33:"SampleDetailWrapper" 34:I[7638,["$1","$2","$3","$4","$5","$8","$9","$a","$b"],"$33"] 3a:I[27201,["$1","$2","$3","$4","$5"],"IconMark"] 35:T439,Found HTTPS url "https://www.facebook.com", Found HTTPS url "https://txxx.com", Found HTTPS url "https://vk.com", Found HTTPS url "https://cdn", Found HTTPS url "https://www.youtube.com", Found HTTPS url "https://www.vivporn.com", Found HTTPS url "https://www.redtube.com", Found HTTPS url "https://vimeo.com", Found HTTPS url "https://hotmovs.com", Found HTTPS url "https://api.bitchute.com", Found HTTPS url "https://www.twitter.com", Found HTTPS url "https://www.eporner.com", Found HTTPS url "https://www.threads.net", Found HTTPS url "https://www.anyvideosoftware.com", Found HTTPS url "https://cdn.syndication.twimg.com", Found HTTPS url "https://www.xnxx.com", Found HTTPS url "https://vivporn.com", Found HTTPS url "https://www.vk.com", Found HTTPS url "https://www.youjizz.com", Found HTTPS url "https://www.xhamster.com", Found HTTPS url "https://www.txxx.com", Found HTTPS url "https://www.txxx.tube", Found HTTPS url "https://www.google.com", Found HTTPS url "https://music.youtube.com", Found HTTPS url "https://twitter.com", Found HTTPS url "https://www.hqporner.com"36:T30f8,Pattern match: "https://www.facebook.com/watch?v=%s", Heuristic match: "xhamster49.com", Heuristic match: "xhplanet4.com", Heuristic match: "xhtree1.com", Heuristic match: "xhamster2.com", Pattern match: "https://txxx.com", Heuristic match: "instagram.com", Pattern match: "https://vk.com/video%s", Heuristic match: "xhamster11.com", Heuristic match: "xhbranch9.com", Heuristic match: "xhreal3.com", Heuristic match: "xhtab4.com", Pattern match: "https://cdn-fck.tnaflix.com/tnaflix/%s.fid?key=%s&vid=%s&nomp4=1&catid=0&rollover=1&startthumb=%s&embed=0&utm_source=0&multiview=0&premium=1&country=0user=0&vip=1&cd=0&ref=0&alpha", Heuristic match: "bitchute.com", Heuristic match: "ypncdn.com", Heuristic match: "therealxh3.com", Heuristic match: "xhofficial2.com", Heuristic match: "fbcdn.net", Heuristic match: "xhspot.com", Heuristic match: "xhbranch11.com", Heuristic match: "youtu.be", Heuristic match: "xhadult2.com", Heuristic match: "__main__.py", Heuristic match: "xhwebsite1.com", Pattern match: "https://www.youtube.com/youtubei/v1/player?prettyprint=false", Heuristic match: "xhfull.com", Heuristic match: "mycdn.me", Pattern match: "youtube.com/shorts/", Pattern match: "https://www.vivporn.com/", Pattern match: "https://www.redtube.com", Pattern match: "https://www.redtube.com/", Heuristic match: "xhname1.com", Pattern match: "https://vimeo.com/", Pattern match: "youtube.com/v/", Pattern match: "https://hotmovs.com/api/json/video/%s/%d/%d/%s.json", Pattern match: "https://api.bitchute.com/api/beta9/video", Heuristic match: "/x.com", Pattern match: "player.vimeo.com/video/", Heuristic match: "unlockxh3.com", Heuristic match: "xhbranch5.com", Heuristic match: "xhamster.com", Heuristic match: "xhwide8.com", Pattern match: "https://www.twitter.com/", Heuristic match: "xhofficial.com", Pattern match: "https://www.youtube.com/api/timedtext?type=%s&name=%s&fmt=%s&lang=%s&v=%s", Pattern match: "https://www.youtube.com/s/player/%s/player_ias.vflset/en_us/base.js", Pattern match: "https://www.eporner.com/video-%s/", Heuristic match: "xhbranch2.com", Heuristic match: "xhtime9.com", Pattern match: "https://www.threads.net/", Heuristic match: "xhcontent.com", Heuristic match: "hotmovs.com", Heuristic match: "manifest.googlevideo.com", Pattern match: "https://www.anyvideosoftware.com/any-video-downloader-pro/download.html", Pattern match: "https://txxx.com/api/videofile.php?video_id=%s&lifetime=%s", Heuristic match: "xhtree8.com", Pattern match: "https://www.youtube.com/playlist?list=%s", Heuristic match: "xhtime5.com", Heuristic match: "xhtotal.com", Heuristic match: "txxx.com", Heuristic match: "xhvid2.com", Pattern match: "https://www.youtube.com/watch?v=%s&gl=us&hl=en&has_verified=1&bpctr=9999999999", Heuristic match: "xhaccess.com", Pattern match: "https://txxx.com/api/json/video/%s/%d/%d/%s.json", Heuristic match: "xhamsterpremium.com", Heuristic match: "xhamster500.com", Pattern match: "https://www.youtube.com/youtubei/v1/browse?prettyprint=false", Heuristic match: "xhofficial5.com", Heuristic match: "xhwide4.com", Pattern match: "https://www.anyvideosoftware.com", Heuristic match: "xhreal6.com", Heuristic match: "xhbig.com", Heuristic match: "xhamster14.com", Heuristic match: "xhtree4.com", Heuristic match: "xhplanet7.com", Heuristic match: "xhofficial9.com", Heuristic match: "faphouse.com", Heuristic match: "xhwebsite4.com", Heuristic match: "xhamster46.com", Heuristic match: "xhamster18.com", Heuristic match: "xhmoon5.com", Heuristic match: "mainwindow.top", Heuristic match: "xhbabe.com", Heuristic match: "xnxx.com", Pattern match: "https://cdn.syndication.twimg.com/tweet-result?id=%s", Heuristic match: "xhwebsite2.com", Heuristic match: "xhreal2.com", Heuristic match: "xhchannel2.com", Pattern match: "https://www.xnxx.com/", Heuristic match: "xhtab3.com", Pattern match: "https://www.youtube.com/watch?v=%s", Heuristic match: "youporn.com", Heuristic match: "xhamster48.com", Heuristic match: "xheve1.com", Heuristic match: "xhadult.com", Heuristic match: "xhamsternft.com", Heuristic match: "xhbranch12.com", Pattern match: "https://www.youtube.com/embed/%s?autoplay=1&rel=0", Pattern match: "https://vivporn.com/wp-content/plugins/", Heuristic match: "xhbranch8.com", Pattern match: "https://www.vk.com/", Heuristic match: "xhfuck.com", Pattern match: "https://www.youjizz.com/", Heuristic match: "video.search.yahoo.com", Heuristic match: "xhday1.com", Heuristic match: "x.com", Heuristic match: "xhplanet5.com", Heuristic match: "stripchat.com", Pattern match: "https://www.xhamster.com/", Pattern match: "https://www.youtube.com", Heuristic match: "therealxh.com", Heuristic match: "xhplanet1.com", Heuristic match: "unlockxh4.com", Heuristic match: "xhname2.com", Pattern match: "youporn.com/embed/", Pattern match: "https://www.facebook.com/video/playback/dash_mpd_debug.mpd?v=%s&dummy=.mpd", Pattern match: "https://www.redtube.com/%s", Pattern match: "https://www.txxx.com/", Heuristic match: "xhday.com", Heuristic match: "xhadult5.com", Heuristic match: "xhvid.com", Pattern match: "https://www.google.com/", Pattern match: "https://api.bitchute.com/api/beta/video/media", Heuristic match: "support@anyvideosoftware.com", Pattern match: "https://music.youtube.com", Heuristic match: "xhamster23.com", Heuristic match: "xhwide9.com", Pattern match: "https://vimeo.com/%s", Pattern match: "https://twitter.com/i/api/graphql/0hwvdhmw8yq-s_ib3azirw/tweetresultbyrestid?variables=%s&features=%s", Pattern match: "https://hotmovs.com/api/videofile.php?video_id=%s&lifetime=%s", Heuristic match: "hqporner.com", Heuristic match: "xheve.com", Heuristic match: "xhbranch3.com", Heuristic match: "xhreal9.com", Heuristic match: "xhplanet10.com", Pattern match: "google.com/url", Heuristic match: "localxh2.com", Heuristic match: "xhtree9.com", Pattern match: "https://www.hqporner.com/", Heuristic match: "funnyjunk.com", Pattern match: "https://challenges.cloudflare.com/turnstile/", Heuristic match: "xhamster26.com", Pattern match: "https://www.anyvideosoftware.com/any-video-downloader-pro", Heuristic match: "xhtime6.com", Heuristic match: "xhofficial6.com", Heuristic match: "cdn.handjobhub.com", Pattern match: "https://www.theprovenplan.com", Heuristic match: "xhwide5.com", Heuristic match: "xhvid3.com", Heuristic match: "xhname.com", Pattern match: "https://www.eporner.com/xhr/video/%s?hash=%s&device=generic&domain=www.eporner.com&fallback=false", Heuristic match: "ytimg.com", Heuristic match: "xhstream.com", Pattern match: "https://www.funnyjunk.com/", Pattern match: "https://www.rediff.com/", Heuristic match: "xhplanet8.com", Heuristic match: "xhmoon4.com", Pattern match: "https://www.handjobhub.com/", Pattern match: "https://www.eporner.com/", Heuristic match: "xhsocial.com", Heuristic match: ".x.com", Heuristic match: "xhreal.com", Pattern match: "https://video.google.com/timedtext?hl=en&type=list&v=%s", Heuristic match: "xhtree.com", Heuristic match: "xhtree5.com", Heuristic match: "xhamster3.com", Heuristic match: "xhwide1.com", Heuristic match: "xhwide10.com", Pattern match: "https://www.hotmovs.com/", Heuristic match: "xhwebsite.com", Heuristic match: "youtube-nocookie.com", Heuristic match: "xhwebsite5.com", Pattern match: "https://hotmovs.com", Heuristic match: "xvideos.com", Heuristic match: "theprovenplan.com", Heuristic match: "xheve2.com", Heuristic match: "seexh4.com", Heuristic match: "xhday2.com", Pattern match: "https://www.tnaflix.com/", Heuristic match: "xhamsteropoffvdm.onion", Heuristic match: "bigcdn.funnyjunk.com", Heuristic match: "xhmoon.com", Heuristic match: "xhadult4.com", Heuristic match: "xhbranch13.com", Heuristic match: "xhwebsite3.com", Heuristic match: " - tnaflix.com", Heuristic match: "xhchannel3.com", Heuristic match: "vimeocdn.com", Heuristic match: "twitter.com", Heuristic match: "xhplanet6.com", Heuristic match: "xhofficial10.com", Heuristic match: "xhtab6.com", Heuristic match: "xhreal5.com", Heuristic match: "dropbox.top", Pattern match: "https://%s%s", Heuristic match: "xnxx-cdn.com", Heuristic match: "xhtree10.com", Heuristic match: "xhbranch7.com", Pattern match: "youtube.com/embed/", Heuristic match: "xhwide6.com", Pattern match: "https://www.facebook.com/reel/%s", Pattern match: "https://www.youporn.com/watch/%s/", Pattern match: "https://www.bitchute.com/", Heuristic match: "xhplanet2.com", Heuristic match: "vsds.rediff.com", Pattern match: "http://www.anyvideosoftware.com/any-video-downloader-pro/update.xml", Heuristic match: "xhtime7.com", Pattern match: "https://www.youporn.com/", Heuristic match: "xhamster38.com", Heuristic match: "xhtab2.com", Heuristic match: "megaxh.com", Heuristic match: "fullxh.com", Pattern match: "https://www.youtube.com/results?search_query=%s&page=%d", Heuristic match: "xhofficial7.com", Heuristic match: "xhvictory.com", Heuristic match: "seexh.com", Heuristic match: "xhbranch4.com", Heuristic match: "vivporn.com", Heuristic match: "xhwide2.com", Pattern match: "https://www.rumble.com/", Pattern match: "https://www.anyvideosoftware.com/any-video-downloader-pro/purchase.html", Heuristic match: "xhreal10.com", Heuristic match: "xhreal8.com", Heuristic match: "xhchannel.com", Heuristic match: "unlockxh5.com", Pattern match: "https://api.github.com/repos/yt-dlp/yt-dlp-nightly-builds/releases/latest", Pattern match: "https://www.youtube.com/iframe_api", Heuristic match: "xhtree6.com", Pattern match: "https://www.youtube.com/youtubei/v1/search?prettyprint=false", Heuristic match: "vimeo.com", Heuristic match: "jtvnw.net", Pattern match: "https://www.facebook.com/", Heuristic match: "cdninstagram.com", Heuristic match: "xhcdn.com", Pattern match: "https://www.instagram.com/", Heuristic match: "localxh.com", Heuristic match: "rediff.com", Heuristic match: "therealxh2.com", Heuristic match: "xhmoon3.com", Pattern match: "https://i.ytimg.com/vi/%s/mqdefault.jpg", Heuristic match: "xhfanclub.com", Pattern match: "https://www.thumbzilla.com/", Heuristic match: "youtube.com", Heuristic match: "xhamster4.com", Pattern match: "https://www.xvideos.com/", Heuristic match: "xhplanet9.com", Heuristic match: "xhtree2.com", Heuristic match: "facebook.com", Pattern match: "https://rumble.com/embedjs/u3/?request=video&ver=2&v=%s", Heuristic match: "xhadult3.com", Pattern match: "https://www.youporn.com/api/video/media_definitions/%s/", Pattern match: "https://api.twitter.com/1.1/guest/activate.json", Heuristic match: "xhtime10.com", Heuristic match: "eporner.com", Heuristic match: "xhday3.com", Pattern match: "https://i.ytimg.com/vi/%s/maxresdefault.jpg", Heuristic match: "xhreal4.com", Heuristic match: "xhplanet3.com", Heuristic match: "xhchannel4.com", Heuristic match: "xhtab5.com", Heuristic match: "tnaflix.com", Heuristic match: "xheve3.com", Pattern match: "https://www.bitchute.com/video/%s/", Heuristic match: "vk.com", Heuristic match: "seexh1.com", Heuristic match: "xhbranch6.com", Heuristic match: "cdn.eporner.com", Pattern match: "https://www.theprovenplan.com/", Pattern match: "https://www.youtube.com/watch?v=rrddldynscs", Heuristic match: "xhopen.com", Heuristic match: "xhbranch.com", Heuristic match: "xhocean.com", Heuristic match: "xhwide7.com", Heuristic match: "redtube.com", Heuristic match: "youjizz.com", Heuristic match: "xhtab1.com", Pattern match: "https://www.yahoo.com/", Heuristic match: "xhamsterlive.com", Heuristic match: "xhtime8.com", Heuristic match: "xhwide3.com", Heuristic match: "handjobhub.com", Heuristic match: " - hqporner.com", Heuristic match: "xhvid1.com", Heuristic match: "xvideos-cdn.com", Pattern match: "www.youtube.com", Heuristic match: "xhwide.com", Heuristic match: "rumble.com", Heuristic match: "xhplanet.com", Heuristic match: "bcfiles.bitchute.com", Heuristic match: "xhmoon2.com", Heuristic match: "yjcontentdelivery.com", Heuristic match: "threads.net", Heuristic match: "xhofficial4.com", Heuristic match: "xhtree7.com", Heuristic match: "xhunlim.com", Heuristic match: "xhamster5.com", Pattern match: "https://www.youtube.com/", Heuristic match: "therealxh1.com", Heuristic match: "xhbranch10.com", Heuristic match: "xhreal7.com", Heuristic match: "xhalways.com", Pattern match: "http://www.anyvideosoftware.com/services", Heuristic match: "xhamster15.com", Heuristic match: "xhtree3.com", Heuristic match: "xhamster19.com", Pattern match: "https://challenges.cloudflare.com", Pattern match: "rumble.com/embed/", Heuristic match: "xhofficial8.com", Pattern match: "youtube-nocookie.com/embed/", Heuristic match: "rmbl.ws", Heuristic match: "thumbzilla.com"37:Tb2f,Found string "https://www.facebook.com/watch?v=%s" (Indicator: "facebook.com"; Source: "sample.bin"), Found string "youtube.com-n.js" (Indicator: "youtube"; Source: "sample.bin"), Found string "https://www.youtube.com/youtubei/v1/player?prettyPrint=false" (Indicator: "youtube"; Source: "sample.bin"), Found string "youtube.com/shorts/" (Indicator: "youtube"; Source: "sample.bin"), Found string "youtube.com/v/" (Indicator: "youtube"; Source: "sample.bin"), Found string "--extractor-args "youtube:player-client=%s"" (Indicator: "youtube"; Source: "sample.bin"), Found string "https://www.twitter.com/" (Indicator: "twitter"; Source: "sample.bin"), Found string "https://www.youtube.com/api/timedtext?type=%s&name=%s&fmt=%s&lang=%s&v=%s" (Indicator: "youtube"; Source: "sample.bin"), Found string "https://www.youtube.com/s/player/%s/player_ias.vflset/en_US/base.js" (Indicator: "youtube"; Source: "sample.bin"), Found string "twitter:title" content="" (Indicator: "twitter"; Source: "sample.bin"), Found string "https://www.youtube.com/playlist?list=%s" (Indicator: "youtube"; Source: "sample.bin"), Found string "twitter:image" content="" (Indicator: "twitter"; Source: "sample.bin")38:Tdbd,Found string "Mozilla/5.0 (iPad; CPU OS 16_7_10 like Mac OS X) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/16.6 Mobile/15E148 Safari/604.1,gzip(gfe)" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Macintosh; Intel Mac OS X 10_15_7) AppleWebKit/605.1.15 (KHTML, like Gecko) Version/15.5 Safari/605.1.15,gzip(gfe)" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.1; WOW64; rv:63.0) Gecko/20100101 Firefox/63.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.1; rv:62.0) Gecko/20100101 Firefox/62.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 10.0; rv:63.0) Gecko/20100101 Firefox/63.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:63.0) Gecko/20100101 Firefox/63.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:109.0) Gecko/20100101 Firefox/115.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.1; rv:63.0) Gecko/20100101 Firefox/63.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT %s; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/%s Safari/537.36" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:79.0) Gecko/20100101 Firefox/79.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.3; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:62.0) Gecko/20100101 Firefox/62.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:65.0) Gecko/20100101 Firefox/65.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:66.0) Gecko/20100101 Firefox/66.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.1; Win64; x64; rv:63.0) Gecko/20100101 Firefox/63.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (ChromiumStylePlatform) Cobalt/Version" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.3; rv:63.0) Gecko/20100101 Firefox/63.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.2; rv:63.0) Gecko/20100101 Firefox/63.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 10.0; WOW64; rv:63.0) Gecko/20100101 Firefox/63.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 6.3; WOW64; rv:62.0) Gecko/20100101 Firefox/62.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin"), Found string "Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:64.0) Gecko/20100101 Firefox/64.0" (Indicator: "mozilla/5.0 ("; Source: "sample.bin")39:Ta26,Found string "youtube.com-n.js" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/youtubei/v1/player?prettyPrint=false" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "youtube.com/shorts/" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "youtube.com/v/" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/api/timedtext?type=%s&name=%s&fmt=%s&lang=%s&v=%s" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/s/player/%s/player_ias.vflset/en_US/base.js" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/playlist?list=%s" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/watch?v=%s&gl=US&hl=en&has_verified=1&bpctr=9999999999" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/youtubei/v1/browse?prettyPrint=false" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/watch?v=%s" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/embed/%s?autoplay=1&rel=0" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://music.youtube.com" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "youtube.com-sig.js" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "youtube.com/embed/" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/results?search_query=%s&page=%d" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://api.github.com/repos/yt-dlp/yt-dlp-nightly-builds/releases/latest" (Indicator: "github.com"; Source: "sample.bin"), Found string "https://www.youtube.com/iframe_api" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/youtubei/v1/search?prettyPrint=false" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "youtube.com" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "youtube.com_innertube" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/watch?v=rRddLDynsCs" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "//www.youtube.com" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "https://www.youtube.com/" (Indicator: "youtube.com"; Source: "sample.bin"), Found string "youtube.com_webpage" (Indicator: "youtube.com"; Source: "sample.bin")30:["$","$Lc",null,{"children":[["$","script",null,{"type":"application/ld+json","dangerouslySetInnerHTML":{"__html":"{\"@context\":\"https://schema.org\",\"@type\":\"TechArticle\",\"headline\":\"Sample a055325a2b87… — Score 0/100 — Hybrid Analysis\",\"description\":\"Threat analysis for sample a055325a2b87…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports.\",\"url\":\"/sample/a055325a2b87e0bb6f74d04869995f561a211508edaeb7a07b89b9b2286b165b\",\"keywords\":[\"malware analysis\",\"sandbox report\",\"threat intelligence\",\"a055325a2b87e0bb6f74d04869995f561a211508edaeb7a07b89b9b2286b165b\"],\"about\":{\"@type\":\"SoftwareApplication\",\"name\":\"AnyVideoDownloaderPro.exe\",\"applicationCategory\":[\"peexe\",\"64bits\",\"executable\"],\"identifier\":\"a055325a2b87e0bb6f74d04869995f561a211508edaeb7a07b89b9b2286b165b\"},\"threatScore\":0,\"antivirusDetections\":{\"malicious\":0,\"total\":24},\"behavioralIndicators\":{\"malicious\":0,\"suspicious\":2},\"publisher\":{\"@type\":\"Organization\",\"name\":\"Hybrid Analysis\",\"url\":\"https://www.hybrid-analysis.com\"}}"}}],["$","$L34",null,{"initialData":{"schema_version":"1.0.17","sha256":"a055325a2b87e0bb6f74d04869995f561a211508edaeb7a07b89b9b2286b165b","overall_status":"SUCCESS","all_analysis_status":{"qsp_status":"SUCCESS","sandbox_status":"NOT_AVAILABLE","fastscan_status":"SUCCESS"},"verdict":"no specific threat","threat_score":0,"unified_at_epoch_ms":1794774505647,"unified_at":"2026-11-15T20:28:25.647Z","metadata":{"hashes":{"sha256":"a055325a2b87e0bb6f74d04869995f561a211508edaeb7a07b89b9b2286b165b","sha1":"c987a5100904565b0a9d4e609334022405de3ad4","md5":"4b90ed219c7775009eaf628466652202"},"file_info":{"file_name":"AnyVideoDownloaderPro.exe","file_type":["peexe","64bits","executable"],"file_type_id":"64-bit exe","file_size":7456768,"is_container_sample":false,"url_analysis":false},"submissions":{"first_seen":1794774498000,"last_seen":1794774498000,"last_multi_scan":1794774498000}},"detections":{"summary":{"verdict":"no specific threat","score":0,"tags":null},"stats":{"av":{"malicious_count":0,"suspicious_count":0,"total_engines":24},"attributions":{"malware_families_count":0,"threat_actors_count":0,"campaigns_count":0,"threat_types_count":0,"cves_count":0},"mitre_attacks":{"total":15},"sandbox_signatures":{"informative_count":16,"suspicious_count":2,"malicious_count":0,"total":18},"rule_matches":{"yara_count":0,"sigma_count":0,"suricata_count":0}},"av_detections":{"engines":{"ahnlab":{"name":"AhnLab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"antiy":{"name":"Antiy","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"aurora":{"name":"Aurora","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"avira":{"name":"Avira","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"bitdefender":{"name":"Bitdefender","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"clamav":{"name":"ClamAV","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"cmc":{"name":"CMC","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"crowdstrike":{"name":"CrowdStrike","success":true,"verdict":"undetected","status":"clean","progress":100,"data_source":"CrowdStrike","permalink":"https://www.crowdstrike.com/en-us/platform/endpoint-security/"},"emsisoft":{"name":"Emsisoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"eset":{"name":"ESET","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"filseclab":{"name":"Filseclab","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"gridinsoft":{"name":"Gridinsoft","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"huorong":{"name":"Huorong","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"k7":{"name":"K7","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"lionic":{"name":"Lionic","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"netgate":{"name":"NETGATE","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sentinelone":{"name":"SentinelOne","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"sophos":{"name":"Sophos","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"tachyon":{"name":"TACHYON","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"trellix":{"name":"Trellix","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"varist":{"name":"Varist","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"viritexplorer":{"name":"Vir.IT eXplorer","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"xcitium":{"name":"Xcitium","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"},"zillya":{"name":"Zillya!","success":true,"verdict":"undetected","progress":100,"data_source":"MetaDefender","permalink":"https://www.opswat.com/products/metadefender?utm_campaign=Technology%+Partners&utm_source=HA"}}},"rule_matches":{},"attributions":{},"mitre_attacks":[{"tactic":"Command and Control","technique":"Application Layer Protocol","attack_id":"T1071","attack_id_wiki":"https://attack.mitre.org/techniques/T1071","identifiers":[{"type":"informative","value":"Contains references to network communication API (string)"},{"type":"informative","value":"Found potential URL in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Component Object Model Hijacking","attack_id":"T1546.015","attack_id_wiki":"https://attack.mitre.org/techniques/T1546/015","identifiers":[{"type":"suspicious","value":"Found registry location strings which can modify COM objects"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Process Injection","attack_id":"T1055","attack_id_wiki":"https://attack.mitre.org/techniques/T1055","identifiers":[{"type":"informative","value":"Reference explorer.exe process"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"System Information Discovery","attack_id":"T1082","attack_id_wiki":"https://attack.mitre.org/techniques/T1082","identifiers":[{"type":"informative","value":"Contains ability to retrieve environment variable settings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Encrypted Channel","attack_id":"T1573","attack_id_wiki":"https://attack.mitre.org/techniques/T1573","identifiers":[{"type":"informative","value":"Possibly tries to communicate over SSL connection (HTTPS)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Privilege Escalation","technique":"Access Token Manipulation","attack_id":"T1134","attack_id_wiki":"https://attack.mitre.org/techniques/T1134","identifiers":[{"type":"informative","value":"Contains ability to modify access token privileges (API string)"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Ingress Tool Transfer","attack_id":"T1105","attack_id_wiki":"https://attack.mitre.org/techniques/T1105","identifiers":[{"type":"informative","value":"Contains ability to transfer data using curl"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Multi-hop Proxy","attack_id":"T1090.003","attack_id_wiki":"https://attack.mitre.org/techniques/T1090/003","identifiers":[{"type":"suspicious","value":"Contains Tor Onion URL"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Execution","technique":"Native API","attack_id":"T1106","attack_id_wiki":"https://attack.mitre.org/techniques/T1106","identifiers":[{"type":"informative","value":"Contains ability to execute Windows APIs"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Deobfuscate/Decode Files or Information","attack_id":"T1140","attack_id_wiki":"https://attack.mitre.org/techniques/T1140","identifiers":[{"type":"informative","value":"Able to decrypt/decode data"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Reconnaissance","technique":"Gather Victim Network Information","attack_id":"T1590","attack_id_wiki":"https://attack.mitre.org/techniques/T1590","identifiers":[{"type":"informative","value":"Able to access user sensitive domain"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Discovery","technique":"Query Registry","attack_id":"T1012","attack_id_wiki":"https://attack.mitre.org/techniques/T1012","identifiers":[{"type":"informative","value":"Contains registry location strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Stealth","technique":"Obfuscated Files or Information","attack_id":"T1027","attack_id_wiki":"https://attack.mitre.org/techniques/T1027","identifiers":[{"type":"informative","value":"Contains CRYPTO related strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Command and Control","technique":"Web Protocols","attack_id":"T1071.001","attack_id_wiki":"https://attack.mitre.org/techniques/T1071/001","identifiers":[{"type":"informative","value":"Found User Agent related strings"}],"sources":[{"report_type":"qsp","report_id":""}]},{"tactic":"Collection","technique":"Email Collection","attack_id":"T1114","attack_id_wiki":"https://attack.mitre.org/techniques/T1114","identifiers":[{"type":"informative","value":"Found E-Mail address in binary/memory"}],"sources":[{"report_type":"qsp","report_id":""}]}],"sandbox_signatures":[{"level":"informative","category":"Network Related","name":"Possibly tries to communicate over SSL connection (HTTPS)","description":"$35","origin":"sample.bin","mitre_attack_id":"T1573","id":"string-98","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Found potential URL in binary/memory","description":"$36","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-3","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Contains ability to transfer data using curl","description":"Observed string: \"curl\" (Indicator: \"curl\") in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1105","id":"string-576","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"Network Related","name":"Contains Tor Onion URL","description":"\"xhamsteropoffvdm.onion\" (Indicator: \".onion\") in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1090.003","id":"string-176","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Network Related","name":"Contains references to network communication API (string)","description":"Found reference to API \"cannot connect to internet\" (Indicator: \" connect \"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1071","id":"string-899","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found a reference to a known community page","description":"$37","origin":"sample.bin","id":"string-10","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found User Agent related strings","description":"$38","origin":"sample.bin","mitre_attack_id":"T1071.001","id":"string-127","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains ability to execute Windows APIs","description":"Found reference to API (Indicator: \"SeShutdownPrivilege\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1106","id":"string-101","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Contains registry location strings","description":"\"Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Explorer\" in Source: sample.bin, \"Software\\Classes\\%s\" in Source: sample.bin, \"Software\\Apple Computer, Inc.\\iTunes\" in Source: sample.bin, \"Software\\Apple, Inc.\\iTunes\" in Source: sample.bin, \"Software\\Microsoft\\Windows\\CurrentVersion\\PreviewHandlers\" in Source: sample.bin, \"pSoftware\\\" in Source: sample.bin, \"Software\\Classes\\CLSID\\%s\" in Source: sample.bin, \"Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Comdlg32\" in Source: sample.bin, \"Software\\Classes\\\" in Source: sample.bin, \"Software\\Microsoft\\Windows\\CurrentVersion\\Policies\\Network\" in Source: sample.bin, \"Software\\Microsoft\\Windows\\CurrentVersion\\Internet Settings\" in Source: sample.bin","origin":"sample.bin","mitre_attack_id":"T1012","id":"string-120","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found E-Mail address in binary/memory","description":"Pattern match: \"support@anyvideosoftware.com\"","origin":"sample.bin","mitre_attack_id":"T1114","id":"string-63","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"General","name":"Found well known domains (string)","description":"\"https://api.github.com/repos/yt-dlp/yt-dlp-nightly-builds/releases/latest\" (Indicator: \"github.com\")","origin":"sample.bin","id":"string-135","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Contains ability to retrieve environment variable settings","description":"Found string \"Set audio sample rate (Hz)\" (Indicator: \"set \"; Source: \"sample.bin\"), Found string \"Set video resolution (width x height)\" (Indicator: \"set \"; Source: \"sample.bin\"), Found string \"Set audio channels\" (Indicator: \"set \"; Source: \"sample.bin\"), Found string \"Set as default\" (Indicator: \"set \"; Source: \"sample.bin\"), Found string \"Set audio bitrate (kbps)\n- Higher bitrate = higher quality & larger file\n- Lower bitrate = lower quality & smaller file\" (Indicator: \"set \"; Source: \"sample.bin\"), Found string \"Set video bitrate (kbps)\n- Higher bitrate = higher quality & larger file\n- Lower bitrate = lower quality & smaller file\" (Indicator: \"set \"; Source: \"sample.bin\"), Found string \"Set video frame rate (fps)\" (Indicator: \"set \"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1082","id":"string-326","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Environment Awareness","name":"Able to access user sensitive domain","description":"$39","origin":"sample.bin","mitre_attack_id":"T1590","id":"string-761","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"System Security","name":"Contains ability to modify access token privileges (API string)","description":"Found reference to API \"SeShutdownPrivilege\" (Indicator: \"SeShutdownPrivilege\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1134","id":"string-77","sources":[{"report_type":"qsp","report_id":""}]},{"level":"suspicious","category":"System Security","name":"Found registry location strings which can modify COM objects","description":"Observed string: \"software\\classes\\clsid\" [Source: sample.bin]","origin":"sample.bin","mitre_attack_id":"T1546.015","id":"string-344","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Spyware/Information Retrieval","name":"Contains CRYPTO related strings","description":"Found string \"AES-128\" (Indicator: \"aes\"; Source: \"sample.bin\"), Found string \"SAMPLE-AES\" (Indicator: \"aes\"; Source: \"sample.bin\"), Found string \"base64_init=1\" (Indicator: \"base64\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1027","id":"string-57","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Cryptographic Related","name":"Able to decrypt/decode data","description":"Found reference to API \".push(String.fromCharCode(\" (Indicator: \"fromcharcode\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1140","id":"string-356","sources":[{"report_type":"qsp","report_id":""}]},{"level":"informative","category":"Unusual Characteristics","name":"Reference explorer.exe process","description":"Found string \"explorer.exe\" (Indicator: \"explorer.exe\"; Source: \"sample.bin\")","origin":"sample.bin","mitre_attack_id":"T1055","id":"string-481","sources":[{"report_type":"qsp","report_id":""}]}],"intel_graph":{"map":{},"chains":[]}},"activity":{"stats":{"process_count":0,"spawned_processes_count":0,"injected_processes_count":0,"script_calls_count":0,"mutex_created_count":0,"imported_dlls_count":0,"dropped_files_count":0,"extracted_files_count":0,"files_written_count":0,"files_deleted_count":0,"registry_keys_created_count":0,"registry_keys_modified_count":0,"registry_keys_deleted_count":0,"registry_keys_opened_count":0,"registry_keys_queried_count":0,"registry_operations_count":0,"embedded_ips_count":0,"embedded_domains_count":0,"embedded_urls_count":0,"contacted_hosts_count":0,"dns_resolutions_count":0,"contacted_urls_count":0,"http_requests_count":0},"behavior_tags":null,"network_activity":{"contacted_hosts":null,"dns_resolutions":null,"http_requests":null},"process_activity":{"sources":null,"processes":null,"all_imported_dlls":null},"file_activity":{"dropped_files":null,"extracted_files":null,"files_written":null,"files_deleted":null},"registry_activity":{"keys_created":null,"keys_modified":null,"keys_deleted":null},"mutex_activity":{"mutex_created":null}},"report_ids":{}}}]]}] 2c:[["$","title","0",{"children":"Sample a055325a2b87… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","1",{"name":"description","content":"Threat analysis for sample a055325a2b87…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","2",{"name":"robots","content":"index, follow"}],["$","link","3",{"rel":"canonical","href":"https://www.hybrid-analysis.com/sample/a055325a2b87e0bb6f74d04869995f561a211508edaeb7a07b89b9b2286b165b"}],["$","meta","4",{"property":"og:title","content":"Sample a055325a2b87… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","5",{"property":"og:description","content":"Threat analysis for sample a055325a2b87…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","meta","6",{"property":"og:url","content":"https://www.hybrid-analysis.com/sample/a055325a2b87e0bb6f74d04869995f561a211508edaeb7a07b89b9b2286b165b"}],["$","meta","7",{"name":"twitter:card","content":"summary"}],["$","meta","8",{"name":"twitter:title","content":"Sample a055325a2b87… — Score 0/100 — Hybrid Analysis | Hybrid Analysis"}],["$","meta","9",{"name":"twitter:description","content":"Threat analysis for sample a055325a2b87…. Threat score 0/100. 0/24 AV engines flagged this file. 0 malicious and 2 suspicious behavioral indicators. View antivirus detections, behavioral indicators, and sandbox reports."}],["$","link","10",{"rel":"icon","href":"/favicon.svg"}],["$","$L3a","11",{}]] 32:null