Edit tour

Windows Analysis Report
http://go.microsoft.com/fwlink/?LinkId=787651.

Overview

General Information

Sample URL:	http://go.microsoft.com/fwlink/?LinkId=787651.
Analysis ID:	1432287
Infos:

Detection

Score:	0
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 7140 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1980,i,6518399980718777175,8631270052608312574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2804 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5868 --field-trial-handle=1980,i,6518399980718777175,8631270052608312574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5696 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5784 --field-trial-handle=1980,i,6518399980718777175,8631270052608312574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://go.microsoft.com/fwlink/?LinkId=787651." MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /report/ESTS-UX-All HTTP/1.1Host: csp.microsoft.comConnection: keep-aliveContent-Length: 2412sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/csp-reportAccept: */*Origin: https://login.microsoftonline.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: reportReferer: https://login.microsoftonline.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: https://www.bing.com/secure/Passport.aspx?popup=1&ssl=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/SrGENEXocJU?autoplay=1&enablejsapi=1&origin=https://www.bing.com&rel=0&mute=1	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/SrGENEXocJU?autoplay=1&enablejsapi=1&origin=https://www.bing.com&rel=0&mute=1	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_908.2.dr	String found in binary or memory: (function() { var sharingGlobalConfig ={"thumbnailUrlFormat":"https://www.bing.com/th?id={0}","defaultFormCode":"EX0023","facebookShareFormat":"https://www.facebook.com/dialog/feed?app_id={3}\u0026display=popup\u0026link={0}\u0026redirect_uri={1}\u0026ref={2}","facebookMessengerUrlFormat":"http://www.facebook.com/dialog/send?app_id={0}\u0026display=popup\u0026link={1}\u0026redirect_uri={2}","facebookFormCode":"EX0023","fbInitialHeight":576,"fbmInitialWidth":640,"facebookAppId":"3732605936979161","twitterApi":"https://twitter.com/intent/tweet?hashtags={0}\u0026text={1}\u0026url={2}","twitterFormCode":"EX0024","twitterInitialHeight":576,"twitterInitialWidth":720,"defaultInitialHeight":255,"whatsAppSchema":"whatsapp://send?text={0}","whatsAppStoreUrl":"","whatsAppFormCode":"EX0053","mailLauncherUrl":"mailto:?subject={0} \u0026body={1}","mailFormCode":"EX0025","smsProtocol":"","smsFormCode":"EX0052","loadingUrl":"/loading","useBlankLoadingPage":false,"closeRedirectUrl":"/share/fbre","pinterestUrlFormat":"https://pinterest.com/pin/create/button/?url={0}\u0026media={1}\u0026description={2}","pinterestFormCode":"EX0051","mybingFormCode":"shtomb","mybingRedirectUrl":"https://www.bing.com/myprofile?tid=id_chatmessagetab\u0026FORM=shtomb","skypeUrlFormat":"https://web.skype.com/share?url={0}\u0026source=button\u0026text={1}","skypeInitialHeight":665,"skypeInitialWidth":305,"outlookComLauncherUrl":"https://outlook.live.com/owa/?subject={0}\u0026body={1}\u0026path=/mail/action/compose","gmailLauncherUrl":"https://mail.google.com/mail/?view=cm\u0026fs=1\u0026tf=1\u0026su={0}\u0026body={1}","linkedInUrlFormat":"https://www.linkedin.com/shareArticle?mini=true\u0026url={0}\u0026title={1}\u0026summary={2}","linkedInFormCode":"EX0062","oneNoteUrlFormat":"https://www.onenote.com/clipper/save?attributionUrl={0}\u0026sourceUrl={1}\u0026imgUrl={1}\u0026title={2}\u0026description={3}","oneNoteInitialHeight":565,"oneNoteInitialWidth":550,"oneNoteFormCode":"EX0060","checkAppInstall":"","checkAppTimeout":200,"weiboShareFormat":"https://service.weibo.com/share/share.php?title={0}\u0026placeholder=Bing\u0026url={1}\u0026pic={2}","weiboFormCode":"SHDLWE","qzoneShareFormat":"https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?title={0}\u0026summary={1}\u0026url={2}\u0026pics={3}","qzoneFormCode":"SHDLQZ","isCNEnglishSearch":false,"redditShareFormat":"https://www.reddit.com/submit?url={0}\u0026title={1}","redditFormCode":"EX0061","useLocationReplace":false,"getUrlFormCode":"EX0050","enableGetShareLinkFromServerForGetUrl":true,"isUnderside":false}; if(sj_evt) { sj_evt.fire("GlobalActionMenuV2Wrapper.InitSharingGlobalConfig", sharingGlobalConfig); } })();; equals www.facebook.com (Facebook)
Source: chromecache_387.2.dr, chromecache_908.2.dr	String found in binary or memory: (function() { var sharingGlobalConfig ={"thumbnailUrlFormat":"https://www.bing.com/th?id={0}","defaultFormCode":"EX0023","facebookShareFormat":"https://www.facebook.com/dialog/feed?app_id={3}\u0026display=popup\u0026link={0}\u0026redirect_uri={1}\u0026ref={2}","facebookMessengerUrlFormat":"http://www.facebook.com/dialog/send?app_id={0}\u0026display=popup\u0026link={1}\u0026redirect_uri={2}","facebookFormCode":"EX0023","fbInitialHeight":576,"fbmInitialWidth":640,"facebookAppId":"3732605936979161","twitterApi":"https://twitter.com/intent/tweet?hashtags={0}\u0026text={1}\u0026url={2}","twitterFormCode":"EX0024","twitterInitialHeight":576,"twitterInitialWidth":720,"defaultInitialHeight":255,"whatsAppSchema":"whatsapp://send?text={0}","whatsAppStoreUrl":"","whatsAppFormCode":"EX0053","mailLauncherUrl":"mailto:?subject={0} \u0026body={1}","mailFormCode":"EX0025","smsProtocol":"","smsFormCode":"EX0052","loadingUrl":"/loading","useBlankLoadingPage":false,"closeRedirectUrl":"/share/fbre","pinterestUrlFormat":"https://pinterest.com/pin/create/button/?url={0}\u0026media={1}\u0026description={2}","pinterestFormCode":"EX0051","mybingFormCode":"shtomb","mybingRedirectUrl":"https://www.bing.com/myprofile?tid=id_chatmessagetab\u0026FORM=shtomb","skypeUrlFormat":"https://web.skype.com/share?url={0}\u0026source=button\u0026text={1}","skypeInitialHeight":665,"skypeInitialWidth":305,"outlookComLauncherUrl":"https://outlook.live.com/owa/?subject={0}\u0026body={1}\u0026path=/mail/action/compose","gmailLauncherUrl":"https://mail.google.com/mail/?view=cm\u0026fs=1\u0026tf=1\u0026su={0}\u0026body={1}","linkedInUrlFormat":"https://www.linkedin.com/shareArticle?mini=true\u0026url={0}\u0026title={1}\u0026summary={2}","linkedInFormCode":"EX0062","oneNoteUrlFormat":"https://www.onenote.com/clipper/save?attributionUrl={0}\u0026sourceUrl={1}\u0026imgUrl={1}\u0026title={2}\u0026description={3}","oneNoteInitialHeight":565,"oneNoteInitialWidth":550,"oneNoteFormCode":"EX0060","checkAppInstall":"","checkAppTimeout":200,"weiboShareFormat":"https://service.weibo.com/share/share.php?title={0}\u0026placeholder=Bing\u0026url={1}\u0026pic={2}","weiboFormCode":"SHDLWE","qzoneShareFormat":"https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?title={0}\u0026summary={1}\u0026url={2}\u0026pics={3}","qzoneFormCode":"SHDLQZ","isCNEnglishSearch":false,"redditShareFormat":"https://www.reddit.com/submit?url={0}\u0026title={1}","redditFormCode":"EX0061","useLocationReplace":false,"getUrlFormCode":"EX0050","enableGetShareLinkFromServerForGetUrl":true,"isUnderside":false}; if(sj_evt) { sj_evt.fire("GlobalActionMenuV2Wrapper.InitSharingGlobalConfig", sharingGlobalConfig); } })();; equals www.linkedin.com (Linkedin)
Source: chromecache_387.2.dr, chromecache_908.2.dr	String found in binary or memory: (function() { var sharingGlobalConfig ={"thumbnailUrlFormat":"https://www.bing.com/th?id={0}","defaultFormCode":"EX0023","facebookShareFormat":"https://www.facebook.com/dialog/feed?app_id={3}\u0026display=popup\u0026link={0}\u0026redirect_uri={1}\u0026ref={2}","facebookMessengerUrlFormat":"http://www.facebook.com/dialog/send?app_id={0}\u0026display=popup\u0026link={1}\u0026redirect_uri={2}","facebookFormCode":"EX0023","fbInitialHeight":576,"fbmInitialWidth":640,"facebookAppId":"3732605936979161","twitterApi":"https://twitter.com/intent/tweet?hashtags={0}\u0026text={1}\u0026url={2}","twitterFormCode":"EX0024","twitterInitialHeight":576,"twitterInitialWidth":720,"defaultInitialHeight":255,"whatsAppSchema":"whatsapp://send?text={0}","whatsAppStoreUrl":"","whatsAppFormCode":"EX0053","mailLauncherUrl":"mailto:?subject={0} \u0026body={1}","mailFormCode":"EX0025","smsProtocol":"","smsFormCode":"EX0052","loadingUrl":"/loading","useBlankLoadingPage":false,"closeRedirectUrl":"/share/fbre","pinterestUrlFormat":"https://pinterest.com/pin/create/button/?url={0}\u0026media={1}\u0026description={2}","pinterestFormCode":"EX0051","mybingFormCode":"shtomb","mybingRedirectUrl":"https://www.bing.com/myprofile?tid=id_chatmessagetab\u0026FORM=shtomb","skypeUrlFormat":"https://web.skype.com/share?url={0}\u0026source=button\u0026text={1}","skypeInitialHeight":665,"skypeInitialWidth":305,"outlookComLauncherUrl":"https://outlook.live.com/owa/?subject={0}\u0026body={1}\u0026path=/mail/action/compose","gmailLauncherUrl":"https://mail.google.com/mail/?view=cm\u0026fs=1\u0026tf=1\u0026su={0}\u0026body={1}","linkedInUrlFormat":"https://www.linkedin.com/shareArticle?mini=true\u0026url={0}\u0026title={1}\u0026summary={2}","linkedInFormCode":"EX0062","oneNoteUrlFormat":"https://www.onenote.com/clipper/save?attributionUrl={0}\u0026sourceUrl={1}\u0026imgUrl={1}\u0026title={2}\u0026description={3}","oneNoteInitialHeight":565,"oneNoteInitialWidth":550,"oneNoteFormCode":"EX0060","checkAppInstall":"","checkAppTimeout":200,"weiboShareFormat":"https://service.weibo.com/share/share.php?title={0}\u0026placeholder=Bing\u0026url={1}\u0026pic={2}","weiboFormCode":"SHDLWE","qzoneShareFormat":"https://sns.qzone.qq.com/cgi-bin/qzshare/cgi_qzshare_onekey?title={0}\u0026summary={1}\u0026url={2}\u0026pics={3}","qzoneFormCode":"SHDLQZ","isCNEnglishSearch":false,"redditShareFormat":"https://www.reddit.com/submit?url={0}\u0026title={1}","redditFormCode":"EX0061","useLocationReplace":false,"getUrlFormCode":"EX0050","enableGetShareLinkFromServerForGetUrl":true,"isUnderside":false}; if(sj_evt) { sj_evt.fire("GlobalActionMenuV2Wrapper.InitSharingGlobalConfig", sharingGlobalConfig); } })();; equals www.twitter.com (Twitter)
Source: chromecache_890.2.dr	String found in binary or memory: (g.zp(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.zp(c,"www.youtube.com"),d=c.toString()):(c=xBa(d),zJ(c)&&(d=c));c=new g.zP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_890.2.dr	String found in binary or memory: YQa=function(a,b){if(!a.j["0"]){var c=new CK("0","fakesb",{video:new yK(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new CQ(new g.zP("http://www.youtube.com/videoplayback"),c,"fake"):new NQ(new g.zP("http://www.youtube.com/videoplayback"),c,new mQ(0,0),new mQ(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_890.2.dr	String found in binary or memory: a))):this.Ld(g.NV(a.errorMessage)):this.Ld(PV(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Mn(c,{hl:a})),this.Ld(PV(this,"GENERIC_WITH_LINK_AND_CPN",c,!0)),d.pc&&!d.D&&QYa(this,function(e){if(g.tU(e,b.api,!WR(b.api.U()))){e={as3:!1,html5:!0,player:!0,cpn:b.api.getVideoData().clientPlaybackNonce};var f=b.api;f.wc("onFeedbackArticleRequest",{articleId:3037019,helpContext:"player_error", equals www.youtube.com (Youtube)
Source: chromecache_890.2.dr	String found in binary or memory: a.BASE_YT_URL)\|\|"")\|\|oBa(this.Bf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";"adunit"===h?d=this.D?"embedded":"detailpage":"embedded"===h\|\|this.N?d=XB(d,h,ZRa):h&&(d="embedded");this.La=d;Xta();h=null;d=b?b.playerStyle:a.ps;f=g.Fb($Ra,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.qa=(this.K=g.Fb($Ra,this.playerStyle))&&"play"!==this.playerStyle&&"jamboard"!==this.playerStyle;this.To=!this.qa;this.Ra=WB(!1,a.disableplaybackui);this.disablePaidContentOverlay=WB(!1, equals www.youtube.com (Youtube)
Source: chromecache_890.2.dr	String found in binary or memory: a.severity,e,nK(a.details),f)}else this.oa.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.ue(a.errorCode,a.details),d&&"manifest.net.connect"===a.errorCode&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.$C)(),FX(a,"manifest",function(h){b.G=!0;b.ma("pathprobe",h)},function(h){b.ue(h.errorCode,h.details)}))}}; equals www.youtube.com (Youtube)
Source: chromecache_559.2.dr	String found in binary or memory: function Hr(a,b,c){this.o=this.g=this.h=null;this.i=0;this.G=!1;this.u=[];this.l=null;this.O={};if(!a)throw Error("YouTube player element ID required.");this.id=Ra(this);this.K=c;c=document;if(a="string"===typeof a?c.getElementById(a):a)if(c="iframe"===a.tagName.toLowerCase(),b.host\|\|(b.host=c?ec(a.src):"https://www.youtube.com"),this.h=new Br(b),c\|\|(b=Ir(this,a),this.o=a,(c=a.parentNode)&&c.replaceChild(b,a),a=b),this.g=a,this.g.id\|\|(this.g.id="widget"+Ra(this.g)),vr[this.g.id]=this,window.postMessage){this.l= equals www.youtube.com (Youtube)
Source: chromecache_890.2.dr	String found in binary or memory: g.UR=function(a){a=SR(a.Ga);return"www.youtube-nocookie.com"===a?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_890.2.dr	String found in binary or memory: g.Va("Goog_AdSense_Lidar_getUrlSignalsList",wjb);var gBa=pa(["//tpc.googlesyndication.com/sodar/",""]);var cNa={F5a:0,C5a:1,z5a:2,A5a:3,B5a:4,E5a:5,D5a:6};var npa=(new Date).getTime();var Pka="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),Qka=/\bocr\b/;var Ska=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;g.y(Yu,g.Dd);Yu.prototype.dispose=function(){window.removeEventListener("offline",this.C);window.removeEventListener("online",this.C);this.Qn.Mj(this.G);delete Yu.instance}; equals www.youtube.com (Youtube)
Source: chromecache_890.2.dr	String found in binary or memory: g.fS=function(a){var b=g.UR(a);oSa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_890.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=g.UR(this);e="www.youtube.com"===c;!f&&d&&e?f="https://youtu.be/"+a:g.OR(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),pD&&(a=cpa())&&(b.ebc=a));return g.Mn(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_890.2.dr	String found in binary or memory: r;this.jj=b?b.hl\|\|"en_US":ZB("en_US",a.hl);this.region=b?b.contentRegion\|\|"US":ZB("US",a.cr);this.hostLanguage=b?b.hostLanguage\|\|"en":ZB("en",a.host_language);this.No=!this.Dc&&Math.random()<g.YI(this.experiments,"web_player_api_logging_fraction");this.bb=!this.Dc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(null==b\|\|!b.deviceIsAudioOnly);this.Jd=YB(this.Jd,a.ismb);this.To?(r=a.vss_host\|\|"s.youtube.com","s.youtube.com"===r&&(r=SR(this.Ga)\|\|"www.youtube.com")):r="video.google.com";this.Wm= equals www.youtube.com (Youtube)
Source: chromecache_890.2.dr	String found in binary or memory: this.W.Ba&&(a.authuser=this.W.Ba);this.W.pageId&&(a.pageid=this.W.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.pc()))?e[1]:"";"ATV"===e&&(a.cdt=e);this.G=a;this.G.session_id=d;this.qa=!0;"widevine"===this.B.flavor&&(this.G.hdr="1");"playready"===this.B.flavor&&(b=Number(pR(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&0<=b&&(this.G.mfpe=""+b),this.qa=!1);b="";g.iR(this.B)?hR(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_890.2.dr	String found in binary or memory: var G3={};var Cfb=/[&\?]action_proxy=1/,Bfb=/[&\?]token=([\w-])/,Dfb=/[&\?]video_id=([\w-])/,Efb=/[&\?]index=([\d-])/,Ffb=/[&\?]m_pos_ms=([\d-])/,Hfb=/[&\?]vvt=([\w-]*)/,tfb="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),Gfb="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),wfb={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_546.2.dr	String found in binary or memory: var VideoCanvasForEmbeddedYTPlayer;(function(n){function o(i){var h,b=i===null\|\|i===void 0?void 0:i[0],f,o;if(b&&(u\|\|b!=(t===null\|\|t===void 0?void 0:t.EmbedPlayer_ComponentUpdate))&&(!u\|\|b!=(t===null\|\|t===void 0?void 0:t.EmbedPlayer_Init))){if(!r&&i&&i.length>1){if(f=i[1],(f===null\|\|f===void 0?void 0:f.playerKey)&&f.playerKey==n._playerKey)return;n._playerKey=f.playerKey;o=(h=f.playerConfig)===null\|\|h===void 0?void 0:h.ytpc;o&&(r=o.ytpi,a=o.lpi,u=o.epiocu);typeof({}===null\|\|{}===void 0?void 0:{}.trace)===y&&f}if(!r&&e&&e.ytp&&e.ytpid&&(r=e.ytpid),pMMUtils&&r&&_ge(r))if(_w.onYouTubeIframeAPIReady=s,c){if(u){w(i);return}a\|\|s(i)}else l\|\|(l=!0,ct(),sj_be(_w,"unload",p),it())}}function h(){lt();i&&i.getIframe()&&i.destroy();YT=undefined}function p(){h();sj_ue(_w,"unload",p)}function it(){var t=document.createElement("script"),n;t.src="https://www.youtube.com/iframe_api";n=document.getElementsByTagName("script")[0];n.parentNode.insertBefore(t,n)}function s(n){c=!0;w(n)}function w(t){if(t&&t.length>1){var u=t[1];if((u===null\|\|u===void 0?void 0:u.playerKey)&&u.playerKey==n._playerKey)return;n._playerKey=u.playerKey}typeof YT!="undefined"&&typeof YT.Player!="undefined"&&(i=new YT.Player(r,{events:{onReady:ut,onStateChange:ft,onError:et}}),typeof({}===null\|\|{}===void 0?void 0:{}.trace)===y&&i,sj_be(_w,"message",rt))}function rt(n){var u,f=(u=i===null\|\|i===void 0?void 0:i.getIframe())===null\|\|u===void 0?void 0:u.contentWindow,r;if(n&&f&&(n===null\|\|n===void 0?void 0:n.source)===f&&typeof(n===null\|\|n===void 0?void 0:n.data)=="string")try{r=JSON.parse(n.data);r&&r.event==="infoDelivery"&&r.info&&sj_evt.fire(t===null\|\|t===void 0?void 0:t.VideoPlayer_InfoUpdate,r.info)}catch(e){}}function ut(n){f=!0;var i={videoDuration:ot()};i.videoDuration&&i.videoDuration!=-1\|\|(i.videoDuration=st(n));sj_evt.fire(t===null\|\|t===void 0?void 0:t.VideoCanvas_VideoPlayerReady,i)}function ft(n){var i=YT===null\|\|YT===void 0?void 0:YT.PlayerState;if(i&&n)switch(n.data){case i.UNSTARTED:sj_evt.fire(t===null\|\|t===void 0?void 0:t.VideoCanvas_VideoUnStarted);break;case i.ENDED:sj_evt.fire(t===null\|\|t===void 0?void 0:t.VideoCanvas_VideoEnded);break;case i.PLAYING:sj_evt.fire(t===null\|\|t===void 0?void 0:t.VideoCanvas_VideoPlaying);break;case i.PAUSED:sj_evt.fire(t===null\|\|t===void 0?void 0:t.VideoCanvas_VideoStopped);break;case i.BUFFERING:sj_evt.fire(t===null\|\|t===void 0?void 0:t.VideoCanvas_VideoStopped)}}function et(n){tt.isTest()&&console&&console.log("YT.Player Error: "+n.data);sj_evt.fire("VideoCanvas.VideoPlayerError",n.data)}function b(n){if(n&&!(n.length<2)&&n[1]){var t=n[1],i=t.seekTime,r=t.enableSeekAhead,u=t.enableSeekBack;typeof i=="number"&&i>=0&&d(i,r,u)}}function k(n){if(typeof i!="undefined"&&n&&!(n.length<2)){var t=n[1];t==!0?typeof(i===null\|\|i===void 0?void 0:i.mute)=="function"&&i.mute():typeof(i===null\|\|i===void 0?void 0:i.unMute)=="function"&&i.unMute()}}function d(n,t,r){var u=g();return(n>u&&t\|\|n<u&&r)&&i&&f&&typeof i.seekTo!="undefined"?(i.seekTo(n,!0),!0):!1}functi
Source: chromecache_369.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/652ba3a2\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: aefd.nelreports.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: assets.msn.com
Source: global traffic	DNS traffic detected: DNS query: www.msn.com
Source: global traffic	DNS traffic detected: DNS query: services.bingapis.com
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: browser.events.data.msn.com
Source: global traffic	DNS traffic detected: DNS query: c.msn.com
Source: global traffic	DNS traffic detected: DNS query: tse4.mm.bing.net
Source: global traffic	DNS traffic detected: DNS query: tse3.mm.bing.net
Source: global traffic	DNS traffic detected: DNS query: tse1.mm.bing.net
Source: global traffic	DNS traffic detected: DNS query: tse2.mm.bing.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: rr5---sn-vgqsrnlz.googlevideo.com

Source: chromecache_488.2.dr	String found in binary or memory: http://adaptivecards.io/schemas/adaptive-card.json
Source: chromecache_513.2.dr, chromecache_405.2.dr	String found in binary or memory: http://feross.org
Source: chromecache_869.2.dr	String found in binary or memory: http://knockoutjs.com/
Source: chromecache_890.2.dr, chromecache_559.2.dr, chromecache_371.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: http://www.foreca.com
Source: chromecache_869.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php)
Source: chromecache_890.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_890.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_890.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_890.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_890.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_890.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://assets.msn.com/weathermapdata/1/static/background/v2.0/jpg/
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://assets.msn.com/weathermapdata/1/static/weather/Icons/LFlOFwA=/Condition/
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://assets.msn.com/weathermapdata/1/static/weather/Icons/taskbar_v10/
Source: chromecache_641.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=3056
Source: chromecache_641.2.dr	String found in binary or memory: https://bugs.chromium.org/p/v8/issues/detail?id=4118
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://cafemom.com/parenting/224132-baby-names-parents-will-never-regret
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://cafemom.com/parenting/225158-man-names-baby-same-thing-as-brother
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://cafemom.com/parenting/tiktok-experts-controversial-hot-take-on-baby-names
Source: chromecache_404.2.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKhb
Source: chromecache_404.2.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKhb-dark
Source: chromecache_404.2.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13glq6
Source: chromecache_404.2.dr	String found in binary or memory: https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13glq6-dark
Source: chromecache_559.2.dr	String found in binary or memory: https://developers.google.com/youtube/iframe_api_reference#Events
Source: chromecache_890.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_718.2.dr	String found in binary or memory: https://edition.cnn.com/2024/02/26/food/outback-steakhouse-closures/index.html
Source: chromecache_804.2.dr	String found in binary or memory: https://fb.me/react-polyfills
Source: chromecache_869.2.dr	String found in binary or memory: https://github.com/douglascrockford/JSON-js
Source: chromecache_890.2.dr, chromecache_559.2.dr, chromecache_371.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_579.2.dr	String found in binary or memory: https://highlightjs.org/
Source: chromecache_890.2.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA13slaS.img
Source: chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA188qIE.img
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nIuZ6.img
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nmhpC.img
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nmhpz.img
Source: chromecache_718.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nnOZD.img
Source: chromecache_718.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nnRrv.img
Source: chromecache_718.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nnU4F.img
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nvuDZ.img
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nvx84.img
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nvzHv.img
Source: chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nxkGh.img
Source: chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nxnkX.img
Source: chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AA1nxnl2.img
Source: chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/AAwgl5h.img
Source: chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1e6XdQ.img
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1ihPB9.img
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1ihWxd.img
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1ii3Ik.img
Source: chromecache_718.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1lLZQH.img
Source: chromecache_718.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1lLZRq.img
Source: chromecache_718.2.dr	String found in binary or memory: https://img-s-msn-com.akamaized.net/tenant/amp/entityid/BB1lM4lU.img
Source: chromecache_890.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_871.2.dr, chromecache_728.2.dr	String found in binary or memory: https://login.chinacloudapi.cn
Source: chromecache_944.2.dr	String found in binary or memory: https://login.live.com/login.srf?wa=wsignin1.0
Source: chromecache_871.2.dr, chromecache_728.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_871.2.dr, chromecache_728.2.dr	String found in binary or memory: https://login.microsoftonline.de
Source: chromecache_871.2.dr, chromecache_728.2.dr	String found in binary or memory: https://login.microsoftonline.us
Source: chromecache_871.2.dr, chromecache_728.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_488.2.dr	String found in binary or memory: https://msasg.visualstudio.com/Bing_Ads/_workitems/edit/3905327
Source: chromecache_488.2.dr	String found in binary or memory: https://msasg.visualstudio.com/ContentServices/_workitems/edit/3620803
Source: chromecache_371.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/59a18f1a-e762-490c-a8d0-e89a3d8111e9/3770951d-c67
Source: chromecache_404.2.dr	String found in binary or memory: https://prod-streaming-video-msn-com.akamaized.net/c93a164f-41e5-4c79-9169-c10768462ad4/3770951d-c67
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://prod-video-cms-amp-microsoft-com.akamaized.net/tenant/amp/entityid/AA1nFMp1?blobrefkey=close
Source: chromecache_804.2.dr	String found in binary or memory: https://reactjs.org/docs/error-decoder.html?invariant=
Source: chromecache_890.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_890.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_890.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_890.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_404.2.dr	String found in binary or memory: https://stacker.com/
Source: chromecache_944.2.dr	String found in binary or memory: https://storage.live.com/users/0x
Source: chromecache_890.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_890.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_890.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_890.2.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://today.yougov.com/ratings/food/popularity/dining-brands/all
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://today.yougov.com/ratings/overview/popularity(popup:ratings/faq)
Source: chromecache_890.2.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_404.2.dr	String found in binary or memory: https://www.bangordailynews.com/2022/09/12/politics/heating-oil-prices-maine-elections-joam40zk0w/
Source: chromecache_404.2.dr	String found in binary or memory: https://www.coli.org/about/
Source: chromecache_890.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_890.2.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: chromecache_488.2.dr	String found in binary or memory: https://www.lotteryusa.com/mega-millions/
Source: chromecache_488.2.dr	String found in binary or memory: https://www.lotteryusa.com/powerball/
Source: chromecache_404.2.dr	String found in binary or memory: https://www.mainepublic.org/business-and-economy/2022-09-13/maines-minimum-wage-to-boost-to-1
Source: chromecache_488.2.dr	String found in binary or memory: https://www.msn.com/$
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.msn.com/en-us/foodanddrink/foodnews/the-1-restaurant-chain-in-america-according-to-diner
Source: chromecache_718.2.dr	String found in binary or memory: https://www.msn.com/en-us/foodanddrink/foodnews/the-only-way-you-should-store-hot-sauce-according-to
Source: chromecache_718.2.dr	String found in binary or memory: https://www.msn.com/en-us/money/careersandeducation/a-psychology-expert-shares-5-toxic-phrases-highl
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.msn.com/en-us/money/realestate/here-is-the-true-value-of-having-a-fully-paid-off-home-in
Source: chromecache_404.2.dr	String found in binary or memory: https://www.msn.com/en-us/movies/news/megan-fox-signs-with-uta/ar-AA1nB9M0
Source: chromecache_404.2.dr	String found in binary or memory: https://www.msn.com/en-us/news/opinion/carbine-vs-rifle-what-exactly-is-the-difference/ar-AA1kNwFb
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/a-big-mistake-ex-trump-white-house-lawyer-reacts-to-trump-s-
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.msn.com/en-us/news/politics/mitch-mcconnell-breaks-with-trump-on-absolute-presidential-i
Source: chromecache_404.2.dr	String found in binary or memory: https://www.msn.com/en-us/news/technology/scientists-discover-gigantic-structure-under-the-surface-o
Source: chromecache_404.2.dr	String found in binary or memory: https://www.msn.com/en-us/news/us/nypd-chief-hits-back-at-aoc-over-columbia-anti-israel-protests-sel
Source: chromecache_404.2.dr	String found in binary or memory: https://www.msn.com/en-us/news/us/the-movement-will-persist-advocates-stress-weinstein-reversal-does
Source: chromecache_404.2.dr	String found in binary or memory: https://www.msn.com/en-us/news/us/united-methodists-vote-to-restructure-worldwide-church/ar-AA1nFTLp
Source: chromecache_718.2.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/10-foot-tall-people-discovered-by-archaeologists-in-nevada-cave
Source: chromecache_404.2.dr	String found in binary or memory: https://www.msn.com/en-us/news/world/saudi-arabia-spent-500b-to-build-a-futuristic-city-in-the-deser
Source: chromecache_718.2.dr	String found in binary or memory: https://www.nrn.com/casual-dining/outback-steakhouse-parent-bloomin-brands-closing-41-restaurants
Source: chromecache_404.2.dr	String found in binary or memory: https://www.nytimes.com/2022/09/06/business/energy-environment/winter-home-heating.html
Source: chromecache_718.2.dr, chromecache_404.2.dr	String found in binary or memory: https://www.pollensense.com/
Source: chromecache_776.2.dr	String found in binary or memory: https://www.suno.ai/legal/privacy
Source: chromecache_776.2.dr	String found in binary or memory: https://www.suno.ai/legal/terms
Source: chromecache_723.2.dr	String found in binary or memory: https://www.suno.ai/privacy)
Source: chromecache_723.2.dr	String found in binary or memory: https://www.suno.ai/terms)
Source: chromecache_404.2.dr	String found in binary or memory: https://www.theatlantic.com/business/archive/2012/03/why-some-countries-and-cities-are-so-much-more-
Source: chromecache_404.2.dr	String found in binary or memory: https://www.wbur.org/news/2022/08/29/northeast-diesel-heating-oil-supplies-below-average
Source: chromecache_369.2.dr, chromecache_559.2.dr	String found in binary or memory: https://www.youtube.com
Source: chromecache_890.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_890.2.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_546.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api
Source: chromecache_890.2.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_890.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_890.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_890.2.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 50684 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50578
Source: unknown	Network traffic detected: HTTP traffic on port 50678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50523 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50694
Source: unknown	Network traffic detected: HTTP traffic on port 50632 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50695
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50698
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50697
Source: unknown	Network traffic detected: HTTP traffic on port 50706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50626 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50625
Source: unknown	Network traffic detected: HTTP traffic on port 50578 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50627
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50626
Source: unknown	Network traffic detected: HTTP traffic on port 50687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50583
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50587
Source: unknown	Network traffic detected: HTTP traffic on port 50673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50537 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50118
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50637
Source: unknown	Network traffic detected: HTTP traffic on port 50682 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50632
Source: unknown	Network traffic detected: HTTP traffic on port 50676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50538 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50643 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50523
Source: unknown	Network traffic detected: HTTP traffic on port 50637 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50549 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50685 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50640
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50643
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50522
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50642
Source: unknown	Network traffic detected: HTTP traffic on port 50541 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50566 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50583 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 50640 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50537
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50536
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50538
Source: unknown	Network traffic detected: HTTP traffic on port 50688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50565 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50666
Source: unknown	Network traffic detected: HTTP traffic on port 50683 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50549
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50705
Source: unknown	Network traffic detected: HTTP traffic on port 50702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50522 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50541
Source: unknown	Network traffic detected: HTTP traffic on port 50707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50642 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50707
Source: unknown	Network traffic detected: HTTP traffic on port 50680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50625 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50678
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50677
Source: unknown	Network traffic detected: HTTP traffic on port 50281 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50673
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50676
Source: unknown	Network traffic detected: HTTP traffic on port 50050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50281
Source: unknown	Network traffic detected: HTTP traffic on port 50024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50666 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50688
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50680
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50683
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50682
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50685
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50684
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50566
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50565
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50686
Source: unknown	Network traffic detected: HTTP traffic on port 50587 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50050
Source: unknown	Network traffic detected: HTTP traffic on port 50627 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1980,i,6518399980718777175,8631270052608312574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://go.microsoft.com/fwlink/?LinkId=787651."
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5868 --field-trial-handle=1980,i,6518399980718777175,8631270052608312574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5784 --field-trial-handle=1980,i,6518399980718777175,8631270052608312574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=1980,i,6518399980718777175,8631270052608312574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5868 --field-trial-handle=1980,i,6518399980718777175,8631270052608312574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5784 --field-trial-handle=1980,i,6518399980718777175,8631270052608312574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label	Link
http://go.microsoft.com/fwlink/?LinkId=787651.	0%	Avira URL Cloud	safe
http://go.microsoft.com/fwlink/?LinkId=787651.	0%	Virustotal		Browse

Source	Detection	Scanner	Label	Link
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://www.pollensense.com/	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware	0%	URL Reputation	safe
https://redux.js.org/api/store#subscribelistener	0%	URL Reputation	safe
https://login.microsoftonline.us	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://www.suno.ai/privacy)	0%	Avira URL Cloud	safe
https://www.suno.ai/legal/terms	0%	Avira URL Cloud	safe
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_ChpboAn7HyXj89A22M8mzg2.js	0%	Avira URL Cloud	safe
https://www.suno.ai/legal/privacy	0%	Avira URL Cloud	safe
https://stacker.com/	0%	Avira URL Cloud	safe
https://login.microsoftonline.us	0%	Virustotal		Browse
https://www.suno.ai/terms)	0%	Avira URL Cloud	safe
https://www.suno.ai/legal/terms	0%	Virustotal		Browse
https://stacker.com/	0%	Virustotal		Browse
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_ChpboAn7HyXj89A22M8mzg2.js	0%	Virustotal		Browse

Name	Malicious	Antivirus Detection	Reputation
about:blank	false	Avira URL Cloud: safe	low
https://www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/remote.js	false		high
https://www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/embed.js	false		high
https://www.youtube.com/iframe_api	false		high
https://www.youtube.com/youtubei/v1/next?prettyPrint=false	false		high
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false		high
https://www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/endscreen.js	false		high
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false		high
https://aadcdn.msftauth.net/shared/1.0/content/js/BssoInterrupt_Core_ChpboAn7HyXj89A22M8mzg2.js	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/base.js	false		high
https://static.doubleclick.net/instream/ad_status.js	false		high
https://www.youtube.com/s/player/652ba3a2/www-player.css	false		high
https://googleads.g.doubleclick.net/pagead/id	false		high
https://www.youtube.com/generate_204?GXl_0g	false		high
https://www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/annotations_module.js	false		high
https://i.ytimg.com/vi_webp/QpwJEYGCngI/maxresdefault.webp	false		high
https://yt3.ggpht.com/ytc/AIdro_kwFxfJF-fQml8fUIvrd36ZstE2RO-C-IwDB-0qxQoc3Q=s68-c-k-c0x00ffffff-no-rj	false		high
https://www.youtube.com/ptracking?html5=1&video_id=SrGENEXocJU&cpn=woe7lOTrahhyYWcq&ei=TuQrZue5EP_lj-8PtsWc8Ac&ptk=youtube_single&oid=CD-KBP9o9gNmNJwVpP8DgQ&ptchn=Y1kMZp36IQSyNx_9h4mpCg&pltype=content	false		high
https://www.youtube.com/s/player/652ba3a2/www-widgetapi.vflset/www-widgetapi.js	false		high
https://www.youtube.com/s/player/652ba3a2/player_ias.vflset/en_US/captions.js	false		high
https://yt3.ggpht.com/ytc/AIdro_kwFxfJF-fQml8fUIvrd36ZstE2RO-C-IwDB-0qxQoc3Q=s88-c-k-c0x00ffffff-no-rj	false		high
https://www.youtube.com/s/player/652ba3a2/www-embed-player.vflset/www-embed-player.js	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
13.107.246.41	part-0013.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
13.107.213.41	unknown	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
172.217.2.206	unknown	United States	15169	GOOGLEUS	false
192.178.50.68	www.google.com	United States	15169	GOOGLEUS	false
142.250.189.132	unknown	United States	15169	GOOGLEUS	false
152.199.4.44	cs1100.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.189.142	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
192.178.50.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
192.178.50.33	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.217.225	unknown	United States	15169	GOOGLEUS	false
192.178.50.70	static.doubleclick.net	United States	15169	GOOGLEUS	false
74.125.156.10	rr5.sn-vgqsrnlz.googlevideo.com	United States	15169	GOOGLEUS	false
142.251.35.246	i.ytimg.com	United States	15169	GOOGLEUS	false

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
part-0013.t-0009.t-msedge.net	13.107.246.41	true	false	unknown
youtube-ui.l.google.com	142.250.189.142	true	false	high
cs1100.wpc.omegacdn.net	152.199.4.44	true	false	unknown
googleads.g.doubleclick.net	192.178.50.34	true	false	high
i.ytimg.com	142.251.35.246	true	false	high
photos-ugc.l.googleusercontent.com	192.178.50.33	true	false	high
rr5.sn-vgqsrnlz.googlevideo.com	74.125.156.10	true	false	high
www.google.com	192.178.50.68	true	false	high
static.doubleclick.net	192.178.50.70	true	false	high
fp2e7a.wpc.phicdn.net	192.229.211.108	true	false	unknown
assets.msn.com	unknown	unknown	false	high
tse4.mm.bing.net	unknown	unknown	false	high
yt3.ggpht.com	unknown	unknown	false	high
www.msn.com	unknown	unknown	false	high
tse3.mm.bing.net	unknown	unknown	false	high
c.msn.com	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	unknown
tse1.mm.bing.net	unknown	unknown	false	high
tse2.mm.bing.net	unknown	unknown	false	high
aefd.nelreports.net	unknown	unknown	false	unknown
services.bingapis.com	unknown	unknown	false	high
rr5---sn-vgqsrnlz.googlevideo.com	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high
browser.events.data.msn.com	unknown	unknown	false	high

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.nrn.com/casual-dining/outback-steakhouse-parent-bloomin-brands-closing-41-restaurants	chromecache_718.2.dr	false		high
https://www.msn.com/en-us/movies/news/megan-fox-signs-with-uta/ar-AA1nB9M0	chromecache_404.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_890.2.dr	false	URL Reputation: safe	unknown
https://www.suno.ai/privacy)	chromecache_723.2.dr	false	Avira URL Cloud: safe	unknown
https://msasg.visualstudio.com/Bing_Ads/_workitems/edit/3905327	chromecache_488.2.dr	false		high
https://www.msn.com/en-us/news/us/the-movement-will-persist-advocates-stress-weinstein-reversal-does	chromecache_404.2.dr	false		high
http://youtube.com/streaming/otf/durations/112015	chromecache_890.2.dr	false		high
https://assets.msn.com/weathermapdata/1/static/weather/Icons/taskbar_v10/	chromecache_718.2.dr, chromecache_404.2.dr	false		high
https://www.msn.com/en-us/news/technology/scientists-discover-gigantic-structure-under-the-surface-o	chromecache_404.2.dr	false		high
https://www.msn.com/$	chromecache_488.2.dr	false		high
https://www.youtube.com	chromecache_369.2.dr, chromecache_559.2.dr	false		high
https://login.microsoftonline.us	chromecache_871.2.dr, chromecache_728.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://admin.youtube.com	chromecache_890.2.dr	false		high
https://www.youtube.com/api/drm/fps?ek=	chromecache_890.2.dr	false		high
https://cafemom.com/parenting/224132-baby-names-parents-will-never-regret	chromecache_718.2.dr, chromecache_404.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_890.2.dr	false	URL Reputation: safe	unknown
https://msasg.visualstudio.com/ContentServices/_workitems/edit/3620803	chromecache_488.2.dr	false		high
https://www.msn.com/en-us/news/politics/a-big-mistake-ex-trump-white-house-lawyer-reacts-to-trump-s-	chromecache_718.2.dr, chromecache_404.2.dr	false		high
https://bugs.chromium.org/p/v8/issues/detail?id=4118	chromecache_641.2.dr	false		high
https://github.com/madler/zlib/blob/master/zlib.h	chromecache_890.2.dr, chromecache_559.2.dr, chromecache_371.2.dr	false		high
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13glq6-dark	chromecache_404.2.dr	false		high
https://login.microsoftonline.de	chromecache_871.2.dr, chromecache_728.2.dr	false		high
https://yurt.corp.google.com	chromecache_890.2.dr	false		high
https://viacon.corp.google.com	chromecache_890.2.dr	false		high
https://cafemom.com/parenting/225158-man-names-baby-same-thing-as-brother	chromecache_718.2.dr, chromecache_404.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_890.2.dr	false		high
http://adaptivecards.io/schemas/adaptive-card.json	chromecache_488.2.dr	false		high
https://www.suno.ai/legal/terms	chromecache_776.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.suno.ai/legal/privacy	chromecache_776.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/youtube/answer/6276924	chromecache_890.2.dr	false		high
https://github.com/douglascrockford/JSON-js	chromecache_869.2.dr	false		high
http://youtube.com/yt/2012/10/10	chromecache_890.2.dr	false		high
https://www.msn.com/en-us/news/world/10-foot-tall-people-discovered-by-archaeologists-in-nevada-cave	chromecache_718.2.dr	false		high
https://play.google.com/log?format=json&hasfast=true	chromecache_371.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php)	chromecache_869.2.dr	false		high
http://tools.ietf.org/html/rfc1950	chromecache_890.2.dr, chromecache_559.2.dr, chromecache_371.2.dr	false		high
https://www.bangordailynews.com/2022/09/12/politics/heating-oil-prices-maine-elections-joam40zk0w/	chromecache_404.2.dr	false		high
http://www.youtube.com/videoplayback	chromecache_890.2.dr	false		high
https://www.wbur.org/news/2022/08/29/northeast-diesel-heating-oil-supplies-below-average	chromecache_404.2.dr	false		high
https://www.msn.com/en-us/news/opinion/carbine-vs-rifle-what-exactly-is-the-difference/ar-AA1kNwFb	chromecache_404.2.dr	false		high
https://stacker.com/	chromecache_404.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.coli.org/about/	chromecache_404.2.dr	false		high
https://support.google.com/youtube/?p=missing_quality	chromecache_890.2.dr	false		high
https://www.msn.com/en-us/news/us/united-methodists-vote-to-restructure-worldwide-church/ar-AA1nFTLp	chromecache_404.2.dr	false		high
https://www.msn.com/en-us/news/world/saudi-arabia-spent-500b-to-build-a-futuristic-city-in-the-deser	chromecache_404.2.dr	false		high
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKhb-dark	chromecache_404.2.dr	false		high
https://assets.msn.com/weathermapdata/1/static/background/v2.0/jpg/	chromecache_718.2.dr, chromecache_404.2.dr	false		high
https://www.lotteryusa.com/mega-millions/	chromecache_488.2.dr	false		high
https://www.pollensense.com/	chromecache_718.2.dr, chromecache_404.2.dr	false	URL Reputation: safe	unknown
https://support.google.com/youtube/?p=report_playback	chromecache_890.2.dr	false		high
https://storage.live.com/users/0x	chromecache_944.2.dr	false		high
https://login.chinacloudapi.cn	chromecache_871.2.dr, chromecache_728.2.dr	false		high
https://login.windows-ppe.net	chromecache_871.2.dr, chromecache_728.2.dr	false		high
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_559.2.dr	false		high
http://youtube.com/streaming/metadata/segment/102015	chromecache_890.2.dr	false		high
https://youtu.be/	chromecache_890.2.dr	false		high
https://login.microsoftonline.com	chromecache_871.2.dr, chromecache_728.2.dr	false		high
https://cdn.query.prod.cms.msn.com/cms/api/amp/binary/AA13gKhb	chromecache_404.2.dr	false		high
https://assets.msn.com/weathermapdata/1/static/weather/Icons/LFlOFwA=/Condition/	chromecache_718.2.dr, chromecache_404.2.dr	false		high
https://today.yougov.com/ratings/overview/popularity(popup:ratings/faq)	chromecache_718.2.dr, chromecache_404.2.dr	false		high
https://www.msn.com/en-us/foodanddrink/foodnews/the-1-restaurant-chain-in-america-according-to-diner	chromecache_718.2.dr, chromecache_404.2.dr	false		high
https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware	chromecache_890.2.dr	false	URL Reputation: safe	unknown
https://redux.js.org/api/store#subscribelistener	chromecache_890.2.dr	false	URL Reputation: safe	unknown
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_890.2.dr	false		high
https://www.msn.com/en-us/news/us/nypd-chief-hits-back-at-aoc-over-columbia-anti-israel-protests-sel	chromecache_404.2.dr	false		high
https://www.suno.ai/terms)	chromecache_723.2.dr	false	Avira URL Cloud: safe	unknown
https://reactjs.org/docs/error-decoder.html?invariant=	chromecache_804.2.dr	false		high
http://knockoutjs.com/	chromecache_869.2.dr	false		high
https://docs.google.com/get_video_info	chromecache_890.2.dr	false		high
http://www.foreca.com	chromecache_718.2.dr, chromecache_404.2.dr	false		high
https://www.lotteryusa.com/powerball/	chromecache_488.2.dr	false		high
https://today.yougov.com/ratings/food/popularity/dining-brands/all	chromecache_718.2.dr, chromecache_404.2.dr	false		high
https://www.msn.com/en-us/foodanddrink/foodnews/the-only-way-you-should-store-hot-sauce-according-to	chromecache_718.2.dr	false		high
https://www.mainepublic.org/business-and-economy/2022-09-13/maines-minimum-wage-to-boost-to-1	chromecache_404.2.dr	false		high
https://edition.cnn.com/2024/02/26/food/outback-steakhouse-closures/index.html	chromecache_718.2.dr	false		high
https://highlightjs.org/	chromecache_579.2.dr	false		high
https://www.nytimes.com/2022/09/06/business/energy-environment/winter-home-heating.html	chromecache_404.2.dr	false		high
https://www.msn.com/en-us/money/realestate/here-is-the-true-value-of-having-a-fully-paid-off-home-in	chromecache_718.2.dr, chromecache_404.2.dr	false		high

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1432287
Start date and time:	2024-04-26 19:26:26 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 22s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://go.microsoft.com/fwlink/?LinkId=787651.
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	CLEAN
Classification:	clean0.win@32/991@70/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.bing.com/chat?q=Microsoft+Copilot&FORM=hpcodx Browse: https://www.bing.com/chat?q=Microsoft+Copilot&FORM=hpcodx Browse: https://www.bing.com/images?FORM=Z9LH Browse: https://www.bing.com/videos?FORM=Z9LH1

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Apr 26 16:27:19 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9801962472340398
Encrypted:	false
SSDEEP:	48:8PdyTeyFcHXidAKZdA19ehwiZUklqehZy+3:8E326y
MD5:	82A3FC4BB57D49AF6DBC36DC15E97095
SHA1:	A15501698B39D067A8375088EBDA3904CF1A7724
SHA-256:	287DBBEF91F6E287CB963C40F9B168A275282A4B9731550D81796640EAC8A65F
SHA-512:	BFD3CD2F56D3A2BFE7D081FEAB22EF91BC7CDE72AD0C905A63A1ED78B4F28CA772E0385F727BBA23612F353CD9E04B81727E06B9A81A4CE536950D5914E9390D
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....8......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Xh.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Xh.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Xh.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Xh............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Xj............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............).....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Apr 26, 2024 19:27:17.258775949 CEST	53	54190	1.1.1.1	192.168.2.5
Apr 26, 2024 19:27:17.406188965 CEST	53	51460	1.1.1.1	192.168.2.5
Apr 26, 2024 19:27:18.353367090 CEST	53	60274	1.1.1.1	192.168.2.5
Apr 26, 2024 19:27:21.062527895 CEST	55733	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:21.063503981 CEST	58386	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:21.668601990 CEST	52528	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:21.668787956 CEST	58901	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:21.793814898 CEST	53	58901	1.1.1.1	192.168.2.5
Apr 26, 2024 19:27:21.794742107 CEST	53	52528	1.1.1.1	192.168.2.5
Apr 26, 2024 19:27:37.262151003 CEST	59053	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:37.301106930 CEST	57006	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:40.145797014 CEST	53	60093	1.1.1.1	192.168.2.5
Apr 26, 2024 19:27:40.750648975 CEST	56660	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:40.750787973 CEST	54770	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:40.876533031 CEST	53	54770	1.1.1.1	192.168.2.5
Apr 26, 2024 19:27:41.513868093 CEST	51112	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:41.514410973 CEST	55353	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:41.640166998 CEST	53	55353	1.1.1.1	192.168.2.5
Apr 26, 2024 19:27:49.096144915 CEST	57503	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:49.096548080 CEST	58478	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:49.225039959 CEST	53	58478	1.1.1.1	192.168.2.5
Apr 26, 2024 19:27:54.930303097 CEST	57802	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:54.930603027 CEST	64183	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:55.059954882 CEST	53	64183	1.1.1.1	192.168.2.5
Apr 26, 2024 19:27:56.447088003 CEST	52722	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:56.447447062 CEST	63066	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:59.409809113 CEST	64392	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:59.410164118 CEST	58548	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:27:59.535006046 CEST	53	64392	1.1.1.1	192.168.2.5
Apr 26, 2024 19:27:59.535505056 CEST	53	58548	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:05.276592016 CEST	52436	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:05.276727915 CEST	52480	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:05.589777946 CEST	59670	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:05.590137959 CEST	57813	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:06.063786030 CEST	53891	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:06.064009905 CEST	52808	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:06.190479994 CEST	53	52808	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:08.469852924 CEST	53	54025	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:12.910991907 CEST	62348	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:12.913208961 CEST	58333	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:13.038810968 CEST	53	58333	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:16.612494946 CEST	65506	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:16.612715006 CEST	55218	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:16.613327980 CEST	59836	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:16.613672018 CEST	51849	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:16.614597082 CEST	60668	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:16.614912033 CEST	58499	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:17.239291906 CEST	54107	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:17.240209103 CEST	54437	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:17.299181938 CEST	53	50691	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:21.089076042 CEST	50238	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:21.089201927 CEST	63367	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:23.189521074 CEST	55673	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:23.190002918 CEST	57847	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:23.191499949 CEST	62926	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:23.191737890 CEST	50074	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:23.193180084 CEST	52601	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:23.193358898 CEST	64420	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:24.047965050 CEST	52616	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:24.048427105 CEST	61313	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:33.705399990 CEST	53	54169	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:39.707252026 CEST	57691	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:39.707787037 CEST	59070	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:39.832411051 CEST	53	57691	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:39.832845926 CEST	53	59070	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:40.412410975 CEST	53	50970	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:42.307221889 CEST	56433	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:42.310702085 CEST	50546	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:42.432996988 CEST	53	56433	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:42.436193943 CEST	53	50546	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:43.355041027 CEST	57550	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:43.355612993 CEST	64163	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:43.479711056 CEST	53	57550	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:43.481188059 CEST	53	64163	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:44.411154985 CEST	53	61864	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:45.276901960 CEST	55345	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:45.277084112 CEST	62047	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:45.286479950 CEST	65178	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:45.286623001 CEST	64718	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:45.402070045 CEST	53	62047	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:45.402091980 CEST	53	55345	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:45.411339045 CEST	53	65178	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:45.412704945 CEST	53	64718	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:45.458884954 CEST	53	58680	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:45.773828030 CEST	62925	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:45.773962021 CEST	52136	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:45.898471117 CEST	53	62925	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:45.899444103 CEST	53	52136	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:46.683492899 CEST	50576	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:46.683628082 CEST	50121	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:46.752350092 CEST	52734	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:46.753004074 CEST	62868	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:46.779994011 CEST	49378	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:46.780256987 CEST	49981	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:46.808417082 CEST	53	50121	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:46.809606075 CEST	53	50576	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:46.878138065 CEST	53	52734	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:46.878849030 CEST	53	62868	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:46.904763937 CEST	53	49981	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:46.905422926 CEST	53	49378	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:47.029090881 CEST	62698	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:47.029356003 CEST	59271	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:47.155771971 CEST	53	62698	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:47.165271044 CEST	58245	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:47.165271044 CEST	55544	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:47.199103117 CEST	53	59271	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:47.290689945 CEST	53	58245	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:47.290765047 CEST	53	55544	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:47.491426945 CEST	53	54446	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:48.315998077 CEST	62347	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:48.316260099 CEST	55858	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:48.443056107 CEST	53	62347	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:48.480015039 CEST	53	55858	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:50.423055887 CEST	53	63323	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:52.026806116 CEST	50412	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:52.026860952 CEST	62584	53	192.168.2.5	1.1.1.1
Apr 26, 2024 19:28:52.151993990 CEST	53	50412	1.1.1.1	192.168.2.5
Apr 26, 2024 19:28:52.152040958 CEST	53	62584	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Apr 26, 2024 19:27:37.427436113 CEST	192.168.2.5	1.1.1.1	c269	(Port unreachable)	Destination Unreachable
Apr 26, 2024 19:28:16.780087948 CEST	192.168.2.5	1.1.1.1	c272	(Port unreachable)	Destination Unreachable
Apr 26, 2024 19:28:47.199326038 CEST	192.168.2.5	1.1.1.1	c24f	(Port unreachable)	Destination Unreachable
Apr 26, 2024 19:28:48.480103016 CEST	192.168.2.5	1.1.1.1	c24f	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:27:59 UTC	635	OUT	GET /shared/1.0/content/js/BssoInterrupt_Core_ChpboAn7HyXj89A22M8mzg2.js HTTP/1.1 Host: aadcdn.msftauth.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://login.microsoftonline.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 17:28:00 UTC	750	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Access-Control-Expose-Headers: x-ms-request-id,Server,x-ms-version,Content-Type,Content-Encoding,Cache-Control,Last-Modified,ETag,Content-MD5,x-ms-lease-status,x-ms-blob-type,Content-Length,Date,Transfer-Encoding Age: 2424556 Cache-Control: public, max-age=31536000 Content-MD5: 2vlVvyES905PeLIYeo1r7w== Content-Type: application/x-javascript Date: Fri, 26 Apr 2024 17:28:00 GMT Etag: 0x8DC4DBF5E20DC85 Last-Modified: Tue, 26 Mar 2024 18:05:49 GMT Server: ECAcc (mic/9BF3) Vary: Accept-Encoding X-Cache: HIT x-ms-blob-type: BlockBlob x-ms-lease-status: unlocked x-ms-request-id: b20c5692-d01e-00ca-11f1-81d077000000 x-ms-version: 2009-09-19 Content-Length: 141339 Connection: close
2024-04-26 17:28:00 UTC	15652	IN	Data Raw: 2f 2a 21 0a 20 2a 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 53 54 41 52 54 20 4f 46 20 54 48 49 52 44 20 50 41 52 54 59 20 4e 4f 54 49 43 45 20 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0a 20 2a 20 0a 20 2a 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 62 61 73 65 64 20 6f 6e 20 6f 72 20 69 6e 63 6f 72 70 6f 72 61 74 65 73 20 6d 61 74 65 72 69 61 6c 20 66 72 6f 6d 20 74 68 65 20 70 72 6f 6a 65 63 74 73 20 6c 69 73 74 65 64 20 62 65 6c 6f 77 20 28 54 68 69 72 64 20 50 61 72 74 79 20 49 50 29 2e 20 54 68 65 20 6f 72 69 67 69 6e 61 6c 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 Data Ascii: /! ------------------------------------------- START OF THIRD PARTY NOTICE ----------------------------------------- * * This file is based on or incorporates material from the projects listed below (Third Party IP). The original copyright notice a
2024-04-26 17:28:00 UTC	16383	IN	Data Raw: 30 5d 2c 74 3d 5f 2e 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 6e 29 3b 69 66 28 74 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 29 7b 76 61 72 20 72 3d 74 2e 62 61 63 6b 67 72 6f 75 6e 64 43 6f 6c 6f 72 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 72 65 70 6c 61 63 65 28 6e 65 77 20 52 65 67 45 78 70 28 22 20 22 2c 22 67 22 29 2c 22 22 29 3b 69 66 28 41 29 7b 76 61 72 20 6f 3d 65 28 72 2c 5b 22 30 2c 30 2c 30 22 5d 2c 5b 22 23 30 30 30 30 30 30 22 2c 22 23 30 30 30 22 5d 29 2c 69 3d 65 28 72 2c 5b 22 32 35 35 2c 32 35 35 2c 32 35 35 22 5d 2c 5b 22 23 66 66 66 66 66 66 22 2c 22 23 66 66 66 22 5d 29 2c 61 3d 65 28 72 2c 5b 22 33 32 2c 33 32 2c 33 32 22 5d 2c 5b 22 23 32 30 32 30 32 30 22 5d 29 2c 73 3d 65 28 72 2c 5b 22 34 35 2c 35 30 2c 35 34 Data Ascii: 0],t=_.getComputedStyle(n);if(t.backgroundColor){var r=t.backgroundColor.toLowerCase().replace(new RegExp(" ","g"),"");if(A){var o=e(r,["0,0,0"],["#000000","#000"]),i=e(r,["255,255,255"],["#ffffff","#fff"]),a=e(r,["32,32,32"],["#202020"]),s=e(r,["45,50,54
2024-04-26 17:28:00 UTC	16383	IN	Data Raw: 5f 45 5f 4e 41 4d 45 5f 54 4f 4f 5f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 30 31 22 2c 50 50 5f 45 5f 4e 41 4d 45 5f 49 4e 56 41 4c 49 44 3a 22 38 30 30 34 31 31 30 33 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 41 52 47 3a 22 38 30 30 34 38 33 38 38 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 53 48 4f 52 54 3a 22 38 30 30 34 31 31 32 30 22 2c 50 50 5f 45 5f 53 41 5f 54 4f 4f 4c 4f 4e 47 3a 22 38 30 30 34 31 31 32 31 22 2c 50 50 5f 45 5f 49 4e 56 41 4c 49 44 5f 50 48 4f 4e 45 4e 55 4d 42 45 52 3a 22 38 30 30 34 31 31 33 46 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 51 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 41 3a 22 38 30 30 34 31 31 36 35 22 2c 50 50 5f 45 5f 53 45 43 52 45 54 41 5f 43 4f 4e 54 41 49 4e 53 5f 53 45 43 52 45 54 51 3a 22 38 30 30 34 31 31 37 Data Ascii: _E_NAME_TOO_SHORT:"80041101",PP_E_NAME_INVALID:"80041103",PP_E_INVALIDARG:"80048388",PP_E_SA_TOOSHORT:"80041120",PP_E_SA_TOOLONG:"80041121",PP_E_INVALID_PHONENUMBER:"8004113F",PP_E_SECRETQ_CONTAINS_SECRETA:"80041165",PP_E_SECRETA_CONTAINS_SECRETQ:"8004117
2024-04-26 17:28:00 UTC	16383	IN	Data Raw: 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 2c 74 3d 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 69 22 29 3b 6e 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 5c 78 33 63 21 2d 2d 5b 69 66 20 67 74 20 49 45 20 22 2b 20 2b 2b 65 2b 22 5d 3e 3c 69 3e 3c 2f 69 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 5c 78 33 65 22 2c 74 5b 30 5d 3b 29 3b 72 65 74 75 72 6e 20 34 3c 65 3f 65 3a 61 7d 28 29 2c 62 3d 2f 5c 53 2b 2f 67 3b 72 65 74 75 72 6e 7b 4a 63 3a 5b 22 61 75 74 68 65 6e 74 69 63 69 74 79 5f 74 6f 6b 65 6e 22 2c 2f 5e 5f 5f 52 65 71 75 65 73 74 56 65 72 69 66 69 63 61 74 69 6f 6e 54 6f 6b 65 6e 28 5f 2e 2a 29 3f 24 2f 5d 2c 44 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c Data Ascii: lement("div"),t=n.getElementsByTagName("i");n.innerHTML="\x3c!--[if gt IE "+ ++e+"]><i></i><![endif]--\x3e",t[0];);return 4<e?e:a}(),b=/\S+/g;return{Jc:["authenticity_token",/^__RequestVerificationToken(_.*)?$/],D:function(e,n,t){for(var r=0,o=e.length;r<
2024-04-26 17:28:00 UTC	16383	IN	Data Raw: 61 28 22 5f 6c 61 74 65 73 74 56 61 6c 75 65 22 29 3b 53 2e 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 72 65 74 75 72 6e 20 30 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 28 6e 2e 73 62 28 6e 5b 77 5d 2c 61 72 67 75 6d 65 6e 74 73 5b 30 5d 29 26 26 28 6e 2e 79 61 28 29 2c 6e 5b 77 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 2c 6e 2e 78 61 28 29 29 2c 74 68 69 73 29 3a 28 53 2e 75 2e 63 63 28 6e 29 2c 6e 5b 77 5d 29 7d 72 65 74 75 72 6e 20 6e 5b 77 5d 3d 65 2c 53 2e 61 2e 42 61 7c 7c 53 2e 61 2e 65 78 74 65 6e 64 28 6e 2c 53 2e 54 2e 66 6e 29 2c 53 2e 54 2e 66 6e 2e 71 62 28 6e 29 2c 53 2e 61 2e 41 62 28 6e 2c 50 29 2c 53 2e 6f 70 74 69 6f 6e 73 2e 64 65 66 65 72 55 70 64 61 74 65 73 26 26 53 2e 54 61 2e 64 Data Ascii: a("_latestValue");S.ta=function(e){function n(){return 0<arguments.length?(n.sb(n[w],arguments[0])&&(n.ya(),n[w]=arguments[0],n.xa()),this):(S.u.cc(n),n[w])}return n[w]=e,S.a.Ba\|\|S.a.extend(n,S.T.fn),S.T.fn.qb(n),S.a.Ab(n,P),S.options.deferUpdates&&S.Ta.d
2024-04-26 17:28:00 UTC	16383	IN	Data Raw: 2e 4e 3d 6e 75 6c 6c 2c 6e 2e 54 63 28 29 29 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 6e 2c 74 2c 72 29 7b 74 68 69 73 2e 6e 6f 64 65 3d 6e 2c 74 68 69 73 2e 79 63 3d 74 2c 74 68 69 73 2e 6b 62 3d 5b 5d 2c 74 68 69 73 2e 48 3d 21 31 2c 74 2e 4e 7c 7c 53 2e 61 2e 4b 2e 7a 61 28 6e 2c 65 29 2c 72 26 26 72 2e 4e 26 26 28 72 2e 4e 2e 6b 62 2e 70 75 73 68 28 6e 29 2c 74 68 69 73 2e 4b 62 3d 72 29 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 7d 66 75 6e 63 74 69 6f 6e 20 72 28 65 29 7b 72 65 74 75 72 6e 20 65 28 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 61 2e 47 61 28 53 2e 75 2e 47 28 65 29 2c 28 66 75 6e 63 74 69 6f 6e 28 6e 2c 74 29 7b 72 65 74 75 72 Data Ascii: .N=null,n.Tc())}function n(n,t,r){this.node=n,this.yc=t,this.kb=[],this.H=!1,t.N\|\|S.a.K.za(n,e),r&&r.N&&(r.N.kb.push(n),this.Kb=r)}function t(e){return function(){return e}}function r(e){return e()}function o(e){return S.a.Ga(S.u.G(e),(function(n,t){retur
2024-04-26 17:28:00 UTC	16383	IN	Data Raw: 74 69 6f 6e 22 29 26 26 6e 75 6c 6c 21 3d 3d 28 63 3d 53 2e 61 2e 66 28 74 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 43 61 70 74 69 6f 6e 22 29 29 29 26 26 63 21 3d 3d 61 26 26 66 2e 75 6e 73 68 69 66 74 28 44 29 29 3b 76 61 72 20 68 3d 21 31 3b 6e 2e 62 65 66 6f 72 65 52 65 6d 6f 76 65 3d 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 6e 29 7d 2c 63 3d 69 2c 74 2e 68 61 73 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 72 52 65 6e 64 65 72 22 29 26 26 28 63 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 28 30 2c 6e 29 2c 53 2e 75 2e 47 28 74 2e 67 65 74 28 22 6f 70 74 69 6f 6e 73 41 66 74 65 Data Ascii: tion")&&null!==(c=S.a.f(t.get("optionsCaption")))&&c!==a&&f.unshift(D));var h=!1;n.beforeRemove=function(n){e.removeChild(n)},c=i,t.has("optionsAfterRender")&&"function"==typeof t.get("optionsAfterRender")&&(c=function(e,n){i(0,n),S.u.G(t.get("optionsAfte
2024-04-26 17:28:00 UTC	16383	IN	Data Raw: 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 7b 7b 6b 6f 5f 63 6f 64 65 20 28 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 20 72 65 74 75 72 6e 20 22 2b 65 2b 22 20 7d 29 28 29 29 20 7d 7d 22 7d 2c 74 68 69 73 2e 61 64 64 54 65 6d 70 6c 61 74 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 75 2e 77 72 69 74 65 28 22 3c 73 63 72 69 70 74 20 74 79 70 65 3d 27 74 65 78 74 2f 68 74 6d 6c 27 20 69 64 3d 27 22 2b 65 2b 22 27 3e 22 2b 6e 2b 22 3c 5c 2f 73 63 72 69 70 74 3e 22 29 7d 2c 30 3c 65 26 26 28 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 63 6f 64 65 3d 7b 6f 70 65 6e 3a 22 5f 5f 2e 70 75 73 68 28 24 31 20 7c 7c 20 27 27 29 3b 22 7d 2c 6c 2e 74 6d 70 6c 2e 74 61 67 2e 6b 6f 5f 77 69 74 68 3d 7b 6f 70 65 6e 3a 22 77 69 74 68 28 24 31 29 20 7b 22 2c 63 6c 6f 73 65 3a Data Ascii: ion(e){return"{{ko_code ((function() { return "+e+" })()) }}"},this.addTemplate=function(e,n){u.write("<script type='text/html' id='"+e+"'>"+n+"<\/script>")},0<e&&(l.tmpl.tag.ko_code={open:"__.push($1 \|\| '');"},l.tmpl.tag.ko_with={open:"with($1) {",close:
2024-04-26 17:28:00 UTC	11006	IN	Data Raw: 64 2e 63 6f 72 72 65 6c 61 74 69 6f 6e 49 64 29 2c 64 2e 73 65 73 73 69 6f 6e 49 64 26 26 28 6e 2e 68 70 67 72 65 71 75 65 73 74 69 64 3d 64 2e 73 65 73 73 69 6f 6e 49 64 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 79 28 65 29 7b 76 61 72 20 6e 3d 65 3b 69 66 28 65 26 26 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 2e 66 6f 72 45 61 63 68 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 22 75 6e 73 61 66 65 5f 22 3d 3d 3d 65 2e 73 75 62 73 74 72 28 30 2c 37 29 26 26 28 65 3d 65 2e 73 75 62 73 74 72 28 37 29 29 2c 74 5b 65 5d 3d 6e 7d 29 29 2c 6e 3d 72 2e 73 74 72 69 6e 67 69 66 79 28 74 29 7d 72 65 74 75 72 6e 20 6e 26 26 28 6e 3d 6e 2e 72 65 70 6c 61 63 65 28 2f 5c 3f 2f 67 2c 22 5c 5c 75 30 30 33 46 22 29 29 Data Ascii: d.correlationId),d.sessionId&&(n.hpgrequestid=d.sessionId),n}function y(e){var n=e;if(e&&"string"!=typeof e){var t={};f.forEach(e,(function(e,n){"unsafe_"===e.substr(0,7)&&(e=e.substr(7)),t[e]=n})),n=r.stringify(t)}return n&&(n=n.replace(/\?/g,"\\u003F"))

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:00 UTC	710	OUT	GET /instrument/cookieenabled HTTP/1.1 Host: 3pcookiecheck.azureedge.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 17:28:00 UTC	511	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 17:28:00 GMT Content-Type: text/html; charset=utf-8 Content-Length: 168 Connection: close Last-Modified: Tue, 08 Sep 2020 06:14:05 GMT ETag: 0x8D853BE63D5B0BD x-ms-request-id: 80aa9361-b01e-0028-2f49-971075000000 x-ms-version: 2009-09-19 x-ms-lease-status: unlocked x-ms-blob-type: BlockBlob x-azure-ref: 20240426T172800Z-1865489d5f4r69rrg7uwqa73hg0000000bug000000005w9n x-fd-int-roxy-purgeid: 0 X-Cache-Info: L1_T2 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-04-26 17:28:00 UTC	168	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 2f 2f 3c 21 5b 43 44 41 54 41 5b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 2e 70 6f 73 74 4d 65 73 73 61 67 65 28 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 2c 22 2a 22 29 7d 29 28 29 3b 0a 2f 2f 5d 5d 3e 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: <html><head></head><body><script type="text/javascript">//<![CDATA[(function(){window.parent.postMessage(navigator.cookieEnabled,"*")})();//...</script></body></html>

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:05 UTC	648	OUT	POST /report/ESTS-UX-All HTTP/1.1 Host: csp.microsoft.com Connection: keep-alive Content-Length: 2412 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/csp-report Accept: / Origin: https://login.microsoftonline.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: report Referer: https://login.microsoftonline.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 17:28:05 UTC	2412	OUT	Data Raw: 7b 22 63 73 70 2d 72 65 70 6f 72 74 22 3a 7b 22 64 6f 63 75 6d 65 6e 74 2d 75 72 69 22 3a 22 68 74 74 70 73 3a 2f 2f 6c 6f 67 69 6e 2e 6d 69 63 72 6f 73 6f 66 74 6f 6e 6c 69 6e 65 2e 63 6f 6d 2f 63 6f 6d 6d 6f 6e 2f 6f 61 75 74 68 32 2f 61 75 74 68 6f 72 69 7a 65 3f 63 6c 69 65 6e 74 5f 69 64 3d 39 65 61 31 61 64 37 39 2d 66 64 62 36 2d 34 66 39 61 2d 38 62 63 33 2d 32 62 37 30 66 39 36 65 33 34 63 37 26 72 65 73 70 6f 6e 73 65 5f 74 79 70 65 3d 69 64 5f 74 6f 6b 65 6e 2b 63 6f 64 65 26 6e 6f 6e 63 65 3d 33 36 30 64 37 32 38 32 2d 39 62 36 31 2d 34 34 61 65 2d 62 61 33 32 2d 39 61 38 61 62 35 63 33 64 33 35 64 26 72 65 64 69 72 65 63 74 5f 75 72 69 3d 68 74 74 70 73 25 33 61 25 32 66 25 32 66 77 77 77 2e 62 69 6e 67 2e 63 6f 6d 25 32 66 6f 72 67 69 64 25 Data Ascii: {"csp-report":{"document-uri":"https://login.microsoftonline.com/common/oauth2/authorize?client_id=9ea1ad79-fdb6-4f9a-8bc3-2b70f96e34c7&response_type=id_token+code&nonce=360d7282-9b61-44ae-ba32-9a8ab5c3d35d&redirect_uri=https%3a%2f%2fwww.bing.com%2forgid%
2024-04-26 17:28:32 UTC	349	IN	HTTP/1.1 200 OK Date: Fri, 26 Apr 2024 17:28:31 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Request-Context: appId=cid-v1:5c791ad2-9c50-4271-a8a5-5c74d929f3ed x-azure-ref: 20240426T172805Z-1865489d5f4vxtqf9836nc5azn00000004r0000000000uzs X-Cache: CONFIG_NOCACHE
2024-04-26 17:28:32 UTC	7	IN	Data Raw: 32 0d 0a 6f 6b 0d 0a Data Ascii: 2ok
2024-04-26 17:28:32 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:40 UTC	854	OUT	GET /embed/SrGENEXocJU?autoplay=1&enablejsapi=1&origin=https://www.bing.com&rel=0&mute=1 HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 17:28:40 UTC	2479	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Fri, 26 Apr 2024 17:28:40 GMT Strict-Transport-Security: max-age=31536000 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy-Report-Only: base-uri 'self';default-src 'self' https: blob:;font-src https: data:;img-src https: data: android-webview-video-poster:;media-src blob: https:;object-src 'none';report-uri /cspreport/common;script-src 'report-sample' 'nonce-sDmmQpKcyMIAwhRbnvx5gw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';style-src https: 'unsafe-inline' Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=87xkIprz8yI; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_INFO1_LIVE=2yM7plCM-iE; Domain=.youtube.com; Expires=Wed, 23-Oct-2024 17:28:40 GMT; Path=/; Secure; HttpOnly; SameSite=none Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbQ%3D%3D; Domain=.youtube.com; Expires=Wed, 23-Oct-2024 17:28:40 GMT; Path=/; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 17:28:40 UTC	2479	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 44 6d 6d 51 70 4b 63 79 4d 49 41 77 68 52 62 6e 76 78 35 67 77 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="sDmmQpKcyMIAwhRbnvx5gw">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-04-26 17:28:40 UTC	2479	IN	Data Raw: 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 42 30 2d 30 34 42 31 2c 55 2b 32 31 31 36 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d Data Ascii: .com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0-04B1,U+2116;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1M
2024-04-26 17:28:40 UTC	2479	IN	Data Raw: 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 61 20 7b 63 6f 6c 6f 72 3a 20 23 31 36 37 61 63 36 3b 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 73 44 6d 6d 51 70 4b 63 79 4d 49 41 77 68 52 62 6e 76 78 35 67 77 22 3e 76 61 72 20 79 74 63 73 69 3d 7b 67 74 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 6e 3d 28 6e 7c 7c 22 22 29 2b 22 64 61 74 61 5f 22 3b 72 65 74 75 72 6e 20 79 74 63 73 69 5b 6e 5d 7c 7c 28 79 74 63 73 69 5b 6e 5d 3d 7b 74 69 63 6b 3a 7b 7d 2c 69 6e 66 6f 3a 7b 7d 2c 67 65 6c 3a 7b 70 72 65 4c 6f 67 67 65 64 47 65 6c 49 6e 66 6f 73 3a 5b 5d 7d 7d 29 7d 2c 6e 6f 77 3a 77 69 6e 64 6f 77 2e 70 65 72 66 6f 72 6d 61 6e 63 65 26 26 77 69 6e 64 6f 77 2e 70 Data Ascii: yer-unavailable a {color: #167ac6; text-decoration: none;}</style><script nonce="sDmmQpKcyMIAwhRbnvx5gw">var ytcsi={gt:function(n){n=(n\|\|"")+"data_";return ytcsi[n]\|\|(ytcsi[n]={tick:{},info:{},gel:{preLoggedGelInfos:[]}})},now:window.performance&&window.p
2024-04-26 17:28:40 UTC	2479	IN	Data Raw: 6b 5d 3d 61 5b 30 5d 5b 6b 5d 7d 7d 7d 3b 0a 79 74 63 66 67 2e 73 65 74 28 7b 22 45 56 45 4e 54 5f 49 44 22 3a 22 53 4f 51 72 5a 72 61 34 47 38 66 36 78 74 59 50 35 4b 6d 33 6d 41 51 22 2c 22 45 58 50 45 52 49 4d 45 4e 54 5f 46 4c 41 47 53 22 3a 7b 22 48 35 5f 65 6e 61 62 6c 65 5f 66 75 6c 6c 5f 70 61 63 66 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 48 35 5f 75 73 65 5f 61 73 79 6e 63 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 61 62 5f 64 65 74 5f 65 6c 5f 68 22 3a 74 72 75 65 2c 22 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 22 3a 74 72 75 65 2c 22 61 62 5f 64 65 74 5f 66 65 74 5f 77 72 5f 65 6e 22 3a 74 72 75 65 2c 22 61 62 5f 64 65 74 5f 67 65 6e 5f 72 65 22 3a 74 72 75 65 2c 22 61 62 5f 66 6b 5f 73 6b 5f 63 6c 22 3a 74 72 75 65 2c 22 61 63 74 69 Data Ascii: k]=a[0][k]}}};ytcfg.set({"EVENT_ID":"SOQrZra4G8f6xtYP5Km3mAQ","EXPERIMENT_FLAGS":{"H5_enable_full_pacf_logging":true,"H5_use_async_logging":true,"ab_det_el_h":true,"ab_det_fet_wr":true,"ab_det_fet_wr_en":true,"ab_det_gen_re":true,"ab_fk_sk_cl":true,"acti
2024-04-26 17:28:40 UTC	2479	IN	Data Raw: 75 6e 70 6c 75 67 67 65 64 5f 61 64 5f 70 6f 64 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6d 65 61 72 69 6e 67 5f 65 78 70 61 6e 73 69 6f 6e 5f 64 61 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 74 68 69 72 64 5f 70 61 72 74 79 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 61 74 63 68 5f 6e 65 78 74 5f 70 61 75 73 65 5f 61 75 74 6f 70 6c 61 79 5f 6c 61 63 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 39 36 5f 62 69 74 5f 63 73 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 65 62 5f 74 69 65 72 65 64 5f 67 65 6c 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 77 69 6e 64 6f 77 5f 63 6f 6e 73 74 72 61 69 6e 65 64 5f 62 75 79 5f 66 6c 6f 77 5f 64 69 61 6c 6f 67 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 79 70 63 5f Data Ascii: unplugged_ad_pod":true,"enable_smearing_expansion_dai":true,"enable_third_party_info":true,"enable_watch_next_pause_autoplay_lact":true,"enable_web_96_bit_csn":true,"enable_web_tiered_gel":true,"enable_window_constrained_buy_flow_dialog":true,"enable_ypc_
2024-04-26 17:28:40 UTC	2479	IN	Data Raw: 3a 74 72 75 65 2c 22 74 72 61 6e 73 70 6f 72 74 5f 75 73 65 5f 73 63 68 65 64 75 6c 65 72 22 3a 74 72 75 65 2c 22 74 72 69 67 67 65 72 5f 69 6d 70 72 65 73 73 69 6f 6e 5f 70 69 6e 67 73 5f 6f 6e 5f 76 69 65 77 5f 73 65 61 72 63 68 5f 64 65 73 6b 74 6f 70 22 3a 74 72 75 65 2c 22 75 73 65 5f 63 6f 6c 6f 72 5f 70 61 6c 65 74 74 65 73 5f 6d 6f 64 65 72 6e 5f 63 6f 6c 6c 65 63 74 69 6f 6e 73 5f 76 32 22 3a 74 72 75 65 2c 22 75 73 65 5f 63 6f 72 65 5f 73 6d 22 3a 74 72 75 65 2c 22 75 73 65 5f 63 73 69 5f 73 74 70 5f 68 61 6e 64 6c 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 65 76 65 6e 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 69 6e 66 6f 67 65 6c 5f 65 61 72 6c 79 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 Data Ascii: :true,"transport_use_scheduler":true,"trigger_impression_pings_on_view_search_desktop":true,"use_color_palettes_modern_collections_v2":true,"use_core_sm":true,"use_csi_stp_handler":true,"use_event_time_ms_header":true,"use_infogel_early_logging":true,"use
2024-04-26 17:28:40 UTC	2479	IN	Data Raw: 30 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 64 75 72 61 74 69 6f 6e 5f 6d 73 22 3a 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 77 69 6c 5f 69 63 6f 6e 5f 6d 61 78 5f 63 6f 6e 63 75 72 72 65 6e 74 5f 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 43 6c 69 65 6e 74 52 65 6c 65 61 73 65 50 72 6f 63 65 73 73 43 72 69 74 69 63 61 6c 5f 5f 79 6f 75 74 75 62 65 5f 65 6d 62 65 64 73 5f 63 6c 69 65 6e 74 5f 76 65 72 73 69 6f 6e 5f 6f 76 65 72 72 69 64 65 22 3a 22 22 2c 22 65 6d 62 65 64 73 5f 77 65 62 5f 73 Data Ascii: 00,"web_smoothness_test_duration_ms":0,"web_smoothness_test_method":0,"wil_icon_max_concurrent_fetches":9999,"ytidb_remake_db_retries":3,"ytidb_reopen_db_retries":3,"WebClientReleaseProcessCritical__youtube_embeds_client_version_override":"","embeds_web_s
2024-04-26 17:28:40 UTC	2479	IN	Data Raw: 33 3b 71 5c 75 30 30 33 64 30 2e 37 22 2c 22 64 65 76 69 63 65 45 78 70 65 72 69 6d 65 6e 74 49 64 22 3a 22 43 68 78 4f 65 6b 30 79 54 57 70 4a 65 55 39 55 51 58 68 4f 56 45 6c 33 54 56 52 6e 4e 55 39 55 53 54 42 50 55 54 30 39 45 4d 6a 49 72 37 45 47 47 4d 6a 49 72 37 45 47 22 7d 2c 22 75 73 65 72 22 3a 7b 22 6c 6f 63 6b 65 64 53 61 66 65 74 79 4d 6f 64 65 22 3a 66 61 6c 73 65 7d 2c 22 72 65 71 75 65 73 74 22 3a 7b 22 75 73 65 53 73 6c 22 3a 74 72 75 65 7d 2c 22 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 22 3a 7b 22 63 6c 69 63 6b 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 22 49 68 4d 49 74 76 7a 4a 34 4c 50 67 68 51 4d 56 52 37 33 52 42 42 33 6b 31 41 31 44 22 7d 7d 2c 22 49 4e 4e 45 52 54 55 42 45 5f 43 4f 4e 54 45 58 54 5f 43 4c 49 45 4e 54 5f 4e 41 Data Ascii: 3;q\u003d0.7","deviceExperimentId":"ChxOek0yTWpJeU9UQXhOVEl3TVRnNU9USTBPUT09EMjIr7EGGMjIr7EG"},"user":{"lockedSafetyMode":false},"request":{"useSsl":true},"clickTracking":{"clickTrackingParams":"IhMItvzJ4LPghQMVR73RBB3k1A1D"}},"INNERTUBE_CONTEXT_CLIENT_NA
2024-04-26 17:28:40 UTC	2479	IN	Data Raw: 61 79 73 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 74 74 5f 77 65 62 5f 72 65 63 6f 72 64 5f 6d 65 74 72 69 63 73 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 75 74 6f 70 6c 61 79 5f 74 69 6d 65 5c 75 30 30 33 64 31 30 30 30 30 5c 75 30 30 32 36 61 75 74 6f 70 6c 61 79 5f 74 69 6d 65 5f 66 6f 72 5f 66 75 6c 6c 73 63 72 65 65 6e 5c 75 30 30 33 64 2d 31 5c 75 30 30 32 36 61 75 74 6f 70 6c 61 79 5f 74 69 6d 65 5f 66 6f 72 5f 6d 75 73 69 63 5f 63 6f 6e 74 65 6e 74 5c 75 30 30 33 64 2d 31 5c 75 30 30 32 36 62 67 5f 76 6d 5f 72 65 69 6e 69 74 5f 74 68 72 65 73 68 6f 6c 64 5c 75 30 30 33 64 37 32 30 30 30 30 30 5c 75 30 30 32 36 62 6c 6f 63 6b 65 64 5f 70 61 63 6b 61 67 65 73 5f 66 6f 72 5f 73 70 73 5c Data Ascii: ays_send_and_write\u003dtrue\u0026att_web_record_metrics\u003dtrue\u0026autoplay_time\u003d10000\u0026autoplay_time_for_fullscreen\u003d-1\u0026autoplay_time_for_music_content\u003d-1\u0026bg_vm_reinit_threshold\u003d7200000\u0026blocked_packages_for_sps\
2024-04-26 17:28:40 UTC	2479	IN	Data Raw: 5c 75 30 30 32 36 65 6d 62 65 64 73 5f 77 65 62 5f 6d 6f 76 65 5f 70 72 65 6c 6f 61 64 5f 62 79 5f 70 6c 61 79 65 72 5f 76 61 72 73 5f 74 6f 5f 70 75 62 6c 69 63 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 65 6d 62 65 64 73 5f 77 65 62 5f 6e 77 6c 5f 64 69 73 61 62 6c 65 5f 6e 6f 63 6f 6f 6b 69 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 65 6d 62 65 64 73 5f 77 65 62 5f 73 79 6e 74 68 5f 63 68 5f 68 65 61 64 65 72 73 5f 62 61 6e 6e 65 64 5f 75 72 6c 73 5f 72 65 67 65 78 5c 75 30 30 33 64 5c 75 30 30 32 36 65 6e 61 62 6c 65 5f 61 62 5f 72 65 70 6f 72 74 5f 6f 6e 5f 65 72 72 6f 72 73 63 72 65 65 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 65 6e 61 62 6c 65 5f 61 62 5f 72 70 5f 69 6e 74 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 65 6e Data Ascii: \u0026embeds_web_move_preload_by_player_vars_to_public\u003dtrue\u0026embeds_web_nwl_disable_nocookie\u003dtrue\u0026embeds_web_synth_ch_headers_banned_urls_regex\u003d\u0026enable_ab_report_on_errorscreen\u003dtrue\u0026enable_ab_rp_int\u003dtrue\u0026en

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://go.microsoft.com/fwlink/?LinkId=787651.

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 320

Chrome Cache Entry: 321

Chrome Cache Entry: 322

Chrome Cache Entry: 324

Chrome Cache Entry: 325

Chrome Cache Entry: 326

Chrome Cache Entry: 327

Chrome Cache Entry: 328

Chrome Cache Entry: 329

Chrome Cache Entry: 330

Chrome Cache Entry: 331

Chrome Cache Entry: 332

Chrome Cache Entry: 333

Chrome Cache Entry: 334

Chrome Cache Entry: 335

Chrome Cache Entry: 336

Chrome Cache Entry: 337

Chrome Cache Entry: 338

Chrome Cache Entry: 339

Chrome Cache Entry: 340

Chrome Cache Entry: 341

Chrome Cache Entry: 342

Chrome Cache Entry: 343

Windows Analysis Report
http://go.microsoft.com/fwlink/?LinkId=787651.

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:42 UTC	845	OUT	GET /s/player/652ba3a2/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/SrGENEXocJU?autoplay=1&enablejsapi=1&origin=https://www.bing.com&rel=0&mute=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=87xkIprz8yI; VISITOR_INFO1_LIVE=2yM7plCM-iE; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbQ%3D%3D
2024-04-26 17:28:43 UTC	682	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 381480 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 24 Apr 2024 20:48:38 GMT Expires: Thu, 24 Apr 2025 20:48:38 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 Apr 2024 04:20:05 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 160804 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 17:28:43 UTC	573	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 3a 6e 6f 74 28 2e 79 74 70 2d 74 72 61 6e 73 70 61 72 65 6e 74 29 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 Data Ascii: ed-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-vid
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 70 2d 74 6f 75 63 68 2d 6d 6f 64 65 29 20 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 38 65 38 65 38 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 34 32 34 32 34 32 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 3a 6e 6f 74 28 2e 79 74 70 2d 74 6f 75 63 68 2d 6d 6f 64 65 29 20 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 63 6f 6e 74 61 69 6e 65 72 7b 7a 2d 69 6e 64 65 78 3a 31 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 79 74 70 2d 65 6d 62 65 64 2d 65 72 72 6f 72 Data Ascii: p-touch-mode) ::-webkit-scrollbar-thumb{background-color:#8e8e8e;border:1px solid #424242;border-radius:5px}.ytp-big-mode:not(.ytp-touch-mode) ::-webkit-scrollbar-thumb{border-radius:8px}.html5-video-container{z-index:10;position:relative}.ytp-embed-error
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 2c 31 29 2c 74 6f 70 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 62 6f 74 74 6f 6d 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 2c 74 6f 70 20 2e 32 35 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 34 39 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 35 33 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 3a 6e 6f 74 28 2e 61 64 2d 73 68 6f 77 69 6e 67 29 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f Data Ascii: ,1),top .25s cubic-bezier(0,0,.2,1);transition:bottom .25s cubic-bezier(0,0,.2,1),top .25s cubic-bezier(0,0,.2,1)}.ytp-small-mode .ytp-player-content{bottom:49px}.ytp-embed .ytp-player-content{bottom:53px}.ytp-embed:not(.ad-showing) .ytp-player-content:no
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 6d 3a 31 34 33 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 3a 6e 6f 74 28 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 29 20 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 68 69 64 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 32 34 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 36 30 70 78 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f Data Ascii: m:143px}.ytp-big-mode.ytp-autohide:not(.ytp-ad-overlay-open) .ytp-iv-player-content,.ytp-big-mode.ytp-hide-controls .ytp-iv-player-content{bottom:24px}.ytp-big-mode.ytp-ad-overlay-open .ytp-player-content{bottom:160px}.ytp-button{border:none;background-co
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 72 69 67 68 74 3a 30 7d 2e 79 74 70 2d 67 76 6e 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 2c 2e 79 74 70 2d 67 76 6e 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 7b 74 6f 70 3a 32 30 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 62 6f 74 74 6f 6d 7b 62 6f 74 74 6f 6d 3a 30 3b 68 65 69 67 68 74 3a 34 38 70 78 3b 77 69 64 74 68 3a 31 30 30 25 3b 7a 2d 69 6e 64 65 78 3a 35 39 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 33 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 Data Ascii: direction:normal;-webkit-flex-direction:column;flex-direction:column;right:0}.ytp-gvn .ytp-chrome-top,.ytp-gvn.ytp-big-mode .ytp-chrome-top{top:20px}.ytp-chrome-bottom{bottom:0;height:48px;width:100%;z-index:59;padding-top:3px;text-align:left;direction:lt
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6e 65 78 74 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 72 65 6d 6f 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 20 34 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 7d Data Ascii: s .ytp-button.ytp-next-button{padding:0}.ytp-chrome-controls .ytp-button.ytp-miniplayer-button,.ytp-chrome-controls .ytp-button.ytp-remote-button{padding:0 4px}.ytp-embed .ytp-chrome-controls .ytp-button,.ytp-embed .ytp-replay-button{width:40px;padding:0}
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 79 74 70 2d 66 75 6c 6c 73 63 72 65 65 6e 2d 62 75 74 74 6f 6e 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 32 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 31 30 30 25 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 3a 3a 62 65 66 6f 72 65 2c 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 2d 62 75 74 74 6f 6e 3a Data Ascii: "";display:block;width:12px;position:absolute;top:5px;bottom:0;left:-12px}.ytp-fullscreen-button::after{content:"";display:block;width:12px;position:absolute;top:5px;bottom:0;left:100%}.ytp-big-mode .ytp-prev-button::before,.ytp-big-mode .ytp-play-button:
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 65 72 28 2e 34 2c 30 2c 31 2c 31 29 7d 2e 79 74 70 2d 63 61 69 72 6f 2d 72 65 66 72 65 73 68 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 72 65 64 2d 69 6e 64 69 63 61 74 6f 72 2c 23 66 66 61 35 30 30 29 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 38 70 78 3b 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e Data Ascii: er(.4,0,1,1)}.ytp-cairo-refresh .ytp-chrome-controls .ytp-button[aria-pressed]:after{background-color:var(--yt-spec-red-indicator,#ffa500)}.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed]:after{left:18px;bottom:6px}.ytp-embed .ytp-chrome-con
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 69 74 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 79 74 70 2d 63 6f 6c 6f 72 2d 70 61 72 74 79 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 3a 79 74 70 2d 70 61 72 74 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 3b 61 6e 69 6d 61 74 69 6f 6e 3a 79 74 70 2d 70 61 72 74 79 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 20 2e 31 73 20 Data Ascii: ite .ytp-chrome-controls .ytp-button[aria-pressed]:after{background-color:#ddd}.ytp-color-party .ytp-chrome-controls .ytp-button[aria-pressed]:after{-webkit-animation:ytp-party-background-color .1s linear infinite;animation:ytp-party-background-color .1s

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:43 UTC	860	OUT	GET /s/player/652ba3a2/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/SrGENEXocJU?autoplay=1&enablejsapi=1&origin=https://www.bing.com&rel=0&mute=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=87xkIprz8yI; VISITOR_INFO1_LIVE=2yM7plCM-iE; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbQ%3D%3D
2024-04-26 17:28:43 UTC	689	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 326912 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 24 Apr 2024 20:48:38 GMT Expires: Thu, 24 Apr 2025 20:48:38 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 Apr 2024 04:20:05 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 160805 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 17:28:43 UTC	566	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 6d 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var m;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 29 3b 66 75 6e 63 74 69 6f 6e 20 75 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 66 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 Data Ascii: );function u(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(thi
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 74 68 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 61 61 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 6c 65 20 6f 72 20 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 61 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 76 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c Data Ascii: th)return{next:aa(a)};throw Error(String(a)+" is not an iterable or ArrayLike");}function ma(a){if(!(a instanceof Array)){a=v(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function na(a,b){return Object.prototype.hasOwnProperty.call
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 72 28 61 2b 22 20 69 73 20 6e 6f 74 20 65 78 74 65 6e 73 69 62 6c 65 22 29 3b 72 65 74 75 72 6e 20 61 7d 3a 6e 75 6c 6c 7d 76 61 72 20 77 61 3d 73 61 3b 0a 66 75 6e 63 74 69 6f 6e 20 77 28 61 2c 62 29 7b 61 2e 70 72 6f 74 6f 74 79 70 65 3d 71 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 77 61 29 77 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e Data Ascii: r(a+" is not extensible");return a}:null}var wa=sa;function w(a,b){a.prototype=qa(b.prototype);a.prototype.constructor=a;if(wa)wa(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 20 54 79 70 65 45 72 72 6f 72 28 22 49 74 65 72 61 74 6f 72 20 72 65 73 75 6c 74 20 22 2b 65 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 6f 62 6a 65 63 74 22 29 3b 69 66 28 21 65 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 61 2e 68 2e 76 3d 21 31 2c 65 3b 76 61 72 20 66 3d 65 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 67 29 7b 72 65 74 75 72 6e 20 61 2e 68 2e 6d 3d 6e 75 6c 6c 2c 7a 61 28 61 2e 68 2c 67 29 2c 48 61 28 61 29 7d 61 2e 68 2e 6d 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 68 2c 66 29 3b 72 65 74 75 72 6e 20 48 61 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 48 61 28 61 29 7b 66 6f 72 28 3b 61 2e 68 2e 68 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 69 28 61 2e 68 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 68 2e 76 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 Data Ascii: TypeError("Iterator result "+e+" is not an object");if(!e.done)return a.h.v=!1,e;var f=e.value}catch(g){return a.h.m=null,za(a.h,g),Ha(a)}a.h.m=null;d.call(a.h,f);return Ha(a)}function Ha(a){for(;a.h.h;)try{var b=a.i(a.h);if(b)return a.h.v=!1,{value:b.v
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 65 74 75 72 6e 21 31 7d 7d 3a 6e 75 6c 6c 7d 29 3b 0a 75 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 67 29 7b 74 68 69 73 2e 68 3d 30 3b 74 68 69 73 2e 6a 3d 76 6f 69 64 20 30 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 76 3d 21 31 3b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6b 29 7b 68 2e 72 65 6a 65 63 74 28 6b 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 0a 69 66 Data Ascii: eturn!1}}:null});u("Promise",function(a){function b(g){this.h=0;this.j=void 0;this.i=[];this.v=!1;var h=this.l();try{g(h.resolve,h.reject)}catch(k){h.reject(k)}}function c(){this.h=null}function d(g){return g instanceof b?g:new b(function(h){h(g)})}if
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 28 31 2c 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 46 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 69 66 28 30 21 3d 74 68 69 73 2e 68 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 73 65 74 74 6c 65 28 22 2b 67 2b 22 2c 20 22 2b 68 2b 22 29 3a 20 50 72 6f 6d 69 73 65 20 61 6c 72 65 61 64 79 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 68 29 3b 74 68 69 73 2e 68 3d 67 3b 74 68 69 73 2e 6a 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 68 26 26 74 68 69 73 2e 66 61 28 29 3b 74 68 69 73 2e 4b 28 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 66 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 55 28 29 29 7b 76 61 72 20 68 3d 66 61 2e 63 6f Data Ascii: (1,g)};b.prototype.F=function(g,h){if(0!=this.h)throw Error("Cannot settle("+g+", "+h+"): Promise already settled in state"+this.h);this.h=g;this.j=h;2===this.h&&this.fa();this.K()};b.prototype.fa=function(){var g=this;e(function(){if(g.U()){var h=fa.co
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 2e 58 62 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 29 7b 73 77 69 74 63 68 28 6c 2e 68 29 7b 63 61 73 65 20 31 3a 67 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 3a 68 28 6c 2e 6a 29 3b 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 74 68 72 6f 77 20 45 72 72 6f 72 28 22 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6c 2e 68 29 3b 7d 7d 0a 76 61 72 20 6c 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 69 3f 66 2e 69 28 6b 29 3a 74 68 69 73 2e 69 2e 70 75 73 68 28 6b 29 3b 74 68 69 73 2e 76 3d 21 30 7d 3b 0a 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 6b 28 67 29 7d Data Ascii: .Xb=function(g,h){function k(){switch(l.h){case 1:g(l.j);break;case 2:h(l.j);break;default:throw Error("Unexpected state: "+l.h);}}var l=this;null==this.i?f.i(k):this.i.push(k);this.v=!0};b.resolve=d;b.reject=function(g){return new b(function(h,k){k(g)}
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 28 6b 29 3b 6e 2e 73 65 74 28 6c 2c 34 29 3b 72 65 74 75 72 6e 21 6e 2e 68 61 73 28 6b 29 26 26 34 3d 3d 6e 2e 67 65 74 28 6c 29 7d 63 61 74 63 68 28 70 29 7b 72 65 74 75 72 6e 21 31 7d 7d 28 29 29 72 65 74 75 72 6e 20 61 3b 0a 76 61 72 20 67 3d 22 24 6a 73 63 6f 6d 70 5f 68 69 64 64 65 6e 5f 22 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6b 2c 6c 29 7b 69 66 28 21 64 28 6b 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6b 29 3b 69 66 28 21 6e 61 28 6b 2c Data Ascii: (k);n.set(l,4);return!n.has(k)&&4==n.get(l)}catch(p){return!1}}())return a;var g="$jscomp_hidden_"+Math.random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(k,l){if(!d(k))throw Error("Invalid WeakMap key");e(k);if(!na(k,
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 6e 28 29 7b 69 66 28 21 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 61 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6b 3d 6e 65 77 20 61 28 76 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6b 2e 67 65 74 28 68 29 7c 7c 31 21 3d 6b 2e 73 69 7a 65 7c 7c 6b 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6b 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6b 7c 7c 32 21 3d 6b 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6c 3d 6b 2e 65 6e 74 72 69 65 73 28 29 2c 6e 3d 6c 2e 6e 65 78 74 Data Ascii: n(){if(!a\|\|"function"!=typeof a\|\|!a.prototype.entries\|\|"function"!=typeof Object.seal)return!1;try{var h=Object.seal({x:4}),k=new a(v([[h,"s"]]));if("s"!=k.get(h)\|\|1!=k.size\|\|k.get({x:4})\|\|k.set({x:4},"t")!=k\|\|2!=k.size)return!1;var l=k.entries(),n=l.next

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:43 UTC	848	OUT	GET /s/player/652ba3a2/player_ias.vflset/en_US/base.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/SrGENEXocJU?autoplay=1&enablejsapi=1&origin=https://www.bing.com&rel=0&mute=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=87xkIprz8yI; VISITOR_INFO1_LIVE=2yM7plCM-iE; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbQ%3D%3D
2024-04-26 17:28:43 UTC	690	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 2546075 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 24 Apr 2024 07:33:54 GMT Expires: Thu, 24 Apr 2025 07:33:54 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 Apr 2024 04:20:05 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 208489 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 17:28:43 UTC	565	IN	Data Raw: 76 61 72 20 5f 79 74 5f 70 6c 61 79 65 72 3d 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 28 54 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 32 30 31 34 20 62 79 20 56 69 74 61 6c 79 20 50 75 7a 72 69 6e 0a 0a 20 50 65 72 6d 69 73 73 69 6f 6e 20 69 73 20 68 65 72 Data Ascii: var _yt_player={};(function(g){var window=this;/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0// SPDX-License-Identifier: Apache-2.0// (The MIT License) Copyright (C) 2014 by Vitaly Puzrin Permission is her
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 20 6e 6f 74 69 63 65 20 61 6e 64 20 74 68 69 73 20 70 65 72 6d 69 73 73 69 6f 6e 20 6e 6f 74 69 63 65 20 73 68 61 6c 6c 20 62 65 20 69 6e 63 6c 75 64 65 64 20 69 6e 0a 20 61 6c 6c 20 63 6f 70 69 65 73 20 6f 72 20 73 75 62 73 74 61 6e 74 69 61 6c 20 70 6f 72 74 69 6f 6e 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2e 0a 0a 20 54 48 45 20 53 4f 46 54 57 41 52 45 Data Ascii: tware, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright notice and this permission notice shall be included in all copies or substantial portions of the Software. THE SOFTWARE
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 69 73 73 69 6f 6e 20 69 73 20 67 72 61 6e 74 65 64 20 74 6f 20 61 6e 79 6f 6e 65 20 74 6f 20 75 73 65 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 66 6f 72 20 61 6e 79 20 70 75 72 70 6f 73 65 2c 0a 20 20 20 69 6e 63 6c 75 64 69 6e 67 20 63 6f 6d 6d 65 72 63 69 61 6c 20 61 70 70 6c 69 63 61 74 69 6f 6e 73 2c 20 61 6e 64 20 74 6f 20 61 6c 74 65 72 20 69 74 20 61 6e 64 20 72 65 64 69 73 74 72 69 62 75 74 65 20 69 74 0a 20 20 20 66 72 65 65 6c 79 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 72 65 73 74 72 69 63 74 69 6f 6e 73 3a 0a 20 20 20 31 2e 20 54 68 65 20 6f 72 69 67 69 6e 20 6f 66 20 74 68 69 73 20 73 6f 66 74 77 61 72 65 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 6d 69 73 72 65 70 72 65 73 65 6e 74 65 64 3b 20 79 6f 75 Data Ascii: ission is granted to anyone to use this software for any purpose, including commercial applications, and to alter it and redistribute it freely, subject to the following restrictions: 1. The origin of this software must not be misrepresented; you
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 77 69 74 68 6f 75 74 20 6c 69 6d 69 74 61 74 69 6f 6e 20 74 68 65 20 72 69 67 68 74 73 0a 20 74 6f 20 75 73 65 2c 20 63 6f 70 79 2c 20 6d 6f 64 69 66 79 2c 20 6d 65 72 67 65 2c 20 70 75 62 6c 69 73 68 2c 20 64 69 73 74 72 69 62 75 74 65 2c 20 73 75 62 6c 69 63 65 6e 73 65 2c 20 61 6e 64 2f 6f 72 20 73 65 6c 6c 0a 20 63 6f 70 69 65 73 20 6f 66 20 74 68 65 20 53 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 74 6f 20 70 65 72 6d 69 74 20 70 65 72 73 6f 6e 73 20 74 6f 20 77 68 6f 6d 20 74 68 65 20 53 6f 66 74 77 61 72 65 20 69 73 0a 20 66 75 72 6e 69 73 68 65 64 20 74 6f 20 64 6f 20 73 6f 2c 20 73 75 62 6a 65 63 74 20 74 6f 20 74 68 65 20 66 6f 6c 6c 6f 77 69 6e 67 20 63 6f 6e 64 69 74 69 6f 6e 73 3a 0a 0a 20 54 68 65 20 61 62 6f 76 65 20 63 6f 70 79 72 69 67 68 74 Data Ascii: without limitation the rights to use, copy, modify, merge, publish, distribute, sublicense, and/or sell copies of the Software, and to permit persons to whom the Software is furnished to do so, subject to the following conditions: The above copyright
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 65 2c 42 62 61 2c 7a 62 61 2c 41 62 61 2c 44 62 61 2c 45 62 61 2c 72 65 2c 74 65 2c 75 65 2c 47 62 61 2c 76 65 2c 48 62 61 2c 49 62 61 2c 4a 62 61 2c 4c 62 61 2c 4b 62 61 2c 46 65 2c 48 65 2c 4d 62 61 2c 4c 65 2c 4e 65 2c 50 65 2c 4e 62 61 2c 54 65 2c 0a 55 65 2c 5a 65 2c 24 65 2c 4f 62 61 2c 50 62 61 2c 51 62 61 2c 52 62 61 2c 6a 66 2c 6b 66 2c 75 66 2c 55 62 61 2c 57 62 61 2c 56 62 61 2c 76 66 2c 78 66 2c 58 62 61 2c 77 66 2c 45 66 2c 62 66 2c 5a 62 61 2c 59 62 61 2c 51 66 2c 50 66 2c 61 66 2c 53 66 2c 24 62 61 2c 54 66 2c 56 66 2c 57 66 2c 61 63 61 2c 63 63 61 2c 65 63 61 2c 69 67 2c 6a 67 2c 6b 67 2c 69 63 61 2c 6b 63 61 2c 6e 67 2c 6c 63 61 2c 6d 67 2c 70 63 61 2c 67 67 2c 67 63 61 2c 72 63 61 2c 6f 63 61 2c 6d 63 61 2c 6e 63 61 2c 73 63 61 2c 71 63 Data Ascii: e,Bba,zba,Aba,Dba,Eba,re,te,ue,Gba,ve,Hba,Iba,Jba,Lba,Kba,Fe,He,Mba,Le,Ne,Pe,Nba,Te,Ue,Ze,$e,Oba,Pba,Qba,Rba,jf,kf,uf,Uba,Wba,Vba,vf,xf,Xba,wf,Ef,bf,Zba,Yba,Qf,Pf,af,Sf,$ba,Tf,Vf,Wf,aca,cca,eca,ig,jg,kg,ica,kca,ng,lca,mg,pca,gg,gca,rca,oca,mca,nca,sca,qc
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 2c 50 6d 2c 76 66 61 2c 78 66 61 2c 79 66 61 2c 54 6d 2c 7a 66 61 2c 53 6d 2c 55 6d 2c 56 6d 2c 57 6d 2c 58 6d 2c 59 6d 2c 41 66 61 2c 5a 6d 2c 42 66 61 2c 61 6e 2c 43 66 61 2c 46 66 61 2c 62 6e 2c 63 6e 2c 64 6e 2c 65 6e 2c 48 66 61 2c 48 6e 2c 49 66 61 2c 49 6e 2c 4a 6e 2c 4b 6e 2c 4a 66 61 2c 4b 66 61 2c 4e 6e 2c 4c 66 61 2c 4f 6e 2c 50 6e 2c 4f 66 61 2c 51 66 61 2c 53 66 61 2c 52 66 61 2c 54 66 61 2c 52 6e 2c 55 66 61 2c 55 6e 2c 59 6e 2c 5a 6e 2c 24 6e 2c 58 66 61 2c 59 66 61 2c 5a 66 61 2c 61 6f 2c 61 67 61 2c 62 6f 2c 63 67 61 2c 64 67 61 2c 67 67 61 2c 66 67 61 2c 65 67 61 2c 6a 67 61 2c 68 67 61 2c 65 6f 2c 67 6f 2c 6b 67 61 2c 68 6f 2c 69 6f 2c 66 6f 2c 6a 6f 2c 6b 6f 2c 6c 6f 2c 6e 6f 2c 6c 67 61 2c 6f 6f 2c 70 6f 2c 6e 67 61 2c 6d 67 61 2c 6f Data Ascii: ,Pm,vfa,xfa,yfa,Tm,zfa,Sm,Um,Vm,Wm,Xm,Ym,Afa,Zm,Bfa,an,Cfa,Ffa,bn,cn,dn,en,Hfa,Hn,Ifa,In,Jn,Kn,Jfa,Kfa,Nn,Lfa,On,Pn,Ofa,Qfa,Sfa,Rfa,Tfa,Rn,Ufa,Un,Yn,Zn,$n,Xfa,Yfa,Zfa,ao,aga,bo,cga,dga,gga,fga,ega,jga,hga,eo,go,kga,ho,io,fo,jo,ko,lo,no,lga,oo,po,nga,mga,o
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 6a 61 2c 70 6a 61 2c 71 6a 61 2c 58 74 2c 72 6a 61 2c 74 6a 61 2c 73 6a 61 2c 5a 74 2c 24 74 2c 76 6a 61 2c 75 6a 61 2c 79 6a 61 2c 42 6a 61 2c 41 6a 61 2c 61 75 2c 43 6a 61 2c 44 6a 61 2c 45 6a 61 2c 47 6a 61 2c 46 6a 61 2c 48 6a 61 2c 62 75 2c 49 6a 61 2c 0a 4a 6a 61 2c 64 75 2c 4b 6a 61 2c 4c 6a 61 2c 4d 6a 61 2c 4e 6a 61 2c 65 75 2c 4f 6a 61 2c 66 75 2c 50 6a 61 2c 67 75 2c 68 75 2c 52 6a 61 2c 69 75 2c 53 6a 61 2c 6a 75 2c 6b 75 2c 54 6a 61 2c 55 6a 61 2c 6c 75 2c 6e 75 2c 57 6a 61 2c 6f 75 2c 56 6a 61 2c 58 6a 61 2c 59 6a 61 2c 5a 6a 61 2c 61 6b 61 2c 70 75 2c 62 6b 61 2c 74 75 2c 75 75 2c 64 6b 61 2c 65 6b 61 2c 68 6b 61 2c 69 6b 61 2c 76 75 2c 77 75 2c 78 75 2c 79 75 2c 7a 75 2c 41 75 2c 42 75 2c 43 75 2c 44 75 2c 45 75 2c 46 75 2c 47 75 2c 48 75 Data Ascii: ja,pja,qja,Xt,rja,tja,sja,Zt,$t,vja,uja,yja,Bja,Aja,au,Cja,Dja,Eja,Gja,Fja,Hja,bu,Ija,Jja,du,Kja,Lja,Mja,Nja,eu,Oja,fu,Pja,gu,hu,Rja,iu,Sja,ju,ku,Tja,Uja,lu,nu,Wja,ou,Vja,Xja,Yja,Zja,aka,pu,bka,tu,uu,dka,eka,hka,ika,vu,wu,xu,yu,zu,Au,Bu,Cu,Du,Eu,Fu,Gu,Hu
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 61 2c 6b 7a 2c 56 6d 61 2c 6c 7a 2c 6d 7a 2c 57 6d 61 2c 6e 7a 2c 58 6d 61 2c 6f 7a 2c 59 6d 61 2c 5a 6d 61 2c 24 6d 61 2c 70 7a 2c 61 6e 61 2c 71 7a 2c 72 7a 2c 73 7a 2c 62 6e 61 2c 74 7a 2c 63 6e 61 2c 75 7a 2c 76 7a 2c 77 7a 2c 78 7a 2c 41 7a 2c 42 7a 2c 43 7a 2c 64 6e 61 2c 44 7a 2c 45 7a 2c 46 7a 2c 65 6e 61 2c 47 7a 2c 48 7a 2c 49 7a 2c 4a 7a 2c 66 6e 61 2c 4b 7a 2c 4c 7a 2c 4d 7a 2c 4e 7a 2c 4f 7a 2c 67 6e 61 2c 50 7a 2c 68 6e 61 2c 51 7a 2c 69 6e 61 2c 6a 6e 61 2c 52 7a 2c 53 7a 2c 6b 6e 61 2c 54 7a 2c 55 7a 2c 56 7a 2c 6c 6e 61 2c 6d 6e 61 2c 6e 6e 61 2c 6f 6e 61 2c 57 7a 2c 58 7a 2c 70 6e 61 2c 59 7a 2c 71 6e 61 2c 72 6e 61 2c 73 6e 61 2c 74 6e 61 2c 75 6e 61 2c 5a 7a 2c 76 6e 61 2c 77 6e 61 2c 78 6e 61 2c 24 7a 2c 61 41 2c 79 6e 61 2c 62 41 2c Data Ascii: a,kz,Vma,lz,mz,Wma,nz,Xma,oz,Yma,Zma,$ma,pz,ana,qz,rz,sz,bna,tz,cna,uz,vz,wz,xz,Az,Bz,Cz,dna,Dz,Ez,Fz,ena,Gz,Hz,Iz,Jz,fna,Kz,Lz,Mz,Nz,Oz,gna,Pz,hna,Qz,ina,jna,Rz,Sz,kna,Tz,Uz,Vz,lna,mna,nna,ona,Wz,Xz,pna,Yz,qna,rna,sna,tna,una,Zz,vna,wna,xna,$z,aA,yna,bA,
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 7a 72 61 2c 77 72 61 2c 41 72 61 2c 42 72 61 2c 44 72 61 2c 43 72 61 2c 66 44 2c 78 72 61 2c 47 72 61 2c 48 72 61 2c 6b 44 2c 46 72 61 2c 49 72 61 2c 4a 72 61 2c 6c 44 2c 6d 44 2c 4b 72 61 2c 4d 72 61 2c 6f 44 2c 4e 72 61 2c 4f 72 61 2c 51 72 61 2c 53 72 61 2c 72 44 2c 54 72 61 2c 0a 55 72 61 2c 56 72 61 2c 57 72 61 2c 58 72 61 2c 59 72 61 2c 5a 72 61 2c 24 72 61 2c 74 44 2c 61 73 61 2c 76 44 2c 63 73 61 2c 64 73 61 2c 65 73 61 2c 66 73 61 2c 67 73 61 2c 68 73 61 2c 41 44 2c 6b 73 61 2c 6e 73 61 2c 42 44 2c 6f 73 61 2c 71 73 61 2c 6a 73 61 2c 72 73 61 2c 73 73 61 2c 74 73 61 2c 6c 73 61 2c 6d 73 61 2c 77 44 2c 69 73 61 2c 7a 44 2c 70 73 61 2c 79 44 2c 78 44 2c 75 73 61 2c 76 73 61 2c 77 73 61 2c 78 73 61 2c 79 73 61 2c 7a 73 61 2c 46 73 61 2c 41 73 61 2c Data Ascii: zra,wra,Ara,Bra,Dra,Cra,fD,xra,Gra,Hra,kD,Fra,Ira,Jra,lD,mD,Kra,Mra,oD,Nra,Ora,Qra,Sra,rD,Tra,Ura,Vra,Wra,Xra,Yra,Zra,$ra,tD,asa,vD,csa,dsa,esa,fsa,gsa,hsa,AD,ksa,nsa,BD,osa,qsa,jsa,rsa,ssa,tsa,lsa,msa,wD,isa,zD,psa,yD,xD,usa,vsa,wsa,xsa,ysa,zsa,Fsa,Asa,
2024-04-26 17:28:43 UTC	1255	IN	Data Raw: 78 61 2c 4b 78 61 2c 4d 78 61 2c 4e 78 61 2c 4c 78 61 2c 4f 78 61 2c 6b 47 2c 6e 47 2c 70 47 2c 51 78 61 2c 50 78 61 2c 72 47 2c 52 78 61 2c 53 78 61 2c 79 47 2c 7a 47 2c 41 47 2c 42 47 2c 45 47 2c 55 78 61 2c 46 47 2c 47 47 2c 48 47 2c 49 47 2c 56 78 61 2c 57 78 61 2c 4c 47 2c 58 78 61 2c 4d 47 2c 24 78 61 2c 62 79 61 2c 64 79 61 2c 66 79 61 2c 68 79 61 2c 6a 79 61 2c 4f 47 2c 6b 79 61 2c 50 47 2c 6c 79 61 2c 6f 79 61 2c 70 79 61 2c 71 79 61 2c 52 47 2c 53 47 2c 73 79 61 2c 74 79 61 2c 55 47 2c 56 47 2c 57 47 2c 76 79 61 2c 58 47 2c 59 47 2c 5a 47 2c 77 79 61 2c 24 47 2c 75 79 61 2c 78 79 61 2c 61 48 2c 7a 79 61 2c 79 79 61 2c 62 48 2c 42 79 61 2c 63 48 2c 64 48 2c 66 48 2c 43 79 61 2c 44 79 61 2c 68 48 2c 69 48 2c 6b 48 2c 77 48 2c 76 48 2c 46 79 61 2c Data Ascii: xa,Kxa,Mxa,Nxa,Lxa,Oxa,kG,nG,pG,Qxa,Pxa,rG,Rxa,Sxa,yG,zG,AG,BG,EG,Uxa,FG,GG,HG,IG,Vxa,Wxa,LG,Xxa,MG,$xa,bya,dya,fya,hya,jya,OG,kya,PG,lya,oya,pya,qya,RG,SG,sya,tya,UG,VG,WG,vya,XG,YG,ZG,wya,$G,uya,xya,aH,zya,yya,bH,Bya,cH,dH,fH,Cya,Dya,hH,iH,kH,wH,vH,Fya,

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:43 UTC	722	OUT	GET /iframe_api HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=87xkIprz8yI; VISITOR_INFO1_LIVE=2yM7plCM-iE; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbQ%3D%3D
2024-04-26 17:28:44 UTC	1961	IN	HTTP/1.1 200 OK Content-Type: text/javascript; charset=utf-8 X-Content-Type-Options: nosniff Expires: Fri, 26 Apr 2024 17:28:44 GMT Date: Fri, 26 Apr 2024 17:28:44 GMT Cache-Control: private, max-age=0 X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000 Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Content-Security-Policy-Report-Only: base-uri 'self';default-src 'self' https: blob:;font-src https: data:;img-src https: data: android-webview-video-poster:;media-src blob: https:;object-src 'none';report-uri /cspreport/common;script-src 'report-sample' 'nonce-_TUTaD9FLevRUXXCR8Q7JQ' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';style-src https: 'unsafe-inline' Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Cross-Origin-Resource-Policy: cross-origin Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 17:28:44 UTC	1062	IN	Data Raw: 34 31 66 0d 0a 76 61 72 20 73 63 72 69 70 74 55 72 6c 20 3d 20 27 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 79 6f 75 74 75 62 65 2e 63 6f 6d 5c 2f 73 5c 2f 70 6c 61 79 65 72 5c 2f 36 35 32 62 61 33 61 32 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 76 66 6c 73 65 74 5c 2f 77 77 77 2d 77 69 64 67 65 74 61 70 69 2e 6a 73 27 3b 77 69 6e 64 6f 77 5b 27 79 74 5f 65 6d 62 65 64 73 45 6e 61 62 6c 65 49 66 72 61 6d 65 44 65 66 61 75 6c 74 52 65 66 65 72 72 65 72 50 6f 6c 69 63 79 27 5d 20 3d 20 20 74 72 75 65 20 3b 74 72 79 7b 76 61 72 20 74 74 50 6f 6c 69 63 79 3d 77 69 6e 64 6f 77 2e 74 72 75 73 74 65 64 54 79 70 65 73 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 79 6f 75 74 75 62 65 2d 77 69 64 67 65 74 2d 61 70 69 22 2c 7b 63 72 65 61 74 65 53 63 72 69 70 Data Ascii: 41fvar scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/652ba3a2\/www-widgetapi.vflset\/www-widgetapi.js';window['yt_embedsEnableIframeDefaultReferrerPolicy'] = true ;try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScrip
2024-04-26 17:28:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:44 UTC	767	OUT	GET /s/player/652ba3a2/www-widgetapi.vflset/www-widgetapi.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.bing.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=87xkIprz8yI; VISITOR_INFO1_LIVE=2yM7plCM-iE; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbQ%3D%3D
2024-04-26 17:28:44 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 220635 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 15:33:21 GMT Expires: Sat, 26 Apr 2025 15:33:21 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 24 Apr 2024 04:20:05 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 6923 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 17:28:44 UTC	568	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 72 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-04-26 17:28:44 UTC	1255	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 76 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 64 61 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 6e 75 6c 6c 21 3d 62 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 Data Ascii: function v(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(f){if(this
2024-04-26 17:28:44 UTC	1255	IN	Data Raw: 41 72 72 61 79 4c 69 6b 65 22 29 3b 7d 0a 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 29 29 7b 61 3d 77 28 61 29 3b 66 6f 72 28 76 61 72 20 62 2c 63 3d 5b 5d 3b 21 28 62 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 63 2e 70 75 73 68 28 62 2e 76 61 6c 75 65 29 3b 61 3d 63 7d 72 65 74 75 72 6e 20 61 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 61 2c 62 29 7d 0a 76 61 72 20 68 61 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ArrayLike");}function x(a){if(!(a instanceof Array)){a=w(a);for(var b,c=[];!(b=a.next()).done;)c.push(b.value);a=c}return a}function fa(a,b){return Object.prototype.hasOwnProperty.call(a,b)}var ha="function"==typeof Object.assign?Object.assign:function
2024-04-26 17:28:44 UTC	1255	IN	Data Raw: 2e 70 72 6f 74 6f 74 79 70 65 3d 6b 61 28 62 2e 70 72 6f 74 6f 74 79 70 65 29 3b 61 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 61 3b 69 66 28 73 61 29 73 61 28 61 2c 62 29 3b 65 6c 73 65 20 66 6f 72 28 76 61 72 20 63 20 69 6e 20 62 29 69 66 28 22 70 72 6f 74 6f 74 79 70 65 22 21 3d 63 29 69 66 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 29 7b 76 61 72 20 64 3d 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 6c 61 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 0a 66 75 6e 63 74 69 6f 6e 20 74 61 28 29 7b Data Ascii: .prototype=ka(b.prototype);a.prototype.constructor=a;if(sa)sa(a,b);else for(var c in b)if("prototype"!=c)if(Object.defineProperties){var d=Object.getOwnPropertyDescriptor(b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.la=b.prototype}function ta(){
2024-04-26 17:28:44 UTC	1255	IN	Data Raw: 67 29 7b 72 65 74 75 72 6e 20 61 2e 67 2e 6c 3d 6e 75 6c 6c 2c 76 61 28 61 2e 67 2c 67 29 2c 43 61 28 61 29 7d 61 2e 67 2e 6c 3d 6e 75 6c 6c 3b 64 2e 63 61 6c 6c 28 61 2e 67 2c 66 29 3b 72 65 74 75 72 6e 20 43 61 28 61 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 29 7b 66 6f 72 28 3b 61 2e 67 2e 67 3b 29 74 72 79 7b 76 61 72 20 62 3d 61 2e 68 28 61 2e 67 29 3b 69 66 28 62 29 72 65 74 75 72 6e 20 61 2e 67 2e 47 3d 21 31 2c 7b 76 61 6c 75 65 3a 62 2e 76 61 6c 75 65 2c 64 6f 6e 65 3a 21 31 7d 7d 63 61 74 63 68 28 63 29 7b 61 2e 67 2e 68 3d 76 6f 69 64 20 30 2c 76 61 28 61 2e 67 2c 63 29 7d 61 2e 67 2e 47 3d 21 31 3b 69 66 28 61 2e 67 2e 69 29 7b 62 3d 61 2e 67 2e 69 3b 61 2e 67 2e 69 3d 6e 75 6c 6c 3b 69 66 28 62 2e 79 63 29 74 68 72 6f 77 20 62 2e 6e 63 Data Ascii: g){return a.g.l=null,va(a.g,g),Ca(a)}a.g.l=null;d.call(a.g,f);return Ca(a)}function Ca(a){for(;a.g.g;)try{var b=a.h(a.g);if(b)return a.g.G=!1,{value:b.value,done:!1}}catch(c){a.g.h=void 0,va(a.g,c)}a.g.G=!1;if(a.g.i){b=a.g.i;a.g.i=null;if(b.yc)throw b.nc
2024-04-26 17:28:44 UTC	1255	IN	Data Raw: 73 2e 6c 28 29 3b 74 72 79 7b 67 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 68 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 74 68 69 73 2e 67 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 3f 67 3a 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 68 28 67 29 7d 29 7d 0a 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 6e 75 6c 6c 3d 3d 74 68 69 73 2e 67 29 7b 74 68 69 73 2e 67 3d 5b 5d 3b 76 61 72 20 68 3d 74 68 69 73 3b 74 68 69 73 2e 69 28 66 75 6e 63 74 69 6f 6e 28 29 7b 68 2e 6f 28 29 7d 29 7d 74 68 69 73 2e 67 Data Ascii: s.l();try{g(h.resolve,h.reject)}catch(l){h.reject(l)}}function c(){this.g=null}function d(g){return g instanceof b?g:new b(function(h){h(g)})}if(a)return a;c.prototype.h=function(g){if(null==this.g){this.g=[];var h=this;this.i(function(){h.o()})}this.g
2024-04-26 17:28:44 UTC	1255	IN	Data Raw: 20 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 67 29 3b 74 68 69 73 2e 67 3d 67 3b 74 68 69 73 2e 69 3d 68 3b 32 3d 3d 3d 74 68 69 73 2e 67 26 26 74 68 69 73 2e 63 62 28 29 3b 74 68 69 73 2e 4f 28 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 6d 61 28 29 29 7b 76 61 72 20 68 3d 64 61 2e 63 6f 6e 73 6f 6c 65 3b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 3d 74 79 70 65 6f 66 20 68 26 26 68 2e 65 72 72 6f 72 28 67 2e 69 29 7d 7d 2c 31 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 6d 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 47 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 67 3d 64 61 2e 43 Data Ascii: settled in state"+this.g);this.g=g;this.i=h;2===this.g&&this.cb();this.O()};b.prototype.cb=function(){var g=this;e(function(){if(g.ma()){var h=da.console;"undefined"!==typeof h&&h.error(g.i)}},1)};b.prototype.ma=function(){if(this.G)return!1;var g=da.C
2024-04-26 17:28:44 UTC	1255	IN	Data Raw: 55 6e 65 78 70 65 63 74 65 64 20 73 74 61 74 65 3a 20 22 2b 6b 2e 67 29 3b 7d 7d 0a 76 61 72 20 6b 3d 74 68 69 73 3b 6e 75 6c 6c 3d 3d 74 68 69 73 2e 68 3f 66 2e 68 28 6c 29 3a 74 68 69 73 2e 68 2e 70 75 73 68 28 6c 29 3b 74 68 69 73 2e 47 3d 21 30 7d 3b 0a 62 2e 72 65 73 6f 6c 76 65 3d 64 3b 62 2e 72 65 6a 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6c 29 7b 6c 28 67 29 7d 29 7d 3b 0a 62 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 68 2c 6c 29 7b 66 6f 72 28 76 61 72 20 6b 3d 77 28 67 29 2c 6d 3d 6b 2e 6e 65 78 74 28 29 3b 21 6d 2e 64 6f 6e 65 3b 6d 3d 6b 2e 6e 65 78 74 28 29 29 64 28 6d 2e 76 61 6c 75 65 Data Ascii: Unexpected state: "+k.g);}}var k=this;null==this.h?f.h(l):this.h.push(l);this.G=!0};b.resolve=d;b.reject=function(g){return new b(function(h,l){l(g)})};b.race=function(g){return new b(function(h,l){for(var k=w(g),m=k.next();!m.done;m=k.next())d(m.value
2024-04-26 17:28:44 UTC	1255	IN	Data Raw: 2e 72 61 6e 64 6f 6d 28 29 3b 66 28 22 66 72 65 65 7a 65 22 29 3b 66 28 22 70 72 65 76 65 6e 74 45 78 74 65 6e 73 69 6f 6e 73 22 29 3b 66 28 22 73 65 61 6c 22 29 3b 76 61 72 20 68 3d 30 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 6b 29 7b 69 66 28 21 64 28 6c 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 57 65 61 6b 4d 61 70 20 6b 65 79 22 29 3b 65 28 6c 29 3b 69 66 28 21 66 61 28 6c 2c 67 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 57 65 61 6b 4d 61 70 20 6b 65 79 20 66 61 69 6c 3a 20 22 2b 6c 29 3b 6c 5b 67 5d 5b 74 68 69 73 2e 67 5d 3d 6b 3b 72 65 74 75 72 6e 20 74 68 69 73 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 72 65 74 75 72 6e 20 64 Data Ascii: .random();f("freeze");f("preventExtensions");f("seal");var h=0;b.prototype.set=function(l,k){if(!d(l))throw Error("Invalid WeakMap key");e(l);if(!fa(l,g))throw Error("WeakMap key fail: "+l);l[g][this.g]=k;return this};b.prototype.get=function(l){return d
2024-04-26 17:28:44 UTC	1255	IN	Data Raw: 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 78 3a 34 7d 29 2c 6c 3d 6e 65 77 20 61 28 77 28 5b 5b 68 2c 22 73 22 5d 5d 29 29 3b 69 66 28 22 73 22 21 3d 6c 2e 67 65 74 28 68 29 7c 7c 31 21 3d 6c 2e 73 69 7a 65 7c 7c 6c 2e 67 65 74 28 7b 78 3a 34 7d 29 7c 7c 6c 2e 73 65 74 28 7b 78 3a 34 7d 2c 22 74 22 29 21 3d 6c 7c 7c 32 21 3d 6c 2e 73 69 7a 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6b 3d 6c 2e 65 6e 74 72 69 65 73 28 29 2c 6d 3d 6b 2e 6e 65 78 74 28 29 3b 69 66 28 6d 2e 64 6f 6e 65 7c 7c 6d 2e 76 61 6c 75 65 5b 30 5d 21 3d 68 7c 7c 22 73 22 21 3d 6d 2e 76 61 6c 75 65 5b 31 5d 29 72 65 74 75 72 6e 21 31 3b 6d 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 6d 2e 64 6f 6e 65 7c 7c 34 21 3d 6d 2e 76 61 6c 75 65 5b 30 5d 2e 78 7c 7c 22 74 22 21 3d 6d 2e Data Ascii: =Object.seal({x:4}),l=new a(w([[h,"s"]]));if("s"!=l.get(h)\|\|1!=l.size\|\|l.get({x:4})\|\|l.set({x:4},"t")!=l\|\|2!=l.size)return!1;var k=l.entries(),m=k.next();if(m.done\|\|m.value[0]!=h\|\|"s"!=m.value[1])return!1;m=k.next();return m.done\|\|4!=m.value[0].x\|\|"t"!=m.

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:45 UTC	661	OUT	GET /pagead/id HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 17:28:46 UTC	766	IN	HTTP/1.1 302 Found P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Location: https://googleads.g.doubleclick.net/pagead/id?slf_rd=1 Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Date: Fri, 26 Apr 2024 17:28:45 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:45 UTC	639	OUT	GET /instream/ad_status.js HTTP/1.1 Host: static.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 17:28:46 UTC	744	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="ads-doubleclick-media" Report-To: {"group":"ads-doubleclick-media","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/ads-doubleclick-media"}]} Timing-Allow-Origin: * Content-Length: 29 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 17:19:04 GMT Expires: Fri, 26 Apr 2024 17:34:04 GMT Cache-Control: public, max-age=900 Age: 581 Last-Modified: Thu, 12 Dec 2013 23:40:16 GMT Content-Type: text/javascript Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 17:28:46 UTC	29	IN	Data Raw: 77 69 6e 64 6f 77 2e 67 6f 6f 67 6c 65 5f 61 64 5f 73 74 61 74 75 73 20 3d 20 31 3b 0a Data Ascii: window.google_ad_status = 1;

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:46 UTC	1097	OUT	POST /youtubei/v1/player?prettyPrint=false HTTP/1.1 Host: www.youtube.com Connection: keep-alive Content-Length: 3164 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" X-Youtube-Bootstrap-Logged-In: false sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/json X-Youtube-Client-Name: 56 X-Youtube-Client-Version: 1.20240423.01.00 X-Goog-Visitor-Id: CgsyeU03cGxDTS1pRSjIyK-xBjIKCgJVUxIEGgAgbQ%3D%3D sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/embed/SrGENEXocJU?autoplay=1&enablejsapi=1&origin=https://www.bing.com&rel=0&mute=1 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=87xkIprz8yI; VISITOR_INFO1_LIVE=2yM7plCM-iE; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgbQ%3D%3D
2024-04-26 17:28:46 UTC	3164	OUT	Data Raw: 7b 22 76 69 64 65 6f 49 64 22 3a 22 53 72 47 45 4e 45 58 6f 63 4a 55 22 2c 22 63 6f 6e 74 65 78 74 22 3a 7b 22 63 6c 69 65 6e 74 22 3a 7b 22 68 6c 22 3a 22 65 6e 22 2c 22 67 6c 22 3a 22 55 53 22 2c 22 72 65 6d 6f 74 65 48 6f 73 74 22 3a 22 31 30 32 2e 31 32 39 2e 31 35 32 2e 32 32 30 22 2c 22 64 65 76 69 63 65 4d 61 6b 65 22 3a 22 22 2c 22 64 65 76 69 63 65 4d 6f 64 65 6c 22 3a 22 22 2c 22 76 69 73 69 74 6f 72 44 61 74 61 22 3a 22 43 67 73 79 65 55 30 33 63 47 78 44 54 53 31 70 52 53 6a 49 79 4b 2d 78 42 6a 49 4b 43 67 4a 56 55 78 49 45 47 67 41 67 62 51 25 33 44 25 33 44 22 2c 22 75 73 65 72 41 67 65 6e 74 22 3a 22 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 Data Ascii: {"videoId":"SrGENEXocJU","context":{"client":{"hl":"en","gl":"US","remoteHost":"102.129.152.220","deviceMake":"","deviceModel":"","visitorData":"CgsyeU03cGxDTS1pRSjIyK-xBjIKCgJVUxIEGgAgbQ%3D%3D","userAgent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64) Apple
2024-04-26 17:28:46 UTC	432	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=UTF-8 Vary: X-Origin Vary: Referer Date: Fri, 26 Apr 2024 17:28:46 GMT Server: scaffolding on HTTPServer2 Cache-Control: private X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Origin,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 17:28:46 UTC	823	IN	Data Raw: 38 30 30 30 0d 0a 7b 22 72 65 73 70 6f 6e 73 65 43 6f 6e 74 65 78 74 22 3a 7b 22 73 65 72 76 69 63 65 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 22 3a 5b 7b 22 73 65 72 76 69 63 65 22 3a 22 47 46 45 45 44 42 41 43 4b 22 2c 22 70 61 72 61 6d 73 22 3a 5b 7b 22 6b 65 79 22 3a 22 69 70 63 63 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 76 69 65 77 65 64 5f 6c 69 76 65 22 2c 22 76 61 6c 75 65 22 3a 22 46 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 69 73 5f 61 6c 63 5f 73 75 72 66 61 63 65 22 2c 22 76 61 6c 75 65 22 3a 22 66 61 6c 73 65 22 7d 2c 7b 22 6b 65 79 22 3a 22 6c 6f 67 67 65 64 5f 69 6e 22 2c 22 76 61 6c 75 65 22 3a 22 30 22 7d 2c 7b 22 6b 65 79 22 3a 22 65 22 2c 22 76 61 6c 75 65 22 3a 22 32 33 38 30 34 32 38 31 2c 32 Data Ascii: 8000{"responseContext":{"serviceTrackingParams":[{"service":"GFEEDBACK","params":[{"key":"ipcc","value":"0"},{"key":"is_viewed_live","value":"False"},{"key":"is_alc_surface","value":"false"},{"key":"logged_in","value":"0"},{"key":"e","value":"23804281,2
2024-04-26 17:28:46 UTC	1255	IN	Data Raw: 30 39 34 31 37 31 2c 35 31 30 39 34 31 39 35 2c 35 31 30 39 34 32 30 30 2c 35 31 30 39 34 32 30 35 2c 35 31 30 39 38 32 39 37 2c 35 31 30 39 38 32 39 39 2c 35 31 31 30 30 34 30 31 2c 35 31 31 30 31 34 35 34 2c 35 31 31 30 34 39 38 38 2c 35 31 31 30 36 39 39 35 2c 35 31 31 30 37 33 33 36 2c 35 31 31 31 31 37 33 38 2c 35 31 31 31 32 34 30 31 2c 35 31 31 31 33 36 35 38 2c 35 31 31 31 33 36 36 33 2c 35 31 31 31 35 31 38 34 2c 35 31 31 31 36 30 36 37 2c 35 31 31 31 37 33 31 39 2c 35 31 31 31 38 39 33 32 2c 35 31 31 32 33 30 37 37 2c 35 31 31 32 34 31 30 34 2c 35 31 31 32 34 32 32 30 2c 35 31 31 32 34 34 30 36 2c 35 31 31 32 34 34 31 33 2c 35 31 31 32 39 32 30 38 2c 35 31 31 32 39 32 30 39 2c 35 31 31 33 32 33 39 33 2c 35 31 31 33 33 31 30 33 2c 35 31 31 33 35 Data Ascii: 094171,51094195,51094200,51094205,51098297,51098299,51100401,51101454,51104988,51106995,51107336,51111738,51112401,51113658,51113663,51115184,51116067,51117319,51118932,51123077,51124104,51124220,51124406,51124413,51129208,51129209,51132393,51133103,51135
2024-04-26 17:28:46 UTC	1255	IN	Data Raw: 22 7d 5d 7d 5d 2c 22 6d 61 78 41 67 65 53 65 63 6f 6e 64 73 22 3a 30 7d 2c 22 70 6c 61 79 61 62 69 6c 69 74 79 53 74 61 74 75 73 22 3a 7b 22 73 74 61 74 75 73 22 3a 22 4f 4b 22 2c 22 70 6c 61 79 61 62 6c 65 49 6e 45 6d 62 65 64 22 3a 74 72 75 65 2c 22 63 6f 6e 74 65 78 74 50 61 72 61 6d 73 22 3a 22 51 30 46 46 55 30 46 6e 5a 30 4d 3d 22 7d 2c 22 73 74 72 65 61 6d 69 6e 67 44 61 74 61 22 3a 7b 22 65 78 70 69 72 65 73 49 6e 53 65 63 6f 6e 64 73 22 3a 22 32 31 35 34 30 22 2c 22 66 6f 72 6d 61 74 73 22 3a 5b 7b 22 69 74 61 67 22 3a 31 38 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 72 35 2d 2d 2d 73 6e 2d 76 67 71 73 72 6e 6c 7a 2e 67 6f 6f 67 6c 65 76 69 64 65 6f 2e 63 6f 6d 2f 76 69 64 65 6f 70 6c 61 79 62 61 63 6b 3f 65 78 70 69 72 65 3d 31 37 31 34 Data Ascii: "}]}],"maxAgeSeconds":0},"playabilityStatus":{"status":"OK","playableInEmbed":true,"contextParams":"Q0FFU0FnZ0M="},"streamingData":{"expiresInSeconds":"21540","formats":[{"itag":18,"url":"https://rr5---sn-vgqsrnlz.googlevideo.com/videoplayback?expire=1714
2024-04-26 17:28:46 UTC	1255	IN	Data Raw: 4a 35 33 70 39 67 6f 67 37 5f 46 4d 49 72 31 64 68 36 69 69 62 63 4e 49 52 63 44 4b 43 53 63 2d 71 36 66 36 6e 41 25 33 44 25 33 44 22 2c 22 6d 69 6d 65 54 79 70 65 22 3a 22 76 69 64 65 6f 2f 6d 70 34 3b 20 63 6f 64 65 63 73 3d 5c 22 61 76 63 31 2e 34 32 30 30 31 45 2c 20 6d 70 34 61 2e 34 30 2e 32 5c 22 22 2c 22 62 69 74 72 61 74 65 22 3a 35 39 38 36 34 37 2c 22 77 69 64 74 68 22 3a 36 34 30 2c 22 68 65 69 67 68 74 22 3a 33 36 30 2c 22 6c 61 73 74 4d 6f 64 69 66 69 65 64 22 3a 22 31 37 31 33 39 38 31 32 38 30 37 32 39 33 31 39 22 2c 22 63 6f 6e 74 65 6e 74 4c 65 6e 67 74 68 22 3a 22 39 33 30 35 34 38 30 31 22 2c 22 71 75 61 6c 69 74 79 22 3a 22 6d 65 64 69 75 6d 22 2c 22 66 70 73 22 3a 32 34 2c 22 71 75 61 6c 69 74 79 4c 61 62 65 6c 22 3a 22 33 36 30 70 Data Ascii: J53p9gog7_FMIr1dh6iibcNIRcDKCSc-q6f6nA%3D%3D","mimeType":"video/mp4; codecs=\"avc1.42001E, mp4a.40.2\"","bitrate":598647,"width":640,"height":360,"lastModified":"1713981280729319","contentLength":"93054801","quality":"medium","fps":24,"qualityLabel":"360p
2024-04-26 17:28:46 UTC	1255	IN	Data Raw: 78 63 4f 54 7a 4e 79 75 52 59 48 6b 4d 70 4b 37 38 58 42 72 51 79 7a 2d 57 59 59 6f 4a 46 5f 30 46 5f 76 6f 43 49 51 43 38 4a 4d 33 41 70 63 35 47 5f 64 49 73 5a 6f 30 38 69 55 59 39 6c 76 39 79 48 71 41 69 39 46 71 4a 41 52 78 6e 70 34 43 44 6e 77 25 33 44 25 33 44 26 6c 73 70 61 72 61 6d 73 3d 6d 68 25 32 43 6d 6d 25 32 43 6d 6e 25 32 43 6d 73 25 32 43 6d 76 25 32 43 6d 76 69 25 32 43 70 6c 25 32 43 69 6e 69 74 63 77 6e 64 62 70 73 26 6c 73 69 67 3d 41 48 57 61 59 65 6f 77 52 51 49 68 41 4c 6e 71 76 4c 4b 4d 66 42 32 6d 7a 50 70 42 73 45 68 65 63 6a 31 38 4c 47 59 41 4c 4a 4e 36 34 54 4b 6a 4b 35 67 62 37 6c 70 74 41 69 42 48 5f 69 44 65 4a 35 33 70 39 67 6f 67 37 5f 46 4d 49 72 31 64 68 36 69 69 62 63 4e 49 52 63 44 4b 43 53 63 2d 71 36 66 36 6e 41 25 Data Ascii: xcOTzNyuRYHkMpK78XBrQyz-WYYoJF_0F_voCIQC8JM3Apc5G_dIsZo08iUY9lv9yHqAi9FqJARxnp4CDnw%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AHWaYeowRQIhALnqvLKMfB2mzPpBsEhecj18LGYALJN64TKjK5gb7lptAiBH_iDeJ53p9gog7_FMIr1dh6iibcNIRcDKCSc-q6f6nA%
2024-04-26 17:28:46 UTC	1255	IN	Data Raw: 68 36 58 4a 70 30 6f 74 30 38 33 6d 70 4c 64 61 77 6f 51 26 67 69 72 3d 79 65 73 26 63 6c 65 6e 3d 33 39 33 31 37 33 35 35 38 26 64 75 72 3d 31 32 34 33 2e 35 33 33 26 6c 6d 74 3d 31 37 31 33 39 38 34 33 33 37 38 32 36 36 30 30 26 6d 74 3d 31 37 31 34 31 35 32 30 37 33 26 66 76 69 70 3d 32 26 6b 65 65 70 61 6c 69 76 65 3d 79 65 73 26 63 3d 57 45 42 5f 45 4d 42 45 44 44 45 44 5f 50 4c 41 59 45 52 26 73 65 66 63 3d 31 26 74 78 70 3d 34 35 33 35 34 33 34 26 6e 3d 5a 73 78 6e 67 50 38 51 6b 4e 75 45 79 41 76 67 35 38 26 73 70 61 72 61 6d 73 3d 65 78 70 69 72 65 25 32 43 65 69 25 32 43 69 70 25 32 43 69 64 25 32 43 61 69 74 61 67 73 25 32 43 73 6f 75 72 63 65 25 32 43 72 65 71 75 69 72 65 73 73 6c 25 32 43 78 70 63 25 32 43 62 75 69 25 32 43 73 70 63 25 32 43 Data Ascii: h6XJp0ot083mpLdawoQ&gir=yes&clen=393173558&dur=1243.533&lmt=1713984337826600&mt=1714152073&fvip=2&keepalive=yes&c=WEB_EMBEDDED_PLAYER&sefc=1&txp=4535434&n=ZsxngP8QkNuEyAvg58&sparams=expire%2Cei%2Cip%2Cid%2Caitags%2Csource%2Crequiressl%2Cxpc%2Cbui%2Cspc%2C
2024-04-26 17:28:46 UTC	1255	IN	Data Raw: 39 37 25 32 43 33 39 38 25 32 43 33 39 39 26 73 6f 75 72 63 65 3d 79 6f 75 74 75 62 65 26 72 65 71 75 69 72 65 73 73 6c 3d 79 65 73 26 78 70 63 3d 45 67 56 6f 32 61 44 53 4e 51 25 33 44 25 33 44 26 6d 68 3d 73 6d 26 6d 6d 3d 33 31 25 32 43 32 39 26 6d 6e 3d 73 6e 2d 76 67 71 73 72 6e 6c 7a 25 32 43 73 6e 2d 71 34 66 6c 36 6e 73 64 26 6d 73 3d 61 75 25 32 43 72 64 75 26 6d 76 3d 6d 26 6d 76 69 3d 35 26 70 6c 3d 32 34 26 69 6e 69 74 63 77 6e 64 62 70 73 3d 31 38 36 37 35 30 30 26 62 75 69 3d 41 57 52 57 6a 32 51 32 7a 53 38 6d 7a 35 55 68 30 4b 6c 79 51 4f 72 6f 64 36 46 36 62 45 7a 53 32 58 6e 4a 48 68 5a 6c 55 36 4e 74 75 37 66 43 76 68 48 35 2d 54 37 35 4a 4f 46 71 75 34 6d 4d 77 74 61 75 68 56 57 52 56 35 6d 69 75 4f 57 2d 26 73 70 63 3d 55 57 46 39 66 Data Ascii: 97%2C398%2C399&source=youtube&requiressl=yes&xpc=EgVo2aDSNQ%3D%3D&mh=sm&mm=31%2C29&mn=sn-vgqsrnlz%2Csn-q4fl6nsd&ms=au%2Crdu&mv=m&mvi=5&pl=24&initcwndbps=1867500&bui=AWRWj2Q2zS8mz5Uh0KlyQOrod6F6bEzS2XnJHhZlU6Ntu7fCvhH5-T75JOFqu4mMwtauhVWRV5miuOW-&spc=UWF9f
2024-04-26 17:28:46 UTC	1255	IN	Data Raw: 42 69 74 72 61 74 65 22 3a 31 35 35 32 31 33 35 2c 22 63 6f 6c 6f 72 49 6e 66 6f 22 3a 7b 22 70 72 69 6d 61 72 69 65 73 22 3a 22 43 4f 4c 4f 52 5f 50 52 49 4d 41 52 49 45 53 5f 42 54 37 30 39 22 2c 22 74 72 61 6e 73 66 65 72 43 68 61 72 61 63 74 65 72 69 73 74 69 63 73 22 3a 22 43 4f 4c 4f 52 5f 54 52 41 4e 53 46 45 52 5f 43 48 41 52 41 43 54 45 52 49 53 54 49 43 53 5f 42 54 37 30 39 22 2c 22 6d 61 74 72 69 78 43 6f 65 66 66 69 63 69 65 6e 74 73 22 3a 22 43 4f 4c 4f 52 5f 4d 41 54 52 49 58 5f 43 4f 45 46 46 49 43 49 45 4e 54 53 5f 42 54 37 30 39 22 7d 2c 22 61 70 70 72 6f 78 44 75 72 61 74 69 6f 6e 4d 73 22 3a 22 31 32 34 33 35 33 33 22 7d 2c 7b 22 69 74 61 67 22 3a 33 39 39 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 72 72 35 2d 2d 2d 73 6e 2d 76 67 Data Ascii: Bitrate":1552135,"colorInfo":{"primaries":"COLOR_PRIMARIES_BT709","transferCharacteristics":"COLOR_TRANSFER_CHARACTERISTICS_BT709","matrixCoefficients":"COLOR_MATRIX_COEFFICIENTS_BT709"},"approxDurationMs":"1243533"},{"itag":399,"url":"https://rr5---sn-vg
2024-04-26 17:28:46 UTC	1255	IN	Data Raw: 47 48 6e 69 4b 50 62 55 58 72 4f 34 4b 43 6b 6e 42 41 25 33 44 25 33 44 26 6c 73 70 61 72 61 6d 73 3d 6d 68 25 32 43 6d 6d 25 32 43 6d 6e 25 32 43 6d 73 25 32 43 6d 76 25 32 43 6d 76 69 25 32 43 70 6c 25 32 43 69 6e 69 74 63 77 6e 64 62 70 73 26 6c 73 69 67 3d 41 48 57 61 59 65 6f 77 52 51 49 68 41 4c 6e 71 76 4c 4b 4d 66 42 32 6d 7a 50 70 42 73 45 68 65 63 6a 31 38 4c 47 59 41 4c 4a 4e 36 34 54 4b 6a 4b 35 67 62 37 6c 70 74 41 69 42 48 5f 69 44 65 4a 35 33 70 39 67 6f 67 37 5f 46 4d 49 72 31 64 68 36 69 69 62 63 4e 49 52 63 44 4b 43 53 63 2d 71 36 66 36 6e 41 25 33 44 25 33 44 22 2c 22 6d 69 6d 65 54 79 70 65 22 3a 22 76 69 64 65 6f 2f 6d 70 34 3b 20 63 6f 64 65 63 73 3d 5c 22 61 76 30 31 2e 30 2e 30 38 4d 2e 30 38 5c 22 22 2c 22 62 69 74 72 61 74 65 22 Data Ascii: GHniKPbUXrO4KCknBA%3D%3D&lsparams=mh%2Cmm%2Cmn%2Cms%2Cmv%2Cmvi%2Cpl%2Cinitcwndbps&lsig=AHWaYeowRQIhALnqvLKMfB2mzPpBsEhecj18LGYALJN64TKjK5gb7lptAiBH_iDeJ53p9gog7_FMIr1dh6iibcNIRcDKCSc-q6f6nA%3D%3D","mimeType":"video/mp4; codecs=\"av01.0.08M.08\"","bitrate"

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:46 UTC	749	OUT	GET /ytc/AIdro_kwFxfJF-fQml8fUIvrd36ZstE2RO-C-IwDB-0qxQoc3Q=s68-c-k-c0x00ffffff-no-rj HTTP/1.1 Host: yt3.ggpht.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 17:28:46 UTC	533	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Timing-Allow-Origin: * Access-Control-Expose-Headers: Content-Length Content-Disposition: inline;filename="unnamed.jpg" X-Content-Type-Options: nosniff Server: fife Content-Length: 1427 X-XSS-Protection: 0 Date: Fri, 26 Apr 2024 15:30:16 GMT Expires: Sat, 27 Apr 2024 15:30:16 GMT Cache-Control: public, max-age=86400, no-transform ETag: "ve1" Content-Type: image/jpeg Vary: Origin Age: 7110 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-04-26 17:28:46 UTC	722	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e1 00 2a 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 31 01 02 00 07 00 00 00 1a 00 00 00 00 00 00 00 47 6f 6f 67 6c 65 00 00 ff db 00 84 00 03 02 02 03 02 0e 08 0d 09 0f 0c 08 0b 10 09 11 0a 08 0f 0b 0a 08 08 0a 08 09 0c 0e 08 08 09 08 0e 0b 0d 08 0f 08 0b 0d 0b 0e 0f 0b 0b 16 08 0b 0b 0b 09 0b 0f 08 08 0b 0d 0a 08 0e 08 0b 0c 0e 01 03 04 04 02 02 02 09 02 02 09 08 02 02 02 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 ff c0 00 11 08 00 44 00 44 03 01 11 00 02 11 01 03 11 01 ff c4 00 1a 00 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 07 08 04 05 06 03 ff c4 00 38 10 00 02 01 02 04 Data Ascii: JFIFExifII1GoogleDD8
2024-04-26 17:28:46 UTC	705	IN	Data Raw: 35 b6 83 1e a3 f5 9d 2a ab 99 df 24 51 ec 02 82 03 a0 50 28 14 16 a3 9e ff 00 34 70 47 e0 43 fb 7b 7a 0d 3f a4 47 16 bf e1 fc 48 49 03 bc 12 ae 0b 1e 87 89 de 19 13 d7 e2 a7 67 46 0e 33 20 6c 0e 47 21 9e 79 50 74 5e 91 cc 56 ff 00 5e 1f 1e b9 3b 4d 60 ed 22 77 24 11 48 fa 97 27 68 f5 76 dd 87 da 60 48 fa 08 a0 db 75 5b b5 df 01 fe 24 5f b9 c0 e8 23 8e bb 3e 74 9f fd 58 7f 47 a0 af d4 0a 05 02 82 de f0 6d 9f 0e 75 5f 86 e1 d8 7a 4c 2c b1 2b 28 40 81 24 cf 45 d2 44 9e 1f b8 08 01 99 1d 02 96 68 b3 9a d5 f2 66 49 50 af 70 2b b7 50 72 f1 fe 2d 33 c7 8b e6 2f 23 b3 16 80 ba aa 99 60 56 b9 78 67 d6 be 49 83 b4 92 7c a5 00 0c 17 4b 01 24 72 50 77 9d 5b 73 9f 87 39 df 2d 8b 5a 77 34 47 65 db 98 c8 86 2c a4 76 2c d1 80 4e 67 40 1b c8 3d 5b 6a 1a 19 c0 26 82 4b e0 Data Ascii: 5*$QP(4pGC{z?GHIgF3 lG!yPt^V^;M`"w$H'hv`Hu[$_#>tXGmu_zL,+(@$EDhfIPp+Pr-3/#`VxgI\|K$rPw[s9-Zw4Ge,v,Ng@=[j&K

Timestamp	Bytes transferred	Direction	Data
2024-04-26 17:28:46 UTC	670	OUT	GET /pagead/id?slf_rd=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://www.youtube.com X-Client-Data: CIe2yQEIprbJAQipncoBCMDdygEIlaHLAQiFoM0BCOnFzQEIucrNAQiK080BGI/OzQEYwtjNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://www.youtube.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-04-26 17:28:46 UTC	808	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://www.youtube.com Content-Type: application/json; charset=UTF-8 Date: Fri, 26 Apr 2024 17:28:46 GMT Pragma: no-cache Expires: Fri, 01 Jan 1990 00:00:00 GMT Cache-Control: no-cache, no-store, must-revalidate X-Content-Type-Options: nosniff Content-Disposition: attachment; filename="f.txt" Server: cafe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-04-26 17:28:46 UTC	106	IN	Data Raw: 36 34 0d 0a 29 5d 7d 27 0a 0a 7b 22 69 64 22 3a 22 41 4e 79 50 78 4b 71 59 4c 66 33 50 70 52 77 49 71 6e 2d 39 63 78 47 7a 67 6c 44 67 71 68 7a 67 55 70 4f 63 77 46 39 5f 47 53 4a 4d 32 75 78 38 41 49 6f 33 48 44 47 49 62 74 66 71 6c 53 2d 61 48 58 63 5f 70 53 71 5a 78 35 54 69 22 2c 22 74 79 70 65 22 3a 34 7d 0d 0a Data Ascii: 64)]}'{"id":"ANyPxKqYLf3PpRwIqn-9cxGzglDgqhzgUpOcwF9_GSJM2ux8AIo3HDGIbtfqlS-aHXc_pSqZx5Ti","type":4}
2024-04-26 17:28:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0