	7.93877638039708
Encrypted:	false
SSDEEP:	96:nZs1NInCIDtSyU5dU/ldF05FgKRTzsdbLghL9:ZFnvDgyU5CNL2F5zMb49
MD5:	7E2BC18D59C9A814FBC390E07899A7AF
SHA1:	D5E91AC6E22CA6A926951976511949AA08B53061
SHA-256:	5D7D00FEE5C4AE878529427120A46B1B64107B76876880B176AB1CA1AFB5F6A2
SHA-512:	372ECC1E55DCED0FB65587C2BA10F0E817A9BEF140129962301AFEB7BE57D59453FEAB0AB7A5E51DA2E26F33B1541BD82D03400751F74FA8EC891AAEAB64FBE1
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....08.....^.>Q..J#.#..@p..c..k.m?....W....w....].....2...5...o.R..l.Q...m......G.7W.....R.O....^.....s....>.i..<y..o....~;.)......Yn...!@.v.B..e.y.Y,U"._2.....d~...3.....L.c'...+~M._./....-....x..oA.O.5.\|(....&Yn.Au../.on....V.:......M.....Ep8...Z.......>.ll....`...ADA..SH9...X...G.....F.]..v..4._......P.....,2.....[.\|.....d\rq".4.".\c@g.U....P.......W.....;#82.hv=XAG......i9.&....6.!..6e_.?.<.U:<n....O.^..U.0B......}..M$.6X......`.9.l.Vhwr......{k+.....{....n.....qm...?.s.).C5.NJ..z.}EJ.D.hf.-y>......c...z.~E+../T.\|b\|......B.L8z.~N...'vR..fLP.."t+ 8=s..m).V...n....K...\.j.\|.....>U.&.(....z...G...]u.8.....i.WD......62.z..v8.....Q.+...g.=Qu.]PZ..T.e.n..WZ.)..A.....M..Ik..@.<^.....X.:..F.n.ZXb......N.m..r2./.Q#/..{.......`E.W...L..kS...v...D.....`...e%m...IX]..!....!..h..Y..O..J.L..~$..+..w..9p..s>......U.c...6'..}.~.m:.`.c..h.......I\..e..-...;.1.s7&..R.W...Q_.>.......FB.Y1tT.`.O.AC.:.-..`.l.VyO.4..m...1.f..:...X

Chrome Cache Entry: 600

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 601

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio
Category:	downloaded
Size (bytes):	6953
Entropy (8bit):	4.97426625305529
Encrypted:	false
SSDEEP:	96:c3q9R1ETjY1k9kudJQphE2HcjHVSdDtIYIsFsiLQ96ziV:r9zEfWWkwJQphjHgkvIYJi0QF
MD5:	645F01C1901427F176085F2F984C6139
SHA1:	AA5E66A1B49B4840EF30B765712178DA237CD74A
SHA-256:	18D91A4732D34F80E3B785F0EE2F3FA5102582D5DA3BC44C76AFBCF87D5E4A50
SHA-512:	6913F0471E4510FC5B95A7317C2347B6B5835973BBFC5F51A28A9EC6AF2A29D67BEC4B4B1A434A19610F75A8547C584582FC690E5392B466D534EB5876BEAEF2
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/search/audio/no_input.mp3:2f7ae178d2b14e:0
Preview:	... ftypM4A ....M4A mp42isom........moov...lmvhd.............D..`.................................................@..................................%trak...\tkhd....................`.................................................@...............mdia... mdhd.............D..`.U......"hdlr........soun.................wminf....smhd...........$dinf....dref............url .......;stbl...gstsd...........Wmp4a.........................D.....3esds........"........@.............................stts...................(stsc...................................tstsz...............................................................{...q...h...d..._..._...W...^...b...U...K........stco...............\|....udta....meta......."hdlr........mdirappl.............oilst.....nam....data........cancel....cpil....data.............pgap....data.............tmpo....data.............(.too... data........iTunes 12.3.1.23....----....mean....com.apple.iTunes....name....iTunSMPB....data........ 00000000 00000840 0000

Chrome Cache Entry: 602

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, Apple iTunes ALAC/AAC-LC (.M4A) Audio
Category:	downloaded
Size (bytes):	6636
Entropy (8bit):	4.762377523885447
Encrypted:	false
SSDEEP:	96:Gm6G1ItjXwOJvVLATqcQLSIt8xmumUu1ixHRs:j60I1BJvNPcQH8xmumUuixHRs
MD5:	B3C466B2D513DB8CCD0F4D7C4648E05B
SHA1:	6BC28BFDBA5C7DF8B455A3B88D4C4D9523CCA860
SHA-256:	4B4A165585BBA9DA803F7BE0C0F06EA2B97BC1C61B4BF6921AD44E8C6369BF2F
SHA-512:	43B6E557980C00C5EBA6D5729E7865DF82707D9611477FB2E3EC271C7EB19ED6870723F68ADDBE254D7867DA5FE89ADD8F10BA2AFD75C2B101140FD3F6F8C891
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/search/audio/success.mp3:2f7ae178dc6677:0
Preview:	... ftypM4A ....M4A mp42isom........moov...lmvhd.............D..T.................................................@...................................trak...\tkhd....................T.................................................@...............mdia... mdhd.............D..T.U......"hdlr........soun.................[minf....smhd...........$dinf....dref............url ........stbl...gstsd...........Wmp4a.........................D.....3esds........"........@.............................stts....................stsc.......................hstsz...............................................n...f...`...k...j...f...h...a...i...e...i...b........stco................udta....meta......."hdlr........mdirappl.............oilst.....nam....data........got_it....cpil....data.............pgap....data.............tmpo....data.............(.too... data........iTunes 12.3.1.23....----....mean....com.apple.iTunes....name....iTunSMPB....data........ 00000000 00000840 000002AB 0000000000004915 000000

Chrome Cache Entry: 603

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	184
Entropy (8bit):	5.038914846080771
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5hL6Fb0zVjXRH8+hHiATcvXjXRHRcBHeQR+HEp3JdZFQENIfCyHn:tI9mc4slhLJ9hC/vm+QqaXFXaKyHSbE
MD5:	C71D43D3179551ACAFF38A6A24DEDA71
SHA1:	9BE42687E42147DBFEA9C1CA9486CCFE6DAB9F96
SHA-256:	4402C4D35A422097E5AC692FF4EF5182F2E3B72F5A0F710C230A18D6449C688A
SHA-512:	11BBD2FAC3FF1C144F3F18C60975DD679DEC6C23081621DB874DD1057906A5085B73E998332E1B2C2E511AE55D481980DC3E011588487D2779297B6119BCC79B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><g><path d="M4 21V10.08l8-6.96 8 6.96V21h-6v-6h-4v6H4z"/></g></svg>

Chrome Cache Entry: 604

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	312
Entropy (8bit):	4.958737908772462
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4AFMGaBoxnOLgQsS0ISSa/KW8xGeDogniLELo:t47N9U/vmRXGaBoVOLgbvSoN8xGzEo
MD5:	22698ABCC833E1218C3EEED7C534A400
SHA1:	247102BA81E345DFD0C7374C4AB9B894C8A9704B
SHA-256:	A3A94E1842AA40BD34D65EFF8EA6F8EAABE15CC9947C26FE1CFFB3274F83121F
SHA-512:	E0C67655E2E2A955D52D0B1415A3931C5D2111AD12E66BCBDB89C4E4AF3E27701CCB5407F62896C2340BACF7D20E86C2ABCB03332C76C48AE62B83BCB1B612C4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M3,11h3v10H3V11z M18.77,11h-4.23l1.52-4.94C16.38,5.03,15.54,4,14.38,4c-0.58,0-1.14,0.24-1.52,0.65L7,11v10h10.43 c1.06,0,1.98-0.67,2.19-1.61l1.34-6C21.23,12.15,20.18,11,18.77,11z"/></svg>

Chrome Cache Entry: 605

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	251
Entropy (8bit):	4.807326238374636
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4hLBIl/qVs+RLjUjUX:t47N9U/vmRYiVswfUjUX
MD5:	05A720716D71F9F56D6C0E5C4B47680A
SHA1:	D24611C11E8CC3B158EB518F2298D1E35CE03E48
SHA-256:	B90706D55C1E8B616BF8D677C195D09AF8AA75BC669BA3A36A25480CA86F6926
SHA-512:	D0DA0CCC993DB255F96AC9CCDDA35DAADA2928F17A1262F5954B6A3C54B57080544E5A9C3808275749ED15A118AAA9B44B50B0AD8A1F2BE668F9D7614A0456B1
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="m12.71 12 8.15 8.15-.71.71L12 12.71l-8.15 8.15-.71-.71L11.29 12 3.15 3.85l.71-.71L12 11.29l8.15-8.15.71.71L12.71 12z"/></svg>

Chrome Cache Entry: 606

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	474
Entropy (8bit):	4.7449073607550805
Encrypted:	false
SSDEEP:	12:t47N9U/vmRGLHuojuMUMU2lX9KuMUMU2lZzrvCJig/I3n8:t4jU/vjtuM5JlX9KuM5JlZ/qwX38
MD5:	CF92CBEE09BC23E2B2EAE3EF6A9DFF40
SHA1:	E9EEB3AE2294064FD7B0A5026B5AE02A6564C9AD
SHA-256:	60FC606F480F263CDC9CF180089D42E4A070395B47D0331E7C869A9F6FD2208A
SHA-512:	EF4944E4E9FE78DD00D379EE192FEF915BC3AA45E6029AC21CA858C5C8D65EBDFA70F78CF87F00A623D311CC3ABF453CFD5DFFEC442F1A87EAE23E548DF92295
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 12H8v2H6v-2H4v-2h2V8h2v2h2v2zm7 .5c0-.83-.67-1.5-1.5-1.5s-1.5.67-1.5 1.5.67 1.5 1.5 1.5 1.5-.67 1.5-1.5zm3-3c0-.83-.67-1.5-1.5-1.5S17 8.67 17 9.5s.67 1.5 1.5 1.5 1.5-.67 1.5-1.5zm-3.03-4.35-4.5 2.53-.49.27-.49-.27-4.5-2.53L3 7.39v6.43l8.98 5.04 8.98-5.04V7.39l-3.99-2.24m0-1.15 4.99 2.8v7.6L11.98 20 2 14.4V6.8L6.99 4l4.99 2.8L16.97 4z"/></svg>

Chrome Cache Entry: 607

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 608

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	363
Entropy (8bit):	4.49126552549198
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4CCUljullQ5dUiC7KITuMUxldUiiiC1ofuMUxldUiiiC17:t47N9U/vmRXKjullQ5d+puMUxldbfuMh
MD5:	82A60FADA6F7957329BEEE85E0453CAF
SHA1:	6882C6B5F04787D57F3B59C1D1559623BC40E146
SHA-256:	98901DDFF67E245769A3E1F47ABA0210653F817436CE288646FC0BB88E859CFA
SHA-512:	646BE4874078FB5B9072DF552DA8CF0A1E5533D1B65392E06008676D8B06CA3E5EAFAC14C89BB580E0A7EAAEE94B3EC0825174328C3B30FC92D66730FBAD373F
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 16.5c.83 0 1.5.67 1.5 1.5s-.67 1.5-1.5 1.5-1.5-.67-1.5-1.5.67-1.5 1.5-1.5zM10.5 12c0 .83.67 1.5 1.5 1.5s1.5-.67 1.5-1.5-.67-1.5-1.5-1.5-1.5.67-1.5 1.5zm0-6c0 .83.67 1.5 1.5 1.5s1.5-.67 1.5-1.5-.67-1.5-1.5-1.5-1.5.67-1.5 1.5z"/></svg>

Chrome Cache Entry: 609

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	513
Entropy (8bit):	4.619088850166001
Encrypted:	false
SSDEEP:	12:t4noU/vmRcflkfrh2iA/QFcVTb7BDr/KWnoQ6WCf6fUWmbm4eK37:t4oU/vvl04icj2MoD/OPm2K37
MD5:	79C1545ECBFC2D900DB084A7428DE563
SHA1:	54972C73865787230A5C293228AA74D16FFBAF20
SHA-256:	2486C8B2D43E68A240C0BFD38B4CD6D073B9FEDB2F5A592C01C26157B8BC4C40
SHA-512:	633DB3818A8D96D21CA374FA056FBF3E4010B481FD370DD69577D3FD29708C64F9202B3517BC35F68803ED6F087744AF22CDBD0F22A6A33F5A8B9F84347903BA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/thumb_down/v19/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M17,4h-1H6.57C5.5,4,4.59,4.67,4.38,5.61l-1.34,6C2.77,12.85,3.82,14,5.23,14h4.23l-1.52,4.94C7.62,19.97,8.46,21,9.62,21 c0.58,0,1.14-0.24,1.52-0.65L17,14h4V4H17z M10.4,19.67C10.21,19.88,9.92,20,9.62,20c-0.26,0-0.5-0.11-0.63-0.3 c-0.07-0.1-0.15-0.26-0.09-0.47l1.52-4.94l0.4-1.29H9.46H5.23c-0.41,0-0.8-0.17-1.03-0.46c-0.12-0.15-0.25-0.4-0.18-0.72l1.34-6 C5.46,5.35,5.97,5,6.57,5H16v8.61L10.4,19.67z M20,13h-3V5h3V13z"/></svg>

Chrome Cache Entry: 610

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	157
Entropy (8bit):	4.866482514263467
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHLLWQlXI1/ymUwHMQMQtnQSb8:tI9mc4slhohC/vmI4NXa//1RtnQo8
MD5:	C62423FDC7866B06AF4889BE619900A2
SHA1:	93BEEE6DEA1F9CB906B794F182949F357AAC06D0
SHA-256:	C47564ECC26A15C0A2381733FBF821EDFDCC17A4A8B946380B6308C6381517DF
SHA-512:	4E7CFB526D804C30F4DAED59EA03709BF9D311BF4F30FC090F4032B9C8D12E73789798BD5A5A5AFBE889B009A1BB12E7939577055FC983520E7F93334DABD5EA
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/chevron_down/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m18 9.28-6.35 6.35-6.37-6.35.72-.71 5.64 5.65 5.65-5.65z"/></svg>

Chrome Cache Entry: 611

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	324
Entropy (8bit):	4.519025420255455
Encrypted:	false
SSDEEP:	6:tI9mc4sl5RINAvxm6lzjQewRNGBvLl1ZX1i0dTnUMSdR+trpYmQkDEJM:t4vqNAJXpQewC5pDpU6VYFG7
MD5:	DDABFA57FD16BDBA85E2FD30B2B0FEFF
SHA1:	9FC8CD1D34223C54E0C86922F2DE68AACBE6E57A
SHA-256:	B60F66156BC26031D7F02CC7CAAA6D7277D56F1821ED55280F67446AA3643640
SHA-512:	1AD6D890CADC461D74821065143FBE1AFC882C106ED646F41CB2BC12D00D6FCC6E9C68C7FAA7F260F2FABAFF68689EA0DF48CEA54FF40AF505B4A632D67F1B5B
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_outline/refresh/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path d="M13 9v2h7V4h-2v2.74C16.53 5.07 14.4 4 12 4c-2.21 0-4.21.9-5.66 2.34S4 9.79 4 12c0 4.42 3.58 8 8 8 2.21 0 4.21-.9 5.66-2.34l-1.42-1.42C15.15 17.33 13.65 18 12 18c-3.31 0-6-2.69-6-6 0-1.65.67-3.15 1.76-4.24C8.85 6.67 10.35 6 12 6c2.21 0 4.15 1.21 5.19 3H13z"></path>.</svg>.

Chrome Cache Entry: 612

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	346
Entropy (8bit):	4.782195104649308
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4eTgAV99WTc6XzQuJ3/vh7QrB9TzUuM8XGk+LlvDME:t4noU/vmRSgQ9Ec6jhJ3XtuM8sL9DME
MD5:	A81BADB0BAAD5A9F30C4F71D94F2C09A
SHA1:	74DEBED4DAC92DB3B79CCFA1BDD2C93852D2A2B4
SHA-256:	C46134C020CDF3060355F81622A054C9F23A4F04AA887876851796FA6243C80D
SHA-512:	1F3975165382775F332EE96ECD6BBB06952D583E72E75DD3984860C932D0D88FB04B182842C3F3318455A322F6E01B7C50A0C0C46E861D45542A8F25CC03F9B8
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/bag/v4/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M16.9 6c-.46-2.28-2.48-4-4.9-4S7.56 3.72 7.1 6H4v14c0 1.1.9 2 2 2h12c1.1 0 2-.9 2-2V6h-3.1zM12 3c1.86 0 3.43 1.27 3.87 3H8.13c.44-1.73 2.01-3 3.87-3zm0 11c-3.31 0-6-2.69-6-6h2c0 2.21 1.79 4 4 4s4-1.79 4-4h2c0 3.31-2.69 6-6 6z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 613

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	214
Entropy (8bit):	5.096829767629689
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4MJqgzQFqYgXT085Y:t47N9U/vmRYOF4Tm
MD5:	BDC934DCE4645CFA785C33E037A00EFF
SHA1:	87281A6721F6ACAE1DA886D68A9BA04F009831DC
SHA-256:	09C41C2AC9873188C095279472467BE0EB4166C5E22AE52BA04E937AC94FC203
SHA-512:	74331EE305E92CC3BF172624469D9789BE82A2D48EB1791210931C125F40298EC96F3875D8CFD25E8F323071D041930CDD1BADFD0AF9B032D290B56E3E838048
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 18v-6l5 3-5 3zm7-15H7v1h10V3zm3 3H4v1h16V6zm2 3H2v12h20V9zM3 10h18v10H3V10z"/></svg>

Chrome Cache Entry: 614

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	163
Entropy (8bit):	4.900439585813596
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHMwYSf104XTIUGnYRt8n+R9ZK/:tI9mc4slhohC/vmI4NX104XEUv8
MD5:	5D73D2DFB1BEA872F0CEB93909FE6887
SHA1:	DEF95E494B458D0E5B4BC0B082AB6C791216E932
SHA-256:	EB908A46A75151ADC11154E759DB9BE111AFC67CDA5317AC26B43E3654FD4BD7
SHA-512:	2F44B65FE52EE707D1696DE15EC18DB38521D5A848C3F9BD1352BF7BC2A8CA07CF28A98ED891D663F062CA952C72F0082ADB556053D827811E638D649E8FCB2D
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/list_play_arrow/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M22 7H2v1h20V7zm-9 5H2v-1h11v1zm0 4H2v-1h11v1zm2 3v-8l7 4-7 4z"/></svg>

Chrome Cache Entry: 615

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1321)
Category:	downloaded
Size (bytes):	17314
Entropy (8bit):	5.342134706855769
Encrypted:	false
SSDEEP:	384:cCDFzlR6exHAiyyrYuy9ckdnfczIk7LcuNP/p:DlsexHAlii9NmIeLcE
MD5:	2CC87E9764AEBCBBF36FF2061E6A2793
SHA1:	B4F2FFDF4C695AA79F0E63651C18A88729C2407B
SHA-256:	61C32059A5E94075A7ECFF678B33907966FC9CFA384DAA01AA057F872DA14DBB
SHA-512:	4ED31BF4F54EB0666539D6426C851503E15079601A2B7EC7410EBF0F3D1EEC6A09F9D79F5CF40106249A710037A36DE58105A72D8A909E0CFCE872C736CB5E48
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/sodar/sodar2.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var n=ba(this),p="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),r={},u={};function w(a,b){var c=u[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}.function x(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var g=d[0],h;!a&&g in r?h=r:h=n;for(g=0;g<d.length-1;g++){var e=d[g];if(!(e in h))break a;h=h[e]}d=d[d.length-1];c=p&&"es6"===c?h[d]:null;b=b(c);

Chrome Cache Entry: 616

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 616
Category:	downloaded
Size (bytes):	384
Entropy (8bit):	7.375407123252671
Encrypted:	false
SSDEEP:	6:XtqXU3BhrKNYRKxedKHd4ee0pSoErjSJfiw71tmj03/NluT8sPPcnHF3D8o0:XSU+N7H9eeNE0fiwht5/GJPIHFz8o0
MD5:	5A1D3568F420C97F50610E5AB6921E44
SHA1:	54BAFEC97BE024C090AAC3959B9CB0B30F0A92ED
SHA-256:	F8CE8F62C2F347675924125650EA9B82D202495A8B2A880405C456B94FA31EC4
SHA-512:	914A55DAE78903D889FEA68A0516766CB39D588C10B98C10627FF4A592295AD2103BA3B1D72CB5F59575C6C0B6426FF693F500B4D6F3A931EB1D5C23969C6E2C
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/question_circle/v5/24px.svg
Preview:	..........L..n.@.._...%...\|.).....,HF.;.T+....z(..o.3../.c....t...?.v.6l....U.\.<....}.........n.....9r..444..qZ...q........]/.O/..u.K.I.OTQS.H.#e..../........Ge.$S....."...3...`...l..Y..Q..F.#.....cDa.g..H..Z...Q.&U..c.D....RI.....Z......cw..E.=..({.h7.Zh.B.jf..d...;. E.7Q..#Fr$..IX...c..W.....{....W.p.+.......lP..GD.i..B.n.........&%QJ..I.M{z..t......[_..h...

Chrome Cache Entry: 617

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1115
Entropy (8bit):	4.113377443767523
Encrypted:	false
SSDEEP:	24:t4jU/vD2M2hhkiDI7XGx8u3eSRNZM2kCC+8Vjb:t/TuhdDj8uOQNrkj+8Vjb
MD5:	839C109F573BC61392F5F014B193988A
SHA1:	F5D1DFEEA48DFC3410928EB155E6AAB4A4924A39
SHA-256:	C54252CCA0B1AA43C5062281D39AA6E845679DDA9B056A5447036CBA8B3725FE
SHA-512:	DC99CC192AC95D3E62C7585393304278D4C2D52A109051D8995200C941C1DE4A68A32F09B828F6853EE745BF1CED7E3AB680F9B30E8C7B1FE8F52DD55B79C08B
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/gear/v6/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 9.5c1.38 0 2.5 1.12 2.5 2.5s-1.12 2.5-2.5 2.5-2.5-1.12-2.5-2.5 1.12-2.5 2.5-2.5m0-1c-1.93 0-3.5 1.57-3.5 3.5s1.57 3.5 3.5 3.5 3.5-1.57 3.5-3.5-1.57-3.5-3.5-3.5zM13.22 3l.55 2.2.13.51.5.18c.61.23 1.19.56 1.72.98l.4.32.5-.14 2.17-.62 1.22 2.11-1.63 1.59-.37.36.08.51c.05.32.08.64.08.98s-.03.66-.08.98l-.08.51.37.36 1.63 1.59-1.22 2.11-2.17-.62-.5-.14-.4.32c-.53.43-1.11.76-1.72.98l-.5.18-.13.51-.55 2.24h-2.44l-.55-2.2-.13-.51-.5-.18c-.6-.23-1.18-.56-1.72-.99l-.4-.32-.5.14-2.17.62-1.21-2.12 1.63-1.59.37-.36-.08-.51c-.05-.32-.08-.65-.08-.98s.03-.66.08-.98l.08-.51-.37-.36L3.6 8.56l1.22-2.11 2.17.62.5.14.4-.32c.53-.44 1.11-.77 1.72-.99l.5-.18.13-.51.54-2.21h2.44M14 2h-4l-.74 2.96c-.73.27-1.4.66-2 1.14l-2.92-.83-2 3.46 2.19 2.13c-.06.37-.09.75-.09 1.14s.03.77.09 1.14l-2.19 2.13 2 3.46 2.92-.83c.6.48 1.27.87 2 1.14L10 22h4l.74-2.96c.73-.27 1.4-.66 2-1.14l2.92.83 2-3.46

Chrome Cache Entry: 618

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	274
Entropy (8bit):	4.691767704613487
Encrypted:	false
SSDEEP:	6:tI9mc4slhohC/vmI4tSSJhpbtnRm31IE2l0kjMswple9SY:t4noU/vmRtXVtnRm31IEURwpY
MD5:	940A3FA042BCA1DB7543B418E574CCA1
SHA1:	AF122097171DD4140E913C6DA8D3501819368165
SHA-256:	3EB4200488142D98914FD98981C1C3E6F7C600D3A8E249826B5D72721DD6EE22
SHA-512:	33D87129671F2FE4AB2055C0CEF5DA1067D900EB73FAF18A430F5124DD7D2B84DEA0308FB60ADFB060EFDDB09E482894758B4180440D6522A3DA0B0AB429F5EB
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/clock/v7/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M14.97 16.95 10 13.87V7h2v5.76l4.03 2.49-1.06 1.7zM12 3c-4.96 0-9 4.04-9 9s4.04 9 9 9 9-4.04 9-9-4.04-9-9-9m0-1c5.52 0 10 4.48 10 10s-4.48 10-10 10S2 17.52 2 12 6.48 2 12 2z"/></svg>

Chrome Cache Entry: 619

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	157
Entropy (8bit):	4.866482514263467
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHoNcHLLWQlXI1/ymUwHMQMQtnQSb8:tI9mc4slhohC/vmI4NXa//1RtnQo8
MD5:	C62423FDC7866B06AF4889BE619900A2
SHA1:	93BEEE6DEA1F9CB906B794F182949F357AAC06D0
SHA-256:	C47564ECC26A15C0A2381733FBF821EDFDCC17A4A8B946380B6308C6381517DF
SHA-512:	4E7CFB526D804C30F4DAED59EA03709BF9D311BF4F30FC090F4032B9C8D12E73789798BD5A5A5AFBE889B009A1BB12E7939577055FC983520E7F93334DABD5EA
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="m18 9.28-6.35 6.35-6.37-6.35.72-.71 5.64 5.65 5.65-5.65z"/></svg>

Chrome Cache Entry: 620

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 480x360, components 3
Category:	dropped
Size (bytes):	17560
Entropy (8bit):	7.954865714632017
Encrypted:	false
SSDEEP:	384:xrCaYqIalh+O+geazhBHDnRMth0L11fnVwvqzLfhz:xr1j1reazhFRMthAPfVwiXF
MD5:	074E969BB4B56ACD26091B19784DF7E2
SHA1:	0B8F66FD70F29859EA25EE481FF33F93BB84D512
SHA-256:	405893B0BF0B3E87141E7048E1CB6665CA5593FEA1B159CA0CE90E77D049C51A
SHA-512:	0E7286126446B64EFB16D8891AE2A649E4CCCE337510EBA812294E78B78D3D2680F4504BFCAC7A8347E809C2E3FD905215ED711F60894B25A5BEEFF252372C8F
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................h...."........................................T.........................!.1A..Qaq.."2RS.....#Bs.......3b......Cr...$45Tt..%...cd.................................1........................!1..AQaq."#23R....B................?....B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ...6../i..ag.4.\^......,{.d+W.Y..........q{O.h...8..U...........~.....?......SB........Y..Q...?.....C.QB..Oj<.}......G.....v.Z....r..p<.Typ.O.k?.....i...._.....r...uQ...?...j<.}...r.~P..LB.~-.\|.=.=............r..wo&u>\...g.cS...I..T.E...^G&.>\...g._U. ...H.\|..S.QP.G...9..'.G..A.I..T...>........{R{.~+..?.'.K...9.}."..rYU.)..=....S.R{.r.;....!_..5^r...,.**..?.'.G/S.s4.dP.

Chrome Cache Entry: 621

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32662), with no line terminators
Category:	dropped
Size (bytes):	32662
Entropy (8bit):	4.523198556485493
Encrypted:	false
SSDEEP:	768:0HM1PHHZ+H4HUHJHhHaHMHTxnHZHTHMHYH3HQH0OHP/EHGh8HdKH+HuH7H7HkHkt:0HM1PHHZ+H4HUHJHhHaHMHTxnHZHTHMn
MD5:	836A4F0E0FC92D0F66A439D46B036024
SHA1:	89C63CE998C6A5F56516477FA483CCB5EEE2E745
SHA-256:	F362A7B4C315E5318BF41BD4DAD59FA623C764ABF562F30E1BEA795BB053A8D2
SHA-512:	2AD3CEB7957F3A3CABAD6F81EF0A45481E7DB7B8F752F6E43A47879D8AB5F242AB78E6E1680D5C17355609BB0DBEBA8BF86E076CEECD12FDC1E12837F5E57DF0
Malicious:	false
Reputation:	low
Preview:	{"v":"5.8.1","fr":60,"ip":0,"op":125,"w":180,"h":96,"nm":"SubscribeAction_Sparkle_LightTheme","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Star06","sr":1,"ks":{"o":{"a":1,"k":[{"i":{"x":[0.6],"y":[1]},"o":{"x":[0.2],"y":[0]},"t":49,"s":[100],"e":[0]},{"t":55}],"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":1,"k":[{"i":{"x":0,"y":1},"o":{"x":0.05,"y":0},"t":25,"s":[23.264,42.881,0],"e":[10.389,41.006,0],"to":[-2.146,-0.312,0],"ti":[2.146,0.312,0]},{"t":49}],"ix":2,"l":2},"a":{"a":0,"k":[177.889,-107.244,0],"ix":1,"l":2},"s":{"a":1,"k":[{"i":{"x":[0,0,0.833],"y":[1,1,1]},"o":{"x":[0.05,0.05,0.167],"y":[0,0,0]},"t":25,"s":[0,0,100],"e":[100,100,100]},{"t":55}],"ix":6,"l":2}},"ao":0,"shapes":[{"ty":"gr","it":[{"ty":"sr","sy":1,"d":1,"pt":{"a":0,"k":4,"ix":3},"p":{"a":0,"k":[0,0],"ix":4},"r":{"a":0,"k":0,"ix":5},"ir":{"a":0,"k":3,"ix":6},"is":{"a":0,"k":0,"ix":8},"or":{"a":0,"k":8,"ix":7},"os":{"a":0,"k":0,"ix":9},"ix":1,"nm":"Polystar Path 1","mn":"ADBE Vector Shape - Star","hd

Chrome Cache Entry: 622

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	260
Entropy (8bit):	5.004023285375928
Encrypted:	false
SSDEEP:	6:tI9mc4sliHFhC/vmIj5tpS/riWcm94BkOoEg6YaJAME:t4IlU/vmwezL6yME
MD5:	4C03F409D2394DDE00F50B3EBA37F175
SHA1:	602F037E50C8E4FDEDFC2DF1D486C6F362332FC6
SHA-256:	F232790335F76F7D938BEE8C4A8B12EBFFFFB555B005B7A8B7FC1465B4BB9380
SHA-512:	E0D389BE485482A9CB9B6F90135D5E5208177C826C92E1933452629EBEBAE9D20B5729AA1BDD9600B3CCD81B2DF9D5082F0349427499F99E3AC1BE5CC3A7E1C7
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/search/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" fill="currentColor" height="24" viewBox="0 0 24 24" width="24"><path clip-rule="evenodd" d="M16.296 16.996a8 8 0 11.707-.708l3.909 3.91-.707.707-3.909-3.909ZM18 11a7 7 0 11-14 0 7 7 0 0114 0Z" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 623

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 93 x 18
Category:	dropped
Size (bytes):	749
Entropy (8bit):	7.446384969086537
Encrypted:	false
SSDEEP:	12:zWza0v6xxb0HT8i8kTyD60d9eOrFYt9u+c1AZTjbIlYsrYf2NjJYKh6mxcR9:0adNE5JTnO9e4gc1cUhYWJYKh6icR9
MD5:	63418F65B5AB53D124AE59F1F52E3891
SHA1:	CCC7230609F2336F0255043F134F259C2DE5696C
SHA-256:	DABCD663A797937E1DCB9E479AEDCCEC0C36D6072693B95A6269897CF030915F
SHA-512:	CFEE1C36F0226E8022F6A9C0326BAFBFB2C32353C3C0AEA131F90A2FAFEC7C3539B928F773665E3EA5FF050B8A440A6AB58F0CFC641E1865DC1B6C94BB2E631F
Malicious:	false
Reputation:	low
Preview:	GIF89a].........mk......T##....KJ......=.....:..,..(...........k..N..Dus#......ba...+.........~\|.?=...^..0...!.......,....].......'..H..Q.l.p,.D4 ...s..3.d0......&AT...@.\|)....q8hV...Ru]..M..!L....>y......]...p.T%..]..&.bro}e.W..j..............9......._.......+...Rr....c....e....................h....^.X......;%...."........e....s.h..qp.`...........+ .K...C....@......Dl....@.a..l..q!.,..P.......4.0....u+(.....8\...F.-.5. `.D.a....'...v.xP...G.,jr...?..T(5..n.....A....p........ ..._.&.`.i\.P.2.[..j..T(...aG.6..[v.C..Z.*7!.....<.8B+....C.@..k:...i...j..N.2..W.ez-.!....hR....r...z.giA..g....../?..[.w3.Q..~U`...,@.j..&...<P....A@..j.AA.(..9..h..@....gA..<.....DX...@...@..%.(.$.pp^ C. .....d.A:(dQP...8EFi.3p`..IbYT..;

Chrome Cache Entry: 624

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (715)
Category:	downloaded
Size (bytes):	50864
Entropy (8bit):	5.373395144483294
Encrypted:	false
SSDEEP:	1536:Ifd5uRCNiAL1Asnivz3wBE5F4RDP8eOC4V1F:IfdURCkKniv8Be4x8VF
MD5:	9E1F5B2285BCE3A471297B1505058B57
SHA1:	C0CBE8B0A96F32C25ADBAE33932188D495A4135C
SHA-256:	708021B0A03278843AFDF5190777B25BEAD3458548E7C221AC1FF6F6E6E17BAD
SHA-512:	A10B9F0FA257580A1E44B5F756F99A149193D6B71F98590EBA7BFF2A6A3853C32A0D8D44A8967154EEFAB884D7964D148D38991393CC4785249F38253242099B
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/desktop/a7b1ec23/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js
Preview:	/*.. Copyright 2014 Google Inc. All rights reserved... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,. WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.. See the License for the specific language governing permissions and. limitations under the License... Copyright 2016 Google Inc. All rights reserved... Licensed under the Apache License, Version 2.0 (the "License");. you may not use this file except in compliance with the License.. You may obtain a copy of the License at.. http://www.apache.org/licenses/LICENSE-2.0.. Unless required by applicable law or agreed to in writing, software. distributed under the License is distributed on an "AS IS" BASIS,.

Chrome Cache Entry: 625

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	416
Entropy (8bit):	4.4998346788589245
Encrypted:	false
SSDEEP:	6:tI9mc4slmOVIhSXX5xkgm2OCOuLQcTVgXF78Q46yAajyBxQkm3nKYKM1xE5LQI06:t4IjEXX1OC/QcuXFYFjyrQw15L2n6
MD5:	DEDDD7D24561E4F2792208764242D5FA
SHA1:	DA1A06B033CE9F27DD891B49E71FF3269A9F148C
SHA-256:	73C8A18F388DF73D60C4AF2CF0700F889AD24D1557F79C63E37E9C9EAFC9C63F
SHA-512:	8A738BB011625C122919C4D8216E285A51CDBA0EAEC6EBF1D16CE367312CCB13C8FD61BE1FACE96FE9746DF2F106BB788182F31C2222F7840A7EEC5A9731A94C
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path d="M16.5 12c0-1.77-1.02-3.29-2.5-4.03v2.21l2.45 2.45c.03-.2.05-.41.05-.63zm2.5 0c0 .94-.2 1.82-.54 2.64l1.51 1.51C20.63 14.91 21 13.5 21 12c0-4.28-2.99-7.86-7-8.77v2.06c2.89.86 5 3.54 5 6.71zM4.27 3L3 4.27 7.73 9H3v6h4l5 5v-6.73l4.25 4.25c-.67.52-1.42.93-2.25 1.18v2.06c1.38-.31 2.63-.95 3.69-1.81L19.73 21 21 19.73l-9-9L4.27 3zM12 4L9.91 6.09 12 8.18V4z"></path></svg>.

Chrome Cache Entry: 626

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1115
Entropy (8bit):	4.113377443767523
Encrypted:	false
SSDEEP:	24:t4jU/vD2M2hhkiDI7XGx8u3eSRNZM2kCC+8Vjb:t/TuhdDj8uOQNrkj+8Vjb
MD5:	839C109F573BC61392F5F014B193988A
SHA1:	F5D1DFEEA48DFC3410928EB155E6AAB4A4924A39
SHA-256:	C54252CCA0B1AA43C5062281D39AA6E845679DDA9B056A5447036CBA8B3725FE
SHA-512:	DC99CC192AC95D3E62C7585393304278D4C2D52A109051D8995200C941C1DE4A68A32F09B828F6853EE745BF1CED7E3AB680F9B30E8C7B1FE8F52DD55B79C08B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M12 9.5c1.38 0 2.5 1.12 2.5 2.5s-1.12 2.5-2.5 2.5-2.5-1.12-2.5-2.5 1.12-2.5 2.5-2.5m0-1c-1.93 0-3.5 1.57-3.5 3.5s1.57 3.5 3.5 3.5 3.5-1.57 3.5-3.5-1.57-3.5-3.5-3.5zM13.22 3l.55 2.2.13.51.5.18c.61.23 1.19.56 1.72.98l.4.32.5-.14 2.17-.62 1.22 2.11-1.63 1.59-.37.36.08.51c.05.32.08.64.08.98s-.03.66-.08.98l-.08.51.37.36 1.63 1.59-1.22 2.11-2.17-.62-.5-.14-.4.32c-.53.43-1.11.76-1.72.98l-.5.18-.13.51-.55 2.24h-2.44l-.55-2.2-.13-.51-.5-.18c-.6-.23-1.18-.56-1.72-.99l-.4-.32-.5.14-2.17.62-1.21-2.12 1.63-1.59.37-.36-.08-.51c-.05-.32-.08-.65-.08-.98s.03-.66.08-.98l.08-.51-.37-.36L3.6 8.56l1.22-2.11 2.17.62.5.14.4-.32c.53-.44 1.11-.77 1.72-.99l.5-.18.13-.51.54-2.21h2.44M14 2h-4l-.74 2.96c-.73.27-1.4.66-2 1.14l-2.92-.83-2 3.46 2.19 2.13c-.06.37-.09.75-.09 1.14s.03.77.09 1.14l-2.19 2.13 2 3.46 2.92-.83c.6.48 1.27.87 2 1.14L10 22h4l.74-2.96c.73-.27 1.4-.66 2-1.14l2.92.83 2-3.46

Chrome Cache Entry: 627

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32662), with no line terminators
Category:	downloaded
Size (bytes):	32662
Entropy (8bit):	4.523198556485493
Encrypted:	false
SSDEEP:	768:0HM1PHHZ+H4HUHJHhHaHMHTxnHZHTHMHYH3HQH0OHP/EHGh8HdKH+HuH7H7HkHkt:0HM1PHHZ+H4HUHJHhHaHMHTxnHZHTHMn
MD5:	836A4F0E0FC92D0F66A439D46B036024
SHA1:	89C63CE998C6A5F56516477FA483CCB5EEE2E745
SHA-256:	F362A7B4C315E5318BF41BD4DAD59FA623C764ABF562F30E1BEA795BB053A8D2
SHA-512:	2AD3CEB7957F3A3CABAD6F81EF0A45481E7DB7B8F752F6E43A47879D8AB5F242AB78E6E1680D5C17355609BB0DBEBA8BF86E076CEECD12FDC1E12837F5E57DF0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/lottie/subscribe_action/subscribe_action_sparkle_light.json
Preview:	{"v":"5.8.1","fr":60,"ip":0,"op":125,"w":180,"h":96,"nm":"SubscribeAction_Sparkle_LightTheme","ddd":0,"assets":[],"layers":[{"ddd":0,"ind":1,"ty":4,"nm":"Star06","sr":1,"ks":{"o":{"a":1,"k":[{"i":{"x":[0.6],"y":[1]},"o":{"x":[0.2],"y":[0]},"t":49,"s":[100],"e":[0]},{"t":55}],"ix":11},"r":{"a":0,"k":0,"ix":10},"p":{"a":1,"k":[{"i":{"x":0,"y":1},"o":{"x":0.05,"y":0},"t":25,"s":[23.264,42.881,0],"e":[10.389,41.006,0],"to":[-2.146,-0.312,0],"ti":[2.146,0.312,0]},{"t":49}],"ix":2,"l":2},"a":{"a":0,"k":[177.889,-107.244,0],"ix":1,"l":2},"s":{"a":1,"k":[{"i":{"x":[0,0,0.833],"y":[1,1,1]},"o":{"x":[0.05,0.05,0.167],"y":[0,0,0]},"t":25,"s":[0,0,100],"e":[100,100,100]},{"t":55}],"ix":6,"l":2}},"ao":0,"shapes":[{"ty":"gr","it":[{"ty":"sr","sy":1,"d":1,"pt":{"a":0,"k":4,"ix":3},"p":{"a":0,"k":[0,0],"ix":4},"r":{"a":0,"k":0,"ix":5},"ir":{"a":0,"k":3,"ix":6},"is":{"a":0,"k":0,"ix":8},"or":{"a":0,"k":8,"ix":7},"os":{"a":0,"k":0,"ix":9},"ix":1,"nm":"Polystar Path 1","mn":"ADBE Vector Shape - Star","hd

Chrome Cache Entry: 628

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 168x94, components 3
Category:	dropped
Size (bytes):	6534
Entropy (8bit):	7.9328587621794515
Encrypted:	false
SSDEEP:	192:Q00JHimBq/IG/Ujt1wmTKhS6T7gh3On5heBLeeK8:Q1imBbew/6s3Ym08
MD5:	0407C3C34AB269B6C6B9DE6E90CE5FAF
SHA1:	0CFA4DE56DD5886B39ADF08888123DDC7D3E6F92
SHA-256:	4525D0187E42D7B4139D2768BF00E2078C67E8ACA03A61DD71D050C1CDC94BC3
SHA-512:	D36DEA264FCF20BCF2F2488A2AD83A934EBD85AD8E7B66949E13056C4EC1744F4600EFD6265457720F63A32E1522FC15BD7841CF03F4D655A8F34DDFC160C525
Malicious:	false
Reputation:	low
Preview:	......JFIF......................................................................................................................................................^..............................................A.........................!.1A..."a2Qq..#....BRbrs....$3....%4c.................................6......................!..1AQaq.."2........B...br.#$4............?...;.....5Xod...~.3,j>.I.dt.om.9...1.Q%....j<....s...J..J2'.^...q.G....u,.;X.c......g.q...G.$.B..G...)h..(..\x.<.........l.....\|.=,<..\|c.R.......sl-......gJ..6.,....k..B~G...h..,..jv.l.....E.{...S-4....eI.q...,v`9..k....6..V.Mg:L...+..N...@.w.U.v.F...&..;.jkj .LO;..{...@.3..].u.....#.. uX..UM.l......!m..Py.ia..O...$..-...z...L.g.9.7IT2..>....;.\|wT*......O.q..9..h.U..M.1.^I...BR...'e].W../...`.. . ...kt....`n=..._.D..w..c..e....R..........qL..0....9&.....GX..D..-bL..9.-....<...ECv......EN3f9.......Y..T...H...1.O....l..,.....x.+...5.fQ...4..SY....i)).3.b..TT...$@.H.M.p.MJc..Jt.Tc..Z..y....o..]S3K

Chrome Cache Entry: 629

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	442
Entropy (8bit):	4.813019877520226
Encrypted:	false
SSDEEP:	12:t4noOAvmnqtXy+R/Ro1ImoXHNR50buAD2NfnRimbf:t4o7vNC+R/cImoXHN1Nf
MD5:	8508DD8336C60695AFCF1158C2EF0EF2
SHA1:	32CC87A7AE016449C6038284CEDDBA3E3D0B1791
SHA-256:	DEBC90222AA11F028051B9E116A7AD054ED560854FB326A5C38254DA354CFDEF
SHA-512:	35DE791E5CE1F47AD1FF89A594DB6FE055920481ED73001EAB97C12A7DC31077A6C5B64740FBFC682923BD98149F4A67AD0C027532EA1BF7EAA3C4D45579E930
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" style="enable-background:new 0 0 24 24;" viewBox="0 0 24 24" width="24"><g><path d="M14.97 16.95 10 13.87V7h2v5.76l4.03 2.49-1.06 1.7zM22 12c0 5.51-4.49 10-10 10S2 17.51 2 12h1c0 4.96 4.04 9 9 9s9-4.04 9-9-4.04-9-9-9C8.81 3 5.92 4.64 4.28 7.38c-.11.18-.22.37-.31.56L3.94 8H8v1H1.96V3h1v4.74c.04-.09.07-.17.11-.25.11-.22.23-.42.35-.63C5.22 3.86 8.51 2 12 2c5.51 0 10 4.49 10 10z"/></g></svg>

Chrome Cache Entry: 630

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	2424807
Entropy (8bit):	4.943286003557315
Encrypted:	false
SSDEEP:	12288:pRpaQ+5+Fmt9IkovxKkqFOdJ/JGfeiwtHWTOev3z69JG5eOW7xveMmgbVrdU7ioy:Sio/4Q/5mLDOc/J
MD5:	A6BE64B590E98DC25FE83316DA763A62
SHA1:	5806F07F73DC59B2788A0CBDD67DB24AA684A0BA
SHA-256:	7AA4EF3D716F000573B9C5AA056FAB1513A535499B8426E4657F8921EE36420F
SHA-512:	B8F7E8E74BDA6069A203049FC4FBB3E881532702328EAEA6B090754D3795693E100A1744721F39E1E6C9C5841DE5835B6A2595F178A88B396E9E26612D36A1BA
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.HO55zwvfmNc.L.B1.O/am=AAABWg/d=0/rs=AGKMywFQq8RH1zBq3HWnpbjP0ByYJMzZdQ
Preview:	ytd-menu-renderer{display:flexbox;display:flex;flex-direction:row}ytd-menu-renderer:not([condensed]) .ytd-menu-renderer[button-renderer]+.ytd-menu-renderer[button-renderer],.ytd-menu-renderer[button-renderer]+yt-button-view-model.ytd-menu-renderer,yt-button-view-model.ytd-menu-renderer+yt-button-view-model.ytd-menu-renderer,.ytd-menu-renderer[button-renderer]+template.ytd-menu-renderer+#button.ytd-menu-renderer,yt-button-view-model.ytd-menu-renderer+template.ytd-menu-renderer+#button.ytd-menu-renderer,#flexible-item-buttons.ytd-menu-renderer:not(:empty)>.ytd-menu-renderer[button-renderer],#top-level-buttons-computed.ytd-menu-renderer:not(:empty)>.ytd-menu-renderer[button-renderer]~.ytd-menu-renderer[button-renderer],#flexible-item-buttons.ytd-menu-renderer:not(:empty)>yt-button-view-model.ytd-menu-renderer,#top-level-buttons-computed.ytd-menu-renderer:not(:empty)+#flexible-item-buttons.ytd-menu-renderer+#button.ytd-menu-renderer{margin-left:8px}ytd-menu-renderer .ytd-menu-renderer[styl

Chrome Cache Entry: 631

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	4754
Entropy (8bit):	7.95530785559178
Encrypted:	false
SSDEEP:	96:A77QyuTlwi1WgKqJhrj6A8gx7z105PFQiXIKzsMirR6MZy2TJtRHqLL:IEXdK29xV0RFX/GrPZ90L
MD5:	41E6497F70D1ECA8A71A62A90629ED25
SHA1:	8F565F34D16988DCD4C119C22C41E45598DEE968
SHA-256:	5089D7B8CFAA7155DDB25118AE2FFC76FCFDC694369D4EEE287662171A231AB9
SHA-512:	EDAF2D3DB4448438D8305DC103FB8D0E2AB800C9DC34E3EEBDA4D052D14FFCAE928217239784CB3DA9E2767793FEAD7C6C3EABEAD1885322DFFEC93E18DC3F95
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/djV11Xbc914/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCUVjcnPQDSHGvb0uU0snHDJaVnYg
Preview:	RIFF....WEBPVP8 ~...pD.....^.>Q..J#...8....c.!...F..=(........g..[g..'.W..O...o.?1.O..X.K.../}kjG......o.."?........;O...#.......7......~.?..C.o...g....>.n.G.....W............G...?....G........].g.._......1.s.,.a.q.rl..0P.9.W.CM.Y..J......(\.......nm;t[.5.u..kv8.].............z~.L..._.b..q`....."(y.2.E.....$..$..'._;.&.:Y..XiBVMXI_$...M..^'1.....R..Yf..........Yv.....m.G...&...$............x...6."%9"..>.m....M.P....z...`....(...RX...Na.Y...;.......^U..u!...W..P.1g.....L.b.!c...q..=.._v.,.:i_h.-..9.. ..[.g?HR.....8..~.....].G{....<Y.e..=.K.....D4y..?N......De'. ...Ppm.:.H..Wl#TS.-.TZ.\..{u....;..T)..+..8....ZO...58.qv.fW+..m.'....I....o!4...(.4...Nn3.....c.... ...=.....:r.X......f..Xr.4V....7...z.j.>N.2....<..to.S.......,......1..f.. /..zD....5...n.cgY..@....S. ...y..2.).3\LO.....w.rGQ...~.V.M....C..N<....y)Xo..w.^/E....u.i.>..$.~"!.n}L........s..v.Zy....B.X.Uw..E.CP.p..3}.J...<ww;.s..w...152^..\Vl..F._.w-.C/.S...k.BZ...j.=.....F..3X\

Chrome Cache Entry: 632

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51740)
Category:	downloaded
Size (bytes):	53009
Entropy (8bit):	5.735746151201697
Encrypted:	false
SSDEEP:	768:jC6w335hlHzaoiH9dBtiqN1eqnI7f4yGBh9T9l3dxaQ+LjPaeB+WPo:jC6w3vlTwH9bRnkfKBb/3zaxh+WPo
MD5:	26DA13A568081B6B822C328A22E8599D
SHA1:	B449C2D28024C64BAB332A82CA36A96FA3DC3EFE
SHA-256:	8D17D5B38D204D7311A56BB407C2B6FB630838CF6F92EB0201918510E0671BA3
SHA-512:	407141032595E9E1F5A11E51582678CD80937BCFC1E0A3525389F9CD74AF260D9EB22D4C6C4145DC3B2518C0D903CB51F71C8137135543166F7E8D8DDCBA4790
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/jRfVs40gTXMRpWu0B8K2-2MIOM9vkusCAZGFEOBnG6M.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function G(x){return x}var J=function(x,y,W,U,L,R,d,K,O,A,m,g){for(A=(g=0,71);;)try{if(g==W)break;else if(g==41)g=O&&O.createPolicy?U:44;else if(g==92)E.console[L](m.message),g=x;else if(g==U)A=y,K=O.createPolicy(R,{createHTML:f,createScript:f,createScriptURL:f}),g=x;else{if(g==x)return A=71,K;if(g==0)O=E.trustedTypes,K=d,g=41;else{if(g==44)return K;g==35?(A=71,g=53):g==53&&(g=E.console?92:x)}}}catch(l){if(A==71)throw l;A==y&&(m=l,g=35)}},E=this\|\|self,f=function(x){return G.call(this,x)};(0,eval)(function(x,y){return(y=J(4,7,99,87,"error","ad",null))&&x.eval(y.createScript("1"))===1?function(W){return y.createScript(W)}:function(W){return""+W}}(E)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;cha

Chrome Cache Entry: 633

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, original size modulo 2^32 709
Category:	downloaded
Size (bytes):	414
Entropy (8bit):	7.457908951960137
Encrypted:	false
SSDEEP:	12:XZg5g4UtP/ugt5u73yhIzPliwy2KR/A4h3R:XeVSP/zt5u78U0Z/5hB
MD5:	36E21BEF37A9157B6CEE469794EAD120
SHA1:	5829E57BD5A4363C03A4713EFEACAFAD0ABF531A
SHA-256:	9AFA27C403D88549CB42323B9C2B7625727D3E5F688AC49ED18E01AC8B7767B6
SHA-512:	33509D0DC3C4A3C8D4445481EEF8CB261A4C164D719324B269A46D24FDAA1DC54DD142880489D48F8C1B95B6A886B19AFC3490ADFCE3BC5F4C7A08F3B95FED13
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_outline/youtube_shorts/v8/24px.svg
Preview:	..........T....0.D......h....s..Ev..H..&....b.S/.9..o(.=..\|.o.....\|~....u........'.\|\..~.2.r.X.~~.$I.............y.....XA.E+.....#..>c.. g5....IG....E.q....PC+R<X..NE...1$...:..#..HE]2Jgi(..9.....L..... s...2.<....a..l.6yp.yp......i..H.db.]I..{qEg...#m}..+ZhC..RC..M.....`E)...,V....0..p3vSDWx.ES.8)yP.!..`.b.."...>.A../a......t..@q ..Q...*.tx,...0..zG..3d.\|.bH.N...-..\y......._............

Chrome Cache Entry: 634

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	287
Entropy (8bit):	5.015529132385196
Encrypted:	false
SSDEEP:	6:tI9mc4sl5RtOU0p4nEVkK+CJ1JrycDQnVkxGjU2ZIvhC:t4vfOADKPn5yB5jPMhC
MD5:	64090EE2574D7F41444485BDD8E4A04B
SHA1:	D2342EBF52614F1EAFD07BBFDC72E3F65A1963B8
SHA-256:	483E819776ECFED148800D9E881C1C72F4279D74264B49A38346C26358EF98DC
SHA-512:	E936442EBA58D4438749791365F38CE7D39B7291F3BB032D35FBB4FAED6AF7E14C9CA7D4FC57A62B90A950C3868AF0755C4530BB5DF8A05CA9FC27044BD522C6
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/unplugged_logo/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <path fill="#FF0000" d="M6,18h12v1H6V18z M22,6.2v9.6c0,0.66-0.54,1.2-1.2,1.2H3.2C2.54,17,2,16.46,2,15.8V6.2C2,5.54,2.54,5,3.2,5 h17.6C21.46,5,22,5.54,22,6.2z"></path>. <polygon fill="#FFFFFF" points="15,11 10,8.35 10,13.65 "></polygon>.</svg>.

Chrome Cache Entry: 635

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 400 x 200, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15124
Entropy (8bit):	7.919622269344001
Encrypted:	false
SSDEEP:	384:pLDdjK+LcEvHZE3s7TK/ow2ocsUTKoUoMtouwLMWm:1dFcEvQs7G0LsU+uuodLMWm
MD5:	1F67EE865D46FBA22A5DB05F43E7593E
SHA1:	8F8B7206EEF4C01E633B64D895090676E5296D3E
SHA-256:	204A2DFE5441529869F719F4DA8D296A5F65D79F4B498F4DBFB6C4DE09E5A5F9
SHA-512:	08F5A16B418EC828162D5A4DBAA6F1798D5F0F03212F10D6B4D3BB98ACF498A6AEAB664219F43867EBBCE9AFB557AB928E38747C8B5AE01B52A4F89195A5A862
Malicious:	false
Reputation:	low
URL:	https://scamwebsite.com/Untitled.png
Preview:	.PNG........IHDR.....................sRGB.........gAMA......a.....pHYs...t...t..f.x..:.IDATx^...4E.>....s.E@...D....$'.9. ..... 9#Q..$.H. ..D.9....O..f.<3.=..s..lwuu..}.9.......@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! .@ ...! ...g......tG..8Q....@ ....7B@..@`f....%........! .@I8.....tE...(.F...@`:".d....i.@ .1..!.d...cY ..L7n...../C'.......! .P.".e.@`.....*B@:..%......E...MU...P........C...6...R@..O.....B...6....@..O.....A..:.TC.H.....&..........o..[..{.Uo..v..[o%..;.S}....?.......>...._......w.M.........T....f.9q.n..z.._.......z..:......7......tl....([y.l.v.R..=:O}._`.(..N6...RC.wk..@./..Ru..wT......C.U..rKu.y.U..x`..V[U.....o}.[....V.n..n.U'.pBu..V.>.h". \e....b.-V...j..n...g.}.c.=...+...~8.2...x.T.r.-W..~.i..V.z...;.\m..&.k.Y-...#.fK-.T.\|...;......y.D.u..........O?=....{T.n.i..:.TK...Le/.......t.A.U.\pA.....{.....?.M%...@.A...x..../....p.]v..._.z5.sV_.....\|.3.'>..c..X.

Chrome Cache Entry: 636

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	778
Entropy (8bit):	4.260772867505465
Encrypted:	false
SSDEEP:	12:t4tM65jghuamzC41gZVz1QDUQ2R6a2qanGgmonPQ/0:t4tMMjwuamzz1gZLQER6lLmoI/0
MD5:	C912F19C8AAE23F530DFDDD4D7BBA780
SHA1:	40C607FABFDE63E2A4D92462FEC123A2D52D1F8E
SHA-256:	E593ED5B1D641EA4F61CD2308346A608EE088E293AC177881E4CB43969B87E05
SHA-512:	377D00EF8981C127EB1A573731B1EC22DA072DED23E7D920834C88F280FEFD160885D9EFEF3F8C6B942DB280685ACED73B2D7240ED55FB85947D8180A1FFBC37
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/shorts-dislike/v2/32px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg"><path fill-rule="evenodd" clip-rule="evenodd" d="M6.15895 20.0023C5.32221 20.0023 4.54031 19.586 4.07317 18.8918C3.30492 17.7502 3.31241 16.255 4.09205 15.1211L4.82045 14.0617L4.14538 12.4963C3.74297 11.5632 3.84031 10.4898 4.40399 9.64424L5.50013 8.00004L5.50013 6.00231C5.50013 4.89774 6.39557 4.00231 7.50014 4.00232L20.0001 4.00239C21.1047 4.0024 22.0001 4.89783 22.0001 6.0024L22.0001 19.1736C22.0001 20.0073 21.7396 20.8201 21.2551 21.4985L16.1368 28.6641C15.9224 28.9643 15.5279 29.0747 15.1888 28.9294C13.4238 28.1729 12.4653 26.2504 12.9234 24.3856L14.0001 20.0024L6.15895 20.0023ZM27 18.5001C28.1046 18.5001 29 17.6046 29 16.5001L29 6.00006C29 4.89549 28.1046 4.00006 27 4.00006L24 4.00006L24 18.5001L27 18.5001Z"></path></svg>.

Chrome Cache Entry: 637

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 638

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	563
Entropy (8bit):	4.367744360532535
Encrypted:	false
SSDEEP:	12:t4noU/vmRTKd2aCJAzyXDMhkVFCzzZvSbeW03LxgI:t4oU/vo49yXghf5UTI
MD5:	3102D9E6EB6482A42839EFF1E5F4CB83
SHA1:	151E7A7B018C590EFF801936C8B3165E21D1F388
SHA-256:	A79054C0A39DB68BD70F2277EE512312190F32D0CCFB12B2B15A8DC833DA4772
SHA-512:	4131362A77102F48C615E40ECC95599300A239BF339831DA47E85A328929EAAB6AC63B67D64CE6FCBEB120D85865F5415C2188877822861BADCE5B908D206A0B
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M12 2C6.48 2 2 6.48 2 12s4.48 10 10 10 10-4.48 10-10S17.52 2 12 2zm0 1c4.96 0 9 4.04 9 9 0 1.42-.34 2.76-.93 3.96-1.53-1.72-3.98-2.89-7.38-3.03A3.996 3.996 0 0016 9c0-2.21-1.79-4-4-4S8 6.79 8 9c0 1.97 1.43 3.6 3.31 3.93-3.4.14-5.85 1.31-7.38 3.03C3.34 14.76 3 13.42 3 12c0-4.96 4.04-9 9-9zM9 9c0-1.65 1.35-3 3-3s3 1.35 3 3-1.35 3-3 3-3-1.35-3-3zm3 12c-3.16 0-5.94-1.64-7.55-4.12C6.01 14.93 8.61 13.9 12 13.9c3.39 0 5.99 1.03 7.55 2.98C17.94 19.36 15.16 21 12 21z"/></svg>

Chrome Cache Entry: 639

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	561
Entropy (8bit):	4.664076278294878
Encrypted:	false
SSDEEP:	12:t47N9U/vmRBoGaBoVOLgbvSFWeGzE+5OPiufVKJXbsUFSQiYHUloL:t4jU/vRGaBoc2SLX9fUb12NSL
MD5:	627CBC730DA8617E4FDA79BB7FC35F2F
SHA1:	C1CF15F3D7BD2AC64B329E353D26771F5C13FE77
SHA-256:	817119ECC2BC54779A271A53B347E8AF33C2544934D642D7877E99267BB0745B
SHA-512:	FB2299DC0272ECE197FE5656C0ABF1E6CF96F5D25F3D135D2DCE3D7CF50C189BC0C9C73D1B042020DB47B2FD680230C61F9A6D599D385CEFFAC87F20CEB69555
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M18.77,11h-4.23l1.52-4.94C16.38,5.03,15.54,4,14.38,4c-0.58,0-1.14,0.24-1.52,0.65L7,11H3v10h4h1h9.43 c1.06,0,1.98-0.67,2.19-1.61l1.34-6C21.23,12.15,20.18,11,18.77,11z M7,20H4v-8h3V20z M19.98,13.17l-1.34,6 C18.54,19.65,18.03,20,17.43,20H8v-8.61l5.6-6.06C13.79,5.12,14.08,5,14.38,5c0.26,0,0.5,0.11,0.63,0.3 c0.07,0.1,0.15,0.26,0.09,0.47l-1.52,4.94L13.18,12h1.35h4.23c0.41,0,0.8,0.17,1.03,0.46C19.92,12.61,20.05,12.86,19.98,13.17z"/></svg>

Chrome Cache Entry: 640

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	2542
Entropy (8bit):	7.915019608970432
Encrypted:	false
SSDEEP:	48:I40gavsIBc3DK+Sdw/+PMIe4CixgkOnwbDgslBIaLSCBzEqNooVFBpEZ:IXvEIwDK5K+PM+CEgk4s/IANzrNooVF6
MD5:	FE9834FF45E282E2BF6B8F192D356B3E
SHA1:	23BAC03AB33FB66B78BCBCDA9E36786D83BCD14A
SHA-256:	499870AE03BC691D0191F7B6B9F0C3ACAF0552DC82A2A47EF8A088A7F6FD7129
SHA-512:	D98DE887FF6DB8B6406C9BBC897EF80CB4A2F3AD3CC843944E77E8DD013CA5934CF18C3E57E5638A5B904808DC99AB120D391F2D2BB678DF8C04D662DA91F649
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8 ....p0.....^.>Q..J#.#...p..el.T.6.r[w..!.M.y.>"......7.o...!f..^.3...3.{...~.~....U.w.-..y..>.".d..6.bo-...........0.l6..Q..\|.../?z..Q.u;UyA...+_..V!..{K...E.\| ..xf.n....%.i.W4..'....6R..z>...$.2.'.. Q..U..p.......T.$W.a.Q..(p.......tw...ruC...Bs...h!E..n.5...'....p. Qj>j...{....l...-..4.T...B/.\.5....F...".<Q....Y...].W}K....Aj\|..G....i..k..K..n..H,a..Z...\.....I...c}.S..R.]..>0....... ..8.fv..hy@D..N...(_..............L..hNu.O.sO..._.2q:0W........r.X.?..W...0....\._C..%I!P...9j2...y.g......-.....5.F..].V..j$:]...C@..M.j...!..Y..:...M6*...lv...{.}h.......... ..f...k.[.b!rM.B6+....J...G....?o.{..../N.g..G+.z.{..^P........X.......<...E..qG.c_(,. .}.-K.l.^...3..+..[...?..K..]\|.T....9&r.h..:.M.R...........+s....5[>..A..$.........b..T..}a.EF.Y....Z.qne..........yJ...,zR.:\|mk.)......H.& ... 2..v..I...kw.g....f..L.Ut.. z.S%.zt.....6x.......4..YHO......<.T..9G...oX....X..[.8..A&....gn..f......t.#.&...Q)..V#.u.............A!5.g..q

Chrome Cache Entry: 641

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1134
Entropy (8bit):	7.743142541199294
Encrypted:	false
SSDEEP:	24:TXSqyHaVdWjEY0EJXXbhJaesZzYdHj5GY5STGtRDpAP4nM7AAyCH0kUIp8z:TXSHHaVYYREJbhhsKdD5z5SiRdAcM0Ai
MD5:	8E13264BE5D4E53490AD922B5D882AC5
SHA1:	C38AA0EAE96CBFF954A3408E1854D48E3F15B90B
SHA-256:	DE4E610608FFC5295EDBD2B9B6256D4C14E2D13D46BEE2071B031D69A6DF7109
SHA-512:	77A2CA479893BDBDF983E51D53B6290F4E3420C7233DF90C68F9DEC7A404E2A97E8EF4B54A1D51C29C45B0093CC5C94868DDF69D23504AE166AD0F91940A27A9
Malicious:	false
Reputation:	low
URL:	https://scamwebsite.com/favicon.png
Preview:	.PNG........IHDR...(...(........m....sRGB.........gAMA......a.....pHYs...t...t..f.x....IDATXG.W.O.Q..oq.4.1j...E..5..'.1!.......F.q%.f...AY"."..aHE@F.....~-...."'9.....w...0.....J..+P..3i.6..6...T.l.WP.^.e...5,.....j.........(...84......Q.i..&.l...k.1}.%.W...o..Vp...b..K.... .....i^..4./j.8...f....D..xAwJc(......$.....(\).wW..FS....[jhB..4GMM...o..e..a.4oo.........-....B.5Y....q.n..~.K:Q..f.W}......F.Ju\|....Z.....0.Q..r.?.sT..Vr.....k....ks8wV.V...e..Q..i..t.....z....g.m..BhWw.W.f@<.`0.....V.....3h~.^..&.8....\|....&.l.._#y...i~6W...j.c...@\..g\|..H...7r..0..q.w..L..zZ.....}..'.1....$.....U).4r.Wbg.Y.Z.....d...A...,J.%\...J.V..R.."...Y..xA.?EU.....n.c.&...n.e..D5...?....../.....3.y..&....3`..r...!..X.I^/...<v..h.Y.B........x..5}c.W.....sPME L.....P...>.....Tz.....p.T......9..z..6.....k-.....p_...I...-..`.!.]..7#.Rk..{a.......N..._......z..z....,kj..kxR...O.o..W\.K.^...$i...l.X......\|l(..*..4..R.......eW29.....:Z`...Q.!.@%!...US....=.

Chrome Cache Entry: 642

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	595
Entropy (8bit):	4.329698845198318
Encrypted:	false
SSDEEP:	12:t4noU/vmRZcdJiuJJsUG0aLn+djONWQismTRIaZmU5SuX6RfM3FLvTkwWEarekt5:t4oU/v4cRs0aLn+djqWQismiaZ5SuKN1
MD5:	59BE1A6C339935F5CE8864D780FFC050
SHA1:	567E4ABCBD3C2577AC876AEF2A61404D20C3387D
SHA-256:	D788961A2C6097C992AE2FEAC9676ED77729FDAAA539CFD1E5EFFDA688B5C5C6
SHA-512:	819BE490FF31DD5D5194633503309EAA146D1C23B4384ADDFDFA211677AA6A8C82E3ACD12EE580268F586A33426D40D324E0DD119512763F54719F0DF67D7F70
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><path d="M10.5 14.41V9.6l4.17 2.4-4.17 2.41zM8.48 8.45l-.71-.7C6.68 8.83 6 10.34 6 12s.68 3.17 1.77 4.25l.71-.71C7.57 14.64 7 13.39 7 12s.57-2.64 1.48-3.55zm7.75-.7-.71.71c.91.9 1.48 2.15 1.48 3.54s-.57 2.64-1.48 3.55l.71.71C17.32 15.17 18 13.66 18 12s-.68-3.17-1.77-4.25zM5.65 5.63l-.7-.71C3.13 6.73 2 9.24 2 12s1.13 5.27 2.95 7.08l.71-.71C4.02 16.74 3 14.49 3 12s1.02-4.74 2.65-6.37zm13.4-.71-.71.71C19.98 7.26 21 9.51 21 12s-1.02 4.74-2.65 6.37l.71.71C20.87 17.27 22 14.76 22 12s-1.13-5.27-2.95-7.08z"/></svg>

Chrome Cache Entry: 643

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	320
Entropy (8bit):	4.8695017860270475
Encrypted:	false
SSDEEP:	6:tI9mc4slhLJ9hC/vmI4jN9RotqtWIXWkjRBnmHRLmTCSkeLlzIxfIcHTJ+hu5hTO:t47N9U/vmRR9jRxmHRLkCsL9IxflMwhK
MD5:	0913F87D10776D31276AD2F0A64D4177
SHA1:	EF9EA8B47C6243293A187C61708218B1A1F6E0B6
SHA-256:	4EE171268D505E911DA178827E7EF13A9C7EB1D6F42FD12F430B4621465EA834
SHA-512:	A583DF01EF03C14B840FB699C36B8591D8386B04D65CAD74E599A4065F1C5456D4974A7DBEF6031E429D2B126A089A582794D78BCFB3F88D91C9394108619D16
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/i/youtube_fill/bell/v8/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" enable-background="new 0 0 24 24" height="24" viewBox="0 0 24 24" width="24"><path d="M10 20h4c0 1.1-.9 2-2 2s-2-.9-2-2zm10-2.65V19H4v-1.65l2-1.88v-5.15C6 7.4 7.56 5.1 10 4.34v-.38c0-1.42 1.49-2.5 2.99-1.76.65.32 1.01 1.03 1.01 1.76v.39c2.44.75 4 3.06 4 5.98v5.15l2 1.87z"/></svg>

Chrome Cache Entry: 644

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	dropped
Size (bytes):	27
Entropy (8bit):	4.3845171317931
Encrypted:	false
SSDEEP:	3:8jEMEN/QC1l:8jMN/QCv
MD5:	F7C8AABF963C3A65DBBA34ACB7D29035
SHA1:	017BC86726314E2DCA0DFC315F4C48463B0446AB
SHA-256:	8E000614947BCED11DCF2C4A0B33E9BE12142555D9196563A93241CB447F64E3
SHA-512:	F65673F68887A3FA20E4A40EE8DE3F08DAE22299C0F76DB126D4D5E72C43A4666955D5D691A45119B46D26B888F81A45E10E13B1F77E7BEF883EA10A938567DB
Malicious:	false
Reputation:	low
Preview:	,...sabr.malformed_config..

Chrome Cache Entry: 645

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1586
Entropy (8bit):	4.971538502379734
Encrypted:	false
SSDEEP:	24:Yj0jutsEgaFs9v8eY2x2UfwhUdt0A66ucXaKUoXab/:Y9ts3aFs90pUbtd79aKpab/
MD5:	052B9F6B80876F7C32894105E377BA3B
SHA1:	2018FC66AB3C28A18167B11C547406CF1BBAF89A
SHA-256:	A7B005C03E9F79AB0D36080925C50F6C101BBBF9853DD849E9A0030A810C89A1
SHA-512:	2DC6CA28250F1E5A0EF91D677A6732BD64D5D09C930B78AF226823621C0F1A6BDBDE23583C75F69D5101E918D7FAF40ADD7C236B0AA733D3B02F95528D1B3374
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/manifest.webmanifest
Preview:	{"name":"YouTube","short_name":"YouTube","background_color":"#FFFFFF","display":"minimal-ui","start_url":"/?feature\u003dytca","scope":"/","icons":[{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png","sizes":"144x144","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_192x192.png","sizes":"192x192","type":"image/png"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_16x16.png","sizes":"16x16","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_32x32.png","sizes":"32x32","type":"image/png","purpose":"monochrome"},{"src":"https://fonts.gstatic.com/s/i/googlematerialicons/video_youtube/v11/white-48dp/1x/gm_video_youtube_white_48dp.png","sizes":"48x48","type":"image/png","purpose":"monochrome"},{"src":"https://www.gstatic.com/youtube/img/web/monochrome/logo_512x512.png","sizes":"512x512","type":"image/png","purpose":"monochrome"}],"theme_color":"#FF0000"

Chrome Cache Entry: 646

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2434
Entropy (8bit):	4.737059133849761
Encrypted:	false
SSDEEP:	48:owOGkjKLAltP84lPMYxznNoCGVShuKJpn2:MLvtPhlPMYFNoAJp2
MD5:	06360FF211B374AFC9473FAEA2886095
SHA1:	6E40EC924C7CA539185ADBF78566DAEFEB5B97BC
SHA-256:	EEA10F57C4E2A6677142FEEC3F9353399D500BE403C61C5456881396ADF6FEE3
SHA-512:	3F1A3497714CA8C028469439CEF0B1DAE3805B34447CB96BC2C973A7C98F06EE9F75C91D2DC7DB334ACEB7031888727091B9700E1BEFCE71B5C9A431830CEDA2
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/youtube_round/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <defs>. <radialGradient cx="5.4%" cy="7.11%" r="107.93%" fx="5.4%" fy="7.11%" gradientTransform="matrix(.70653 0 0 1 .016 0)">. <stop offset="0%" stop-color="#FFF"></stop>. <stop offset="100%" stop-color="#FFF" stop-opacity="0"></stop>. </radialGradient>. </defs>. <g fill="none" fill-rule="evenodd">. <path d="M1 1h21.77v22H1z"></path>. <g fill-rule="nonzero">. <path fill="#F00" d="M22.54 7.6s-.2-1.5-.86-2.17c-.83-.87-1.75-.88-2.18-.93-3.04-.22-7.6-.2-7.6-.2s-4.56-.02-7.6.2c-.43.05-1.35.06-2.18.93-.65.67-.86 2.18-.86 2.18S1.04 9.4 1 11.18v1.66c.04 1.78.26 3.55.26 3.55s.2 1.5.86 2.18c.83.87 1.9.84 2.4.94 1.7.15 7.2.2 7.38.2 0 0 4.57 0 7.6-.22.43-.05 1.35-.06 2.18-.93.65-.67.86-2.18.86-2.18s.22-1.77.24-3.55v-1.66c-.02-1.78-.24-3.55-.24-3.55z"></path>. <path fill="#FAFAFA" d="M9.68 8.9v6.18l5.84-3.1"></path>. <path fill="#000" fill-opacity=".12" d="M9.68 8.88l5.13 3.48.73-.38"></path>. <path fill="#FFF"

Chrome Cache Entry: 647

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	6170
Entropy (8bit):	7.965346264222445
Encrypted:	false
SSDEEP:	192:5hQFCVhc4uVF7YjmXgvXZiAS1yq5TVKeHK/:5yYhc/VV9ik9hKeHa
MD5:	3FD5DF1BA1468D22EF336F5649C7C843
SHA1:	5DE51BF70505602EFE9E7C856F19A8AC4C27E6B1
SHA-256:	2BD2C7B23B5491CFD6AD9A1F887AE4C548E69589DB50A828EBBBDFD31EE6EB8C
SHA-512:	B8AAD6AF8697D53B81D91ABEE6916FE9C98CF9DFD94A572770A15EC22685C8FD5D4469B47520DF582AEE0F668922E7EEB0AF6D1C6E6A763E91DB8FDB98FFF3E7
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/QMW4AqbuSGg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD0bomMOfrJhL8N-GImSSj3RuroVw
Preview:	RIFF....WEBPVP8 .....O.....^.>M..I..QLx(......nv.\O..j.Y.......<.D~.............?.g.........=k.W..\|.=...Z.p.......?.....=........=..k......h.2>o.'.V....:...I.....N.}...P.h~...............{.........?.?....y...o..............g...o...}.}?.O.G./.W............O.....x?....E...Y..;.....t.7.3+..JrI^.f.ogv......>gR..Mpv..d....[n..^..U.......?.h......2A...O....[.>..4..~F.h"..W...g_...\|!'..O...Y......e(.....w..I.^..y.1:.z6.,8l...W......W..;...4^.tg/..p5...Hd..sK....]v..)pT..^d1.x..%.d..=.._c........a.?.o.1xR.?.`\|.....9.....Fi......Ei..z.R....A.........A._h4%.5:....S........E...cX9......K....U.P..m.c.=..r..A........h.5.`....S.)P....MiP..G...#........1kpL.!.q.z.tc.6.a.>.p.....s...9.u.\Qp.8.t..^..w.U....yx0.i...+<..."12xQ.[..0....I.B..x!a....8-..K...g..#.?1.]..j...8>.g..Z<&^.....*..(G...#..:.y....t......a.P\|s..<..\|?.O.;........x.Dg..6..v.&...?....d..-...A.1.X.....z<...'..W..:<(.....w@.....X.s......A..Ey.?n'....dx./....g.I./.Y..W.j.......x#..?...H...$.;m.

Chrome Cache Entry: 648

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	338
Entropy (8bit):	5.081456518478992
Encrypted:	false
SSDEEP:	6:tI9mc4slbWKJAOBUtTxGjxAOyVov2RtNI8MobBWDyewVR2OsXdfDRUEubz5JM:t40rOQojGOsov2fCy9GyekahDRqzc
MD5:	344BD6131BA252992E7B43DB8ACF0EF4
SHA1:	AE9762E6C8B2582AC06B72E1056F93394F1E7528
SHA-256:	F45C028690DE48FA989AA16E372FA580806B168114800CCCF6BF967C1B73C7E8
SHA-512:	49EE13BAF8D5E0847DDC4CE980F33540EE405784432E6027310224290FC1B9D835B80D8F9C7CE02D5A2692411B9B230BE65FF8DF6F63CCD92287D109673C1888
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/youtube/img/icons/web/youtube_fill/youtube_music/v1/24px.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg">. <circle fill="#FF0000" cx="12" cy="12" r="10"></circle>. <polygon fill="#FFFFFF" points="10,14.65 10,9.35 15,12 "></polygon>. <path fill="#FFFFFF" d="M12,7c2.76,0,5,2.24,5,5s-2.24,5-5,5s-5-2.24-5-5S9.24,7,12,7 M12,6c-3.31,0-6,2.69-6,6s2.69,6,6,6s6-2.69,6-6 S15.31,6,12,6L12,6z"></path>.</svg>.

Chrome Cache Entry: 649

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 168x94, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	3508
Entropy (8bit):	7.9382029523756765
Encrypted:	false
SSDEEP:	96:TqRAuLCaNuakClHkGzJITo2z9n5go4fFnUHxl:uDCOdDl/aTo2R5J4tnyP
MD5:	27D8CB9AE31E7381417E4F74496F3432
SHA1:	117FF93BFE389674192EE2926C737131BD48B5F8
SHA-256:	3ADFA27FF187CB9887EBE7FF0E695D3DA5FFB9FFE7CCD48CDCA1B6BC6BBD9718
SHA-512:	5969B6108F7E0AF9106B8A3D49132B3A35304634522215676E983A78E4CDF10C025514A2D04A2AE7B58030E59CCB932645CB05FCAB867D7910CE2949FEA48D2C
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ
Preview:	RIFF....WEBPVP8 .....8.....^.>Q..J#...8....X......1.U.j.%..\|../.?.>.<.9...z........M...o...../C...N.././...(..:.......o......{'.G.x......O...9...r.O`?.....~^...b........?....%........._....n..w...w.9..<..;..]Q.:wL(...."p..w0.d...8X.$:..E..C.6S....R....-......E.....$(.#.j.s......\|....1...x..!..>3.....q....h..Yy@\".LX.?.wV...HL..i`\..I.pz.<....^,.....T..3.,h.P.m.s..>.g...d.qJ..=a.aw..R.x...>XP.........6..V..kU..v.....].....s"..{4.....d..1...b)CL.NI...44.....c+.8.k.<....g.y.}..O>.h......N/......u..J........2....##.<.....R4.....F.....8.1.<...j.....<..K.u#@. mw..8]...m).4.....I+.....u...3.mC.H.W......C..bZ.K..$G.X..5l.V...D.Jo.mu.h.C..U.......,.Y...A..6R+.[.X. ......QP==\|..,:...L8..%...+C...R)...m\|.A#.+.P...WL"@\K..MBj..Dn...[l=..`N........@._....r..f...@..A_AfCf.m..\|....^.......4......,Q......N.E..9..[....[y..}.hr{3p:j]...w...(....#.......t.5.\.0.....!A..x.b..=....n.r'.V7..........}.\|..l..}\|$..H.yf.e.R.:\.$..%U..)f.>.

Chrome Cache Entry: 650

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 128x128, components 3
Category:	downloaded
Size (bytes):	3727
Entropy (8bit):	7.874568988212526
Encrypted:	false
SSDEEP:	96:q45H5G3FdMCzI6ODTg3+NTmYDwEeOTK9ipz18:qmKFChpcYMgeipze
MD5:	69AF4B2D4B742C569E5D4278A800F70A
SHA1:	9C55EF5F7C09811358E8B5716F25AA3DC99CDBB0
SHA-256:	60D72C0F4941B078AC884C9B4F458AA65C1450826A292D6B1FBD774F1064B5AB
SHA-512:	B70BD42AD2025F05A139FF58A82907311866C9DFFD164635C4BBE9C7254DC2B50B7B8B2A16B30DBC8AC787482419430AC8C8E72E38FC8C11CAD29277D1676DE8
Malicious:	false
Reputation:	low
URL:	https://encrypted-tbn2.gstatic.com/shopping?q=tbn:ANd9GcT3GttRXIa73s11cXBJ6dsINTMfl18W_rBfCXzHa7ze92VOGh0XoZGFBEsmuw
Preview:	......JFIF......................................... ."" ...$(4,$&1'..-=-157:::#+?D?8C49:7...........7%.%77777777777777777777777777777777777777777777777777...........".......................................7........................!1.A."Qa2q...B.....#Rb...$3S...............................+......................!1A..Q.q"2a....................?.L.N...<jEjG58.G.9.)c...c.u...i.X.1. j zQK...@d...U...d,.ug.F9`;{~.k...w.V..-J.w0......z...A.d....U.......dG...[.@..MX...;..D.7...KZGb..'..JS..6W.ruc?Ja<.Y.'....ydg...\|.,Uv.uI8...-...A..4..uX..L..J.q.....1.P...y.0eo].O.kj.....>.$...b..7=>...RJ.Y.+..Y..C_.Gn!..FxfR.]pF......./'I....._....T..-..(.0\.4m.2.n...]5.Z.Z.........Ki.6....}(0..q....C.I.JGI..u8.:23P.<X\..-.c..'...;. ..Y.,.Jd1.>..2P..E.=....^...IU...z.y.9XG.....jI#.F.....#V.y.t,.......A.j]Bv.....&'9..P~...d..t.w.6s.&...1...;.H.V..C.m....F...Ov.}..Y#....5..Tr.N[.....jE..x.##>...DW{..~\..4x...}F.N].._./....3.[x=;.."..r...+!g>..._......?...x..K mX`.....r......

Chrome Cache Entry: 651

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 93 x 18
Category:	downloaded
Size (bytes):	749
Entropy (8bit):	7.446384969086537
Encrypted:	false
SSDEEP:	12:zWza0v6xxb0HT8i8kTyD60d9eOrFYt9u+c1AZTjbIlYsrYf2NjJYKh6mxcR9:0adNE5JTnO9e4gc1cUhYWJYKh6icR9
MD5:	63418F65B5AB53D124AE59F1F52E3891
SHA1:	CCC7230609F2336F0255043F134F259C2DE5696C
SHA-256:	DABCD663A797937E1DCB9E479AEDCCEC0C36D6072693B95A6269897CF030915F
SHA-512:	CFEE1C36F0226E8022F6A9C0326BAFBFB2C32353C3C0AEA131F90A2FAFEC7C3539B928F773665E3EA5FF050B8A440A6AB58F0CFC641E1865DC1B6C94BB2E631F
Malicious:	false
Reputation:	low
URL:	http://www.addesigner.com/images/butsamp2.gif
Preview:	GIF89a].........mk......T##....KJ......=.....:..,..(...........k..N..Dus#......ba...+.........~\|.?=...^..0...!.......,....].......'..H..Q.l.p,.D4 ...s..3.d0......&AT...@.\|)....q8hV...Ru]..M..!L....>y......]...p.T%..]..&.bro}e.W..j..............9......._.......+...Rr....c....e....................h....^.X......;%...."........e....s.h..qp.`...........+ .K...C....@......Dl....@.a..l..q!.,..P.......4.0....u+(.....8\...F.-.5. `.D.a....'...v.xP...G.,jr...?..T(5..n.....A....p........ ..._.&.`.i\.P.2.[..j..T(...aG.6..[v.C..Z.*7!.....<.8B+....C.@..k:...i...j..N.2..W.ez-.!....hR....r...z.giA..g....../?..[.w3.Q..~U`...,@.j..&...<P....A@..j.AA.(..9..h..@....gA..<.....DX...@...@..%.(.$.pp^ C. .....d.A:(dQP...8EFi.3p`..IbYT..;

Chrome Cache Entry: 652

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	191
Entropy (8bit):	4.705262579447954
Encrypted:	false
SSDEEP:	3:tIsqDmJS4RKb5sAR+hHiATcvXjXRHRcBHlbRviScJUkRUWJDUU1V0QLEjz5UFDUl:tI9mc4slhohC/vmVR6SWJDNejF2il
MD5:	28B7D5722D774748EB3BEE51D246A9A8
SHA1:	B61B3FA044EA865243E2FF195A81AF1027A9F152
SHA-256:	9B70EAE3BBA1AFC60819D43E37AF558FAB2D1C429DD940DCAB4B35E23BD51989
SHA-512:	9E8D26D7EA3B6ED05348EB75555FDCB001AECC24AB8516AE8058C3B7FA6B791CAB056A31FBEAFEC18C9E97FB39657B07EA7ABE3E3347B9C9D86FC18AF4943796
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" height="24" viewBox="0 0 24 24" width="24"><polygon points="18.79,11.29 13,17.09 13,4 11,4 11,17.09 5.21,11.29 3.79,12.71 12,20.91 20.21,12.71"/></svg>

Chrome Cache Entry: 653

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (603), with no line terminators
Category:	downloaded
Size (bytes):	603
Entropy (8bit):	0.935856668666257
Encrypted:	false
SSDEEP:	3:qVZqp6OqPFFSKPCQ4:qzc6OqPbRM
MD5:	2C739853E3EDFA26869416E3D4E5D369
SHA1:	C263DC1C36C954B252BC7E775E6E82865D9B29B8
SHA-256:	00DAEF3B4A945D15F73EFA05E0CE2CA51F2F8252E1DA8FAE5C2EFB0F6DDDACCE
SHA-512:	EAE3DF357290171698ED241A53688A1907712A53D5AC7B8CA06C618335FE45FC556C9903DCC09283A4DABB6AC896CA67AF1AEAFA528593DB532F2E8586540A86
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-8002465305224946&output=html&adk=1812271804&adf=3025194257&abgtt=1&lmt=1719959146&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=289x816_l%7C327x816_r&format=0x0&url=http%3A%2F%2Fwww.addesigner.com%2F&pra=7&wgl=1&easpi=0&aihb=0&asro=0&ailel=28~30~27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aiael=28~30~27~29~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aifxl=28_16~30_23~27_8~29_10&aiixl=28_4~30_6~27_3~29_5&aslmct=0.7&asamct=0.7&aisaib=1&dt=1719959143946&bpp=5&bdt=5182&idt=2588&shv=r20240626&mjsv=m202406250101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=4420800425693&frm=20&pv=2&ga_vid=641628429.1719959147&ga_sid=1719959147&ga_hid=776677513&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44795922%2C95330414%2C95334511%2C95334527%2C95334571%2C95334579%2C31078668%2C31078670&oid=2&pvsid=911835154683008&tmod=1496751293&uas=0&nvt=2&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=2&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=23&bz=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=2613
Preview:	<html><body style="background-color:transparent"></body></html>

Chrome Cache Entry: 654

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	168781
Entropy (8bit):	7.970624125424753
Encrypted:	false
SSDEEP:	3072:HvSBAOMKk3O1FHwBCZsuMCqq5NuRAuC3Tvbc7yXOOe3:HqHM2HIqsuMQuOTTcW+O6
MD5:	F5E4FDC37173CDDE55EE01FDF6F9B0B6
SHA1:	89B1F7B087877ABB32EC00A8204A9B6111AAC3B2
SHA-256:	6A9B293F14948A84A2F0BD9B6EE86AA6D8877C9D4C5E520DA630B5D92B7D0729
SHA-512:	966F4E5DBEDF1FB23B4A6BBE0A00377DCAC1025CF07A685137B5FCBC844647647575A9C91A1FE90D2755668E7D133D73B3DBE2E9682EC79009AF14EB71124EBF
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C............................................................................"..........................................R.........................!1.A."Qa.q...2...#B....R....$3b.Cr..%......4...Scs.6Ddt..............................+....................!1.AQaq.."2....B..R..............?..UE.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P.QE.E.P

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 3, 2024 00:24:47.064835072 CEST	192.168.2.5	1.1.1.1	0xcc4	Standard query (0)	scamwebsite.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:47.071286917 CEST	192.168.2.5	1.1.1.1	0x76e3	Standard query (0)	scamwebsite.com	65	IN (0x0001)	false
Jul 3, 2024 00:24:47.652255058 CEST	192.168.2.5	1.1.1.1	0x44c6	Standard query (0)	scamwebsite.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:47.652973890 CEST	192.168.2.5	1.1.1.1	0x799	Standard query (0)	scamwebsite.com	65	IN (0x0001)	false
Jul 3, 2024 00:24:49.453063965 CEST	192.168.2.5	1.1.1.1	0x2d00	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:49.453553915 CEST	192.168.2.5	1.1.1.1	0xe13d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 00:24:49.641379118 CEST	192.168.2.5	1.1.1.1	0x2385	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:49.642076015 CEST	192.168.2.5	1.1.1.1	0x2902	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 00:24:50.427676916 CEST	192.168.2.5	1.1.1.1	0xb180	Standard query (0)	scamwebsite.com	65	IN (0x0001)	false
Jul 3, 2024 00:24:50.427676916 CEST	192.168.2.5	1.1.1.1	0x3830	Standard query (0)	scamwebsite.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:52.616241932 CEST	192.168.2.5	1.1.1.1	0xec48	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:52.616643906 CEST	192.168.2.5	1.1.1.1	0xaf62	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 00:24:56.633805990 CEST	192.168.2.5	1.1.1.1	0xbabd	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:56.633979082 CEST	192.168.2.5	1.1.1.1	0xe47e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:00.020423889 CEST	192.168.2.5	1.1.1.1	0xd7f9	Standard query (0)	youtu.be	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:00.021015882 CEST	192.168.2.5	1.1.1.1	0xc623	Standard query (0)	youtu.be	65	IN (0x0001)	false
Jul 3, 2024 00:25:01.375605106 CEST	192.168.2.5	1.1.1.1	0x5999	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.376183987 CEST	192.168.2.5	1.1.1.1	0x2bae	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:02.922003031 CEST	192.168.2.5	1.1.1.1	0xe918	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.922276020 CEST	192.168.2.5	1.1.1.1	0xa333	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:03.256587982 CEST	192.168.2.5	1.1.1.1	0x30ac	Standard query (0)	rr4---sn-ab5l6nk6.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.257128000 CEST	192.168.2.5	1.1.1.1	0xc448	Standard query (0)	rr4---sn-ab5l6nk6.googlevideo.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:03.933284044 CEST	192.168.2.5	1.1.1.1	0x7daf	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.933736086 CEST	192.168.2.5	1.1.1.1	0xf207	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:10.892641068 CEST	192.168.2.5	1.1.1.1	0xaf04	Standard query (0)	rr5---sn-ab5l6nkd.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:10.892869949 CEST	192.168.2.5	1.1.1.1	0x9371	Standard query (0)	rr5---sn-ab5l6nkd.googlevideo.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:12.130826950 CEST	192.168.2.5	1.1.1.1	0x2efa	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:12.131223917 CEST	192.168.2.5	1.1.1.1	0xd09f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 00:25:12.625324965 CEST	192.168.2.5	1.1.1.1	0x4a19	Standard query (0)	rr5---sn-ab5l6nkd.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:12.625766039 CEST	192.168.2.5	1.1.1.1	0x70f	Standard query (0)	rr5---sn-ab5l6nkd.googlevideo.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:13.015487909 CEST	192.168.2.5	1.1.1.1	0xf2d4	Standard query (0)	rr1---sn-q4flrnee.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.015676975 CEST	192.168.2.5	1.1.1.1	0xebef	Standard query (0)	rr1---sn-q4flrnee.googlevideo.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:13.741166115 CEST	192.168.2.5	1.1.1.1	0xce30	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.741327047 CEST	192.168.2.5	1.1.1.1	0x91a1	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:14.107696056 CEST	192.168.2.5	1.1.1.1	0x4984	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:14.107837915 CEST	192.168.2.5	1.1.1.1	0x6fab	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:14.318196058 CEST	192.168.2.5	1.1.1.1	0xa667	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:14.318341970 CEST	192.168.2.5	1.1.1.1	0xd2cb	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:16.103382111 CEST	192.168.2.5	1.1.1.1	0x79c9	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:16.103687048 CEST	192.168.2.5	1.1.1.1	0x6487	Standard query (0)	youtube.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:16.255222082 CEST	192.168.2.5	1.1.1.1	0x6ee0	Standard query (0)	rr3---sn-q4fl6nde.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:16.255378008 CEST	192.168.2.5	1.1.1.1	0xf1c2	Standard query (0)	rr3---sn-q4fl6nde.googlevideo.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:17.085869074 CEST	192.168.2.5	1.1.1.1	0x62b0	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:17.086036921 CEST	192.168.2.5	1.1.1.1	0x3d78	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 00:25:17.100581884 CEST	192.168.2.5	1.1.1.1	0x3501	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:17.100740910 CEST	192.168.2.5	1.1.1.1	0xec1c	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:17.288074970 CEST	192.168.2.5	1.1.1.1	0xb9fd	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:17.288219929 CEST	192.168.2.5	1.1.1.1	0xfc40	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:18.785911083 CEST	192.168.2.5	1.1.1.1	0xc1cf	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:18.786062002 CEST	192.168.2.5	1.1.1.1	0x751b	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 00:25:19.725270987 CEST	192.168.2.5	1.1.1.1	0xac66	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:19.725755930 CEST	192.168.2.5	1.1.1.1	0x74eb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:20.774626017 CEST	192.168.2.5	1.1.1.1	0x1e69	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:20.774774075 CEST	192.168.2.5	1.1.1.1	0x3211	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:37.852696896 CEST	192.168.2.5	1.1.1.1	0xac80	Standard query (0)	www.addesigner.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:37.852896929 CEST	192.168.2.5	1.1.1.1	0x7686	Standard query (0)	www.addesigner.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:42.361028910 CEST	192.168.2.5	1.1.1.1	0xb309	Standard query (0)	www.addesigner.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:42.361186028 CEST	192.168.2.5	1.1.1.1	0x687	Standard query (0)	www.addesigner.com	65	IN (0x0001)	false
Jul 3, 2024 00:25:42.867085934 CEST	192.168.2.5	1.1.1.1	0x8b52	Standard query (0)	www.addesigner.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:43.866159916 CEST	192.168.2.5	1.1.1.1	0x747d	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:43.866535902 CEST	192.168.2.5	1.1.1.1	0xe091	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 00:25:48.100601912 CEST	192.168.2.5	1.1.1.1	0xa2fa	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:48.100965023 CEST	192.168.2.5	1.1.1.1	0xe28f	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 3, 2024 00:25:52.547427893 CEST	192.168.2.5	1.1.1.1	0x97b3	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:52.547561884 CEST	192.168.2.5	1.1.1.1	0x10d	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 3, 2024 00:26:00.803915024 CEST	192.168.2.5	1.1.1.1	0x1400	Standard query (0)	rr4---sn-hgn7rn7y.googlevideo.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:00.804090977 CEST	192.168.2.5	1.1.1.1	0x1529	Standard query (0)	rr4---sn-hgn7rn7y.googlevideo.com	65	IN (0x0001)	false
Jul 3, 2024 00:26:01.644001961 CEST	192.168.2.5	1.1.1.1	0x1136	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.644177914 CEST	192.168.2.5	1.1.1.1	0x322f	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 3, 2024 00:26:34.394414902 CEST	192.168.2.5	1.1.1.1	0x99e3	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:34.394620895 CEST	192.168.2.5	1.1.1.1	0x8a02	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 3, 2024 00:26:35.392503023 CEST	192.168.2.5	1.1.1.1	0x509b	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:35.392543077 CEST	192.168.2.5	1.1.1.1	0xa494	Standard query (0)	play.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 3, 2024 00:24:47.100435019 CEST	1.1.1.1	192.168.2.5	0xcc4	No error (0)	scamwebsite.com		198.51.233.1	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:47.667665005 CEST	1.1.1.1	192.168.2.5	0x44c6	No error (0)	scamwebsite.com		198.51.233.1	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:49.462018967 CEST	1.1.1.1	192.168.2.5	0x2d00	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:49.462682009 CEST	1.1.1.1	192.168.2.5	0xe13d	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 00:24:49.650427103 CEST	1.1.1.1	192.168.2.5	0x2385	No error (0)	googleads.g.doubleclick.net		142.250.185.194	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:49.651226997 CEST	1.1.1.1	192.168.2.5	0x2902	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 00:24:50.462265968 CEST	1.1.1.1	192.168.2.5	0x3830	No error (0)	scamwebsite.com		198.51.233.1	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:52.624907017 CEST	1.1.1.1	192.168.2.5	0xec48	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:52.625423908 CEST	1.1.1.1	192.168.2.5	0xaf62	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 00:24:56.640459061 CEST	1.1.1.1	192.168.2.5	0xbabd	No error (0)	www.google.com		216.58.212.132	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:24:56.640780926 CEST	1.1.1.1	192.168.2.5	0xe47e	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:00.028292894 CEST	1.1.1.1	192.168.2.5	0xd7f9	No error (0)	youtu.be		142.250.186.78	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:00.028697014 CEST	1.1.1.1	192.168.2.5	0xc623	No error (0)	youtu.be			65	IN (0x0001)	false
Jul 3, 2024 00:25:01.383358955 CEST	1.1.1.1	192.168.2.5	0x2bae	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383358955 CEST	1.1.1.1	192.168.2.5	0x2bae	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		216.58.212.142	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.383486986 CEST	1.1.1.1	192.168.2.5	0x5999	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:01.734487057 CEST	1.1.1.1	192.168.2.5	0xf70b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:01.734487057 CEST	1.1.1.1	192.168.2.5	0xf70b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		216.58.212.150	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.928962946 CEST	1.1.1.1	192.168.2.5	0xe918	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.953120947 CEST	1.1.1.1	192.168.2.5	0xc559	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:02.953120947 CEST	1.1.1.1	192.168.2.5	0xc559	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.263791084 CEST	1.1.1.1	192.168.2.5	0x30ac	No error (0)	rr4---sn-ab5l6nk6.googlevideo.com	rr4.sn-ab5l6nk6.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:03.263791084 CEST	1.1.1.1	192.168.2.5	0x30ac	No error (0)	rr4.sn-ab5l6nk6.googlevideo.com		74.125.0.137	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.279130936 CEST	1.1.1.1	192.168.2.5	0xc448	No error (0)	rr4---sn-ab5l6nk6.googlevideo.com	rr4.sn-ab5l6nk6.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:03.279130936 CEST	1.1.1.1	192.168.2.5	0xc448	No error (0)	rr4.sn-ab5l6nk6.googlevideo.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		172.217.23.118	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:03.941778898 CEST	1.1.1.1	192.168.2.5	0x7daf	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:10.899938107 CEST	1.1.1.1	192.168.2.5	0xaf04	No error (0)	rr5---sn-ab5l6nkd.googlevideo.com	rr5.sn-ab5l6nkd.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:10.899938107 CEST	1.1.1.1	192.168.2.5	0xaf04	No error (0)	rr5.sn-ab5l6nkd.googlevideo.com		74.125.0.170	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:10.900485992 CEST	1.1.1.1	192.168.2.5	0x9371	No error (0)	rr5---sn-ab5l6nkd.googlevideo.com	rr5.sn-ab5l6nkd.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:10.900485992 CEST	1.1.1.1	192.168.2.5	0x9371	No error (0)	rr5.sn-ab5l6nkd.googlevideo.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:12.140068054 CEST	1.1.1.1	192.168.2.5	0x2efa	No error (0)	googleads.g.doubleclick.net		216.58.212.130	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:12.140397072 CEST	1.1.1.1	192.168.2.5	0xd09f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 00:25:12.634833097 CEST	1.1.1.1	192.168.2.5	0x4a19	No error (0)	rr5---sn-ab5l6nkd.googlevideo.com	rr5.sn-ab5l6nkd.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:12.634833097 CEST	1.1.1.1	192.168.2.5	0x4a19	No error (0)	rr5.sn-ab5l6nkd.googlevideo.com		74.125.0.170	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:12.636879921 CEST	1.1.1.1	192.168.2.5	0x70f	No error (0)	rr5---sn-ab5l6nkd.googlevideo.com	rr5.sn-ab5l6nkd.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:12.636879921 CEST	1.1.1.1	192.168.2.5	0x70f	No error (0)	rr5.sn-ab5l6nkd.googlevideo.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:13.083302021 CEST	1.1.1.1	192.168.2.5	0xebef	No error (0)	rr1---sn-q4flrnee.googlevideo.com	rr1.sn-q4flrnee.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:13.083302021 CEST	1.1.1.1	192.168.2.5	0xebef	No error (0)	rr1.sn-q4flrnee.googlevideo.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:13.084340096 CEST	1.1.1.1	192.168.2.5	0xf2d4	No error (0)	rr1---sn-q4flrnee.googlevideo.com	rr1.sn-q4flrnee.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:13.084340096 CEST	1.1.1.1	192.168.2.5	0xf2d4	No error (0)	rr1.sn-q4flrnee.googlevideo.com		209.85.165.198	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.751535892 CEST	1.1.1.1	192.168.2.5	0xce30	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:13.753215075 CEST	1.1.1.1	192.168.2.5	0x91a1	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:13.753215075 CEST	1.1.1.1	192.168.2.5	0x91a1	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:14.116506100 CEST	1.1.1.1	192.168.2.5	0x4984	No error (0)	play.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:14.327188969 CEST	1.1.1.1	192.168.2.5	0xd2cb	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:14.328094006 CEST	1.1.1.1	192.168.2.5	0xa667	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:14.328094006 CEST	1.1.1.1	192.168.2.5	0xa667	No error (0)	photos-ugc.l.googleusercontent.com		216.58.212.129	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:16.113065004 CEST	1.1.1.1	192.168.2.5	0x79c9	No error (0)	youtube.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:16.113392115 CEST	1.1.1.1	192.168.2.5	0x6487	No error (0)	youtube.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:16.264770985 CEST	1.1.1.1	192.168.2.5	0x6ee0	No error (0)	rr3---sn-q4fl6nde.googlevideo.com	rr3.sn-q4fl6nde.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:16.264770985 CEST	1.1.1.1	192.168.2.5	0x6ee0	No error (0)	rr3.sn-q4fl6nde.googlevideo.com		173.194.140.232	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:16.265511036 CEST	1.1.1.1	192.168.2.5	0xf1c2	No error (0)	rr3---sn-q4fl6nde.googlevideo.com	rr3.sn-q4fl6nde.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:16.265511036 CEST	1.1.1.1	192.168.2.5	0xf1c2	No error (0)	rr3.sn-q4fl6nde.googlevideo.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:17.092828035 CEST	1.1.1.1	192.168.2.5	0x62b0	No error (0)	googleads.g.doubleclick.net		142.250.185.226	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:17.094027042 CEST	1.1.1.1	192.168.2.5	0x3d78	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 00:25:17.107382059 CEST	1.1.1.1	192.168.2.5	0x3501	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:17.107382059 CEST	1.1.1.1	192.168.2.5	0x3501	No error (0)	photos-ugc.l.googleusercontent.com		216.58.212.129	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:17.107559919 CEST	1.1.1.1	192.168.2.5	0xec1c	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:17.297765017 CEST	1.1.1.1	192.168.2.5	0xb9fd	No error (0)	play.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:18.795908928 CEST	1.1.1.1	192.168.2.5	0xc1cf	No error (0)	static.doubleclick.net		142.250.184.198	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:19.734635115 CEST	1.1.1.1	192.168.2.5	0xac66	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:19.735157013 CEST	1.1.1.1	192.168.2.5	0x74eb	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:20.484338999 CEST	1.1.1.1	192.168.2.5	0xa897	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:20.484338999 CEST	1.1.1.1	192.168.2.5	0xa897	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:20.784590006 CEST	1.1.1.1	192.168.2.5	0x3211	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:20.785120010 CEST	1.1.1.1	192.168.2.5	0x1e69	No error (0)	www.google.com		142.250.185.196	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:38.317787886 CEST	1.1.1.1	192.168.2.5	0xac80	No error (0)	www.addesigner.com	addesigner.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:38.317787886 CEST	1.1.1.1	192.168.2.5	0xac80	No error (0)	addesigner.com		107.161.28.66	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:38.335710049 CEST	1.1.1.1	192.168.2.5	0x7686	No error (0)	www.addesigner.com	addesigner.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:42.818346977 CEST	1.1.1.1	192.168.2.5	0x687	No error (0)	www.addesigner.com	addesigner.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:42.967974901 CEST	1.1.1.1	192.168.2.5	0xb309	No error (0)	www.addesigner.com	addesigner.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:42.967974901 CEST	1.1.1.1	192.168.2.5	0xb309	No error (0)	addesigner.com		107.161.28.66	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:43.324537992 CEST	1.1.1.1	192.168.2.5	0x8b52	No error (0)	www.addesigner.com	addesigner.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:25:43.324537992 CEST	1.1.1.1	192.168.2.5	0x8b52	No error (0)	addesigner.com		107.161.28.66	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:43.875210047 CEST	1.1.1.1	192.168.2.5	0x747d	No error (0)	googleads.g.doubleclick.net		142.250.185.66	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:43.875581980 CEST	1.1.1.1	192.168.2.5	0xe091	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 00:25:48.107672930 CEST	1.1.1.1	192.168.2.5	0xa2fa	No error (0)	googleads.g.doubleclick.net		142.250.186.162	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:48.108019114 CEST	1.1.1.1	192.168.2.5	0xe28f	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 3, 2024 00:25:52.555727005 CEST	1.1.1.1	192.168.2.5	0x97b3	No error (0)	www.google.com		142.250.74.196	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:52.558933973 CEST	1.1.1.1	192.168.2.5	0x10d	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 3, 2024 00:25:58.438429117 CEST	1.1.1.1	192.168.2.5	0x11d2	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:25:58.438429117 CEST	1.1.1.1	192.168.2.5	0x11d2	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:00.811364889 CEST	1.1.1.1	192.168.2.5	0x1400	No error (0)	rr4---sn-hgn7rn7y.googlevideo.com	rr4.sn-hgn7rn7y.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:26:00.811364889 CEST	1.1.1.1	192.168.2.5	0x1400	No error (0)	rr4.sn-hgn7rn7y.googlevideo.com		172.217.133.9	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:00.811528921 CEST	1.1.1.1	192.168.2.5	0x1529	No error (0)	rr4---sn-hgn7rn7y.googlevideo.com	rr4.sn-hgn7rn7y.googlevideo.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:26:00.811528921 CEST	1.1.1.1	192.168.2.5	0x1529	No error (0)	rr4.sn-hgn7rn7y.googlevideo.com			65	IN (0x0001)	false
Jul 3, 2024 00:26:01.653548002 CEST	1.1.1.1	192.168.2.5	0x322f	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653548002 CEST	1.1.1.1	192.168.2.5	0x322f	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:01.653563023 CEST	1.1.1.1	192.168.2.5	0x1136	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:27.912039042 CEST	1.1.1.1	192.168.2.5	0x39e0	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.34	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:27.912039042 CEST	1.1.1.1	192.168.2.5	0x39e0	No error (0)	edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com		217.20.57.18	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:34.401576042 CEST	1.1.1.1	192.168.2.5	0x99e3	No error (0)	play.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jul 3, 2024 00:26:35.402168989 CEST	1.1.1.1	192.168.2.5	0x509b	No error (0)	play.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	198.51.233.1	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:24:47.108823061 CEST	430	OUT	GET / HTTP/1.1 Host: scamwebsite.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:24:47.638705015 CEST	362	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 02 Jul 2024 22:24:47 GMT Content-Type: text/html Content-Length: 166 Connection: keep-alive Location: https://scamwebsite.com/ Server: neocities Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>openresty</center></body></html>
Jul 3, 2024 00:25:32.778901100 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	50163	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:39.776396990 CEST	459	OUT	GET / HTTP/1.1 Host: www.addesigner.com Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:39.993689060 CEST	773	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:39 GMT Server: Apache/2.2.15 (CentOS) Accept-Ranges: bytes Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 37 0d 0a 3c 68 74 6d 6c 3e 0a 0d 0a 37 0d 0a 3c 68 65 61 64 3e 0a 0d 0a 34 64 0d 0a 3c 74 69 74 6c 65 3e 41 64 44 65 73 69 67 6e 65 72 2e 63 6f 6d 20 2d 20 44 65 73 69 67 6e 20 61 6e 64 20 64 6f 77 6e 6c 6f 61 64 20 66 72 65 65 20 62 61 6e 6e 65 72 73 20 69 6e 20 73 65 63 6f 6e 64 73 21 3c 2f 74 69 74 6c 65 3e 0a 0d 0a 66 32 0d 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 46 52 45 45 20 62 61 6e 6e 65 72 20 61 64 73 20 66 6f 72 20 79 6f 75 72 20 77 65 62 73 69 74 65 20 69 6e 20 73 65 63 6f 6e 64 73 21 20 43 68 6f 6f 73 65 20 66 72 6f 6d 20 39 31 20 75 6e 69 71 75 65 2c 20 66 75 6c 6c 79 2d 61 6e 69 6d 61 74 65 64 20 64 65 73 69 67 6e 73 2c 20 63 75 73 74 6f 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 74 65 78 74 20 61 6e 64 20 66 6f 6e 74 73 20 79 6f 75 20 77 61 6e 74 2e 20 50 65 72 66 65 63 74 20 66 6f 72 20 62 61 6e 6e 65 72 20 65 78 63 68 61 6e 67 65 73 20 6c 69 6b 65 20 4c 69 6e 6b 45 78 63 68 61 6e 67 65 20 6f 72 20 66 6f 72 20 61 6e [TRUNCATED] Data Ascii: 7<html>7<head>4d<title>AdDesigner.com - Design and download free banners in seconds!</title>f2<meta name="description" content="FREE banner ads for your website in seconds! Choose from 91 unique, fully-animated designs, customized with the text and fonts you want. Perfect for banner exchanges like LinkExchange or for anywhere else!">d7<meta name="keywords" content="free banners, free banner, banner ads, free ads, banner ad, website promotion, advertising, free ads, banner exchange, AdDesigner.com, ad exchange, website ads, web ads, web banners">
Jul 3, 2024 00:25:40.011420012 CEST	1236	IN	Data Raw: 38 0d 0a 3c 2f 68 65 61 64 3e 0a 0d 0a 35 37 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 23 30 30 30 30 30 30 22 20 6c 69 6e 6b 3d 22 23 46 46 46 46 46 46 22 20 76 6c 69 6e 6b 3d 22 23 46 46 46 46 46 46 22 20 61 6c 69 6e 6b 3d 22 23 46 46 Data Ascii: 8</head>57<body bgcolor="#000000" link="#FFFFFF" vlink="#FFFFFF" alink="#FFFFFF" text="#99FFFF">56<style type="text/css">...a:hover {color:#FFFF00;}a:link {color:#FFFFFF;}--></style>11f<script language="JavaScript">5
Jul 3, 2024 00:25:40.011586905 CEST	224	IN	Data Raw: 2f 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 6c 6f 67 6f 2e 67 69 66 22 20 77 69 64 74 68 3d 22 31 36 30 22 20 68 65 69 67 68 74 3d 22 31 30 30 22 20 62 6f 72 64 65 72 3d 22 30 22 20 61 6c 74 3d 22 41 64 44 65 73 69 67 6e 65 72 Data Ascii: /"><img src="/images/logo.gif" width="160" height="100" border="0" alt="AdDesigner.com - Design a banner ad in seconds!"></a></td>a </tr>a <tr> 19 <td valign="top"> 56 <table width="468"
Jul 3, 2024 00:25:40.011596918 CEST	1236	IN	Data Raw: 20 62 6f 72 64 65 72 3d 22 30 22 20 63 65 6c 6c 73 70 61 63 69 6e 67 3d 22 30 22 20 63 65 6c 6c 70 61 64 64 69 6e 67 3d 22 30 22 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 0a 0d 0a 31 64 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 74 72 20 76 61 Data Ascii: border="0" cellspacing="0" cellpadding="0" align="center">1d <tr valign="top"> 12 <td> 159 <div align="center"><hr><script type="text/javascript">...google_ad_client = 'pub-8002465305224946'
Jul 3, 2024 00:25:40.011632919 CEST	1236	IN	Data Raw: 20 77 68 61 74 20 79 6f 75 72 20 61 64 20 77 69 6c 6c 20 6c 6f 6f 6b 20 6c 69 6b 65 22 3e 3c 2f 61 3e 3c 69 6d 67 0a 0d 0a 33 36 0d 0a 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 62 75 74 2d 6c 69 6e 65 32 2e 67 69 66 22 20 77 69 64 74 68 3d 22 32 32 Data Ascii: what your ad will look like"></a><img36src="/images/but-line2.gif" width="22" height="18"><a35href="/design.shtml" onMouseOver="mousein('design')"3bonMouseOut="mouseout('design')" onFocus="this.blur()"><img40name="design"
Jul 3, 2024 00:25:40.011645079 CEST	1236	IN	Data Raw: 0a 0d 0a 32 34 0d 0a 62 6f 72 64 65 72 3d 22 30 22 20 61 6c 74 3d 22 47 65 74 20 68 65 6c 70 21 22 3e 3c 2f 61 3e 3c 69 6d 67 0a 0d 0a 33 36 0d 0a 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 62 75 74 2d 6c 69 6e 65 32 2e 67 69 66 22 20 77 69 64 74 68 Data Ascii: 24border="0" alt="Get help!"></a><img36src="/images/but-line2.gif" width="22" height="18"><a39href="/linktous.shtml" onMouseOver="mousein('linktous')"3donMouseOut="mouseout('linktous')" onFocus="this.blur()"><img42name
Jul 3, 2024 00:25:40.011656046 CEST	672	IN	Data Raw: 20 63 6f 6c 6f 72 3d 22 23 46 46 46 46 46 46 22 3e 20 0a 0d 0a 35 30 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 6e 74 3e 3c 2f 62 3e 3c 2f 66 6f 6e 74 3e 69 73 20 61 20 75 6e 69 71 75 65 20 3c 62 3e 46 52 45 45 3c 2f 62 3e 20 73 65 72 76 69 Data Ascii: color="#FFFFFF"> 50 </font></b></font>is a unique <b>FREE</b> service that gives you the 52 power to design and download professional-quality, animated banner ads 5c quickly and easily. </font><font f
Jul 3, 2024 00:25:40.011667013 CEST	1236	IN	Data Raw: 0a 35 63 0d 0a 20 20 20 20 20 20 20 20 20 20 72 61 74 65 73 3c 2f 62 3e 20 28 77 68 69 63 68 20 6d 65 61 6e 73 20 6d 6f 72 65 20 74 72 61 66 66 69 63 20 74 6f 20 79 6f 75 72 20 77 65 62 73 69 74 65 29 2c 20 74 6f 20 62 75 69 6c 64 20 61 20 3c 62 Data Ascii: 5c rates</b> (which means more traffic to your website), to build a <b>professional 51 image</b> for your website, and to create a <b> favorable and lasting 4a impression</b> on everyone who sees your ba
Jul 3, 2024 00:25:40.011939049 CEST	1236	IN	Data Raw: 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 32 62 75 6c 6c 65 74 2e 67 69 66 22 20 77 69 64 74 68 3d 22 31 36 22 20 68 65 69 67 68 74 3d 22 32 30 Data Ascii: lvetica, sans-serif" size="2"><img src="/images/2bullet.gif" width="16" height="20"><b> 150 Customize your ad </b>by specifying exactly what you want your ad to 112 say<br>151 <img src="
Jul 3, 2024 00:25:40.011949062 CEST	121	IN	Data Raw: 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 0d 0a 31 0d 0a 0a 0d 0a 35 33 0d 0a 20 20 20 20 20 20 20 20 3c 70 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 22 20 73 69 7a 65 3d 22 Data Ascii: /font></p>153 <p><font face="Arial, Helvetica, sans-serif" size="2">And that's not all, 56
Jul 3, 2024 00:25:40.026715994 CEST	1236	IN	Data Raw: 20 62 65 63 61 75 73 65 20 75 6e 6c 69 6b 65 20 61 6e 79 20 6f 74 68 65 72 20 62 61 6e 6e 65 72 20 61 64 20 64 65 73 69 67 6e 20 73 65 72 76 69 63 65 2c 20 41 64 44 65 73 69 67 6e 65 72 2e 63 6f 6d 20 61 63 74 75 61 6c 6c 79 20 0a 0d 0a 35 31 0d Data Ascii: because unlike any other banner ad design service, AdDesigner.com actually 51 customizes </font><font face="Arial, Helvetica, sans-serif" size="2"> 61 your ad for the banner service (like bCentral's LinkExchange or

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	50175	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.106004000 CEST	388	OUT	GET /images/inf-samp.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:41.335623980 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:40 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d3b-5a6-38c0fed506900" Accept-Ranges: bytes Content-Length: 1446 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 44 44 44 75 75 75 ba ba ba 30 30 30 10 10 10 ce ce ce ee ee ee 20 20 20 aa aa aa 89 89 89 99 99 99 d9 d9 d9 de de de 65 65 65 55 55 55 67 67 67 c9 c9 c9 d6 d6 d6 8b 8b 8b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df df 84 20 61 95 1b 76 85 01 e4 68 98 c7 0a 02 65 80 30 02 77 34 09 05 55 02 89 70 8d 8e 6d 0c 01 92 0c 55 03 01 81 39 09 92 04 47 02 01 03 31 04 01 65 a2 2f 96 0a 35 08 01 8c 52 01 9c 8f b0 b1 63 10 01 08 03 0e 98 53 96 b9 37 96 0c bc 30 ae 31 9e a0 30 a5 64 c7 2d b4 0b 35 07 08 74 53 c2 b2 d3 d4 5a 96 cc 25 76 24 da 27 83 23 7d 28 05 d0 85 d9 b9 bb 23 8b db e4 27 7d ac e7 ec c0 00 ed 22 d2 29 e2 24 c4 27 eb df 85 c9 de 2f 02 [TRUNCATED] Data Ascii: GIF89aDDDuuu000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn avhe0w4UpmU9G1e/5RcS7010d-5tSZ%v$'#}(#'}")$'/=H n&mc"J<`$\(bw:p`Q>Dp"R&ruGR;{(0uO?}JlC\2'Y%80S0:vUUFY_x\:D#Pb$M1E%aSJ(c5P@OQ>P(j-El$jAr[k`IXxIDz#2n{fxtOyb]3T-Yn#Vg_@IkbVr,[OxD#\|rBdqIb"hE0(0B(wZ^Sh%IfpM$qngF\e`tk`X\Y%kP(4H(.c0PP2Ct3@O{96Lk[>xI(b*gG~zbZ=lN\|zK#X0eqbM{id3 +,
Jul 3, 2024 00:25:41.335637093 CEST	466	IN	Data Raw: e0 c0 33 b2 76 ec f1 09 2e 11 80 9e 01 b8 51 92 1c 6f 26 8b 6b c0 00 02 b8 b9 22 03 e3 11 1b b0 4a cf 81 25 1d 4c 05 30 90 c8 03 03 cc fb 90 76 dc 15 6c 82 5a 30 e3 37 ed 02 0c 80 32 16 8b 44 f3 d6 ef 7b 01 d3 2b 72 7d 13 fa da 72 7c 81 86 78 6e Data Ascii: 3v.Qo&k"J%L0vlZ072D{+r}r\|xnth?"Ba#Tm:3`SU@DP!-1G.]y1BoIB$Ubw&<3;qURmb:^`I\O/b"p;{4Bq$pS6@
Jul 3, 2024 00:25:41.337587118 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:40 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d3b-5a6-38c0fed506900" Accept-Ranges: bytes Content-Length: 1446 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 44 44 44 75 75 75 ba ba ba 30 30 30 10 10 10 ce ce ce ee ee ee 20 20 20 aa aa aa 89 89 89 99 99 99 d9 d9 d9 de de de 65 65 65 55 55 55 67 67 67 c9 c9 c9 d6 d6 d6 8b 8b 8b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df df 84 20 61 95 1b 76 85 01 e4 68 98 c7 0a 02 65 80 30 02 77 34 09 05 55 02 89 70 8d 8e 6d 0c 01 92 0c 55 03 01 81 39 09 92 04 47 02 01 03 31 04 01 65 a2 2f 96 0a 35 08 01 8c 52 01 9c 8f b0 b1 63 10 01 08 03 0e 98 53 96 b9 37 96 0c bc 30 ae 31 9e a0 30 a5 64 c7 2d b4 0b 35 07 08 74 53 c2 b2 d3 d4 5a 96 cc 25 76 24 da 27 83 23 7d 28 05 d0 85 d9 b9 bb 23 8b db e4 27 7d ac e7 ec c0 00 ed 22 d2 29 e2 24 c4 27 eb df 85 c9 de 2f 02 [TRUNCATED] Data Ascii: GIF89aDDDuuu000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn avhe0w4UpmU9G1e/5RcS7010d-5tSZ%v$'#}(#'}")$'/=H n&mc"J<`$\(bw:p`Q>Dp"R&ruGR;{(0uO?}JlC\2'Y%80S0:vUUFY_x\:D#Pb$M1E%aSJ(c5P@OQ>P(j-El$jAr[k`IXxIDz#2n{fxtOyb]3T-Yn#Vg_@IkbVr,[OxD#\|rBdqIb"hE0(0B(wZ^Sh%IfpM$qngF\e`tk`X\Y%kP(4H(.c0PP2Ct3@O{96Lk[>xI(b*gG~zbZ=lN\|zK#X0eqbM{id3 +,
Jul 3, 2024 00:25:41.340096951 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:40 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d3b-5a6-38c0fed506900" Accept-Ranges: bytes Content-Length: 1446 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 44 44 44 75 75 75 ba ba ba 30 30 30 10 10 10 ce ce ce ee ee ee 20 20 20 aa aa aa 89 89 89 99 99 99 d9 d9 d9 de de de 65 65 65 55 55 55 67 67 67 c9 c9 c9 d6 d6 d6 8b 8b 8b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df df 84 20 61 95 1b 76 85 01 e4 68 98 c7 0a 02 65 80 30 02 77 34 09 05 55 02 89 70 8d 8e 6d 0c 01 92 0c 55 03 01 81 39 09 92 04 47 02 01 03 31 04 01 65 a2 2f 96 0a 35 08 01 8c 52 01 9c 8f b0 b1 63 10 01 08 03 0e 98 53 96 b9 37 96 0c bc 30 ae 31 9e a0 30 a5 64 c7 2d b4 0b 35 07 08 74 53 c2 b2 d3 d4 5a 96 cc 25 76 24 da 27 83 23 7d 28 05 d0 85 d9 b9 bb 23 8b db e4 27 7d ac e7 ec c0 00 ed 22 d2 29 e2 24 c4 27 eb df 85 c9 de 2f 02 [TRUNCATED] Data Ascii: GIF89aDDDuuu000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn avhe0w4UpmU9G1e/5RcS7010d-5tSZ%v$'#}(#'}")$'/=H n&mc"J<`$\(bw:p`Q>Dp"R&ruGR;{(0uO?}JlC\2'Y%80S0:vUUFY_x\:D#Pb$M1E%aSJ(c5P@OQ>P(j-El$jAr[k`IXxIDz#2n{fxtOyb]3T-Yn#Vg_@IkbVr,[OxD#\|rBdqIb"hE0(0B(wZ^Sh%IfpM$qngF\e`tk`X\Y%kP(4H(.c0PP2Ct3@O{96Lk[>xI(b*gG~zbZ=lN\|zK#X0eqbM{id3 +,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	50181	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.127501965 CEST	384	OUT	GET /images/logo.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	50180	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.127553940 CEST	387	OUT	GET /images/inf-des.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	50179	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.127621889 CEST	388	OUT	GET /images/inf-tips.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	50178	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.127661943 CEST	388	OUT	GET /images/inf-free.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	50177	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.127712011 CEST	388	OUT	GET /images/inf-help.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:41.338196993 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:40 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:05 GMT ETag: "880d39-4c4-38c0fed5fab40" Accept-Ranges: bytes Content-Length: 1220 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba de de de 30 30 30 10 10 10 ee ee ee 20 20 20 99 99 99 d9 d9 d9 65 65 65 89 89 89 ce ce ce 55 55 55 aa aa aa 67 67 67 8b 8b 8b d6 d6 d6 c9 c9 c9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a 9d 1e 0c 0e b7 81 81 ad 95 97 0e 83 84 fa 4d ef fb ff 6c 02 08 01 84 02 36 01 04 80 55 88 25 03 01 86 68 02 01 10 8a 95 96 97 57 92 01 05 04 84 0d 28 8e 90 23 a1 22 8c 60 92 03 62 a6 a3 8f 65 a8 00 0f 01 9f 98 b4 b5 b6 45 09 84 0c 22 09 10 73 bc 7c 00 a4 24 c3 88 78 70 23 06 a9 28 06 7a 26 78 24 09 c1 2d d2 c8 23 09 d6 00 af c0 ce 2f 6e 2e d8 27 d2 26 bf c2 cb a5 04 c7 22 c3 00 ca cf cb 09 e5 26 df 77 dd c9 f2 2a 76 d7 c1 db 25 d2 f6 bc [TRUNCATED] Data Ascii: GIF89auuuDDD000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zMl6U%hW(#"`beE"s\|$xp#(z&x$-#/n.'&"&wv%HIN0 `<Lid9&9C(X@yg PvLA%DnU1al@APD%:TD'bx>SCriI<-;b JjA9imP?%([TtWV cKE%df$9wI)lk @`&"fr2DK:d^?@,0!)SvUL" ~AfRymI&g5U+KI$4@92KFglu#qy0pOm#xcpTBFM2rN`$eNL) #S9"yI6$8QI"&V@\8r<0p$W9oGBG6mi+UIcAn)]hI!_@ynmB^))mJXQflm'X8wyd,][W;,nwX0 z,eJ\|I[YLU_L}
Jul 3, 2024 00:25:41.338201046 CEST	240	IN	Data Raw: 54 42 56 20 21 0b 93 c6 da fc 06 c1 6f 38 e9 62 14 9b cb e8 a5 93 3f 14 bf 36 95 08 70 69 84 8c b8 eb 4c c2 14 1c db b8 cc 98 56 71 9d 78 71 c6 73 4c a7 a9 bd 64 11 15 eb c6 1f f9 05 93 97 2e 6f f5 f1 1c af 0c a3 72 b5 f1 36 6c f5 d5 4b d0 13 cd Data Ascii: TBV !o8b?6piLVqxqsLd.or6lK45@(5:4)hMG*4N5#`-+Qx7x`_w~.AG:.~n[dD@o$7/S;
Jul 3, 2024 00:25:41.339673042 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:40 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:05 GMT ETag: "880d39-4c4-38c0fed5fab40" Accept-Ranges: bytes Content-Length: 1220 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba de de de 30 30 30 10 10 10 ee ee ee 20 20 20 99 99 99 d9 d9 d9 65 65 65 89 89 89 ce ce ce 55 55 55 aa aa aa 67 67 67 8b 8b 8b d6 d6 d6 c9 c9 c9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a 9d 1e 0c 0e b7 81 81 ad 95 97 0e 83 84 fa 4d ef fb ff 6c 02 08 01 84 02 36 01 04 80 55 88 25 03 01 86 68 02 01 10 8a 95 96 97 57 92 01 05 04 84 0d 28 8e 90 23 a1 22 8c 60 92 03 62 a6 a3 8f 65 a8 00 0f 01 9f 98 b4 b5 b6 45 09 84 0c 22 09 10 73 bc 7c 00 a4 24 c3 88 78 70 23 06 a9 28 06 7a 26 78 24 09 c1 2d d2 c8 23 09 d6 00 af c0 ce 2f 6e 2e d8 27 d2 26 bf c2 cb a5 04 c7 22 c3 00 ca cf cb 09 e5 26 df 77 dd c9 f2 2a 76 d7 c1 db 25 d2 f6 bc [TRUNCATED] Data Ascii: GIF89auuuDDD000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zMl6U%hW(#"`beE"s\|$xp#(z&x$-#/n.'&"&wv%HIN0 `<Lid9&9C(X@yg PvLA%DnU1al@APD%:TD'bx>SCriI<-;b JjA9imP?%([TtWV cKE%df$9wI)lk @`&"fr2DK:d^?@,0!)SvUL" ~AfRymI&g5U+KI$4@92KFglu#qy0pOm#xcpTBFM2rN`$eNL) #S9"yI6$8QI"&V@\8r<0p$W9oGBG6mi+UIcAn)]hI!_@ynmB^))mJXQflm'X8wyd,][W;,nwX0 z,eJ\|I[YLU_L}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	50184	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.158970118 CEST	388	OUT	GET /images/hdr-welc.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	50183	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.159018993 CEST	389	OUT	GET /images/housead3l.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	50182	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.159077883 CEST	388	OUT	GET /images/inf-link.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	50188	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.181109905 CEST	388	OUT	GET /images/inf-blnk.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	50187	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.181162119 CEST	385	OUT	GET /images/blank.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	50186	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.181210995 CEST	388	OUT	GET /images/butsamp2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:41.338238001 CEST	1004	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:40 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:58 GMT ETag: "880d04-2ed-38c0fecf4db80" Accept-Ranges: bytes Content-Length: 749 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 5d 00 12 00 c4 00 00 8d 8a 00 6d 6b 01 ce ca 01 fb f8 54 23 23 03 c4 c0 00 4b 4a 0b f9 f4 02 fa f7 3d fa f5 16 c8 c5 3a fa f6 2c 89 87 28 e9 e5 01 a6 a2 00 bb b7 00 fa f7 6b cc c9 4e aa a8 44 75 73 23 9a 97 00 e0 db 01 62 61 03 bf bc 2b a8 a5 17 f2 ed 00 b0 ac 00 7e 7c 13 3f 3d 01 e0 de 5e ea e6 30 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 5d 00 12 00 00 05 ff e0 27 8e a4 48 18 06 51 ae 6c eb be 70 2c af 44 34 20 c8 02 cc 73 04 1d 33 03 64 30 00 96 84 8b 00 0f 26 41 54 1c 82 83 40 b5 7c 29 12 8e d9 04 71 38 68 56 06 84 c0 52 75 5d 1f 9c 4d 02 fd 21 4c 18 0c f2 07 3e 79 a7 e0 2a 03 a3 1e 17 5d b3 1f 1c 70 0c 54 25 0c 0b 5d 05 1c 26 83 62 72 6f 7d 65 1f 57 02 06 6a 1a 1c 04 10 88 09 0b 05 1f 9b 09 9d 0b 1e 39 15 04 0c 03 a2 0b 0b 5f 7f 1f 12 aa 9d 09 06 2b 17 09 19 52 72 1d 08 a2 09 63 1f bc ab 9f 65 b7 0d 1a 16 14 1b a8 08 05 16 0e 09 8a 08 0d 0e 01 bf 00 d0 68 87 05 01 15 5e 93 58 a0 07 14 06 09 15 3b 25 11 07 05 ba 22 03 19 d5 bf 16 06 03 e7 d0 8a 65 e5 07 19 e8 73 0b 68 1b [TRUNCATED] Data Ascii: GIF89a]mkT##KJ=:,(kNDus#ba+~\|?=^0!,]'HQlp,D4 s3d0&AT@\|)q8hVRu]M!L>y]pT%]&bro}eWj9_+Rrceh^X;%"eshqp`+ KC@.Dl@alq!,P40u+(.8\F-5 `Da'vxPG,jr?T(5nAp _&`i\P2[jT(aG6[vCZ*7!<8B+C@k:.ijN2Wez-!hRrzgiAg/?[w3Q~U`,@j&<PA@jAA(9h@gA<DX@@%($pp^ C dA:(dQP8EFi3p`IbYT;
Jul 3, 2024 00:25:41.339620113 CEST	1004	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:40 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:58 GMT ETag: "880d04-2ed-38c0fecf4db80" Accept-Ranges: bytes Content-Length: 749 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 5d 00 12 00 c4 00 00 8d 8a 00 6d 6b 01 ce ca 01 fb f8 54 23 23 03 c4 c0 00 4b 4a 0b f9 f4 02 fa f7 3d fa f5 16 c8 c5 3a fa f6 2c 89 87 28 e9 e5 01 a6 a2 00 bb b7 00 fa f7 6b cc c9 4e aa a8 44 75 73 23 9a 97 00 e0 db 01 62 61 03 bf bc 2b a8 a5 17 f2 ed 00 b0 ac 00 7e 7c 13 3f 3d 01 e0 de 5e ea e6 30 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 5d 00 12 00 00 05 ff e0 27 8e a4 48 18 06 51 ae 6c eb be 70 2c af 44 34 20 c8 02 cc 73 04 1d 33 03 64 30 00 96 84 8b 00 0f 26 41 54 1c 82 83 40 b5 7c 29 12 8e d9 04 71 38 68 56 06 84 c0 52 75 5d 1f 9c 4d 02 fd 21 4c 18 0c f2 07 3e 79 a7 e0 2a 03 a3 1e 17 5d b3 1f 1c 70 0c 54 25 0c 0b 5d 05 1c 26 83 62 72 6f 7d 65 1f 57 02 06 6a 1a 1c 04 10 88 09 0b 05 1f 9b 09 9d 0b 1e 39 15 04 0c 03 a2 0b 0b 5f 7f 1f 12 aa 9d 09 06 2b 17 09 19 52 72 1d 08 a2 09 63 1f bc ab 9f 65 b7 0d 1a 16 14 1b a8 08 05 16 0e 09 8a 08 0d 0e 01 bf 00 d0 68 87 05 01 15 5e 93 58 a0 07 14 06 09 15 3b 25 11 07 05 ba 22 03 19 d5 bf 16 06 03 e7 d0 8a 65 e5 07 19 e8 73 0b 68 1b [TRUNCATED] Data Ascii: GIF89a]mkT##KJ=:,(kNDus#ba+~\|?=^0!,]'HQlp,D4 s3d0&AT@\|)q8hVRu]M!L>y]pT%]&bro}eWj9_+Rrceh^X;%"eshqp`+ KC@.Dl@alq!,P40u+(.8\F-5 `Da'vxPG,jr?T(5nAp _&`i\P2[jT(aG6[vCZ*7!<8B+C@k:.ijN2Wez-!hRrzgiAg/?[w3Q~U`,@j&<PA@jAA(9h@gA<DX@@%($pp^ C dA:(dQP8EFi3p`IbYT;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	50190	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.250929117 CEST	389	OUT	GET /images/but-line2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	50191	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.250993013 CEST	387	OUT	GET /images/butdes2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	50192	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.251049995 CEST	388	OUT	GET /images/buttips2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	50194	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.264348030 CEST	388	OUT	GET /images/butfree2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	50195	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.264795065 CEST	388	OUT	GET /images/buthelp2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	50196	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.278789043 CEST	388	OUT	GET /images/butlink2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	50197	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.283998966 CEST	387	OUT	GET /images/1bullet.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:40.595611095 CEST	387	OUT	GET /images/1bullet.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:40.998610020 CEST	387	OUT	GET /images/1bullet.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	50198	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:40.304441929 CEST	387	OUT	GET /images/2bullet.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:40.717839003 CEST	387	OUT	GET /images/2bullet.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:41.998255014 CEST	521	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:41 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:54 GMT ETag: "880cdf-10a-38c0fecb7d280" Accept-Ranges: bytes Content-Length: 266 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 10 00 14 00 c4 00 00 00 00 00 10 10 00 20 20 00 30 30 00 40 40 00 50 50 00 60 60 00 70 70 00 80 80 00 8f 8f 00 9f 9f 00 af af 00 bf bf 00 cf cf 00 df df 00 ef ef 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 10 00 14 00 00 05 6f 20 20 8e 64 69 9e 68 aa ae 6c eb ae 01 d2 40 90 a3 08 e7 f0 30 85 38 28 10 43 49 77 10 34 12 8b 04 80 f0 10 8e 18 8b 25 43 d4 10 1e 1e 01 1f 04 47 62 20 44 8e 83 e8 d0 18 6e 45 48 11 62 3a 1a 38 9c 80 f5 b8 ec 73 0c 48 69 c0 e0 0c 60 dc 49 61 4f 51 7b 0c 85 56 58 6d 0f 07 01 04 8d 04 02 4c 70 3e 3b 3d 7a 40 92 23 31 33 35 37 24 21 00 3b Data Ascii: GIF89a 00@@PP``pp!Ulead GIF SmartSaver Ver 2.0,o dihl@08(CIw4%CGb DnEHb:8sHi`IaOQ{VXmLp>;=z@#1357$!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	50200	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:41.344870090 CEST	387	OUT	GET /images/3bullet.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:41.991528988 CEST	469	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:41 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:54 GMT ETag: "880ce0-d7-38c0fecb7d280" Accept-Ranges: bytes Content-Length: 215 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 10 00 14 00 b3 00 00 00 00 00 10 10 00 20 20 00 30 30 00 40 40 00 50 50 00 60 60 00 80 80 00 8f 8f 00 9f 9f 00 af af 00 bf bf 00 cf cf 00 df df 00 ef ef 00 ff ff 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 10 00 14 00 00 04 6c 10 c8 49 ab bd 38 eb cd bb e7 c6 f2 3c 8e 42 5c 01 d3 18 01 20 1c 4e 52 a5 49 40 1c c7 29 30 f2 74 34 ad 05 41 e0 28 00 06 8f 93 c4 61 90 0c 24 8b 83 24 a1 70 3e 5a 93 80 43 59 70 48 08 0f ca 81 c1 c0 82 ad d8 09 62 21 e9 4e 98 95 33 80 ea 03 02 10 4f 43 e3 98 cc f2 02 09 0b 6b 03 3b 3d 7e 2b 2d 2f 31 18 21 23 25 4a 12 11 00 3b Data Ascii: GIF89a 00@@PP``!Ulead GIF SmartSaver Ver 2.0,lI8<B\ NRI@)0t4A(a$$p>ZCYpHb!N3OCk;=~+-/1!#%J;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	50199	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:41.344870090 CEST	388	OUT	GET /images/bullstr2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:41.990905046 CEST	530	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:41 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:29 GMT ETag: "880cf1-113-38c0feb3a5a40" Accept-Ranges: bytes Content-Length: 275 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 14 00 14 00 c4 00 00 00 10 10 00 20 20 00 30 30 00 00 40 00 40 40 00 50 50 00 60 60 00 70 70 00 80 80 00 8f 8f 00 9f 9f 00 af af 00 bf bf 00 cf cf 00 df df 00 ef ef 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 21 f9 04 01 00 00 1f 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 14 00 14 00 00 05 70 e0 27 8e 64 69 9e 68 aa ae 6c eb be a9 01 7f c4 87 7c 41 2b 08 c1 91 20 00 59 8a 70 e8 7d 00 0b 51 22 90 48 21 18 4d db b1 c1 10 a4 04 0a 86 02 80 28 34 10 08 eb 09 50 10 11 1e 90 ad 48 6c e2 06 b8 0d 07 a3 16 28 a7 16 0d 19 50 d1 38 a4 02 0c 60 22 37 1f 0b 81 28 01 01 02 65 02 0c 00 1f 4d 35 29 00 75 05 08 07 3b 2e 8f 84 33 92 28 21 00 3b Data Ascii: GIF89a 00@@@PP``pp@!!Ulead GIF SmartSaver Ver 2.0,p'dihl\|A+ Yp}Q"H!M(4PHl(P8`"7(eM5)u;.3(!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	50205	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:41.792439938 CEST	385	OUT	GET /images/blank.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:42.008892059 CEST	379	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:41 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:27 GMT ETag: "880cec-7d-38c0feb1bd5c0" Accept-Ranges: bytes Content-Length: 125 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 0a 00 0a 00 b3 00 00 ff ff ff 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 03 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 0a 00 0a 00 40 04 0a 70 c8 49 ab bd 38 eb cd 7b 8e 00 3b Data Ascii: GIF89a!!Ulead GIF SmartSaver Ver 2.0,@pI8{;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	50218	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:42.979125023 CEST	290	OUT	GET /images/inf-samp.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:43.556715012 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:43 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:04 GMT ETag: "880d3b-5a6-38c0fed506900" Accept-Ranges: bytes Content-Length: 1446 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 44 44 44 75 75 75 ba ba ba 30 30 30 10 10 10 ce ce ce ee ee ee 20 20 20 aa aa aa 89 89 89 99 99 99 d9 d9 d9 de de de 65 65 65 55 55 55 67 67 67 c9 c9 c9 d6 d6 d6 8b 8b 8b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df df 84 20 61 95 1b 76 85 01 e4 68 98 c7 0a 02 65 80 30 02 77 34 09 05 55 02 89 70 8d 8e 6d 0c 01 92 0c 55 03 01 81 39 09 92 04 47 02 01 03 31 04 01 65 a2 2f 96 0a 35 08 01 8c 52 01 9c 8f b0 b1 63 10 01 08 03 0e 98 53 96 b9 37 96 0c bc 30 ae 31 9e a0 30 a5 64 c7 2d b4 0b 35 07 08 74 53 c2 b2 d3 d4 5a 96 cc 25 76 24 da 27 83 23 7d 28 05 d0 85 d9 b9 bb 23 8b db e4 27 7d ac e7 ec c0 00 ed 22 d2 29 e2 24 c4 27 eb df 85 c9 de 2f 02 [TRUNCATED] Data Ascii: GIF89aDDDuuu000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zn avhe0w4UpmU9G1e/5RcS7010d-5tSZ%v$'#}(#'}")$'/=H n&mc"J<`$\(bw:p`Q>Dp"R&ruGR;{(0uO?}JlC\2'Y%80S0:vUUFY_x\:D#Pb$M1E%aSJ(c5P@OQ>P(j-El$jAr[k`IXxIDz#2n{fxtOyb]3T-Yn#Vg_@IkbVr,[OxD#\|rBdqIb"hE0(0B(wZ^Sh%IfpM$qngF\e`tk`X\Y%kP(4H(.c0PP2Ct3@O{96Lk[>xI(b*gG~zbZ=lN\|zK#X0eqbM{id3 +,
Jul 3, 2024 00:25:43.556726933 CEST	466	IN	Data Raw: e0 c0 33 b2 76 ec f1 09 2e 11 80 9e 01 b8 51 92 1c 6f 26 8b 6b c0 00 02 b8 b9 22 03 e3 11 1b b0 4a cf 81 25 1d 4c 05 30 90 c8 03 03 cc fb 90 76 dc 15 6c 82 5a 30 e3 37 ed 02 0c 80 32 16 8b 44 f3 d6 ef 7b 01 d3 2b 72 7d 13 fa da 72 7c 81 86 78 6e Data Ascii: 3v.Qo&k"J%L0vlZ072D{+r}r\|xnth?"Ba#Tm:3`SU@DP!-1G.]y1BoIB$Ubw&<3;qURmb:^`I\O/b"p;{4Bq$pS6@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	50217	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:42.979242086 CEST	290	OUT	GET /images/inf-help.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:43.574311972 CEST	1236	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:43 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:16:05 GMT ETag: "880d39-4c4-38c0fed5fab40" Accept-Ranges: bytes Content-Length: 1220 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 80 02 19 00 c4 00 00 00 00 00 ff ff ff 75 75 75 44 44 44 ba ba ba de de de 30 30 30 10 10 10 ee ee ee 20 20 20 99 99 99 d9 d9 d9 65 65 65 89 89 89 ce ce ce 55 55 55 aa aa aa 67 67 67 8b 8b 8b d6 d6 d6 c9 c9 c9 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 80 02 19 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a 9d 1e 0c 0e b7 81 81 ad 95 97 0e 83 84 fa 4d ef fb ff 6c 02 08 01 84 02 36 01 04 80 55 88 25 03 01 86 68 02 01 10 8a 95 96 97 57 92 01 05 04 84 0d 28 8e 90 23 a1 22 8c 60 92 03 62 a6 a3 8f 65 a8 00 0f 01 9f 98 b4 b5 b6 45 09 84 0c 22 09 10 73 bc 7c 00 a4 24 c3 88 78 70 23 06 a9 28 06 7a 26 78 24 09 c1 2d d2 c8 23 09 d6 00 af c0 ce 2f 6e 2e d8 27 d2 26 bf c2 cb a5 04 c7 22 c3 00 ca cf cb 09 e5 26 df 77 dd c9 f2 2a 76 d7 c1 db 25 d2 f6 bc [TRUNCATED] Data Ascii: GIF89auuuDDD000 eeeUUUggg!, dihlp,tmx\|pH,rl:tJZvzxL.zMl6U%hW(#"`beE"s\|$xp#(z&x$-#/n.'&"&wv%HIN0 `<Lid9&9C(X@yg PvLA%DnU1al@APD%:TD'bx>SCriI<-;b JjA9imP?%([TtWV cKE%df$9wI)lk @`&"fr2DK:d^?@,0!)SvUL" ~AfRymI&g5U+KI$4@92KFglu#qy0pOm#xcpTBFM2rN`$eNL) #S9"yI6$8QI"&V@\8r<0p$W9oGBG6mi+UIcAn)]hI!_@ynmB^))mJXQflm'X8wyd,][W;,nwX0 z,eJ\|I[YLU_L}
Jul 3, 2024 00:25:43.574322939 CEST	240	IN	Data Raw: 54 42 56 20 21 0b 93 c6 da fc 06 c1 6f 38 e9 62 14 9b cb e8 a5 93 3f 14 bf 36 95 08 70 69 84 8c b8 eb 4c c2 14 1c db b8 cc 98 56 71 9d 78 71 c6 73 4c a7 a9 bd 64 11 15 eb c6 1f f9 05 93 97 2e 6f f5 f1 1c af 0c a3 72 b5 f1 36 6c f5 d5 4b d0 13 cd Data Ascii: TBV !o8b?6piLVqxqsLd.or6lK45@(5:4)hMG*4N5#`-+Qx7x`_w~.AG:.~n[dD@o$7/S;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	50216	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:42.979276896 CEST	290	OUT	GET /images/butsamp2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:43.579076052 CEST	1004	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:43 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:58 GMT ETag: "880d04-2ed-38c0fecf4db80" Accept-Ranges: bytes Content-Length: 749 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 5d 00 12 00 c4 00 00 8d 8a 00 6d 6b 01 ce ca 01 fb f8 54 23 23 03 c4 c0 00 4b 4a 0b f9 f4 02 fa f7 3d fa f5 16 c8 c5 3a fa f6 2c 89 87 28 e9 e5 01 a6 a2 00 bb b7 00 fa f7 6b cc c9 4e aa a8 44 75 73 23 9a 97 00 e0 db 01 62 61 03 bf bc 2b a8 a5 17 f2 ed 00 b0 ac 00 7e 7c 13 3f 3d 01 e0 de 5e ea e6 30 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 5d 00 12 00 00 05 ff e0 27 8e a4 48 18 06 51 ae 6c eb be 70 2c af 44 34 20 c8 02 cc 73 04 1d 33 03 64 30 00 96 84 8b 00 0f 26 41 54 1c 82 83 40 b5 7c 29 12 8e d9 04 71 38 68 56 06 84 c0 52 75 5d 1f 9c 4d 02 fd 21 4c 18 0c f2 07 3e 79 a7 e0 2a 03 a3 1e 17 5d b3 1f 1c 70 0c 54 25 0c 0b 5d 05 1c 26 83 62 72 6f 7d 65 1f 57 02 06 6a 1a 1c 04 10 88 09 0b 05 1f 9b 09 9d 0b 1e 39 15 04 0c 03 a2 0b 0b 5f 7f 1f 12 aa 9d 09 06 2b 17 09 19 52 72 1d 08 a2 09 63 1f bc ab 9f 65 b7 0d 1a 16 14 1b a8 08 05 16 0e 09 8a 08 0d 0e 01 bf 00 d0 68 87 05 01 15 5e 93 58 a0 07 14 06 09 15 3b 25 11 07 05 ba 22 03 19 d5 bf 16 06 03 e7 d0 8a 65 e5 07 19 e8 73 0b 68 1b [TRUNCATED] Data Ascii: GIF89a]mkT##KJ=:,(kNDus#ba+~\|?=^0!,]'HQlp,D4 s3d0&AT@\|)q8hVRu]M!L>y]pT%]&bro}eWj9_+Rrceh^X;%"eshqp`+ KC@.Dl@alq!,P40u+(.8\F-5 `Da'vxPG,jr?T(5nAp _&`i\P2[jT(aG6[vCZ*7!<8B+C@k:.ijN2Wez-!hRrzgiAg/?[w3Q~U`,@j&<PA@jAA(9h@gA<DX@@%($pp^ C dA:(dQP8EFi3p`IbYT;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	50215	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:42.979332924 CEST	289	OUT	GET /images/3bullet.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:43.536753893 CEST	469	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:43 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:54 GMT ETag: "880ce0-d7-38c0fecb7d280" Accept-Ranges: bytes Content-Length: 215 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 10 00 14 00 b3 00 00 00 00 00 10 10 00 20 20 00 30 30 00 40 40 00 50 50 00 60 60 00 80 80 00 8f 8f 00 9f 9f 00 af af 00 bf bf 00 cf cf 00 df df 00 ef ef 00 ff ff 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 10 00 14 00 00 04 6c 10 c8 49 ab bd 38 eb cd bb e7 c6 f2 3c 8e 42 5c 01 d3 18 01 20 1c 4e 52 a5 49 40 1c c7 29 30 f2 74 34 ad 05 41 e0 28 00 06 8f 93 c4 61 90 0c 24 8b 83 24 a1 70 3e 5a 93 80 43 59 70 48 08 0f ca 81 c1 c0 82 ad d8 09 62 21 e9 4e 98 95 33 80 ea 03 02 10 4f 43 e3 98 cc f2 02 09 0b 6b 03 3b 3d 7e 2b 2d 2f 31 18 21 23 25 4a 12 11 00 3b Data Ascii: GIF89a 00@@PP``!Ulead GIF SmartSaver Ver 2.0,lI8<B\ NRI@)0t4A(a$$p>ZCYpHb!N3OCk;=~+-/1!#%J;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	50214	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:42.979382038 CEST	290	OUT	GET /images/bullstr2.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:43.555345058 CEST	530	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:43 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:29 GMT ETag: "880cf1-113-38c0feb3a5a40" Accept-Ranges: bytes Content-Length: 275 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 14 00 14 00 c4 00 00 00 10 10 00 20 20 00 30 30 00 00 40 00 40 40 00 50 50 00 60 60 00 70 70 00 80 80 00 8f 8f 00 9f 9f 00 af af 00 bf bf 00 cf cf 00 df df 00 ef ef 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 21 f9 04 01 00 00 1f 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 14 00 14 00 00 05 70 e0 27 8e 64 69 9e 68 aa ae 6c eb be a9 01 7f c4 87 7c 41 2b 08 c1 91 20 00 59 8a 70 e8 7d 00 0b 51 22 90 48 21 18 4d db b1 c1 10 a4 04 0a 86 02 80 28 34 10 08 eb 09 50 10 11 1e 90 ad 48 6c e2 06 b8 0d 07 a3 16 28 a7 16 0d 19 50 d1 38 a4 02 0c 60 22 37 1f 0b 81 28 01 01 02 65 02 0c 00 1f 4d 35 29 00 75 05 08 07 3b 2e 8f 84 33 92 28 21 00 3b Data Ascii: GIF89a 00@@@PP``pp@!!Ulead GIF SmartSaver Ver 2.0,p'dihl\|A+ Yp}Q"H!M(4PHl(P8`"7(eM5)u;.3(!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	50213	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:42.979825974 CEST	289	OUT	GET /images/2bullet.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:43.536113024 CEST	521	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:43 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:54 GMT ETag: "880cdf-10a-38c0fecb7d280" Accept-Ranges: bytes Content-Length: 266 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 10 00 14 00 c4 00 00 00 00 00 10 10 00 20 20 00 30 30 00 40 40 00 50 50 00 60 60 00 70 70 00 80 80 00 8f 8f 00 9f 9f 00 af af 00 bf bf 00 cf cf 00 df df 00 ef ef 00 ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 10 00 14 00 00 05 6f 20 20 8e 64 69 9e 68 aa ae 6c eb ae 01 d2 40 90 a3 08 e7 f0 30 85 38 28 10 43 49 77 10 34 12 8b 04 80 f0 10 8e 18 8b 25 43 d4 10 1e 1e 01 1f 04 47 62 20 44 8e 83 e8 d0 18 6e 45 48 11 62 3a 1a 38 9c 80 f5 b8 ec 73 0c 48 69 c0 e0 0c 60 dc 49 61 4f 51 7b 0c 85 56 58 6d 0f 07 01 04 8d 04 02 4c 70 3e 3b 3d 7a 40 92 23 31 33 35 37 24 21 00 3b Data Ascii: GIF89a 00@@PP``pp!Ulead GIF SmartSaver Ver 2.0,o dihl@08(CIw4%CGb DnEHb:8sHi`IaOQ{VXmLp>;=z@#1357$!;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	50226	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:43.578114033 CEST	287	OUT	GET /images/blank.gif HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:44.144097090 CEST	379	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:44 GMT Server: Apache/2.2.15 (CentOS) Last-Modified: Tue, 21 Aug 2001 20:15:27 GMT ETag: "880cec-7d-38c0feb1bd5c0" Accept-Ranges: bytes Content-Length: 125 Connection: close Content-Type: image/gif Data Raw: 47 49 46 38 39 61 0a 00 0a 00 b3 00 00 ff ff ff 00 00 00 00 00 00 ff ff ff 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 03 00 21 fe 1c 55 6c 65 61 64 20 47 49 46 20 53 6d 61 72 74 53 61 76 65 72 20 56 65 72 20 32 2e 30 00 2c 00 00 00 00 0a 00 0a 00 40 04 0a 70 c8 49 ab bd 38 eb cd 7b 8e 00 3b Data Ascii: GIF89a!!Ulead GIF SmartSaver Ver 2.0,@pI8{;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	50244	107.161.28.66	80	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 3, 2024 00:25:50.246711969 CEST	380	OUT	GET /favicon.ico HTTP/1.1 Host: www.addesigner.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://www.addesigner.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 3, 2024 00:25:50.782577991 CEST	216	IN	HTTP/1.1 404 Not Found Date: Tue, 02 Jul 2024 22:25:50 GMT Server: Apache/2.2.15 (CentOS) Accept-Ranges: bytes Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8 Data Raw: 37 0d 0a 3c 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 7<html>
Jul 3, 2024 00:25:50.800478935 CEST	1236	IN	Data Raw: 37 0d 0a 3c 68 65 61 64 3e 0a 0d 0a 34 64 0d 0a 3c 74 69 74 6c 65 3e 41 64 44 65 73 69 67 6e 65 72 2e 63 6f 6d 20 2d 20 44 65 73 69 67 6e 20 61 6e 64 20 64 6f 77 6e 6c 6f 61 64 20 66 72 65 65 20 62 61 6e 6e 65 72 73 20 69 6e 20 73 65 63 6f 6e 64 Data Ascii: 7<head>4d<title>AdDesigner.com - Design and download free banners in seconds!</title>f2<meta name="description" content="FREE banner ads for your website in seconds! Choose from 91 unique, fully-animated designs, customized with th
Jul 3, 2024 00:25:50.800503016 CEST	224	IN	Data Raw: 67 5f 6c 69 6e 6b 74 6f 75 73 5f 6f 6e 2e 73 72 63 20 3d 20 22 2f 69 6d 61 67 65 73 2f 69 6e 66 2d 6c 69 6e 6b 2e 67 69 66 22 3b 0a 0d 0a 34 33 0d 0a 69 6d 67 5f 69 6e 66 6f 5f 6f 66 66 3d 6e 65 77 20 49 6d 61 67 65 28 29 3b 20 69 6d 67 5f 69 6e Data Ascii: g_linktous_on.src = "/images/inf-link.gif";43img_info_off=new Image(); img_info_off.src="/images/inf-blnk.gif";11b function donothing() {}5d function mousein(name) { document.images["info"].src = eval
Jul 3, 2024 00:25:50.800523043 CEST	1236	IN	Data Raw: 28 22 69 6d 67 5f 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5f 6f 6e 2e 73 72 63 22 29 3b 20 7d 0a 0d 0a 35 37 0d 0a 20 20 20 66 75 6e 63 74 69 6f 6e 20 6d 6f 75 73 65 6f 75 74 28 6e 61 6d 65 29 20 7b 20 64 6f 63 75 6d 65 6e 74 2e 69 6d 61 67 65 73 5b Data Ascii: ("img_" + name + "_on.src"); }57 function mouseout(name) { document.images["info"].src = eval("img_info_off.src"); }7// -->a</script>16<div align="CENTER"> 4e <table width="640" border="0" cellspacing="0" cellpaddin
Jul 3, 2024 00:25:50.800534010 CEST	1236	IN	Data Raw: 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 0a 0d 0a 61 0d 0a 20 20 20 20 3c 74 72 3e 20 0a 0d 0a 35 32 0d 0a 20 20 20 20 20 20 3c 74 64 20 76 61 6c 69 67 6e 3d 22 6d 69 64 64 6c 65 22 3e 3c 69 6d 67 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 62 6c 61 Data Ascii: ign="center">a <tr> 52 <td valign="middle"><img src="/images/blank.gif" width="1" height="5"></td>a </tr>a <tr> 1c <td valign="middle"> 5d <div align="center"><img name="info" src="/image
Jul 3, 2024 00:25:50.800545931 CEST	1236	IN	Data Raw: 0a 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 62 75 74 2d 6c 69 6e 65 32 2e 67 69 66 22 20 77 69 64 74 68 3d 22 32 32 22 20 68 65 69 67 68 74 3d 22 31 38 22 3e 3c 61 0a 0d 0a 33 31 0d 0a 68 72 65 66 3d 22 2f 66 72 65 65 2e 73 68 74 6d 6c 22 20 6f 6e Data Ascii: src="/images/but-line2.gif" width="22" height="18"><a31href="/free.shtml" onMouseOver="mousein('free')"39onMouseOut="mouseout('free')" onFocus="this.blur()"><img3ename="free" src="/images/butfree2.gif" width="87" height="18"
Jul 3, 2024 00:25:50.800558090 CEST	1236	IN	Data Raw: 20 73 72 63 3d 22 2f 69 6d 61 67 65 73 2f 68 64 72 2d 77 65 6c 63 2e 67 69 66 22 20 77 69 64 74 68 3d 22 34 30 30 22 20 68 65 69 67 68 74 3d 22 34 35 22 20 61 6c 74 3d 22 57 65 6c 63 6f 6d 65 20 74 6f 20 41 64 44 65 73 69 67 6e 65 72 2e 63 6f 6d Data Ascii: src="/images/hdr-welc.gif" width="400" height="45" alt="Welcome to AdDesigner.com"></div>1c </td>1a </tr>1a <tr> 142 <td><img src="/images/blank.gif" width="1" height="5"></td>1a
Jul 3, 2024 00:25:50.800568104 CEST	241	IN	Data Raw: 0a 35 63 0d 0a 20 20 20 20 20 20 20 20 20 20 72 61 74 65 73 3c 2f 62 3e 20 28 77 68 69 63 68 20 6d 65 61 6e 73 20 6d 6f 72 65 20 74 72 61 66 66 69 63 20 74 6f 20 79 6f 75 72 20 77 65 62 73 69 74 65 29 2c 20 74 6f 20 62 75 69 6c 64 20 61 20 3c 62 Data Ascii: 5c rates</b> (which means more traffic to your website), to build a <b>professional 51 image</b> for your website, and to create a <b> favorable and lasting 4a impression</b> on everyone who sees your
Jul 3, 2024 00:25:50.806279898 CEST	1236	IN	Data Raw: 62 61 6e 6e 65 72 20 61 64 73 2e 3c 2f 66 6f 6e 74 3e 3c 2f 70 3e 0a 0d 0a 31 0d 0a 0a 0d 0a 38 39 0d 0a 20 20 20 20 20 20 20 20 3c 70 20 61 6c 69 67 6e 3d 22 63 65 6e 74 65 72 22 3e 3c 66 6f 6e 74 20 66 61 63 65 3d 22 41 72 69 61 6c 2c 20 48 65 Data Ascii: banner ads.</font></p>189 <p align="center"><font face="Arial, Helvetica, sans-serif" size="2"></font><font face="Arial, Helvetica, sans-serif" size="2"> 8b <a href="/design.shtml"><img src="/images/housead3l.gif
Jul 3, 2024 00:25:50.806298971 CEST	1236	IN	Data Raw: 3d 22 2f 69 6d 61 67 65 73 2f 62 6c 61 6e 6b 2e 67 69 66 22 20 77 69 64 74 68 3d 22 32 35 22 20 68 65 69 67 68 74 3d 22 31 22 3e 28 61 6e 64 20 65 76 65 6e 20 74 68 65 20 66 6f 6e 74 20 0a 0d 0a 31 0d 0a 0a 0d 0a 34 37 0d 0a 20 20 20 20 20 20 20 Data Ascii: ="/images/blank.gif" width="25" height="1">(and even the font 147 styles, font sizes and font colors to use, if you wish);<br>14f <img src="/images/3bullet.gif" width="16" height="20"> <b>Instantly 1
Jul 3, 2024 00:25:50.806312084 CEST	1236	IN	Data Raw: 65 3d 22 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 22 20 73 69 7a 65 3d 22 32 22 3e 20 0a 0d 0a 36 31 0d 0a 20 20 20 20 20 20 20 20 20 20 79 6f 75 72 20 61 64 20 66 6f 72 20 74 68 65 20 62 61 6e 6e 65 72 Data Ascii: e="Arial, Helvetica, sans-serif" size="2"> 61 your ad for the banner service (like bCentral's LinkExchange or SmartClicks) you use. 56 This means when you design your ads at AdDesigner.com, you won't even have 50

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:48 UTC	658	OUT	GET / HTTP/1.1 Host: scamwebsite.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:48 UTC	569	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:48 GMT Content-Type: text/html Content-Length: 2321 Connection: close Vary: Accept-Encoding Last-Modified: Wed, 19 Jun 2024 19:53:57 GMT ETag: "66733755-911" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-2 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:48 UTC	2321	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 52 45 45 20 52 4f 42 55 43 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 21 2d 2d 20 54 68 65 20 73 74 79 6c 65 2e 63 73 73 20 66 69 6c 65 20 61 6c 6c 6f 77 73 20 79 6f 75 20 74 6f 20 63 68 61 6e 67 65 20 74 68 65 20 6c 6f 6f 6b 20 6f 66 20 79 6f 75 72 20 77 65 62 20 70 61 67 65 73 2e 0a 20 20 20 20 20 20 20 20 20 49 66 20 79 6f Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>FREE ROBUC</title> ... The style.css file allows you to change the look of your web pages. If yo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:49 UTC	538	OUT	GET /style.css HTTP/1.1 Host: scamwebsite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://scamwebsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:49 UTC	567	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:49 GMT Content-Type: text/css Content-Length: 298 Connection: close Vary: Accept-Encoding Last-Modified: Thu, 07 Mar 2024 01:26:03 GMT ETag: "65e917ab-12a" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-2 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:49 UTC	298	IN	Data Raw: 2f 2a 20 43 53 53 20 69 73 20 68 6f 77 20 79 6f 75 20 63 61 6e 20 61 64 64 20 73 74 79 6c 65 20 74 6f 20 79 6f 75 72 20 77 65 62 73 69 74 65 2c 20 73 75 63 68 20 61 73 20 63 6f 6c 6f 72 73 2c 20 66 6f 6e 74 73 2c 20 61 6e 64 20 70 6f 73 69 74 69 6f 6e 69 6e 67 20 6f 66 20 79 6f 75 72 0a 20 20 20 48 54 4d 4c 20 63 6f 6e 74 65 6e 74 2e 20 54 6f 20 6c 65 61 72 6e 20 68 6f 77 20 74 6f 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 2c 20 6a 75 73 74 20 74 72 79 20 73 65 61 72 63 68 69 6e 67 20 47 6f 6f 67 6c 65 20 66 6f 72 20 71 75 65 73 74 69 6f 6e 73 20 6c 69 6b 65 0a 20 20 20 22 68 6f 77 20 74 6f 20 63 68 61 6e 67 65 20 6c 69 6e 6b 20 63 6f 6c 6f 72 2e 22 20 2a 2f 0a 0a 62 6f 64 79 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 77 68 69 74 65 Data Ascii: /* CSS is how you can add style to your website, such as colors, fonts, and positioning of your HTML content. To learn how to do something, just try searching Google for questions like "how to change link color." */body { background-color: white

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49716	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:49 UTC	584	OUT	GET /Robux.png HTTP/1.1 Host: scamwebsite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scamwebsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:49 UTC	550	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:49 GMT Content-Type: image/png Content-Length: 138965 Connection: close Last-Modified: Mon, 11 Mar 2024 21:25:48 GMT ETag: "65ef76dc-21ed5" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-1 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:49 UTC	15834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a0 00 00 00 b8 08 06 00 00 00 a5 c4 38 1b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 ff a5 49 44 41 54 78 5e ec bd 05 9c 56 47 d2 f0 5b e3 ee 30 8a bb bb bb 87 b8 13 d7 4d 36 be 71 d9 8d 11 db b8 bb 10 85 10 34 58 70 77 77 87 c1 67 06 9b 19 66 86 11 46 6f fd eb d0 f0 2c 4b b2 af ec 7b 7f f7 7e df db e4 e4 cc 73 a4 bb ba ba bc ab fb f8 e5 e6 ad ae 0a 08 08 10 3f 3f 3f a9 aa aa 12 57 f8 bb bc bc 5c 82 83 83 cf fc ae ac ac fc 87 33 25 32 22 d6 de a5 70 ad ac ac 4c 2a 2a 2a ec 9a bf bf bf fd e6 1c 1a 1a 2a a7 4e 9d b2 67 82 82 82 a4 b4 b4 f4 cc 33 14 fe 3e df 51 54 54 64 f5 f1 1c b0 70 0d b8 Data Ascii: PNGIHDR8sRGBgAMAapHYsttfxIDATx^VG[0M6q4XpwwgfFo,K{~s???W\3%2"pL****Ng3>QTTdp
2024-07-02 22:24:49 UTC	16384	IN	Data Raw: 0d f0 00 37 63 03 be c0 09 70 39 1a 02 7e a2 4b 99 19 44 1f 0a ad 0e 0c e1 29 53 26 19 6d ff e5 e1 07 ad 0f 78 13 c0 f0 10 21 73 6d 9b 79 4e 52 e9 49 f2 80 8e df 7a eb 4d f3 24 91 bd 18 5b b4 03 6e 81 15 45 40 38 10 05 f3 eb af bf 9a 4c 65 8c 38 80 11 d8 a0 4d e4 2d e3 cc c1 78 e1 d5 81 0f f8 00 3a 03 6e c6 1e f9 cb 3d fe 86 a7 91 ff cc b7 33 4f 84 07 8b be 60 be 0e cf 13 b9 ce ce 3a dd 7b 74 35 58 08 9f 2e 59 b2 d8 70 34 7c c4 8f d2 ba c5 e9 75 40 cb 56 cc aa 82 a8 5e 79 e5 55 23 9e 7e 7d 07 99 e7 41 66 1a de 03 b1 eb e6 cd 9b 99 3b fa e0 83 f7 9b fb 37 f4 a5 17 2c 0e 0c 82 60 22 14 10 8a 05 f7 0c 80 21 a4 87 1f 7e f8 8c b2 61 5b 93 0d 9b 36 58 47 21 72 2c 7c bc 15 de 65 32 1a e4 73 0f 4b 80 79 20 94 0d 75 81 3c 14 1d c2 1b 06 47 18 30 98 08 20 06 9c cc Data Ascii: 7cp9~KD)S&mx!smyNRIzM$[nE@8Le8M-x:n=3O`:{t5X.Yp4\|u@V^yU#~}Af;7,`"!~a[6XG!r,\|e2sKy u<G0
2024-07-02 22:24:49 UTC	16384	IN	Data Raw: 31 83 20 25 4c 83 41 83 81 d1 a3 07 0b b9 8f 58 38 91 04 07 e0 62 5e 90 70 0f 67 68 0f 18 c0 21 86 06 e3 41 18 03 fc a3 9c e0 3d 70 c2 33 3c cb 62 53 0a d7 b0 98 09 89 03 3f f0 41 53 e0 8b 7a 30 0a e1 0b 78 13 9c 71 a0 90 98 7b a2 6f d4 8d 21 43 46 14 ef 63 70 a1 d0 08 7d 37 68 50 cf f6 c1 63 81 65 e7 ce 6d ac bd f3 95 ff ac 02 a2 1c 38 90 29 6f fc fd 33 59 b1 7c 9d c2 44 96 9e 7a f9 ca 03 64 97 1d d8 cf bc 53 9e 74 ea dc da 14 08 d9 67 f4 93 e2 14 10 5b fe b0 99 30 e9 d1 78 47 f4 1b da ca ca 3c 2a 99 6a 90 54 29 0e 6e b9 f5 2a b9 59 0f e7 3d 51 d8 2d e1 89 c7 5f 33 0f 88 f5 38 77 de 75 9d 8e b5 f7 fd 28 68 e4 93 8f bf b7 70 19 74 0b 4c 7c 48 8d b5 78 84 93 f1 6c 1a 35 ae 2b 4f 3d 7d af 7d 49 95 88 49 76 36 2b fe c7 d8 16 4e 28 ae 01 03 7b c8 4d 37 5f 21 Data Ascii: 1 %LAX8b^pgh!A=p3<bS?ASz0xq{o!CFcp}7hPcem8)o3Y\|DzdStg[0xG<jT)nY=Q-_38wu(hptL\|Hxl5+O=}}IIv6+N({M7_!
2024-07-02 22:24:49 UTC	16384	IN	Data Raw: 9e c2 43 22 e5 c8 b1 a3 36 b9 8f 20 c7 cb 45 6e c0 1f f9 6a 64 e0 d5 32 d6 84 a9 6f b8 ec 06 51 93 4d 8e 95 1d b7 70 19 ca 21 20 30 58 f4 09 39 7a fc 98 85 c0 36 ee df 2a cb d6 ae 94 43 47 33 6c 53 d2 53 4c ce 2b 3c 78 5a 31 09 f1 b6 ee e6 64 49 b1 e7 e1 68 7f 02 94 57 4b e1 95 d0 30 79 f0 e1 47 64 b0 7a 3f b1 91 f1 12 ee 1f 2d 27 d5 c0 23 9b 8d 02 fb f6 e9 d3 4f fa f4 ea 6d 0a 77 f5 8e d5 b2 6b c7 6e 9b 3e 60 3e 32 22 24 4a e5 0a 1f a4 0c 97 e2 a2 53 72 f8 e8 31 c9 51 ef 27 3a 2a 8e 68 99 e4 e6 17 48 44 64 8c d2 6b 9c 3a 8d fe 6a 92 05 c8 16 55 56 db 76 ed 56 7a f7 8c 42 d6 b4 d1 d7 e2 8a 62 f3 c8 48 8e a8 5b bf 9e 24 86 26 59 46 2f 82 3a 42 f1 99 ab 9e 0b 3c 00 af c0 23 a1 61 c1 c6 bf e0 13 fc 11 5a 63 5e 15 c5 e1 ed 13 17 6b f3 e3 b7 de 7a 8b f1 8a 0b Data Ascii: C"6 Enjd2oQMp! 0X9z6CG3lSSL+<xZ1dIhWK0yGdz?-'#Omwkn>`>2"$JSr1Q':hHDdk:jUVvVzBbH[$&YF/:B<#aZc^kz
2024-07-02 22:24:49 UTC	16384	IN	Data Raw: e5 c6 99 af 8c 77 a2 c4 af 56 82 41 70 4d 98 d8 4e ed 3b 48 8f 2e 5d 25 31 3e 49 22 55 f2 d9 be 73 87 69 05 f4 65 69 d9 ba 95 34 29 62 db 5b 90 27 21 3a 4f 52 d2 d3 a5 b5 e2 8b 72 c5 4d 04 fe ac d1 79 c3 b7 21 6c b8 69 a3 45 59 b6 74 a9 74 51 c6 8e 68 6c 05 8a 0f e2 74 fe a7 29 fe 22 62 37 4c 1b c6 f5 84 44 d4 5c 2a 85 85 06 4b a9 fe e6 1b ac 4f da ab 8c 22 b6 94 64 e5 ec 19 cd 04 49 c5 93 af 42 19 c3 30 e5 fc c3 15 81 87 69 42 a2 22 6a 3d fb f0 50 57 ea 89 57 31 f3 84 ed 14 60 cc 41 da 30 ea cc 39 ae bb 79 43 1b d0 80 ad 5b b5 b5 c5 a2 78 c8 de 7e fb 23 f2 ca 2b 8f c8 95 57 fc 56 99 e5 73 6d 6b 03 36 99 43 9d 8e f4 c2 5c e6 75 2f fa 35 51 5c 30 39 78 78 cb cb 9f be f0 da 3e 44 eb 69 ea 4e c5 2f d3 67 4c 97 67 9f 7d ce d4 fc 10 01 18 7f fa 01 2f 37 f0 73 Data Ascii: wVApMN;H.]%1>I"Usiei4)b['!:ORrMy!liEYttQhlt)"b7LD\*KO"dIB0iB"j=PWW1`A09yC[x~#+WVsmk6C\u/5Q\09xx>DiN/gLg}/7s
2024-07-02 22:24:49 UTC	16384	IN	Data Raw: 18 34 14 15 3a f7 74 56 1b 71 c0 36 dd 50 ad 04 91 32 aa 84 15 aa f3 1b fc c7 1a 46 70 60 54 4c 94 e6 eb 95 89 d0 33 a8 e8 60 c0 c1 05 c4 85 6b d3 a6 a5 d5 6f dd ba 2d a6 f6 db b2 65 87 54 56 54 eb 7d cf fe 43 34 03 de 75 b8 84 36 72 f8 8b df 47 3a fe bb 80 76 26 21 b9 20 04 8c 1a 39 ca 08 03 12 0a d2 09 de b6 38 54 61 f7 a1 ff 90 88 90 60 b0 0b 81 6f 60 98 79 96 e0 a4 04 23 c5 a5 9a 3e 85 30 81 bf 08 ec 4a 7f f2 0e e6 18 84 13 67 f7 01 ff 50 1f c6 02 92 24 34 01 46 1a a2 e5 c0 1f bd 1f 19 41 15 19 00 10 23 5c ee d0 05 22 6a 21 36 f1 01 8c 48 54 00 84 08 c7 00 f5 a7 62 a8 dc 6e ba f9 46 db 53 9c 82 41 88 40 82 70 ed 7c 18 70 8d e0 06 03 85 62 70 72 a4 63 0e 4f 80 ef 39 cf ba 41 ed de e1 b7 bb ff bf 01 f2 f4 4d e4 4f 72 c0 c4 02 18 30 2c f4 24 aa 03 2a 38 Data Ascii: 4:tVq6P2Fp`TL3`ko-eTVT}C4u6rG:v&! 98Ta`o`y#>0JgP$4FA#\"j!6HTbnFSA@p\|pbprcO9AMOr0,$*8
2024-07-02 22:24:49 UTC	16384	IN	Data Raw: a6 75 96 64 28 e7 42 f4 5d 9e a5 2c 88 ba 41 a1 78 ed a9 f4 a6 83 a6 5e bf c1 44 a7 3d e0 5e 2a cb ab 24 2a 3c ca 38 b5 c0 20 fd 6e 03 de 2e 2a 29 69 e3 a0 76 67 70 c2 d1 d1 16 38 11 10 90 14 22 4b 79 08 b2 ca 22 56 3c e2 c8 2f 48 f3 67 af 0f 26 2c 68 c5 da 45 eb 41 5b 83 58 58 fb c3 29 ef d2 96 2c ec 3d a0 ed c3 7e 4d b6 39 19 4c 9b 3e 07 21 b2 88 db 3a d0 a0 4e b1 3a e9 77 67 ef 95 93 36 3d 62 cd f1 9f 00 fa 23 22 d0 0b fd 8f c4 82 77 db ff 86 f8 fc 4f c1 b3 ed 10 21 3d c0 ce 69 4b fe 06 26 76 97 df 77 3c d7 76 67 05 d8 64 ee c5 2d 1f 29 f1 d9 62 01 53 d9 81 53 d9 2c bb f7 73 c3 d7 bd 6f f5 c6 02 9d af e3 ca 43 8c 1e d3 c8 38 60 8e e2 4e ed c7 f8 61 fe ea b3 4e fd e4 e6 f3 c1 f7 15 dc 39 ef 83 d4 a0 44 44 4c e0 c8 aa 7d e6 37 f7 bc 31 e9 11 03 7b 07 a2 Data Ascii: ud(B],Ax^D=^$<8 n.*)ivgp8"Ky"V</Hg&,hEA[XX),=~M9L>!:N:wg6=b#"wO!=iK&vw<vgd-)bSS,soC8`NaN9DDL}71{
2024-07-02 22:24:49 UTC	16384	IN	Data Raw: 35 f2 0d a1 41 57 6b 12 43 4a f7 6e bd ca d0 cd 47 94 de c1 78 00 0c 93 7c 73 c5 5b e5 d9 d7 9f 2b f3 5f 9d 5e 3a b6 15 f9 b6 26 4d 50 f9 db 72 2d 22 b4 37 81 01 99 7c 30 5a 34 31 84 09 3f 64 b5 4f a8 8a b2 11 ea e9 79 88 86 68 68 f1 04 97 f1 b0 52 20 36 41 85 11 aa 8b 1f 14 61 22 0e df 7d f8 8d e5 2f b3 87 45 b4 9e 73 2f 30 69 fe 52 c0 c5 f4 31 7f 75 9b 2c 84 07 b1 30 5b 05 c2 10 08 90 cc 15 f2 49 d3 63 13 18 c6 6f 53 9f fe 11 46 5c 5f 34 50 96 52 d7 40 c6 4a 30 da 7f 51 65 fd 5e b1 62 59 f6 bd 22 9c 35 69 b9 e4 a6 b6 f8 67 5c 04 9c 71 ea 73 cf ae bd d2 17 fc 42 28 14 2c 37 fd 34 cf b2 20 28 60 08 6e e0 a7 5f 08 c5 3a 8d be 3b 7e 43 fd c0 a5 5f 04 1c 02 31 37 ae a2 27 b9 4e 59 c7 ee c9 09 25 24 d6 47 50 89 fd 20 dc 3a ea 23 40 8d 01 83 20 40 6d 86 db 72 Data Ascii: 5AWkCJnGx\|s[+_^:&MPr-"7\|0Z41?dOyhhR 6Aa"}/Es/0iR1u,0[IcoSF\_4PR@J0Qe^bY"5ig\qsB(,74 (`n_:;~C_17'NY%$GP :#@ @mr
2024-07-02 22:24:49 UTC	8443	IN	Data Raw: 4b 8f 6e 3d ca ba f8 cd da 0e e1 a2 cd 0c 43 8f f1 6d b7 dd e8 c0 55 fb c5 7a 67 48 f7 e6 c3 86 97 76 f1 bd 4d 08 27 29 72 f2 a8 f8 b5 95 65 b2 e9 90 4d cb f0 cd 87 47 bf 7a e4 a2 b6 f4 5b 16 db 9b b7 6c 96 cf b7 0a 8b 49 26 01 5a ba 93 32 29 0d e6 ab 77 cf 3e a5 5d e0 36 7c 96 ba 65 d3 10 16 98 2c 5c 85 e7 f0 9d cb 09 1e e3 29 ee a3 23 34 94 07 9c 05 cd 60 9e e8 5a 3f c0 d1 5c 53 36 8d 19 2e 79 87 80 82 c3 82 5d 68 f0 68 8f a2 41 69 24 a8 d1 25 6b 09 2e a2 2b f5 78 07 2d e8 83 e5 04 c8 80 31 e2 07 f0 8d 6b 49 3f 30 70 c2 51 bf ad 1d 13 40 14 21 ca 92 31 e6 a7 6b e7 74 a1 6d bb cd 76 c9 64 29 96 04 11 ba 37 36 e3 f7 d1 57 fd 56 17 ba 25 8c 8d 05 5f 04 33 3c 54 fb fa 8e 96 09 78 56 18 45 0a 1c d0 1a 98 e8 93 31 ea a7 f1 72 f5 52 14 f0 68 86 83 fb 94 58 e3 Data Ascii: Kn=CmUzgHvM')reMGz[lI&Z2)w>]6\|e,\)#4`Z?\S6.y]hhAi$%k.+x-1kI?0pQ@!1ktmvd)76WV%_3<TxVE1rRhX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49714	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:49 UTC	587	OUT	GET /Untitled.png HTTP/1.1 Host: scamwebsite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scamwebsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:49 UTC	548	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:49 GMT Content-Type: image/png Content-Length: 15124 Connection: close Last-Modified: Wed, 19 Jun 2024 19:52:28 GMT ETag: "667336fc-3b14" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-2 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:49 UTC	15124	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 c8 08 06 00 00 00 c6 15 b7 e2 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 3a a9 49 44 41 54 78 5e ed dd 87 9b 34 45 f5 3e fc f7 ff 10 73 02 45 40 01 11 04 44 b2 02 92 11 24 27 c9 39 83 20 19 89 92 11 c9 20 39 23 51 92 12 24 83 48 96 20 19 04 44 92 39 f4 fb fb 14 4f ed b7 9f a6 66 c3 3c 33 b3 3d bb e7 be ae 73 ed ee 6c 77 75 75 f5 d4 7d d7 39 a7 aa fa ff ab 02 81 40 20 10 e8 02 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 Data Ascii: PNGIHDRsRGBgAMAapHYsttfx:IDATx^4E>sE@D$'9 9#Q$H D9Of<3=slwuu}9@ ! @ ! @ ! @ ! @ ! @ ! @ ! @ ! @ ! @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49717	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:49 UTC	584	OUT	GET /adban.gif HTTP/1.1 Host: scamwebsite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scamwebsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:49 UTC	547	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:49 GMT Content-Type: image/gif Content-Length: 9902 Connection: close Last-Modified: Wed, 17 Apr 2024 01:18:08 GMT ETag: "661f2350-26ae" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-1 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:49 UTC	9902	IN	Data Raw: 47 49 46 38 39 61 d4 01 3c 00 f4 00 00 ff ff 99 99 66 66 66 33 33 cc cc 66 33 33 00 66 66 33 33 33 33 00 00 00 cc cc cc 66 66 66 cc 99 66 99 66 33 cc 66 66 99 cc 33 cc 66 00 33 00 66 99 99 99 33 33 66 99 99 cc cc cc ff 66 33 66 ff ff ff 33 66 00 66 00 00 ff 99 cc 99 99 00 ff cc 00 99 33 00 66 66 99 00 00 ff 66 66 ff 33 33 ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 04 58 02 ff 00 2c 00 00 00 00 d4 01 3c 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 ab d4 68 1a 5f 6f 23 43 d6 70 cf e8 b4 7a cd 6e 0d 06 19 30 d9 42 27 d8 09 8d 41 7b cf ef fb ff 43 19 74 16 19 05 16 76 07 04 89 76 05 0d 80 8f 90 91 92 80 03 0d 75 77 88 8a 98 Data Ascii: GIF89a<fff33f33ff3333fffff3ff3f3f33ff3f3ff3ffff33!NETSCAPE2.0!X,< dihlp,tmx\|pH,rl:tJZvh_o#Cpzn0B'A{Ctvvuw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49719	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:50 UTC	585	OUT	GET /Robuxb.png HTTP/1.1 Host: scamwebsite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scamwebsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:50 UTC	550	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:50 GMT Content-Type: image/png Content-Length: 105581 Connection: close Last-Modified: Mon, 11 Mar 2024 21:30:13 GMT ETag: "65ef77e5-19c6d" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-1 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:50 UTC	15834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a3 00 00 00 ba 08 06 00 00 00 03 3b 22 13 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 20 00 49 44 41 54 78 da ec bd 67 97 24 c9 b1 25 76 5d 85 48 9d 25 5b 4e 77 03 18 e0 89 e5 3e 7e d9 0f 24 ff ff a7 a5 58 f2 ed f2 01 18 4c f7 b4 2e 9d 32 b4 0b 7e 30 77 8f c8 ea 1e b1 e0 c3 21 e6 b0 e2 9c 9e e9 a9 c9 ca 88 70 61 76 ed da 35 73 e6 9c 73 78 b8 1e ae 87 eb e1 7a b8 1e ae ff 0f 2f fe 30 04 0f d7 c3 f5 70 3d 5c 0f d7 83 33 7a b8 1e ae 87 eb e1 7a b8 1e 9c d1 c3 10 3c 5c 0f d7 c3 f5 70 3d 5c 0f ce e8 e1 7a b8 1e ae 87 eb e1 7a 70 46 0f 43 f0 70 3d 5c 0f d7 c3 f5 70 3d 38 a3 87 eb e1 7a b8 1e ae 87 eb c1 19 3d 0c c1 c3 f5 70 3d Data Ascii: PNGIHDR;"bKGDCpHYsttfx IDATxg$%v]H%[Nw>~$XL.2~0w!pav5ssxz/0p=\3zz<\p=\zzpFCp=\p=8z=p=
2024-07-02 22:24:50 UTC	16384	IN	Data Raw: 1d 07 21 d8 20 97 c9 fa 03 23 19 e2 e9 ca 0c 0c 06 e1 98 11 e5 f3 8e 54 df 64 9c 85 60 14 b1 5d 5f 5f c7 a2 7e 62 1c a8 0c a2 6d 3b 2f 42 6a d1 b4 9d 2f b8 a5 5e 8c a3 71 8e 2c cb e2 39 6e 52 4a cc 66 33 6c b7 3b 64 19 29 11 b5 d6 38 3a 5a 22 cb 32 dc dc dc 02 65 85 b6 eb a8 1b 87 2f 2f b1 c6 20 49 13 02 99 3a 9c 73 06 b4 da c6 b2 8f e0 e0 e6 f3 19 9e 7f f3 04 eb d5 3a 1e be 39 19 8f 71 7c 74 84 f5 2a ec 43 af 7c f4 8c 82 1d 38 b5 5f 85 80 21 78 ce f1 78 44 3d e2 f2 0c 0c 1c 6d d3 e2 e8 78 89 2c 4b 71 79 71 89 a6 6b 71 7e 7e 4a aa 33 50 2d c1 cd f5 0a ef de 7e 40 d7 b5 31 a2 b2 9e 2a 62 b0 18 8d 72 3c 7e fc 08 eb f5 06 d7 d7 37 24 83 95 54 3b d0 b6 2d f2 71 0e 95 90 ea ee d3 a7 cf 78 fe fc 29 4e cf 8e d1 34 35 aa b2 f4 dc 30 89 28 16 8b 39 d6 ab 35 9a a6 Data Ascii: ! #Td`]__~bm;/Bj/^q,9nRJf3l;d)8:Z"2e// I:s:9q\|tC\|8_!xxD=mx,Kqyqkq~~J3P-~@1br<~7$T;-qx)N450(95
2024-07-02 22:24:50 UTC	16384	IN	Data Raw: 5a bd da 1c 8c 1a 55 a6 aa 1f 0c c3 22 92 e8 dd 92 5c 39 b1 83 35 fd 38 b6 f3 7c 0d ee 24 3d 9e 82 9c f9 dd 5a d7 e9 5a b7 55 52 22 5e 08 7c 8f 1e 4b 67 3a 67 67 e0 8b dc a9 31 17 cd 13 3f 5c df 0b 19 c5 fe c3 cb 3f 14 29 65 91 f3 bb 52 98 61 17 ac 19 95 80 82 c2 02 df 8d de a6 d3 89 04 3a ee 4f 2c 17 0b 66 b3 29 75 dd 52 16 22 8a da 1f 8f 72 bd eb 1e cf f7 e8 4c 8f 3f 10 16 30 ec f7 07 7e f9 f5 17 1a 3a b6 17 5b 82 34 e2 e2 ab 6b 30 86 40 07 22 b9 77 c2 95 ba a9 39 1d 8f dc 7e fa cc c3 dd 3d 71 94 50 17 25 7e 14 70 f5 ee 9a 6c 92 11 2f 27 a4 4c df 88 72 a4 09 e9 8c a1 2a 0a 9e f7 3b 9e 9f 5f 88 5c 23 5a 9e cf 22 38 73 ca 58 6b ac 8b a1 f9 83 48 bb 8d 11 3f 8d e9 45 f2 eb f9 3e 7d dd 80 83 fa 05 69 48 3a cf 78 2a 24 1d 15 67 5a 6c ea 9a aa 28 b0 06 4c 67 Data Ascii: ZU"\958\|$=ZZUR"^\|Kg:gg1?\?)eRa:O,f)uR"rL?0~:[4k0@"w9~=qP%~pl/'Lr;_\#Z"8sXkH?E>}iH:x$gZl(Lg
2024-07-02 22:24:50 UTC	16384	IN	Data Raw: 21 2f 58 6f b6 38 10 2f 60 9a 12 28 45 55 94 d8 d6 90 8d 32 c2 38 42 6b 68 ad 91 b8 89 38 c2 34 8e d6 fa 44 53 27 3f 0b e2 08 ab 95 3c 3e 08 d0 81 54 22 06 68 3b 23 91 15 4a 61 bb 0e ed 99 77 c6 5a 1f 90 17 92 e7 85 54 2d 7e 71 55 3e ac 51 69 25 33 17 25 58 9d b6 35 54 95 88 9f ba ae 45 c8 32 21 b3 f9 94 24 89 4f ac 1d 47 0d 83 d2 8a 50 09 c1 fb d3 c7 07 7e fc e1 67 ea a6 65 b9 5c a2 b5 66 b3 d9 f2 f3 2f 9f a4 ea 98 8e e9 ba d6 ab 72 7b d4 98 1a 50 45 3d 74 56 6b 69 41 76 5d c5 f3 cb 8a e7 a7 35 cf 4f 2b 69 25 82 9f 2b 1f 98 4e a7 34 cd 82 f1 68 c4 cd ab 6b 6e ef 6e c8 b2 8c ae 91 b4 84 dd 6e 47 96 49 f8 60 1c c7 5c 2f ae f8 fd 1f 7e c7 f7 df ff 99 b6 eb 88 93 74 10 5d 8c c7 23 62 9f 80 1d 68 3d b4 2f c5 28 af be 9d 3c a3 3e 42 a2 67 cb 05 81 e0 ce cb b2 Data Ascii: !/Xo8/`(EU28Bkh84DS'?<>T"h;#JawZT-~qU>Qi%3%X5TE2!$OGP~ge\f/r{PE=tVkiAv]5O+i%+N4hknnnGI`\/~t]#bh=/(<>Bg
2024-07-02 22:24:50 UTC	16384	IN	Data Raw: 0b 93 1b 4f 46 14 45 e9 a7 36 31 59 96 7a 64 99 41 da cf 85 06 bf b8 50 3d b6 3c d8 23 c9 90 38 ed 47 4f aa 5b 61 b0 83 42 cf 81 97 1d 20 c0 51 f7 a3 30 e4 d5 ab 17 8c 46 23 ee ef 57 5c 5f df ba 04 d8 c4 ed e1 eb ba a1 ae 1b ec de 71 fa 3a dd 39 83 b0 f4 5f c3 74 34 4d c8 b3 67 6e 12 95 a5 29 52 4a d6 db 0d e3 c9 88 cd 66 c3 f5 a7 5b ba 4e 13 45 91 4b 57 fa ca 99 46 7f b7 cb 28 8a 02 e2 38 63 b3 d9 0c 58 8f aa 72 ac a4 ff fe 7f fc 77 a6 93 09 d7 37 37 ec b6 5b 77 30 8c 52 ea a6 1a d4 28 52 08 92 24 26 08 42 54 10 d0 d4 6e 06 3c 1e 8f dc 58 5e b9 4a be d3 2e 10 8f 9e 94 6b 0f cd 87 90 5e fa 7d 74 9e d9 a3 51 99 3d ba ac 84 87 a9 8a fe 2d b7 d0 79 93 aa ed 37 d2 5e ca 6b 8d b7 a4 08 9f d7 24 dc 28 2a c0 65 c4 db 3e f3 63 c0 c8 1f 2d 7f dd 48 9a ce 6a 17 aa Data Ascii: OFE61YzdAP=<#8GO[aB Q0F#W\_q:9_t4Mgn)RJf[NEKWF(8cXrw77[w0R(R$&BTn<X^J.k^}tQ=-y7^k$(*e>c-Hj
2024-07-02 22:24:50 UTC	16384	IN	Data Raw: 15 12 f8 d0 3b c7 66 b3 45 29 cd 6e bb e7 f1 e1 89 ba aa 49 92 84 cb ab 0b 2e 2e ce 59 2e 57 7c fa f4 99 ba ae bf 6a d1 73 22 46 0e 53 65 55 56 dc df dd a3 b5 e1 db 0f 1f 78 fb e6 2d 9f 3f 7f 66 7f d8 b1 d9 6e d9 6c b6 4c a7 53 ee ef 1e 29 0f 15 79 91 92 66 b2 f3 37 91 19 64 2a fd 16 8a 51 58 5a 3b eb d8 ed f6 38 eb 98 4e a7 14 79 ce 6a b3 61 7e be 60 71 75 4e 32 ce 29 6d cd f3 72 c3 7a b3 c5 e1 c8 e2 94 51 96 33 2a 46 8c 26 23 d2 38 21 0b 01 74 ce 39 e6 e7 0b 26 67 33 4c 1e 53 ba 9a cd 6a cb 66 bf a7 69 5b 94 d2 24 51 cc 6c 32 61 92 17 4c 16 33 8c d6 b4 4d 43 b9 db b3 5c ad 19 4f ff 3f ea de b3 c9 92 23 cd ce 7c 5c 85 ba 3a 75 09 00 dd 18 8c e0 70 f7 ff ff 88 1d 5b e3 9a 91 1c 0e bb 1b 68 94 ae 54 57 df 50 1e 1e fb e1 f5 88 cc 2a 80 62 97 d3 ec c1 07 18 Data Ascii: ;fE)nI..Y.W\|js"FSeUVx-?fnlLS)yf7dQXZ;8Nyja~`quN2)mrzQ3F&#8!t9&g3LSjfi[$Ql2aL3MC\O?#\|\:up[hTWP*b
2024-07-02 22:24:50 UTC	7827	IN	Data Raw: 0c b4 22 3e b0 26 20 23 ef 9e e9 e2 fc 0c 79 9e 89 33 22 ce 30 d2 80 29 cb 12 b7 37 b7 48 e2 18 cf ce 17 f8 97 9f 7f c6 64 46 e0 98 77 ef 3f 90 f1 88 22 66 d5 00 66 f3 19 26 d3 09 97 65 8d f4 d6 0c b6 e8 0c 70 71 75 81 d9 7c 86 28 4e 60 a1 a4 57 77 7f bf c2 db 37 ef f0 87 57 2f 70 7e 76 8e 3c 1b 53 13 dd 2a a2 3b 52 04 fe 50 5a 23 4d 53 44 69 0a ad 78 c6 ab ac f0 f1 e3 17 ac 96 6b cc 66 a4 bc 99 67 39 ea f6 00 70 90 06 2e f3 ce 26 63 fc f4 c7 3f e2 c7 9f 7e c4 fc 6c 8e a2 28 08 29 16 28 24 79 0e 1d c7 08 1a 22 c5 84 02 da a6 46 53 b7 18 8f 47 f8 d3 4f 3f e1 c7 9f 7e c4 b3 67 e7 d8 ed 77 88 c2 08 e7 e7 e7 d8 ac d7 14 c8 6c 1a 6c b7 7b 3c 7b fe 8c 41 31 81 80 7d 9e 3d 7f 86 7f fa a7 9f f0 3f fe fb ff 94 8a 40 10 04 22 97 10 85 11 1a 90 a4 c7 dd fd 03 5e bc Data Ascii: ">& #y3"0)7HdFw?"ff&epqu\|(N`Ww7W/p~v<S*;RPZ#MSDixkfg9p.&c?~l()($y"FSGO?~gwll{<{A1}=?@"^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49725	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:51 UTC	351	OUT	GET /Untitled.png HTTP/1.1 Host: scamwebsite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:51 UTC	548	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:51 GMT Content-Type: image/png Content-Length: 15124 Connection: close Last-Modified: Wed, 19 Jun 2024 19:52:28 GMT ETag: "667336fc-3b14" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-2 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:51 UTC	15124	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 90 00 00 00 c8 08 06 00 00 00 c6 15 b7 e2 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 3a a9 49 44 41 54 78 5e ed dd 87 9b 34 45 f5 3e fc f7 ff 10 73 02 45 40 01 11 04 44 b2 02 92 11 24 27 c9 39 83 20 19 89 92 11 c9 20 39 23 51 92 12 24 83 48 96 20 19 04 44 92 39 f4 fb fb 14 4f ed b7 9f a6 66 c3 3c 33 b3 3d bb e7 be ae 73 ed ee 6c 77 75 75 f5 d4 7d d7 39 a7 aa fa ff ab 02 81 40 20 10 e8 02 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 20 10 e8 0a 21 20 81 40 Data Ascii: PNGIHDRsRGBgAMAapHYsttfx:IDATx^4E>sE@D$'9 9#Q$H D9Of<3=slwuu}9@ ! @ ! @ ! @ ! @ ! @ ! @ ! @ ! @ ! @

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49723	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:51 UTC	348	OUT	GET /adban.gif HTTP/1.1 Host: scamwebsite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:51 UTC	547	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:51 GMT Content-Type: image/gif Content-Length: 9902 Connection: close Last-Modified: Wed, 17 Apr 2024 01:18:08 GMT ETag: "661f2350-26ae" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-2 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:51 UTC	9902	IN	Data Raw: 47 49 46 38 39 61 d4 01 3c 00 f4 00 00 ff ff 99 99 66 66 66 33 33 cc cc 66 33 33 00 66 66 33 33 33 33 00 00 00 cc cc cc 66 66 66 cc 99 66 99 66 33 cc 66 66 99 cc 33 cc 66 00 33 00 66 99 99 99 33 33 66 99 99 cc cc cc ff 66 33 66 ff ff ff 33 66 00 66 00 00 ff 99 cc 99 99 00 ff cc 00 99 33 00 66 66 99 00 00 ff 66 66 ff 33 33 ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 04 58 02 ff 00 2c 00 00 00 00 d4 01 3c 00 00 05 ff 20 20 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 ab d4 68 1a 5f 6f 23 43 d6 70 cf e8 b4 7a cd 6e 0d 06 19 30 d9 42 27 d8 09 8d 41 7b cf ef fb ff 43 19 74 16 19 05 16 76 07 04 89 76 05 0d 80 8f 90 91 92 80 03 0d 75 77 88 8a 98 Data Ascii: GIF89a<fff33f33ff3333fffff3ff3f3f33ff3f3ff3ffff33!NETSCAPE2.0!X,< dihlp,tmx\|pH,rl:tJZvh_o#Cpzn0B'A{Ctvvuw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49724	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:51 UTC	348	OUT	GET /Robux.png HTTP/1.1 Host: scamwebsite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:51 UTC	550	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:51 GMT Content-Type: image/png Content-Length: 138965 Connection: close Last-Modified: Mon, 11 Mar 2024 21:25:48 GMT ETag: "65ef76dc-21ed5" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-1 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:51 UTC	15834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a0 00 00 00 b8 08 06 00 00 00 a5 c4 38 1b 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 ff a5 49 44 41 54 78 5e ec bd 05 9c 56 47 d2 f0 5b e3 ee 30 8a bb bb bb 87 b8 13 d7 4d 36 be 71 d9 8d 11 db b8 bb 10 85 10 34 58 70 77 77 87 c1 67 06 9b 19 66 86 11 46 6f fd eb d0 f0 2c 4b b2 af ec 7b 7f f7 7e df db e4 e4 cc 73 a4 bb ba ba bc ab fb f8 e5 e6 ad ae 0a 08 08 10 3f 3f 3f a9 aa aa 12 57 f8 bb bc bc 5c 82 83 83 cf fc ae ac ac fc 87 33 25 32 22 d6 de a5 70 ad ac ac 4c 2a 2a 2a ec 9a bf bf bf fd e6 1c 1a 1a 2a a7 4e 9d b2 67 82 82 82 a4 b4 b4 f4 cc 33 14 fe 3e df 51 54 54 64 f5 f1 1c b0 70 0d b8 Data Ascii: PNGIHDR8sRGBgAMAapHYsttfxIDATx^VG[0M6q4XpwwgfFo,K{~s???W\3%2"pL****Ng3>QTTdp
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: 0d f0 00 37 63 03 be c0 09 70 39 1a 02 7e a2 4b 99 19 44 1f 0a ad 0e 0c e1 29 53 26 19 6d ff e5 e1 07 ad 0f 78 13 c0 f0 10 21 73 6d 9b 79 4e 52 e9 49 f2 80 8e df 7a eb 4d f3 24 91 bd 18 5b b4 03 6e 81 15 45 40 38 10 05 f3 eb af bf 9a 4c 65 8c 38 80 11 d8 a0 4d e4 2d e3 cc c1 78 e1 d5 81 0f f8 00 3a 03 6e c6 1e f9 cb 3d fe 86 a7 91 ff cc b7 33 4f 84 07 8b be 60 be 0e cf 13 b9 ce ce 3a dd 7b 74 35 58 08 9f 2e 59 b2 d8 70 34 7c c4 8f d2 ba c5 e9 75 40 cb 56 cc aa 82 a8 5e 79 e5 55 23 9e 7e 7d 07 99 e7 41 66 1a de 03 b1 eb e6 cd 9b 99 3b fa e0 83 f7 9b fb 37 f4 a5 17 2c 0e 0c 82 60 22 14 10 8a 05 f7 0c 80 21 a4 87 1f 7e f8 8c b2 61 5b 93 0d 9b 36 58 47 21 72 2c 7c bc 15 de 65 32 1a e4 73 0f 4b 80 79 20 94 0d 75 81 3c 14 1d c2 1b 06 47 18 30 98 08 20 06 9c cc Data Ascii: 7cp9~KD)S&mx!smyNRIzM$[nE@8Le8M-x:n=3O`:{t5X.Yp4\|u@V^yU#~}Af;7,`"!~a[6XG!r,\|e2sKy u<G0
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: 31 83 20 25 4c 83 41 83 81 d1 a3 07 0b b9 8f 58 38 91 04 07 e0 62 5e 90 70 0f 67 68 0f 18 c0 21 86 06 e3 41 18 03 fc a3 9c e0 3d 70 c2 33 3c cb 62 53 0a d7 b0 98 09 89 03 3f f0 41 53 e0 8b 7a 30 0a e1 0b 78 13 9c 71 a0 90 98 7b a2 6f d4 8d 21 43 46 14 ef 63 70 a1 d0 08 7d 37 68 50 cf f6 c1 63 81 65 e7 ce 6d ac bd f3 95 ff ac 02 a2 1c 38 90 29 6f fc fd 33 59 b1 7c 9d c2 44 96 9e 7a f9 ca 03 64 97 1d d8 cf bc 53 9e 74 ea dc da 14 08 d9 67 f4 93 e2 14 10 5b fe b0 99 30 e9 d1 78 47 f4 1b da ca ca 3c 2a 99 6a 90 54 29 0e 6e b9 f5 2a b9 59 0f e7 3d 51 d8 2d e1 89 c7 5f 33 0f 88 f5 38 77 de 75 9d 8e b5 f7 fd 28 68 e4 93 8f bf b7 70 19 74 0b 4c 7c 48 8d b5 78 84 93 f1 6c 1a 35 ae 2b 4f 3d 7d af 7d 49 95 88 49 76 36 2b fe c7 d8 16 4e 28 ae 01 03 7b c8 4d 37 5f 21 Data Ascii: 1 %LAX8b^pgh!A=p3<bS?ASz0xq{o!CFcp}7hPcem8)o3Y\|DzdStg[0xG<jT)nY=Q-_38wu(hptL\|Hxl5+O=}}IIv6+N({M7_!
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: 9e c2 43 22 e5 c8 b1 a3 36 b9 8f 20 c7 cb 45 6e c0 1f f9 6a 64 e0 d5 32 d6 84 a9 6f b8 ec 06 51 93 4d 8e 95 1d b7 70 19 ca 21 20 30 58 f4 09 39 7a fc 98 85 c0 36 ee df 2a cb d6 ae 94 43 47 33 6c 53 d2 53 4c ce 2b 3c 78 5a 31 09 f1 b6 ee e6 64 49 b1 e7 e1 68 7f 02 94 57 4b e1 95 d0 30 79 f0 e1 47 64 b0 7a 3f b1 91 f1 12 ee 1f 2d 27 d5 c0 23 9b 8d 02 fb f6 e9 d3 4f fa f4 ea 6d 0a 77 f5 8e d5 b2 6b c7 6e 9b 3e 60 3e 32 22 24 4a e5 0a 1f a4 0c 97 e2 a2 53 72 f8 e8 31 c9 51 ef 27 3a 2a 8e 68 99 e4 e6 17 48 44 64 8c d2 6b 9c 3a 8d fe 6a 92 05 c8 16 55 56 db 76 ed 56 7a f7 8c 42 d6 b4 d1 d7 e2 8a 62 f3 c8 48 8e a8 5b bf 9e 24 86 26 59 46 2f 82 3a 42 f1 99 ab 9e 0b 3c 00 af c0 23 a1 61 c1 c6 bf e0 13 fc 11 5a 63 5e 15 c5 e1 ed 13 17 6b f3 e3 b7 de 7a 8b f1 8a 0b Data Ascii: C"6 Enjd2oQMp! 0X9z6CG3lSSL+<xZ1dIhWK0yGdz?-'#Omwkn>`>2"$JSr1Q':hHDdk:jUVvVzBbH[$&YF/:B<#aZc^kz
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: e5 c6 99 af 8c 77 a2 c4 af 56 82 41 70 4d 98 d8 4e ed 3b 48 8f 2e 5d 25 31 3e 49 22 55 f2 d9 be 73 87 69 05 f4 65 69 d9 ba 95 34 29 62 db 5b 90 27 21 3a 4f 52 d2 d3 a5 b5 e2 8b 72 c5 4d 04 fe ac d1 79 c3 b7 21 6c b8 69 a3 45 59 b6 74 a9 74 51 c6 8e 68 6c 05 8a 0f e2 74 fe a7 29 fe 22 62 37 4c 1b c6 f5 84 44 d4 5c 2a 85 85 06 4b a9 fe e6 1b ac 4f da ab 8c 22 b6 94 64 e5 ec 19 cd 04 49 c5 93 af 42 19 c3 30 e5 fc c3 15 81 87 69 42 a2 22 6a 3d fb f0 50 57 ea 89 57 31 f3 84 ed 14 60 cc 41 da 30 ea cc 39 ae bb 79 43 1b d0 80 ad 5b b5 b5 c5 a2 78 c8 de 7e fb 23 f2 ca 2b 8f c8 95 57 fc 56 99 e5 73 6d 6b 03 36 99 43 9d 8e f4 c2 5c e6 75 2f fa 35 51 5c 30 39 78 78 cb cb 9f be f0 da 3e 44 eb 69 ea 4e c5 2f d3 67 4c 97 67 9f 7d ce d4 fc 10 01 18 7f fa 01 2f 37 f0 73 Data Ascii: wVApMN;H.]%1>I"Usiei4)b['!:ORrMy!liEYttQhlt)"b7LD\*KO"dIB0iB"j=PWW1`A09yC[x~#+WVsmk6C\u/5Q\09xx>DiN/gLg}/7s
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: 18 34 14 15 3a f7 74 56 1b 71 c0 36 dd 50 ad 04 91 32 aa 84 15 aa f3 1b fc c7 1a 46 70 60 54 4c 94 e6 eb 95 89 d0 33 a8 e8 60 c0 c1 05 c4 85 6b d3 a6 a5 d5 6f dd ba 2d a6 f6 db b2 65 87 54 56 54 eb 7d cf fe 43 34 03 de 75 b8 84 36 72 f8 8b df 47 3a fe bb 80 76 26 21 b9 20 04 8c 1a 39 ca 08 03 12 0a d2 09 de b6 38 54 61 f7 a1 ff 90 88 90 60 b0 0b 81 6f 60 98 79 96 e0 a4 04 23 c5 a5 9a 3e 85 30 81 bf 08 ec 4a 7f f2 0e e6 18 84 13 67 f7 01 ff 50 1f c6 02 92 24 34 01 46 1a a2 e5 c0 1f bd 1f 19 41 15 19 00 10 23 5c ee d0 05 22 6a 21 36 f1 01 8c 48 54 00 84 08 c7 00 f5 a7 62 a8 dc 6e ba f9 46 db 53 9c 82 41 88 40 82 70 ed 7c 18 70 8d e0 06 03 85 62 70 72 a4 63 0e 4f 80 ef 39 cf ba 41 ed de e1 b7 bb ff bf 01 f2 f4 4d e4 4f 72 c0 c4 02 18 30 2c f4 24 aa 03 2a 38 Data Ascii: 4:tVq6P2Fp`TL3`ko-eTVT}C4u6rG:v&! 98Ta`o`y#>0JgP$4FA#\"j!6HTbnFSA@p\|pbprcO9AMOr0,$*8
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: a6 75 96 64 28 e7 42 f4 5d 9e a5 2c 88 ba 41 a1 78 ed a9 f4 a6 83 a6 5e bf c1 44 a7 3d e0 5e 2a cb ab 24 2a 3c ca 38 b5 c0 20 fd 6e 03 de 2e 2a 29 69 e3 a0 76 67 70 c2 d1 d1 16 38 11 10 90 14 22 4b 79 08 b2 ca 22 56 3c e2 c8 2f 48 f3 67 af 0f 26 2c 68 c5 da 45 eb 41 5b 83 58 58 fb c3 29 ef d2 96 2c ec 3d a0 ed c3 7e 4d b6 39 19 4c 9b 3e 07 21 b2 88 db 3a d0 a0 4e b1 3a e9 77 67 ef 95 93 36 3d 62 cd f1 9f 00 fa 23 22 d0 0b fd 8f c4 82 77 db ff 86 f8 fc 4f c1 b3 ed 10 21 3d c0 ce 69 4b fe 06 26 76 97 df 77 3c d7 76 67 05 d8 64 ee c5 2d 1f 29 f1 d9 62 01 53 d9 81 53 d9 2c bb f7 73 c3 d7 bd 6f f5 c6 02 9d af e3 ca 43 8c 1e d3 c8 38 60 8e e2 4e ed c7 f8 61 fe ea b3 4e fd e4 e6 f3 c1 f7 15 dc 39 ef 83 d4 a0 44 44 4c e0 c8 aa 7d e6 37 f7 bc 31 e9 11 03 7b 07 a2 Data Ascii: ud(B],Ax^D=^$<8 n.*)ivgp8"Ky"V</Hg&,hEA[XX),=~M9L>!:N:wg6=b#"wO!=iK&vw<vgd-)bSS,soC8`NaN9DDL}71{
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: 35 f2 0d a1 41 57 6b 12 43 4a f7 6e bd ca d0 cd 47 94 de c1 78 00 0c 93 7c 73 c5 5b e5 d9 d7 9f 2b f3 5f 9d 5e 3a b6 15 f9 b6 26 4d 50 f9 db 72 2d 22 b4 37 81 01 99 7c 30 5a 34 31 84 09 3f 64 b5 4f a8 8a b2 11 ea e9 79 88 86 68 68 f1 04 97 f1 b0 52 20 36 41 85 11 aa 8b 1f 14 61 22 0e df 7d f8 8d e5 2f b3 87 45 b4 9e 73 2f 30 69 fe 52 c0 c5 f4 31 7f 75 9b 2c 84 07 b1 30 5b 05 c2 10 08 90 cc 15 f2 49 d3 63 13 18 c6 6f 53 9f fe 11 46 5c 5f 34 50 96 52 d7 40 c6 4a 30 da 7f 51 65 fd 5e b1 62 59 f6 bd 22 9c 35 69 b9 e4 a6 b6 f8 67 5c 04 9c 71 ea 73 cf ae bd d2 17 fc 42 28 14 2c 37 fd 34 cf b2 20 28 60 08 6e e0 a7 5f 08 c5 3a 8d be 3b 7e 43 fd c0 a5 5f 04 1c 02 31 37 ae a2 27 b9 4e 59 c7 ee c9 09 25 24 d6 47 50 89 fd 20 dc 3a ea 23 40 8d 01 83 20 40 6d 86 db 72 Data Ascii: 5AWkCJnGx\|s[+_^:&MPr-"7\|0Z41?dOyhhR 6Aa"}/Es/0iR1u,0[IcoSF\_4PR@J0Qe^bY"5ig\qsB(,74 (`n_:;~C_17'NY%$GP :#@ @mr
2024-07-02 22:24:51 UTC	8443	IN	Data Raw: 4b 8f 6e 3d ca ba f8 cd da 0e e1 a2 cd 0c 43 8f f1 6d b7 dd e8 c0 55 fb c5 7a 67 48 f7 e6 c3 86 97 76 f1 bd 4d 08 27 29 72 f2 a8 f8 b5 95 65 b2 e9 90 4d cb f0 cd 87 47 bf 7a e4 a2 b6 f4 5b 16 db 9b b7 6c 96 cf b7 0a 8b 49 26 01 5a ba 93 32 29 0d e6 ab 77 cf 3e a5 5d e0 36 7c 96 ba 65 d3 10 16 98 2c 5c 85 e7 f0 9d cb 09 1e e3 29 ee a3 23 34 94 07 9c 05 cd 60 9e e8 5a 3f c0 d1 5c 53 36 8d 19 2e 79 87 80 82 c3 82 5d 68 f0 68 8f a2 41 69 24 a8 d1 25 6b 09 2e a2 2b f5 78 07 2d e8 83 e5 04 c8 80 31 e2 07 f0 8d 6b 49 3f 30 70 c2 51 bf ad 1d 13 40 14 21 ca 92 31 e6 a7 6b e7 74 a1 6d bb cd 76 c9 64 29 96 04 11 ba 37 36 e3 f7 d1 57 fd 56 17 ba 25 8c 8d 05 5f 04 33 3c 54 fb fa 8e 96 09 78 56 18 45 0a 1c d0 1a 98 e8 93 31 ea a7 f1 72 f5 52 14 f0 68 86 83 fb 94 58 e3 Data Ascii: Kn=CmUzgHvM')reMGz[lI&Z2)w>]6\|e,\)#4`Z?\S6.y]hhAi$%k.+x-1kI?0pQ@!1ktmvd)76WV%_3<TxVE1rRhX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49727	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:51 UTC	349	OUT	GET /Robuxb.png HTTP/1.1 Host: scamwebsite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:51 UTC	550	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:51 GMT Content-Type: image/png Content-Length: 105581 Connection: close Last-Modified: Mon, 11 Mar 2024 21:30:13 GMT ETag: "65ef77e5-19c6d" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-1 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:51 UTC	15834	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 a3 00 00 00 ba 08 06 00 00 00 03 3b 22 13 00 00 00 06 62 4b 47 44 00 00 00 00 00 00 f9 43 bb 7f 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 20 00 49 44 41 54 78 da ec bd 67 97 24 c9 b1 25 76 5d 85 48 9d 25 5b 4e 77 03 18 e0 89 e5 3e 7e d9 0f 24 ff ff a7 a5 58 f2 ed f2 01 18 4c f7 b4 2e 9d 32 b4 0b 7e 30 77 8f c8 ea 1e b1 e0 c3 21 e6 b0 e2 9c 9e e9 a9 c9 ca 88 70 61 76 ed da 35 73 e6 9c 73 78 b8 1e ae 87 eb e1 7a b8 1e ae ff 0f 2f fe 30 04 0f d7 c3 f5 70 3d 5c 0f d7 83 33 7a b8 1e ae 87 eb e1 7a b8 1e 9c d1 c3 10 3c 5c 0f d7 c3 f5 70 3d 5c 0f ce e8 e1 7a b8 1e ae 87 eb e1 7a 70 46 0f 43 f0 70 3d 5c 0f d7 c3 f5 70 3d 38 a3 87 eb e1 7a b8 1e ae 87 eb c1 19 3d 0c c1 c3 f5 70 3d Data Ascii: PNGIHDR;"bKGDCpHYsttfx IDATxg$%v]H%[Nw>~$XL.2~0w!pav5ssxz/0p=\3zz<\p=\zzpFCp=\p=8z=p=
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: 1d 07 21 d8 20 97 c9 fa 03 23 19 e2 e9 ca 0c 0c 06 e1 98 11 e5 f3 8e 54 df 64 9c 85 60 14 b1 5d 5f 5f c7 a2 7e 62 1c a8 0c a2 6d 3b 2f 42 6a d1 b4 9d 2f b8 a5 5e 8c a3 71 8e 2c cb e2 39 6e 52 4a cc 66 33 6c b7 3b 64 19 29 11 b5 d6 38 3a 5a 22 cb 32 dc dc dc 02 65 85 b6 eb a8 1b 87 2f 2f b1 c6 20 49 13 02 99 3a 9c 73 06 b4 da c6 b2 8f e0 e0 e6 f3 19 9e 7f f3 04 eb d5 3a 1e be 39 19 8f 71 7c 74 84 f5 2a ec 43 af 7c f4 8c 82 1d 38 b5 5f 85 80 21 78 ce f1 78 44 3d e2 f2 0c 0c 1c 6d d3 e2 e8 78 89 2c 4b 71 79 71 89 a6 6b 71 7e 7e 4a aa 33 50 2d c1 cd f5 0a ef de 7e 40 d7 b5 31 a2 b2 9e 2a 62 b0 18 8d 72 3c 7e fc 08 eb f5 06 d7 d7 37 24 83 95 54 3b d0 b6 2d f2 71 0e 95 90 ea ee d3 a7 cf 78 fe fc 29 4e cf 8e d1 34 35 aa b2 f4 dc 30 89 28 16 8b 39 d6 ab 35 9a a6 Data Ascii: ! #Td`]__~bm;/Bj/^q,9nRJf3l;d)8:Z"2e// I:s:9q\|tC\|8_!xxD=mx,Kqyqkq~~J3P-~@1br<~7$T;-qx)N450(95
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: 5a bd da 1c 8c 1a 55 a6 aa 1f 0c c3 22 92 e8 dd 92 5c 39 b1 83 35 fd 38 b6 f3 7c 0d ee 24 3d 9e 82 9c f9 dd 5a d7 e9 5a b7 55 52 22 5e 08 7c 8f 1e 4b 67 3a 67 67 e0 8b dc a9 31 17 cd 13 3f 5c df 0b 19 c5 fe c3 cb 3f 14 29 65 91 f3 bb 52 98 61 17 ac 19 95 80 82 c2 02 df 8d de a6 d3 89 04 3a ee 4f 2c 17 0b 66 b3 29 75 dd 52 16 22 8a da 1f 8f 72 bd eb 1e cf f7 e8 4c 8f 3f 10 16 30 ec f7 07 7e f9 f5 17 1a 3a b6 17 5b 82 34 e2 e2 ab 6b 30 86 40 07 22 b9 77 c2 95 ba a9 39 1d 8f dc 7e fa cc c3 dd 3d 71 94 50 17 25 7e 14 70 f5 ee 9a 6c 92 11 2f 27 a4 4c df 88 72 a4 09 e9 8c a1 2a 0a 9e f7 3b 9e 9f 5f 88 5c 23 5a 9e cf 22 38 73 ca 58 6b ac 8b a1 f9 83 48 bb 8d 11 3f 8d e9 45 f2 eb f9 3e 7d dd 80 83 fa 05 69 48 3a cf 78 2a 24 1d 15 67 5a 6c ea 9a aa 28 b0 06 4c 67 Data Ascii: ZU"\958\|$=ZZUR"^\|Kg:gg1?\?)eRa:O,f)uR"rL?0~:[4k0@"w9~=qP%~pl/'Lr;_\#Z"8sXkH?E>}iH:x$gZl(Lg
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: 21 2f 58 6f b6 38 10 2f 60 9a 12 28 45 55 94 d8 d6 90 8d 32 c2 38 42 6b 68 ad 91 b8 89 38 c2 34 8e d6 fa 44 53 27 3f 0b e2 08 ab 95 3c 3e 08 d0 81 54 22 06 68 3b 23 91 15 4a 61 bb 0e ed 99 77 c6 5a 1f 90 17 92 e7 85 54 2d 7e 71 55 3e ac 51 69 25 33 17 25 58 9d b6 35 54 95 88 9f ba ae 45 c8 32 21 b3 f9 94 24 89 4f ac 1d 47 0d 83 d2 8a 50 09 c1 fb d3 c7 07 7e fc e1 67 ea a6 65 b9 5c a2 b5 66 b3 d9 f2 f3 2f 9f a4 ea 98 8e e9 ba d6 ab 72 7b d4 98 1a 50 45 3d 74 56 6b 69 41 76 5d c5 f3 cb 8a e7 a7 35 cf 4f 2b 69 25 82 9f 2b 1f 98 4e a7 34 cd 82 f1 68 c4 cd ab 6b 6e ef 6e c8 b2 8c ae 91 b4 84 dd 6e 47 96 49 f8 60 1c c7 5c 2f ae f8 fd 1f 7e c7 f7 df ff 99 b6 eb 88 93 74 10 5d 8c c7 23 62 9f 80 1d 68 3d b4 2f c5 28 af be 9d 3c a3 3e 42 a2 67 cb 05 81 e0 ce cb b2 Data Ascii: !/Xo8/`(EU28Bkh84DS'?<>T"h;#JawZT-~qU>Qi%3%X5TE2!$OGP~ge\f/r{PE=tVkiAv]5O+i%+N4hknnnGI`\/~t]#bh=/(<>Bg
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: 0b 93 1b 4f 46 14 45 e9 a7 36 31 59 96 7a 64 99 41 da cf 85 06 bf b8 50 3d b6 3c d8 23 c9 90 38 ed 47 4f aa 5b 61 b0 83 42 cf 81 97 1d 20 c0 51 f7 a3 30 e4 d5 ab 17 8c 46 23 ee ef 57 5c 5f df ba 04 d8 c4 ed e1 eb ba a1 ae 1b ec de 71 fa 3a dd 39 83 b0 f4 5f c3 74 34 4d c8 b3 67 6e 12 95 a5 29 52 4a d6 db 0d e3 c9 88 cd 66 c3 f5 a7 5b ba 4e 13 45 91 4b 57 fa ca 99 46 7f b7 cb 28 8a 02 e2 38 63 b3 d9 0c 58 8f aa 72 ac a4 ff fe 7f fc 77 a6 93 09 d7 37 37 ec b6 5b 77 30 8c 52 ea a6 1a d4 28 52 08 92 24 26 08 42 54 10 d0 d4 6e 06 3c 1e 8f dc 58 5e b9 4a be d3 2e 10 8f 9e 94 6b 0f cd 87 90 5e fa 7d 74 9e d9 a3 51 99 3d ba ac 84 87 a9 8a fe 2d b7 d0 79 93 aa ed 37 d2 5e ca 6b 8d b7 a4 08 9f d7 24 dc 28 2a c0 65 c4 db 3e f3 63 c0 c8 1f 2d 7f dd 48 9a ce 6a 17 aa Data Ascii: OFE61YzdAP=<#8GO[aB Q0F#W\_q:9_t4Mgn)RJf[NEKWF(8cXrw77[w0R(R$&BTn<X^J.k^}tQ=-y7^k$(*e>c-Hj
2024-07-02 22:24:51 UTC	16384	IN	Data Raw: 15 12 f8 d0 3b c7 66 b3 45 29 cd 6e bb e7 f1 e1 89 ba aa 49 92 84 cb ab 0b 2e 2e ce 59 2e 57 7c fa f4 99 ba ae bf 6a d1 73 22 46 0e 53 65 55 56 dc df dd a3 b5 e1 db 0f 1f 78 fb e6 2d 9f 3f 7f 66 7f d8 b1 d9 6e d9 6c b6 4c a7 53 ee ef 1e 29 0f 15 79 91 92 66 b2 f3 37 91 19 64 2a fd 16 8a 51 58 5a 3b eb d8 ed f6 38 eb 98 4e a7 14 79 ce 6a b3 61 7e be 60 71 75 4e 32 ce 29 6d cd f3 72 c3 7a b3 c5 e1 c8 e2 94 51 96 33 2a 46 8c 26 23 d2 38 21 0b 01 74 ce 39 e6 e7 0b 26 67 33 4c 1e 53 ba 9a cd 6a cb 66 bf a7 69 5b 94 d2 24 51 cc 6c 32 61 92 17 4c 16 33 8c d6 b4 4d 43 b9 db b3 5c ad 19 4f ff 3f ea de b3 c9 92 23 cd ce 7c 5c 85 ba 3a 75 09 00 dd 18 8c e0 70 f7 ff ff 88 1d 5b e3 9a 91 1c 0e bb 1b 68 94 ae 54 57 df 50 1e 1e fb e1 f5 88 cc 2a 80 62 97 d3 ec c1 07 18 Data Ascii: ;fE)nI..Y.W\|js"FSeUVx-?fnlLS)yf7dQXZ;8Nyja~`quN2)mrzQ3F&#8!t9&g3LSjfi[$Ql2aL3MC\O?#\|\:up[hTWP*b
2024-07-02 22:24:51 UTC	7827	IN	Data Raw: 0c b4 22 3e b0 26 20 23 ef 9e e9 e2 fc 0c 79 9e 89 33 22 ce 30 d2 80 29 cb 12 b7 37 b7 48 e2 18 cf ce 17 f8 97 9f 7f c6 64 46 e0 98 77 ef 3f 90 f1 88 22 66 d5 00 66 f3 19 26 d3 09 97 65 8d f4 d6 0c b6 e8 0c 70 71 75 81 d9 7c 86 28 4e 60 a1 a4 57 77 7f bf c2 db 37 ef f0 87 57 2f 70 7e 76 8e 3c 1b 53 13 dd 2a a2 3b 52 04 fe 50 5a 23 4d 53 44 69 0a ad 78 c6 ab ac f0 f1 e3 17 ac 96 6b cc 66 a4 bc 99 67 39 ea f6 00 70 90 06 2e f3 ce 26 63 fc f4 c7 3f e2 c7 9f 7e c4 fc 6c 8e a2 28 08 29 16 28 24 79 0e 1d c7 08 1a 22 c5 84 02 da a6 46 53 b7 18 8f 47 f8 d3 4f 3f e1 c7 9f 7e c4 b3 67 e7 d8 ed 77 88 c2 08 e7 e7 e7 d8 ac d7 14 c8 6c 1a 6c b7 7b 3c 7b fe 8c 41 31 81 80 7d 9e 3d 7f 86 7f fa a7 9f f0 3f fe fb ff 94 8a 40 10 04 22 97 10 85 11 1a 90 a4 c7 dd fd 03 5e bc Data Ascii: ">& #y3"0)7HdFw?"ff&epqu\|(N`Ww7W/p~v<S*;RPZ#MSDixkfg9p.&c?~l()($y"FSGO?~gwll{<{A1}=?@"^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49726	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:52 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 22:24:52 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=150312 Date: Tue, 02 Jul 2024 22:24:52 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49729	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:53 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-02 22:24:53 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=150299 Date: Tue, 02 Jul 2024 22:24:53 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-02 22:24:53 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49731	142.250.185.66	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:53 UTC	840	OUT	GET /pagead/html/r20240626/r20110914/zrt_lookup_fy2021.html HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://scamwebsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:53 UTC	638	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9162 X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 17:12:47 GMT Expires: Tue, 16 Jul 2024 17:12:47 GMT Cache-Control: public, max-age=1209600 ETag: 9187630395144177108 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Age: 18726 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:24:53 UTC	752	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6b 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 2c 76 3b 61 3a 7b 66 6f 72 28 76 61 72 20 63 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 7a 3d 6b 2c 41 3d 30 3b 41 3c 63 61 2e 6c 65 6e 67 74 68 3b 41 2b 2b 29 69 66 28 7a 3d 7a 5b 63 61 5b 41 5d 5d 2c 7a 3d 3d Data Ascii: <!DOCTYPE html><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var k=this\|\|self;function m(a){return a};var n,v;a:{for(var ca=["CLOSURE_FLAGS"],z=k,A=0;A<ca.length;A++)if(z=z[ca[A]],z==
2024-07-02 22:24:53 UTC	1390	IN	Data Raw: 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 48 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 48 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 69 61 3d 65 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 21 3d 2d 31 26 26 21 45 28 22 45 64 67 65 22 29 3b 21 45 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 47 28 29 3b 47 28 29 3b 45 28 22 53 61 66 61 72 69 22 29 26 26 28 47 28 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 45 64 67 65 22 29 29 7c 7c 28 46 28 29 3f 43 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 45 Data Ascii: l(a,b,void 0)};function H(a){H[" "](a);return a}H[" "]=function(){};var ia=ea().toLowerCase().indexOf("webkit")!=-1&&!E("Edge");!E("Android")\|\|G();G();E("Safari")&&(G()\|\|(F()?0:E("Coast"))\|\|(F()?0:E("Opera"))\|\|(F()?0:E("Edge"))\|\|(F()?C("Microsoft Edge"):E
2024-07-02 22:24:53 UTC	1390	IN	Data Raw: 62 3a 7b 76 61 72 20 61 3d 70 61 28 29 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 74 72 79 7b 63 6f 6e 73 74 20 63 3d 61 5b 62 5d 2e 66 72 61 6d 65 73 2e 67 6f 6f 67 6c 65 5f 65 73 66 3b 69 66 28 63 26 26 4b 28 63 29 29 7b 4c 3d 63 3b 62 72 65 61 6b 20 62 7d 7d 63 61 74 63 68 28 63 29 7b 7d 4c 3d 6e 75 6c 6c 7d 28 61 3d 4c 29 3f 28 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 29 7c 7c 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 3d 7b 7d 29 2c 61 3d 62 29 3a 61 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 3f 2e 5b 32 5d 7d 3b 76 61 72 20 4d 3d 77 69 6e 64 6f 77 3b 76 61 72 20 75 61 3d 2f 23 28 52 3f 53 29 2d 28 2e 2a 29 2f 2c 76 61 3d 2f 5e 28 5c 64 2b 29 2d 28 2e 2a 29 2f 3b 63 6c 61 73 73 20 41 61 Data Ascii: b:{var a=pa();for(var b=0;b<a.length;b++)try{const c=a[b].frames.google_esf;if(c&&K(c)){L=c;break b}}catch(c){}L=null}(a=L)?((b=a.esf_propArray)\|\|(b=a.esf_propArray={}),a=b):a=null;return a?.[2]};var M=window;var ua=/#(R?S)-(.)/,va=/^(\d+)-(.)/;class Aa
2024-07-02 22:24:53 UTC	1390	IN	Data Raw: 64 7d 5f 65 6e 64 60 29 29 7d 0a 63 6c 61 73 73 20 4a 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 69 3d 61 7c 7c 6b 3b 6c 65 74 20 62 3d 6e 75 6c 6c 3b 61 26 26 28 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 7c 7c 5b 5d 2c 74 68 69 73 2e 68 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 2c 62 3d 61 2e 67 6f 6f 67 6c 65 5f 6d 65 61 73 75 72 65 5f 6a 73 5f 74 69 6d 69 6e 67 29 3b 74 68 69 73 2e 67 3d 51 28 29 7c 7c 28 62 21 3d 6e 75 6c 6c 3f 62 3a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3c 31 29 7d 73 74 61 72 74 28 Data Ascii: d}_end`))}class Ja{constructor(){var a=window;this.h=[];this.i=a\|\|k;let b=null;a&&(a.google_js_reporting_queue=a.google_js_reporting_queue\|\|[],this.h=a.google_js_reporting_queue,b=a.google_measure_js_timing);this.g=Q()\|\|(b!=null?b:Math.random()<1)}start(
2024-07-02 22:24:53 UTC	1390	IN	Data Raw: 3d 3d 6e 75 6c 6c 3f 68 3a 62 3b 62 72 65 61 6b 7d 6c 65 74 20 67 3d 4b 61 28 70 5b 6c 5d 2c 61 2e 69 2c 22 2c 24 22 29 3b 69 66 28 67 29 7b 67 3d 66 2b 67 3b 69 66 28 64 3e 3d 67 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 67 2e 6c 65 6e 67 74 68 3b 63 2b 3d 67 3b 66 3d 61 2e 69 3b 62 72 65 61 6b 7d 62 3d 62 3d 3d 6e 75 6c 6c 3f 68 3a 62 7d 7d 7d 61 3d 22 22 3b 62 21 3d 6e 75 6c 6c 26 26 28 61 3d 66 2b 22 74 72 6e 3d 22 2b 62 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 63 6c 61 73 73 20 53 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 61 29 7b 6c 65 74 20 62 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 2e 6e 61 Data Ascii: ==null?h:b;break}let g=Ka(p[l],a.i,",$");if(g){g=f+g;if(d>=g.length){d-=g.length;c+=g;f=a.i;break}b=b==null?h:b}}}a="";b!=null&&(a=f+"trn="+b);return c+a}class S{constructor(){this.i="&";this.h={};this.j=0;this.g=[]}};function T(a){let b=a.toString();a.na
2024-07-02 22:24:53 UTC	1390	IN	Data Raw: 3d 67 2e 6c 6f 63 61 74 69 6f 6e 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 5b 71 2d 31 5d 7c 7c 22 22 2c 78 2e 6c 3d 21 30 29 7d 76 61 72 20 74 3d 6c 3b 6c 65 74 20 4f 3d 6e 65 77 20 44 61 28 6b 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 3b 67 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 5a 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 66 6f 72 28 78 3d 5a 3b 78 3e 3d 30 3b 2d 2d 78 29 7b 76 61 72 20 75 3d 74 5b 78 5d 3b 21 67 26 26 42 61 2e 74 65 73 74 28 75 2e 75 72 6c 29 26 26 28 67 3d 75 29 3b 69 66 28 75 2e 75 72 6c 26 26 21 75 2e 6c 29 7b 4f 3d 75 3b 62 72 65 61 6b 7d 7d 75 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 57 61 3d 74 2e 6c 65 6e 67 74 68 26 26 0a 74 5b 5a 5d 2e 75 72 6c 3b 4f 2e 64 65 70 74 68 21 3d 30 26 26 57 61 26 26 28 75 3d 74 5b 5a 5d 29 3b Data Ascii: =g.location.ancestorOrigins[q-1]\|\|"",x.l=!0)}var t=l;let O=new Da(k.location.href,!1);g=null;const Z=t.length-1;for(x=Z;x>=0;--x){var u=t[x];!g&&Ba.test(u.url)&&(g=u);if(u.url&&!u.l){O=u;break}}u=null;const Wa=t.length&&t[Z].url;O.depth!=0&&Wa&&(u=t[Z]);
2024-07-02 22:24:53 UTC	1390	IN	Data Raw: 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 55 61 28 61 29 7b 61 3d 61 3d 3d 3d 6e 75 6c 6c 3f 22 6e 75 6c 6c 22 3a 61 3d 3d 3d 76 6f 69 64 20 30 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 3b 69 66 28 49 3d 3d 3d 76 6f 69 64 20 30 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 3b 76 61 72 20 63 3d 6b 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 63 26 26 63 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 7b 74 72 79 7b 62 3d 63 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 6d 7d 29 7d 63 61 74 63 68 28 64 29 7b 6b 2e 63 6f 6e 73 6f Data Ascii: nse-Identifier: Apache-2.0*/function Ua(a){a=a===null?"null":a===void 0?"undefined":a;if(I===void 0){var b=null;var c=k.trustedTypes;if(c&&c.createPolicy){try{b=c.createPolicy("goog#html",{createHTML:m,createScript:m,createScriptURL:m})}catch(d){k.conso
2024-07-02 22:24:53 UTC	70	IN	Data Raw: 28 62 29 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 3f 2e 65 72 72 6f 72 3f 2e 28 61 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 61 3b 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a Data Ascii: (b)window.console?.error?.(a);else throw a;};}).call(this);</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49732	142.250.185.66	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:53 UTC	2289	OUT	GET /pagead/ads?client=ca-pub-3935057531723584&output=html&adk=1812271804&adf=1573534164&abgtt=6&lmt=1718826837&plat=9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A34635776%2C32%3A32%2C41%3A32%2C42%3A32&plas=404x714_l%7C404x714_r&format=0x0&url=https%3A%2F%2Fscamwebsite.com%2F&pra=5&wgl=1&easpi=0&aihb=0&asro=0&ailel=28~30~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aiael=28~30~1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&aifxl=28_13~30_23&aiixl=28_4~30_6&aslmct=0.7&asamct=0.7&aisaib=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1719959089120&bpp=6&bdt=1923&idt=2094&shv=r20240626&mjsv=m202406260101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&nras=1&correlator=8551177816592&frm=20&pv=2&ga_vid=24467173.1719959091&ga_sid=1719959091&ga_hid=1438390344&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_ [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://scamwebsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:53 UTC	759	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:24:53 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 02-Jul-2024 22:39:53 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 02 Jul 2024 22:24:53 GMT Connection: close Transfer-Encoding: chunked
2024-07-02 22:24:53 UTC	610	IN	Data Raw: 32 35 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 25b<html><body style="background-color:transparent"></body></html>
2024-07-02 22:24:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49730	142.250.185.66	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:53 UTC	2048	OUT	GET /pagead/ads?client=ca-pub-3935057531723584&output=html&h=600&slotname=6407757917&adk=730000781&adf=3025194257&pi=t.ma~as.6407757917&w=1200&abgtt=6&cr_col=4&cr_row=2&fwrn=2&lmt=1718826837&rafmt=9&format=1200x600&url=https%3A%2F%2Fscamwebsite.com%2F&crui=image_stacked&fwr=0&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xMzIiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTMyIl0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xMzIiXV0sMF0.&dt=1719959089126&bpp=2&bdt=1929&idt=2140&shv=r20240626&mjsv=m202406260101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=0x0&nras=1&correlator=8551177816592&frm=20&pv=1&ga_vid=24467173.1719959091&ga_sid=1719959091&ga_hid=1438390344&ga_fc=0&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=32&ady=863&biw=1263&bih=907&scr_x=0&scr_y=0&eid=44759837%2C44795921%2C95334508%2C95334524%2C95334571%2C95334581%2C31084926%2C31084184%2C95336522%2C31078663%2C31078665%2C31078668%2C31078670&oid [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://scamwebsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:53 UTC	728	IN	HTTP/1.1 400 Bad Request P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:24:53 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Tue, 02-Jul-2024 22:39:53 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:24:53 UTC	610	IN	Data Raw: 32 35 62 0d 0a 3c 68 74 6d 6c 3e 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 22 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 25b<html><body style="background-color:transparent"></body></html>
2024-07-02 22:24:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49734	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:54 UTC	586	OUT	GET /favicon.png HTTP/1.1 Host: scamwebsite.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://scamwebsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:55 UTC	546	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:55 GMT Content-Type: image/png Content-Length: 1134 Connection: close Last-Modified: Tue, 12 Mar 2024 22:53:34 GMT ETag: "65f0dcee-46e" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-1 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:55 UTC	1134	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 04 03 49 44 41 54 58 47 d5 57 f7 4f 93 51 14 f5 6f 71 0f 34 ee ad 31 6a e2 1e 0c 45 c4 81 18 35 2a a0 18 27 d1 a8 31 21 8a 9a f8 03 fa 83 89 46 a3 71 25 0e 66 01 19 16 41 59 2a 22 82 22 08 02 61 48 45 40 46 19 e5 fa ce b5 1f 7e 2d 8f f6 ab 94 22 27 39 a1 f9 de bd ef 9d de 77 cf fd ca 30 d2 88 e1 11 ab 9d 4a ad b0 2b 50 b6 b9 33 69 0f 36 05 ca 36 1c 08 da 82 54 a0 6c 13 57 50 86 5e 02 65 89 ae a4 35 2c 04 ca 12 06 83 6a 0c 1d 81 b2 c0 c1 a4 02 16 28 0b f8 1f 38 34 04 ca 16 9c cd d1 51 eb 69 aa ce 87 26 c6 Data Ascii: PNGIHDR((msRGBgAMAapHYsttfxIDATXGWOQoq41jE5'1!Fq%fAY""aHE@F~-"'9w0J+P3i66TlWP^e5,j(84Qi&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49735	198.51.233.1	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:55 UTC	350	OUT	GET /favicon.png HTTP/1.1 Host: scamwebsite.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:55 UTC	546	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:24:55 GMT Content-Type: image/png Content-Length: 1134 Connection: close Last-Modified: Tue, 12 Mar 2024 22:53:34 GMT ETag: "65f0dcee-46e" Server: neocities Strict-Transport-Security: max-age=2630000 Access-Control-Allow-Methods: GET, HEAD, OPTIONS Access-Control-Allow-Origin: * Content-Security-Policy: upgrade-insecure-requests; default-src 'unsafe-inline' 'unsafe-eval' 'self' data: blob: * X-Neocities-CDN: cdn-ewr-2 Upgrade-Insecure-Requests: 1 X-Cached: HIT Accept-Ranges: bytes
2024-07-02 22:24:55 UTC	1134	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 12 74 00 00 12 74 01 de 66 1f 78 00 00 04 03 49 44 41 54 58 47 d5 57 f7 4f 93 51 14 f5 6f 71 0f 34 ee ad 31 6a e2 1e 0c 45 c4 81 18 35 2a a0 18 27 d1 a8 31 21 8a 9a f8 03 fa 83 89 46 a3 71 25 0e 66 01 19 16 41 59 2a 22 82 22 08 02 61 48 45 40 46 19 e5 fa ce b5 1f 7e 2d 8f f6 ab 94 22 27 39 a1 f9 de bd ef 9d de 77 cf fd ca 30 d2 88 e1 11 ab 9d 4a ad b0 2b 50 b6 b9 33 69 0f 36 05 ca 36 1c 08 da 82 54 a0 6c 13 57 50 86 5e 02 65 89 ae a4 35 2c 04 ca 12 06 83 6a 0c 1d 81 b2 c0 c1 a4 02 16 28 0b f8 1f 38 34 04 ca 16 9c cd d1 51 eb 69 aa ce 87 26 c6 Data Ascii: PNGIHDR((msRGBgAMAapHYsttfxIDATXGWOQoq41jE5'1!Fq%fAY""aHE@F~-"'9w0J+P3i66TlWP^e5,j(84Qi&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49740	216.58.212.132	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:24:57 UTC	794	OUT	GET /recaptcha/api2/aframe HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://scamwebsite.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:24:57 UTC	847	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Embedder-Policy: require-corp Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Expires: Tue, 02 Jul 2024 22:24:57 GMT Date: Tue, 02 Jul 2024 22:24:57 GMT Cache-Control: private, max-age=300 Content-Security-Policy: script-src 'report-sample' 'nonce-E-H7WFn0_izJ7VL52we70w' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:24:57 UTC	543	IN	Data Raw: 33 33 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 45 2d 48 37 57 46 6e 30 5f 69 7a 4a 37 56 4c 35 32 77 65 37 30 77 22 3e 2f 2a 2a 20 41 6e 74 69 2d 66 72 61 75 64 20 61 6e 64 20 61 6e 74 69 2d 61 62 75 73 65 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 20 6f 6e 6c 79 2e 20 53 65 65 20 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 72 65 63 61 70 74 63 68 61 20 2a 2f 20 74 72 79 7b 76 61 72 20 63 6c 69 65 6e 74 73 3d 7b 27 73 6f 64 61 72 27 3a 27 68 Data Ascii: 33d<!DOCTYPE HTML><html><head><meta http-equiv="content-type" content="text/html; charset=UTF-8"></head><body><script nonce="E-H7WFn0_izJ7VL52we70w">/** Anti-fraud and anti-abuse applications only. See google.com/recaptcha */ try{var clients={'sodar':'h
2024-07-02 22:24:57 UTC	293	IN	Data Raw: 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 62 22 29 3a 22 22 29 3b 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 72 63 3a 3a 65 22 2c 70 61 72 73 65 49 6e 74 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 22 72 63 3a 3a 65 22 29 7c 7c 30 29 2b 31 29 3b 6c 6f 63 61 6c 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 22 72 63 3a 3a 68 22 2c 27 31 37 31 39 39 35 39 30 39 37 34 39 37 27 29 3b 7d 7d 7d 63 61 74 63 68 28 62 29 7b 7d 7d 29 3b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 22 5f 67 72 65 63 61 70 74 63 68 61 5f 72 65 61 64 79 22 2c 20 22 2a 22 Data Ascii: torage.getItem("rc::b"):"");window.document.body.appendChild(d);sessionStorage.setItem("rc::e",parseInt(sessionStorage.getItem("rc::e")\|\|0)+1);localStorage.setItem("rc::h",'1719959097497');}}}catch(b){}});window.parent.postMessage("_grecaptcha_ready", "*"
2024-07-02 22:24:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49744	142.250.186.78	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:00 UTC	642	OUT	GET /dQw4w9WgXcQ HTTP/1.1 Host: youtu.be Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:01 UTC	1651	IN	HTTP/1.1 303 See Other Content-Type: application/binary X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 02 Jul 2024 22:25:01 GMT Location: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="SHORT_URL" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"SHORT_URL","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/SHORT_URL"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: GPS=1; Domain=.youtube.com; Expires=Tue, 02-Jul-2024 22:55:01 GMT; Path=/; Secure; HttpOnly Set-Cookie: YSC=2v9Y3DpU7L8; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49749	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:02 UTC	674	OUT	GET /watch?v=dQw4w9WgXcQ&feature=youtu.be HTTP/1.1 Host: www.youtube.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:02 UTC	2232	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 02 Jul 2024 22:25:02 GMT Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: GPS=1; Domain=.youtube.com; Expires=Tue, 02-Jul-2024 22:55:02 GMT; Path=/; Secure; HttpOnly Set-Cookie: YSC=-2ffe2EuoZg; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=AQhWnZRvKWI; Domain=.youtube.com; Expires=Sun, 29-Dec-2024 22:25:02 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; Domain=.youtube.com; Expires=Sun, 29-Dec-2024 22:25:02 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:02 UTC	2232	IN	Data Raw: 32 33 31 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 72 6b 65 72 2d 64 61 72 6b 2d 74 68 65 6d 65 20 64 61 72 6b 65 72 2d 64 61 72 6b 2d 74 68 65 6d 65 2d 64 65 70 72 65 63 61 74 65 20 73 79 73 74 65 6d 2d 69 63 6f 6e 73 20 74 79 70 6f 67 72 61 70 68 79 20 74 79 70 6f 67 72 61 70 68 79 2d 73 70 61 63 69 6e 67 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 69 64 3d 22 5f 67 64 22 20 6e 6f 6e 63 65 3d 22 73 73 4d 35 6e 36 36 4f 75 66 4d 39 33 62 64 48 43 39 30 63 5a 77 22 3e 77 69 6e 64 6f 77 Data Ascii: 2316<!DOCTYPE html><html style="font-size: 10px;font-family: Roboto, Arial, sans-serif;" lang="en" darker-dark-theme darker-dark-theme-deprecate system-icons typography typography-spacing><head><script data-id="_gd" nonce="ssM5n66OufM93bdHC90cZw">window
2024-07-02 22:25:02 UTC	2232	IN	Data Raw: 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 2f 67 2c 22 22 29 3b 69 66 28 72 65 70 6c 61 63 65 64 2e 6d 61 74 63 68 28 2f 68 74 74 70 73 3f 3a 5c 2f 5c 2f 5b 5e 2f 5d 2b 5c 2f 2f 29 29 74 68 69 72 64 50 61 72 74 79 53 63 72 69 70 74 3d 0a 74 72 75 65 3b 65 6c 73 65 20 69 66 28 73 74 61 63 6b 2e 69 6e 64 65 78 4f 66 28 22 74 72 61 70 50 72 6f 70 22 29 3e 3d 30 26 26 73 74 61 63 6b 2e 69 6e 64 65 78 4f 66 28 22 74 72 61 70 43 68 61 69 6e 22 29 3e 3d 30 29 74 68 69 72 64 50 61 72 74 79 53 63 72 69 70 74 3d 74 72 75 65 3b 65 6c 73 65 20 69 66 28 6d 65 73 73 61 67 65 2e 69 6e 64 65 78 4f 66 28 22 72 65 64 65 66 69 6e 65 20 6e 6f 6e 2d 63 6f 6e 66 69 67 75 72 61 62 6c 65 22 29 3e 3d 30 29 74 68 69 72 64 50 61 72 74 79 53 63 72 69 70 Data Ascii: ps:\/\/www.youtube.com\//g,"");if(replaced.match(/https?:\/\/[^/]+\//))thirdPartyScript=true;else if(stack.indexOf("trapProp")>=0&&stack.indexOf("trapChain")>=0)thirdPartyScript=true;else if(message.indexOf("redefine non-configurable")>=0)thirdPartyScrip
2024-07-02 22:25:02 UTC	2232	IN	Data Raw: 6f 6e 22 3f 6e 65 77 50 6f 6c 79 6d 65 72 3a 6f 72 69 67 50 6f 6c 79 6d 65 72 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 74 72 75 65 2c 0a 65 6e 75 6d 65 72 61 62 6c 65 3a 74 72 75 65 7d 29 7d 29 28 29 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 73 4d 35 6e 36 36 4f 75 66 4d 39 33 62 64 48 43 39 30 63 5a 77 22 3e 77 69 6e 64 6f 77 2e 50 6f 6c 79 6d 65 72 3d 77 69 6e 64 6f 77 2e 50 6f 6c 79 6d 65 72 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 50 6f 6c 79 6d 65 72 2e 6c 65 67 61 63 79 4f 70 74 69 6d 69 7a 61 74 69 6f 6e 73 3d 74 72 75 65 3b 77 69 6e 64 6f 77 2e 50 6f 6c 79 6d 65 72 2e 73 65 74 50 61 73 73 69 76 65 54 6f 75 63 68 47 65 73 74 75 72 65 73 3d 74 72 75 65 3b 77 69 6e 64 6f Data Ascii: on"?newPolymer:origPolymer},configurable:true,enumerable:true})})();}).call(this);</script><script nonce="ssM5n66OufM93bdHC90cZw">window.Polymer=window.Polymer\|\|{};window.Polymer.legacyOptimizations=true;window.Polymer.setPassiveTouchGestures=true;windo
2024-07-02 22:25:02 UTC	2232	IN	Data Raw: 3b 72 65 74 75 72 6e 20 75 61 2e 69 6e 64 65 78 4f 66 28 22 47 65 63 6b 6f 22 29 3e 30 26 26 75 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 3c 30 26 26 75 61 2e 69 6e 64 65 78 4f 66 28 22 45 64 67 65 22 29 3c 0a 30 26 26 75 61 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 22 29 3c 30 26 26 75 61 2e 69 6e 64 65 78 4f 66 28 22 4d 53 49 45 22 29 3c 30 7d 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 3f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2e 74 69 6d 69 6e 67 2e 72 65 73 70 6f 6e 73 65 53 74 61 72 74 3a 6e 75 6c 6c 29 3b 76 61 72 20 69 73 50 72 65 72 65 6e 64 65 72 3d 28 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 7c 7c 64 2e 77 65 62 6b 69 74 56 69 73 Data Ascii: ;return ua.indexOf("Gecko")>0&&ua.toLowerCase().indexOf("webkit")<0&&ua.indexOf("Edge")<0&&ua.indexOf("Trident")<0&&ua.indexOf("MSIE")<0}ytcsi.setStart(w.performance?w.performance.timing.responseStart:null);var isPrerender=(d.visibilityState\|\|d.webkitVis
2024-07-02 22:25:02 UTC	62	IN	Data Raw: 4f 75 66 4d 39 33 62 64 48 43 39 30 63 5a 77 22 3e 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 77 69 6e 64 6f 77 2e 79 74 70 6c 61 79 65 72 3d 7b 7d 3b 0a 79 74 63 66 67 2e 73 65 74 28 0d 0a Data Ascii: OufM93bdHC90cZw">(function() {window.ytplayer={};ytcfg.set(
2024-07-02 22:25:02 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 43 4c 49 45 4e 54 5f 43 41 4e 41 52 59 5f 53 54 41 54 45 22 3a 22 6e 6f 6e 65 22 2c 22 44 45 56 49 43 45 22 3a 22 63 62 72 5c 75 30 30 33 64 43 68 72 6f 6d 65 5c 75 30 30 32 36 63 62 72 76 65 72 5c 75 30 30 33 64 31 31 37 2e 30 2e 30 2e 30 5c 75 30 30 32 36 63 65 6e 67 5c 75 30 30 33 64 57 65 62 4b 69 74 5c 75 30 30 32 36 63 65 6e 67 76 65 72 5c 75 30 30 33 64 35 33 37 2e 33 36 5c 75 30 30 32 36 63 6f 73 5c 75 30 30 33 64 57 69 6e 64 6f 77 73 5c 75 30 30 32 36 63 6f 73 76 65 72 5c 75 30 30 33 64 31 30 2e 30 5c 75 30 30 32 36 63 70 6c 61 74 66 6f 72 6d 5c 75 30 30 33 64 44 45 53 4b 54 4f 50 22 2c 22 44 49 53 41 42 4c 45 5f 59 54 5f 49 4d 47 5f 44 45 4c 41 59 5f 4c 4f 41 44 49 4e 47 22 3a 66 61 6c 73 65 2c 22 45 4c 45 4d 45 4e 54 5f Data Ascii: 8000{"CLIENT_CANARY_STATE":"none","DEVICE":"cbr\u003dChrome\u0026cbrver\u003d117.0.0.0\u0026ceng\u003dWebKit\u0026cengver\u003d537.36\u0026cos\u003dWindows\u0026cosver\u003d10.0\u0026cplatform\u003dDESKTOP","DISABLE_YT_IMG_DELAY_LOADING":false,"ELEMENT_
2024-07-02 22:25:02 UTC	1390	IN	Data Raw: 5f 64 69 61 6c 6f 67 5f 70 6f 70 75 70 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 61 6e 69 6d 61 74 65 5f 6d 69 6e 69 70 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 64 65 6c 61 79 5f 70 6c 61 79 65 72 5f 72 65 73 69 7a 69 6e 67 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 63 6c 69 63 6b 5f 64 72 61 67 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 77 68 65 65 6c 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 Data Ascii: _dialog_popup":true,"desktop_animate_miniplayer":true,"desktop_client_release":true,"desktop_delay_player_resizing":true,"desktop_enable_dmpanel_click_drag_scroll":true,"desktop_enable_dmpanel_scroll":true,"desktop_enable_dmpanel_wheel_scroll":true,"deskt
2024-07-02 22:25:02 UTC	1390	IN	Data Raw: 70 5f 69 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 63 74 69 76 65 5f 76 69 65 77 5f 64 69 73 70 6c 61 79 5f 61 64 5f 72 65 6e 64 65 72 65 72 5f 77 65 62 5f 68 6f 6d 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 64 5f 63 6f 6e 74 65 78 74 5f 69 6e 5f 76 73 73 5f 70 69 6e 67 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 64 73 5f 77 65 62 5f 65 70 5f 62 75 65 6e 6f 73 5f 61 69 72 65 73 5f 61 6e 64 5f 70 61 64 64 69 6e 67 5f 66 69 78 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 73 79 6e 63 5f 61 62 5f 65 6e 66 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 62 75 65 6e 6f 73 5f 61 69 72 65 73 5f 74 79 70 6f 67 72 61 70 68 79 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 62 75 74 74 6f 6e 5f 62 65 68 61 76 69 6f 72 5f 72 65 75 73 65 22 3a Data Ascii: p_int":true,"enable_active_view_display_ad_renderer_web_home":true,"enable_ad_context_in_vss_pings":true,"enable_ads_web_ep_buenos_aires_and_padding_fix":true,"enable_async_ab_enf":true,"enable_buenos_aires_typography":true,"enable_button_behavior_reuse":
2024-07-02 22:25:02 UTC	1390	IN	Data Raw: 63 63 6f 75 6e 74 5f 73 77 69 74 63 68 65 72 5f 65 6e 64 70 6f 69 6e 74 5f 6f 6e 5f 77 65 62 66 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 67 68 6f 73 74 5f 76 69 65 77 5f 72 65 6e 64 65 72 69 6e 67 5f 6c 69 6d 69 74 65 64 5f 68 35 5f 63 6c 69 65 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 67 6f 6f 67 6c 65 5f 70 61 79 6d 65 6e 74 5f 62 69 6c 6c 69 6e 67 5f 63 6f 6d 6d 61 6e 64 5f 63 6c 69 65 6e 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 6e 64 6c 65 5f 73 65 61 72 63 68 5f 6f 6e 5f 63 68 61 6e 6e 65 6c 5f 73 77 69 74 63 68 65 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 6e 64 6c 65 73 5f 61 63 63 6f 75 6e 74 5f 6d 65 6e 75 5f 73 77 69 74 63 68 65 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 Data Ascii: ccount_switcher_endpoint_on_webfe":true,"enable_ghost_view_rendering_limited_h5_client":true,"enable_google_payment_billing_command_client_support":true,"enable_handle_search_on_channel_switcher":true,"enable_handles_account_menu_switcher":true,"enable_ha
2024-07-02 22:25:02 UTC	1390	IN	Data Raw: 22 65 6e 61 62 6c 65 5f 70 61 73 73 5f 73 64 63 5f 67 65 74 5f 61 63 63 6f 75 6e 74 73 5f 6c 69 73 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 5f 72 5f 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 5f 72 5f 63 5f 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 5f 72 5f 73 69 5f 66 61 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 61 31 31 79 5f 6c 61 62 65 6c 5f 77 69 74 68 5f 62 61 64 67 65 5f 74 65 78 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 63 6f 6e 74 61 69 6e 65 72 5f 73 61 76 65 5f 62 75 74 74 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 65 6e 74 69 74 79 5f 73 61 76 65 5f 6d 65 6e 75 5f 69 74 65 6d 22 3a 74 72 75 65 2c 22 65 6e 61 62 Data Ascii: "enable_pass_sdc_get_accounts_list":true,"enable_pl_r_c":true,"enable_pl_r_c_s":true,"enable_pl_r_si_fa":true,"enable_playable_a11y_label_with_badge_text":true,"enable_playable_container_save_button":true,"enable_playable_entity_save_menu_item":true,"enab

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49758	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:03 UTC	1149	OUT	GET /s/player/71059424/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:03 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2617012 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:29:54 GMT Expires: Wed, 02 Jul 2025 21:29:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 01 Jul 2024 04:13:06 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 3309 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:03 UTC	702	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 55 73 65 20 6f 66 20 74 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 67 6f 76 65 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// Copyright Google LLC All Rights Reserved. Use of this source code is gove
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 Data Ascii: , sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substant
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 20 6d 75 73 74 20 6e 6f 74 0a 20 20 20 20 20 20 63 6c 61 69 6d 20 74 68 61 74 20 79 6f 75 20 77 72 6f 74 65 20 74 68 65 20 6f 72 69 67 69 6e 61 6c 20 73 6f 66 74 77 61 72 65 2e 20 49 66 20 79 6f 75 20 75 73 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 0a 20 20 20 20 20 20 Data Ascii: pplications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you must not claim that you wrote the original software. If you use this software
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 61 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 20 49 53 20 50 52 4f 56 49 44 45 44 20 22 41 53 20 49 53 22 2c 20 57 49 54 48 4f 55 54 20 57 41 52 52 41 4e 54 59 20 4f 46 20 41 4e 59 20 4b 49 4e 44 2c 20 45 58 50 52 45 53 53 20 4f 52 0a 20 49 4d 50 4c 49 45 44 2c 20 49 4e 43 4c 55 44 49 4e 47 20 42 55 54 20 4e 4f 54 20 4c 49 4d 49 54 45 44 20 54 4f 20 54 Data Ascii: itions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO T
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 53 63 61 2c 59 63 61 2c 24 63 61 2c 62 64 61 2c 46 67 2c 64 64 61 2c 48 67 2c 49 67 2c 66 64 61 2c 4b 67 2c 4a 67 2c 67 64 61 2c 4c 67 2c 68 64 61 2c 4d 67 2c 4e 67 2c 58 67 2c 5a 67 2c 69 64 61 2c 24 67 2c 6a 64 61 2c 6b 64 61 2c 61 68 2c 59 67 2c 62 68 2c 64 68 2c 63 68 2c 65 68 2c 66 68 2c 68 68 2c 69 68 2c 75 68 2c 6c 64 61 2c 6e 64 61 2c 77 68 2c 6f 64 61 2c 70 64 61 2c 78 68 2c 79 68 2c 42 68 2c 72 64 61 2c 73 64 61 2c 75 64 61 2c 76 64 61 2c 78 64 61 2c 43 68 2c 79 64 61 2c 44 68 2c 7a 64 61 2c 45 68 2c 41 64 61 2c 46 68 2c 47 68 2c 42 64 61 2c 48 68 2c 49 68 2c 4a 68 2c 4b 68 2c 4c 68 2c 4e 68 2c 43 64 61 2c 50 68 2c 44 64 61 2c 51 68 2c 52 68 2c 6e 69 2c 70 69 2c 0a 71 69 2c 46 64 61 2c 47 64 61 2c 72 69 2c 48 64 61 2c 49 64 61 2c 74 69 2c 75 69 Data Ascii: Sca,Yca,$ca,bda,Fg,dda,Hg,Ig,fda,Kg,Jg,gda,Lg,hda,Mg,Ng,Xg,Zg,ida,$g,jda,kda,ah,Yg,bh,dh,ch,eh,fh,hh,ih,uh,lda,nda,wh,oda,pda,xh,yh,Bh,rda,sda,uda,vda,xda,Ch,yda,Dh,zda,Eh,Ada,Fh,Gh,Bda,Hh,Ih,Jh,Kh,Lh,Nh,Cda,Ph,Dda,Qh,Rh,ni,pi,qi,Fda,Gda,ri,Hda,Ida,ti,ui
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 61 2c 4e 71 2c 56 67 61 2c 57 67 61 2c 58 67 61 2c 59 67 61 2c 54 67 61 2c 4f 71 2c 50 71 2c 51 71 2c 52 71 2c 61 68 61 2c 62 68 61 2c 24 67 61 2c 53 71 2c 63 68 61 2c 64 68 61 2c 65 68 61 2c 57 71 2c 66 68 61 2c 58 71 2c 59 71 2c 67 68 61 2c 5a 71 2c 69 68 61 2c 43 72 2c 68 68 61 2c 6a 68 61 2c 6b 68 61 2c 6c 68 61 2c 6d 68 61 2c 6e 68 61 2c 44 72 2c 6f 68 61 2c 45 72 2c 46 72 2c 47 72 2c 48 72 2c 49 72 2c 4a 72 2c 4b 72 2c 70 68 61 2c 4c 72 2c 4d 72 2c 4e 72 2c 71 68 61 2c 73 68 61 2c 74 68 61 2c 50 72 2c 52 72 2c 51 72 2c 54 72 2c 55 72 2c 56 72 2c 76 68 61 2c 77 68 61 2c 57 72 2c 58 72 2c 59 72 2c 79 68 61 2c 7a 68 61 2c 43 68 61 2c 41 68 61 2c 44 68 61 2c 48 68 61 2c 5a 72 2c 47 68 61 2c 45 68 61 2c 24 72 2c 61 73 2c 49 68 61 2c 62 73 2c 4a 68 61 2c Data Ascii: a,Nq,Vga,Wga,Xga,Yga,Tga,Oq,Pq,Qq,Rq,aha,bha,$ga,Sq,cha,dha,eha,Wq,fha,Xq,Yq,gha,Zq,iha,Cr,hha,jha,kha,lha,mha,nha,Dr,oha,Er,Fr,Gr,Hr,Ir,Jr,Kr,pha,Lr,Mr,Nr,qha,sha,tha,Pr,Rr,Qr,Tr,Ur,Vr,vha,wha,Wr,Xr,Yr,yha,zha,Cha,Aha,Dha,Hha,Zr,Gha,Eha,$r,as,Iha,bs,Jha,
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 2c 6c 77 2c 24 6c 61 2c 6e 77 2c 61 6d 61 2c 62 6d 61 2c 6f 77 2c 70 77 2c 71 77 2c 63 6d 61 2c 64 6d 61 2c 65 6d 61 2c 66 6d 61 2c 67 6d 61 2c 68 6d 61 2c 69 6d 61 2c 6c 6d 61 2c 6d 6d 61 2c 6e 6d 61 2c 6f 6d 61 2c 70 6d 61 2c 77 77 2c 79 77 2c 7a 77 2c 41 77 2c 44 77 2c 45 77 2c 46 77 2c 72 6d 61 2c 48 77 2c 74 6d 61 2c 49 77 2c 75 6d 61 2c 76 6d 61 2c 4a 77 2c 77 6d 61 2c 78 6d 61 2c 4c 77 2c 46 6d 61 2c 47 6d 61 2c 48 6d 61 2c 49 6d 61 2c 4b 6d 61 2c 4c 6d 61 2c 4f 6d 61 2c 4d 77 2c 51 6d 61 2c 50 6d 61 2c 4e 77 2c 53 6d 61 2c 54 6d 61 2c 55 6d 61 2c 56 6d 61 2c 57 6d 61 2c 50 77 2c 51 77 2c 58 6d 61 2c 59 6d 61 2c 52 77 2c 5a 6d 61 2c 24 6d 61 2c 53 77 2c 54 77 2c 55 77 2c 61 6e 61 2c 62 6e 61 2c 63 6e 61 2c 64 6e 61 2c 65 6e 61 2c 56 77 2c 66 6e 61 Data Ascii: ,lw,$la,nw,ama,bma,ow,pw,qw,cma,dma,ema,fma,gma,hma,ima,lma,mma,nma,oma,pma,ww,yw,zw,Aw,Dw,Ew,Fw,rma,Hw,tma,Iw,uma,vma,Jw,wma,xma,Lw,Fma,Gma,Hma,Ima,Kma,Lma,Oma,Mw,Qma,Pma,Nw,Sma,Tma,Uma,Vma,Wma,Pw,Qw,Xma,Yma,Rw,Zma,$ma,Sw,Tw,Uw,ana,bna,cna,dna,ena,Vw,fna
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 71 71 61 2c 5a 7a 2c 72 71 61 2c 73 71 61 2c 74 71 61 2c 24 7a 2c 75 71 61 2c 76 71 61 2c 77 71 61 2c 61 41 2c 78 71 61 2c 79 71 61 2c 62 41 2c 63 41 2c 7a 71 61 2c 64 41 2c 41 71 61 2c 42 71 61 2c 65 41 2c 43 71 61 2c 66 41 2c 44 71 61 2c 45 71 61 2c 0a 46 71 61 2c 68 41 2c 6a 41 2c 47 71 61 2c 6e 41 2c 6f 41 2c 70 41 2c 71 41 2c 4b 71 61 2c 73 41 2c 74 41 2c 4c 71 61 2c 75 41 2c 76 41 2c 77 41 2c 4e 71 61 2c 4d 71 61 2c 48 71 61 2c 78 41 2c 51 71 61 2c 54 71 61 2c 79 41 2c 56 71 61 2c 55 71 61 2c 57 71 61 2c 5a 71 61 2c 59 71 61 2c 62 72 61 2c 63 72 61 2c 64 72 61 2c 65 72 61 2c 67 72 61 2c 6c 72 61 2c 68 72 61 2c 6a 72 61 2c 6b 72 61 2c 49 41 2c 48 41 2c 6d 72 61 2c 4b 41 2c 4c 41 2c 4d 41 2c 6f 72 61 2c 70 72 61 2c 71 72 61 2c 72 72 61 2c 73 72 61 2c Data Ascii: qqa,Zz,rqa,sqa,tqa,$z,uqa,vqa,wqa,aA,xqa,yqa,bA,cA,zqa,dA,Aqa,Bqa,eA,Cqa,fA,Dqa,Eqa,Fqa,hA,jA,Gqa,nA,oA,pA,qA,Kqa,sA,tA,Lqa,uA,vA,wA,Nqa,Mqa,Hqa,xA,Qqa,Tqa,yA,Vqa,Uqa,Wqa,Zqa,Yqa,bra,cra,dra,era,gra,lra,hra,jra,kra,IA,HA,mra,KA,LA,MA,ora,pra,qra,rra,sra,
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 65 78 61 2c 66 78 61 2c 66 45 2c 68 78 61 2c 69 78 61 2c 6a 78 61 2c 6b 78 61 2c 6c 78 61 2c 6d 78 61 2c 6e 78 61 2c 70 78 61 2c 71 78 61 2c 6a 45 2c 73 78 61 2c 75 78 61 2c 74 78 61 2c 76 78 61 2c 78 78 61 2c 79 78 61 2c 43 78 61 2c 41 78 61 2c 45 78 61 2c 44 78 61 2c 47 78 61 2c 46 78 61 2c 6b 45 2c 4c 73 61 2c 4f 78 61 2c 4c 78 61 2c 51 78 61 2c 72 45 2c 53 78 61 2c 56 78 61 2c 57 78 61 2c 62 79 61 2c 66 79 61 2c 67 79 61 2c 69 79 61 2c 68 79 61 2c 6a 79 61 2c 78 45 2c 6c 79 61 2c 77 45 2c 65 79 61 2c 64 79 61 2c 74 45 2c 45 45 2c 44 45 2c 48 45 2c 49 45 2c 4b 45 2c 6e 79 61 2c 4c 45 2c 4f 45 2c 0a 50 45 2c 6f 79 61 2c 70 79 61 2c 72 79 61 2c 73 79 61 2c 74 79 61 2c 75 79 61 2c 76 79 61 2c 77 79 61 2c 78 79 61 2c 79 79 61 2c 7a 79 61 2c 41 79 61 2c 42 Data Ascii: exa,fxa,fE,hxa,ixa,jxa,kxa,lxa,mxa,nxa,pxa,qxa,jE,sxa,uxa,txa,vxa,xxa,yxa,Cxa,Axa,Exa,Dxa,Gxa,Fxa,kE,Lsa,Oxa,Lxa,Qxa,rE,Sxa,Vxa,Wxa,bya,fya,gya,iya,hya,jya,xE,lya,wE,eya,dya,tE,EE,DE,HE,IE,KE,nya,LE,OE,PE,oya,pya,rya,sya,tya,uya,vya,wya,xya,yya,zya,Aya,B
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 61 2c 72 49 2c 46 43 61 2c 47 43 61 2c 41 49 2c 48 43 61 2c 42 49 2c 74 49 2c 49 43 61 2c 73 49 2c 44 43 61 2c 43 49 2c 4c 43 61 2c 4b 43 61 2c 75 49 2c 76 49 2c 45 49 2c 44 49 2c 4d 43 61 2c 46 49 2c 4e 43 61 2c 47 49 2c 50 43 61 2c 4f 43 61 2c 48 49 2c 49 49 2c 4a 49 2c 4b 49 2c 4c 49 2c 52 43 61 2c 53 43 61 2c 55 43 61 2c 56 43 61 2c 4e 49 2c 4f 49 2c 58 43 61 2c 50 49 2c 61 44 61 2c 63 44 61 2c 65 44 61 2c 66 44 61 2c 52 49 2c 68 44 61 2c 69 44 61 2c 6b 44 61 2c 6c 44 61 2c 6d 44 61 2c 6e 44 61 2c 6f 44 61 2c 70 44 61 2c 57 49 2c 58 49 2c 71 44 61 2c 73 44 61 2c 72 44 61 2c 74 44 61 2c 75 44 61 2c 76 44 61 2c 61 4a 2c 63 4a 2c 64 4a 2c 65 4a 2c 66 4a 2c 67 4a 2c 77 44 61 2c 68 4a 2c 69 4a 2c 62 4a 2c 79 44 61 2c 6b 4a 2c 6c 4a 2c 6d 4a 2c 7a 44 61 2c Data Ascii: a,rI,FCa,GCa,AI,HCa,BI,tI,ICa,sI,DCa,CI,LCa,KCa,uI,vI,EI,DI,MCa,FI,NCa,GI,PCa,OCa,HI,II,JI,KI,LI,RCa,SCa,UCa,VCa,NI,OI,XCa,PI,aDa,cDa,eDa,fDa,RI,hDa,iDa,kDa,lDa,mDa,nDa,oDa,pDa,WI,XI,qDa,sDa,rDa,tDa,uDa,vDa,aJ,cJ,dJ,eJ,fJ,gJ,wDa,hJ,iJ,bJ,yDa,kJ,lJ,mJ,zDa,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49755	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:03 UTC	1166	OUT	GET /s/desktop/a7b1ec23/jsbin/desktop_polymer.vflset/desktop_polymer.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:03 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 8972683 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 17:36:19 GMT Expires: Wed, 02 Jul 2025 17:36:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 09:14:44 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 17324 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:03 UTC	701	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 2f 2a 20 48 54 4d 4c 20 63 6f 6e 74 65 6e 74 20 69 6e 6c 69 6e 65 64 20 66 72 6f 6d 20 48 54 4d 4c 20 69 6d 70 6f 72 74 20 2a 2f 0a 63 6f 6e 73 74 20 64 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 0a 64 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 6e 6c 69 6e 65 64 2d 68 74 6d 6c 22 2c 22 22 29 3b 0a 63 6f 6e 73 74 20 66 69 6e 61 6c 53 74 79 6c 65 54 65 78 74 3d 22 68 74 6d 6c 3a 6e 6f 74 28 2e 73 74 79 6c 65 2d 73 63 6f 70 65 29 20 7b 5c 6e 20 20 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 29 3b 5c 6e 20 20 2d 2d 70 72 69 6d 61 72 79 2d 62 61 63 6b 67 72 6f 75 Data Ascii: (function(){/* HTML content inlined from HTML import */const d=document.createElement("div");d.setAttribute("inlined-html","");const finalStyleText="html:not(.style-scope) {\n --primary-text-color: var(--light-theme-text-color);\n --primary-backgrou
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 5c 6e 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 62 61 73 65 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 5c 6e 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 20 23 32 31 32 31 32 31 3b 5c 6e 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 73 65 63 6f 6e 64 61 72 79 2d 63 6f 6c 6f 72 3a 20 23 37 33 37 33 37 33 3b 5c 6e 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 64 69 73 61 62 6c 65 64 2d 63 6f 6c 6f 72 3a 20 23 39 62 39 62 39 62 3b 5c 6e 20 20 2d 2d 6c 69 67 68 74 2d 74 68 65 6d 65 2d 64 69 76 69 64 65 72 2d 63 6f 6c 6f 72 3a 20 23 64 62 64 62 64 62 3b 5c 6e 20 20 2d 2d 64 61 72 6b 2d 74 68 65 6d 65 2d Data Ascii: --light-theme-background-color: #fff;\n --light-theme-base-color: #000;\n --light-theme-text-color: #212121;\n --light-theme-secondary-color: #737373;\n --light-theme-disabled-color: #9b9b9b;\n --light-theme-divider-color: #dbdbdb;\n --dark-theme-
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 5c 6e 70 61 70 65 72 2d 72 69 70 70 6c 65 2e 63 69 72 63 6c 65 20 23 62 61 63 6b 67 72 6f 75 6e 64 2e 70 61 70 65 72 2d 72 69 70 70 6c 65 2c 70 61 70 65 72 2d 72 69 70 70 6c 65 2e 63 69 72 63 6c 65 20 23 77 61 76 65 73 2e 70 61 70 65 72 2d 72 69 70 70 6c 65 20 7b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 5c 6e 7d 5c 6e 5c 6e 70 61 70 65 72 2d 72 69 70 70 6c 65 2e 63 69 72 63 6c 65 20 2e 77 61 76 65 2d 63 6f 6e 74 61 69 6e 65 72 2e 70 61 70 65 72 2d 72 69 70 70 6c 65 20 7b 5c 6e 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 5c 6e 7d 5c 6e 5c 6e 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 20 7b 5c 6e 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 69 6e 6c 69 6e 65 2d 66 6c 65 78 62 6f 78 3b 5c 6e 20 20 64 69 73 Data Ascii: \npaper-ripple.circle #background.paper-ripple,paper-ripple.circle #waves.paper-ripple {\n border-radius: 50%;\n}\n\npaper-ripple.circle .wave-container.paper-ripple {\n overflow: hidden;\n}\n\ntp-yt-paper-button {\n display: -ms-inline-flexbox;\n dis
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 65 6c 65 76 61 74 69 6f 6e 3d 5c 22 33 5c 22 5d 20 7b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 36 70 78 20 31 30 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 34 29 2c 20 30 20 31 70 78 20 31 38 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 32 29 2c 20 30 20 33 70 78 20 35 70 78 20 2d 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 34 29 3b 5c 6e 7d 5c 6e 5c 6e 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5b 65 6c 65 76 61 74 69 6f 6e 3d 5c 22 34 5c 22 5d 20 7b 5c 6e 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 38 70 78 20 31 30 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 34 29 2c 20 30 20 33 70 78 20 31 34 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 20 Data Ascii: elevation=\"3\"] {\n box-shadow: 0 6px 10px 0 rgba(0, 0, 0, 0.14), 0 1px 18px 0 rgba(0, 0, 0, 0.12), 0 3px 5px -1px rgba(0, 0, 0, 0.4);\n}\n\ntp-yt-paper-button[elevation=\"4\"] {\n box-shadow: 0 8px 10px 1px rgba(0, 0, 0, 0.14), 0 3px 14px 2px rgba(0,
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 72 6f 74 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 35 36 38 6d 73 3b 5c 6e 20 20 2d 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 65 78 70 61 6e 64 2d 63 6f 6e 74 72 61 63 74 2d 64 75 72 61 74 69 6f 6e 3a 20 31 33 33 33 6d 73 3b 5c 6e 20 20 2d 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 66 75 6c 6c 2d 63 79 63 6c 65 2d 64 75 72 61 74 69 6f 6e 3a 20 35 33 33 32 6d 73 3b 5c 6e 20 20 2d 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 63 6f 6f 6c 64 6f 77 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 34 30 30 6d 73 3b 5c 6e 7d 5c 6e 5c 6e 23 73 70 69 6e 6e 65 72 43 6f 6e 74 61 69 6e 65 72 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 7b 5c 6e 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 5c 6e 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 Data Ascii: rotation-duration: 1568ms;\n --paper-spinner-expand-contract-duration: 1333ms;\n --paper-spinner-full-cycle-duration: 5332ms;\n --paper-spinner-cooldown-duration: 400ms;\n}\n\n#spinnerContainer.tp-yt-paper-spinner-lite {\n width: 100%;\n height: 100%
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 3a 20 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 3b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 76 61 72 28 2d 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 66 75 6c 6c 2d 63 79 63 6c 65 2d 64 75 72 61 74 69 6f 6e 29 3b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 2c 20 30 2c 20 30 2e 32 2c 20 31 29 3b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 20 69 6e 66 69 6e 69 74 65 3b 5c 6e 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 69 6c 6c 2d 75 6e 66 69 6c 6c 2d 72 6f 74 61 74 65 3b 5c 6e 20 20 61 6e Data Ascii: : fill-unfill-rotate;\n -webkit-animation-duration: var(--paper-spinner-full-cycle-duration);\n -webkit-animation-timing-function: cubic-bezier(0.4, 0, 0.2, 1);\n -webkit-animation-iteration-count: infinite;\n animation-name: fill-unfill-rotate;\n an
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 5c 6e 7d 5c 6e 5c 6e 32 35 25 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 3b 5c 6e 7d 5c 6e 5c 6e 33 37 2e 35 25 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 34 30 35 64 65 67 29 3b 5c 6e 7d 5c 6e 5c 6e 35 30 25 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 35 34 30 64 65 67 29 3b 5c 6e 7d 5c 6e 5c 6e 36 32 2e 35 25 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 36 37 35 64 65 67 29 3b 5c 6e 7d 5c 6e 5c 6e 37 35 25 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 38 31 30 64 65 67 29 3b 5c Data Ascii: \n}\n\n25% {\n -webkit-transform: rotate(270deg);\n}\n\n37.5% {\n -webkit-transform: rotate(405deg);\n}\n\n50% {\n -webkit-transform: rotate(540deg);\n}\n\n62.5% {\n -webkit-transform: rotate(675deg);\n}\n\n75% {\n -webkit-transform: rotate(810deg);\
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 6f 75 74 20 7b 5c 6e 30 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 7d 5c 6e 5c 6e 31 35 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 7d 5c 6e 5c 6e 32 35 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 5c 6e 7d 5c 6e 5c 6e 35 30 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 5c 6e 7d 5c 6e 5c 6e 35 31 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 7d 5c 6e 5c 6e 74 6f 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 7d 5c 6e 5c 6e 7d 5c 6e 5c 6e 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 6c 61 79 65 72 2d 33 2d 66 61 64 65 2d 69 6e 2d 6f 75 74 20 7b 5c 6e 30 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 5c 6e 7d 5c 6e 5c 6e 34 30 25 20 7b 5c 6e 20 20 6f 70 61 63 69 74 Data Ascii: out {\n0% {\n opacity: 0;\n}\n\n15% {\n opacity: 0;\n}\n\n25% {\n opacity: 1;\n}\n\n50% {\n opacity: 1;\n}\n\n51% {\n opacity: 0;\n}\n\nto {\n opacity: 0;\n}\n\n}\n\n@-webkit-keyframes layer-3-fade-in-out {\n0% {\n opacity: 0;\n}\n\n40% {\n opacit
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 3a 20 30 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 20 76 61 72 28 2d 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 73 74 72 6f 6b 65 2d 77 69 64 74 68 2c 20 33 70 78 29 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 30 25 3b 5c 6e 7d 5c 6e 5c 6e 2e 63 69 72 63 6c 65 2d 63 6c 69 70 70 65 72 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 2e 63 69 72 63 6c 65 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 7b 5c 6e 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 5c 6e 20 20 77 69 64 74 68 3a 20 32 30 30 25 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 20 73 6f 6c 69 64 3b 5c 6e 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 20 74 72 61 6e 73 70 61 72 65 6e Data Ascii: : 0;\n border-width: var(--paper-spinner-stroke-width, 3px);\n border-radius: 50%;\n}\n\n.circle-clipper.tp-yt-paper-spinner-lite .circle.tp-yt-paper-spinner-lite {\n bottom: 0;\n width: 200%;\n border-style: solid;\n border-bottom-color: transparen
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 6c 65 66 74 2d 73 70 69 6e 3b 5c 6e 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 6c 65 66 74 2d 73 70 69 6e 3b 5c 6e 7d 5c 6e 5c 6e 2e 61 63 74 69 76 65 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 2e 63 69 72 63 6c 65 2d 63 6c 69 70 70 65 72 2e 72 69 67 68 74 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 2e 63 69 72 63 6c 65 2e 74 70 2d 79 74 2d 70 61 70 65 72 2d 73 70 69 6e 6e 65 72 2d 6c 69 74 65 20 7b 5c 6e 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 72 69 67 68 74 2d 73 70 69 6e 3b 5c 6e 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 72 69 67 68 74 2d 73 70 69 6e 3b 5c 6e 7d 5c 6e 5c 6e 40 2d Data Ascii: nimation-name: left-spin;\n animation-name: left-spin;\n}\n\n.active.tp-yt-paper-spinner-lite .circle-clipper.right.tp-yt-paper-spinner-lite .circle.tp-yt-paper-spinner-lite {\n -webkit-animation-name: right-spin;\n animation-name: right-spin;\n}\n\n@-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49754	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:03 UTC	1192	OUT	GET /s/desktop/a7b1ec23/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:03 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 50864 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 14:10:54 GMT Expires: Wed, 02 Jul 2025 14:10:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 29649 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:03 UTC	703	IN	Data Raw: 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 0a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 41 70 61 63 68 65 20 4c 69 63 65 6e 73 65 2c 20 56 65 72 73 69 6f 6e 20 32 2e 30 20 28 74 68 65 20 22 4c 69 63 65 6e 73 65 22 29 3b 0a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 20 20 20 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c Data Ascii: /* Copyright 2014 Google Inc. All rights reserved. Licensed under the Apache License, Version 2.0 (the "License"); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/l
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 22 29 3b 0a 20 79 6f 75 20 6d 61 79 20 6e 6f 74 20 75 73 65 20 74 68 69 73 20 66 69 6c 65 20 65 78 63 65 70 74 20 69 6e 20 63 6f 6d 70 6c 69 61 6e 63 65 20 77 69 74 68 20 74 68 65 20 4c 69 63 65 6e 73 65 2e 0a 20 20 20 20 20 59 6f 75 20 6d 61 79 20 6f 62 74 61 69 6e 20 61 20 63 6f 70 79 20 6f 66 20 74 68 65 20 4c 69 63 65 6e 73 65 20 61 74 0a 0a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 61 70 61 63 68 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4c 49 43 45 4e 53 45 2d 32 2e 30 0a 0a 20 55 6e 6c 65 73 73 20 72 65 71 75 69 72 65 64 20 62 79 20 61 70 70 6c 69 63 61 62 6c 65 20 6c 61 77 20 6f 72 20 61 67 72 65 65 64 20 74 6f 20 69 6e 20 77 72 69 74 69 6e 67 2c 20 73 6f 66 74 77 61 72 65 0a 20 64 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4c 69 Data Ascii: "); you may not use this file except in compliance with the License. You may obtain a copy of the License at http://www.apache.org/licenses/LICENSE-2.0 Unless required by applicable law or agreed to in writing, software distributed under the Li
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 7c 70 3e 31 7c 7c 7a 3c 30 7c 7c 7a 3e 31 3f 6e 3a 66 75 6e 63 74 69 6f 6e 28 42 29 7b 69 66 28 42 3c 3d 30 29 7b 76 61 72 20 44 3d 30 3b 70 3e 30 3f 44 3d 77 2f 70 3a 21 77 26 26 7a 3e 30 26 26 28 44 3d 41 2f 7a 29 3b 72 65 74 75 72 6e 20 44 2a 42 7d 69 66 28 42 3e 3d 31 29 72 65 74 75 72 6e 20 44 3d 30 2c 7a 3c 31 3f 44 3d 28 41 2d 31 29 2f 28 7a 2d 31 29 3a 7a 3d 3d 31 26 26 70 3c 31 26 26 28 44 3d 28 77 2d 0a 31 29 2f 28 70 2d 31 29 29 2c 31 2b 44 2a 28 42 2d 31 29 3b 44 3d 30 3b 66 6f 72 28 76 61 72 20 48 3d 31 3b 44 3c 48 3b 29 7b 76 61 72 20 45 3d 28 44 2b 48 29 2f 32 2c 4d 3d 33 2a 70 2a 28 31 2d 45 29 2a 28 31 2d 45 29 2a 45 2b 33 2a 7a 2a 28 31 2d 45 29 2a 45 2a 45 2b 45 2a 45 2a 45 3b 69 66 28 4d 61 74 68 2e 61 62 73 28 42 2d 4d 29 3c 31 45 2d Data Ascii: \|p>1\|\|z<0\|\|z>1?n:function(B){if(B<=0){var D=0;p>0?D=w/p:!w&&z>0&&(D=A/z);return DB}if(B>=1)return D=0,z<1?D=(A-1)/(z-1):z==1&&p<1&&(D=(w-1)/(p-1)),1+D(B-1);D=0;for(var H=1;D<H;){var E=(D+H)/2,M=3p(1-E)(1-E)E+3z(1-E)EE+EEE;if(Math.abs(B-M)<1E-
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 70 6c 61 79 62 61 63 6b 52 61 74 65 7d 2c 73 65 74 20 64 65 6c 61 79 28 70 29 7b 74 68 69 73 2e 5f 73 65 74 4d 65 6d 62 65 72 28 22 64 65 6c 61 79 22 2c 70 29 7d 2c 67 65 74 20 64 65 6c 61 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 64 65 6c 61 79 7d 2c 73 65 74 20 65 6e 64 44 65 6c 61 79 28 70 29 7b 74 68 69 73 2e 5f 73 65 74 4d 65 6d 62 65 72 28 22 65 6e 64 44 65 6c 61 79 22 2c 70 29 7d 2c 67 65 74 20 65 6e 64 44 65 6c 61 79 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 65 6e 64 44 65 6c 61 79 7d 2c 73 65 74 20 66 69 6c 6c 28 70 29 7b 74 68 69 73 2e 5f 73 65 74 4d 65 6d 62 65 72 28 22 66 69 6c 6c 22 2c 70 29 7d 2c 67 65 74 20 66 69 6c 6c 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 66 69 6c 6c 7d Data Ascii: ){return this._playbackRate},set delay(p){this._setMember("delay",p)},get delay(){return this._delay},set endDelay(p){this._setMember("endDelay",p)},get endDelay(){return this._endDelay},set fill(p){this._setMember("fill",p)},get fill(){return this._fill}
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 5c 64 2b 29 5c 5c 73 2a 5c 5c 29 22 29 2c 0a 43 3d 2f 73 74 65 70 73 5c 28 5c 73 2a 28 5c 64 2b 29 5c 73 2a 2c 5c 73 2a 28 73 74 61 72 74 7c 6d 69 64 64 6c 65 7c 65 6e 64 29 5c 73 2a 5c 29 2f 3b 79 2e 63 6c 6f 6e 65 54 69 6d 69 6e 67 49 6e 70 75 74 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 69 66 28 74 79 70 65 6f 66 20 70 3d 3d 22 6e 75 6d 62 65 72 22 29 72 65 74 75 72 6e 20 70 3b 76 61 72 20 77 3d 7b 7d 2c 7a 3b 66 6f 72 28 7a 20 69 6e 20 70 29 77 5b 7a 5d 3d 70 5b 7a 5d 3b 72 65 74 75 72 6e 20 77 7d 3b 79 2e 6d 61 6b 65 54 69 6d 69 6e 67 3d 68 3b 79 2e 6e 75 6d 65 72 69 63 54 69 6d 69 6e 67 54 6f 4f 62 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 70 29 7b 74 79 70 65 6f 66 20 70 3d 3d 22 6e 75 6d 62 65 72 22 26 26 28 70 3d 69 73 4e 61 4e 28 70 29 3f 7b 64 75 Data Ascii: \d+)\\s\\)"),C=/steps$\s(\d+)\s,\s(start\|middle\|end)\s*$/;y.cloneTimingInput=function(p){if(typeof p=="number")return p;var w={},z;for(z in p)w[z]=p[z];return w};y.makeTiming=h;y.numericTimingToObject=function(p){typeof p=="number"&&(p=isNaN(p)?{du
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 7b 76 61 72 20 67 3d 61 5b 62 5d 3b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 67 29 7c 7c 28 67 3d 5b 67 5d 29 3b 66 6f 72 28 76 61 72 20 65 2c 6d 3d 67 2e 6c 65 6e 67 74 68 2c 6e 3d 30 3b 6e 3c 6d 3b 6e 2b 2b 29 65 3d 7b 7d 2c 65 2e 6f 66 66 73 65 74 3d 22 6f 66 66 73 65 74 22 69 6e 20 61 3f 61 2e 6f 66 66 73 65 74 3a 6d 3d 3d 31 3f 31 3a 6e 2f 28 6d 2d 31 29 2c 22 65 61 73 69 6e 67 22 69 6e 20 61 26 26 28 65 2e 65 61 73 69 6e 67 3d 0a 61 2e 65 61 73 69 6e 67 29 2c 22 63 6f 6d 70 6f 73 69 74 65 22 69 6e 20 61 26 26 28 65 2e 63 6f 6d 70 6f 73 69 74 65 3d 61 2e 63 6f 6d 70 6f 73 69 74 65 29 2c 65 5b 62 5d 3d 67 5b 6e 5d 2c 63 2e 70 75 73 68 28 65 29 7d 63 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 72 29 7b 72 65 74 75 72 6e 20 6c 2e 6f 66 66 73 65 Data Ascii: {var g=a[b];Array.isArray(g)\|\|(g=[g]);for(var e,m=g.length,n=0;n<m;n++)e={},e.offset="offset"in a?a.offset:m==1?1:n/(m-1),"easing"in a&&(e.easing=a.easing),"composite"in a&&(e.composite=a.composite),e[b]=g[n],c.push(e)}c.sort(function(l,r){return l.offse
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 67 69 6e 42 6f 74 74 6f 6d 22 2c 22 6d 61 72 67 69 6e 4c 65 66 74 22 5d 2c 6f 75 74 6c 69 6e 65 3a 5b 22 6f 75 74 6c 69 6e 65 43 6f 6c 6f 72 22 2c 22 6f 75 74 6c 69 6e 65 53 74 79 6c 65 22 2c 22 6f 75 74 6c 69 6e 65 57 69 64 74 68 22 5d 2c 70 61 64 64 69 6e 67 3a 5b 22 70 61 64 64 69 6e 67 54 6f 70 22 2c 22 70 61 64 64 69 6e 67 52 69 67 68 74 22 2c 22 70 61 64 64 69 6e 67 42 6f 74 74 6f 6d 22 2c 22 70 61 64 64 69 6e 67 4c 65 66 74 22 5d 7d 2c 68 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 22 2c 22 64 69 76 22 29 3b 76 3d 7b 74 68 69 6e 3a 22 31 70 78 22 2c 6d 65 64 69 75 6d 3a 22 33 70 78 22 2c 74 68 69 63 6b 3a 22 35 70 78 22 7d 3b 76 Data Ascii: ginBottom","marginLeft"],outline:["outlineColor","outlineStyle","outlineWidth"],padding:["paddingTop","paddingRight","paddingBottom","paddingLeft"]},h=document.createElementNS("http://www.w3.org/1999/xhtml","div");v={thin:"1px",medium:"3px",thick:"5px"};v
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 70 6f 72 74 65 64 45 72 72 6f 72 22 2c 6d 65 73 73 61 67 65 3a 22 61 64 64 20 63 6f 6d 70 6f 73 69 74 69 6e 67 20 69 73 20 6e 6f 74 20 73 75 70 70 6f 72 74 65 64 22 7d 3b 69 66 28 74 21 3d 22 72 65 70 6c 61 63 65 22 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 63 6f 6d 70 6f 73 69 74 65 20 6d 6f 64 65 20 22 2b 74 2b 22 2e 22 29 3b 7d 65 6c 73 65 20 74 3d 72 3d 3d 22 65 61 73 69 6e 67 22 3f 79 2e 6e 6f 72 6d 61 6c 69 7a 65 45 61 73 69 6e 67 28 74 29 3a 22 22 2b 74 3b 76 61 72 20 78 3d 76 6f 69 64 20 30 2c 75 3d 72 2c 71 3d 74 3b 74 3d 6c 3b 76 61 72 20 43 3d 75 3b 69 66 28 43 21 3d 3d 22 64 69 73 70 6c 61 79 22 26 26 43 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 61 6e 69 6d 61 74 69 6f 6e 22 2c 30 29 21 3d 3d 30 Data Ascii: portedError",message:"add compositing is not supported"};if(t!="replace")throw new TypeError("Invalid composite mode "+t+".");}else t=r=="easing"?y.normalizeEasing(t):""+t;var x=void 0,u=r,q=t;t=l;var C=u;if(C!=="display"&&C.lastIndexOf("animation",0)!==0
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 6f 69 64 20 30 26 26 28 76 3d 21 30 29 7d 29 29 3b 69 66 28 21 76 29 72 65 74 75 72 6e 7d 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 0a 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 64 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 67 3d 30 3b 67 3c 63 2e 6c 65 6e 67 74 68 3b 67 2b 2b 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 63 5b 67 5d 29 69 66 28 65 21 3d 22 6f 66 66 73 65 74 22 26 26 65 21 3d 22 65 61 73 69 6e 67 22 26 26 65 21 3d 22 63 6f 6d 70 6f 73 69 74 65 22 29 7b 76 61 72 20 6d 3d 7b 6f 66 66 73 65 74 3a 63 5b 67 5d 2e 6f 66 66 73 65 74 2c 65 61 73 69 6e 67 3a 63 5b 67 5d 2e 65 61 73 69 6e 67 2c 76 61 6c 75 65 3a 63 5b 67 5d 5b 65 5d 7d 3b 62 5b 65 5d 3d 62 5b 65 5d 7c 7c 5b 5d 3b 62 5b 65 5d 2e 70 75 73 68 28 6d 29 7d 66 6f 72 28 76 61 72 20 6e 20 69 Data Ascii: oid 0&&(v=!0)}));if(!v)return}(function(k,f,h){function d(c){for(var b={},g=0;g<c.length;g++)for(var e in c[g])if(e!="offset"&&e!="easing"&&e!="composite"){var m={offset:c[g].offset,easing:c[g].easing,value:c[g][e]};b[e]=b[e]\|\|[];b[e].push(m)}for(var n i
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 7d 29 7d 76 61 72 20 61 3d 7b 7d 3b 66 2e 61 64 64 50 72 6f 70 65 72 74 69 65 73 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 67 2c 65 29 7b 66 6f 72 28 76 61 72 20 6d 3d 30 3b 6d 3c 65 2e 6c 65 6e 67 74 68 3b 6d 2b 2b 29 7b 76 61 72 20 6e 3d 62 2c 6c 3d 67 2c 72 3d 64 28 65 5b 6d 5d 29 3b 61 5b 72 5d 3d 61 5b 72 5d 7c 7c 5b 5d 3b 61 5b 72 5d 2e 70 75 73 68 28 5b 6e 2c 6c 5d 29 7d 7d 3b 76 61 72 20 63 3d 7b 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 3a 22 74 72 61 6e 73 70 61 72 65 6e 74 22 2c 0a 62 61 63 6b 67 72 6f 75 6e 64 50 6f 73 69 74 69 6f 6e 3a 22 30 25 20 30 25 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 43 6f 6c 6f 72 3a 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 2c 62 6f 72 64 65 72 42 6f 74 74 6f 6d 4c 65 66 74 52 61 64 69 75 73 3a Data Ascii: })}var a={};f.addPropertiesHandler=function(b,g,e){for(var m=0;m<e.length;m++){var n=b,l=g,r=d(e[m]);a[r]=a[r]\|\|[];a[r].push([n,l])}};var c={backgroundColor:"transparent",backgroundPosition:"0% 0%",borderBottomColor:"currentColor",borderBottomLeftRadius:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49759	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:03 UTC	959	OUT	GET /generate_204 HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:03 UTC	203	IN	HTTP/1.1 204 No Content Content-Length: 0 Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 22:25:03 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49760	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:03 UTC	1036	OUT	GET /vi/dQw4w9WgXcQ/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:03 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 17560 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:11:59 GMT Expires: Wed, 03 Jul 2024 00:11:59 GMT Cache-Control: public, max-age=7200 ETag: "1631784323" Content-Type: image/jpeg Vary: Origin Age: 784 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:03 UTC	733	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 10 0d 0d 0d 0e 0d 0d 0d 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 0f 0f 0f 15 12 15 15 15 15 12 12 12 15 15 15 15 15 15 15 15 15 15 15 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 12 15 15 15 15 15 12 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 06 01 04 05 07 08 ff c4 00 54 10 00 01 03 02 03 03 05 0a 08 0b 05 07 04 03 00 00 01 00 02 03 04 11 05 12 21 06 31 41 07 13 51 61 71 08 14 22 32 52 53 81 91 92 d3 16 23 42 73 Data Ascii: JFIFh"T!1AQaq"2RS#Bs
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: c5 c7 87 72 9e 85 70 3c 9e 54 79 70 fb 4f f7 6b 3f 8b ba 8f 2e 1f 69 fe ed 1c b5 5f 95 87 1e 1d ca 72 15 cb f1 75 51 e5 c3 ed 3f dd ac fe 2e 6a 3c b8 7d a7 fb b4 72 d5 7e 50 e3 c3 b9 4c 42 ba 7e 2d ea 7c b8 3d a9 3d da c8 e4 da a7 cb 83 da 93 dd a3 96 ab f2 87 1e 9f 72 94 85 77 6f 26 75 3e 5c 1e d4 9e e9 67 f1 63 53 e5 c1 ed 49 ee 91 cb 54 f9 45 c7 a7 dc a3 a1 5e 47 26 15 3e 5c 1e d4 9e e9 67 f1 5f 55 e7 20 f6 a4 f7 48 e5 aa 7c a1 cc 53 ee 51 50 af 47 92 fa af 39 07 b5 27 ba 47 e2 be ab ce 41 ed 49 ee 91 cb 54 ec 1c c5 3e e5 15 0a f7 f8 ae aa f3 90 7b 52 7b a4 7e 2b 2a bc e5 3f b5 27 ba 4b 96 a9 d8 39 8a 7d ca 22 15 f0 72 59 55 e7 29 fd a9 3d d2 cf e2 aa ab ce 53 fb 52 7b a4 72 f5 3b 0b 99 a7 dc a1 21 5f bf 15 35 5e 72 9f db 93 dd 2c fe 2a 2a bc e5 3f b7 Data Ascii: rp<TypOk?.i_ruQ?.j<}r~PLB~-\|==rwo&u>\gcSITE^G&>\g_U H\|SQPG9'GAIT>{R{~+?'K9}"rYU)=SR{r;!_5^r,*?
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: cb 93 1c 4a 85 a6 4a 9a 67 36 21 6b ca c7 32 58 c5 f4 19 8c 6e 71 60 bd 85 de 1a 2e 40 55 20 be d3 ee 7a da b9 f1 4c 3e 47 d6 b5 8f 22 59 29 dc ec 81 ac 9e 3c 8c 24 b9 9e 27 cb 74 6e ca 03 4e 4d c3 55 f1 ce d0 53 36 39 e7 8d 86 ec 8e 79 a3 61 bd ee c6 48 e6 b4 df 8d da 06 aa 58 7a d2 93 71 96 eb b0 aa 41 24 9a ea 76 76 03 62 6a b1 19 1f 1d 2b 58 e7 c6 c0 f7 07 bc 30 65 2e 0d d0 9d e6 e7 72 83 6c 36 6a 7a 19 dd 4f 50 1a d9 5a d6 b8 86 b8 3c 59 e2 ed f0 86 9b 97 ad 77 17 7f be 55 ff 00 d2 b7 fe eb 55 77 ba a4 ff 00 eb 13 7c d5 3f fd b0 9c 6b 37 59 c3 a5 88 ca 9a e1 e6 3c bc 95 6a d8 6e 4f 6b f1 0b 9a 68 0b a3 07 29 99 e4 47 10 23 78 ce e2 33 11 c4 30 38 8b ea 02 d6 e4 c7 66 bb fe ba 9a 94 92 1b 2b fe 30 8d e2 26 34 c9 25 8f 02 58 d2 d0 7a 5c 17 d4 1c ba ed Data Ascii: JJg6!k2Xnq`.@U zL>G"Y)<$'tnNMUS69yaHXzqA$vvbj+X0e.rl6jzOPZ<YwUUw\|?k7Y<jnOkh)G#x308f+0&4%Xz\
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: ab 85 dd 15 8d 41 55 89 cb 35 3c ac 9a 27 45 08 0f 61 bb 49 6b 00 20 1e a3 a2 71 8b e6 5b e9 6f c0 49 ae 15 bc 4d 9e e6 1a b6 b3 18 a6 cd a7 38 d9 e3 04 f9 46 27 11 eb cb 97 fc 56 e2 bd 07 bb 52 81 f9 a8 26 b1 e6 ed 3c 44 f0 0f 3c db da 3b 5c d6 bc 8f 9a 3d 0b e7 9c 3a b1 f1 48 c9 63 71 64 91 bd b2 31 e3 7b 5e c2 1c d7 0e 1a 10 0d 8e 8b ea 9d 9c e5 8b 0a c4 e9 bb df 13 11 c2 f7 00 25 8e 60 79 87 b8 6b 9e 29 47 89 af 84 33 96 3d a7 71 36 0e 25 78 ca 15 15 44 ae 96 e4 69 b5 28 38 3d 0f 96 a8 29 5d 23 d9 1b 05 df 23 d9 1b 1b e5 3d ee 0d 68 f4 b8 81 e9 57 3d ba e4 be b7 0f 89 b3 55 36 26 b1 d2 08 9b 92 50 f7 17 b9 ae 70 16 03 c9 63 8d fa 97 bb 60 51 6c b6 1c fe f9 86 7a 53 23 2f 90 8a a7 d5 bd 9a 5b e2 e3 e7 25 21 d6 d3 30 6e 6d 48 be a5 78 e7 2e fc a7 7e 14 Data Ascii: AU5<'EaIk q[oIM8F'VR&<D<;\=:Hcqd1{^%`yk)G3=q6%xDi(8=)]##=hW=U6&Ppc`QlzS#/[%!0nmHx.~
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 99 65 7e 6c 8c 05 a0 9c ad 2e 76 af 2d 68 b3 5a 4e a4 6e 5d 7e 50 f6 f2 a7 12 7c 6f a9 11 66 89 ae 63 79 a6 16 0b 38 82 6e 1c f7 5c dc 75 2b 0f 73 57 fc 62 93 b2 a3 fd 34 ab 4b 94 a3 4d ca 56 ba 4f c8 ce a2 9c ec b6 b9 52 da cd 93 ab a2 73 1b 57 0b a1 74 81 c5 81 ce 8d d9 83 48 0e 3f 16 f7 01 62 46 fb 6f 5c 66 95 ef 5d d9 bf 9f a0 f9 a9 ff 00 cf 12 f0 56 a2 85 47 38 29 3e a2 ab 05 19 b4 89 ae af 34 fc 93 e2 ae 6b 5c da 27 96 b8 07 03 ce 41 a8 22 e0 fe 76 fa 85 43 7e e3 d8 be d6 db bd a0 92 8b 08 75 4c 39 39 c8 a1 a7 2d ce 0b 99 e1 3a 26 1b 80 41 3a 38 f1 df 65 56 22 b4 a9 b8 a8 a5 af 72 ca 34 e3 3b df a1 f3 58 e4 93 17 ff 00 91 93 e9 29 fd f2 a6 56 44 e8 de f8 de 32 bd 8e 73 1e dd 0e 57 30 96 b9 b7 04 8d 08 23 43 6d 17 a6 8e e8 6c 4f ff 00 d4 fa 17 fb e5 Data Ascii: e~l.v-hZNn]~P\|ofcy8n\u+sWb4KMVORsWtH?bFo\f]VG8)>4k\'A"vC~uL99-:&A:8eV"r4;X)VD2sW0#CmlO
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 3e 6a 56 cb 1e 66 e4 94 58 17 b7 38 2d 73 1f 71 63 76 eb 95 cb e3 68 9d 70 0f 48 5f 55 ed 6e de 61 b8 2e 1c 68 30 f9 5b 3c e1 92 32 30 c7 89 8b 1f 21 25 f3 d4 48 cf 00 38 39 c5 dc d8 b1 27 2b 43 5a d0 4b 7e 55 89 b6 d3 a1 59 82 4d 27 be 5b e9 72 15 ed 75 df a9 61 e4 d8 ff 00 ea 38 7f fd 7d 17 fa 98 97 d1 7d d9 bf ee 34 9f f5 83 fd 3c eb e7 1e 4f e6 6b 2b e8 5c e7 06 b5 b5 b4 8e 73 9c 40 6b 5a da 88 cb 9c e2 74 0d 68 04 92 74 00 15 ef 7d d6 fb 43 4d 3d 1d 33 60 a9 82 67 36 ac 39 cd 8a 68 e4 70 6f 31 30 cc 43 1c 48 17 20 5f 75 c8 e9 45 75 ed a0 28 7c 39 1f 37 35 cb d2 fb 9a 4f fe b1 49 d9 51 fe 9a 65 e6 41 7a 1f 73 c5 7c 71 62 b4 b2 4b 23 22 8d a2 7c cf 91 cd 63 05 e9 e5 02 ee 71 00 5c 90 35 3b c8 5a 6b fc 39 79 32 8a 7e f2 f3 47 a0 77 67 7e 7e 87 e6 aa 3f Data Ascii: >jVfX8-sqcvhpH_Una.h0[<20!%H89'+CZK~UYM'[rua8}}4<Ok+\s@kZtht}CM=3`g69hpo10CH _uEu(\|975OIQeAzs\|qbK#"\|cq\5;Zk9y2~Gwg~~?
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: fa 2e 9f 27 c5 f6 94 38 e8 1d 66 ae 40 6d dc db 74 ab 96 13 41 cd b3 28 e3 ab bb 4a b2 9c 5b 95 ca 6b ca 31 86 bd 4d 89 d9 d0 b5 9e 2c b7 63 eb 4d 34 37 5b ce 41 cf 58 52 cb 19 0a 3b 2b 33 11 04 20 04 5d 17 06 64 04 39 cb 01 01 4a e5 77 60 10 10 56 63 6d ca 6a 40 3c 51 93 aa da 73 2e 14 94 b1 d9 4a f1 d1 f5 a1 91 67 37 22 03 4a dc 92 9c 90 b5 cb 10 f6 04 7c a4 d4 e1 46 d2 9c 2d e7 34 b7 f2 60 da 7c d5 8f aa 87 9f 86 3a 27 39 cd f9 6d cd 59 45 03 a5 84 fc 99 d9 1c d2 16 13 a6 6b 5f 4b ad 8c 33 67 04 35 15 90 cb 92 60 cc 3e b2 78 65 03 c0 95 bd ec 65 a7 a9 8a fc 1c d2 d7 8e 2d 24 83 ab 4a e3 ec a5 6b 18 ca e0 f7 06 99 68 4c 51 83 7f 0a 4e fd a2 97 28 b0 df 92 29 1d ad 87 80 7a 95 8f 63 36 82 03 4b 51 15 43 b2 cd 0d 1d 64 54 72 10 4f 38 ca 98 de d7 51 b8 81 Data Ascii: .'8f@mtA(J[k1M,cM47[AXR;+3 ]d9Jw`Vcmj@<Qs.Jg7"J\|F-4`\|:'9mYEk_K3g5`>xee-$JkhLQN()zc6KQCdTrO8Q
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 14 99 01 3c 43 73 be df df 3d 2b 6f 61 c4 51 99 6a a7 89 b3 45 4e d6 0e 65 de 2c b2 cc ee 6d 8c 3f dd 8c 4f 30 eb a5 0a 7d b8 c5 29 e5 82 90 c1 66 b8 c9 57 34 f0 00 40 82 49 85 30 2d 6f 03 1b df 14 92 30 0f 15 8f 6b 4e ad d6 28 31 e6 c1 4d 0c 31 b2 09 8b de fa 89 f9 e8 9b 28 63 ee 61 86 31 98 68 59 13 1d 21 22 ff 00 ef c4 5f 42 01 ab 8e db b7 f7 16 89 9c dd a8 c3 b9 89 e6 84 1c cd 63 cf 36 ef 2e 27 00 f8 64 ff 00 1c 4e 63 ff 00 c6 b9 80 ab 16 d5 62 8c a8 8e 9a 5f 01 b3 35 8e a7 96 38 d9 91 a1 90 91 de ef 6b 47 82 01 89 fc cd 81 d3 bc f8 5c 2a e9 53 83 76 d4 84 96 ba 19 09 82 44 c0 a9 15 8e d2 9e ea 30 98 24 2b 1e 91 c9 51 f8 99 3e 77 f7 1a ae 20 f5 2a 6f 25 27 e2 64 f9 df dc 6a b9 80 b0 d4 7e b3 3b b8 5f 85 11 24 0b 66 8e 3d 75 4b 4e cd 77 2d d1 03 7a d5 Data Ascii: <Cs=+oaQjENe,m?O0})fW4@I0-o0kN(1M1(ca1hY!"_Bc6.'dNcb_58kG\SvD0$+Q>w o%'dj~;_$f=uKNw-z
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: d3 b8 96 dc 5e db b3 0e 95 d3 a0 d9 da a9 59 ce 45 4b 53 2c 7a fc 64 70 4a f6 68 6c 7c 26 b0 b7 42 2c 75 d2 cb 63 1a 77 fb 05 07 ce d7 fe ba 55 d4 a9 c2 0c b4 98 73 c4 d4 d0 96 47 53 63 34 c2 27 0f f6 d9 ce 66 8b 19 08 1d 2c 04 dc 69 aa 83 9e 8b cd af bf e0 6a 3f bf d1 51 21 38 2b a7 b7 18 8b 66 a9 92 46 3c c8 d2 d8 5a 65 2d 2d 33 3e 3a 78 a2 96 62 1d e1 0e 7a 56 3e 5f 08 07 7c 6f 84 01 b8 5c 76 b9 4d 3b ab 90 6b 52 70 53 05 08 7a 66 b9 0c 44 b6 40 4a 1e 80 52 06 48 0a 60 a3 09 81 41 13 d3 39 25 07 99 93 e7 7f 71 aa f3 03 35 d7 72 a3 72 49 39 6c 32 5b ce fe e3 55 c2 4a b2 7f 92 e7 d6 be 66 77 70 9f 0a 26 f4 6d df 60 98 be da 1d d6 5c f6 57 38 0b 58 24 9a b5 c7 a1 55 2d 8d 57 37 e7 70 3b 96 b5 cd cd d6 ac 75 64 70 09 bb ec f4 05 5d b4 1d cd de 77 4d 02 ad Data Ascii: ^YEKS,zdpJhl\|&B,ucwUsGSc4'f,ij?Q!8+fF<Ze--3>:xbzV>_\|o\vM;kRpSzfD@JRH`A9%q5rrI9l2[UJfwp&m`\W8X$U-W7p;udp]wM
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: e3 5e 07 78 ea 5f 31 4c fd 57 47 67 b1 d7 42 fb df c1 3b c2 8c a5 97 63 05 d5 f5 3e a1 09 4a f3 2c 0f 1f 93 28 70 7d 81 dc bb 74 bb 67 c1 c0 1e bd c9 c7 12 ba 96 f2 ef 74 5c 56 08 5c 8a 4d a1 8d dd 23 eb 5d 38 6a 58 ed ce 05 59 1a b1 65 52 83 18 04 59 4e 21 2a 37 b2 ca eb d8 83 42 15 82 9a cb 19 54 ef d4 85 85 b2 c8 61 e8 52 31 d6 5b 51 ee 49 48 4d 1a 45 87 a1 61 cc 5d 13 d8 90 36 e9 dc 8b 48 d1 0d 2b 22 32 ba cd 60 51 bc 0b 84 ee 45 a3 e3 e6 a9 02 89 a5 38 5d 03 0b 25 69 52 30 a8 41 4e c4 11 36 02 ca 40 b2 0a 04 38 29 ee a3 09 da 9d c4 48 4a c6 64 ae 40 29 88 7b ac 84 80 a6 09 a2 23 85 90 90 26 05 34 26 48 d5 33 4a 81 aa 40 53 20 c9 1a 53 82 a2 69 4c 09 48 8b 24 69 4e 0a 89 a5 30 72 04 4a 9d a5 42 1c 9d ae 49 88 96 e9 9a a2 0e 4e 0a 40 33 ca 2e 90 95 90 Data Ascii: ^x_1LWGgB;c>J,(p}tgt\V\M#]8jXYeRYN!*7BTaR1[QIHMEa]6H+"2`QE8]%iR0AN6@8)HJd@){#&4&H3J@S SiLH$iN0rJBIN@3.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49757	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:03 UTC	1190	OUT	GET /s/desktop/a7b1ec23/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:03 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2051 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 17:36:19 GMT Expires: Wed, 02 Jul 2025 17:36:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 11:13:28 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 17324 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:03 UTC	704	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 20 72 65 73 65 72 76 65 64 2e 0a 20 54 68 69 73 20 63 6f 64 65 20 6d 61 79 20 6f 6e 6c 79 20 62 65 20 75 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 42 53 44 20 73 74 79 6c 65 20 6c 69 63 65 6e 73 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 2e 69 6f 2f 4c 49 43 45 4e 53 45 2e 74 78 74 0a 20 54 68 65 20 63 6f 6d 70 6c 65 74 65 20 73 65 74 20 6f 66 20 61 75 74 68 6f 72 73 20 6d 61 79 20 62 65 20 66 6f 75 6e 64 20 61 74 20 68 74 74 70 3a 2f 2f 70 6f 6c 79 6d 65 72 2e 67 69 74 68 75 62 Data Ascii: 'use strict';/* Copyright (c) 2016 The Polymer Project Authors. All rights reserved. This code may only be used under the BSD style license found at http://polymer.github.io/LICENSE.txt The complete set of authors may be found at http://polymer.github
2024-07-02 22:25:03 UTC	1347	IN	Data Raw: 76 61 72 20 61 3d 6b 2e 67 65 74 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 3b 61 3d 6e 2e 63 61 6c 6c 28 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2c 61 29 3b 66 3d 21 30 3b 72 65 74 75 72 6e 20 6e 65 77 20 61 7d 65 3d 21 31 7d 3b 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 3d 68 2e 70 72 6f 74 6f 74 79 70 65 3b 77 69 6e 64 6f 77 2e 48 54 4d 4c 45 6c 65 6d 65 6e 74 2e 65 73 35 53 68 69 6d 6d 65 64 3d 21 30 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 77 69 6e 64 6f 77 2c 22 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 22 2c 7b 76 61 6c 75 65 3a 77 69 6e 64 6f 77 2e 63 75 73 74 6f 6d 45 6c 65 6d 65 6e 74 73 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 Data Ascii: var a=k.get(this.constructor);a=n.call(window.customElements,a);f=!0;return new a}e=!1};window.HTMLElement.prototype=h.prototype;window.HTMLElement.es5Shimmed=!0;Object.defineProperty(window,"customElements",{value:window.customElements,configurable:!0,wr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49756	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:03 UTC	1168	OUT	GET /s/desktop/a7b1ec23/jsbin/webcomponents-sd.vflset/webcomponents-sd.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:03 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 78674 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 17:36:19 GMT Expires: Wed, 02 Jul 2025 17:36:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 17324 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:03 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6b 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 Data Ascii: (function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var k;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function p(a){var b=typeof Symbol!="undefined"&&Symbol.itera
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 72 20 63 3d 61 5b 62 5d 3b 69 66 28 63 26 26 63 2e 4d 61 74 68 3d 3d 4d 61 74 68 29 72 65 74 75 72 6e 20 63 7d 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 66 69 6e 64 20 67 6c 6f 62 61 6c 20 6f 62 6a 65 63 74 22 29 3b 7d 76 61 72 20 63 61 3d 62 61 28 74 68 69 73 29 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 4e 75 6d 62 65 72 28 74 68 69 73 29 2c 62 3d 5b 5d 2c 63 3d 61 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 62 5b 63 2d 61 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 3b 2f 2a 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 36 20 54 68 65 20 50 6f 6c 79 6d 65 72 20 50 72 6f 6a 65 63 74 20 41 75 74 68 6f 72 73 2e 20 41 6c 6c 20 72 69 67 68 74 73 Data Ascii: r c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}var ca=ba(this);function r(){for(var a=Number(this),b=[],c=a;c<arguments.length;c++)b[c-a]=arguments[c];return b};/*Copyright (c) 2016 The Polymer Project Authors. All rights
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 74 3f 22 6d 73 45 6c 65 6d 65 6e 74 73 46 72 6f 6d 50 6f 69 6e 74 22 3a 22 65 6c 65 6d 65 6e 74 73 46 72 6f 6d 50 6f 69 6e 74 22 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 76 28 61 29 29 26 26 61 2e 66 69 72 73 74 43 68 69 6c 64 21 3d 3d 76 6f 69 64 20 30 7d 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 72 65 74 75 72 6e 20 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 68 61 64 6f 77 52 6f 6f 74 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 29 7b 72 65 74 75 72 6e 28 61 3d 28 61 3d 76 28 61 29 29 26 26 61 2e 72 6f 6f 74 29 26 26 61 2e 77 61 28 29 7d 76 61 72 20 7a 3d 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6d 61 3d 7a 2e 6d 61 74 63 68 65 73 7c 7c 7a 2e 6d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 7a 2e 6d 6f 7a 4d 61 Data Ascii: t?"msElementsFromPoint":"elementsFromPoint"}function x(a){return(a=v(a))&&a.firstChild!==void 0}function y(a){return a instanceof ShadowRoot}function la(a){return(a=(a=v(a))&&a.root)&&a.wa()}var z=Element.prototype,ma=z.matches\|\|z.matchesSelector\|\|z.mozMa
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 2c 62 2c 63 29 7b 63 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 3b 69 66 28 63 2e 76 61 6c 75 65 29 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 65 6c 73 65 20 74 72 79 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 62 2c 63 29 7d 63 61 74 63 68 28 64 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 61 2c 62 2c 63 2c 64 29 7b 63 3d 63 3d 3d 3d 76 6f 69 64 20 30 3f 22 22 3a 63 3b 66 6f 72 28 76 61 72 20 65 20 69 6e 20 62 29 64 26 26 64 2e 69 6e 64 65 78 4f 66 28 65 29 3e 3d 30 7c 7c 77 61 28 61 2c 63 2b 65 2c 62 5b 65 5d 29 7d 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 63 20 69 6e 20 61 26 26 77 61 28 61 2c 63 2c 62 5b 63 5d 29 7d Data Ascii: n b}function wa(a,b,c){c.configurable=!0;if(c.value)a[b]=c.value;else try{Object.defineProperty(a,b,c)}catch(d){}}function B(a,b,c,d){c=c===void 0?"":c;for(var e in b)d&&d.indexOf(e)>=0\|\|wa(a,c+e,b[e])}function xa(a,b){for(var c in b)c in a&&wa(a,c,b[c])}
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 28 61 29 7d 29 7d 7d 3b 47 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 61 6b 65 52 65 63 6f 72 64 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 61 64 64 65 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 7c 7c 74 68 69 73 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 61 3d 5b 7b 61 64 64 65 64 4e 6f 64 65 73 3a 74 68 69 73 2e 61 64 64 65 64 4e 6f 64 65 73 2c 72 65 6d 6f 76 65 64 4e 6f 64 65 73 3a 74 68 69 73 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 7d 5d 3b 74 68 69 73 2e 61 64 64 65 64 4e 6f 64 65 73 3d 5b 5d 3b 74 68 69 73 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 3d 5b 5d 3b 72 65 74 75 72 6e 20 61 7d 72 65 74 75 72 6e 5b 5d 7d 3b 0a 66 75 6e 63 74 69 6f Data Ascii: a.forEach(function(b){b(a)})}};Ga.prototype.takeRecords=function(){if(this.addedNodes.length\|\|this.removedNodes.length){var a=[{addedNodes:this.addedNodes,removedNodes:this.removedNodes}];this.addedNodes=[];this.removedNodes=[];return a}return[]};functio
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 3b 65 2b 2b 29 7b 61 3a 7b 76 61 72 20 68 3d 67 3b 76 61 72 20 6c 3d 61 2c 6d 3d 62 3b 73 77 69 74 63 68 28 68 2e 6e 6f 64 65 54 79 70 65 29 7b 63 61 73 65 20 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 3a 6c 3d 68 2e 6c 6f 63 61 6c 4e 61 6d 65 3b 66 6f 72 28 76 61 72 20 6e 3d 22 3c 22 2b 6c 2c 74 3d 68 2e 61 74 74 72 69 62 75 74 65 73 2c 41 3d 30 2c 69 61 3b 69 61 3d 74 5b 41 5d 3b 41 2b 2b 29 6e 2b 3d 22 20 22 2b 69 61 2e 6e 61 6d 65 2b 27 3d 22 27 2b 69 61 2e 76 61 6c 75 65 2e 72 65 70 6c 61 63 65 28 4c 61 2c 4e 61 29 2b 27 22 27 3b 6e 2b 3d 22 3e 22 3b 68 3d 50 61 5b 6c 5d 3f 6e 3a 6e 2b 52 61 28 68 2c 6d 29 2b 22 3c 2f 22 2b 6c 2b 22 3e 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 4e 6f 64 65 2e 54 45 58 54 5f 4e 4f 44 45 3a 68 3d 68 2e 64 61 Data Ascii: ;e++){a:{var h=g;var l=a,m=b;switch(h.nodeType){case Node.ELEMENT_NODE:l=h.localName;for(var n="<"+l,t=h.attributes,A=0,ia;ia=t[A];A++)n+=" "+ia.name+'="'+ia.value.replace(La,Na)+'"';n+=">";h=Pa[l]?n:n+Ra(h,m)+"</"+l+">";break a;case Node.TEXT_NODE:h=h.da
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 22 5d 3b 0a 66 75 6e 63 74 69 6f 6e 20 61 62 28 29 7b 76 61 72 20 61 3d 5b 22 64 69 73 70 61 74 63 68 45 76 65 6e 74 22 2c 22 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 2c 22 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 22 5d 3b 77 69 6e 64 6f 77 2e 45 76 65 6e 74 54 61 72 67 65 74 3f 28 45 28 77 69 6e 64 6f 77 2e 45 76 65 6e 74 54 61 72 67 65 74 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 77 69 6e 64 6f 77 2e 5f 5f 73 68 61 64 79 5f 6e 61 74 69 76 65 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3d 3d 3d 76 6f 69 64 20 30 26 26 45 28 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 29 3a 28 45 28 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 45 28 57 69 6e 64 6f 77 2e 70 72 6f 74 6f 74 79 70 65 2c 61 29 2c 45 28 58 Data Ascii: "];function ab(){var a=["dispatchEvent","addEventListener","removeEventListener"];window.EventTarget?(E(window.EventTarget.prototype,a),window.__shady_native_addEventListener===void 0&&E(Window.prototype,a)):(E(Node.prototype,a),E(Window.prototype,a),E(X
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 28 62 2e 6c 65 6e 67 74 68 3e 30 7c 7c 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 29 26 26 74 68 69 73 2e 5f 5f 73 68 61 64 79 5f 6e 61 74 69 76 65 5f 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 62 29 2c 76 6f 69 64 20 30 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 69 73 2e 6e 6f 64 65 56 61 6c 75 65 3d 62 7d 7d 7d 7d 29 3b 45 28 4e 6f 64 65 2e 70 72 6f 74 6f 74 79 70 65 2c 22 61 70 70 65 6e 64 43 68 69 6c 64 20 69 6e 73 65 72 74 42 65 66 6f 72 65 20 72 65 6d 6f 76 65 43 68 69 6c 64 20 72 65 70 6c 61 63 65 43 68 69 6c 64 20 63 6c 6f 6e 65 4e 6f 64 65 20 63 6f 6e 74 61 69 6e 73 22 2e 73 70 6c 69 74 28 22 20 22 29 29 3b 0a 45 Data Ascii: (b.length>0\|\|this.nodeType===Node.ELEMENT_NODE)&&this.__shady_native_insertBefore(document.createTextNode(b),void 0);break;default:this.nodeValue=b}}}});E(Node.prototype,"appendChild insertBefore removeChild replaceChild cloneNode contains".split(" "));E
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 64 3b 64 3d 62 2e 5f 5f 73 68 61 64 79 5f 6e 61 74 69 76 65 5f 66 69 72 73 74 43 68 69 6c 64 3b 29 63 2e 5f 5f 73 68 61 64 79 5f 6e 61 74 69 76 65 5f 69 6e 73 65 72 74 42 65 66 6f 72 65 28 64 2c 76 6f 69 64 20 30 29 7d 7d 2c 63 6c 61 73 73 4e 61 6d 65 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 62 29 7d 7d 7d 29 29 3b 45 28 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 2c 22 73 65 74 41 74 74 72 69 62 75 74 65 20 67 65 74 41 74 74 72 69 62 75 74 65 20 68 61 73 41 74 74 72 69 62 75 74 65 20 72 65 6d 6f 76 Data Ascii: d;d=b.__shady_native_firstChild;)c.__shady_native_insertBefore(d,void 0)}},className:{get:function(){return this.getAttribute("class")\|\|""},set:function(b){this.setAttribute("class",b)}}}));E(Element.prototype,"setAttribute getAttribute hasAttribute remov
2024-07-02 22:25:03 UTC	1390	IN	Data Raw: 2c 64 62 3d 43 28 7b 67 65 74 20 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 73 68 61 64 79 5f 70 61 72 65 6e 74 45 6c 65 6d 65 6e 74 7d 2c 67 65 74 20 70 61 72 65 6e 74 4e 6f 64 65 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 73 68 61 64 79 5f 70 61 72 65 6e 74 4e 6f 64 65 7d 2c 67 65 74 20 6e 65 78 74 53 69 62 6c 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 73 68 61 64 79 5f 6e 65 78 74 53 69 62 6c 69 6e 67 7d 2c 67 65 74 20 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 5f 73 68 61 64 79 5f 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 7d 2c 67 65 74 20 6e 65 78 74 45 6c 65 6d 65 6e 74 53 69 62 6c 69 6e 67 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: ,db=C({get parentElement(){return this.__shady_parentElement},get parentNode(){return this.__shady_parentNode},get nextSibling(){return this.__shady_nextSibling},get previousSibling(){return this.__shady_previousSibling},get nextElementSibling(){return th

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49764	74.125.0.137	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:03 UTC	981	OUT	GET /generate_204 HTTP/1.1 Host: rr4---sn-ab5l6nk6.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:03 UTC	266	IN	HTTP/1.1 204 No Content Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Server: gvs 1.0 Date: Tue, 02 Jul 2024 22:25:03 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49763	74.125.0.137	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:03 UTC	987	OUT	GET /generate_204?conn2 HTTP/1.1 Host: rr4---sn-ab5l6nk6.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:03 UTC	266	IN	HTTP/1.1 204 No Content Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Server: gvs 1.0 Date: Tue, 02 Jul 2024 22:25:03 GMT X-Frame-Options: SAMEORIGIN X-XSS-Protection: 0 Content-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.5	49765	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:04 UTC	1186	OUT	GET /s/desktop/a7b1ec23/jsbin/intersection-observer.min.vflset/intersection-observer.min.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:04 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 5547 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 14:10:53 GMT Expires: Wed, 02 Jul 2025 14:10:53 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 29651 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:04 UTC	704	IN	Data Raw: 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 36 20 47 6f 6f 67 6c 65 20 49 6e 63 2e 20 41 6c 6c 20 52 69 67 68 74 73 20 52 65 73 65 72 76 65 64 2e 0a 0a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 57 33 43 20 53 4f 46 54 57 41 52 45 20 41 4e 44 20 44 4f 43 55 4d 45 4e 54 20 4e 4f 54 49 43 45 20 41 4e 44 20 4c 49 43 45 4e 53 45 2e 0a 0a 20 20 68 74 74 70 73 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 43 6f 6e 73 6f 72 74 69 75 6d 2f 4c 65 67 61 6c 2f 32 30 31 35 2f 63 6f 70 79 72 69 67 68 74 2d 73 6f 66 74 77 61 72 65 2d 61 6e 64 2d 64 6f 63 75 6d 65 6e 74 0a 0a 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 66 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 61 29 7b 74 68 69 73 2e 74 69 6d 65 3d 61 2e 74 69 6d 65 3b 74 68 69 73 2e 74 61 72 67 Data Ascii: /* Copyright 2016 Google Inc. All Rights Reserved. Licensed under the W3C SOFTWARE AND DOCUMENT NOTICE AND LICENSE. https://www.w3.org/Consortium/Legal/2015/copyright-software-and-document*/(function(f,h){function t(a){this.time=a.time;this.targ
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: 72 28 22 72 6f 6f 74 20 6d 75 73 74 20 62 65 20 61 6e 20 45 6c 65 6d 65 6e 74 22 29 3b 0a 74 68 69 73 2e 67 3d 79 28 74 68 69 73 2e 67 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 42 29 3b 74 68 69 73 2e 44 3d 61 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 73 3d 74 68 69 73 2e 4c 28 62 2e 72 6f 6f 74 4d 61 72 67 69 6e 29 3b 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 73 3d 74 68 69 73 2e 4a 28 62 2e 74 68 72 65 73 68 6f 6c 64 29 3b 74 68 69 73 2e 72 6f 6f 74 3d 62 2e 72 6f 6f 74 7c 7c 6e 75 6c 6c 3b 74 68 69 73 2e 72 6f 6f 74 4d 61 72 67 69 6e 3d 74 68 69 73 2e 73 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 63 2e 76 61 6c 75 65 2b 63 2e 75 6e 69 74 7d 29 2e 6a 6f 69 6e 28 22 20 22 29 7d 66 Data Ascii: r("root must be an Element");this.g=y(this.g.bind(this),this.B);this.D=a;this.h=[];this.i=[];this.s=this.L(b.rootMargin);this.thresholds=this.J(b.threshold);this.root=b.root\|\|null;this.rootMargin=this.s.map(function(c){return c.value+c.unit}).join(" ")}f
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: 6f 74 6f 74 79 70 65 2e 43 3d 21 30 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 62 73 65 72 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 74 68 69 73 2e 68 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 2e 65 6c 65 6d 65 6e 74 3d 3d 61 7d 29 29 7b 69 66 28 21 61 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 21 3d 31 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 74 61 72 67 65 74 20 6d 75 73 74 20 62 65 20 61 6e 20 45 6c 65 6d 65 6e 74 22 29 3b 74 68 69 73 2e 4d 28 29 3b 0a 74 68 69 73 2e 68 2e 70 75 73 68 28 7b 65 6c 65 6d 65 6e 74 3a 61 2c 41 3a 6e 75 6c 6c 7d 29 3b 74 68 69 73 2e 4b 28 29 3b 74 68 69 73 2e 67 28 29 7d 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 75 6e 6f 62 73 65 72 76 65 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 Data Ascii: ototype.C=!0;d.prototype.observe=function(a){if(!this.h.some(function(b){return b.element==a})){if(!a\|\|a.nodeType!=1)throw Error("target must be an Element");this.M();this.h.push({element:a,A:null});this.K();this.g()}};d.prototype.unobserve=function(a){t
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: 74 68 69 73 2e 67 2c 21 30 29 2c 74 68 69 73 2e 6a 26 26 28 74 68 69 73 2e 6a 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 2c 74 68 69 73 2e 6a 3d 6e 75 6c 6c 29 29 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 74 68 69 73 2e 4f 28 29 2c 62 3d 61 3f 74 68 69 73 2e 48 28 29 3a 71 28 29 3b 74 68 69 73 2e 68 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 76 61 72 20 65 3d 63 2e 65 6c 65 6d 65 6e 74 2c 67 3d 6d 28 65 29 2c 6b 3d 74 68 69 73 2e 4e 28 65 29 2c 6c 3d 63 2e 41 2c 70 3d 61 26 26 6b 26 26 74 68 69 73 2e 46 28 65 2c 62 29 3b 63 3d 63 2e 41 3d 6e 65 77 20 74 28 7b 74 69 6d 65 3a 66 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 26 26 70 65 72 66 6f Data Ascii: this.g,!0),this.j&&(this.j.disconnect(),this.j=null))};d.prototype.g=function(){var a=this.O(),b=a?this.H():q();this.h.forEach(function(c){var e=c.element,g=m(e),k=this.N(e),l=c.A,p=a&&k&&this.F(e,b);c=c.A=new t({time:f.performance&&performance.now&&perfo
2024-07-02 22:25:04 UTC	673	IN	Data Raw: 2e 74 6f 70 2d 62 5b 30 5d 2c 72 69 67 68 74 3a 61 2e 72 69 67 68 74 2b 62 5b 31 5d 2c 62 6f 74 74 6f 6d 3a 61 2e 62 6f 74 74 6f 6d 2b 62 5b 32 5d 2c 6c 65 66 74 3a 61 2e 6c 65 66 74 2d 62 5b 33 5d 7d 3b 62 2e 77 69 64 74 68 3d 62 2e 72 69 67 68 74 2d 62 2e 6c 65 66 74 3b 62 2e 68 65 69 67 68 74 3d 62 2e 62 6f 74 74 6f 6d 2d 62 2e 74 6f 70 3b 72 65 74 75 72 6e 20 62 7d 3b 64 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 3d 61 26 26 61 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 61 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 3b 62 3d 62 2e 69 73 49 6e 74 65 72 73 65 63 74 69 6e 67 3f 62 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 7c 7c 30 3a 2d 31 3b 69 66 28 61 21 3d 3d 62 29 Data Ascii: .top-b[0],right:a.right+b[1],bottom:a.bottom+b[2],left:a.left-b[3]};b.width=b.right-b.left;b.height=b.bottom-b.top;return b};d.prototype.I=function(a,b){a=a&&a.isIntersecting?a.intersectionRatio\|\|0:-1;b=b.isIntersecting?b.intersectionRatio\|\|0:-1;if(a!==b)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.5	49766	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:04 UTC	460	OUT	GET /vi/dQw4w9WgXcQ/hqdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:04 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 17560 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:11:59 GMT Expires: Wed, 03 Jul 2024 00:11:59 GMT Cache-Control: public, max-age=7200 ETag: "1631784323" Content-Type: image/jpeg Vary: Origin Age: 785 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:04 UTC	733	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 10 0d 0d 0d 0e 0d 0d 0d 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 0f 0f 0f 15 12 15 15 15 15 12 12 12 15 15 15 15 15 15 15 15 15 15 15 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 12 15 15 15 15 15 12 ff c0 00 11 08 01 68 01 e0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 06 01 04 05 07 08 ff c4 00 54 10 00 01 03 02 03 03 05 0a 08 0b 05 07 04 03 00 00 01 00 02 03 04 11 05 12 21 06 31 41 07 13 51 61 71 08 14 22 32 52 53 81 91 92 d3 16 23 42 73 Data Ascii: JFIFh"T!1AQaq"2RS#Bs
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: c5 c7 87 72 9e 85 70 3c 9e 54 79 70 fb 4f f7 6b 3f 8b ba 8f 2e 1f 69 fe ed 1c b5 5f 95 87 1e 1d ca 72 15 cb f1 75 51 e5 c3 ed 3f dd ac fe 2e 6a 3c b8 7d a7 fb b4 72 d5 7e 50 e3 c3 b9 4c 42 ba 7e 2d ea 7c b8 3d a9 3d da c8 e4 da a7 cb 83 da 93 dd a3 96 ab f2 87 1e 9f 72 94 85 77 6f 26 75 3e 5c 1e d4 9e e9 67 f1 63 53 e5 c1 ed 49 ee 91 cb 54 f9 45 c7 a7 dc a3 a1 5e 47 26 15 3e 5c 1e d4 9e e9 67 f1 5f 55 e7 20 f6 a4 f7 48 e5 aa 7c a1 cc 53 ee 51 50 af 47 92 fa af 39 07 b5 27 ba 47 e2 be ab ce 41 ed 49 ee 91 cb 54 ec 1c c5 3e e5 15 0a f7 f8 ae aa f3 90 7b 52 7b a4 7e 2b 2a bc e5 3f b5 27 ba 4b 96 a9 d8 39 8a 7d ca 22 15 f0 72 59 55 e7 29 fd a9 3d d2 cf e2 aa ab ce 53 fb 52 7b a4 72 f5 3b 0b 99 a7 dc a1 21 5f bf 15 35 5e 72 9f db 93 dd 2c fe 2a 2a bc e5 3f b7 Data Ascii: rp<TypOk?.i_ruQ?.j<}r~PLB~-\|==rwo&u>\gcSITE^G&>\g_U H\|SQPG9'GAIT>{R{~+?'K9}"rYU)=SR{r;!_5^r,*?
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: cb 93 1c 4a 85 a6 4a 9a 67 36 21 6b ca c7 32 58 c5 f4 19 8c 6e 71 60 bd 85 de 1a 2e 40 55 20 be d3 ee 7a da b9 f1 4c 3e 47 d6 b5 8f 22 59 29 dc ec 81 ac 9e 3c 8c 24 b9 9e 27 cb 74 6e ca 03 4e 4d c3 55 f1 ce d0 53 36 39 e7 8d 86 ec 8e 79 a3 61 bd ee c6 48 e6 b4 df 8d da 06 aa 58 7a d2 93 71 96 eb b0 aa 41 24 9a ea 76 76 03 62 6a b1 19 1f 1d 2b 58 e7 c6 c0 f7 07 bc 30 65 2e 0d d0 9d e6 e7 72 83 6c 36 6a 7a 19 dd 4f 50 1a d9 5a d6 b8 86 b8 3c 59 e2 ed f0 86 9b 97 ad 77 17 7f be 55 ff 00 d2 b7 fe eb 55 77 ba a4 ff 00 eb 13 7c d5 3f fd b0 9c 6b 37 59 c3 a5 88 ca 9a e1 e6 3c bc 95 6a d8 6e 4f 6b f1 0b 9a 68 0b a3 07 29 99 e4 47 10 23 78 ce e2 33 11 c4 30 38 8b ea 02 d6 e4 c7 66 bb fe ba 9a 94 92 1b 2b fe 30 8d e2 26 34 c9 25 8f 02 58 d2 d0 7a 5c 17 d4 1c ba ed Data Ascii: JJg6!k2Xnq`.@U zL>G"Y)<$'tnNMUS69yaHXzqA$vvbj+X0e.rl6jzOPZ<YwUUw\|?k7Y<jnOkh)G#x308f+0&4%Xz\
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: ab 85 dd 15 8d 41 55 89 cb 35 3c ac 9a 27 45 08 0f 61 bb 49 6b 00 20 1e a3 a2 71 8b e6 5b e9 6f c0 49 ae 15 bc 4d 9e e6 1a b6 b3 18 a6 cd a7 38 d9 e3 04 f9 46 27 11 eb cb 97 fc 56 e2 bd 07 bb 52 81 f9 a8 26 b1 e6 ed 3c 44 f0 0f 3c db da 3b 5c d6 bc 8f 9a 3d 0b e7 9c 3a b1 f1 48 c9 63 71 64 91 bd b2 31 e3 7b 5e c2 1c d7 0e 1a 10 0d 8e 8b ea 9d 9c e5 8b 0a c4 e9 bb df 13 11 c2 f7 00 25 8e 60 79 87 b8 6b 9e 29 47 89 af 84 33 96 3d a7 71 36 0e 25 78 ca 15 15 44 ae 96 e4 69 b5 28 38 3d 0f 96 a8 29 5d 23 d9 1b 05 df 23 d9 1b 1b e5 3d ee 0d 68 f4 b8 81 e9 57 3d ba e4 be b7 0f 89 b3 55 36 26 b1 d2 08 9b 92 50 f7 17 b9 ae 70 16 03 c9 63 8d fa 97 bb 60 51 6c b6 1c fe f9 86 7a 53 23 2f 90 8a a7 d5 bd 9a 5b e2 e3 e7 25 21 d6 d3 30 6e 6d 48 be a5 78 e7 2e fc a7 7e 14 Data Ascii: AU5<'EaIk q[oIM8F'VR&<D<;\=:Hcqd1{^%`yk)G3=q6%xDi(8=)]##=hW=U6&Ppc`QlzS#/[%!0nmHx.~
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: 99 65 7e 6c 8c 05 a0 9c ad 2e 76 af 2d 68 b3 5a 4e a4 6e 5d 7e 50 f6 f2 a7 12 7c 6f a9 11 66 89 ae 63 79 a6 16 0b 38 82 6e 1c f7 5c dc 75 2b 0f 73 57 fc 62 93 b2 a3 fd 34 ab 4b 94 a3 4d ca 56 ba 4f c8 ce a2 9c ec b6 b9 52 da cd 93 ab a2 73 1b 57 0b a1 74 81 c5 81 ce 8d d9 83 48 0e 3f 16 f7 01 62 46 fb 6f 5c 66 95 ef 5d d9 bf 9f a0 f9 a9 ff 00 cf 12 f0 56 a2 85 47 38 29 3e a2 ab 05 19 b4 89 ae af 34 fc 93 e2 ae 6b 5c da 27 96 b8 07 03 ce 41 a8 22 e0 fe 76 fa 85 43 7e e3 d8 be d6 db bd a0 92 8b 08 75 4c 39 39 c8 a1 a7 2d ce 0b 99 e1 3a 26 1b 80 41 3a 38 f1 df 65 56 22 b4 a9 b8 a8 a5 af 72 ca 34 e3 3b df a1 f3 58 e4 93 17 ff 00 91 93 e9 29 fd f2 a6 56 44 e8 de f8 de 32 bd 8e 73 1e dd 0e 57 30 96 b9 b7 04 8d 08 23 43 6d 17 a6 8e e8 6c 4f ff 00 d4 fa 17 fb e5 Data Ascii: e~l.v-hZNn]~P\|ofcy8n\u+sWb4KMVORsWtH?bFo\f]VG8)>4k\'A"vC~uL99-:&A:8eV"r4;X)VD2sW0#CmlO
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: 3e 6a 56 cb 1e 66 e4 94 58 17 b7 38 2d 73 1f 71 63 76 eb 95 cb e3 68 9d 70 0f 48 5f 55 ed 6e de 61 b8 2e 1c 68 30 f9 5b 3c e1 92 32 30 c7 89 8b 1f 21 25 f3 d4 48 cf 00 38 39 c5 dc d8 b1 27 2b 43 5a d0 4b 7e 55 89 b6 d3 a1 59 82 4d 27 be 5b e9 72 15 ed 75 df a9 61 e4 d8 ff 00 ea 38 7f fd 7d 17 fa 98 97 d1 7d d9 bf ee 34 9f f5 83 fd 3c eb e7 1e 4f e6 6b 2b e8 5c e7 06 b5 b5 b4 8e 73 9c 40 6b 5a da 88 cb 9c e2 74 0d 68 04 92 74 00 15 ef 7d d6 fb 43 4d 3d 1d 33 60 a9 82 67 36 ac 39 cd 8a 68 e4 70 6f 31 30 cc 43 1c 48 17 20 5f 75 c8 e9 45 75 ed a0 28 7c 39 1f 37 35 cb d2 fb 9a 4f fe b1 49 d9 51 fe 9a 65 e6 41 7a 1f 73 c5 7c 71 62 b4 b2 4b 23 22 8d a2 7c cf 91 cd 63 05 e9 e5 02 ee 71 00 5c 90 35 3b c8 5a 6b fc 39 79 32 8a 7e f2 f3 47 a0 77 67 7e 7e 87 e6 aa 3f Data Ascii: >jVfX8-sqcvhpH_Una.h0[<20!%H89'+CZK~UYM'[rua8}}4<Ok+\s@kZtht}CM=3`g69hpo10CH _uEu(\|975OIQeAzs\|qbK#"\|cq\5;Zk9y2~Gwg~~?
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: fa 2e 9f 27 c5 f6 94 38 e8 1d 66 ae 40 6d dc db 74 ab 96 13 41 cd b3 28 e3 ab bb 4a b2 9c 5b 95 ca 6b ca 31 86 bd 4d 89 d9 d0 b5 9e 2c b7 63 eb 4d 34 37 5b ce 41 cf 58 52 cb 19 0a 3b 2b 33 11 04 20 04 5d 17 06 64 04 39 cb 01 01 4a e5 77 60 10 10 56 63 6d ca 6a 40 3c 51 93 aa da 73 2e 14 94 b1 d9 4a f1 d1 f5 a1 91 67 37 22 03 4a dc 92 9c 90 b5 cb 10 f6 04 7c a4 d4 e1 46 d2 9c 2d e7 34 b7 f2 60 da 7c d5 8f aa 87 9f 86 3a 27 39 cd f9 6d cd 59 45 03 a5 84 fc 99 d9 1c d2 16 13 a6 6b 5f 4b ad 8c 33 67 04 35 15 90 cb 92 60 cc 3e b2 78 65 03 c0 95 bd ec 65 a7 a9 8a fc 1c d2 d7 8e 2d 24 83 ab 4a e3 ec a5 6b 18 ca e0 f7 06 99 68 4c 51 83 7f 0a 4e fd a2 97 28 b0 df 92 29 1d ad 87 80 7a 95 8f 63 36 82 03 4b 51 15 43 b2 cd 0d 1d 64 54 72 10 4f 38 ca 98 de d7 51 b8 81 Data Ascii: .'8f@mtA(J[k1M,cM47[AXR;+3 ]d9Jw`Vcmj@<Qs.Jg7"J\|F-4`\|:'9mYEk_K3g5`>xee-$JkhLQN()zc6KQCdTrO8Q
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: 14 99 01 3c 43 73 be df df 3d 2b 6f 61 c4 51 99 6a a7 89 b3 45 4e d6 0e 65 de 2c b2 cc ee 6d 8c 3f dd 8c 4f 30 eb a5 0a 7d b8 c5 29 e5 82 90 c1 66 b8 c9 57 34 f0 00 40 82 49 85 30 2d 6f 03 1b df 14 92 30 0f 15 8f 6b 4e ad d6 28 31 e6 c1 4d 0c 31 b2 09 8b de fa 89 f9 e8 9b 28 63 ee 61 86 31 98 68 59 13 1d 21 22 ff 00 ef c4 5f 42 01 ab 8e db b7 f7 16 89 9c dd a8 c3 b9 89 e6 84 1c cd 63 cf 36 ef 2e 27 00 f8 64 ff 00 1c 4e 63 ff 00 c6 b9 80 ab 16 d5 62 8c a8 8e 9a 5f 01 b3 35 8e a7 96 38 d9 91 a1 90 91 de ef 6b 47 82 01 89 fc cd 81 d3 bc f8 5c 2a e9 53 83 76 d4 84 96 ba 19 09 82 44 c0 a9 15 8e d2 9e ea 30 98 24 2b 1e 91 c9 51 f8 99 3e 77 f7 1a ae 20 f5 2a 6f 25 27 e2 64 f9 df dc 6a b9 80 b0 d4 7e b3 3b b8 5f 85 11 24 0b 66 8e 3d 75 4b 4e cd 77 2d d1 03 7a d5 Data Ascii: <Cs=+oaQjENe,m?O0})fW4@I0-o0kN(1M1(ca1hY!"_Bc6.'dNcb_58kG\SvD0$+Q>w o%'dj~;_$f=uKNw-z
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: d3 b8 96 dc 5e db b3 0e 95 d3 a0 d9 da a9 59 ce 45 4b 53 2c 7a fc 64 70 4a f6 68 6c 7c 26 b0 b7 42 2c 75 d2 cb 63 1a 77 fb 05 07 ce d7 fe ba 55 d4 a9 c2 0c b4 98 73 c4 d4 d0 96 47 53 63 34 c2 27 0f f6 d9 ce 66 8b 19 08 1d 2c 04 dc 69 aa 83 9e 8b cd af bf e0 6a 3f bf d1 51 21 38 2b a7 b7 18 8b 66 a9 92 46 3c c8 d2 d8 5a 65 2d 2d 33 3e 3a 78 a2 96 62 1d e1 0e 7a 56 3e 5f 08 07 7c 6f 84 01 b8 5c 76 b9 4d 3b ab 90 6b 52 70 53 05 08 7a 66 b9 0c 44 b6 40 4a 1e 80 52 06 48 0a 60 a3 09 81 41 13 d3 39 25 07 99 93 e7 7f 71 aa f3 03 35 d7 72 a3 72 49 39 6c 32 5b ce fe e3 55 c2 4a b2 7f 92 e7 d6 be 66 77 70 9f 0a 26 f4 6d df 60 98 be da 1d d6 5c f6 57 38 0b 58 24 9a b5 c7 a1 55 2d 8d 57 37 e7 70 3b 96 b5 cd cd d6 ac 75 64 70 09 bb ec f4 05 5d b4 1d cd de 77 4d 02 ad Data Ascii: ^YEKS,zdpJhl\|&B,ucwUsGSc4'f,ij?Q!8+fF<Ze--3>:xbzV>_\|o\vM;kRpSzfD@JRH`A9%q5rrI9l2[UJfwp&m`\W8X$U-W7p;udp]wM
2024-07-02 22:25:04 UTC	1390	IN	Data Raw: e3 5e 07 78 ea 5f 31 4c fd 57 47 67 b1 d7 42 fb df c1 3b c2 8c a5 97 63 05 d5 f5 3e a1 09 4a f3 2c 0f 1f 93 28 70 7d 81 dc bb 74 bb 67 c1 c0 1e bd c9 c7 12 ba 96 f2 ef 74 5c 56 08 5c 8a 4d a1 8d dd 23 eb 5d 38 6a 58 ed ce 05 59 1a b1 65 52 83 18 04 59 4e 21 2a 37 b2 ca eb d8 83 42 15 82 9a cb 19 54 ef d4 85 85 b2 c8 61 e8 52 31 d6 5b 51 ee 49 48 4d 1a 45 87 a1 61 cc 5d 13 d8 90 36 e9 dc 8b 48 d1 0d 2b 22 32 ba cd 60 51 bc 0b 84 ee 45 a3 e3 e6 a9 02 89 a5 38 5d 03 0b 25 69 52 30 a8 41 4e c4 11 36 02 ca 40 b2 0a 04 38 29 ee a3 09 da 9d c4 48 4a c6 64 ae 40 29 88 7b ac 84 80 a6 09 a2 23 85 90 90 26 05 34 26 48 d5 33 4a 81 aa 40 53 20 c9 1a 53 82 a2 69 4c 09 48 8b 24 69 4e 0a 89 a5 30 72 04 4a 9d a5 42 1c 9d ae 49 88 96 e9 9a a2 0e 4e 0a 40 33 ca 2e 90 95 90 Data Ascii: ^x_1LWGgB;c>J,(p}tgt\V\M#]8jXYeRYN!*7BTaR1[QIHMEa]6H+"2`QE8]%iR0AN6@8)HJd@){#&4&H3J@S SiLH$iN0rJBIN@3.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.5	49767	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:04 UTC	1154	OUT	GET /s/desktop/a7b1ec23/jsbin/scheduler.vflset/scheduler.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:05 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 9648 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 15:56:56 GMT Expires: Wed, 02 Jul 2025 15:56:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 23288 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:05 UTC	704	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 67 3b 66 75 6e 63 74 69 6f 6e 20 68 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 6b 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 Data Ascii: (function(){'use strict';var g;function h(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var k=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)r
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 6b 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 6d 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 79 29 7b 74 68 69 73 2e 67 3d 66 3b 6b 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 Data Ascii: b=b(d);b!=d&&b!=null&&k(c,a,{configurable:!0,writable:!0,value:b})}}m("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,y){this.g=f;k(this,"descripti
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 62 3b 69 66 28 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 21 3d 3d 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 74 3d 70 3b 0a 6d 28 22 53 79 6d 62 6f 6c 2e 64 69 73 70 6f 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 53 79 6d 62 6f 6c 28 22 53 79 6d 62 6f 6c 2e 64 69 73 70 6f 73 65 22 29 7d 29 3b 0a 6d 28 22 4f 62 6a 65 63 74 2e 76 61 6c 75 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 5b 5d 2c 64 3b 66 6f 72 28 64 20 69 6e Data Ascii: nction(a,b){a.__proto__=b;if(a.__proto__!==b)throw new TypeError(a+" is not extensible");return a}:null}var t=p;m("Symbol.dispose",function(a){return a?a:Symbol("Symbol.dispose")});m("Object.values",function(a){return a?a:function(b){var c=[],d;for(d in
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 46 28 29 7b 72 65 74 75 72 6e 20 78 3f 21 21 42 26 26 42 2e 62 72 61 6e 64 73 2e 6c 65 6e 67 74 68 3e 30 3a 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 72 65 74 75 72 6e 20 46 28 29 3f 44 28 22 43 68 72 6f 6d 69 75 6d 22 29 3a 28 45 28 22 43 68 72 6f 6d 65 22 29 7c 7c 45 28 22 43 72 69 4f 53 22 29 29 26 26 21 28 46 28 29 3f 30 3a 45 28 22 45 64 67 65 22 29 29 7c 7c 45 28 22 53 69 6c 6b 22 29 7d 0a 3b 21 45 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 47 28 29 3b 47 28 29 3b 45 28 22 53 61 66 61 72 69 22 29 26 26 28 47 28 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 45 64 67 65 22 29 29 7c 7c 28 46 28 29 3f 44 28 22 4d Data Ascii: unction F(){return x?!!B&&B.brands.length>0:!1}function G(){return F()?D("Chromium"):(E("Chrome")\|\|E("CriOS"))&&!(F()?0:E("Edge"))\|\|E("Silk")};!E("Android")\|\|G();G();E("Safari")&&(G()\|\|(F()?0:E("Coast"))\|\|(F()?0:E("Opera"))\|\|(F()?0:E("Edge"))\|\|(F()?D("M
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 3b 74 68 69 73 2e 4a 3d 74 68 69 73 2e 4f 2e 62 69 6e 64 28 74 68 69 73 29 3b 74 68 69 73 2e 4b 3d 74 68 69 73 2e 50 2e 62 69 6e 64 28 74 68 69 73 29 3b 74 68 69 73 2e 4c 3d 74 68 69 73 2e 53 2e 62 69 6e 64 28 74 68 69 73 29 3b 69 66 28 62 3d 21 21 77 69 6e 64 6f 77 2e 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 26 26 21 21 77 69 6e 64 6f 77 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 29 62 3d 50 28 22 45 58 50 45 52 49 4d 45 4e 54 5f 46 4c 41 47 53 22 2c 7b 7d 29 2e 64 69 73 61 62 6c 65 5f 73 63 68 65 64 75 6c 65 72 5f 72 65 71 75 65 73 74 49 64 6c 65 43 61 6c 6c 62 61 63 6b 2c 62 3d 21 28 74 79 70 65 6f 66 20 62 3d 3d 3d 0a 22 73 74 72 69 6e 67 22 26 26 62 3d 3d 3d 22 66 61 6c 73 65 22 3f 30 3a 62 29 3b 74 68 69 73 2e 49 3d 62 Data Ascii: ;this.J=this.O.bind(this);this.K=this.P.bind(this);this.L=this.S.bind(this);if(b=!!window.requestIdleCallback&&!!window.cancelIdleCallback)b=P("EXPERIMENT_FLAGS",{}).disable_scheduler_requestIdleCallback,b=!(typeof b==="string"&&b==="false"?0:b);this.I=b
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 56 28 74 68 69 73 2c 62 29 3b 74 68 69 73 2e 46 3d 21 31 7d 3b 0a 67 2e 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 56 28 74 68 69 73 29 7d 3b 0a 67 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 77 61 28 74 68 69 73 29 7d 3b 0a 67 2e 53 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 41 3d 21 30 3b 76 61 72 20 62 3d 54 28 74 68 69 73 29 3b 62 3d 3d 3d 34 26 26 62 21 3d 3d 74 68 69 73 2e 6d 26 26 28 55 28 74 68 69 73 29 2c 74 68 69 73 2e 73 74 61 72 74 28 29 29 3b 56 28 74 68 69 73 2c 76 6f 69 64 20 30 2c 61 29 3b 74 68 69 73 2e 41 3d 21 31 7d 3b 0a 67 2e 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 7c 7c 77 61 28 74 68 69 73 29 3b 74 68 69 73 2e 67 26 26 28 55 28 74 68 69 73 29 2c 74 68 69 73 2e 73 74 61 72 74 28 29 29 Data Ascii: V(this,b);this.F=!1};g.T=function(){V(this)};g.O=function(){wa(this)};g.S=function(a){this.A=!0;var b=T(this);b===4&&b!==this.m&&(U(this),this.start());V(this,void 0,a);this.A=!1};g.R=function(){document.hidden\|\|wa(this);this.g&&(U(this),this.start())
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 67 3b 61 2e 49 3f 77 69 6e 64 6f 77 2e 63 61 6e 63 65 6c 49 64 6c 65 43 61 6c 6c 62 61 63 6b 28 62 29 3a 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 62 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 63 61 73 65 20 34 3a 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 61 2e 67 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 3a 77 69 6e 64 6f 77 2e 63 61 6e 63 65 6c 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 28 61 2e 67 29 7d 61 2e 67 3d 30 7d 7d 0a 67 2e 47 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 61 28 74 68 69 73 29 3b 55 28 74 68 69 73 29 3b 74 68 69 73 2e 76 26 26 64 6f 63 75 6d 65 6e 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 2c 74 68 69 73 2e 48 29 3b 4d 2e Data Ascii: g;a.I?window.cancelIdleCallback(b):window.clearTimeout(b);break;case 2:case 4:window.clearTimeout(a.g);break;case 3:window.cancelAnimationFrame(a.g)}a.g=0}}g.G=function(){ta(this);U(this);this.v&&document.removeEventListener("visibilitychange",this.H);M.
2024-07-02 22:25:05 UTC	604	IN	Data Raw: 3e 61 26 26 28 62 2e 6a 3d 61 2c 62 2e 73 74 61 72 74 28 29 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 4c 61 28 29 7b 77 69 6e 64 6f 77 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 59 29 3b 76 61 72 20 61 3d 5a 28 29 3b 61 2e 6a 3d 30 3b 61 2e 73 74 61 72 74 28 29 7d 0a 3b 76 28 22 79 74 2e 73 63 68 65 64 75 6c 65 72 2e 69 6e 69 74 69 61 6c 69 7a 65 64 22 29 7c 7c 28 77 28 22 79 74 2e 73 63 68 65 64 75 6c 65 72 2e 69 6e 73 74 61 6e 63 65 2e 64 69 73 70 6f 73 65 22 2c 7a 61 29 2c 77 28 22 79 74 2e 73 63 68 65 64 75 6c 65 72 2e 69 6e 73 74 61 6e 63 65 2e 61 64 64 4a 6f 62 22 2c 42 61 29 2c 77 28 22 79 74 2e 73 63 68 65 64 75 6c 65 72 2e 69 6e 73 74 61 6e 63 65 2e 61 64 64 49 6d 6d 65 64 69 61 74 65 4a 6f 62 22 2c 43 61 29 2c 77 28 22 79 74 2e 73 63 68 65 64 75 6c 65 Data Ascii: >a&&(b.j=a,b.start())}function La(){window.clearTimeout(Y);var a=Z();a.j=0;a.start()};v("yt.scheduler.initialized")\|\|(w("yt.scheduler.instance.dispose",za),w("yt.scheduler.instance.addJob",Ba),w("yt.scheduler.instance.addImmediateJob",Ca),w("yt.schedule

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.5	49768	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:04 UTC	1178	OUT	GET /s/desktop/a7b1ec23/jsbin/www-i18n-constants-en_US.vflset/www-i18n-constants.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:05 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 5862 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 18:25:36 GMT Expires: Wed, 02 Jul 2025 18:25:36 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 14368 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:05 UTC	704	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 65 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 66 28 63 2c 62 29 7b 63 3d 63 2e 73 70 6c 69 74 28 22 2e 22 29 3b 76 61 72 20 61 3d 65 3b 63 5b 30 5d 69 6e 20 61 7c 7c 74 79 70 65 6f 66 20 61 2e 65 78 65 63 53 63 72 69 70 74 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 7c 7c 61 2e 65 78 65 63 53 63 72 69 70 74 28 22 76 61 72 20 22 2b 63 5b 30 5d 29 3b 66 6f 72 28 76 61 72 20 64 3b 63 2e 6c 65 6e 67 74 68 26 26 Data Ascii: (function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var e=this\|\|self;function f(c,b){c=c.split(".");var a=e;c[0]in a\|\|typeof a.execScript=="undefined"\|\|a.execScript("var "+c[0]);for(var d;c.length&&
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 5f 54 49 4d 45 5f 5a 4f 4e 45 5f 53 48 4f 52 54 3a 22 4d 4d 4d 20 64 2c 20 68 3a 6d 6d 5c 75 32 30 32 66 61 20 7a 7a 7a 7a 22 7d 2c 68 3d 67 3b 68 3d 67 3b 76 61 72 20 6b 3d 7b 45 52 41 53 3a 5b 22 42 43 22 2c 22 41 44 22 5d 2c 45 52 41 4e 41 4d 45 53 3a 5b 22 42 65 66 6f 72 65 20 43 68 72 69 73 74 22 2c 22 41 6e 6e 6f 20 44 6f 6d 69 6e 69 22 5d 2c 4e 41 52 52 4f 57 4d 4f 4e 54 48 53 3a 22 4a 46 4d 41 4d 4a 4a 41 53 4f 4e 44 22 2e 73 70 6c 69 74 28 22 22 29 2c 53 54 41 4e 44 41 4c 4f 4e 45 4e 41 52 52 4f 57 4d 4f 4e 54 48 53 3a 22 4a 46 4d 41 4d 4a 4a 41 53 4f 4e 44 22 2e 73 70 6c 69 74 28 22 22 29 2c 4d 4f 4e 54 48 53 3a 22 4a 61 6e 75 61 72 79 20 46 65 62 72 75 61 72 79 20 4d 61 72 63 68 20 41 70 72 69 6c 20 4d 61 79 20 4a 75 6e 65 20 4a 75 6c 79 20 41 Data Ascii: _TIME_ZONE_SHORT:"MMM d, h:mm\u202fa zzzz"},h=g;h=g;var k={ERAS:["BC","AD"],ERANAMES:["Before Christ","Anno Domini"],NARROWMONTHS:"JFMAMJJASOND".split(""),STANDALONENARROWMONTHS:"JFMAMJJASOND".split(""),MONTHS:"January February March April May June July A
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 3d 63 2b 22 22 3b 76 61 72 20 61 3d 62 2e 69 6e 64 65 78 4f 66 28 22 2e 22 29 3b 62 3d 4d 61 74 68 2e 6d 69 6e 28 61 3d 3d 3d 2d 31 3f 30 3a 62 2e 6c 65 6e 67 74 68 2d 61 2d 31 2c 33 29 7d 61 3d 4d 61 74 68 2e 70 6f 77 28 31 30 2c 62 29 3b 62 3d 7b 67 3a 62 2c 66 3a 28 63 2a 61 7c 30 29 25 61 7d 3b 72 65 74 75 72 6e 28 63 7c 30 29 3d 3d 31 26 26 62 2e 67 3d 3d 30 3f 22 6f 6e 65 22 3a 22 6f 74 68 65 72 22 7d 0a 76 61 72 20 6e 3d 6d 3b 6e 3d 6d 3b 66 28 22 59 54 5f 49 31 38 4e 5f 46 4f 52 4d 41 54 54 49 4e 47 5f 47 4f 4f 47 5f 4c 4f 43 41 4c 45 22 2c 22 65 6e 22 29 3b 66 28 22 59 54 5f 49 31 38 4e 5f 46 4f 52 4d 41 54 54 49 4e 47 5f 44 41 54 45 5f 54 49 4d 45 5f 50 41 54 54 45 52 4e 53 22 2c 68 29 3b 66 28 22 59 54 5f 49 31 38 4e 5f 46 4f 52 4d 41 54 54 49 Data Ascii: =c+"";var a=b.indexOf(".");b=Math.min(a===-1?0:b.length-a-1,3)}a=Math.pow(10,b);b={g:b,f:(c*a\|0)%a};return(c\|0)==1&&b.g==0?"one":"other"}var n=m;n=m;f("YT_I18N_FORMATTING_GOOG_LOCALE","en");f("YT_I18N_FORMATTING_DATE_TIME_PATTERNS",h);f("YT_I18N_FORMATTI
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 22 6f 6e 65 7b 69 6e 20 23 20 6d 6f 2e 7d 6f 74 68 65 72 7b 69 6e 20 23 20 6d 6f 2e 7d 22 7d 2c 4e 41 52 52 4f 57 3a 7b 52 3a 7b 22 2d 31 22 3a 22 6c 61 73 74 20 6d 6f 2e 22 2c 30 3a 22 74 68 69 73 20 6d 6f 2e 22 2c 31 3a 22 6e 65 78 74 20 6d 6f 2e 22 7d 2c 50 3a 22 6f 6e 65 7b 23 6d 6f 20 61 67 6f 7d 6f 74 68 65 72 7b 23 6d 6f 20 61 67 6f 7d 22 2c 46 3a 22 6f 6e 65 7b 69 6e 20 23 6d 6f 7d 6f 74 68 65 72 7b 69 6e 20 23 6d 6f 7d 22 7d 7d 2c 51 55 41 52 54 45 52 3a 7b 4c 4f 4e 47 3a 7b 52 3a 7b 22 2d 31 22 3a 22 6c 61 73 74 20 71 75 61 72 74 65 72 22 2c 30 3a 22 74 68 69 73 20 71 75 61 72 74 65 72 22 2c 31 3a 22 6e 65 78 74 20 71 75 61 72 74 65 72 22 7d 2c 50 3a 22 6f 6e 65 7b 23 20 71 75 61 72 74 65 72 20 61 67 6f 7d 6f 74 68 65 72 7b 23 20 71 75 61 72 74 Data Ascii: "one{in # mo.}other{in # mo.}"},NARROW:{R:{"-1":"last mo.",0:"this mo.",1:"next mo."},P:"one{#mo ago}other{#mo ago}",F:"one{in #mo}other{in #mo}"}},QUARTER:{LONG:{R:{"-1":"last quarter",0:"this quarter",1:"next quarter"},P:"one{# quarter ago}other{# quart
2024-07-02 22:25:05 UTC	988	IN	Data Raw: 2e 22 7d 2c 50 3a 22 6f 6e 65 7b 23 20 79 72 2e 20 61 67 6f 7d 6f 74 68 65 72 7b 23 20 79 72 2e 20 61 67 6f 7d 22 2c 46 3a 22 6f 6e 65 7b 69 6e 20 23 20 79 72 2e 7d 6f 74 68 65 72 7b 69 6e 20 23 20 79 72 2e 7d 22 7d 2c 4e 41 52 52 4f 57 3a 7b 52 3a 7b 22 2d 31 22 3a 22 6c 61 73 74 20 79 72 2e 22 2c 0a 30 3a 22 74 68 69 73 20 79 72 2e 22 2c 31 3a 22 6e 65 78 74 20 79 72 2e 22 7d 2c 50 3a 22 6f 6e 65 7b 23 79 20 61 67 6f 7d 6f 74 68 65 72 7b 23 79 20 61 67 6f 7d 22 2c 46 3a 22 6f 6e 65 7b 69 6e 20 23 79 7d 6f 74 68 65 72 7b 69 6e 20 23 79 7d 22 7d 7d 7d 29 3b 66 28 22 59 54 5f 49 31 38 4e 5f 46 4f 52 4d 41 54 54 49 4e 47 5f 50 4c 55 52 41 4c 5f 52 55 4c 45 53 5f 53 45 4c 45 43 54 22 2c 6e 29 3b 0a 66 28 22 59 54 5f 49 31 38 4e 5f 46 4f 52 4d 41 54 54 49 4e Data Ascii: ."},P:"one{# yr. ago}other{# yr. ago}",F:"one{in # yr.}other{in # yr.}"},NARROW:{R:{"-1":"last yr.",0:"this yr.",1:"next yr."},P:"one{#y ago}other{#y ago}",F:"one{in #y}other{in #y}"}}});f("YT_I18N_FORMATTING_PLURAL_RULES_SELECT",n);f("YT_I18N_FORMATTIN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.5	49769	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:04 UTC	1146	OUT	GET /s/player/71059424/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:05 UTC	680	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 380684 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 20:51:48 GMT Expires: Wed, 02 Jul 2025 20:51:48 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 01 Jul 2024 04:13:06 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 5597 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:05 UTC	710	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 65 6e 64 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 79 74 70 2d 62 69 67 2d 6d Data Ascii: -ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-m
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2d 66 75 6c 6c 73 63 72 65 65 6e Data Ascii: tainer{display:none}.html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-media-controls-fullscreen
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 32 34 70 78 3b 72 69 67 68 74 3a 32 34 70 78 7d 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 68 74 6d 6c 35 2d 65 6e 64 73 63 72 65 65 6e 29 2c 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 Data Ascii: ext){top:89px}.ytp-player-content.ytp-iv-player-content{left:12px;right:12px}.ytp-big-mode .ytp-player-content.ytp-iv-player-content{left:24px;right:24px}.ytp-autohide .ytp-player-content:not(.html5-endscreen),.ytp-autohide .ytp-player-content:not(.ytp-up
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 65 72 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 5b 61 72 69 61 2d 68 69 64 64 65 6e 3d 74 72 75 65 5d 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 79 74 70 2d 70 72 6f 62 61 62 6c 79 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 32 70 78 20 72 67 62 61 28 32 37 2c 31 32 37 2c 32 30 34 2c 2e 38 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 32 Data Ascii: er .ytp-button[disabled]{opacity:.5}.ytp-button:not([aria-disabled=true]):not([disabled]):not([aria-hidden=true]){cursor:pointer}.ytp-probably-keyboard-focus .ytp-button:focus{-webkit-box-shadow:inset 0 0 0 2px rgba(27,127,204,.8);box-shadow:inset 0 0 0 2
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 39 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 36 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 Data Ascii: x}.ytp-chrome-top .ytp-button,.ytp-small-mode .ytp-chrome-controls .ytp-button,.ytp-small-mode .ytp-replay-button{opacity:.9;display:inline-block;width:36px;-webkit-transition:opacity .1s cubic-bezier(.4,0,1,1);transition:opacity .1s cubic-bezier(.4,0,1,1
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 79 6f 75 74 75 62 65 2d 62 75 74 74 6f 6e 29 20 73 76 67 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 70 78 3b 68 65 69 67 68 74 3a 36 33 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e Data Ascii: button:not(.ytp-youtube-button) svg{width:40px;padding-left:4px}.ytp-chrome-top .ytp-button{padding-top:6px;height:42px;vertical-align:top}.ytp-big-mode .ytp-chrome-top .ytp-button{padding-top:9px;height:63px}.ytp-chrome-controls .ytp-button{height:100%}.
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 6c 65 66 74 3a 32 34 70 78 3b 62 6f 74 74 6f 6d 3a 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 2c 77 69 64 74 68 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e Data Ascii: trols .ytp-button[aria-pressed]:after{content:"";display:block;position:absolute;width:0;height:3px;border-radius:3px;left:24px;bottom:9px;background-color:#f00;-webkit-transition:left .1s cubic-bezier(.4,0,1,1),width .1s cubic-bezier(.4,0,1,1);transition
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 2c 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 35 70 78 7d 2e 79 74 70 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 79 74 Data Ascii: .ytp-chrome-controls .ytp-button[aria-pressed=true]:after,.ytp-embed-mobile.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed=true]:after{left:15px}.ytp-color-white .ytp-chrome-controls .ytp-button[aria-pressed]:after{background-color:#ddd}.yt
2024-07-02 22:25:05 UTC	1390	IN	Data Raw: 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 3a 6e 6f 74 28 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 29 20 2e 79 74 70 2d 72 69 67 68 74 2d 63 6f 6e 74 72 6f 6c 73 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 79 74 70 2d 72 69 67 68 74 2d 63 6f 6e 74 72 6f 6c 73 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 20 2e 79 74 70 2d 76 Data Ascii: ex;display:flex;-webkit-box-flex:1;-webkit-flex:1;flex:1;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}:not(.ytp-exp-bottom-control-flexbox) .ytp-right-controls{float:right}.ytp-right-controls{height:100%}.ytp-exp-bottom-control-flexbox .ytp-v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.5	49770	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:06 UTC	1180	OUT	GET /s/desktop/a7b1ec23/cssbin/www-main-desktop-watch-page-skeleton.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:06 UTC	679	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 8554 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 15:56:56 GMT Expires: Wed, 02 Jul 2025 15:56:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 23290 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:06 UTC	711	IN	Data Raw: 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 2c 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 69 6e 66 6f 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 2c 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 73 69 64 65 2d 69 6e 66 6f 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 72 65 6c 61 74 65 64 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 Data Ascii: #watch-page-skeleton{position:relative;z-index:1;margin:0 auto}#watch-page-skeleton,#watch-page-skeleton #info-container,#watch-page-skeleton #grid-container-skeleton,#watch-page-skeleton #side-info-container,#watch-page-skeleton #related{-webkit-box-sizi
2024-07-02 22:25:06 UTC	1390	IN	Data Raw: 6f 2d 63 6f 6e 74 61 69 6e 65 72 2e 68 69 64 64 65 6e 2c 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 2e 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 2e 68 69 64 64 65 6e 3a 6e 6f 74 28 2e 6c 61 79 65 72 65 64 29 7b 6f 70 61 63 69 74 79 3a 30 7d 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 76 77 20 2d 20 34 37 34 70 78 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 20 Data Ascii: o-container.hidden,#watch-page-skeleton #grid-container-skeleton.hidden{display:none}#grid-container-skeleton.hidden:not(.layered){opacity:0}#grid-container-skeleton{background-color:#fff;width:calc(100vw - 474px);overflow:hidden}#grid-container-skeleton
2024-07-02 22:25:06 UTC	1390	IN	Data Raw: 6b 69 74 2d 66 6c 65 78 2d 62 61 73 69 73 3a 61 75 74 6f 3b 66 6c 65 78 2d 62 61 73 69 73 3a 61 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 7d 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 33 39 32 70 78 29 7b 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 20 2e 72 69 63 68 2d 67 72 69 64 2d 6d 65 64 69 61 2d 73 6b 65 6c 65 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 20 38 70 78 20 30 20 38 70 78 7d 7d 23 67 72 69 64 2d 63 6f 6e 74 61 69 6e 65 72 2d 73 6b 65 6c 65 74 6f 6e 20 2e 76 69 64 65 6f 2d 64 65 74 61 69 6c 73 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a Data Ascii: kit-flex-basis:auto;flex-basis:auto;-webkit-box-flex:0;-webkit-flex-grow:0;flex-grow:0}}@media only screen and (min-width:392px){#grid-container-skeleton .rich-grid-media-skeleton{margin:0 8px 0 8px}}#grid-container-skeleton .video-details{padding-bottom:
2024-07-02 22:25:06 UTC	1390	IN	Data Raw: 65 74 6f 6e 20 23 70 72 69 6d 61 72 79 2d 69 6e 66 6f 20 23 69 6e 66 6f 7b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d Data Ascii: eton #primary-info #info{display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-webkit-flex-direction:row;flex-direction:row;-webkit-box-align:center;-webkit-align-items:center;align-items:center}
2024-07-02 22:25:06 UTC	1390	IN	Data Raw: 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 77 61 74 63 68 2d 73 6b 65 6c 65 74 6f 6e 20 23 73 65 63 6f 6e 64 61 72 79 2d 69 6e 66 6f 20 23 74 6f 70 2d 72 6f 77 20 23 76 69 64 65 6f 2d 6f 77 6e 65 72 20 23 75 70 6c 6f 61 64 2d 69 6e 66 6f 20 23 6f 77 6e 65 72 2d 6e 61 6d 65 7b 77 69 64 74 68 3a 32 30 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 7d 2e 77 61 74 63 68 2d 73 6b 65 6c 65 74 6f 6e 20 23 73 65 63 6f 6e 64 61 72 79 2d 69 6e 66 6f 20 23 74 6f 70 2d 72 Data Ascii: column;flex-direction:column;-webkit-box-pack:center;-webkit-justify-content:center;justify-content:center}.watch-skeleton #secondary-info #top-row #video-owner #upload-info #owner-name{width:200px;margin-bottom:12px}.watch-skeleton #secondary-info #top-r
2024-07-02 22:25:06 UTC	1390	IN	Data Raw: 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 38 70 78 7d 2e 77 61 74 63 68 2d 73 6b 65 6c 65 74 6f 6e 20 23 72 65 6c 61 74 65 64 3a 6e 6f 74 28 5b 70 6c 61 79 6c 69 73 74 5d 29 20 2e 61 75 74 6f 70 6c 61 79 20 2e 76 69 64 65 6f 2d 64 65 74 61 69 6c 73 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 31 36 70 78 7d 2e 77 61 74 63 68 2d 73 6b 65 6c 65 74 6f 6e 20 23 72 65 6c 61 74 65 64 20 2e 76 69 64 65 6f 2d 64 65 74 61 69 6c 73 20 2e 74 68 75 6d 62 6e 61 69 6c 7b 68 65 69 67 68 74 3a 39 34 70 78 3b 77 69 64 74 68 3a 31 36 38 70 78 3b 6d 61 Data Ascii: ebkit-box-direction:normal;-webkit-flex-direction:row;flex-direction:row;padding-bottom:8px}.watch-skeleton #related:not([playlist]) .autoplay .video-details{padding-bottom:16px}.watch-skeleton #related .video-details .thumbnail{height:94px;width:168px;ma
2024-07-02 22:25:06 UTC	893	IN	Data Raw: 74 68 3a 31 30 36 36 70 78 7d 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 72 65 6c 61 74 65 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 33 36 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 34 70 78 7d 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 23 69 6e 66 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 36 34 30 70 78 7d 23 77 61 74 63 68 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 2e 74 68 65 61 74 65 72 20 23 69 6e 66 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 34 32 36 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 39 34 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 36 33 30 70 78 29 7b 23 77 61 74 Data Ascii: th:1066px}#watch-page-skeleton #related{margin-top:-360px;padding-left:24px}#watch-page-skeleton #info-container{width:640px}#watch-page-skeleton.theater #info-container{width:100%;padding-right:426px}}@media (min-width:1294px) and (min-height:630px){#wat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.5	49773	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:06 UTC	1176	OUT	GET /s/desktop/a7b1ec23/cssbin/www-main-desktop-player-skeleton.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:06 UTC	679	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2743 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 16:17:15 GMT Expires: Wed, 02 Jul 2025 16:17:15 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 22071 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:06 UTC	711	IN	Data Raw: 23 70 6c 61 79 65 72 2e 73 6b 65 6c 65 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 31 3b 6d 61 72 67 69 6e 3a 38 30 70 78 20 61 75 74 6f 20 30 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 38 38 32 70 78 29 7b 23 70 6c 61 79 65 72 2e 73 6b 65 6c 65 74 6f 6e 2e 74 68 65 61 74 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 35 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 36 70 78 7d 7d 23 70 6c 61 79 65 72 2e 73 6b 65 6c 65 74 6f 6e 20 65 6d 62 65 64 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 23 70 6c 61 79 65 72 2e 73 6b 65 6c 65 74 6f 6e 2e 74 68 65 61 74 65 72 2e 66 75 6c 6c 2d 77 69 6e 64 6f 77 2d 6d 6f 64 65 7b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 77 69 64 74 Data Ascii: #player.skeleton{position:relative;z-index:1;margin:80px auto 0}@media (min-width:882px){#player.skeleton.theater{margin-top:56px;margin-bottom:16px}}#player.skeleton embed{width:100%;height:100%}#player.skeleton.theater.full-window-mode{height:100vh;widt
2024-07-02 22:25:06 UTC	1390	IN	Data Raw: 3a 31 30 30 30 70 78 29 7b 23 70 6c 61 79 65 72 2e 73 6b 65 6c 65 74 6f 6e 7b 77 69 64 74 68 3a 31 30 36 36 70 78 7d 23 70 6c 61 79 65 72 2e 73 6b 65 6c 65 74 6f 6e 20 2e 70 6c 61 79 65 72 2d 61 70 69 7b 77 69 64 74 68 3a 36 34 30 70 78 3b 68 65 69 67 68 74 3a 33 36 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 32 39 34 70 78 29 20 61 6e 64 20 28 6d 69 6e 2d 68 65 69 67 68 74 3a 36 33 30 70 78 29 7b 23 70 6c 61 79 65 72 2e 73 6b 65 6c 65 74 6f 6e 7b 77 69 64 74 68 3a 31 32 38 30 70 78 7d 23 70 6c 61 79 65 72 2e 73 6b 65 6c 65 74 6f 6e 20 2e 70 6c 61 79 65 72 2d 61 70 69 7b 77 69 64 74 68 3a 38 35 34 70 78 3b 68 65 69 67 68 74 3a 34 38 30 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 31 37 32 30 70 78 29 20 61 Data Ascii: :1000px){#player.skeleton{width:1066px}#player.skeleton .player-api{width:640px;height:360px}}@media (min-width:1294px) and (min-height:630px){#player.skeleton{width:1280px}#player.skeleton .player-api{width:854px;height:480px}}@media (min-width:1720px) a
2024-07-02 22:25:06 UTC	642	IN	Data Raw: 6c 61 63 65 68 6f 6c 64 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 7d 23 70 6c 61 79 65 72 2e 73 6b 65 6c 65 74 6f 6e 2e 73 68 6f 72 74 73 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 36 2e 32 35 76 68 20 2d 20 37 32 70 78 29 3b 6d 61 72 67 69 6e 3a 35 36 70 78 20 61 75 74 6f 20 30 3b 70 61 64 64 69 6e 67 3a 32 34 70 78 20 30 20 32 34 70 78 20 31 32 30 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a Data Ascii: laceholder{background-position:center;background-repeat:no-repeat;-webkit-background-size:cover;background-size:cover}#player.skeleton.shorts{width:calc(56.25vh - 72px);margin:56px auto 0;padding:24px 0 24px 120px;-webkit-box-sizing:border-box;box-sizing:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.5	49772	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:06 UTC	1155	OUT	GET /s/desktop/a7b1ec23/cssbin/www-onepick.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:06 UTC	678	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 739 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 15:56:53 GMT Expires: Wed, 02 Jul 2025 15:56:53 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 11:13:28 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 23293 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:06 UTC	712	IN	Data Raw: 2e 70 69 63 6b 65 72 2d 66 72 61 6d 65 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 6f 72 64 65 72 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 70 69 63 6b 65 72 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 2d 62 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 7d 2e 70 69 63 6b 65 72 2e 6d 6f 64 61 6c 2d 64 69 61 6c 6f 67 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 46 46 46 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 41 43 41 43 41 43 3b 77 69 64 74 68 3a 61 75 74 6f 3b 70 61 64 64 69 6e Data Ascii: .picker-frame{width:100%;height:100%;border:0;overflow:hidden}.picker.modal-dialog-bg{position:absolute;top:0;left:0;background-color:#FFF}.picker.modal-dialog{position:absolute;top:0;left:0;background-color:#FFF;border:1px solid #ACACAC;width:auto;paddin
2024-07-02 22:25:06 UTC	27	IN	Data Raw: 69 6e 64 65 78 3a 31 39 39 39 39 39 39 39 39 39 7d 73 65 6e 74 69 6e 65 6c 7b 7d Data Ascii: index:1999999999}sentinel{}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.5	49774	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:07 UTC	1233	OUT	GET /s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.HO55zwvfmNc.L.B1.O/am=AAABWg/d=0/rs=AGKMywFQq8RH1zBq3HWnpbjP0ByYJMzZdQ HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:07 UTC	873	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/youtube-main-app-web-scs-key Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="youtube-main-app-web-scs-key" Report-To: {"group":"youtube-main-app-web-scs-key","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-main-app-web-scs-key"}]} Content-Length: 2424807 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 17:36:19 GMT Expires: Wed, 02 Jul 2025 17:36:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 03:16:07 GMT Content-Type: text/css; charset=UTF-8 Vary: Accept-Encoding Age: 17328 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:07 UTC	517	IN	Data Raw: 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 3a 6e 6f 74 28 5b 63 6f 6e 64 65 6e 73 65 64 5d 29 20 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 2b 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 2c 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 2b 79 74 2d 62 75 74 74 6f 6e 2d 76 69 65 77 2d 6d 6f 64 65 6c 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 2c 79 74 2d 62 75 74 74 Data Ascii: ytd-menu-renderer{display:flexbox;display:flex;flex-direction:row}ytd-menu-renderer:not([condensed]) .ytd-menu-renderer[button-renderer]+.ytd-menu-renderer[button-renderer],.ytd-menu-renderer[button-renderer]+yt-button-view-model.ytd-menu-renderer,yt-butt
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 69 74 65 6d 2d 62 75 74 74 6f 6e 73 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 3e 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 2c 23 74 6f 70 2d 6c 65 76 65 6c 2d 62 75 74 74 6f 6e 73 2d 63 6f 6d 70 75 74 65 64 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 3a 6e 6f 74 28 3a 65 6d 70 74 79 29 3e 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 7e 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5d 2c 23 66 6c 65 78 69 62 6c 65 2d 69 74 65 6d 2d 62 75 74 74 6f 6e 73 2e 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 3a 6e 6f 74 28 3a Data Ascii: item-buttons.ytd-menu-renderer:not(:empty)>.ytd-menu-renderer[button-renderer],#top-level-buttons-computed.ytd-menu-renderer:not(:empty)>.ytd-menu-renderer[button-renderer]~.ytd-menu-renderer[button-renderer],#flexible-item-buttons.ytd-menu-renderer:not(:
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 68 61 73 2d 66 6c 65 78 69 62 6c 65 2d 69 74 65 6d 73 5d 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 68 65 69 67 68 74 3a 33 36 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 68 61 73 2d 66 6c 65 78 69 62 6c 65 2d 69 74 65 6d 73 5d 5b 73 61 66 65 2d 61 72 65 61 5d 7b 70 61 64 64 69 6e 67 3a 34 70 78 20 30 3b 6d 61 72 67 69 6e 3a 2d 34 70 78 20 30 7d 79 74 64 2d 6d 65 6e 75 2d 72 65 6e 64 65 72 65 72 5b 68 61 73 2d 66 6c 65 78 69 62 6c 65 2d 69 74 65 6d 73 5d 5b 73 61 66 65 2d 61 72 65 61 5d 20 2e 74 6f Data Ascii: lay:flex;flex-direction:row}ytd-menu-renderer[has-flexible-items]{width:100%;max-height:36px;overflow-y:hidden;flex-wrap:wrap}ytd-menu-renderer[has-flexible-items][safe-area]{padding:4px 0;margin:-4px 0}ytd-menu-renderer[has-flexible-items][safe-area] .to
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 62 75 74 74 6f 6e 5d 20 61 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 63 75 72 73 6f 72 3a 61 75 74 6f 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5d 20 79 74 2d 69 63 6f 6e 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 66 6c 65 78 3a 6e 6f 6e 65 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 20 79 74 2d 66 6f 72 6d 61 74 74 65 64 2d 73 74 72 69 6e 67 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 Data Ascii: button] a.ytd-button-renderer{cursor:auto;pointer-events:none}ytd-button-renderer[is-paper-button] yt-icon.ytd-button-renderer{flex:none}ytd-button-renderer yt-formatted-string.ytd-button-renderer{display:block;overflow:hidden;text-overflow:ellipsis;white
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 74 2d 73 70 65 63 2d 74 65 78 74 2d 73 65 63 6f 6e 64 61 72 79 29 29 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2d 77 69 74 68 2d 69 63 6f 6e 5d 7b 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 3a 76 61 72 28 20 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 77 69 74 68 2d 69 63 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 20 29 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 73 75 67 67 65 73 74 69 76 65 2e 73 69 7a 65 2d 73 6d 61 6c 6c 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2d 77 69 74 68 2d 69 63 6f 6e 5d 7b 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d Data Ascii: t-spec-text-secondary))}ytd-button-renderer[is-paper-button-with-icon]{--yt-button-padding-minus-focus-outline:var( --yt-button-with-icon-padding-minus-focus-outline )}ytd-button-renderer.style-suggestive.size-small[is-paper-button-with-icon]{--yt-button-
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 74 65 78 74 5b 69 73 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 5d 5b 64 69 73 61 62 6c 65 64 5d 20 23 74 65 78 74 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2c 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 64 65 66 61 75 6c 74 5b 69 73 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 5d 5b 64 69 73 61 62 6c 65 64 5d 20 23 74 65 78 74 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2c 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 6f 70 61 63 69 74 79 5b 69 73 2d 69 63 6f 6e 2d 62 75 74 74 6f 6e 5d 5b 64 69 73 61 62 6c 65 64 5d 20 23 74 65 78 74 2e 79 74 64 2d 62 75 74 74 Data Ascii: ][disabled],ytd-button-renderer.style-text[is-icon-button][disabled] #text.ytd-button-renderer,ytd-button-renderer.style-default[is-icon-button][disabled] #text.ytd-button-renderer,ytd-button-renderer.style-opacity[is-icon-button][disabled] #text.ytd-butt
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 20 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 74 65 78 74 2d 70 72 69 6d 61 72 79 29 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 29 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 73 75 67 67 65 73 74 69 76 65 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5d Data Ascii: keyboard-focused] tp-yt-paper-button.ytd-button-renderer{border:var(--yt-button-padding-minus-focus-outline-width) solid var(--yt-spec-text-primary);padding:var(--yt-button-padding-minus-focus-outline)}ytd-button-renderer.style-suggestive[is-paper-button]
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 28 5b 75 73 65 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 29 20 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2e 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2c 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 70 61 6c 65 74 74 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5d 5b 75 73 65 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 5b 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 20 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 Data Ascii: ([use-keyboard-focused]) tp-yt-paper-button.keyboard-focus.ytd-button-renderer,ytd-button-renderer.palette-with-border[is-paper-button][use-keyboard-focused][keyboard-focused] tp-yt-paper-button.ytd-button-renderer{border:var(--yt-button-padding-minus-foc
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 2e 73 74 79 6c 65 2d 64 65 73 74 72 75 63 74 69 76 65 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5d 5b 75 73 65 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 5b 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 65 64 5d 20 74 70 2d 79 74 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 2e 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 7b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 74 65 78 74 2d 70 72 69 6d 61 72 79 29 3b 70 61 64 64 69 6e 67 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 69 6e 75 73 2d 66 6f 63 75 73 2d 6f 75 74 6c Data Ascii: .style-destructive[is-paper-button][use-keyboard-focused][keyboard-focused] tp-yt-paper-button.ytd-button-renderer{border:var(--yt-button-padding-minus-focus-outline-width) solid var(--yt-spec-text-primary);padding:var(--yt-button-padding-minus-focus-outl
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 2d 6f 76 65 72 6c 61 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 62 72 61 6e 64 29 7d 79 74 64 2d 62 75 74 74 6f 6e 2d 72 65 6e 64 65 72 65 72 2e 73 74 79 6c 65 2d 64 65 66 61 75 6c 74 5b 69 73 2d 70 61 70 65 72 2d 62 75 74 74 6f 6e 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 62 61 64 67 65 2d 63 68 69 70 2d 62 61 63 6b 67 72 6f 75 6e 64 29 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 74 2d 62 75 74 74 6f 6e 2d 64 65 66 61 75 6c 74 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 74 65 78 74 2d 73 65 63 6f 6e 64 61 72 79 29 29 7d 79 74 64 2d 62 75 74 74 6f Data Ascii: -overlay-background-brand)}ytd-button-renderer.style-default[is-paper-button]{background-color:var(--yt-button-default-background-color,var(--yt-spec-badge-chip-background));color:var(--yt-button-default-text-color,var(--yt-spec-text-secondary))}ytd-butto

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.5	49775	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:07 UTC	1142	OUT	GET /s/desktop/a7b1ec23/jsbin/spf.vflset/spf.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:07 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 39846 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 14:10:54 GMT Expires: Wed, 02 Jul 2025 14:10:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 29653 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:07 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c Data Ascii: (function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.val
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 65 61 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 67 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 Data Ascii: c,a,{configurable:!0,writable:!0,value:b})}}ea("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"description",{configurable:!0,wr
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 22 3a 62 3a 22 6e 75 6c 6c 22 7d 66 75 6e 63 74 69 6f 6e 20 6b 61 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 59 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 58 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 32 29 2c 68 3d 32 3b 68 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 67 5b 68 2d 32 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 68 5d 3b 72 65 74 75 72 6e 20 62 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 2e 61 70 70 6c Data Ascii: ":b:"null"}function ka(a,b){function c(){}c.prototype=b.prototype;a.Y=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.X=function(d,e,f){for(var g=Array(arguments.length-2),h=2;h<arguments.length;h++)g[h-2]=arguments[h];return b.prototype[e].appl
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 77 61 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 77 61 2e 69 6e 64 65 78 4f 66 28 78 61 29 3d 3d 3d 2d 31 26 26 77 61 2e 70 75 73 68 28 78 61 29 3b 76 61 72 20 79 61 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 7a 61 28 29 7b 69 66 28 79 61 21 3d 3d 79 61 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 61 66 65 53 74 79 6c 65 20 69 73 20 6e 6f 74 20 6d 65 61 6e 74 20 74 6f 20 62 65 20 62 75 69 6c 74 20 64 69 72 65 63 74 6c 79 22 29 3b 7d 7a 61 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 Data Ascii: id#zClosurez");var wa=[];function xa(a){console.warn("A URL with content '"+a+"' was sanitized away.")}wa.indexOf(xa)===-1&&wa.push(xa);var ya={};function za(){if(ya!==ya)throw Error("SafeStyle is not meant to be built directly");}za.prototype.toString=fu
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 63 65 22 29 7c 7c 22 22 3a 22 22 29 26 26 61 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 2c 63 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 61 28 61 29 7b 61 3d 48 61 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 61 20 73 74 72 69 6e 67 22 29 3b 76 61 72 20 62 3d 71 61 28 29 3b 61 3d 62 3f 62 2e 63 72 65 61 74 65 48 54 4d 4c 28 61 29 3a 61 3b 72 65 74 75 72 6e 20 6e 65 77 20 44 61 28 61 2c 43 61 29 7d 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 61 3d 48 61 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 21 3d 3d 22 73 74 72 69 6e 67 22 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 45 78 70 65 63 74 65 64 20 61 20 73 74 72 69 6e 67 22 29 3b 76 61 72 Data Ascii: ce")\|\|"":"")&&a.setAttribute("nonce",c)};function Ga(a){a=Ha(a);if(typeof a!=="string")throw Error("Expected a string");var b=qa();a=b?b.createHTML(a):a;return new Da(a,Ca)}function Ia(a){a=Ha(a);if(typeof a!=="string")throw Error("Expected a string");var
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 74 75 72 6e 21 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 4e 61 28 61 2c 62 29 7b 69 66 28 61 2e 66 69 6c 74 65 72 29 72 65 74 75 72 6e 20 61 2e 66 69 6c 74 65 72 28 62 2c 76 6f 69 64 20 30 29 3b 76 61 72 20 63 3d 5b 5d 3b 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 64 2c 65 2c 66 29 26 26 63 2e 70 75 73 68 28 64 29 7d 29 3b 72 65 74 75 72 6e 20 63 7d 66 75 6e 63 74 69 6f 6e 20 4f 61 28 61 2c 62 29 7b 69 66 28 61 2e 6d 61 70 29 72 65 74 75 72 6e 20 61 2e 6d 61 70 28 62 2c 76 6f 69 64 20 30 29 3b 76 61 72 20 63 3d 5b 5d 3b 63 2e 6c 65 6e 67 74 68 3d 61 2e 6c 65 6e 67 74 68 3b 72 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 63 5b 65 5d 3d 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 64 2c 65 2c 66 Data Ascii: turn!1}function Na(a,b){if(a.filter)return a.filter(b,void 0);var c=[];r(a,function(d,e,f){b.call(void 0,d,e,f)&&c.push(d)});return c}function Oa(a,b){if(a.map)return a.map(b,void 0);var c=[];c.length=a.length;r(a,function(d,e,f){c[e]=b.call(void 0,d,e,f
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 79 6e 63 2d 64 65 66 65 72 73 22 69 6e 20 78 7c 7c 77 28 22 61 73 79 6e 63 2d 64 65 66 65 72 73 22 2c 55 61 29 3b 55 61 3d 78 5b 22 61 73 79 6e 63 2d 64 65 66 65 72 73 22 5d 3b 58 61 26 26 28 22 61 73 79 6e 63 2d 6c 69 73 74 65 6e 65 72 22 69 6e 20 78 26 26 57 61 28 78 5b 22 61 73 79 6e 63 2d 6c 69 73 74 65 6e 65 72 22 5d 29 2c 56 61 28 53 61 29 2c 77 28 22 61 73 79 6e 63 2d 6c 69 73 74 65 6e 65 72 22 2c 53 61 29 29 3b 76 61 72 20 5a 61 3d 7b 22 61 6e 69 6d 61 74 69 6f 6e 2d 63 6c 61 73 73 22 3a 22 73 70 66 2d 61 6e 69 6d 61 74 65 22 2c 22 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 22 3a 34 32 35 2c 22 63 61 63 68 65 2d 6c 69 66 65 74 69 6d 65 22 3a 36 45 35 2c 22 63 61 63 68 65 2d 6d 61 78 22 3a 35 30 2c 22 63 61 63 68 65 2d 75 6e 69 66 69 65 Data Ascii: ync-defers"in x\|\|w("async-defers",Ua);Ua=x["async-defers"];Xa&&("async-listener"in x&&Wa(x["async-listener"]),Va(Sa),w("async-listener",Sa));var Za={"animation-class":"spf-animate","animation-duration":425,"cache-lifetime":6E5,"cache-max":50,"cache-unifie
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 61 73 73 4c 69 73 74 29 61 2e 63 6c 61 73 73 4c 69 73 74 2e 72 65 6d 6f 76 65 28 62 29 3b 65 6c 73 65 7b 76 61 72 20 63 3d 64 62 28 61 29 3b 63 3d 4e 61 28 63 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 21 3d 62 7d 29 3b 61 2e 63 6c 61 73 73 4e 61 6d 65 3d 63 2e 6a 6f 69 6e 28 22 20 22 29 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 66 62 28 61 29 7b 76 61 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 62 2e 64 61 74 61 73 65 74 3f 62 2e 64 61 74 61 73 65 74 2e 73 70 66 4e 61 6d 65 3d 61 3a 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 22 2b 52 61 28 29 2c 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 67 62 28 61 2c 62 29 7b 62 3d 62 7c 7c 64 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 62 2e 71 75 65 72 79 53 65 6c 65 63 74 6f Data Ascii: assList)a.classList.remove(b);else{var c=db(a);c=Na(c,function(d){return d!=b});a.className=c.join(" ")}};function fb(a){var b=document.body;b.dataset?b.dataset.spfName=a:b.setAttribute("data-"+Ra(),a)};function gb(a,b){b=b\|\|document;return b.querySelecto
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 6b 22 5d 29 26 26 63 28 62 2c 61 29 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6c 62 28 61 2c 62 29 7b 76 61 72 20 63 3d 6d 62 28 29 2e 63 6f 6e 74 65 6e 74 57 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 3b 69 66 28 74 79 70 65 6f 66 20 63 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 63 2e 63 61 6c 6c 28 77 69 6e 64 6f 77 2e 68 69 73 74 6f 72 79 2c 61 2c 22 22 2c 62 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 22 68 69 73 74 6f 72 79 2e 72 65 70 6c 61 63 65 53 74 61 74 65 20 69 73 20 6e 6f 74 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 6d 62 28 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 68 69 73 74 6f 72 79 2d 69 66 72 61 6d 65 22 29 3b Data Ascii: k"])&&c(b,a))}}function lb(a,b){var c=mb().contentWindow.history.replaceState;if(typeof c=="function")c.call(window.history,a,"",b);else throw Error("history.replaceState is not a function");}function mb(){var a=document.getElementById("history-iframe");
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 72 20 62 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 22 29 3b 62 2e 68 72 65 66 3d 61 3b 62 2e 68 72 65 66 3d 62 2e 68 72 65 66 3b 61 3d 7b 68 72 65 66 3a 62 2e 68 72 65 66 2c 70 72 6f 74 6f 63 6f 6c 3a 62 2e 70 72 6f 74 6f 63 6f 6c 2c 68 6f 73 74 3a 62 2e 68 6f 73 74 2c 68 6f 73 74 6e 61 6d 65 3a 62 2e 68 6f 73 74 6e 61 6d 65 2c 70 6f 72 74 3a 62 2e 70 6f 72 74 2c 70 61 74 68 6e 61 6d 65 3a 62 2e 70 61 74 68 6e 61 6d 65 2c 73 65 61 72 63 68 3a 62 2e 73 65 61 72 63 68 2c 68 61 73 68 3a 62 2e 68 61 73 68 2c 75 73 65 72 6e 61 6d 65 3a 62 2e 75 73 65 72 6e 61 6d 65 2c 70 61 73 73 77 6f 72 64 3a 62 2e 70 61 73 73 77 6f 72 64 7d 3b 61 2e 6f 72 69 67 69 6e 3d 61 2e 70 72 6f 74 6f 63 6f 6c 2b 22 2f 2f 22 2b 61 2e 68 6f 73 74 3b Data Ascii: r b=document.createElement("a");b.href=a;b.href=b.href;a={href:b.href,protocol:b.protocol,host:b.host,hostname:b.hostname,port:b.port,pathname:b.pathname,search:b.search,hash:b.hash,username:b.username,password:b.password};a.origin=a.protocol+"//"+a.host;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.5	49776	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:07 UTC	1150	OUT	GET /s/desktop/a7b1ec23/jsbin/network.vflset/network.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:07 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 14953 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 14:10:54 GMT Expires: Wed, 02 Jul 2025 14:10:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 29653 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:07 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 Data Ascii: (function(){function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var l=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.valu
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 72 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 68 29 7b 74 68 69 73 2e 67 3d 66 3b 6c 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a Data Ascii: configurable:!0,writable:!0,value:b})}}r("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,h){this.g=f;l(this,"description",{configurable:!0,writable:
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 22 42 61 64 20 73 65 63 72 65 74 22 29 3b 74 68 69 73 2e 67 3d 61 7d 77 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 7d 3b 6e 65 77 20 77 28 22 61 62 6f 75 74 3a 62 6c 61 6e 6b 22 29 3b 6e 65 77 20 77 28 22 61 62 6f 75 74 3a 69 6e 76 61 6c 69 64 23 7a 43 6c 6f 73 75 72 65 7a 22 29 3b 76 61 72 20 78 3d 5b 5d 3b 66 75 6e 63 74 69 6f 6e 20 79 28 61 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 41 20 55 52 4c 20 77 69 74 68 20 63 6f 6e 74 65 6e 74 20 27 22 2b 61 2b 22 27 20 77 61 73 20 73 61 6e 69 74 69 7a 65 64 20 61 77 61 79 2e 22 29 7d 78 2e 69 6e 64 65 78 4f 66 28 79 29 3d 3d 3d 2d 31 26 26 78 2e 70 75 73 68 28 79 29 3b 76 61 72 20 7a 3d 7b 7d 3b 66 75 6e 63 74 69 6f Data Ascii: "Bad secret");this.g=a}w.prototype.toString=function(){return this.g};new w("about:blank");new w("about:invalid#zClosurez");var x=[];function y(a){console.warn("A URL with content '"+a+"' was sanitized away.")}x.indexOf(y)===-1&&x.push(y);var z={};functio
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 76 61 72 20 63 3d 30 2c 64 3d 61 2e 6c 65 6e 67 74 68 3b 63 3c 64 3b 63 2b 2b 29 69 66 28 63 20 69 6e 20 61 26 26 62 2e 63 61 6c 6c 28 76 6f 69 64 20 30 2c 61 5b 63 5d 2c 63 2c 61 29 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 61 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 61 29 3d 3d 22 5b 6f 62 6a 65 63 74 20 41 72 72 61 79 5d 22 3f 61 3a 5b 61 5d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4c 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4d 5b 61 5d 3d 62 7d 76 61 72 20 4d 3d 77 69 6e 64 6f 77 2e 5f 73 70 66 5f 73 74 61 74 65 7c 7c 7b 7d 3b 77 69 6e 64 6f 77 2e 5f 73 70 66 5f 73 74 61 74 65 3d 4d 3b 76 61 72 20 4e 3d 7b 7d 3b 22 63 6f 6e 66 69 67 22 Data Ascii: var c=0,d=a.length;c<d;c++)if(c in a&&b.call(void 0,a[c],c,a))return!0;return!1}function K(a){return Object.prototype.toString.call(a)=="[object Array]"?a:[a]};function L(a,b){return M[a]=b}var M=window._spf_state\|\|{};window._spf_state=M;var N={};"config"
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 21 31 29 3a 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6d 65 73 73 61 67 65 22 2c 61 29 7d 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 77 69 6e 64 6f 77 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 65 73 73 61 67 65 22 2c 61 2c 21 31 29 3a 77 69 6e 64 6f 77 2e 64 65 74 61 63 68 45 76 65 6e 74 26 26 77 69 6e 64 6f 77 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6d 65 73 73 61 67 65 22 2c 61 29 7d 0a 76 61 72 20 6e 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 62 3d 21 31 7d 69 66 28 21 77 69 6e 64 6f 77 2e 70 6f 73 74 4d 65 73 73 61 67 Data Ascii: !1):window.attachEvent&&window.attachEvent("onmessage",a)}function ma(a){window.removeEventListener?window.removeEventListener("message",a,!1):window.detachEvent&&window.detachEvent("onmessage",a)}var na=function(){function a(){b=!1}if(!window.postMessag
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 69 65 72 3a 20 4d 49 54 0a 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 76 61 28 61 2c 62 2c 63 29 7b 69 66 28 62 29 7b 62 3d 5b 5d 3b 76 61 72 20 64 3d 30 3b 63 26 26 28 61 2b 3d 22 5c 72 5c 6e 22 29 3b 76 61 72 20 65 3d 61 2e 69 6e 64 65 78 4f 66 28 22 5b 5c 72 5c 6e 22 2c 64 29 3b 66 6f 72 28 65 3e 2d 31 26 26 28 64 3d 65 2b 33 29 3b 28 65 3d 61 2e 69 6e 64 65 78 4f 66 28 22 2c 5c 72 5c 6e 22 2c 64 29 29 3e 2d 31 3b 29 7b 76 61 72 20 66 3d 52 28 61 2e 73 75 62 73 74 72 69 6e 67 28 64 2c 65 29 29 3b 64 3d 65 2b 33 3b 66 26 26 62 2e 70 75 73 68 28 4a 53 4f 4e 2e 70 61 72 73 65 28 66 29 29 7d 65 3d 61 2e 69 6e 64 65 78 4f 66 28 22 5d 5c 72 5c 6e 22 2c 64 29 3b 65 3e 2d 31 26 26 28 66 3d 52 28 61 2e 73 75 62 73 74 72 69 6e 67 28 64 2c 65 29 29 2c 64 3d 65 2b 33 2c Data Ascii: ier: MIT*/function va(a,b,c){if(b){b=[];var d=0;c&&(a+="\r\n");var e=a.indexOf("[\r\n",d);for(e>-1&&(d=e+3);(e=a.indexOf(",\r\n",d))>-1;){var f=R(a.substring(d,e));d=e+3;f&&b.push(JSON.parse(f))}e=a.indexOf("]\r\n",d);e>-1&&(f=R(a.substring(d,e)),d=e+3,
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 41 61 2e 65 78 65 63 28 65 29 2c 65 3d 21 65 7c 7c 65 5b 31 5d 2e 69 6e 64 65 78 4f 66 28 22 74 65 78 74 2f 63 73 73 22 29 21 3d 2d 31 29 3f 28 62 2e 73 74 79 6c 65 73 2e 70 75 73 68 28 7b 75 72 6c 3a 22 22 2c 74 65 78 74 3a 66 2c 6e 61 6d 65 3a 64 7d 29 2c 22 22 29 3a 63 7d 29 3b 61 3d 61 2e 72 65 70 6c 61 63 65 28 42 61 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 3d 64 2e 6d 61 74 63 68 28 43 61 29 3b 65 3d 65 3f 65 5b 31 5d 3a 22 22 3b 72 65 74 75 72 6e 20 65 3d 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3f 28 65 3d 28 65 3d 64 2e 6d 61 74 63 68 28 58 29 29 3f 65 5b 31 5d 3a 22 22 2c 64 3d 28 64 3d 64 2e 6d 61 74 63 68 28 44 61 29 29 3f 0a 64 5b 31 5d 3a 22 22 2c 62 2e 73 74 79 6c 65 73 2e 70 75 73 68 28 7b 75 72 6c 3a 64 2c 74 65 78 74 3a Data Ascii: Aa.exec(e),e=!e\|\|e[1].indexOf("text/css")!=-1)?(b.styles.push({url:"",text:f,name:d}),""):c});a=a.replace(Ba,function(c,d){var e=d.match(Ca);e=e?e[1]:"";return e=="stylesheet"?(e=(e=d.match(X))?e[1]:"",d=(d=d.match(Da))?d[1]:"",b.styles.push({url:d,text:
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 73 65 7b 71 3d 67 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 58 2d 46 69 72 65 66 6f 78 2d 53 70 64 79 22 29 3b 76 61 72 20 42 3d 77 69 6e 64 6f 77 2e 63 68 72 6f 6d 65 26 26 0a 63 68 72 6f 6d 65 2e 6c 6f 61 64 54 69 6d 65 73 26 26 63 68 72 6f 6d 65 2e 6c 6f 61 64 54 69 6d 65 73 28 29 3b 42 3d 42 26 26 42 2e 77 61 73 46 65 74 63 68 65 64 56 69 61 53 70 64 79 3b 66 3d 21 28 21 71 26 26 21 42 29 7d 65 2e 75 26 26 65 2e 75 28 67 29 7d 65 6c 73 65 20 67 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 33 3f 66 26 26 65 2e 6c 26 26 28 71 3d 67 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2e 73 75 62 73 74 72 69 6e 67 28 68 29 2c 68 3d 67 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2e 6c 65 6e 67 74 68 2c 65 2e 6c 28 67 2c 71 29 29 3a 67 2e 72 65 61 64 79 53 74 61 Data Ascii: se{q=g.getResponseHeader("X-Firefox-Spdy");var B=window.chrome&&chrome.loadTimes&&chrome.loadTimes();B=B&&B.wasFetchedViaSpdy;f=!(!q&&!B)}e.u&&e.u(g)}else g.readyState==3?f&&e.l&&(q=g.responseText.substring(h),h=g.responseText.length,e.l(g,q)):g.readySta
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 2e 67 65 74 52 65 73 70 6f 6e 73 65 48 65 61 64 65 72 28 22 58 2d 53 50 46 2d 52 65 73 70 6f 6e 73 65 2d 54 79 70 65 22 29 7c 7c 22 22 3b 62 2e 6f 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 6d 75 6c 74 69 70 61 72 74 22 29 21 3d 2d 31 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 68 29 7b 69 66 28 64 2e 6f 29 7b 66 3d 64 2e 68 2b 66 3b 74 72 79 7b 76 61 72 20 6b 3d 76 61 28 66 2c 21 30 2c 68 29 7d 63 61 74 63 68 28 67 29 7b 65 2e 61 62 6f 72 74 28 29 3b 62 2e 69 26 26 62 2e 69 28 61 2c 67 2c 65 29 3b 72 65 74 75 72 6e 7d 62 2e 6a 26 26 49 28 6b 2e 6d 2c 66 75 6e 63 74 69 6f 6e 28 67 29 7b 67 2e 74 69 6d 69 6e 67 7c 7c 28 67 2e 74 69 6d 69 6e 67 3d 7b 7d 29 3b 67 2e 74 69 6d 69 6e 67 2e 73 Data Ascii: .getResponseHeader("X-SPF-Response-Type")\|\|"";b.o=a.toLowerCase().indexOf("multipart")!=-1}function Ia(a,b,c,d,e,f,h){if(d.o){f=d.h+f;try{var k=va(f,!0,h)}catch(g){e.abort();b.i&&b.i(a,g,e);return}b.j&&I(k.m,function(g){g.timing\|\|(g.timing={});g.timing.s
2024-07-02 22:25:07 UTC	1390	IN	Data Raw: 67 5b 30 5d 3a 7b 7d 3b 47 61 28 61 2c 62 2c 63 2c 67 2c 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 47 61 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 69 66 28 65 26 26 62 2e 6d 65 74 68 6f 64 21 3d 22 50 4f 53 54 22 26 26 28 65 3d 4b 61 28 61 2c 62 2e 63 75 72 72 65 6e 74 2c 64 2e 63 61 63 68 65 54 79 70 65 2c 62 2e 74 79 70 65 2c 21 30 29 29 29 7b 64 2e 63 61 63 68 65 4b 65 79 3d 65 3b 76 61 72 20 66 3d 7b 72 65 73 70 6f 6e 73 65 3a 64 2c 74 79 70 65 3a 62 2e 74 79 70 65 7c 7c 22 22 7d 2c 68 3d 70 61 72 73 65 49 6e 74 28 4e 5b 22 63 61 63 68 65 2d 6c 69 66 65 74 69 6d 65 22 5d 2c 31 30 29 2c 6b 3d 70 61 72 73 65 49 6e 74 28 4e 5b 22 63 61 63 68 65 2d 6d 61 78 22 5d 2c 31 30 29 3b 68 3c 3d 30 7c 7c 6b 3c 3d 30 7c 7c 28 6b 3d 50 28 29 2c 66 3d 7b 64 61 74 61 3a 66 2c Data Ascii: g[0]:{};Ga(a,b,c,g,!0)}function Ga(a,b,c,d,e){if(e&&b.method!="POST"&&(e=Ka(a,b.current,d.cacheType,b.type,!0))){d.cacheKey=e;var f={response:d,type:b.type\|\|""},h=parseInt(N["cache-lifetime"],10),k=parseInt(N["cache-max"],10);h<=0\|\|k<=0\|\|(k=P(),f={data:f,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.5	49778	74.125.0.170	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:11 UTC	1847	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=1 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1631 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:11 UTC	1631	OUT	Data Raw: 0a a1 80 00 90 01 a6 06 98 01 c5 03 a8 01 00 e0 01 00 90 02 00 a0 02 14 b8 02 5b f0 02 01 d0 03 00 d8 03 b8 08 2a 8d 0a 0a b8 09 0a cb 06 08 00 25 00 00 80 3f 2d 33 33 73 3f 35 3d 0a 97 3f 58 01 68 01 72 1a 0a 16 6d 66 73 32 5f 63 6d 66 73 5f 77 65 62 5f 76 33 5f 32 5f 30 30 33 18 00 78 8f 4e a0 01 01 a8 01 00 90 02 01 b8 02 00 c8 02 01 da 02 b6 01 10 b0 ea 01 18 a8 46 20 a0 9c 01 28 a0 9c 01 30 98 75 70 88 27 80 01 f4 03 b8 01 01 e0 01 01 98 02 0c a0 02 01 c0 02 01 d0 02 02 e0 02 01 e8 02 02 80 03 02 88 03 88 27 98 03 01 a8 03 03 c0 03 01 c8 03 01 d0 03 01 f8 03 01 80 04 01 88 04 01 90 04 01 98 04 01 a0 04 01 a8 04 01 c8 04 01 d0 04 01 e0 04 00 e8 04 01 f8 04 07 80 05 7d 88 05 01 b0 05 01 b8 05 01 c0 05 01 c8 05 01 d0 05 01 d8 05 01 e0 05 d0 0f e8 05 01 Data Ascii: [*%?-33s?5=?Xhrmfs2_cmfs_web_v3_2_003xNF (0up''}
2024-07-02 22:25:11 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:11 GMT Expires: Tue, 02 Jul 2024 22:25:11 GMT Cache-Control: private, max-age=21291 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:11 UTC	3	IN	Data Raw: 34 0d 0a Data Ascii: 4
2024-07-02 22:25:11 UTC	4	IN	Data Raw: 3a 02 08 01 Data Ascii: :
2024-07-02 22:25:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-02 22:25:11 UTC	3	IN	Data Raw: 65 0d 0a Data Ascii: e
2024-07-02 22:25:11 UTC	14	IN	Data Raw: 2f 0c 0a 05 08 00 10 b0 09 12 03 10 f0 2e Data Ascii: /.
2024-07-02 22:25:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-02 22:25:11 UTC	3	IN	Data Raw: 61 0d 0a Data Ascii: a
2024-07-02 22:25:11 UTC	10	IN	Data Raw: 34 08 0a 06 43 41 45 6f 41 51 Data Ascii: 4CAEoAQ
2024-07-02 22:25:11 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-02 22:25:12 UTC	1847	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=2 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1814 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:12 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:12 GMT Expires: Tue, 02 Jul 2024 22:25:12 GMT Cache-Control: private, max-age=21290 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:20 UTC	1847	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=3 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1876 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:21 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:21 GMT Expires: Tue, 02 Jul 2024 22:25:21 GMT Cache-Control: private, max-age=21281 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:21 UTC	1847	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=4 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1876 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:21 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:21 GMT Expires: Tue, 02 Jul 2024 22:25:21 GMT Cache-Control: private, max-age=21281 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:26 UTC	1847	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=5 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1876 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:26 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:26 GMT Expires: Tue, 02 Jul 2024 22:25:26 GMT Cache-Control: private, max-age=21276 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:30 UTC	1847	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=6 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1879 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:31 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:30 GMT Expires: Tue, 02 Jul 2024 22:25:30 GMT Cache-Control: private, max-age=21272 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:38 UTC	1847	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=7 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1879 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:38 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:38 GMT Expires: Tue, 02 Jul 2024 22:25:38 GMT Cache-Control: private, max-age=21264 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:47 UTC	1847	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=8 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1880 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:47 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:47 GMT Expires: Tue, 02 Jul 2024 22:25:47 GMT Cache-Control: private, max-age=21255 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:54 UTC	1847	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=9 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:54 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:25:54 GMT Expires: Tue, 02 Jul 2024 22:25:54 GMT Cache-Control: private, max-age=21248 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:00 UTC	1848	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=10 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:00 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:26:00 GMT Expires: Tue, 02 Jul 2024 22:26:00 GMT Cache-Control: private, max-age=21242 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:01 UTC	1848	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=11 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:01 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:26:01 GMT Expires: Tue, 02 Jul 2024 22:26:01 GMT Cache-Control: private, max-age=21241 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:09 UTC	1848	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=12 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:09 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:26:09 GMT Expires: Tue, 02 Jul 2024 22:26:09 GMT Cache-Control: private, max-age=21233 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:09 UTC	1848	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=13 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:10 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:26:10 GMT Expires: Tue, 02 Jul 2024 22:26:10 GMT Cache-Control: private, max-age=21232 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:14 UTC	1848	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=14 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:14 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:26:14 GMT Expires: Tue, 02 Jul 2024 22:26:14 GMT Cache-Control: private, max-age=21228 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:21 UTC	1848	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=15 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:22 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:26:22 GMT Expires: Tue, 02 Jul 2024 22:26:22 GMT Cache-Control: private, max-age=21220 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:27 UTC	1848	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=16 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:27 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:26:27 GMT Expires: Tue, 02 Jul 2024 22:26:27 GMT Cache-Control: private, max-age=21215 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:35 UTC	1848	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=17 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:35 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:26:35 GMT Expires: Tue, 02 Jul 2024 22:26:35 GMT Cache-Control: private, max-age=21207 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:44 UTC	1848	OUT	POST /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=18 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive Content-Length: 1885 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:44 UTC	953	IN	HTTP/1.1 200 OK Date: Tue, 02 Jul 2024 22:26:44 GMT Expires: Tue, 02 Jul 2024 22:26:44 GMT Cache-Control: private, max-age=21198 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.5	49777	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:11 UTC	1152	OUT	GET /s/player/71059424/player_ias.vflset/en_US/offline.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:11 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 160267 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 01 Jul 2024 16:09:32 GMT Expires: Tue, 01 Jul 2025 16:09:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 01 Jul 2024 04:13:06 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 108939 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:11 UTC	701	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 59 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 65 77 20 67 2e 4e 4f 28 22 75 6e 64 22 2c 6e 65 77 20 67 2e 74 51 28 22 44 65 66 61 75 6c 74 22 2c 22 75 6e 64 22 2c 21 30 29 29 3b 62 2e 63 61 70 74 69 6f 6e 54 72 61 63 6b 73 3d 61 2e 63 61 70 74 69 6f 6e 54 72 61 63 6b 73 3b 72 65 74 75 72 6e 20 62 7d 2c 5a 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 67 2e 66 67 28 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 61 2e 6c 65 6e 67 74 68 2c 65 3d 5b 5d 3b 0a 69 66 28 64 29 66 6f 72 28 76 61 72 20 66 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 70 29 7b 64 2d 2d 3b Data Ascii: (function(g){var window=this;'use strict';var Yxb=function(a){var b=new g.NO("und",new g.tQ("Default","und",!0));b.captionTracks=a.captionTracks;return b},Zxb=function(a){return new g.fg(function(b,c){var d=a.length,e=[];if(d)for(var f=function(n,p){d--;
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 6d 65 6e 74 73 29 7d 2c 67 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 68 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 69 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6a 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 0a 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6b 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 6c 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c Data Ascii: ments)},gyb=function(){L6.apply(this,arguments)},hyb=function(){L6.apply(this,arguments)},iyb=function(){L6.apply(this,arguments)},jyb=function(){L6.apply(this,arguments)},kyb=function(){L6.apply(this,arguments)},lyb=function(){L6.apply(this,arguments)},
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 4f 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 50 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 51 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 52 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 53 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 54 79 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 Data Ascii: is,arguments)},Oyb=function(){L6.apply(this,arguments)},Pyb=function(){L6.apply(this,arguments)},Qyb=function(){L6.apply(this,arguments)},Ryb=function(){L6.apply(this,arguments)},Syb=function(){L6.apply(this,arguments)},Tyb=function(){L6.apply(this,argume
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 76 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 77 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 78 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 79 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 4c 36 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 7a 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 67 2e 76 43 28 28 30 2c 67 2e 54 70 62 29 28 29 2c 61 29 7d 2c 4d 36 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 74 6f 6b 65 6e Data Ascii: pply(this,arguments)},vzb=function(){L6.apply(this,arguments)},wzb=function(){L6.apply(this,arguments)},xzb=function(){L6.apply(this,arguments)},yzb=function(){L6.apply(this,arguments)},zzb=function(a){return g.vC((0,g.Tpb)(),a)},M6=function(a){this.token
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 69 6f 6e 28 29 7b 7d 2c 49 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 2e 43 28 62 2c 63 29 7d 63 61 74 63 68 28 64 29 7b 47 7a 62 28 64 2c 45 7a 62 29 7d 7d 2c 4a 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 28 6e 65 77 20 54 65 78 74 45 6e 63 6f 64 65 72 29 2e 65 6e 63 6f 64 65 28 61 29 2e 73 75 62 61 72 72 61 79 28 30 2c 31 36 29 3b 0a 76 61 72 20 62 3d 6e 65 77 20 55 69 6e 74 38 41 72 72 61 79 28 31 36 29 3b 62 2e 73 65 74 28 61 29 3b 72 65 74 75 72 6e 20 62 7d 2c 50 36 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 61 7d 2c 4c 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 4b 7a 62 5b 61 5d 3b 0a 69 66 28 62 29 72 65 74 75 72 6e 20 62 3b 67 2e 6d 45 28 6e 65 77 20 67 Data Ascii: ion(){},Izb=function(a,b,c){try{return a.C(b,c)}catch(d){Gzb(d,Ezb)}},Jzb=function(a){a=(new TextEncoder).encode(a).subarray(0,16);var b=new Uint8Array(16);b.set(a);return b},P6=function(a){this.j=a},Lzb=function(a){var b=Kzb[a];if(b)return b;g.mE(new g
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 63 3d 3d 6e 75 6c 6c 3f 30 3a 63 2e 42 77 29 7b 76 61 72 20 64 3d 6e 65 77 20 53 65 74 3b 0a 72 65 74 75 72 6e 20 52 7a 62 28 61 2c 62 2c 64 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 66 3d 5b 5d 2c 68 3d 67 2e 76 28 64 29 2c 6c 3d 68 2e 6e 65 78 74 28 29 3b 21 6c 2e 64 6f 6e 65 3b 6c 3d 68 2e 6e 65 78 74 28 29 29 66 2e 70 75 73 68 28 55 36 28 61 2c 6c 2e 76 61 6c 75 65 29 29 3b 72 65 74 75 72 6e 20 67 2e 66 43 2e 61 6c 6c 28 66 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 7d 29 7d 76 61 72 20 65 3d 67 2e 53 4e 28 62 29 2e 65 6e 74 69 74 79 54 79 70 65 3b 0a 72 65 74 75 72 6e 20 67 2e 66 43 2e 61 6c 6c 28 5b 61 2e 6a 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 22 45 6e 74 Data Ascii: on(a,b,c){if(c==null?0:c.Bw){var d=new Set;return Rzb(a,b,d).then(function(){for(var f=[],h=g.v(d),l=h.next();!l.done;l=h.next())f.push(U6(a,l.value));return g.fC.all(f).then(function(){})})}var e=g.SN(b).entityType;return g.fC.all([a.j.objectStore("Ent
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 28 29 7b 72 65 74 75 72 6e 20 56 7a 62 28 61 2c 62 2c 63 29 7d 29 7d 2c 52 7a 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 63 2e 68 61 73 28 62 29 29 72 65 74 75 72 6e 20 67 2e 66 43 2e 72 65 73 6f 6c 76 65 28 76 6f 69 64 20 30 29 3b 0a 63 2e 61 64 64 28 62 29 3b 72 65 74 75 72 6e 20 57 7a 62 28 61 2c 62 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6a 2e 6f 62 6a 65 63 74 53 74 6f 72 65 28 22 45 6e 74 69 74 79 41 73 73 6f 63 69 61 74 69 6f 6e 53 74 6f 72 65 22 29 2e 69 6e 64 65 78 28 22 62 79 50 61 72 65 6e 74 45 6e 74 69 74 79 4b 65 79 22 29 2e 64 65 6c 65 74 65 28 49 44 42 4b 65 79 52 61 6e 67 65 2e 6f 6e 6c 79 28 62 29 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 Data Ascii: (){return Vzb(a,b,c)})},Rzb=function(a,b,c){if(c.has(b))return g.fC.resolve(void 0);c.add(b);return Wzb(a,b).then(function(d){return a.j.objectStore("EntityAssociationStore").index("byParentEntityKey").delete(IDBKeyRange.only(b)).then(function(){return d
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 3d 61 3b 74 68 69 73 2e 6a 3d 62 3b 74 68 69 73 2e 6f 62 73 65 72 76 65 72 73 3d 5b 5d 3b 61 3d 6e 65 77 20 67 2e 55 61 2e 42 72 6f 61 64 63 61 73 74 43 68 61 6e 6e 65 6c 28 22 50 45 52 53 49 53 54 45 4e 54 5f 45 4e 54 49 54 59 5f 53 54 4f 52 45 5f 53 59 4e 43 3a 22 2b 67 2e 46 42 28 29 29 3b 61 2e 6f 6e 6d 65 73 73 61 67 65 3d 74 68 69 73 2e 42 2e 62 69 6e 64 28 74 68 69 73 29 3b 74 68 69 73 2e 63 68 61 6e 6e 65 6c 3d 61 7d 2c 58 36 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 2c 66 2c 68 3b 0a 72 65 74 75 72 6e 20 67 2e 47 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 69 66 28 6c 2e 6a 3d 3d 31 29 72 65 74 75 72 6e 20 67 2e 7a 28 6c 2c 43 7a 62 28 61 2e 74 6f 6b 65 6e 29 2c 32 29 3b 69 66 28 6c 2e 6a 21 3d 33 29 72 65 74 75 72 6e 20 Data Ascii: =a;this.j=b;this.observers=[];a=new g.Ua.BroadcastChannel("PERSISTENT_ENTITY_STORE_SYNC:"+g.FB());a.onmessage=this.B.bind(this);this.channel=a},X6=function(a,b,c){var d,e,f,h;return g.G(function(l){if(l.j==1)return g.z(l,Czb(a.token),2);if(l.j!=3)return
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 7c 7c 74 79 70 65 6f 66 20 67 2e 55 61 2e 42 72 6f 61 64 63 61 73 74 43 68 61 6e 6e 65 6c 3d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 72 65 74 75 72 6e 20 64 2e 72 65 74 75 72 6e 28 29 3b 62 3d 6e 65 77 20 58 7a 62 3b 72 65 74 75 72 6e 20 64 2e 72 65 74 75 72 6e 28 6e 65 77 20 57 36 28 61 2c 62 29 29 7d 63 3d 67 2e 44 61 28 64 29 3b 63 20 69 6e 73 74 61 6e 63 65 6f 66 20 45 72 72 6f 72 26 26 67 2e 6c 45 28 63 29 3b 72 65 74 75 72 6e 20 64 2e 72 65 74 75 72 6e 28 29 7d 29 7d 2c 61 37 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 64 41 62 7c 7c 28 64 41 62 3d 63 41 62 28 29 29 3b 0a 72 65 74 75 72 6e 20 64 41 62 7d 2c 65 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 0a 61 3d 28 62 3d 61 2e 6f 70 74 69 6f 6e 73 29 3d 3d 6e 75 6c 6c 3f 76 6f 69 64 20 Data Ascii: \|\|typeof g.Ua.BroadcastChannel==="undefined")return d.return();b=new Xzb;return d.return(new W6(a,b))}c=g.Da(d);c instanceof Error&&g.lE(c);return d.return()})},a7=function(){dAb\|\|(dAb=cAb());return dAb},eAb=function(a){var b;a=(b=a.options)==null?void
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 61 29 7b 72 65 74 75 72 6e 20 61 21 3d 3d 76 6f 69 64 20 30 7d 2c 69 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 67 2e 65 53 28 29 3b 0a 62 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 62 29 3b 61 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 7b 7d 2c 61 29 3b 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 61 5b 63 5d 3f 28 62 5b 63 5d 21 3d 3d 34 26 26 28 62 5b 63 5d 3d 61 5b 63 5d 29 2c 64 65 6c 65 74 65 20 61 5b 63 5d 29 3a 62 5b 63 5d 21 3d 3d 32 26 26 28 62 5b 63 5d 3d 34 29 3b 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 62 2c 61 29 3b 67 2e 41 57 61 28 62 29 3b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 62 29 3b 72 65 74 75 72 6e 20 62 7d 2c 6a 41 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 3b 0a 72 65 74 Data Ascii: a){return a!==void 0},iAb=function(a){var b=g.eS();b=Object.assign({},b);a=Object.assign({},a);for(var c in b)a[c]?(b[c]!==4&&(b[c]=a[c]),delete a[c]):b[c]!==2&&(b[c]=4);Object.assign(b,a);g.AWa(b);JSON.stringify(b);return b},jAb=function(a){var b,c;ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.5	49779	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:11 UTC	1151	OUT	GET /s/player/71059424/player_ias.vflset/en_US/remote.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:11 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 120844 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 17:19:17 GMT Expires: Wed, 02 Jul 2025 17:19:17 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 01 Jul 2024 04:13:06 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 18354 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:11 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 62 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 77 71 28 61 2c 22 7a 78 22 2c 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 31 34 37 34 38 33 36 34 38 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 2b 4d 61 74 68 2e 61 62 73 28 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 32 31 34 37 34 38 33 36 34 38 29 5e 67 2e 6b 62 28 29 29 2e 74 6f 53 74 72 69 6e 67 28 33 36 29 29 3b 72 65 74 75 72 6e 20 61 7d 2c 63 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 63 29 7c 7c 28 63 3d 5b 53 74 72 69 6e 67 28 63 29 5d 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var b8=function(a){g.wq(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.kb()).toString(36));return a},c8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 20 65 3d 67 2e 64 77 2e 70 72 6f 74 6f 74 79 70 65 2e 42 2e 63 61 6c 6c 28 74 68 69 73 2c 64 2c 21 30 29 7d 63 61 74 63 68 28 66 29 7b 69 66 28 66 3d 3d 22 53 74 6f 72 61 67 65 3a 20 49 6e 76 61 6c 69 64 20 76 61 6c 75 65 20 77 61 73 20 65 6e 63 6f 75 6e 74 65 72 65 64 22 29 72 65 74 75 72 6e 3b 74 68 72 6f 77 20 66 3b 7d 65 3d 3d 3d 76 6f 69 64 20 30 3f 63 2e 70 75 73 68 28 64 29 3a 67 2e 56 6c 61 28 65 29 26 26 63 2e 70 75 73 68 28 64 29 7d 2c 61 29 3b 0a 72 65 74 75 72 6e 20 63 7d 2c 5a 44 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 59 44 62 28 61 2c 62 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 67 2e 64 77 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6d 6f 76 65 2e 63 61 6c 6c 28 74 68 69 73 2c 63 29 7d 2c 61 29 7d 2c 24 44 62 3d Data Ascii: e=g.dw.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.Vla(e)&&c.push(d)},a);return c},ZDb=function(a,b){YDb(a,b).forEach(function(c){g.dw.prototype.remove.call(this,c)},a)},$Db=
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 68 2c 64 3d 30 3b 64 3c 63 3b 64 2b 2b 29 62 2e 70 75 73 68 28 61 5b 64 5d 29 3b 72 65 74 75 72 6e 20 62 7d 72 65 74 75 72 6e 20 67 2e 61 64 28 61 29 7d 2c 66 45 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 53 6e 26 26 74 79 70 65 6f 66 20 61 2e 53 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 20 61 2e 53 6e 28 29 3b 0a 69 66 28 21 61 2e 47 6d 7c 7c 74 79 70 65 6f 66 20 61 2e 47 6d 21 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 69 66 28 74 79 70 65 6f 66 20 4d 61 70 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 61 2e 6b 65 79 73 28 29 29 3b 69 66 28 21 28 74 79 70 65 6f 66 20 53 65 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 Data Ascii: h,d=0;d<c;d++)b.push(a[d]);return b}return g.ad(a)},fEb=function(a){if(a.Sn&&typeof a.Sn=="function")return a.Sn();if(!a.Gm\|\|typeof a.Gm!="function"){if(typeof Map!=="undefined"&&a instanceof Map)return Array.from(a.keys());if(!(typeof Set!=="undefined"&
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 28 29 7b 74 68 69 73 2e 6a 3d 65 38 28 29 3b 0a 74 68 69 73 2e 6a 2e 55 6a 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 65 72 72 6f 72 22 2c 7b 79 64 3a 33 2c 78 64 3a 22 63 68 61 6e 6e 65 6c 5f 74 79 70 65 22 7d 29 7d 2c 70 45 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 2e 66 6d 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 65 2f 6c 69 76 69 6e 67 5f 72 6f 6f 6d 2f 6d 64 78 2f 63 68 61 6e 6e 65 6c 2f 65 72 72 6f 72 22 2c 62 29 7d 2c 71 45 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6a 3d 65 38 28 29 3b 0a 74 68 69 73 2e 6a 2e 55 6a 28 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 79 6f 75 74 75 62 Data Ascii: (){this.j=e8();this.j.Uj("/client_streamz/youtube/living_room/mdx/channel/error",{yd:3,xd:"channel_type"})},pEb=function(a,b){a.j.fm("/client_streamz/youtube/living_room/mdx/channel/error",b)},qEb=function(){this.j=e8();this.j.Uj("/client_streamz/youtub
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 6f 64 65 6c 3d 74 68 69 73 2e 62 72 61 6e 64 3d 22 22 3b 74 68 69 73 2e 79 65 61 72 3d 30 3b 74 68 69 73 2e 63 68 69 70 73 65 74 3d 74 68 69 73 2e 6f 73 56 65 72 73 69 6f 6e 3d 74 68 69 73 2e 6f 73 3d 22 22 3b 74 68 69 73 2e 6d 64 78 44 69 61 6c 53 65 72 76 65 72 54 79 70 65 3d 22 4d 44 58 5f 44 49 41 4c 5f 53 45 52 56 45 52 5f 54 59 50 45 5f 55 4e 4b 4e 4f 57 4e 22 3b 61 26 26 28 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 2c 74 68 69 73 2e 63 6c 69 65 6e 74 4e 61 6d 65 3d 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 3f 61 2e 63 6c 69 65 6e 74 4e 61 6d 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3a 22 55 4e 4b 4e 4f 57 4e 5f 49 4e 54 45 52 46 41 43 45 22 2c 0a 74 68 69 73 2e 61 70 70 3d 61 2e 61 Data Ascii: odel=this.brand="";this.year=0;this.chipset=this.osVersion=this.os="";this.mdxDialServerType="MDX_DIAL_SERVER_TYPE_UNKNOWN";a&&(this.id=a.id\|\|a.name,this.name=a.name,this.clientName=a.clientName?a.clientName.toUpperCase():"UNKNOWN_INTERFACE",this.app=a.a
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 62 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 63 6c 65 61 72 28 29 3b 0a 62 2e 73 70 6c 69 74 28 22 2c 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 61 2e 65 78 70 65 72 69 6d 65 6e 74 73 2e 61 64 64 28 63 29 7d 29 7d 2c 69 38 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 3d 61 7c 7c 7b 7d 3b 0a 74 68 69 73 2e 6e 61 6d 65 3d 61 2e 6e 61 6d 65 7c 7c 22 22 3b 74 68 69 73 2e 69 64 3d 61 2e 69 64 7c 7c 61 2e 73 63 72 65 65 6e 49 64 7c 7c 22 22 3b 74 68 69 73 2e 74 6f 6b 65 6e 3d 61 2e 74 6f 6b 65 6e 7c 7c 61 2e 6c 6f 75 6e 67 65 54 6f 6b 65 6e 7c 7c 22 22 3b 74 68 69 73 2e 75 75 69 64 3d 61 2e 75 75 69 64 7c 7c 61 2e 64 69 61 6c 49 64 7c 7c 22 22 3b 74 68 69 73 2e 69 64 54 79 70 65 3d 61 2e 73 63 72 65 65 6e 49 64 54 79 70 65 7c 7c 22 Data Ascii: b){a.experiments.clear();b.split(",").forEach(function(c){a.experiments.add(c)})},i8=function(a){a=a\|\|{};this.name=a.name\|\|"";this.id=a.id\|\|a.screenId\|\|"";this.token=a.token\|\|a.loungeToken\|\|"";this.uuid=a.uuid\|\|a.dialId\|\|"";this.idType=a.screenIdType\|\|"
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 75 72 6e 20 67 2e 64 73 28 61 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 30 3f 64 3a 64 2e 73 75 62 73 74 72 69 6e 67 28 63 2e 6c 65 6e 67 74 68 29 7d 29 7d 2c 49 45 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 77 42 28 22 79 74 2d 72 65 6d 6f 74 65 2d 63 6f 6e 6e 65 63 74 65 64 2d 64 65 76 69 63 65 73 22 2c 61 2c 38 36 34 30 30 29 7d 2c 6e 38 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 4a 45 62 29 72 65 74 75 72 6e 20 4a 45 62 3b 0a 76 61 72 20 61 3d 67 2e 78 42 28 22 79 74 2d 72 65 6d 6f 74 65 2d 64 65 76 69 63 65 2d 69 64 22 29 3b 61 7c 7c 28 61 3d 44 45 62 28 29 2c 67 2e 77 42 28 22 79 74 2d 72 65 6d 6f 74 65 2d 64 65 76 69 63 65 2d 69 64 22 2c 61 2c 33 31 35 33 36 45 33 29 29 3b 66 6f 72 28 76 61 72 20 62 3d 6d 38 Data Ascii: urn g.ds(a,function(d,e){return e==0?d:d.substring(c.length)})},IEb=function(a){g.wB("yt-remote-connected-devices",a,86400)},n8=function(){if(JEb)return JEb;var a=g.xB("yt-remote-device-id");a\|\|(a=DEb(),g.wB("yt-remote-device-id",a,31536E3));for(var b=m8
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 6d 61 74 63 68 28 2f 43 68 72 6f 6d 65 5c 2f 28 5b 30 2d 39 5d 2b 29 2f 29 3b 0a 72 65 74 75 72 6e 20 61 3f 70 61 72 73 65 49 6e 74 28 61 5b 31 5d 2c 31 30 29 3a 30 7d 2c 54 45 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 21 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 26 26 28 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 22 3f 22 2b 61 29 21 3d 2d 31 7c 7c 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 2e 69 6e 64 65 78 4f 66 28 22 26 22 2b 61 29 21 3d 2d 31 29 7d 2c 55 45 62 3d 66 75 6e 63 74 69 6f Data Ascii: unction(){var a=window.navigator.userAgent.match(/Chrome\/([0-9]+)/);return a?parseInt(a[1],10):0},TEb=function(a){return!!document.currentScript&&(document.currentScript.src.indexOf("?"+a)!=-1\|\|document.currentScript.src.indexOf("&"+a)!=-1)},UEb=functio
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 29 28 74 68 69 73 2e 43 35 2c 74 68 69 73 29 3b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 69 73 2e 42 3d 30 3b 74 68 69 73 2e 43 3d 74 68 69 73 2e 72 64 3d 6e 75 6c 6c 3b 74 68 69 73 2e 44 3d 5b 5d 7d 2c 75 38 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 2e 49 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 74 68 69 73 2e 44 3d 63 21 3d 6e 75 6c 6c 3f 61 2e 62 69 6e 64 28 63 29 3a 61 3b 74 68 69 73 2e 57 69 3d 62 3b 74 68 69 73 2e 43 3d 6e 75 6c 6c 3b 74 68 69 73 2e 6a 3d 21 31 3b 74 68 69 73 2e 42 3d 30 3b 74 68 69 73 2e 72 64 3d 6e 75 6c 6c 7d 2c 64 46 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 72 64 3d 67 2e 6e 67 28 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 72 64 3d 6e 75 6c 6c 3b 0a 61 2e 6a 26 26 21 61 2e 42 26 26 28 61 2e 6a 3d 21 31 2c 64 46 62 28 61 Data Ascii: )(this.C5,this);this.j=!1;this.B=0;this.C=this.rd=null;this.D=[]},u8=function(a,b,c){g.I.call(this);this.D=c!=null?a.bind(c):a;this.Wi=b;this.C=null;this.j=!1;this.B=0;this.rd=null},dFb=function(a){a.rd=g.ng(function(){a.rd=null;a.j&&!a.B&&(a.j=!1,dFb(a
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 2e 65 62 3d 61 2e 5a 2e 63 6c 6f 6e 65 28 29 3b 63 38 28 61 2e 65 62 2c 22 74 22 2c 61 2e 50 62 29 3b 61 2e 4e 3d 30 3b 76 61 72 20 63 3d 61 2e 43 2e 53 61 3b 61 2e 42 3d 6e 65 77 20 6c 46 62 3b 61 2e 6a 3d 6f 46 62 28 61 2e 43 2c 63 3f 62 3a 6e 75 6c 6c 2c 21 61 2e 59 29 3b 61 2e 59 61 3e 30 26 26 28 61 2e 58 61 3d 6e 65 77 20 75 38 28 28 30 2c 67 2e 69 62 29 28 61 2e 55 55 2c 61 2c 61 2e 6a 29 2c 61 2e 59 61 29 29 3b 61 2e 43 62 2e 6c 69 73 74 65 6e 28 61 2e 6a 2c 22 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 61 2e 45 35 29 3b 62 3d 61 2e 4f 61 3f 67 2e 6a 64 28 61 2e 4f 61 29 3a 7b 7d 3b 61 2e 59 3f 28 61 2e 48 61 7c 7c 28 61 2e 48 61 3d 22 50 4f 53 54 22 29 2c 62 5b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 5d 3d 22 61 70 70 6c 69 63 61 74 Data Ascii: .eb=a.Z.clone();c8(a.eb,"t",a.Pb);a.N=0;var c=a.C.Sa;a.B=new lFb;a.j=oFb(a.C,c?b:null,!a.Y);a.Ya>0&&(a.Xa=new u8((0,g.ib)(a.UU,a,a.j),a.Ya));a.Cb.listen(a.j,"readystatechange",a.E5);b=a.Oa?g.jd(a.Oa):{};a.Y?(a.Ha\|\|(a.Ha="POST"),b["Content-Type"]="applicat

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.5	49782	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:11 UTC	1155	OUT	GET /s/player/71059424/player_ias.vflset/en_US/miniplayer.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:11 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 6072 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 01 Jul 2024 16:09:32 GMT Expires: Tue, 01 Jul 2025 16:09:32 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 01 Jul 2024 04:13:06 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 108939 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:11 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 56 78 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 67 2e 57 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 49 3a 22 62 75 74 74 6f 6e 22 2c 4c 61 3a 5b 22 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 65 78 70 61 6e 64 2d 77 61 74 63 68 2d 70 61 67 65 2d 62 75 74 74 6f 6e 22 2c 22 79 74 70 2d 62 75 74 74 6f 6e 22 2c 22 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2d 74 6f 70 2d 6c 65 66 74 22 5d 2c 57 3a 7b 74 69 74 6c 65 3a 22 7b 7b 74 69 74 6c 65 7d 7d 22 2c 22 64 61 74 61 2d 74 6f 6f 6c 74 69 70 2d 74 61 72 67 65 74 2d 69 64 22 3a 22 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 65 78 70 61 6e 64 2d 77 61 74 Data Ascii: (function(g){var window=this;'use strict';var Vxb=function(a,b){g.W.call(this,{I:"button",La:["ytp-miniplayer-expand-watch-page-button","ytp-button","ytp-miniplayer-button-top-left"],W:{title:"{{title}}","data-tooltip-target-id":"ytp-miniplayer-expand-wat
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 2c 32 31 20 35 2c 32 31 20 4c 31 39 2c 32 31 20 43 32 30 2e 31 2c 32 31 20 32 31 2c 32 30 2e 31 20 32 31 2c 31 39 20 4c 32 31 2c 31 32 20 4c 31 39 2c 31 32 20 4c 31 39 2c 31 39 20 5a 20 4d 31 34 2c 33 20 4c 31 34 2c 35 20 4c 31 37 2e 35 39 2c 35 20 4c 37 2e 37 36 2c 31 34 2e 38 33 20 4c 39 2e 31 37 2c 31 36 2e 32 34 20 4c 31 39 2c 36 2e 34 31 20 4c 31 39 2c 31 30 20 4c 32 31 2c 31 30 20 4c 32 31 2c 33 20 4c 31 34 2c 33 20 5a 22 2c 66 69 6c 6c 3a 22 23 66 66 66 22 2c 22 66 69 6c 6c 2d 72 75 6c 65 22 3a 22 6e 6f 6e 7a 65 72 6f 22 7d 7d 5d 7d 5d 7d 5d 7d 5d 7d 29 3b 74 68 69 73 2e 4a 3d 61 3b 74 68 69 73 2e 6c 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 6f 6e 43 6c 69 63 6b 2c 74 68 69 73 29 3b 74 68 69 73 2e 75 70 64 61 74 65 56 61 6c 75 65 28 Data Ascii: ,21 5,21 L19,21 C20.1,21 21,20.1 21,19 L21,12 L19,12 L19,19 Z M14,3 L14,5 L17.59,5 L7.76,14.83 L9.17,16.24 L19,6.41 L19,10 L21,10 L21,3 L14,3 Z",fill:"#fff","fill-rule":"nonzero"}}]}]}]}]});this.J=a;this.listen("click",this.onClick,this);this.updateValue(
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 42 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 54 28 61 2e 65 6c 65 6d 65 6e 74 2c 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 53 55 29 3b 61 3d 6e 65 77 20 56 78 62 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 74 68 69 73 29 3b 67 2e 4d 28 74 68 69 73 2c 61 29 3b 61 2e 4b 61 28 74 68 69 73 2e 42 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 43 3d 6e 65 77 20 67 2e 57 28 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 63 6f 6e 74 72 6f 6c 73 22 7d 29 3b 67 2e 4d 28 74 68 69 73 2c 74 68 69 73 2e 43 29 3b 74 68 69 73 2e 43 2e 4b 61 28 74 68 69 73 2e 42 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 54 28 74 68 69 73 2e 43 2e 65 6c 65 6d 65 6e 74 2c 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 6e 30 29 3b 76 61 72 20 62 3d 6e 65 77 20 67 2e 57 Data Ascii: B.element);this.T(a.element,"click",this.SU);a=new Vxb(this.player,this);g.M(this,a);a.Ka(this.B.element);this.C=new g.W({I:"div",S:"ytp-miniplayer-controls"});g.M(this,this.C);this.C.Ka(this.B.element);this.T(this.C.element,"click",this.n0);var b=new g.W
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 65 6e 74 2c 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 59 62 61 29 3b 74 68 69 73 2e 54 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 22 70 72 65 73 65 6e 74 69 6e 67 70 6c 61 79 65 72 73 74 61 74 65 63 68 61 6e 67 65 22 2c 74 68 69 73 2e 7a 35 29 3b 74 68 69 73 2e 54 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 22 61 70 70 72 65 73 69 7a 65 22 2c 74 68 69 73 2e 6b 63 29 3b 0a 74 68 69 73 2e 54 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 22 66 75 6c 6c 73 63 72 65 65 6e 74 6f 67 67 6c 65 64 22 2c 74 68 69 73 2e 6b 63 29 3b 74 68 69 73 2e 6b 63 28 29 3b 74 68 69 73 2e 47 3d 21 30 7d 74 68 69 73 2e 70 6c 61 79 65 72 2e 67 65 74 50 6c 61 79 65 72 53 74 61 74 65 28 29 21 3d 3d 30 26 26 67 2e 57 2e 70 72 6f 74 6f 74 79 70 65 2e 73 68 6f 77 2e 63 61 6c 6c 28 74 68 69 73 29 3b 74 68 Data Ascii: ent,"click",this.Yba);this.T(this.player,"presentingplayerstatechange",this.z5);this.T(this.player,"appresize",this.kc);this.T(this.player,"fullscreentoggled",this.kc);this.kc();this.G=!0}this.player.getPlayerState()!==0&&g.W.prototype.show.call(this);th
2024-07-02 22:25:11 UTC	1199	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 6f 6f 6c 74 69 70 7d 3b 0a 67 2e 6b 2e 69 79 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 2c 65 29 7b 76 61 72 20 66 3d 30 2c 68 3d 64 3d 30 2c 6c 3d 67 2e 59 73 28 61 29 3b 69 66 28 62 29 7b 63 3d 67 2e 49 76 28 62 2c 22 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 22 29 7c 7c 67 2e 49 76 28 62 2c 22 79 74 70 2d 6e 65 78 74 2d 62 75 74 74 6f 6e 22 29 3b 76 61 72 20 6d 3d 67 2e 49 76 28 62 2c 22 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 22 29 2c 6e 3d 67 2e 49 76 28 62 2c 22 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 65 78 70 61 6e 64 2d 77 61 74 63 68 2d 70 61 67 65 2d 62 75 74 74 6f 6e 22 29 3b 63 3f 66 3d 68 3d 31 32 3a 6d 3f 28 62 3d 67 2e 57 73 28 62 2c 74 68 69 73 2e 65 6c 65 6d Data Ascii: tion(){return this.tooltip};g.k.iy=function(a,b,c,d,e){var f=0,h=d=0,l=g.Ys(a);if(b){c=g.Iv(b,"ytp-prev-button")\|\|g.Iv(b,"ytp-next-button");var m=g.Iv(b,"ytp-play-button"),n=g.Iv(b,"ytp-miniplayer-expand-watch-page-button");c?f=h=12:m?(b=g.Ws(b,this.elem

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.5	49781	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:11 UTC	1153	OUT	GET /s/player/71059424/player_ias.vflset/en_US/captions.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:11 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 73086 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 01 Jul 2024 16:09:33 GMT Expires: Tue, 01 Jul 2025 16:09:33 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 01 Jul 2024 04:13:06 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 108938 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:11 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6a 34 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 69 73 41 63 74 69 76 65 28 29 7c 7c 61 2e 73 74 61 72 74 28 29 7d 2c 71 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 3f 61 2e 63 61 70 74 69 6f 6e 73 49 6e 69 74 69 61 6c 53 74 61 74 65 3a 22 43 41 50 54 49 4f 4e 53 5f 49 4e 49 54 49 41 4c 5f 53 54 41 54 45 5f 55 4e 4b 4e 4f 57 4e 22 7d 2c 72 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 6e 65 77 20 67 2e 53 52 3b 0a 63 2e 6c 61 6e 67 75 61 67 65 43 6f 64 65 3d 61 2e 6c 61 6e 67 75 61 67 65 43 6f 64 65 3b 63 2e 6c 61 6e 67 75 61 67 65 4e 61 6d 65 3d 61 2e 6c 61 6e 67 Data Ascii: (function(g){var window=this;'use strict';var j4=function(a){a.isActive()\|\|a.start()},qsb=function(a,b){return b?a.captionsInitialState:"CAPTIONS_INITIAL_STATE_UNKNOWN"},rsb=function(a,b){var c=new g.SR;c.languageCode=a.languageCode;c.languageName=a.lang
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 6e 73 22 2c 63 29 29 7d 29 7d 2c 74 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 73 73 62 28 61 2c 62 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 26 26 63 28 64 2e 74 72 61 63 6b 44 61 74 61 2c 6e 65 77 20 67 2e 53 52 28 64 2e 6d 65 74 61 64 61 74 61 29 29 7d 29 7d 2c 77 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 75 73 62 2e 74 65 73 74 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 27 22 2b 61 2b 22 27 20 69 73 20 6e 6f 74 20 61 20 76 61 6c 69 64 20 68 65 78 20 63 6f 6c 6f 72 22 29 3b 0a 61 2e 6c 65 6e 67 74 68 3d 3d 34 26 26 28 61 3d 61 2e 72 65 70 6c 61 63 65 28 76 73 62 2c 22 23 24 31 24 31 24 32 24 32 24 33 24 33 22 29 29 3b 61 3d 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 61 3d 70 61 72 73 65 49 6e Data Ascii: ns",c))})},tsb=function(a,b,c){ssb(a,b).then(function(d){d&&c(d.trackData,new g.SR(d.metadata))})},wsb=function(a){if(!usb.test(a))throw Error("'"+a+"' is not a valid hex color");a.length==4&&(a=a.replace(vsb,"#$1$1$2$2$3$3"));a=a.toLowerCase();a=parseIn
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 2e 64 5a 29 28 5b 31 32 30 2c 30 5d 29 3b 65 26 26 67 2e 52 4e 28 65 2c 67 2e 4c 51 61 29 3b 64 2e 70 6f 73 74 42 6f 64 79 3d 66 7d 61 2e 47 26 26 28 64 2e 72 65 73 70 6f 6e 73 65 54 79 70 65 3d 22 61 72 72 61 79 62 75 66 66 65 72 22 29 3b 61 2e 43 3d 67 2e 4a 41 28 63 2c 64 2c 33 2c 31 30 30 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 61 3a 7b 68 3d 68 2e 78 68 72 3b 61 2e 4e 61 28 29 3b 69 66 28 61 2e 42 29 7b 76 61 72 20 6c 3d 21 28 61 2e 47 3f 68 2e 72 65 73 70 6f 6e 73 65 3a 68 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 7c 7c 68 2e 73 74 61 74 75 73 3e 3d 34 30 30 2c 6d 3d 67 2e 47 54 61 28 68 29 3b 69 66 28 6d 29 7b 68 3d 67 2e 67 51 28 61 2e 42 2c 61 2e 70 6f 6c 69 63 79 2c 7b 7d 29 3b 61 2e 42 2e 72 6c 28 68 2c 6d 29 3b 42 73 62 28 61 Data Ascii: .dZ)([120,0]);e&&g.RN(e,g.LQa);d.postBody=f}a.G&&(d.responseType="arraybuffer");a.C=g.JA(c,d,3,100).then(function(h){a:{h=h.xhr;a.Na();if(a.B){var l=!(a.G?h.response:h.responseText)\|\|h.status>=400,m=g.GTa(h);if(m){h=g.gQ(a.B,a.policy,{});a.B.rl(h,m);Bsb(a
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 3a 6e 75 6c 6c 7d 2c 46 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 5b 5d 2c 65 3b 0a 66 6f 72 28 65 20 69 6e 20 61 2e 6a 2e 6a 29 69 66 28 61 2e 6a 2e 6a 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 29 7b 76 61 72 20 66 3d 61 2e 6a 2e 6a 5b 65 5d 3b 69 66 28 67 2e 74 30 61 28 66 2c 63 7c 7c 6e 75 6c 6c 29 29 7b 76 61 72 20 68 3d 66 2e 69 6e 66 6f 2e 63 61 70 74 69 6f 6e 54 72 61 63 6b 3b 68 26 26 68 2e 6c 61 6e 67 75 61 67 65 43 6f 64 65 3d 3d 3d 62 26 26 64 2e 70 75 73 68 28 66 29 7d 7d 72 65 74 75 72 6e 20 64 2e 6c 65 6e 67 74 68 3f 64 5b 30 5d 3a 6e 75 6c 6c 7d 2c 47 73 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 3b 0a 61 3d 61 3d 3d 3d 76 6f 69 64 20 30 3f 7b 7d 3a 61 3b 76 61 72 Data Ascii: :null},Fsb=function(a,b,c){var d=[],e;for(e in a.j.j)if(a.j.j.hasOwnProperty(e)){var f=a.j.j[e];if(g.t0a(f,c\|\|null)){var h=f.info.captionTrack;h&&h.languageCode===b&&d.push(f)}}return d.length?d[0]:null},Gsb=function(){var a=void 0;a=a===void 0?{}:a;var
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 2e 38 20 38 2e 34 71 2e 38 35 2e 38 35 2e 38 35 20 32 2e 31 74 2d 2e 38 35 20 32 2e 31 4c 31 32 2e 34 20 34 32 5a 6d 33 33 2e 35 2d 33 31 2e 35 35 4c 33 37 2e 34 35 20 38 2e 34 5a 6d 2d 34 2e 30 35 20 34 2e 33 2d 31 2e 31 2d 31 2e 31 2d 31 2e 31 2d 31 2e 31 20 32 2e 32 20 32 2e 32 5a 22 7d 7d 5d 7d 5d 7d 29 3b 67 2e 57 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 63 61 70 74 69 6f 6e 2d 77 69 6e 64 6f 77 22 2c 57 3a 7b 69 64 3a 22 63 61 70 74 69 6f 6e 2d 77 69 6e 64 6f 77 2d 22 2b 61 2e 69 64 2c 64 69 72 3a 74 3f 22 72 74 6c 22 3a 22 6c 74 72 22 2c 74 61 62 69 6e 64 65 78 3a 22 30 22 2c 6c 61 6e 67 3a 71 2e 6c 61 6e 67 7d 2c 56 3a 75 7d 29 3b 76 61 72 20 46 3d 0a 74 68 69 73 3b 74 68 69 73 2e 4b 3d 5b 5d 3b 74 68 69 73 2e 47 61 3d Data Ascii: .8 8.4q.85.85.85 2.1t-.85 2.1L12.4 42Zm33.5-31.55L37.45 8.4Zm-4.05 4.3-1.1-1.1-1.1-1.1 2.2 2.2Z"}}]}]});g.W.call(this,{I:"div",S:"caption-window",W:{id:"caption-window-"+a.id,dir:t?"rtl":"ltr",tabindex:"0",lang:q.lang},V:u});var F=this;this.K=[];this.Ga=
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 2e 6a 2e 71 6d 29 7b 63 61 73 65 20 30 3a 63 61 73 65 20 31 3a 63 61 73 65 20 32 3a 67 2e 4a 76 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 22 79 74 70 2d 63 61 70 74 69 6f 6e 2d 77 69 6e 64 6f 77 2d 74 6f 70 22 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 36 3a 63 61 73 65 20 37 3a 63 61 73 65 20 38 3a 67 2e 4a 76 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 22 79 74 70 2d 63 61 70 74 69 6f 6e 2d 77 69 6e 64 6f 77 2d 62 6f 74 74 6f 6d 22 29 7d 7d 2c 4b 73 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 22 76 65 72 74 69 63 61 6c 2d 72 6c 22 3b 0a 61 2e 6a 2e 4c 54 3d 3d 3d 31 26 26 28 63 3d 22 76 65 72 74 69 63 61 6c 2d 6c 72 22 29 3b 67 2e 4f 73 26 26 28 63 3d 63 3d 3d 3d 22 76 65 72 74 69 63 61 6c 2d 6c 72 22 3f 22 74 62 2d 6c 72 22 3a 22 74 62 Data Ascii: .j.qm){case 0:case 1:case 2:g.Jv(this.element,"ytp-caption-window-top");break;case 6:case 7:case 8:g.Jv(this.element,"ytp-caption-window-bottom")}},Ksb=function(a,b){var c="vertical-rl";a.j.LT===1&&(c="vertical-lr");g.Os&&(c=c==="vertical-lr"?"tb-lr":"tb
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 31 29 2c 71 3d 4d 61 74 68 2e 6d 61 78 28 35 2a 6c 2c 31 29 3b 64 3d 5b 5d 3b 73 77 69 74 63 68 28 66 29 7b 63 61 73 65 20 34 3a 66 6f 72 28 3b 70 3c 3d 71 3b 70 2b 3d 6c 29 64 2e 70 75 73 68 28 6e 2b 22 70 78 20 22 2b 6e 2b 22 70 78 20 22 2b 70 2b 22 70 78 20 22 2b 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 31 3a 6e 3d 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 3e 3d 32 3f 2e 35 3a 31 3b 66 6f 72 28 66 3d 6d 3b 66 3c 3d 70 3b 66 2b 3d 6e 29 64 2e 70 75 73 68 28 66 2b 22 70 78 20 22 2b 66 2b 22 70 78 20 22 2b 65 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 64 2e 70 75 73 68 28 6d 2b 22 70 78 20 22 2b 6d 2b 22 70 78 20 22 2b 68 29 3b 64 2e 70 75 73 68 28 22 2d 22 2b 6d 2b 22 70 78 20 2d 22 2b 6d 2b 22 70 78 20 22 2b 65 29 3b 62 72 Data Ascii: 1),q=Math.max(5*l,1);d=[];switch(f){case 4:for(;p<=q;p+=l)d.push(n+"px "+n+"px "+p+"px "+e);break;case 1:n=window.devicePixelRatio>=2?.5:1;for(f=m;f<=p;f+=n)d.push(f+"px "+f+"px "+e);break;case 2:d.push(m+"px "+m+"px "+h);d.push("-"+m+"px -"+m+"px "+e);br
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 64 65 6e 22 29 3b 62 2e 65 5a 3d 3d 3d 31 26 26 61 2e 43 26 26 28 63 5b 22 74 65 78 74 2d 63 6f 6d 62 69 6e 65 2d 75 70 72 69 67 68 74 22 5d 3d 22 61 6c 6c 22 2c 63 5b 22 74 65 78 74 2d 6f 72 69 65 6e 74 61 74 69 6f 6e 22 5d 3d 22 6d 69 78 65 64 22 2c 65 3d 67 2e 47 52 7c 7c 67 2e 63 43 2c 61 2e 42 2e 70 61 72 61 6d 73 2e 4d 69 3d 3d 3d 33 3f 63 2e 74 72 61 6e 73 66 6f 72 6d 3d 65 3f 22 72 6f 74 61 74 65 28 39 30 64 65 67 29 22 3a 22 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 22 3a 65 26 26 28 63 2e 74 72 61 6e 73 66 6f 72 6d 3d 22 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 22 29 29 3b 69 66 28 62 2e 55 6f 3d 3d 3d 31 7c 7c 62 2e 55 6f 3d 3d 3d 32 7c 7c 62 2e 55 6f 3d 3d 3d 33 7c 7c 62 2e 55 6f 3d 3d 3d 34 7c 7c 62 2e 55 6f 3d 3d 3d 35 29 69 66 28 67 2e 47 Data Ascii: den");b.eZ===1&&a.C&&(c["text-combine-upright"]="all",c["text-orientation"]="mixed",e=g.GR\|\|g.cC,a.B.params.Mi===3?c.transform=e?"rotate(90deg)":"rotate(180deg)":e&&(c.transform="rotate(-90deg)"));if(b.Uo===1\|\|b.Uo===2\|\|b.Uo===3\|\|b.Uo===4\|\|b.Uo===5)if(g.G
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 61 2c 64 29 2c 66 3d 74 79 70 65 6f 66 20 62 2e 74 65 78 74 3d 3d 3d 22 73 74 72 69 6e 67 22 2c 68 3d 66 3f 62 2e 74 65 78 74 2e 73 70 6c 69 74 28 22 5c 6e 22 29 3a 5b 62 2e 74 65 78 74 5d 2c 6c 3d 30 3b 6c 3c 68 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 7b 76 61 72 20 6d 3d 6c 3e 30 7c 7c 21 62 2e 61 70 70 65 6e 64 2c 6e 3d 68 5b 6c 5d 3b 6d 26 26 21 63 3f 28 4d 73 62 28 61 29 2c 65 3d 4e 73 62 28 61 2c 64 29 29 3a 6d 26 26 63 26 26 28 63 3d 21 31 29 3b 6e 26 26 28 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 66 3f 67 2e 43 66 28 6e 29 3a 6e 29 2c 66 7c 7c 6e 2e 74 61 67 4e 61 6d 65 21 3d 3d 22 52 55 42 59 22 7c 7c 6e 2e 63 68 69 6c 64 45 6c 65 6d 65 6e 74 43 6f 75 6e 74 21 3d 3d 34 7c 7c 67 2e 47 52 7c 7c 21 67 2e 50 73 28 6e 2e 63 68 69 6c 64 72 65 6e 5b 32 5d Data Ascii: a,d),f=typeof b.text==="string",h=f?b.text.split("\n"):[b.text],l=0;l<h.length;l++){var m=l>0\|\|!b.append,n=h[l];m&&!c?(Msb(a),e=Nsb(a,d)):m&&c&&(c=!1);n&&(e.appendChild(f?g.Cf(n):n),f\|\|n.tagName!=="RUBY"\|\|n.childElementCount!==4\|\|g.GR\|\|!g.Ps(n.children[2]
2024-07-02 22:25:11 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 29 7b 74 68 69 73 2e 74 69 6d 65 73 74 61 6d 70 3d 74 68 69 73 2e 6a 3d 30 7d 2c 71 34 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 44 3d 61 3b 0a 74 68 69 73 2e 42 3d 5b 5d 3b 74 68 69 73 2e 6a 3d 74 68 69 73 2e 63 6f 6c 3d 74 68 69 73 2e 72 6f 77 3d 30 3b 74 68 69 73 2e 73 74 79 6c 65 3d 6e 65 77 20 6f 34 3b 66 6f 72 28 61 3d 74 68 69 73 2e 43 3d 30 3b 61 3c 3d 31 35 3b 61 2b 2b 29 7b 74 68 69 73 2e 42 5b 61 5d 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 62 3d 30 3b 62 3c 3d 33 32 3b 62 2b 2b 29 74 68 69 73 2e 42 5b 61 5d 5b 62 5d 3d 6e 65 77 20 57 73 62 7d 7d 2c 72 34 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 2e 73 74 79 6c 65 2e 74 79 70 65 3d 3d 3d 33 29 7b 66 6f 72 28 76 61 72 20 63 3d 30 2c 64 3d 30 2c 65 3d 61 2e 44 Data Ascii: tion(){this.timestamp=this.j=0},q4=function(a){this.D=a;this.B=[];this.j=this.col=this.row=0;this.style=new o4;for(a=this.C=0;a<=15;a++){this.B[a]=[];for(var b=0;b<=32;b++)this.B[a][b]=new Wsb}},r4=function(a,b){if(a.style.type===3){for(var c=0,d=0,e=a.D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.5	49780	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:11 UTC	1154	OUT	GET /s/player/71059424/player_ias.vflset/en_US/endscreen.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D
2024-07-02 22:25:12 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 34410 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 01 Jul 2024 16:09:33 GMT Expires: Tue, 01 Jul 2025 16:09:33 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 01 Jul 2024 04:13:06 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 108938 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:12 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 4c 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 6a 62 28 22 6f 6e 41 75 74 6f 6e 61 76 43 6f 75 6e 64 6f 77 6e 53 74 61 72 74 65 64 22 2c 62 29 7d 2c 69 36 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 67 2e 4e 76 28 61 2e 65 6c 65 6d 65 6e 74 2c 22 79 74 70 2d 73 75 67 67 65 73 74 69 6f 6e 2d 73 65 74 22 2c 21 21 62 2e 76 69 64 65 6f 49 64 29 3b 0a 76 61 72 20 64 3d 62 2e 70 6c 61 79 6c 69 73 74 49 64 3b 63 3d 62 2e 67 68 28 63 3f 63 3a 22 6d 71 64 65 66 61 75 6c 74 2e 6a 70 67 22 29 3b 76 61 72 20 65 3d 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 3b 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 2e 63 53 26 26 28 62 Data Ascii: (function(g){var window=this;'use strict';var Lwb=function(a,b){a.jb("onAutonavCoundownStarted",b)},i6=function(a,b,c){g.Nv(a.element,"ytp-suggestion-set",!!b.videoId);var d=b.playlistId;c=b.gh(c?c:"mqdefault.jpg");var e=null,f=null;b instanceof g.cS&&(b
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 74 63 68 20 24 54 49 54 4c 45 22 2c 7b 54 49 54 4c 45 3a 62 2e 74 69 74 6c 65 7d 29 2c 64 75 72 61 74 69 6f 6e 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 66 2c 75 72 6c 3a 62 2e 71 6c 28 29 2c 69 73 5f 6c 69 76 65 3a 6c 2c 69 73 5f 75 70 63 6f 6d 69 6e 67 3a 6d 2c 69 73 5f 6c 69 73 74 3a 68 2c 69 73 5f 6d 69 78 3a 64 2c 62 61 63 6b 67 72 6f 75 6e 64 3a 63 3f 22 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2b 63 2b 22 29 22 3a 22 22 2c 76 69 65 77 73 5f 61 6e 64 5f 70 75 62 6c 69 73 68 5f 74 69 6d 65 3a 74 2e 6a 6f 69 6e 28 22 20 5c 75 32 30 32 32 20 22 29 2c 61 75 74 6f 70 6c 61 79 41 6c 74 65 72 6e 61 74 69 76 65 48 65 61 64 65 72 3a 62 2e 6e 74 7d 3b 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 67 2e 62 53 26 26 28 63 2e 70 6c 61 79 6c 69 Data Ascii: tch $TITLE",{TITLE:b.title}),duration:e,timestamp:f,url:b.ql(),is_live:l,is_upcoming:m,is_list:h,is_mix:d,background:c?"background-image: url("+c+")":"",views_and_publish_time:t.join(" \u2022 "),autoplayAlternativeHeader:b.nt};b instanceof g.bS&&(c.playli
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 6b 29 3b 74 68 69 73 2e 6c 69 73 74 65 6e 28 22 6b 65 79 70 72 65 73 73 22 2c 74 68 69 73 2e 6f 6e 4b 65 79 50 72 65 73 73 29 7d 2c 6b 36 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 62 3d 62 3d 3d 3d 76 6f 69 64 20 30 3f 21 31 3a 62 3b 0a 67 2e 57 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 63 6f 75 6e 74 64 6f 77 6e 2d 6f 76 65 72 6c 61 79 22 7d 29 3b 76 61 72 20 63 3d 74 68 69 73 3b 74 68 69 73 2e 4b 3d 62 3b 74 68 69 73 2e 63 61 6e 63 65 6c 43 6f 6d 6d 61 6e 64 3d 74 68 69 73 2e 47 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 43 3d 30 3b 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 3d 6e 65 77 20 67 2e 57 28 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e Data Ascii: k);this.listen("keypress",this.onKeyPress)},k6=function(a,b){b=b===void 0?!1:b;g.W.call(this,{I:"div",S:"ytp-autonav-endscreen-countdown-overlay"});var c=this;this.K=b;this.cancelCommand=this.G=void 0;this.C=0;this.container=new g.W({I:"div",S:"ytp-auton
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 65 22 2c 78 61 3a 22 7b 7b 74 69 74 6c 65 7d 7d 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 65 6e 64 73 63 72 65 65 6e 2d 75 70 6e 65 78 74 2d 61 75 74 68 6f 72 22 2c 78 61 3a 22 7b 7b 61 75 74 68 6f 72 7d 7d 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 76 69 65 77 2d 61 6e 64 2d 64 61 74 65 22 2c 78 61 3a 22 7b 7b 76 69 65 77 73 5f 61 6e 64 5f 70 75 62 6c 69 73 68 5f 74 69 6d 65 7d 7d 22 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 61 75 74 68 6f 72 2d 61 6e 64 2d 76 69 65 77 22 2c 78 61 3a 22 7b 7b 61 75 74 68 6f 72 5f 61 6e 64 5f 76 69 65 77 73 7d 7d 22 7d 5d 7d 5d 7d 5d 7d 29 3b 0a 67 2e 4d 28 74 68 69 73 2c 74 68 69 73 2e 6a 29 3b 74 68 69 73 2e Data Ascii: e",xa:"{{title}}"},{I:"div",S:"ytp-autonav-endscreen-upnext-author",xa:"{{author}}"},{I:"div",S:"ytp-autonav-view-and-date",xa:"{{views_and_publish_time}}"},{I:"div",S:"ytp-autonav-author-and-view",xa:"{{author_and_views}}"}]}]}]});g.M(this,this.j);this.
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 22 2c 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 50 6c 61 79 20 6e 65 78 74 20 76 69 64 65 6f 22 7d 2c 78 61 3a 22 50 6c 61 79 20 4e 6f 77 22 7d 29 3b 67 2e 4d 28 74 68 69 73 2c 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 29 3b 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 2e 4b 61 28 74 68 69 73 2e 42 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 2e 6c 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 4f 55 2c 74 68 69 73 29 3b 74 68 69 73 2e 4a 2e 4c 28 22 77 65 62 5f 70 6c 61 79 65 72 5f 61 75 74 6f 6e 61 76 5f 6e 65 78 74 5f 62 75 74 74 6f 6e 5f 72 65 6e 64 65 72 65 72 22 29 3f 28 74 68 69 73 2e 4a 2e 63 72 65 61 74 65 53 65 72 76 65 72 56 65 28 74 68 69 73 2e 70 6c 61 79 42 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 2c Data Ascii: ","aria-label":"Play next video"},xa:"Play Now"});g.M(this,this.playButton);this.playButton.Ka(this.B.element);this.playButton.listen("click",this.OU,this);this.J.L("web_player_autonav_next_button_renderer")?(this.J.createServerVe(this.playButton.element,
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 74 72 61 6e 73 69 74 69 6f 6e 73 22 2c 51 77 62 28 61 29 29 7d 7d 2c 4e 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 50 77 62 28 61 29 2c 63 3d 4d 61 74 68 2c 64 3d 63 2e 6d 69 6e 3b 0a 76 61 72 20 65 3d 61 2e 43 3f 44 61 74 65 2e 6e 6f 77 28 29 2d 61 2e 43 3a 30 3b 63 3d 64 2e 63 61 6c 6c 28 63 2c 65 2c 62 29 3b 4f 77 62 28 61 2c 4d 61 74 68 2e 63 65 69 6c 28 28 62 2d 63 29 2f 31 45 33 29 29 3b 62 2d 63 3c 3d 35 30 30 26 26 61 2e 78 6c 28 29 3f 61 2e 73 65 6c 65 63 74 28 21 30 29 3a 61 2e 78 6c 28 29 26 26 61 2e 44 2e 73 74 61 72 74 28 29 7d 2c 50 77 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 2e 4a 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 28 29 29 7b 76 61 72 20 62 3b 0a 61 3d 28 62 3d 61 2e 4a 2e 67 65 74 56 69 64 65 6f 44 61 Data Ascii: transitions",Qwb(a))}},Nwb=function(a){var b=Pwb(a),c=Math,d=c.min;var e=a.C?Date.now()-a.C:0;c=d.call(c,e,b);Owb(a,Math.ceil((b-c)/1E3));b-c<=500&&a.xl()?a.select(!0):a.xl()&&a.D.start()},Pwb=function(a){if(a.J.isFullscreen()){var b;a=(b=a.J.getVideoDa
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 22 61 72 69 61 2d 6c 61 62 65 6c 22 3a 22 7b 7b 61 72 69 61 5f 6c 61 62 65 6c 7d 7d 22 7d 2c 56 3a 5b 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 75 65 64 2d 74 68 75 6d 62 6e 61 69 6c 2d 6f 76 65 72 6c 61 79 2d 69 6d 61 67 65 22 2c 57 3a 7b 73 74 79 6c 65 3a 22 7b 7b 62 61 63 6b 67 72 6f 75 6e 64 7d 7d 22 7d 7d 2c 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 74 2d 74 6f 70 22 2c 56 3a 5b 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 74 2d 68 65 61 64 65 72 22 2c 78 61 3a 22 55 70 20 4e 65 78 74 22 7d 2c 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 74 2d 74 69 74 6c 65 22 2c 78 61 3a 22 7b 7b 74 69 74 6c 65 7d 7d 22 7d 2c 7b 49 3a 22 73 70 61 6e 22 2c 53 3a 22 79 74 70 2d 75 70 6e 65 78 Data Ascii: "aria-label":"{{aria_label}}"},V:[{I:"div",S:"ytp-cued-thumbnail-overlay-image",W:{style:"{{background}}"}},{I:"span",S:"ytp-upnext-top",V:[{I:"span",S:"ytp-upnext-header",xa:"Up Next"},{I:"span",S:"ytp-upnext-title",xa:"{{title}}"},{I:"span",S:"ytp-upnex
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 2e 6c 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 6f 35 2c 74 68 69 73 29 3b 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 2e 4b 61 28 62 29 3b 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 26 26 74 68 69 73 2e 61 70 69 2e 63 72 65 61 74 65 43 6c 69 65 6e 74 56 65 28 74 68 69 73 2e 63 61 6e 63 65 6c 42 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 2c 0a 74 68 69 73 2c 31 31 35 31 32 39 29 3b 67 2e 4d 28 74 68 69 73 2c 74 68 69 73 2e 44 29 3b 74 68 69 73 2e 61 70 69 2e 63 72 65 61 74 65 43 6c 69 65 6e 74 56 65 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 2c 74 68 69 73 2c 31 38 37 38 38 29 3b 62 3d 74 68 69 73 2e 46 61 28 22 79 74 70 2d 75 70 6e 65 78 74 2d 61 75 74 6f 70 6c 61 79 2d 69 63 6f 6e 22 29 3b 74 68 69 73 2e 54 28 62 2c 22 63 6c 69 63 Data Ascii: .listen("click",this.o5,this);this.cancelButton.Ka(b);this.cancelButton&&this.api.createClientVe(this.cancelButton.element,this,115129);g.M(this,this.D);this.api.createClientVe(this.element,this,18788);b=this.Fa("ytp-upnext-autoplay-icon");this.T(b,"clic
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 74 61 28 29 2e 55 66 3f 74 68 69 73 2e 6a 3d 74 68 69 73 2e 42 3a 28 74 68 69 73 2e 6a 3d 6e 65 77 20 6e 36 28 61 29 2c 67 2e 47 54 28 74 68 69 73 2e 70 6c 61 79 65 72 2c 74 68 69 73 2e 6a 2e 65 6c 65 6d 65 6e 74 2c 34 29 2c 67 2e 4d 28 74 68 69 73 2c 74 68 69 73 2e 6a 29 29 3b 74 68 69 73 2e 6f 76 65 72 6c 61 79 3d 6e 65 77 20 67 2e 57 28 7b 49 3a 22 64 69 76 22 2c 0a 53 3a 22 79 74 70 2d 61 75 74 6f 6e 61 76 2d 6f 76 65 72 6c 61 79 2d 63 61 6e 63 65 6c 6c 65 64 2d 73 74 61 74 65 22 7d 29 3b 67 2e 4d 28 74 68 69 73 2c 74 68 69 73 2e 6f 76 65 72 6c 61 79 29 3b 74 68 69 73 2e 6f 76 65 72 6c 61 79 2e 4b 61 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 74 68 69 73 2e 44 3d 6e 65 77 20 67 2e 4d 4a 28 74 68 69 73 29 3b 67 2e 4d 28 74 68 69 73 2c 74 68 69 73 2e Data Ascii: ta().Uf?this.j=this.B:(this.j=new n6(a),g.GT(this.player,this.j.element,4),g.M(this,this.j));this.overlay=new g.W({I:"div",S:"ytp-autonav-overlay-cancelled-state"});g.M(this,this.overlay);this.overlay.Ka(this.element);this.D=new g.MJ(this);g.M(this,this.
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 22 7d 5d 7d 5d 7d 29 3b 67 2e 4d 28 74 68 69 73 2c 74 68 69 73 2e 6a 29 3b 74 68 69 73 2e 6a 2e 4b 61 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 76 61 72 20 62 3d 61 2e 67 65 74 56 69 64 65 6f 44 61 74 61 28 29 3b 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 3d 6e 65 77 20 67 2e 57 56 28 22 53 75 62 73 63 72 69 62 65 22 2c 6e 75 6c 6c 2c 22 55 6e 73 75 62 73 63 72 69 62 65 22 2c 6e 75 6c 6c 2c 21 30 2c 21 31 2c 62 2e 50 6c 2c 62 2e 73 75 62 73 63 72 69 62 65 64 2c 22 74 72 61 69 6c 65 72 2d 65 6e 64 73 63 72 65 65 6e 22 2c 6e 75 6c 6c 2c 61 2c 21 31 29 3b 67 2e 4d 28 74 68 69 73 2c 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 29 3b 74 68 69 73 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 Data Ascii: ton-container"}]}]});g.M(this,this.j);this.j.Ka(this.element);var b=a.getVideoData();this.subscribeButton=new g.WV("Subscribe",null,"Unsubscribe",null,!0,!1,b.Pl,b.subscribed,"trailer-endscreen",null,a,!1);g.M(this,this.subscribeButton);this.subscribeButt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.5	49785	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:11 UTC	1138	OUT	GET /sb/dQw4w9WgXcQ/storyboard3_L1/M0.jpg?sqp=-oaymwENSDfyq4qpAwVwAcABBqLzl_8DBginqfCoBg==&sigh=rs%24AOn4CLBDzoUQQHE8XWHw2U31Ra19yy-sOg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:12 UTC	681	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 39394 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 19:51:08 GMT Expires: Wed, 03 Jul 2024 01:51:08 GMT Cache-Control: public, max-age=21600 ETag: "1696339111151110" Content-Type: image/webp Age: 9244 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:12 UTC	709	IN	Data Raw: 52 49 46 46 da 99 00 00 57 45 42 50 56 50 38 20 ce 99 00 00 f0 db 02 9d 01 2a 20 03 c2 01 3e c1 58 a4 4e a7 a4 a3 2f a8 32 bb b1 f0 18 09 4d af 38 c3 5f 4c 72 a3 af 37 e6 fc ed 67 33 f3 76 e1 42 f8 20 d4 41 6e d2 3d 9a 96 4c 9c 0f fc a7 cc 03 92 eb c6 7a e7 cb ab d3 ea 57 bb 49 61 e4 7f 50 ff bd 2a a7 fc 76 d7 ee cf 66 9e ac bf a7 ff f3 f5 8a f4 ad a3 ab 74 03 a6 a3 d7 d7 20 2b 23 7f 0a fc df c6 e7 57 bf 6f d2 67 34 f6 bd f7 bd 39 3f e9 f8 7b fb 2f 89 07 ea bb c7 bc 6f 99 95 af df f6 7a 85 f7 03 d8 23 cc df 1d ef bd 7a 87 7f 33 ff 5b e9 81 ab 37 d6 b4 e3 1a 5d ea de 52 98 03 33 4e 47 f2 15 b3 79 1c d7 69 59 03 ff 49 d7 62 1a da ca 74 80 d4 d2 e4 ce 8c 61 6d 58 ee d8 4b c3 c3 fe 18 58 8b 12 0b df 25 6e 59 b6 0a 4f 66 af 5b 6d f3 ad 0e a6 4c 0d 47 d4 57 2f Data Ascii: RIFFWEBPVP8 * >XN/2M8_Lr7g3vB An=LzWIaP*vft +#Wog49?{/oz#z3[7]R3NGyiYIbtamXKX%nYOf[mLGW/
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 9b e8 05 3b f0 f9 7b c5 fb 51 ff a6 87 68 d1 cd d5 a6 14 45 30 2d 06 85 19 c8 74 fb 48 ee 17 08 3b aa 6f dd 7c f0 c2 fe 71 9d e0 0c 53 74 b9 f7 f0 77 a3 76 03 34 85 8d 9c ca c7 3b b0 fb ee c5 1b e0 60 08 26 c7 aa fd 30 b8 c0 5b 5b a1 b8 c8 14 83 ae 34 c9 79 3c d0 b7 e2 96 8e f6 b9 26 f4 2d 85 6d a3 55 e4 24 10 e8 24 bf 5b c3 78 8c e1 aa 6d d8 60 e0 06 f0 25 d6 cd d8 53 9a 55 92 c4 7e ad 40 86 d6 eb bb 42 85 21 20 aa 91 85 da 24 41 ac 64 d2 85 fe f3 c1 fc 7c 33 8f e8 62 e4 2c 7c d4 c3 2a 62 df e5 97 2b fc 52 b5 ee 93 9a 87 b7 e4 06 c0 be ed dc c7 e0 c5 a7 f8 f1 91 b6 fa e1 85 e3 5b 47 4f 4e ca 18 b0 20 d6 f3 81 61 ea be 18 4e f2 de 9c 79 43 0e 49 89 7c f8 fd 6d 23 e0 f0 45 b8 af 43 85 d5 ba 69 c4 d5 88 07 ad 8a 6f 47 34 53 81 40 89 d0 b9 b7 4b 30 e4 23 36 Data Ascii: ;{QhE0-tH;o\|qStwv4;`&0[[4y<&-mU$$[xm`%SU~@B! $Ad\|3b,\|*b+R[GON aNyCI\|m#ECioG4S@K0#6
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: ce 37 74 b5 d8 c2 37 43 79 dd e6 44 45 ed d5 ea a3 28 a5 bf 8a 5c dd c2 9c c8 9a e7 c7 ee ec 79 77 f9 f3 ed ce 37 d1 33 73 95 56 dc 4e 42 ff 52 07 3c bb 8a e4 97 75 5b 1a ed e5 06 2d 87 aa e3 b1 d4 73 6b 82 bc 36 2c 7d 1c a3 64 60 c9 17 65 cd c6 38 44 3c 96 26 d3 2b 87 4d db 05 41 f2 fb ff 4e e3 ef 1d 9d ee 33 a1 2e 5f 34 36 aa 6f 4b 8f 45 f5 9e 25 40 e6 34 0e 7c ea 39 51 0b df 1a 18 cb f7 22 1b e4 db 8b d4 b1 58 20 34 ab 22 74 53 13 26 7a 26 a2 5d 40 9b 01 25 a6 7e 39 09 79 d3 93 20 c6 33 b8 6d 90 d9 b1 59 6e 0b b0 94 69 5f e9 83 d7 0b 66 78 3b 88 ec e8 c8 ef 22 7f 30 57 79 7a df 75 7b b9 52 9c 3c 88 bc 15 79 c9 9f cc 96 08 f0 03 7d 6c 9f ec 52 c6 fa 97 bd bb 4b d8 a3 bc 4b f1 8a b3 bc e4 d8 93 16 82 44 02 a6 b9 6b d0 34 8f 5d 5c 08 e6 bc 5b 1b 63 1e 2e Data Ascii: 7t7CyDE(\yw73sVNBR<u[-sk6,}d`e8D<&+MAN3._46oKE%@4\|9Q"X 4"tS&z&]@%~9y 3mYni_fx;"0Wyzu{R<y}lRKKDk4]\[c.
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 20 59 3c cc 93 af 91 43 fe da 1b 6b ff dc 90 b1 6a 3a 8f f2 29 e9 32 5d 5b 26 98 55 91 d2 bc c9 e7 3f 83 f6 6a b1 d9 26 0f 8b 6b 0b 80 1d e6 53 3f 61 6d 64 0f 82 8e c2 26 0b 5c dd 86 0f db 70 6e fa 26 74 68 91 ce 4d 10 9b 59 c3 51 3f 09 d8 61 ac b2 52 dd e5 6f 22 a3 a3 5f af 7f 92 e5 38 93 71 db 8e de f6 77 14 cc 85 1f 6a 38 5d 73 2c a8 6d 92 88 d8 e8 bc 66 18 9f a8 37 0c df a8 31 d6 3c 5e d4 6a 07 83 bb f6 b0 70 f6 84 d5 f8 26 50 3c c9 8a 98 af 00 22 16 c6 30 de 94 4e 07 90 1b f2 f1 f9 7b f8 24 9a a5 4b a7 be bb 6e de 13 ee 3d 17 ab 5b 7c d6 98 69 16 50 42 1e c1 9f d6 40 2a ac 2f 20 06 09 fb 2f cf e6 9d 31 d2 15 c6 db 79 51 5c c0 16 11 d8 71 90 14 a4 a9 82 ff 1b d4 12 d4 d4 83 59 f0 d8 e6 dc 75 b2 eb 1c 9f 32 1d 4d 29 27 25 4f fa 92 52 21 74 ea b2 10 2b Data Ascii: Y<Ckj:)2][&U?j&kS?amd&\pn&thMYQ?aRo"_8qwj8]s,mf71<^jp&P<"0N{$Kn=[\|iPB@*/ /1yQ\qYu2M)'%OR!t+
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 91 11 a2 60 99 2f 16 3f 2e ca ab 7a 10 8f 77 54 dd d2 5c 63 33 ac e7 a6 90 92 e6 79 ba 47 1b 41 61 59 7b 42 3b 72 0a fe 67 c7 55 c6 2f c8 86 e5 78 18 54 bf a0 9e 94 1e 0e cb 1a b0 a3 46 a8 fc 71 88 66 ab 5a 26 05 9c b5 16 f8 75 78 e8 cd af ef ba 96 65 2d 8d f7 61 3b ad c4 a5 c3 1c 6d 5b 8a 01 54 c9 a3 22 bf b4 d3 e8 a2 a6 e0 f7 dd fe d9 a9 69 2e 53 56 b2 b3 73 19 fa b2 f2 bd c3 e2 1f c5 e0 b5 f5 da 47 e2 a9 8b c2 33 cd 43 29 80 b8 cd 54 8d b0 78 05 6f 6e 0c fd bb 27 09 1c ef c9 32 39 49 0c 99 53 d2 da b3 0c 11 01 0a 36 84 d0 ee 4c 59 3e 63 3e c2 5b ac c3 ed 7d b1 d7 44 7c 12 b1 40 bf 4b 34 2e a3 1f 80 18 a5 61 19 64 3d 27 3b 7b 58 b6 f2 65 70 c8 ee c9 8b 58 4c 4b 63 0b bd b1 c7 1e e1 25 1f 87 d0 01 21 09 8b ea 86 cd 6a 9e ad 10 da 9d 0d a1 2a 2b cd d6 18 Data Ascii: `/?.zwT\c3yGAaY{B;rgU/xTFqfZ&uxe-a;m[T"i.SVsG3C)Txon'29IS6LY>c>[}D\|@K4.ad=';{XepXLKc%!j*+
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: a8 ed fc f1 70 43 98 57 0e c7 94 0e 92 6f e1 38 70 da cf 9e 0d 0d 4d 24 67 ca d1 ad 5b 0f 83 db 81 1b a1 5e 50 dd 9e 3e ca f4 62 4c 97 2c 85 87 5f 58 6e 05 fc fe e9 a8 b1 fe 41 ba 34 49 7b eb 57 30 bd 4b 7d 3c 6b 98 1e 31 2c ec 31 88 4d b0 4f 5a 3d c2 88 79 f4 9e 1c 98 3b a9 5f 16 37 8a 6f 87 00 52 5d 73 bd 68 a3 06 8a e0 35 03 7c 18 8a a3 4b f0 2f 91 ee 43 d7 ab 37 cc ec f3 8b 49 bb fd b5 be 30 80 7e d8 8e 7b 54 ef b0 05 da 48 37 31 e9 6e d3 8e c6 18 55 eb f7 5b 4a 93 e2 11 b4 33 0d ba 7e fe d6 ab 29 1f 54 9c e2 08 ab 48 bd 28 1b e3 20 42 9d 28 c1 7d 62 30 31 62 7c 8c 75 34 97 26 9c 5f a0 03 1b b0 9d 5a e8 3c 3e fb ed 4e 98 6d b3 40 3d 29 7d 6c d9 23 18 4f df ab c2 a5 7b 41 b3 5a 8c 29 88 6d 5b 0a 2b d8 3a 14 3c 64 1d 68 c0 66 d8 88 1f 95 11 73 19 99 69 Data Ascii: pCWo8pM$g[^P>bL,_XnA4I{W0K}<k1,1MOZ=y;_7oR]sh5\|K/C7I0~{TH71nU[J3~)TH( B(}b01b\|u4&_Z<>Nm@=)}l#O{AZ)m[+:<dhfsi
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 08 10 2a 39 59 c2 88 6e 1b 56 55 5f e9 cd 52 34 64 68 23 c3 fd ff 83 74 17 a2 11 88 0b c0 4d a1 5d b6 2f 6f b5 07 78 59 06 64 f5 cd 05 25 ee 8a 61 f0 d8 de 9a 21 12 ef 56 14 e1 3e c2 f9 7f 58 63 66 bd 31 7a ae 90 1a ac d5 b7 c8 2e 7d 83 fc f0 33 cf f4 ed cb f4 19 04 1a a1 b8 44 91 44 a9 4b f6 a9 86 c2 1b f2 3c 16 48 af 97 de 57 b1 57 c0 62 8f 31 e6 7c 33 f1 78 d9 d9 3f 97 00 ad 4d 1a fe ce 0e 0f b2 ff d3 b1 24 04 f5 ff 30 57 60 24 cf 74 d7 fe 33 28 9f 57 86 70 07 9d 9d 8f ae 4d ec 38 e1 49 48 9b 2c 39 60 6b 66 6f 41 4c 4a e9 2f 78 53 94 cf d3 a2 6f 58 9c 50 ec ee 3c 99 30 11 bb c2 63 71 b9 11 be 60 04 42 9e e9 aa 21 32 e7 a5 31 b3 9e 20 1d e7 60 85 87 84 29 71 e9 36 c8 a8 33 ff 4a 9e 14 59 ef 6b 4a 7c 9e 2f 93 f9 6e c8 56 22 c5 cc 64 42 12 0e 91 e9 d6 db Data Ascii: *9YnVU_R4dh#tM]/oxYd%a!V>Xcf1z.}3DDK<HWWb1\|3x?M$0W`$t3(WpM8IH,9`kfoALJ/xSoXP<0cq`B!21 `)q63JYkJ\|/nV"dB
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: 7e 08 16 d0 6f 6f 09 f3 b6 b0 4f 48 7f 18 d1 1e 56 49 6f 50 c8 3f 9c fe a1 fd c9 80 a8 8a de a1 5d af a5 df 5f c4 87 4d 1a 3a 3c 4e 49 81 fa eb 84 27 92 bf 75 19 ab 3d df 05 45 cd ab 5f 31 b7 c9 09 98 c7 ca 87 8e b3 df 0d 20 46 3b 13 54 3b 08 92 94 90 e2 3b 6e 99 8b 48 7d f8 94 7d 1a e3 06 f2 8f 45 62 b0 31 65 ea e6 b8 a4 79 b3 60 f0 1d 3b af d5 7a f9 c1 b2 05 63 98 e8 ca 01 55 27 74 20 33 31 b0 d5 7a 11 9a c5 4c 53 ff 8e d8 d8 be 41 65 db ca 52 2d 94 d9 02 f4 69 d1 1f 63 6a 9f 12 31 3a e1 9a ef d9 c9 e3 5d be 84 9f f9 01 99 cc 63 6c c7 d1 53 2c 3e c0 6a e6 f2 aa 19 d7 41 34 d8 4d 3b fb 22 d5 25 42 d7 eb cf ad 26 da 87 e5 96 94 2e 6e 44 8a d2 0f b9 bd 44 59 68 c5 87 4e 8c 32 ab 1e a8 d4 a5 9b 8d da a8 ed 23 f0 b9 0b fa 39 08 df 25 d6 35 94 42 9f 74 08 89 Data Ascii: ~ooOHVIoP?]_M:<NI'u=E_1 F;T;;nH}}Eb1ey`;zcU't 31zLSAeR-icj1:]clS,>jA4M;"%B&.nDDYhN2#9%5Bt
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: c4 0b a3 ea 23 ea 35 28 aa 0c 98 32 24 9d e3 3f 38 f0 d7 be 2e 8e 07 6c 2b a5 32 8f 91 fb b5 89 65 c6 a2 03 10 69 54 0c 98 0e c5 e1 97 c9 46 f9 10 f0 46 5d 82 51 40 29 9d f1 7c af 5a df cc 54 95 7d 5d d2 62 c6 3b 65 a7 3a 7d 0f a7 a4 e0 5d 8d ef 98 45 50 e3 11 51 34 06 eb aa 25 f2 e4 3b e6 1c 11 29 8c 46 31 7c 46 49 59 29 8e 6c 91 ec 48 bd 22 98 9c c9 6c b4 ef 16 43 61 04 a0 cb 98 48 bd ad 87 5f cf 8d bc 71 66 0e bb 2d ff d1 41 66 d6 da 3b 13 d2 6d 5f d8 dc 8d f7 49 b3 0e 44 63 0d 4e 29 6b ba 65 cc 32 ad 06 9b 2d 20 70 31 57 c9 af 90 7a 1a 78 d0 b8 72 ca cf a9 43 0e 22 0c a8 a7 37 4c 78 96 91 23 e2 70 a9 eb 5c 0f 0b 9c ea 67 13 68 c4 64 7a 02 47 8c 06 10 18 4f 93 18 9e 2a a7 33 25 da 70 81 0d ee e7 4a 92 89 bb c9 6f 34 b0 e2 8c 20 8d 72 23 9c 84 76 09 88 Data Ascii: #5(2$?8.l+2eiTFF]Q@)\|ZT}]b;e:}]EPQ4%;)F1\|FIY)lH"lCaH_qf-Af;m_IDcN)ke2- p1WzxrC"7Lx#p\ghdzGO*3%pJo4 r#v
2024-07-02 22:25:12 UTC	1390	IN	Data Raw: aa 32 99 9f 95 c6 01 9a c5 b5 2e ed 5b ef e7 81 95 fb 4c 84 9a fa 12 76 bf 9a b1 68 5b c6 25 75 52 cb bc b6 50 45 db 2c e2 d8 49 82 dc 6a ed f4 06 21 e6 47 70 3c eb d3 dc 8b a2 ca b5 74 58 6d b3 75 60 b4 d3 c8 c4 75 c9 85 65 57 e5 90 32 d6 4a fd 71 2e 47 3c dc 87 78 12 0a 55 87 82 1e 15 58 47 65 24 10 c9 1d 6b d1 0d 3b 36 0e 33 ec 0b 0a 33 57 08 1f c7 97 d2 76 d5 12 f5 f3 55 b1 7f 99 53 33 cc 98 2e 61 10 7e ae 5f 17 ab 37 66 35 3f be e3 8d 6c c1 69 a7 b8 55 ef 97 a3 bc ba 98 5a fd 89 cf 1c 1d 35 bd 32 d1 79 54 e2 d1 ec 4b 85 34 40 55 a3 9e 93 d6 49 36 b6 39 dd 0a 39 b5 bb dd cb ac ae 74 af 87 bf c4 b0 38 1b cc ec fe 3c 70 d0 c1 e0 e3 f3 69 27 e0 a1 3f 1b e2 f0 67 7a ac e2 25 4a a3 0a 4a ed 86 b2 6a b3 3f 59 03 fd 99 9c 25 95 1c f6 fa b2 b1 6a b1 bb cf 44 Data Ascii: 2.[Lvh[%uRPE,Ij!Gp<tXmu`ueW2Jq.G<xUXGe$k;633WvUS3.a~_7f5?liUZ52yTK4@UI699t8<pi'?gz%JJj?Y%jD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.5	49789	216.58.212.130	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:12 UTC	1042	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-02 22:25:13 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Tue, 02 Jul 2024 22:25:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.5	49790	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:13 UTC	2857	OUT	POST /api/stats/qoe?fmt=397&afmt=251&cpn=PrsgaOatqma7291e&el=detailpage&ns=yt&fexp=v1%2C23986021%2C18623%2C204121%2C230596%2C104308%2C6789%2C16229%2C133212%2C14625955%2C11684381%2C7111%2C24166%2C12177%2C9954%2C1192%2C7913%2C18310%2C273%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C29151%2C2197%2C621%2C7961%2C1414%2C19%2C2%2C1082%2C4081%2C2872%2C101%2C10943%2C2471%2C6008%2C150%2C1388%2C713%2C2585%2C8134%2C1233%2C1375%2C3761%2C3157%2C3975%2C681%2C1590%2C3542%2C8162%2C3259&cl=648221806&seq=1&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&event=streamingstats&feature=youtu.be&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&qclc=ChBQcnNnYU9hdHFtYTcyOTFlEAE&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&vps=0.000:N,0.057:B,1.431:B,1.431:B&cat=streaming,sabr&cmt=0.057:0.000,1.431:0.000&afs=1.426:251::i:CAEoAQ&vfs=1.431:397:397::r:CAEoAQ&view=1.431:806:453&bwm=1.431:874699:1.398&bwe=1.431:130000&bat=1.431:1:1&vis=1.431:0&bh=1.431:0.000 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00 sec-ch-ua-arch: "x86" X-YouTube-Page-CL: 648613515 sec-ch-ua-platform-version: "10.0.0" X-YouTube-Utc-Offset: -240 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D X-YouTube-Ad-Signals: dt=1719959109306&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:13 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 55 31 4e 5a 31 63 34 63 56 52 49 59 6d 70 7a 56 56 55 7a 57 6a 56 78 53 56 68 55 4f 47 70 66 52 30 31 75 64 33 78 42 51 33 4a 74 63 30 74 73 4f 48 56 53 4e 58 4e 55 5a 57 31 6a 64 6d 51 34 57 6e 68 35 62 6c 49 31 65 6e 70 50 62 57 56 4b 54 30 4e 78 64 54 42 55 56 33 5a 7a 61 6a 6c 6c 62 6c 39 54 55 45 45 34 65 6c 5a 69 56 55 34 77 5a 32 56 68 61 56 67 35 54 31 59 34 61 6c 4a 42 51 54 45 7a 4e 32 46 68 4e 7a 56 50 5a 58 64 72 59 54 46 76 5a 56 4d 78 58 30 74 73 63 48 41 74 51 57 68 53 5a 6d 74 4f 53 58 4a 6e 4e 30 77 34 56 6b 64 36 57 45 59 7a 4e 6a 64 42 64 31 52 7a 4d 53 31 43 59 77 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbU1NZ1c4cVRIYmpzVVUzWjVxSVhUOGpfR01ud3xBQ3Jtc0tsOHVSNXNUZW1jdmQ4Wnh5blI1enpPbWVKT0NxdTBUV3Zzajllbl9TUEE4elZiVU4wZ2VhaVg5T1Y4alJBQTEzN2FhNzVPZXdrYTFvZVMxX0tscHAtQWhSZmtOSXJnN0w4Vkd6WEYzNjdBd1RzMS1CYw%3D%3D
2024-07-02 22:25:13 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.5	49793	74.125.0.170	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:13 UTC	1279	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=1 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:13 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:25:13 GMT Expires: Tue, 02 Jul 2024 22:25:13 GMT Cache-Control: private, max-age=21289 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:13 UTC	4	IN	Data Raw: 31 62 0d 0a Data Ascii: 1b
2024-07-02 22:25:13 UTC	27	IN	Data Raw: 2c 19 0a 15 73 61 62 72 2e 6d 61 6c 66 6f 72 6d 65 64 5f 63 6f 6e 66 69 67 10 00 Data Ascii: ,sabr.malformed_config
2024-07-02 22:25:13 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-02 22:25:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
2024-07-02 22:25:13 UTC	1279	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=2 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:13 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:25:13 GMT Expires: Tue, 02 Jul 2024 22:25:13 GMT Cache-Control: private, max-age=21289 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:13 UTC	4	IN	Data Raw: 31 62 0d 0a Data Ascii: 1b
2024-07-02 22:25:13 UTC	27	IN	Data Raw: 2c 19 0a 15 73 61 62 72 2e 6d 61 6c 66 6f 72 6d 65 64 5f 63 6f 6e 66 69 67 10 00 Data Ascii: ,sabr.malformed_config
2024-07-02 22:25:13 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-02 22:25:13 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
2024-07-02 22:25:21 UTC	1279	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=3 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:21 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:25:21 GMT Expires: Tue, 02 Jul 2024 22:25:21 GMT Cache-Control: private, max-age=21281 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:21 UTC	4	IN	Data Raw: 31 62 0d 0a Data Ascii: 1b
2024-07-02 22:25:21 UTC	27	IN	Data Raw: 2c 19 0a 15 73 61 62 72 2e 6d 61 6c 66 6f 72 6d 65 64 5f 63 6f 6e 66 69 67 10 00 Data Ascii: ,sabr.malformed_config
2024-07-02 22:25:22 UTC	1279	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=4 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:22 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:25:22 GMT Expires: Tue, 02 Jul 2024 22:25:22 GMT Cache-Control: private, max-age=21280 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:31 UTC	1279	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=5 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:31 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:25:31 GMT Expires: Tue, 02 Jul 2024 22:25:31 GMT Cache-Control: private, max-age=21271 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:02 UTC	1280	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=11 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:03 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:26:03 GMT Expires: Tue, 02 Jul 2024 22:26:03 GMT Cache-Control: private, max-age=21239 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:10 UTC	1280	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=13 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:10 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:26:10 GMT Expires: Tue, 02 Jul 2024 22:26:10 GMT Cache-Control: private, max-age=21232 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:15 UTC	1280	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=14 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:15 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:26:15 GMT Expires: Tue, 02 Jul 2024 22:26:15 GMT Cache-Control: private, max-age=21227 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:23 UTC	1280	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=15 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:23 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:26:23 GMT Expires: Tue, 02 Jul 2024 22:26:23 GMT Cache-Control: private, max-age=21219 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:27 UTC	1280	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=16 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:27 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:26:27 GMT Expires: Tue, 02 Jul 2024 22:26:27 GMT Cache-Control: private, max-age=21215 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:35 UTC	1280	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=17 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:36 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:26:36 GMT Expires: Tue, 02 Jul 2024 22:26:36 GMT Cache-Control: private, max-age=21206 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:44 UTC	1280	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=18 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:44 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:26:44 GMT Expires: Tue, 02 Jul 2024 22:26:44 GMT Cache-Control: private, max-age=21198 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.5	49792	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:13 UTC	562	OUT	GET /sb/dQw4w9WgXcQ/storyboard3_L1/M0.jpg?sqp=-oaymwENSDfyq4qpAwVwAcABBqLzl_8DBginqfCoBg==&sigh=rs%24AOn4CLBDzoUQQHE8XWHw2U31Ra19yy-sOg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:13 UTC	681	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 39394 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 19:51:08 GMT Expires: Wed, 03 Jul 2024 01:51:08 GMT Cache-Control: public, max-age=21600 ETag: "1696339111151110" Content-Type: image/webp Age: 9245 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:13 UTC	709	IN	Data Raw: 52 49 46 46 da 99 00 00 57 45 42 50 56 50 38 20 ce 99 00 00 f0 db 02 9d 01 2a 20 03 c2 01 3e c1 58 a4 4e a7 a4 a3 2f a8 32 bb b1 f0 18 09 4d af 38 c3 5f 4c 72 a3 af 37 e6 fc ed 67 33 f3 76 e1 42 f8 20 d4 41 6e d2 3d 9a 96 4c 9c 0f fc a7 cc 03 92 eb c6 7a e7 cb ab d3 ea 57 bb 49 61 e4 7f 50 ff bd 2a a7 fc 76 d7 ee cf 66 9e ac bf a7 ff f3 f5 8a f4 ad a3 ab 74 03 a6 a3 d7 d7 20 2b 23 7f 0a fc df c6 e7 57 bf 6f d2 67 34 f6 bd f7 bd 39 3f e9 f8 7b fb 2f 89 07 ea bb c7 bc 6f 99 95 af df f6 7a 85 f7 03 d8 23 cc df 1d ef bd 7a 87 7f 33 ff 5b e9 81 ab 37 d6 b4 e3 1a 5d ea de 52 98 03 33 4e 47 f2 15 b3 79 1c d7 69 59 03 ff 49 d7 62 1a da ca 74 80 d4 d2 e4 ce 8c 61 6d 58 ee d8 4b c3 c3 fe 18 58 8b 12 0b df 25 6e 59 b6 0a 4f 66 af 5b 6d f3 ad 0e a6 4c 0d 47 d4 57 2f Data Ascii: RIFFWEBPVP8 * >XN/2M8_Lr7g3vB An=LzWIaP*vft +#Wog49?{/oz#z3[7]R3NGyiYIbtamXKX%nYOf[mLGW/
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 9b e8 05 3b f0 f9 7b c5 fb 51 ff a6 87 68 d1 cd d5 a6 14 45 30 2d 06 85 19 c8 74 fb 48 ee 17 08 3b aa 6f dd 7c f0 c2 fe 71 9d e0 0c 53 74 b9 f7 f0 77 a3 76 03 34 85 8d 9c ca c7 3b b0 fb ee c5 1b e0 60 08 26 c7 aa fd 30 b8 c0 5b 5b a1 b8 c8 14 83 ae 34 c9 79 3c d0 b7 e2 96 8e f6 b9 26 f4 2d 85 6d a3 55 e4 24 10 e8 24 bf 5b c3 78 8c e1 aa 6d d8 60 e0 06 f0 25 d6 cd d8 53 9a 55 92 c4 7e ad 40 86 d6 eb bb 42 85 21 20 aa 91 85 da 24 41 ac 64 d2 85 fe f3 c1 fc 7c 33 8f e8 62 e4 2c 7c d4 c3 2a 62 df e5 97 2b fc 52 b5 ee 93 9a 87 b7 e4 06 c0 be ed dc c7 e0 c5 a7 f8 f1 91 b6 fa e1 85 e3 5b 47 4f 4e ca 18 b0 20 d6 f3 81 61 ea be 18 4e f2 de 9c 79 43 0e 49 89 7c f8 fd 6d 23 e0 f0 45 b8 af 43 85 d5 ba 69 c4 d5 88 07 ad 8a 6f 47 34 53 81 40 89 d0 b9 b7 4b 30 e4 23 36 Data Ascii: ;{QhE0-tH;o\|qStwv4;`&0[[4y<&-mU$$[xm`%SU~@B! $Ad\|3b,\|*b+R[GON aNyCI\|m#ECioG4S@K0#6
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: ce 37 74 b5 d8 c2 37 43 79 dd e6 44 45 ed d5 ea a3 28 a5 bf 8a 5c dd c2 9c c8 9a e7 c7 ee ec 79 77 f9 f3 ed ce 37 d1 33 73 95 56 dc 4e 42 ff 52 07 3c bb 8a e4 97 75 5b 1a ed e5 06 2d 87 aa e3 b1 d4 73 6b 82 bc 36 2c 7d 1c a3 64 60 c9 17 65 cd c6 38 44 3c 96 26 d3 2b 87 4d db 05 41 f2 fb ff 4e e3 ef 1d 9d ee 33 a1 2e 5f 34 36 aa 6f 4b 8f 45 f5 9e 25 40 e6 34 0e 7c ea 39 51 0b df 1a 18 cb f7 22 1b e4 db 8b d4 b1 58 20 34 ab 22 74 53 13 26 7a 26 a2 5d 40 9b 01 25 a6 7e 39 09 79 d3 93 20 c6 33 b8 6d 90 d9 b1 59 6e 0b b0 94 69 5f e9 83 d7 0b 66 78 3b 88 ec e8 c8 ef 22 7f 30 57 79 7a df 75 7b b9 52 9c 3c 88 bc 15 79 c9 9f cc 96 08 f0 03 7d 6c 9f ec 52 c6 fa 97 bd bb 4b d8 a3 bc 4b f1 8a b3 bc e4 d8 93 16 82 44 02 a6 b9 6b d0 34 8f 5d 5c 08 e6 bc 5b 1b 63 1e 2e Data Ascii: 7t7CyDE(\yw73sVNBR<u[-sk6,}d`e8D<&+MAN3._46oKE%@4\|9Q"X 4"tS&z&]@%~9y 3mYni_fx;"0Wyzu{R<y}lRKKDk4]\[c.
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 20 59 3c cc 93 af 91 43 fe da 1b 6b ff dc 90 b1 6a 3a 8f f2 29 e9 32 5d 5b 26 98 55 91 d2 bc c9 e7 3f 83 f6 6a b1 d9 26 0f 8b 6b 0b 80 1d e6 53 3f 61 6d 64 0f 82 8e c2 26 0b 5c dd 86 0f db 70 6e fa 26 74 68 91 ce 4d 10 9b 59 c3 51 3f 09 d8 61 ac b2 52 dd e5 6f 22 a3 a3 5f af 7f 92 e5 38 93 71 db 8e de f6 77 14 cc 85 1f 6a 38 5d 73 2c a8 6d 92 88 d8 e8 bc 66 18 9f a8 37 0c df a8 31 d6 3c 5e d4 6a 07 83 bb f6 b0 70 f6 84 d5 f8 26 50 3c c9 8a 98 af 00 22 16 c6 30 de 94 4e 07 90 1b f2 f1 f9 7b f8 24 9a a5 4b a7 be bb 6e de 13 ee 3d 17 ab 5b 7c d6 98 69 16 50 42 1e c1 9f d6 40 2a ac 2f 20 06 09 fb 2f cf e6 9d 31 d2 15 c6 db 79 51 5c c0 16 11 d8 71 90 14 a4 a9 82 ff 1b d4 12 d4 d4 83 59 f0 d8 e6 dc 75 b2 eb 1c 9f 32 1d 4d 29 27 25 4f fa 92 52 21 74 ea b2 10 2b Data Ascii: Y<Ckj:)2][&U?j&kS?amd&\pn&thMYQ?aRo"_8qwj8]s,mf71<^jp&P<"0N{$Kn=[\|iPB@*/ /1yQ\qYu2M)'%OR!t+
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 91 11 a2 60 99 2f 16 3f 2e ca ab 7a 10 8f 77 54 dd d2 5c 63 33 ac e7 a6 90 92 e6 79 ba 47 1b 41 61 59 7b 42 3b 72 0a fe 67 c7 55 c6 2f c8 86 e5 78 18 54 bf a0 9e 94 1e 0e cb 1a b0 a3 46 a8 fc 71 88 66 ab 5a 26 05 9c b5 16 f8 75 78 e8 cd af ef ba 96 65 2d 8d f7 61 3b ad c4 a5 c3 1c 6d 5b 8a 01 54 c9 a3 22 bf b4 d3 e8 a2 a6 e0 f7 dd fe d9 a9 69 2e 53 56 b2 b3 73 19 fa b2 f2 bd c3 e2 1f c5 e0 b5 f5 da 47 e2 a9 8b c2 33 cd 43 29 80 b8 cd 54 8d b0 78 05 6f 6e 0c fd bb 27 09 1c ef c9 32 39 49 0c 99 53 d2 da b3 0c 11 01 0a 36 84 d0 ee 4c 59 3e 63 3e c2 5b ac c3 ed 7d b1 d7 44 7c 12 b1 40 bf 4b 34 2e a3 1f 80 18 a5 61 19 64 3d 27 3b 7b 58 b6 f2 65 70 c8 ee c9 8b 58 4c 4b 63 0b bd b1 c7 1e e1 25 1f 87 d0 01 21 09 8b ea 86 cd 6a 9e ad 10 da 9d 0d a1 2a 2b cd d6 18 Data Ascii: `/?.zwT\c3yGAaY{B;rgU/xTFqfZ&uxe-a;m[T"i.SVsG3C)Txon'29IS6LY>c>[}D\|@K4.ad=';{XepXLKc%!j*+
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: a8 ed fc f1 70 43 98 57 0e c7 94 0e 92 6f e1 38 70 da cf 9e 0d 0d 4d 24 67 ca d1 ad 5b 0f 83 db 81 1b a1 5e 50 dd 9e 3e ca f4 62 4c 97 2c 85 87 5f 58 6e 05 fc fe e9 a8 b1 fe 41 ba 34 49 7b eb 57 30 bd 4b 7d 3c 6b 98 1e 31 2c ec 31 88 4d b0 4f 5a 3d c2 88 79 f4 9e 1c 98 3b a9 5f 16 37 8a 6f 87 00 52 5d 73 bd 68 a3 06 8a e0 35 03 7c 18 8a a3 4b f0 2f 91 ee 43 d7 ab 37 cc ec f3 8b 49 bb fd b5 be 30 80 7e d8 8e 7b 54 ef b0 05 da 48 37 31 e9 6e d3 8e c6 18 55 eb f7 5b 4a 93 e2 11 b4 33 0d ba 7e fe d6 ab 29 1f 54 9c e2 08 ab 48 bd 28 1b e3 20 42 9d 28 c1 7d 62 30 31 62 7c 8c 75 34 97 26 9c 5f a0 03 1b b0 9d 5a e8 3c 3e fb ed 4e 98 6d b3 40 3d 29 7d 6c d9 23 18 4f df ab c2 a5 7b 41 b3 5a 8c 29 88 6d 5b 0a 2b d8 3a 14 3c 64 1d 68 c0 66 d8 88 1f 95 11 73 19 99 69 Data Ascii: pCWo8pM$g[^P>bL,_XnA4I{W0K}<k1,1MOZ=y;_7oR]sh5\|K/C7I0~{TH71nU[J3~)TH( B(}b01b\|u4&_Z<>Nm@=)}l#O{AZ)m[+:<dhfsi
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 08 10 2a 39 59 c2 88 6e 1b 56 55 5f e9 cd 52 34 64 68 23 c3 fd ff 83 74 17 a2 11 88 0b c0 4d a1 5d b6 2f 6f b5 07 78 59 06 64 f5 cd 05 25 ee 8a 61 f0 d8 de 9a 21 12 ef 56 14 e1 3e c2 f9 7f 58 63 66 bd 31 7a ae 90 1a ac d5 b7 c8 2e 7d 83 fc f0 33 cf f4 ed cb f4 19 04 1a a1 b8 44 91 44 a9 4b f6 a9 86 c2 1b f2 3c 16 48 af 97 de 57 b1 57 c0 62 8f 31 e6 7c 33 f1 78 d9 d9 3f 97 00 ad 4d 1a fe ce 0e 0f b2 ff d3 b1 24 04 f5 ff 30 57 60 24 cf 74 d7 fe 33 28 9f 57 86 70 07 9d 9d 8f ae 4d ec 38 e1 49 48 9b 2c 39 60 6b 66 6f 41 4c 4a e9 2f 78 53 94 cf d3 a2 6f 58 9c 50 ec ee 3c 99 30 11 bb c2 63 71 b9 11 be 60 04 42 9e e9 aa 21 32 e7 a5 31 b3 9e 20 1d e7 60 85 87 84 29 71 e9 36 c8 a8 33 ff 4a 9e 14 59 ef 6b 4a 7c 9e 2f 93 f9 6e c8 56 22 c5 cc 64 42 12 0e 91 e9 d6 db Data Ascii: *9YnVU_R4dh#tM]/oxYd%a!V>Xcf1z.}3DDK<HWWb1\|3x?M$0W`$t3(WpM8IH,9`kfoALJ/xSoXP<0cq`B!21 `)q63JYkJ\|/nV"dB
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 7e 08 16 d0 6f 6f 09 f3 b6 b0 4f 48 7f 18 d1 1e 56 49 6f 50 c8 3f 9c fe a1 fd c9 80 a8 8a de a1 5d af a5 df 5f c4 87 4d 1a 3a 3c 4e 49 81 fa eb 84 27 92 bf 75 19 ab 3d df 05 45 cd ab 5f 31 b7 c9 09 98 c7 ca 87 8e b3 df 0d 20 46 3b 13 54 3b 08 92 94 90 e2 3b 6e 99 8b 48 7d f8 94 7d 1a e3 06 f2 8f 45 62 b0 31 65 ea e6 b8 a4 79 b3 60 f0 1d 3b af d5 7a f9 c1 b2 05 63 98 e8 ca 01 55 27 74 20 33 31 b0 d5 7a 11 9a c5 4c 53 ff 8e d8 d8 be 41 65 db ca 52 2d 94 d9 02 f4 69 d1 1f 63 6a 9f 12 31 3a e1 9a ef d9 c9 e3 5d be 84 9f f9 01 99 cc 63 6c c7 d1 53 2c 3e c0 6a e6 f2 aa 19 d7 41 34 d8 4d 3b fb 22 d5 25 42 d7 eb cf ad 26 da 87 e5 96 94 2e 6e 44 8a d2 0f b9 bd 44 59 68 c5 87 4e 8c 32 ab 1e a8 d4 a5 9b 8d da a8 ed 23 f0 b9 0b fa 39 08 df 25 d6 35 94 42 9f 74 08 89 Data Ascii: ~ooOHVIoP?]_M:<NI'u=E_1 F;T;;nH}}Eb1ey`;zcU't 31zLSAeR-icj1:]clS,>jA4M;"%B&.nDDYhN2#9%5Bt
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: c4 0b a3 ea 23 ea 35 28 aa 0c 98 32 24 9d e3 3f 38 f0 d7 be 2e 8e 07 6c 2b a5 32 8f 91 fb b5 89 65 c6 a2 03 10 69 54 0c 98 0e c5 e1 97 c9 46 f9 10 f0 46 5d 82 51 40 29 9d f1 7c af 5a df cc 54 95 7d 5d d2 62 c6 3b 65 a7 3a 7d 0f a7 a4 e0 5d 8d ef 98 45 50 e3 11 51 34 06 eb aa 25 f2 e4 3b e6 1c 11 29 8c 46 31 7c 46 49 59 29 8e 6c 91 ec 48 bd 22 98 9c c9 6c b4 ef 16 43 61 04 a0 cb 98 48 bd ad 87 5f cf 8d bc 71 66 0e bb 2d ff d1 41 66 d6 da 3b 13 d2 6d 5f d8 dc 8d f7 49 b3 0e 44 63 0d 4e 29 6b ba 65 cc 32 ad 06 9b 2d 20 70 31 57 c9 af 90 7a 1a 78 d0 b8 72 ca cf a9 43 0e 22 0c a8 a7 37 4c 78 96 91 23 e2 70 a9 eb 5c 0f 0b 9c ea 67 13 68 c4 64 7a 02 47 8c 06 10 18 4f 93 18 9e 2a a7 33 25 da 70 81 0d ee e7 4a 92 89 bb c9 6f 34 b0 e2 8c 20 8d 72 23 9c 84 76 09 88 Data Ascii: #5(2$?8.l+2eiTFF]Q@)\|ZT}]b;e:}]EPQ4%;)F1\|FIY)lH"lCaH_qf-Af;m_IDcN)ke2- p1WzxrC"7Lx#p\ghdzGO*3%pJo4 r#v
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: aa 32 99 9f 95 c6 01 9a c5 b5 2e ed 5b ef e7 81 95 fb 4c 84 9a fa 12 76 bf 9a b1 68 5b c6 25 75 52 cb bc b6 50 45 db 2c e2 d8 49 82 dc 6a ed f4 06 21 e6 47 70 3c eb d3 dc 8b a2 ca b5 74 58 6d b3 75 60 b4 d3 c8 c4 75 c9 85 65 57 e5 90 32 d6 4a fd 71 2e 47 3c dc 87 78 12 0a 55 87 82 1e 15 58 47 65 24 10 c9 1d 6b d1 0d 3b 36 0e 33 ec 0b 0a 33 57 08 1f c7 97 d2 76 d5 12 f5 f3 55 b1 7f 99 53 33 cc 98 2e 61 10 7e ae 5f 17 ab 37 66 35 3f be e3 8d 6c c1 69 a7 b8 55 ef 97 a3 bc ba 98 5a fd 89 cf 1c 1d 35 bd 32 d1 79 54 e2 d1 ec 4b 85 34 40 55 a3 9e 93 d6 49 36 b6 39 dd 0a 39 b5 bb dd cb ac ae 74 af 87 bf c4 b0 38 1b cc ec fe 3c 70 d0 c1 e0 e3 f3 69 27 e0 a1 3f 1b e2 f0 67 7a ac e2 25 4a a3 0a 4a ed 86 b2 6a b3 3f 59 03 fd 99 9c 25 95 1c f6 fa b2 b1 6a b1 bb cf 44 Data Ascii: 2.[Lvh[%uRPE,Ij!Gp<tXmu`ueW2Jq.G<xUXGe$k;633WvUS3.a~_7f5?liUZ52yTK4@UI699t8<pi'?gz%JJj?Y%jD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.5	49791	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:13 UTC	1424	OUT	POST /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2805 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-wow64: ?0 sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-platform: "Windows" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.132" X-Youtube-Client-Name: 1 X-Youtube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:13 UTC	2805	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 42 55 57 68 58 62 6c 70 53 64 6b 74 58 53 53 69 2d 5f 4a 47 30 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 58 77 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.33","deviceMake":"","deviceModel":"","visitorData":"CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G
2024-07-02 22:25:13 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 02 Jul 2024 22:25:13 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:13 UTC	958	IN	Data Raw: 34 65 38 39 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 37 30 32 2e 30 31 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 41 74 74 65 73 74 61 74 69 6f 6e 43 68 61 6c 6c 65 6e 67 65 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 36 31 66 61 33 39 62 33 33 63 30 36 30 61 61 39 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 Data Ascii: 4e89{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240702.01.00"},{"key":"yt_li","value":"0"},{"key":"GetAttestationChallenge_rid","value":"0x61fa39b33c060aa9"}]},{"service":"
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 35 31 31 35 37 38 33 38 2c 35 31 31 35 38 34 37 30 2c 35 31 31 35 38 35 31 34 2c 35 31 31 36 30 35 34 35 2c 35 31 31 36 32 31 37 30 2c 35 31 31 36 32 35 39 35 2c 35 31 31 36 35 34 36 37 2c 35 31 31 36 35 35 36 38 2c 35 31 31 36 36 39 32 32 2c 35 31 31 36 37 38 31 33 2c 35 31 31 36 39 31 31 37 2c 35 31 31 36 39 31 33 31 2c 35 31 31 37 30 32 34 37 2c 35 31 31 37 35 36 30 36 2c 35 31 31 37 35 37 33 32 2c 35 31 31 37 36 35 31 31 2c 35 31 31 37 38 37 30 35 2c 35 31 31 37 38 39 38 32 2c 35 31 31 38 33 39 30 39 2c 35 31 31 38 34 30 32 32 2c 35 31 31 38 34 39 39 30 2c 35 31 31 38 35 31 34 30 2c 35 31 31 38 36 35 32 38 2c 35 31 31 38 37 32 34 31 2c 35 31 31 38 39 38 32 36 2c 35 31 31 39 30 36 35 32 2c 35 31 31 39 34 31 33 37 2c 35 31 31 39 35 32 33 31 2c 35 31 31 Data Ascii: 51157838,51158470,51158514,51160545,51162170,51162595,51165467,51165568,51166922,51167813,51169117,51169131,51170247,51175606,51175732,51176511,51178705,51178982,51183909,51184022,51184990,51185140,51186528,51187241,51189826,51190652,51194137,51195231,511
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 41 4f 5a 6e 58 73 6c 74 69 61 63 32 4b 66 62 39 37 35 57 58 65 71 32 63 69 4e 2b 38 66 78 35 69 36 42 45 61 76 39 42 34 35 73 61 77 43 71 7a 71 36 44 36 78 71 57 50 62 31 61 62 4a 72 4c 75 6b 79 72 39 51 45 4f 56 54 58 2f 4e 77 62 47 4e 54 2f 47 30 37 61 62 36 4c 30 71 73 44 65 4e 64 52 48 65 64 4c 42 4d 74 49 74 6f 44 69 74 49 6b 51 6f 38 39 45 32 34 6a 52 41 43 31 30 35 36 50 45 72 56 57 6b 38 43 6f 5a 6e 43 48 58 36 4f 71 59 61 2b 59 69 66 52 77 6c 5a 37 4a 52 4a 69 59 37 66 46 7a 7a 67 68 30 74 4f 73 4f 68 6e 4f 73 68 42 65 50 50 46 6d 56 72 6e 73 5a 4d 59 30 65 38 61 75 4f 76 55 54 67 53 6a 2b 4e 69 76 42 75 4a 2b 63 38 70 38 66 62 62 58 32 56 37 77 65 67 32 31 2f 70 49 71 66 6c 47 4e 36 4e 50 4a 4b 2f 6f 63 63 75 79 68 50 74 55 4d 45 48 76 57 70 36 Data Ascii: AOZnXsltiac2Kfb975WXeq2ciN+8fx5i6BEav9B45sawCqzq6D6xqWPb1abJrLukyr9QEOVTX/NwbGNT/G07ab6L0qsDeNdRHedLBMtItoDitIkQo89E24jRAC1056PErVWk8CoZnCHX6OqYa+YifRwlZ7JRJiY7fFzzgh0tOsOhnOshBePPFmVrnsZMY0e8auOvUTgSj+NivBuJ+c8p8fbbX2V7weg21/pIqflGN6NPJK/occuyhPtUMEHvWp6
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 52 32 41 4e 37 57 69 5a 4f 33 58 57 4e 4d 4f 70 67 6a 38 44 68 57 56 46 58 4d 56 38 51 37 4d 65 41 58 69 55 63 6b 63 36 38 51 54 53 4d 4e 50 56 64 49 67 34 4d 30 50 43 2b 7a 76 4d 6a 6f 44 6e 75 4d 47 30 79 63 6c 75 68 48 49 31 77 6c 72 78 56 4f 33 6c 6b 51 56 48 48 6e 34 4c 43 63 77 32 42 76 32 6f 31 38 64 6e 6d 52 78 4d 7a 69 58 41 48 71 75 6c 45 6a 42 73 49 70 79 6a 69 46 49 2b 63 46 46 7a 74 2b 49 33 75 54 66 74 4c 6e 50 53 2b 34 47 43 2b 43 55 57 6f 71 56 41 4c 34 4d 56 4b 42 35 79 76 4f 47 38 58 6a 72 65 43 2b 46 46 50 74 64 34 57 53 41 55 59 43 46 36 6e 46 33 2b 56 31 74 68 6c 69 6b 54 79 43 4a 72 4d 77 31 32 33 5a 32 41 69 56 37 4b 4e 79 50 77 63 36 72 45 37 71 61 65 43 36 50 75 51 65 66 59 48 44 42 49 4a 63 54 67 43 6c 46 6d 6d 2f 6f 39 5a 4c 5a Data Ascii: R2AN7WiZO3XWNMOpgj8DhWVFXMV8Q7MeAXiUckc68QTSMNPVdIg4M0PC+zvMjoDnuMG0ycluhHI1wlrxVO3lkQVHHn4LCcw2Bv2o18dnmRxMziXAHqulEjBsIpyjiFI+cFFzt+I3uTftLnPS+4GC+CUWoqVAL4MVKB5yvOG8XjreC+FFPtd4WSAUYCF6nF3+V1thlikTyCJrMw123Z2AiV7KNyPwc6rE7qaeC6PuQefYHDBIJcTgClFmm/o9ZLZ
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 71 63 77 44 48 4c 37 38 55 4a 65 45 63 52 41 31 43 66 52 79 56 6f 4d 6a 39 52 43 32 64 5a 46 56 77 52 64 2f 78 46 6a 6f 59 44 34 4e 67 4d 70 68 72 69 70 77 70 6e 45 4d 2f 52 42 66 6f 71 6f 2f 53 4a 2b 48 63 77 49 4d 36 30 39 48 56 74 56 74 2b 75 39 59 69 59 35 5a 67 70 75 51 79 78 32 61 35 30 73 39 37 66 35 74 57 43 78 57 34 37 70 51 75 46 68 79 4e 47 70 39 54 34 4a 63 56 50 44 71 6a 72 51 4d 61 32 75 33 5a 37 4b 33 38 31 77 30 39 4d 31 63 61 34 43 6a 47 37 4e 34 78 6e 57 69 45 4d 71 6f 53 56 31 33 63 34 59 6d 37 67 6e 7a 35 46 38 73 52 44 6d 39 44 71 2f 4d 55 78 4b 58 54 5a 63 61 34 38 6d 41 75 73 37 44 76 57 5a 56 4c 52 52 65 30 6b 41 33 41 44 6a 67 2b 68 6e 61 79 51 55 62 49 31 34 2f 58 4c 42 6d 44 6e 75 6c 69 36 71 41 5a 33 2b 6d 6e 53 6a 2f 46 38 6d Data Ascii: qcwDHL78UJeEcRA1CfRyVoMj9RC2dZFVwRd/xFjoYD4NgMphripwpnEM/RBfoqo/SJ+HcwIM609HVtVt+u9YiY5ZgpuQyx2a50s97f5tWCxW47pQuFhyNGp9T4JcVPDqjrQMa2u3Z7K381w09M1ca4CjG7N4xnWiEMqoSV13c4Ym7gnz5F8sRDm9Dq/MUxKXTZca48mAus7DvWZVLRRe0kA3ADjg+hnayQUbI14/XLBmDnuli6qAZ3+mnSj/F8m
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 4f 70 65 68 75 36 75 4c 41 75 67 78 76 2b 49 61 56 6d 48 51 55 6d 77 64 34 34 30 44 31 50 30 43 75 66 56 35 5a 31 69 2b 35 56 38 57 34 71 32 4a 6e 79 71 65 58 50 43 71 37 56 47 34 54 78 79 34 4f 65 71 63 72 49 31 39 6c 76 55 50 50 6e 75 79 6d 7a 61 57 71 54 50 77 31 57 43 69 66 38 61 2f 46 70 43 69 4e 65 31 36 4b 52 73 4c 67 46 59 50 4f 67 52 76 39 4f 41 55 4c 52 48 39 35 77 63 61 6c 36 61 65 4c 77 49 32 34 64 59 47 55 61 59 46 4b 66 2b 47 55 34 34 73 4e 72 43 52 68 50 71 58 57 5a 4c 43 64 55 50 6b 45 33 73 62 2f 4f 37 75 74 38 39 47 46 34 79 63 36 62 77 4c 50 44 36 59 4b 77 6d 38 77 2b 67 77 50 57 6c 51 58 6e 64 30 73 7a 56 35 6e 62 57 55 32 58 70 57 58 67 52 58 70 45 6d 41 54 4d 55 6b 6f 2f 77 37 62 72 74 55 74 45 75 34 6e 53 6a 71 2b 57 44 73 62 66 6d Data Ascii: Opehu6uLAugxv+IaVmHQUmwd440D1P0CufV5Z1i+5V8W4q2JnyqeXPCq7VG4Txy4OeqcrI19lvUPPnuymzaWqTPw1WCif8a/FpCiNe16KRsLgFYPOgRv9OAULRH95wcal6aeLwI24dYGUaYFKf+GU44sNrCRhPqXWZLCdUPkE3sb/O7ut89GF4yc6bwLPD6YKwm8w+gwPWlQXnd0szV5nbWU2XpWXgRXpEmATMUko/w7brtUtEu4nSjq+WDsbfm
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 6f 39 7a 45 46 46 77 66 41 72 63 65 6b 72 71 46 4f 4d 37 4c 58 61 67 6b 45 73 67 55 77 46 75 4b 2b 58 64 74 53 6d 4b 4e 52 78 69 6b 2f 57 73 4b 6c 6e 38 49 68 36 4b 52 64 68 75 55 46 43 4e 55 7a 45 6a 58 37 72 2f 72 35 39 68 7a 39 63 2b 38 30 75 32 56 50 6f 58 65 37 35 72 47 39 75 48 38 6c 68 31 42 32 71 58 58 54 48 7a 34 67 39 54 7a 69 31 51 2b 56 72 4e 79 6b 30 75 46 33 56 47 51 45 4e 63 48 64 58 6b 77 62 37 79 4e 7a 61 32 72 77 79 64 4d 46 57 59 4e 65 4e 64 78 6f 41 63 52 34 33 6c 47 30 6d 41 4a 61 69 44 65 53 50 2f 79 58 6f 4e 39 4c 36 49 34 5a 30 36 39 2f 78 36 52 61 78 34 72 46 52 74 6d 58 4c 44 37 32 43 65 75 4f 6e 78 6a 49 52 68 42 34 51 4c 74 79 33 77 54 4e 42 47 69 69 70 74 31 7a 64 2f 59 79 79 57 6c 77 65 77 36 57 52 72 4a 66 62 32 7a 49 33 51 Data Ascii: o9zEFFwfArcekrqFOM7LXagkEsgUwFuK+XdtSmKNRxik/WsKln8Ih6KRdhuUFCNUzEjX7r/r59hz9c+80u2VPoXe75rG9uH8lh1B2qXXTHz4g9Tzi1Q+VrNyk0uF3VGQENcHdXkwb7yNza2rwydMFWYNeNdxoAcR43lG0mAJaiDeSP/yXoN9L6I4Z069/x6Rax4rFRtmXLD72CeuOnxjIRhB4QLty3wTNBGiipt1zd/YyyWlwew6WRrJfb2zI3Q
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 45 2f 63 6b 43 45 74 64 74 6b 4a 74 4a 67 36 33 33 62 45 4c 61 49 4c 6b 5a 48 77 44 38 6c 58 34 45 32 58 70 75 53 32 72 54 34 35 6e 6b 35 38 45 75 46 4e 2f 4f 51 4c 5a 46 6c 52 42 47 45 33 48 32 36 4c 54 45 4b 31 78 46 54 30 61 67 44 77 55 6b 63 48 51 4c 70 6f 51 4e 6c 4b 7a 6b 4c 42 58 6c 72 6f 64 65 51 75 2f 71 51 4f 5a 54 4b 74 6b 6b 6c 63 49 78 32 76 62 35 36 4f 53 47 6e 6d 6c 6d 47 32 61 30 61 59 72 47 53 6b 61 36 70 34 75 59 53 53 78 6f 57 4b 37 30 50 49 6d 2b 58 64 68 2f 6a 58 41 44 39 44 45 33 6a 4a 36 68 66 52 43 67 55 4e 6c 76 65 50 42 77 73 38 57 75 63 2f 57 62 61 35 76 71 71 54 46 55 48 47 47 4d 41 35 51 4c 4a 30 33 58 36 5a 43 4b 49 55 63 68 4e 34 39 78 57 4f 79 47 62 45 36 53 54 78 38 59 78 47 37 54 63 61 6f 66 4c 79 41 38 4f 35 5a 79 6c 38 Data Ascii: E/ckCEtdtkJtJg633bELaILkZHwD8lX4E2XpuS2rT45nk58EuFN/OQLZFlRBGE3H26LTEK1xFT0agDwUkcHQLpoQNlKzkLBXlrodeQu/qQOZTKtkklcIx2vb56OSGnmlmG2a0aYrGSka6p4uYSSxoWK70PIm+Xdh/jXAD9DE3jJ6hfRCgUNlvePBws8Wuc/Wba5vqqTFUHGGMA5QLJ03X6ZCKIUchN49xWOyGbE6STx8YxG7TcaofLyA8O5Zyl8
2024-07-02 22:25:13 UTC	1390	IN	Data Raw: 4a 31 63 34 72 7a 30 61 54 47 4b 78 2b 6e 6c 66 51 6a 70 7a 4e 37 37 38 59 65 30 5a 79 56 64 64 7a 6e 47 77 5a 39 51 65 6a 30 45 51 65 77 46 70 37 53 67 4e 54 2f 2f 37 63 6f 6f 4e 4e 4b 53 76 67 53 6e 33 5a 4b 51 2b 79 75 78 6e 4a 50 58 41 65 6b 2f 4b 42 49 6c 31 68 76 74 70 41 44 76 6b 63 69 71 53 4f 75 30 63 56 63 72 35 55 68 51 41 55 70 48 79 50 73 66 2b 33 50 37 6a 6f 33 39 30 64 77 79 35 65 41 4c 4e 42 38 70 67 63 78 48 4d 48 31 49 6c 6f 30 61 6d 77 39 4e 44 65 65 6c 6b 42 56 73 54 44 78 56 35 74 6a 64 61 44 75 30 58 53 55 75 6a 47 46 57 56 52 6d 43 72 2b 75 2b 43 58 54 64 41 51 76 50 4a 72 46 76 55 41 41 4f 75 49 44 6b 6f 58 66 48 46 37 5a 58 72 6a 33 51 47 78 34 34 4f 57 64 67 48 55 44 57 53 47 53 73 6a 68 71 6f 48 67 6c 35 57 59 55 71 76 70 71 4e Data Ascii: J1c4rz0aTGKx+nlfQjpzN778Ye0ZyVddznGwZ9Qej0EQewFp7SgNT//7cooNNKSvgSn3ZKQ+yuxnJPXAek/KBIl1hvtpADvkciqSOu0cVcr5UhQAUpHyPsf+3P7jo390dwy5eALNB8pgcxHMH1Ilo0amw9NDeelkBVsTDxV5tjdaDu0XSUujGFWVRmCr+u+CXTdAQvPJrFvUAAOuIDkoXfHF7ZXrj3QGx44OWdgHUDWSGSsjhqoHgl5WYUqvpqN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.5	49801	209.85.165.198	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:13 UTC	1927	OUT	GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&ctier=L&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1 Host: rr1---sn-q4flrnee.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:13 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:13 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.5	49802	209.85.165.198	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:13 UTC	1919	OUT	GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1 Host: rr1---sn-q4flrnee.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:13 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:13 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.5	49795	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:13 UTC	1127	OUT	GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:14 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 8178 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:23:57 GMT Expires: Tue, 02 Jul 2024 23:23:57 GMT Cache-Control: public, max-age=7200 ETag: "1631784323" Content-Type: image/webp Vary: Origin Age: 3676 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:14 UTC	733	IN	Data Raw: 52 49 46 46 ea 1f 00 00 57 45 42 50 56 50 38 20 de 1f 00 00 10 85 00 9d 01 2a 50 01 bc 00 3e 51 26 8f 45 a3 a2 23 a4 24 12 8a d0 80 0a 09 65 6e 31 30 68 fe a0 5f 0c 50 a1 92 27 10 a2 be 06 44 f9 57 cc c7 d7 ef f7 b4 bc ce 9f a7 d3 27 f6 8f 51 5f ec dd 1a 3f b3 7a 32 fd ba f5 6e f4 b7 fd e7 d1 77 a9 9b fb af a9 b7 4c 77 f8 ea e4 7e 1f f9 c2 f8 1f b5 dc e1 22 5f f2 cf ca 5f 97 fc c6 fe eb ef ef 85 ff 35 b5 0e fc af f9 cf f9 1f cb ae 3d 2d bb cc 5f db 6f ab 7f c4 ff 0f fb c5 fe 03 d5 5f fb 8f 56 3e 69 fd 56 ff 40 ff 4d e5 89 e5 5b f7 ff f7 7f 48 1f 60 7f cb 7f a6 7f b2 ff 17 f9 a9 f4 b9 fe 17 fc cf f1 bf 95 fe f8 3f 3a ff 4b ff 2b fc af c0 47 f2 9f e9 3f ed 7f bd 7f 8d fd a7 f9 bd f6 75 fb 7b ec 89 fb 00 4f 2d 4e 71 5a 20 6e af 76 fe 0c 92 83 a8 6b 4b 25 29 Data Ascii: RIFFWEBPVP8 *P>Q&E#$en10h_P'DW'Q_?z2nwLw~"__5=-_o_V>iV@M[H`?:K+G?u{O-NqZ nvkK%)
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 6b 66 ba 58 52 c0 96 f2 b9 b1 f8 03 c0 ea b8 eb dd 72 db 5e f0 86 ed 8f b5 50 82 50 7c c6 15 1a df 70 d9 2e f4 fc 60 04 f3 c1 f2 69 af 1a b3 e9 ec 57 85 90 e1 e4 d7 95 c6 a4 e9 ad 4f 3e c5 9a 3b 64 92 dd 4a 72 2f 14 f2 47 68 b5 ae 48 e1 ca 9d ac 01 8f b5 f5 27 a5 27 1f fa 35 19 c3 2f 89 55 75 16 0c 54 aa 7f 25 33 01 77 58 69 10 f5 99 a8 cb f7 b2 a4 9f 8a 00 d8 8a bb 93 6f 7a c2 76 dc f5 ca 74 2f 4c 53 6a e1 0f f0 7c aa 95 95 ae 27 87 c3 d3 17 17 f2 b0 8d ab 4d b8 87 bf 22 5c 12 77 37 f4 00 a9 f4 c2 9d c4 c2 e9 dc 84 bb 90 41 9d 58 a8 0d 4d dc 5f 23 0d f6 87 73 de 01 75 6f 2e a1 11 5e 84 db 20 f3 0c 40 5e 9a 88 39 ea 5f 94 38 e4 c0 69 0e f7 1c 78 4f 4d 68 50 d5 3d 7e 1a a4 a5 65 56 0d 9d b9 ed f5 1f 2e e3 f1 0d 75 e9 15 53 9c ff 02 4a f4 46 a4 8d c7 0f 04 Data Ascii: kfXRr^PP\|p.`iWO>;dJr/GhH''5/UuT%3wXiozvt/LSj\|'M"\w7AXM_#suo.^ @^9_8ixOMhP=~eV.uSJF
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 1e 74 49 0e 02 58 0f 6e 80 50 bc 07 1b 0a d1 55 d2 54 ff 7f 22 2a 95 d5 ec eb 0c ed d1 2f f9 ce a1 40 d3 7b 2e 79 b1 8b bd a5 6b ec 76 5c fa 1a b6 a5 a3 70 c5 b8 8e 00 7e bd 8d 94 61 31 97 f1 93 a5 64 d6 b5 b1 f9 5a df ed 31 f9 96 c1 b1 2c 3d 89 6e d5 81 b4 b4 e7 c5 2a c2 f7 b0 8f 35 ea c1 58 24 1a a7 be 68 ac 8b 4f 0b a6 cd d0 65 f6 16 7a 73 14 2c aa 1c ba d7 76 b7 88 ec 45 b7 7d 66 75 c3 ee 7e 35 72 bb ed b0 3f 82 3f 9f 72 e3 41 7b e4 3d 05 c2 50 5c c3 83 4e 6e 48 ee 9f 04 5b 82 90 15 25 54 df 6d 9f bf ec ac b2 f4 66 51 b2 19 21 20 7c 6d 17 f5 f3 d2 19 fa 01 ef e2 73 2f 6e f3 bd d2 ce 46 19 1f 18 c9 f0 8c 94 3c 42 a8 69 eb 3f 9d 77 e3 c3 fc 4b 88 23 c0 2e d6 f4 0d fe b0 53 c2 71 2c 33 5b 79 bc bf a1 6a f0 09 8e 39 26 d7 f1 f6 6e 71 fe cc 4c b4 d4 ac 83 Data Ascii: tIXnPUT"/@{.ykv\p~a1dZ1,=n5X$hOezs,vE}fu~5r??rA{=P\NnH[%TmfQ! \|ms/nF<Bi?wK#.Sq,3[yj9&nqL
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 96 7a e2 ee f0 5f b7 68 64 6b 20 2a f1 69 89 f4 ff a2 d6 5d 07 33 7e 88 a0 ed ef 29 21 aa 4b ac 0b ea aa a2 b1 38 52 d7 23 fd da 35 24 de 1a 6c 07 2b be 33 7b e6 eb c5 35 53 b2 4e 42 e2 cd 7b 03 3f 1b 81 37 01 68 a0 38 c1 0c ce c4 5b 57 14 d4 53 cb f2 df d9 e8 64 f3 73 51 15 fd ad 2c 69 8e 0c d6 05 3f 02 f6 dc f4 f6 91 63 29 fb a4 ee 23 ae d6 a5 6a a0 29 dd 78 e5 7d 2d 4f b6 94 6b 85 19 63 e1 35 44 45 f3 f2 5d 41 b6 64 59 ff ca aa 00 ff 24 f3 d9 6b 74 d0 5f 30 36 42 c2 38 a5 5a 09 d1 e9 92 fc c7 11 b3 90 b2 e9 1c 3e 1f e2 a9 24 7c 4a 96 3c 34 59 17 98 d3 c3 73 92 a4 a8 e8 0f 07 a6 f0 3a e7 e7 6a dc e6 6d 27 52 dc ea 4f 23 19 cc 4a 37 21 02 e1 2b de 0b f2 76 48 39 16 fc 18 d1 fe 57 1a 5e 8c bf ea 20 3d 2e b5 24 3d 59 7d ec 15 12 b4 6e 4f b4 1c cd ba 9f fb Data Ascii: z_hdk *i]3~)!K8R#5$l+3{5SNB{?7h8[WSdsQ,i?c)#j)x}-Okc5DE]AdY$kt_06B8Z>$\|J<4Ys:jm'RO#J7!+vH9W^ =.$=Y}nO
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 4e 84 45 92 b0 f6 e0 1e 73 1c 14 3b 78 81 7d 54 de e6 e8 e3 27 90 ea 41 49 7c 04 d3 2c 3b 77 2f a6 2f cc ae 92 0b 90 aa fa 87 03 c0 b6 cd 84 93 94 b6 5e 9c bd cb a1 bc a5 bc af 55 77 a2 bd 63 44 e7 10 16 5c 22 77 ee 8a a0 ab 68 60 ef 3d 91 e1 57 73 0b ce e7 00 06 c2 32 85 c5 2c 38 46 c9 44 75 bf ad 42 fe 9a d4 82 c2 a4 ae 0a 57 8d 83 f0 99 7c 28 5d cb 54 16 d5 77 78 18 8c d3 77 43 aa 1b a6 b9 fd d6 81 9a c6 e7 57 cb f4 7c 6d fb f3 24 cf 80 11 99 c4 28 e5 f2 8f 1c f0 a5 e0 2e 24 2e a7 a3 d0 3f ab bf e6 24 d3 f6 49 7f 84 d2 d7 35 64 21 99 3d 91 73 3b af 37 53 df bd 7d ec 3e 29 34 26 d5 f8 69 c9 1f 30 93 c2 2b fa ac 6e 5f 06 92 d0 c4 93 db c6 64 8c 1f 7b 0f ba 7e 09 90 7a f9 a8 23 3e 15 d4 de b5 e2 cc 8e b0 c2 33 c2 c7 2d b7 9e b1 25 ea 71 96 f2 4c 30 d6 4c Data Ascii: NEs;x}T'AI\|,;w//^UwcD\"wh`=Ws2,8FDuBW\|(]TwxwCW\|m$(.$.?$I5d!=s;7S}>)4&i0+n_d{~z#>3-%qL0L
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: b4 ea bb cd b6 58 1d ae 17 71 d8 bb c6 52 55 a7 3a dc b5 22 77 54 3b 2f a0 ec b6 06 17 20 f2 3d 5c 2a 62 45 20 93 cc be 4f f9 cf 5d 38 04 be c2 f5 a9 6a 7a 99 bc 59 fe 94 c3 be 35 81 1a 3e 70 2a 6b 80 06 0a c8 42 12 a4 ef a0 c2 a9 83 5e d2 00 19 f6 77 07 4a e5 ba 38 b0 06 91 23 71 10 4a b8 1e 80 25 ac 23 e0 c2 84 b7 19 66 cd 99 e7 1b e7 d0 4e bd 19 2e 55 4d 52 60 2c 29 b0 57 c0 60 98 67 27 44 14 8d 6d b8 f9 38 fa 93 6e dd 88 b7 a1 e4 76 cb 1e 61 cc 05 fa aa c8 88 1a 81 c5 8a ba db b9 34 af e7 d1 81 78 0f d1 b2 da 1b 0e 99 cc 03 c7 4d df 59 d9 a4 f4 fa 5e f6 3e 19 c6 11 d4 1d 47 f9 d9 54 28 dd 42 79 6f f0 83 21 d0 a3 86 bd 02 81 6f 7e 3a d6 2d 29 68 b5 1e f1 03 b6 6e 1f 75 dd 59 af 6b 7c b1 61 74 c3 5a c2 40 e6 ac c4 b3 5a 3a fa a2 d1 52 7f 88 04 94 8e 36 Data Ascii: XqRU:"wT;/ =\bE O]8jzY5>pkB^wJ8#qJ%#fN.UMR`,)W`g'Dm8nva4xMY^>GT(Byo!o~:-)hnuYk\|atZ@Z:R6
2024-07-02 22:25:14 UTC	495	IN	Data Raw: 6b d5 9a 68 0e 28 ef 31 1c 6c a8 4c bf 85 21 5a 67 46 f6 c3 b4 b0 71 58 9e 9a 7d b9 af f2 26 08 83 ce 1e 6e 70 d6 50 a9 53 2d 03 a6 f8 94 f8 ee 4f e4 2c c0 64 29 2f b0 43 cb f7 be 19 1d 22 ef 49 00 8d 05 59 12 45 9d 7a 90 b6 16 fe 06 8a 33 27 3c 3c 74 33 10 ae 54 b1 3b e1 f7 f9 2c aa e2 18 7e 72 1d b0 d1 fe 62 f4 81 6c 6e 78 02 68 ab 91 07 f1 75 48 5a 3e 16 7f 2e 4f 5f 1b eb 25 be ef 5f 0b fb 5d ab fa d7 92 db 64 9d a3 29 7d 65 e8 04 ca 0c fb 83 e2 fc 47 05 03 e5 b0 e7 52 ea f8 71 00 16 34 d6 33 5c ce c0 67 93 de 11 fb 1e 57 33 3f b4 5c 99 01 f1 69 3d 0a ba af 04 9f 8e 45 27 b5 88 45 a7 60 6c 87 79 00 ac 9c ec 4a 1e 07 14 95 a4 ac 4f f2 90 a1 10 6f d7 0c e4 6c 9f 3d f9 08 91 ee e6 66 27 dc 8e 88 41 66 7b 18 4e 08 00 2d f2 b2 06 a2 27 ce 7b 01 e3 fe db 3e Data Ascii: kh(1lL!ZgFqX}&npPS-O,d)/C"IYEz3'<<t3T;,~rblnxhuHZ>.O_%_]d)}eGRq43\gW3?\i=E'E`lyJOol=f'Af{N-'{>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.5	49797	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:13 UTC	2868	OUT	GET /api/stats/playback?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=0.031&fmt=397&fs=0&rt=2.123&euri&lact=413&cl=648221806&mos=0&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&fexp=v1%2C23986021%2C18623%2C204121%2C230596%2C104308%2C6789%2C16229%2C133212%2C14625955%2C11684381%2C7111%2C24166%2C12177%2C9954%2C1192%2C7913%2C18310%2C273%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C29151%2C2197%2C621%2C7961%2C1414%2C19%2C2%2C1082%2C4081%2C2872%2C101%2C10943%2C2471%2C6008%2C150%2C1388%2C713%2C2585%2C8134%2C1233%2C1375%2C3761%2C3157%2C3975%2C681%2C1590%2C3542%2C8162%2C3259&rtn=7&feature=youtu.be&afmt=251&muted=0&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUT [TRUNCATED] Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00 sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1719959111745 X-YouTube-Page-CL: 648613515 X-Goog-Event-Time: 1719959111745 X-YouTube-Utc-Offset: -240 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D X-YouTube-Ad-Signals: dt=1719959110085&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:14 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.5	49798	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:13 UTC	2025	OUT	GET /ptracking?html5=1&video_id=dQw4w9WgXcQ&cpn=PrsgaOatqma7291e&ei=Pn6EZtv-HI_Ii9oP38isiA8&ptk=youtube_single&oid=QuEoptyF_C_7jHTEUMsRjA&ptchn=uAXFkgsw1L7xaCfnd5JJOw&pltype=content&m=ArNU00MqJSI-SiRYtjN_6TLhfkGvPSo3yFBShQdQL-oMhPh9ZkZ89i45o47sF6QNBeOUyCEtsafsC0wXfZsfMTIx HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00 sec-ch-ua-arch: "x86" X-YouTube-Page-CL: 648613515 sec-ch-ua-platform-version: "10.0.0" X-YouTube-Utc-Offset: -240 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D X-YouTube-Ad-Signals: dt=1719959109306&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:14 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.5	49799	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:13 UTC	2107	OUT	GET /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=670751145&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00 sec-ch-ua-arch: "x86" X-YouTube-Page-CL: 648613515 sec-ch-ua-platform-version: "10.0.0" X-YouTube-Utc-Offset: -240 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D X-YouTube-Ad-Signals: dt=1719959109306&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:14 UTC	945	IN	HTTP/1.1 302 Found P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 22:25:13 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://googleads.g.doubleclick.net/pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=670751145&utuid=uAXFkgsw1L7xaCfnd5JJOw&cv_attributed=0 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:14 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.5	49796	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:13 UTC	1431	OUT	POST /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2662 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-wow64: ?0 sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-platform: "Windows" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.132" X-Youtube-Client-Name: 1 X-Youtube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:13 UTC	2662	OUT	Data Raw: 7b 22 65 6e 67 61 67 65 6d 65 6e 74 54 79 70 65 22 3a 22 45 4e 47 41 47 45 4d 45 4e 54 5f 54 59 50 45 5f 55 4e 42 4f 55 4e 44 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 42 55 57 68 58 62 6c 70 53 64 6b 74 58 53 53 69 2d 5f 4a 47 30 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 58 77 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 Data Ascii: {"engagementType":"ENGAGEMENT_TYPE_UNBOUND","context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.33","deviceMake":"","deviceModel":"","visitorData":"CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Wi
2024-07-02 22:25:14 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 02 Jul 2024 22:25:14 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:14 UTC	958	IN	Data Raw: 34 65 64 65 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 37 30 32 2e 30 31 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 41 74 74 65 73 74 61 74 69 6f 6e 43 68 61 6c 6c 65 6e 67 65 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 31 39 33 30 31 62 34 65 34 33 33 62 33 63 38 37 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 Data Ascii: 4ede{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240702.01.00"},{"key":"yt_li","value":"0"},{"key":"GetAttestationChallenge_rid","value":"0x19301b4e433b3c87"}]},{"service":"
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 35 31 31 35 37 38 33 38 2c 35 31 31 35 38 34 37 30 2c 35 31 31 35 38 35 31 34 2c 35 31 31 36 30 35 34 35 2c 35 31 31 36 32 31 37 30 2c 35 31 31 36 32 35 39 35 2c 35 31 31 36 35 34 36 37 2c 35 31 31 36 35 35 36 38 2c 35 31 31 36 36 39 32 32 2c 35 31 31 36 37 38 31 33 2c 35 31 31 36 39 31 31 37 2c 35 31 31 36 39 31 33 31 2c 35 31 31 37 30 32 34 37 2c 35 31 31 37 35 36 30 36 2c 35 31 31 37 35 37 33 32 2c 35 31 31 37 36 35 31 31 2c 35 31 31 37 38 37 30 35 2c 35 31 31 37 38 39 38 32 2c 35 31 31 38 33 39 30 39 2c 35 31 31 38 34 30 32 32 2c 35 31 31 38 34 39 39 30 2c 35 31 31 38 35 31 34 30 2c 35 31 31 38 36 35 32 38 2c 35 31 31 38 37 32 34 31 2c 35 31 31 38 39 38 32 36 2c 35 31 31 39 30 36 35 32 2c 35 31 31 39 34 31 33 37 2c 35 31 31 39 35 32 33 31 2c 35 31 31 Data Ascii: 51157838,51158470,51158514,51160545,51162170,51162595,51165467,51165568,51166922,51167813,51169117,51169131,51170247,51175606,51175732,51176511,51178705,51178982,51183909,51184022,51184990,51185140,51186528,51187241,51189826,51190652,51194137,51195231,511
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 59 5a 6f 57 48 57 45 37 41 35 71 65 35 42 65 49 57 63 46 43 70 36 77 57 76 56 64 6c 34 30 6c 5a 4b 31 34 56 55 59 52 4b 45 43 31 73 59 50 72 73 58 75 35 63 36 33 36 6a 5a 69 2b 31 47 37 33 6e 62 41 57 67 5a 72 46 6b 42 32 65 68 49 34 70 67 61 4b 54 44 36 31 2f 42 43 32 58 74 70 76 4a 31 43 37 57 79 39 72 59 68 49 7a 72 72 6b 33 4d 66 4c 2b 6b 65 4a 6a 6b 4f 4d 62 32 66 4e 53 34 43 6a 35 41 48 68 47 4d 71 6e 6e 6e 4d 54 51 68 35 66 5a 43 67 4f 76 70 6e 4e 64 65 54 72 53 4a 45 58 49 37 62 69 67 65 50 49 76 48 63 6c 4b 6c 56 58 41 73 31 59 33 53 74 49 2b 38 75 73 63 57 59 7a 72 37 5a 6e 78 37 42 4a 62 51 43 71 78 4b 46 54 58 77 48 76 36 78 43 53 52 41 64 70 39 53 4b 74 63 4c 75 74 6e 43 42 45 56 75 2b 6a 79 37 4f 6f 61 4c 2f 5a 72 45 46 74 74 72 69 53 2b 58 Data Ascii: YZoWHWE7A5qe5BeIWcFCp6wWvVdl40lZK14VUYRKEC1sYPrsXu5c636jZi+1G73nbAWgZrFkB2ehI4pgaKTD61/BC2XtpvJ1C7Wy9rYhIzrrk3MfL+keJjkOMb2fNS4Cj5AHhGMqnnnMTQh5fZCgOvpnNdeTrSJEXI7bigePIvHclKlVXAs1Y3StI+8uscWYzr7Znx7BJbQCqxKFTXwHv6xCSRAdp9SKtcLutnCBEVu+jy7OoaL/ZrEFttriS+X
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 49 59 4c 2b 45 6a 52 38 57 50 30 4e 4d 34 41 6a 33 68 35 53 4b 69 41 38 37 59 56 79 4f 73 35 6e 33 48 42 6f 71 6e 76 76 58 5a 6d 39 6b 55 6a 4e 44 52 45 62 63 54 4d 2b 68 38 37 69 5a 62 72 4f 70 33 31 73 7a 45 4c 67 74 45 43 57 71 4b 76 7a 59 73 2b 76 45 63 51 6a 43 4d 79 71 71 45 75 37 39 4e 50 62 50 45 47 4d 79 31 75 4e 47 2f 4b 49 49 69 71 34 70 50 42 36 64 79 69 53 4a 4a 72 75 42 61 76 69 65 77 71 4d 35 74 54 58 4f 4c 76 74 74 63 67 41 66 51 48 35 73 51 70 32 57 2b 4a 65 4c 4e 4a 39 38 35 4c 36 4c 68 5a 39 36 44 53 72 38 6a 67 35 4d 41 6a 31 50 61 6d 54 6e 6d 7a 58 75 6e 34 43 58 62 65 6d 65 72 6c 6d 54 67 78 53 36 64 42 70 56 56 4d 7a 37 6b 69 4f 49 46 53 38 71 4d 30 4e 5a 6c 70 59 33 4e 68 6c 46 78 30 7a 56 6d 37 76 4d 78 6f 74 6b 64 53 54 72 69 42 Data Ascii: IYL+EjR8WP0NM4Aj3h5SKiA87YVyOs5n3HBoqnvvXZm9kUjNDREbcTM+h87iZbrOp31szELgtECWqKvzYs+vEcQjCMyqqEu79NPbPEGMy1uNG/KIIiq4pPB6dyiSJJruBaviewqM5tTXOLvttcgAfQH5sQp2W+JeLNJ985L6LhZ96DSr8jg5MAj1PamTnmzXun4CXbemerlmTgxS6dBpVVMz7kiOIFS8qM0NZlpY3NhlFx0zVm7vMxotkdSTriB
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 2b 65 53 71 74 52 36 30 48 71 69 77 78 58 4b 63 77 47 6f 6f 38 66 4e 79 42 37 74 77 4d 48 38 6e 32 50 49 73 6f 79 6c 6e 31 71 39 54 42 63 6c 47 56 55 47 65 68 58 68 61 65 7a 39 30 6b 53 54 63 4a 41 79 6c 51 44 61 73 73 69 51 75 46 32 32 6e 4b 31 6b 4a 67 65 4e 6e 42 65 2f 6b 4e 4d 75 72 55 78 54 42 4c 47 72 6d 64 4e 68 32 6c 4a 53 76 4c 7a 36 36 34 33 37 31 34 56 6f 37 55 73 38 2f 53 70 38 47 4a 57 53 78 66 4f 2f 7a 75 2b 66 2f 78 67 53 56 51 62 2b 42 48 31 6e 71 4a 54 46 44 79 48 41 53 2b 34 38 6e 6d 48 73 44 67 4c 55 70 73 46 65 50 70 6f 45 46 63 43 74 71 33 75 59 41 2f 31 38 79 52 42 41 42 57 4c 64 39 70 33 53 59 74 74 65 53 2f 34 56 53 58 41 79 61 75 33 36 45 4b 38 4e 6c 38 32 42 37 67 61 5a 2f 69 41 48 6d 44 33 55 70 79 77 37 30 74 6d 75 62 4c 62 4e Data Ascii: +eSqtR60HqiwxXKcwGoo8fNyB7twMH8n2PIsoyln1q9TBclGVUGehXhaez90kSTcJAylQDassiQuF22nK1kJgeNnBe/kNMurUxTBLGrmdNh2lJSvLz6643714Vo7Us8/Sp8GJWSxfO/zu+f/xgSVQb+BH1nqJTFDyHAS+48nmHsDgLUpsFePpoEFcCtq3uYA/18yRBABWLd9p3SYtteS/4VSXAyau36EK8Nl82B7gaZ/iAHmD3Upyw70tmubLbN
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 61 76 6a 46 34 41 34 33 30 58 75 44 42 6c 79 63 38 4e 57 64 5a 36 45 2f 49 77 32 2b 5a 54 34 30 33 39 48 76 78 48 49 39 45 59 65 66 43 61 62 4b 36 75 69 53 6d 30 50 57 52 72 45 42 52 71 78 4a 69 4c 64 4c 33 6e 58 67 37 42 65 73 6f 34 4c 6c 58 74 52 42 7a 67 70 31 2f 6d 79 62 44 53 53 75 64 46 74 62 61 6d 56 37 53 47 4c 52 4f 4b 77 76 51 4d 52 55 75 42 4e 48 43 4b 6d 44 36 62 37 72 72 50 6c 42 4b 5a 6a 76 46 49 31 43 4a 72 61 70 57 61 6f 50 4b 30 36 35 6f 74 64 59 64 76 66 5a 6a 78 76 76 6b 6e 32 68 76 38 41 58 64 44 63 42 75 63 6c 71 63 32 31 52 70 59 6f 37 62 79 71 52 2f 4c 48 72 5a 74 46 44 4d 37 61 36 57 61 48 77 69 61 41 2f 4b 35 76 74 57 43 4d 59 37 42 36 64 7a 4a 69 67 64 4d 76 30 62 4c 4e 68 47 62 59 36 65 2b 31 43 44 67 59 53 6e 58 38 6f 61 5a 41 Data Ascii: avjF4A430XuDBlyc8NWdZ6E/Iw2+ZT4039HvxHI9EYefCabK6uiSm0PWRrEBRqxJiLdL3nXg7Beso4LlXtRBzgp1/mybDSSudFtbamV7SGLROKwvQMRUuBNHCKmD6b7rrPlBKZjvFI1CJrapWaoPK065otdYdvfZjxvvkn2hv8AXdDcBuclqc21RpYo7byqR/LHrZtFDM7a6WaHwiaA/K5vtWCMY7B6dzJigdMv0bLNhGbY6e+1CDgYSnX8oaZA
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 4d 65 57 62 4e 4e 6e 47 59 37 55 56 6c 77 35 63 73 76 70 71 65 2b 6b 39 4c 61 61 54 4d 36 53 6b 6a 4c 5a 30 51 65 4d 70 42 4f 45 6d 49 52 70 4e 35 30 62 4c 33 2b 4e 5a 71 43 66 54 45 2f 56 75 34 2b 49 7a 70 77 4b 54 64 64 31 53 4a 32 41 52 54 63 73 54 53 59 39 74 62 5a 75 32 4a 6f 70 39 6e 75 30 44 73 6a 50 43 54 47 43 77 68 57 57 49 65 4a 73 73 41 34 76 4d 4a 47 53 41 4b 6d 74 4a 68 51 71 49 4a 45 2b 49 66 35 5a 41 30 71 7a 74 49 75 4e 42 37 77 65 70 57 6a 68 79 72 61 73 36 53 5a 4d 6e 45 74 66 32 4b 45 6b 6d 6e 58 71 4b 5a 6a 43 38 37 39 6f 30 49 50 54 6e 42 76 67 50 51 32 66 62 62 53 65 50 4c 6a 75 30 64 58 4f 37 74 46 52 64 54 76 48 34 30 56 4d 42 79 79 55 67 61 59 2b 76 73 46 6a 49 73 6b 44 62 61 76 66 64 74 72 53 41 30 47 6e 38 70 42 4c 52 32 72 46 Data Ascii: MeWbNNnGY7UVlw5csvpqe+k9LaaTM6SkjLZ0QeMpBOEmIRpN50bL3+NZqCfTE/Vu4+IzpwKTdd1SJ2ARTcsTSY9tbZu2Jop9nu0DsjPCTGCwhWWIeJssA4vMJGSAKmtJhQqIJE+If5ZA0qztIuNB7wepWjhyras6SZMnEtf2KEkmnXqKZjC879o0IPTnBvgPQ2fbbSePLju0dXO7tFRdTvH40VMByyUgaY+vsFjIskDbavfdtrSA0Gn8pBLR2rF
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 4a 78 69 39 66 53 72 42 78 4c 79 4c 47 71 36 47 4b 4e 45 78 41 61 57 43 63 51 37 65 4c 38 68 4d 48 67 73 6c 47 79 30 77 7a 70 68 43 75 38 50 76 54 36 47 32 42 2f 39 47 6a 6e 31 66 50 49 75 44 4d 54 2b 6d 41 7a 55 7a 52 46 4e 67 4d 4c 55 45 46 75 39 44 79 56 76 6b 4f 57 65 58 32 77 70 70 2f 55 59 74 43 39 38 34 31 6c 70 39 44 33 69 58 47 4f 54 2f 49 73 43 6d 64 70 2f 71 69 51 39 6e 4f 59 6e 4c 56 55 4c 4b 35 61 31 53 67 74 47 42 48 70 6c 78 31 33 57 62 79 6e 71 6f 31 72 62 44 6e 6b 54 50 2f 2b 6b 54 2f 41 56 42 5a 45 67 48 53 2b 43 69 63 68 76 30 79 58 62 44 67 7a 43 30 37 79 61 54 61 71 42 74 6a 70 31 6f 4d 32 7a 48 36 76 52 79 73 75 42 30 69 45 67 32 69 64 34 6a 78 64 70 50 6e 50 61 6c 61 41 39 58 44 62 7a 44 4a 36 6a 35 2b 78 76 7a 39 78 56 30 37 71 72 Data Ascii: Jxi9fSrBxLyLGq6GKNExAaWCcQ7eL8hMHgslGy0wzphCu8PvT6G2B/9Gjn1fPIuDMT+mAzUzRFNgMLUEFu9DyVvkOWeX2wpp/UYtC9841lp9D3iXGOT/IsCmdp/qiQ9nOYnLVULK5a1SgtGBHplx13Wbynqo1rbDnkTP/+kT/AVBZEgHS+Cichv0yXbDgzC07yaTaqBtjp1oM2zH6vRysuB0iEg2id4jxdpPnPalaA9XDbzDJ6j5+xvz9xV07qr
2024-07-02 22:25:14 UTC	1390	IN	Data Raw: 55 77 59 50 76 62 52 33 72 67 77 35 4c 74 69 53 49 35 57 56 32 70 66 30 49 73 74 56 64 57 31 42 35 49 67 39 76 52 79 59 76 79 62 41 66 57 4e 54 42 34 51 71 4c 6d 69 31 67 61 59 38 62 42 73 74 6c 70 44 61 32 6c 41 75 78 78 48 43 4e 6e 43 37 34 65 54 73 54 75 6a 66 75 67 56 70 46 35 61 70 49 2b 75 67 45 72 69 62 4e 50 4c 42 72 4f 64 7a 4e 53 67 49 34 71 68 67 35 45 46 52 46 41 41 55 36 41 32 74 2b 47 46 56 46 67 31 55 41 43 65 65 77 4b 6e 6c 73 34 77 63 4b 57 63 4d 30 31 54 44 4f 6d 67 31 68 59 76 4e 74 39 45 64 50 70 59 53 6b 38 71 58 74 51 49 4b 47 58 4d 46 62 49 42 52 66 57 71 74 38 4e 42 52 34 66 50 59 34 71 51 70 38 6b 4c 45 58 65 35 39 4e 67 52 47 67 53 4a 6c 41 30 75 62 4b 6f 4f 4a 53 50 72 41 6c 68 67 53 73 6c 73 46 39 35 5a 43 59 32 6e 6f 67 58 41 Data Ascii: UwYPvbR3rgw5LtiSI5WV2pf0IstVdW1B5Ig9vRyYvybAfWNTB4QqLmi1gaY8bBstlpDa2lAuxxHCNnC74eTsTujfugVpF5apI+ugEribNPLBrOdzNSgI4qhg5EFRFAAU6A2t+GFVFg1UACeewKnls4wcKWcM01TDOmg1hYvNt9EdPpYSk8qXtQIKGXMFbIBRfWqt8NBR4fPY4qQp8kLEXe59NgRGgSJlA0ubKoOJSPrAlhgSslsF95ZCY2nogXA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.5	49804	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:14 UTC	769	OUT	GET /sw.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive Cache-Control: max-age=0 Accept: / Service-Worker: script X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: serviceworker Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:14 UTC	1528	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Tue, 02 Jul 2024 22:25:14 GMT Date: Tue, 02 Jul 2024 22:25:14 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:14 UTC	1528	IN	Data Raw: 32 33 34 62 0d 0a 2f 2a 2a 20 36 31 31 35 36 33 35 31 38 30 37 35 39 35 36 35 38 35 35 20 2a 2f 73 65 6c 66 2e 64 6f 63 75 6d 65 6e 74 20 3d 20 73 65 6c 66 3b 20 73 65 6c 66 2e 77 69 6e 64 6f 77 20 3d 20 73 65 6c 66 3b 76 61 72 20 79 74 63 66 67 3d 7b 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 79 74 26 26 79 74 2e 63 6f 6e 66 69 67 5f 7c 7c 79 74 63 66 67 2e 64 61 74 61 5f 7c 7c 28 79 74 63 66 67 2e 64 61 74 61 5f 3d 7b 7d 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6f 29 7b 72 65 74 75 72 6e 20 6b 20 69 6e 20 79 74 63 66 67 2e 64 28 29 3f 79 74 63 66 67 2e 64 28 29 5b 6b 5d 3a 6f 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 61 72 67 75 6d 65 6e 74 73 3b 69 66 28 61 2e 6c 65 6e 67 74 Data Ascii: 234b/** 6115635180759565855 */self.document = self; self.window = self;var ytcfg={d:function(){return window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k]:o},set:function(){var a=arguments;if(a.lengt
2024-07-02 22:25:14 UTC	1528	IN	Data Raw: 75 65 2c 22 65 6e 61 62 6c 65 5f 65 6e 74 69 74 79 5f 73 74 6f 72 65 5f 66 72 6f 6d 5f 64 65 70 65 6e 64 65 6e 63 79 5f 69 6e 6a 65 63 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 65 6f 6d 5f 77 65 62 76 69 65 77 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 6c 6f 77 5f 6c 6f 67 67 69 6e 67 5f 70 34 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 66 75 6c 6c 79 5f 72 65 61 63 74 69 76 65 5f 62 61 64 67 65 5f 73 68 61 70 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 67 65 6c 5f 6c 6f 67 5f 63 6f 6d 6d 61 6e 64 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 67 68 6f 73 74 5f 76 69 65 77 5f 72 65 6e 64 65 72 69 6e 67 5f 6c 69 6d 69 74 65 64 5f 68 35 5f 63 6c 69 65 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 Data Ascii: ue,"enable_entity_store_from_dependency_injection":true,"enable_eom_webview_header":true,"enable_flow_logging_p4e":true,"enable_fully_reactive_badge_shape":true,"enable_gel_log_commands":true,"enable_ghost_view_rendering_limited_h5_client":true,"enable_ha
2024-07-02 22:25:14 UTC	1528	IN	Data Raw: 72 75 65 2c 22 66 69 78 5f 69 73 64 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 67 63 66 5f 63 6f 6e 66 69 67 5f 73 74 6f 72 65 5f 65 6e 61 62 6c 65 64 22 3a 74 72 75 65 2c 22 67 63 66 5f 6d 75 73 69 63 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 68 35 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 65 6e 61 62 6c 65 5f 61 64 63 70 6e 5f 6d 61 63 72 6f 5f 73 75 62 73 74 69 74 75 74 69 6f 6e 5f 66 6f 72 5f 63 6c 69 63 6b 5f 70 69 6e 67 73 22 3a 74 72 75 65 2c 22 68 35 5f 65 6e 61 62 6c 65 5f 67 65 6e 65 72 69 63 5f 65 72 72 6f 72 5f 6c 6f 67 67 69 6e 67 5f 65 76 65 6e 74 22 3a 74 72 75 65 2c 22 68 35 5f 69 6e 70 6c 61 79 65 72 5f 65 6e 61 62 6c 65 5f 61 64 63 70 6e 5f 6d 61 63 72 6f 5f 73 75 62 73 74 69 74 75 74 69 6f 6e 5f 66 6f 72 5f 63 6c 69 63 6b 5f 70 Data Ascii: rue,"fix_isd_logging":true,"gcf_config_store_enabled":true,"gcf_music_innertube":true,"h5_companion_enable_adcpn_macro_substitution_for_click_pings":true,"h5_enable_generic_error_logging_event":true,"h5_inplayer_enable_adcpn_macro_substitution_for_click_p
2024-07-02 22:25:14 UTC	1528	IN	Data Raw: 6e 65 6e 74 5f 77 72 61 70 70 65 72 22 3a 74 72 75 65 2c 22 72 65 63 6f 72 64 5f 61 70 70 5f 63 72 61 73 68 65 64 5f 77 65 62 22 3a 74 72 75 65 2c 22 72 65 6d 6f 76 65 5f 6d 61 73 74 68 65 61 64 5f 63 68 61 6e 6e 65 6c 5f 62 61 6e 6e 65 72 5f 6f 6e 5f 72 65 66 72 65 73 68 22 3a 74 72 75 65 2c 22 72 65 70 6c 61 63 65 5f 63 6c 69 65 6e 74 5f 75 72 6c 5f 70 61 72 73 69 6e 67 5f 77 69 74 68 5f 73 65 72 76 65 72 5f 73 69 67 6e 61 6c 22 3a 74 72 75 65 2c 22 72 65 70 6c 61 63 65 5f 63 6c 6f 73 75 72 65 5f 77 69 6e 64 6f 77 5f 77 69 74 68 5f 75 70 64 61 74 65 64 5f 79 74 77 69 6e 64 6f 77 5f 69 6e 5f 73 74 75 64 69 6f 22 3a 74 72 75 65 2c 22 73 63 68 65 64 75 6c 65 72 5f 75 73 65 5f 72 61 66 5f 62 79 5f 64 65 66 61 75 6c 74 22 3a 74 72 75 65 2c 22 73 65 72 76 69 Data Ascii: nent_wrapper":true,"record_app_crashed_web":true,"remove_masthead_channel_banner_on_refresh":true,"replace_client_url_parsing_with_server_signal":true,"replace_closure_window_with_updated_ytwindow_in_studio":true,"scheduler_use_raf_by_default":true,"servi
2024-07-02 22:25:14 UTC	1528	IN	Data Raw: 70 5f 63 6c 22 3a 74 72 75 65 2c 22 77 65 62 5f 65 6e 61 62 6c 65 5f 61 62 64 5f 72 65 66 22 3a 74 72 75 65 2c 22 77 65 62 5f 65 6e 61 62 6c 65 5f 65 72 72 6f 72 5f 32 30 34 22 3a 74 72 75 65 2c 22 77 65 62 5f 66 6f 72 77 61 72 64 5f 63 6f 6d 6d 61 6e 64 5f 6f 6e 5f 70 62 6a 22 3a 74 72 75 65 2c 22 77 65 62 5f 6c 6f 67 5f 6d 65 6d 6f 72 79 5f 74 6f 74 61 6c 5f 6b 62 79 74 65 73 22 3a 74 72 75 65 2c 22 77 65 62 5f 6d 61 73 74 68 65 61 64 5f 64 69 73 61 70 70 65 61 72 69 6e 67 5f 63 68 61 6e 6e 65 6c 5f 69 63 6f 6e 5f 66 69 78 22 3a 74 72 75 65 2c 22 77 65 62 5f 6d 61 73 74 68 65 61 64 5f 76 69 73 69 74 65 64 5f 63 68 61 6e 6e 65 6c 5f 63 6f 6c 6f 72 5f 66 69 78 22 3a 74 72 75 65 2c 22 77 65 62 5f 6f 6e 65 5f 70 6c 61 74 66 6f 72 6d 5f 65 72 72 6f 72 5f 68 Data Ascii: p_cl":true,"web_enable_abd_ref":true,"web_enable_error_204":true,"web_forward_command_on_pbj":true,"web_log_memory_total_kbytes":true,"web_masthead_disappearing_channel_icon_fix":true,"web_masthead_visited_channel_color_fix":true,"web_one_platform_error_h
2024-07-02 22:25:14 UTC	1403	IN	Data Raw: 6f 6e 73 5f 62 65 66 6f 72 65 5f 61 62 61 6e 64 6f 6e 5f 63 6f 75 6e 74 22 3a 34 2c 22 73 77 61 74 63 68 65 72 6f 6f 5f 70 62 73 5f 6d 61 78 5f 64 65 6c 61 79 5f 6d 73 22 3a 33 30 30 30 2c 22 77 65 62 5f 66 6f 72 65 67 72 6f 75 6e 64 5f 68 65 61 72 74 62 65 61 74 5f 69 6e 74 65 72 76 61 6c 5f 6d 73 22 3a 32 38 30 30 30 2c 22 77 65 62 5f 6c 6f 67 67 69 6e 67 5f 6d 61 78 5f 62 61 74 63 68 22 3a 31 35 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 64 75 72 61 74 69 6f 6e 5f 6d 73 22 3a 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 77 69 6c 5f 69 63 6f 6e 5f 6d 61 78 5f 63 6f 6e 63 75 72 72 65 6e 74 5f 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 Data Ascii: ons_before_abandon_count":4,"swatcheroo_pbs_max_delay_ms":3000,"web_foreground_heartbeat_interval_ms":28000,"web_logging_max_batch":150,"web_smoothness_test_duration_ms":0,"web_smoothness_test_method":0,"wil_icon_max_concurrent_fetches":9999,"ytidb_remake
2024-07-02 22:25:14 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.5	49806	142.250.185.110	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:14 UTC	514	OUT	GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=tz=America.New_York
2024-07-02 22:25:14 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1607 Date: Tue, 02 Jul 2024 22:25:14 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:14 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-07-02 22:25:14 UTC	457	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.5	49807	216.58.212.130	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:14 UTC	1051	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-02 22:25:15 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:14 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:15 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 70 69 4f 32 4e 30 6a 45 57 45 55 4c 55 66 4c 36 6d 41 65 77 79 42 55 6e 58 63 4d 55 78 64 37 4e 51 43 6e 56 6e 57 31 79 37 4f 4d 70 47 32 46 48 79 34 73 68 46 52 39 33 71 7a 65 65 50 73 70 4b 36 4c 62 6f 74 6f 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKpiO2N0jEWEULUfL6mAewyBUnXcMUxd7NQCnVnW1y7OMpG2FHy4shFR93qzeePspK6Lboto","type":4}
2024-07-02 22:25:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.5	49813	209.85.165.198	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	1927	OUT	GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&ctier=L&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1 Host: rr1---sn-q4flrnee.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:15 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.5	49812	209.85.165.198	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	1919	OUT	GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1 Host: rr1---sn-q4flrnee.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:15 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.5	49810	142.250.181.238	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:15 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.5	49817	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	1123	OUT	GET /vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3508 Date: Tue, 02 Jul 2024 22:25:15 GMT Expires: Wed, 03 Jul 2024 00:25:15 GMT Cache-Control: public, max-age=7200 ETag: "1575389988" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:15 UTC	744	IN	Data Raw: 52 49 46 46 ac 0d 00 00 57 45 42 50 56 50 38 20 a0 0d 00 00 b0 38 00 9d 01 2a a8 00 5e 00 3e 51 10 94 4a 23 91 d1 cb a0 38 05 04 b4 00 58 93 00 ab 1f 1e ff 31 f9 55 ec 8b 6a 7f 25 f8 eb 8c 7c d6 f7 2f 9e 3f f8 3e ad 3c c1 39 e6 fe e3 7a a5 fd b0 fd b1 f7 92 ff 4d eb 1f fb 6f a8 07 f6 9e a6 2f 43 cf d9 cf 4e 7f dc 2f 86 2f ed 9f f6 fd 28 b3 1e 3a cc f8 8f d8 01 ea ae ec 6f af f3 bf c3 bf 8f 9a 84 7b 27 fc 47 06 78 00 fc ff fa df fa 4f 0f df e8 bd 39 ed b5 f2 a7 f1 72 f3 4f 60 3f e5 7f db 7f cb 7e 5e 7f 92 fa 62 ff 07 ff 0f dc af ba af cf 3f d0 ff d6 ff 25 f0 13 fc af fa 97 fc 1e 05 5f d6 85 81 f3 0c 6e a7 04 77 b7 90 e9 77 10 39 ca c0 3c 1c 9b 3b b9 a2 5d 51 af 3a 77 4c 28 8f b4 d0 f3 22 70 0e ae 77 30 d0 64 81 1a e4 38 58 9c 24 3a e9 d5 45 d5 f3 43 b8 36 Data Ascii: RIFFWEBPVP8 8*^>QJ#8X1Uj%\|/?><9zMo/CN//(:o{'GxO9rO`?~^b?%_nww9<;]Q:wL("pw0d8X$:EC6
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 29 d9 0c ea a7 6d 7c f2 41 23 ce 97 2b a0 50 8a c5 91 85 57 4c 22 40 5c 2a 4b fc f5 4d 42 6a f4 87 1a 44 6e b6 1b ec 5b 6c 3d 8e 9f 60 4e d4 cf b2 e1 cb e1 01 04 c7 40 ab 5f 07 bc e9 1d 72 e7 c6 66 eb ee ba 05 40 b2 84 41 5f 41 66 43 66 b9 6d 2a e0 c0 7c 90 04 d5 93 d3 5e 81 10 14 0a f8 cf df a0 34 aa cb d5 15 9c 15 2c 51 cd 8d 92 ea ca f5 d3 4e ed bf 45 81 1f 39 d4 e2 5b d0 a7 18 98 a8 5b 79 f5 c8 7d eb b1 68 72 7b 33 70 3a 6a 5d d6 c1 e4 77 9b 8c a9 28 9d b7 c6 93 01 23 13 af 88 17 8b e2 a8 a0 f0 74 92 35 f5 5c e4 30 88 d0 e7 0f c4 a8 21 41 ed a8 d5 78 ad 62 b2 d6 3d f8 d4 1b c8 ad 6e bf 72 27 f6 56 37 03 19 b2 13 9c d0 8f 9d 00 c4 ba a5 7d 95 7c 9e cd 6c bd f4 7d 7c 24 d9 03 48 ee 79 66 8e 65 c4 52 19 3a 5c 96 24 c2 cb 25 55 d5 d8 a9 29 66 d8 3e e6 8d Data Ascii: )m\|A#+PWL"@\KMBjDn[l=`N@_rf@A_AfCfm\|^4,QNE9[[y}hr{3p:j]w(#t5\0!Axb=nr'V7}\|l}\|$HyfeR:\$%U)f>
2024-07-02 22:25:15 UTC	1374	IN	Data Raw: 02 3f 4e 97 59 3e fc 12 b9 f9 df e8 8f ed 4e 26 f8 6f d5 19 ef 2c d5 9d 43 98 5f 97 85 90 bb 80 63 5a 59 ee cb 64 a7 dc 9d 73 ea 23 c4 e7 77 ef d9 78 4e 4a eb 36 fe 3d d5 df 9a 6b 05 1a 39 fa a3 26 ca 55 58 62 d9 38 0b ea f2 65 a8 a3 9a 98 71 37 cf 12 c2 7b ee d5 35 79 90 02 d3 c8 62 aa 3c 9a a7 06 74 ac 4e b9 c3 cb 75 62 e8 33 82 22 18 4a 42 26 a2 eb bf 82 00 1b 01 d0 5e 71 43 62 67 08 2a 87 b8 3e 38 c0 92 b9 1b bf 3d 90 ff 05 b4 be a3 96 7f 83 d7 02 78 de 61 07 be 66 f8 7f fa 6c c9 c6 a9 68 8e f1 29 6f 8f 86 b6 ea a8 e6 d7 16 3b 8a 0a dc a1 ab ea 9b 2f 82 d2 8f 26 c9 1d 7c ee d2 d5 30 17 b6 42 74 2f 75 b2 f3 31 0a 66 23 90 49 3a 7e cd 54 d5 5a 2b 0a 63 39 1d 56 04 0e 5d 03 11 fb 67 b3 1f 0c 44 14 b3 00 26 29 46 0d c9 7b 70 74 9e 20 9d 42 f8 cd 1c ec fc Data Ascii: ?NY>N&o,C_cZYds#wxNJ6=k9&UXb8eq7{5yb<tNub3"JB&^qCbg*>8=xaflh)o;/&\|0Bt/u1f#I:~TZ+c9V]gD&)F{pt B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.5	49814	216.58.212.130	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	1046	OUT	OPTIONS /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=670751145&utuid=uAXFkgsw1L7xaCfnd5JJOw&cv_attributed=0 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive Accept: / Access-Control-Request-Method: GET Access-Control-Request-Headers: x-goog-visitor-id,x-youtube-ad-signals,x-youtube-client-name,x-youtube-client-version,x-youtube-device,x-youtube-page-cl,x-youtube-page-label,x-youtube-time-zone,x-youtube-utc-offset Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	815	IN	HTTP/1.1 204 No Content P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Access-Control-Allow-Methods: POST, GET, OPTIONS Access-Control-Allow-Headers: x-goog-visitor-id,x-youtube-ad-signals,x-youtube-client-name,x-youtube-client-version,x-youtube-device,x-youtube-page-cl,x-youtube-page-label,x-youtube-time-zone,x-youtube-utc-offset Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:15 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.5	49818	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	744	OUT	GET /s/desktop/a7b1ec23/jsbin/serviceworker-kevlar-appshell.vflset/serviceworker-kevlar-appshell.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive Cache-Control: max-age=0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:15 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 165053 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 17:36:25 GMT Expires: Wed, 02 Jul 2025 17:36:25 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 17330 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:15 UTC	702	IN	Data Raw: 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 61 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 62 61 28 61 29 7b 61 3d 5b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2c 61 2c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 77 Data Ascii: 'use strict';var aa=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof w
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 6f 77 28 64 29 7d 0a 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 67 29 7b 67 2e 64 6f 6e 65 3f 64 28 67 2e 76 61 6c 75 65 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 67 2e 76 61 6c 75 65 29 2e 74 68 65 6e 28 62 2c 63 29 2e 74 68 65 6e 28 66 2c 65 29 7d 0a 66 28 61 2e 6e 65 78 74 28 29 29 7d 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 72 28 61 29 7b 72 65 74 75 72 6e 20 65 61 28 61 28 29 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c Data Ascii: a.next(d)}function c(d){return a.throw(d)}return new Promise(function(d,e){function f(g){g.done?d(g.value):Promise.resolve(g.value).then(b,c).then(f,e)}f(a.next())})}function r(a){return ea(a())}function fa(a,b){a instanceof String&&(a+="");var c=0,
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 72 65 74 75 72 6e 20 65 3d 21 30 2c 7b 76 61 6c 75 65 3a 76 6f 69 64 20 30 2c 64 6f 6e 65 3a 21 30 7d 3b 67 5b 30 5d 3d 3d 3d 22 22 26 26 28 63 2e 6c 61 73 74 49 6e 64 65 78 2b 3d 31 29 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 67 2c 64 6f 6e 65 3a 21 31 7d 7d 7d 3b 0a 66 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 66 7d 3b 0a 72 65 74 75 72 6e 20 66 7d 7d 29 3b 0a 64 61 28 22 50 72 6f 6d 69 73 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6e 61 6c 6c 79 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 63 29 7b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 Data Ascii: return e=!0,{value:void 0,done:!0};g[0]===""&&(c.lastIndex+=1);return{value:g,done:!1}}};f[Symbol.iterator]=function(){return f};return f}});da("Promise.prototype.finally",function(a){return a?a:function(b){return this.then(function(c){return Promise.r
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 2e 6c 65 6e 67 74 68 26 26 28 64 3d 61 2e 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 62 3d 3d 3d 76 6f 69 64 20 30 3f 63 5b 64 5d 26 26 63 5b 64 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 64 5d 3f 63 3d 63 5b 64 5d 3a 63 3d 63 5b 64 5d 3d 7b 7d 3a 63 5b 64 5d 3d 62 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 2c 62 29 7b 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 63 2e 70 72 6f 74 6f 74 79 70 65 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 4d 61 3d 62 2e 70 72 6f 74 6f 74 79 70 65 3b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 65 77 20 63 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 61 2e 4d 62 3d 66 75 6e 63 74 69 6f 6e 28 64 2c 65 2c 66 29 7b 66 6f 72 28 76 61 72 20 67 3d 41 72 72 61 Data Ascii: .length&&(d=a.shift());)a.length\|\|b===void 0?c[d]&&c[d]!==Object.prototype[d]?c=c[d]:c=c[d]={}:c[d]=b}function ma(a,b){function c(){}c.prototype=b.prototype;a.Ma=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.Mb=function(d,e,f){for(var g=Arra
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 0a 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 3d 22 6f 62 6a 65 63 74 22 29 72 65 74 75 72 6e 20 61 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 63 6c 6f 6e 65 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 72 65 74 75 72 6e 20 61 2e 63 6c 6f 6e 65 28 29 3b 69 66 28 74 79 70 65 6f 66 20 4d 61 70 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 4d 61 70 29 72 65 74 75 72 6e 20 6e 65 77 20 4d 61 70 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 53 65 74 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 65 74 29 72 65 74 75 72 6e 20 6e 65 77 20 53 65 74 28 61 29 3b 69 66 28 61 20 69 6e 73 74 61 6e 63 65 Data Ascii: rn!1;return!0}function Ca(a){if(!a\|\|typeof a!=="object")return a;if(typeof a.clone==="function")return a.clone();if(typeof Map!=="undefined"&&a instanceof Map)return new Map(a);if(typeof Set!=="undefined"&&a instanceof Set)return new Set(a);if(a instance
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 62 75 67 46 6e 61 6d 65 7c 7c 62 7d 63 61 74 63 68 28 67 29 7b 65 3d 22 4e 6f 74 20 61 76 61 69 6c 61 62 6c 65 22 2c 63 3d 21 30 7d 62 3d 49 61 28 61 29 3b 69 66 28 21 28 21 63 26 26 61 2e 6c 69 6e 65 4e 75 6d 62 65 72 26 26 61 2e 66 69 6c 65 4e 61 6d 65 26 26 61 2e 73 74 61 63 6b 26 26 61 2e 6d 65 73 73 61 67 65 26 26 61 2e 6e 61 6d 65 29 29 7b 63 3d 61 2e 6d 65 73 73 61 67 65 3b 69 66 28 63 3d 3d 0a 6e 75 6c 6c 29 7b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 46 75 6e 63 74 69 6f 6e 29 7b 69 66 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 63 3d 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 3b 65 6c 73 65 20 69 66 28 63 3d 61 2e 63 6f 6e 73 74 72 Data Ascii: bugFname\|\|b}catch(g){e="Not available",c=!0}b=Ia(a);if(!(!c&&a.lineNumber&&a.fileName&&a.stack&&a.message&&a.name)){c=a.message;if(c==null){if(a.constructor&&a.constructor instanceof Function){if(a.constructor.name)c=a.constructor.name;else if(c=a.constr
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 7b 76 61 72 20 62 3d 5b 5d 2c 63 3b 66 6f 72 28 63 20 69 6e 20 61 29 4e 61 28 63 2c 61 5b 63 5d 2c 62 29 3b 72 65 74 75 72 6e 20 62 2e 6a 6f 69 6e 28 22 26 22 29 7d 0a 3b 66 75 6e 63 74 69 6f 6e 20 50 61 28 29 7b 74 68 69 73 2e 6c 3d 74 68 69 73 2e 6c 3b 74 68 69 73 2e 69 3d 74 68 69 73 2e 69 7d 0a 50 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6c 3d 21 31 3b 50 61 2e 70 72 6f 74 6f 74 79 70 65 2e 64 69 73 70 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6c 7c 7c 28 74 68 69 73 2e 6c 3d 21 30 2c 74 68 69 73 2e 6d 28 29 29 7d 3b 0a 50 61 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 4f 6e 44 69 73 70 6f 73 65 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 74 68 69 73 2e 6c 3f 62 21 3d 3d 76 6f 69 64 20 30 3f 61 2e 63 61 6c 6c 28 62 Data Ascii: {var b=[],c;for(c in a)Na(c,a[c],b);return b.join("&")};function Pa(){this.l=this.l;this.i=this.i}Pa.prototype.l=!1;Pa.prototype.dispose=function(){this.l\|\|(this.l=!0,this.m())};Pa.prototype.addOnDisposeCallback=function(a,b){this.l?b!==void 0?a.call(b
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 6e 75 6c 6c 29 2c 61 2e 6e 65 78 74 3d 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 61 7d 7d 76 61 72 20 66 62 3d 6e 65 77 20 62 62 28 28 29 3d 3e 6e 65 77 20 67 62 2c 61 3d 3e 61 2e 72 65 73 65 74 28 29 29 3b 0a 63 6c 61 73 73 20 67 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 6e 65 78 74 3d 74 68 69 73 2e 73 63 6f 70 65 3d 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 73 65 74 28 61 2c 62 29 7b 74 68 69 73 2e 68 3d 61 3b 74 68 69 73 2e 73 63 6f 70 65 3d 62 3b 74 68 69 73 2e 6e 65 78 74 3d 6e 75 6c 6c 7d 72 65 73 65 74 28 29 7b 74 68 69 73 2e 6e 65 78 74 3d 74 68 69 73 2e 73 63 6f 70 65 3d 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 6c 65 74 20 68 62 2c 69 62 3d 21 31 2c 6a 62 3d 6e 65 77 20 65 62 2c 6c 62 3d 28 61 2c 62 29 3d 3e 7b 68 62 7c 7c 6b 62 28 Data Ascii: null),a.next=null);return a}}var fb=new bb(()=>new gb,a=>a.reset());class gb{constructor(){this.next=this.scope=this.h=null}set(a,b){this.h=a;this.scope=b;this.next=null}reset(){this.next=this.scope=this.h=null}};let hb,ib=!1,jb=new eb,lb=(a,b)=>{hb\|\|kb(
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 6e 75 6c 6c 2c 66 3d 6e 75 6c 6c 2c 67 3d 63 2e 69 3b 67 26 26 28 67 2e 6c 7c 7c 28 64 2b 2b 2c 67 2e 68 3d 3d 61 26 26 28 65 3d 67 29 2c 21 28 65 26 26 64 3e 31 29 29 29 3b 67 3d 67 2e 6e 65 78 74 29 65 7c 7c 28 66 3d 67 29 3b 65 26 26 28 63 2e 68 3d 3d 30 26 26 64 3d 3d 31 3f 75 62 28 63 2c 62 29 3a 28 66 3f 28 64 3d 66 2c 64 2e 6e 65 78 74 3d 3d 63 2e 6c 26 26 28 63 2e 6c 3d 64 29 2c 64 2e 6e 65 78 74 3d 64 2e 6e 65 78 74 2e 6e 65 78 74 29 3a 76 62 28 63 29 2c 77 62 28 63 2c 65 2c 33 2c 62 29 29 29 7d 61 2e 6a 3d 6e 75 6c 6c 7d 65 6c 73 65 20 6e 62 28 61 2c 33 2c 62 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 62 28 61 2c 62 29 7b 61 2e 69 7c 7c 61 2e 68 21 3d 32 26 26 61 2e 68 21 3d 33 7c 7c 79 62 28 61 29 3b 61 2e 6c 3f 61 2e 6c 2e 6e 65 78 74 3d 62 3a 61 Data Ascii: null,f=null,g=c.i;g&&(g.l\|\|(d++,g.h==a&&(e=g),!(e&&d>1)));g=g.next)e\|\|(f=g);e&&(c.h==0&&d==1?ub(c,b):(f?(d=f,d.next==c.l&&(c.l=d),d.next=d.next.next):vb(c),wb(c,e,3,b)))}a.j=null}else nb(a,3,b)}function xb(a,b){a.i\|\|a.h!=2&&a.h!=3\|\|yb(a);a.l?a.l.next=b:a
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 62 7d 0a 7a 2e 70 72 6f 74 6f 74 79 70 65 2e 42 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3b 61 3d 76 62 28 74 68 69 73 29 3b 29 77 62 28 74 68 69 73 2c 61 2c 74 68 69 73 2e 68 2c 74 68 69 73 2e 76 29 3b 74 68 69 73 2e 73 3d 21 31 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 77 62 28 61 2c 62 2c 63 2c 64 29 7b 69 66 28 63 3d 3d 33 26 26 62 2e 69 26 26 21 62 2e 6c 29 66 6f 72 28 3b 61 26 26 61 2e 6d 3b 61 3d 61 2e 6a 29 61 2e 6d 3d 21 31 3b 69 66 28 62 2e 68 29 62 2e 68 2e 6a 3d 6e 75 6c 6c 2c 42 62 28 62 2c 63 2c 64 29 3b 65 6c 73 65 20 74 72 79 7b 62 2e 6c 3f 62 2e 6a 2e 63 61 6c 6c 28 62 2e 63 6f 6e 74 65 78 74 29 3a 42 62 28 62 2c 63 2c 64 29 7d 63 61 74 63 68 28 65 29 7b 43 62 2e 63 61 6c 6c 28 6e 75 6c 6c 2c 65 29 7d 61 62 28 70 62 2c 62 Data Ascii: b}z.prototype.B=function(){for(var a;a=vb(this);)wb(this,a,this.h,this.v);this.s=!1};function wb(a,b,c,d){if(c==3&&b.i&&!b.l)for(;a&&a.m;a=a.j)a.m=!1;if(b.h)b.h.j=null,Bb(b,c,d);else try{b.l?b.j.call(b.context):Bb(b,c,d)}catch(e){Cb.call(null,e)}ab(pb,b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.5	49811	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	2868	OUT	GET /api/stats/playback?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=0.031&fmt=397&fs=0&rt=2.123&euri&lact=413&cl=648221806&mos=0&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&fexp=v1%2C23986021%2C18623%2C204121%2C230596%2C104308%2C6789%2C16229%2C133212%2C14625955%2C11684381%2C7111%2C24166%2C12177%2C9954%2C1192%2C7913%2C18310%2C273%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C29151%2C2197%2C621%2C7961%2C1414%2C19%2C2%2C1082%2C4081%2C2872%2C101%2C10943%2C2471%2C6008%2C150%2C1388%2C713%2C2585%2C8134%2C1233%2C1375%2C3761%2C3157%2C3975%2C681%2C1590%2C3542%2C8162%2C3259&rtn=7&feature=youtu.be&afmt=251&muted=0&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUT [TRUNCATED] Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00 sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1719959111816 X-YouTube-Page-CL: 648613515 X-Goog-Event-Time: 1719959111745 X-YouTube-Utc-Offset: -240 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D X-YouTube-Ad-Signals: dt=1719959110085&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:15 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:15 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.5	49820	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	551	OUT	GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLB_p0PncTtkrhaNDZtntrE3gKkoYw HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 8178 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:23:57 GMT Expires: Tue, 02 Jul 2024 23:23:57 GMT Cache-Control: public, max-age=7200 ETag: "1631784323" Content-Type: image/webp Vary: Origin Age: 3678 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:15 UTC	733	IN	Data Raw: 52 49 46 46 ea 1f 00 00 57 45 42 50 56 50 38 20 de 1f 00 00 10 85 00 9d 01 2a 50 01 bc 00 3e 51 26 8f 45 a3 a2 23 a4 24 12 8a d0 80 0a 09 65 6e 31 30 68 fe a0 5f 0c 50 a1 92 27 10 a2 be 06 44 f9 57 cc c7 d7 ef f7 b4 bc ce 9f a7 d3 27 f6 8f 51 5f ec dd 1a 3f b3 7a 32 fd ba f5 6e f4 b7 fd e7 d1 77 a9 9b fb af a9 b7 4c 77 f8 ea e4 7e 1f f9 c2 f8 1f b5 dc e1 22 5f f2 cf ca 5f 97 fc c6 fe eb ef ef 85 ff 35 b5 0e fc af f9 cf f9 1f cb ae 3d 2d bb cc 5f db 6f ab 7f c4 ff 0f fb c5 fe 03 d5 5f fb 8f 56 3e 69 fd 56 ff 40 ff 4d e5 89 e5 5b f7 ff f7 7f 48 1f 60 7f cb 7f a6 7f b2 ff 17 f9 a9 f4 b9 fe 17 fc cf f1 bf 95 fe f8 3f 3a ff 4b ff 2b fc af c0 47 f2 9f e9 3f ed 7f bd 7f 8d fd a7 f9 bd f6 75 fb 7b ec 89 fb 00 4f 2d 4e 71 5a 20 6e af 76 fe 0c 92 83 a8 6b 4b 25 29 Data Ascii: RIFFWEBPVP8 *P>Q&E#$en10h_P'DW'Q_?z2nwLw~"__5=-_o_V>iV@M[H`?:K+G?u{O-NqZ nvkK%)
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 6b 66 ba 58 52 c0 96 f2 b9 b1 f8 03 c0 ea b8 eb dd 72 db 5e f0 86 ed 8f b5 50 82 50 7c c6 15 1a df 70 d9 2e f4 fc 60 04 f3 c1 f2 69 af 1a b3 e9 ec 57 85 90 e1 e4 d7 95 c6 a4 e9 ad 4f 3e c5 9a 3b 64 92 dd 4a 72 2f 14 f2 47 68 b5 ae 48 e1 ca 9d ac 01 8f b5 f5 27 a5 27 1f fa 35 19 c3 2f 89 55 75 16 0c 54 aa 7f 25 33 01 77 58 69 10 f5 99 a8 cb f7 b2 a4 9f 8a 00 d8 8a bb 93 6f 7a c2 76 dc f5 ca 74 2f 4c 53 6a e1 0f f0 7c aa 95 95 ae 27 87 c3 d3 17 17 f2 b0 8d ab 4d b8 87 bf 22 5c 12 77 37 f4 00 a9 f4 c2 9d c4 c2 e9 dc 84 bb 90 41 9d 58 a8 0d 4d dc 5f 23 0d f6 87 73 de 01 75 6f 2e a1 11 5e 84 db 20 f3 0c 40 5e 9a 88 39 ea 5f 94 38 e4 c0 69 0e f7 1c 78 4f 4d 68 50 d5 3d 7e 1a a4 a5 65 56 0d 9d b9 ed f5 1f 2e e3 f1 0d 75 e9 15 53 9c ff 02 4a f4 46 a4 8d c7 0f 04 Data Ascii: kfXRr^PP\|p.`iWO>;dJr/GhH''5/UuT%3wXiozvt/LSj\|'M"\w7AXM_#suo.^ @^9_8ixOMhP=~eV.uSJF
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 1e 74 49 0e 02 58 0f 6e 80 50 bc 07 1b 0a d1 55 d2 54 ff 7f 22 2a 95 d5 ec eb 0c ed d1 2f f9 ce a1 40 d3 7b 2e 79 b1 8b bd a5 6b ec 76 5c fa 1a b6 a5 a3 70 c5 b8 8e 00 7e bd 8d 94 61 31 97 f1 93 a5 64 d6 b5 b1 f9 5a df ed 31 f9 96 c1 b1 2c 3d 89 6e d5 81 b4 b4 e7 c5 2a c2 f7 b0 8f 35 ea c1 58 24 1a a7 be 68 ac 8b 4f 0b a6 cd d0 65 f6 16 7a 73 14 2c aa 1c ba d7 76 b7 88 ec 45 b7 7d 66 75 c3 ee 7e 35 72 bb ed b0 3f 82 3f 9f 72 e3 41 7b e4 3d 05 c2 50 5c c3 83 4e 6e 48 ee 9f 04 5b 82 90 15 25 54 df 6d 9f bf ec ac b2 f4 66 51 b2 19 21 20 7c 6d 17 f5 f3 d2 19 fa 01 ef e2 73 2f 6e f3 bd d2 ce 46 19 1f 18 c9 f0 8c 94 3c 42 a8 69 eb 3f 9d 77 e3 c3 fc 4b 88 23 c0 2e d6 f4 0d fe b0 53 c2 71 2c 33 5b 79 bc bf a1 6a f0 09 8e 39 26 d7 f1 f6 6e 71 fe cc 4c b4 d4 ac 83 Data Ascii: tIXnPUT"/@{.ykv\p~a1dZ1,=n5X$hOezs,vE}fu~5r??rA{=P\NnH[%TmfQ! \|ms/nF<Bi?wK#.Sq,3[yj9&nqL
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 96 7a e2 ee f0 5f b7 68 64 6b 20 2a f1 69 89 f4 ff a2 d6 5d 07 33 7e 88 a0 ed ef 29 21 aa 4b ac 0b ea aa a2 b1 38 52 d7 23 fd da 35 24 de 1a 6c 07 2b be 33 7b e6 eb c5 35 53 b2 4e 42 e2 cd 7b 03 3f 1b 81 37 01 68 a0 38 c1 0c ce c4 5b 57 14 d4 53 cb f2 df d9 e8 64 f3 73 51 15 fd ad 2c 69 8e 0c d6 05 3f 02 f6 dc f4 f6 91 63 29 fb a4 ee 23 ae d6 a5 6a a0 29 dd 78 e5 7d 2d 4f b6 94 6b 85 19 63 e1 35 44 45 f3 f2 5d 41 b6 64 59 ff ca aa 00 ff 24 f3 d9 6b 74 d0 5f 30 36 42 c2 38 a5 5a 09 d1 e9 92 fc c7 11 b3 90 b2 e9 1c 3e 1f e2 a9 24 7c 4a 96 3c 34 59 17 98 d3 c3 73 92 a4 a8 e8 0f 07 a6 f0 3a e7 e7 6a dc e6 6d 27 52 dc ea 4f 23 19 cc 4a 37 21 02 e1 2b de 0b f2 76 48 39 16 fc 18 d1 fe 57 1a 5e 8c bf ea 20 3d 2e b5 24 3d 59 7d ec 15 12 b4 6e 4f b4 1c cd ba 9f fb Data Ascii: z_hdk *i]3~)!K8R#5$l+3{5SNB{?7h8[WSdsQ,i?c)#j)x}-Okc5DE]AdY$kt_06B8Z>$\|J<4Ys:jm'RO#J7!+vH9W^ =.$=Y}nO
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 4e 84 45 92 b0 f6 e0 1e 73 1c 14 3b 78 81 7d 54 de e6 e8 e3 27 90 ea 41 49 7c 04 d3 2c 3b 77 2f a6 2f cc ae 92 0b 90 aa fa 87 03 c0 b6 cd 84 93 94 b6 5e 9c bd cb a1 bc a5 bc af 55 77 a2 bd 63 44 e7 10 16 5c 22 77 ee 8a a0 ab 68 60 ef 3d 91 e1 57 73 0b ce e7 00 06 c2 32 85 c5 2c 38 46 c9 44 75 bf ad 42 fe 9a d4 82 c2 a4 ae 0a 57 8d 83 f0 99 7c 28 5d cb 54 16 d5 77 78 18 8c d3 77 43 aa 1b a6 b9 fd d6 81 9a c6 e7 57 cb f4 7c 6d fb f3 24 cf 80 11 99 c4 28 e5 f2 8f 1c f0 a5 e0 2e 24 2e a7 a3 d0 3f ab bf e6 24 d3 f6 49 7f 84 d2 d7 35 64 21 99 3d 91 73 3b af 37 53 df bd 7d ec 3e 29 34 26 d5 f8 69 c9 1f 30 93 c2 2b fa ac 6e 5f 06 92 d0 c4 93 db c6 64 8c 1f 7b 0f ba 7e 09 90 7a f9 a8 23 3e 15 d4 de b5 e2 cc 8e b0 c2 33 c2 c7 2d b7 9e b1 25 ea 71 96 f2 4c 30 d6 4c Data Ascii: NEs;x}T'AI\|,;w//^UwcD\"wh`=Ws2,8FDuBW\|(]TwxwCW\|m$(.$.?$I5d!=s;7S}>)4&i0+n_d{~z#>3-%qL0L
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: b4 ea bb cd b6 58 1d ae 17 71 d8 bb c6 52 55 a7 3a dc b5 22 77 54 3b 2f a0 ec b6 06 17 20 f2 3d 5c 2a 62 45 20 93 cc be 4f f9 cf 5d 38 04 be c2 f5 a9 6a 7a 99 bc 59 fe 94 c3 be 35 81 1a 3e 70 2a 6b 80 06 0a c8 42 12 a4 ef a0 c2 a9 83 5e d2 00 19 f6 77 07 4a e5 ba 38 b0 06 91 23 71 10 4a b8 1e 80 25 ac 23 e0 c2 84 b7 19 66 cd 99 e7 1b e7 d0 4e bd 19 2e 55 4d 52 60 2c 29 b0 57 c0 60 98 67 27 44 14 8d 6d b8 f9 38 fa 93 6e dd 88 b7 a1 e4 76 cb 1e 61 cc 05 fa aa c8 88 1a 81 c5 8a ba db b9 34 af e7 d1 81 78 0f d1 b2 da 1b 0e 99 cc 03 c7 4d df 59 d9 a4 f4 fa 5e f6 3e 19 c6 11 d4 1d 47 f9 d9 54 28 dd 42 79 6f f0 83 21 d0 a3 86 bd 02 81 6f 7e 3a d6 2d 29 68 b5 1e f1 03 b6 6e 1f 75 dd 59 af 6b 7c b1 61 74 c3 5a c2 40 e6 ac c4 b3 5a 3a fa a2 d1 52 7f 88 04 94 8e 36 Data Ascii: XqRU:"wT;/ =\bE O]8jzY5>pkB^wJ8#qJ%#fN.UMR`,)W`g'Dm8nva4xMY^>GT(Byo!o~:-)hnuYk\|atZ@Z:R6
2024-07-02 22:25:15 UTC	495	IN	Data Raw: 6b d5 9a 68 0e 28 ef 31 1c 6c a8 4c bf 85 21 5a 67 46 f6 c3 b4 b0 71 58 9e 9a 7d b9 af f2 26 08 83 ce 1e 6e 70 d6 50 a9 53 2d 03 a6 f8 94 f8 ee 4f e4 2c c0 64 29 2f b0 43 cb f7 be 19 1d 22 ef 49 00 8d 05 59 12 45 9d 7a 90 b6 16 fe 06 8a 33 27 3c 3c 74 33 10 ae 54 b1 3b e1 f7 f9 2c aa e2 18 7e 72 1d b0 d1 fe 62 f4 81 6c 6e 78 02 68 ab 91 07 f1 75 48 5a 3e 16 7f 2e 4f 5f 1b eb 25 be ef 5f 0b fb 5d ab fa d7 92 db 64 9d a3 29 7d 65 e8 04 ca 0c fb 83 e2 fc 47 05 03 e5 b0 e7 52 ea f8 71 00 16 34 d6 33 5c ce c0 67 93 de 11 fb 1e 57 33 3f b4 5c 99 01 f1 69 3d 0a ba af 04 9f 8e 45 27 b5 88 45 a7 60 6c 87 79 00 ac 9c ec 4a 1e 07 14 95 a4 ac 4f f2 90 a1 10 6f d7 0c e4 6c 9f 3d f9 08 91 ee e6 66 27 dc 8e 88 41 66 7b 18 4e 08 00 2d f2 b2 06 a2 27 ce 7b 01 e3 fe db 3e Data Ascii: kh(1lL!ZgFqX}&npPS-O,d)/C"IYEz3'<<t3T;,~rblnxhuHZ>.O_%_]d)}eGRq43\gW3?\i=E'E`lyJOol=f'Af{N-'{>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.5	49809	142.250.181.238	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	542	OUT	OPTIONS /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: x-goog-authuser Origin: https://www.youtube.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	516	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Max-Age: 86400 Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web,authorization,origin,x-goog-authuser Content-Type: text/plain; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:15 GMT Server: Playlog Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.5	49821	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	1407	OUT	POST /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 2788 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-arch: "x86" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-wow64: ?0 sec-ch-ua-model: "" sec-ch-ua-bitness: "64" sec-ch-ua-platform: "Windows" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.132" X-Youtube-Client-Name: 1 X-Youtube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:15 UTC	2788	OUT	Data Raw: 7b 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 74 42 55 57 68 58 62 6c 70 53 64 6b 74 58 53 53 69 2d 5f 4a 47 30 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 58 77 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 Data Ascii: {"context":{"client":{"hl":"en","gl":"US","remoteHost":"8.46.123.33","deviceMake":"","deviceModel":"","visitorData":"CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like G
2024-07-02 22:25:15 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 02 Jul 2024 22:25:15 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:15 UTC	958	IN	Data Raw: 34 65 62 32 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 37 30 32 2e 30 31 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 47 65 74 41 74 74 65 73 74 61 74 69 6f 6e 43 68 61 6c 6c 65 6e 67 65 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 37 39 64 66 64 38 64 37 65 37 33 39 62 39 32 35 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 22 3a 22 Data Ascii: 4eb2{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240702.01.00"},{"key":"yt_li","value":"0"},{"key":"GetAttestationChallenge_rid","value":"0x79dfd8d7e739b925"}]},{"service":"
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 35 31 31 35 37 38 33 38 2c 35 31 31 35 38 34 37 30 2c 35 31 31 35 38 35 31 34 2c 35 31 31 36 30 35 34 35 2c 35 31 31 36 32 31 37 30 2c 35 31 31 36 32 35 39 35 2c 35 31 31 36 35 34 36 37 2c 35 31 31 36 35 35 36 38 2c 35 31 31 36 36 39 32 32 2c 35 31 31 36 37 38 31 33 2c 35 31 31 36 39 31 31 37 2c 35 31 31 36 39 31 33 31 2c 35 31 31 37 30 32 34 37 2c 35 31 31 37 35 36 30 36 2c 35 31 31 37 35 37 33 32 2c 35 31 31 37 36 35 31 31 2c 35 31 31 37 38 37 30 35 2c 35 31 31 37 38 39 38 32 2c 35 31 31 38 33 39 30 39 2c 35 31 31 38 34 30 32 32 2c 35 31 31 38 34 39 39 30 2c 35 31 31 38 35 31 34 30 2c 35 31 31 38 36 35 32 38 2c 35 31 31 38 37 32 34 31 2c 35 31 31 38 39 38 32 36 2c 35 31 31 39 30 36 35 32 2c 35 31 31 39 34 31 33 37 2c 35 31 31 39 35 32 33 31 2c 35 31 31 Data Ascii: 51157838,51158470,51158514,51160545,51162170,51162595,51165467,51165568,51166922,51167813,51169117,51169131,51170247,51175606,51175732,51176511,51178705,51178982,51183909,51184022,51184990,51185140,51186528,51187241,51189826,51190652,51194137,51195231,511
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 33 6d 59 62 4b 45 43 56 63 2b 6c 7a 66 7a 32 44 39 73 76 2b 4b 75 6f 62 4d 35 5a 30 4d 61 76 67 7a 52 2f 34 48 5a 35 46 69 46 53 55 70 76 63 57 52 64 42 70 35 69 55 30 4c 31 38 37 4d 66 32 54 6a 71 57 78 48 4b 69 50 55 56 49 50 49 37 37 31 34 5a 4e 7a 63 50 78 62 4a 69 6a 66 46 4a 46 41 49 76 54 6e 35 54 31 74 75 32 58 49 52 71 4a 32 4e 52 4d 33 38 58 6e 6d 55 50 4b 34 46 79 31 64 69 65 6f 47 50 71 54 6a 73 62 74 32 7a 64 67 55 6a 48 52 70 39 6b 5a 77 39 36 71 33 64 2b 70 62 65 4b 31 64 4c 33 6e 32 54 6f 6b 33 67 78 4d 74 73 4b 2f 49 6c 61 76 4b 50 6d 34 6c 4b 68 46 41 59 54 71 39 51 5a 37 54 4c 4d 47 56 45 30 4f 73 76 64 52 63 6e 52 76 33 6d 4d 59 6d 4d 77 51 5a 30 4c 2b 78 52 30 32 76 42 4a 59 63 64 66 53 55 71 2b 63 54 52 4a 4d 34 41 4e 34 34 49 38 76 Data Ascii: 3mYbKECVc+lzfz2D9sv+KuobM5Z0MavgzR/4HZ5FiFSUpvcWRdBp5iU0L187Mf2TjqWxHKiPUVIPI7714ZNzcPxbJijfFJFAIvTn5T1tu2XIRqJ2NRM38XnmUPK4Fy1dieoGPqTjsbt2zdgUjHRp9kZw96q3d+pbeK1dL3n2Tok3gxMtsK/IlavKPm4lKhFAYTq9QZ7TLMGVE0OsvdRcnRv3mMYmMwQZ0L+xR02vBJYcdfSUq+cTRJM4AN44I8v
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 65 4d 69 6d 46 2b 59 74 6f 4d 66 72 65 58 36 5a 71 36 45 46 38 47 47 42 6f 2b 74 41 37 4d 66 2f 2f 50 31 31 63 69 39 46 65 39 49 48 6b 4f 53 4e 78 6d 62 57 45 45 7a 6c 77 37 6a 31 52 6f 73 47 43 74 7a 71 54 54 6b 33 5a 44 56 70 63 44 38 4e 50 58 69 69 66 43 79 35 54 2f 41 58 44 50 54 57 78 38 4a 2f 38 52 2f 62 44 6a 74 55 66 54 31 4d 64 4c 6c 34 4a 45 46 33 53 2f 59 65 4e 63 46 2f 51 33 47 46 38 31 64 4a 43 65 59 77 38 4f 57 69 43 76 63 4b 51 63 75 79 66 6c 51 57 50 48 31 34 78 55 31 64 57 58 44 38 48 4d 68 39 4a 2f 42 44 63 2b 35 50 7a 6a 43 33 76 66 2b 76 55 46 42 2b 64 58 30 4f 36 39 57 59 77 74 76 71 42 76 34 76 56 6f 35 38 31 49 73 30 73 55 48 56 6e 70 30 54 77 7a 37 50 41 76 51 54 46 62 58 36 47 33 6d 53 73 6c 49 34 50 76 62 32 4c 45 4c 6a 54 58 32 Data Ascii: eMimF+YtoMfreX6Zq6EF8GGBo+tA7Mf//P11ci9Fe9IHkOSNxmbWEEzlw7j1RosGCtzqTTk3ZDVpcD8NPXiifCy5T/AXDPTWx8J/8R/bDjtUfT1MdLl4JEF3S/YeNcF/Q3GF81dJCeYw8OWiCvcKQcuyflQWPH14xU1dWXD8HMh9J/BDc+5PzjC3vf+vUFB+dX0O69WYwtvqBv4vVo581Is0sUHVnp0Twz7PAvQTFbX6G3mSslI4Pvb2LELjTX2
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 31 33 33 4e 64 6e 7a 71 76 61 34 51 5a 41 54 52 70 78 44 69 2f 73 33 53 63 2b 42 4b 56 75 70 31 75 65 73 71 6f 46 6f 51 53 73 48 2b 4d 4c 64 30 50 70 34 72 72 54 4e 76 61 46 79 77 72 48 42 35 54 6e 41 45 5a 6e 72 67 31 4b 77 79 78 47 49 45 46 53 50 63 6e 32 79 4f 43 56 33 4b 75 39 30 32 6b 65 76 58 72 62 4f 4a 69 61 53 59 57 51 78 63 54 52 54 57 4c 6b 44 72 76 5a 4d 38 64 6d 38 32 73 64 4c 6e 6c 71 50 64 63 7a 41 4b 73 46 4a 42 34 33 53 6f 74 65 52 46 63 69 33 5a 42 6a 2b 30 42 76 55 7a 78 45 56 78 4b 65 4a 34 74 4a 54 74 36 6b 59 4a 6c 35 44 66 4c 45 6f 50 46 36 66 6d 45 77 4b 32 73 58 48 74 4b 72 68 62 65 36 66 48 71 42 72 68 6f 56 50 63 43 38 4d 41 71 44 52 71 73 61 6a 48 79 57 63 69 30 55 2f 4b 47 75 63 65 47 46 69 45 65 49 36 50 2b 46 54 49 45 48 50 Data Ascii: 133Ndnzqva4QZATRpxDi/s3Sc+BKVup1uesqoFoQSsH+MLd0Pp4rrTNvaFywrHB5TnAEZnrg1KwyxGIEFSPcn2yOCV3Ku902kevXrbOJiaSYWQxcTRTWLkDrvZM8dm82sdLnlqPdczAKsFJB43SoteRFci3ZBj+0BvUzxEVxKeJ4tJTt6kYJl5DfLEoPF6fmEwK2sXHtKrhbe6fHqBrhoVPcC8MAqDRqsajHyWci0U/KGuceGFiEeI6P+FTIEHP
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 59 44 55 71 41 47 51 5a 45 78 35 54 4e 55 62 55 72 66 4e 36 4b 58 55 47 68 53 56 37 58 4a 68 48 55 36 4c 74 62 7a 71 57 43 69 6e 6c 50 53 57 37 48 31 6e 45 66 64 37 53 78 6a 57 39 4a 46 6e 62 43 52 51 50 56 2b 54 65 7a 36 76 39 6d 2b 61 7a 67 32 79 6d 42 68 4d 71 4b 43 58 38 74 6c 47 50 51 37 6f 53 48 78 34 66 33 6a 41 4e 45 36 74 4f 4c 61 67 58 67 49 6e 75 37 2b 71 2f 4d 58 32 34 36 50 70 2f 33 68 56 4a 57 71 63 7a 6b 62 73 77 66 67 62 59 2f 77 46 73 45 6c 6f 70 53 47 63 55 75 73 32 4d 63 4b 51 72 59 48 33 68 2f 36 6d 64 4f 62 46 36 50 43 43 76 65 46 33 38 58 45 76 4b 79 57 59 59 30 6b 67 59 48 7a 74 77 62 4b 36 65 41 46 64 53 4f 71 54 6b 56 36 4f 73 75 76 4d 6f 69 6b 62 37 52 2f 51 75 57 48 2f 71 35 58 45 43 37 45 44 68 39 76 47 50 73 71 6f 4a 6e 50 50 Data Ascii: YDUqAGQZEx5TNUbUrfN6KXUGhSV7XJhHU6LtbzqWCinlPSW7H1nEfd7SxjW9JFnbCRQPV+Tez6v9m+azg2ymBhMqKCX8tlGPQ7oSHx4f3jANE6tOLagXgInu7+q/MX246Pp/3hVJWqczkbswfgbY/wFsElopSGcUus2McKQrYH3h/6mdObF6PCCveF38XEvKyWYY0kgYHztwbK6eAFdSOqTkV6OsuvMoikb7R/QuWH/q5XEC7EDh9vGPsqoJnPP
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 6d 7a 34 77 47 30 71 4f 71 6e 37 44 34 46 66 46 57 36 4b 44 56 75 51 44 4c 51 43 4b 35 63 65 42 6c 47 46 36 79 66 45 4c 65 6b 77 56 52 30 30 58 45 53 70 33 2b 33 37 4d 34 6a 79 33 2b 63 63 44 2f 6e 50 49 46 61 72 63 69 56 73 53 62 37 4f 72 76 74 47 43 56 7a 4e 50 44 6e 64 31 56 39 52 4d 30 57 61 53 58 46 55 48 52 79 45 6a 59 59 2f 38 54 47 33 63 6a 30 38 67 68 4b 65 63 63 48 53 44 38 53 79 36 74 53 64 71 78 57 57 78 76 75 48 73 77 6e 2f 76 6a 62 44 45 46 54 35 6f 53 79 2f 42 52 73 62 51 6b 6e 2f 7a 6c 65 66 6c 4f 59 63 69 37 4c 5a 5a 6a 6c 72 52 68 6a 48 58 30 48 74 6e 55 73 42 69 30 2b 52 4d 2b 7a 68 6d 4d 4d 74 6a 52 66 70 2b 59 46 72 63 65 4c 63 51 76 48 6f 67 2b 57 68 74 6f 38 58 39 77 33 6b 6e 42 2b 44 74 74 35 62 67 78 47 55 39 77 37 62 54 42 42 78 Data Ascii: mz4wG0qOqn7D4FfFW6KDVuQDLQCK5ceBlGF6yfELekwVR00XESp3+37M4jy3+ccD/nPIFarciVsSb7OrvtGCVzNPDnd1V9RM0WaSXFUHRyEjYY/8TG3cj08ghKeccHSD8Sy6tSdqxWWxvuHswn/vjbDEFT5oSy/BRsbQkn/zleflOYci7LZZjlrRhjHX0HtnUsBi0+RM+zhmMMtjRfp+YFrceLcQvHog+Whto8X9w3knB+Dtt5bgxGU9w7bTBBx
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 49 77 46 4b 52 76 49 6e 56 71 4a 6f 67 62 35 47 76 47 47 37 39 75 6a 67 62 51 7a 6a 4b 61 61 64 77 42 58 50 47 69 30 67 33 47 6e 54 77 6b 46 51 51 31 4b 6c 57 74 74 30 56 68 4b 4d 62 46 46 6c 4d 68 59 76 44 2b 58 50 56 4a 56 66 6f 61 6a 4e 49 72 4f 34 70 72 41 52 46 55 4b 50 2f 38 30 48 68 31 67 64 4d 36 2f 44 56 4c 42 58 4e 51 65 71 72 48 51 54 37 37 6a 35 59 6f 4f 50 4d 75 2f 50 58 49 75 6a 72 57 63 41 7a 47 44 64 46 7a 43 68 2f 2b 30 51 63 6f 63 69 51 38 30 39 74 6e 72 41 45 74 57 32 76 50 59 37 4b 4e 39 47 6a 43 4f 2b 72 39 70 66 65 68 79 42 46 76 67 74 47 49 34 7a 44 64 37 49 6e 39 4b 53 32 65 42 7a 2b 55 2f 53 2b 78 51 47 58 78 6d 38 48 53 36 30 47 53 63 78 74 42 39 62 4e 34 32 48 38 6a 38 46 32 4a 6f 4c 6e 36 4a 69 68 4f 4e 4d 46 79 55 44 78 39 72 Data Ascii: IwFKRvInVqJogb5GvGG79ujgbQzjKaadwBXPGi0g3GnTwkFQQ1KlWtt0VhKMbFFlMhYvD+XPVJVfoajNIrO4prARFUKP/80Hh1gdM6/DVLBXNQeqrHQT77j5YoOPMu/PXIujrWcAzGDdFzCh/+0QcociQ809tnrAEtW2vPY7KN9GjCO+r9pfehyBFvgtGI4zDd7In9KS2eBz+U/S+xQGXxm8HS60GScxtB9bN42H8j8F2JoLn6JihONMFyUDx9r
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 2f 54 2b 5a 57 4d 41 53 30 42 43 52 4e 4e 39 6e 4f 4c 46 4b 2b 6e 70 45 65 53 34 6a 6f 54 36 50 30 52 44 70 44 35 7a 7a 48 77 4f 72 4f 42 72 70 5a 50 42 42 48 54 54 72 39 6f 6b 67 72 4c 4c 75 68 46 7a 5a 49 67 2b 64 41 4a 4f 67 2f 61 74 42 54 55 61 4f 77 32 55 56 61 2b 64 75 42 52 38 4e 4c 61 66 77 6e 4b 6e 57 53 73 4e 77 4c 7a 31 62 53 59 48 46 5a 57 4c 79 55 49 59 44 42 38 5a 49 38 63 4b 5a 41 77 57 55 51 51 78 30 33 66 6a 48 30 68 32 2f 4c 33 33 61 68 4e 37 4e 73 67 6a 61 56 30 62 5a 65 75 43 76 41 35 77 48 6f 61 38 6b 50 35 57 6b 43 72 69 43 2f 4c 46 47 64 52 4a 2b 6f 78 37 51 39 7a 77 55 33 47 51 6d 61 33 4d 42 45 4d 54 4a 72 45 53 33 74 57 72 48 44 65 59 4e 72 56 53 47 70 4e 52 42 79 32 6c 6e 4a 64 4b 63 30 61 50 50 4e 70 59 59 54 36 49 30 61 55 63 Data Ascii: /T+ZWMAS0BCRNN9nOLFK+npEeS4joT6P0RDpD5zzHwOrOBrpZPBBHTTr9okgrLLuhFzZIg+dAJOg/atBTUaOw2UVa+duBR8NLafwnKnWSsNwLz1bSYHFZWLyUIYDB8ZI8cKZAwWUQQx03fjH0h2/L33ahN7NsgjaV0bZeuCvA5wHoa8kP5WkCriC/LFGdRJ+ox7Q9zwU3GQma3MBEMTJrES3tWrHDeYNrVSGpNRBy2lnJdKc0aPPNpYYT6I0aUc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.5	49819	216.58.212.129	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	1108	OUT	GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s48-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 1491 X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:43:51 GMT Expires: Wed, 03 Jul 2024 21:43:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 2484 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:15 UTC	848	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 12 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 15 10 11 13 17 15 15 15 0c 0f 17 18 12 16 16 12 17 18 15 01 03 04 04 06 05 06 0a 06 06 0a 0d 0e 0a 0d 10 0f 10 10 0e 0f 10 0d 0f 0f 0f 10 10 0f 0f 15 0e 0d 10 0f 0d 0d 0f 0d 0e 11 0f 0e 0f 15 0d 0f 0d 0d 0f 0d 12 0f 0d 10 0f 0d 0d 0d 10 0d 10 0d 0d 0f ff c0 00 11 08 00 30 00 30 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 06 07 03 05 08 02 04 ff c4 00 32 10 00 02 01 03 03 03 02 03 06 07 01 00 00 00 00 00 01 02 03 04 05 11 00 06 21 12 31 41 07 51 13 14 22 32 61 81 91 a1 c1 08 16 23 42 62 71 a2 15 ff c4 Data Ascii: JFIF002!1AQ"2a#Bbq
2024-07-02 22:25:15 UTC	643	IN	Data Raw: fc 46 e8 75 50 ba 03 f9 fd 4b 4f e2 02 1a 23 b7 64 55 b6 44 f7 14 96 37 6a c5 84 7c 45 50 d8 39 6c 03 8f d3 57 63 62 69 84 be b3 cb dd 61 d9 f3 b8 4e 23 b3 46 f9 68 91 11 d5 a1 a5 c0 e7 8f d7 4b 60 a6 c2 12 ae e2 08 a4 65 5c 8f 62 35 49 5e 05 19 7a 16 82 82 d5 bb 6f 15 38 58 e0 8a 25 12 01 97 00 09 19 90 1f 76 fa 07 e1 9f 1a 3d b2 5b 6e 71 e4 12 ee da 7d 35 a3 99 f6 5a 8b 62 ef ca ea ed 93 62 ba 4b 48 29 e7 ad a1 a7 ac 9a 14 60 eb 0b bc 6a dc 11 dd 46 71 91 c7 9e da 3a d6 87 72 4b fb ee 65 13 91 f6 28 de ab d4 93 71 af 51 0c 43 a6 38 57 a8 b1 fb 24 8c fe fa 8c 78 7d d0 6f 8a ba 6c 5e fb 86 ef 0f 55 9e f7 ee e3 9a f9 7b dd 51 55 53 46 cb 46 aa 60 76 fa 99 55 a1 0c 1b fc 4e 7a 87 9e eb ef ae e2 9b fe 77 d7 03 e8 15 58 37 56 29 84 f1 1e a4 84 ba 8e 75 54 e9 Data Ascii: FuPKO#dUD7j\|EP9lWcbiaN#FhK`e\b5I^zo8X%v=[nq}5ZbbKH)`jFq:rKe(qQC8W$x}ol^U{QUSFF`vUNzwX7V)uT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.5	49822	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	1123	OUT	GET /vi/QMW4AqbuSGg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD0bomMOfrJhL8N-GImSSj3RuroVw HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6170 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:55:45 GMT Expires: Tue, 02 Jul 2024 23:55:45 GMT Cache-Control: public, max-age=7200 Age: 1770 ETag: "1592538347" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:15 UTC	733	IN	Data Raw: 52 49 46 46 12 18 00 00 57 45 42 50 56 50 38 20 06 18 00 00 f0 4f 00 9d 01 2a a8 00 5e 00 3e 4d 10 93 49 a2 91 51 4c 78 28 04 c4 b1 1d c1 05 d8 6e 76 09 5c 4f d7 ff 6a f4 59 e4 de d2 fd f4 fa fe 3c f3 44 7e 0f f8 9e ac ff be ff 9a f6 0c fe e1 d1 3f cd 67 9c 1f e5 1f bb bf ee 9e 91 df c0 3d 6b fd 57 fd 06 7c ba 3d 9c ff cb 5a 84 70 eb f1 fe 0a f8 db f6 3f ee ff b5 df dd 3d bb bf aa f0 1b d6 ff f2 3d 0b fe 6b f7 ef f4 7f de ff 68 ff 32 3e 6f f0 27 e3 56 a0 bf 95 7f 3a ff 19 f9 49 f9 b1 f5 13 06 4e 81 7d 8f fb df 50 ef 68 7e af fe a3 f2 df fc 7f a7 d7 f9 9e 89 fd 8e ff 7b ee 01 fc 97 fa 0f f9 bf cc 3f ee 3f ff fe 90 ff 79 e1 e9 f6 6f f5 9e c0 9f c9 ff b0 7f 93 fe fb fd 9b fe 67 fa 7f 93 6f f7 fe e7 7d cf 7d 3f ff 4f fd 47 ef 2f d0 57 f3 1f ea df ec 7f bd 7f Data Ascii: RIFFWEBPVP8 O*^>MIQLx(nv\OjY<D~?g=kW\|=Zp?==kh2>o'V:IN}Ph~{??yogo}}?OG/W
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 79 78 30 05 69 af 1a 9f 2b 3c 09 96 ed 2a 22 31 32 78 51 98 5b 2e ca 30 fd 0e 07 0e 49 a2 42 ba f3 78 21 61 0a e4 d9 e8 99 38 2d fb b4 4b aa d1 e7 67 fc 82 23 a3 3f 31 d6 5d c6 0c 6a f7 cf 93 96 38 3e e6 67 01 a7 5a 3c 26 5e fe 12 bb 08 b7 2a f5 a9 28 47 0d ec 0f 23 1b bf 3a b5 79 84 07 aa f7 74 12 9f ce d7 a3 13 c5 61 c9 50 7c 73 dc 9c cb 3c e7 ef 7c 3f 17 4f d8 3b 16 ef df 11 f7 d3 92 11 bb 78 97 44 67 bc 8c 36 83 9d 76 9b 26 ee e1 00 3f f4 c2 c5 cf 64 11 8d 2d b7 fa 97 41 c1 31 fe 58 0d 18 2e af be 7a 3c a9 8b 7f 27 db c5 57 9d fd 3a 3c 28 e3 01 bf d1 ce 77 40 90 c8 ea e3 b2 d9 8d 58 01 73 d5 c9 da c4 a3 0d ed bd 41 1a 2e 45 79 92 3f 6e 27 ab c3 fa 16 64 78 b1 2f f0 cc d5 e3 67 03 49 d9 2f f4 59 99 f2 57 87 6a ec 1a de 1c b7 12 dd bb 78 23 92 1c 3f d9 Data Ascii: yx0i+<"12xQ[.0IBx!a8-Kg#?1]j8>gZ<&^(G#:ytaP\|s<\|?O;xDg6v&?d-A1X.z<'W:<(w@XsA.Ey?n'dx/gI/YWjx#?
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 8b 79 e0 9f 71 01 be 65 3f 43 db d7 38 96 a7 9d 11 58 47 09 2f 9e d2 f3 93 07 18 fc ab ee 69 24 95 58 a7 b5 44 a8 84 4e 0a d1 d8 23 c2 8b a0 d0 85 1e 77 b0 00 98 f5 ef 76 0e 24 0a 7d 14 59 8d eb b2 7b e7 4f 88 da 46 0a 56 98 87 48 e3 06 85 04 d8 cb 06 7e 0d cf 64 27 24 3a 37 01 b3 00 cc 16 b0 d6 1e 78 9c f6 2b 14 9c b0 4d f6 9b fd 6f 64 0e 3c 67 6e bb f8 b7 d2 a8 b8 4a 9b 37 ce a8 ff 0b 3e de 78 2e db ba 0c 65 e7 77 51 d6 5b ed d9 31 41 b5 0b cb ef f7 e5 5c fb 2a 00 9e 15 8d 3d 09 72 d0 21 60 d1 2d 8d aa 70 15 b9 fd 14 72 6c f7 33 81 4a 3e b6 9c d1 84 3e 15 69 42 8e f4 73 a1 86 31 2e eb 0c bb 39 b4 07 bc c0 d8 10 c7 ff c7 df ab 72 88 d5 eb 87 dd c7 4e 93 83 04 76 53 23 69 0e 52 2b 42 02 1c f3 16 25 b4 11 db 82 19 9b 2b 07 9a 7c ed c7 d2 a9 5c 2a fb 68 34 Data Ascii: yqe?C8XG/i$XDN#wv$}Y{OFVH~d'$:7x+Mod<gnJ7>x.ewQ[1A\=r!`-prl3J>>iBs1.9rNvS#iR+B%+\|\h4
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: d9 96 0d 24 7a c5 af bf 8d 2e 0e ac 66 6d 25 aa 50 58 d7 a3 3a 35 f9 19 03 8e 6e dc 60 79 4e 03 6f 42 54 1f eb 96 2e 00 27 84 c1 19 e7 38 cf 6a f8 12 f5 9a cb 22 b7 e3 55 1c a0 8b 54 7b 76 36 a5 66 bd 2e 83 6b 60 84 20 53 4c 70 f2 b6 e6 3e 71 69 f1 14 2a 9c f1 00 85 e5 47 cd 3b 51 ce 31 27 01 89 74 a6 dc 9f ab 66 eb 4f 2a d1 96 c4 1f af c0 90 63 2b 3b c3 6f ef 77 dc 88 9c da e7 57 3a a7 50 e6 d5 be 89 12 35 99 b3 e8 5b d4 cd eb 28 12 c1 3b 22 a0 3b 43 23 4d c4 a5 26 b2 f7 56 c8 e0 11 25 cc 2b 45 8b 8d 3b 68 65 c4 68 aa f3 23 bf 34 ac 63 a2 88 a3 a6 3c 68 c2 5b e7 21 5d bb f7 81 97 11 1f 2b 84 13 e2 49 e3 ba c5 d3 3f 25 06 92 4b bf ed bc f6 a0 9f 0a 54 35 41 55 16 db 2e c6 bc e7 32 59 bc 7d f4 b0 70 89 f2 30 8a e1 dd 35 4d e4 cf 70 66 c1 ed db d5 68 3d a7 Data Ascii: $z.fm%PX:5n`yNoBT.'8j"UT{v6f.k` SLp>qiG;Q1'tfOc+;owW:P5[(;";C#M&V%+E;heh#4c<h[!]+I?%KT5AU.2Y}p05Mpfh=
2024-07-02 22:25:15 UTC	1267	IN	Data Raw: a3 4f 1b 1e 80 a1 3b 6f 01 fd c9 ec b8 89 b8 02 40 3e 1a 8b 7e 27 14 d3 c1 46 de a6 5d e4 73 e8 23 6b 4c 52 64 bd ba 67 18 30 18 15 3f 1a c9 e6 08 a2 33 0a d2 53 de 07 a1 bb 4a 67 06 1c d2 77 95 39 e0 73 a2 60 2c 58 ff dd c9 d3 9f 1b 10 9c 70 58 67 14 39 ea ad 97 11 02 7f 2d dc b9 81 b5 a2 16 40 e7 9b 9d 8a b5 01 a9 8a 94 eb 4a 44 d6 e6 b9 6a b1 1f 6b 0d 0d 2d d2 c3 b5 e3 d9 9b 94 cb a4 71 b5 2d a9 94 a9 88 25 ff 76 ef ff cd 3d ff bb b9 43 9e fc ec 51 b3 48 ce 4e d7 3e 70 9a 70 6b b7 e7 af 02 62 9d 87 95 f0 9c fb ac 7b ca f8 a8 00 45 79 1d bd 43 1a f0 1e a9 17 3c b5 73 c7 e1 ee 32 5a 73 11 ee 7f 1d 81 8d c2 11 cf 1c 50 03 31 50 0a 42 9f 75 bb 3e 2c ea 1a c3 b9 3c db d8 ce 61 12 36 fe 4b 14 20 0a ba 5f 38 42 5d 56 81 4f 4a 3b 42 aa e4 06 dd 7f e7 76 2c 92 Data Ascii: O;o@>~'F]s#kLRdg0?3SJgw9s`,XpXg9-@JDjk-q-%v=CQHN>ppkb{EyC<s2ZsP1PBu>,<a6K _8B]VOJ;Bv,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.5	49825	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	1123	OUT	GET /vi/djV11Xbc914/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCUVjcnPQDSHGvb0uU0snHDJaVnYg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 4754 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:53:29 GMT Expires: Tue, 02 Jul 2024 23:53:29 GMT Cache-Control: public, max-age=7200 ETag: "1664266594" Content-Type: image/webp Vary: Origin Age: 1906 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:15 UTC	733	IN	Data Raw: 52 49 46 46 8a 12 00 00 57 45 42 50 56 50 38 20 7e 12 00 00 70 44 00 9d 01 2a a8 00 5e 00 3e 51 14 94 4a 23 91 d1 ca 88 38 05 04 b1 80 63 1c 21 89 ec ea 46 03 95 3d 28 ed d7 f3 01 e6 fd e8 ab fc 67 9c 07 5b 67 a0 d7 97 27 ed 57 c3 87 ee 4f ed bf b4 06 0d 6f 19 3f 31 e1 4f e3 df 58 fe 4b f2 ff d7 af 2f 7d 6b 6a 47 f2 af bd 9f b3 fe f1 e9 6f 7f ff 22 3f bd f5 05 f6 1f fb ae 09 3b 4f ff 0b d4 23 dd af ac ff c9 f0 7f ff 37 d0 df af ff ec fe d6 7e c0 3f 94 ff 43 ff 6f f9 a7 f1 67 fa ef f6 fe 3e 9f 6e ff 47 ec 09 fc af fa 57 fb 7f f1 bf dd bf ec ff 9d f9 00 ff bb fd 47 a0 0f d1 3f cb ff e4 ff 47 f0 19 fc d7 fb 17 fc ff 5d 8f 67 1e 8a 5f b1 09 f7 b4 12 87 31 c8 73 fc 2c 95 61 b1 71 90 72 6c 03 fc 30 50 df 39 f3 57 de 43 4d f7 59 c5 ff 4a 8d b4 f5 1c 15 f6 28 5c Data Ascii: RIFFWEBPVP8 ~pD*^>QJ#8c!F=(g[g'WOo?1OXK/}kjGo"?;O#7~?Cog>nGWG?G]g_1s,aqrl0P9WCMYJ(\
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 97 37 be d8 8d d3 7a e6 80 6a 0b 3e 4e 12 32 0b 0f 00 7f 3c 92 e6 a8 74 6f ea 53 90 be 9d c6 17 f0 c8 2c c4 b6 02 04 a5 f3 04 31 0a ef b1 a6 66 ff 9f 20 2f bd 81 7a 44 9d fe 1c bf 35 fc f8 c5 6e af 63 67 59 2a b2 0d 40 eb d5 c3 a6 1f 53 ea 20 8a a3 f6 79 f8 c3 32 ee 8a 29 fd 33 5c 4c 4f af 12 d3 b9 d4 11 77 f4 72 47 51 81 0d 94 7e 87 56 a4 4d e8 c3 b6 ab 0d 2a 43 03 d4 4e 3c f2 10 e8 99 d0 79 29 58 6f d3 c1 77 91 5e 2f 45 f9 df ac dc dd 75 d4 69 a8 3e 92 18 24 1f 7e 22 21 eb 6e 7d 4c 83 9f 1b b9 9b ed 2e ac 73 9b ec 76 bd 5a 79 b3 ed f3 c3 42 b0 58 a2 55 77 f1 e8 45 15 43 50 b8 70 0c 01 33 7d e2 4a 0e da dd 3c 77 77 3b 13 73 f9 aa 77 09 81 1e 31 35 32 5e 8f cf 93 5c 56 6c 0a c6 46 17 5f 9d 77 2d 18 43 2f d7 53 0c ab 95 6b d9 99 42 5a c7 c6 f1 8e 6a e4 3d Data Ascii: 7zj>N2<toS,1f /zD5ncgY@S y2)3\LOwrGQ~VMCN<y)Xow^/Eui>$~"!n}L.svZyBXUwECPp3}J<ww;sw152^\VlF_w-C/SkBZj=
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: ca 4c 08 4c ee fa 63 a3 1e 91 ef 01 d7 c7 a6 3e 6f 54 fd e6 bd ed 43 3d 11 cb 58 a9 65 cb c5 00 dd 09 70 6c 95 77 97 32 5d 0e fa d2 30 1a e7 da f7 3e 04 c9 ae 4c a3 d7 33 b2 ec c9 40 60 33 d6 3a ea 7e 7e 4c aa a0 03 f5 ab 42 bb 33 77 41 97 df d2 a8 f0 31 9c 30 2e ea eb 72 de 00 39 b2 39 b4 18 8f 12 62 9c ac 0b 7d 2e 72 39 b8 27 33 18 04 d2 ac 72 66 2f 6f aa e5 e3 2b 8e 75 1e b0 a5 ee a3 7b b7 63 33 24 a6 60 c8 63 7c 8d a0 00 07 85 60 b8 2c 24 aa 80 36 17 c8 cc 44 74 be 51 56 44 05 f5 3f 15 94 8a b4 d5 67 cf 59 51 64 60 4f 49 67 8d d3 86 a6 03 d0 bf c2 e5 8f 90 2c 80 df 35 b5 92 4a eb a6 59 31 15 37 75 d7 52 12 0f 6f c4 04 4f 21 b7 85 06 e3 16 52 ab 62 80 b9 05 33 70 fa 86 1c d7 f5 61 d3 56 79 69 d4 31 31 53 4d 2f 76 91 33 1d 36 55 f2 d9 b1 18 b6 90 ad 81 Data Ascii: LLc>oTC=Xeplw2]0>L3@`3:~~LB3wA10.r99b}.r9'3rf/o+u{c3$`c\|`,$6DtQVD?gYQd`OIg,5JY17uRoO!Rb3paVyi11SM/v36U
2024-07-02 22:25:15 UTC	1241	IN	Data Raw: b6 13 c2 65 2f d1 93 f7 fb eb a5 63 ff ad f3 2c 1a 06 85 8d 64 5c b1 58 73 4d 37 7f a4 2e c3 c7 49 86 0a de b6 90 b9 cd c1 6b dc 5a 1f 10 e9 04 76 e3 38 6f 6f 80 44 45 54 84 6a e0 d1 27 7b 22 00 73 a9 67 e6 ce d6 1f 71 39 90 07 52 16 c5 26 f6 f3 8c b3 3d b1 ff 5f 84 8f c7 ae 06 47 c7 8d 5e f7 6f db 32 c0 58 0a 61 5f 4b ed 76 ba a2 5e 40 84 af 10 45 fd 9e 79 d5 06 ae 85 50 e6 c6 3a a2 45 14 fc b7 41 ee c3 bb d2 4c e8 f6 4d 7e a9 99 c8 df bd ce 89 c3 61 1d 85 0f 25 4a b4 0a c2 9d fd 76 f6 83 94 3a 00 4c 8d eb ad 2c 3d 62 6b 4b 17 72 e8 f5 05 1f 9a c6 d2 ed c4 dc b2 4a 76 55 fe d8 f2 50 d0 5b 3a 2a c5 3b f6 cc df 1e c6 82 92 ce 3e b2 2a 09 fe 44 c0 1e 27 78 4c 2c 16 50 83 66 c3 92 d5 8e 23 4e dc 1c 69 d5 72 56 f5 b0 93 5c 90 c6 1c 14 1c 0d 31 0f 62 f5 47 5f Data Ascii: e/c,d\XsM7.IkZv8ooDETj'{"sgq9R&=_G^o2Xa_Kv^@EyP:EALM~a%Jv:L,=bkKrJvUP[:;>D'xL,Pf#NirV\1bG_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.5	49826	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	1119	OUT	GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEWCKgBEF5IWvKriqkDCQgBFQAAiEIYAQ==&rs=AOn4CLBf45ycDkHw60O072DkeCeAw0TV-w HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6534 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:20:50 GMT Expires: Wed, 03 Jul 2024 00:20:50 GMT Cache-Control: public, max-age=7200 ETag: "1631784323" Content-Type: image/jpeg Vary: Origin Age: 265 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:15 UTC	734	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0d 0a 0a 08 08 08 0e 08 08 08 08 0a 0a 08 08 08 08 0a 08 08 08 08 08 08 0a 08 0a 08 0a 08 08 08 08 08 08 0a 08 0d 08 08 08 08 0a 08 08 08 08 09 0a 0a 08 08 0b 0d 0a 08 0d 08 08 09 08 01 03 04 04 06 05 06 0a 06 06 0a 10 0e 0b 0d 0f 0f 0d 10 0d 0d 0d 10 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 00 5e 00 a8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 00 03 01 00 00 00 00 00 00 00 00 00 00 04 03 05 06 07 08 01 02 09 00 ff c4 00 41 10 00 02 01 02 04 03 05 04 05 0a 05 05 00 00 00 00 01 02 03 04 11 00 05 12 21 13 31 41 06 07 14 22 61 32 51 71 81 08 23 b1 b2 f0 15 42 52 62 Data Ascii: JFIF^A!1A"a2Qq#BRb
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 0a ac 0e 0b 93 af 4f bb 71 08 b2 39 e2 f0 68 85 55 0e aa 4d fd 31 e8 5e 49 06 c3 00 42 52 ea f8 90 27 65 5d c6 57 9f d9 2f f9 b0 0e 60 cb 10 20 f2 20 c8 97 b8 e5 6b 74 c6 f9 f2 9e 87 e1 60 6e 3d 16 e2 fa 5f d2 44 94 dd a2 77 f0 95 a9 16 63 96 d0 65 f0 d2 e5 f0 52 cf d9 da 96 86 9e a6 a1 aa eb c4 71 4c f4 f5 30 c8 a9 1b a8 9e 39 26 a8 8e 93 88 a6 47 58 b0 b0 44 97 b2 2d 62 4c 99 ce 39 0d 2d f6 95 7f 10 3c 06 de c3 45 43 76 d2 00 bd 97 c8 e6 45 4e 33 66 39 aa 97 0a 03 c8 10 cd a1 59 c0 d4 54 10 a0 02 48 16 16 e4 31 ab 4f ff 00 a9 e3 6c ad fb 2c ea 93 dc 83 fe e3 ed 78 fb 2b 8f b4 8d 35 0d 66 51 93 e4 d4 34 b9 a6 53 59 96 d3 d4 1a 69 29 29 9d 33 e9 aa 62 98 d4 54 54 e6 92 c2 da 24 40 b1 48 1c 4d 14 70 a8 4d 4a 63 96 05 4a 74 f2 54 63 aa d5 a8 5a f0 e3 79 f2 Data Ascii: Oq9hUM1^IBR'e]W/` kt`n=_DwceRqL09&GXD-bL9-<ECvEN3f9YTH1Ol,x+5fQ4SYi))3bTT$@HMpMJcJtTcZy
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: a0 c6 48 0e 2d 75 3d 54 8b ab 0e 5b a9 38 75 4a 8d 20 a4 91 96 ca c0 ee 6a 9f 85 47 4c ad e5 2c ac f6 e5 b4 8e cc bf f1 22 c7 6d ad b0 c6 97 67 d3 86 4a e6 31 0e cc f3 c9 4e 2b 37 52 6c 79 f3 b7 f5 17 fb 71 a8 26 55 32 91 ca 14 9d 56 c3 b6 4a 28 7a fb df 7f 96 25 a5 01 09 10 bb 7a e1 a6 10 95 e7 c5 1a 21 68 c4 e2 46 80 ba 0a 85 88 85 95 a9 cb 2f 1d 62 62 54 09 4c 3a c4 65 99 40 72 b7 65 17 23 57 63 1a ed d7 65 82 56 93 ed 87 d2 ed 6b 4f 68 20 a9 a3 a2 8a 8b 38 a7 e0 d3 bd 25 2c 49 99 c7 51 46 d1 9c 92 6c c2 a1 aa b8 33 a5 36 82 c6 38 d2 f1 b6 91 13 10 a7 5e 7b 30 41 99 1c 0f 89 a6 f2 6c 46 e0 5a 7a 4f 13 a2 7b ab e6 04 45 88 4c 5d c5 f7 cd 4d 97 a5 3b 4a b9 ed 3d 55 35 57 8b 69 72 5a e4 82 9b 35 40 55 92 9b 39 a3 a9 7f 0e f0 a0 51 00 96 08 9a 56 83 ca 6c Data Ascii: H-u=T[8uJ jGL,"mgJ1N+7Rlyq&U2VJ(z%z!hF/bbTL:e@re#WceVkOh 8%,IQFl368^{0AlFZzO{EL]M;J=U5WirZ5@U9QVl
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 33 5b 4c 92 41 b8 bb 46 a8 e4 8b 8b 8d 2e a7 fe 25 4f ae 33 b2 4e a6 16 ad 22 26 14 9f b1 d4 b3 a9 66 79 92 7a 72 00 50 62 74 94 9f 7d cc f2 81 6b 72 0c 41 bf b2 b6 de f8 6b db ba 0a a3 28 13 13 c9 5b 7d 8c ec bd ca 54 49 6d 3c e3 5e b7 e4 18 83 d2 c2 eb 6b ee 41 da d8 d5 c3 d2 26 e5 60 e2 71 30 0b 02 9b f0 b9 8b 5c 74 c6 a8 b2 c2 29 96 44 b6 d8 20 6d 2a 17 53 87 03 64 a8 dd 1f 93 2e e7 6b 9f b3 12 0a 02 9d 9e 98 30 e9 e9 ef bf 2b 7f 5c 4a 1b 05 e6 96 43 0a b4 b0 24 cc 63 85 e6 89 27 90 10 0c 70 bc 88 b3 48 0b 2b 2d d2 32 ce 2e ac 3c bb 83 cb 1b 24 90 24 2c 38 52 0c d7 2c 8c 46 5a d4 89 39 a5 59 44 10 d4 0a 98 d2 a8 d6 d3 44 13 5f 1e a0 3b f8 29 25 90 a4 75 32 92 b1 35 40 48 10 a2 e2 1a e3 33 7d 7e df 9f d2 a1 c0 27 f1 97 53 89 1c 21 86 48 da 07 a9 8b 8b Data Ascii: 3[LAF.%O3N"&fyzrPbt}krAk([}TIm<^kA&`q0\t)D m*Sd.k0+\JC$c'pH+-2.<$$,8R,FZ9YDD_;)%u25@H3}~'S!H
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 92 77 d9 23 1b 28 3e 69 64 6f 65 01 27 77 76 e6 7a 0b 9d 82 9b 6b b5 ad c3 53 b0 59 15 2b 3b 10 fc cf 2b 07 f6 cf b4 4d 51 2c d5 12 9b bc ce d2 37 ed 39 26 c3 d0 5e c3 dc 00 c7 3f 88 a8 5f 2e 40 5d 26 ca 3b 41 54 51 c3 a6 c7 91 f5 1d 6f f1 18 ce 6c c8 28 da e8 4e b5 99 ce b2 42 82 3d 3d df 8f ed ee c5 b1 73 64 75 6b 18 44 d2 21 b9 0d bd 85 bd 37 de d6 f9 03 6f fe 63 4e 95 30 35 55 1d 59 cb 64 7d 14 fb 58 66 a3 96 9d f7 f0 6e 16 3b f3 e0 ca 19 95 7a 9b 2b ac 81 7a 05 20 74 c6 8d 27 4e a8 da 64 5d 5e 14 12 6f a4 fb ee 31 6e 12 dc 32 af 34 23 7c 6c 4a c7 28 c8 a5 c4 a5 b9 15 1b 62 52 d1 69 89 05 0a 26 06 c1 4a 12 8e 8d f1 29 44 22 23 7c 12 52 25 24 f8 e0 52 d2 c5 f1 e5 e5 14 ce 25 f3 c9 f3 c5 0a e6 1a ee 87 e1 31 9e 61 d4 7c a8 1d 64 c5 8d cf ba df 21 cb 6f Data Ascii: w#(>idoe'wvzkSY+;+MQ,79&^?_.@]&;ATQol(NB==sdukD!7ocN05UYd}Xfn;z+z t'Nd]^o1n24#\|lJ(bRi&J)D"#\|R%$R%1a\|d!o
2024-07-02 22:25:15 UTC	240	IN	Data Raw: e0 0d d4 ee a3 ba 29 18 6b 30 e4 12 fa 9a 59 a0 63 fe a8 e4 7b 7c b0 e2 d7 44 08 85 67 38 2a 0b db 7c 9f 81 a5 24 a5 a4 56 6e 46 9e b2 bd 50 0e 47 ea ca 00 0d f7 00 12 31 5f ba df ed fc af 17 85 4d 67 31 e9 73 c8 5f 7b 5e f6 3d 77 b0 bf 2e 76 18 9c 84 85 9c f7 5e 02 09 2a 37 18 f7 76 4e a8 01 0b 4e 77 1f 58 25 86 34 93 55 a3 57 43 a7 99 0b 66 4d f6 e8 e0 7f a7 ae 2b 9a 46 65 76 9d 9f 88 cd 4b 29 d9 4a 7e 91 13 5a 96 3a 78 8c a2 09 5c 28 47 37 d0 ab 79 46 9b 1d 8f 10 5e fc c8 00 62 cd 1a 03 73 aa 8c 75 7f fc 64 0f 8f e5 50 7d 91 ce 1e 9a 78 e5 46 62 f0 3a c8 85 ad cd 08 36 b8 b1 20 8d 8d c1 3b 9d fd fa b4 9a 58 72 cd 97 1b 9a f2 17 a5 39 36 65 c5 8a 29 45 c0 95 16 40 0f 30 1d 43 58 fa ef 8d 46 a7 17 48 5f ff d9 Data Ascii: )k0Yc{\|Dg8\|$VnFPG1_Mg1s_{^=w.v^7vNNwX%4UWCfM+FevK)J~Z:x\(G7yF^bsudP}xFb:6 ;Xr96e)E@0CXFH_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.5	49827	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	1123	OUT	GET /vi/izGwDsrQ1eQ/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLAPEMSx8W9_-QGlw_ZFUf3cYVKl6w HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	646	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Type: image/webp Vary: Origin Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3666 Date: Tue, 02 Jul 2024 22:25:15 GMT Expires: Wed, 03 Jul 2024 00:25:15 GMT Cache-Control: public, max-age=7200 ETag: "1637153557" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:15 UTC	744	IN	Data Raw: 52 49 46 46 4a 0e 00 00 57 45 42 50 56 50 38 20 3e 0e 00 00 50 39 00 9d 01 2a a8 00 5e 00 3e 51 10 94 4a 23 91 d1 cb e0 38 05 04 b2 80 69 8e 47 88 ba 53 fc cf 3c e9 c5 df c7 d3 1f f8 7d e0 fc ee 9e 8e 7f c9 7a 60 75 4e ef 48 60 31 76 4f fd ab ea 57 d5 9f 2b 3f 27 cd e7 27 fd 80 6a 3b da 3f ec bf 2f ff 2d fe 70 ff 81 e2 bf c3 dd 45 3f 22 fe 9b fe b3 f2 5b f2 f3 94 6a d5 7a 07 7b 55 f6 5f f8 1f 98 1e 84 3a be e4 05 fc db f6 e3 d6 ff f8 de 26 7f 80 ff 8d fe d3 dc 03 f9 f7 f5 bf f8 df 72 bf 25 bf f0 ff a5 f3 f5 fa 1f f9 9f fb ff e6 be 02 7f 96 7f 57 ff 6f f9 bb fe 57 ff ff d6 47 b3 bf dc 2f 65 8f d7 46 4c 54 c8 86 f3 68 df 76 d1 e0 b1 40 06 fc 3a 2a 7d 70 dc a2 85 75 5c 14 3b 63 50 c8 e3 4f cf 0a 7d 69 15 8d ef e7 e6 82 bc 5b 4a e3 1b a7 89 ad 88 bf 4f c3 d3 Data Ascii: RIFFJWEBPVP8 >P9^>QJ#8iGS<}z`uNH`1vOW+?''j;?/-pE?"[jz{U_:&r%WoWG/eFLThv@:}pu\;cPO}i[JO
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: b4 82 98 7d 6c 5b ad e7 1d 5c f7 e6 3a 7d 71 0c 1c 88 2e e6 ab d8 34 b4 61 3b 31 93 5f 8c a1 2d 57 96 db 1f ad 1a 9a b4 3c 5d 77 f5 77 9d a3 58 e8 56 5f 88 10 1c ea a0 9a b6 6a 2a 48 7d cd da 85 be 5f f6 ba c1 ce d7 0a 08 05 c8 bb 49 56 ae ab b5 a8 22 e5 fa 19 1a 8e 53 02 52 64 f2 c7 e4 cf 68 48 29 05 d7 e2 d1 c9 df e6 b9 05 1c bd d6 e9 ff d3 a2 14 45 8c ee c4 34 89 78 25 1b 6f 97 47 19 52 6c bc 39 63 e0 ad 1e 13 e0 05 cc 33 b1 a5 f2 3a 9f 12 07 b8 a2 ab 68 f1 41 11 02 57 fe 77 c0 bf 90 0d f3 f5 21 a9 65 cf c1 07 b0 01 03 1f fd 1c f4 45 43 1a ee 33 50 2d fd e3 4b 3f b0 6b db 65 b9 b5 3b 3c 94 a2 06 5a a7 7c d5 e7 f9 96 86 d3 fc b5 28 b6 16 bf bd a6 48 d8 84 23 69 25 63 90 33 f3 ca ec 54 77 b6 19 2f 3c d7 73 7e 48 1a ec ad 57 d9 a8 8f ce 74 e1 aa fa 8e d2 Data Ascii: }l[\:}q.4a;1_-W<]wwXV_j*H}_IV"SRdhH)E4x%oGRl9c3:hAWw!eEC3P-K?ke;<Z\|(H#i%c3Tw/<s~HWt
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: cd 87 db 09 67 98 cd f2 a0 5e 97 80 2b 16 41 98 55 1e 43 89 a1 56 3e a8 2d d3 2f af ad 12 9d dc 2a 72 53 8b 33 31 f8 4c d7 21 4f 2f 18 d5 7b 41 31 c0 a0 cc 08 52 0d 9c 8a cc 11 cd ac 28 5c 51 cc c8 35 fe 26 5d f4 fc 54 2e ae 4d af f8 16 76 68 ba 61 f6 8f da e0 c6 4d 42 8e fd b2 8a 82 ba 6f 3d da f9 ce a8 fe f0 bc e8 1c 9a e1 a4 78 10 5a 1a 4e 23 40 1c 84 c6 33 ae 9b 7f d6 b2 58 50 d2 0f 26 47 ed 08 bf 2e 81 8d 30 7b 5c 21 34 e4 fe 21 25 c8 b7 1f 55 68 ef fb 88 3a 8e 6d bf cd 4c 46 7a 4e ef f2 0d 93 24 fb f7 fe 65 df 36 d0 df 27 70 36 8c dc a8 c6 45 5c a3 69 a2 ce bd d8 7c dc bf d3 89 6a ef fd d1 bf 84 ff e2 66 e6 20 50 7e 57 85 a0 9e 07 70 8f fa 1c 78 5b 5f a1 bf 58 1d 22 31 8c 1d 6a ea 04 c4 c3 48 19 d7 c2 bd 1f 35 06 89 4a ff 91 43 9a c7 c0 c7 f2 40 1a Data Ascii: g^+AUCV>-/*rS31L!O/{A1R(\Q5&]T.MvhaMBo=xZN#@3XP&G.0{\!4!%Uh:mLFzN$e6'p6E\i\|jf P~Wpx[_X"1jH5JC@
2024-07-02 22:25:15 UTC	142	IN	Data Raw: af e9 ad db 5a ac e9 42 19 3b a8 f1 2f 07 bb d4 59 83 89 cd 0a 84 08 58 35 ef f3 30 6a ff d5 d9 69 45 db aa 0b ad af 3f c4 13 46 5b d4 62 f6 0a 41 6f 01 30 ae 6f ed 0e b1 95 c1 a0 35 2e b9 98 42 a6 b1 4f f2 73 a2 a1 bb 8c 60 8a cd ee 1e 6b c0 20 84 0f 9d 0f bc ff 62 be e1 22 81 3e 12 e1 4c e6 e2 08 79 13 08 c6 e0 79 5e 3a b4 58 53 ae 59 03 76 c8 1a 72 1c e8 54 3a 83 1c 99 a5 6b 0a 96 96 c1 5b 39 83 1c 67 fb 55 ad 2c 00 00 Data Ascii: ZB;/YX50jiE?F[bAo0o5.BOs`k b">Lyy^:XSYvrT:k[9gU,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.5	49828	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:15 UTC	1123	OUT	GET /vi/aGCdLKXNF3w/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDWMtGhP23PIbaoWnTfRS2rx0038Q HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:15 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5834 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:10:41 GMT Expires: Wed, 03 Jul 2024 00:10:41 GMT Cache-Control: public, max-age=7200 ETag: "1576770824" Content-Type: image/webp Vary: Origin Age: 874 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:15 UTC	734	IN	Data Raw: 52 49 46 46 c2 16 00 00 57 45 42 50 56 50 38 20 b6 16 00 00 30 4c 00 9d 01 2a a8 00 5e 00 3e 51 10 94 4a 23 91 d1 cb 80 38 05 04 a0 0c 18 83 02 d2 7a a6 8b fa a8 fa ce 06 23 9d 6d 1f 4a bb 7e 7c cf f9 b6 fa 61 de b0 f4 00 e9 99 ff 1b 6a 89 c7 6f cc 78 2f f8 bf cd bf 88 fc b2 f5 76 c8 df 5b 9f e7 fa 0d fc bf ef 07 ea ff c1 fe e5 7b 4b de ef c7 9f f1 bd 44 7f 21 fe 81 fe 53 f3 1b f3 43 dc af 70 25 8c ff a5 ea 1d ec df d4 7f dc ff 73 fd d3 f3 d9 d4 e3 c0 fe c0 3f cb ff a7 7f b6 fc c8 f8 37 fd 3f fd 2f 22 cf c1 ff a7 fd 98 f8 05 fe 83 fd a7 fe 3f f9 1f dc 6f f5 5f 4b 9f db ff de ff 3b f9 55 ee 1b f4 4f f3 7f f9 bf ce 7c 04 7f 34 fe c1 ff 13 fc 3f ef 1f f9 2f ff ff 5b 5e ce 7f 72 3d 99 7f 67 06 6e f4 5e a5 e9 0f 99 4e bf 5c 1e 39 ad dd 6b 95 de 92 2f 9d 67 c0 Data Ascii: RIFFWEBPVP8 0L*^>QJ#8z#mJ~\|ajox/v[{KD!SCp%s?7?/"?o_K;UO\|4?/[^r=gn^N\9k/g
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: f8 de 4b 1b d6 d3 cc 83 4a 5b 47 6d ef f1 8e f5 07 69 d8 91 22 29 cb c4 07 c5 36 df 9c 93 a1 68 c8 f8 e3 e8 9a d9 e5 52 1c 5e 13 fd a0 f9 a3 16 b2 2a 08 57 72 b2 e4 b8 9b c0 1f 9b f3 ef 48 09 6a d5 ac 37 fc a2 d0 16 c0 b1 83 ad 04 98 98 06 8e b4 05 ef 4e 19 db 78 ea d7 86 ad 4f f2 f6 62 5a 86 d7 e2 db f7 39 f6 59 ca ce 1b d4 3d f6 bb 82 49 67 63 76 f5 17 0c 71 68 75 79 30 06 ee a7 90 a9 f1 9f ff 0c 72 28 a1 4e 54 4e bc 89 96 fd dd 87 8c 09 e0 5c 5f 50 7e e7 4d ba 8d 7f c0 77 1e 0d dd ec f2 ef e4 8e 57 06 ad f7 0d fd 28 f1 fb 32 e2 0d ac 1b 7b 89 3f b5 05 f0 c2 28 f1 f6 6e cc a2 e3 17 69 bf 22 62 df 44 db 3d 8a b7 9c a9 fd 3b 6d da 2b 31 1c 08 4d 43 3d 86 2b 45 c6 c7 d2 2e 92 0d c8 ba 5e b0 90 b0 02 0a 41 83 03 52 6b 65 0c fb 65 91 8a 41 66 4f ec f6 a2 3c Data Ascii: KJ[Gmi")6hR^*WrHj7NxObZ9Y=Igcvqhuy0r(NTN\_P~MwW(2{?(ni"bD=;m+1MC=+E.^ARkeeAfO<
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: b4 db aa e4 cc 4f ea 65 88 84 b7 a6 3f 21 af cd 71 78 c8 37 11 18 5f 7b 04 b7 87 f8 3e c6 c8 f5 61 92 21 2e 31 3e 76 53 0a 96 fb c7 e7 b7 cf 90 d9 d8 4e 6c 54 72 58 97 e1 cb 3d 9d 92 4d 6c f5 f0 2a a1 8d 56 b6 a1 5f 7a 2e bf 09 a6 0b 80 84 a0 90 1b 07 d9 fe 7f 3e d8 1f 8a 9b 88 b6 52 6d 8d f4 30 ab 89 5b 60 82 b2 2b e5 5e 0f f8 6c 1a 81 fd 43 29 e8 ae d7 93 87 fd 0a eb 29 b3 d5 1a 37 3b f7 7a 91 c5 6e e1 dc cb ef bf 0d ef b6 93 b6 9d b1 d8 56 41 c9 a4 25 fb e2 2a b1 80 87 91 5a eb be fc 65 73 73 1f 0f e8 8b 0b ac a4 52 50 9c 43 db b2 99 dc b1 ce d5 56 4e 7b a9 bd 12 4f de 45 df 13 4d 07 dc 22 79 8c df 83 33 16 4e 7e bd bd cd 78 4a 8e 8e 89 2a 1f de 2d 35 ae f9 4b 59 12 8f f3 b7 22 a1 90 0e 28 9e de b6 ed 09 9c df 62 90 d2 48 93 35 37 ba 42 5d 15 5e de ac Data Ascii: Oe?!qx7_{>a!.1>vSNlTrX=MlV_z.>Rm0[`+^lC))7;znVA%ZessRPCVN{OEM"y3N~xJ*-5KY"(bH57B]^
2024-07-02 22:25:15 UTC	1390	IN	Data Raw: 0d 54 64 b5 37 80 3f 7c ca 64 33 b3 92 ea bd 16 f0 c1 f2 06 aa e3 ff a8 bc e4 73 d0 18 96 3f 94 76 23 3f f5 87 74 3c 97 a9 17 4a 57 96 17 f0 87 a2 e5 3b d7 3b 8f 00 49 8c 1f bd 32 7f f3 70 f6 d3 c6 96 54 5f 61 ce 89 70 89 e9 89 ee 48 9a e0 ec 42 45 a3 d4 44 e9 dd 7e dc 7e ea 6e 88 f1 c1 68 b1 dc 25 63 86 74 3b b2 bf ec 92 5e 36 48 41 76 18 ca 70 54 54 12 57 02 b4 05 8b ff 5d de 5c c3 fd 61 0c 48 9a 83 f2 44 98 37 eb 00 85 48 ac dc 89 fd 91 1f 2f 5a 8a ab b0 f4 ff d3 9c ff 14 be 24 f5 a9 8d fe 3a 8b 0f 57 59 b6 cc 70 45 67 23 3a c0 72 ce 6a 97 81 29 60 f6 2d e2 c0 ea 03 a1 20 65 7a 98 a5 da a3 91 47 1b 0a 58 ce e7 8f c1 66 43 73 ae 32 06 86 53 a4 3d 06 c5 02 4c 89 88 a5 c1 62 04 e4 9b 68 cd 7f 40 3f 58 f1 5d 7e 9b 16 48 0d c9 b8 72 52 23 6a 31 89 f5 32 1a Data Ascii: Td7?\|d3s?v#?t<JW;;I2pT_apHBED~~nh%ct;^6HAvpTTW]\aHD7H/Z$:WYpEg#:rj)`- ezGXfCs2S=Lbh@?X]~HrR#j12
2024-07-02 22:25:15 UTC	930	IN	Data Raw: bb 02 e9 25 43 b7 d9 95 f1 ea 45 d7 e3 fa 5b 32 9d 84 c6 dd 15 a5 39 e1 30 e4 65 33 f0 b1 0b 73 59 d5 11 c4 57 8c 94 0c df 20 49 fd 14 bf 7e 5b 0f cc 8d d0 56 28 19 08 02 7c 17 ab 1b 8d 2c 92 f6 75 4a ba d4 09 27 45 01 ec 95 bc 51 da 6a 78 bb 12 57 d5 f6 de 40 1a a8 ed 35 40 0e 88 02 0f 42 4c e0 d1 19 31 4d 63 ca fa 99 69 b2 0a 4a 65 a0 02 0c 6c df 05 93 1d 30 9e 1c 95 b2 c7 28 fd ee f8 27 a6 ec 71 c4 2b 39 95 ec ab ca 4d db d3 81 a8 b7 ae 49 0f d5 64 75 54 cc d5 3b 62 d7 a7 8f c7 d1 fb 86 73 00 f5 d7 15 12 c7 d7 b0 cf e0 be ac c3 1c e9 6f b0 4b ac cc e9 06 0b 5e f7 db d2 75 f6 e8 b6 bc 2b 65 a3 41 5c 59 15 7e 7f 11 39 5c 84 58 f9 a6 e8 fe 6b 32 cf 3a 28 6d d3 73 76 e0 c0 56 dc 38 e0 40 cd 79 18 45 ed 11 df 97 09 7d 15 ec d7 0d 63 75 61 7f 90 c8 ac c7 d8 Data Ascii: %CE[290e3sYW I~[V(\|,uJ'EQjxW@5@BL1MciJel0('q+9MIduT;bsoK^u+eA\Y~9\Xk2:(msvV8@yE}cua

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.5	49830	209.85.165.198	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	1919	OUT	GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1 Host: rr1---sn-q4flrnee.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:16 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:16 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.5	49831	209.85.165.198	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	1927	OUT	GET /videoplayback?expire=8005697484&ei=RjKjmvBgobK26LGtUuK_ioP&ip=82.58.38.87&id=o-AFTt1ZrXi9Vdcgd1OlQIJ5E6gH0bXQnXcQoTQg6d4ZvId&itag=18&source=youtube&requiressl=yes&mh=X6&mm=149%2C08015%2C63635&mn=Kg6d7%2C8FWte%2CATnYE&ms=Kg6d7%2C8FWte%2CATnYE&mv=b&mvi=1&pl=97&ctier=L&initcwndbps=3276159&siu=1&spc=uTLtKBLHRKjiiJDM7FdYdzbGugo6c0bNBqp_AEBPyZfq&vprv=1&svpuc=1&mime=video%2Fmp4&ns=hpqbHSM8y5Gm0ZQGTrQRmLWe&cnr=97&ratebypass=yes&dur=86595492&lmt=7325050968510943&mt=8005697484&fvip=3&c=WEB&txp=3276159&n=Mrfr-jw4LgdEqZJO&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=DCd6wLCkjPmPnXqVX12FtJ3CTAipNwCcPv0VXhg2Ew0S2NPzabs3kdVxSHsMy4gaEE3obWAlA0lDo2hNsy7Jgl0bu85ssfQw4VsEaLmOHT-6 HTTP/1.1 Host: rr1---sn-q4flrnee.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:16 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:16 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.5	49833	142.250.181.238	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	1126	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 1948 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:16 UTC	1948	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 39 39 35 39 31 31 32 38 35 38 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1719959112858",null,null,null
2024-07-02 22:25:16 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg; expires=Wed, 01-Jan-2025 22:25:16 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:16 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 02 Jul 2024 22:25:16 GMT Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:16 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-02 22:25:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.5	49832	142.250.181.238	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	1125	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 559 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:16 UTC	559	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 39 39 35 39 31 31 32 38 36 35 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1719959112865",null,null,null
2024-07-02 22:25:16 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=bEeBHLQ5-LbmngYErt7Td_-M3JqiI42KONXq-KM9Zd3BCY3LiIxJX981DyngkdkzqkN8XCK8D3ZILX0fuMRiDRE7roSUI1QI-xw5_DB4YeWCEu9goklpq_7WYORfjkomi3KUynulcBtLhR38XzGA6bWtfaKN1RKVB4sQpa0oVF0; expires=Wed, 01-Jan-2025 22:25:16 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:16 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 02 Jul 2024 22:25:16 GMT Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:16 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-02 22:25:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.5	49835	216.58.212.130	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	2034	OUT	GET /pagead/viewthroughconversion/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=670751145&utuid=uAXFkgsw1L7xaCfnd5JJOw&cv_attributed=0 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00 sec-ch-ua-arch: "x86" X-YouTube-Page-CL: 648613515 sec-ch-ua-platform-version: "10.0.0" X-YouTube-Utc-Offset: -240 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D X-YouTube-Ad-Signals: dt=1719959109306&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1280&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-02 22:25:16 UTC	1308	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 22:25:16 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Location: https://www.google.com/pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&foc_id=uAXFkgsw1L7xaCfnd5JJOw&label=followon_view&ptype=f_view&random=670751145&utuid=uAXFkgsw1L7xaCfnd5JJOw&cv_attributed=0&is_vtc=0&random=3472537144 Content-Type: image/gif X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Set-Cookie: test_cookie=; domain=.doubleclick.net; path=/; expires=Fri, 01-Aug-2008 22:45:55 GMT; SameSite=none; Secure Set-Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn; expires=Thu, 02-Jul-2026 22:25:16 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:16 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.5	49838	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	1123	OUT	GET /vi/JmcA9LIIXWw/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLA-sVJGX5CmBao1iTU9Bd3X9Ud5Xg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:16 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3752 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:15:59 GMT Expires: Wed, 03 Jul 2024 00:15:59 GMT Cache-Control: public, max-age=7200 ETag: "1469053510" Content-Type: image/webp Vary: Origin Age: 557 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:16 UTC	734	IN	Data Raw: 52 49 46 46 a0 0e 00 00 57 45 42 50 56 50 38 20 94 0e 00 00 f0 3d 00 9d 01 2a a8 00 5e 00 3e 51 14 94 4a 23 91 d1 ca a8 38 05 04 b1 00 60 2d e8 87 f6 4b 3c 9b d9 ef b5 b2 4f d9 5f 59 f9 57 74 07 cc cf cd 7f 4a 3e 60 7c f5 3c c7 f9 b4 fa 2e f4 0b fe c9 fe 93 ad 73 d0 63 cb bb d9 b3 f7 8e d9 27 8f 98 be e8 cc 44 2e 43 ed ac 85 6a a7 e4 5f 40 15 d9 8d 57 ff 4f a0 4f af 3f f1 7b 85 7e ae ff bd e0 1e fd 33 50 2b 84 e5 57 78 e7 e8 51 e6 35 08 4e 1b 5b 0e 7f c0 06 48 cf 33 97 bb d0 5b a6 d6 e3 1f 76 47 94 b3 51 30 35 53 88 b6 5e 9b 7e d5 8d 53 19 ea eb ab c7 88 ad 24 1d 14 a2 d4 40 64 a3 5c 9b 31 9d 6b d9 42 58 96 bf d1 d2 80 82 d8 f7 6d cf eb 5f ff e9 a9 0d 0a fb 16 f0 ca 48 cb 9d 25 02 b3 19 36 e9 50 00 05 58 34 7d 0b 14 97 94 7a c5 47 6a 97 39 dd 59 7d 91 b7 Data Ascii: RIFFWEBPVP8 =*^>QJ#8`-K<O_YWtJ>`\|<.sc'D.Cj_@WOO?{~3P+WxQ5N[H3[vGQ05S^~S$@d\1kBXm_H%6PX4}zGj9Y}
2024-07-02 22:25:16 UTC	1390	IN	Data Raw: b6 08 7d 47 ae e4 06 12 5c db 31 91 c6 57 63 40 15 83 c2 15 26 70 e6 ef 37 b7 57 8b 62 8a a6 15 43 35 9c 8c c9 35 c6 55 ff a6 4e 2f f1 58 26 87 a4 be 85 ee b8 96 ca f0 4e e7 e7 d7 c9 de 81 63 93 b0 38 39 0f 30 be cb 1d 38 2c 44 b1 29 87 5e 47 13 2d 50 0f a4 74 a1 f2 64 85 6d cc f7 22 90 3e 67 be c5 9e 7b 56 8c 79 9a 55 d7 51 5d 48 0d 12 d1 5e d7 6b 3a 50 89 43 b6 8f e9 d3 6c 92 9b 3b 12 f9 c7 6f 6c ba 7a 17 e2 62 e0 62 57 6b 1a df 62 50 01 d5 89 88 87 8a 26 4e 64 b2 78 9e d9 aa fc 6b 8f db 4c 45 70 f2 1f c7 4c 93 f6 18 2d d2 8c c0 b7 c7 02 c5 fe 94 0b 92 e7 a3 5c 74 c0 0b ac 9d 44 e3 8e 6e 89 0c 9f ee ad 7b 71 6c 03 60 9d 7f 14 07 69 57 c5 1d d9 4d ca 66 54 2c cf 4d a3 28 39 f9 25 ce 5a 18 63 dd 81 d8 2f be 4b 10 56 e1 e2 ea 4f 72 ab 85 0f 4f dc 32 47 01 Data Ascii: }G\1Wc@&p7WbC55UN/X&Nc8908,D)^G-Ptdm">g{VyUQ]H^k:PCl;olzbbWkbP&NdxkLEpL-\tDn{ql`iWMfT,M(9%Zc/KVOrO2G
2024-07-02 22:25:16 UTC	1390	IN	Data Raw: cf 20 4a d1 e8 29 2b 7f 2f 48 03 b0 73 cd 84 07 cc 68 9f 81 49 2c fc 4d 05 39 68 67 c6 e1 b9 4f b0 32 ec 17 b9 87 30 78 6d bc 8f af 8e 99 ca e7 30 18 21 36 b6 fc 6b 67 5d 3e 28 f1 63 56 3e 9f 00 78 09 9c 2a 77 4f c2 d8 fd 12 9b 01 26 f1 ca aa 3d 59 57 7e 2a 16 33 84 d9 af 07 e5 79 c8 43 1d 28 c3 ac ba b4 04 13 0f df 58 a7 83 cd c5 2d b1 9e 58 78 e9 0f a4 84 47 c5 80 ad 4d b1 b1 a1 54 31 12 f4 45 57 5c 03 65 81 71 af ff f3 bc db 29 0d 09 b3 ac bb 4a 1c 96 41 7b 83 d9 cd 73 29 82 de 07 a4 d6 f4 74 20 48 c8 37 79 38 34 e0 30 57 4a 78 e6 97 5b 27 1a 4a 6f d3 1f 5b 41 fc ba ac 47 cf f2 a4 ef 20 42 09 e8 48 6b 14 48 f4 5c 33 be f4 76 89 f6 05 ab ab ec dd fb 17 bb 33 be fd 1d ad 66 de b7 79 05 02 26 1a 4b 9c 3d 83 da 2e 38 cf 34 b7 12 81 88 a3 b2 a5 a9 44 b6 c1 Data Ascii: J)+/HshI,M9hgO20xm0!6kg]>(cV>xwO&=YW~3yC(X-XxGMT1EW\eq)JA{s)t H7y840WJx['Jo[AG BHkH\3v3fy&K=.84D
2024-07-02 22:25:16 UTC	238	IN	Data Raw: a9 b7 e0 37 72 22 f9 6c 29 14 79 63 63 2f 57 f2 5e 0d da 06 81 b7 70 ee 43 02 f8 63 25 02 98 f6 07 fd 2e 6d c1 50 10 64 e0 32 d1 43 ac 92 54 97 e6 6b fe d4 1b 02 41 f0 93 2b 59 34 87 cf f7 82 21 a0 33 1f dd 30 a9 78 94 2d dc 0f f8 b8 47 32 08 5a e3 ab ab d1 88 4c 4d a2 4a 67 95 9c 37 46 2c 2e e2 34 71 09 83 d4 c4 6d a7 32 76 6c d9 ca a3 91 a2 5a eb 6f 77 e9 09 8a c8 44 bf 32 af 3a ae de 89 99 31 b9 6b af e3 4a 7d 8a d6 c2 a8 2a 98 c5 1a df da 45 cc b0 28 0a cd eb 8b 37 2f f4 36 b5 3c ff fe 15 16 97 c8 e7 4f be f2 e9 40 7f b5 19 63 98 ce d7 88 a4 e5 26 84 ff 98 8e cd ba 07 97 19 09 35 3a 26 64 eb e4 95 85 4d 6d 2c 43 0e d8 7f c0 ec 17 bd 1f dc 84 8d a4 12 33 2b 06 aa 92 65 ca 73 94 69 b2 82 61 48 a0 00 00 Data Ascii: 7r"l)ycc/W^pCc%.mPd2CTkA+Y4!30x-G2ZLMJg7F,.4qm2vlZowD2:1kJ}*E(7/6<O@c&5:&dMm,C3+esiaH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.5	49840	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	1123	OUT	GET /vi/Bx51eegLTY8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDnxVk8Ys7btiIk02iFYM_HN4SLSA HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:16 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2542 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:43:14 GMT Expires: Tue, 02 Jul 2024 23:43:14 GMT Cache-Control: public, max-age=7200 Age: 2522 ETag: "1551733257" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:16 UTC	733	IN	Data Raw: 52 49 46 46 e6 09 00 00 57 45 42 50 56 50 38 20 da 09 00 00 70 30 00 9d 01 2a a8 00 5e 00 3e 51 1a 94 4a 23 a1 23 a3 90 80 70 0a 09 65 6c 8a 54 e4 36 cc 72 5b 77 be f2 82 21 f8 4d 9b 79 a6 3e 22 f9 98 f8 f4 c7 2e 37 f9 6f e6 19 05 21 66 ed 7f 5e bf 33 94 11 fa 33 d5 7b fc ef fa 7e 80 7e b9 f6 0b fd 55 ff 77 c0 2d fa 8c 79 b3 ee 3e 1a 22 83 64 83 d2 90 36 c8 aa 62 6f 2d 8e 95 d2 f7 dc 13 dc c4 0e bc 7f 30 cc 6c 36 bd b2 51 a3 91 7c ad d2 c2 2f 3f 7a 94 f0 b3 51 cd 75 3b 55 79 41 e8 1d f2 2b 5f da f5 56 21 fc de 7b 4b a2 ed 91 da 45 86 7c 20 91 9c 78 66 2a 83 6e e6 ef 2e 94 25 9d 69 ca 57 34 84 18 27 8d 07 e0 c6 36 52 a3 08 7a 3e a7 c9 08 24 8f 32 e6 27 0c b0 20 51 eb dd ac 55 b3 2e 70 f9 be a2 96 f5 09 b2 54 94 24 57 cb 61 a1 51 94 99 28 70 e1 85 fb 02 c6 Data Ascii: RIFFWEBPVP8 p0^>QJ##pelT6r[w!My>".7o!f^33{~~Uw-y>"d6bo-0l6Q\|/?zQu;UyA+_V!{KE\| xfn.%iW4'6Rz>$2' QU.pT$WaQ(p
2024-07-02 22:25:16 UTC	1390	IN	Data Raw: da 1e fe 39 26 72 dd b1 68 0c 00 3a 8d 4d d7 52 0c e0 ea ee 0b 03 d0 fd eb bb bf ec 2e 2b 73 9d f4 f1 f4 35 5b 3e 15 ed 41 e7 12 24 1d 05 13 fc c6 f9 08 a6 06 62 bf da 54 f1 fd 7d 61 01 45 46 94 59 19 83 db d0 5a d9 71 6e 65 02 db 1b e4 0e b7 11 00 9e c2 79 4a 84 94 11 2c 7a 52 08 3a 7c 6d 6b 06 29 a0 15 ca fd 84 da 48 bf 26 20 a8 16 ff 20 32 8a 8a 76 b4 f4 49 18 f7 cc a8 6b 77 1d 67 c4 bf 9e ec 05 66 f8 e4 4c cd 55 74 a3 c9 20 7a ce 91 53 25 b4 7a 74 b0 ef e4 ae 10 07 36 78 16 93 93 c9 ae 97 c3 84 0c 34 e0 e2 59 48 4f 92 d5 87 89 1e a3 1c 3c b8 54 14 1a 39 47 0a e4 01 6f 58 bb 18 11 81 58 9e 12 5b 08 38 a9 c5 41 26 ad e0 94 b1 67 6e 96 b8 66 0e f3 1e b6 ac 0b 74 85 23 92 26 e5 96 cf bb cf 51 29 85 b2 56 23 a3 75 b1 ed 9e 9e f3 d7 f6 a4 9a ce ac ad e2 16 Data Ascii: 9&rh:MR.+s5[>A$bT}aEFYZqneyJ,zR:\|mk)H& 2vIkwgfLUt zS%zt6x4YHO<T9GoXX[8A&gnft#&Q)V#u
2024-07-02 22:25:16 UTC	419	IN	Data Raw: cf dc 36 7e 1a 1e 67 6c 05 6a 8e 20 ff 9a df c7 74 65 ac f3 1b d1 7f ef fa e3 ef 4f c1 9d 98 7b 62 7c f3 e4 91 3f fd 5f fd 16 4a 3a 9c b6 84 82 b6 4e 6d 11 ff cc 49 a4 9c 00 fe 50 5e f5 5b 94 db 19 1e 7b ff f4 c8 75 cf fb 0a 57 f9 5f f2 8a 3a bf 55 fe 7e 1f ff d6 d1 5f 20 fe fd b7 21 6f 88 f4 9c 73 9f c1 cd 07 1b bc 03 1f fa 54 28 5a 14 82 1c cf 12 56 44 64 80 89 14 29 b6 07 f4 89 af 00 e3 c2 0a 71 bd 8e 31 91 0a f8 b8 c4 c8 0b 07 55 d0 c8 d6 bf d4 dc eb 55 d4 0e 21 90 b9 74 53 2d cd e7 a7 b5 af f6 9f 7f c7 8f ef 33 c9 44 2a ac f9 aa 01 dc 2d 50 00 de 96 57 25 7f a4 a7 d3 3f 57 46 50 f2 17 f3 4c f4 92 9e 7d 1e e4 f5 28 0e b7 18 a6 59 06 af 90 ed 4b f5 58 39 8a 23 81 d1 b9 77 14 ba a3 f3 c6 bb 78 0f 70 7b ba 1f de fd d0 27 a7 36 02 d9 31 4d 88 59 3a 53 e0 Data Ascii: 6~glj teO{b\|?_J:NmIP^[{uW_:U~_ !osT(ZVDd)q1UU!tS-3D*-PW%?WFPL}(YKX9#wxp{'61MY:S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.5	49839	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	1123	OUT	GET /vi/fNFzfwLM72c/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD3tub5tA7yLzokq5mj66fzUS1czg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:16 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3234 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:15:43 GMT Expires: Wed, 03 Jul 2024 00:15:43 GMT Cache-Control: public, max-age=7200 ETag: "1548202698" Content-Type: image/webp Vary: Origin Age: 573 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:16 UTC	734	IN	Data Raw: 52 49 46 46 9a 0c 00 00 57 45 42 50 56 50 38 20 8e 0c 00 00 30 38 00 9d 01 2a a8 00 5e 00 3e 51 10 94 4a 23 a2 23 a3 97 40 70 0a 09 63 00 bf 6b cc 6d 3f 81 fe f3 ce 57 99 fc 93 f2 77 01 be 9f a6 5d c3 9c ed bd 10 1b e4 bd 32 96 98 da 35 f8 e3 e7 6f e3 9f 52 fe bf 6c 1b 51 ae e3 ff 6d f9 87 ed 1f 83 b3 47 c0 37 57 be b4 9e 1f d8 52 a0 4f 92 ff fa be 5e fe b7 f6 11 fd 73 ff 9d bc cc b0 3e 9c 69 f0 9a 90 8c 3c 79 1d e2 6f 9f 7f ed b9 be 80 7e 3b 8a 29 1f c4 bc c8 95 03 99 ae 59 6e ac ab 1f 21 40 f3 76 13 42 0d 0a 65 d2 bf 79 0c 59 2c 55 22 7f 5f 32 f9 95 d5 08 8d 64 7e 97 01 e6 33 dd e8 0f 98 8f 4c b7 63 27 81 1f cc 2b 7e 4d a1 5f 81 2f 10 14 b5 ee a5 2d 07 e2 fa d8 78 bb d8 6f 41 9e 4f c7 35 f2 7c 28 8a a0 e7 c8 26 59 6e b1 41 75 90 1a 2f b3 6f 6e 8d b4 e2 Data Ascii: RIFFWEBPVP8 08*^>QJ##@pckm?Ww]25oRlQmG7WRO^s>i<yo~;)Yn!@vBeyY,U"_2d~3Lc'+~M_/-xoAO5\|(&YnAu/on
2024-07-02 22:25:16 UTC	1390	IN	Data Raw: da 4d 1a b6 49 6b e5 ce 40 d8 3c 5e 8a d4 7f b4 ca 58 c5 a5 3a f7 99 46 89 6e cd 5a 58 62 17 8c bb a2 b5 d0 4e 1a 6d ee 1d 72 32 0c 2f e4 b1 51 23 2f fb ed 7b a0 9c e5 e2 f2 08 ae 60 45 2e 57 bb d8 dc 4c bf 0a 6b 53 f7 06 dc 76 bd ce f4 44 17 04 fa ba 8e 60 ba 01 17 65 25 6d b6 85 ce ac 49 58 5d d8 02 21 bc fc 0e 1c 21 98 be 68 c5 ea 59 e2 90 ec ae 4f ac 12 4a b0 4c b0 b7 7e 24 d6 83 a5 2b 15 95 77 14 ac 39 70 02 f3 73 3e d3 d5 c8 d3 93 e0 9d 55 99 63 1e f7 b5 36 27 0a 9a 7d 95 7e 92 6d 3a cd be 60 2e 63 cd 12 68 0f d3 1a b3 a8 be 86 49 5c 2a d2 c6 65 2e 16 2d ff ed 04 3b 1d 31 cc 83 73 37 26 17 c3 89 52 19 57 08 b1 b8 51 5f 81 3e 03 1e 0a 17 00 97 13 46 42 10 59 31 74 54 93 60 a8 4f 18 41 43 ba 3a c7 2d f7 f8 60 fc 6c 05 56 79 4f c4 34 03 95 6d c0 17 d0 Data Ascii: MIk@<^X:FnZXbNmr2/Q#/{`E.WLkSvD`e%mIX]!!hYOJL~$+w9ps>Uc6'}~m:`.chI\*e.-;1s7&RWQ_>FBY1tT`OAC:-`lVyO4m
2024-07-02 22:25:16 UTC	1110	IN	Data Raw: 3a 4d da 83 be e8 cf 43 51 e3 4b dc ed fa d2 9f cc c8 a8 ce 19 2d e8 df aa a3 e0 02 56 fa 20 3b 46 15 41 05 3a 86 5f 67 b4 f2 af 77 be 5e 61 4a a8 e6 c5 a0 fb 0b 5b 78 13 ce cc 42 ea e4 21 d3 f6 82 b5 49 14 26 b2 ea 93 92 91 be ec d4 8b 65 5b ba 40 41 90 28 7a 53 02 81 91 11 64 ce 64 6f d9 5c a1 31 4a 69 33 db c6 6c 28 4c 97 ac b7 15 69 30 2f 2a ab 51 64 d6 ec 42 58 84 ad e8 12 6c 59 b4 3c b3 42 8c 78 58 e3 55 5f bc 9c 37 23 c2 bd 6b f1 7e e9 1b c0 d3 a1 8f 77 c0 e9 2d 0d ca 7a 72 78 0a 5d 0f 55 8b e1 af e2 7f 53 e1 e2 b9 4f 23 1f cb 46 c5 dd 1b bd 00 3e f6 1c 5c 16 3d 2e dc 9a af 25 ec 13 30 f2 ac 5f 76 6c 1b 54 be 47 21 a9 1d a4 72 df ef fe 7a 11 e8 4d 02 b2 55 c4 d3 01 7d d8 9e 96 c6 1b 81 e6 58 e0 d1 8e ff a0 02 32 13 17 86 94 83 8d 2a 30 01 c9 4b 40 Data Ascii: :MCQK-V ;FA:_gw^aJ[xB!I&e[@A(zSddo\1Ji3l(Li0/QdBXlY<BxXU_7#k~w-zrx]USO#F>\=.%0_vlTG!rzMU}X20K@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.5	49837	142.250.185.110	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	514	OUT	GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=tz=America.New_York
2024-07-02 22:25:16 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1607 Date: Tue, 02 Jul 2024 22:25:16 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:16 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-07-02 22:25:16 UTC	457	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.5	49841	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	630	OUT	GET /sw.js_data HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:17 UTC	1664	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 02 Jul 2024 22:25:16 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy: same-origin; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:17 UTC	1664	IN	Data Raw: 64 32 61 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 79 74 2e 73 77 2e 61 64 72 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 65 6e 22 2c 22 55 53 22 2c 22 55 53 22 2c 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 22 2c 22 22 2c 22 43 67 74 42 55 57 68 58 62 6c 70 53 64 6b 74 58 53 53 6a 4d 5f 4a 47 30 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 58 77 25 33 44 25 33 44 22 2c 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 Data Ascii: d2a)]}'[["yt.sw.adr",null,[[["en","US","US","8.46.123.33",null,null,true,null,null,null,null,"","","CgtBUWhXblpSdktXSSjM_JG0BjIKCgJVUxIEGgAgXw%3D%3D","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Sa
2024-07-02 22:25:17 UTC	1664	IN	Data Raw: 65 61 64 65 72 5f 6f 72 64 65 72 5c 75 30 30 33 64 48 4e 55 41 52 4c 43 2c 6f 72 69 67 69 6e 61 6c 5f 68 6f 73 74 5c 75 30 30 33 64 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 43 4d 7a 38 6b 62 51 47 45 4c 32 5a 73 41 55 51 7a 4e 2d 75 42 52 44 38 68 62 41 46 45 4d 79 4b 73 51 55 51 6b 4c 4b 77 42 52 44 71 77 36 38 46 45 50 53 72 73 41 55 51 31 74 32 77 42 52 44 36 38 4c 41 46 45 4c 32 32 72 67 55 51 6c 49 6d 78 Data Ascii: eader_order\u003dHNUARLC,original_host\u003dwww.youtube.com",null,null,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,"CMz8kbQGEL2ZsAUQzN-uBRD8hbAFEMyKsQUQkLKwBRDqw68FEPSrsAUQ1t2wBRD68LAFEL22rgUQlImx
2024-07-02 22:25:17 UTC	49	IN	Data Raw: 4d 5f 4a 47 30 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 58 77 25 33 44 25 33 44 22 5d 2c 22 56 66 32 37 38 38 33 39 61 7c 7c 22 5d 5d 0d 0a Data Ascii: M_JG0BjIKCgJVUxIEGgAgXw%3D%3D"],"Vf278839a\|\|"]]
2024-07-02 22:25:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.5	49842	142.250.186.110	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	1019	OUT	GET / HTTP/1.1 Host: youtube.com Connection: keep-alive Pragma: no-cache Cache-Control: no-cache sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:17 UTC	1663	IN	HTTP/1.1 301 Moved Permanently Content-Type: application/binary X-Content-Type-Options: nosniff Expires: Tue, 02 Jul 2024 22:25:17 GMT Date: Tue, 02 Jul 2024 22:25:17 GMT Cache-Control: private, max-age=31536000 Location: https://www.youtube.com/ X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="youtube_main" Server: ESF Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.5	49843	216.58.212.130	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:16 UTC	1042	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-07-02 22:25:17 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Tue, 02 Jul 2024 22:25:17 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.5	49845	173.194.140.232	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	1926	OUT	GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&ctier=L&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1 Host: rr3---sn-q4fl6nde.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:17 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:17 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.5	49844	173.194.140.232	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	1918	OUT	GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1 Host: rr3---sn-q4fl6nde.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:17 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:17 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.5	49846	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	1997	OUT	POST /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 6145 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Content-Encoding: gzip X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00 sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1719959115075 X-YouTube-Page-CL: 648613515 X-Goog-Event-Time: 1719959115047 X-YouTube-Utc-Offset: -240 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D X-YouTube-Ad-Signals: dt=1719959110085&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:17 UTC	6145	OUT	Data Raw: 1f 8b 08 00 00 00 00 00 00 03 ed 5d 0b 73 aa 4a b6 fe 2b 29 ab ee d4 4c 55 92 cd fb 91 a9 53 b7 10 d1 60 04 5f a8 db dc 7b 8a 42 45 25 22 18 40 8d 39 b5 ff fb 74 03 66 ab 31 80 d9 1d 4f d8 93 3d 55 73 3a d0 8f ef eb 5e f4 5a fd 58 cb bf 0a 43 d7 09 cc a7 a0 70 f3 57 61 68 5b a6 13 a6 a6 76 e1 a6 60 3a 85 cb c2 04 a6 3a 6d 90 8a de aa c6 dc 2c dc e0 db 3f bb a6 e7 5b ae 03 f2 10 d7 04 46 50 18 8b 11 d7 18 7e 8d 61 b0 84 eb 8c ad 89 ec 8c 5d 58 a7 b1 58 c8 8e 1f 18 b6 5d 32 02 03 94 10 6b 2c 37 1b 34 2b 52 7d e5 ea 53 b9 89 f7 af 9e 8a 2d b1 a3 7b 42 59 52 1b 53 6f dd 69 3a 86 b1 2e b6 4a fd 69 4d 2a 4b 77 cf ac 2f 74 9a 0f c3 0d 78 26 d6 9e 59 90 4f 26 0d f8 6c 63 86 f9 74 0b e6 53 9d 2a 2c 4b 05 ed 25 c8 c7 cf 07 20 5f 7d 5e f5 9b 9d 26 26 13 30 df e3 9a Data Ascii: ]sJ+)LUS`_{BE%"@9tf1O=Us:^ZXCpWah[v`::m,?[FP~a]XX]2k,74+R}S-{BYRSoi:.JiMKw/tx&YO&lctS,K% _}^&&0
2024-07-02 22:25:17 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 02 Jul 2024 22:25:17 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:17 UTC	34	IN	Data Raw: 31 63 0d 0a 7b 0a 20 20 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 20 7b 7d 0a 7d 0a 0d 0a Data Ascii: 1c{ "responseContext": {}}
2024-07-02 22:25:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.5	49858	173.194.140.232	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	1918	OUT	GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1 Host: rr3---sn-q4fl6nde.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:17 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:17 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.5	49859	173.194.140.232	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	1926	OUT	GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&ctier=L&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1 Host: rr3---sn-q4fl6nde.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:17 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:17 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.5	49851	142.250.185.226	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	544	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
2024-07-02 22:25:18 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:18 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 52 49 65 6b 4c 48 6c 47 58 50 51 4e 77 53 61 47 4e 32 30 46 65 57 6b 62 78 68 43 52 35 7a 62 41 41 69 76 65 72 51 41 4f 34 51 54 63 57 4b 58 6c 72 5a 4e 52 73 78 36 59 32 65 32 71 57 36 6f 73 69 63 35 67 70 79 33 4d 64 37 63 5a 48 77 4f 37 53 6e 72 57 41 41 55 74 32 52 77 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKqRIekLHlGXPQNwSaGN20FeWkbxhCR5zbAAiverQAO4QTcWKXlrZNRsx6Y2e2qW6osic5gpy3Md7cZHwO7SnrWAAUt2Rw"}
2024-07-02 22:25:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.5	49850	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	547	OUT	GET /vi/QMW4AqbuSGg/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD0bomMOfrJhL8N-GImSSj3RuroVw HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:18 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6170 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:55:45 GMT Expires: Tue, 02 Jul 2024 23:55:45 GMT Cache-Control: public, max-age=7200 Age: 1773 ETag: "1592538347" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:18 UTC	733	IN	Data Raw: 52 49 46 46 12 18 00 00 57 45 42 50 56 50 38 20 06 18 00 00 f0 4f 00 9d 01 2a a8 00 5e 00 3e 4d 10 93 49 a2 91 51 4c 78 28 04 c4 b1 1d c1 05 d8 6e 76 09 5c 4f d7 ff 6a f4 59 e4 de d2 fd f4 fa fe 3c f3 44 7e 0f f8 9e ac ff be ff 9a f6 0c fe e1 d1 3f cd 67 9c 1f e5 1f bb bf ee 9e 91 df c0 3d 6b fd 57 fd 06 7c ba 3d 9c ff cb 5a 84 70 eb f1 fe 0a f8 db f6 3f ee ff b5 df dd 3d bb bf aa f0 1b d6 ff f2 3d 0b fe 6b f7 ef f4 7f de ff 68 ff 32 3e 6f f0 27 e3 56 a0 bf 95 7f 3a ff 19 f9 49 f9 b1 f5 13 06 4e 81 7d 8f fb df 50 ef 68 7e af fe a3 f2 df fc 7f a7 d7 f9 9e 89 fd 8e ff 7b ee 01 fc 97 fa 0f f9 bf cc 3f ee 3f ff fe 90 ff 79 e1 e9 f6 6f f5 9e c0 9f c9 ff b0 7f 93 fe fb fd 9b fe 67 fa 7f 93 6f f7 fe e7 7d cf 7d 3f ff 4f fd 47 ef 2f d0 57 f3 1f ea df ec 7f bd 7f Data Ascii: RIFFWEBPVP8 O*^>MIQLx(nv\OjY<D~?g=kW\|=Zp?==kh2>o'V:IN}Ph~{??yogo}}?OG/W
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 79 78 30 05 69 af 1a 9f 2b 3c 09 96 ed 2a 22 31 32 78 51 98 5b 2e ca 30 fd 0e 07 0e 49 a2 42 ba f3 78 21 61 0a e4 d9 e8 99 38 2d fb b4 4b aa d1 e7 67 fc 82 23 a3 3f 31 d6 5d c6 0c 6a f7 cf 93 96 38 3e e6 67 01 a7 5a 3c 26 5e fe 12 bb 08 b7 2a f5 a9 28 47 0d ec 0f 23 1b bf 3a b5 79 84 07 aa f7 74 12 9f ce d7 a3 13 c5 61 c9 50 7c 73 dc 9c cb 3c e7 ef 7c 3f 17 4f d8 3b 16 ef df 11 f7 d3 92 11 bb 78 97 44 67 bc 8c 36 83 9d 76 9b 26 ee e1 00 3f f4 c2 c5 cf 64 11 8d 2d b7 fa 97 41 c1 31 fe 58 0d 18 2e af be 7a 3c a9 8b 7f 27 db c5 57 9d fd 3a 3c 28 e3 01 bf d1 ce 77 40 90 c8 ea e3 b2 d9 8d 58 01 73 d5 c9 da c4 a3 0d ed bd 41 1a 2e 45 79 92 3f 6e 27 ab c3 fa 16 64 78 b1 2f f0 cc d5 e3 67 03 49 d9 2f f4 59 99 f2 57 87 6a ec 1a de 1c b7 12 dd bb 78 23 92 1c 3f d9 Data Ascii: yx0i+<"12xQ[.0IBx!a8-Kg#?1]j8>gZ<&^(G#:ytaP\|s<\|?O;xDg6v&?d-A1X.z<'W:<(w@XsA.Ey?n'dx/gI/YWjx#?
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 8b 79 e0 9f 71 01 be 65 3f 43 db d7 38 96 a7 9d 11 58 47 09 2f 9e d2 f3 93 07 18 fc ab ee 69 24 95 58 a7 b5 44 a8 84 4e 0a d1 d8 23 c2 8b a0 d0 85 1e 77 b0 00 98 f5 ef 76 0e 24 0a 7d 14 59 8d eb b2 7b e7 4f 88 da 46 0a 56 98 87 48 e3 06 85 04 d8 cb 06 7e 0d cf 64 27 24 3a 37 01 b3 00 cc 16 b0 d6 1e 78 9c f6 2b 14 9c b0 4d f6 9b fd 6f 64 0e 3c 67 6e bb f8 b7 d2 a8 b8 4a 9b 37 ce a8 ff 0b 3e de 78 2e db ba 0c 65 e7 77 51 d6 5b ed d9 31 41 b5 0b cb ef f7 e5 5c fb 2a 00 9e 15 8d 3d 09 72 d0 21 60 d1 2d 8d aa 70 15 b9 fd 14 72 6c f7 33 81 4a 3e b6 9c d1 84 3e 15 69 42 8e f4 73 a1 86 31 2e eb 0c bb 39 b4 07 bc c0 d8 10 c7 ff c7 df ab 72 88 d5 eb 87 dd c7 4e 93 83 04 76 53 23 69 0e 52 2b 42 02 1c f3 16 25 b4 11 db 82 19 9b 2b 07 9a 7c ed c7 d2 a9 5c 2a fb 68 34 Data Ascii: yqe?C8XG/i$XDN#wv$}Y{OFVH~d'$:7x+Mod<gnJ7>x.ewQ[1A\=r!`-prl3J>>iBs1.9rNvS#iR+B%+\|\h4
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: d9 96 0d 24 7a c5 af bf 8d 2e 0e ac 66 6d 25 aa 50 58 d7 a3 3a 35 f9 19 03 8e 6e dc 60 79 4e 03 6f 42 54 1f eb 96 2e 00 27 84 c1 19 e7 38 cf 6a f8 12 f5 9a cb 22 b7 e3 55 1c a0 8b 54 7b 76 36 a5 66 bd 2e 83 6b 60 84 20 53 4c 70 f2 b6 e6 3e 71 69 f1 14 2a 9c f1 00 85 e5 47 cd 3b 51 ce 31 27 01 89 74 a6 dc 9f ab 66 eb 4f 2a d1 96 c4 1f af c0 90 63 2b 3b c3 6f ef 77 dc 88 9c da e7 57 3a a7 50 e6 d5 be 89 12 35 99 b3 e8 5b d4 cd eb 28 12 c1 3b 22 a0 3b 43 23 4d c4 a5 26 b2 f7 56 c8 e0 11 25 cc 2b 45 8b 8d 3b 68 65 c4 68 aa f3 23 bf 34 ac 63 a2 88 a3 a6 3c 68 c2 5b e7 21 5d bb f7 81 97 11 1f 2b 84 13 e2 49 e3 ba c5 d3 3f 25 06 92 4b bf ed bc f6 a0 9f 0a 54 35 41 55 16 db 2e c6 bc e7 32 59 bc 7d f4 b0 70 89 f2 30 8a e1 dd 35 4d e4 cf 70 66 c1 ed db d5 68 3d a7 Data Ascii: $z.fm%PX:5n`yNoBT.'8j"UT{v6f.k` SLp>qiG;Q1'tfOc+;owW:P5[(;";C#M&V%+E;heh#4c<h[!]+I?%KT5AU.2Y}p05Mpfh=
2024-07-02 22:25:18 UTC	1267	IN	Data Raw: a3 4f 1b 1e 80 a1 3b 6f 01 fd c9 ec b8 89 b8 02 40 3e 1a 8b 7e 27 14 d3 c1 46 de a6 5d e4 73 e8 23 6b 4c 52 64 bd ba 67 18 30 18 15 3f 1a c9 e6 08 a2 33 0a d2 53 de 07 a1 bb 4a 67 06 1c d2 77 95 39 e0 73 a2 60 2c 58 ff dd c9 d3 9f 1b 10 9c 70 58 67 14 39 ea ad 97 11 02 7f 2d dc b9 81 b5 a2 16 40 e7 9b 9d 8a b5 01 a9 8a 94 eb 4a 44 d6 e6 b9 6a b1 1f 6b 0d 0d 2d d2 c3 b5 e3 d9 9b 94 cb a4 71 b5 2d a9 94 a9 88 25 ff 76 ef ff cd 3d ff bb b9 43 9e fc ec 51 b3 48 ce 4e d7 3e 70 9a 70 6b b7 e7 af 02 62 9d 87 95 f0 9c fb ac 7b ca f8 a8 00 45 79 1d bd 43 1a f0 1e a9 17 3c b5 73 c7 e1 ee 32 5a 73 11 ee 7f 1d 81 8d c2 11 cf 1c 50 03 31 50 0a 42 9f 75 bb 3e 2c ea 1a c3 b9 3c db d8 ce 61 12 36 fe 4b 14 20 0a ba 5f 38 42 5d 56 81 4f 4a 3b 42 aa e4 06 dd 7f e7 76 2c 92 Data Ascii: O;o@>~'F]s#kLRdg0?3SJgw9s`,XpXg9-@JDjk-q-%v=CQHN>ppkb{EyC<s2ZsP1PBu>,<a6K _8B]VOJ;Bv,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.5	49848	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	629	OUT	GET /app_shell HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:18 UTC	4360	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff x-resource-manifest: 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 [TRUNCATED] Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 02 Jul 2024 22:25:18 GMT X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="youtube_main" Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:18 UTC	4360	IN	Data Raw: 32 35 34 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 30 70 78 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 22 20 6c 61 6e 67 3d 22 65 6e 22 20 64 61 72 6b 65 72 2d 64 61 72 6b 2d 74 68 65 6d 65 20 64 61 72 6b 65 72 2d 64 61 72 6b 2d 74 68 65 6d 65 2d 64 65 70 72 65 63 61 74 65 20 73 79 73 74 65 6d 2d 69 63 6f 6e 73 20 74 79 70 6f 67 72 61 70 68 79 20 74 79 70 6f 67 72 61 70 68 79 2d 73 70 61 63 69 6e 67 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 69 64 3d 22 5f 67 64 22 20 6e 6f 6e 63 65 3d 22 79 63 33 76 43 57 77 62 54 34 69 76 49 6b 32 7a 6d 41 4d 68 54 41 22 3e 77 69 6e 64 6f 77 Data Ascii: 254a<!DOCTYPE html><html style="font-size: 10px;font-family: Roboto, Arial, sans-serif;" lang="en" darker-dark-theme darker-dark-theme-deprecate system-icons typography typography-spacing><head><script data-id="_gd" nonce="yc3vCWwbT4ivIk2zmAMhTA">window
2024-07-02 22:25:18 UTC	4360	IN	Data Raw: 65 72 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 74 72 75 65 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 74 72 75 65 2c 77 72 69 74 61 62 6c 65 3a 74 72 75 65 7d 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 72 69 67 50 6f 6c 79 6d 65 72 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 6e 65 77 50 6f 6c 79 6d 65 72 3a 6f 72 69 67 50 6f 6c 79 6d 65 72 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 74 72 75 65 2c 0a 65 6e 75 6d 65 72 61 62 6c 65 3a 74 72 75 65 7d 29 7d 29 28 29 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 79 63 33 76 43 57 77 62 54 34 69 76 49 6b 32 7a 6d 41 4d 68 54 41 22 3e 77 69 6e 64 6f 77 2e 50 6f 6c 79 6d 65 72 3d 77 69 6e 64 Data Ascii: er,configurable:true,enumerable:true,writable:true})},get:function(){return typeof origPolymer==="function"?newPolymer:origPolymer},configurable:true,enumerable:true})})();}).call(this);</script><script nonce="yc3vCWwbT4ivIk2zmAMhTA">window.Polymer=wind
2024-07-02 22:25:18 UTC	834	IN	Data Raw: 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 2f 64 65 73 6b 74 6f 70 2f 61 37 62 31 65 63 32 33 2f 6a 73 62 69 6e 2f 77 65 62 2d 61 6e 69 6d 61 74 69 6f 6e 73 2d 6e 65 78 74 2d 6c 69 74 65 2e 6d 69 6e 2e 76 66 6c 73 65 74 2f 77 65 62 2d 61 6e 69 6d 61 74 69 6f 6e 73 2d 6e 65 78 74 2d 6c 69 74 65 2e 6d 69 6e 2e 6a 73 22 20 6e 6f 6e 63 65 3d 22 79 63 33 76 43 57 77 62 54 34 69 76 49 6b 32 7a 6d 41 4d 68 54 41 22 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 2f 73 2f 64 65 73 6b 74 6f 70 2f 61 37 62 31 65 63 32 33 2f 6a 73 62 69 6e 2f 63 75 73 74 6f 6d 2d 65 6c 65 6d 65 6e 74 73 2d 65 73 35 2d 61 64 61 70 74 65 72 2e Data Ascii: t src="https://www.youtube.com/s/desktop/a7b1ec23/jsbin/web-animations-next-lite.min.vflset/web-animations-next-lite.min.js" nonce="yc3vCWwbT4ivIk2zmAMhTA"></script><script src="https://www.youtube.com/s/desktop/a7b1ec23/jsbin/custom-elements-es5-adapter.
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 43 4c 49 45 4e 54 5f 43 41 4e 41 52 59 5f 53 54 41 54 45 22 3a 22 6e 6f 6e 65 22 2c 22 44 45 56 49 43 45 22 3a 22 63 62 72 5c 75 30 30 33 64 43 68 72 6f 6d 65 5c 75 30 30 32 36 63 62 72 76 65 72 5c 75 30 30 33 64 31 31 37 2e 30 2e 30 2e 30 5c 75 30 30 32 36 63 65 6e 67 5c 75 30 30 33 64 57 65 62 4b 69 74 5c 75 30 30 32 36 63 65 6e 67 76 65 72 5c 75 30 30 33 64 35 33 37 2e 33 36 5c 75 30 30 32 36 63 6f 73 5c 75 30 30 33 64 57 69 6e 64 6f 77 73 5c 75 30 30 32 36 63 6f 73 76 65 72 5c 75 30 30 33 64 31 30 2e 30 5c 75 30 30 32 36 63 70 6c 61 74 66 6f 72 6d 5c 75 30 30 33 64 44 45 53 4b 54 4f 50 22 2c 22 44 49 53 41 42 4c 45 5f 59 54 5f 49 4d 47 5f 44 45 4c 41 59 5f 4c 4f 41 44 49 4e 47 22 3a 66 61 6c 73 65 2c 22 45 4c 45 4d 45 4e 54 5f Data Ascii: 8000{"CLIENT_CANARY_STATE":"none","DEVICE":"cbr\u003dChrome\u0026cbrver\u003d117.0.0.0\u0026ceng\u003dWebKit\u0026cengver\u003d537.36\u0026cos\u003dWindows\u0026cosver\u003d10.0\u0026cplatform\u003dDESKTOP","DISABLE_YT_IMG_DELAY_LOADING":false,"ELEMENT_
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 5f 64 69 61 6c 6f 67 5f 70 6f 70 75 70 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 61 6e 69 6d 61 74 65 5f 6d 69 6e 69 70 6c 61 79 65 72 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 63 6c 69 65 6e 74 5f 72 65 6c 65 61 73 65 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 64 65 6c 61 79 5f 70 6c 61 79 65 72 5f 72 65 73 69 7a 69 6e 67 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 63 6c 69 63 6b 5f 64 72 61 67 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 6f 70 5f 65 6e 61 62 6c 65 5f 64 6d 70 61 6e 65 6c 5f 77 68 65 65 6c 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 64 65 73 6b 74 Data Ascii: _dialog_popup":true,"desktop_animate_miniplayer":true,"desktop_client_release":true,"desktop_delay_player_resizing":true,"desktop_enable_dmpanel_click_drag_scroll":true,"desktop_enable_dmpanel_scroll":true,"desktop_enable_dmpanel_wheel_scroll":true,"deskt
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 70 5f 69 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 63 74 69 76 65 5f 76 69 65 77 5f 64 69 73 70 6c 61 79 5f 61 64 5f 72 65 6e 64 65 72 65 72 5f 77 65 62 5f 68 6f 6d 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 64 5f 63 6f 6e 74 65 78 74 5f 69 6e 5f 76 73 73 5f 70 69 6e 67 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 64 73 5f 77 65 62 5f 65 70 5f 62 75 65 6e 6f 73 5f 61 69 72 65 73 5f 61 6e 64 5f 70 61 64 64 69 6e 67 5f 66 69 78 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 73 79 6e 63 5f 61 62 5f 65 6e 66 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 62 75 65 6e 6f 73 5f 61 69 72 65 73 5f 74 79 70 6f 67 72 61 70 68 79 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 62 75 74 74 6f 6e 5f 62 65 68 61 76 69 6f 72 5f 72 65 75 73 65 22 3a Data Ascii: p_int":true,"enable_active_view_display_ad_renderer_web_home":true,"enable_ad_context_in_vss_pings":true,"enable_ads_web_ep_buenos_aires_and_padding_fix":true,"enable_async_ab_enf":true,"enable_buenos_aires_typography":true,"enable_button_behavior_reuse":
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 63 63 6f 75 6e 74 5f 73 77 69 74 63 68 65 72 5f 65 6e 64 70 6f 69 6e 74 5f 6f 6e 5f 77 65 62 66 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 67 68 6f 73 74 5f 76 69 65 77 5f 72 65 6e 64 65 72 69 6e 67 5f 6c 69 6d 69 74 65 64 5f 68 35 5f 63 6c 69 65 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 67 6f 6f 67 6c 65 5f 70 61 79 6d 65 6e 74 5f 62 69 6c 6c 69 6e 67 5f 63 6f 6d 6d 61 6e 64 5f 63 6c 69 65 6e 74 5f 73 75 70 70 6f 72 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 6e 64 6c 65 5f 73 65 61 72 63 68 5f 6f 6e 5f 63 68 61 6e 6e 65 6c 5f 73 77 69 74 63 68 65 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 6e 64 6c 65 73 5f 61 63 63 6f 75 6e 74 5f 6d 65 6e 75 5f 73 77 69 74 63 68 65 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 68 61 Data Ascii: ccount_switcher_endpoint_on_webfe":true,"enable_ghost_view_rendering_limited_h5_client":true,"enable_google_payment_billing_command_client_support":true,"enable_handle_search_on_channel_switcher":true,"enable_handles_account_menu_switcher":true,"enable_ha
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 22 65 6e 61 62 6c 65 5f 70 61 73 73 5f 73 64 63 5f 67 65 74 5f 61 63 63 6f 75 6e 74 73 5f 6c 69 73 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 5f 72 5f 63 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 5f 72 5f 63 5f 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 5f 72 5f 73 69 5f 66 61 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 61 31 31 79 5f 6c 61 62 65 6c 5f 77 69 74 68 5f 62 61 64 67 65 5f 74 65 78 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 63 6f 6e 74 61 69 6e 65 72 5f 73 61 76 65 5f 62 75 74 74 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 70 6c 61 79 61 62 6c 65 5f 65 6e 74 69 74 79 5f 73 61 76 65 5f 6d 65 6e 75 5f 69 74 65 6d 22 3a 74 72 75 65 2c 22 65 6e 61 62 Data Ascii: "enable_pass_sdc_get_accounts_list":true,"enable_pl_r_c":true,"enable_pl_r_c_s":true,"enable_pl_r_si_fa":true,"enable_playable_a11y_label_with_badge_text":true,"enable_playable_container_save_button":true,"enable_playable_entity_save_menu_item":true,"enab
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 68 35 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 66 5f 70 72 65 72 6f 6c 6c 5f 70 6c 61 79 65 72 5f 62 79 74 65 73 5f 76 69 64 65 6f 5f 74 76 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 6b 5f 70 65 72 66 6f 72 6d 61 6e 63 65 5f 6e 65 74 77 6f 72 6b 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 64 6b 5f 70 65 72 66 6f 72 6d 61 6e 63 65 5f 70 6c 61 79 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 63 74 69 6f 6e 5f 6c 69 73 74 5f 73 63 72 6f 6c 6c 5f 74 6f 5f 69 74 65 6d 5f 73 65 63 74 69 6f 6e 5f 77 65 62 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 65 65 64 6c 65 73 73 5f 73 68 6f 72 74 73 5f 75 72 Data Ascii: f_preroll_player_bytes_video_h5":true,"enable_sdf_preroll_player_bytes_video_tv":true,"enable_sdk_performance_network_logging":true,"enable_sdk_performance_play_logging":true,"enable_section_list_scroll_to_item_section_web":true,"enable_seedless_shorts_ur
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 6c 61 63 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 39 36 5f 62 69 74 5f 63 73 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 67 70 61 79 5f 63 6f 6d 6d 61 6e 64 5f 73 70 69 6e 6e 65 72 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 6b 65 74 63 68 75 70 5f 68 65 72 6f 5f 61 6e 69 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 70 6c 61 79 65 72 5f 70 6c 61 79 65 72 5f 69 6e 5f 62 61 72 5f 66 65 61 74 75 72 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 70 6f 73 74 65 72 5f 68 6f 76 65 72 5f 61 6e 69 6d 61 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 73 68 6f 72 74 73 5f 61 75 64 69 6f 5f 70 69 76 6f 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 Data Ascii: lact":true,"enable_web_96_bit_csn":true,"enable_web_gpay_command_spinner":true,"enable_web_ketchup_hero_animation":true,"enable_web_player_player_in_bar_feature":true,"enable_web_poster_hover_animation":true,"enable_web_shorts_audio_pivot":true,"enable_we

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.5	49855	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	547	OUT	GET /vi/E9de-cmycx8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLBLvNQ1W44jBqrM9VYTFZXKSd_QGQ HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:18 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3508 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:25:15 GMT Expires: Wed, 03 Jul 2024 00:25:15 GMT Cache-Control: public, max-age=7200 ETag: "1575389988" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:18 UTC	736	IN	Data Raw: 52 49 46 46 ac 0d 00 00 57 45 42 50 56 50 38 20 a0 0d 00 00 b0 38 00 9d 01 2a a8 00 5e 00 3e 51 10 94 4a 23 91 d1 cb a0 38 05 04 b4 00 58 93 00 ab 1f 1e ff 31 f9 55 ec 8b 6a 7f 25 f8 eb 8c 7c d6 f7 2f 9e 3f f8 3e ad 3c c1 39 e6 fe e3 7a a5 fd b0 fd b1 f7 92 ff 4d eb 1f fb 6f a8 07 f6 9e a6 2f 43 cf d9 cf 4e 7f dc 2f 86 2f ed 9f f6 fd 28 b3 1e 3a cc f8 8f d8 01 ea ae ec 6f af f3 bf c3 bf 8f 9a 84 7b 27 fc 47 06 78 00 fc ff fa df fa 4f 0f df e8 bd 39 ed b5 f2 a7 f1 72 f3 4f 60 3f e5 7f db 7f cb 7e 5e 7f 92 fa 62 ff 07 ff 0f dc af ba af cf 3f d0 ff d6 ff 25 f0 13 fc af fa 97 fc 1e 05 5f d6 85 81 f3 0c 6e a7 04 77 b7 90 e9 77 10 39 ca c0 3c 1c 9b 3b b9 a2 5d 51 af 3a 77 4c 28 8f b4 d0 f3 22 70 0e ae 77 30 d0 64 81 1a e4 38 58 9c 24 3a e9 d5 45 d5 f3 43 b8 36 Data Ascii: RIFFWEBPVP8 8*^>QJ#8X1Uj%\|/?><9zMo/CN//(:o{'GxO9rO`?~^b?%_nww9<;]Q:wL("pw0d8X$:EC6
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: c2 c3 2b 43 86 9e f5 52 29 d9 0c ea a7 6d 7c f2 41 23 ce 97 2b a0 50 8a c5 91 85 57 4c 22 40 5c 2a 4b fc f5 4d 42 6a f4 87 1a 44 6e b6 1b ec 5b 6c 3d 8e 9f 60 4e d4 cf b2 e1 cb e1 01 04 c7 40 ab 5f 07 bc e9 1d 72 e7 c6 66 eb ee ba 05 40 b2 84 41 5f 41 66 43 66 b9 6d 2a e0 c0 7c 90 04 d5 93 d3 5e 81 10 14 0a f8 cf df a0 34 aa cb d5 15 9c 15 2c 51 cd 8d 92 ea ca f5 d3 4e ed bf 45 81 1f 39 d4 e2 5b d0 a7 18 98 a8 5b 79 f5 c8 7d eb b1 68 72 7b 33 70 3a 6a 5d d6 c1 e4 77 9b 8c a9 28 9d b7 c6 93 01 23 13 af 88 17 8b e2 a8 a0 f0 74 92 35 f5 5c e4 30 88 d0 e7 0f c4 a8 21 41 ed a8 d5 78 ad 62 b2 d6 3d f8 d4 1b c8 ad 6e bf 72 27 f6 56 37 03 19 b2 13 9c d0 8f 9d 00 c4 ba a5 7d 95 7c 9e cd 6c bd f4 7d 7c 24 d9 03 48 ee 79 66 8e 65 c4 52 19 3a 5c 96 24 c2 cb 25 55 d5 Data Ascii: +CR)m\|A#+PWL"@\KMBjDn[l=`N@_rf@A_AfCfm\|^4,QNE9[[y}hr{3p:j]w(#t5\0!Axb=nr'V7}\|l}\|$HyfeR:\$%U
2024-07-02 22:25:18 UTC	1382	IN	Data Raw: 7f 47 b8 6c ed 7a d2 5a 02 3f 4e 97 59 3e fc 12 b9 f9 df e8 8f ed 4e 26 f8 6f d5 19 ef 2c d5 9d 43 98 5f 97 85 90 bb 80 63 5a 59 ee cb 64 a7 dc 9d 73 ea 23 c4 e7 77 ef d9 78 4e 4a eb 36 fe 3d d5 df 9a 6b 05 1a 39 fa a3 26 ca 55 58 62 d9 38 0b ea f2 65 a8 a3 9a 98 71 37 cf 12 c2 7b ee d5 35 79 90 02 d3 c8 62 aa 3c 9a a7 06 74 ac 4e b9 c3 cb 75 62 e8 33 82 22 18 4a 42 26 a2 eb bf 82 00 1b 01 d0 5e 71 43 62 67 08 2a 87 b8 3e 38 c0 92 b9 1b bf 3d 90 ff 05 b4 be a3 96 7f 83 d7 02 78 de 61 07 be 66 f8 7f fa 6c c9 c6 a9 68 8e f1 29 6f 8f 86 b6 ea a8 e6 d7 16 3b 8a 0a dc a1 ab ea 9b 2f 82 d2 8f 26 c9 1d 7c ee d2 d5 30 17 b6 42 74 2f 75 b2 f3 31 0a 66 23 90 49 3a 7e cd 54 d5 5a 2b 0a 63 39 1d 56 04 0e 5d 03 11 fb 67 b3 1f 0c 44 14 b3 00 26 29 46 0d c9 7b 70 74 9e Data Ascii: GlzZ?NY>N&o,C_cZYds#wxNJ6=k9&UXb8eq7{5yb<tNub3"JB&^qCbg*>8=xaflh)o;/&\|0Bt/u1f#I:~TZ+c9V]gD&)F{pt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.5	49849	142.250.185.110	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	514	OUT	GET /youtubei/v1/att/get?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=tz=America.New_York
2024-07-02 22:25:18 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1607 Date: Tue, 02 Jul 2024 22:25:18 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:18 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-07-02 22:25:18 UTC	457	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.5	49852	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	547	OUT	GET /vi/djV11Xbc914/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCUVjcnPQDSHGvb0uU0snHDJaVnYg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:18 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 4754 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:53:29 GMT Expires: Tue, 02 Jul 2024 23:53:29 GMT Cache-Control: public, max-age=7200 ETag: "1664266594" Content-Type: image/webp Vary: Origin Age: 1909 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:18 UTC	733	IN	Data Raw: 52 49 46 46 8a 12 00 00 57 45 42 50 56 50 38 20 7e 12 00 00 70 44 00 9d 01 2a a8 00 5e 00 3e 51 14 94 4a 23 91 d1 ca 88 38 05 04 b1 80 63 1c 21 89 ec ea 46 03 95 3d 28 ed d7 f3 01 e6 fd e8 ab fc 67 9c 07 5b 67 a0 d7 97 27 ed 57 c3 87 ee 4f ed bf b4 06 0d 6f 19 3f 31 e1 4f e3 df 58 fe 4b f2 ff d7 af 2f 7d 6b 6a 47 f2 af bd 9f b3 fe f1 e9 6f 7f ff 22 3f bd f5 05 f6 1f fb ae 09 3b 4f ff 0b d4 23 dd af ac ff c9 f0 7f ff 37 d0 df af ff ec fe d6 7e c0 3f 94 ff 43 ff 6f f9 a7 f1 67 fa ef f6 fe 3e 9f 6e ff 47 ec 09 fc af fa 57 fb 7f f1 bf dd bf ec ff 9d f9 00 ff bb fd 47 a0 0f d1 3f cb ff e4 ff 47 f0 19 fc d7 fb 17 fc ff 5d 8f 67 1e 8a 5f b1 09 f7 b4 12 87 31 c8 73 fc 2c 95 61 b1 71 90 72 6c 03 fc 30 50 df 39 f3 57 de 43 4d f7 59 c5 ff 4a 8d b4 f5 1c 15 f6 28 5c Data Ascii: RIFFWEBPVP8 ~pD*^>QJ#8c!F=(g[g'WOo?1OXK/}kjGo"?;O#7~?Cog>nGWG?G]g_1s,aqrl0P9WCMYJ(\
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 97 37 be d8 8d d3 7a e6 80 6a 0b 3e 4e 12 32 0b 0f 00 7f 3c 92 e6 a8 74 6f ea 53 90 be 9d c6 17 f0 c8 2c c4 b6 02 04 a5 f3 04 31 0a ef b1 a6 66 ff 9f 20 2f bd 81 7a 44 9d fe 1c bf 35 fc f8 c5 6e af 63 67 59 2a b2 0d 40 eb d5 c3 a6 1f 53 ea 20 8a a3 f6 79 f8 c3 32 ee 8a 29 fd 33 5c 4c 4f af 12 d3 b9 d4 11 77 f4 72 47 51 81 0d 94 7e 87 56 a4 4d e8 c3 b6 ab 0d 2a 43 03 d4 4e 3c f2 10 e8 99 d0 79 29 58 6f d3 c1 77 91 5e 2f 45 f9 df ac dc dd 75 d4 69 a8 3e 92 18 24 1f 7e 22 21 eb 6e 7d 4c 83 9f 1b b9 9b ed 2e ac 73 9b ec 76 bd 5a 79 b3 ed f3 c3 42 b0 58 a2 55 77 f1 e8 45 15 43 50 b8 70 0c 01 33 7d e2 4a 0e da dd 3c 77 77 3b 13 73 f9 aa 77 09 81 1e 31 35 32 5e 8f cf 93 5c 56 6c 0a c6 46 17 5f 9d 77 2d 18 43 2f d7 53 0c ab 95 6b d9 99 42 5a c7 c6 f1 8e 6a e4 3d Data Ascii: 7zj>N2<toS,1f /zD5ncgY@S y2)3\LOwrGQ~VMCN<y)Xow^/Eui>$~"!n}L.svZyBXUwECPp3}J<ww;sw152^\VlF_w-C/SkBZj=
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: ca 4c 08 4c ee fa 63 a3 1e 91 ef 01 d7 c7 a6 3e 6f 54 fd e6 bd ed 43 3d 11 cb 58 a9 65 cb c5 00 dd 09 70 6c 95 77 97 32 5d 0e fa d2 30 1a e7 da f7 3e 04 c9 ae 4c a3 d7 33 b2 ec c9 40 60 33 d6 3a ea 7e 7e 4c aa a0 03 f5 ab 42 bb 33 77 41 97 df d2 a8 f0 31 9c 30 2e ea eb 72 de 00 39 b2 39 b4 18 8f 12 62 9c ac 0b 7d 2e 72 39 b8 27 33 18 04 d2 ac 72 66 2f 6f aa e5 e3 2b 8e 75 1e b0 a5 ee a3 7b b7 63 33 24 a6 60 c8 63 7c 8d a0 00 07 85 60 b8 2c 24 aa 80 36 17 c8 cc 44 74 be 51 56 44 05 f5 3f 15 94 8a b4 d5 67 cf 59 51 64 60 4f 49 67 8d d3 86 a6 03 d0 bf c2 e5 8f 90 2c 80 df 35 b5 92 4a eb a6 59 31 15 37 75 d7 52 12 0f 6f c4 04 4f 21 b7 85 06 e3 16 52 ab 62 80 b9 05 33 70 fa 86 1c d7 f5 61 d3 56 79 69 d4 31 31 53 4d 2f 76 91 33 1d 36 55 f2 d9 b1 18 b6 90 ad 81 Data Ascii: LLc>oTC=Xeplw2]0>L3@`3:~~LB3wA10.r99b}.r9'3rf/o+u{c3$`c\|`,$6DtQVD?gYQd`OIg,5JY17uRoO!Rb3paVyi11SM/v36U
2024-07-02 22:25:18 UTC	1241	IN	Data Raw: b6 13 c2 65 2f d1 93 f7 fb eb a5 63 ff ad f3 2c 1a 06 85 8d 64 5c b1 58 73 4d 37 7f a4 2e c3 c7 49 86 0a de b6 90 b9 cd c1 6b dc 5a 1f 10 e9 04 76 e3 38 6f 6f 80 44 45 54 84 6a e0 d1 27 7b 22 00 73 a9 67 e6 ce d6 1f 71 39 90 07 52 16 c5 26 f6 f3 8c b3 3d b1 ff 5f 84 8f c7 ae 06 47 c7 8d 5e f7 6f db 32 c0 58 0a 61 5f 4b ed 76 ba a2 5e 40 84 af 10 45 fd 9e 79 d5 06 ae 85 50 e6 c6 3a a2 45 14 fc b7 41 ee c3 bb d2 4c e8 f6 4d 7e a9 99 c8 df bd ce 89 c3 61 1d 85 0f 25 4a b4 0a c2 9d fd 76 f6 83 94 3a 00 4c 8d eb ad 2c 3d 62 6b 4b 17 72 e8 f5 05 1f 9a c6 d2 ed c4 dc b2 4a 76 55 fe d8 f2 50 d0 5b 3a 2a c5 3b f6 cc df 1e c6 82 92 ce 3e b2 2a 09 fe 44 c0 1e 27 78 4c 2c 16 50 83 66 c3 92 d5 8e 23 4e dc 1c 69 d5 72 56 f5 b0 93 5c 90 c6 1c 14 1c 0d 31 0f 62 f5 47 5f Data Ascii: e/c,d\XsM7.IkZv8ooDETj'{"sgq9R&=_G^o2Xa_Kv^@EyP:EALM~a%Jv:L,=bkKrJvUP[:;>D'xL,Pf#NirV\1bG_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.5	49856	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	543	OUT	GET /vi/dQw4w9WgXcQ/hqdefault.jpg?sqp=-oaymwEWCKgBEF5IWvKriqkDCQgBFQAAiEIYAQ==&rs=AOn4CLBf45ycDkHw60O072DkeCeAw0TV-w HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:18 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 6534 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:20:50 GMT Expires: Wed, 03 Jul 2024 00:20:50 GMT Cache-Control: public, max-age=7200 ETag: "1631784323" Content-Type: image/jpeg Vary: Origin Age: 268 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:18 UTC	734	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0d 0a 0a 08 08 08 0e 08 08 08 08 0a 0a 08 08 08 08 0a 08 08 08 08 08 08 0a 08 0a 08 0a 08 08 08 08 08 08 0a 08 0d 08 08 08 08 0a 08 08 08 08 09 0a 0a 08 08 0b 0d 0a 08 0d 08 08 09 08 01 03 04 04 06 05 06 0a 06 06 0a 10 0e 0b 0d 0f 0f 0d 10 0d 0d 0d 10 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0f 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 00 5e 00 a8 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 00 03 01 00 00 00 00 00 00 00 00 00 00 04 03 05 06 07 08 01 02 09 00 ff c4 00 41 10 00 02 01 02 04 03 05 04 05 0a 05 05 00 00 00 00 01 02 03 04 11 00 05 12 21 13 31 41 06 07 14 22 61 32 51 71 81 08 23 b1 b2 f0 15 42 52 62 Data Ascii: JFIF^A!1A"a2Qq#BRb
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 0a ac 0e 0b 93 af 4f bb 71 08 b2 39 e2 f0 68 85 55 0e aa 4d fd 31 e8 5e 49 06 c3 00 42 52 ea f8 90 27 65 5d c6 57 9f d9 2f f9 b0 0e 60 cb 10 20 f2 20 c8 97 b8 e5 6b 74 c6 f9 f2 9e 87 e1 60 6e 3d 16 e2 fa 5f d2 44 94 dd a2 77 f0 95 a9 16 63 96 d0 65 f0 d2 e5 f0 52 cf d9 da 96 86 9e a6 a1 aa eb c4 71 4c f4 f5 30 c8 a9 1b a8 9e 39 26 a8 8e 93 88 a6 47 58 b0 b0 44 97 b2 2d 62 4c 99 ce 39 0d 2d f6 95 7f 10 3c 06 de c3 45 43 76 d2 00 bd 97 c8 e6 45 4e 33 66 39 aa 97 0a 03 c8 10 cd a1 59 c0 d4 54 10 a0 02 48 16 16 e4 31 ab 4f ff 00 a9 e3 6c ad fb 2c ea 93 dc 83 fe e3 ed 78 fb 2b 8f b4 8d 35 0d 66 51 93 e4 d4 34 b9 a6 53 59 96 d3 d4 1a 69 29 29 9d 33 e9 aa 62 98 d4 54 54 e6 92 c2 da 24 40 b1 48 1c 4d 14 70 a8 4d 4a 63 96 05 4a 74 f2 54 63 aa d5 a8 5a f0 e3 79 f2 Data Ascii: Oq9hUM1^IBR'e]W/` kt`n=_DwceRqL09&GXD-bL9-<ECvEN3f9YTH1Ol,x+5fQ4SYi))3bTT$@HMpMJcJtTcZy
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: a0 c6 48 0e 2d 75 3d 54 8b ab 0e 5b a9 38 75 4a 8d 20 a4 91 96 ca c0 ee 6a 9f 85 47 4c ad e5 2c ac f6 e5 b4 8e cc bf f1 22 c7 6d ad b0 c6 97 67 d3 86 4a e6 31 0e cc f3 c9 4e 2b 37 52 6c 79 f3 b7 f5 17 fb 71 a8 26 55 32 91 ca 14 9d 56 c3 b6 4a 28 7a fb df 7f 96 25 a5 01 09 10 bb 7a e1 a6 10 95 e7 c5 1a 21 68 c4 e2 46 80 ba 0a 85 88 85 95 a9 cb 2f 1d 62 62 54 09 4c 3a c4 65 99 40 72 b7 65 17 23 57 63 1a ed d7 65 82 56 93 ed 87 d2 ed 6b 4f 68 20 a9 a3 a2 8a 8b 38 a7 e0 d3 bd 25 2c 49 99 c7 51 46 d1 9c 92 6c c2 a1 aa b8 33 a5 36 82 c6 38 d2 f1 b6 91 13 10 a7 5e 7b 30 41 99 1c 0f 89 a6 f2 6c 46 e0 5a 7a 4f 13 a2 7b ab e6 04 45 88 4c 5d c5 f7 cd 4d 97 a5 3b 4a b9 ed 3d 55 35 57 8b 69 72 5a e4 82 9b 35 40 55 92 9b 39 a3 a9 7f 0e f0 a0 51 00 96 08 9a 56 83 ca 6c Data Ascii: H-u=T[8uJ jGL,"mgJ1N+7Rlyq&U2VJ(z%z!hF/bbTL:e@re#WceVkOh 8%,IQFl368^{0AlFZzO{EL]M;J=U5WirZ5@U9QVl
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 33 5b 4c 92 41 b8 bb 46 a8 e4 8b 8b 8d 2e a7 fe 25 4f ae 33 b2 4e a6 16 ad 22 26 14 9f b1 d4 b3 a9 66 79 92 7a 72 00 50 62 74 94 9f 7d cc f2 81 6b 72 0c 41 bf b2 b6 de f8 6b db ba 0a a3 28 13 13 c9 5b 7d 8c ec bd ca 54 49 6d 3c e3 5e b7 e4 18 83 d2 c2 eb 6b ee 41 da d8 d5 c3 d2 26 e5 60 e2 71 30 0b 02 9b f0 b9 8b 5c 74 c6 a8 b2 c2 29 96 44 b6 d8 20 6d 2a 17 53 87 03 64 a8 dd 1f 93 2e e7 6b 9f b3 12 0a 02 9d 9e 98 30 e9 e9 ef bf 2b 7f 5c 4a 1b 05 e6 96 43 0a b4 b0 24 cc 63 85 e6 89 27 90 10 0c 70 bc 88 b3 48 0b 2b 2d d2 32 ce 2e ac 3c bb 83 cb 1b 24 90 24 2c 38 52 0c d7 2c 8c 46 5a d4 89 39 a5 59 44 10 d4 0a 98 d2 a8 d6 d3 44 13 5f 1e a0 3b f8 29 25 90 a4 75 32 92 b1 35 40 48 10 a2 e2 1a e3 33 7d 7e df 9f d2 a1 c0 27 f1 97 53 89 1c 21 86 48 da 07 a9 8b 8b Data Ascii: 3[LAF.%O3N"&fyzrPbt}krAk([}TIm<^kA&`q0\t)D m*Sd.k0+\JC$c'pH+-2.<$$,8R,FZ9YDD_;)%u25@H3}~'S!H
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 92 77 d9 23 1b 28 3e 69 64 6f 65 01 27 77 76 e6 7a 0b 9d 82 9b 6b b5 ad c3 53 b0 59 15 2b 3b 10 fc cf 2b 07 f6 cf b4 4d 51 2c d5 12 9b bc ce d2 37 ed 39 26 c3 d0 5e c3 dc 00 c7 3f 88 a8 5f 2e 40 5d 26 ca 3b 41 54 51 c3 a6 c7 91 f5 1d 6f f1 18 ce 6c c8 28 da e8 4e b5 99 ce b2 42 82 3d 3d df 8f ed ee c5 b1 73 64 75 6b 18 44 d2 21 b9 0d bd 85 bd 37 de d6 f9 03 6f fe 63 4e 95 30 35 55 1d 59 cb 64 7d 14 fb 58 66 a3 96 9d f7 f0 6e 16 3b f3 e0 ca 19 95 7a 9b 2b ac 81 7a 05 20 74 c6 8d 27 4e a8 da 64 5d 5e 14 12 6f a4 fb ee 31 6e 12 dc 32 af 34 23 7c 6c 4a c7 28 c8 a5 c4 a5 b9 15 1b 62 52 d1 69 89 05 0a 26 06 c1 4a 12 8e 8d f1 29 44 22 23 7c 12 52 25 24 f8 e0 52 d2 c5 f1 e5 e5 14 ce 25 f3 c9 f3 c5 0a e6 1a ee 87 e1 31 9e 61 d4 7c a8 1d 64 c5 8d cf ba df 21 cb 6f Data Ascii: w#(>idoe'wvzkSY+;+MQ,79&^?_.@]&;ATQol(NB==sdukD!7ocN05UYd}Xfn;z+z t'Nd]^o1n24#\|lJ(bRi&J)D"#\|R%$R%1a\|d!o
2024-07-02 22:25:18 UTC	240	IN	Data Raw: e0 0d d4 ee a3 ba 29 18 6b 30 e4 12 fa 9a 59 a0 63 fe a8 e4 7b 7c b0 e2 d7 44 08 85 67 38 2a 0b db 7c 9f 81 a5 24 a5 a4 56 6e 46 9e b2 bd 50 0e 47 ea ca 00 0d f7 00 12 31 5f ba df ed fc af 17 85 4d 67 31 e9 73 c8 5f 7b 5e f6 3d 77 b0 bf 2e 76 18 9c 84 85 9c f7 5e 02 09 2a 37 18 f7 76 4e a8 01 0b 4e 77 1f 58 25 86 34 93 55 a3 57 43 a7 99 0b 66 4d f6 e8 e0 7f a7 ae 2b 9a 46 65 76 9d 9f 88 cd 4b 29 d9 4a 7e 91 13 5a 96 3a 78 8c a2 09 5c 28 47 37 d0 ab 79 46 9b 1d 8f 10 5e fc c8 00 62 cd 1a 03 73 aa 8c 75 7f fc 64 0f 8f e5 50 7d 91 ce 1e 9a 78 e5 46 62 f0 3a c8 85 ad cd 08 36 b8 b1 20 8d 8d c1 3b 9d fd fa b4 9a 58 72 cd 97 1b 9a f2 17 a5 39 36 65 c5 8a 29 45 c0 95 16 40 0f 30 1d 43 58 fa ef 8d 46 a7 17 48 5f ff d9 Data Ascii: )k0Yc{\|Dg8\|$VnFPG1_Mg1s_{^=w.v^7vNNwX%4UWCfM+FevK)J~Z:x\(G7yF^bsudP}xFb:6 ;Xr96e)E@0CXFH_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.5	49853	216.58.212.129	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:17 UTC	532	OUT	GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s48-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:18 UTC	542	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 1491 X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:43:51 GMT Expires: Wed, 03 Jul 2024 21:43:51 GMT Cache-Control: public, max-age=86400, no-transform Age: 2487 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:18 UTC	848	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 12 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 15 10 11 13 17 15 15 15 0c 0f 17 18 12 16 16 12 17 18 15 01 03 04 04 06 05 06 0a 06 06 0a 0d 0e 0a 0d 10 0f 10 10 0e 0f 10 0d 0f 0f 0f 10 10 0f 0f 15 0e 0d 10 0f 0d 0d 0f 0d 0e 11 0f 0e 0f 15 0d 0f 0d 0d 0f 0d 12 0f 0d 10 0f 0d 0d 0d 10 0d 10 0d 0d 0f ff c0 00 11 08 00 30 00 30 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 06 07 03 05 08 02 04 ff c4 00 32 10 00 02 01 03 03 03 02 03 06 07 01 00 00 00 00 00 01 02 03 04 05 11 00 06 21 12 31 41 07 51 13 14 22 32 61 81 91 a1 c1 08 16 23 42 62 71 a2 15 ff c4 Data Ascii: JFIF002!1AQ"2a#Bbq
2024-07-02 22:25:18 UTC	643	IN	Data Raw: fc 46 e8 75 50 ba 03 f9 fd 4b 4f e2 02 1a 23 b7 64 55 b6 44 f7 14 96 37 6a c5 84 7c 45 50 d8 39 6c 03 8f d3 57 63 62 69 84 be b3 cb dd 61 d9 f3 b8 4e 23 b3 46 f9 68 91 11 d5 a1 a5 c0 e7 8f d7 4b 60 a6 c2 12 ae e2 08 a4 65 5c 8f 62 35 49 5e 05 19 7a 16 82 82 d5 bb 6f 15 38 58 e0 8a 25 12 01 97 00 09 19 90 1f 76 fa 07 e1 9f 1a 3d b2 5b 6e 71 e4 12 ee da 7d 35 a3 99 f6 5a 8b 62 ef ca ea ed 93 62 ba 4b 48 29 e7 ad a1 a7 ac 9a 14 60 eb 0b bc 6a dc 11 dd 46 71 91 c7 9e da 3a d6 87 72 4b fb ee 65 13 91 f6 28 de ab d4 93 71 af 51 0c 43 a6 38 57 a8 b1 fb 24 8c fe fa 8c 78 7d d0 6f 8a ba 6c 5e fb 86 ef 0f 55 9e f7 ee e3 9a f9 7b dd 51 55 53 46 cb 46 aa 60 76 fa 99 55 a1 0c 1b fc 4e 7a 87 9e eb ef ae e2 9b fe 77 d7 03 e8 15 58 37 56 29 84 f1 1e a4 84 ba 8e 75 54 e9 Data Ascii: FuPKO#dUD7j\|EP9lWcbiaN#FhK`e\b5I^zo8X%v=[nq}5ZbbKH)`jFq:rKe(qQC8W$x}ol^U{QUSFF`vUNzwX7V)uT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.5	49860	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:18 UTC	547	OUT	GET /vi/aGCdLKXNF3w/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDWMtGhP23PIbaoWnTfRS2rx0038Q HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:18 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 5834 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:10:41 GMT Expires: Wed, 03 Jul 2024 00:10:41 GMT Cache-Control: public, max-age=7200 ETag: "1576770824" Content-Type: image/webp Vary: Origin Age: 877 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:18 UTC	734	IN	Data Raw: 52 49 46 46 c2 16 00 00 57 45 42 50 56 50 38 20 b6 16 00 00 30 4c 00 9d 01 2a a8 00 5e 00 3e 51 10 94 4a 23 91 d1 cb 80 38 05 04 a0 0c 18 83 02 d2 7a a6 8b fa a8 fa ce 06 23 9d 6d 1f 4a bb 7e 7c cf f9 b6 fa 61 de b0 f4 00 e9 99 ff 1b 6a 89 c7 6f cc 78 2f f8 bf cd bf 88 fc b2 f5 76 c8 df 5b 9f e7 fa 0d fc bf ef 07 ea ff c1 fe e5 7b 4b de ef c7 9f f1 bd 44 7f 21 fe 81 fe 53 f3 1b f3 43 dc af 70 25 8c ff a5 ea 1d ec df d4 7f dc ff 73 fd d3 f3 d9 d4 e3 c0 fe c0 3f cb ff a7 7f b6 fc c8 f8 37 fd 3f fd 2f 22 cf c1 ff a7 fd 98 f8 05 fe 83 fd a7 fe 3f f9 1f dc 6f f5 5f 4b 9f db ff de ff 3b f9 55 ee 1b f4 4f f3 7f f9 bf ce 7c 04 7f 34 fe c1 ff 13 fc 3f ef 1f f9 2f ff ff 5b 5e ce 7f 72 3d 99 7f 67 06 6e f4 5e a5 e9 0f 99 4e bf 5c 1e 39 ad dd 6b 95 de 92 2f 9d 67 c0 Data Ascii: RIFFWEBPVP8 0L*^>QJ#8z#mJ~\|ajox/v[{KD!SCp%s?7?/"?o_K;UO\|4?/[^r=gn^N\9k/g
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: f8 de 4b 1b d6 d3 cc 83 4a 5b 47 6d ef f1 8e f5 07 69 d8 91 22 29 cb c4 07 c5 36 df 9c 93 a1 68 c8 f8 e3 e8 9a d9 e5 52 1c 5e 13 fd a0 f9 a3 16 b2 2a 08 57 72 b2 e4 b8 9b c0 1f 9b f3 ef 48 09 6a d5 ac 37 fc a2 d0 16 c0 b1 83 ad 04 98 98 06 8e b4 05 ef 4e 19 db 78 ea d7 86 ad 4f f2 f6 62 5a 86 d7 e2 db f7 39 f6 59 ca ce 1b d4 3d f6 bb 82 49 67 63 76 f5 17 0c 71 68 75 79 30 06 ee a7 90 a9 f1 9f ff 0c 72 28 a1 4e 54 4e bc 89 96 fd dd 87 8c 09 e0 5c 5f 50 7e e7 4d ba 8d 7f c0 77 1e 0d dd ec f2 ef e4 8e 57 06 ad f7 0d fd 28 f1 fb 32 e2 0d ac 1b 7b 89 3f b5 05 f0 c2 28 f1 f6 6e cc a2 e3 17 69 bf 22 62 df 44 db 3d 8a b7 9c a9 fd 3b 6d da 2b 31 1c 08 4d 43 3d 86 2b 45 c6 c7 d2 2e 92 0d c8 ba 5e b0 90 b0 02 0a 41 83 03 52 6b 65 0c fb 65 91 8a 41 66 4f ec f6 a2 3c Data Ascii: KJ[Gmi")6hR^*WrHj7NxObZ9Y=Igcvqhuy0r(NTN\_P~MwW(2{?(ni"bD=;m+1MC=+E.^ARkeeAfO<
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: b4 db aa e4 cc 4f ea 65 88 84 b7 a6 3f 21 af cd 71 78 c8 37 11 18 5f 7b 04 b7 87 f8 3e c6 c8 f5 61 92 21 2e 31 3e 76 53 0a 96 fb c7 e7 b7 cf 90 d9 d8 4e 6c 54 72 58 97 e1 cb 3d 9d 92 4d 6c f5 f0 2a a1 8d 56 b6 a1 5f 7a 2e bf 09 a6 0b 80 84 a0 90 1b 07 d9 fe 7f 3e d8 1f 8a 9b 88 b6 52 6d 8d f4 30 ab 89 5b 60 82 b2 2b e5 5e 0f f8 6c 1a 81 fd 43 29 e8 ae d7 93 87 fd 0a eb 29 b3 d5 1a 37 3b f7 7a 91 c5 6e e1 dc cb ef bf 0d ef b6 93 b6 9d b1 d8 56 41 c9 a4 25 fb e2 2a b1 80 87 91 5a eb be fc 65 73 73 1f 0f e8 8b 0b ac a4 52 50 9c 43 db b2 99 dc b1 ce d5 56 4e 7b a9 bd 12 4f de 45 df 13 4d 07 dc 22 79 8c df 83 33 16 4e 7e bd bd cd 78 4a 8e 8e 89 2a 1f de 2d 35 ae f9 4b 59 12 8f f3 b7 22 a1 90 0e 28 9e de b6 ed 09 9c df 62 90 d2 48 93 35 37 ba 42 5d 15 5e de ac Data Ascii: Oe?!qx7_{>a!.1>vSNlTrX=MlV_z.>Rm0[`+^lC))7;znVA%ZessRPCVN{OEM"y3N~xJ*-5KY"(bH57B]^
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 0d 54 64 b5 37 80 3f 7c ca 64 33 b3 92 ea bd 16 f0 c1 f2 06 aa e3 ff a8 bc e4 73 d0 18 96 3f 94 76 23 3f f5 87 74 3c 97 a9 17 4a 57 96 17 f0 87 a2 e5 3b d7 3b 8f 00 49 8c 1f bd 32 7f f3 70 f6 d3 c6 96 54 5f 61 ce 89 70 89 e9 89 ee 48 9a e0 ec 42 45 a3 d4 44 e9 dd 7e dc 7e ea 6e 88 f1 c1 68 b1 dc 25 63 86 74 3b b2 bf ec 92 5e 36 48 41 76 18 ca 70 54 54 12 57 02 b4 05 8b ff 5d de 5c c3 fd 61 0c 48 9a 83 f2 44 98 37 eb 00 85 48 ac dc 89 fd 91 1f 2f 5a 8a ab b0 f4 ff d3 9c ff 14 be 24 f5 a9 8d fe 3a 8b 0f 57 59 b6 cc 70 45 67 23 3a c0 72 ce 6a 97 81 29 60 f6 2d e2 c0 ea 03 a1 20 65 7a 98 a5 da a3 91 47 1b 0a 58 ce e7 8f c1 66 43 73 ae 32 06 86 53 a4 3d 06 c5 02 4c 89 88 a5 c1 62 04 e4 9b 68 cd 7f 40 3f 58 f1 5d 7e 9b 16 48 0d c9 b8 72 52 23 6a 31 89 f5 32 1a Data Ascii: Td7?\|d3s?v#?t<JW;;I2pT_apHBED~~nh%ct;^6HAvpTTW]\aHD7H/Z$:WYpEg#:rj)`- ezGXfCs2S=Lbh@?X]~HrR#j12
2024-07-02 22:25:18 UTC	930	IN	Data Raw: bb 02 e9 25 43 b7 d9 95 f1 ea 45 d7 e3 fa 5b 32 9d 84 c6 dd 15 a5 39 e1 30 e4 65 33 f0 b1 0b 73 59 d5 11 c4 57 8c 94 0c df 20 49 fd 14 bf 7e 5b 0f cc 8d d0 56 28 19 08 02 7c 17 ab 1b 8d 2c 92 f6 75 4a ba d4 09 27 45 01 ec 95 bc 51 da 6a 78 bb 12 57 d5 f6 de 40 1a a8 ed 35 40 0e 88 02 0f 42 4c e0 d1 19 31 4d 63 ca fa 99 69 b2 0a 4a 65 a0 02 0c 6c df 05 93 1d 30 9e 1c 95 b2 c7 28 fd ee f8 27 a6 ec 71 c4 2b 39 95 ec ab ca 4d db d3 81 a8 b7 ae 49 0f d5 64 75 54 cc d5 3b 62 d7 a7 8f c7 d1 fb 86 73 00 f5 d7 15 12 c7 d7 b0 cf e0 be ac c3 1c e9 6f b0 4b ac cc e9 06 0b 5e f7 db d2 75 f6 e8 b6 bc 2b 65 a3 41 5c 59 15 7e 7f 11 39 5c 84 58 f9 a6 e8 fe 6b 32 cf 3a 28 6d d3 73 76 e0 c0 56 dc 38 e0 40 cd 79 18 45 ed 11 df 97 09 7d 15 ec d7 0d 63 75 61 7f 90 c8 ac c7 d8 Data Ascii: %CE[290e3sYW I~[V(\|,uJ'EQjxW@5@BL1MciJel0('q+9MIduT;bsoK^u+eA\Y~9\Xk2:(msvV8@yE}cua

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.5	49861	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:18 UTC	547	OUT	GET /vi/izGwDsrQ1eQ/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLAPEMSx8W9_-QGlw_ZFUf3cYVKl6w HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:18 UTC	654	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3666 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:25:15 GMT Expires: Wed, 03 Jul 2024 00:25:15 GMT Cache-Control: public, max-age=7200 ETag: "1637153557" Content-Type: image/webp Vary: Origin Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:18 UTC	736	IN	Data Raw: 52 49 46 46 4a 0e 00 00 57 45 42 50 56 50 38 20 3e 0e 00 00 50 39 00 9d 01 2a a8 00 5e 00 3e 51 10 94 4a 23 91 d1 cb e0 38 05 04 b2 80 69 8e 47 88 ba 53 fc cf 3c e9 c5 df c7 d3 1f f8 7d e0 fc ee 9e 8e 7f c9 7a 60 75 4e ef 48 60 31 76 4f fd ab ea 57 d5 9f 2b 3f 27 cd e7 27 fd 80 6a 3b da 3f ec bf 2f ff 2d fe 70 ff 81 e2 bf c3 dd 45 3f 22 fe 9b fe b3 f2 5b f2 f3 94 6a d5 7a 07 7b 55 f6 5f f8 1f 98 1e 84 3a be e4 05 fc db f6 e3 d6 ff f8 de 26 7f 80 ff 8d fe d3 dc 03 f9 f7 f5 bf f8 df 72 bf 25 bf f0 ff a5 f3 f5 fa 1f f9 9f fb ff e6 be 02 7f 96 7f 57 ff 6f f9 bb fe 57 ff ff d6 47 b3 bf dc 2f 65 8f d7 46 4c 54 c8 86 f3 68 df 76 d1 e0 b1 40 06 fc 3a 2a 7d 70 dc a2 85 75 5c 14 3b 63 50 c8 e3 4f cf 0a 7d 69 15 8d ef e7 e6 82 bc 5b 4a e3 1b a7 89 ad 88 bf 4f c3 d3 Data Ascii: RIFFJWEBPVP8 >P9^>QJ#8iGS<}z`uNH`1vOW+?''j;?/-pE?"[jz{U_:&r%WoWG/eFLThv@:}pu\;cPO}i[JO
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 06 98 8a 6e fa 23 27 1f b4 82 98 7d 6c 5b ad e7 1d 5c f7 e6 3a 7d 71 0c 1c 88 2e e6 ab d8 34 b4 61 3b 31 93 5f 8c a1 2d 57 96 db 1f ad 1a 9a b4 3c 5d 77 f5 77 9d a3 58 e8 56 5f 88 10 1c ea a0 9a b6 6a 2a 48 7d cd da 85 be 5f f6 ba c1 ce d7 0a 08 05 c8 bb 49 56 ae ab b5 a8 22 e5 fa 19 1a 8e 53 02 52 64 f2 c7 e4 cf 68 48 29 05 d7 e2 d1 c9 df e6 b9 05 1c bd d6 e9 ff d3 a2 14 45 8c ee c4 34 89 78 25 1b 6f 97 47 19 52 6c bc 39 63 e0 ad 1e 13 e0 05 cc 33 b1 a5 f2 3a 9f 12 07 b8 a2 ab 68 f1 41 11 02 57 fe 77 c0 bf 90 0d f3 f5 21 a9 65 cf c1 07 b0 01 03 1f fd 1c f4 45 43 1a ee 33 50 2d fd e3 4b 3f b0 6b db 65 b9 b5 3b 3c 94 a2 06 5a a7 7c d5 e7 f9 96 86 d3 fc b5 28 b6 16 bf bd a6 48 d8 84 23 69 25 63 90 33 f3 ca ec 54 77 b6 19 2f 3c d7 73 7e 48 1a ec ad 57 d9 a8 Data Ascii: n#'}l[\:}q.4a;1_-W<]wwXV_j*H}_IV"SRdhH)E4x%oGRl9c3:hAWw!eEC3P-K?ke;<Z\|(H#i%c3Tw/<s~HW
2024-07-02 22:25:18 UTC	1390	IN	Data Raw: 2b 06 71 98 0a 9a 4c 2c cd 87 db 09 67 98 cd f2 a0 5e 97 80 2b 16 41 98 55 1e 43 89 a1 56 3e a8 2d d3 2f af ad 12 9d dc 2a 72 53 8b 33 31 f8 4c d7 21 4f 2f 18 d5 7b 41 31 c0 a0 cc 08 52 0d 9c 8a cc 11 cd ac 28 5c 51 cc c8 35 fe 26 5d f4 fc 54 2e ae 4d af f8 16 76 68 ba 61 f6 8f da e0 c6 4d 42 8e fd b2 8a 82 ba 6f 3d da f9 ce a8 fe f0 bc e8 1c 9a e1 a4 78 10 5a 1a 4e 23 40 1c 84 c6 33 ae 9b 7f d6 b2 58 50 d2 0f 26 47 ed 08 bf 2e 81 8d 30 7b 5c 21 34 e4 fe 21 25 c8 b7 1f 55 68 ef fb 88 3a 8e 6d bf cd 4c 46 7a 4e ef f2 0d 93 24 fb f7 fe 65 df 36 d0 df 27 70 36 8c dc a8 c6 45 5c a3 69 a2 ce bd d8 7c dc bf d3 89 6a ef fd d1 bf 84 ff e2 66 e6 20 50 7e 57 85 a0 9e 07 70 8f fa 1c 78 5b 5f a1 bf 58 1d 22 31 8c 1d 6a ea 04 c4 c3 48 19 d7 c2 bd 1f 35 06 89 4a ff 91 Data Ascii: +qL,g^+AUCV>-/*rS31L!O/{A1R(\Q5&]T.MvhaMBo=xZN#@3XP&G.0{\!4!%Uh:mLFzN$e6'p6E\i\|jf P~Wpx[_X"1jH5J
2024-07-02 22:25:18 UTC	150	IN	Data Raw: 26 37 0e 39 d3 5f ef 1b af e9 ad db 5a ac e9 42 19 3b a8 f1 2f 07 bb d4 59 83 89 cd 0a 84 08 58 35 ef f3 30 6a ff d5 d9 69 45 db aa 0b ad af 3f c4 13 46 5b d4 62 f6 0a 41 6f 01 30 ae 6f ed 0e b1 95 c1 a0 35 2e b9 98 42 a6 b1 4f f2 73 a2 a1 bb 8c 60 8a cd ee 1e 6b c0 20 84 0f 9d 0f bc ff 62 be e1 22 81 3e 12 e1 4c e6 e2 08 79 13 08 c6 e0 79 5e 3a b4 58 53 ae 59 03 76 c8 1a 72 1c e8 54 3a 83 1c 99 a5 6b 0a 96 96 c1 5b 39 83 1c 67 fb 55 ad 2c 00 00 Data Ascii: &79_ZB;/YX50jiE?F[bAo0o5.BOs`k b">Lyy^:XSYvrT:k[9gU,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.5	49862	216.58.212.130	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:18 UTC	1089	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
2024-07-02 22:25:18 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:18 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 72 6b 71 4a 78 34 38 63 6f 51 46 7a 42 55 49 43 38 78 44 7a 4c 6f 42 59 67 6d 38 32 65 77 4f 2d 7a 51 33 59 44 4b 67 59 6b 77 63 7a 44 45 4d 4e 33 37 4d 46 63 41 42 66 7a 36 72 64 73 36 51 62 32 43 71 77 43 4f 7a 69 56 5a 6a 51 57 6c 77 69 59 38 66 42 46 39 49 64 70 4f 4c 51 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKrkqJx48coQFzBUIC8xDzLoBYgm82ewO-zQ3YDKgYkwczDEMN37MFcABfz6rds6Qb2CqwCOziVZjQWlwiY8fBF9IdpOLQ"}
2024-07-02 22:25:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.5	49864	142.250.184.238	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:18 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
2024-07-02 22:25:18 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 02 Jul 2024 22:25:18 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:18 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-02 22:25:18 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.5	49866	173.194.140.232	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:18 UTC	1918	OUT	GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1 Host: rr3---sn-q4fl6nde.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:18 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:18 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.5	49867	173.194.140.232	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:18 UTC	1926	OUT	GET /videoplayback?expire=2334574911&ei=rjA9OOmb4ms5yJBj2n0CkBT&ip=41.79.6.76&id=o-AFAfsLRZRP9GYfW7Qq616Etzax54HAjig0BWZZ5SBs7as&itag=18&source=youtube&requiressl=yes&mh=X6&mm=378%2C32899%2C92775&mn=IMeoD%2C1b0Kb%2C6cn2z&ms=IMeoD%2C1b0Kb%2C6cn2z&mv=H&mvi=4&pl=69&ctier=L&initcwndbps=5321857&siu=4&spc=JVtzVJHFc1yi6HVccTJ0o5metBx5udEu_-pOVKiVnyfu&vprv=4&svpuc=4&mime=video%2Fmp4&ns=PINO5OLHPVcTThAldxjeQuFs&cnr=69&ratebypass=yes&dur=56803570&lmt=1186098408230534&mt=2334574911&fvip=3&c=WEB&txp=5321857&n=i598EiIhq88r9iDL&sparams=expire%2Cei%2Cip%2Cid%2Citag%2Csource%2Crequiressl%2Csiu%2Cspc%2Cvprv%2Csvpuc%2Cmime%2Cns%2Ccnr%2Cratebypass%2Cdur%2Clmt&sig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=GF6l2uKgGikyd_EpJlbE-uieQTeiEZ8-sSGEAsE2IOlSGRw-Qe0k_fL3of89fUgOcXat05dV9WsIS73UexvPS0Cztgeb7zopiT8VNlP-IY8e HTTP/1.1 Host: rr3---sn-q4fl6nde.googlevideo.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:18 UTC	785	IN	HTTP/1.1 403 Forbidden Last-Modified: Wed, 02 May 2007 10:26:10 GMT Content-Type: text/plain Content-Length: 0 Connection: close Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true Timing-Allow-Origin: https://www.youtube.com Access-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-Ms Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Date: Tue, 02 Jul 2024 22:25:18 GMT Server: gvs 1.0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.5	49865	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:18 UTC	2505	OUT	GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=4.834&fmt=397&fs=0&rt=7.01&euri&lact=4861&cl=648221806&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=17&feature=youtu.be&afmt=251&idpj=-6&ldpj=-8&rti=7&st=0&et=4.834&muted=0&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00 sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1719959116663 X-YouTube-Page-CL: 648613515 X-Goog-Event-Time: 1719959116631 X-YouTube-Utc-Offset: -240 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D X-YouTube-Ad-Signals: dt=1719959110085&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:18 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:18 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.5	49868	142.250.184.238	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
2024-07-02 22:25:19 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 02 Jul 2024 22:25:19 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-02 22:25:19 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.5	49870	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	547	OUT	GET /vi/Bx51eegLTY8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLDnxVk8Ys7btiIk02iFYM_HN4SLSA HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:19 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 2542 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:43:14 GMT Expires: Tue, 02 Jul 2024 23:43:14 GMT Cache-Control: public, max-age=7200 Age: 2525 ETag: "1551733257" Content-Type: image/webp Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	733	IN	Data Raw: 52 49 46 46 e6 09 00 00 57 45 42 50 56 50 38 20 da 09 00 00 70 30 00 9d 01 2a a8 00 5e 00 3e 51 1a 94 4a 23 a1 23 a3 90 80 70 0a 09 65 6c 8a 54 e4 36 cc 72 5b 77 be f2 82 21 f8 4d 9b 79 a6 3e 22 f9 98 f8 f4 c7 2e 37 f9 6f e6 19 05 21 66 ed 7f 5e bf 33 94 11 fa 33 d5 7b fc ef fa 7e 80 7e b9 f6 0b fd 55 ff 77 c0 2d fa 8c 79 b3 ee 3e 1a 22 83 64 83 d2 90 36 c8 aa 62 6f 2d 8e 95 d2 f7 dc 13 dc c4 0e bc 7f 30 cc 6c 36 bd b2 51 a3 91 7c ad d2 c2 2f 3f 7a 94 f0 b3 51 cd 75 3b 55 79 41 e8 1d f2 2b 5f da f5 56 21 fc de 7b 4b a2 ed 91 da 45 86 7c 20 91 9c 78 66 2a 83 6e e6 ef 2e 94 25 9d 69 ca 57 34 84 18 27 8d 07 e0 c6 36 52 a3 08 7a 3e a7 c9 08 24 8f 32 e6 27 0c b0 20 51 eb dd ac 55 b3 2e 70 f9 be a2 96 f5 09 b2 54 94 24 57 cb 61 a1 51 94 99 28 70 e1 85 fb 02 c6 Data Ascii: RIFFWEBPVP8 p0^>QJ##pelT6r[w!My>".7o!f^33{~~Uw-y>"d6bo-0l6Q\|/?zQu;UyA+_V!{KE\| xfn.%iW4'6Rz>$2' QU.pT$WaQ(p
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: da 1e fe 39 26 72 dd b1 68 0c 00 3a 8d 4d d7 52 0c e0 ea ee 0b 03 d0 fd eb bb bf ec 2e 2b 73 9d f4 f1 f4 35 5b 3e 15 ed 41 e7 12 24 1d 05 13 fc c6 f9 08 a6 06 62 bf da 54 f1 fd 7d 61 01 45 46 94 59 19 83 db d0 5a d9 71 6e 65 02 db 1b e4 0e b7 11 00 9e c2 79 4a 84 94 11 2c 7a 52 08 3a 7c 6d 6b 06 29 a0 15 ca fd 84 da 48 bf 26 20 a8 16 ff 20 32 8a 8a 76 b4 f4 49 18 f7 cc a8 6b 77 1d 67 c4 bf 9e ec 05 66 f8 e4 4c cd 55 74 a3 c9 20 7a ce 91 53 25 b4 7a 74 b0 ef e4 ae 10 07 36 78 16 93 93 c9 ae 97 c3 84 0c 34 e0 e2 59 48 4f 92 d5 87 89 1e a3 1c 3c b8 54 14 1a 39 47 0a e4 01 6f 58 bb 18 11 81 58 9e 12 5b 08 38 a9 c5 41 26 ad e0 94 b1 67 6e 96 b8 66 0e f3 1e b6 ac 0b 74 85 23 92 26 e5 96 cf bb cf 51 29 85 b2 56 23 a3 75 b1 ed 9e 9e f3 d7 f6 a4 9a ce ac ad e2 16 Data Ascii: 9&rh:MR.+s5[>A$bT}aEFYZqneyJ,zR:\|mk)H& 2vIkwgfLUt zS%zt6x4YHO<T9GoXX[8A&gnft#&Q)V#u
2024-07-02 22:25:19 UTC	419	IN	Data Raw: cf dc 36 7e 1a 1e 67 6c 05 6a 8e 20 ff 9a df c7 74 65 ac f3 1b d1 7f ef fa e3 ef 4f c1 9d 98 7b 62 7c f3 e4 91 3f fd 5f fd 16 4a 3a 9c b6 84 82 b6 4e 6d 11 ff cc 49 a4 9c 00 fe 50 5e f5 5b 94 db 19 1e 7b ff f4 c8 75 cf fb 0a 57 f9 5f f2 8a 3a bf 55 fe 7e 1f ff d6 d1 5f 20 fe fd b7 21 6f 88 f4 9c 73 9f c1 cd 07 1b bc 03 1f fa 54 28 5a 14 82 1c cf 12 56 44 64 80 89 14 29 b6 07 f4 89 af 00 e3 c2 0a 71 bd 8e 31 91 0a f8 b8 c4 c8 0b 07 55 d0 c8 d6 bf d4 dc eb 55 d4 0e 21 90 b9 74 53 2d cd e7 a7 b5 af f6 9f 7f c7 8f ef 33 c9 44 2a ac f9 aa 01 dc 2d 50 00 de 96 57 25 7f a4 a7 d3 3f 57 46 50 f2 17 f3 4c f4 92 9e 7d 1e e4 f5 28 0e b7 18 a6 59 06 af 90 ed 4b f5 58 39 8a 23 81 d1 b9 77 14 ba a3 f3 c6 bb 78 0f 70 7b ba 1f de fd d0 27 a7 36 02 d9 31 4d 88 59 3a 53 e0 Data Ascii: 6~glj teO{b\|?_J:NmIP^[{uW_:U~_ !osT(ZVDd)q1UU!tS-3D*-PW%?WFPL}(YKX9#wxp{'61MY:S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.5	49871	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	547	OUT	GET /vi/fNFzfwLM72c/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLD3tub5tA7yLzokq5mj66fzUS1czg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:19 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3234 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:15:43 GMT Expires: Wed, 03 Jul 2024 00:15:43 GMT Cache-Control: public, max-age=7200 ETag: "1548202698" Content-Type: image/webp Vary: Origin Age: 576 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	734	IN	Data Raw: 52 49 46 46 9a 0c 00 00 57 45 42 50 56 50 38 20 8e 0c 00 00 30 38 00 9d 01 2a a8 00 5e 00 3e 51 10 94 4a 23 a2 23 a3 97 40 70 0a 09 63 00 bf 6b cc 6d 3f 81 fe f3 ce 57 99 fc 93 f2 77 01 be 9f a6 5d c3 9c ed bd 10 1b e4 bd 32 96 98 da 35 f8 e3 e7 6f e3 9f 52 fe bf 6c 1b 51 ae e3 ff 6d f9 87 ed 1f 83 b3 47 c0 37 57 be b4 9e 1f d8 52 a0 4f 92 ff fa be 5e fe b7 f6 11 fd 73 ff 9d bc cc b0 3e 9c 69 f0 9a 90 8c 3c 79 1d e2 6f 9f 7f ed b9 be 80 7e 3b 8a 29 1f c4 bc c8 95 03 99 ae 59 6e ac ab 1f 21 40 f3 76 13 42 0d 0a 65 d2 bf 79 0c 59 2c 55 22 7f 5f 32 f9 95 d5 08 8d 64 7e 97 01 e6 33 dd e8 0f 98 8f 4c b7 63 27 81 1f cc 2b 7e 4d a1 5f 81 2f 10 14 b5 ee a5 2d 07 e2 fa d8 78 bb d8 6f 41 9e 4f c7 35 f2 7c 28 8a a0 e7 c8 26 59 6e b1 41 75 90 1a 2f b3 6f 6e 8d b4 e2 Data Ascii: RIFFWEBPVP8 08*^>QJ##@pckm?Ww]25oRlQmG7WRO^s>i<yo~;)Yn!@vBeyY,U"_2d~3Lc'+~M_/-xoAO5\|(&YnAu/on
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: da 4d 1a b6 49 6b e5 ce 40 d8 3c 5e 8a d4 7f b4 ca 58 c5 a5 3a f7 99 46 89 6e cd 5a 58 62 17 8c bb a2 b5 d0 4e 1a 6d ee 1d 72 32 0c 2f e4 b1 51 23 2f fb ed 7b a0 9c e5 e2 f2 08 ae 60 45 2e 57 bb d8 dc 4c bf 0a 6b 53 f7 06 dc 76 bd ce f4 44 17 04 fa ba 8e 60 ba 01 17 65 25 6d b6 85 ce ac 49 58 5d d8 02 21 bc fc 0e 1c 21 98 be 68 c5 ea 59 e2 90 ec ae 4f ac 12 4a b0 4c b0 b7 7e 24 d6 83 a5 2b 15 95 77 14 ac 39 70 02 f3 73 3e d3 d5 c8 d3 93 e0 9d 55 99 63 1e f7 b5 36 27 0a 9a 7d 95 7e 92 6d 3a cd be 60 2e 63 cd 12 68 0f d3 1a b3 a8 be 86 49 5c 2a d2 c6 65 2e 16 2d ff ed 04 3b 1d 31 cc 83 73 37 26 17 c3 89 52 19 57 08 b1 b8 51 5f 81 3e 03 1e 0a 17 00 97 13 46 42 10 59 31 74 54 93 60 a8 4f 18 41 43 ba 3a c7 2d f7 f8 60 fc 6c 05 56 79 4f c4 34 03 95 6d c0 17 d0 Data Ascii: MIk@<^X:FnZXbNmr2/Q#/{`E.WLkSvD`e%mIX]!!hYOJL~$+w9ps>Uc6'}~m:`.chI\*e.-;1s7&RWQ_>FBY1tT`OAC:-`lVyO4m
2024-07-02 22:25:19 UTC	1110	IN	Data Raw: 3a 4d da 83 be e8 cf 43 51 e3 4b dc ed fa d2 9f cc c8 a8 ce 19 2d e8 df aa a3 e0 02 56 fa 20 3b 46 15 41 05 3a 86 5f 67 b4 f2 af 77 be 5e 61 4a a8 e6 c5 a0 fb 0b 5b 78 13 ce cc 42 ea e4 21 d3 f6 82 b5 49 14 26 b2 ea 93 92 91 be ec d4 8b 65 5b ba 40 41 90 28 7a 53 02 81 91 11 64 ce 64 6f d9 5c a1 31 4a 69 33 db c6 6c 28 4c 97 ac b7 15 69 30 2f 2a ab 51 64 d6 ec 42 58 84 ad e8 12 6c 59 b4 3c b3 42 8c 78 58 e3 55 5f bc 9c 37 23 c2 bd 6b f1 7e e9 1b c0 d3 a1 8f 77 c0 e9 2d 0d ca 7a 72 78 0a 5d 0f 55 8b e1 af e2 7f 53 e1 e2 b9 4f 23 1f cb 46 c5 dd 1b bd 00 3e f6 1c 5c 16 3d 2e dc 9a af 25 ec 13 30 f2 ac 5f 76 6c 1b 54 be 47 21 a9 1d a4 72 df ef fe 7a 11 e8 4d 02 b2 55 c4 d3 01 7d d8 9e 96 c6 1b 81 e6 58 e0 d1 8e ff a0 02 32 13 17 86 94 83 8d 2a 30 01 c9 4b 40 Data Ascii: :MCQK-V ;FA:_gw^aJ[xB!I&e[@A(zSddo\1Ji3l(Li0/QdBXlY<BxXU_7#k~w-zrx]USO#F>\=.%0_vlTG!rzMU}X20K@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.5	49869	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	547	OUT	GET /vi/JmcA9LIIXWw/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLA-sVJGX5CmBao1iTU9Bd3X9Ud5Xg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:19 UTC	656	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 3752 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:15:59 GMT Expires: Wed, 03 Jul 2024 00:15:59 GMT Cache-Control: public, max-age=7200 ETag: "1469053510" Content-Type: image/webp Vary: Origin Age: 560 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	734	IN	Data Raw: 52 49 46 46 a0 0e 00 00 57 45 42 50 56 50 38 20 94 0e 00 00 f0 3d 00 9d 01 2a a8 00 5e 00 3e 51 14 94 4a 23 91 d1 ca a8 38 05 04 b1 00 60 2d e8 87 f6 4b 3c 9b d9 ef b5 b2 4f d9 5f 59 f9 57 74 07 cc cf cd 7f 4a 3e 60 7c f5 3c c7 f9 b4 fa 2e f4 0b fe c9 fe 93 ad 73 d0 63 cb bb d9 b3 f7 8e d9 27 8f 98 be e8 cc 44 2e 43 ed ac 85 6a a7 e4 5f 40 15 d9 8d 57 ff 4f a0 4f af 3f f1 7b 85 7e ae ff bd e0 1e fd 33 50 2b 84 e5 57 78 e7 e8 51 e6 35 08 4e 1b 5b 0e 7f c0 06 48 cf 33 97 bb d0 5b a6 d6 e3 1f 76 47 94 b3 51 30 35 53 88 b6 5e 9b 7e d5 8d 53 19 ea eb ab c7 88 ad 24 1d 14 a2 d4 40 64 a3 5c 9b 31 9d 6b d9 42 58 96 bf d1 d2 80 82 d8 f7 6d cf eb 5f ff e9 a9 0d 0a fb 16 f0 ca 48 cb 9d 25 02 b3 19 36 e9 50 00 05 58 34 7d 0b 14 97 94 7a c5 47 6a 97 39 dd 59 7d 91 b7 Data Ascii: RIFFWEBPVP8 =*^>QJ#8`-K<O_YWtJ>`\|<.sc'D.Cj_@WOO?{~3P+WxQ5N[H3[vGQ05S^~S$@d\1kBXm_H%6PX4}zGj9Y}
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: b6 08 7d 47 ae e4 06 12 5c db 31 91 c6 57 63 40 15 83 c2 15 26 70 e6 ef 37 b7 57 8b 62 8a a6 15 43 35 9c 8c c9 35 c6 55 ff a6 4e 2f f1 58 26 87 a4 be 85 ee b8 96 ca f0 4e e7 e7 d7 c9 de 81 63 93 b0 38 39 0f 30 be cb 1d 38 2c 44 b1 29 87 5e 47 13 2d 50 0f a4 74 a1 f2 64 85 6d cc f7 22 90 3e 67 be c5 9e 7b 56 8c 79 9a 55 d7 51 5d 48 0d 12 d1 5e d7 6b 3a 50 89 43 b6 8f e9 d3 6c 92 9b 3b 12 f9 c7 6f 6c ba 7a 17 e2 62 e0 62 57 6b 1a df 62 50 01 d5 89 88 87 8a 26 4e 64 b2 78 9e d9 aa fc 6b 8f db 4c 45 70 f2 1f c7 4c 93 f6 18 2d d2 8c c0 b7 c7 02 c5 fe 94 0b 92 e7 a3 5c 74 c0 0b ac 9d 44 e3 8e 6e 89 0c 9f ee ad 7b 71 6c 03 60 9d 7f 14 07 69 57 c5 1d d9 4d ca 66 54 2c cf 4d a3 28 39 f9 25 ce 5a 18 63 dd 81 d8 2f be 4b 10 56 e1 e2 ea 4f 72 ab 85 0f 4f dc 32 47 01 Data Ascii: }G\1Wc@&p7WbC55UN/X&Nc8908,D)^G-Ptdm">g{VyUQ]H^k:PCl;olzbbWkbP&NdxkLEpL-\tDn{ql`iWMfT,M(9%Zc/KVOrO2G
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: cf 20 4a d1 e8 29 2b 7f 2f 48 03 b0 73 cd 84 07 cc 68 9f 81 49 2c fc 4d 05 39 68 67 c6 e1 b9 4f b0 32 ec 17 b9 87 30 78 6d bc 8f af 8e 99 ca e7 30 18 21 36 b6 fc 6b 67 5d 3e 28 f1 63 56 3e 9f 00 78 09 9c 2a 77 4f c2 d8 fd 12 9b 01 26 f1 ca aa 3d 59 57 7e 2a 16 33 84 d9 af 07 e5 79 c8 43 1d 28 c3 ac ba b4 04 13 0f df 58 a7 83 cd c5 2d b1 9e 58 78 e9 0f a4 84 47 c5 80 ad 4d b1 b1 a1 54 31 12 f4 45 57 5c 03 65 81 71 af ff f3 bc db 29 0d 09 b3 ac bb 4a 1c 96 41 7b 83 d9 cd 73 29 82 de 07 a4 d6 f4 74 20 48 c8 37 79 38 34 e0 30 57 4a 78 e6 97 5b 27 1a 4a 6f d3 1f 5b 41 fc ba ac 47 cf f2 a4 ef 20 42 09 e8 48 6b 14 48 f4 5c 33 be f4 76 89 f6 05 ab ab ec dd fb 17 bb 33 be fd 1d ad 66 de b7 79 05 02 26 1a 4b 9c 3d 83 da 2e 38 cf 34 b7 12 81 88 a3 b2 a5 a9 44 b6 c1 Data Ascii: J)+/HshI,M9hgO20xm0!6kg]>(cV>xwO&=YW~3yC(X-XxGMT1EW\eq)JA{s)t H7y840WJx['Jo[AG BHkH\3v3fy&K=.84D
2024-07-02 22:25:19 UTC	238	IN	Data Raw: a9 b7 e0 37 72 22 f9 6c 29 14 79 63 63 2f 57 f2 5e 0d da 06 81 b7 70 ee 43 02 f8 63 25 02 98 f6 07 fd 2e 6d c1 50 10 64 e0 32 d1 43 ac 92 54 97 e6 6b fe d4 1b 02 41 f0 93 2b 59 34 87 cf f7 82 21 a0 33 1f dd 30 a9 78 94 2d dc 0f f8 b8 47 32 08 5a e3 ab ab d1 88 4c 4d a2 4a 67 95 9c 37 46 2c 2e e2 34 71 09 83 d4 c4 6d a7 32 76 6c d9 ca a3 91 a2 5a eb 6f 77 e9 09 8a c8 44 bf 32 af 3a ae de 89 99 31 b9 6b af e3 4a 7d 8a d6 c2 a8 2a 98 c5 1a df da 45 cc b0 28 0a cd eb 8b 37 2f f4 36 b5 3c ff fe 15 16 97 c8 e7 4f be f2 e9 40 7f b5 19 63 98 ce d7 88 a4 e5 26 84 ff 98 8e cd ba 07 97 19 09 35 3a 26 64 eb e4 95 85 4d 6d 2c 43 0e d8 7f c0 ec 17 bd 1f dc 84 8d a4 12 33 2b 06 aa 92 65 ca 73 94 69 b2 82 61 48 a0 00 00 Data Ascii: 7r"l)ycc/W^pCc%.mPd2CTkA+Y4!30x-G2ZLMJg7F,.4qm2vlZowD2:1kJ}*E(7/6<O@c&5:&dMm,C3+esiaH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.5	49873	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	682	OUT	GET /s/desktop/a7b1ec23/jsbin/www-tampering.vflset/www-tampering.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:19 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 11022 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 14:10:53 GMT Expires: Wed, 02 Jul 2025 14:10:53 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 29666 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 70 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 Data Ascii: (function(){'use strict';function n(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var p=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 62 21 3d 65 26 26 62 21 3d 6e 75 6c 6c 26 26 70 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 74 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 6c 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 65 2b 28 6c 7c 7c 22 22 29 2b 22 5f 22 2b 68 2b 2b 2c 6c 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 6c 2c 6d 29 7b 74 68 69 73 2e 67 3d 6c 3b 70 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f Data Ascii: b!=e&&b!=null&&p(c,a,{configurable:!0,writable:!0,value:b})}}t("Symbol",function(a){function b(l){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(e+(l\|\|"")+"_"+h++,l)}function c(l,m){this.g=l;p(this,"description",{co
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 67 3b 21 28 67 3d 64 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 67 3d 67 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 67 5b 30 5d 2c 67 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 64 29 7b 76 61 72 20 67 3d 74 79 70 65 6f 66 20 64 3b 72 65 74 75 72 6e 20 67 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 64 21 3d 3d 6e 75 6c 6c 7c 7c 67 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 28 64 29 7b 69 66 28 21 79 28 64 2c 6d 29 29 7b 76 61 72 20 67 3d 6e 65 77 20 63 3b 70 28 64 2c 6d 2c 7b 76 61 6c 75 65 3a 67 7d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 6c 28 64 29 7b 76 61 72 20 67 3d 4f 62 6a 65 63 74 5b 64 5d 3b 67 26 26 28 4f 62 6a 65 63 74 5b 64 5d 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: g;!(g=d.next()).done;)g=g.value,this.set(g[0],g[1])}}function c(){}function e(d){var g=typeof d;return g==="object"&&d!==null\|\|g==="function"}function h(d){if(!y(d,m)){var g=new c;p(d,m,{value:g})}}function l(d){var g=Object[d];g&&(Object[d]=function(
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 22 2b 20 2b 2b 6d 2c 6c 2e 73 65 74 28 64 2c 67 29 29 3a 67 3d 22 70 5f 22 2b 64 3b 76 61 72 20 6b 3d 66 5b 30 5d 5b 67 5d 3b 69 66 28 6b 26 26 79 28 66 5b 30 5d 2c 67 29 29 66 6f 72 28 66 3d 30 3b 66 3c 6b 2e 6c 65 6e 67 74 68 3b 66 2b 2b 29 7b 76 61 72 20 76 3d 6b 5b 66 5d 3b 69 66 28 64 21 3d 3d 64 26 26 76 2e 6b 65 79 21 3d 3d 76 2e 6b 65 79 7c 7c 64 3d 3d 3d 76 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 67 2c 6c 69 73 74 3a 6b 2c 69 6e 64 65 78 3a 66 2c 68 3a 76 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 67 2c 6c 69 73 74 3a 6b 2c 69 6e 64 65 78 3a 2d 31 2c 68 3a 76 6f 69 64 20 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 68 28 66 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 66 29 7b 66 Data Ascii: "+ ++m,l.set(d,g)):g="p_"+d;var k=f[0][g];if(k&&y(f[0],g))for(f=0;f<k.length;f++){var v=k[f];if(d!==d&&v.key!==v.key\|\|d===v.key)return{id:g,list:k,index:f,h:v}}return{id:g,list:k,index:-1,h:void 0}}function h(f){this[0]={};this[1]=b();this.size=0;if(f){f
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 2e 68 7d 3b 0a 68 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 28 66 3d 65 28 74 68 69 73 2c 66 29 2e 68 29 26 26 66 2e 76 61 6c 75 65 7d 3b 0a 68 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 5b 66 2e 6b 65 79 2c 66 2e 76 61 6c 75 65 5d 7d 29 7d 3b 0a 68 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 72 65 74 75 72 6e 20 66 2e 6b 65 79 7d 29 7d 3b 0a 68 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 Data Ascii: .h};h.prototype.get=function(f){return(f=e(this,f).h)&&f.value};h.prototype.entries=function(){return c(this,function(f){return[f.key,f.value]})};h.prototype.keys=function(){return c(this,function(f){return f.key})};h.prototype.values=function(){retur
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 65 7c 7c 6c 2e 76 61 6c 75 65 5b 30 5d 3d 3d 63 7c 7c 6c 2e 76 61 6c 75 65 5b 30 5d 2e 78 21 3d 34 7c 7c 6c 2e 76 61 6c 75 65 5b 31 5d 21 3d 6c 2e 76 61 6c 75 65 5b 30 5d 3f 21 31 3a 68 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 7d 63 61 74 63 68 28 6d 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 61 64 64 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 63 3d 3d 3d 30 3f 30 3a 63 3b 74 68 69 73 2e 67 2e 73 65 74 28 63 2c 63 29 3b 74 68 69 73 2e 73 69 7a 65 3d 74 68 69 73 2e 67 2e 73 69 7a 65 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 63 3d 74 68 69 73 2e 67 2e 64 65 6c 65 74 65 28 63 29 3b 74 68 69 73 2e 73 Data Ascii: e\|\|l.value[0]==c\|\|l.value[0].x!=4\|\|l.value[1]!=l.value[0]?!1:h.next().done}catch(m){return!1}}())return a;b.prototype.add=function(c){c=c===0?0:c;this.g.set(c,c);this.size=this.g.size;return this};b.prototype.delete=function(c){c=this.g.delete(c);this.s
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 73 68 69 66 74 28 29 29 3b 29 61 2e 6c 65 6e 67 74 68 7c 7c 62 3d 3d 3d 76 6f 69 64 20 30 3f 63 5b 65 5d 26 26 63 5b 65 5d 21 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 5b 65 5d 3f 63 3d 63 5b 65 5d 3a 63 3d 63 5b 65 5d 3d 7b 7d 3a 63 5b 65 5d 3d 62 7d 0a 3b 76 61 72 20 43 2c 44 3b 61 3a 7b 66 6f 72 28 76 61 72 20 45 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 46 3d 41 2c 47 3d 30 3b 47 3c 45 2e 6c 65 6e 67 74 68 3b 47 2b 2b 29 69 66 28 46 3d 46 5b 45 5b 47 5d 5d 2c 46 3d 3d 6e 75 6c 6c 29 7b 44 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 44 3d 46 7d 76 61 72 20 48 3d 44 26 26 44 5b 36 31 30 34 30 31 33 30 31 5d 3b 43 3d 48 21 3d 6e 75 6c 6c 3f 48 3a 21 31 3b 76 61 72 20 49 2c 4a 3d 41 2e 6e 61 76 69 67 61 74 6f 72 3b 49 3d 4a 3f 4a Data Ascii: shift());)a.length\|\|b===void 0?c[e]&&c[e]!==Object.prototype[e]?c=c[e]:c=c[e]={}:c[e]=b};var C,D;a:{for(var E=["CLOSURE_FLAGS"],F=A,G=0;G<E.length;G++)if(F=F[E[G]],F==null){D=null;break a}D=F}var H=D&&D[610401301];C=H!=null?H:!1;var I,J=A.navigator;I=J?J
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 28 22 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 20 73 30 2e 32 6d 64 6e 2e 6e 65 74 20 73 65 63 75 72 65 70 75 62 61 64 73 2e 67 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 20 73 73 6c 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 73 74 61 74 69 63 2e 64 6f 75 62 6c 65 63 6c 69 63 6b 2e 6e 65 74 20 77 77 77 2e 67 6f 6f 67 6c 65 2d 61 6e 61 6c 79 74 69 63 73 2e 63 6f 6d 20 77 77 77 2e 67 6f 6f 67 6c 65 74 61 67 73 65 72 76 69 63 65 73 2e 63 6f 6d 20 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 20 79 6f 75 74 75 62 65 2e 63 6f 6d 22 2e 73 70 6c 69 74 28 22 20 22 29 29 2c 57 3d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 5b 22 70 6b 65 64 63 6a 6b 64 65 66 67 70 64 65 6c 70 62 63 6d 62 6d 65 6f 6d 63 6a 62 65 65 6d 66 Data Ascii: ("fonts.googleapis.com s0.2mdn.net securepubads.g.doubleclick.net ssl.google-analytics.com static.doubleclick.net www.google-analytics.com www.googletagservices.com www.youtube.com youtube.com".split(" ")),W=Object.freeze(["pkedcjkdefgpdelpbcmbmeomcjbeemf
2024-07-02 22:25:19 UTC	589	IN	Data Raw: 28 62 29 7b 62 2e 73 72 63 26 26 21 5a 28 62 2e 73 72 63 29 26 26 61 2e 61 64 64 28 62 2e 73 72 63 29 7d 29 3b 0a 5b 5d 2e 63 6f 6e 63 61 74 28 78 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 6c 69 6e 6b 5b 68 72 65 66 5d 22 29 29 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 62 2e 72 65 6c 3d 3d 22 61 6c 74 65 72 6e 61 74 65 22 7c 7c 5a 28 62 2e 68 72 65 66 29 7c 7c 61 2e 61 64 64 28 62 2e 68 72 65 66 29 7d 29 3b 0a 72 65 74 75 72 6e 5b 5d 2e 63 6f 6e 63 61 74 28 78 28 61 29 29 2e 73 6f 72 74 28 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 61 28 29 7b 76 61 72 20 61 3d 6e 65 77 20 53 65 74 3b 5b 5d 2e 63 6f 6e 63 61 74 28 78 28 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c Data Ascii: (b){b.src&&!Z(b.src)&&a.add(b.src)});[].concat(x(document.querySelectorAll("link[href]"))).forEach(function(b){b.rel=="alternate"\|\|Z(b.href)\|\|a.add(b.href)});return[].concat(x(a)).sort()}function fa(){var a=new Set;[].concat(x(document.querySelectorAll

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.5	49872	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	685	OUT	GET /s/desktop/a7b1ec23/cssbin/www-main-desktop-home-page-skeleton.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:19 UTC	679	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 4264 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 15:56:56 GMT Expires: Wed, 02 Jul 2025 15:56:56 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 23303 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	711	IN	Data Raw: 23 68 6f 6d 65 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 30 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 6d 69 6e 2d 77 69 64 74 68 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 6f 70 61 63 69 74 79 3a 31 3b 6d 61 72 67 69 6e 3a 35 36 70 78 20 30 20 30 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 68 6f 72 69 7a 6f 6e 74 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f Data Ascii: #home-page-skeleton{position:relative;z-index:0;pointer-events:none;min-width:0;width:100%;opacity:1;margin:56px 0 0;display:-webkit-box;display:-webkit-flex;display:flex;-webkit-box-orient:horizontal;-webkit-box-direction:normal;-webkit-flex-direction:ro
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 7d 23 67 75 69 64 65 2d 73 6b 65 6c 65 74 6f 6e 20 2e 67 75 69 64 65 2d 67 68 6f 73 74 2d 69 63 6f 6e 7b 68 65 69 67 68 74 3a 34 30 70 78 3b 77 69 64 74 68 3a 34 30 70 78 3b 6d 69 6e 2d 77 69 64 74 68 3a 34 30 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 35 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c 28 30 2c 30 25 2c 31 30 30 25 29 7d 23 67 75 69 64 65 2d 73 6b 65 6c 65 74 6f 6e 20 2e 67 75 69 64 65 2d 67 68 6f 73 74 2d 74 65 78 74 7b 68 65 69 67 68 74 3a 33 36 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 68 73 6c Data Ascii: t-flex;display:flex}#guide-skeleton .guide-ghost-icon{height:40px;width:40px;min-width:40px;margin-right:15px;border-radius:50%;background-color:hsl(0,0%,100%)}#guide-skeleton .guide-ghost-text{height:36px;width:100%;border-radius:8px;background-color:hsl
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 40 6d 65 64 69 61 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 36 30 30 70 78 29 7b 23 68 6f 6d 65 2d 63 6f 6e 74 61 69 6e 65 72 2d 6d 65 64 69 61 7b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 38 70 78 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2d 38 70 78 7d 7d 23 68 6f 6d 65 2d 63 68 69 70 73 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 39 38 29 3b 68 65 69 67 68 74 3a 35 36 70 78 3b 62 6f 72 64 65 72 2d 74 6f 70 3a Data Ascii: y-content:center;justify-content:center;-webkit-flex-wrap:wrap;flex-wrap:wrap}@media only screen and (max-width:600px){#home-container-media{padding:0;margin-left:-8px;margin-right:-8px}}#home-chips{background:rgba(255,255,255,.98);height:56px;border-top:
2024-07-02 22:25:19 UTC	773	IN	Data Raw: 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 23 68 6f 6d 65 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 2e 72 69 63 68 2d 74 68 75 6d 62 6e 61 69 6c 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 7d 23 68 6f 6d 65 2d 70 61 67 65 2d 73 6b 65 6c 65 74 6f 6e 20 2e 72 69 63 68 2d 74 68 75 6d 62 6e 61 69 6c 3a 62 65 66 6f 72 65 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 63 Data Ascii: rient:vertical;-webkit-box-direction:normal;-webkit-flex-direction:column;flex-direction:column}#home-page-skeleton .rich-thumbnail{border-radius:8px;position:relative;width:100%}#home-page-skeleton .rich-thumbnail:before{border-radius:8px;display:block;c

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.5	49874	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	1128	OUT	GET /manifest.webmanifest HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:19 UTC	1504	IN	HTTP/1.1 200 OK Content-Type: application/manifest+json; charset=utf-8 X-Content-Type-Options: nosniff Expires: Wed, 03 Jul 2024 22:25:19 GMT Date: Tue, 02 Jul 2024 22:25:19 GMT Cache-Control: public, max-age=86400 Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Cross-Origin-Opener-Policy: same-origin; report-to="youtube_main" Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Transfer-Encoding: chunked Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	1504	IN	Data Raw: 36 33 32 0d 0a 7b 22 6e 61 6d 65 22 3a 22 59 6f 75 54 75 62 65 22 2c 22 73 68 6f 72 74 5f 6e 61 6d 65 22 3a 22 59 6f 75 54 75 62 65 22 2c 22 62 61 63 6b 67 72 6f 75 6e 64 5f 63 6f 6c 6f 72 22 3a 22 23 46 46 46 46 46 46 22 2c 22 64 69 73 70 6c 61 79 22 3a 22 6d 69 6e 69 6d 61 6c 2d 75 69 22 2c 22 73 74 61 72 74 5f 75 72 6c 22 3a 22 2f 3f 66 65 61 74 75 72 65 5c 75 30 30 33 64 79 74 63 61 22 2c 22 73 63 6f 70 65 22 3a 22 2f 22 2c 22 69 63 6f 6e 73 22 3a 5b 7b 22 73 72 63 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 79 6f 75 74 75 62 65 2f 69 6d 67 2f 62 72 61 6e 64 69 6e 67 2f 66 61 76 69 63 6f 6e 2f 66 61 76 69 63 6f 6e 5f 31 34 34 78 31 34 34 2e 70 6e 67 22 2c 22 73 69 7a 65 73 22 3a 22 31 34 34 78 31 34 34 22 2c 22 74 Data Ascii: 632{"name":"YouTube","short_name":"YouTube","background_color":"#FFFFFF","display":"minimal-ui","start_url":"/?feature\u003dytca","scope":"/","icons":[{"src":"https://www.gstatic.com/youtube/img/branding/favicon/favicon_144x144.png","sizes":"144x144","t
2024-07-02 22:25:19 UTC	89	IN	Data Raw: 70 6c 6f 72 65 5f 35 31 32 78 35 31 32 2e 70 6e 67 22 2c 22 73 69 7a 65 73 22 3a 22 35 31 32 78 35 31 32 22 2c 22 74 79 70 65 22 3a 22 69 6d 61 67 65 2f 70 6e 67 22 2c 22 70 75 72 70 6f 73 65 22 3a 22 61 6e 79 20 6d 6f 6e 6f 63 68 72 6f 6d 65 22 7d 5d 7d 5d 7d 0d 0a Data Ascii: plore_512x512.png","sizes":"512x512","type":"image/png","purpose":"any monochrome"}]}]}
2024-07-02 22:25:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.5	49875	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	1189	OUT	GET /s/player/71059424/player_ias.vflset/en_US/annotations_module.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:19 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 70514 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 01 Jul 2024 19:37:08 GMT Expires: Tue, 01 Jul 2025 19:37:08 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 01 Jul 2024 04:13:06 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 96491 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 42 33 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 61 2e 70 75 62 6c 69 73 68 28 22 63 61 72 64 73 74 61 74 65 63 68 61 6e 67 65 22 2c 61 2e 58 6b 28 29 26 26 61 2e 43 70 28 29 3f 31 3a 30 29 7d 2c 43 33 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 67 2e 62 62 28 62 29 2c 64 3d 63 3f 62 3a 61 72 67 75 6d 65 6e 74 73 3b 0a 66 6f 72 28 63 3d 63 3f 30 3a 31 3b 63 3c 64 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 69 66 28 61 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 3b 61 3d 61 5b 64 5b 63 5d 5d 7d 72 65 74 75 72 6e 20 61 7d 2c 45 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 67 2e 56 73 28 61 29 3b 0a Data Ascii: (function(g){var window=this;'use strict';var B3=function(a){a.publish("cardstatechange",a.Xk()&&a.Cp()?1:0)},C3=function(a,b){var c=g.bb(b),d=c?b:arguments;for(c=c?0:1;c<d.length;c++){if(a==null)return;a=a[d[c]]}return a},Eqb=function(a){var b=g.Vs(a);
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 72 72 61 79 28 61 29 7c 7c 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 74 61 72 74 20 61 6e 64 20 65 6e 64 20 70 61 72 61 6d 65 74 65 72 73 20 6d 75 73 74 20 62 65 20 61 72 72 61 79 73 22 29 3b 69 66 28 61 2e 6c 65 6e 67 74 68 21 3d 62 2e 6c 65 6e 67 74 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 53 74 61 72 74 20 61 6e 64 20 65 6e 64 20 70 6f 69 6e 74 73 20 6d 75 73 74 20 62 65 20 74 68 65 20 73 61 6d 65 20 6c 65 6e 67 74 68 22 29 3b 74 68 69 73 2e 42 3d 61 3b 74 68 69 73 2e 4e 3d 62 3b 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 63 3b 74 68 69 73 2e 47 3d 64 3b 74 68 69 73 2e 63 6f 6f 72 64 73 3d 5b 5d 3b 74 68 69 73 2e 70 72 6f 67 72 65 73 73 3d 74 68 69 73 2e 4b 3d 30 3b 74 68 69 73 2e 44 3d 6e 75 6c Data Ascii: rray(a)\|\|!Array.isArray(b))throw Error("Start and end parameters must be arrays");if(a.length!=b.length)throw Error("Start and end points must be the same length");this.B=a;this.N=b;this.duration=c;this.G=d;this.coords=[];this.progress=this.K=0;this.D=nul
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 52 65 6e 64 65 72 65 72 3b 69 66 28 21 68 61 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 74 61 3d 66 28 68 61 2e 75 6e 73 75 62 73 63 72 69 62 65 64 42 75 74 74 6f 6e 54 65 78 74 29 2c 50 3d 66 28 68 61 2e 73 75 62 73 63 72 69 62 65 64 42 75 74 74 6f 6e 54 65 78 74 29 3b 69 66 28 68 61 2e 73 75 62 73 63 72 69 62 65 64 29 7b 76 61 72 20 75 61 3d 66 28 68 61 2e 73 75 62 73 63 72 69 62 65 72 43 6f 75 6e 74 57 69 74 68 55 6e 73 75 62 73 63 72 69 62 65 54 65 78 74 29 3b 76 61 72 20 79 3d 66 28 68 61 2e 73 75 62 73 63 72 69 62 65 72 43 6f 75 6e 74 54 65 78 74 29 7d 65 6c 73 65 20 75 61 3d 66 28 68 61 2e 73 75 62 73 63 72 69 62 65 72 43 6f 75 6e 74 54 65 78 74 29 2c 79 3d 66 28 68 61 2e 73 75 62 73 63 72 69 62 65 Data Ascii: ubscribeButtonRenderer;if(!ha)return null;var ta=f(ha.unsubscribedButtonText),P=f(ha.subscribedButtonText);if(ha.subscribed){var ua=f(ha.subscriberCountWithUnsubscribeText);var y=f(ha.subscriberCountText)}else ua=f(ha.subscriberCountText),y=f(ha.subscribe
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 65 6c 73 65 20 69 66 28 68 3d 3d 3d 22 50 4c 41 59 4c 49 53 54 22 29 67 2e 56 28 6c 2c 67 2e 63 46 29 3f 6d 3d 67 2e 56 28 6c 2c 67 2e 63 46 29 2e 75 72 6c 3a 28 4e 3d 67 2e 56 28 6c 2c 67 2e 44 53 29 2c 6d 3d 65 28 4e 29 29 2c 6e 3d 21 31 2c 71 3d 61 2c 74 3d 66 28 62 2e 70 6c 61 79 6c 69 73 74 4c 65 6e 67 74 68 29 3b 65 6c 73 65 20 69 66 28 68 3d 3d 3d 0a 22 43 48 41 4e 4e 45 4c 22 29 7b 69 66 28 77 3d 43 33 28 6c 2c 22 62 72 6f 77 73 65 45 6e 64 70 6f 69 6e 74 22 2c 22 62 72 6f 77 73 65 49 64 22 29 29 75 3d 77 2c 6d 3d 22 2f 63 68 61 6e 6e 65 6c 2f 22 2b 75 3b 6e 3d 21 31 3b 71 3d 22 6e 65 77 22 3b 28 77 3d 21 21 62 2e 69 73 53 75 62 73 63 72 69 62 65 29 3f 41 3d 64 28 62 29 3a 43 3d 66 28 62 2e 73 75 62 73 63 72 69 62 65 72 73 54 65 78 74 29 7d 65 6c Data Ascii: else if(h==="PLAYLIST")g.V(l,g.cF)?m=g.V(l,g.cF).url:(N=g.V(l,g.DS),m=e(N)),n=!1,q=a,t=f(b.playlistLength);else if(h==="CHANNEL"){if(w=C3(l,"browseEndpoint","browseId"))u=w,m="/channel/"+u;n=!1;q="new";(w=!!b.isSubscribe)?A=d(b):C=f(b.subscribersText)}el
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 76 61 72 20 63 3d 7b 73 74 61 72 74 4d 73 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 4e 75 6d 62 65 72 28 61 2e 73 74 61 72 74 4d 73 29 29 2c 0a 69 6d 70 72 65 73 73 69 6f 6e 55 72 6c 73 3a 4a 33 28 61 2e 69 6d 70 72 65 73 73 69 6f 6e 55 72 6c 73 7c 7c 5b 5d 2c 49 33 29 2c 65 6c 65 6d 65 6e 74 73 3a 4a 33 28 61 2e 65 6c 65 6d 65 6e 74 73 7c 7c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 72 65 74 75 72 6e 20 50 71 62 28 62 2c 64 2c 65 29 7d 29 7d 3b 0a 61 2e 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 26 26 28 63 2e 76 69 73 75 61 6c 45 6c 65 6d 65 6e 74 3d 67 2e 67 45 28 61 2e 74 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 29 29 3b 72 65 74 75 72 6e 20 63 7d 2c 52 71 62 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 67 2e 66 56 2e 63 61 6c 6c 28 74 68 69 73 2c 61 29 3b Data Ascii: var c={startMs:Math.floor(Number(a.startMs)),impressionUrls:J3(a.impressionUrls\|\|[],I3),elements:J3(a.elements\|\|[],function(d,e){return Pqb(b,d,e)})};a.trackingParams&&(c.visualElement=g.gE(a.trackingParams));return c},Rqb=function(a){g.fV.call(this,a);
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 69 63 6f 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 42 67 41 41 41 41 59 42 41 4d 41 41 41 41 53 57 53 44 4c 41 41 41 41 42 47 64 42 54 55 45 41 41 4c 47 50 43 2f 78 68 42 51 41 41 41 43 42 6a 53 46 4a 4e 41 41 42 36 4a 67 41 41 67 49 51 41 41 50 6f 41 41 41 43 41 36 41 41 41 64 54 41 41 41 4f 70 67 41 41 41 36 6d 41 41 41 46 33 43 63 75 6c 45 38 41 41 41 41 4a 31 42 4d 56 45 56 4d 61 58 47 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 4f 7a 73 37 50 2f 2f 2f 39 52 66 7a 49 4b 41 41 41 41 43 33 52 53 54 6c 4d 41 76 44 65 79 4c 76 78 59 Data Ascii: icon {background:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAABgAAAAYBAMAAAASWSDLAAAABGdBTUEAALGPC/xhBQAAACBjSFJNAAB6JgAAgIQAAPoAAACA6AAAdTAAAOpgAAA6mAAAF3CculE8AAAAJ1BMVEVMaXGzs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7Ozs7P///9RfzIKAAAAC3RSTlMAvDeyLvxY
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 66 66 66 66 66 66 66 66 66 66 2c 7b 69 64 3a 22 79 74 70 2d 63 65 2d 69 6e 2d 65 6e 64 73 63 72 65 65 6e 22 2c 6e 61 6d 65 73 70 61 63 65 3a 22 63 72 65 61 74 6f 72 65 6e 64 73 63 72 65 65 6e 22 7d 29 3b 63 2e 70 75 73 68 28 64 29 3b 61 2e 70 6c 61 79 65 72 2e 55 28 29 2e 42 7c 7c 28 61 2e 42 3d 6e 65 77 20 67 2e 57 28 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 65 2d 73 68 61 64 6f 77 22 7d 29 2c 67 2e 47 54 28 61 2e 70 6c 61 79 65 72 2c 61 2e 42 2e 65 6c 65 6d 65 6e 74 2c 34 29 2c 61 2e 44 3d 6e 65 77 20 67 2e 71 46 28 61 2e 42 2c 32 30 30 29 29 3b 66 6f 72 28 64 3d 30 3b 64 3c 62 2e 65 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 7b 65 3d 62 2e 65 6c 65 6d 65 6e 74 73 5b 64 5d 3b 76 61 72 20 66 3d 56 71 62 28 61 2c 65 29 3b 69 66 28 Data Ascii: ffffffffff,{id:"ytp-ce-in-endscreen",namespace:"creatorendscreen"});c.push(d);a.player.U().B\|\|(a.B=new g.W({I:"div",S:"ytp-ce-shadow"}),g.GT(a.player,a.B.element,4),a.D=new g.qF(a.B,200));for(d=0;d<b.elements.length;++d){e=b.elements[d];var f=Vqb(a,e);if(
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 63 6f 76 65 72 69 6e 67 2d 69 6d 61 67 65 22 2c 57 3a 4d 33 28 62 29 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 65 2d 63 6f 76 65 72 69 6e 67 2d 73 68 61 64 6f 77 2d 74 6f 70 22 7d 2c 7b 49 3a 22 61 22 2c 53 3a 22 79 74 70 2d 63 65 2d 63 6f 76 65 72 69 6e 67 2d 6f 76 65 72 6c 61 79 22 2c 57 3a 7b 68 72 65 66 3a 4e 33 28 61 2c 62 2e 74 61 72 67 65 74 55 72 6c 29 2c 74 61 62 69 6e 64 65 78 3a 22 2d 31 22 7d 2c 56 3a 5b 7b 49 3a 22 64 69 76 22 2c 4c 61 3a 5b 22 79 74 70 2d 63 65 2d 70 6c 61 79 6c 69 73 74 2d 74 69 74 6c 65 22 2c 22 79 74 70 2d 77 65 62 6b 69 74 2d 65 6c 6c 69 70 73 69 73 22 5d 2c 57 3a 7b 64 69 72 3a 67 2e 52 76 28 62 2e 74 69 74 6c 65 7c 7c 22 22 29 7d 2c 78 61 3a 62 2e 74 69 74 6c 65 7d 2c 7b 49 3a 22 64 69 76 22 2c 53 3a 22 Data Ascii: covering-image",W:M3(b)},{I:"div",S:"ytp-ce-covering-shadow-top"},{I:"a",S:"ytp-ce-covering-overlay",W:{href:N3(a,b.targetUrl),tabindex:"-1"},V:[{I:"div",La:["ytp-ce-playlist-title","ytp-webkit-ellipsis"],W:{dir:g.Rv(b.title\|\|"")},xa:b.title},{I:"div",S:"
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 64 69 6e 67 2d 69 6d 61 67 65 22 2c 57 3a 4d 33 28 62 29 7d 5d 7d 3b 63 3d 6e 65 77 20 67 2e 57 28 63 29 3b 76 61 72 20 64 3d 67 2e 70 66 28 64 6f 63 75 6d 65 6e 74 2c 22 64 69 76 22 2c 22 79 74 70 2d 63 65 2d 63 68 61 6e 6e 65 6c 2d 73 75 62 73 63 72 69 62 65 22 2c 63 2e 65 6c 65 6d 65 6e 74 29 5b 30 5d 3b 69 66 28 62 2e 73 75 62 73 63 72 69 62 65 42 75 74 74 6f 6e 26 26 62 2e 63 68 61 6e 6e 65 6c 49 64 29 7b 67 2e 4a 76 28 64 2c 22 79 74 70 2d 63 65 2d 73 75 62 73 63 72 69 62 65 2d 62 75 74 74 6f 6e 22 29 3b 69 66 28 61 2e 70 6c 61 79 65 72 2e 55 28 29 2e 42 29 7b 76 61 72 20 65 3d 6e 75 6c 6c 3b 76 61 72 20 66 3d 62 2e 73 65 73 73 69 6f 6e 44 61 74 61 2e 69 74 63 74 7d 65 6c 73 65 20 65 3d 22 65 6e 64 73 63 72 65 65 6e 22 2c 66 3d 6e 75 6c 6c 3b 65 3d Data Ascii: ding-image",W:M3(b)}]};c=new g.W(c);var d=g.pf(document,"div","ytp-ce-channel-subscribe",c.element)[0];if(b.subscribeButton&&b.channelId){g.Jv(d,"ytp-ce-subscribe-button");if(a.player.U().B){var e=null;var f=b.sessionData.itct}else e="endscreen",f=null;e=
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 52 45 41 54 4f 52 5f 4d 45 52 43 48 41 4e 44 49 53 45 22 3a 63 3d 22 22 2c 62 2e 70 72 6f 64 75 63 74 50 72 69 63 65 26 26 28 63 3d 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 65 2d 6d 65 72 63 68 61 6e 64 69 73 65 2d 70 72 69 63 65 2d 63 6f 6e 74 61 69 6e 65 72 22 2c 0a 56 3a 5b 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 65 2d 6d 65 72 63 68 61 6e 64 69 73 65 2d 70 72 69 63 65 22 2c 78 61 3a 62 2e 70 72 6f 64 75 63 74 50 72 69 63 65 7d 5d 7d 2c 62 2e 61 64 64 69 74 69 6f 6e 61 6c 46 65 65 73 54 65 78 74 26 26 63 2e 56 2e 70 75 73 68 28 7b 49 3a 22 64 69 76 22 2c 53 3a 22 79 74 70 2d 63 65 2d 6d 65 72 63 68 61 6e 64 69 73 65 2d 61 64 64 69 74 69 6f 6e 61 6c 2d 66 65 65 73 22 2c 78 61 3a 62 2e 61 64 64 69 74 69 6f 6e 61 6c 46 65 65 73 54 65 Data Ascii: REATOR_MERCHANDISE":c="",b.productPrice&&(c={I:"div",S:"ytp-ce-merchandise-price-container",V:[{I:"div",S:"ytp-ce-merchandise-price",xa:b.productPrice}]},b.additionalFeesText&&c.V.push({I:"div",S:"ytp-ce-merchandise-additional-fees",xa:b.additionalFeesTe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.5	49876	142.250.184.198	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	1058	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
2024-07-02 22:25:19 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:11:57 GMT Expires: Tue, 02 Jul 2024 22:26:57 GMT Cache-Control: public, max-age=900 Age: 802 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.5	49877	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	1170	OUT	GET /s/search/audio/failure.mp3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York Range: bytes=0-
2024-07-02 22:25:19 UTC	708	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Content-Range: bytes 0-6528/6529 Content-Type: audio/mpeg Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube-marketing" Report-To: {"group":"youtube-marketing","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-marketing"}]} Content-Length: 6529 Date: Tue, 02 Jul 2024 22:25:19 GMT Expires: Tue, 02 Jul 2024 22:25:19 GMT Cache-Control: public, max-age=0 Last-Modified: Wed, 12 Jan 2022 21:08:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	682	IN	Data Raw: 00 00 00 20 66 74 79 70 4d 34 41 20 00 00 00 00 4d 34 41 20 6d 70 34 32 69 73 6f 6d 00 00 00 00 00 00 0c 7f 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 d2 90 a0 90 d2 90 a0 90 00 00 ac 44 00 00 54 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 02 09 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 07 d2 90 a0 90 d2 90 a0 90 00 00 00 01 00 00 00 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a5 6d 64 69 Data Ascii: ftypM4A M4A mp42isommoovlmvhdDT@trak\tkhdT@mdi
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 65 74 61 00 00 00 00 00 00 00 22 68 64 6c 72 00 00 00 00 00 00 00 00 6d 64 69 72 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 02 6e 69 6c 73 74 00 00 00 1d a9 6e 61 6d 00 00 00 15 64 61 74 61 00 00 00 01 00 00 00 00 65 72 72 6f 72 00 00 00 19 63 70 69 6c 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 19 70 67 61 70 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 1a 74 6d 70 6f 00 00 00 12 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 00 28 a9 74 6f 6f 00 00 00 20 64 61 74 61 00 00 00 01 00 00 00 00 69 54 75 6e 65 73 20 31 32 2e 33 2e 31 2e 32 33 00 00 00 bc 2d 2d 2d 2d 00 00 00 1c 6d 65 61 6e 00 00 00 00 63 6f 6d 2e 61 70 70 6c 65 2e 69 54 75 6e 65 73 00 00 00 14 6e 61 6d 65 00 00 00 00 69 54 75 6e 53 4d 50 42 00 00 00 84 64 Data Ascii: eta"hdlrmdirapplnilstnamdataerrorcpildatapgapdatatmpodata(too dataiTunes 12.3.1.23----meancom.apple.iTunesnameiTunSMPBd
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 24 43 3f fe b7 f9 eb 8f ac e7 f6 fa bf 6f ff bb ab 7f 85 ff 3f ff 77 fd f4 fb 7f b6 3d 58 18 48 40 09 75 2e 1e 43 f0 71 ec 52 7f c5 73 e1 69 0f db 17 f8 4b 36 d2 9c 38 bb 68 ee 42 51 05 89 58 ed 60 62 61 50 15 53 c1 af c6 66 7c 72 01 c3 10 cb 5e ba 69 13 c4 e0 46 10 c1 09 10 e4 1c 92 07 27 1d 20 00 07 5d d3 ee e6 90 07 f2 fe 5f c8 7f 2f e5 fc 88 fd 7e fc 13 13 ff 23 6f f3 14 a2 4b 94 b5 52 9d 32 a8 98 f5 1a 4e 64 9a c4 9c cd cd 51 f5 cb 0d 41 06 5e 31 3e 2b 0c 87 fa 0a be a8 90 db e2 49 ff 9d f3 ee 31 3d f7 2f 23 fe 6c 5f c9 a9 04 78 14 97 f9 38 3f 8b c9 38 9c cc 8f f8 d1 3f 83 1c d5 12 7f 3c c9 2d e7 58 ca b5 8d e9 d6 5c 4b 18 24 a5 14 aa fb d8 21 1a a1 41 e7 cb 22 08 56 a1 e5 41 9f 01 25 e0 9c 01 fe 34 70 33 d7 8c 03 7b 74 d0 ef b2 d3 fc 71 aa 89 e5 a1 Data Ascii: $C?o?w=XH@u.CqRsiK68hBQX`baPSf\|r^iF' ]_/~#oKR2NdQA^1>+I1=/#l_x8?8?<-X\K$!A"VA%4p3{tq
2024-07-02 22:25:19 UTC	287	IN	Data Raw: fa 43 d8 c0 7f 95 63 d9 84 6b 3a ae a0 0c c2 59 11 6b 62 82 30 0d a2 55 49 3c b4 3a 42 80 b9 40 82 aa 68 e3 ae 17 d0 76 2f 5b 91 97 e2 78 6a 3f 77 b4 ca 66 3d 80 59 35 3b 90 03 80 00 f8 18 94 96 44 69 1d 02 21 09 93 a9 98 90 28 0c 45 23 63 f4 60 a9 b8 05 88 3e 55 39 1b 25 90 23 95 c1 ac df f4 43 90 43 81 c0 47 52 15 56 76 a9 44 c4 ea 1c be 45 03 8c 95 c4 51 bc 54 9c b8 f9 d4 b3 60 be 77 8a 9f 1b ab ed 24 0b b2 24 fb 51 80 88 78 93 a6 34 83 0b 2b 00 38 00 fa 18 90 94 34 b0 84 26 bd 26 5e 0d 10 cc 84 60 60 e9 94 92 27 44 5f d7 bf c2 f5 dc 9e ba 71 f4 4d 00 bf 7f 84 dc f9 17 47 d2 7f dd 1d a0 41 79 06 ab 3b 3b d5 a1 89 2b 6f b8 67 4d 69 0d 33 fb c3 e3 b5 0d 18 c9 1f 26 a5 52 47 54 4c d5 b1 93 dc a4 e4 d1 d4 a5 d3 99 02 4b 80 aa a2 8e d7 50 bc b6 54 38 00 fc Data Ascii: Cck:Ykb0UI<:B@hv/[xj?wf=Y5;Di!(E#c`>U9%#CCGRVvDEQT`w$$Qx4+84&&^``'D_qMGAy;;+ogMi3&RGTLKPT8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.5	49879	142.250.185.226	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	544	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmLn6er6Jq0CkxZ4K1o_MwBkm-dlviGb9iJ95pj_qr1lF5gx4s_if6tX9Kn
2024-07-02 22:25:19 UTC	754	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Content-Type: application/json; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:19 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:19 UTC	119	IN	Data Raw: 37 31 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 38 63 66 75 78 54 70 5f 6d 35 58 59 71 53 53 7a 4c 6f 37 35 2d 43 39 73 36 39 39 30 35 6d 74 64 5a 74 6a 4f 77 64 4a 5f 69 71 4b 75 31 51 64 49 49 71 6d 6d 4f 75 71 33 69 49 30 78 6b 55 56 34 6e 63 4e 36 48 51 74 69 31 34 74 63 70 58 38 61 34 6a 77 6a 71 63 34 33 6c 70 41 22 7d 0d 0a Data Ascii: 71)]}'{"id":"ANyPxKq8cfuxTp_m5XYqSSzLo75-C9s69905mtdZtjOwdJ_iqKu1QdIIqmmOuq3iI0xkUV4ncN6HQti14tcpX8a4jwjqc43lpA"}
2024-07-02 22:25:19 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.5	49878	142.250.185.110	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	551	OUT	GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; PREF=tz=America.New_York
2024-07-02 22:25:19 UTC	240	IN	HTTP/1.1 405 Method Not Allowed Content-Type: text/html; charset=UTF-8 Referrer-Policy: no-referrer Content-Length: 1609 Date: Tue, 02 Jul 2024 22:25:19 GMT Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	1150	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 35 20 28 4d 65 74 68 6f 64 20 4e 6f 74 20 41 6c 6c 6f 77 65 64 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 405 (Method Not Allowed)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px aria
2024-07-02 22:25:19 UTC	459	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e 20 69 64 3d 6c 6f 67 6f 20 61 72 69 61 2d 6c 61 62 65 6c 3d 47 6f 6f Data Ascii: ckground:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span id=logo aria-label=Goo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.5	49883	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:19 UTC	1171	OUT	GET /s/search/audio/no_input.mp3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York Range: bytes=0-
2024-07-02 22:25:19 UTC	708	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Content-Range: bytes 0-6952/6953 Content-Type: audio/mpeg Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube-marketing" Report-To: {"group":"youtube-marketing","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-marketing"}]} Content-Length: 6953 Date: Tue, 02 Jul 2024 22:25:19 GMT Expires: Tue, 02 Jul 2024 22:25:19 GMT Cache-Control: public, max-age=0 Last-Modified: Wed, 12 Jan 2022 21:08:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:19 UTC	682	IN	Data Raw: 00 00 00 20 66 74 79 70 4d 34 41 20 00 00 00 00 4d 34 41 20 6d 70 34 32 69 73 6f 6d 00 00 00 00 00 00 0c 9c 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 d2 90 a0 90 d2 90 a0 90 00 00 ac 44 00 00 60 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 02 25 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 07 d2 90 a0 90 d2 90 a0 90 00 00 00 01 00 00 00 00 00 00 60 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c1 6d 64 69 Data Ascii: ftypM4A M4A mp42isommoovlmvhdD`@%trak\tkhd`@mdi
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 02 00 00 10 00 00 00 1a 7c 00 00 0a 03 75 64 74 61 00 00 09 fb 6d 65 74 61 00 00 00 00 00 00 00 22 68 64 6c 72 00 00 00 00 00 00 00 00 6d 64 69 72 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 02 6f 69 6c 73 74 00 00 00 1e a9 6e 61 6d 00 00 00 16 64 61 74 61 00 00 00 01 00 00 00 00 63 61 6e 63 65 6c 00 00 00 19 63 70 69 6c 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 19 70 67 61 70 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 1a 74 6d 70 6f 00 00 00 12 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 00 28 a9 74 6f 6f 00 00 00 20 64 61 74 61 00 00 00 01 00 00 00 00 69 54 75 6e 65 73 20 31 32 2e 33 2e 31 2e 32 33 00 00 00 bc 2d 2d 2d 2d 00 00 00 1c 6d 65 61 6e 00 00 00 00 63 6f 6d 2e 61 70 70 6c 65 2e 69 54 Data Ascii: \|udtameta"hdlrmdirapploilstnamdatacancelcpildatapgapdatatmpodata(too dataiTunes 12.3.1.23----meancom.apple.iT
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:25:19 UTC	1390	IN	Data Raw: 70 1c 00 ca 9c 3a e2 20 e6 f9 46 0e d5 60 28 81 db 72 86 0a 20 d6 a2 0a 0c ff eb fc 8f c7 fe 97 f0 e9 9e b5 7e df ff 62 fc be 3c ea f5 e7 ff af c7 3f af c6 3e bf fe e7 ef ed f0 e6 09 f3 dd a4 bf cb dd fe 73 f9 00 fd 18 ea 68 6b dd 2d 38 4f f8 47 7c e6 23 fd d3 ff 87 e1 19 b1 09 dc 97 28 42 20 e1 d9 91 09 c4 a7 41 c5 ff 41 09 13 71 ea 49 a0 44 c8 6b 78 16 20 bc e3 c0 76 1c 4e 04 d2 12 12 12 12 12 12 12 12 12 47 ec 3f ee 68 9f fa 93 7f a3 b7 96 e2 56 a3 ba ca 86 ca aa 36 17 d6 58 e8 6b 2a 92 27 83 08 18 18 18 18 18 18 9e 97 9c 11 ff 5c 1f cf b2 19 be 90 4b fd 49 9f b5 f2 79 5f 03 11 ff 45 3f f2 3c 21 96 ef 24 bf ce 07 fd 27 f7 7a eb c0 fb 8c 4b c1 7b cf be 48 ee 4e c0 b9 1f 9d a4 da a7 1c 2a 5b a9 7d 9b ec da e5 b5 1e 32 66 23 99 1e 01 9c 6b a1 6c 7d 3f 67 Data Ascii: p: F`(r ~b<?>shk-8OG\|#(B AAqIDkx vNG?hV6Xk'\KIy_E?<!$'zK{HN[}2f#kl}?g
2024-07-02 22:25:19 UTC	711	IN	Data Raw: fd 47 78 94 c3 5e 4b 77 34 c6 d7 2a 42 1a 20 48 ff dd ef 55 d8 b3 4a 95 38 ce 8c 9f 4b a4 28 51 0d 24 7d 29 28 e0 d3 12 9c 63 54 5b 0d b5 74 cc 9c 47 f6 69 5c 5f 89 d4 89 c1 d9 1e 35 a3 ec c4 db 35 af 10 70 00 f8 38 ac e0 34 98 50 d4 f9 f1 e3 f7 f8 10 01 80 36 8b 01 8f 97 05 7e 22 1f 6b db b8 1f d4 1c 3a f4 45 ac c8 ab d1 76 1a f6 b5 13 17 fc ef 47 3e 77 8e 29 fb c3 90 f3 5b b9 63 9e 99 88 46 d8 74 36 c8 99 17 bf 53 a7 d9 98 94 22 4c 06 64 aa e1 55 d2 20 23 76 88 a4 35 94 f9 46 5e 75 f0 00 f8 38 ac ea 74 41 1c 28 bd fe 3f 8d fd ad f7 7d d3 32 16 60 28 36 80 60 28 5b f7 dc 87 2b 78 91 05 a9 61 4f 99 00 bf 1c f2 95 ef bb ae 95 45 c0 08 07 56 a7 51 77 e9 59 44 61 ca 95 a0 ed 06 f4 a0 2a e5 41 e3 c3 16 d4 8e 6a d2 e6 c3 1f f4 84 14 2f 95 97 2c bb 8f 85 26 7d Data Ascii: Gx^Kw4B HUJ8K(Q$})(cT[tGi\_55p84P6~"k:EvG>w)[cFt6S"LdU #v5F^u8tA(?}2`(6`([+xaOEVQwYDaAj/,&}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.5	49885	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:20 UTC	1167	OUT	GET /s/search/audio/open.mp3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York Range: bytes=0-
2024-07-02 22:25:20 UTC	708	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Content-Range: bytes 0-6166/6167 Content-Type: audio/mpeg Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube-marketing" Report-To: {"group":"youtube-marketing","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-marketing"}]} Content-Length: 6167 Date: Tue, 02 Jul 2024 22:25:20 GMT Expires: Tue, 02 Jul 2024 22:25:20 GMT Cache-Control: public, max-age=0 Last-Modified: Wed, 12 Jan 2022 21:08:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:20 UTC	682	IN	Data Raw: 00 00 00 20 66 74 79 70 4d 34 41 20 00 00 00 00 4d 34 41 20 6d 70 34 32 69 73 6f 6d 00 00 00 00 00 00 0c 67 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 d2 90 a0 90 d2 90 a0 90 00 00 ac 44 00 00 38 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 01 ed 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 07 d2 90 a0 90 d2 90 a0 90 00 00 00 01 00 00 00 00 00 00 38 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 89 6d 64 69 Data Ascii: ftypM4A M4A mp42isomgmoovlmvhdD8@trak\tkhd8@mdi
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 02 72 69 6c 73 74 00 00 00 21 a9 6e 61 6d 00 00 00 19 64 61 74 61 00 00 00 01 00 00 00 00 73 70 65 61 6b 5f 6e 6f 77 00 00 00 19 63 70 69 6c 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 19 70 67 61 70 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 1a 74 6d 70 6f 00 00 00 12 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 00 28 a9 74 6f 6f 00 00 00 20 64 61 74 61 00 00 00 01 00 00 00 00 69 54 75 6e 65 73 20 31 32 2e 33 2e 31 2e 32 33 00 00 00 bc 2d 2d 2d 2d 00 00 00 1c 6d 65 61 6e 00 00 00 00 63 6f 6d 2e 61 70 70 6c 65 2e 69 54 75 6e 65 73 00 00 00 14 6e 61 6d 65 00 00 00 00 69 54 75 6e 53 4d 50 42 00 00 00 84 64 61 74 61 00 00 00 01 00 00 00 00 20 30 30 30 30 30 30 30 30 20 30 30 30 Data Ascii: pplrilst!namdataspeak_nowcpildatapgapdatatmpodata(too dataiTunes 12.3.1.23----meancom.apple.iTunesnameiTunSMPBdata 00000000 000
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:25:20 UTC	1315	IN	Data Raw: da b2 5f 86 4f c0 dc ba 76 d7 73 a4 99 80 b3 2c 11 5e e2 fd 26 62 c4 d6 a9 2e b2 fc 6c 49 e6 b2 9c f9 31 85 eb ae 59 f0 c6 b6 b4 48 7a eb 67 aa 82 47 9a d8 15 35 67 37 14 10 d2 c0 e0 80 9f e1 c3 f2 60 4f eb b7 f4 36 21 02 39 09 b1 b0 05 ec c2 20 9c 4e 79 3e 40 80 90 45 68 c0 e0 72 1a 80 b8 f6 05 4e be fb 9f 89 44 8b ac b7 0e c6 d1 b9 8b 15 b6 ad 9a 6a 79 9e a2 b0 68 2c 18 18 18 18 18 18 18 18 8f d9 af ad e4 7f 59 3d d7 5f 11 23 b3 5e 9c b9 39 bb a4 45 23 29 12 a6 d5 32 d3 38 c8 ce ce ce ce ce ce ce ce ce ce ce ce 42 4f 84 09 7c 5d fd bb 11 e2 9d 74 9f d4 df ce 11 5e 2c ab c9 bc f7 bc d2 a3 bd 6b 1b 8e f7 83 ae 29 e7 fc 78 b3 99 90 f9 31 9e e0 f8 5e 0e ea 34 52 89 f6 7d ad ce e8 41 10 4e 69 b3 a6 b4 cb 45 12 50 44 1c 5c 6a 9a a9 b3 84 11 04 46 9b 39 96 99 Data Ascii: _Ovs,^&b.lI1YHzgG5g7`O6!9 Ny>@EhrNDjyh,Y=_#^9E#)28BO\|]t^,k)x1^4R}ANiEPD\jF9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.5	49886	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:20 UTC	1170	OUT	GET /s/search/audio/success.mp3 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: /* X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ&feature=youtu.be Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York Range: bytes=0-
2024-07-02 22:25:20 UTC	708	IN	HTTP/1.1 206 Partial Content Accept-Ranges: bytes Content-Range: bytes 0-6635/6636 Content-Type: audio/mpeg Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube-marketing" Report-To: {"group":"youtube-marketing","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube-marketing"}]} Content-Length: 6636 Date: Tue, 02 Jul 2024 22:25:20 GMT Expires: Tue, 02 Jul 2024 22:25:20 GMT Cache-Control: public, max-age=0 Last-Modified: Wed, 12 Jan 2022 21:08:00 GMT X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:20 UTC	682	IN	Data Raw: 00 00 00 20 66 74 79 70 4d 34 41 20 00 00 00 00 4d 34 41 20 6d 70 34 32 69 73 6f 6d 00 00 00 00 00 00 0c 80 6d 6f 6f 76 00 00 00 6c 6d 76 68 64 00 00 00 00 d2 90 a0 90 d2 90 a0 90 00 00 ac 44 00 00 54 00 00 01 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 00 00 02 09 74 72 61 6b 00 00 00 5c 74 6b 68 64 00 00 00 07 d2 90 a0 90 d2 90 a0 90 00 00 00 01 00 00 00 00 00 00 54 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 40 00 00 00 00 00 00 00 00 00 00 00 00 00 01 a5 6d 64 69 Data Ascii: ftypM4A M4A mp42isommoovlmvhdDT@trak\tkhdT@mdi
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 65 74 61 00 00 00 00 00 00 00 22 68 64 6c 72 00 00 00 00 00 00 00 00 6d 64 69 72 61 70 70 6c 00 00 00 00 00 00 00 00 00 00 00 00 02 6f 69 6c 73 74 00 00 00 1e a9 6e 61 6d 00 00 00 16 64 61 74 61 00 00 00 01 00 00 00 00 67 6f 74 5f 69 74 00 00 00 19 63 70 69 6c 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 19 70 67 61 70 00 00 00 11 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 1a 74 6d 70 6f 00 00 00 12 64 61 74 61 00 00 00 15 00 00 00 00 00 00 00 00 00 28 a9 74 6f 6f 00 00 00 20 64 61 74 61 00 00 00 01 00 00 00 00 69 54 75 6e 65 73 20 31 32 2e 33 2e 31 2e 32 33 00 00 00 bc 2d 2d 2d 2d 00 00 00 1c 6d 65 61 6e 00 00 00 00 63 6f 6d 2e 61 70 70 6c 65 2e 69 54 75 6e 65 73 00 00 00 14 6e 61 6d 65 00 00 00 00 69 54 75 6e 53 4d 50 42 00 00 00 84 Data Ascii: eta"hdlrmdirapploilstnamdatagot_itcpildatapgapdatatmpodata(too dataiTunes 12.3.1.23----meancom.apple.iTunesnameiTunSMPB
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 00 12 78 5c 0c a0 92 75 33 e4 80 f2 78 1d 21 23 c2 ce bc 25 43 f9 24 8f 21 e4 1b b7 4a 64 9f 64 aa b8 a2 7b dc 14 df 78 48 f8 96 fa c9 f5 0d ed 29 d6 bf 50 dd 04 ec a1 d0 7d 4f 53 a0 c5 f5 35 45 ca a9 63 23 74 88 92 3a 6f 47 93 f9 df f5 e3 57 72 39 3c b4 dc 80 6c 1d e4 dc 1b df 99 08 56 36 4f 09 32 af 85 2d 98 6f a0 f9 1f 32 eb d4 75 93 16 dc ee b1 71 b1 71 a6 ce 9a d3 2d 03 03 03 03 03 03 4a 4f 89 75 f2 1f 7d 7e ec 92 c8 f2 02 3e 52 f1 87 93 32 e7 a6 f9 20 45 8a 5a 32 d9 b8 80 c0 93 6a 25 d5 25 df ad 4a 16 85 36 c8 47 26 73 67 4d ce 92 92 3f 29 09 09 09 09 2a 12 12 12 13 76 ed 88 92 79 69 bf cd 21 5b 91 13 42 a4 52 c9 29 9d 3d 4d 24 5a d7 d2 a3 48 18 18 18 18 18 1b 80 00 fa d8 ae 04 76 15 05 83 42 41 84 51 f2 f5 5d b1 f3 b0 d6 9f 86 b8 d7 9b e0 16 f3 24 Data Ascii: x\u3x!#%C$!Jdd{xH)P}OS5Ec#t:oGWr9<lV6O2-o2uqq-JOu}~>R2 EZ2j%%J6G&sgM?)*vyi![BR)=M$ZHvBAQ]$
2024-07-02 22:25:20 UTC	394	IN	Data Raw: a7 52 94 2b 12 46 4c 04 8b 7c 9a 04 70 0c 1c 00 54 05 c0 3f a4 4a 51 31 d0 e1 69 37 78 f9 09 05 16 ef ad 80 f1 52 4d 52 e2 92 8a 16 7b ae 35 52 b1 8a 39 58 43 0f 73 19 9b 91 c1 9a b6 f9 c5 17 c8 0b 17 c8 5d c9 1d 85 ad c2 96 0e 00 fc 18 94 88 6b 11 06 c4 8e 0a 3a 0b c5 de d3 c3 a2 80 80 f0 36 e0 56 85 01 70 0d e4 e3 5b b3 d7 c9 51 55 56 22 fa f7 83 85 42 a1 64 b1 0d 64 f0 aa ad b1 e8 11 0b 2b 4c f9 d5 b3 52 54 e5 dc ca cd 4b 33 d2 07 e8 31 56 f7 f3 41 62 2b 99 d7 cd 06 12 56 02 c9 28 c9 a9 2d 19 49 d5 f0 81 12 14 9e cf 1a 87 00 fa 18 99 56 54 70 51 d4 84 16 c5 15 8b dd 80 38 81 35 73 3c 53 10 b9 45 83 12 ab a0 11 bd 50 c0 b1 2b 5e 2b 43 9f 58 14 d3 a5 a3 d7 84 de 48 92 76 41 3b e6 cb de 8b 3b b0 da 10 b9 21 60 5b 05 9e ae 2f ca 28 9e ee 6d b2 13 e0 f4 40 Data Ascii: R+FL\|pT?JQ1i7xRMR{5R9XCs]k:6Vp[QUV"Bdd+LRTK31VAb+V(-IVTpQ85s<SEP+^+CXHvA;;!`[/(m@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.5	49887	142.250.186.68	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:20 UTC	1499	OUT	GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&is_vtc=0&ptype=f_view&random=479255847&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
2024-07-02 22:25:20 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 22:25:20 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:20 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.5	49889	142.250.186.68	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:20 UTC	1192	OUT	GET /js/th/jRfVs40gTXMRpWu0B8K2-2MIOM9vkusCAZGFEOBnG6M.js HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
2024-07-02 22:25:20 UTC	812	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/botguard-scs Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="botguard-scs" Report-To: {"group":"botguard-scs","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/botguard-scs"}]} Content-Length: 53009 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 27 Jun 2024 13:30:36 GMT Expires: Fri, 27 Jun 2025 13:30:36 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 25 Jun 2024 11:30:00 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 464084 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:20 UTC	578	IN	Data Raw: 2f 2f 23 20 73 6f 75 72 63 65 4d 61 70 70 69 6e 67 55 52 4c 3d 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3b 62 61 73 65 36 34 2c 65 79 4a 32 5a 58 4a 7a 61 57 39 75 49 6a 6f 67 4d 79 77 69 63 32 39 31 63 6d 4e 6c 63 79 49 36 57 79 49 69 58 53 77 69 63 32 39 31 63 6d 4e 6c 63 30 4e 76 62 6e 52 6c 62 6e 51 69 4f 6c 73 69 49 43 4a 64 4c 43 4a 75 59 57 31 6c 63 79 49 36 57 79 4a 6a 62 47 39 7a 64 58 4a 6c 52 48 6c 75 59 57 31 70 59 30 4a 31 64 48 52 76 62 69 4a 64 4c 43 4a 74 59 58 42 77 61 57 35 6e 63 79 49 36 49 6b 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 37 51 55 46 42 51 54 74 42 51 55 46 42 4f 30 46 42 51 55 45 69 66 51 3d 3d 0a 28 66 75 6e 63 74 69 6f 6e 28 Data Ascii: //# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==(function(
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 3d 64 2c 67 3d 34 31 3b 65 6c 73 65 7b 69 66 28 67 3d 3d 34 34 29 72 65 74 75 72 6e 20 4b 3b 67 3d 3d 33 35 3f 28 41 3d 37 31 2c 67 3d 35 33 29 3a 67 3d 3d 35 33 26 26 28 67 3d 45 2e 63 6f 6e 73 6f 6c 65 3f 39 32 3a 78 29 7d 7d 7d 63 61 74 63 68 28 6c 29 7b 69 66 28 41 3d 3d 37 31 29 74 68 72 6f 77 20 6c 3b 41 3d 3d 79 26 26 28 6d 3d 6c 2c 67 3d 33 35 29 7d 7d 2c 45 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 78 29 7b 72 65 74 75 72 6e 20 47 2e 63 61 6c 6c 28 74 68 69 73 2c 78 29 7d 3b 28 30 2c 65 76 61 6c 29 28 66 75 6e 63 74 69 6f 6e 28 78 2c 79 29 7b 72 65 74 75 72 6e 28 79 3d 4a 28 34 2c 37 2c 39 39 2c 38 37 2c 22 65 72 72 6f 72 22 2c 22 61 64 22 2c 6e 75 6c 6c 29 29 26 26 78 2e 65 76 61 6c 28 79 2e 63 72 65 61 74 65 53 63 72 Data Ascii: =d,g=41;else{if(g==44)return K;g==35?(A=71,g=53):g==53&&(g=E.console?92:x)}}}catch(l){if(A==71)throw l;A==y&&(m=l,g=35)}},E=this\|\|self,f=function(x){return G.call(this,x)};(0,eval)(function(x,y){return(y=J(4,7,99,87,"error","ad",null))&&x.eval(y.createScr
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 32 3a 38 38 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 39 37 29 6c 3d 28 55 3d 57 29 3f 38 33 3a 39 30 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 31 39 29 6c 3d 41 3f 35 37 3a 31 32 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 38 33 29 74 68 69 73 2e 43 3d 55 2c 6c 3d 31 34 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 35 39 29 41 3d 28 4f 3d 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 28 41 2e 70 72 6f 74 6f 74 79 70 65 29 29 26 26 4f 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 6c 3d 31 35 3b 65 6c 73 65 20 69 66 28 6c 3d 3d 38 36 29 7b 66 6f 72 28 47 20 69 6e 20 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 42 28 28 4f 3d 7b 7d 2c 31 31 29 2c 22 22 2c 67 29 2c 66 75 6e 63 74 69 6f 6e 28 66 29 7b 4f 5b 66 5d 3d 74 72 75 65 7d 29 2c Data Ascii: 2:88;else if(l==97)l=(U=W)?83:90;else if(l==19)l=A?57:12;else if(l==83)this.C=U,l=14;else if(l==59)A=(O=Object.getPrototypeOf(A.prototype))&&O.constructor,l=15;else if(l==86){for(G in Array.prototype.forEach.call(B((O={},11),"",g),function(f){O[f]=true}),
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 38 39 3a 32 33 3b 65 6c 73 65 20 69 66 28 45 3d 3d 35 34 29 45 3d 78 2b 36 3e 3e 33 3d 3d 32 3f 33 36 3a 39 34 3b 65 6c 73 65 20 69 66 28 45 3d 3d 35 36 29 45 3d 79 3f 33 35 3a 35 38 3b 65 6c 73 65 20 69 66 28 45 3d 3d 34 32 29 79 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 74 68 69 73 2e 6e 29 2c 79 3c 35 30 26 26 28 74 68 69 73 2e 4f 5b 79 5d 3d 67 29 2c 45 3d 38 33 3b 65 6c 73 65 20 69 66 28 45 3d 3d 32 35 29 74 68 69 73 2e 6e 2b 2b 2c 45 3d 38 36 3b 65 6c 73 65 20 69 66 28 45 3d 3d 32 32 29 74 68 69 73 5b 74 68 69 73 2b 22 22 5d 3d 74 68 69 73 2c 45 3d 36 36 3b 65 6c 73 65 20 69 66 28 45 3d 3d 31 30 29 45 3d 32 37 3b 65 6c 73 65 20 69 66 28 45 3d 3d 33 35 29 45 3d 74 79 70 65 6f 66 20 67 21 3d 3d 22 66 75 6e 63 74 69 Data Ascii: 89:23;else if(E==54)E=x+6>>3==2?36:94;else if(E==56)E=y?35:58;else if(E==42)y=Math.floor(Math.random()*this.n),y<50&&(this.O[y]=g),E=83;else if(E==25)this.n++,E=86;else if(E==22)this[this+""]=this,E=66;else if(E==10)E=27;else if(E==35)E=typeof g!=="functi
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 29 7b 63 61 73 65 20 31 3a 45 3d 6d 3f 22 64 69 73 61 62 6c 65 22 3a 22 65 6e 61 62 6c 65 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 57 3a 45 3d 6d 3f 22 68 69 67 68 6c 69 67 68 74 22 3a 22 75 6e 68 69 67 68 6c 69 67 68 74 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 79 3a 45 3d 6d 3f 22 61 63 74 69 76 61 74 65 22 3a 22 64 65 61 63 74 69 76 61 74 65 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 4f 3a 45 3d 6d 3f 22 73 65 6c 65 63 74 22 3a 22 75 6e 73 65 6c 65 63 74 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 47 3a 45 3d 6d 3f 22 63 68 65 63 6b 22 3a 22 75 6e 63 68 65 63 6b 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 33 32 3a 45 3d 6d 3f 22 66 6f 63 75 73 22 3a 22 62 6c 75 72 22 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 36 34 3a 45 3d 6d 3f 22 6f 70 65 Data Ascii: ){case 1:E=m?"disable":"enable";break a;case W:E=m?"highlight":"unhighlight";break a;case y:E=m?"activate":"deactivate";break a;case O:E=m?"select":"unselect";break a;case G:E=m?"check":"uncheck";break a;case 32:E=m?"focus":"blur";break a;case 64:E=m?"ope
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 38 34 3a 55 3d 3d 38 36 3f 28 41 3d 57 2c 55 3d 36 39 29 3a 55 3d 3d 33 30 3f 28 74 79 70 65 6f 66 20 67 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 41 3d 67 3a 28 67 5b 49 55 5d 7c 7c 28 67 5b 49 55 5d 3d 66 75 6e 63 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 67 2e 68 61 6e 64 6c 65 45 76 65 6e 74 28 45 29 7d 29 2c 41 3d 67 5b 49 55 5d 29 2c 55 3d 38 39 29 3a 55 3d 3d 38 34 3f 28 70 28 67 2c 79 2c 57 29 2c 57 5b 6a 4a 5d 3d 32 37 39 36 2c 55 3d 35 38 29 3a 55 3d 3d 33 37 3f 55 3d 33 35 3a 55 3d 3d 31 38 3f 55 3d 67 2e 4d 34 3f 34 35 3a 36 32 3a 55 3d 3d 37 31 26 26 28 55 3d 28 28 78 7c 38 29 26 37 29 3d 3d 31 3f 33 30 3a 38 39 29 7d 7d 2c 6b 47 3d 66 75 6e 63 74 69 6f 6e 28 78 2c 67 2c 79 2c 57 2c 47 2c 4f 2c 6d 2c 55 2c 41 2c 45 2c 4b 2c 6c 29 7b 66 6f Data Ascii: 84:U==86?(A=W,U=69):U==30?(typeof g==="function"?A=g:(g[IU]\|\|(g[IU]=function(E){return g.handleEvent(E)}),A=g[IU]),U=89):U==84?(p(g,y,W),W[jJ]=2796,U=58):U==37?U=35:U==18?U=g.M4?45:62:U==71&&(U=((x\|8)&7)==1?30:89)}},kG=function(x,g,y,W,G,O,m,U,A,E,K,l){fo
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 59 2c 74 68 69 73 2e 63 6c 69 65 6e 74 58 3d 67 2e 63 6c 69 65 6e 74 58 21 3d 3d 76 6f 69 64 20 30 3f 67 2e 63 6c 69 65 6e 74 58 3a 67 2e 70 61 67 65 58 2c 74 68 69 73 2e 63 6c 69 65 6e 74 59 3d 67 2e 63 6c 69 65 6e 74 59 21 3d 3d 76 6f 69 64 20 30 3f 67 2e 63 6c 69 65 6e 74 59 3a 67 2e 70 61 67 65 59 2c 74 68 69 73 2e 73 63 72 65 65 6e 58 3d 67 2e 73 63 72 65 65 6e 58 7c 7c 30 2c 74 68 69 73 2e 73 63 72 65 65 6e 59 3d 67 2e 73 63 72 65 65 6e 59 7c 7c 30 2c 41 3d 36 35 3b 65 6c 73 65 20 69 66 28 41 3d 3d 31 33 29 41 3d 28 57 26 31 32 31 29 3d 3d 57 3f 35 32 3a 39 30 3b 65 6c 73 65 20 69 66 28 41 3d 3d 34 35 29 4f 3d 67 2e 74 6f 45 6c 65 6d 65 6e 74 2c 41 3d 39 35 3b 65 6c 73 65 20 69 66 28 41 3d 3d 37 34 29 41 3d 4f 3f 39 35 3a 39 39 3b 65 6c 73 65 20 69 Data Ascii: Y,this.clientX=g.clientX!==void 0?g.clientX:g.pageX,this.clientY=g.clientY!==void 0?g.clientY:g.pageY,this.screenX=g.screenX\|\|0,this.screenY=g.screenY\|\|0,A=65;else if(A==13)A=(W&121)==W?52:90;else if(A==45)O=g.toElement,A=95;else if(A==74)A=O?95:99;else i
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 64 65 7c 7c 28 47 3d 3d 22 6b 65 79 70 72 65 73 73 22 3f 67 2e 6b 65 79 43 6f 64 65 3a 30 29 2c 74 68 69 73 2e 63 74 72 6c 4b 65 79 3d 67 2e 63 74 72 6c 4b 65 79 2c 74 68 69 73 2e 61 6c 74 4b 65 79 3d 67 2e 61 6c 74 4b 65 79 2c 74 68 69 73 2e 73 68 69 66 74 4b 65 79 3d 67 2e 73 68 69 66 74 4b 65 79 2c 74 68 69 73 2e 6d 65 74 61 4b 65 79 3d 67 2e 6d 65 74 61 4b 65 79 2c 74 68 69 73 2e 70 6f 69 6e 74 65 72 49 64 3d 67 2e 70 6f 69 6e 74 65 72 49 64 7c 7c 30 2c 74 68 69 73 2e 70 6f 69 6e 74 65 72 54 79 70 65 3d 74 79 70 65 6f 66 20 67 2e 70 6f 69 6e 74 65 72 54 79 70 65 3d 3d 3d 22 73 74 72 69 6e 67 22 3f 67 2e 70 6f 69 6e 74 65 72 54 79 70 65 3a 5a 32 5b 67 2e 70 6f 69 6e 74 65 72 54 79 70 65 5d 7c 7c 22 22 2c 74 68 69 73 2e 73 74 61 74 65 3d 67 2e 73 74 61 Data Ascii: de\|\|(G=="keypress"?g.keyCode:0),this.ctrlKey=g.ctrlKey,this.altKey=g.altKey,this.shiftKey=g.shiftKey,this.metaKey=g.metaKey,this.pointerId=g.pointerId\|\|0,this.pointerType=typeof g.pointerType==="string"?g.pointerType:Z2[g.pointerType]\|\|"",this.state=g.sta
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 28 4b 3d 35 38 3b 4b 21 3d 33 34 3b 29 69 66 28 4b 3d 3d 38 30 29 7b 69 66 28 57 2e 75 2e 6c 65 6e 67 74 68 29 7b 57 2e 4d 6a 3d 28 57 2e 70 66 3d 28 57 2e 70 66 26 26 30 28 29 2c 74 72 75 65 29 2c 79 29 3b 74 72 79 7b 41 3d 57 2e 59 28 29 2c 57 2e 65 41 3d 30 2c 57 2e 48 69 3d 41 2c 57 2e 4c 66 3d 30 2c 57 2e 47 4a 3d 41 2c 4f 3d 51 28 36 2c 6e 75 6c 6c 2c 33 32 2c 32 35 34 2c 32 35 2c 79 2c 57 29 2c 55 3d 47 3f 30 3a 31 30 2c 6d 3d 57 2e 59 28 29 2d 57 2e 48 69 2c 57 2e 76 69 2b 3d 6d 2c 57 2e 6c 49 26 26 57 2e 6c 49 28 6d 2d 57 2e 69 2c 57 2e 5a 2c 57 2e 57 2c 57 2e 4c 66 29 2c 57 2e 5a 3d 66 61 6c 73 65 2c 57 2e 69 3d 30 2c 57 2e 57 3d 66 61 6c 73 65 2c 6d 3c 55 7c 7c 57 2e 5a 57 2d 2d 3c 3d 30 7c 7c 28 6d 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 6d 29 2c Data Ascii: (K=58;K!=34;)if(K==80){if(W.u.length){W.Mj=(W.pf=(W.pf&&0(),true),y);try{A=W.Y(),W.eA=0,W.Hi=A,W.Lf=0,W.GJ=A,O=Q(6,null,32,254,25,y,W),U=G?0:10,m=W.Y()-W.Hi,W.vi+=m,W.lI&&W.lI(m-W.i,W.Z,W.W,W.Lf),W.Z=false,W.i=0,W.W=false,m<U\|\|W.ZW--<=0\|\|(m=Math.floor(m),
2024-07-02 22:25:20 UTC	1390	IN	Data Raw: 2c 55 2c 41 2c 45 2c 4b 29 7b 66 6f 72 28 4b 3d 37 36 3b 4b 21 3d 35 35 3b 29 69 66 28 4b 3d 3d 32 39 29 4b 3d 31 38 3b 65 6c 73 65 20 69 66 28 4b 3d 3d 39 38 29 6d 3d 74 79 70 65 6f 66 20 4f 2c 55 3d 6d 21 3d 67 3f 6d 3a 4f 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 4f 29 3f 22 61 72 72 61 79 22 3a 6d 3a 22 6e 75 6c 6c 22 2c 45 3d 55 3d 3d 47 7c 7c 55 3d 3d 67 26 26 74 79 70 65 6f 66 20 4f 2e 6c 65 6e 67 74 68 3d 3d 79 2c 4b 3d 35 38 3b 65 6c 73 65 20 69 66 28 4b 3d 3d 31 38 29 4b 3d 41 3c 55 3f 35 30 3a 32 36 3b 65 6c 73 65 20 69 66 28 4b 3d 3d 38 39 29 67 28 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 6c 28 79 29 7d 29 2c 45 3d 5b 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 79 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 5d 2c 4b 3d 32 31 3b 65 6c 73 Data Ascii: ,U,A,E,K){for(K=76;K!=55;)if(K==29)K=18;else if(K==98)m=typeof O,U=m!=g?m:O?Array.isArray(O)?"array":m:"null",E=U==G\|\|U==g&&typeof O.length==y,K=58;else if(K==18)K=A<U?50:26;else if(K==89)g(function(l){l(y)}),E=[function(){return y},function(){}],K=21;els

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.5	49892	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:20 UTC	1065	OUT	GET /an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:21 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 1134 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:32:47 GMT Expires: Tue, 02 Jul 2024 23:32:47 GMT Cache-Control: public, max-age=7200 Age: 3154 ETag: "1627481114" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:21 UTC	733	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 25 49 44 41 54 78 9c ed da 3f 88 5d 45 14 c7 f1 f3 4b d6 18 2c 2c 34 4b fc 53 68 a3 4d 22 29 15 22 6c 20 49 13 6c 04 4b 0b b1 12 ec 05 13 82 20 98 40 6c ad 4d 65 13 1b 0b 03 21 21 82 89 44 b0 8e 8d 16 82 cd 06 35 82 68 70 55 36 c7 e6 6e b8 dc 9d 33 77 66 ee 7d 9b dd e4 fb 81 25 ef cd 9d 73 ce dc 79 f3 ee bf 17 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR<qsBIT\|d%IDATx?]EK,,4KShM")"l IlK @lMe!!D5hpU6n3wf}%sy3
2024-07-02 22:25:21 UTC	401	IN	Data Raw: 8b 6b ec 8b 23 e9 97 61 5b d5 c2 ea 2e 7b 92 13 3b c6 dd df 69 89 ab ac f1 67 43 d8 bb b9 8d 92 76 97 26 92 74 b3 77 6d f8 69 d4 6f 3b 2c ae f4 93 86 ec 02 fa 27 68 df 93 cc 1f 9d 57 27 9c 6f 6f 49 7a 7a ce 6b a0 9a 31 9a d9 5e 49 d1 24 14 e5 2e 51 b3 2f 15 73 79 d8 cc be 29 a9 33 cc 39 72 fa 5e d8 23 99 28 4f ee 69 f2 59 33 7b 7f 90 f8 29 49 b7 6a 07 d4 8b 3f 2a e9 6a b0 2d f5 01 7f 2f e9 60 94 2f 58 5c 6b 96 79 82 5e 50 b3 8a bb 9f 4b 8c 6b f8 50 74 cd cc f6 4e ad b5 93 64 8f 4c 25 2b 34 3a 62 45 f1 66 f6 9b a4 e5 91 1c c5 e3 70 f7 e3 66 76 79 6c 9c 29 53 16 d6 c4 39 7a e0 8f 58 63 d7 58 4f 26 92 df ae 18 cb ef 89 b6 7d 05 77 9d 66 66 17 4a 0a 48 ba 92 6a 5f f4 75 4c 2f ff 72 6a 9b bb 7f e0 ee 4b 5b 75 3d e5 ee 47 52 7f 99 fe 91 33 73 0d 68 93 89 db 57 Data Ascii: k#a[.{;igCv&twmio;,'hW'ooIzzk1^I$.Q/sy)39r^#(OiY3{)Ij?*j-/`/X\ky^PKkPtNdL%+4:bEfpfvyl)S9zXcXO&}wffJHj_uL/rjK[u=GR3shW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.5	49890	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:20 UTC	1040	OUT	GET /vi/mIHHfNVfhPk/maxresdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:21 UTC	658	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 168781 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:21:23 GMT Expires: Wed, 03 Jul 2024 00:21:23 GMT Cache-Control: public, max-age=7200 ETag: "1712203833" Content-Type: image/jpeg Vary: Origin Age: 238 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:21 UTC	732	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 01 06 07 08 09 0a ff c4 00 52 10 00 02 01 02 05 02 04 03 06 05 03 01 05 05 00 13 01 02 11 00 03 04 05 12 21 31 06 41 13 22 51 61 07 71 81 08 14 32 91 a1 f0 Data Ascii: JFIFCC"R!1A"Qaq2
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 Data Ascii: PQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEP
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: c3 0e 5f 45 75 83 f0 a3 26 21 74 62 31 ed a8 9d f5 a0 ff 00 f6 2a 5d 8f 83 79 2d c0 49 c5 63 fd 87 88 9f af 92 92 e4 c5 71 ca 2b b4 b7 c1 6c 8a 25 71 79 81 f6 f1 2d c8 f9 f9 29 c4 f8 21 92 3e 92 31 79 81 5e 09 17 2d f3 ff 00 da 53 26 2b 89 51 5d cb 0d f0 3b 21 ba 17 5e 23 33 0c 47 02 ed b0 27 e7 a3 61 4e bf c0 ae 9d 0c c0 63 33 39 1a 77 37 6d c7 b9 fc 1f 2a 64 c3 84 51 5d d6 f7 c0 9c 82 d5 c5 5f be e6 10 d1 04 dd b7 c4 f3 f8 28 b1 f0 37 a7 2e 3a a1 c7 66 52 54 c9 f1 6d 80 0f cf 47 15 4c 38 55 15 de 3f f6 0b 90 e9 23 ef b9 80 7e c3 c5 b6 7f 3f 26 d5 86 f8 0b 91 29 8f bd 66 5f 2f 16 dc cf ff 00 69 53 30 c3 84 51 5d cf ff 00 61 bd 3e c4 05 c5 e6 40 93 1b dd b7 ff 00 e2 eb 2f f0 2f 20 50 df f8 ac c8 10 24 01 76 d9 ff 00 f6 29 98 61 c2 e8 ae e8 df 02 fa 7c 98 Data Ascii: _Eu&!tb1]y-Icq+l%qy-)!>1y^-S&+Q];!^#3G'aNc39w7mdQ]_(7.:fRTmGL8U?#~?&)f_/iS0Q]a>@// P$v)a\|
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: f4 b2 82 4e 3b 38 31 bc 2d fb 5c 7f f4 e9 4b f6 5c e9 77 61 18 fc dc 8e 7f fc e2 d7 f5 f0 a8 61 e5 fa 2b d4 47 ec b7 d2 ab a7 56 63 9c 03 30 7f 8b 6b 6f fe f7 58 7f b2 e7 4b 2c 93 98 67 00 08 11 e3 5a 26 7f fa 75 32 62 bc bd 45 7a 79 be cc 1d 28 c4 0b 59 86 72 cd 3d ef 5a 81 f5 f0 e9 5f fe 4b 7d 31 33 fe a1 9c 05 93 b9 bb 6b 8f fe 9d 55 fe 6b cb f4 57 a8 57 ec bd d2 6d 73 49 cc 73 95 00 ef 37 ad 49 ff 00 ef 5f d6 90 3e cb fd 2c d7 23 fd 43 36 02 4e fe 3d a3 b7 ff 00 4e 9c d3 2f 30 d1 5e 9e 3f 65 fe 97 71 fc 3c 76 70 4c 4c 78 d6 8c ff 00 f7 ba 69 7e cc dd 2c cd 07 1f 9b ac 09 61 e3 5a 31 ff 00 de e9 f6 d7 f3 5e 66 a2 bd 34 ff 00 66 3e 98 00 95 c7 67 04 02 7f f7 d6 a2 3e 7e 1d 23 ff 00 c9 9b a6 15 58 b6 3f 36 da 38 bf 6a 3d ff 00 f7 55 70 98 79 a2 8a f4 8d Data Ascii: N;81-\K\waa+GVc0koXK,gZ&u2bEzy(Yr=Z_K}13kUkWWmsIs7I_>,#C6N=N/0^?eq<vpLLxi~,aZ1^f4f>g>~#X?68j=Upy
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 7d 16 6c 90 be 46 2b dc c4 0f ce 9d 62 cd 2f 00 01 b6 9f 4f dc 7e b4 59 76 4b 41 00 88 7d 5b 8d e2 23 f2 ac f9 95 48 32 d6 89 9d 23 d4 0e 48 fe f4 f4 60 ee 1d 5b c4 56 13 ad 77 68 f7 f4 fc e9 d5 b1 e1 80 54 82 c0 6e ab fc bb d3 3a 63 43 30 82 fb 88 da 07 bd 3b 65 56 ed d5 5d 51 a9 87 98 6c 00 ab 8d ad ce 32 13 41 20 38 95 e3 cb c9 35 9b 97 86 16 cd d6 20 ca ec 1b 91 34 f5 99 b8 eb 71 01 16 ad f7 22 3d c5 56 66 d7 7f 84 88 67 5b b6 a3 3d ea e3 33 39 49 f2 85 84 b0 6f e2 6d a3 49 66 68 8a da 6d 5f 2d 71 09 55 7e 0c 76 15 43 95 e1 8a df b9 a8 34 a8 e3 4e fb ff 00 4a bc b6 da 2d 8d 3c 96 dd 67 9f 59 ac 91 25 18 69 8d 23 4a 89 f9 d3 d6 9c eb 0e db ce db 9e 4f bd 47 b6 c8 e8 02 8d 2c 4c 1d bf 5a 90 2d f9 16 4e a9 27 83 e9 4c 4a d6 12 ad bc c8 92 6d c6 e3 fd d5 Data Ascii: }lF+b/O~YvKA}[#H2#H`[VwhTn:cC0;eV]Ql2A 85 4q"=Vfg[=39IomIfhm_-qU~vC4NJ-<gY%i#JOG,LZ-N'LJm
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 71 84 86 b6 a8 b7 15 9e 3d 02 99 1c 9f df e5 45 94 7b 6b 6c 91 ad 87 9a 07 f4 fd 29 a0 74 db 05 8c 96 27 8d c9 f7 f9 54 91 89 25 6d 86 00 05 5d 24 8e c6 7b fb ff 00 9a b8 de 12 b0 eb 72 06 eb ac ec 34 ed ed 58 16 ee 32 dc 28 0b 23 ec 47 02 47 b7 a5 22 e5 c6 6f 0c 3a 96 d3 ba b7 20 77 fa 6f 1b 52 b5 f8 17 4a bc 16 51 e6 61 04 6f ed 4f b6 a4 bc 3a 2d 90 8c 03 06 43 b1 6e 01 35 81 6d 0b c9 5f 31 59 00 6d 03 dc d6 6d a8 12 5d c9 44 52 48 1d cf 6a 5c dc 22 e3 c1 52 e0 04 91 03 f2 ab 27 aa ce ef 21 36 c6 b4 0a 01 56 73 20 f6 61 3e bf 9d 3b 87 d3 69 9d c7 98 81 26 78 fd ff 00 9a 8e 96 fc 7b 9a 11 48 04 41 10 4c 7c a9 7a 48 50 0b 17 df 70 04 7c e7 f4 a6 a6 8c fc 1f d6 08 60 cb aa 01 92 76 de 47 7f a5 2f c6 0f 2c 00 56 53 00 c6 f4 c3 dd 1a 56 06 a5 d3 25 41 30 27 Data Ascii: q=E{kl)t'T%m]${r4X2(#GG"o: woRJQaoO:-Cn5m_1Ymm]DRHj\"R'!6Vs a>;i&x{HAL\|zHPp\|`vG/,VSV%A0'
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 59 5b c6 da 2b 01 b0 d6 e2 09 ac dd 45 9f 0d 07 e2 36 69 6c bd ac 12 39 44 4f 3b db 4d a7 fc 48 ad 23 16 05 cc b5 6e 32 80 c4 ef 1e 9d a2 ae 2e 05 cf 7a a2 e5 a3 3f c4 67 90 c6 64 0e 05 57 dd c3 93 93 df 2c 3f f2 6e 11 bc 02 37 8f f1 5d 26 ae 17 bb ad ef a4 2e 97 c8 30 e4 05 65 55 86 04 70 77 fe f5 39 d0 35 b2 42 81 06 01 ee 6a ab e1 f8 6c 46 44 aa 90 07 88 56 49 e3 bd 6c 4f 61 4b 9d 5e 5b 7b 41 89 9d b7 8a cd b9 a9 33 d4 43 62 6d f8 61 94 b0 04 b0 6d a0 fa 7c f6 a6 6e ae 9b 60 06 d5 70 1e c7 6f df f8 a9 8f 86 d9 9c 96 04 6e 84 ac 77 8d cd 31 76 d1 10 b1 e6 30 76 11 1f 3a 9d da 60 c9 2f 65 9c 00 18 81 a7 51 e0 52 0b b5 b6 20 f0 37 62 2a 56 29 8d e7 b8 dc 6a 24 ac 0d 8e dd a9 87 b7 73 11 74 cf 9a e1 24 6a 68 20 ed ea 7d aa fc 64 92 f6 1b 55 66 55 42 48 b6 Data Ascii: Y[+E6il9DO;MH#n2.z?gdW,?n7]&.0eUpw95BjlFDVIlOaK^[{A3Cbmam\|n`ponw1v0v:`/eQR 7b*V)j$st$jh }dUfUBH
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 00 cd 3f 61 d5 54 9f 29 06 20 02 2a 5f 1c fb 67 39 5f 0f 25 ab 50 09 24 ce b3 c4 81 c0 fc ea e3 26 b2 d9 9e 36 ce 1a d9 d7 7d d8 00 ad c9 9e de 95 ae 35 ff 00 e0 69 d4 48 42 60 4e cb 3f e6 b6 2e 8c c6 d9 c0 e7 d8 6b d7 2d 6b 54 1a e1 84 86 23 81 ef cd 66 6d 76 ea 56 7a 4f 17 96 2d bb 78 ab 56 2c dd b8 09 54 5b c8 c0 41 e0 c1 34 d6 33 07 67 01 a8 fd e3 0f 77 10 a2 7c 2b 6c 78 1c 99 fd 2b 39 9f 50 a5 db 16 de d2 78 77 1a 49 22 00 f7 db f3 fd 2a 83 0f 9d e1 2d 5b c4 9b a9 e2 de ba 42 29 1c 72 0c 4f 35 ad 4e 12 fc 1d bb 8b f3 e8 b8 55 13 54 ca 9e 67 b5 39 86 bb 62 ed bd 2c e2 dd b1 be af 0c 93 1f e7 da a8 2e 63 6d dc bc cd a7 4b ab 10 ba 4e df 97 a5 3b 81 c5 18 6f 0d c3 af 30 47 b7 a5 31 94 ce 2e 97 2f 63 28 ba 43 5e b9 79 40 da 2d 5b 00 7e b4 e2 5f c8 85 96 Data Ascii: ?aT) _g9_%P$&6}5iHB`N?.k-kT#fmvVzO-xV,T[A43gw\|+lx+9PxwI"-[B)rO5NUTg9b,.cmKN;o0G1./c(C^y@-[~_
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 35 52 2f 89 72 56 4a cf 99 77 e3 dc d3 f3 2a 15 8e ca d2 18 71 cf bd 35 71 9f 51 90 cc c6 49 69 1b 7c cf ef 9a d4 b2 68 f4 4a d9 d6 02 80 75 b4 12 cc 67 6f 7a 76 eb ff 00 11 b4 49 91 20 9e 05 34 92 a9 1a 86 a8 98 5e 4d 48 3a 15 49 28 c4 10 1c c6 db 7e c5 4c d9 aa 4f 10 87 4b db 21 a0 a8 fc 0d bc 48 ff 00 a5 2d 18 0b 80 c0 3e 70 24 f7 3c 41 f5 a4 5a 74 d4 89 a5 83 ac c0 8d 87 ce 96 2f 21 1b a0 d3 c2 a9 e1 7d e9 26 67 4b a4 bb 6e a8 a2 da f9 99 88 01 9b 9e 6a 5d cd ae 22 a8 64 80 01 68 dc 83 df f7 ed 50 ec 43 15 56 86 62 49 26 36 9a 90 e7 c4 b8 9a 9c 96 20 29 33 b1 ff 00 a5 24 c6 92 64 f1 6b 7a 54 88 7d 3b 41 9e 7d eb 17 06 b2 c8 aa ba 81 e1 b6 11 1c fe fd 6b 0d a6 c8 76 01 94 ab 08 db 72 08 e7 da 9b d2 cf 70 4c 00 40 0e 1b 8a d6 3d af 0b b6 43 98 08 06 af Data Ascii: 5R/rVJw*q5qQIi\|hJugozvI 4^MH:I(~LOK!H->p$<AZt/!}&gKnj]"dhPCVbI&6 )3$dkzT};A}kvrpL@=C
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 1d b9 db e9 4c 5d b7 e2 bf 91 3c ec 09 3e 95 6b 67 02 b7 2e a8 37 74 80 0f 9a b1 77 2d 1a 03 ea 02 d0 24 42 1d fe 7f 9f ad 26 b4 b3 e5 45 88 b0 80 e9 f1 14 b8 5d 80 fc 27 fe 69 b6 5b 97 02 17 61 00 6d e6 d3 de ae ef e0 f0 da 54 bf fe 60 26 4c fe 54 84 c0 d9 04 b3 a8 7b 47 69 89 f9 56 6d ca 6e 45 18 41 74 c2 34 40 04 03 eb df e9 4a 17 11 0b 2a 00 41 02 41 1b c8 df f5 ab 9b 78 3c 39 2c 85 40 f5 74 dc ef 4e a5 8b 24 b7 f0 75 03 30 c0 77 ef 15 66 9a ce 9e 78 80 00 3d fb 8a c9 49 3e 50 7e 54 6a d4 49 3b c0 da 87 30 76 3c f2 6b 4e 77 e8 90 09 e2 4d 28 05 20 01 2c c7 d0 d6 77 b4 1a 18 6f b6 c6 76 ac 2c 6d 32 37 ab d2 30 57 49 de b2 c3 51 e6 4f b7 6a c5 00 8d e4 4d 40 02 41 99 88 e2 8d a2 37 1b 7e 74 a3 6f 48 93 df d0 f1 48 99 ff 00 9a a8 ce fb 83 db de 8f 31 82 Data Ascii: L]<>kg.7tw-$B&E]'i[amT`&LT{GiVmnEAt4@J*AAx<9,@tN$u0wfx=I>P~TjI;0v<kNwM( ,wov,m270WIQOjM@A7~toHH1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.5	49893	216.58.212.129	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:20 UTC	1109	OUT	GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:21 UTC	543	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 24873 X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:56:00 GMT Expires: Wed, 03 Jul 2024 21:56:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 1761 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:21 UTC	847	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 08 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 08 08 08 0a 0a 0a 0a 0a 0a 08 0a 0a 0a 0a 08 08 0a 0a 0a 08 08 0d 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0a 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 01 90 01 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 00 08 09 ff c4 00 45 10 00 01 02 03 05 05 06 05 02 05 04 00 04 07 01 00 01 00 02 03 04 11 05 12 21 31 f0 06 41 51 61 71 07 13 81 91 a1 b1 22 c1 d1 e1 f1 08 32 14 Data Ascii: JFIFE!1AQaq"2
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 77 1c f7 fd 77 aa db 3a 92 5b 9e be 5a f3 41 19 09 b8 a9 90 0b 86 be eb 48 55 09 ee 53 4e 2a 1f b4 3f 13 9b 4c 8e fc 12 6b db e1 3e 0c 40 f6 e2 2a 38 74 fb a7 ad b3 df 6b 3d b7 33 70 65 e0 be 66 2b cb 19 0c 54 f3 39 00 38 92 72 4e 63 bf 03 f9 35 3c be 3a ed 0b f5 43 39 32 e2 c8 2f 74 18 22 b4 6b 28 1c 40 fe a7 ba 95 3b cd 01 00 57 7a ec c7 85 c5 97 37 9f 0c 85 89 da 64 f5 7f f5 62 dc 39 9b f4 eb 42 5c 0d 7a 57 a2 79 71 e2 31 e5 cb ff 00 84 ef fc c2 3c db 88 7c 47 39 8c c4 87 1a d5 ce 34 68 c0 6f 35 27 93 5c b3 ba c5 7e 73 47 76 c4 39 b0 9f 12 b5 b8 e7 54 7f a4 38 82 7d 0f a2 be ed f8 4f 66 a1 26 ec 47 b2 98 9b 84 0a 0c 33 ca 98 ef ad 6a 84 f9 8a 9b 12 d6 88 d8 94 84 d1 5c 78 9a d3 1c ea 01 e5 81 e4 15 5c 66 8b 1c ae dd 4f 64 fb 53 9a 84 d1 12 13 9c f6 de Data Ascii: ww:[ZAHUSN?Lk>@8tk=3pef+T98rNc5<:C92/t"k(@;Wz7db9B\zWyq1<\|G94ho5'\~sGv9T8}Of&G3j\x\fOdS
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: c0 80 72 35 a2 ab 8e ae e3 3c 73 dc ed ab 8b 2e dd 73 a5 cc 23 8f c5 51 85 70 39 8e 54 38 8f ca c3 3c 75 96 db e1 9d b8 e9 69 69 3d cd 6c 12 09 0f 06 ad e2 06 23 e6 29 cb c5 65 8d 97 6d ae e4 8f a4 fb 28 ed 86 28 0c 83 37 81 70 fe 5b cd 68 4e 1f 09 3c 4e 40 f2 c7 72 c3 29 3e 9d 38 df db bb c9 5a 01 e0 70 f5 af 34 e5 b7 c5 3b 3e e2 77 75 ad 7d 91 62 7b 85 6b c8 3a f9 7d d2 3f 6f 3d fe 6a 57 00 7b a9 82 54 c4 87 17 d5 54 a8 b0 e8 91 a8 af 69 ed 04 4f 72 41 f6 96 1c d6 35 a6 1a dd cb e7 c9 2d e9 7d a3 bc 57 25 37 c9 7a 0a 1c 2f be a9 af 34 68 ad 2c 08 34 3d 75 c5 4c c5 5b f0 b0 03 59 2d 74 c7 62 32 28 e2 9c 2b 02 8c e4 58 51 0a 33 4e fd 72 59 e9 ac 06 5f 2f 6f 9a ac 53 4e 07 1d 70 29 d3 9e 92 61 75 48 39 c3 56 7a 4e d2 18 c0 9f 68 28 6e b5 f2 53 74 69 10 f5 Data Ascii: r5<s.s#Qp9T8<uii=l#)em((7p[hN<N@r)>8Zp4;>wu}b{k:}?o=jW{TTiOrA5-}W%7z/4h,4=uL[Y-tb2(+XQ3NrY_/oSNp)auH9VzNh(nSti
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 66 eb aa 01 ed 6f 0f 74 f4 36 7b 12 ed 1b 48 87 1f 5a c9 69 00 b7 eb bc 7b 26 44 ef 35 a0 96 83 cc 8b bb 58 a2 03 7b dd 7e 14 d3 d1 b7 b1 ea a2 a8 b3 31 b0 23 7e ed 78 fe 68 83 9e d5 d0 e7 48 00 66 6b 8f 8e b2 fb a5 1a 69 66 d8 8a 99 0f 5d 70 f6 d7 8a 9d 99 20 fd b5 55 44 87 3e fa b8 79 7d 54 d6 90 57 47 c3 5a d7 54 6d 2e 11 fa 82 d9 99 71 2c 62 86 86 c4 ef d8 f0 45 45 e7 52 e9 a8 19 8b b9 f9 e6 02 e9 e3 ca b9 f3 91 c4 b6 77 68 db 04 96 80 01 c5 a0 81 43 8e 75 38 90 06 38 0a 57 8a ac e5 a5 86 52 78 74 2e cb ec 18 6f 98 80 e6 e2 5d 1e a4 9a 1f 85 b8 8e 38 93 9f 0c b7 2e 1e 5b 64 af 5b a5 c7 1b 9c ff 00 af b3 ac bc a8 bc 2a fb 6d 78 5d 43 8f 87 35 9d cb 48 ec d9 1b 67 97 62 a6 e6 a9 81 26 76 6e f1 c4 1e ba c5 39 c9 60 fe 38 98 cd 8d 86 69 86 49 7f 25 ad 66 Data Ascii: fot6{HZi{&D5X{~1#~xhHfkif]p UD>y}TWGZTm.q,bEERwhCu88WRxt.o]8.[d[*mx]C5Hgb&vn9`8iI%f
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 34 4b e5 10 4b 9d ea 34 d2 d4 d8 43 0c 96 b2 31 a4 aa 01 1c d5 34 e5 2b 1d 8e b5 d5 23 61 37 24 cc 46 83 bb 5a d5 12 d8 d0 ac 2a 88 51 c3 9e b8 fb 20 04 46 f4 81 84 a5 00 ec 76 b2 fa a6 0e 61 4c c5 2d 54 9d 9e c4 a9 bd dd e8 29 aa 8f 39 8a 55 b0 22 b7 87 aa 8b 15 09 2e ca 63 aa 7e 12 90 c7 0a b6 45 2e fa a9 a7 08 78 6b 45 49 9a f8 94 05 5c 4d 52 c7 9b 35 df 44 15 56 5a 91 c1 e5 45 63 1a e4 5d a8 6c 7b 49 31 1a 5c 5c e6 97 b9 b9 d0 0c 2b e3 96 f4 61 cb f9 69 db 97 49 be 2f e4 82 fe 9a 6c f0 66 58 e3 cd a3 fc aa 49 f9 7a ae 7e b6 fe 0d 7e 2e 6b 95 f5 16 d1 6c 87 7c 5a 5c ea 43 6e 2e 18 63 d6 bb bc 17 87 c1 96 9f 51 cf 2d b1 cc f6 92 db 34 88 24 ec d8 6f 0c 1f 04 48 a1 c1 91 08 38 86 86 dd c2 95 a1 2f 00 91 c3 15 ed 70 e1 2c de 59 3c be 6b 67 f6 62 cf d8 72 Data Ascii: 4KK4C14+#a7$FZ*Q FvaL-T)9U".c~E.xkEI\MR5DVZEc]l{I1\\+aiI/lfXIz~~.kl\|Z\Cn.cQ-4$oH8/p,Y<kgbr
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 1c c6 36 0b 8b 77 1a 37 80 e3 e8 bd ae 97 8e 4b dc f0 7e 4f 93 58 4c 23 0a e9 b5 e9 6d f3 92 1f 2b 14 9c 91 b1 74 9b 2f 0b 8a 78 fb 17 d1 ce 83 f1 0a 79 a7 53 f4 d0 4a 3e a1 74 63 7c 39 aa 04 fb a8 75 f3 58 e7 75 5a e1 36 04 b4 52 4f be b5 ee 96 3e 4f 2f 03 3d c6 9d 35 b9 6b 51 b0 cb f9 74 e8 96 ca 9d 44 a1 9a f6 9e 1a d6 69 88 2b 45 56 5e d7 0b 0e 15 11 21 da 38 03 2d ea 91 5e 62 70 88 72 4d 26 45 82 38 eb a2 56 1c a8 31 a1 0d 75 59 d8 bd 96 1b 69 4e 48 36 38 37 c1 0c 8a 12 a0 ed 70 d7 e1 23 34 8e 78 24 0c a2 34 04 86 dd 6a 9c d3 02 c3 0a 80 80 53 59 a5 41 c1 28 1e 89 13 cb 5a c9 50 0d 91 b7 1d 6b 5c e7 6a 90 f8 c5 4d a6 f0 6e b2 44 03 c3 62 7a 49 22 91 d7 f0 a6 a9 59 68 b8 81 50 b2 c9 ae 3f ec 08 51 ea 39 fa 29 d9 e8 1b c7 14 8c 36 c4 25 5c a9 b1 59 6a Data Ascii: 6w7K~OXL#m+t/xySJ>tc\|9uXuZ6RO>O/=5kQtDi+EV^!8-^bprM&E8V1uYiNH687p#4x$4jSYA(ZPk\jMnDbzI"YhP?Q9)6%\Yj
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 79 78 b2 e3 ba ac f8 79 f1 e5 9b c5 12 41 d5 34 1c 71 d7 e1 46 33 cb 6c ae 9a 01 01 ad c7 32 7c 17 46 a4 61 bb 56 16 73 0d 69 c7 2e 89 e1 bd a7 3d 69 3a 3e 54 d7 55 be 4c 71 f6 a9 8d 51 86 f0 57 2d 75 15 d0 4e b4 55 49 59 db a0 a2 4b ef 0a fb 59 f7 15 8c c2 84 eb 34 68 c2 bb c7 eb ec a3 4d 36 b4 63 70 5b b0 34 67 e2 a0 27 b7 21 87 54 07 bb ae a9 c0 4a 6e aa a2 38 42 1c 51 a2 d8 0f 84 83 80 ba 1f ba 0c 29 98 6a 6c 30 ee 74 d6 bd 94 e9 4c 11 76 bc 96 69 28 3e a9 90 26 21 ae 5b d2 d8 3c d7 a2 40 48 0d 2a a0 48 63 7e 9a f4 54 05 6c 24 b4 5b 3c 8d e3 ed ec a6 c5 40 af 28 50 0f 8f 4c 7c 90 62 42 7d 75 af 15 34 de 89 2a 1d bb 5e 69 1c 56 ba 5c b4 a5 bd b4 d0 d0 26 ea 68 7c f7 7b a2 a7 4b 16 64 88 9b e0 c7 84 c8 06 47 ae a8 98 39 d1 29 c3 14 80 4f 88 96 d4 87 38 Data Ascii: yxyA4qF3l2\|FaVsi.=i:>TULqQW-uNUIYKY4hM6cp[4g'!TJn8BQ)jl0tLvi(>&![<@HHc~Tl$[<@(PL\|bB}u4^iV\&h\|{KdG9)O8
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 6c ff 00 63 b1 e2 10 62 0e e9 9b c9 a1 71 e4 1b f5 c0 73 5d fc 3d 0e 79 df cb c4 79 9c fd 7e 18 4f c7 cd 75 ab 03 63 a0 4b 34 77 6c 17 a9 fb ce 2f 3c 71 dd e1 82 fa 4e 0e 93 0e 39 e2 3e 67 9b ac cf 92 f9 ab 28 32 c5 ee a9 c8 2e ed 49 3c 38 3c e5 5a b9 68 54 0b 0b e5 d3 05 8a 30 44 46 4f 87 ff 00 5d 9b 16 62 cb 88 cd 18 c1 88 d7 7f b4 b8 02 7a 00 49 f0 5c dd 5e 1b c3 6e ef 8d ce ce 4d 2c 3b 1c da 01 1e 4e 09 39 dd 0d 3d 5b 81 5f 1d cb 8e b2 7e ab d3 72 77 61 2b 43 6c d8 e4 62 d3 45 94 75 65 36 ab 89 2a 2a 09 15 03 3a 6f dc b4 95 cd d9 36 6b 66 5b fd 38 75 54 73 19 f4 b8 d9 6b 2c bd d5 35 a2 9c ab 7c 26 9a c7 4a 18 8e ba 32 68 23 c5 4c 8d 7d b3 3d 99 6c f1 7e d0 02 31 12 f2 4d 27 fc 9e f2 17 b7 f1 d8 6f 2d be 33 e7 f9 35 8c 8f b8 24 9d 50 be 81 f0 98 d4 86 Data Ascii: lcbqs]=yy~OucK4wl/<qN9>g(2.I<8<ZhT0DFO]bzI\^nM,;N9=[_~rwa+ClbEue6**:o6kf[8uTsk,5\|&J2h#L}=l~1M'o-35$P
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: e0 00 c4 9a 00 11 21 5b 27 b4 47 4d bd ff 00 b0 5c 69 fe b7 b7 e2 a7 fa 58 69 43 c0 bf 2a 8a b1 d8 85 7a 91 9d ca df 49 10 65 6e 80 2a 5d cc e2 4f 33 40 07 90 1d 06 49 2b 45 88 f4 e0 b5 32 1b 94 a9 ee fd 1a 1b 44 8f 34 29 11 dc 30 f2 18 fa a7 66 8a 5d be 2e da db 43 bc 99 8a e1 bd ee a7 81 a2 f9 6e a6 ef 92 d7 d9 74 b3 5c 78 c5 7c 27 f2 fb 79 2e 47 60 ae 18 7e 52 31 65 f7 7b 24 4b 06 0f 2d 6b 72 b4 8b 11 01 e6 81 5c 10 62 57 5e 8a d0 65 ee a8 82 87 14 e0 a8 91 e6 5c dc 3d 7a eb d9 46 d4 e5 da fc ac d2 78 6e f4 81 c5 ea 54 46 fe 51 a3 19 dc 90 41 c6 85 c1 06 6b 52 56 cf 0e a6 b5 af 14 24 0b d5 35 4a 2a bd 16 74 35 54 ba 12 6d e1 1a b8 d7 5a d6 09 16 80 88 71 52 b8 23 69 f6 aa 9b e5 4f ad 3f 4c d3 6d 74 9d cd ed 73 81 f1 35 1e eb ea 3e 3e ff 00 4d f2 7f 23 Data Ascii: !['GM\iXiCzIen]O3@I+E2D4)0f].Cnt\x\|'y.G`~R1e{$K-kr\bW^e\=zFxnTFQAkRV$5J*t5TmZqR#iO?Lmts5>>M#
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 48 d1 63 9c 2b bf 58 a5 56 80 c7 eb 15 2a 33 bf e1 99 c7 5a dc 99 58 2b a3 60 a9 10 08 f1 b0 d7 55 0a 41 87 32 9e 8e d1 5e ee 95 f0 48 88 66 77 6b cb 14 68 f6 ee bf a6 c6 b9 8c 8e f1 8b 4b 9a db bb aa 05 49 f2 20 2f 7b e3 b1 ba b5 f3 9f 25 97 98 eb 72 bb 41 dd bc 16 82 2b 98 dc be 83 1f 0f 9b ce 8a e9 c0 1c e6 8c b3 6f f8 bb 11 e5 88 f0 5d 39 4f b7 26 17 57 4b bb 32 7f 72 c7 4d e5 59 ce 5a 01 8d c7 3d ca 75 ba d3 bb 51 27 63 6d 7a 92 df 11 f3 f9 29 ca 2b 0c 9a f7 2c 9b 14 20 12 22 00 04 20 2d e5 dd 92 cb 92 78 75 f4 f7 59 2f ac f9 8a 60 b8 ac 7a ab 0e f1 40 78 46 40 3d af 40 42 b7 63 d2 13 cf fa 4a 61 98 b2 19 48 6d e9 ee bb f1 f4 f2 39 7f ba 94 2d 58 0c d2 95 31 42 47 a2 d1 07 19 dd aa 8c 6e 80 37 9f 6d 05 bf 14 73 72 df 0c df fe 60 ec 96 fa 72 5c a9 91 Data Ascii: Hc+XV*3ZX+`UA2^HfwkhKI /{%rA+o]9O&WK2rMYZ=uQ'cmz)+, " -xuY/`z@xF@=@BcJaHm9-X1BGn7msr`r\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.5	49894	142.250.185.86	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:20 UTC	1046	OUT	GET /vi_webp/QJjrf9RkzGo/maxresdefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:21 UTC	633	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 60060 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:13:55 GMT Expires: Wed, 03 Jul 2024 00:13:55 GMT Cache-Control: public, max-age=7200 ETag: "1699445118" Content-Type: image/webp Vary: Origin Age: 686 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:21 UTC	757	IN	Data Raw: 52 49 46 46 94 ea 00 00 57 45 42 50 56 50 38 20 88 ea 00 00 10 25 05 9d 01 2a 00 05 d0 02 3e 6d 32 95 48 a4 22 a7 2a 23 f0 4b 71 40 0d 89 67 6e 50 90 df 5e ee 73 9d 73 d7 a9 a0 07 33 f2 50 34 92 87 00 7d c7 6c d5 2b 9e fc 2b fe d3 c2 4b b0 fb 1c fd c2 ea 21 cd a1 c1 bc d7 ba 3f bf 7d 59 ad fe b7 7d 1c 99 de 45 f4 ba 36 5f ed f2 db e2 3f f4 7a 12 fb 27 f5 9e 71 7f f2 fb 01 fe a1 ea 43 fb 31 e7 dd ec c7 cd b7 9a bf aa 5f ec fe a6 3f d7 ba b3 7d 26 7a 6d 7f 7a 72 41 fe 53 e5 33 e5 df d6 7f da f1 5f d1 5f d8 3d e0 f8 ac c5 9f c4 f8 3f f8 0d fb 7e b1 bb 97 fa 5b a9 7f e6 bf d4 ff e3 7a e2 4c b7 c6 f9 13 fb bf 41 be 4b 94 1a e4 17 a8 d9 36 71 71 00 9c e2 e2 01 39 c5 c4 02 73 8b 88 04 e7 17 10 09 ce 2e 20 13 9c 5c 40 27 38 b8 80 4e 71 71 00 9c e2 e2 01 39 c5 c4 Data Ascii: RIFFWEBPVP8 %>m2H"#Kq@gnP^ss3P4}l++K!?}Y}E6_?z'qC1_?}&zmzrAS3__=?~[zLAK6qq9s. \@'8Nqq9
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 05 f3 08 d3 d5 2b 76 bc 8c f2 a9 7a ee 4b cd 65 62 a6 ef 10 be 3d e9 b9 a9 5c 96 ea bd 09 17 31 51 fa 7f e8 e8 f8 2f 7b ba 41 01 49 ce ff f7 60 ee ec 23 88 b7 f7 c2 49 9c 0e e1 fc c7 67 80 33 04 13 b2 fc c1 93 a2 1f be e0 84 2d 05 8b b4 b8 03 56 29 80 eb ab 26 37 1c 9c 0f 97 db 9d ae 39 55 cd 2c a5 84 62 e3 b7 a6 80 56 fa f3 10 86 5f 67 46 5e 65 76 f4 b3 f7 80 f0 90 9e b6 7e b6 a8 83 ca d6 37 a5 e8 3d 0e 71 7a 1d 09 fb 26 25 f1 31 a5 0b c5 72 04 13 6a 3a 37 eb 6b fd d9 9c fd 11 73 95 2d 38 c7 4a 77 fa 94 15 40 37 75 16 f7 82 25 24 4b 4d 73 9f 2b 2e fd e1 ad 20 9e d9 ee 47 cf c0 8c 11 86 01 78 e5 c1 cc 2c f5 8d 76 18 57 9f f4 f8 85 cd d5 97 c5 8c 34 9b fb 3e 16 bb 86 57 f9 a7 bc 81 02 d0 df 6f 0d 1f 47 2a 73 0d 3f ae 64 35 e7 99 e1 8a fc d7 dd db 8b 86 19 Data Ascii: +vzKeb=\1Q/{AI`#Ig3-V)&79U,bV_gF^ev~7=qz&%1rj:7ks-8Jw@7u%$KMs+. Gx,vW4>WoG*s?d5
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 27 f2 90 a3 c9 de 1e 8f 2c 63 2f 89 bb 8f 47 2e c9 77 ad ae 5b dd 70 65 c1 ff fd cc 9e a4 6a d9 e5 bd ef 85 ab 1b 4b c8 ce 43 aa 20 ad bf b9 68 00 b0 95 89 cf cf e3 25 a6 0d b8 fb b4 95 44 15 a3 5d fb 22 1b 08 4b 60 4a 17 36 d4 7d 00 a0 93 1e b0 e5 5f ec c9 60 8a 78 bd 8c 96 c4 80 bc 74 0b 3f 0d 53 3c de 14 9d 41 fd 8c e4 5d b6 a6 48 be 56 c4 5d 13 af b9 63 eb 0a 20 93 5c 35 d7 7d 5a 5b 1a c6 7f 33 f1 9b 78 89 7a fb ce fe 6d 51 3d 42 d5 c3 4f fb 55 bd 7a 21 f4 b8 b5 ff d0 89 9d 74 e9 e8 a3 58 cc de 64 75 21 99 7e ee e2 6e f5 88 fc 9e 93 82 4d fd ba b1 b5 de 3e 9b 91 f1 58 72 59 0a b7 85 8d 80 55 2e 5f 00 68 fb 93 30 3d 32 5f c6 fa d3 05 0d 90 ff c1 2c 48 05 70 ee 02 61 03 ab 82 44 89 f5 68 7e bf 9d ef 29 5b 95 75 c0 62 8d 48 f6 df 8d fa a6 3a a1 27 64 ef Data Ascii: ',c/G.w[pejKC h%D]"K`J6}_`xt?S<A]HV]c \5}Z[3xzmQ=BOUz!tXdu!~nM>XrYU._h0=2_,HpaDh~)[ubH:'d
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 17 13 c1 93 3e c8 6f 85 71 55 3d 90 48 f1 f3 87 89 ea d5 ed 71 8a 4a 12 0c 38 46 7f 68 82 70 be b0 c6 85 c9 f9 bc 03 9b f1 9c 88 07 ee 21 5b d9 f8 5c 1c 1b 47 cb ce 8f da 18 4f 71 14 d6 fe 61 20 69 c6 6c c0 2f 6e d9 0f 6c 29 a1 22 06 0d 77 e3 f1 48 27 fb 29 ba f5 97 88 51 a1 33 5c 95 30 4a 48 27 16 6e f4 86 63 38 1d 0e af 89 48 af a5 45 4f cc 2d 3d 30 0a 45 66 30 ac a5 6d 60 19 69 8c 63 d9 5a b9 5f 40 36 17 62 25 c4 78 3b 42 a5 f5 c3 f4 47 ce a1 8d 80 98 42 9e 4a 2f 87 6a cb d6 ab fc c4 ea 51 17 07 e6 2c ef c8 f5 16 1c 7a db f6 55 a4 e9 09 4b 25 34 d2 3f 73 76 ff 38 e2 24 c8 1c 2d 1c bc a4 65 ae 02 87 f9 d7 82 f5 0d 9e 63 96 ba f7 df 70 c4 25 34 b2 54 3d 98 24 6c 46 bc d5 b7 b7 4f 4a 55 19 5d b0 f4 d8 52 14 2d 13 f4 79 88 e7 b4 11 dd 65 ef e3 3b c8 bc 62 Data Ascii: >oqU=HqJ8Fhp![\GOqa il/nl)"wH')Q3\0JH'nc8HEO-=0Ef0m`icZ_@6b%x;BGBJ/jQ,zUK%4?sv8$-ecp%4T=$lFOJU]R-ye;b
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 94 6a bc 3c 07 c1 36 f4 8e 7a 79 a9 a6 67 fc 83 b1 09 93 c9 df 9f 0d a7 db ab c6 c2 e7 10 6e 4d fd 3a 10 47 ad e8 5b 9d 9f 0e 2c fa e3 e4 0c b7 b2 55 d9 f1 1b 73 71 12 06 8f eb 76 bf 53 be 95 c6 46 53 42 f3 c9 94 aa bc 4c 65 d3 d1 b4 39 1f 85 7e 3b 0d 44 dd 06 fe 4a 9a 30 cd f4 1e 71 c4 b1 2b c5 72 7e 70 93 c0 b8 17 3d b3 4c 38 80 17 69 44 d5 74 a0 11 09 d7 40 2e 05 b1 7a 95 96 54 59 fc 59 2a 89 2c 1a 72 73 55 8d 89 10 e6 68 f9 78 62 cb e4 5d 82 f1 7a c6 f0 ba f1 97 0b 8a bc 24 da 7f 74 1a e4 1a ff ef bc f2 c9 f9 b5 68 df ef ff ff 06 51 24 68 20 c0 5a 62 90 a1 46 be 62 cd 21 0a f4 bb 6c d5 8f 7b fc e5 9b 11 bd 1e a7 7a 85 64 25 41 df 21 c7 22 16 4a bf 1b 46 dc ee df 82 62 c6 fe 6a a8 c9 a2 84 5d 37 8d 8d e9 c3 0f c4 1a df 32 19 ec 92 df 98 74 a7 31 b4 4c Data Ascii: j<6zygnM:G[,UsqvSFSBLe9~;DJ0q+r~p=L8iDt@.zTYY*,rsUhxb]z$thQ$h ZbFb!l{zd%A!"JFbj]72t1L
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 03 ff 1a 39 65 bf 80 ba 7c 17 37 55 a7 1f 55 d0 66 47 ef e6 3c 2f f4 03 8d db ec 89 19 49 0e b7 14 66 4c dd 06 59 59 85 a1 e4 88 78 8f 74 08 b4 0d a7 81 30 17 22 a3 00 b0 08 47 91 70 39 ad 5a c2 57 05 ad cb 9d d7 09 f8 93 1c 64 da 4c a2 ba 2c bf ed 32 2c 50 c1 8e 22 19 31 bd 9d fc 43 78 17 a9 08 8c 51 c3 36 33 00 6f f1 13 db 42 19 ea 3c 23 ff d1 97 dc 91 c2 01 3b 0a b1 f1 ca 05 0a eb 2d a9 4f e2 44 e0 50 c9 a7 28 fe e8 07 94 c4 2e 1e 37 4f 28 00 4a 20 6d 68 ac 93 0e 5f 80 d9 4b a8 14 7b bf 15 b6 ac 08 3a 3c cf bf 90 c5 17 db 82 f5 2e 81 67 70 20 48 57 5f 8f 23 57 5e 0e f9 4f 4a 32 99 58 ce 4d c4 9a 0e 88 c0 30 14 45 79 df 41 1f 71 ef 05 da 1d 9b 4e 9e 88 fd da 3d 2e 92 8d fd 12 0e 07 4e 97 8f b1 fe c7 ed 0f 8d e1 22 01 aa f3 e8 12 56 91 5a a2 f4 84 7b a1 Data Ascii: 9e\|7UUfG</IfLYYxt0"Gp9ZWdL,2,P"1CxQ63oB<#;-ODP(.7O(J mh_K{:<.gp HW_#W^OJ2XM0EyAqN=.N"VZ{
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 30 24 b3 72 11 97 a6 91 98 7a 3b 55 4b d7 6e f2 41 c5 0b 87 69 6a bc f5 90 97 45 27 a8 5c ef 63 69 3f 4e ce 6a bd c9 ed 04 c2 fe 7c 7b fa ad b1 16 54 1f be bd 60 6b 7f 90 1e 34 96 98 52 2c 1d 7f 0c 6e 62 a2 61 fe 42 b2 11 01 06 f5 58 2d 93 d6 18 03 1b 1c 2b 98 11 ff 79 6d 84 80 c6 d9 d4 bb 8c 95 35 a4 a0 f6 8f ff 8a 62 84 b2 9f cb 1c a4 42 11 76 be cd 6c 21 e0 9e 1a 9a 57 fb e7 d2 68 f8 4d 04 21 c8 98 8f ef 00 28 c8 29 82 e1 85 74 e3 73 34 d1 d6 49 4f ff 78 98 e1 50 ed 8c 3b c2 d0 3a cc bd 4a 80 58 f9 fc 73 93 53 ac 21 f5 2b f4 2e 58 c0 54 46 17 1d e4 9a 3d bc 74 22 2a f6 bc 19 81 aa f7 b3 29 c4 00 99 f4 dc c4 07 7a d6 a0 21 e4 c6 7b d8 c8 13 f2 1d c9 c7 a6 7e 9b b0 d5 c8 4f 35 30 66 5a 3d c4 b9 d5 d4 c6 1a ad 6f c7 e3 e7 e0 00 a9 74 c8 ec 68 03 50 4b af Data Ascii: 0$rz;UKnAijE'\ci?Nj\|{T`k4R,nbaBX-+ym5bBvl!WhM!()ts4IOxP;:JXsS!+.XTF=t"*)z!{~O50fZ=othPK
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 6f 53 dd e1 88 6f 14 9b 8f b6 e5 a1 d8 62 97 c3 91 45 e6 f9 57 07 18 0d a6 84 65 e3 ce 8b 1b 8a 8a 5b 24 1a 02 ef 5f 83 47 4a b1 61 4f e8 9b f1 93 79 78 26 44 df 48 6f c0 b8 49 28 a6 f9 6c 3b 1a 21 76 e4 dc 2b 06 fa de a3 43 f6 4a 1b 31 0a ec 2b 3f 12 8c 74 69 1d f8 ad 11 e2 5e 73 29 4a eb 78 ea 95 34 b9 8c b4 bc 53 1f 5b 77 ba 4c b5 bf 48 d8 b2 9c c5 e4 f5 c5 ae e3 12 03 55 7a cd 18 af b4 12 5d 0d 4e a9 2f 97 f8 37 c9 20 72 c3 6d aa 55 d1 2b 5e e5 70 be fb 84 50 9b 06 57 f8 c2 90 98 9c 6e b4 99 f8 11 34 11 90 02 08 b4 a8 b8 bc e9 b9 a9 26 0e c8 6d 61 7a cc 7b a8 c4 69 00 e8 6a d1 72 28 98 54 f3 e4 7e fc 15 c3 72 38 6e 8a b3 09 ce 17 e2 b7 e1 76 cf 0e d9 4f 4c 4d 6e a0 b9 e2 7a 09 6b 0d de f3 ee 03 e3 a1 a5 cb 00 be 30 4e 00 ba c7 a5 36 b6 9c 12 9b 91 b6 Data Ascii: oSobEWe[$_GJaOyx&DHoI(l;!v+CJ1+?ti^s)Jx4S[wLHUz]N/7 rmU+^pPWn4&maz{ijr(T~r8nvOLMnzk0N6
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 5c 40 27 38 b8 80 4e 71 71 00 9c e2 e2 01 39 c5 c4 02 73 8b 88 04 e7 17 10 09 ce 2e 20 13 9c 5c 40 27 38 b8 80 4e 71 71 00 9c e2 e2 01 39 c5 c4 02 73 8b 88 04 e7 17 10 09 ce 2e 20 13 9c 5c 40 27 38 b8 80 4e 71 71 00 9c e2 e2 00 d8 00 00 fe ff a9 46 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 14 7d f7 97 7c 1b df da 21 a0 dd 3f 16 b6 de 32 72 98 f3 63 88 a3 8c cd 18 9b d7 ce d0 23 b6 d6 37 e3 de 38 53 53 d2 ca 12 df fe 3b c0 cf ff 95 3c 9c b1 27 0d 8d 94 Data Ascii: \@'8Nqq9s. \@'8Nqq9s. \@'8NqqF}\|!?2rc#78SS;<'
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 61 e7 01 45 42 f8 2c 1b 79 5e 9f bb 6b 65 fa 70 d6 a4 ef 2d 2f 23 b3 81 be bb 44 55 3e df 15 bc f0 8a 1a 99 df 13 9b 40 56 7a 1a 1c 8e dd a4 9c 75 ff 4d 07 4f a0 92 34 0c 7e 30 49 bb 7f 42 fc 96 75 5a d3 88 dd 8c f7 a6 20 73 a0 17 d4 e8 02 e3 f9 76 2d 86 62 4c d7 c9 89 7d bb 9c 0b cd 69 a8 f3 8d d2 e1 80 99 5e d5 df 6d dc 65 ae 35 b8 36 00 5a 95 e1 d2 fa 03 9e 8f 2b 90 4f 9c 82 e4 b3 56 4b 90 2a 5f 79 8d 81 29 1b fd 7e ac 79 64 6b df a3 c4 0f 8c 4b 23 e9 31 8c b8 61 cd 1c 74 ab c8 5b 81 06 fe 74 9a 46 95 d1 34 2d 14 78 8d 07 9d c7 eb 26 c7 d5 f9 28 6b f1 83 f8 cc 0f d0 e4 28 42 5f b4 b1 6b 97 17 e4 b9 c3 2c 59 9a 5d 42 c7 7e e5 83 66 9c e6 36 01 ae 1a 0f 71 54 b5 69 0b 6c 1b 27 47 d1 94 41 f2 6c 52 e7 a6 6a c1 f5 4e 83 eb 67 c2 a7 51 38 c9 95 8d 6b a5 37 Data Ascii: aEB,y^kep-/#DU>@VzuMO4~0IBuZ sv-bL}i^me56Z+OVK*_y)~ydkK#1at[tF4-x&(k(B_k,Y]B~f6qTil'GAlRjNgQ8k7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.5	49895	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:21 UTC	682	OUT	GET /s/desktop/a7b1ec23/jsbin/www-searchbox.vflset/www-searchbox.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:21 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 278881 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 16:39:35 GMT Expires: Wed, 02 Jul 2025 16:39:35 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 13:13:04 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 20746 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:21 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 67 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 Data Ascii: =c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.g=f;ba(this,"d
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6a 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 0a 76 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6b 61 7d 29 3b 0a 76 61 72 20 6c 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b Data Ascii: t.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)ja(d,e)&&(a[e]=d[e])}return a};v("Object.assign",function(a){return a\|\|ka});var la=typeof Object.create=="function"?Object.create:function(a){function b(){
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 61 2e 67 3d 61 2e 6f 7c 7c 61 2e 73 3a 62 2e 4d 21 3d 76 6f 69 64 20 30 26 26 61 2e 73 3c 62 2e 4d 3f 28 61 2e 67 3d 62 2e 4d 2c 61 2e 69 3d 6e 75 6c 6c 29 3a 61 2e 67 3d 61 2e 73 3a 61 2e 67 3d 30 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 29 7b 74 68 69 73 2e 67 3d 6e 65 77 20 72 61 3b 74 68 69 73 2e 6c 3d 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 79 61 28 61 2c 62 29 7b 73 61 28 61 2e 67 29 3b 76 61 72 20 63 3d 61 2e 67 2e 6d 3b 69 66 28 63 29 72 65 74 75 72 6e 20 7a 61 28 61 2c 22 72 65 74 75 72 6e 22 69 6e 20 63 3f 63 5b 22 72 65 74 75 72 6e 22 5d 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 64 2c 64 6f 6e 65 3a 21 30 7d 7d 2c 62 2c 61 2e 67 2e 72 65 74 75 72 6e 29 3b 0a 61 2e 67 2e 72 65 74 75 72 6e 28 62 29 3b 72 65 74 Data Ascii: a.g=a.o\|\|a.s:b.M!=void 0&&a.s<b.M?(a.g=b.M,a.i=null):a.g=a.s:a.g=0}function xa(a){this.g=new ra;this.l=a}function ya(a,b){sa(a.g);var c=a.g.m;if(c)return za(a,"return"in c?c["return"]:function(d){return{value:d,done:!0}},b,a.g.return);a.g.return(b);ret
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 67 75 6d 65 6e 74 73 5b 63 5d 3b 72 65 74 75 72 6e 20 62 7d 0a 76 28 22 52 65 66 6c 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 71 61 3f 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 71 61 28 62 2c 63 29 2c 21 30 7d 63 61 74 63 68 28 64 29 7b 72 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 76 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 67 29 7b 74 68 69 73 2e 67 3d 30 3b 74 68 69 73 2e 69 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 6c 3d 5b 5d 3b 74 68 69 73 2e 75 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 6d 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a Data Ascii: guments[c];return b}v("Reflect.setPrototypeOf",function(a){return a?a:qa?function(b,c){try{return qa(b,c),!0}catch(d){return!1}}:null});v("Promise",function(a){function b(g){this.g=0;this.i=void 0;this.l=[];this.u=!1;var h=this.m();try{g(h.resolve,h.rej
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 2e 41 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 74 68 69 73 2e 67 21 3d 30 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 67 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 67 29 3b 74 68 69 73 2e 67 3d 67 3b 74 68 69 73 2e 69 3d 68 3b 74 68 69 73 2e 67 3d 3d 3d 32 26 26 74 68 69 73 2e 49 28 29 3b 74 68 69 73 2e 42 28 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 49 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 44 28 29 29 7b 76 61 72 20 68 3d 65 61 2e 63 6f 6e 73 6f 6c 65 3b 74 79 70 65 6f 66 20 68 21 3d 3d 22 75 6e 64 Data Ascii: .A=function(g,h){if(this.g!=0)throw Error("Cannot settle("+g+", "+h+"): Promise already settled in state"+this.g);this.g=g;this.i=h;this.g===2&&this.I();this.B()};b.prototype.I=function(){var g=this;e(function(){if(g.D()){var h=ea.console;typeof h!=="und
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 2e 6c 28 6b 29 3a 74 68 69 73 2e 6c 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 75 3d 21 30 7d 3b 0a 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 6b 28 67 29 7d 29 7d 3b 0a 62 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 77 28 67 29 2c 6d 3d 6c 2e 6e 65 78 74 28 29 3b 21 6d 2e 64 6f 6e 65 3b 6d 3d 6c 2e 6e 65 78 74 28 29 29 64 28 6d 2e 76 61 6c 75 65 29 2e 64 63 28 68 2c 6b 29 7d 29 7d 3b 0a 62 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 77 28 67 29 2c 6b 3d 68 2e 6e 65 78 74 28 29 Data Ascii: .l(k):this.l.push(k);this.u=!0};b.resolve=d;b.reject=function(g){return new b(function(h,k){k(g)})};b.race=function(g){return new b(function(h,k){for(var l=w(g),m=l.next();!m.done;m=l.next())d(m.value).dc(h,k)})};b.all=function(g){var h=w(g),k=h.next()
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 6a 61 28 6b 2c 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 6b 29 3b 6b 5b 67 5d 5b 74 68 69 73 2e 67 5d 3d 6c 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 64 28 6b 29 26 26 6a 61 28 6b 2c 67 29 3f 6b 5b 67 5d 5b 74 68 69 73 2e 67 5d 3a 76 6f 69 64 20 30 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 64 28 6b 29 26 26 6a 61 28 6b 2c 67 29 26 26 6a 61 28 6b 5b 67 5d 2c 74 68 69 73 2e 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 Data Ascii: valid WeakMap key");e(k);if(!ja(k,g))throw Error("WeakMap key fail: "+k);k[g][this.g]=l;return this};b.prototype.get=function(k){return d(k)&&ja(k,g)?k[g][this.g]:void 0};b.prototype.has=function(k){return d(k)&&ja(k,g)&&ja(k[g],this.g)};b.prototype.de
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 6c 75 65 5b 31 5d 21 3d 22 74 22 7c 7c 21 6c 2e 6e 65 78 74 28 29 2e 64 6f 6e 65 3f 21 31 3a 21 30 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 66 3d 6e 65 77 20 57 65 61 6b 4d 61 70 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 68 3d 68 3d 3d 3d 30 3f 30 3a 68 3b 76 61 72 20 6c 3d 64 28 74 68 69 73 2c 68 29 3b 6c 2e 6c 69 73 74 7c 7c 28 6c 2e 6c 69 73 74 3d 74 68 69 73 5b 30 5d 5b 6c 2e 69 64 5d 3d 5b 5d 29 3b 6c 2e 65 6e 74 72 79 3f 6c 2e 65 6e 74 72 79 2e 76 61 6c 75 65 3d 6b 3a 28 6c 2e 65 6e 74 72 79 3d 7b 6e 65 78 74 3a 74 68 69 73 5b 31 5d 2c 70 72 65 76 69 6f 75 73 3a 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 2c 68 65 61 64 3a 74 Data Ascii: lue[1]!="t"\|\|!l.next().done?!1:!0}catch(p){return!1}}())return a;var f=new WeakMap;e.prototype.set=function(h,k){h=h===0?0:h;var l=d(this,h);l.list\|\|(l.list=this[0][l.id]=[]);l.entry?l.entry.value=k:(l.entry={next:this[1],previous:this[1].previous,head:t
2024-07-02 22:25:21 UTC	1390	IN	Data Raw: 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 0a 76 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 64 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 45 61 28 74 68 69 73 2c 62 2c 22 65 6e 64 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 63 3d 3d 3d 76 6f 69 64 20 30 26 26 28 63 3d 64 2e 6c 65 6e 67 74 68 29 3b 63 3d 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 Data Ascii: hrow new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""}v("String.prototype.endsWith",function(a){return a?a:function(b,c){var d=Ea(this,b,"endsWith");b+="";c===void 0&&(c=d.length);c=Math.max(0,Math.mi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.5	49897	142.250.185.196	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:21 UTC	923	OUT	GET /pagead/1p-user-list/962985656/?backend=innertube&cname=1&cver=2_20240702&data=backend%3Dinnertube%3Bcname%3D1%3Bcver%3D2_20240702%3Bm%3D1%3Bptype%3Df_view%3Btype%3Dview%3Butuid%3DuAXFkgsw1L7xaCfnd5JJOw%3Butvid%3DdQw4w9WgXcQ%3Bw%3D1&is_vtc=0&ptype=f_view&random=479255847&utuid=uAXFkgsw1L7xaCfnd5JJOw HTTP/1.1 Host: www.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
2024-07-02 22:25:21 UTC	602	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Date: Tue, 02 Jul 2024 22:25:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: image/gif Content-Security-Policy: script-src 'none'; object-src 'none' X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:21 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.5	49898	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:21 UTC	2888	OUT	POST /api/stats/qoe?fmt=397&afmt=251&cpn=PrsgaOatqma7291e&el=detailpage&ns=yt&fexp=v1%2C23986021%2C18623%2C204121%2C230596%2C104308%2C6789%2C16229%2C133212%2C14625955%2C11684381%2C7111%2C24166%2C12177%2C9954%2C1192%2C7913%2C18310%2C273%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C29151%2C2197%2C621%2C7961%2C1414%2C19%2C2%2C1082%2C4081%2C2872%2C101%2C10943%2C2471%2C6008%2C150%2C1388%2C713%2C2585%2C8134%2C1233%2C1375%2C3761%2C3157%2C3975%2C681%2C1590%2C3542%2C8162%2C3259&cl=648221806&seq=2&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&event=streamingstats&feature=youtu.be&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&qclc=ChBQcnNnYU9hdHFtYTcyOTFlEAI&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&user_intent=0&bh=2.120:18.040,6.877:19.413,10.006:16.613&cmt=2.120:0.031,3.384:1.296,6.877:4.787,6.920:4.814,7.682:5.507,10.006:7.832&vps=2.120:PL,6.877:B,6.920:PL,10.006:PL&ctmp=itr:t.5955;&bwm=6.877:794459:1.616&bwe=6.877:298199,10.006:298199&bat=6.877:1: [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 226 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00 sec-ch-ua-arch: "x86" X-YouTube-Page-CL: 648613515 sec-ch-ua-platform-version: "10.0.0" X-YouTube-Utc-Offset: -240 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D X-YouTube-Ad-Signals: dt=1719959109306&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:21 UTC	226	OUT	Data Raw: 73 65 73 73 69 6f 6e 5f 74 6f 6b 65 6e 3d 51 55 46 46 4c 55 68 71 62 55 31 4e 5a 31 63 34 63 56 52 49 59 6d 70 7a 56 56 55 7a 57 6a 56 78 53 56 68 55 4f 47 70 66 52 30 31 75 64 33 78 42 51 33 4a 74 63 30 74 73 4f 48 56 53 4e 58 4e 55 5a 57 31 6a 64 6d 51 34 57 6e 68 35 62 6c 49 31 65 6e 70 50 62 57 56 4b 54 30 4e 78 64 54 42 55 56 33 5a 7a 61 6a 6c 6c 62 6c 39 54 55 45 45 34 65 6c 5a 69 56 55 34 77 5a 32 56 68 61 56 67 35 54 31 59 34 61 6c 4a 42 51 54 45 7a 4e 32 46 68 4e 7a 56 50 5a 58 64 72 59 54 46 76 5a 56 4d 78 58 30 74 73 63 48 41 74 51 57 68 53 5a 6d 74 4f 53 58 4a 6e 4e 30 77 34 56 6b 64 36 57 45 59 7a 4e 6a 64 42 64 31 52 7a 4d 53 31 43 59 77 25 33 44 25 33 44 Data Ascii: session_token=QUFFLUhqbU1NZ1c4cVRIYmpzVVUzWjVxSVhUOGpfR01ud3xBQ3Jtc0tsOHVSNXNUZW1jdmQ4Wnh5blI1enpPbWVKT0NxdTBUV3Zzajllbl9TUEE4elZiVU4wZ2VhaVg5T1Y4alJBQTEzN2FhNzVPZXdrYTFvZVMxX0tscHAtQWhSZmtOSXJnN0w4Vkd6WEYzNjdBd1RzMS1CYw%3D%3D
2024-07-02 22:25:21 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:21 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.5	49900	142.250.181.238	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:21 UTC	1314	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 418 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
2024-07-02 22:25:21 UTC	418	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 39 39 35 39 31 31 39 39 34 30 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 62 67 2f 66 69 6c 5c 22 2c 6e 75 6c 6c 2c 5b 5c 22 72 6b 5c 22 2c 5c 22 6b 65 5c 22 5d 2c 5b 5b 5b 5b 5c 22 64 7a 53 39 30 65 5c 22 5d 2c 5b 5c 22 61 47 49 66 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 38 36 2e 36 30 30 30 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,null,[1,0,0,0,0]]],1828,[["1719959119940",null,null,null,null,null,null,"[[[\"/client_streamz/bg/fil\",null,[\"rk\",\"ke\"],[[[[\"dzS90e\"],[\"aGIf\"]],[null,86.6000
2024-07-02 22:25:22 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=cZ2469ZLgXu49ehpAcXRtKs6SCrrmm0QLwLyybFJQoeHBPlX6l1Dovlhr4D-BwSpqK2FzPqdrOASoJn2OWpPknXvWYNXWUm3ozquE3KA0fGRoOC_FHeVRWre0WIL0-PaUtdQBto8-FyiwnLZc3igEB1Ll0XM2twadvSZCNR2Sww; expires=Wed, 01-Jan-2025 22:25:22 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 02 Jul 2024 22:25:22 GMT Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-02 22:25:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.5	49901	142.250.181.238	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:22 UTC	1314	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 418 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
2024-07-02 22:25:22 UTC	418	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 39 39 35 39 31 32 30 30 31 34 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 5b 5b 5b 5c 22 2f 63 6c 69 65 6e 74 5f 73 74 72 65 61 6d 7a 2f 62 67 2f 66 69 6c 5c 22 2c 6e 75 6c 6c 2c 5b 5c 22 72 6b 5c 22 2c 5c 22 6b 65 5c 22 5d 2c 5b 5b 5b 5b 5c 22 64 7a 53 39 30 65 5c 22 5d 2c 5b 5c 22 61 47 49 66 5c 22 5d 5d 2c 5b 6e 75 6c 6c 2c 35 37 2e 33 39 39 39 Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,null,[1,0,0,0,0]]],1828,[["1719959120014",null,null,null,null,null,null,"[[[\"/client_streamz/bg/fil\",null,[\"rk\",\"ke\"],[[[[\"dzS90e\"],[\"aGIf\"]],[null,57.3999
2024-07-02 22:25:22 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=OAhaJtZA1lc6HB1wHfesaFHaBsUcIogrdB6nBhy3TPrgUm4UyJWi-MrP1F7ftNTmdvLDxaBb0VP5hRRLgLrl7VZZOFRCcGiE_hBgE-ae_K_fdFaCbhO7THgvbXfuO98u7XYkhL46gLZ3zmrWVikAhO5ccGZZXlQvJbvpG6jpP3A; expires=Wed, 01-Jan-2025 22:25:22 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:22 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 02 Jul 2024 22:25:22 GMT Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:22 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-02 22:25:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.5	49906	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:22 UTC	489	OUT	GET /an/uAXFkgsw1L7xaCfnd5JJOw/featured_channel.jpg?v=6101641a HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:22 UTC	657	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 1134 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:32:47 GMT Expires: Tue, 02 Jul 2024 23:32:47 GMT Cache-Control: public, max-age=7200 Age: 3155 ETag: "1627481114" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:22 UTC	733	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 96 08 06 00 00 00 3c 01 71 e2 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 04 25 49 44 41 54 78 9c ed da 3f 88 5d 45 14 c7 f1 f3 4b d6 18 2c 2c 34 4b fc 53 68 a3 4d 22 29 15 22 6c 20 49 13 6c 04 4b 0b b1 12 ec 05 13 82 20 98 40 6c ad 4d 65 13 1b 0b 03 21 21 82 89 44 b0 8e 8d 16 82 cd 06 35 82 68 70 55 36 c7 e6 6e b8 dc 9d 33 77 66 ee 7d 9b dd e4 fb 81 25 ef cd 9d 73 ce dc 79 f3 ee bf 17 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDR<qsBIT\|d%IDATx?]EK,,4KShM")"l IlK @lMe!!D5hpU6n3wf}%sy3
2024-07-02 22:25:22 UTC	401	IN	Data Raw: 8b 6b ec 8b 23 e9 97 61 5b d5 c2 ea 2e 7b 92 13 3b c6 dd df 69 89 ab ac f1 67 43 d8 bb b9 8d 92 76 97 26 92 74 b3 77 6d f8 69 d4 6f 3b 2c ae f4 93 86 ec 02 fa 27 68 df 93 cc 1f 9d 57 27 9c 6f 6f 49 7a 7a ce 6b a0 9a 31 9a d9 5e 49 d1 24 14 e5 2e 51 b3 2f 15 73 79 d8 cc be 29 a9 33 cc 39 72 fa 5e d8 23 99 28 4f ee 69 f2 59 33 7b 7f 90 f8 29 49 b7 6a 07 d4 8b 3f 2a e9 6a b0 2d f5 01 7f 2f e9 60 94 2f 58 5c 6b 96 79 82 5e 50 b3 8a bb 9f 4b 8c 6b f8 50 74 cd cc f6 4e ad b5 93 64 8f 4c 25 2b 34 3a 62 45 f1 66 f6 9b a4 e5 91 1c c5 e3 70 f7 e3 66 76 79 6c 9c 29 53 16 d6 c4 39 7a e0 8f 58 63 d7 58 4f 26 92 df ae 18 cb ef 89 b6 7d 05 77 9d 66 66 17 4a 0a 48 ba 92 6a 5f f4 75 4c 2f ff 72 6a 9b bb 7f e0 ee 4b 5b 75 3d e5 ee 47 52 7f 99 fe 91 33 73 0d 68 93 89 db 57 Data Ascii: k#a[.{;igCv&twmio;,'hW'ooIzzk1^I$.Q/sy)39r^#(OiY3{)Ij?*j-/`/X\ky^PKkPtNdL%+4:bEfpfvyl)S9zXcXO&}wffJHj_uL/rjK[u=GR3shW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.5	49904	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:22 UTC	470	OUT	GET /vi_webp/QJjrf9RkzGo/maxresdefault.webp HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:22 UTC	633	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 60060 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:13:55 GMT Expires: Wed, 03 Jul 2024 00:13:55 GMT Cache-Control: public, max-age=7200 ETag: "1699445118" Content-Type: image/webp Vary: Origin Age: 687 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:22 UTC	757	IN	Data Raw: 52 49 46 46 94 ea 00 00 57 45 42 50 56 50 38 20 88 ea 00 00 10 25 05 9d 01 2a 00 05 d0 02 3e 6d 32 95 48 a4 22 a7 2a 23 f0 4b 71 40 0d 89 67 6e 50 90 df 5e ee 73 9d 73 d7 a9 a0 07 33 f2 50 34 92 87 00 7d c7 6c d5 2b 9e fc 2b fe d3 c2 4b b0 fb 1c fd c2 ea 21 cd a1 c1 bc d7 ba 3f bf 7d 59 ad fe b7 7d 1c 99 de 45 f4 ba 36 5f ed f2 db e2 3f f4 7a 12 fb 27 f5 9e 71 7f f2 fb 01 fe a1 ea 43 fb 31 e7 dd ec c7 cd b7 9a bf aa 5f ec fe a6 3f d7 ba b3 7d 26 7a 6d 7f 7a 72 41 fe 53 e5 33 e5 df d6 7f da f1 5f d1 5f d8 3d e0 f8 ac c5 9f c4 f8 3f f8 0d fb 7e b1 bb 97 fa 5b a9 7f e6 bf d4 ff e3 7a e2 4c b7 c6 f9 13 fb bf 41 be 4b 94 1a e4 17 a8 d9 36 71 71 00 9c e2 e2 01 39 c5 c4 02 73 8b 88 04 e7 17 10 09 ce 2e 20 13 9c 5c 40 27 38 b8 80 4e 71 71 00 9c e2 e2 01 39 c5 c4 Data Ascii: RIFFWEBPVP8 %>m2H"#Kq@gnP^ss3P4}l++K!?}Y}E6_?z'qC1_?}&zmzrAS3__=?~[zLAK6qq9s. \@'8Nqq9
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 05 f3 08 d3 d5 2b 76 bc 8c f2 a9 7a ee 4b cd 65 62 a6 ef 10 be 3d e9 b9 a9 5c 96 ea bd 09 17 31 51 fa 7f e8 e8 f8 2f 7b ba 41 01 49 ce ff f7 60 ee ec 23 88 b7 f7 c2 49 9c 0e e1 fc c7 67 80 33 04 13 b2 fc c1 93 a2 1f be e0 84 2d 05 8b b4 b8 03 56 29 80 eb ab 26 37 1c 9c 0f 97 db 9d ae 39 55 cd 2c a5 84 62 e3 b7 a6 80 56 fa f3 10 86 5f 67 46 5e 65 76 f4 b3 f7 80 f0 90 9e b6 7e b6 a8 83 ca d6 37 a5 e8 3d 0e 71 7a 1d 09 fb 26 25 f1 31 a5 0b c5 72 04 13 6a 3a 37 eb 6b fd d9 9c fd 11 73 95 2d 38 c7 4a 77 fa 94 15 40 37 75 16 f7 82 25 24 4b 4d 73 9f 2b 2e fd e1 ad 20 9e d9 ee 47 cf c0 8c 11 86 01 78 e5 c1 cc 2c f5 8d 76 18 57 9f f4 f8 85 cd d5 97 c5 8c 34 9b fb 3e 16 bb 86 57 f9 a7 bc 81 02 d0 df 6f 0d 1f 47 2a 73 0d 3f ae 64 35 e7 99 e1 8a fc d7 dd db 8b 86 19 Data Ascii: +vzKeb=\1Q/{AI`#Ig3-V)&79U,bV_gF^ev~7=qz&%1rj:7ks-8Jw@7u%$KMs+. Gx,vW4>WoG*s?d5
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 27 f2 90 a3 c9 de 1e 8f 2c 63 2f 89 bb 8f 47 2e c9 77 ad ae 5b dd 70 65 c1 ff fd cc 9e a4 6a d9 e5 bd ef 85 ab 1b 4b c8 ce 43 aa 20 ad bf b9 68 00 b0 95 89 cf cf e3 25 a6 0d b8 fb b4 95 44 15 a3 5d fb 22 1b 08 4b 60 4a 17 36 d4 7d 00 a0 93 1e b0 e5 5f ec c9 60 8a 78 bd 8c 96 c4 80 bc 74 0b 3f 0d 53 3c de 14 9d 41 fd 8c e4 5d b6 a6 48 be 56 c4 5d 13 af b9 63 eb 0a 20 93 5c 35 d7 7d 5a 5b 1a c6 7f 33 f1 9b 78 89 7a fb ce fe 6d 51 3d 42 d5 c3 4f fb 55 bd 7a 21 f4 b8 b5 ff d0 89 9d 74 e9 e8 a3 58 cc de 64 75 21 99 7e ee e2 6e f5 88 fc 9e 93 82 4d fd ba b1 b5 de 3e 9b 91 f1 58 72 59 0a b7 85 8d 80 55 2e 5f 00 68 fb 93 30 3d 32 5f c6 fa d3 05 0d 90 ff c1 2c 48 05 70 ee 02 61 03 ab 82 44 89 f5 68 7e bf 9d ef 29 5b 95 75 c0 62 8d 48 f6 df 8d fa a6 3a a1 27 64 ef Data Ascii: ',c/G.w[pejKC h%D]"K`J6}_`xt?S<A]HV]c \5}Z[3xzmQ=BOUz!tXdu!~nM>XrYU._h0=2_,HpaDh~)[ubH:'d
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 17 13 c1 93 3e c8 6f 85 71 55 3d 90 48 f1 f3 87 89 ea d5 ed 71 8a 4a 12 0c 38 46 7f 68 82 70 be b0 c6 85 c9 f9 bc 03 9b f1 9c 88 07 ee 21 5b d9 f8 5c 1c 1b 47 cb ce 8f da 18 4f 71 14 d6 fe 61 20 69 c6 6c c0 2f 6e d9 0f 6c 29 a1 22 06 0d 77 e3 f1 48 27 fb 29 ba f5 97 88 51 a1 33 5c 95 30 4a 48 27 16 6e f4 86 63 38 1d 0e af 89 48 af a5 45 4f cc 2d 3d 30 0a 45 66 30 ac a5 6d 60 19 69 8c 63 d9 5a b9 5f 40 36 17 62 25 c4 78 3b 42 a5 f5 c3 f4 47 ce a1 8d 80 98 42 9e 4a 2f 87 6a cb d6 ab fc c4 ea 51 17 07 e6 2c ef c8 f5 16 1c 7a db f6 55 a4 e9 09 4b 25 34 d2 3f 73 76 ff 38 e2 24 c8 1c 2d 1c bc a4 65 ae 02 87 f9 d7 82 f5 0d 9e 63 96 ba f7 df 70 c4 25 34 b2 54 3d 98 24 6c 46 bc d5 b7 b7 4f 4a 55 19 5d b0 f4 d8 52 14 2d 13 f4 79 88 e7 b4 11 dd 65 ef e3 3b c8 bc 62 Data Ascii: >oqU=HqJ8Fhp![\GOqa il/nl)"wH')Q3\0JH'nc8HEO-=0Ef0m`icZ_@6b%x;BGBJ/jQ,zUK%4?sv8$-ecp%4T=$lFOJU]R-ye;b
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 94 6a bc 3c 07 c1 36 f4 8e 7a 79 a9 a6 67 fc 83 b1 09 93 c9 df 9f 0d a7 db ab c6 c2 e7 10 6e 4d fd 3a 10 47 ad e8 5b 9d 9f 0e 2c fa e3 e4 0c b7 b2 55 d9 f1 1b 73 71 12 06 8f eb 76 bf 53 be 95 c6 46 53 42 f3 c9 94 aa bc 4c 65 d3 d1 b4 39 1f 85 7e 3b 0d 44 dd 06 fe 4a 9a 30 cd f4 1e 71 c4 b1 2b c5 72 7e 70 93 c0 b8 17 3d b3 4c 38 80 17 69 44 d5 74 a0 11 09 d7 40 2e 05 b1 7a 95 96 54 59 fc 59 2a 89 2c 1a 72 73 55 8d 89 10 e6 68 f9 78 62 cb e4 5d 82 f1 7a c6 f0 ba f1 97 0b 8a bc 24 da 7f 74 1a e4 1a ff ef bc f2 c9 f9 b5 68 df ef ff ff 06 51 24 68 20 c0 5a 62 90 a1 46 be 62 cd 21 0a f4 bb 6c d5 8f 7b fc e5 9b 11 bd 1e a7 7a 85 64 25 41 df 21 c7 22 16 4a bf 1b 46 dc ee df 82 62 c6 fe 6a a8 c9 a2 84 5d 37 8d 8d e9 c3 0f c4 1a df 32 19 ec 92 df 98 74 a7 31 b4 4c Data Ascii: j<6zygnM:G[,UsqvSFSBLe9~;DJ0q+r~p=L8iDt@.zTYY*,rsUhxb]z$thQ$h ZbFb!l{zd%A!"JFbj]72t1L
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 03 ff 1a 39 65 bf 80 ba 7c 17 37 55 a7 1f 55 d0 66 47 ef e6 3c 2f f4 03 8d db ec 89 19 49 0e b7 14 66 4c dd 06 59 59 85 a1 e4 88 78 8f 74 08 b4 0d a7 81 30 17 22 a3 00 b0 08 47 91 70 39 ad 5a c2 57 05 ad cb 9d d7 09 f8 93 1c 64 da 4c a2 ba 2c bf ed 32 2c 50 c1 8e 22 19 31 bd 9d fc 43 78 17 a9 08 8c 51 c3 36 33 00 6f f1 13 db 42 19 ea 3c 23 ff d1 97 dc 91 c2 01 3b 0a b1 f1 ca 05 0a eb 2d a9 4f e2 44 e0 50 c9 a7 28 fe e8 07 94 c4 2e 1e 37 4f 28 00 4a 20 6d 68 ac 93 0e 5f 80 d9 4b a8 14 7b bf 15 b6 ac 08 3a 3c cf bf 90 c5 17 db 82 f5 2e 81 67 70 20 48 57 5f 8f 23 57 5e 0e f9 4f 4a 32 99 58 ce 4d c4 9a 0e 88 c0 30 14 45 79 df 41 1f 71 ef 05 da 1d 9b 4e 9e 88 fd da 3d 2e 92 8d fd 12 0e 07 4e 97 8f b1 fe c7 ed 0f 8d e1 22 01 aa f3 e8 12 56 91 5a a2 f4 84 7b a1 Data Ascii: 9e\|7UUfG</IfLYYxt0"Gp9ZWdL,2,P"1CxQ63oB<#;-ODP(.7O(J mh_K{:<.gp HW_#W^OJ2XM0EyAqN=.N"VZ{
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 30 24 b3 72 11 97 a6 91 98 7a 3b 55 4b d7 6e f2 41 c5 0b 87 69 6a bc f5 90 97 45 27 a8 5c ef 63 69 3f 4e ce 6a bd c9 ed 04 c2 fe 7c 7b fa ad b1 16 54 1f be bd 60 6b 7f 90 1e 34 96 98 52 2c 1d 7f 0c 6e 62 a2 61 fe 42 b2 11 01 06 f5 58 2d 93 d6 18 03 1b 1c 2b 98 11 ff 79 6d 84 80 c6 d9 d4 bb 8c 95 35 a4 a0 f6 8f ff 8a 62 84 b2 9f cb 1c a4 42 11 76 be cd 6c 21 e0 9e 1a 9a 57 fb e7 d2 68 f8 4d 04 21 c8 98 8f ef 00 28 c8 29 82 e1 85 74 e3 73 34 d1 d6 49 4f ff 78 98 e1 50 ed 8c 3b c2 d0 3a cc bd 4a 80 58 f9 fc 73 93 53 ac 21 f5 2b f4 2e 58 c0 54 46 17 1d e4 9a 3d bc 74 22 2a f6 bc 19 81 aa f7 b3 29 c4 00 99 f4 dc c4 07 7a d6 a0 21 e4 c6 7b d8 c8 13 f2 1d c9 c7 a6 7e 9b b0 d5 c8 4f 35 30 66 5a 3d c4 b9 d5 d4 c6 1a ad 6f c7 e3 e7 e0 00 a9 74 c8 ec 68 03 50 4b af Data Ascii: 0$rz;UKnAijE'\ci?Nj\|{T`k4R,nbaBX-+ym5bBvl!WhM!()ts4IOxP;:JXsS!+.XTF=t"*)z!{~O50fZ=othPK
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 6f 53 dd e1 88 6f 14 9b 8f b6 e5 a1 d8 62 97 c3 91 45 e6 f9 57 07 18 0d a6 84 65 e3 ce 8b 1b 8a 8a 5b 24 1a 02 ef 5f 83 47 4a b1 61 4f e8 9b f1 93 79 78 26 44 df 48 6f c0 b8 49 28 a6 f9 6c 3b 1a 21 76 e4 dc 2b 06 fa de a3 43 f6 4a 1b 31 0a ec 2b 3f 12 8c 74 69 1d f8 ad 11 e2 5e 73 29 4a eb 78 ea 95 34 b9 8c b4 bc 53 1f 5b 77 ba 4c b5 bf 48 d8 b2 9c c5 e4 f5 c5 ae e3 12 03 55 7a cd 18 af b4 12 5d 0d 4e a9 2f 97 f8 37 c9 20 72 c3 6d aa 55 d1 2b 5e e5 70 be fb 84 50 9b 06 57 f8 c2 90 98 9c 6e b4 99 f8 11 34 11 90 02 08 b4 a8 b8 bc e9 b9 a9 26 0e c8 6d 61 7a cc 7b a8 c4 69 00 e8 6a d1 72 28 98 54 f3 e4 7e fc 15 c3 72 38 6e 8a b3 09 ce 17 e2 b7 e1 76 cf 0e d9 4f 4c 4d 6e a0 b9 e2 7a 09 6b 0d de f3 ee 03 e3 a1 a5 cb 00 be 30 4e 00 ba c7 a5 36 b6 9c 12 9b 91 b6 Data Ascii: oSobEWe[$_GJaOyx&DHoI(l;!v+CJ1+?ti^s)Jx4S[wLHUz]N/7 rmU+^pPWn4&maz{ijr(T~r8nvOLMnzk0N6
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 5c 40 27 38 b8 80 4e 71 71 00 9c e2 e2 01 39 c5 c4 02 73 8b 88 04 e7 17 10 09 ce 2e 20 13 9c 5c 40 27 38 b8 80 4e 71 71 00 9c e2 e2 01 39 c5 c4 02 73 8b 88 04 e7 17 10 09 ce 2e 20 13 9c 5c 40 27 38 b8 80 4e 71 71 00 9c e2 e2 00 d8 00 00 fe ff a9 46 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 14 7d f7 97 7c 1b df da 21 a0 dd 3f 16 b6 de 32 72 98 f3 63 88 a3 8c cd 18 9b d7 ce d0 23 b6 d6 37 e3 de 38 53 53 d2 ca 12 df fe 3b c0 cf ff 95 3c 9c b1 27 0d 8d 94 Data Ascii: \@'8Nqq9s. \@'8Nqq9s. \@'8NqqF}\|!?2rc#78SS;<'
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 61 e7 01 45 42 f8 2c 1b 79 5e 9f bb 6b 65 fa 70 d6 a4 ef 2d 2f 23 b3 81 be bb 44 55 3e df 15 bc f0 8a 1a 99 df 13 9b 40 56 7a 1a 1c 8e dd a4 9c 75 ff 4d 07 4f a0 92 34 0c 7e 30 49 bb 7f 42 fc 96 75 5a d3 88 dd 8c f7 a6 20 73 a0 17 d4 e8 02 e3 f9 76 2d 86 62 4c d7 c9 89 7d bb 9c 0b cd 69 a8 f3 8d d2 e1 80 99 5e d5 df 6d dc 65 ae 35 b8 36 00 5a 95 e1 d2 fa 03 9e 8f 2b 90 4f 9c 82 e4 b3 56 4b 90 2a 5f 79 8d 81 29 1b fd 7e ac 79 64 6b df a3 c4 0f 8c 4b 23 e9 31 8c b8 61 cd 1c 74 ab c8 5b 81 06 fe 74 9a 46 95 d1 34 2d 14 78 8d 07 9d c7 eb 26 c7 d5 f9 28 6b f1 83 f8 cc 0f d0 e4 28 42 5f b4 b1 6b 97 17 e4 b9 c3 2c 59 9a 5d 42 c7 7e e5 83 66 9c e6 36 01 ae 1a 0f 71 54 b5 69 0b 6c 1b 27 47 d1 94 41 f2 6c 52 e7 a6 6a c1 f5 4e 83 eb 67 c2 a7 51 38 c9 95 8d 6b a5 37 Data Ascii: aEB,y^kep-/#DU>@VzuMO4~0IBuZ sv-bL}i^me56Z+OVK*_y)~ydkK#1at[tF4-x&(k(B_k,Y]B~f6qTil'GAlRjNgQ8k7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.5	49905	216.58.212.129	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:22 UTC	533	OUT	GET /coJBIm7rugfAkdb9_cw5Lry2NDnfSYDjL5MBu_R2st_YCLsZtDxYu28h2EAJzPfY8qudaF8U=s400-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:22 UTC	543	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="channels4_profile.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 24873 X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 21:56:00 GMT Expires: Wed, 03 Jul 2024 21:56:00 GMT Cache-Control: public, max-age=86400, no-transform Age: 1762 ETag: "v1" Content-Type: image/jpeg Vary: Origin Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:22 UTC	847	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 03 02 02 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 08 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 08 08 08 0a 0a 0a 0a 0a 0a 08 0a 0a 0a 0a 08 08 0a 0a 0a 08 08 0d 0d 0a 08 0d 08 08 0a 08 01 03 04 04 06 05 06 0a 06 06 0a 0d 0d 0a 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d ff c0 00 11 08 01 90 01 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 07 00 08 09 ff c4 00 45 10 00 01 02 03 05 05 06 05 02 05 04 00 04 07 01 00 01 00 02 03 04 11 05 12 21 31 f0 06 41 51 61 71 07 13 81 91 a1 b1 22 c1 d1 e1 f1 08 32 14 Data Ascii: JFIFE!1AQaq"2
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 77 1c f7 fd 77 aa db 3a 92 5b 9e be 5a f3 41 19 09 b8 a9 90 0b 86 be eb 48 55 09 ee 53 4e 2a 1f b4 3f 13 9b 4c 8e fc 12 6b db e1 3e 0c 40 f6 e2 2a 38 74 fb a7 ad b3 df 6b 3d b7 33 70 65 e0 be 66 2b cb 19 0c 54 f3 39 00 38 92 72 4e 63 bf 03 f9 35 3c be 3a ed 0b f5 43 39 32 e2 c8 2f 74 18 22 b4 6b 28 1c 40 fe a7 ba 95 3b cd 01 00 57 7a ec c7 85 c5 97 37 9f 0c 85 89 da 64 f5 7f f5 62 dc 39 9b f4 eb 42 5c 0d 7a 57 a2 79 71 e2 31 e5 cb ff 00 84 ef fc c2 3c db 88 7c 47 39 8c c4 87 1a d5 ce 34 68 c0 6f 35 27 93 5c b3 ba c5 7e 73 47 76 c4 39 b0 9f 12 b5 b8 e7 54 7f a4 38 82 7d 0f a2 be ed f8 4f 66 a1 26 ec 47 b2 98 9b 84 0a 0c 33 ca 98 ef ad 6a 84 f9 8a 9b 12 d6 88 d8 94 84 d1 5c 78 9a d3 1c ea 01 e5 81 e4 15 5c 66 8b 1c ae dd 4f 64 fb 53 9a 84 d1 12 13 9c f6 de Data Ascii: ww:[ZAHUSN?Lk>@8tk=3pef+T98rNc5<:C92/t"k(@;Wz7db9B\zWyq1<\|G94ho5'\~sGv9T8}Of&G3j\x\fOdS
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: c0 80 72 35 a2 ab 8e ae e3 3c 73 dc ed ab 8b 2e dd 73 a5 cc 23 8f c5 51 85 70 39 8e 54 38 8f ca c3 3c 75 96 db e1 9d b8 e9 69 69 3d cd 6c 12 09 0f 06 ad e2 06 23 e6 29 cb c5 65 8d 97 6d ae e4 8f a4 fb 28 ed 86 28 0c 83 37 81 70 fe 5b cd 68 4e 1f 09 3c 4e 40 f2 c7 72 c3 29 3e 9d 38 df db bb c9 5a 01 e0 70 f5 af 34 e5 b7 c5 3b 3e e2 77 75 ad 7d 91 62 7b 85 6b c8 3a f9 7d d2 3f 6f 3d fe 6a 57 00 7b a9 82 54 c4 87 17 d5 54 a8 b0 e8 91 a8 af 69 ed 04 4f 72 41 f6 96 1c d6 35 a6 1a dd cb e7 c9 2d e9 7d a3 bc 57 25 37 c9 7a 0a 1c 2f be a9 af 34 68 ad 2c 08 34 3d 75 c5 4c c5 5b f0 b0 03 59 2d 74 c7 62 32 28 e2 9c 2b 02 8c e4 58 51 0a 33 4e fd 72 59 e9 ac 06 5f 2f 6f 9a ac 53 4e 07 1d 70 29 d3 9e 92 61 75 48 39 c3 56 7a 4e d2 18 c0 9f 68 28 6e b5 f2 53 74 69 10 f5 Data Ascii: r5<s.s#Qp9T8<uii=l#)em((7p[hN<N@r)>8Zp4;>wu}b{k:}?o=jW{TTiOrA5-}W%7z/4h,4=uL[Y-tb2(+XQ3NrY_/oSNp)auH9VzNh(nSti
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 66 eb aa 01 ed 6f 0f 74 f4 36 7b 12 ed 1b 48 87 1f 5a c9 69 00 b7 eb bc 7b 26 44 ef 35 a0 96 83 cc 8b bb 58 a2 03 7b dd 7e 14 d3 d1 b7 b1 ea a2 a8 b3 31 b0 23 7e ed 78 fe 68 83 9e d5 d0 e7 48 00 66 6b 8f 8e b2 fb a5 1a 69 66 d8 8a 99 0f 5d 70 f6 d7 8a 9d 99 20 fd b5 55 44 87 3e fa b8 79 7d 54 d6 90 57 47 c3 5a d7 54 6d 2e 11 fa 82 d9 99 71 2c 62 86 86 c4 ef d8 f0 45 45 e7 52 e9 a8 19 8b b9 f9 e6 02 e9 e3 ca b9 f3 91 c4 b6 77 68 db 04 96 80 01 c5 a0 81 43 8e 75 38 90 06 38 0a 57 8a ac e5 a5 86 52 78 74 2e cb ec 18 6f 98 80 e6 e2 5d 1e a4 9a 1f 85 b8 8e 38 93 9f 0c b7 2e 1e 5b 64 af 5b a5 c7 1b 9c ff 00 af b3 ac bc a8 bc 2a fb 6d 78 5d 43 8f 87 35 9d cb 48 ec d9 1b 67 97 62 a6 e6 a9 81 26 76 6e f1 c4 1e ba c5 39 c9 60 fe 38 98 cd 8d 86 69 86 49 7f 25 ad 66 Data Ascii: fot6{HZi{&D5X{~1#~xhHfkif]p UD>y}TWGZTm.q,bEERwhCu88WRxt.o]8.[d[*mx]C5Hgb&vn9`8iI%f
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 34 4b e5 10 4b 9d ea 34 d2 d4 d8 43 0c 96 b2 31 a4 aa 01 1c d5 34 e5 2b 1d 8e b5 d5 23 61 37 24 cc 46 83 bb 5a d5 12 d8 d0 ac 2a 88 51 c3 9e b8 fb 20 04 46 f4 81 84 a5 00 ec 76 b2 fa a6 0e 61 4c c5 2d 54 9d 9e c4 a9 bd dd e8 29 aa 8f 39 8a 55 b0 22 b7 87 aa 8b 15 09 2e ca 63 aa 7e 12 90 c7 0a b6 45 2e fa a9 a7 08 78 6b 45 49 9a f8 94 05 5c 4d 52 c7 9b 35 df 44 15 56 5a 91 c1 e5 45 63 1a e4 5d a8 6c 7b 49 31 1a 5c 5c e6 97 b9 b9 d0 0c 2b e3 96 f4 61 cb f9 69 db 97 49 be 2f e4 82 fe 9a 6c f0 66 58 e3 cd a3 fc aa 49 f9 7a ae 7e b6 fe 0d 7e 2e 6b 95 f5 16 d1 6c 87 7c 5a 5c ea 43 6e 2e 18 63 d6 bb bc 17 87 c1 96 9f 51 cf 2d b1 cc f6 92 db 34 88 24 ec d8 6f 0c 1f 04 48 a1 c1 91 08 38 86 86 dd c2 95 a1 2f 00 91 c3 15 ed 70 e1 2c de 59 3c be 6b 67 f6 62 cf d8 72 Data Ascii: 4KK4C14+#a7$FZ*Q FvaL-T)9U".c~E.xkEI\MR5DVZEc]l{I1\\+aiI/lfXIz~~.kl\|Z\Cn.cQ-4$oH8/p,Y<kgbr
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 1c c6 36 0b 8b 77 1a 37 80 e3 e8 bd ae 97 8e 4b dc f0 7e 4f 93 58 4c 23 0a e9 b5 e9 6d f3 92 1f 2b 14 9c 91 b1 74 9b 2f 0b 8a 78 fb 17 d1 ce 83 f1 0a 79 a7 53 f4 d0 4a 3e a1 74 63 7c 39 aa 04 fb a8 75 f3 58 e7 75 5a e1 36 04 b4 52 4f be b5 ee 96 3e 4f 2f 03 3d c6 9d 35 b9 6b 51 b0 cb f9 74 e8 96 ca 9d 44 a1 9a f6 9e 1a d6 69 88 2b 45 56 5e d7 0b 0e 15 11 21 da 38 03 2d ea 91 5e 62 70 88 72 4d 26 45 82 38 eb a2 56 1c a8 31 a1 0d 75 59 d8 bd 96 1b 69 4e 48 36 38 37 c1 0c 8a 12 a0 ed 70 d7 e1 23 34 8e 78 24 0c a2 34 04 86 dd 6a 9c d3 02 c3 0a 80 80 53 59 a5 41 c1 28 1e 89 13 cb 5a c9 50 0d 91 b7 1d 6b 5c e7 6a 90 f8 c5 4d a6 f0 6e b2 44 03 c3 62 7a 49 22 91 d7 f0 a6 a9 59 68 b8 81 50 b2 c9 ae 3f ec 08 51 ea 39 fa 29 d9 e8 1b c7 14 8c 36 c4 25 5c a9 b1 59 6a Data Ascii: 6w7K~OXL#m+t/xySJ>tc\|9uXuZ6RO>O/=5kQtDi+EV^!8-^bprM&E8V1uYiNH687p#4x$4jSYA(ZPk\jMnDbzI"YhP?Q9)6%\Yj
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 79 78 b2 e3 ba ac f8 79 f1 e5 9b c5 12 41 d5 34 1c 71 d7 e1 46 33 cb 6c ae 9a 01 01 ad c7 32 7c 17 46 a4 61 bb 56 16 73 0d 69 c7 2e 89 e1 bd a7 3d 69 3a 3e 54 d7 55 be 4c 71 f6 a9 8d 51 86 f0 57 2d 75 15 d0 4e b4 55 49 59 db a0 a2 4b ef 0a fb 59 f7 15 8c c2 84 eb 34 68 c2 bb c7 eb ec a3 4d 36 b4 63 70 5b b0 34 67 e2 a0 27 b7 21 87 54 07 bb ae a9 c0 4a 6e aa a2 38 42 1c 51 a2 d8 0f 84 83 80 ba 1f ba 0c 29 98 6a 6c 30 ee 74 d6 bd 94 e9 4c 11 76 bc 96 69 28 3e a9 90 26 21 ae 5b d2 d8 3c d7 a2 40 48 0d 2a a0 48 63 7e 9a f4 54 05 6c 24 b4 5b 3c 8d e3 ed ec a6 c5 40 af 28 50 0f 8f 4c 7c 90 62 42 7d 75 af 15 34 de 89 2a 1d bb 5e 69 1c 56 ba 5c b4 a5 bd b4 d0 d0 26 ea 68 7c f7 7b a2 a7 4b 16 64 88 9b e0 c7 84 c8 06 47 ae a8 98 39 d1 29 c3 14 80 4f 88 96 d4 87 38 Data Ascii: yxyA4qF3l2\|FaVsi.=i:>TULqQW-uNUIYKY4hM6cp[4g'!TJn8BQ)jl0tLvi(>&![<@HHc~Tl$[<@(PL\|bB}u4^iV\&h\|{KdG9)O8
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 6c ff 00 63 b1 e2 10 62 0e e9 9b c9 a1 71 e4 1b f5 c0 73 5d fc 3d 0e 79 df cb c4 79 9c fd 7e 18 4f c7 cd 75 ab 03 63 a0 4b 34 77 6c 17 a9 fb ce 2f 3c 71 dd e1 82 fa 4e 0e 93 0e 39 e2 3e 67 9b ac cf 92 f9 ab 28 32 c5 ee a9 c8 2e ed 49 3c 38 3c e5 5a b9 68 54 0b 0b e5 d3 05 8a 30 44 46 4f 87 ff 00 5d 9b 16 62 cb 88 cd 18 c1 88 d7 7f b4 b8 02 7a 00 49 f0 5c dd 5e 1b c3 6e ef 8d ce ce 4d 2c 3b 1c da 01 1e 4e 09 39 dd 0d 3d 5b 81 5f 1d cb 8e b2 7e ab d3 72 77 61 2b 43 6c d8 e4 62 d3 45 94 75 65 36 ab 89 2a 2a 09 15 03 3a 6f dc b4 95 cd d9 36 6b 66 5b fd 38 75 54 73 19 f4 b8 d9 6b 2c bd d5 35 a2 9c ab 7c 26 9a c7 4a 18 8e ba 32 68 23 c5 4c 8d 7d b3 3d 99 6c f1 7e d0 02 31 12 f2 4d 27 fc 9e f2 17 b7 f1 d8 6f 2d be 33 e7 f9 35 8c 8f b8 24 9d 50 be 81 f0 98 d4 86 Data Ascii: lcbqs]=yy~OucK4wl/<qN9>g(2.I<8<ZhT0DFO]bzI\^nM,;N9=[_~rwa+ClbEue6**:o6kf[8uTsk,5\|&J2h#L}=l~1M'o-35$P
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: e0 00 c4 9a 00 11 21 5b 27 b4 47 4d bd ff 00 b0 5c 69 fe b7 b7 e2 a7 fa 58 69 43 c0 bf 2a 8a b1 d8 85 7a 91 9d ca df 49 10 65 6e 80 2a 5d cc e2 4f 33 40 07 90 1d 06 49 2b 45 88 f4 e0 b5 32 1b 94 a9 ee fd 1a 1b 44 8f 34 29 11 dc 30 f2 18 fa a7 66 8a 5d be 2e da db 43 bc 99 8a e1 bd ee a7 81 a2 f9 6e a6 ef 92 d7 d9 74 b3 5c 78 c5 7c 27 f2 fb 79 2e 47 60 ae 18 7e 52 31 65 f7 7b 24 4b 06 0f 2d 6b 72 b4 8b 11 01 e6 81 5c 10 62 57 5e 8a d0 65 ee a8 82 87 14 e0 a8 91 e6 5c dc 3d 7a eb d9 46 d4 e5 da fc ac d2 78 6e f4 81 c5 ea 54 46 fe 51 a3 19 dc 90 41 c6 85 c1 06 6b 52 56 cf 0e a6 b5 af 14 24 0b d5 35 4a 2a bd 16 74 35 54 ba 12 6d e1 1a b8 d7 5a d6 09 16 80 88 71 52 b8 23 69 f6 aa 9b e5 4f ad 3f 4c d3 6d 74 9d cd ed 73 81 f1 35 1e eb ea 3e 3e ff 00 4d f2 7f 23 Data Ascii: !['GM\iXiCzIen]O3@I+E2D4)0f].Cnt\x\|'y.G`~R1e{$K-kr\bW^e\=zFxnTFQAkRV$5J*t5TmZqR#iO?Lmts5>>M#
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 48 d1 63 9c 2b bf 58 a5 56 80 c7 eb 15 2a 33 bf e1 99 c7 5a dc 99 58 2b a3 60 a9 10 08 f1 b0 d7 55 0a 41 87 32 9e 8e d1 5e ee 95 f0 48 88 66 77 6b cb 14 68 f6 ee bf a6 c6 b9 8c 8e f1 8b 4b 9a db bb aa 05 49 f2 20 2f 7b e3 b1 ba b5 f3 9f 25 97 98 eb 72 bb 41 dd bc 16 82 2b 98 dc be 83 1f 0f 9b ce 8a e9 c0 1c e6 8c b3 6f f8 bb 11 e5 88 f0 5d 39 4f b7 26 17 57 4b bb 32 7f 72 c7 4d e5 59 ce 5a 01 8d c7 3d ca 75 ba d3 bb 51 27 63 6d 7a 92 df 11 f3 f9 29 ca 2b 0c 9a f7 2c 9b 14 20 12 22 00 04 20 2d e5 dd 92 cb 92 78 75 f4 f7 59 2f ac f9 8a 60 b8 ac 7a ab 0e f1 40 78 46 40 3d af 40 42 b7 63 d2 13 cf fa 4a 61 98 b2 19 48 6d e9 ee bb f1 f4 f2 39 7f ba 94 2d 58 0c d2 95 31 42 47 a2 d1 07 19 dd aa 8c 6e 80 37 9f 6d 05 bf 14 73 72 df 0c df fe 60 ec 96 fa 72 5c a9 91 Data Ascii: Hc+XV*3ZX+`UA2^HfwkhKI /{%rA+o]9O&WK2rMYZ=uQ'cmz)+, " -xuY/`z@xF@=@BcJaHm9-X1BGn7msr`r\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.5	49907	172.217.23.118	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:22 UTC	464	OUT	GET /vi/mIHHfNVfhPk/maxresdefault.jpg HTTP/1.1 Host: i.ytimg.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:22 UTC	658	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Timing-Allow-Origin: * Content-Length: 168781 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 22:21:23 GMT Expires: Wed, 03 Jul 2024 00:21:23 GMT Cache-Control: public, max-age=7200 ETag: "1712203833" Content-Type: image/jpeg Vary: Origin Age: 239 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:22 UTC	732	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 00 02 03 04 05 01 06 07 08 09 0a ff c4 00 52 10 00 02 01 02 05 02 04 03 06 05 03 01 05 05 00 13 01 02 11 00 03 04 05 12 21 31 06 41 13 22 51 61 07 71 81 08 14 32 91 a1 f0 Data Ascii: JFIFCC"R!1A"Qaq2
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 51 45 01 45 14 50 14 Data Ascii: PQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEPQEEP
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: c3 0e 5f 45 75 83 f0 a3 26 21 74 62 31 ed a8 9d f5 a0 ff 00 f6 2a 5d 8f 83 79 2d c0 49 c5 63 fd 87 88 9f af 92 92 e4 c5 71 ca 2b b4 b7 c1 6c 8a 25 71 79 81 f6 f1 2d c8 f9 f9 29 c4 f8 21 92 3e 92 31 79 81 5e 09 17 2d f3 ff 00 da 53 26 2b 89 51 5d cb 0d f0 3b 21 ba 17 5e 23 33 0c 47 02 ed b0 27 e7 a3 61 4e bf c0 ae 9d 0c c0 63 33 39 1a 77 37 6d c7 b9 fc 1f 2a 64 c3 84 51 5d d6 f7 c0 9c 82 d5 c5 5f be e6 10 d1 04 dd b7 c4 f3 f8 28 b1 f0 37 a7 2e 3a a1 c7 66 52 54 c9 f1 6d 80 0f cf 47 15 4c 38 55 15 de 3f f6 0b 90 e9 23 ef b9 80 7e c3 c5 b6 7f 3f 26 d5 86 f8 0b 91 29 8f bd 66 5f 2f 16 dc cf ff 00 69 53 30 c3 84 51 5d cf ff 00 61 bd 3e c4 05 c5 e6 40 93 1b dd b7 ff 00 e2 eb 2f f0 2f 20 50 df f8 ac c8 10 24 01 76 d9 ff 00 f6 29 98 61 c2 e8 ae e8 df 02 fa 7c 98 Data Ascii: _Eu&!tb1]y-Icq+l%qy-)!>1y^-S&+Q];!^#3G'aNc39w7mdQ]_(7.:fRTmGL8U?#~?&)f_/iS0Q]a>@// P$v)a\|
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: f4 b2 82 4e 3b 38 31 bc 2d fb 5c 7f f4 e9 4b f6 5c e9 77 61 18 fc dc 8e 7f fc e2 d7 f5 f0 a8 61 e5 fa 2b d4 47 ec b7 d2 ab a7 56 63 9c 03 30 7f 8b 6b 6f fe f7 58 7f b2 e7 4b 2c 93 98 67 00 08 11 e3 5a 26 7f fa 75 32 62 bc bd 45 7a 79 be cc 1d 28 c4 0b 59 86 72 cd 3d ef 5a 81 f5 f0 e9 5f fe 4b 7d 31 33 fe a1 9c 05 93 b9 bb 6b 8f fe 9d 55 fe 6b cb f4 57 a8 57 ec bd d2 6d 73 49 cc 73 95 00 ef 37 ad 49 ff 00 ef 5f d6 90 3e cb fd 2c d7 23 fd 43 36 02 4e fe 3d a3 b7 ff 00 4e 9c d3 2f 30 d1 5e 9e 3f 65 fe 97 71 fc 3c 76 70 4c 4c 78 d6 8c ff 00 f7 ba 69 7e cc dd 2c cd 07 1f 9b ac 09 61 e3 5a 31 ff 00 de e9 f6 d7 f3 5e 66 a2 bd 34 ff 00 66 3e 98 00 95 c7 67 04 02 7f f7 d6 a2 3e 7e 1d 23 ff 00 c9 9b a6 15 58 b6 3f 36 da 38 bf 6a 3d ff 00 f7 55 70 98 79 a2 8a f4 8d Data Ascii: N;81-\K\waa+GVc0koXK,gZ&u2bEzy(Yr=Z_K}13kUkWWmsIs7I_>,#C6N=N/0^?eq<vpLLxi~,aZ1^f4f>g>~#X?68j=Upy
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 7d 16 6c 90 be 46 2b dc c4 0f ce 9d 62 cd 2f 00 01 b6 9f 4f dc 7e b4 59 76 4b 41 00 88 7d 5b 8d e2 23 f2 ac f9 95 48 32 d6 89 9d 23 d4 0e 48 fe f4 f4 60 ee 1d 5b c4 56 13 ad 77 68 f7 f4 fc e9 d5 b1 e1 80 54 82 c0 6e ab fc bb d3 3a 63 43 30 82 fb 88 da 07 bd 3b 65 56 ed d5 5d 51 a9 87 98 6c 00 ab 8d ad ce 32 13 41 20 38 95 e3 cb c9 35 9b 97 86 16 cd d6 20 ca ec 1b 91 34 f5 99 b8 eb 71 01 16 ad f7 22 3d c5 56 66 d7 7f 84 88 67 5b b6 a3 3d ea e3 33 39 49 f2 85 84 b0 6f e2 6d a3 49 66 68 8a da 6d 5f 2d 71 09 55 7e 0c 76 15 43 95 e1 8a df b9 a8 34 a8 e3 4e fb ff 00 4a bc b6 da 2d 8d 3c 96 dd 67 9f 59 ac 91 25 18 69 8d 23 4a 89 f9 d3 d6 9c eb 0e db ce db 9e 4f bd 47 b6 c8 e8 02 8d 2c 4c 1d bf 5a 90 2d f9 16 4e a9 27 83 e9 4c 4a d6 12 ad bc c8 92 6d c6 e3 fd d5 Data Ascii: }lF+b/O~YvKA}[#H2#H`[VwhTn:cC0;eV]Ql2A 85 4q"=Vfg[=39IomIfhm_-qU~vC4NJ-<gY%i#JOG,LZ-N'LJm
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 71 84 86 b6 a8 b7 15 9e 3d 02 99 1c 9f df e5 45 94 7b 6b 6c 91 ad 87 9a 07 f4 fd 29 a0 74 db 05 8c 96 27 8d c9 f7 f9 54 91 89 25 6d 86 00 05 5d 24 8e c6 7b fb ff 00 9a b8 de 12 b0 eb 72 06 eb ac ec 34 ed ed 58 16 ee 32 dc 28 0b 23 ec 47 02 47 b7 a5 22 e5 c6 6f 0c 3a 96 d3 ba b7 20 77 fa 6f 1b 52 b5 f8 17 4a bc 16 51 e6 61 04 6f ed 4f b6 a4 bc 3a 2d 90 8c 03 06 43 b1 6e 01 35 81 6d 0b c9 5f 31 59 00 6d 03 dc d6 6d a8 12 5d c9 44 52 48 1d cf 6a 5c dc 22 e3 c1 52 e0 04 91 03 f2 ab 27 aa ce ef 21 36 c6 b4 0a 01 56 73 20 f6 61 3e bf 9d 3b 87 d3 69 9d c7 98 81 26 78 fd ff 00 9a 8e 96 fc 7b 9a 11 48 04 41 10 4c 7c a9 7a 48 50 0b 17 df 70 04 7c e7 f4 a6 a6 8c fc 1f d6 08 60 cb aa 01 92 76 de 47 7f a5 2f c6 0f 2c 00 56 53 00 c6 f4 c3 dd 1a 56 06 a5 d3 25 41 30 27 Data Ascii: q=E{kl)t'T%m]${r4X2(#GG"o: woRJQaoO:-Cn5m_1Ymm]DRHj\"R'!6Vs a>;i&x{HAL\|zHPp\|`vG/,VSV%A0'
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 59 5b c6 da 2b 01 b0 d6 e2 09 ac dd 45 9f 0d 07 e2 36 69 6c bd ac 12 39 44 4f 3b db 4d a7 fc 48 ad 23 16 05 cc b5 6e 32 80 c4 ef 1e 9d a2 ae 2e 05 cf 7a a2 e5 a3 3f c4 67 90 c6 64 0e 05 57 dd c3 93 93 df 2c 3f f2 6e 11 bc 02 37 8f f1 5d 26 ae 17 bb ad ef a4 2e 97 c8 30 e4 05 65 55 86 04 70 77 fe f5 39 d0 35 b2 42 81 06 01 ee 6a ab e1 f8 6c 46 44 aa 90 07 88 56 49 e3 bd 6c 4f 61 4b 9d 5e 5b 7b 41 89 9d b7 8a cd b9 a9 33 d4 43 62 6d f8 61 94 b0 04 b0 6d a0 fa 7c f6 a6 6e ae 9b 60 06 d5 70 1e c7 6f df f8 a9 8f 86 d9 9c 96 04 6e 84 ac 77 8d cd 31 76 d1 10 b1 e6 30 76 11 1f 3a 9d da 60 c9 2f 65 9c 00 18 81 a7 51 e0 52 0b b5 b6 20 f0 37 62 2a 56 29 8d e7 b8 dc 6a 24 ac 0d 8e dd a9 87 b7 73 11 74 cf 9a e1 24 6a 68 20 ed ea 7d aa fc 64 92 f6 1b 55 66 55 42 48 b6 Data Ascii: Y[+E6il9DO;MH#n2.z?gdW,?n7]&.0eUpw95BjlFDVIlOaK^[{A3Cbmam\|n`ponw1v0v:`/eQR 7b*V)j$st$jh }dUfUBH
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 00 cd 3f 61 d5 54 9f 29 06 20 02 2a 5f 1c fb 67 39 5f 0f 25 ab 50 09 24 ce b3 c4 81 c0 fc ea e3 26 b2 d9 9e 36 ce 1a d9 d7 7d d8 00 ad c9 9e de 95 ae 35 ff 00 e0 69 d4 48 42 60 4e cb 3f e6 b6 2e 8c c6 d9 c0 e7 d8 6b d7 2d 6b 54 1a e1 84 86 23 81 ef cd 66 6d 76 ea 56 7a 4f 17 96 2d bb 78 ab 56 2c dd b8 09 54 5b c8 c0 41 e0 c1 34 d6 33 07 67 01 a8 fd e3 0f 77 10 a2 7c 2b 6c 78 1c 99 fd 2b 39 9f 50 a5 db 16 de d2 78 77 1a 49 22 00 f7 db f3 fd 2a 83 0f 9d e1 2d 5b c4 9b a9 e2 de ba 42 29 1c 72 0c 4f 35 ad 4e 12 fc 1d bb 8b f3 e8 b8 55 13 54 ca 9e 67 b5 39 86 bb 62 ed bd 2c e2 dd b1 be af 0c 93 1f e7 da a8 2e 63 6d dc bc cd a7 4b ab 10 ba 4e df 97 a5 3b 81 c5 18 6f 0d c3 af 30 47 b7 a5 31 94 ce 2e 97 2f 63 28 ba 43 5e b9 79 40 da 2d 5b 00 7e b4 e2 5f c8 85 96 Data Ascii: ?aT) _g9_%P$&6}5iHB`N?.k-kT#fmvVzO-xV,T[A43gw\|+lx+9PxwI"-[B)rO5NUTg9b,.cmKN;o0G1./c(C^y@-[~_
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 35 52 2f 89 72 56 4a cf 99 77 e3 dc d3 f3 2a 15 8e ca d2 18 71 cf bd 35 71 9f 51 90 cc c6 49 69 1b 7c cf ef 9a d4 b2 68 f4 4a d9 d6 02 80 75 b4 12 cc 67 6f 7a 76 eb ff 00 11 b4 49 91 20 9e 05 34 92 a9 1a 86 a8 98 5e 4d 48 3a 15 49 28 c4 10 1c c6 db 7e c5 4c d9 aa 4f 10 87 4b db 21 a0 a8 fc 0d bc 48 ff 00 a5 2d 18 0b 80 c0 3e 70 24 f7 3c 41 f5 a4 5a 74 d4 89 a5 83 ac c0 8d 87 ce 96 2f 21 1b a0 d3 c2 a9 e1 7d e9 26 67 4b a4 bb 6e a8 a2 da f9 99 88 01 9b 9e 6a 5d cd ae 22 a8 64 80 01 68 dc 83 df f7 ed 50 ec 43 15 56 86 62 49 26 36 9a 90 e7 c4 b8 9a 9c 96 20 29 33 b1 ff 00 a5 24 c6 92 64 f1 6b 7a 54 88 7d 3b 41 9e 7d eb 17 06 b2 c8 aa ba 81 e1 b6 11 1c fe fd 6b 0d a6 c8 76 01 94 ab 08 db 72 08 e7 da 9b d2 cf 70 4c 00 40 0e 1b 8a d6 3d af 0b b6 43 98 08 06 af Data Ascii: 5R/rVJw*q5qQIi\|hJugozvI 4^MH:I(~LOK!H->p$<AZt/!}&gKnj]"dhPCVbI&6 )3$dkzT};A}kvrpL@=C
2024-07-02 22:25:22 UTC	1390	IN	Data Raw: 1d b9 db e9 4c 5d b7 e2 bf 91 3c ec 09 3e 95 6b 67 02 b7 2e a8 37 74 80 0f 9a b1 77 2d 1a 03 ea 02 d0 24 42 1d fe 7f 9f ad 26 b4 b3 e5 45 88 b0 80 e9 f1 14 b8 5d 80 fc 27 fe 69 b6 5b 97 02 17 61 00 6d e6 d3 de ae ef e0 f0 da 54 bf fe 60 26 4c fe 54 84 c0 d9 04 b3 a8 7b 47 69 89 f9 56 6d ca 6e 45 18 41 74 c2 34 40 04 03 eb df e9 4a 17 11 0b 2a 00 41 02 41 1b c8 df f5 ab 9b 78 3c 39 2c 85 40 f5 74 dc ef 4e a5 8b 24 b7 f0 75 03 30 c0 77 ef 15 66 9a ce 9e 78 80 00 3d fb 8a c9 49 3e 50 7e 54 6a d4 49 3b c0 da 87 30 76 3c f2 6b 4e 77 e8 90 09 e2 4d 28 05 20 01 2c c7 d0 d6 77 b4 1a 18 6f b6 c6 76 ac 2c 6d 32 37 ab d2 30 57 49 de b2 c3 51 e6 4f b7 6a c5 00 8d e4 4d 40 02 41 99 88 e2 8d a2 37 1b 7e 74 a3 6f 48 93 df d0 f1 48 99 ff 00 9a a8 ce fb 83 db de 8f 31 82 Data Ascii: L]<>kg.7tw-$B&E]'i[amT`&LT{GiVmnEAt4@J*AAx<9,@tN$u0wfx=I>P~TjI;0v<kNwM( ,wov,m270WIQOjM@A7~toHH1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.5	49909	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:23 UTC	2947	OUT	POST /api/stats/atr?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=9.046&fmt=397&fs=0&rt=11.221&euri&lact=9072&cl=648221806&mos=0&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&fexp=v1%2C23986021%2C18623%2C204121%2C230596%2C104308%2C6789%2C16229%2C133212%2C14625955%2C11684381%2C7111%2C24166%2C12177%2C9954%2C1192%2C7913%2C18310%2C273%2C4147%2C2819%2C2%2C6689%2C2007%2C9072%2C29151%2C2197%2C621%2C7961%2C1414%2C19%2C2%2C1082%2C4081%2C2872%2C101%2C10943%2C2471%2C6008%2C150%2C1388%2C713%2C2585%2C8134%2C1233%2C1375%2C3761%2C3157%2C3975%2C681%2C1590%2C3542%2C8162%2C3259&feature=youtu.be&afmt=251&muted=0&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb0 [TRUNCATED] Host: www.youtube.com Connection: keep-alive Content-Length: 2153 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00 sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1719959120843 X-YouTube-Page-CL: 648613515 X-Goog-Event-Time: 1719959120843 X-YouTube-Utc-Offset: -240 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D X-YouTube-Ad-Signals: dt=1719959110085&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:23 UTC	2153	OUT	Data Raw: 61 74 72 3d 61 25 33 44 36 25 32 36 61 32 25 33 44 31 25 32 36 62 25 33 44 5f 61 71 50 77 4f 68 6b 33 66 6d 6f 69 6b 31 61 4e 63 62 55 39 70 4e 4a 34 4e 6f 25 32 36 63 25 33 44 31 37 31 39 39 35 39 31 30 32 25 32 36 64 25 33 44 31 25 32 36 65 25 33 44 64 51 77 34 77 39 57 67 58 63 51 25 32 36 63 31 61 25 33 44 31 25 32 36 63 36 61 25 33 44 31 25 32 36 63 36 62 25 33 44 31 25 32 36 68 68 25 33 44 49 44 62 4a 43 43 65 6b 72 67 30 54 56 59 69 4a 6d 76 69 35 4f 75 68 2d 4a 78 73 65 70 4e 59 45 5f 6a 53 6d 63 52 4b 56 71 46 59 25 32 36 72 31 61 25 33 44 25 32 34 6d 41 63 35 42 31 39 52 41 41 59 32 34 5a 57 4c 46 75 48 65 6a 62 78 62 52 53 69 4b 77 50 57 6e 41 44 51 42 45 41 72 5a 31 4b 78 6d 38 31 6a 54 4f 64 68 4b 6f 4c 35 44 61 44 39 30 49 57 6b 51 4b 47 50 Data Ascii: atr=a%3D6%26a2%3D1%26b%3D_aqPwOhk3fmoik1aNcbU9pNJ4No%26c%3D1719959102%26d%3D1%26e%3DdQw4w9WgXcQ%26c1a%3D1%26c6a%3D1%26c6b%3D1%26hh%3DIDbJCCekrg0TVYiJmvi5Ouh-JxsepNYE_jSmcRKVqFY%26r1a%3D%24mAc5B19RAAY24ZWLFuHejbxbRSiKwPWnADQBEArZ1Kxm81jTOdhKoL5DaD90IWkQKGP
2024-07-02 22:25:23 UTC	504	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:23 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate Access-Control-Allow-Origin: https://www.youtube.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.5	49908	142.250.181.238	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:24 UTC	1314	OUT	POST /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive Content-Length: 532 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" Content-Type: application/x-www-form-urlencoded;charset=UTF-8 sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" X-Goog-AuthUser: 0 sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=hXqS9Q2mzHUDQB7gUXcRL32qaCngMdSHIVwwWVnhfEwgV8iHjDzbYUvldl_kTmOusG6Zl2_U3PA5ztyWZFAHR3GyS_G-dWN07v2vzyYm6hJ8GlermL6Tv9jORz8VYUdzHkQGDfmjTWdrOcGNGbOxixoBtz4q8nZxaF9LCuFPDBg
2024-07-02 22:25:24 UTC	532	OUT	Data Raw: 5b 5b 31 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 65 6e 22 2c 6e 75 6c 6c 2c 22 32 32 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 47 6f 6f 67 6c 65 20 43 68 72 6f 6d 65 22 2c 22 31 31 37 22 5d 2c 5b 22 4e 6f 74 3b 41 3d 42 72 61 6e 64 22 2c 22 38 22 5d 2c 5b 22 43 68 72 6f 6d 69 75 6d 22 2c 22 31 31 37 22 5d 5d 2c 30 2c 22 57 69 6e 64 6f 77 73 22 2c 22 31 30 2e 30 2e 30 22 2c 22 78 38 36 22 2c 22 22 2c 22 31 31 37 2e 30 2e 35 39 33 38 2e 31 33 32 22 5d 2c 5b 31 2c 30 2c 30 2c 30 2c 30 5d 5d 5d 2c 31 38 32 38 2c 5b 5b 22 31 37 31 39 39 35 39 31 32 30 38 30 37 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c Data Ascii: [[1,null,null,null,null,null,null,null,null,null,[null,null,null,null,"en",null,"22",null,[[["Google Chrome","117"],["Not;A=Brand","8"],["Chromium","117"]],0,"Windows","10.0.0","x86","","117.0.5938.132"],[1,0,0,0,0]]],1828,[["1719959120807",null,null,null
2024-07-02 22:25:24 UTC	921	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: https://www.youtube.com Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: X-Playlog-Web Set-Cookie: NID=515=V8XTlWxZDJPhEDE4MTaGpxB0hle9goc7HJQb_roXCA764MlD4wvxYrqJTuaTtSel3z7c_tPZ-enIvR6ZLn4vL8fpLJwjhhpSZx33_RdTw7z8hDV4R_CWwC5AZOkP5-qq8xnujo3-PPk3WGMJFmdNkKGqjhoht8A0PzYHLF7xIso; expires=Wed, 01-Jan-2025 22:25:24 GMT; path=/; domain=.google.com; Secure; HttpOnly; SameSite=none P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Content-Type: text/plain; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:24 GMT Server: Playlog Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Tue, 02 Jul 2024 22:25:24 GMT Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:24 UTC	137	IN	Data Raw: 38 33 0d 0a 5b 22 2d 31 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 41 4e 44 52 4f 49 44 5f 42 41 43 4b 55 50 22 2c 30 5d 2c 5b 22 42 41 54 54 45 52 59 5f 53 54 41 54 53 22 2c 30 5d 2c 5b 22 53 4d 41 52 54 5f 53 45 54 55 50 22 2c 30 5d 2c 5b 22 54 52 4f 4e 22 2c 30 5d 5d 2c 2d 33 33 33 34 37 33 37 35 39 34 30 32 34 39 37 31 32 32 35 5d 2c 5b 5d 2c 7b 22 31 37 35 32 33 37 33 37 35 22 3a 5b 31 30 30 30 30 5d 7d 5d 0d 0a Data Ascii: 83["-1",null,[[["ANDROID_BACKUP",0],["BATTERY_STATS",0],["SMART_SETUP",0],["TRON",0]],-3334737594024971225],[],{"175237375":[10000]}]
2024-07-02 22:25:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.5	49910	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:24 UTC	654	OUT	GET /s/desktop/a7b1ec23/img/favicon.ico HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:24 UTC	675	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 1150 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 02 Jul 2024 14:10:55 GMT Expires: Wed, 02 Jul 2025 14:10:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 09:14:44 GMT Content-Type: image/x-icon Vary: Accept-Encoding Age: 29669 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:24 UTC	715	IN	Data Raw: 00 00 01 00 01 00 10 10 00 00 01 00 20 00 68 04 00 00 16 00 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 12 0b 00 00 12 0b 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 00 00 ff 10 00 00 ff 40 00 00 ff 40 00 00 ff 70 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 40 00 00 ff 40 00 00 ff 10 ff ff ff 00 ff ff ff 00 ff Data Ascii: h( @@p@@
2024-07-02 22:25:24 UTC	435	IN	Data Raw: 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 60 00 00 ff 30 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 30 ff ff ff 00 00 00 ff 60 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff ff 00 00 ff 60 ff ff ff 00 ff ff ff 00 ff ff ff 00 00 00 ff 10 00 00 ff 40 00 00 ff 40 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 80 00 00 ff 40 00 00 ff 40 00 00 ff 10 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 ff ff ff 00 Data Ascii: `00``@@@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.5	49911	142.250.184.238	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:24 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=OAhaJtZA1lc6HB1wHfesaFHaBsUcIogrdB6nBhy3TPrgUm4UyJWi-MrP1F7ftNTmdvLDxaBb0VP5hRRLgLrl7VZZOFRCcGiE_hBgE-ae_K_fdFaCbhO7THgvbXfuO98u7XYkhL46gLZ3zmrWVikAhO5ccGZZXlQvJbvpG6jpP3A
2024-07-02 22:25:24 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 02 Jul 2024 22:25:24 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:24 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-02 22:25:24 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.5	49916	142.250.186.68	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:24 UTC	1406	OUT	GET /pagead/lvz?evtid=ACd6KtxY3CFK7ixpUrPS1lHwPzur3pDlcy5Zx0XqW5-1SNwkUeWh7D5el9IkjJktOWkkVZqep_r9QLpklLTHUpqEuRl6bh8UmQ&req_ts=1719959102&pg=MainAppBootstrap%3AWatch&az=1&sigh=AB9vU42uXSefyeBj-5rvOh-8JgRegagJxQ HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-arch: "x86" sec-ch-ua-full-version: "117.0.5938.132" sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=OAhaJtZA1lc6HB1wHfesaFHaBsUcIogrdB6nBhy3TPrgUm4UyJWi-MrP1F7ftNTmdvLDxaBb0VP5hRRLgLrl7VZZOFRCcGiE_hBgE-ae_K_fdFaCbhO7THgvbXfuO98u7XYkhL46gLZ3zmrWVikAhO5ccGZZXlQvJbvpG6jpP3A
2024-07-02 22:25:25 UTC	529	IN	HTTP/1.1 200 OK P3P: policyref="https://www.googleadservices.com/pagead/p3p.xml", CP="NOI DEV PSA PSD IVA IVD OTP OUR OTR IND OTC" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Type: image/gif Date: Tue, 02 Jul 2024 22:25:25 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: cafe Content-Length: 42 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:25 UTC	42	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 01 44 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.5	49918	142.250.184.238	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:26 UTC	664	OUT	GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1 Host: play.google.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=515=OAhaJtZA1lc6HB1wHfesaFHaBsUcIogrdB6nBhy3TPrgUm4UyJWi-MrP1F7ftNTmdvLDxaBb0VP5hRRLgLrl7VZZOFRCcGiE_hBgE-ae_K_fdFaCbhO7THgvbXfuO98u7XYkhL46gLZ3zmrWVikAhO5ccGZZXlQvJbvpG6jpP3A
2024-07-02 22:25:26 UTC	270	IN	HTTP/1.1 400 Bad Request Date: Tue, 02 Jul 2024 22:25:26 GMT Content-Type: text/html; charset=UTF-8 Server: Playlog Content-Length: 1555 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-02 22:25:26 UTC	1120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 65 6e 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 76 69 65 77 70 6f 72 74 20 63 6f 6e 74 65 6e 74 3d 22 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 6d 69 6e 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2c 20 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 22 3e 0a 20 20 3c 74 69 74 6c 65 3e 45 72 72 6f 72 20 34 30 30 20 28 42 61 64 20 52 65 71 75 65 73 74 29 21 21 31 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 2a 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 68 74 6d 6c 2c 63 6f 64 65 7b 66 6f 6e 74 3a 31 35 70 78 2f 32 32 70 78 20 61 72 69 61 6c 2c 73 61 6e 73 2d Data Ascii: <!DOCTYPE html><html lang=en> <meta charset=utf-8> <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width"> <title>Error 400 (Bad Request)!!1</title> <style> *{margin:0;padding:0}html,code{font:15px/22px arial,sans-
2024-07-02 22:25:26 UTC	435	IN	Data Raw: 70 69 78 65 6c 2d 72 61 74 69 6f 3a 32 29 7b 23 6c 6f 67 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 69 6d 61 67 65 73 2f 62 72 61 6e 64 69 6e 67 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 2f 32 78 2f 67 6f 6f 67 6c 65 6c 6f 67 6f 5f 63 6f 6c 6f 72 5f 31 35 30 78 35 34 64 70 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 30 30 25 20 31 30 30 25 7d 7d 23 6c 6f 67 6f 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 68 65 69 67 68 74 3a 35 34 70 78 3b 77 69 64 74 68 3a 31 35 30 70 78 7d 0a 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 61 20 68 72 65 66 3d 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 3e 3c 73 70 61 6e Data Ascii: pixel-ratio:2){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat;-webkit-background-size:100% 100%}}#logo{display:inline-block;height:54px;width:150px} </style> <a href=//www.google.com/><span

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.5	49922	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:27 UTC	630	OUT	GET /sw.js_data HTTP/1.1 Host: www.youtube.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:27 UTC	1664	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Tue, 02 Jul 2024 22:25:27 GMT Content-Disposition: attachment; filename="response.bin"; filename=UTF-8''response.bin Strict-Transport-Security: max-age=31536000 X-Frame-Options: SAMEORIGIN Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version= Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy: same-origin; report-to="youtube_main" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:27 UTC	1664	IN	Data Raw: 64 32 31 0d 0a 29 5d 7d 27 0a 0a 5b 5b 22 79 74 2e 73 77 2e 61 64 72 22 2c 6e 75 6c 6c 2c 5b 5b 5b 22 65 6e 22 2c 22 55 53 22 2c 22 55 53 22 2c 22 38 2e 34 36 2e 31 32 33 2e 33 33 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 74 72 75 65 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 22 2c 22 22 2c 22 43 67 74 42 55 57 68 58 62 6c 70 53 64 6b 74 58 53 53 6a 58 5f 4a 47 30 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 58 77 25 33 44 25 33 44 22 2c 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e 30 2e 30 20 53 61 Data Ascii: d21)]}'[["yt.sw.adr",null,[[["en","US","US","8.46.123.33",null,null,true,null,null,null,null,"","","CgtBUWhXblpSdktXSSjX_JG0BjIKCgJVUxIEGgAgXw%3D%3D","Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Sa
2024-07-02 22:25:27 UTC	1664	IN	Data Raw: 61 61 2c 65 69 64 5c 75 30 30 33 64 56 33 36 45 5a 72 5a 53 36 49 47 68 73 51 2d 47 6d 36 4c 34 41 67 2c 63 6c 69 65 6e 74 5f 74 72 61 6e 73 70 6f 72 74 5c 75 30 30 33 64 74 63 70 22 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 30 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 5b 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 22 43 4e 66 38 6b 62 51 47 45 4e 75 4b 73 51 55 51 7a 49 71 78 42 52 43 4e 7a 4c 41 46 45 4a 50 76 73 41 55 51 36 2d 6a 2d 45 68 43 6c 77 76 34 53 45 4a 53 4a 73 51 55 51 6a 74 71 77 42 52 44 70 69 62 45 46 45 49 4b 69 5f 78 49 51 6e 61 61 Data Ascii: aa,eid\u003dV36EZrZS6IGhsQ-Gm6L4Ag,client_transport\u003dtcp",null,null,0,null,null,null,null,null,null,null,null,null,null,null,null,null,null,null,[null,null,null,null,null,"CNf8kbQGENuKsQUQzIqxBRCNzLAFEJPvsAUQ6-j-EhClwv4SEJSJsQUQjtqwBRDpibEFEIKi_xIQnaa
2024-07-02 22:25:27 UTC	40	IN	Data Raw: 43 67 4a 56 55 78 49 45 47 67 41 67 58 77 25 33 44 25 33 44 22 5d 2c 22 56 66 32 37 38 38 33 39 61 7c 7c 22 5d 5d 0d 0a Data Ascii: CgJVUxIEGgAgXw%3D%3D"],"Vf278839a\|\|"]]
2024-07-02 22:25:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.5	49931	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:28 UTC	963	OUT	POST /youtubei/v1/notification_registration/set_registration?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 530 X-Youtube-Client-Name: 1 X-Youtube-Bootstrap-Logged-In: false X-Youtube-Client-Version: 2.20240702.01.00 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSjX_JG0BjIKCgJVUxIEGgAgXw%3D%3D Content-Type: application/json Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: empty Referer: https://www.youtube.com/sw.js Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:28 UTC	530	OUT	Data Raw: 7b 22 6e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 22 3a 7b 22 63 68 72 6f 6d 65 52 65 67 69 73 74 72 61 74 69 6f 6e 22 3a 7b 22 64 65 76 69 63 65 49 64 22 3a 22 6b 66 72 72 78 32 50 48 49 57 4d 44 48 35 30 33 38 44 39 79 49 6d 30 4c 6e 71 4d 74 73 32 4d 64 38 63 55 4c 44 31 31 4a 6f 59 77 63 42 4b 75 41 78 32 48 79 6d 75 34 34 75 4e 79 6f 55 31 71 66 39 55 31 34 79 65 5a 68 6c 56 30 73 51 33 72 73 34 6f 56 64 67 34 38 6b 52 44 59 63 6b 71 63 47 33 5a 34 56 50 66 55 31 51 30 39 63 52 37 70 58 33 4e 4b 75 52 44 7a 53 4e 4c 35 50 74 54 38 79 43 73 4b 48 67 55 35 70 56 73 76 54 65 74 79 64 6f 79 41 4c 4b 31 6e 6f 65 64 4e 78 64 7a 35 76 6f 57 62 30 37 67 4d 46 62 4e 35 74 48 7a 62 43 67 30 4e 72 57 47 6a 49 70 4d 63 67 51 42 43 78 Data Ascii: {"notificationRegistration":{"chromeRegistration":{"deviceId":"kfrrx2PHIWMDH5038D9yIm0LnqMts2Md8cULD11JoYwcBKuAx2Hymu44uNyoU1qf9U14yeZhlV0sQ3rs4oVdg48kRDYckqcG3Z4VPfU1Q09cR7pX3NKuRDzSNL5PtT8yCsKHgU5pVsvTetydoyALK1noedNxdz5voWb07gMFbN5tHzbCg0NrWGjIpMcgQBCx
2024-07-02 22:25:28 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Tue, 02 Jul 2024 22:25:28 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-02 22:25:28 UTC	958	IN	Data Raw: 36 63 38 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 43 53 49 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 63 22 2c 22 76 61 6c 75 65 22 3a 22 57 45 42 22 7d 2c 7b 22 6b 65 79 22 3a 22 63 76 65 72 22 2c 22 76 61 6c 75 65 22 3a 22 32 2e 32 30 32 34 30 37 30 32 2e 30 31 2e 30 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 79 74 5f 6c 69 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 53 65 74 4e 6f 74 69 66 69 63 61 74 69 6f 6e 52 65 67 69 73 74 72 61 74 69 6f 6e 5f 72 69 64 22 2c 22 76 61 6c 75 65 22 3a 22 30 78 36 32 64 64 61 62 30 36 39 31 61 36 38 61 33 63 22 7d 5d 7d 2c 7b 22 73 65 72 76 69 63 65 Data Ascii: 6c8{"responseContext":{"serviceTrackingParams":[{"service":"CSI","params":[{"key":"c","value":"WEB"},{"key":"cver","value":"2.20240702.01.00"},{"key":"yt_li","value":"0"},{"key":"SetNotificationRegistration_rid","value":"0x62ddab0691a68a3c"}]},{"service
2024-07-02 22:25:28 UTC	785	IN	Data Raw: 31 34 2c 35 31 31 36 30 35 34 35 2c 35 31 31 36 32 31 37 30 2c 35 31 31 36 32 35 39 35 2c 35 31 31 36 35 34 36 37 2c 35 31 31 36 35 35 36 38 2c 35 31 31 36 36 39 32 32 2c 35 31 31 36 37 38 31 33 2c 35 31 31 36 39 31 31 37 2c 35 31 31 36 39 31 33 31 2c 35 31 31 37 30 32 34 37 2c 35 31 31 37 35 36 30 36 2c 35 31 31 37 35 37 33 32 2c 35 31 31 37 36 35 31 31 2c 35 31 31 37 38 37 30 35 2c 35 31 31 37 38 39 38 32 2c 35 31 31 38 33 39 30 39 2c 35 31 31 38 34 30 32 32 2c 35 31 31 38 34 39 39 30 2c 35 31 31 38 35 31 34 30 2c 35 31 31 38 36 35 32 38 2c 35 31 31 38 37 32 34 31 2c 35 31 31 38 39 38 32 36 2c 35 31 31 39 30 36 35 32 2c 35 31 31 39 34 31 33 37 2c 35 31 31 39 35 32 33 31 2c 35 31 31 39 36 37 36 39 2c 35 31 31 39 37 39 36 30 2c 35 31 31 39 39 31 39 33 2c Data Ascii: 14,51160545,51162170,51162595,51165467,51165568,51166922,51167813,51169117,51169131,51170247,51175606,51175732,51176511,51178705,51178982,51183909,51184022,51184990,51185140,51186528,51187241,51189826,51190652,51194137,51195231,51196769,51197960,51199193,
2024-07-02 22:25:28 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.5	49932	216.58.206.46	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:28 UTC	2515	OUT	GET /api/stats/watchtime?ns=yt&el=detailpage&cpn=PrsgaOatqma7291e&ver=2&cmt=14.832&fmt=397&fs=0&rt=17.008&euri&lact=14859&cl=648221806&state=playing&volume=100&cbr=Chrome&cbrver=117.0.0.0&c=WEB&cver=2.20240702.01.00&cplayer=UNIPLAYER&cos=Windows&cosver=10.0&cplatform=DESKTOP&hl=en_US&cr=US&len=212.061&rtn=27&feature=youtu.be&afmt=251&idpj=-6&ldpj=-8&rti=17&st=4.834&et=14.832&muted=0&docid=dQw4w9WgXcQ&ei=Pn6EZtv-HI_Ii9oP38isiA8&plid=AAYcSy9VFYQdyEyu&sdetail=f%3Ayoutu.be%2C&of=12qi8npJQEv9GY0QKsWCPw&vm=CAMQARgBOjJBSHFpSlRKSWMyM3g2SU1mNW1sbjFBQVVSZDZ1VDZHYTBFWDV5Z0dFMFMybER2Vl9RZ2JcQVBta0tES05ZdHNhOWMxYTVDZkJUd3lQOGZhcUlzNUd5eFNjTzRSQUR2a0kzXzJudlc4MmJ3R0RoaDJrSlhtdGRRYmU1U0duS0lqUTlFU3ZPb09yZDlQOW5MTkM HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-YouTube-Device: cbr=Chrome&cbrver=117.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOP X-YouTube-Page-Label: youtube.desktop.web_20240702_01_RC00 sec-ch-ua-arch: "x86" X-Goog-Request-Time: 1719959126630 X-YouTube-Page-CL: 648613515 X-Goog-Event-Time: 1719959126630 X-YouTube-Utc-Offset: -240 sec-ch-ua-platform-version: "10.0.0" sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132" sec-ch-ua-bitness: "64" sec-ch-ua-model: "" X-YouTube-Time-Zone: America/New_York sec-ch-ua-wow64: ?0 sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-full-version: "117.0.5938.132" X-YouTube-Client-Name: 1 X-YouTube-Client-Version: 2.20240702.01.00 X-Goog-Visitor-Id: CgtBUWhXblpSdktXSSi-_JG0BjIKCgJVUxIEGgAgXw%3D%3D X-YouTube-Ad-Signals: dt=1719959110085&flash=0&frm&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=907&biw=1264&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&wgl=true&ca_type=image Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCNy9zQEI2sPNAQjpxc0BCLnKzQEIv9HNAQiK080BCNDWzQEIqNjNAQj5wNQVGI/OzQEYutLNARjC2M0BGOuNpRc= Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/watch?v=dQw4w9WgXcQ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: GPS=1; YSC=-2ffe2EuoZg; VISITOR_INFO1_LIVE=AQhWnZRvKWI; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXw%3D%3D; PREF=tz=America.New_York
2024-07-02 22:25:29 UTC	410	IN	HTTP/1.1 204 No Content Content-Type: text/html; charset=UTF-8 Date: Tue, 02 Jul 2024 22:25:29 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, must-revalidate X-Content-Type-Options: nosniff Server: Video Stats Server Content-Length: 0 X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.5	49803	74.125.0.170	443	2104	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-02 22:25:31 UTC	1279	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=6 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:31 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:25:31 GMT Expires: Tue, 02 Jul 2024 22:25:31 GMT Cache-Control: private, max-age=21271 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:31 UTC	4	IN	Data Raw: 31 62 0d 0a Data Ascii: 1b
2024-07-02 22:25:31 UTC	27	IN	Data Raw: 2c 19 0a 15 73 61 62 72 2e 6d 61 6c 66 6f 72 6d 65 64 5f 63 6f 6e 66 69 67 10 00 Data Ascii: ,sabr.malformed_config
2024-07-02 22:25:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-02 22:25:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
2024-07-02 22:25:39 UTC	1279	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=7 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:39 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:25:39 GMT Expires: Tue, 02 Jul 2024 22:25:39 GMT Cache-Control: private, max-age=21263 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:39 UTC	4	IN	Data Raw: 31 62 0d 0a Data Ascii: 1b
2024-07-02 22:25:39 UTC	27	IN	Data Raw: 2c 19 0a 15 73 61 62 72 2e 6d 61 6c 66 6f 72 6d 65 64 5f 63 6f 6e 66 69 67 10 00 Data Ascii: ,sabr.malformed_config
2024-07-02 22:25:39 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-07-02 22:25:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
2024-07-02 22:25:48 UTC	1279	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=8 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:48 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:25:48 GMT Expires: Tue, 02 Jul 2024 22:25:48 GMT Cache-Control: private, max-age=21254 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:25:48 UTC	4	IN	Data Raw: 31 62 0d 0a Data Ascii: 1b
2024-07-02 22:25:48 UTC	27	IN	Data Raw: 2c 19 0a 15 73 61 62 72 2e 6d 61 6c 66 6f 72 6d 65 64 5f 63 6f 6e 66 69 67 10 00 Data Ascii: ,sabr.malformed_config
2024-07-02 22:25:56 UTC	1279	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=9 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:25:57 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:25:57 GMT Expires: Tue, 02 Jul 2024 22:25:57 GMT Cache-Control: private, max-age=21245 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:02 UTC	1280	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=10 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:03 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:26:03 GMT Expires: Tue, 02 Jul 2024 22:26:03 GMT Cache-Control: private, max-age=21239 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0
2024-07-02 22:26:09 UTC	1280	OUT	GET /videoplayback?expire=1719980702&ei=Pn6EZtv-HI_Ii9oP38isiA8&ip=8.46.123.33&id=o-ABtgFB7K1sxacl9myH1RM4dMm46UaFV7fNyhZqSrTVyx&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=7c&mm=31%2C26&mn=sn-ab5l6nkd%2Csn-p5qlsnrl&ms=au%2Conr&mv=u&mvi=5&pl=23&spc=NO7bAU2y7M1QCCWazTZEJ-5N7Wqg_swpaJ4O2rPfb18CsPdKnPs6LJXatrEP&svpuc=1&ns=T_UcXMAwWA_13SLZdctiqQ8Q&sabr=1&rqh=1&mt=1719958771&fvip=3&keepalive=yes&c=WEB&smc=1&n=0p1cRgEG2X4AAA&sparams=expire%2Cei%2Cip%2Cid%2Csource%2Crequiressl%2Cxpc%2Cspc%2Csvpuc%2Cns%2Csabr%2Crqh&sig=AJfQdSswRgIhAOMJNYtqtMkKLnLoYh37GKcSDaxcSmFcEoSfWHxvLVG_AiEA0mYPkA-kOmhTIovRfdj9DT22jTot4-T6FWaQGBshXLM%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl&lsig=AHlkHjAwRAIgCjh14dHs8R_-DHszV7JZ5kx2Yhl6AhvhXylouJFs_h0CIBRMU1JvbkJQ0gbezUtdexJ6fJP4P663DzCwwD08Pzzb&cpn=PrsgaOatqma7291e&cver=2.20240702.01.00&rn=12 HTTP/1.1 Host: rr5---sn-ab5l6nkd.googlevideo.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIk6HLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-02 22:26:10 UTC	495	IN	HTTP/1.1 200 OK Last-Modified: Wed, 02 May 2007 10:26:10 GMT Date: Tue, 02 Jul 2024 22:26:10 GMT Expires: Tue, 02 Jul 2024 22:26:10 GMT Cache-Control: private, max-age=21232 Content-Type: application/vnd.yt-ump Transfer-Encoding: chunked Connection: keep-alive Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000,h3-Q046=":443"; ma=2592000,quic=":443"; ma=2592000; v="46" Vary: Origin Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: gvs 1.0

Target ID:	0
Start time:	18:24:38
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:24:43
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2020 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:24:45
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://scamwebsite.com/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	6
Start time:	18:25:11
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6484 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	8
Start time:	18:25:20
Start date:	02/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6836 --field-trial-handle=1772,i,16521548129856700235,6150217420750747492,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://scamwebsite.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 299

Chrome Cache Entry: 300

Chrome Cache Entry: 301

Chrome Cache Entry: 302

Chrome Cache Entry: 303

Chrome Cache Entry: 304

Chrome Cache Entry: 305

Chrome Cache Entry: 306

Chrome Cache Entry: 307

Chrome Cache Entry: 308

Chrome Cache Entry: 309

Chrome Cache Entry: 310

Chrome Cache Entry: 311

Chrome Cache Entry: 312

Chrome Cache Entry: 313

Chrome Cache Entry: 314

Chrome Cache Entry: 315

Chrome Cache Entry: 316

Chrome Cache Entry: 317

Chrome Cache Entry: 318

Windows Analysis Report
http://scamwebsite.com/