Edit tour

Windows Analysis Report
https://transfiles.ru/vyjw4

Overview

General Information

Sample URL:	https://transfiles.ru/vyjw4
Analysis ID:	1448031
Infos:

Detection

Score:	22
Range:	0 - 100
Whitelisted:	false
Confidence:	60%

Signatures

Downloads suspicious files via Chrome

Drops PE files

Found iframes

Queries the volume information (name, serial number etc) of a device

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 5960 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://transfiles.ru/vyjw4 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

chrome.exe (PID: 6552 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=1980,i,5191005634875542788,15932232829212940879,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 83395EAB5B03DEA9720F8D7AC0D15CAA)

OpenWith.exe (PID: 7228 cmdline: C:\Windows\system32\OpenWith.exe -Embedding MD5: E4A834784FA08C17D47A1E72429C5109)

rundll32.exe (PID: 7532 cmdline: C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding MD5: EF3179D498793BF4234F708D3BE28633)

7zG.exe (PID: 7744 cmdline: "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\user\Desktop\" -an -ai#7zMap29805:70:7zEvent23307 MD5: 50F289DF0C19484E970849AAC4E6F977)

Loader.exe (PID: 6728 cmdline: "C:\Users\user\Desktop\Loader.exe" MD5: 14E9EBF2C5C0DBC0DDAF0ADC2F52F1FB)

conhost.exe (PID: 5440 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

cleanup

String found in binary or memory: return b}EC.K="internal.enableAutoEventOnTimer";var ic=ma(["data-gtm-yt-inspected-"]),GC=["www.youtube.com","www.youtube-nocookie.com"],HC,IC=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: transfiles.ru
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: cdn.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: serve.bidbrain.app
Source: global traffic	DNS traffic detected: DNS query: g.bidbrain.app

Source: unknown

HTTP traffic detected: POST /getFilelist HTTP/1.1Host: transfiles.ruConnection: keep-aliveContent-Length: 10sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://transfiles.ruSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://transfiles.ru/vyjw4Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5; _ym_uid=1716814863853134129; _ym_d=1716814863

Source: chromecache_136.1.dr, chromecache_176.1.dr	String found in binary or memory: http://bxcreative.com
Source: chromecache_136.1.dr, chromecache_176.1.dr	String found in binary or memory: http://bxslider.com
Source: chromecache_156.1.dr	String found in binary or memory: http://google.com
Source: chromecache_135.1.dr, chromecache_156.1.dr	String found in binary or memory: http://googleads.g.doubleclick.net
Source: chromecache_156.1.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_176.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_135.1.dr, chromecache_156.1.dr	String found in binary or memory: http://pagead2.googlesyndication.com
Source: chromecache_136.1.dr, chromecache_176.1.dr	String found in binary or memory: http://stevenwanderski.com
Source: chromecache_145.1.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_119.1.dr	String found in binary or memory: https://adsense.com.
Source: chromecache_161.1.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_161.1.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_118.1.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_161.1.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_156.1.dr	String found in binary or memory: https://cdn.ampproject.org/amp4ads-host-v0.js
Source: chromecache_156.1.dr	String found in binary or memory: https://cdn.ampproject.org/rtv/$
Source: chromecache_156.1.dr	String found in binary or memory: https://cse.google.com/cse.js
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Google
Source: chromecache_156.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Google
Source: chromecache_156.1.dr	String found in binary or memory: https://fundingchoicesmessages.google.com/i/%
Source: chromecache_135.1.dr, chromecache_156.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_119.1.dr, chromecache_156.1.dr	String found in binary or memory: https://googleads.g.doubleclick.net/pagead/html/$
Source: chromecache_140.1.dr	String found in binary or memory: https://mc.yandex.
Source: chromecache_140.1.dr	String found in binary or memory: https://mc.yandex.md/cc
Source: chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/getconfig/sodar
Source: chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204
Source: chromecache_145.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&bin=7&v=
Source: chromecache_145.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=error&name=invalid_geo&context=10
Source: chromecache_145.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=extra&rnd=
Source: chromecache_145.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&lidartos
Source: chromecache_145.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=fetch&later&start&control&fle=1&s
Source: chromecache_145.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=av-js&type=reach&proto=
Source: chromecache_160.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=fccs&
Source: chromecache_119.1.dr, chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=plmetrics
Source: chromecache_135.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=rcs_internal
Source: chromecache_161.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/html/$
Source: chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/$
Source: chromecache_135.1.dr, chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Source: chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js?client=
Source: chromecache_135.1.dr, chromecache_119.1.dr, chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/err_rep.js
Source: chromecache_119.1.dr, chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/js/logging_library.js
Source: chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/managed/js/adsense/$
Source: chromecache_135.1.dr, chromecache_119.1.dr, chromecache_156.1.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/ping?e=1
Source: chromecache_158.1.dr	String found in binary or memory: https://quickchart.io/qr?text=
Source: chromecache_140.1.dr	String found in binary or memory: https://s3.mds.yandex.net/internal-metrika-betas
Source: chromecache_156.1.dr	String found in binary or memory: https://securepubads.g.doubleclick.net/static/topics/topics_frame.html
Source: chromecache_161.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_118.1.dr	String found in binary or memory: https://stats.g.doubleclick.net/j/collect
Source: chromecache_118.1.dr	String found in binary or memory: https://tagassistant.google.com/
Source: chromecache_161.1.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_156.1.dr	String found in binary or memory: https://tpc.googlesyndication.com/sodar/$
Source: chromecache_118.1.dr	String found in binary or memory: https://www.google-analytics.com/debug/bootstrap?id=
Source: chromecache_118.1.dr	String found in binary or memory: https://www.google-analytics.com/gtm/js?id=
Source: chromecache_118.1.dr	String found in binary or memory: https://www.google.%/ads/ga-audiences
Source: chromecache_161.1.dr	String found in binary or memory: https://www.google.com
Source: chromecache_118.1.dr	String found in binary or memory: https://www.google.com/ads/ga-audiences
Source: chromecache_119.1.dr	String found in binary or memory: https://www.google.com/adsense
Source: chromecache_156.1.dr	String found in binary or memory: https://www.google.com/adsense/search/async-ads.js
Source: chromecache_156.1.dr	String found in binary or memory: https://www.google.com/recaptcha/api2/aframe
Source: chromecache_156.1.dr	String found in binary or memory: https://www.google.com/s2/favicons?sz=64&domain_url=
Source: chromecache_161.1.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_145.1.dr	String found in binary or memory: https://www.googleadservices.com/pagead/managed/js/activeview/
Source: chromecache_161.1.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_118.1.dr	String found in binary or memory: https://www.googletagmanager.com/gtag/js?id=
Source: chromecache_156.1.dr	String found in binary or memory: https://www.gstatic.com
Source: chromecache_156.1.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/arrow_left_24px_grey_800.svg
Source: chromecache_156.1.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/close_24px_grey_700.svg
Source: chromecache_156.1.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_blue_600.svg
Source: chromecache_156.1.dr	String found in binary or memory: https://www.gstatic.com/adsense/autoads/icons/gpp_good_24px_grey_800.svg
Source: chromecache_156.1.dr	String found in binary or memory: https://www.gstatic.com/prose/protected/%
Source: chromecache_161.1.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_140.1.dr	String found in binary or memory: https://yandex.com/an/sync_cookie
Source: chromecache_140.1.dr	String found in binary or memory: https://yastatic.net/s3/gdpr/v3/gdpr
Source: chromecache_140.1.dr	String found in binary or memory: https://yastatic.net/s3/metrika
Source: chromecache_140.1.dr	String found in binary or memory: https://yastatic.net/s3/taxi-front/yango-gdpr-popup/
Source: chromecache_140.1.dr	String found in binary or memory: https://ymetrica1.com/watch/3/1

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49679 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 92.123.104.38:443 -> 192.168.2.18:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.18:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.18:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.18:49795 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.114.59.183:443 -> 192.168.2.18:49850 version: TLS 1.2

System Summary

Downloads suspicious files via Chrome

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File dump: C:\Users\user\Downloads\Loader.rar (copy)

Jump to dropped file

Source: classification engine

Classification label: sus22.win@22/124@28/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:5440:120:WilError_03
Source: C:\Windows\System32\OpenWith.exe	Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:7228:120:WilError_03

Source: C:\Windows\System32\OpenWith.exe

File read: C:\Users\desktop.ini

Jump to behavior

Source: C:\Windows\System32\OpenWith.exe

Key opened: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown

Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://transfiles.ru/vyjw4
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=1980,i,5191005634875542788,15932232829212940879,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Windows\System32\OpenWith.exe C:\Windows\system32\OpenWith.exe -Embedding
Source: unknown	Process created: C:\Windows\System32\rundll32.exe C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Source: unknown	Process created: C:\Program Files\7-Zip\7zG.exe "C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\user\Desktop\" -an -ai#7zMap29805:70:7zEvent23307
Source: unknown	Process created: C:\Users\user\Desktop\Loader.exe "C:\Users\user\Desktop\Loader.exe"
Source: C:\Users\user\Desktop\Loader.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=1980,i,5191005634875542788,15932232829212940879,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Windows\System32\OpenWith.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: onecoreuapcommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: twinui.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dwmapi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: pdh.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: onecorecommonproxystub.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: actxprxy.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: propsys.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.staterepositoryps.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.ui.appdefaults.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.ui.immersive.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: uiautomationcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dui70.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: duser.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: bcp47mrm.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: uianimation.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: d3d10warp.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dxcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: oleacc.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: edputil.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.ui.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windowmanagementapi.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: inputhost.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windowscodecs.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: thumbcache.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: policymanager.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: msvcp110_win.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: appresolver.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: bcp47langs.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: slc.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: sppc.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: tiledatarepository.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: staterepository.core.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.staterepository.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: staterepository.core.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: wtsapi32.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: windows.staterepositorycore.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: mrmcorer.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: appxdeploymentclient.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: sxs.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: directmanipulation.dll	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: explorerframe.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: textshaping.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Program Files\7-Zip\7zG.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Users\user\Desktop\Loader.exe	Section loaded: apphelp.dll	Jump to behavior
Source: C:\Users\user\Desktop\Loader.exe	Section loaded: reverse.dll	Jump to behavior
Source: C:\Users\user\Desktop\Loader.exe	Section loaded: kernel.appcore.dll	Jump to behavior

Source: C:\Windows\System32\OpenWith.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{95E15D0A-66E6-93D9-C53C-76E6219D3341}\InProcServer32

Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\7-Zip\7zG.exe

File created: C:\Users\user\Desktop\Loader.exe

Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior
Source: C:\Windows\System32\rundll32.exe	Process information set: NOOPENFILEERRORBOX	Jump to behavior

Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\segoeui.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\seguisb.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\seguisym.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation	Jump to behavior
Source: C:\Windows\System32\OpenWith.exe	Queries volume information: C:\Windows\Fonts\segmdl2.ttf VolumeInformation	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 DLL Side-Loading	1 Process Injection	1 Masquerading	OS Credential Dumping	1 File and Directory Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 DLL Side-Loading	1 Rundll32	LSASS Memory	11 System Information Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	1 Registry Run Keys / Startup Folder	1 Process Injection	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://transfiles.ru/vyjw4	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://stats.g.doubleclick.net/g/collect	0%	URL Reputation	safe
https://mc.yandex.	0%	URL Reputation	safe
https://ampcid.google.com/v1/publisher:getClientId	0%	URL Reputation	safe
https://fundingchoicesmessages.google.com/i/%	0%	URL Reputation	safe
https://stats.g.doubleclick.net/j/collect	0%	URL Reputation	safe
https://cdn.ampproject.org/amp4ads-host-v0.js	0%	URL Reputation	safe
https://s3.mds.yandex.net/internal-metrika-betas	0%	URL Reputation	safe
https://mc.yandex.ru/metrika/tag.js	0%	URL Reputation	safe
https://cdn.bidbrain.app/sqoutlogo_1716467887.png	0%	Avira URL Cloud	safe
https://yastatic.net/s3/metrika	0%	URL Reputation	safe
https://mc.yandex.md/cc	0%	URL Reputation	safe
https://transfiles.ru/images/btn_qrcode.png	0%	Avira URL Cloud	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
http://mathiasbynens.be/	0%	URL Reputation	safe
https://www.google.%/ads/ga-audiences	0%	URL Reputation	safe
https://googleads.g.doubleclick.net/pagead/adview?ai=ClnvfEoRUZt6kF8Sk78EPwYeYiAi9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOkBT9DJs4DwZkFXazdC1vb_IfyT66cVwzssloIAuPYWdk2pvdtdkGfl8RgS3j-Rb1GTsGsjffrBVrJompxkEBZ924zCEaxLXjpE8OBkyCvMc-kiBz_1sMZqZ6htcQ27oYfZHqEPFnNPxSHQPU1iEcdIX0FhjqCDTxj4rDa-b17-SC3kMU1BJlX07cp2Z9WAoB96JWUXADgY-JX7-YKhNJ443k1YUuN81i0TyhiIYfAGYqM-zP8TWNDBiwTRBYrnljr4fSJestOWOB7pVjcW6IT-vAxBFegz9lpnTD1Nae1FR4Aefzq-zoyo2HGABq_-tKHlnqO4kwGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAetvrEC2AcA0ggiCIBhEAEyAooCOgmAQIDAgICAoChIvf3BOljO2oTi8a2GA4AKAfoLAggBgAwB0BUBgBcBshcaChgSFHB1Yi05Njc4MzM1ODg3MDU1OTI1GAA&sigh=2wcJhgJJwFM&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLoh93Sadr21NHJ2zkjDpMZfnXwrBt59depIsu5gVxrAevUT4Mr3AQrbvEezgmEpr4CE-bTyWvTiwSPN_8bxGxnJJ5_qKbjddvxxgB&cbvp=2&vis=1	0%	Avira URL Cloud	safe
https://cdn.bidbrain.app/ng-assets/creative/assets/index-cb91ca65.css	0%	Avira URL Cloud	safe
http://bxslider.com	0%	URL Reputation	safe
https://mc.yandex.com/sync_cookie_image_decide_secondary?token=10382.PHokSIao8yHItpVHoilKJ7LvElhcKk_OfeMiRfRUAgZFbdT46izlmiBOc95P41WQVdZoaHSNmzacvchSIRLsAY-LRphnUACZ3FDhGTBBZqn6Bhvm3QpWT2dpAkU5csY4NoyTXdi0OOB-upnzWehEU4VYYeizz3kakGib1K_v3IrBnoGG5wDQeWCaVEMh-C_xZ5S90lf4fiLJREm5w_U2Nvm1jAiRpncuE676e0bo3io%2C.z5voVyT0_z8pviNRWNtRjPKoezg%2C	0%	Avira URL Cloud	safe
https://yastatic.net/s3/taxi-front/yango-gdpr-popup/	0%	URL Reputation	safe
http://stevenwanderski.com	0%	URL Reputation	safe
http://www.apache.org/licenses/LICENSE-2.0	0%	URL Reputation	safe
https://cse.google.com/cse.js	0%	URL Reputation	safe
https://tagassistant.google.com/	0%	URL Reputation	safe
https://cdn.ampproject.org/rtv/$	0%	URL Reputation	safe
https://mc.yandex.com/sync_cookie_image_check	0%	URL Reputation	safe
http://opensource.org/licenses/MIT	0%	URL Reputation	safe
https://yastatic.net/s3/gdpr/v3/gdpr	0%	URL Reputation	safe
https://ymetrica1.com/watch/3/1	0%	URL Reputation	safe
https://g.bidbrain.app/rtimp	0%	URL Reputation	safe
http://bxcreative.com	0%	URL Reputation	safe
https://td.doubleclick.net	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
https://mc.yandex.com/metrika/metrika_match.html	0%	URL Reputation	safe
https://transfiles.ru/css/jquery.bxslider.css	0%	Avira URL Cloud	safe
https://www.google.com	0%	Avira URL Cloud	safe
https://mc.yandex.com/watch/33590114/1?page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&charset=utf-8&hittoken=1716814866_a54e6e707aa72c8d42e3cb06a15c3291caee60b99711d9e761410aa4eb2bb118&browser-info=nb%3A1%3Acl%3A4367%3Aar%3A1%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1350%3Acn%3A1%3Adp%3A1%3Als%3A1430974270378%3Ahid%3A880766209%3Az%3A-240%3Ai%3A20240527090125%3Aet%3A1716814885%3Ac%3A1%3Arn%3A3598640%3Arqn%3A2%3Au%3A1716814863853134129%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C4718%2C10%2C9666%2C%2C%2C7143%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1716814856326%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1716814885&t=gdpr(14)clc(1-206-579)rqnt(2)lt(8900)aw(0)rcm(1)cdl(na)eco(21037572)dss(2)fid(140)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D	0%	Avira URL Cloud	safe
https://www.google.com	0%	Virustotal		Browse
https://mc.yandex.com/webvisor/33590114?wv-part=4&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=99049005&browser-info=we%3A1%3Aet%3A1716814877%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090117%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814877&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe
https://transfiles.ru/images/bg.jpg	0%	Avira URL Cloud	safe
https://serve.bidbrain.app/sig.js	0%	Avira URL Cloud	safe
https://quickchart.io/qr?text=	0%	Avira URL Cloud	safe
https://mc.yandex.com/webvisor/33590114?wv-part=4&wv-check=43811&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=629003795&browser-info=we%3A1%3Aet%3A1716814893%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090133%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814893&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe
https://mc.yandex.com/clmap/33590114?page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&pointer-click=rn%3A532174762%3Ax%3A38665%3Ay%3A28398%3At%3A33%3Ap%3APA1AA1AAAAA%3AX%3A206%3AY%3A679&browser-info=u%3A1716814863853134129%3Av%3A1350%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Arqnl%3A1%3Ast%3A1716814866&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe
https://transfiles.ru/images/btn_ok_passive.png	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/html/$	0%	Avira URL Cloud	safe
https://transfiles.ru/images/loader.gif	0%	Avira URL Cloud	safe
https://transfiles.ru/images/bg.jpg	1%	Virustotal		Browse
https://googleads.g.doubleclick.net/pagead/html/$	0%	Virustotal		Browse
https://www.google.com/adsense	0%	Virustotal		Browse
https://quickchart.io/qr?text=	0%	Virustotal		Browse
https://yandex.com/an/sync_cookie	0%	Virustotal		Browse
https://www.google.com/adsense	0%	Avira URL Cloud	safe
https://mc.yandex.com/watch/33590114/1?wmode=7&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.149%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.149%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.149%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1350%3Acn%3A1%3Adp%3A0%3Als%3A1430974270378%3Ahid%3A880766209%3Az%3A-240%3Ai%3A20240527090102%3Aet%3A1716814863%3Ac%3A1%3Arn%3A553862080%3Arqn%3A1%3Au%3A1716814863853134129%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A4793%3Awv%3A2%3Ads%3A0%2C1736%2C311%2C108%2C26%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1716814856326%3Arqnl%3A1%3Ast%3A1716814864%3At%3ATransFiles%20-%20free%20file%20sharing%20service%20without%20registration%20-%20Page%20to%20download%20the%20upload%20vyjw4&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2821037572%29ti%281%29&redirnss=1	0%	Avira URL Cloud	safe
https://g.bidbrain.app/rtimp?sid=2e24c048-1c29-11ef-9fb3-461def39b9c5&d=transfiles.ru&cr=ext_continue_sqout_nd32&a=imp&p=ZlSEEgAF0l4CO9JEAAYDwf_oVh8NlMxuVSTtyg&im=csTClgnNfcpzdZKOYPVS4AvGC71xOMJpdRfirF6zakSHapprQEYr70VZBY2CDDimrqDbxBrqQRgM2kPbfaGjE3WpBLcswnTxJgoObX02k6-KiztT_vYR4wO4hY1yz1EXXu5TxjYh-Qj7HmQ5PbFloc0nQhX8IVDC866aJqbSTql8vHj7_pJX_a95XX4rSjiXd4Na51NTHs1Fbk7EPhLVXq21sQ37tP1x0rHKsWQdP-mTgMcQTLcuZUk6guOp_Ji83jtLJQlmRol5AMRJw4VTLm49kqz2sd3npcfeWRDMzVAK6RO6QPn_MeolthgAxovwV6N8r04wYn-ewqY1oQ5RFWv2_PeqDr4kKCJvAOAFDsU&cbvp=2	0%	Avira URL Cloud	safe
https://yandex.com/an/sync_cookie	0%	Avira URL Cloud	safe
https://cdn.bidbrain.app/ng-assets/creative/assets/index-5ff4bbc8.js	0%	Avira URL Cloud	safe
https://mc.yandex.ru/sync_cookie_image_start_secondary?redirect_domain=mc.yandex.com&token=10382.91OTDC7CGhMUgd5msKBQIdMJAOVISv1vNGp9EokNsvH6IRYIY439ilpR9ghFy4Z1.AZ1YOtlm9mvrCEh9G3ToKwugLbw%2C	0%	Avira URL Cloud	safe
https://adservice.google.com/pagead/regclk	0%	Avira URL Cloud	safe
https://www.google.com/adsense/search/async-ads.js	0%	Avira URL Cloud	safe
https://transfiles.ru/js/functions.js?rnd=11	0%	Avira URL Cloud	safe
https://mc.yandex.com/webvisor/33590114?wv-part=1&wv-check=5780&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=716971472&browser-info=we%3A1%3Aet%3A1716814869%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090108%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814869&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe
https://mc.yandex.com/webvisor/33590114?wv-part=3&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=638068873&browser-info=we%3A1%3Aet%3A1716814873%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090113%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814873&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe
https://cdn.bidbrain.app/compressedFonts/RobotoRegular.woff2	0%	Avira URL Cloud	safe
https://adservice.google.com/pagead/regclk	1%	Virustotal		Browse
http://googleads.g.doubleclick.net	0%	Avira URL Cloud	safe
https://www.google.com/adsense/search/async-ads.js	0%	Virustotal		Browse
https://transfiles.ru/securimage/show	0%	Avira URL Cloud	safe
https://mc.yandex.com/webvisor/33590114?wv-part=2&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=137156753&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1716814871%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814871&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe
https://mc.yandex.com/webvisor/33590114?wv-part=1&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=613221953&browser-info=we%3A1%3Aet%3A1716814870%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090110%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814870&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe
https://transfiles.ru/images/donate.png	0%	Avira URL Cloud	safe
http://googleads.g.doubleclick.net	0%	Virustotal		Browse
https://transfiles.ru/manifest.json	0%	Avira URL Cloud	safe
https://transfiles.ru/images/abuse.png	0%	Avira URL Cloud	safe
https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	0%	Avira URL Cloud	safe
https://transfiles.ru/getFilelist	0%	Avira URL Cloud	safe
http://google.com	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api2/aframe	0%	Avira URL Cloud	safe
https://mc.yandex.com/sync_cookie_image_check_secondary	0%	Avira URL Cloud	safe
https://cdn.bidbrain.app/compressedFonts/RobotoBold.woff2	0%	Avira URL Cloud	safe
https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	0%	Virustotal		Browse
https://www.google.com/s2/favicons?sz=64&domain_url=	0%	Avira URL Cloud	safe
https://transfiles.ru/assets/504097ca/jquery.min.js	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/adview?ai=CAIqXEoRUZq7LD8Gd78EPgtSXmAe9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOkBT9DtPGeYQY5dYXYiBj0xruaMf1DEhRVGynZK6w48Ujl41s1YPYGOkYOeHnwQe97oPGQH0hefM4OQTmRK9is87HziHmkIVO0EeFPn3aSDtoDufow8b7k6amJVFY1EeWS0hifj7LDmnZUcELLtYABjxNzTh529P4wHkBv2BKadUbtokO9GZBiTODx8EiP32YbxhtXI0KAi1FCczvBC6nmsWM2BI4BoNaS0hSCvCvhn9TWKDRYF4MqYhV87SQGKWj58APy9zEhQ1PkFIlgKbhRGezn4zFWaRUTVRP1cLa9a3j8uNBULEHk3sDuABq_-tKHlnqO4kwGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAetvrEC2AcA0ggiCIBhEAEyAooCOgmAQIDAgICAoChIvf3BOliwhv3h8a2GA4AKAfoLAggBgAwB0BUBgBcBshcaChgSFHB1Yi05Njc4MzM1ODg3MDU1OTI1GAA&sigh=X-cx5vN0UcU&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLTW7u4oge14IuBjKtz3YT8jNF6w2C2f2dpMInZBKZdkhNtx6SNLsj0rEk5kU2Z30Vy-VDSFFKHeVSUvnj0Vh7CRDgM4E2fEuvdBgB&cbvp=2&vis=1	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net/pagead/adview?ai=ChkXoEoRUZtabGPrV78EPi5KcyAW9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOoBT9AlBXsp115XZA7Amy_hNtZN7Fu4gGE0K_C2VEOzYhKFiTzi6z6F5bSB43mKXoWFjL0rhutsk1D7LCgTdJZVmsyPLS6iHWK6xDS3uYNkAHIRo2qMqVqABDQRBkP-wc6m2NgRWxnlFJlOwd8xLNYpS5AVzvKA-MhbiJo0PoYWk4H0BKkTlI_Dv39CQ7SkJna53Mqr0XWRmCK5qNfbcFwe_YfuwyZS6H7S8VI4DNgSq2eIQ8oFmKODii4u_asf7HU2op18-afZVnT8ogGJRPG6RVAIN4b1g-GhHBb8yN1jaxJBy1CERrewT5lhgAav_rSh5Z6juJMBoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpY9LeF4vGthgOACgH6CwIIAYAMAdAVAYAXAbIXGgoYEhRwdWItOTY3ODMzNTg4NzA1NTkyNRgA&sigh=BZmvZsc00Ug&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLNLBfoQVCmJOdffnJqi40f_xWMBJ0aoP0NYY3lCOpK9Ard5Y6VEggUHLn7qVkB0kkfAYylevaQD5lNX5wuqGnRSXClVGmF7emcxgB&cbvp=2&vis=1	0%	Avira URL Cloud	safe
https://g.bidbrain.app/rtimp?sid=2e0e941e-1c29-11ef-9fb8-16c77870c855&d=transfiles.ru&cr=ext_continue_sqout_nd32&a=imp&p=ZlSEEgAD5a4CO87BAAXqAkO-BDQEmDBZTmf2Jw&im=ywfmR2pDhgFZ29M1QD0u7KbGNvKqoIeCNHh4KGkQ1dC2XSH5b7FXZyvz8fXBwrnP_j336behaBhG_l925hs-oP57YzR_SraPoWWNDaFhr11y_Lu1-P-fJrgIfZm2SFi9e_uJWGoA1WacgJ_5BBNOM88Y5rIKRcYHKI7inJGL1bvY7oqQ8cXdlucoAPyei5KnxwwgvgUwFwT2GCM3ZaLZryWSVhRAvSjj4bn3G0skWmojUUgxhDZY5pA1Q4FMtWNt0e-5w0CPeyryGO_fFIKaPBAXKYoUN-dDujfjxw3XKBjvd-3qhajYhJlX2qQgp7Ar&cbvp=2	0%	Avira URL Cloud	safe
https://mc.yandex.com/webvisor/33590114?wv-part=2&wv-check=20957&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=25282607&browser-info=we%3A1%3Aet%3A1716814871%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814871&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe
https://transfiles.ru/images/logo.png	0%	Avira URL Cloud	safe
https://transfiles.ru/js/jquery.mCustomScrollbar.concat.min.js	0%	Avira URL Cloud	safe
https://transfiles.ru/images/en.png	0%	Avira URL Cloud	safe
https://cdn.bidbrain.app/ng-assets/creative/assets/polyfills-89a25f2d.js	0%	Avira URL Cloud	safe
https://transfiles.ru/getFiles/4002015	0%	Avira URL Cloud	safe
https://transfiles.ru/js/jquery.bxslider.min.js	0%	Avira URL Cloud	safe
https://googleads.g.doubleclick.net	0%	Avira URL Cloud	safe
https://transfiles.ru/css/common.css?rnd=11	0%	Avira URL Cloud	safe
https://transfiles.ru/js/download.js?rnd=11	0%	Avira URL Cloud	safe
https://mc.yandex.com/webvisor/33590114?wv-part=1&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=487012232&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1716814870%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090109%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814870&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe
https://mc.yandex.com/webvisor/33590114?wv-part=3&wv-check=38163&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=196412308&browser-info=we%3A1%3Aet%3A1716814872%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090112%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814872&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe
https://transfiles.ru/images/ru.png	0%	Avira URL Cloud	safe
https://mc.yandex.com/webvisor/33590114?wv-part=2&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=305471114&browser-info=we%3A1%3Aet%3A1716814872%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814872&t=gdpr(14)ti(1)	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mc.yandex.ru	87.250.250.119	true	false	unknown
googleads.g.doubleclick.net	172.217.18.98	true	false	unknown
transfiles.ru	65.108.228.44	true	false	unknown
cdn.bidbrain.app	172.67.176.164	true	false	unknown
www.google.com	216.58.212.164	true	false	unknown
serve.bidbrain.app	172.67.176.164	true	false	unknown
g.bidbrain.app	172.67.176.164	true	false	unknown
mc.yandex.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.bidbrain.app/sqoutlogo_1716467887.png	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&h=100&slotname=8540115672&adk=3304334544&adf=3870114935&pi=t.ma~as.8540115672&w=970&abgtt=3&lmt=1716814864&format=970x100&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862312&bpp=1&bdt=3665&idt=1804&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=970x280&correlator=2846887072687&frm=20&pv=1&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=823&biw=1263&bih=907&scr_x=0&scr_y=58&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4347612559431098&tmod=1276184472&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1809	false		unknown
https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html#RS-2-&adk=1812271801&client=ca-pub-9678335887055925&fa=1&ifi=6&uci=a!6&btvi=2	false		unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=ClnvfEoRUZt6kF8Sk78EPwYeYiAi9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOkBT9DJs4DwZkFXazdC1vb_IfyT66cVwzssloIAuPYWdk2pvdtdkGfl8RgS3j-Rb1GTsGsjffrBVrJompxkEBZ924zCEaxLXjpE8OBkyCvMc-kiBz_1sMZqZ6htcQ27oYfZHqEPFnNPxSHQPU1iEcdIX0FhjqCDTxj4rDa-b17-SC3kMU1BJlX07cp2Z9WAoB96JWUXADgY-JX7-YKhNJ443k1YUuN81i0TyhiIYfAGYqM-zP8TWNDBiwTRBYrnljr4fSJestOWOB7pVjcW6IT-vAxBFegz9lpnTD1Nae1FR4Aefzq-zoyo2HGABq_-tKHlnqO4kwGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAetvrEC2AcA0ggiCIBhEAEyAooCOgmAQIDAgICAoChIvf3BOljO2oTi8a2GA4AKAfoLAggBgAwB0BUBgBcBshcaChgSFHB1Yi05Njc4MzM1ODg3MDU1OTI1GAA&sigh=2wcJhgJJwFM&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLoh93Sadr21NHJ2zkjDpMZfnXwrBt59depIsu5gVxrAevUT4Mr3AQrbvEezgmEpr4CE-bTyWvTiwSPN_8bxGxnJJ5_qKbjddvxxgB&cbvp=2&vis=1	false	Avira URL Cloud: safe	unknown
https://cdn.bidbrain.app/ng-assets/creative/assets/index-cb91ca65.css	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/images/btn_qrcode.png	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/sync_cookie_image_decide_secondary?token=10382.PHokSIao8yHItpVHoilKJ7LvElhcKk_OfeMiRfRUAgZFbdT46izlmiBOc95P41WQVdZoaHSNmzacvchSIRLsAY-LRphnUACZ3FDhGTBBZqn6Bhvm3QpWT2dpAkU5csY4NoyTXdi0OOB-upnzWehEU4VYYeizz3kakGib1K_v3IrBnoGG5wDQeWCaVEMh-C_xZ5S90lf4fiLJREm5w_U2Nvm1jAiRpncuE676e0bo3io%2C.z5voVyT0_z8pviNRWNtRjPKoezg%2C	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/css/jquery.bxslider.css	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/watch/33590114/1?page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&charset=utf-8&hittoken=1716814866_a54e6e707aa72c8d42e3cb06a15c3291caee60b99711d9e761410aa4eb2bb118&browser-info=nb%3A1%3Acl%3A4367%3Aar%3A1%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1350%3Acn%3A1%3Adp%3A1%3Als%3A1430974270378%3Ahid%3A880766209%3Az%3A-240%3Ai%3A20240527090125%3Aet%3A1716814885%3Ac%3A1%3Arn%3A3598640%3Arqn%3A2%3Au%3A1716814863853134129%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C4718%2C10%2C9666%2C%2C%2C7143%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1716814856326%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1716814885&t=gdpr(14)clc(1-206-579)rqnt(2)lt(8900)aw(0)rcm(1)cdl(na)eco(21037572)dss(2)fid(140)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/webvisor/33590114?wv-part=4&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=99049005&browser-info=we%3A1%3Aet%3A1716814877%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090117%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814877&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/images/bg.jpg	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://serve.bidbrain.app/sig.js	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/webvisor/33590114?wv-part=4&wv-check=43811&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=629003795&browser-info=we%3A1%3Aet%3A1716814893%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090133%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814893&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/clmap/33590114?page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&pointer-click=rn%3A532174762%3Ax%3A38665%3Ay%3A28398%3At%3A33%3Ap%3APA1AA1AAAAA%3AX%3A206%3AY%3A679&browser-info=u%3A1716814863853134129%3Av%3A1350%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Arqnl%3A1%3Ast%3A1716814866&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/images/btn_ok_passive.png	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/vyjw4	false		unknown
https://mc.yandex.ru/metrika/tag.js	false	URL Reputation: safe	unknown
https://transfiles.ru/images/loader.gif	false	Avira URL Cloud: safe	unknown
https://cdn.bidbrain.app/ng-assets/creative/assets/index-5ff4bbc8.js	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/watch/33590114/1?wmode=7&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.149%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.149%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.149%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1350%3Acn%3A1%3Adp%3A0%3Als%3A1430974270378%3Ahid%3A880766209%3Az%3A-240%3Ai%3A20240527090102%3Aet%3A1716814863%3Ac%3A1%3Arn%3A553862080%3Arqn%3A1%3Au%3A1716814863853134129%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A4793%3Awv%3A2%3Ads%3A0%2C1736%2C311%2C108%2C26%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1716814856326%3Arqnl%3A1%3Ast%3A1716814864%3At%3ATransFiles%20-%20free%20file%20sharing%20service%20without%20registration%20-%20Page%20to%20download%20the%20upload%20vyjw4&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2821037572%29ti%281%29&redirnss=1	false	Avira URL Cloud: safe	unknown
https://mc.yandex.ru/sync_cookie_image_start_secondary?redirect_domain=mc.yandex.com&token=10382.91OTDC7CGhMUgd5msKBQIdMJAOVISv1vNGp9EokNsvH6IRYIY439ilpR9ghFy4Z1.AZ1YOtlm9mvrCEh9G3ToKwugLbw%2C	false	Avira URL Cloud: safe	unknown
https://g.bidbrain.app/rtimp?sid=2e24c048-1c29-11ef-9fb3-461def39b9c5&d=transfiles.ru&cr=ext_continue_sqout_nd32&a=imp&p=ZlSEEgAF0l4CO9JEAAYDwf_oVh8NlMxuVSTtyg&im=csTClgnNfcpzdZKOYPVS4AvGC71xOMJpdRfirF6zakSHapprQEYr70VZBY2CDDimrqDbxBrqQRgM2kPbfaGjE3WpBLcswnTxJgoObX02k6-KiztT_vYR4wO4hY1yz1EXXu5TxjYh-Qj7HmQ5PbFloc0nQhX8IVDC866aJqbSTql8vHj7_pJX_a95XX4rSjiXd4Na51NTHs1Fbk7EPhLVXq21sQ37tP1x0rHKsWQdP-mTgMcQTLcuZUk6guOp_Ji83jtLJQlmRol5AMRJw4VTLm49kqz2sd3npcfeWRDMzVAK6RO6QPn_MeolthgAxovwV6N8r04wYn-ewqY1oQ5RFWv2_PeqDr4kKCJvAOAFDsU&cbvp=2	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html#RS-1-&adk=1812271804&client=ca-pub-9678335887055925&fa=4&ifi=5&uci=a!5&btvi=1	false		unknown
https://transfiles.ru/js/functions.js?rnd=11	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/webvisor/33590114?wv-part=1&wv-check=5780&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=716971472&browser-info=we%3A1%3Aet%3A1716814869%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090108%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814869&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/webvisor/33590114?wv-part=3&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=638068873&browser-info=we%3A1%3Aet%3A1716814873%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090113%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814873&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
https://cdn.bidbrain.app/compressedFonts/RobotoRegular.woff2	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&adk=1812271804&adf=3025194257&abgtt=3&lmt=1716814864&plat=2%3A16777216%2C3%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=135x714_r&format=0x0&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&pra=7&wgl=1&easpi=0&aihb=0&asro=0&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814863478&bpp=2&bdt=4830&idt=648&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=970x280%2C970x100&nras=1&correlator=2846887072687&frm=20&pv=1&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=58&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4347612559431098&tmod=1276184472&uas=0&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=660	false		unknown
https://transfiles.ru/securimage/show	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&h=280&slotname=7823858479&adk=642103812&adf=441738196&pi=t.ma~as.7823858479&w=970&abgtt=3&fwrn=4&fwrnh=100&lmt=1716814864&rafmt=1&format=970x280&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862308&bpp=4&bdt=3661&idt=1768&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=2846887072687&frm=20&pv=2&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=158&biw=1263&bih=907&scr_x=0&scr_y=20&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4347612559431098&tmod=1276184472&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeoE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1792	false		unknown
https://mc.yandex.com/webvisor/33590114?wv-part=2&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=137156753&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1716814871%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814871&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/webvisor/33590114?wv-part=1&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=613221953&browser-info=we%3A1%3Aet%3A1716814870%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090110%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814870&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/images/donate.png	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/manifest.json	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/images/abuse.png	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/getFilelist	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/sync_cookie_image_check_secondary	false	Avira URL Cloud: safe	unknown
https://cdn.bidbrain.app/compressedFonts/RobotoBold.woff2	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html#RS-0-&adk=1812271808&client=ca-pub-9678335887055925&fa=8&ifi=4&uci=a!4	false		unknown
https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html	false		unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=CAIqXEoRUZq7LD8Gd78EPgtSXmAe9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOkBT9DtPGeYQY5dYXYiBj0xruaMf1DEhRVGynZK6w48Ujl41s1YPYGOkYOeHnwQe97oPGQH0hefM4OQTmRK9is87HziHmkIVO0EeFPn3aSDtoDufow8b7k6amJVFY1EeWS0hifj7LDmnZUcELLtYABjxNzTh529P4wHkBv2BKadUbtokO9GZBiTODx8EiP32YbxhtXI0KAi1FCczvBC6nmsWM2BI4BoNaS0hSCvCvhn9TWKDRYF4MqYhV87SQGKWj58APy9zEhQ1PkFIlgKbhRGezn4zFWaRUTVRP1cLa9a3j8uNBULEHk3sDuABq_-tKHlnqO4kwGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAetvrEC2AcA0ggiCIBhEAEyAooCOgmAQIDAgICAoChIvf3BOliwhv3h8a2GA4AKAfoLAggBgAwB0BUBgBcBshcaChgSFHB1Yi05Njc4MzM1ODg3MDU1OTI1GAA&sigh=X-cx5vN0UcU&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLTW7u4oge14IuBjKtz3YT8jNF6w2C2f2dpMInZBKZdkhNtx6SNLsj0rEk5kU2Z30Vy-VDSFFKHeVSUvnj0Vh7CRDgM4E2fEuvdBgB&cbvp=2&vis=1	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/assets/504097ca/jquery.min.js	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/adview?ai=ChkXoEoRUZtabGPrV78EPi5KcyAW9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOoBT9AlBXsp115XZA7Amy_hNtZN7Fu4gGE0K_C2VEOzYhKFiTzi6z6F5bSB43mKXoWFjL0rhutsk1D7LCgTdJZVmsyPLS6iHWK6xDS3uYNkAHIRo2qMqVqABDQRBkP-wc6m2NgRWxnlFJlOwd8xLNYpS5AVzvKA-MhbiJo0PoYWk4H0BKkTlI_Dv39CQ7SkJna53Mqr0XWRmCK5qNfbcFwe_YfuwyZS6H7S8VI4DNgSq2eIQ8oFmKODii4u_asf7HU2op18-afZVnT8ogGJRPG6RVAIN4b1g-GhHBb8yN1jaxJBy1CERrewT5lhgAav_rSh5Z6juJMBoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpY9LeF4vGthgOACgH6CwIIAYAMAdAVAYAXAbIXGgoYEhRwdWItOTY3ODMzNTg4NzA1NTkyNRgA&sigh=BZmvZsc00Ug&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLNLBfoQVCmJOdffnJqi40f_xWMBJ0aoP0NYY3lCOpK9Ard5Y6VEggUHLn7qVkB0kkfAYylevaQD5lNX5wuqGnRSXClVGmF7emcxgB&cbvp=2&vis=1	false	Avira URL Cloud: safe	unknown
https://g.bidbrain.app/rtimp?sid=2e0e941e-1c29-11ef-9fb8-16c77870c855&d=transfiles.ru&cr=ext_continue_sqout_nd32&a=imp&p=ZlSEEgAD5a4CO87BAAXqAkO-BDQEmDBZTmf2Jw&im=ywfmR2pDhgFZ29M1QD0u7KbGNvKqoIeCNHh4KGkQ1dC2XSH5b7FXZyvz8fXBwrnP_j336behaBhG_l925hs-oP57YzR_SraPoWWNDaFhr11y_Lu1-P-fJrgIfZm2SFi9e_uJWGoA1WacgJ_5BBNOM88Y5rIKRcYHKI7inJGL1bvY7oqQ8cXdlucoAPyei5KnxwwgvgUwFwT2GCM3ZaLZryWSVhRAvSjj4bn3G0skWmojUUgxhDZY5pA1Q4FMtWNt0e-5w0CPeyryGO_fFIKaPBAXKYoUN-dDujfjxw3XKBjvd-3qhajYhJlX2qQgp7Ar&cbvp=2	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/webvisor/33590114?wv-part=2&wv-check=20957&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=25282607&browser-info=we%3A1%3Aet%3A1716814871%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814871&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/images/logo.png	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/js/jquery.mCustomScrollbar.concat.min.js	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/images/en.png	false	Avira URL Cloud: safe	unknown
https://cdn.bidbrain.app/ng-assets/creative/assets/polyfills-89a25f2d.js	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/getFiles/4002015	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/js/jquery.bxslider.min.js	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/sync_cookie_image_check	false	URL Reputation: safe	unknown
https://transfiles.ru/css/common.css?rnd=11	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/js/download.js?rnd=11	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/webvisor/33590114?wv-part=1&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=487012232&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1716814870%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090109%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814870&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
https://g.bidbrain.app/rtimp	false	URL Reputation: safe	unknown
https://mc.yandex.com/webvisor/33590114?wv-part=3&wv-check=38163&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=196412308&browser-info=we%3A1%3Aet%3A1716814872%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090112%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814872&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/images/ru.png	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/webvisor/33590114?wv-part=2&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=305471114&browser-info=we%3A1%3Aet%3A1716814872%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814872&t=gdpr(14)ti(1)	false	Avira URL Cloud: safe	unknown
https://transfiles.ru/css/jquery.mCustomScrollbar.css	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/metrika/metrika_match.html	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_161.1.dr	false	URL Reputation: safe	unknown
https://mc.yandex.	chromecache_140.1.dr	false	URL Reputation: safe	unknown
https://ampcid.google.com/v1/publisher:getClientId	chromecache_118.1.dr	false	URL Reputation: safe	unknown
https://www.google.com	chromecache_161.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://fundingchoicesmessages.google.com/i/%	chromecache_156.1.dr	false	URL Reputation: safe	unknown
https://quickchart.io/qr?text=	chromecache_158.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://stats.g.doubleclick.net/j/collect	chromecache_118.1.dr	false	URL Reputation: safe	unknown
https://cdn.ampproject.org/amp4ads-host-v0.js	chromecache_156.1.dr	false	URL Reputation: safe	unknown
https://s3.mds.yandex.net/internal-metrika-betas	chromecache_140.1.dr	false	URL Reputation: safe	unknown
https://googleads.g.doubleclick.net/pagead/html/$	chromecache_119.1.dr, chromecache_156.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://yastatic.net/s3/metrika	chromecache_140.1.dr	false	URL Reputation: safe	unknown
https://mc.yandex.md/cc	chromecache_140.1.dr	false	URL Reputation: safe	unknown
https://www.google.com/adsense	chromecache_119.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://yandex.com/an/sync_cookie	chromecache_140.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://adservice.google.com/pagead/regclk	chromecache_161.1.dr	false	1%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://cct.google/taggy/agent.js	chromecache_161.1.dr	false	URL Reputation: safe	unknown
http://mathiasbynens.be/	chromecache_156.1.dr	false	URL Reputation: safe	unknown
https://www.google.com/adsense/search/async-ads.js	chromecache_156.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://www.google.%/ads/ga-audiences	chromecache_118.1.dr	false	URL Reputation: safe	unknown
http://googleads.g.doubleclick.net	chromecache_135.1.dr, chromecache_156.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://bxslider.com	chromecache_136.1.dr, chromecache_176.1.dr	false	URL Reputation: safe	unknown
https://yastatic.net/s3/taxi-front/yango-gdpr-popup/	chromecache_140.1.dr	false	URL Reputation: safe	unknown
https://securepubads.g.doubleclick.net/static/topics/topics_frame.html	chromecache_156.1.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://google.com	chromecache_156.1.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/api2/aframe	chromecache_156.1.dr	false	Avira URL Cloud: safe	unknown
https://www.google.com/s2/favicons?sz=64&domain_url=	chromecache_156.1.dr	false	Avira URL Cloud: safe	unknown
http://stevenwanderski.com	chromecache_136.1.dr, chromecache_176.1.dr	false	URL Reputation: safe	unknown
http://www.apache.org/licenses/LICENSE-2.0	chromecache_145.1.dr	false	URL Reputation: safe	unknown
https://cse.google.com/cse.js	chromecache_156.1.dr	false	URL Reputation: safe	unknown
https://googleads.g.doubleclick.net	chromecache_135.1.dr, chromecache_156.1.dr	false	Avira URL Cloud: safe	unknown
https://tagassistant.google.com/	chromecache_118.1.dr	false	URL Reputation: safe	unknown
https://cdn.ampproject.org/rtv/$	chromecache_156.1.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT	chromecache_176.1.dr	false	URL Reputation: safe	unknown
https://yastatic.net/s3/gdpr/v3/gdpr	chromecache_140.1.dr	false	URL Reputation: safe	unknown
https://ymetrica1.com/watch/3/1	chromecache_140.1.dr	false	URL Reputation: safe	unknown
http://bxcreative.com	chromecache_136.1.dr, chromecache_176.1.dr	false	URL Reputation: safe	unknown
https://www.google.com/ads/ga-audiences	chromecache_118.1.dr	false	Avira URL Cloud: safe	unknown
https://td.doubleclick.net	chromecache_161.1.dr	false	URL Reputation: safe	unknown
https://www.merchant-center-analytics.goog	chromecache_161.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.176.164	cdn.bidbrain.app	United States	13335	CLOUDFLARENETUS	false
216.58.212.164	www.google.com	United States	15169	GOOGLEUS	false
65.108.228.44	transfiles.ru	United States	11022	ALABANZA-BALTUS	false
216.58.206.66	unknown	United States	15169	GOOGLEUS	false
87.250.250.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
93.158.134.119	unknown	Russian Federation	13238	YANDEXRU	false
172.217.16.194	unknown	United States	15169	GOOGLEUS	false
172.217.18.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.18

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1448031
Start date and time:	2024-05-27 15:00:01 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 8s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://transfiles.ru/vyjw4
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	SUS
Classification:	sus22.win@22/124@28/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 172.217.16.142, 74.125.71.84, 34.104.35.123, 142.250.186.34, 142.250.185.238, 142.250.181.234, 142.250.186.138, 216.58.206.74, 172.217.23.106, 142.250.186.74, 142.250.185.202, 142.250.184.202, 142.250.186.42, 216.58.212.170, 142.250.186.106, 172.217.16.138, 172.217.18.106, 172.217.16.202, 142.250.186.170, 142.250.74.202, 172.217.18.10, 142.250.186.110, 142.250.185.161, 142.250.185.104, 172.217.23.98, 142.250.185.98, 142.250.186.35, 142.250.184.238
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, clientservices.googleapis.com, pagead2.googlesyndication.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, www.googletagmanager.com, tpc.googlesyndication.com, update.googleapis.com, clients.l.google.com, www.google-analytics.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.

Simulations

Behavior and APIs

Time	Type	Description
09:01:08	API Interceptor	1x Sleep call for process: OpenWith.exe modified

LLM Input / Output

Input	Output
URL: https://transfiles.ru/vyjw4 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is for Yandex Metrica, a web analytics service. It does not contain any malicious elements and is used for tracking website metrics." }
(function(m,e,t,r,i,k,a){m[i]=m[i]\|\|function(){(m[i].a=m[i].a\|\|[]).push(arguments)}; m[i].l=1*new Date();k=e.createElement(t),a=e.getElementsByTagName(t)[0],k.async=1,k.src=r,a.parentNode.insertBefore(k,a)}) (window, document, "script", "https://mc.yandex.ru/metrika/tag.js", "ym"); ym(33590114, "init", { clickmap:true, trackLinks:true, accurateTrackBounce:true, webvisor:true });
URL: https://transfiles.ru/vyjw4 Model: gpt-4o	```json { "riskscore": 0, "reasons": "The provided JavaScript code is for Google Analytics, which is a common and legitimate tracking tool used by websites to gather visitor statistics. There are no indications of malicious behavior in this code." }
(function(i,s,o,g,r,a,m){i['GoogleAnalyticsObject']=r;i[r]=i[r]\|\|function(){ (i[r].q=i[r].q\|\|[]).push(arguments)},i[r].l=1*new Date();a=s.createElement(o), m=s.getElementsByTagName(o)[0];a.async=1;a.src=g;m.parentNode.insertBefore(a,m) })(window,document,'script','//www.google-analytics.com/analytics.js','ga'); ga('create', 'UA-72075365-1', 'auto'); ga('send', 'pageview');
URL: https://transfiles.ru/vyjw4 Model: gpt-4o	```json { "riskscore": 3, "reasons": "The code contains references to external URLs that are not well-known or commonly trusted domains. This could potentially be used for phishing or malicious activities. However, there are no immediate signs of malicious behavior in the provided code itself." }
var LANG = 'en'; var password = 'Password'; var error_try_again = 'Error. Try again.'; var reload_page = 'Reload the page.'; var err_msg = 'Error.'; var err_msg_tecworks = 'On the website there are technical works. Try again later.'; var error_msg = 'An error has occurred, try reloading the page.'; var g_ref = ''; var is_iframe = '0'1; var plink = 'https://usefulbox.ru/sadovod/'; var g_schema = 'https://'; var host_1 = 'https://transfiles1.ru'; var nt_msg_upload = 'File download complete.'; var nt_msg_link = 'The link is copied to the clipboard.'; var nt_msg_pass = 'The link and password are copied to the clipboard.'; var to_notify = '1'1;
URL: https://transfiles.ru/vyjw4 Model: gpt-4o	```json { "riskscore": 2, "reasons": "The provided JavaScript code primarily handles UI interactions and advertisement functionalities. There are no obvious signs of malicious behavior such as data exfiltration, credential stealing, or unauthorized access. The code does include some advertisement handling and tracking, which has been deemed as no risk. The only minor concern is the use of an iframe and dynamically setting innerHTML, which could potentially be exploited if not properly sanitized, but there is no direct evidence of malicious intent in the given code." }
/<![CDATA[/ jQuery(function($) { $('#menu_main .navbar_toggle_btn').click(function(){ $(this).toggleClass('active'); $('#menu_main, header, .adsgoogle_cont_header, .adsgoogle_cont_header_m').toggleClass('opened'); if($(this).hasClass('active')) $('ul.top_navigation').delay(200).queue(function(){ $(this).addClass('opened'); $(this).dequeue(); }); else $('ul.top_navigation').removeClass('opened'); }); if(is_iframe){ $('#iframe_wrapper').show(); } if($('#cookie_wrapper').length) $('#cookie_wrapper').fadeIn(500); /* / window.onload = function(){ setTimeout(function() { var ad = document.querySelector('ins.adsbygoogle'); if (ad && ad.innerHTML.replace(/\s/g, '').length == 0) { ad.style.cssText = 'display:block !important'; ad.innerHTML = '<a href="'+plink+'" class="sd_banner" target="_blank"></a>'; } var ad = document.querySelector('yatag'); if (ad && ad.innerHTML.replace(/\s/g, '').length == 0) { ad.style.cssText = 'display:block !important'; // ad.innerHTML = '<a href="'+plink+'" class="sd_banner" target="_blank">'+plink+'</a>'; ad.innerHTML = '<a href="'+plink+'" class="sd_banner" target="_blank"></a>'; } }, 2000); }; $('body').delegate('.sd_banner', 'click', function(){ $.ajax({ url : 'adsCountSd', async : true, type : 'POST', dataType : 'json', success : function(data, textStatus, xhr){}, error : function(xhr, textStatus, errorObj){} }); }); }); / */
URL: https://transfiles.ru/vyjw4 Model: gpt-4o	```json { "riskscore": 2, "reasons": "The JavaScript code provided does not exhibit any overtly malicious behavior. It appears to be related to file uploading and interaction with the VKontakte social media platform. However, the presence of password-related variables and error messages suggests that the site may be handling sensitive information. Without further context or a more detailed code review, it's difficult to fully assess the risk. Therefore, a low risk score is assigned, primarily due to the handling of passwords and potential for misuse." }
var DIP = 'https://transfiles.ru'; var UP_LINK = 'vyjw4'; var UP_URL = '4002015'; var UP_HOST = 'https://transfiles.ru'; var vk_img_max_cnt = '50'; var vsi_state = ''; var vk_process = '0'; var enter_pass = 'Enter the password'; var wrong_pass = 'Wrong password'; var err_msg_empty_complaint = 'Enter the complaint description'; var err_msg_email = 'Invalid email address'; var msg_complaint_sent = 'Your message has been sent.'; var msg_flist_error = '(Error while uploading)'; var vk_err_msg = 'Error. Try again later.'; var vk_err_msg_unavailable = 'The service is temporarily unavailable. Try again later.'; var vk_err_later = 'Error. Refresh the page.'; var vk_max_img_message = 'The maximum number of images to send to the "Vkontakte" - '; var vk_img_select = 'Select imgaes.'; var vk_msg_no_img = 'There are no images to send "Vkontakte".'; var vk_msg_no_img_selected = 'Not selected images to send "Vkontakte".'; var msg_img_converting = 'Converting images. Wait for the convert!'; var msg_no_img = 'There are no images to download.'; var msg_no_img_selected = 'Not selected images to download.'; var mid_msg_files = 'Files: '; var mid_msg_size = 'size: '; var text_dl_all = 'Download all'; var text_dl = 'Download'; var text_dl_vk = 'Load photos to VK'; var title_vk_btn = 'Load images in VKontakte, max number at a time - 50'; var text_dl_mid = 'Download previews'; var title_mid_btn = 'Download thumbnails, max quality - HD';
URL: https://transfiles.ru/vyjw4 Model: gpt-4o	```json { "phishing_score": 6, "brands": null, "phishing": true, "suspicious_domain": true, "has_loginform": false, "has_captcha": false, "setechniques": true, "reasons": "The domain name 'transfiles.ru' is not a well-known domain and could be suspicious. The site prompts for downloading a file, which is a common tactic used in phishing attacks to distribute malware. The presence of a 'Please donate' button and the overall design of the page suggest social engineering techniques to gain trust and encourage interaction. No login form or captcha is present, but the site still raises several red flags." }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 12:00:58 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2675
Entropy (8bit):	3.9729599908560886
Encrypted:	false
SSDEEP:	48:8Hv5dqT5G15oHnZidAKZdA1rehwiZUklqehiy+3:8HvOVG1qpy
MD5:	A64598E2FAEED6575444BC5A1E6CDC15
SHA1:	23435212F7D356A0735064293C7B788B4A9BC58E
SHA-256:	6EFD59A6D29351BFBA0C6F6713F2269AFC9A75D01B47E03D6423AED09879E153
SHA-512:	64A5D29415E3C6C5CF9C6CA7077BF4E9BF97B5781DA6E0195289FAF39C68121D64DDFA2FBA107986984E4D44AE082DDAAA8014F4A6E7DA7A6818BD0F2432FD2C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..../.a.5.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.h....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.h....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X.h....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X.h...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X h.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 12:00:58 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9902109327477038
Encrypted:	false
SSDEEP:	48:8q45dqT5G15oHnZidAKZdA1ceh/iZUkAQkqehZy+2:8BOVG1u9Qsy
MD5:	4BE3A53FD9FCBB6ED05B21D3B4B02A0B
SHA1:	E9FCE8404F87074F21ACDDC48B8CFE49934D062F
SHA-256:	EAAAA693AAED95EEF729AE674B3F647F5B794D7330C5C0B3FDB4ECC90E048518
SHA-512:	FFC3FF1414C55E5C2BA33B6E588181C09280A0C42B7C677E40D823BD14740F0CC1A9C7EB743AF91574B18CEB25A6EC067ABDAFC3D75ECE59F1C8AED56C870ED0
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......W.5.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.h....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.h....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X.h....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X.h...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X h.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 6 09:23:19 2023, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2691
Entropy (8bit):	3.997913582128897
Encrypted:	false
SSDEEP:	48:8XR5dqT5G1SHnZidAKZdA14Aeh7sFiZUkmgqeh7sLy+BX:8hOVG14ndy
MD5:	02B5990EF1B98ABEFBA54602DBE0DDC5
SHA1:	A7C2FD8665F46AFA1BD5E4691391DE95A03D154E
SHA-256:	8F7FBF46AF5B3EE88D520BF0A5BD1568F22909806592ABA69A3673E50972FFC6
SHA-512:	32BB4F901D70C99E3C613CDE004F0B3D20C2F868D24AA235FF4B7C9FB85402E20D04A4CEF814E8FE6E407A0BA1B523803A236468017429579EA5488CFE770B3F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....?.4 ?.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.h....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.h....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X.h....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X.h...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.VFW.R.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 12:00:58 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9853556186351633
Encrypted:	false
SSDEEP:	48:8l5dqT5G15oHnZidAKZdA1JehDiZUkwqehFy+R:8lOVG17Ty
MD5:	3A3B286EC9A98C2BB601C58F1011DAFE
SHA1:	AF60D6F15D1B73A74483F096141B11E3A326A073
SHA-256:	C9508C9A568689A11120F29D3F133C480943239D187EF89CBCF37944B28DEF81
SHA-512:	F9BFF77597C2EA8E38E5D860141933F44E95C52F161A3255C8DC04FB40DB019EC0746470D0420B942A3025EE8A6AD4EC3C2F9F7C89AEE67A0471290D3F1D9207
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....@.P.5.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.h....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.h....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X.h....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X.h...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X h.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 12:00:58 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.972623160942102
Encrypted:	false
SSDEEP:	48:8b5dqT5G15oHnZidAKZdA1XehBiZUk1W1qehPy+C:8bOVG179vy
MD5:	BC559EDA3F820AF03226D9BF9AFBFCF2
SHA1:	82B369273AA2B39ADD59F7087CB452CD06ED0C5A
SHA-256:	9D7A09DFAE7C25DD9C1857ABEF3D6CAE5EC2C2D145FF7E4259029B7F9293393B
SHA-512:	6D77935E37CBF099412C5DC620D15D842ED005347687B10043C40A63FCE3ED13F0D07E7077E6BDCCBFA7C4447A1AB06CAB1A1C7FDB7C146E96CCA551F8426D5A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......\.5.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.h....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.h....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X.h....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X.h...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X h.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon May 27 12:00:58 2024, atime=Mon Oct 2 20:46:57 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9859096467985506
Encrypted:	false
SSDEEP:	48:8H5dqT5G15oHnZidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbdy+yT+:8HOVG1VT/TbxWOvTbdy7T
MD5:	AA4BB9109BB6D875558779B2C5CF2F4C
SHA1:	9AD11D09971046D8116D82289E6B516EBF4A36E1
SHA-256:	6F974DD24FEB812E731AC8AFB238C1EB6CF74AE05B61FEAF527E9F84FDAC7C99
SHA-512:	5C1B9A3EEDD5748A68990DAE1DC8266483EC3CD19A98821CD44266627A31EF67C10CC1B39F891E4D5E7FD37D6C2D9AF5EBAB71E06156319E7DABD825E4E70C31
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....A.G.5.......y... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.R..PROGRA~1..t......O.I.X.h....B...............J......Y..P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X.h....L.....................p+j.G.o.o.g.l.e.....T.1.....FW.R..Chrome..>......CW.V.X.h....M......................pd.C.h.r.o.m.e.....`.1.....FW.R..APPLIC~1..H......CW.V.X.h...........................pd.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..BW. .CHROME~1.EXE..R......CW.V.X h.....#......................3.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............b.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\Desktop\Loader.exe

Download File

Process:	C:\Program Files\7-Zip\7zG.exe
File Type:	PE32+ executable (console) x86-64, for MS Windows
Category:	dropped
Size (bytes):	316416
Entropy (8bit):	5.572217622979975
Encrypted:	false
SSDEEP:	3072:HXn/+uIfNM27D0XLaqoi6gdHPojTP7zm/eJuNtA2+ys1NF9jXnyxtEB+:hsM27AXLaqJ7dv2Agu1Oiu+
MD5:	14E9EBF2C5C0DBC0DDAF0ADC2F52F1FB
SHA1:	030F80DBD243188D8823478E4A12EDE38119F983
SHA-256:	74CD8E4045801FE13C47FC28649F8DC50CD79BE8E5A14A2E2031E9A877156A38
SHA-512:	27AFC7E1A48AE99685C4F6D63F7FEAB2997483B77C025D1FF7E2F6D08F128CB5967D8BDCC8ACE6CB0C4E86BB4DC1CF6CD8BE342E65DE60A805D82D5250F75DED
Malicious:	false
Reputation:	low
Preview:	MZ......................@...............................................!..L.!This program cannot be run in DOS mode....$.......<n..x...x...x...3w..}...3w......3w..h.......r.......h.......)...3w..}...x.......h...y...h.N.y...h...y...Richx...................PE..d...8iSf.........."....(............@W.........@..........................................`.....................................................<....`......@..................8.......8...........................P...@............ ...............................text............................... ..`.rdata..J.... ......................@..@.data...H)..........................@....pdata.......@... ..................@..@.rsrc.......`......................@..@.reloc..8...........................@..B................................................................................................................................................................................................................................................

C:\Users\user\Downloads\7a171e63-c919-4223-98ab-f871613dd714.tmp

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RAR archive data, v5
Category:	dropped
Size (bytes):	32768
Entropy (8bit):	7.994722871737835
Encrypted:	true
SSDEEP:	768:lxUEvcINd/vq+SbT2cviVYcUUXEEMV44PIu3bkaL:PUM5NJSX2caVYcUUXaLp3PL
MD5:	E62DBC48EE39A22BF5806461E7E6EF26
SHA1:	6C45824674D7980316CC082118451416D421E498
SHA-256:	1155F38473EA52A3BB59B4E19A7C0208C2E9A8420FFF9B02A17474E18170FB47
SHA-512:	8BC5A03B460299651680999C0C9DB336E0AD1B60F18C07926A186D82D74E83938A3DEB59D116B5B967F9BBD3701BBD507CF35045C174F4BCB87991EFDC9CC6A3
Malicious:	false
Reputation:	low
Preview:	Rar!.......V................TY..<....... 5.;0....Loader.exe0....Ad..X ..6..2.=n......>.+S......o..F...r..K...>.u.3...+.a.f...\|.}..o...E..K".O.'NkI..3.(an..I.k..eR.n.R.....1=....F.E..F..W......7.1..S.]?TL...H....Q...K.+.............kHf..o./...b...5.a.b..T.#........W.U.P}.G.T'.\s...$u9..R.z'.n.l....9(...Z:n9y..........\........?.....U....0......Z.......w.2&...zWo..\|\.9.5..34.w........o..A.#.(.k#9..c.l..M.)....VR..]..&...P..X.../B$U.L...3>.......l.>l\|./._......jK....sS`O..c...U..M.....Ns^.....H...rt.......Eght....l..h..j.\|.J.."...<`.T .t.cu....Rjz...BZ...j.F....~.r.2.....L......[K.<rnc.`B..X...3....5.,.`..M\|bI_.Bl....=!..7-..N.i....k1.S.}....?`.i8....C..<....o.H..g.S...Ag.~58.:T..;.;...U.S6.-..j...6.\lV&6#3..(Q..LV^O..p..J.^+'..........4%)Xl.4...].....32.fd....IX...G..WC..h..f.@.t..S.r.....YY. :2j.....Y../$B....i..Q..L2P.^!...Q.V".5l...0"s4I........5..}......l..E.#.9]<.v.l!z......l.v..r....&..5.~.T.9...-.iS&..=..E..4.....{.^.',.3.]..t.C......./

C:\Users\user\Downloads\Loader.rar (copy)

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RAR archive data, v5
Category:	dropped
Size (bytes):	103466
Entropy (8bit):	7.9978227161458575
Encrypted:	true
SSDEEP:	1536:PUM5NJSX2caVYcUUXaLp3PGVeYHyw2D6Vpihf5cAKiEdzNqO3oZtj2D9B7BB:nTSXmKLp3PqeW20oKzhR9B7/
MD5:	A103FD8F0D0044D64C2F9A19F63642DE
SHA1:	394CE99D8E25B03D469D915D78DCEC3CE0F3F612
SHA-256:	094C0E4E1AC6678644A10DEA7D6955502973FAC00B7FF5CF654E6601B405DCE8
SHA-512:	F42920ED48A0CCF443DF1FFB470D356B206D517126E12827D5E2E06BAC5CDBA5C49764A59B3AB51C4396F3D5EA9F475CAC65FF6E3328B2DEE5BC0F92FD8DA644
Malicious:	true
Reputation:	low
Preview:	Rar!.......V................TY..<....... 5.;0....Loader.exe0....Ad..X ..6..2.=n......>.+S......o..F...r..K...>.u.3...+.a.f...\|.}..o...E..K".O.'NkI..3.(an..I.k..eR.n.R.....1=....F.E..F..W......7.1..S.]?TL...H....Q...K.+.............kHf..o./...b...5.a.b..T.#........W.U.P}.G.T'.\s...$u9..R.z'.n.l....9(...Z:n9y..........\........?.....U....0......Z.......w.2&...zWo..\|\.9.5..34.w........o..A.#.(.k#9..c.l..M.)....VR..]..&...P..X.../B$U.L...3>.......l.>l\|./._......jK....sS`O..c...U..M.....Ns^.....H...rt.......Eght....l..h..j.\|.J.."...<`.T .t.cu....Rjz...BZ...j.F....~.r.2.....L......[K.<rnc.`B..X...3....5.,.`..M\|bI_.Bl....=!..7-..N.i....k1.S.}....?`.i8....C..<....o.H..g.S...Ag.~58.:T..;.;...U.S6.-..j...6.\lV&6#3..(Q..LV^O..p..J.^+'..........4%)Xl.4...].....32.fd....IX...G..WC..h..f.@.t..S.r.....YY. :2j.....Y../$B....i..Q..L2P.^!...Q.V".5l...0"s4I........5..}......l..E.#.9]<.v.l!z......l.v..r....&..5.~.T.9...-.iS&..=..E..4.....{.^.',.3.]..t.C......./

C:\Users\user\Downloads\Loader.rar.crdownload

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RAR archive data, v5
Category:	dropped
Size (bytes):	103466
Entropy (8bit):	7.9978227161458575
Encrypted:	true
SSDEEP:	1536:PUM5NJSX2caVYcUUXaLp3PGVeYHyw2D6Vpihf5cAKiEdzNqO3oZtj2D9B7BB:nTSXmKLp3PqeW20oKzhR9B7/
MD5:	A103FD8F0D0044D64C2F9A19F63642DE
SHA1:	394CE99D8E25B03D469D915D78DCEC3CE0F3F612
SHA-256:	094C0E4E1AC6678644A10DEA7D6955502973FAC00B7FF5CF654E6601B405DCE8
SHA-512:	F42920ED48A0CCF443DF1FFB470D356B206D517126E12827D5E2E06BAC5CDBA5C49764A59B3AB51C4396F3D5EA9F475CAC65FF6E3328B2DEE5BC0F92FD8DA644
Malicious:	false
Reputation:	low
Preview:	Rar!.......V................TY..<....... 5.;0....Loader.exe0....Ad..X ..6..2.=n......>.+S......o..F...r..K...>.u.3...+.a.f...\|.}..o...E..K".O.'NkI..3.(an..I.k..eR.n.R.....1=....F.E..F..W......7.1..S.]?TL...H....Q...K.+.............kHf..o./...b...5.a.b..T.#........W.U.P}.G.T'.\s...$u9..R.z'.n.l....9(...Z:n9y..........\........?.....U....0......Z.......w.2&...zWo..\|\.9.5..34.w........o..A.#.(.k#9..c.l..M.)....VR..]..&...P..X.../B$U.L...3>.......l.>l\|./._......jK....sS`O..c...U..M.....Ns^.....H...rt.......Eght....l..h..j.\|.J.."...<`.T .t.cu....Rjz...BZ...j.F....~.r.2.....L......[K.<rnc.`B..X...3....5.,.`..M\|bI_.Bl....=!..7-..N.i....k1.S.}....?`.i8....C..<....o.H..g.S...Ag.~58.:T..;.;...U.S6.-..j...6.\lV&6#3..(Q..LV^O..p..J.^+'..........4%)Xl.4...].....32.fd....IX...G..WC..h..f.@.t..S.r.....YY. :2j.....Y../$B....i..Q..L2P.^!...Q.V".5l...0"s4I........5..}......l..E.#.9]<.v.l!z......l.v..r....&..5.~.T.9...-.iS&..=..E..4.....{.^.',.3.]..t.C......./

Chrome Cache Entry: 112

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (43121), with no line terminators
Category:	downloaded
Size (bytes):	43121
Entropy (8bit):	5.1398562444532185
Encrypted:	false
SSDEEP:	768:hHtjRbNWmYd7ZIt6vwIR71rnk6BcxL+zhRNxA5l2ng7ytcKaWDxQ:hHtjRsmYd7ZIt6JRw
MD5:	F17DB6963415584ED6F3592A05694A86
SHA1:	B06DC62EDF9D44A8E16A86F51459B5D9EC7BB73B
SHA-256:	072DD12D521DC5871A870DACFF4A8AC61ABDB47901952659A3076DCB55179EA7
SHA-512:	D02E9B55F82870328A1965EC83CAF9DAC87456747CEBEEB101788D5B99698DD473487B4799E74967C5B21BBEE95F63B6FC9D0AF9D40A168427ACA05B312BB8FE
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/css/jquery.mCustomScrollbar.css
Preview:	.mCustomScrollbar{-ms-touch-action:pinch-zoom;touch-action:pinch-zoom}.mCustomScrollbar.mCS_no_scrollbar,.mCustomScrollbar.mCS_touch_action{-ms-touch-action:auto;touch-action:auto}.mCustomScrollBox{position:relative;overflow:hidden;height:100%;max-width:100%;outline:0;direction:ltr}.mCSB_container{overflow:hidden;width:auto;height:auto}.mCSB_inside>.mCSB_container{margin-right:0}.mCSB_container.mCS_no_scrollbar_y.mCS_y_hidden{margin-right:0}.mCS-dir-rtl>.mCSB_inside>.mCSB_container{margin-right:0;margin-left:30px}.mCS-dir-rtl>.mCSB_inside>.mCSB_container.mCS_no_scrollbar_y.mCS_y_hidden{margin-left:0}.mCSB_scrollTools{position:absolute;width:4px;height:auto;left:auto;top:0;right:0;bottom:0}.mCSB_outside+.mCSB_scrollTools{right:-26px}.mCS-dir-rtl>.mCSB_inside>.mCSB_scrollTools,.mCS-dir-rtl>.mCSB_outside+.mCSB_scrollTools{right:auto;left:0}.mCS-dir-rtl>.mCSB_outside+.mCSB_scrollTools{left:-26px}.mCSB_scrollTools .mCSB_draggerContainer{position:absolute;top:0;left:0;bottom:0;right:0;height

Chrome Cache Entry: 113

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65483)
Category:	downloaded
Size (bytes):	93636
Entropy (8bit):	5.292860855150671
Encrypted:	false
SSDEEP:	1536:s6IzxETpavYSGaW4snuHEk/yosnSFngC/VEEG0vd0KO4emAp2LSEMBoviR+I1z5T:O+vIklosn/BLXjxzMhsSQ
MD5:	3576A6E73C9DCCDBBC4A2CF8FF544AD7
SHA1:	06E872300088B9BA8A08427D28ED0EFCDF9C6FF5
SHA-256:	61C6CAEBD23921741FB5FFE6603F16634FCA9840C2BF56AC8201E9264D6DACCF
SHA-512:	27D41F6CFB8596A183D8261509AEB39FCFFB3C48199C6A4CE6AB45381660C2E8E30E71B9C39163C78E98CEABC887F391B2D723EE5B92B6FBC81E48AC422E522B
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/assets/504097ca/jquery.min.js
Preview:	/! jQuery v1.8.3 jquery.com \| jquery.org/license /.(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(i);if(typeof r=="string"){try{r=r==="true"?!0:r==="false"?!1:r==="null"?null:+r+""===r?+r:D.test(r)?v.parseJSON(r):r}catch(s){}v.data(e,n,r)}else r=t}return r}function B(e){var t;for(t in e){if(t==="data"&&v.isEmptyObject(e[t]))continue;if(t!=="toJSON")return!1}return!0}function et(){return!1}function tt(){return!0}function ut(e){return!e\|\|!e.parentNode\|\|e.parentNode.nodeType===11}function at(e,t){do e=e[t];while(e&&e.nodeType!==1);return e}function ft(e,t,n){t=t\|\|0;if(v.isFunction(t))return v.grep(e,function(e,r){var i=!!t.call(e,r,e);return i===n});if(t.nodeType)return v.grep(e,function(e,r){return e===t===n});if(typeof t=="string"){var r=v.grep(e,function(e){return e.nodeType===1});if(it.test(t))return v.filter(t,r,!n);t=v.filter(t,

Chrome Cache Entry: 114

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	downloaded
Size (bytes):	3197
Entropy (8bit):	7.567645085093109
Encrypted:	false
SSDEEP:	48:3xiyw10Mgv9EDOqdtt5qUEqDaj+FibxhB9AMoCub4DzlpQhUMgdYXDU:3xG0MqkTdEvjFxhXoQVHR
MD5:	F23A0ED5E938245E48793816B17F3300
SHA1:	39D2680B2D664131D51C2C7D9530DE5F4E13A0AD
SHA-256:	9A380B47A2623EFCA3AB7F6A09893CEDD9D0294139439430B42984AA8C71D72A
SHA-512:	3DDE16D209B8EF26879903CBD8BE82B5F877D955D5D3F8FD96BB35757C52B584A74F222CB51DFAD9B5B39E087915AEE2B2E227E0B67F3F96B44A0EDA53BE5437
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/images/loader.gif
Preview:	GIF89a . ..................777WWW.........................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . .@....I)Y..:J..(.......!.p.o4..C.H..N...%..j...%Y8'+.rB.0.... .Fs.Z4\|....A..\...Ia.n.Ya...1h.8:q.C.y....g,.S\)_..Q?e.....+..S.....5.#.lO<...#..vY...J;v\....aU}L.. 5....{\|q..&k....23.87......._.X...`.......+..=L.....).qX...&Aq"..!.......,.... . .@....I)Q..z.H.Q..F,..$C{Hl+g[=....T........@..r.X,J.I..N^V....r......h....TP..lh......N.x<.cQ3`r.7_...X5g-UD[.+2..1Xe......_.r.....\|V.#..w.'.n...LK..N...F:w.N.W-cS.X..h.3.W..r[.......7...^..Y.5..^HY.......x...,..ee.....9+..n;..S.,...!.......,.... . .@....I.(..F:.!.YE(.t.. %C,..6.."u.8.1.L"..4#..PhN....89....j.a_...60....WrHT..lt=...L'"...@2.fT,,}tt7....[..1)\4.d^Gd>h.....0x.T....$t.#~p..Qqt.ION.....I:......,.UaF..5.......ak..ST....7......X.G]....t....].....me.hh].....fG9,....w...."..!.......,.... . .@....Ii...F:.0..P....R"..&.Km+..!.J/.L.....C...J.".. .N...K.....$....R..\.'[...,.8..+...Tvoo67M..i.

Chrome Cache Entry: 115

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	20514
Entropy (8bit):	5.12700785187407
Encrypted:	false
SSDEEP:	384:nRyYKM56tldcUTFGC09BeJw7I65b7IOGUtTM6m:nQbOj7IYb7IOG0TM6m
MD5:	1019B453EBE2F71D8CE1B4CC4804EC55
SHA1:	02E3454D1CCD7247521DB2C3B3E5FCD7A72E37B5
SHA-256:	9FC6A77284C6B5D46B25240FB3D5CB59533D64721129854B03E48A68BCE7DBAF
SHA-512:	AA24A6BE390D50DA866A8523B815C32B31CAF933381C0BE2749D3196E7CCFC91758A3307EC239B25D5A14BD6A5028BB1A109A57B970EF3881E8E0D66CE6DDDDD
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/js/download.js?rnd=11
Preview:	$(function(){.....if(is_iframe){....return false;...}.....var files_to_dl = [];...var files_to_dl_old = [];...var files_total = 0;...var dl_size = 0;...var dl_delay = 5000;...var mid_delay = 5000;...var gal_delay = 3000;......var vk_images_to_dl = [];...var vk_images_total = 0;...var images_to_dl = [];...var images_total = 0;......if(typeof vsi_state != 'undefined' && vsi_state != null && vsi_state != '')....files_to_dl_old = vsi_state.split(',');......// vk get images...if(typeof vk_process != 'undefined' && vk_process == 1){....var vk_overlay = $('#vk_process_wrapper');....var vk_block = $('.vkp_block span', vk_overlay);....var vk_close = $('.vkp_close', vk_overlay);....var vk_loader = $("#vkp_loader");....$(vk_close).hide();....$(vk_overlay).show();....$(vk_loader).show();........var dl_all = (files_to_dl_old.length>0) ? false : true;......var vk_opts = {'link': UP_LINK};....if(!dl_all){.....var str = files_to_dl_old.join();.....vk_opts.chosen = str;....}......sendAjax('getToVk', vk

Chrome Cache Entry: 116

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	13746
Entropy (8bit):	5.107989095463168
Encrypted:	false
SSDEEP:	384:DUeEYwsM9trMUpEzMYatQpEzCRq1X9orV5aExkUYHTHhQ09yLbuJ+fuV8:9FytAb4E+ouJS
MD5:	070816AE748DBF9E67F3A5144AEEB68A
SHA1:	DB90D608076AF46C3C4626118E2522CA9EC2C8AF
SHA-256:	73D3D28D5DC18DEDD5748B4B506E44CAFBFA836ED3A04117E6BE7E72B7F2E1A5
SHA-512:	1CC50A3A0F8EEE4F7EEB7B107E0DC6AB05786C0C6D62AC7DE33C11FBB5E27A208932FD7BF58704586E2E0C6C494977CF7F5B93529CF667E38A0FCD008998940F
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/css/common_m.css?rnd=11
Preview:	@media screen and (max-width: 1250px) {..#logo{...position:absolute;...margin-left:-500px;..}..ul.top_navigation{...margin-left:-370px;..}..#lang_selector{...margin-left:260px;..}..#title{...margin-left:-300px;..}...adsgoogle_cont_header{...margin-left:-30px;...width:640px;..}..#dl_descr{...display:inline-block;..}.}.@media screen and (max-width: 1050px) {..#logo{...margin-left:-400px;..}..ul.top_navigation{...margin-left:-270px;..}..ul.top_navigation li a[data-donate]{...width:130px;..}..ul.top_navigation li a[data-vk_group]{.../width:130px;/..}..#lang_selector{...margin-left:340px;..}..#lang_selector a{...padding-right:2px;..}..#title{...margin-left:-210px;..}...adsgoogle_cont_header{.../top:135px;/...top:145px;...margin-left:-260px;...width:728px;..}...adsgoogle_cont_footer{.../margin-left:20px;/...width:100%;..}...adsgoogle_cont_under_header{...width:100%;.../margin-left:0;/.../margin-right:0;/..}...drop_zone,...download_zone{.../margin-top:90px;/...margin-top:0px;..}..

Chrome Cache Entry: 117

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2343)
Category:	downloaded
Size (bytes):	52916
Entropy (8bit):	5.51283890397623
Encrypted:	false
SSDEEP:	768:oHzaMKHBCwsZtisP5XqYofL+qviHOlTjdNoVJDe6VyKaqgYUD0ZTTE8yVfZsk:caMKH125hYiM8O9dNoVJ3N48yVL
MD5:	575B5480531DA4D14E7453E2016FE0BC
SHA1:	E5C5F3134FE29E60B591C87EA85951F0AEA36EE1
SHA-256:	DE36E50194320A7D3EF1ACE9BD34A875A8BD458B253C061979DD628E9BF49AFD
SHA-512:	174E48F4FB2A7E7A0BE1E16564F9ED2D0BBCC8B4AF18CB89AD49CF42B1C3894C8F8E29CE673BC5D9BC8552F88D1D47294EE0E216402566A3F446F04ACA24857A
Malicious:	false
Reputation:	low
URL:	https://www.google-analytics.com/analytics.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var n=this\|\|self,p=function(a,b){a=a.split(".");var c=n;a[0]in c\|\|"undefined"==typeof c.execScript\|\|c.execScript("var "+a[0]);for(var d;a.length&&(d=a.shift());)a.length\|\|void 0===b?c=c[d]&&c[d]!==Object.prototype[d]?c[d]:c[d]={}:c[d]=b};function q(){for(var a=r,b={},c=0;c<a.length;++c)b[a[c]]=c;return b}function u(){var a="ABCDEFGHIJKLMNOPQRSTUVWXYZ";a+=a.toLowerCase()+"0123456789-_";return a+"."}var r,v;.function aa(a){function b(k){for(;d<a.length;){var m=a.charAt(d++),l=v[m];if(null!=l)return l;if(!/^[\s\xa0]*$/.test(m))throw Error("Unknown base64 encoding at char: "+m);}return k}r=r\|\|u();v=v\|\|q();for(var c="",d=0;;){var e=b(-1),f=b(0),h=b(64),g=b(64);if(64===g&&-1===e)return c;c+=String.fromCharCode(e<<2\|f>>4);64!=h&&(c+=String.fromCharCode(f<<4&240\|h>>2),64!=g&&(c+=String.fromCharCode(h<<6&192\|g)))}};var w={},y=function(a){w.TAGGING=w.TAGGING\|\|[];w.TAGGING[a]=!0};var ba=Array.isArray,c

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3968)
Category:	downloaded
Size (bytes):	150871
Entropy (8bit):	5.598443625209123
Encrypted:	false
SSDEEP:	3072:jlK3p0l44365XNtn+hLYu2b88wT3OBUfV7cJhKrPV3J7lLsmAKyHpvhXRenFS:jw3pf4365XNtn+hMFo8UeB2V7KhKZ3JW
MD5:	874C2F4C35C3545D7ED3E74EC322EE1E
SHA1:	43D7FCD4336D1B31C2CA02667130C9239E4BC7C5
SHA-256:	4E2D6F71C7111B55A2AF902F1648499CA00C25F7210D8719E8442BC3FE11412B
SHA-512:	C61FCE5EE56EB082794A91C5E39D111E6D28A6F068C48F08DF6B48027046F38FF07AB1573F7FE37F3DB4B06409645D954605712D8DD53CAE37A5FFBE6F6F41B8
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/js/adsbygoogle.js
Preview:	(function(sttc){'use strict';var aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var n=this\|\|self;function ba(a){var b=ca("CLOSURE_FLAGS");a=b&&b[a];return null!=a?a:!1}function ca(a){a=a.split(".");for(var b=n,c=0;c<a.length;c++)if(b=b[a[c]],null==b)return null;return b}function da(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function ea(a){return Object.prototype.hasOwnProperty.call(a,fa)&&a[fa]\|\|(a[fa]=++ha)}var fa="closure_uid_"+(1E9Math.random()>>>0),ha=0;function ia(a,b,c){return a.call.apply(a.bind,arguments)} .function ja(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}}function ka(a,b,c){ka=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ia:ja;return ka.apply(null,argu

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjst7mRmDpa_55z7QeMI1-zYDfVxtWgVKYrys6kwlq9WH2s279Nq8X9zn-KOninTsDECDUXamk8Blljjr747af-1IsjNRRl6N9BKkIJ7cb7M-Q5f_SSq-jhJn3wQHDnd8lDwQQeZJqhU&sig=Cg0ArKJSzLIUBchFdWKwEAE&id=lidar2&mcvt=1004&p=0,0,124,1005&mtos=1004,1004,1004,1004,1004&tos=1004,0,0,0,0&v=20240522&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=1812271801&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=4&r=v&co=1274766700&rst=1716814867238&rpt=2057&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsuCjdp2FU9y1ah2L_dfZrGEAlJ3wIcrL-qNDrvvrUy9KBl4HUVDtU9GW1Zv1Ccz_iaXUgajKaxxYk_TCitrBGT2HyyvAKzOtalRY3xcmCNoaTaEBkyu8F2f-fWlxouttOruHzF3i4Q&sig=Cg0ArKJSzI6zbWnWVLtHEAE&id=lidar2&mcvt=1011&p=0,0,280,970&mtos=1011,1011,1011,1011,1011&tos=1011,0,0,0,0&v=20240522&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=642103812&rs=2&la=1&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=4&r=v&co=1274766600&rst=1716814864102&rpt=4044&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32003)
Category:	downloaded
Size (bytes):	40854
Entropy (8bit):	5.421173737677506
Encrypted:	false
SSDEEP:	768:nAGHYQtB8qAaeX2VSLUOxJV/v4mW/qjuxmt1UJyCK:nAGHPeUSLUOxJxJj/
MD5:	43DABD6DBD8745FB808E146D96266E30
SHA1:	9E782B5432F89CEE0922F2C27C8CF51FF0839784
SHA-256:	150B9F119F532D05A6A0EECA49D36BC7A01F8EC912BAC67AF2A34309EE320BF3
SHA-512:	252BD8880FCD4592305EEA2BEE05A5DDE1E854623EAFE42FB1F964DB5606E7A620815629AE2D4C1000FB4CCF635F960CA84CD5288CAADE2320B2BE4F0FABC6D4
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/js/jquery.mCustomScrollbar.concat.min.js
Preview:	/* == jquery mousewheel plugin == Version: 3.1.12, License: MIT License (MIT) /.!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function b(b){var g=b\|\|window.event,h=i.call(arguments,1),j=0,l=0,m=0,n=0,o=0,p=0;if(b=a.event.fix(g),b.type="mousewheel","detail"in g&&(m=-1g.detail),"wheelDelta"in g&&(m=g.wheelDelta),"wheelDeltaY"in g&&(m=g.wheelDeltaY),"wheelDeltaX"in g&&(l=-1g.wheelDeltaX),"axis"in g&&g.axis===g.HORIZONTAL_AXIS&&(l=-1m,m=0),j=0===m?l:m,"deltaY"in g&&(m=-1g.deltaY,j=m),"deltaX"in g&&(l=g.deltaX,0===m&&(j=-1l)),0!==m\|\|0!==l){if(1===g.deltaMode){var q=a.data(this,"mousewheel-line-height");j=q,m=q,l=q}else if(2===g.deltaMode){var r=a.data(this,"mousewheel-page-height");j=r,m=r,l=r}if(n=Math.max(Math.abs(m),Math.abs(l)),(!f\|\|f>n)&&(f=n,d(g,n)&&(f/=40)),d(g,n)&&(j/=40,l/=40,m/=40),j=Math[j>=1?"floor":"ceil"](j/f),l=Math[l>=1?"floor":"ceil"](l/f),m=Math[m>=1?"floor":"ceil"](m/f),

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2628)
Category:	downloaded
Size (bytes):	22352
Entropy (8bit):	5.509617207980025
Encrypted:	false
SSDEEP:	384:ueZ81Ud3GnGF811lXR3X/UGxT7nPBPmcLl0i8CJnuXVrccmcJ125tUrcy8t3oxcv:3mUd2nnZXRn8GxT7pPmcQSnuXlccD242
MD5:	EF8C18C755ED2CB4EA0264A9F1429E83
SHA1:	EA5D16786CF9067C7AB38250270C3E1359BBCCF6
SHA-256:	387F51193D101BF8D3EFBD1D2D5BC5B6808D8631BB76A9FCFA4434D3AFC0927E
SHA-512:	AD5D535183E295920543299EF10A66A333B161EB0D6A014FDB7BE4F36CC1C947233AAD88786AFB0C7D28864B15E9A668C41A696F2B28E7F351EEB1CD21308533
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240522/r20110914/elements/html/interstitial_ad_frame_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=n,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)};var da=aa(610401301),ea=aa(188588736);var t;const fa=n.navigator;t=fa?fa.userAgentData\|\|null:null;function ha(a){return da?t?t.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function u(a){var b;a:{if(b=n.navigator)if(b=b.userAgent)break a;b=""

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (11822)
Category:	downloaded
Size (bytes):	11824
Entropy (8bit):	5.292619528247774
Encrypted:	false
SSDEEP:	192:O9d9uZiYBGsjBHN5whvID3YMYSPSWQ55aTkcfChQY+DdlZ7hJfLHmJIBu:EeusNHHwlIDhPSZ550kcfChQtvJfxBu
MD5:	CABAD8A4033AEA2EED4FCFB729319C61
SHA1:	49CD247EA3CD94B642DC5F921DD335CAFFC887DE
SHA-256:	96D1974B5D01FBF0829F69376354B234717907FFD401D4F23E92C06757F29A8B
SHA-512:	590D16DE768A00849950EB29FD23118448C2AD135FF4193B1BB836E24B55C8DDD0011C8BDC219A1B5C3496FF5FACD262565329ADD3FC04CCD274475CA46CC901
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/polyfills-89a25f2d.js
Preview:	export function __vite_legacy_guard(){import.meta.url;import("_").catch(()=>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=function(t){return t&&t.Math===Math&&t},r=n("object"==typeof globalThis&&globalThis)\|\|n("object"==typeof window&&window)\|\|n("object"==typeof self&&self)\|\|n("object"==typeof t&&t)\|\|n("object"==typeof t&&t)\|\|function(){return this}()\|\|Function("return this")(),e={},o=function(t){try{return!!t()}catch(n){return!0}},i=!o((function(){return 7!==Object.defineProperty({},1,{get:function(){return 7}})[1]})),u=!o((function(){var t=function(){}.bind();return"function"!=typeof t\|\|t.hasOwnProperty("prototype")})),c=u,a=Function.prototype.call,f=c?a.bind(a):function(){return a.apply(a,arguments)},l={},s={}.propertyIsEnumerable,p=Object.getOwnPropertyDescriptor,y=p&&!s.call({1:2},1);l.f=y?function(t){var n=p(this,t);return!!n&&n.enumerable}:s

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 22, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	624
Entropy (8bit):	7.24995556838833
Encrypted:	false
SSDEEP:	12:6v/7EkpzBoAEBAzjaFnctqEeHo1UMQS+XljP/JgvLNkDsUcN:BAEsaFnctOHo1UzS+VbhyRqsUO
MD5:	8CD4697B378BDB77799A1D5DB2FE50C1
SHA1:	62FD3D785855F110D2B45583488B03F1F6CE9B22
SHA-256:	667D1872D646EFC435C01A6AF873B637545E011790236C6AEC3A0CEBD37B14FD
SHA-512:	4A0197BF2F9658E258E28B0D2333E7FC87AD72DB996C7EFEA950419B057C18002FA98D4A8364B14A4BD06F1000F8E4E5B907956B14E7A0EC166FD25A12F26241
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/images/btn_qrcode.png
Preview:	.PNG........IHDR..............j......PLTE.................333444555666777999;;;>>>???@@@AAAIIIJJJLLLNNNSSSUUUVVVYYY[[[\\\^^^bbbfffjjjkkklllmmmpppqqqrrrssstttuuuwwwxxx\|\|\|}}}......................................................................................................................................r....tRNS. 0P....{4-.....IDAT..u.Y[.P.E.3V..b3.E.%`.e%1Tb.I...#=\-...^..{....(....". (.F.fV.A............."R....sO.4,.E.......l.......%.@$..3<..w....U...T.L.Z....p.....J....?z.t>..8b...Yr...^._?_.f...:.3GVr.v..a....&....k~.........\|........-...j..gq...(6[.!.3.o...d.i-..yU...7C.h.L....anR.5h....IEND.B`.

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 111 x 111, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5827
Entropy (8bit):	7.919369335044232
Encrypted:	false
SSDEEP:	96:txMY/VPIj1XidmutGXwp7sJNy/N7JM/Naek1v94VVBgc0rPusmkgsyRohoCG:T5o1yEu4XoaN07JMFNmv94R4PhmkglR/
MD5:	498B23DE0554C143497C5D7B2851D576
SHA1:	17AF9E7ABA65AAF735DEA827CF5FE289FE26E18C
SHA-256:	65D1456BE6662023DA53E43FE6969523B439F1C1BBE4C50D83A03140E2F4DF34
SHA-512:	28612240511EC0BE6930E0CC03F7214D0713A6436BC63CE26FEEBDFCE80EDB883B78E567CC3ACAE8D95A4190A764E401692FC711C7670C0A5E37FBA480D03F0E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...o...o.......nR....gAMA......a.....sRGB.........PLTE......................................................................s.............................s................z............&...........;.....<....0...................H...............h.....1............................g............................c....p..t...............U.............T....J.G.........9...`.....f.1..........................&........................u......:.>................b........j.p....%..................................H.........................B..........~........... ....................,................I...I.J..............}.....^..................Q.......................d........z........W...}................1D.g....tRNS...,D....:.(3.#8A;w.`...CIDATh.\|Yk.]U..D..M..w?.kg.e.N........."4M...&.H.cL...d:"T.......HP.C*.(.....(..h\|..\|..G.h...s.....if..g...[.Z.......

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RAR archive data, v5
Category:	downloaded
Size (bytes):	103466
Entropy (8bit):	7.9978227161458575
Encrypted:	true
SSDEEP:	1536:PUM5NJSX2caVYcUUXaLp3PGVeYHyw2D6Vpihf5cAKiEdzNqO3oZtj2D9B7BB:nTSXmKLp3PqeW20oKzhR9B7/
MD5:	A103FD8F0D0044D64C2F9A19F63642DE
SHA1:	394CE99D8E25B03D469D915D78DCEC3CE0F3F612
SHA-256:	094C0E4E1AC6678644A10DEA7D6955502973FAC00B7FF5CF654E6601B405DCE8
SHA-512:	F42920ED48A0CCF443DF1FFB470D356B206D517126E12827D5E2E06BAC5CDBA5C49764A59B3AB51C4396F3D5EA9F475CAC65FF6E3328B2DEE5BC0F92FD8DA644
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/getFiles/4002015
Preview:	Rar!.......V................TY..<....... 5.;0....Loader.exe0....Ad..X ..6..2.=n......>.+S......o..F...r..K...>.u.3...+.a.f...\|.}..o...E..K".O.'NkI..3.(an..I.k..eR.n.R.....1=....F.E..F..W......7.1..S.]?TL...H....Q...K.+.............kHf..o./...b...5.a.b..T.#........W.U.P}.G.T'.\s...$u9..R.z'.n.l....9(...Z:n9y..........\........?.....U....0......Z.......w.2&...zWo..\|\.9.5..34.w........o..A.#.(.k#9..c.l..M.)....VR..]..&...P..X.../B$U.L...3>.......l.>l\|./._......jK....sS`O..c...U..M.....Ns^.....H...rt.......Eght....l..h..j.\|.J.."...<`.T .t.cu....Rjz...BZ...j.F....~.r.2.....L......[K.<rnc.`B..X...3....5.,.`..M\|bI_.Bl....=!..7-..N.i....k1.S.}....?`.i8....C..<....o.H..g.S...Ag.~58.:T..;.;...U.S6.-..j...6.\lV&6#3..(Q..LV^O..p..J.^+'..........4%)Xl.4...].....32.fd....IX...G..WC..h..f.@.t..S.r.....YY. :2j.....Y../$B....i..Q..L2P.^!...Q.V".5l...0"s4I........5..}......l..E.#.9]<.v.l!z......l.v..r....&..5.~.T.9...-.iS&..=..E..4.....{.^.',.3.]..t.C......./

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	251
Entropy (8bit):	6.2141996895017435
Encrypted:	false
SSDEEP:	6:6v/lhPHp4w1PWx1Xr79/8dPtwwKuxlXkO0zWSBJDlCkWOKjp:6v/7Ow1uPrZTCYXJ4OKN
MD5:	AAB2B4A3555C810925224A4FF1A130B0
SHA1:	2538DD9CF991717B69739DA6AE189E45272AA0D8
SHA-256:	93BD7B10D6858FA0C36D4ED0EB9882CCC4F0D05BEF2B93FDA4E52A1B4B94A589
SHA-512:	A0C39A3C6E39A885C67C117C0A8C412A7FEDF1FD357CF4E80EFB922D857A7C3BBC32F702EBFCE0F61C7AC321ABDA710EBA1B3B4F99018602A8F5DF7E7088C31B
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/images/btn_ok_passive.png
Preview:	.PNG........IHDR...............ex...3PLTE.....p..p..u..t..r..s..r..s..s..r..s..r..r..s..r..s.../....tRNS.. 0@..................gIDAT.....b.0....(.b...%U..........U..p.j........`.9[...V...;.i.o.....Q/p6...0k...V56.=....QU.s=.U.bH.H..A.....IEND.B`.

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 13, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	758
Entropy (8bit):	7.41011276811157
Encrypted:	false
SSDEEP:	12:6v/7PRze3KtxyL3crY+5s5FqnrQ2GzCGuybHGAQnHCdL8CZgmYa+kx/Yg3Yp43Py:aJe3Nsrh5oFqnAzCGuApldbBx/I4f3i
MD5:	06AA60774CECADD41E09151E2D006F16
SHA1:	DC7E0D2748522F148742D88A1F8B23E3AA082CC1
SHA-256:	9A87F8ADE1743DC729FD6066A644C763D997B3415CDD7D27D38B0BBB4DD4B172
SHA-512:	384BCEC604A4639EB2B374FCD942CD4EA4E2028C6C34EA9D4F17D2DF4CDFD5760325ABAA04EE051A0E9A1061664A51334AE50332D46E85B51325EC214A56F8B2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................l....PLTE..a..^.._.._.._..k..e..s..t..u..t..n..o..r..s......}....~.......................................................................................\|..~..................f.j.k.d.....k.m.5.7.8.f.h.:.T.U.[.\.c.d.../.1.2.j.m.m..t.....0..3..4..t..~..}.......h..{.......k..p..s.....k..r......m............n..u............................................................Q....IDAT..c.qJ.e.........eP.q.g............... l8. .\..$.b.\8.@...I.9&H....R)0.%I...AK[E.uR..N'...Z.T.....k.#"..C..C..##.k...l.......f...+...H.wv.K..+..0..+.N..kwrl........\...+m..e!...'... f:);...N...IF.....<T.y >..Ps...P.)....D.c....H..%......IEND.B`.

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 44, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2660
Entropy (8bit):	7.908644382055355
Encrypted:	false
SSDEEP:	48:kajIExFbaNqfjsL8Jz2YoNpmbSRJUpI93B8f7H6XMVk5GZj:kul7saHEWItB4r635Kj
MD5:	5E001B8B0FDD7C038C577E433D8ACE56
SHA1:	C679731F496B909DE0BF337AF98C27DF71AEF747
SHA-256:	F6C9C3FE103E395D83C3D4969B49A8178716DED3D2886D871E61820914FAC705
SHA-512:	9B2FB0892DB77CAF00BE89399843BEA5E48BC89E3E458B8521DFA14DD9831655B11C3F6C28F6BD997F8EB8AE73D866151DE1785F32A91A766FE83A4A5824573D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......,......PA....+IDATx....\U..?..n.@K...Q.LE+..mQ...F....-.i4.n..BDYH@P..$...j....vk.....Q.t.D$..l.H@.P@.@...y.?.........na>.d..w.g.....{.A..5j..F.2W}f.Z.;.t)0..>y.c.........Q#...J4>p..}7...^].&...0p.`......F...e....d-0.....^.<Q..p.0..m.y0.....F.\|.%.z`.....r"...L.AZTu+..q.&..._a....A...:_..C^V7.<.3..<..3...(.k..(I..\|....Fhf..j...UcZ....I,...:..{b....vV...3Aha.z.........~V.g......1.aq%.P.;4.F9.....s...40..;.?T........Tx.GE.A.Z.:.......b.v....~......\|..2.C.+.z....3........LK.6...be.&...Y\m.V.s...f.ZXI...F.P..G...eEl...!..5p`.t...DQe._P.%G.v`..&......-mR \|..C.${W.3W.zK.[T..S.=......6....ut.....cNV...g0..=....=.@.Nc.....y.)OX......2.k..Wfyw..\|...S.ME..s..tS..o...Vkc.\..FDWJ.OB.R%..+...'...4.w.{'..,fA\|<.9...r...H][.,.0...sQ...G.11H.c...l.VQ.(q.<.."..0.l..X.sQW.i....'...8...k7.E.'.[v..ji.Hd.............9.gK......."p..H.qA..p;p...jg.I.`NN....#88.{...vy.x.$...,*.M3..O...uys..:...B.....6f7C...`...hm.\|....T...9..:..d.....q..

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 22, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	624
Entropy (8bit):	7.24995556838833
Encrypted:	false
SSDEEP:	12:6v/7EkpzBoAEBAzjaFnctqEeHo1UMQS+XljP/JgvLNkDsUcN:BAEsaFnctOHo1UzS+VbhyRqsUO
MD5:	8CD4697B378BDB77799A1D5DB2FE50C1
SHA1:	62FD3D785855F110D2B45583488B03F1F6CE9B22
SHA-256:	667D1872D646EFC435C01A6AF873B637545E011790236C6AEC3A0CEBD37B14FD
SHA-512:	4A0197BF2F9658E258E28B0D2333E7FC87AD72DB996C7EFEA950419B057C18002FA98D4A8364B14A4BD06F1000F8E4E5B907956B14E7A0EC166FD25A12F26241
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............j......PLTE.................333444555666777999;;;>>>???@@@AAAIIIJJJLLLNNNSSSUUUVVVYYY[[[\\\^^^bbbfffjjjkkklllmmmpppqqqrrrssstttuuuwwwxxx\|\|\|}}}......................................................................................................................................r....tRNS. 0P....{4-.....IDAT..u.Y[.P.E.3V..b3.E.%`.e%1Tb.I...#=\-...^..{....(....". (.F.fV.A............."R....sO.4,.E.......l.......%.@$..3<..w....U...T.L.Z....p.....J....?z.t>..8b...Yr...^._?_.f...:.3GVr.v..a....&....k~.........\|........-...j..gq...(6[.!.3.o...d.i-..yU...7C.h.L....anR.5h....IEND.B`.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/sync_cookie_image_decide?token=10382.5cq1dBE50Kkuy_ARErnvu9SKCgJTJxFW2cpOJu9Sdq3gGgXRMKvorLoop8NRfDk3GMhryxP_ppLhfOrWk4RceX3RtDx_xjsTIYw3gTJPHtJoj1lvKzIrRPbt-iAw-k50H0zvA__wZp2KUy6xvE_BhMBtOiAkkuIB91VBkYaqLXnSy8MedR0zL-5PANJFdJU8agVa0XYp53ptHQ-1tJ-XuR7Gvs6wvT905mfTiMdU57E%2C.i5qyiL9n8tsRGycvaZLcp45yue8%2C
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4246)
Category:	downloaded
Size (bytes):	171518
Entropy (8bit):	5.503957808742809
Encrypted:	false
SSDEEP:	3072:ef9a0FS8vx8EQeC3ZRoIoM4LQRzdH3i2prDc9hmatCxCLuPsV/+jX7xuhFysRqZu:U9a0FSox8EQeC3ZRoIoM0QRzdH3i2psf
MD5:	8C6546C7EBF5D19DF327C01BEE97529D
SHA1:	5555D0E004B3D0C038BE0F1FA0722950057DDA51
SHA-256:	E8F0ECD7A8D97B1BC466BD465C9066E6F9546CD9B70CBE3EBA9B6C8003EB3152
SHA-512:	4437C35E75E303FD7A8C3DB7EBE49E774A0BBC0350249C02E17541F24110B5879696038455DDDB02DD6E8747AC508CCCD8CD233553F5EBBDB8E2A390849478F6
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202405220101/reactive_library_fy2021.js?bust=31083976
Preview:	(function(sttc){'use strict';var p,aa={};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 ./ .var t=this\|\|self;function ba(a){a:{var b=["CLOSURE_FLAGS"];for(var c=t,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ca(a){var b=typeof a;return"object"!=b?b:a?Array.isArray(a)?"array":b:"null"}function da(a){var b=ca(a);return"array"==b\|\|"object"==b&&"number"==typeof a.length}function ea(a){var b=typeof a;return"object"==b&&null!=a\|\|"function"==b}function w(a){return Object.prototype.hasOwnProperty.call(a,ha)&&a[ha]\|\|(a[ha]=++ia)} .var ha="closure_uid_"+(1E9Math.random()>>>0),ia=0;function ja(a,b,c){return a.call.apply(a.bind,arguments)}function ka(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var e=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(e,d);return a.apply(b,e)}}return function(){return a.apply(b,arguments)}

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	3836
Entropy (8bit):	5.285205133992263
Encrypted:	false
SSDEEP:	96:E2HwSMm/1ZMIadr/BrAEcPLnMd81j75u/O9tXsz7Zu5wHeDs/:E2F/TLnnK/
MD5:	D6711DA316447431B655F1E80A001205
SHA1:	6E0AB329C3359AAEF4C1198747E4928B6C08248E
SHA-256:	6300BA1C19B24D427FDEC05B16C8B7C85F21155097C82FFDCED06192A5F70D31
SHA-512:	BCC5A0E15602F92FE64189F2FEDC7D8BDEE0E13FB04E77F2AEF5FE2190521C065AC1EEC4CD93EE68E9943615736FF7ABD9FC3FE602B486196777C991242B160E
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/css/jquery.bxslider.css
Preview:	/*. BxSlider v4.1.2 - Fully loaded, responsive content slider. * http://bxslider.com. . Written by: Steven Wanderski, 2014. * http://stevenwanderski.com. * (while drinking Belgian ales and listening to jazz). . CEO and founder of bxCreative, LTD. * http://bxcreative.com. /.../* RESET AND LAYOUT.===================================/...bx-wrapper {..position: relative;..margin: 0 auto 60px;..padding: 0;..zoom: 1;.}...bx-wrapper img {..max-width: 100%;..display: block;.}../** THEME.===================================/...bx-wrapper .bx-viewport {..-moz-box-shadow: 0 0 5px #ccc;..-webkit-box-shadow: 0 0 5px #ccc;..box-shadow: 0 0 5px #ccc;..border: 5px solid #fff;..left: -5px;..background: #fff;..../fix other elements on the page moving (on Chrome)*/..-webkit-transform: translatez(0);..-moz-transform: translatez(0);. .-ms-transform: translatez(0);. .-o-transform: translatez(0);. .transform: translatez(0);.}...bx-wrapper .bx-pager,..bx-wrapper .bx-controls-auto {..pos

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 13, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	758
Entropy (8bit):	7.41011276811157
Encrypted:	false
SSDEEP:	12:6v/7PRze3KtxyL3crY+5s5FqnrQ2GzCGuybHGAQnHCdL8CZgmYa+kx/Yg3Yp43Py:aJe3Nsrh5oFqnAzCGuApldbBx/I4f3i
MD5:	06AA60774CECADD41E09151E2D006F16
SHA1:	DC7E0D2748522F148742D88A1F8B23E3AA082CC1
SHA-256:	9A87F8ADE1743DC729FD6066A644C763D997B3415CDD7D27D38B0BBB4DD4B172
SHA-512:	384BCEC604A4639EB2B374FCD942CD4EA4E2028C6C34EA9D4F17D2DF4CDFD5760325ABAA04EE051A0E9A1061664A51334AE50332D46E85B51325EC214A56F8B2
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/images/en.png
Preview:	.PNG........IHDR................l....PLTE..a..^.._.._.._..k..e..s..t..u..t..n..o..r..s......}....~.......................................................................................\|..~..................f.j.k.d.....k.m.5.7.8.f.h.:.T.U.[.\.c.d.../.1.2.j.m.m..t.....0..3..4..t..~..}.......h..{.......k..p..s.....k..r......m............n..u............................................................Q....IDAT..c.qJ.e.........eP.q.g............... l8. .\..$.b.\8.@...I.9&H....R)0.%I...AK[E.uR..N'...Z.T.....k.#"..C..C..##.k...l.......f...+...H.wv.K..+..0..+.N..kwrl........\...+m..e!...'... f:);...N...IF.....<T.y >..Ps...P.)....D.c....H..%......IEND.B`.

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 13, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	224
Entropy (8bit):	5.940999098565218
Encrypted:	false
SSDEEP:	6:6v/lhPxQ5QTYCMkw/5WnDi3Um9gJKYrpVMoj9cup:6v/7qY/Vm2tdVM8cc
MD5:	01F78ADD7628815BAA0126489CA6BBB4
SHA1:	8630ADF2A0008C1789A538F140BEF9C203BB3B58
SHA-256:	670BC999DF02739E39C67AB53DD9E9D4C7BE5049C14C29613FD96B2907A798A5
SHA-512:	13F2268D21EFAAE67C94F409A6E46F6B3F621B8DAE375417DB3D1AFC62A3EBC9B5DC560B9ED534CB778BE31820460F9418E4CFBA1E1E95CF867C2B2E30DA5D63
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/images/ru.png
Preview:	.PNG........IHDR..............PN^....sBIT....\|.d.....pHYs............Z....tEXtCreation Time.09/04/16._......tEXtSoftware.Adobe Fireworks CS5q..6...8IDAT8.c.......&j.64.dY...........C ../.....OQ.....T7...o..._......IEND.B`.

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (532)
Category:	downloaded
Size (bytes):	2120
Entropy (8bit):	5.475321660491406
Encrypted:	false
SSDEEP:	48:pf41S9DetyBfmZvYzrEB46d58oxMuwZICgryMpj:GS9evZvwM4sUjU
MD5:	DDCB981B1555F3011E3D550508DA75A8
SHA1:	305978A0C5924B7E34E1DA42914156079C8BE631
SHA-256:	E9F67688FEE0150690C92917640AA09F8A80D6B6366B90113F0C5772DFF669CE
SHA-512:	F7B7D124E0717C8DDDBD1653649934FFFCB4D613F317CE65A8F8F2A6B2A0C978930C6C1969F96B993C6021D83753F7140A23FF992D35CC865D62C69C015456C8
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/metrika/metrika_match.html
Preview:	<!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd">.<html>.<head>. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta http-equiv="Content-Type" content="text/html;charset=UTF-8">.</head>.<body>.<script>(function(){try{(function(){function l(a){var b=a.document;if(b.hasStorageAccess)b.hasStorageAccess().then(function(c){a.parent.postMessage("sc.sar"+(c?"1":"2"),"")})["catch"](function(){a.parent.postMessage("sc.sarc","")})}function q(a){function b(c,d){var f="sc.topics-response"+c;a.parent.postMessage(d?f+""+d:f,"")}a.document.browsingTopics().then(function(c){return b("1",JSON.stringify(c))})["catch"](function(){return b("e")})}function g(a,b){return function(){e[a]&&(e[a].timeout&&(clearTimeout(e[a].timeout),.e[a].timeout=0,window.parent.postMessage(["sc.image",a,b].join(""),"")),e[a].g=null)}}function m(a){try{if(a.data&&a.data.split){var b=a.data.split("");if("sc.images"===b[0])for(a=1;a<b.length;a++){var c=b[a];a:{var

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 (with BOM) text, with very long lines (561)
Category:	downloaded
Size (bytes):	211069
Entropy (8bit):	5.513376459624396
Encrypted:	false
SSDEEP:	3072:/WM51HapPhPtcXDjRtgAxf3v6nSwha0fIjrc:lIpPy9qAxf/6Swh7Ijrc
MD5:	5434281908520AEB982FD9CCAEBE57F3
SHA1:	0F02FC40C447CB69CDA80FB161691A5CE4C5B4E9
SHA-256:	4172EFEEE52CE48FF27469F1BD9E0D73BE5FC6951D3A16CF44714AEE0D01A756
SHA-512:	1CE9CFBAC9002A4CDCC577C44649124909D8A98BF5E1262B863ACD78205E2103BD57BA60A46AFC3536064A654B18FB3B96452B0E7DDFAAA9670134CC304C2AE5
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.ru/metrika/tag.js
Preview:	.(function(){try{(function(){function We(a,c,b,d){var e=this;return B(window,"c.i",function(){function f(F){(F=Xe(l,m,"",F)(l,m))&&(V(F.then)?F.then(g):g(F));return F}function g(F){F&&(V(F)?p.push(F):la(F)&&x(function(N){var M=N[0];N=N[1];V(N)&&("u"===M?p.push(N):h(N,M))},Ia(F)))}function h(F,N,M){e[N]=Ol(l,m,M\|\|q,N,F)}var k,l=window;(!l\|\|isNaN(a)&&!a)&&Ud();var m=Pl(a,Vd,c,b,d),p=[],q=[hh,Xe,ih];q.unshift(Ql);var r=A(S,Sa),t=J(m);m.id\|\|Ta(Pa("Invalid Metrika id: "+m.id,!0));var y=ad.C("counters",{});if(y[t])return Eb(l,.t,"dc",(k={},k.key=t,k)),y[t];Rl(l,t,jh(a,c,b,d));y[t]=e;ad.D("counters",y);ad.Ea("counter",e);x(function(F){F(l,m)},Ye);x(f,Wd);f(Sl);h(Tl(l,m,p),"destruct",[hh,ih]);Pb(l,D([l,r,f,1,"a.i"],kh));x(f,Y)})()}function hh(a,c,b,d){return B(a,"cm."+b,d)}function ih(a,c,b,d){return function(){var e=Ma(arguments);e=d.apply(void 0,e);return W(e)?Ba(a,c):e}}function Ul(a,c){delete H(a).C("cok",{})[c]}function Rl(a,c,b){a=H(a);var d=a.C("cok",{});d[c]=b;a.D("cok",d)}function V

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 15 x 15, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	251
Entropy (8bit):	6.2141996895017435
Encrypted:	false
SSDEEP:	6:6v/lhPHp4w1PWx1Xr79/8dPtwwKuxlXkO0zWSBJDlCkWOKjp:6v/7Ow1uPrZTCYXJ4OKN
MD5:	AAB2B4A3555C810925224A4FF1A130B0
SHA1:	2538DD9CF991717B69739DA6AE189E45272AA0D8
SHA-256:	93BD7B10D6858FA0C36D4ED0EB9882CCC4F0D05BEF2B93FDA4E52A1B4B94A589
SHA-512:	A0C39A3C6E39A885C67C117C0A8C412A7FEDF1FD357CF4E80EFB922D857A7C3BBC32F702EBFCE0F61C7AC321ABDA710EBA1B3B4F99018602A8F5DF7E7088C31B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............ex...3PLTE.....p..p..u..t..r..s..r..s..s..r..s..r..r..s..r..s.../....tRNS.. 0@..................gIDAT.....b.0....(.b...%U..........U..p.j........`.9[...V...;.i.o.....Q/p6...0k...V56.=....QU.s=.U.bH.H..A.....IEND.B`.

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/metrika/advert.gif
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 230 x 72, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	831
Entropy (8bit):	7.489139946189046
Encrypted:	false
SSDEEP:	24:JSO3og/DA0UJqIe1MI21xrKZqzM5xE7DAGKfz1VO7:d3og/DP+qTKmIzM5xEPkS
MD5:	681625DF259980652EDC9FFC653073D3
SHA1:	F52097E66AB0490A9C2FFE2565F7658D97DC5A32
SHA-256:	6F1565D977B8533EC77B0D646270AA11B36039129680AE21FE9F78E28CE172FA
SHA-512:	93DDEA9DF4307DEC2493D138779527A3012B27F76A0E13BD93CD51482BB8F139146BB76AA7ED3EB343371A3EA15F1FE22BC4E9C327CC07A34BA137DAF9DADE7F
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/images/donate.png
Preview:	.PNG........IHDR.......H......y.....gAMA......a.....sRGB.........PLTELiq..G.........<<<..=.....M.....L..#....HHH..........```......SSS...............0..............\............?!..~d.......www..x..(................................p.........]J....tRNS.@..f....IDATx....r.@..`L..F$RU.1F.....o.@.(e...Y<..z.7lav.EQ.9+!..\|..v. .P. s.!%..ILb...6.{.K].2.`^WO.3]u.].f...,.c$..&~D..ux...UK~f..3..@.F.\rf.......xR3.i..t..Ef!3s...L.R..3}e..9..%...'0...1...D........d.}G....s...U..i/...W....C6x~[............) ...&.*.=..f.....lP,..(...-..n..^.e...:.w..}3ym..\|.k....L....}Y.v...Z/D.\..+.~...]+...dJsH..T...i...0.ILb.S)......Ky`f.A..{p. .......JKLb.S S`..1Sd..-Sl..+Sp..)St..%S\|..#..{....=......c.t..1A.... ....~0..=....=....=@...=@...=....=......c.t..1A..t.ILb......$............f\|....IEND.B`.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C++ source, ASCII text, with very long lines (3386)
Category:	downloaded
Size (bytes):	9139
Entropy (8bit):	5.520843752274848
Encrypted:	false
SSDEEP:	192:Nl2s0yrpk1Eri7SkBFBWDfVeF4nqCkWO6fU0P2iG+Mfl:D2szrW1Eri7SUFBKQ+qCkWBfUU2B+Wl
MD5:	F2454552E0DDFA5EE5D983BE2A0C6ECF
SHA1:	6BD76C93838A3D6335C9D25A811CC78F4B321978
SHA-256:	1C6258F276A2B35AE4A0BAB73C6C33DC1F6559A17C31CF49464561A966BDBC53
SHA-512:	57686B48EEE84AC0DB1BDDA8681E07DE4D00405358AC52F7C1F6B67860D69D94E4F5D81BF4D220EEA20A2A8BD6F7253671066D53D31E1C031507877E5C9CE42C
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html
Preview:	<!DOCTYPE html><script>.(function(){'use strict';/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var k=this\|\|self;function m(a){return a};var n,v;a:{for(var ca=["CLOSURE_FLAGS"],z=k,A=0;A<ca.length;A++)if(z=z[ca[A]],null==z){v=null;break a}v=z}var da=v&&v[610401301];n=null!=da?da:!1;function ea(){var a=k.navigator;return a&&(a=a.userAgent)?a:""}var B;const fa=k.navigator;B=fa?fa.userAgentData\|\|null:null;function C(a){return n?B?B.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function E(a){return-1!=ea().indexOf(a)};function F(){return n?!!B&&0<B.brands.length:!1}function G(){return F()?C("Chromium"):(E("Chrome")\|\|E("CriOS"))&&!(F()?0:E("Edge"))\|\|E("Silk")};function ha(a,b){Array.prototype.forEach.call(a,b,void 0)};function H(a){H[" "](a);return a}H[" "]=function(){};var ia=-1!=ea().toLowerCase().indexOf("webkit")&&!E("Edge");!E("Android")\|\|G();G();E("Safari")&&(G()\|\|(F()?0:E("Coast"))\|\|(F()?0:E("Opera"))\|\|(F()?0:E("Edge"))\|\|(F()?C("Microsoft Ed

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2937)
Category:	downloaded
Size (bytes):	219217
Entropy (8bit):	5.418054083421649
Encrypted:	false
SSDEEP:	6144:haGHmZcSadFlTZa8fzYC+vijCOdIqlpawRtpm:LGry/lpb1m
MD5:	B6458A569A70D12F4B60C738067BA729
SHA1:	DA9A362C42111F33A5EA79CECD8CC86445C3FF16
SHA-256:	42BBD0012A46493C1CA8E228B118806D03BB60BB93ECB05D40413DC0401722F0
SHA-512:	B10E146EBA03A1787024CE1F719C5256F4AD8C132A7CE05061B40E7254EB282F19031E4188449C17EA421FA2C9D1B3FC0E36BE8C861F9865DA6F226ADEC12175
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/activeview/current/ufs_web_display.js
Preview:	(function(){var n,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("a");},da=.ca(this),p=function(a,b){if(b)a:{var c=da;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.p("Symbol",function(a){if(a)return a;var b=function(f,g){this.fh=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.fh};var c="jscomp_symbol_"+(1E9*Math.random()>>>0)+"_",d=0,e=function(f){if(this instanceof e

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	1222
Entropy (8bit):	7.550744742727829
Encrypted:	false
SSDEEP:	24:r7hQAenoSbYHL2jDCqvybA6ar7DjSTdvbRYO0Tbxn1C1wGA2dx:rn6oSbuL2Hr73SJvbyO0Rn1C/AWx
MD5:	3B7F009B9E66DD02EEA2CCDB26402572
SHA1:	569DE17E48B02F316760CA0813B723280A804B8A
SHA-256:	2B68B345C236CD622A7FF2B26F080D6CF820A8B684924533C28ED26DEF132E2C
SHA-512:	ECF9733401800A263ABE545B29684E8A78238025F0FDDF2D0346C954C08A945EC51EE01F02CAC8BD16D2D935773E994AFC52BFB9FA0AAFE9CFCDFB67BBBA5C12
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............^....mPLTE........\.).'........A..F..[..`.4.q..].9.&.f...#...&.'.#.+.*.:.<.Y...3.....<.6.N....<.<.....S.g..................................................".......0................................~..\|..}.....x..z..\|..w..z..{..\|..v..v..s..t..t..u..v..{..r..s..x..m..o..k..l..o..m..o..v..{..\|..g..Z..^..o..W..^..S..a..i..Q..R..Q..O.J...F.1.3.4.H.<.f..................................................6...................1...............4.......................................................A...TtRNS....................''))11111::=QTTUXXZZ__e}}.......................................fX+.....IDAT..}..CNQ...7{o.BvFd..G.ew............3...{.).79}.~u...<.,2..0..O....E7#..!...?'...~.L.\.<..cB3.%/..34.A(y...gM'.].....4..,5..TC.\.K.g....y....#.Y.36.\|.._...(X.k...U..z.m).w. ..).g{...v.'....Z?f..?R...m.2......w....

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://mc.yandex.com/sync_cookie_image_decide_secondary?token=10382.PHokSIao8yHItpVHoilKJ7LvElhcKk_OfeMiRfRUAgZFbdT46izlmiBOc95P41WQVdZoaHSNmzacvchSIRLsAY-LRphnUACZ3FDhGTBBZqn6Bhvm3QpWT2dpAkU5csY4NoyTXdi0OOB-upnzWehEU4VYYeizz3kakGib1K_v3IrBnoGG5wDQeWCaVEMh-C_xZ5S90lf4fiLJREm5w_U2Nvm1jAiRpncuE676e0bo3io%2C.z5voVyT0_z8pviNRWNtRjPKoezg%2C
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators
Category:	downloaded
Size (bytes):	233708
Entropy (8bit):	5.806882697035855
Encrypted:	false
SSDEEP:	3072:+JwX/3kgJky4xrHgmCgmKXTpLkq4ycUCHTpLkTSlyXZ5G:+Jm/0gUxDgmCBKDpoq4ycUCzpoulye
MD5:	9D75628402FBF13F93C95DEBD76F015A
SHA1:	35DB7C32A180DBCCC324A955772E902F9DDC43FB
SHA-256:	1972B18EF6A3ED97ECB5AFDF2CA8A8B098B611CE0F9462A132CDF3B66EFCB5B7
SHA-512:	CA566BBA4EEE0F1A7F870202585F425025F6974D4D32381125B5469864C922473624C4FE7854636BBD0101BBD73F6AC94B1E8F63A4DAEFA4C3F74D4DD6330447
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&adk=1812271804&adf=3025194257&abgtt=3&lmt=1716814864&plat=2%3A16777216%2C3%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=135x714_r&format=0x0&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&pra=7&wgl=1&easpi=0&aihb=0&asro=0&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814863478&bpp=2&bdt=4830&idt=648&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=970x280%2C970x100&nras=1&correlator=2846887072687&frm=20&pv=1&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=58&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4347612559431098&tmod=1276184472&uas=0&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=660
Preview:	<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-filter: blur(15px); /potential issue: minimal browser support/-webkit-backdrop-filter: blur(15px); /for safari/height: 100%;}#ad_iframe {box-shadow: 0 !important;display: block;left: auto;margin: 0 auto;position: relative;top: auto;}.creative {transition: opacity 1s;-webkit-transition: opacity 1s;position: relative;}#card {background-color: #fff;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: table;transition: opacity 1s, background .75s;-webkit-transition: opacity 1s, background .75s;-moz-transition: opacity 1s, background .75s;-o-transition:

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (12938)
Category:	downloaded
Size (bytes):	12941
Entropy (8bit):	5.31945657514442
Encrypted:	false
SSDEEP:	96:RI0udafWfyeVv9Cvvoi2K3RV88vEXsdLEMSV+ANPGOFa4BdLN8qmQ+d1vBFqIX:C0gLV8HIK3TLEMSvGOFa4J839d1vBFqM
MD5:	B54BEC465DEC46A5F91FB40E972EEA06
SHA1:	76A7D303C1C831BE7FA10A9A238A196DA0CC4AD3
SHA-256:	CB91CA65B360A6BD75D831F57DD894ACBBB4522ACED1954916F8ED742E2A6AAD
SHA-512:	E29E1313267E8F0AA5F13E17024553BCACD1B2483A280E9A7F2EE508984EE9A80AF17D0F56FB9ADF54F841058CA666CF9EE94B3B9CA5FC8004E7DFEACF5E4574
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/index-cb91ca65.css
Preview:	@charset "UTF-8";._advertiser_1qsh0_1{position:absolute;z-index:501;width:fit-content;height:fit-content;font-size:12px;font-weight:700;background-color:transparent}._advertiserName_1qsh0_11{z-index:504;color:#b9b8b8;user-select:none}._clickable_1qsh0_17{cursor:pointer}._bottom_left_1rmpi_1{bottom:0;left:0}._top_left_1rmpi_6{top:0;left:0}._bottom_right_1rmpi_11{bottom:0;right:0}._top_right_1rmpi_16{top:0;right:0}._closeButton_5b4wb_2{position:absolute;border-radius:50%;height:20px;width:20px;background:#6f6f6f;user-select:none;display:flex;justify-content:center;align-items:center;color:#efeeee;font-family:auto}._closeStyle_5b4wb_16:before{content:".";height:20px;width:20px;font-size:16px;display:flex;align-items:flex-end;justify-content:center;transform:rotate(45deg);color:#efeeee;font-weight:400;font-style:normal;text-decoration:none;font-synthesis:none;text-rendering:optimizeLegibility;font-family:serif;line-height:18px;cursor:default}._altCloseStyleX_5b4wb_37{transform:rotate(45d

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 174x174, components 3
Category:	dropped
Size (bytes):	5168
Entropy (8bit):	7.754506863039875
Encrypted:	false
SSDEEP:	96:JOnozqIxiazox3r5QVmxz2YONxoRRC5ewjQWekvp3YJlTVj6v8NkT0x:JOnomIxiiqpz2sRR6eGBGlhLJx
MD5:	96393D31F82D54A049C09A971CA70E58
SHA1:	A77AD9229D52530D1936017242A76248219FA6B5
SHA-256:	CE5C6A664266F7BD7C91B7962AC9D5145C026724D2B811AF7BB6FC24C25ABADD
SHA-512:	CEC7F37A87B33E662E012A5B987F946C95641F9E67E63E5555C8F3DD25162F4E062F6C6F17E7D9ACF5952EC8032C50D475826E26B752F7B06C73D751AD295571
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C....................................................................C.......................................................................................................................................................0h@.@..@.@@........&.......H.....$ FM..4FM....B`.....4@h..0 $.@$@h..@DD..@.H.L.#$.h..." .4d......." D@&M..fH.0l@@D.4`...4@ &......&...L........D.@h.@.!..".....".4DFD...H....".$B....@D......@"..$Bd."#"........6.$. &D..HHL.. ..""4@ l..!2 $$.."..... 4@.D$Dh.$h....!...FM.......................... !A.0@1...............j..0.S_v6$.-..... ...w. .....8..f.j......;.Wj..s<....../......\i.E..N.o.\3.=.{..G,...'..,0..0..,..Yc(.0..0.N....Ye..(......(..+..e~Y\|..............................?.r...............................?.r....!....................1 0!A.@qQ..........?.....M.TQB....>rYu.ee...R...W.z.......qp....x..X.e......=..}.....<../C.G..X.y...\_...`..<h..(..........hb..q.C...XTu...jp..}....z,....e2..E..G..Y-.b...?...&....

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (51875), with no line terminators
Category:	downloaded
Size (bytes):	51875
Entropy (8bit):	6.047276661081156
Encrypted:	false
SSDEEP:	768:zm5QJJSQ2rvfM7XdyVo9Ks7NhX9TsnY+qE6HN50pxIp+SkRddy1kEU/GU9U2jGPx:wXRWsF5dyMu+KI1m
MD5:	DC9D38FC37AAEA1630F85E2C732B3A92
SHA1:	04EC1BD878DA54E97252C35F38B12FDE28A81DB3
SHA-256:	F16C181F001865CDF4E2DC301AFCB316B5F6DEA1308B757BEA19ACC4F0F98354
SHA-512:	C938BDABB51A64301F1359F002059EE4535FEDBF94F63325F3E0064A39B1B70BA6D8CC3A9D396AA88DA2BF8ECBDCEEAF510775CAFBD770A11E08607540A9F5ED
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&h=280&slotname=7823858479&adk=642103812&adf=441738196&pi=t.ma~as.7823858479&w=970&abgtt=3&fwrn=4&fwrnh=100&lmt=1716814864&rafmt=1&format=970x280&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862308&bpp=4&bdt=3661&idt=1768&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=2846887072687&frm=20&pv=2&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=158&biw=1263&bih=907&scr_x=0&scr_y=20&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4347612559431098&tmod=1276184472&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeoE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1792
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240522';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="40" data-jc-version="r20240522" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<320!9sqrmy"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var t;const da=q.navigator;t=da?da.userAgentData\|\|null:null;function ea(a){return ba?t?t.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function v(a){var b;a:{if(b=q.navigator)if(b=b.userAgent)break a;b=""}return-1!

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (51993), with no line terminators
Category:	downloaded
Size (bytes):	51993
Entropy (8bit):	6.04755856068074
Encrypted:	false
SSDEEP:	768:zm5QJJSQ2rvfM7XdyVo9Ks7NhX9TsnY+qE6HN50pxIp+SkRddy1kEqH1SI9U2jGl:wXRWsF5dyCUjjKKI1m
MD5:	D51400C31F64D4602A027DDD04389D88
SHA1:	E84E81F2BF9CCE86CAC8D53B417DF8C80AB8B635
SHA-256:	045486DD9CE4C253AB73363C67028503AD97B2723F72217945F7C2F37FE4F8FF
SHA-512:	A5F92C1713B7AD4C71CAD573E9018AF91C8E20BFBF349B4DFCBC894BC0BF5594C8F8A50141BB9E1E30EA6E1F1F62A7A7E5D8F236EFE20A7028DD70CE59A0616A
Malicious:	false
Reputation:	low
URL:	https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&h=100&slotname=8540115672&adk=3304334544&adf=3870114935&pi=t.ma~as.8540115672&w=970&abgtt=3&lmt=1716814864&format=970x100&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862312&bpp=1&bdt=3665&idt=1804&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=970x280&correlator=2846887072687&frm=20&pv=1&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=823&biw=1263&bih=907&scr_x=0&scr_y=58&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4347612559431098&tmod=1276184472&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1809
Preview:	<!doctype html><html><head><script>var jscVersion = 'r20240522';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="40" data-jc-version="r20240522" data-jc-flags="["x%278446'9efotm(&20067;>8&>`dopb/%<1732261!=\|vqc)!7201061?'9efotm(&20723;>:&>`dopb/%<1245;05!=nehu`/!361:<320!9sqrmy"]">(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var t;const da=q.navigator;t=da?da.userAgentData\|\|null:null;function ea(a){return ba?t?t.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function v(a){var b;a:{if(b=q.navigator)if(b=b.userAgent)break a;b=""}return-1!

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 230 x 72, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	831
Entropy (8bit):	7.489139946189046
Encrypted:	false
SSDEEP:	24:JSO3og/DA0UJqIe1MI21xrKZqzM5xE7DAGKfz1VO7:d3og/DP+qTKmIzM5xEPkS
MD5:	681625DF259980652EDC9FFC653073D3
SHA1:	F52097E66AB0490A9C2FFE2565F7658D97DC5A32
SHA-256:	6F1565D977B8533EC77B0D646270AA11B36039129680AE21FE9F78E28CE172FA
SHA-512:	93DDEA9DF4307DEC2493D138779527A3012B27F76A0E13BD93CD51482BB8F139146BB76AA7ED3EB343371A3EA15F1FE22BC4E9C327CC07A34BA137DAF9DADE7F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......H......y.....gAMA......a.....sRGB.........PLTELiq..G.........<<<..=.....M.....L..#....HHH..........```......SSS...............0..............\............?!..~d.......www..x..(................................p.........]J....tRNS.@..f....IDATx....r.@..`L..F$RU.1F.....o.@.(e...Y<..z.7lav.EQ.9+!..\|..v. .P. s.!%..ILb...6.{.K].2.`^WO.3]u.].f...,.c$..&~D..ux...UK~f..3..@.F.\rf.......xR3.i..t..Ef!3s...L.R..3}e..9..%...'0...1...D........d.}G....s...U..i/...W....C6x~[............) ...&.*.=..f.....lP,..(...-..n..^.e...:.w..}3ym..\|.k....L....}Y.v...Z/D.\..+.~...]+...dJsH..T...i...0.ILb.S)......Ky`f.A..{p. .......JKLb.S S`..1Sd..-Sl..+Sp..)St..%S\|..#..{....=......c.t..1A.... ....~0..=....=....=@...=@...=....=......c.t..1A..t.ILb......$............f\|....IEND.B`.

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
URL:	"https://pagead2.googlesyndication.com/pcs/activeview?xai=AKAOjsvpwXKDDGdclqzbO2_4u8r_CwG6e8GCkKrETAzJvIM4k2YQ9722UFA_Y1FR62ATueYf8GdKey4krzHES55M646BHTxhtkErgOJw5IlISrjRc4g-HQO749iEG7GqCC1bmfgbXYlIs8A&sig=Cg0ArKJSzKTEh2H0l8TZEAE&id=lidar2&mcvt=1012&p=0,0,100,970&mtos=1012,1012,1012,1012,1012&tos=1012,0,0,0,0&v=20240522&bin=7&avms=nio&bs=0,0&mc=1&if=1&vu=1&app=0&itpl=20&adk=3304334544&rs=2&la=0&cr=0&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0%3D&vs=4&r=v&co=1274766600&rst=1716814864123&rpt=4045&met=mue&wmsd=0&pbe=0&fle=0&vae=0&spb=0&sfl=0&ffslot=0&reach=8&io2=0"
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1921)
Category:	downloaded
Size (bytes):	433883
Entropy (8bit):	5.60205725063827
Encrypted:	false
SSDEEP:	12288:ZLCRo2fNB4rgZJ3igVCyZzvQ1zQrAQjj+bpaA0jE/k0dhjj5hCuX8rer/xIDsxCA:ZLCRo2fNB4rgZJ3igVFZzvQ1zQrAWj+r
MD5:	AC797EA6E0521D244D84FEF462B22C8C
SHA1:	C37B97F3D1CE017454DB2C56DAA35CBBE0EC77AC
SHA-256:	93E67C0651CBACF4364844FFE7282014499971B299F4BECE2FDF538475A06ED9
SHA-512:	43460E268D1D2EBC5B19CA687842B774E0D89379015C50534729CDE947BC0558EDDFA05BD5E874A30848A77989B610E1BE32DAD977CDD71A13BA86E66D0C46F7
Malicious:	false
Reputation:	low
URL:	https://pagead2.googlesyndication.com/pagead/managed/js/adsense/m202405220101/show_ads_impl_fy2021.js?bust=31083976
Preview:	(function(sttc){'use strict';var q,aa="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};function ba(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");} .var ca=ba(this),da="function"===typeof Symbol&&"symbol"===typeof Symbol("x"),ea={},fa={};function ha(a,b,c){if(!c\|\|null!=a){c=fa[b];if(null==c)return a[b];c=a[c];return void 0!==c?c:a[b]}} .function ma(a,b,c){if(b)a:{var d=a.split(".");a=1===d.length;var e=d[0],f;!a&&e in ea?f=ea:f=ca;for(e=0;e<d.length-1;e++){var g=d[e];if(!(g in f))break a;f=f[g]}d=d[d.length-1];c=da&&"es6"===c?f[d]:null;b=b(c);null!=b&&(a?aa(ea,d,{configurable:!0,writable:!0,value:b}):b!==c&&(void 0===fa[d]&&(a=1E9*Math.random()>>>0,fa[d]=da?ca.Symbol(d):"$jscp$"+a+"

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2950)
Category:	downloaded
Size (bytes):	15241
Entropy (8bit):	5.487742451234654
Encrypted:	false
SSDEEP:	384:uKE2324Of+0PQg77IwBKhuJpSTudJ1TEnuRPbCosVQXEv89:7E+v4+0PQg775npSTudXTJBbCowQXEvg
MD5:	C73C360DD70585F8B34D8F469F69CCB9
SHA1:	78CEF72FBE45CE0B3CC2AE8B61B0B8AF705434FC
SHA-256:	452B40924F4474EDA72A38469F371D2B9B56C781AEBD07C42A36BB9315564FAD
SHA-512:	9765F35AB047B0AD141CFD0FE5DD7BE2B4EEE6A7A43B616F06880578B901302AA2009BC3172D4EDA5F95D77E2D8D515D5A330846D51E812598F27A35CD24F945
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240522/r20110914/elements/html/fullscreen_api_adapter_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var n=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=n,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var r;const ia=n.navigator;r=ia?ia.userAgentData\|\|null:null;function t(a){return ba?r?r.brands.some(({brand:b})=>b&&-1!=b.indexOf(a)):!1:!1}function u(a){var b;a:{if(b=n.navigator)if(b=b.userAgent)break a;b=""}return-1!=b.indexOf(a)};function w(){return ba?!!r&&0<r.brands.length:!1}function A(){return w()?t("Chromium"):(u("Chrome")\|\|u("CriOS"))&&!(w()?0:u("Edge"))\|\|u("Silk")};function B(a){B[" "](a);return a}B[" "]=function(){};!u("Android")\|\|A();A();u("Safari")&&(A()\|\|(w()?0:u("Coast"))\|\|(w()?0:u("Opera"))\|\|(w()?0:u("Edge"))\|\|(w()?t("Microsoft Edge"):u("Edg/"))\|\|w()&&t("Opera"));var D=Symbol();var ja={},ka={};function la(a){return!(!a\|\|"object"!==typeof a\|\|a.g!==ka)}function E

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF line terminators
Category:	downloaded
Size (bytes):	12775
Entropy (8bit):	5.291555487047569
Encrypted:	false
SSDEEP:	192:eJ7ypPQ7drek07Bc+0AIGzKbVzvk7Z5FQp+nlPF2JNg+gayI1yBwKRBYlv4fjfOv:eJ7ypPQhr6V7IMKba5FQp+nwNWaRJFFr
MD5:	AD49BC8BA2202AC004E01DE1CC5795E6
SHA1:	BABC979443580048323B5B8D93754B86297B33E6
SHA-256:	97EEF73BFFED5C4D992712E4BEB4F9DAC114F83ABB6DAEDC3F31F03A0016B62F
SHA-512:	D00FCAEC2FC741D71FC20103EBC8406479CF431B68010158954E3E42D759DB83DE16C02DA800852858CCA640E2FC5ABD4667C8F9A5E6EDC5C9A8ACCE2E7BAAA9
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/js/functions.js?rnd=11
Preview:	function sendAjax(url,params,callback,retry,errorCallback)..{.. $.ajax({.....type: 'POST',.....url: url,......tryCount : 0,......retryLimit : 10,......retryTimeout : 5000,.....data: params,.....dataType: 'json',.. success: function(msg){ .. if(callback)......callback(msg);.. },.. error: function(jqXHR, textStatus, errorThrown){.. console.log('Error '+textStatus+': '+errorThrown);.. if(retry){.. this.tryCount++;.. if(this.tryCount <= this.retryLimit) {.. console.log('Retry '+this.tryCount +'/'+ this.retryLimit);.. //try again.. var self = this;.. return setTimeout(function(){ $.ajax(self); }, this.retryTimeout);.. }.. }.. if(errorCallback)......errorCallback(textStatus, errorThrown);.. }.. });..}....function parseSize(size, lang)..{...if(typeof size == 'undefined')....size = 0;..

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	42
Entropy (8bit):	2.9881439641616536
Encrypted:	false
SSDEEP:	3:CUXPQE/xlEy:1QEoy
MD5:	D89746888DA2D9510B64A9F031EAECD5
SHA1:	D5FCEB6532643D0D84FFE09C40C481ECDF59E15A
SHA-256:	EF1955AE757C8B966C83248350331BD3A30F658CED11F387F8EBF05AB3368629
SHA-512:	D5DA26B5D496EDB0221DF1A4057A8B0285D15592A8F8DC7016A294DF37ED335F3FDE6A2252962E0DF38B62847F8B771463A0124EF3F84299F262ED9D9D3CEE4C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D.;

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2861)
Category:	downloaded
Size (bytes):	20407
Entropy (8bit):	5.520560850208342
Encrypted:	false
SSDEEP:	384:8iYtQqMIl8b/eMlQh/94KamLn9ub+p7rm+vWjiv/UQhZjBs8SYzdcoXZYBhnMhan:TYtQqzlu/eMlE/9ayuCp7rVWjivswbtQ
MD5:	66C44C48FC854F355702E26EDD2E691E
SHA1:	2A0E54078F4E887CE40ADCD6FED97655468BE1DF
SHA-256:	D38450EBB2C0E9EC9FD1A303E255D81A290E00E1C4E2B6BEA6B81476BD713C31
SHA-512:	ABD654DD015DD474B4F3AEF3C701995B408CD87E4B9BAEBE3684B8DCF81FD69631DCC5B2C43E12AC9FA39DABCF53C1C0B275D85BDFB4EC6E0F076E4978EEB05C
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240522/r20110914/client/qs_click_protection_fy2021.js
Preview:	(function(){'use strict';/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .var q=this\|\|self;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1}function ba(a,b,c){return a.call.apply(a.bind,arguments)}function ca(a,b,c){if(!a)throw Error();if(2<arguments.length){var d=Array.prototype.slice.call(arguments,2);return function(){var f=Array.prototype.slice.call(arguments);Array.prototype.unshift.apply(f,d);return a.apply(b,f)}}return function(){return a.apply(b,arguments)}} .function r(a,b,c){r=Function.prototype.bind&&-1!=Function.prototype.bind.toString().indexOf("native code")?ba:ca;return r.apply(null,arguments)}function ia(a,b){function c(){}c.prototype=b.prototype;a.O=b.prototype;a.prototype=new c;a.prototype.constructor=a;a.P=function(d,f,e){for(var h=Array(arguments.length-2),g=2;g<arguments.length;g++)h[g-2]=arguments[g];return b.prototype[f].apply(d,h

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5945)
Category:	downloaded
Size (bytes):	264304
Entropy (8bit):	5.5763178448214346
Encrypted:	false
SSDEEP:	3072:Yhusc0Iard8OdwDMOba8VyCKqjysCBIQi9a+dQWqzGmRFD4xKNRDAH54O15gA:2zb8OdwDMWFz1zQi9TdQWqzGaVA+Ox
MD5:	060C7CE727BE69DA1DE98E2DBA0539A4
SHA1:	BC1917FFD0483A8DC4636AE7286BE8AAB45807C2
SHA-256:	233AC0FD9CC05E877F6EAE01F6665CE36B1465547FD74490117DE9F3D3104623
SHA-512:	F4994CB923631615A9CA3326769C3E44DE500B35F25724E0598026326BEEC314F3458C649925169DDBE845DC06672F573E08FE74AD2F613536C2F442F5E15C6D
Malicious:	false
Reputation:	low
URL:	https://www.googletagmanager.com/gtag/js?id=G-FG4BQLH20C&cx=c&_slc=1
Preview:	.// Copyright 2012 Google Inc. All rights reserved.. .(function(){..var data = {."resource": {. "version":"2",. . "macros":[{"function":"__e"},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0},{"vtp_signal":0,"function":"__c","vtp_value":0},{"function":"__c","vtp_value":""},{"function":"__c","vtp_value":0}],. "tags":[{"function":"__ogt_ga_send","priority":8,"vtp_value":true,"tag_id":16},{"function":"__ogt_referral_exclusion","priority":8,"vtp_includeConditions":["list","transfiles\\.ru"],"tag_id":18},{"function":"__ogt_session_timeout","priority":8,"vtp_sessionMinutes":30,"vtp_sessionHours":0,"tag_id":19},{"function":"__ogt_1p_data_v2","priority":8,"vtp_isAutoEnabled":true,"vtp_autoCollectExclusionSelectors":["list",["map","exclusionSelector",""]],"vtp_isEnabled":true,"vtp_autoEmailEnabled":true,"vtp_autoPhoneEnabled":false,"vtp_autoAddressEnabled":false,"vtp_isAutoCollectPiiEnabledFlag":false,"tag_id":20},{"function"

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 61628, version 1.0
Category:	downloaded
Size (bytes):	61628
Entropy (8bit):	7.996560994602728
Encrypted:	true
SSDEEP:	1536:D0bcbU0BkgaaHDF868T5Io63Udr9xCHGD1AMYN4+:gbcbUq5a4x8VV63ErD1g
MD5:	1033A47731E45F7BD46A1962359E96B4
SHA1:	AC6ABEF8D1819A685DB48A9515F77A24A153E2A0
SHA-256:	61C412FBDBBF1417355373A80125C8CF7E5CBAAB4218BAE0316FE6EF917BF798
SHA-512:	84CA95F89E0A16EFD962B44BD3F7FFE09B328F33C068ACD8A1FEFD08101D824929E8B9EECCB0786483AA2FD2C60BD0B76FC2242479268D69FAAB72C48902E34B
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/compressedFonts/RobotoBold.woff2
Preview:	wOF2.............~....U..........................D...\|..h.`..H.B..<.....l.....F...l.6.$.... ..". .."[.B...r...`..v..-.8.ko.0.W....)...B.........4..wf.......J&2.IZ.i)E.........FP.".Z.%j(...<...,.c..).5..bW.h..}......Mv.......,....7H...&...G..x..SzA.V.....}.. ..!s..H....:.....YZ.4.......~....@..T.WOK.?.k....".{..".R.><Tf.&.\|..r..F..z..I.+.5.\|=. l..J...A..&.^g/..#......O6..XS...r.g.}...._3....l..\.V.Nw...c...i.<.()..l4.3.2<...h}U. ........:7._...(S.AU..P.....bg...8..a./.x..oy............?UH...#.T.Tl.../..Z....f~..% .[/.D.6".2v97[.'...p...'a....i...x,.....@..vrq.kO....f..@2..5...U=..,.A.....]t.[d..".B ..,b..#J..q....'..E......8.........M.c....5....~.....g.....I...l..$.DM.$.B..wrM.;..p!#W..c....FTNO.P.@......WU...-...'.gB7........#......P.ItzxW..[*....R."/.....SV..&{......r+M...P..C..7.>E..kS.T.\...=s..I...Fh.4......gp..KJ..v...Y.....p"...i.I.d....jwH...t).cG.......>....^6..@.&\|....G......U..{.........$..7..]..r.2`..9..~....;....Y...g

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65534), with no line terminators
Category:	downloaded
Size (bytes):	116880
Entropy (8bit):	5.454292096973637
Encrypted:	false
SSDEEP:	3072:KUnmxlU1XUG0rxNcYu9VkzR2nUdO7OyfczYo:X2xqwzIyO7E
MD5:	D57DFB87B4655A9BBF694DB6F02D0313
SHA1:	7A08EEC10250898782E5C4AD897CF7B3963C2483
SHA-256:	22C27287B83053FD2EDE8E9E26B3420BC936751A662F2387B238CE3A2FB8DCCC
SHA-512:	48D8DA25AC4331F6B23DE5720BB6F44A546BB9EF6A5F37370E30F6F3D19D6086A12653FDCD065A61046C3A1A8A6F5F8CA7E13279908B2A9A8C98CFBA70D09EBE
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/ng-assets/creative/assets/index-5ff4bbc8.js
Preview:	var ls=Object.defineProperty;var as=(e,t,n)=>t in e?ls(e,t,{enumerable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var W=(e,t,n)=>(as(e,typeof t!="symbol"?t+"":t,n),n);function Gd(){import.meta.url,import("_").catch(()=>1),async function*(){}().next()}(function(){const t=document.createElement("link").relList;if(t&&t.supports&&t.supports("modulepreload"))return;for(const s of document.querySelectorAll('link[rel="modulepreload"]'))r(s);new MutationObserver(s=>{for(const o of s)if(o.type==="childList")for(const i of o.addedNodes)i.tagName==="LINK"&&i.rel==="modulepreload"&&r(i)}).observe(document,{childList:!0,subtree:!0});function n(s){const o={};return s.integrity&&(o.integrity=s.integrity),s.referrerPolicy&&(o.referrerPolicy=s.referrerPolicy),s.crossOrigin==="use-credentials"?o.credentials="include":s.crossOrigin==="anonymous"?o.credentials="omit":o.credentials="same-origin",o}function r(s){if(s.ep)return;s.ep=!0;const o=n(s);fetch(s.href,o)}})();var Ht,$,Jr,ze,qn,Qr,ln,Lt={},Xr=[

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 174x174, components 3
Category:	downloaded
Size (bytes):	5168
Entropy (8bit):	7.754506863039875
Encrypted:	false
SSDEEP:	96:JOnozqIxiazox3r5QVmxz2YONxoRRC5ewjQWekvp3YJlTVj6v8NkT0x:JOnomIxiiqpz2sRR6eGBGlhLJx
MD5:	96393D31F82D54A049C09A971CA70E58
SHA1:	A77AD9229D52530D1936017242A76248219FA6B5
SHA-256:	CE5C6A664266F7BD7C91B7962AC9D5145C026724D2B811AF7BB6FC24C25ABADD
SHA-512:	CEC7F37A87B33E662E012A5B987F946C95641F9E67E63E5555C8F3DD25162F4E062F6C6F17E7D9ACF5952EC8032C50D475826E26B752F7B06C73D751AD295571
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/images/bg.jpg
Preview:	......JFIF.............C....................................................................C.......................................................................................................................................................0h@.@..@.@@........&.......H.....$ FM..4FM....B`.....4@h..0 $.@$@h..@DD..@.H.L.#$.h..." .4d......." D@&M..fH.0l@@D.4`...4@ &......&...L........D.@h.@.!..".....".4DFD...H....".$B....@D......@"..$Bd."#"........6.$. &D..HHL.. ..""4@ l..!2 $$.."..... 4@.D$Dh.$h....!...FM.......................... !A.0@1...............j..0.S_v6$.-..... ...w. .....8..f.j......;.Wj..s<....../......\i.E..N.o.\3.=.{..G,...'..,0..0..,..Yc(.0..0.N....Ye..(......(..+..e~Y\|..............................?.r...............................?.r....!....................1 0!A.@qQ..........?.....M.TQB....>rYu.ee...R...W.z.......qp....x..X.e......=..}.....<../C.G..X.y...\_...`..<h..(..........hb..q.C...XTu...jp..}....z,....e2..E..G..Y-.b...?...&....

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 150 x 44, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2660
Entropy (8bit):	7.908644382055355
Encrypted:	false
SSDEEP:	48:kajIExFbaNqfjsL8Jz2YoNpmbSRJUpI93B8f7H6XMVk5GZj:kul7saHEWItB4r635Kj
MD5:	5E001B8B0FDD7C038C577E433D8ACE56
SHA1:	C679731F496B909DE0BF337AF98C27DF71AEF747
SHA-256:	F6C9C3FE103E395D83C3D4969B49A8178716DED3D2886D871E61820914FAC705
SHA-512:	9B2FB0892DB77CAF00BE89399843BEA5E48BC89E3E458B8521DFA14DD9831655B11C3F6C28F6BD997F8EB8AE73D866151DE1785F32A91A766FE83A4A5824573D
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/sqoutlogo_1716467887.png
Preview:	.PNG........IHDR.......,......PA....+IDATx....\U..?..n.@K...Q.LE+..mQ...F....-.i4.n..BDYH@P..$...j....vk.....Q.t.D$..l.H@.P@.@...y.?.........na>.d..w.g.....{.A..5j..F.2W}f.Z.;.t)0..>y.c.........Q#...J4>p..}7...^].&...0p.`......F...e....d-0.....^.<Q..p.0..m.y0.....F.\|.%.z`.....r"...L.AZTu+..q.&..._a....A...:_..C^V7.<.3..<..3...(.k..(I..\|....Fhf..j...UcZ....I,...:..{b....vV...3Aha.z.........~V.g......1.aq%.P.;4.F9.....s...40..;.?T........Tx.GE.A.Z.:.......b.v....~......\|..2.C.+.z....3........LK.6...be.&...Y\m.V.s...f.ZXI...F.P..G...eEl...!..5p`.t...DQe._P.%G.v`..&......-mR \|..C.${W.3W.zK.[T..S.=......6....ut.....cNV...g0..=....=.@.Nc.....y.)OX......2.k..Wfyw..\|...S.ME..s..tS..o...Vkc.\..FDWJ.OB.R%..+...'...4.w.{'..,fA\|<.9...r...H][.,.0...sQ...G.11H.c...l.VQ.(q.<.."..0.l..X.sQW.i....'...8...k7.E.'.[v..ji.Hd.............9.gK......."p..H.qA..p;p...jg.I.`NN....#88.{...vy.x.$...,*.M3..O...uys..:...B.....6f7C...`...hm.\|....T...9..:..d.....q..

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1054)
Category:	downloaded
Size (bytes):	2689
Entropy (8bit):	5.40021492400263
Encrypted:	false
SSDEEP:	48:Otg7xBo1IN7Qa69Fa9FKYPCfmY/bZyf2jcju8m5I0zRHkFRvEJG:/N7QaaiC+Y/jcju8WhRHMxEJG
MD5:	9EF158292B617D358506529B02C73629
SHA1:	843852D8ADDBF1A7F96C5607179E1C9423ED8A4C
SHA-256:	3164DB7EF9EFC7121CE85192340A653C6CB87E34CAA05849C8FD47B7872F9FC5
SHA-512:	D4B0E6E8900043C9C4EE010ABFD00A51D891FE4B4F424418DC1A75075E3DF931D0558BFB3E983190079EDDD0BF11D7604E70CEAF119351690812EBC21D7EAEB8
Malicious:	false
Reputation:	low
URL:	https://tpc.googlesyndication.com/pagead/js/r20240522/r20110914/client/window_focus_fy2021.js
Preview:	(function(){'use strict';function f(a,b,e){a.addEventListener&&a.addEventListener(b,e,!1)};/* . . Copyright The Closure Library Authors. . SPDX-License-Identifier: Apache-2.0 .*/ .function g(a,b,e){if(Array.isArray(b))for(var c=0;c<b.length;c++)g(a,String(b[c]),e);else null!=b&&e.push(a+(""===b?"":"="+encodeURIComponent(String(b))))};function l(a=document){return a.createElement("img")};function m(a,b,e=null,c=!1){n(a,b,e,c)}function n(a,b,e,c){a.google_image_requests\|\|(a.google_image_requests=[]);const d=l(a.document);if(e\|\|c){const k=h=>{e&&e(h);if(c){h=a.google_image_requests;const v=Array.prototype.indexOf.call(h,d,void 0);0<=v&&Array.prototype.splice.call(h,v,1)}d.removeEventListener&&d.removeEventListener("load",k,!1);d.removeEventListener&&d.removeEventListener("error",k,!1)};f(d,"load",k);f(d,"error",k)}d.src=b;a.google_image_requests.push(d)};function p(a=null){return a&&"22"===a.getAttribute("data-jc")?a:document.querySelector('[data-jc="22"]')};var q=document,r=window;functi

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 61736, version 1.0
Category:	downloaded
Size (bytes):	61736
Entropy (8bit):	7.996579108855938
Encrypted:	true
SSDEEP:	1536:k6Fj5vgPSsqNzcvwFQsQK+CKxd+Vs6lj9BsA:zl5vAqEVXKexB6tPsA
MD5:	EDE84D96808C486E3DE74CBD8F2A2C80
SHA1:	BAE3CE34F928BE471EE489BBFE5B7425AEE8298E
SHA-256:	02F1DCC0C722E24CBA9BE4B720831A79489E766D5EDF8B77F582E0869312D86E
SHA-512:	996D7258DD45F8676916F05138E7F3141ABD7C0207AE43CA820A10211BD237C6BDAC0209967B45C4A1D27C08DBAAD2F933D16D0400B0710981804E651D4B804B
Malicious:	false
Reputation:	low
URL:	https://cdn.bidbrain.app/compressedFonts/RobotoRegular.woff2
Preview:	wOF2.......(......................................D...$..h.`..H.L..<.....`..C..F...l.6.$.... .... ..[[OG..........m.P.t../..F4....V.<m.BH7........k...o......./K&2f...... s.:....;.Bh.Q.G...4...QH..&.m.:J.......X.8:.].S[Oo..$.Y.}.........&9...:/..]..i....>..+$!.Y.&..L...T..o,3zo..:.....H...9a...k.[.9.?tR..$.......j...B..:Uo\..$.M...-op...B..6..lx.~.....p,...0.............>.%k..;Q'..GV......!..?.... <.?.-.$.<.:..j.e7.sa.e!.....&.'..R.^.Z~.N=....x....^.E.z..<.$.)%..;...K..'.B.+......{~.A.....].~.n$Vw....\d.Ce.k.).shnB"*..:...{.A.....=.^....HH.>.....W.....9..a.z.7&q....(...E>eD.\..R."~j..........y..(.M-R.vny..xRQ.V...y.O..0........._..U.<^.n...~..Gp.NW>...3.LC..`'.oR..eD.%p........&.....Ytb..x_\|e.....g.....Ds..#W:r...U..=!l.Z...f...........UQv...X..n..B.eT.)Fm`.Q..O.K..I+Y.d.8..(...>..w\.............U.}....!:.,...l.JaA!,F..?....l........i&.......e.IW~...`R@.BH..2....z.o..5b..`T.H...R...B..LJ....$...)z....6w.H.. l..y..'jr..6....c....\|]......y.O...c.f.X$E5..{s.

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 13, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	224
Entropy (8bit):	5.940999098565218
Encrypted:	false
SSDEEP:	6:6v/lhPxQ5QTYCMkw/5WnDi3Um9gJKYrpVMoj9cup:6v/7qY/Vm2tdVM8cc
MD5:	01F78ADD7628815BAA0126489CA6BBB4
SHA1:	8630ADF2A0008C1789A538F140BEF9C203BB3B58
SHA-256:	670BC999DF02739E39C67AB53DD9E9D4C7BE5049C14C29613FD96B2907A798A5
SHA-512:	13F2268D21EFAAE67C94F409A6E46F6B3F621B8DAE375417DB3D1AFC62A3EBC9B5DC560B9ED534CB778BE31820460F9418E4CFBA1E1E95CF867C2B2E30DA5D63
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............PN^....sBIT....\|.d.....pHYs............Z....tEXtCreation Time.09/04/16._......tEXtSoftware.Adobe Fireworks CS5q..6...8IDAT8.c.......&j.64.dY...........C ../.....OQ.....T7...o..._......IEND.B`.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	192
Entropy (8bit):	4.614857981029798
Encrypted:	false
SSDEEP:	3:pIifFrEJQAuY2XQfDcA+KwjHJ9LfzH3Xh/968fuItLCH4vFENdgGffDDpvF9LR6J:v5ENCXlVK+JVzXXhYILCHiKN2GTSJ
MD5:	BD8C9D5AF34BAFBDBF5C82111ED1AFA8
SHA1:	2CB84977FDCD5D7EF785244BA649BF89193908A5
SHA-256:	EB58367FC672BC71591401DF80E1BD01B43BC9D9A69BFCCE3F3478A637D499D7
SHA-512:	A3667A0A7E480A9220E880DB46A497ADE3C54937E9CA7948D576D301C1CF0ED55CA0BF92ECE98EA9F6E6F0EB4176826C1519F50F4A362234D475F12E9FF23DEB
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/manifest.json
Preview:	{. "name": "Transfiles",. "icons": [. {. "src": "\/images\/icon-192.png",. "sizes": "192x192",. "type": "image\/png". }. ],. "theme_color": "#ffffff",. "start_url": "transfiles.ru".}

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	1222
Entropy (8bit):	7.550744742727829
Encrypted:	false
SSDEEP:	24:r7hQAenoSbYHL2jDCqvybA6ar7DjSTdvbRYO0Tbxn1C1wGA2dx:rn6oSbuL2Hr73SJvbyO0Rn1C/AWx
MD5:	3B7F009B9E66DD02EEA2CCDB26402572
SHA1:	569DE17E48B02F316760CA0813B723280A804B8A
SHA-256:	2B68B345C236CD622A7FF2B26F080D6CF820A8B684924533C28ED26DEF132E2C
SHA-512:	ECF9733401800A263ABE545B29684E8A78238025F0FDDF2D0346C954C08A945EC51EE01F02CAC8BD16D2D935773E994AFC52BFB9FA0AAFE9CFCDFB67BBBA5C12
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/images/abuse.png
Preview:	.PNG........IHDR...............^....mPLTE........\.).'........A..F..[..`.4.q..].9.&.f...#...&.'.#.+.*.:.<.Y...3.....<.6.N....<.<.....S.g..................................................".......0................................~..\|..}.....x..z..\|..w..z..{..\|..v..v..s..t..t..u..v..{..r..s..x..m..o..k..l..o..m..o..v..{..\|..g..Z..^..o..W..^..S..a..i..Q..R..Q..O.J...F.1.3.4.H.<.f..................................................6...................1...............4.......................................................A...TtRNS....................''))11111::=QTTUXXZZ__e}}.......................................fX+.....IDAT..}..CNQ...7{o.BvFd..G.ew............3...{.).79}.~u...<.,2..0..O....E7#..!...?'...~.L.\.<..cB3.%/..34.A(y...gM'.].....4..,5..TC.\.K.g....y....#.Y.36.\|.._...(X.k...U..z.m).w. ..).g{...v.'....Z?f..?R...m.2......w....

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	44902
Entropy (8bit):	5.312262547659625
Encrypted:	false
SSDEEP:	768:CpsxMcC0y455m1mK5sRRR6Gu5qOF568G+05Q85250N+:Dx/C0y455m1mK50/6Gu5qw568G+05QTf
MD5:	41DD851472D83EB4B37DF1716A655ED6
SHA1:	CE1F170A7A284F0E52ED46BE1050D0A4EBCBE336
SHA-256:	ED23D77F6F9B412693CC70E8A3C3244919B82829198C8A07750FA3C10D6DE7E5
SHA-512:	9A784F1E7E064934599F35E7B41A57C8FEB5A16CAAB4EB1A04085FF753C8BFF4B61BA3C0AC1DA81D9A9447F9E39BF44FB9E68A34EFEA686716060034B413559A
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/css/common.css?rnd=11
Preview:	body{..background:#fff;. font-family: Tahoma,Helvetica,sans-serif;. font-size:65%;. text-align:left;. -moz-user-select: none;.....line-height:1.5; //.}..html, body {. height: 100%;.}.body, h1, h2, h3, h4, h5, h6, p, form{. margin: 0;. padding: 0;.}..h1, h2, h3, h4, h5, h6 {...font-weight:normal; //..}...input, textarea, select, a{..outline: none;.}...wrapper{..position: relative;. width: 100%;.}..header{..width:100%;../height:120px;/..height:130px;..border-bottom:1px solid #fff;..position:relative;....background: #c5d496; /* Old browsers /..background: -moz-linear-gradient(top, #c5d496 0%, #abbd73 76%); / FF3.6+ /..background: -webkit-gradient(linear, left top, left bottom, color-stop(0%,#c5d496), color-stop(76%,#abbd73)); / Chrome,Safari4+ /..background: -webkit-linear-gradient(top, #c5d496 0%,#abbd73 76%); / Chrome10+,Safari5.1+ /..background: -o-linear-gradient(top, #c5d496 0%,#abbd73 76%); / Opera 11.10+ */..background: -ms-linear-gradient(t

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 111 x 111, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5827
Entropy (8bit):	7.919369335044232
Encrypted:	false
SSDEEP:	96:txMY/VPIj1XidmutGXwp7sJNy/N7JM/Naek1v94VVBgc0rPusmkgsyRohoCG:T5o1yEu4XoaN07JMFNmv94R4PhmkglR/
MD5:	498B23DE0554C143497C5D7B2851D576
SHA1:	17AF9E7ABA65AAF735DEA827CF5FE289FE26E18C
SHA-256:	65D1456BE6662023DA53E43FE6969523B439F1C1BBE4C50D83A03140E2F4DF34
SHA-512:	28612240511EC0BE6930E0CC03F7214D0713A6436BC63CE26FEEBDFCE80EDB883B78E567CC3ACAE8D95A4190A764E401692FC711C7670C0A5E37FBA480D03F0E
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/images/logo.png
Preview:	.PNG........IHDR...o...o.......nR....gAMA......a.....sRGB.........PLTE......................................................................s.............................s................z............&...........;.....<....0...................H...............h.....1............................g............................c....p..t...............U.............T....J.G.........9...`.....f.1..........................&........................u......:.>................b........j.p....%..................................H.........................B..........~........... ....................,................I...I.J..............}.....^..................Q.......................d........z........W...}................1D.g....tRNS...,D....:.(3.#8A;w.`...CIDATh.\|Yk.]U..D..M..w?.kg.e.N........."4M...&.H.cL...d:"T.......HP.C*.(.....(..h\|..\|..G.h...s.....if..g...[.Z.......

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	40
Entropy (8bit):	4.358694969562841
Encrypted:	false
SSDEEP:	3:mS+bhnSSqDCkukbYn:mSVck3bYn
MD5:	5D324D34738C0AC6819A94E8AB58ACFC
SHA1:	508E5867CC88AF0CC5B23D274E0A4706B5ED5191
SHA-256:	1EC2106C53B6E4C6437F3257CAE53DB801F22680B05C3C8E2BEF9125592D04F9
SHA-512:	1B3D3B8033651B2F2396F709417B3A0E4031450A3B6FEC337348198D31FBB307A050A4561FAF600BC97C3924536C9E2A57E1B6D3E498FDC377505DF4CB289C74
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xNDkSHglTPZVogpCqOBIFDbVO8OESBQ3pjHeIEgUNdV-5QQ==?alt=proto
Preview:	ChsKBw21TvDhGgAKBw3pjHeIGgAKBw11X7lBGgA=

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 32 x 32
Category:	dropped
Size (bytes):	3197
Entropy (8bit):	7.567645085093109
Encrypted:	false
SSDEEP:	48:3xiyw10Mgv9EDOqdtt5qUEqDaj+FibxhB9AMoCub4DzlpQhUMgdYXDU:3xG0MqkTdEvjFxhXoQVHR
MD5:	F23A0ED5E938245E48793816B17F3300
SHA1:	39D2680B2D664131D51C2C7D9530DE5F4E13A0AD
SHA-256:	9A380B47A2623EFCA3AB7F6A09893CEDD9D0294139439430B42984AA8C71D72A
SHA-512:	3DDE16D209B8EF26879903CBD8BE82B5F877D955D5D3F8FD96BB35757C52B584A74F222CB51DFAD9B5B39E087915AEE2B2E227E0B67F3F96B44A0EDA53BE5437
Malicious:	false
Reputation:	low
Preview:	GIF89a . ..................777WWW.........................!..NETSCAPE2.0.....!..Created with ajaxload.info.!.......,.... . .@....I)Y..:J..(.......!.p.o4..C.H..N...%..j...%Y8'+.rB.0.... .Fs.Z4\|....A..\...Ia.n.Ya...1h.8:q.C.y....g,.S\)_..Q?e.....+..S.....5.#.lO<...#..vY...J;v\....aU}L.. 5....{\|q..&k....23.87......._.X...`.......+..=L.....).qX...&Aq"..!.......,.... . .@....I)Q..z.H.Q..F,..$C{Hl+g[=....T........@..r.X,J.I..N^V....r......h....TP..lh......N.x<.cQ3`r.7_...X5g-UD[.+2..1Xe......_.r.....\|V.#..w.'.n...LK..N...F:w.N.W-cS.X..h.3.W..r[.......7...^..Y.5..^HY.......x...,..ee.....9+..n;..S.,...!.......,.... . .@....I.(..F:.!.YE(.t.. %C,..6.."u.8.1.L"..4#..PhN....89....j.a_...60....WrHT..lt=...L'"...@2.fT,,}tt7....[..1)\4.d^Gd>h.....0x.T....$t.#~p..Qqt.ION.....I:......,.UaF..5.......ak..ST....7......X.G]....t....].....me.hh].....fG9,....w...."..!.......,.... . .@....Ii...F:.0..P....R"..&.Km+..!.J/.L.....C...J.".. .N...K.....$....R..\.'[...,.8..+...Tvoo67M..i.

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19040)
Category:	downloaded
Size (bytes):	19359
Entropy (8bit):	5.028640224547321
Encrypted:	false
SSDEEP:	192:7RbGoLN83BRKmfL+ClFVPDhjfHGTgiD3VARMWvdO34AgEJrv/T16OsQon05rzIHp:9XZ8WjOVRXy16/kXIHHSHruwc
MD5:	697D69A48E5356F7106E38C09F7F19E0
SHA1:	B57160771FA597A5B56C5B12756C693E4829BE07
SHA-256:	BB9E7DC822C6B7B95A6329932885C72FF2CAF74B243FC1C40ACA0E858123B83E
SHA-512:	898B8BE9B092AC7DCD1EFE0381DB28FB8ED0555419CDAF40BF739EDFB7945F8E301A95E6392677B2564B1F5838A560E6F309394CC46B1BD7B570B6F9312B90E1
Malicious:	false
Reputation:	low
URL:	https://transfiles.ru/js/jquery.bxslider.min.js
Preview:	/*. BxSlider v4.1.2 - Fully loaded, responsive content slider. * http://bxslider.com. . Copyright 2014, Steven Wanderski - http://stevenwanderski.com - http://bxcreative.com. * Written while drinking Belgian ales and listening to jazz. . Released under the MIT license - http://opensource.org/licenses/MIT. */.!function(t){var e={},s={mode:"horizontal",slideSelector:"",infiniteLoop:!0,hideControlOnEnd:!1,speed:500,easing:null,slideMargin:0,startSlide:0,randomStart:!1,captions:!1,ticker:!1,tickerHover:!1,adaptiveHeight:!1,adaptiveHeightSpeed:500,video:!1,useCSS:!0,preloadImages:"visible",responsive:!0,slideZIndex:50,touchEnabled:!0,swipeThreshold:50,oneToOneTouch:!0,preventDefaultSwipeX:!0,preventDefaultSwipeY:!1,pager:!0,pagerType:"full",pagerShortSeparator:" / ",pagerSelector:null,buildPager:null,pagerCustom:null,controls:!0,nextText:"Next",prevText:"Prev",nextSelector:null,prevSelector:null,autoControls:!1,startText:"Start",stopText:"Stop",autoControlsCombine:!1,autoControlsSe

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 27, 2024 15:00:52.501385927 CEST	443	49694	92.123.104.38	192.168.2.18
May 27, 2024 15:00:52.501471043 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:52.527195930 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:52.527215958 CEST	443	49694	92.123.104.38	192.168.2.18
May 27, 2024 15:00:52.528196096 CEST	443	49694	92.123.104.38	192.168.2.18
May 27, 2024 15:00:52.528259993 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:52.530525923 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:52.530589104 CEST	443	49694	92.123.104.38	192.168.2.18
May 27, 2024 15:00:52.871608973 CEST	443	49694	92.123.104.38	192.168.2.18
May 27, 2024 15:00:52.871696949 CEST	443	49694	92.123.104.38	192.168.2.18
May 27, 2024 15:00:52.871733904 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:52.871784925 CEST	443	49694	92.123.104.38	192.168.2.18
May 27, 2024 15:00:52.871814966 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:52.871848106 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:52.871979952 CEST	443	49694	92.123.104.38	192.168.2.18
May 27, 2024 15:00:52.872046947 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:52.872113943 CEST	443	49694	92.123.104.38	192.168.2.18
May 27, 2024 15:00:52.872179985 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:52.873579979 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:52.873580933 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:52.873616934 CEST	443	49694	92.123.104.38	192.168.2.18
May 27, 2024 15:00:52.873682022 CEST	49694	443	192.168.2.18	92.123.104.38
May 27, 2024 15:00:57.957304001 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:57.957357883 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:00:57.957422018 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:57.957679987 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:57.957688093 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:00:57.958197117 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:57.958205938 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:00:57.958265066 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:57.958518028 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:57.958528042 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:00:59.691231966 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:00:59.691518068 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:59.691550016 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:00:59.693254948 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:00:59.693352938 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:59.694149017 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:59.694237947 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:00:59.694324017 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:59.694339037 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:00:59.710103035 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:00:59.710359097 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:59.710371017 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:00:59.713845968 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:00:59.713913918 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:59.714140892 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:59.714195967 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:00:59.746893883 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:59.762976885 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:00:59.763010979 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:00:59.810873032 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.004960060 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.049887896 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.049918890 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.096940994 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.112466097 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.112479925 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.112540960 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.112565041 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.112577915 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.112580061 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.112597942 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.112641096 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.112641096 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.112658978 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.112663984 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.112720013 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.112767935 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.112775087 CEST	443	49699	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.112809896 CEST	49699	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.117602110 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.117644072 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.117696047 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.117738008 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.117948055 CEST	49702	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.117957115 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.118009090 CEST	49702	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.118330002 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.118338108 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.118395090 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.118675947 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.118724108 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.118812084 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.118824005 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.118885994 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.118990898 CEST	49702	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.118999958 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.119146109 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.119163036 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.119307995 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.119326115 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.162503004 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.329669952 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.379920959 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.434813976 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.434853077 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.434870958 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.434916973 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.434922934 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.434933901 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.434962034 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.435010910 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.435025930 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.435075045 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.436566114 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.436573029 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.436608076 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.436625004 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.436655045 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.436661005 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.436705112 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.442457914 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.442501068 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.442545891 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.442550898 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:00.442610025 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.442986012 CEST	49698	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:00.443002939 CEST	443	49698	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.174319983 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.174639940 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.174657106 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.175734043 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.175817013 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.176004887 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.176129103 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.176212072 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.176273108 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.176300049 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.176392078 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.176400900 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.177345037 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.177409887 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.177783966 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.177846909 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.177938938 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.177948952 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.220982075 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.220983028 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.486819029 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.486932039 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.486993074 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.487008095 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.487023115 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.487050056 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.487077951 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.488035917 CEST	49704	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.488051891 CEST	443	49704	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.490151882 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.542258024 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.597892046 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.597923040 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.597942114 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.597987890 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.598006964 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.598017931 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.598046064 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.598086119 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.598093033 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.598125935 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.599524975 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.599545956 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.599585056 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.599611044 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.599617004 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.599649906 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.602569103 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.602817059 CEST	49702	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.602824926 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.603146076 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.604726076 CEST	49702	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.604793072 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.604888916 CEST	49702	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.650500059 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.706188917 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.706254959 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.706306934 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.706332922 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.706367016 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.706398010 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.706466913 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.706583023 CEST	49703	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.706594944 CEST	443	49703	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.709522963 CEST	49705	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.709557056 CEST	443	49705	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.709639072 CEST	49705	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.709979057 CEST	49706	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.709989071 CEST	443	49706	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.710036039 CEST	49706	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.710217953 CEST	49705	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.710228920 CEST	443	49705	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.710365057 CEST	49706	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.710380077 CEST	443	49706	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.822387934 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.822715998 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.822735071 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.823833942 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.824143887 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.824275017 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.824316978 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.873884916 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.917629957 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.918895960 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.918991089 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.919023037 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:01.919024944 CEST	49702	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.919083118 CEST	49702	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.919276953 CEST	49702	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:01.919303894 CEST	443	49702	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.135631084 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.176873922 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.244946957 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.244978905 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.244999886 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.245047092 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.245057106 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.245068073 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.245098114 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.245122910 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.245166063 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.245202065 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.245237112 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.255194902 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.255217075 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.255287886 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.255306005 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.255368948 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.353158951 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.353215933 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.353297949 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.353358030 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.353393078 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.353509903 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.355814934 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.355834961 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.355895996 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.355906963 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.355957031 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.357312918 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.357332945 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.357394934 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.357404947 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.357455015 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.358674049 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.358725071 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.358746052 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.358753920 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.358768940 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.358825922 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.358839989 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.359039068 CEST	49701	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.359051943 CEST	443	49701	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.370744944 CEST	49708	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.370769978 CEST	443	49708	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.370863914 CEST	49708	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.371284962 CEST	49709	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.371292114 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.371352911 CEST	49709	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.371622086 CEST	49710	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.371628046 CEST	443	49710	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.371685028 CEST	49710	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.372199059 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.372205973 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.372272015 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.372688055 CEST	49708	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.372700930 CEST	443	49708	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.372839928 CEST	49709	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.372852087 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.372984886 CEST	49710	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.372993946 CEST	443	49710	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.375178099 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.375190020 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.383096933 CEST	443	49705	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.383822918 CEST	49705	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.383832932 CEST	443	49705	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.384176970 CEST	443	49705	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.384604931 CEST	49705	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.384677887 CEST	443	49705	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.384696960 CEST	49705	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.385271072 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:02.385303020 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:02.385385036 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:02.385582924 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:02.385597944 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:02.386425018 CEST	443	49706	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.386728048 CEST	49706	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.386735916 CEST	443	49706	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.387960911 CEST	443	49706	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.388369083 CEST	49706	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.388369083 CEST	49706	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.388384104 CEST	443	49706	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.388546944 CEST	443	49706	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.426506042 CEST	443	49705	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.431025982 CEST	49705	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.434354067 CEST	49706	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.623692036 CEST	49714	443	192.168.2.18	216.58.212.164
May 27, 2024 15:01:02.623725891 CEST	443	49714	216.58.212.164	192.168.2.18
May 27, 2024 15:01:02.623802900 CEST	49714	443	192.168.2.18	216.58.212.164
May 27, 2024 15:01:02.624027014 CEST	49714	443	192.168.2.18	216.58.212.164
May 27, 2024 15:01:02.624034882 CEST	443	49714	216.58.212.164	192.168.2.18
May 27, 2024 15:01:02.693687916 CEST	443	49705	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.693767071 CEST	443	49705	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.693907022 CEST	49705	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.694504976 CEST	49705	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.694524050 CEST	443	49705	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.694931984 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.694962978 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.695029020 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.695441961 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.695456982 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.698347092 CEST	443	49706	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.698566914 CEST	443	49706	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.698641062 CEST	49706	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.700144053 CEST	49706	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.700150013 CEST	443	49706	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.700546026 CEST	49716	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.700570107 CEST	443	49716	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.700643063 CEST	49716	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.701210976 CEST	49716	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.701226950 CEST	443	49716	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.758502960 CEST	49717	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.758519888 CEST	443	49717	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.758599043 CEST	49718	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.758599043 CEST	49717	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.758606911 CEST	443	49718	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.758713961 CEST	49718	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.759006977 CEST	49717	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.759006977 CEST	49718	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:02.759021997 CEST	443	49717	65.108.228.44	192.168.2.18
May 27, 2024 15:01:02.759035110 CEST	443	49718	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.051836967 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.052208900 CEST	49709	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.052227020 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.053283930 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.053354979 CEST	49709	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.053739071 CEST	49709	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.053808928 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.053997040 CEST	49709	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.054003954 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.066863060 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.067147017 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.067156076 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.070631027 CEST	443	49710	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.070750952 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.070816994 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.070868015 CEST	49710	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.070877075 CEST	443	49710	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.071271896 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.071413040 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.071419001 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.071455956 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.072719097 CEST	443	49710	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.072783947 CEST	49710	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.073208094 CEST	49710	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.073324919 CEST	443	49710	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.073365927 CEST	49710	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.078006983 CEST	443	49708	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.078229904 CEST	49708	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.078238010 CEST	443	49708	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.079375029 CEST	443	49708	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.079691887 CEST	49708	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.079830885 CEST	49708	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.079834938 CEST	443	49708	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.079864979 CEST	443	49708	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.102859020 CEST	49709	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.107594967 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.107886076 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.107897043 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.108916998 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.108983040 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.110140085 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.110208988 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.110349894 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.110358953 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.118498087 CEST	443	49710	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.118877888 CEST	49710	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.118882895 CEST	443	49710	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.118901968 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.118906975 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.134869099 CEST	49708	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.150892019 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.166889906 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.166889906 CEST	49710	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.279795885 CEST	443	49714	216.58.212.164	192.168.2.18
May 27, 2024 15:01:03.280092001 CEST	49714	443	192.168.2.18	216.58.212.164
May 27, 2024 15:01:03.280111074 CEST	443	49714	216.58.212.164	192.168.2.18
May 27, 2024 15:01:03.281853914 CEST	443	49714	216.58.212.164	192.168.2.18
May 27, 2024 15:01:03.281928062 CEST	49714	443	192.168.2.18	216.58.212.164
May 27, 2024 15:01:03.283201933 CEST	49714	443	192.168.2.18	216.58.212.164
May 27, 2024 15:01:03.283299923 CEST	443	49714	216.58.212.164	192.168.2.18
May 27, 2024 15:01:03.326886892 CEST	49714	443	192.168.2.18	216.58.212.164
May 27, 2024 15:01:03.326901913 CEST	443	49714	216.58.212.164	192.168.2.18
May 27, 2024 15:01:03.361520052 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.361622095 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.361701012 CEST	49709	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.361752987 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.361793041 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.361864090 CEST	49709	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.362477064 CEST	49709	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.362520933 CEST	443	49709	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.362879038 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.362901926 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.362962961 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.363563061 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.363573074 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.366524935 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.366556883 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.366620064 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.366827011 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.366844893 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.372267008 CEST	49721	443	192.168.2.18	172.217.18.98
May 27, 2024 15:01:03.372309923 CEST	443	49721	172.217.18.98	192.168.2.18
May 27, 2024 15:01:03.372391939 CEST	49721	443	192.168.2.18	172.217.18.98
May 27, 2024 15:01:03.372555017 CEST	49721	443	192.168.2.18	172.217.18.98
May 27, 2024 15:01:03.372586012 CEST	443	49721	172.217.18.98	192.168.2.18
May 27, 2024 15:01:03.373266935 CEST	443	49716	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.373456955 CEST	49716	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.373465061 CEST	443	49716	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.373786926 CEST	443	49716	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.374072075 CEST	49716	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.374135971 CEST	443	49716	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.374180079 CEST	49716	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.374871016 CEST	49714	443	192.168.2.18	216.58.212.164
May 27, 2024 15:01:03.375624895 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.375864029 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.375873089 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.376205921 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.376497984 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.376558065 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.376605988 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.379897118 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.380131006 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.380153894 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.380196095 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.380204916 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.380224943 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.380254984 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.380295038 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.380342007 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.381352901 CEST	49711	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.381357908 CEST	443	49711	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.381639004 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.381673098 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.381727934 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.382510900 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.382541895 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.385507107 CEST	443	49710	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.385566950 CEST	443	49710	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.385621071 CEST	49710	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.385931969 CEST	49723	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.385951042 CEST	443	49723	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.386007071 CEST	49723	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.386214018 CEST	49723	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.386224031 CEST	443	49723	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.386615992 CEST	49710	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.386620998 CEST	443	49710	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.387061119 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.387123108 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.387221098 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.387602091 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.387625933 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.390019894 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.390039921 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.390121937 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.390306950 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.390330076 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.391561031 CEST	443	49708	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.391630888 CEST	443	49708	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.391680956 CEST	49708	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.392971992 CEST	49708	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.392978907 CEST	443	49708	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.397675991 CEST	49726	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.397695065 CEST	443	49726	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.397768021 CEST	49726	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.398005009 CEST	49726	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.398027897 CEST	443	49726	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.418490887 CEST	443	49716	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.418504000 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.422902107 CEST	49716	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.422960043 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.461266994 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.462141991 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.462156057 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.462225914 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.462251902 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.466943026 CEST	443	49718	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.467211962 CEST	49718	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.467221975 CEST	443	49718	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.468842983 CEST	443	49718	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.468909025 CEST	49718	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.469325066 CEST	49718	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.469325066 CEST	49718	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.469403982 CEST	443	49718	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.473917961 CEST	443	49717	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.474129915 CEST	49717	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.474149942 CEST	443	49717	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.475368023 CEST	443	49717	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.475436926 CEST	49717	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.475744963 CEST	49717	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.475837946 CEST	443	49717	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.475874901 CEST	49717	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.502919912 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.517874002 CEST	49718	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.517894030 CEST	443	49718	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.517906904 CEST	49717	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.517915010 CEST	443	49717	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.564877033 CEST	49717	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.565043926 CEST	49718	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.594201088 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.594213963 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.594297886 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.594312906 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.595839977 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.595865965 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.595920086 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.595927954 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.595962048 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.635870934 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.635886908 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.635967970 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.635979891 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.683897018 CEST	443	49716	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.683967113 CEST	443	49716	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.684035063 CEST	49716	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.685374022 CEST	49716	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.685388088 CEST	443	49716	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.688107014 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.688160896 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.688270092 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.688507080 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.688538074 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.692884922 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.704916000 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.706608057 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.706615925 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.706680059 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.706691980 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.727014065 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.727055073 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.727087975 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.727108955 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.727148056 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.727157116 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.727230072 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.727241039 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.727257967 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.727283001 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.727291107 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.727300882 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.728079081 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.728089094 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.728163958 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.728173018 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.729089975 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.729099035 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.729170084 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.729177952 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.730007887 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.730036020 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.730098963 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.730108976 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.730134964 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.753896952 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.769419909 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.769545078 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.769571066 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.795674086 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.795706034 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.795742989 CEST	443	49717	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.795753002 CEST	443	49718	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.795756102 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.795778036 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.795806885 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.795818090 CEST	443	49717	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.795829058 CEST	443	49718	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.795862913 CEST	49717	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.795890093 CEST	49718	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.797738075 CEST	49717	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.797754049 CEST	443	49717	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.798131943 CEST	49728	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.798152924 CEST	443	49728	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.798217058 CEST	49728	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.798368931 CEST	49718	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.798377037 CEST	443	49718	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.799123049 CEST	49728	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.799143076 CEST	443	49728	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.813102007 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.813111067 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.813180923 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.813188076 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.813254118 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.814111948 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.814119101 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.814174891 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.814182043 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.814263105 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.814928055 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.819104910 CEST	49715	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.819116116 CEST	443	49715	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.825431108 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.825464964 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.825536966 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.825905085 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:03.825922966 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:03.844907045 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.860058069 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.860078096 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.860122919 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.860143900 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.860152960 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.860158920 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.860178947 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.860213995 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.860220909 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.860320091 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.860474110 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.860493898 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.860541105 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.860554934 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.860558987 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.861396074 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.861417055 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.861532927 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.861532927 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.861552954 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.861579895 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.861608028 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.861627102 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.861641884 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.862447023 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.862529039 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.862540960 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.863368034 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.863426924 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.863436937 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.864068031 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.864132881 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.864140034 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.864592075 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.864672899 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.864681005 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.902261019 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.902381897 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.902414083 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.946885109 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.946994066 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.947016001 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.947204113 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.947243929 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.947273016 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.947280884 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.947290897 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.950649977 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.950740099 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.950748920 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.999075890 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.999138117 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.999157906 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.999171019 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.999217033 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.999222040 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.999267101 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.999288082 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.999313116 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:03.999334097 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.999358892 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.999682903 CEST	49712	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:03.999696970 CEST	443	49712	87.250.250.119	192.168.2.18
May 27, 2024 15:01:04.019217014 CEST	443	49721	172.217.18.98	192.168.2.18
May 27, 2024 15:01:04.019442081 CEST	49721	443	192.168.2.18	172.217.18.98
May 27, 2024 15:01:04.019467115 CEST	443	49721	172.217.18.98	192.168.2.18
May 27, 2024 15:01:04.020931959 CEST	443	49721	172.217.18.98	192.168.2.18
May 27, 2024 15:01:04.021022081 CEST	49721	443	192.168.2.18	172.217.18.98
May 27, 2024 15:01:04.021929026 CEST	49721	443	192.168.2.18	172.217.18.98
May 27, 2024 15:01:04.022008896 CEST	443	49721	172.217.18.98	192.168.2.18
May 27, 2024 15:01:04.055572033 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.055824995 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.055843115 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.056855917 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.056920052 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.057233095 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.057292938 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.057405949 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.057413101 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.061280966 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.061316013 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.061511993 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.061537981 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.061628103 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.061642885 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.061923981 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.062266111 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.062319040 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.062407017 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.062460899 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.062474966 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.062737942 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.062799931 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.062829971 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.065268993 CEST	443	49723	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.065460920 CEST	49723	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.065469980 CEST	443	49723	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.066499949 CEST	443	49723	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.066566944 CEST	49723	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.066857100 CEST	49723	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.066941023 CEST	443	49723	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.067009926 CEST	49723	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.067014933 CEST	443	49723	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.067908049 CEST	49721	443	192.168.2.18	172.217.18.98
May 27, 2024 15:01:04.067923069 CEST	443	49721	172.217.18.98	192.168.2.18
May 27, 2024 15:01:04.069025040 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.069266081 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.069277048 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.070451021 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.070796967 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.070904970 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.071091890 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.085836887 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.086312056 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.086324930 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.086662054 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.087529898 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.087605953 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.087737083 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.099878073 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.103566885 CEST	443	49726	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.103903055 CEST	49726	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.103924990 CEST	443	49726	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.104898930 CEST	443	49726	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.104965925 CEST	49726	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.105252981 CEST	49726	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.105310917 CEST	443	49726	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.105402946 CEST	49726	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.106492043 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.106492996 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.115891933 CEST	49721	443	192.168.2.18	172.217.18.98
May 27, 2024 15:01:04.115892887 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.115902901 CEST	49723	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.115907907 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.115920067 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.115936995 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.130490065 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.146487951 CEST	443	49726	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.147885084 CEST	49726	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.147907019 CEST	443	49726	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.163958073 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.195884943 CEST	49726	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.369146109 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.369230032 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.369299889 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.369318962 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.370716095 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.370724916 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.370815992 CEST	443	49720	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.370831966 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.370877028 CEST	49720	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.372172117 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.372494936 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.372503042 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.372565985 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.372574091 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.372611046 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.372797966 CEST	49725	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.372812033 CEST	443	49725	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.378599882 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.379122019 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.379129887 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.379149914 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.379160881 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.379173994 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.379198074 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.379211903 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.379232883 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.379247904 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.379247904 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.379272938 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.380065918 CEST	49719	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.380088091 CEST	443	49719	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.381228924 CEST	443	49723	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.381324053 CEST	443	49723	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.381397009 CEST	49723	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.382565975 CEST	49723	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.382584095 CEST	443	49723	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.383353949 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.392348051 CEST	49736	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:04.392393112 CEST	443	49736	87.250.250.119	192.168.2.18
May 27, 2024 15:01:04.392550945 CEST	49736	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:04.392795086 CEST	49736	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:04.392812967 CEST	443	49736	87.250.250.119	192.168.2.18
May 27, 2024 15:01:04.401153088 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.401379108 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.401411057 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.402415037 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.402487040 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.402770996 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.402829885 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.402925014 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.402935028 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.406630993 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.422197104 CEST	443	49726	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.422275066 CEST	443	49726	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.423145056 CEST	49726	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.423335075 CEST	49726	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.423357964 CEST	443	49726	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.434890985 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.450922012 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.450962067 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.483793020 CEST	443	49728	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.484256029 CEST	49728	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.484271049 CEST	443	49728	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.484677076 CEST	443	49728	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.485172033 CEST	49728	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.485172033 CEST	49728	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.485243082 CEST	443	49728	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.490071058 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.490098953 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.490115881 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.490149021 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.490159988 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.490178108 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.490179062 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.490206003 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.490211964 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.490226984 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.490252018 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.490509033 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.490566969 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.490576982 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.490619898 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.490652084 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.490771055 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.490778923 CEST	443	49724	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.490801096 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.490801096 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.490816116 CEST	49724	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.497309923 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.497569084 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.497575998 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.497900009 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.498225927 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.498282909 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.498307943 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.514010906 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.514024019 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.514066935 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.514094114 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.514106035 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.514113903 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.514134884 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.514163017 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.516383886 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.516413927 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.516479015 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.516484976 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.516534090 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.518904924 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.518964052 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.518980026 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.519015074 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.519148111 CEST	49722	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.519159079 CEST	443	49722	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.529951096 CEST	49728	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.538500071 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.545960903 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.687844038 CEST	49737	443	192.168.2.18	93.158.134.119
May 27, 2024 15:01:04.687855959 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:04.688893080 CEST	49737	443	192.168.2.18	93.158.134.119
May 27, 2024 15:01:04.688893080 CEST	49737	443	192.168.2.18	93.158.134.119
May 27, 2024 15:01:04.688914061 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:04.719166994 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.768881083 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.795682907 CEST	443	49728	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.795793056 CEST	443	49728	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.795953035 CEST	49728	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.796597004 CEST	49728	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.796607018 CEST	443	49728	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.828488111 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.828816891 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.828828096 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.828866005 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.828881025 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.828911066 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.828924894 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.828926086 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.828933954 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.828938961 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.828963041 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.829001904 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.829015970 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.829034090 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.829034090 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.829035997 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.829058886 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.829072952 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.829480886 CEST	49727	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.829513073 CEST	443	49727	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.832612038 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:04.832652092 CEST	443	49738	87.250.250.119	192.168.2.18
May 27, 2024 15:01:04.832746983 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:04.833051920 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:04.833070040 CEST	443	49738	87.250.250.119	192.168.2.18
May 27, 2024 15:01:04.835792065 CEST	49739	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.835833073 CEST	443	49739	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.835920095 CEST	49739	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.836102962 CEST	49739	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.836126089 CEST	443	49739	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.838370085 CEST	49740	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.838403940 CEST	443	49740	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.838478088 CEST	49740	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.838749886 CEST	49740	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.838764906 CEST	443	49740	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.880911112 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.935022116 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.935039997 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.935126066 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.935126066 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.935197115 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.935470104 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.935477018 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.935584068 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.935719013 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:04.935739040 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.935856104 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:04.935856104 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.112376928 CEST	443	49736	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.112617970 CEST	49736	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.112667084 CEST	443	49736	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.114239931 CEST	443	49736	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.114358902 CEST	49736	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.115374088 CEST	49736	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.115477085 CEST	49736	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.115489960 CEST	443	49736	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.158509016 CEST	443	49736	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.161205053 CEST	49736	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.161235094 CEST	443	49736	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.208893061 CEST	49736	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.240900040 CEST	49730	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.240915060 CEST	443	49730	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.442354918 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:05.442650080 CEST	49737	443	192.168.2.18	93.158.134.119
May 27, 2024 15:01:05.442679882 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:05.443830967 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:05.443906069 CEST	49737	443	192.168.2.18	93.158.134.119
May 27, 2024 15:01:05.444186926 CEST	49737	443	192.168.2.18	93.158.134.119
May 27, 2024 15:01:05.444256067 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:05.444322109 CEST	49737	443	192.168.2.18	93.158.134.119
May 27, 2024 15:01:05.444334984 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:05.466655016 CEST	443	49736	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.466785908 CEST	443	49736	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.466869116 CEST	49736	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.470140934 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.470196962 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:05.470278025 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.470925093 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.470943928 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:05.474915981 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.474950075 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:05.475008011 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.475219011 CEST	49736	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.475249052 CEST	443	49736	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.475502968 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.475517988 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:05.484822989 CEST	49745	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.484836102 CEST	443	49745	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.484901905 CEST	49745	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.485676050 CEST	49745	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.485690117 CEST	443	49745	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.487713099 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.487749100 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:05.487807989 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.488131046 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.488141060 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:05.496901989 CEST	49737	443	192.168.2.18	93.158.134.119
May 27, 2024 15:01:05.504638910 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.504661083 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:05.504734039 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.504937887 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:05.504946947 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:05.528645039 CEST	443	49740	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.528951883 CEST	49740	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.528965950 CEST	443	49740	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.530057907 CEST	443	49740	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.531084061 CEST	49740	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.531241894 CEST	49740	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.531245947 CEST	443	49740	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.531260967 CEST	443	49740	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.532685041 CEST	49748	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.532718897 CEST	443	49748	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.532793999 CEST	49748	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.533004999 CEST	49748	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.533016920 CEST	443	49748	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.543334961 CEST	443	49739	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.543643951 CEST	49739	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.543706894 CEST	443	49739	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.544068098 CEST	443	49739	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.544410944 CEST	49739	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.544481993 CEST	443	49739	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.544534922 CEST	49739	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.576875925 CEST	49740	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.577900887 CEST	443	49738	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.578759909 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.578824997 CEST	443	49738	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.579987049 CEST	443	49738	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.580071926 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.580415010 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.580612898 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.580792904 CEST	443	49738	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.586525917 CEST	443	49739	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.592886925 CEST	49739	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.624933004 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.624998093 CEST	443	49738	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.672060013 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.816060066 CEST	443	49738	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.816152096 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.816165924 CEST	443	49738	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.816220045 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.817513943 CEST	49738	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.817548990 CEST	443	49738	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.818101883 CEST	49749	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.818146944 CEST	443	49749	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.818228960 CEST	49749	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.818428993 CEST	49749	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:05.818444014 CEST	443	49749	87.250.250.119	192.168.2.18
May 27, 2024 15:01:05.852649927 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:05.852782965 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:05.852879047 CEST	49737	443	192.168.2.18	93.158.134.119
May 27, 2024 15:01:05.852904081 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:05.852921963 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:05.852982044 CEST	49737	443	192.168.2.18	93.158.134.119
May 27, 2024 15:01:05.853743076 CEST	49737	443	192.168.2.18	93.158.134.119
May 27, 2024 15:01:05.853760958 CEST	443	49737	93.158.134.119	192.168.2.18
May 27, 2024 15:01:05.857857943 CEST	443	49740	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.858031034 CEST	443	49740	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.858089924 CEST	49740	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.858831882 CEST	49740	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.858845949 CEST	443	49740	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.862458944 CEST	49750	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.862493992 CEST	443	49750	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.862569094 CEST	49750	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.862752914 CEST	49750	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.862766981 CEST	443	49750	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.866075039 CEST	443	49739	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.867861986 CEST	443	49739	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.867913961 CEST	443	49739	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.867942095 CEST	49739	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.867997885 CEST	49739	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.868185043 CEST	49739	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.868211985 CEST	443	49739	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.870727062 CEST	49752	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.870810986 CEST	443	49752	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.870925903 CEST	49752	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.871192932 CEST	49753	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.871213913 CEST	443	49753	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.871283054 CEST	49753	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.871368885 CEST	49752	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.871407032 CEST	443	49752	65.108.228.44	192.168.2.18
May 27, 2024 15:01:05.871732950 CEST	49753	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:05.871759892 CEST	443	49753	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.112548113 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.112884045 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.112916946 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.113948107 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.114048004 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.114418030 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.114490032 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.114639044 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.114648104 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.123128891 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.123613119 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.123637915 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.124689102 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.124753952 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.125178099 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.125243902 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.125365019 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.125374079 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.164856911 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.165189981 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.165221930 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.166874886 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.166892052 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.168920994 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.169014931 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.169388056 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.169590950 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.169611931 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.169770956 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.170541048 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.172158957 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.172172070 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.173607111 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.173672915 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.174300909 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.174377918 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.175900936 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.175913095 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.213884115 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.213900089 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.229909897 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.261895895 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.508126974 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.508174896 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.508205891 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.508235931 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.508238077 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.508274078 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.508295059 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.508313894 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.508344889 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.508352995 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.508362055 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.508411884 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.508419037 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.508455038 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.508501053 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.509346962 CEST	49744	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.509365082 CEST	443	49744	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.509958029 CEST	443	49745	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.510288000 CEST	49745	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.510313034 CEST	443	49745	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.510693073 CEST	443	49745	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.510987997 CEST	443	49748	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.511028051 CEST	49745	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.511097908 CEST	443	49745	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.511404037 CEST	49745	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.511575937 CEST	49748	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.511605978 CEST	443	49748	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.512068033 CEST	443	49748	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.512413979 CEST	49748	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.512497902 CEST	443	49748	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.512614012 CEST	49748	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.512648106 CEST	443	49748	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.543273926 CEST	443	49753	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.543509960 CEST	443	49750	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.543546915 CEST	49753	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.543586969 CEST	443	49753	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.543693066 CEST	49750	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.543714046 CEST	443	49750	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.543953896 CEST	443	49753	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.544047117 CEST	443	49750	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.544245958 CEST	49753	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.544327021 CEST	443	49753	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.544469118 CEST	49750	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.544533968 CEST	443	49750	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.544629097 CEST	49753	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.544678926 CEST	49750	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.552257061 CEST	443	49749	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.552467108 CEST	49749	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.552485943 CEST	443	49749	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.552815914 CEST	443	49749	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.553124905 CEST	49749	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.553184986 CEST	443	49749	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.553268909 CEST	49749	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.554517031 CEST	443	49745	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.563599110 CEST	443	49752	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.563832998 CEST	49752	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.563853025 CEST	443	49752	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.564196110 CEST	443	49752	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.564480066 CEST	49752	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.564551115 CEST	443	49752	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.564574957 CEST	49752	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.590498924 CEST	443	49750	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.590502024 CEST	443	49753	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.595911026 CEST	49749	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.595931053 CEST	443	49749	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.606507063 CEST	443	49752	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.611927986 CEST	49752	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.693924904 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.693974972 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.694005013 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.694040060 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.694123983 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.694143057 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.694200039 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.700124025 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.700171947 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.700215101 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.700233936 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.700278044 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.700479031 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.706561089 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.706648111 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.706661940 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.712719917 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.712799072 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.712810040 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.755934000 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.795830011 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.796173096 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.796205044 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.796224117 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.796236992 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.796251059 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.796278954 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.796899080 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.796945095 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.796960115 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.798913956 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.798974991 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.798990011 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.802139997 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.802201986 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.802220106 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.808456898 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.808521032 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.808537960 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.817502975 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.817647934 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.817672968 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.818404913 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.818427086 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:06.818497896 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.818775892 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.818789959 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:06.820801973 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.820866108 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.820884943 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.826927900 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.826977968 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.826999903 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.831172943 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.831182957 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:06.831247091 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.831341028 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.831348896 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:06.831398964 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.831461906 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.831470013 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:06.831523895 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.831664085 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.831676006 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:06.831789970 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.831800938 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:06.831922054 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:06.831934929 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:06.832346916 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.832400084 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.832417011 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.835026979 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.835088015 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.835133076 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.835138083 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.835169077 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.835215092 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.835222960 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.838155031 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.838200092 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.838222980 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.841101885 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.841157913 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.841156960 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.841182947 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.841221094 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.841455936 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.843914986 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.844050884 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.844074011 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.847557068 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.847625017 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.847646952 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.853712082 CEST	443	49750	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.853758097 CEST	443	49750	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.853796959 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.853816032 CEST	443	49750	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.853827000 CEST	49750	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.853988886 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.854017973 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.854052067 CEST	49750	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.854397058 CEST	49750	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.854407072 CEST	443	49750	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.857368946 CEST	443	49753	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.857450008 CEST	443	49753	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.857508898 CEST	49753	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.857770920 CEST	49753	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.857793093 CEST	443	49753	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.872703075 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.872761011 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.872814894 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.872823954 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.872838974 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.872905970 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.872914076 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.878078938 CEST	443	49752	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.878142118 CEST	443	49752	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.878199100 CEST	49752	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.878786087 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.878865957 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.878871918 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.878900051 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.878942966 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.878948927 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.879667997 CEST	49752	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.879686117 CEST	443	49752	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.881308079 CEST	443	49745	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.881562948 CEST	49761	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.881589890 CEST	443	49761	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.881666899 CEST	49761	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.882601976 CEST	49761	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.882615089 CEST	443	49761	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.882886887 CEST	49762	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.882895947 CEST	443	49762	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.883008957 CEST	49762	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.883094072 CEST	49745	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.883122921 CEST	443	49745	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.883249998 CEST	49745	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.883387089 CEST	49762	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:06.883399010 CEST	443	49762	65.108.228.44	192.168.2.18
May 27, 2024 15:01:06.884196997 CEST	49763	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.884206057 CEST	443	49763	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.884454966 CEST	49763	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.884454966 CEST	49763	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.884473085 CEST	443	49763	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.885016918 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.885075092 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.885082960 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.887372971 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.887428999 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.887439966 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.887511969 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.887553930 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.887620926 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.887634993 CEST	443	49743	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.887639046 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.887729883 CEST	49743	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.890940905 CEST	443	49748	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.891052008 CEST	443	49748	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.891103983 CEST	49748	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.891285896 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.891349077 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.891357899 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.891736984 CEST	49748	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.891751051 CEST	443	49748	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.894009113 CEST	49765	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.894028902 CEST	443	49765	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.894109011 CEST	49765	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.894634962 CEST	49765	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.894645929 CEST	443	49765	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.899916887 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.902673960 CEST	49767	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.902693987 CEST	443	49767	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.902832031 CEST	49767	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.903023005 CEST	49767	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.903033018 CEST	443	49767	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.909291029 CEST	443	49749	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.909384966 CEST	443	49749	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.909440041 CEST	49749	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.910379887 CEST	49749	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.910398006 CEST	443	49749	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.913441896 CEST	49768	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.913479090 CEST	443	49768	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.913559914 CEST	49768	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.913804054 CEST	49768	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:06.913817883 CEST	443	49768	87.250.250.119	192.168.2.18
May 27, 2024 15:01:06.922117949 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.925954103 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.925995111 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.926563025 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.930846930 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.930886984 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.930891037 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.930918932 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.930954933 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.937191010 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.937283993 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.937313080 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.943393946 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.943463087 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.943476915 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.944905043 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.949757099 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.949827909 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.949856043 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.956155062 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.956238031 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.956274986 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.959304094 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.961918116 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.961992979 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.962018013 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.965281010 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.965332031 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.965347052 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.965369940 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.965413094 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.965632915 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.967636108 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.967694044 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.967714071 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.968556881 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.968612909 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.968626976 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.973632097 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.973716021 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.973737001 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.974981070 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.975052118 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.975070000 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.979290009 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.979381084 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.979403973 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.981292963 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.981359005 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.981379032 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.985233068 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.985301018 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.985332012 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.987572908 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.987632036 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.987648964 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.994005919 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.994097948 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.994117975 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.999840975 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:06.999922037 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:06.999941111 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.005549908 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.005590916 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.005630016 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.005650043 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.005692959 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.012217045 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.017159939 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.017229080 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.017247915 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.017334938 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.017380953 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.017448902 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.017488956 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.017498016 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.017505884 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.017546892 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.017698050 CEST	49746	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.017714977 CEST	443	49746	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.023464918 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.058079958 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.058131933 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.058157921 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.058188915 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.058238983 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.058245897 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.058979034 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.059017897 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.059035063 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.059040070 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.059087038 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.059092045 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.059101105 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.059146881 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.059874058 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.061290979 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.061332941 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.061353922 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.061358929 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.061413050 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.066018105 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.071564913 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.071650028 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.071650982 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.071661949 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.071711063 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.078464031 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.088223934 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.088267088 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.088313103 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.088320971 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.088367939 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.090090990 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.090166092 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.090233088 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.090239048 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.094249010 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.094325066 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.094331980 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.099438906 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.099498987 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.099505901 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.104471922 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.104547977 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.104554892 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.108293056 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.108361006 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.108362913 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.108374119 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.108414888 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.112332106 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.116241932 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.116317034 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.116322994 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.121040106 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.121077061 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.121109009 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.121117115 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.121157885 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.124044895 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.127815008 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.127857924 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.127892017 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.127897978 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.127948046 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.131319046 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.134967089 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.135025024 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.135030985 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.135036945 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.135088921 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.138405085 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.151906013 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.151966095 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.152009964 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.152013063 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.152020931 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.152065992 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.152177095 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.152247906 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.152327061 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.152436018 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.152492046 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.152498960 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.153033018 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.153093100 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.153099060 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.154014111 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.154053926 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.154068947 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.154076099 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.154125929 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.155093908 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.158929110 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.158968925 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.158993959 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.158998966 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.159045935 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.159050941 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.164313078 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.164371014 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.164391041 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.164396048 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.164443970 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.164452076 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.164457083 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.164499998 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.170459986 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.170629025 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.170670986 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.170684099 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.170690060 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.170732021 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.170744896 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.182151079 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.182193041 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.182229042 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.182235003 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.182285070 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.182899952 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.182992935 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.183037996 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.183043003 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.183085918 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.183125973 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.183130980 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.183135986 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.183176041 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.186971903 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.187086105 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.187124014 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.187134981 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.187140942 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.187185049 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.191951990 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.192131996 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.192183018 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.192188978 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.192240953 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.192286968 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.192293882 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.196753025 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.196844101 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.196849108 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.196932077 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.196980000 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.196985960 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.202502966 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.202545881 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.202577114 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.202583075 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.202625990 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.202631950 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.211693048 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.211735010 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.211760044 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.211769104 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.211816072 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.211821079 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.212433100 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.212486982 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.212497950 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.212503910 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.212548971 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.213447094 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.213531971 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.213587046 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.213593960 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.216840029 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.216891050 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.216900110 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.216906071 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.216955900 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.216959953 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.217000961 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.217041016 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.217046976 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.220393896 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.220447063 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.220448017 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.220473051 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.220520973 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.220530033 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.224196911 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.224240065 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.224266052 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.224287987 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.224338055 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.224345922 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.227833033 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.227876902 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.227904081 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.227910995 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.227958918 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.227965117 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.246500015 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.246547937 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.246588945 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.246606112 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.246624947 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.246642113 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.247222900 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.247292995 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.247306108 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.247312069 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.247358084 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.247364044 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.247391939 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.247437954 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.247551918 CEST	49747	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:07.247570038 CEST	443	49747	216.58.206.66	192.168.2.18
May 27, 2024 15:01:07.294114113 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.294528008 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.294548988 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.295547962 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.295656919 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.296802998 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.296866894 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.297010899 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.297019005 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.298825979 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.299040079 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.299047947 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.299088955 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.299253941 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.299263000 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.300240040 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.300308943 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.300554037 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.300614119 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.301063061 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.301130056 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.301134109 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.301261902 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.301296949 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.301304102 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.301343918 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.301358938 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.322384119 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.322711945 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.322742939 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.323889971 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.323964119 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.324307919 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.324374914 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.324465036 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.324477911 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.339935064 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.354557037 CEST	49770	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.354605913 CEST	443	49770	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.354701996 CEST	49770	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.354895115 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.354954958 CEST	49770	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.354971886 CEST	443	49770	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.354994059 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.358113050 CEST	49771	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.358150005 CEST	443	49771	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.358222008 CEST	49771	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.358275890 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.358319044 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.358378887 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.358542919 CEST	49771	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.358561993 CEST	443	49771	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.358683109 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.358699083 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.370937109 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.439193964 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439248085 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439281940 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439313889 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439342022 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.439351082 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439379930 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439400911 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.439418077 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.439424038 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439466953 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439507961 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.439517021 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439831018 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439877033 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.439883947 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439925909 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.439979076 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.443624973 CEST	49757	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.443643093 CEST	443	49757	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447185993 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447232962 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447272062 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447298050 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.447307110 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447360039 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.447365999 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447407007 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447444916 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447463989 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.447470903 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447511911 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.447523117 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447567940 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447628021 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447642088 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.447650909 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447696924 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.447705030 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447748899 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.447799921 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.448247910 CEST	49759	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.448254108 CEST	443	49759	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.466721058 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.466770887 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.466799021 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.466835022 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.466861963 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.466907978 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.466923952 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.466969967 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.467514992 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.467572927 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.467606068 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.467617035 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.467624903 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.467664003 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.468427896 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475047112 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475116014 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475155115 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475174904 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.475183010 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475205898 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475235939 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.475236893 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475246906 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475291967 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.475296974 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475320101 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475328922 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475342989 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.475362062 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.475387096 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.475394964 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.475754976 CEST	49756	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.475763083 CEST	443	49756	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.476854086 CEST	49773	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.476892948 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.476979017 CEST	49773	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.477233887 CEST	49773	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.477251053 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.529901028 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.556137085 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.556210995 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.556272030 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.556289911 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.556302071 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.556355000 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.556372881 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.557341099 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.557400942 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.557414055 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.557423115 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.557467937 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.557523012 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.557779074 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.557825089 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.557832003 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.557923079 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.557954073 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.557977915 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.557986021 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.558032036 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.558695078 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.558749914 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.558785915 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.558814049 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.558821917 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.558873892 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.559006929 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.559917927 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.559947014 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.559974909 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.559986115 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.559992075 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.560028076 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.581391096 CEST	443	49762	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.581671953 CEST	49762	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.581696033 CEST	443	49762	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.582030058 CEST	443	49762	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.582381964 CEST	49762	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.582453012 CEST	443	49762	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.582575083 CEST	49762	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.588330984 CEST	443	49761	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.588737011 CEST	49761	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.588754892 CEST	443	49761	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.589742899 CEST	443	49761	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.589817047 CEST	49761	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.590106964 CEST	49761	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.590167046 CEST	443	49761	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.590270042 CEST	49761	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.590281010 CEST	443	49761	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.606497049 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.606535912 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.606578112 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.606599092 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.606646061 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.608459949 CEST	443	49763	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.608715057 CEST	49763	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.608738899 CEST	443	49763	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.609065056 CEST	443	49763	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.609424114 CEST	49763	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.609481096 CEST	443	49763	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.609580040 CEST	49763	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.609591961 CEST	443	49763	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.617794991 CEST	443	49765	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.618083954 CEST	49765	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.618096113 CEST	443	49765	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.618421078 CEST	443	49765	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.618721962 CEST	49765	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.618772030 CEST	443	49765	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.618837118 CEST	49765	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.618844032 CEST	443	49765	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.619750977 CEST	443	49767	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.619936943 CEST	49767	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.619946003 CEST	443	49767	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.620934010 CEST	443	49767	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.621021032 CEST	49767	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.621273994 CEST	49767	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.621331930 CEST	443	49767	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.621391058 CEST	49767	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.621413946 CEST	443	49767	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.630496979 CEST	443	49762	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.632564068 CEST	443	49768	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.632776976 CEST	49768	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.632807970 CEST	443	49768	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.633802891 CEST	443	49768	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.633882046 CEST	49768	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.634130955 CEST	49768	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.634196043 CEST	443	49768	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.634249926 CEST	49768	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.634263992 CEST	443	49768	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.639883995 CEST	49761	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.648758888 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.649033070 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.649090052 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.649099112 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.649111986 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.649164915 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.649172068 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.649223089 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.649223089 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.649235010 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.649271965 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.649871111 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.649931908 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.649986982 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.650038004 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.651034117 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.651067019 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.651102066 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.651108980 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.651122093 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.651745081 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.651807070 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.651823997 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.651874065 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.651885986 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.651936054 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.653839111 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.653876066 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.653903961 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.653909922 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.653927088 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.671926022 CEST	49767	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.671947956 CEST	443	49767	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.687895060 CEST	49768	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.695842981 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.695928097 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.695936918 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.695979118 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.696398973 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.696438074 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.696469069 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.696561098 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.696567059 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.696583986 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.696801901 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.696860075 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.696866035 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.696907043 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.701873064 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:07.701913118 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:07.702006102 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:07.703659058 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:07.703676939 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:07.719903946 CEST	49767	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.741261959 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.741352081 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.741353989 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.741409063 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.741552114 CEST	49758	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.741564989 CEST	443	49758	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.894223928 CEST	443	49762	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.894313097 CEST	443	49762	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.894362926 CEST	49762	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.894973040 CEST	49762	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.894987106 CEST	443	49762	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.904485941 CEST	443	49761	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.904675961 CEST	443	49761	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.904733896 CEST	49761	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.905179024 CEST	49761	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:07.905184031 CEST	443	49761	65.108.228.44	192.168.2.18
May 27, 2024 15:01:07.962219000 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.962496042 CEST	49773	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.962521076 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.963012934 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.963330030 CEST	49773	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.963412046 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:07.963488102 CEST	49773	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:07.977703094 CEST	443	49765	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.977988958 CEST	443	49765	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.978046894 CEST	49765	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.978223085 CEST	443	49763	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.978473902 CEST	443	49763	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.978537083 CEST	49763	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.979264975 CEST	443	49767	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.979346991 CEST	443	49767	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.979401112 CEST	49763	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.979407072 CEST	49767	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.979412079 CEST	443	49763	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.980370045 CEST	49765	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.980396986 CEST	443	49765	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.980426073 CEST	49767	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.980437994 CEST	443	49767	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.983309031 CEST	49776	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.983347893 CEST	443	49776	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.983405113 CEST	49776	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.983921051 CEST	49776	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.983941078 CEST	443	49776	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.984285116 CEST	49777	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.984297991 CEST	443	49777	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.984345913 CEST	49777	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.984570980 CEST	49777	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.984580040 CEST	443	49777	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.994046926 CEST	443	49768	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.994139910 CEST	443	49768	87.250.250.119	192.168.2.18
May 27, 2024 15:01:07.994199038 CEST	49768	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.994859934 CEST	49768	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:07.994882107 CEST	443	49768	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.010503054 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.029422045 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.029664040 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.029673100 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.030148983 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.030461073 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.030558109 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.030622005 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.046391010 CEST	443	49771	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.046610117 CEST	49771	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.046641111 CEST	443	49771	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.047146082 CEST	443	49771	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.047492027 CEST	49771	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.047584057 CEST	443	49771	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.071444035 CEST	443	49770	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.071677923 CEST	49770	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.071703911 CEST	443	49770	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.074618101 CEST	443	49770	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.074688911 CEST	49770	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.074996948 CEST	49770	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.075067043 CEST	443	49770	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.075196028 CEST	49770	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.075211048 CEST	443	49770	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.078489065 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.096888065 CEST	49771	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.127933025 CEST	49770	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.151885986 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.151959896 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.151993036 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.152005911 CEST	49773	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.152014971 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.152050018 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.152056932 CEST	49773	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.152064085 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.152111053 CEST	49773	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.152116060 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.152153969 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.152203083 CEST	49773	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.152731895 CEST	49773	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.152739048 CEST	443	49773	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.251774073 CEST	49779	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:08.251837015 CEST	443	49779	184.28.90.27	192.168.2.18
May 27, 2024 15:01:08.251924038 CEST	49779	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:08.253299952 CEST	49779	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:08.253314972 CEST	443	49779	184.28.90.27	192.168.2.18
May 27, 2024 15:01:08.315325975 CEST	49781	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.315368891 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.315471888 CEST	49781	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.315720081 CEST	49781	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.315732002 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.347951889 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.371795893 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.371817112 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.371912956 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.372251034 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.372260094 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.398125887 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.426678896 CEST	443	49770	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.426918983 CEST	443	49770	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.426990986 CEST	49770	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.452342987 CEST	49770	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.452364922 CEST	443	49770	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.456384897 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.456406116 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.456429958 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.456459045 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.456486940 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.456518888 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.456558943 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.456558943 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.457433939 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.457458973 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.457528114 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.457528114 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.457540989 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.457592010 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.473073959 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.473155022 CEST	443	49783	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.473253012 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.473712921 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.473745108 CEST	443	49783	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.511432886 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.511585951 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:08.519650936 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:08.519699097 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.519963026 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.565320015 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.565347910 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.565443039 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.565443039 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.565468073 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.565573931 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.566740990 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.566765070 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.566813946 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.566828012 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.566865921 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.566865921 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.568907022 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.568929911 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.569010973 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.569010973 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.569024086 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.569159985 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.573910952 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:08.599318981 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.599350929 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.599396944 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.599494934 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.599536896 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.599764109 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.603094101 CEST	49772	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:08.603126049 CEST	443	49772	65.108.228.44	192.168.2.18
May 27, 2024 15:01:08.621774912 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:08.627701044 CEST	49784	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.627739906 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.627850056 CEST	49784	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.628256083 CEST	49784	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.628272057 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.666507959 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.691184998 CEST	443	49777	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.692234993 CEST	49777	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.692254066 CEST	443	49777	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.692738056 CEST	443	49777	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.693286896 CEST	49777	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.693373919 CEST	443	49777	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.693487883 CEST	49777	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.700196981 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.700253963 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.700387001 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.701025963 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.701042891 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.709116936 CEST	443	49776	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.710500002 CEST	49776	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.710515022 CEST	443	49776	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.710849047 CEST	443	49776	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.711210966 CEST	49776	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.711276054 CEST	443	49776	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.711416006 CEST	49776	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:08.738493919 CEST	443	49777	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.758495092 CEST	443	49776	87.250.250.119	192.168.2.18
May 27, 2024 15:01:08.795001030 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.795445919 CEST	49781	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.795475960 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.795939922 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.801805973 CEST	49781	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.801978111 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.802047014 CEST	49781	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.831129074 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.831535101 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.831551075 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.831857920 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.834597111 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.834656000 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.834774017 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.842489958 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.845030069 CEST	49781	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.882498026 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.884598970 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.884623051 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.884629965 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.884655952 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.884676933 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.884694099 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.884738922 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:08.884772062 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.884790897 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.884802103 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:08.884810925 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.884840012 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:08.884884119 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:08.905875921 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:08.905891895 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.905905962 CEST	49774	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:08.905913115 CEST	443	49774	20.114.59.183	192.168.2.18
May 27, 2024 15:01:08.915237904 CEST	443	49779	184.28.90.27	192.168.2.18
May 27, 2024 15:01:08.920154095 CEST	49779	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:08.923768997 CEST	49779	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:08.923782110 CEST	443	49779	184.28.90.27	192.168.2.18
May 27, 2024 15:01:08.924082041 CEST	443	49779	184.28.90.27	192.168.2.18
May 27, 2024 15:01:08.939913988 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.939976931 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.940032005 CEST	49781	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.940057039 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.940088987 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.940134048 CEST	49781	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.957905054 CEST	49781	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.957932949 CEST	443	49781	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.970236063 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.970287085 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.970314980 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.970336914 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.970338106 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.970349073 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.970386982 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.970776081 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.970809937 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.970824003 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.970829964 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.970871925 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.970885038 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.970890999 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.970943928 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.971731901 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.971782923 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.971823931 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.971829891 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.971915960 CEST	49779	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:08.991851091 CEST	49788	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.991887093 CEST	443	49788	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.991959095 CEST	49788	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.992270947 CEST	49789	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.992285013 CEST	443	49789	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.992337942 CEST	49789	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.992458105 CEST	49790	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.992465973 CEST	443	49790	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.992508888 CEST	49790	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.992643118 CEST	49791	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.992650032 CEST	443	49791	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.992692947 CEST	49791	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.992898941 CEST	49788	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.992914915 CEST	443	49788	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.993036985 CEST	49789	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.993052006 CEST	443	49789	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.993212938 CEST	49790	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.993222952 CEST	443	49790	172.67.176.164	192.168.2.18
May 27, 2024 15:01:08.993396044 CEST	49791	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:08.993408918 CEST	443	49791	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.013883114 CEST	49792	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.013919115 CEST	443	49792	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.013988018 CEST	49792	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.014298916 CEST	49792	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.014312029 CEST	443	49792	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.019891024 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.043838978 CEST	443	49777	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.043958902 CEST	443	49777	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.044006109 CEST	49777	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.044610977 CEST	49777	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.044632912 CEST	443	49777	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.048095942 CEST	49779	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:09.057096958 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.057579994 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.057615042 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.057617903 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.057643890 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.057678938 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.057683945 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.058008909 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.058043957 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.058053017 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.058062077 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.058095932 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.058099985 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.058979988 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.059020042 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.059027910 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.059034109 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.059076071 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.059077024 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.059086084 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.059122086 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.059868097 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.059927940 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.059971094 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.059977055 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.060009956 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.060076952 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.060081959 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.060885906 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.060918093 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.060931921 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.060937881 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.060969114 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.061419010 CEST	443	49776	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.061537027 CEST	443	49776	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.061630011 CEST	49776	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.063772917 CEST	49776	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.063785076 CEST	443	49776	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.093776941 CEST	49793	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.093820095 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.093887091 CEST	49793	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.094130039 CEST	49793	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.094145060 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.094501972 CEST	443	49779	184.28.90.27	192.168.2.18
May 27, 2024 15:01:09.125662088 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.126008987 CEST	49784	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.126029968 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.126503944 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.126885891 CEST	49784	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.126971960 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.127027035 CEST	49784	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.144424915 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.144486904 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.144521952 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.144531012 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.144558907 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.144592047 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.144592047 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.144602060 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.144644022 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.145175934 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.145212889 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.145256042 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.145263910 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.145272970 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.145298958 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.145303965 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.145337105 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.145344019 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.145381927 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.145771980 CEST	49782	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.145788908 CEST	443	49782	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.170495987 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.187354088 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.191025972 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.191059113 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.191334963 CEST	443	49783	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.191493988 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.198266983 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.198287010 CEST	443	49783	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.198668957 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.198746920 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.198836088 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.199309111 CEST	443	49783	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.199378014 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.199764967 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.199832916 CEST	443	49783	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.199909925 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.199919939 CEST	443	49783	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.236951113 CEST	443	49779	184.28.90.27	192.168.2.18
May 27, 2024 15:01:09.237030029 CEST	443	49779	184.28.90.27	192.168.2.18
May 27, 2024 15:01:09.237122059 CEST	49779	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:09.237257957 CEST	49779	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:09.237272978 CEST	443	49779	184.28.90.27	192.168.2.18
May 27, 2024 15:01:09.237287998 CEST	49779	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:09.237293959 CEST	443	49779	184.28.90.27	192.168.2.18
May 27, 2024 15:01:09.241906881 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.242500067 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.312102079 CEST	49795	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:09.312139034 CEST	443	49795	184.28.90.27	192.168.2.18
May 27, 2024 15:01:09.312243938 CEST	49795	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:09.313580036 CEST	49795	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:09.313602924 CEST	443	49795	184.28.90.27	192.168.2.18
May 27, 2024 15:01:09.316426992 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.316478968 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.316505909 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.316523075 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.316535950 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.316641092 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.316648960 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.317457914 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.317496061 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.317512989 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.317521095 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.317601919 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.317949057 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.318025112 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.318049908 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.318077087 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.318084955 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.318121910 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.318809032 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.324613094 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.324687958 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.324729919 CEST	49784	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.324747086 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.325047016 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.325113058 CEST	49784	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.325115919 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.325133085 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.325170994 CEST	49784	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.325197935 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.325274944 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.325324059 CEST	49784	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.326133966 CEST	49784	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.326152086 CEST	443	49784	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.333568096 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.333606958 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.333672047 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.334881067 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.334893942 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.368892908 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.407299042 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.407846928 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.407879114 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.407912016 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.407913923 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.407934904 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.407952070 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.408598900 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.408643961 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.408664942 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.408667088 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.408680916 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.408739090 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.408773899 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.408775091 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.408797026 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.408813000 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.408880949 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.409245968 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.409384966 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.409425020 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.409429073 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.409440994 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.409548998 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.409557104 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.410293102 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.410325050 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.410366058 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.410373926 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.410382986 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.410454035 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.462917089 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.462934017 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.466614008 CEST	443	49791	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.466615915 CEST	443	49790	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.466861963 CEST	49791	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.466871023 CEST	443	49791	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.466980934 CEST	49790	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.466989040 CEST	443	49790	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.467910051 CEST	443	49791	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.467969894 CEST	49791	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.468065977 CEST	443	49790	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.468116045 CEST	49790	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.468987942 CEST	49791	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.469093084 CEST	49790	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.469168901 CEST	443	49790	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.469192982 CEST	443	49791	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.469290018 CEST	49791	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.469295025 CEST	443	49791	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.469394922 CEST	49791	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.469425917 CEST	443	49791	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.469427109 CEST	49790	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.469433069 CEST	443	49790	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.469451904 CEST	49790	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.469463110 CEST	443	49790	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.474718094 CEST	49797	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.474740982 CEST	443	49797	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.474806070 CEST	49797	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.475469112 CEST	49797	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.475481987 CEST	443	49797	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.485126972 CEST	443	49788	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.485387087 CEST	49788	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.485399961 CEST	443	49788	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.486438990 CEST	443	49788	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.486505985 CEST	49788	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.486886024 CEST	49788	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.486946106 CEST	443	49788	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.487066031 CEST	49788	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.487071991 CEST	443	49788	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.487178087 CEST	49788	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.487205029 CEST	443	49788	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.494544983 CEST	443	49789	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.494822979 CEST	49789	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.494832993 CEST	443	49789	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.495906115 CEST	443	49789	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.495970964 CEST	49789	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.496670008 CEST	49789	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.496750116 CEST	443	49789	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.496855974 CEST	49789	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.496860981 CEST	443	49789	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.496896982 CEST	49789	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.496927023 CEST	443	49789	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.498774052 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.498816013 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.498836040 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.498857975 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.498897076 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.498933077 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.498955011 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.498971939 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.499041080 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.499223948 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.499231100 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.499263048 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.499279022 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.499289036 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.499305964 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.499339104 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.499440908 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.499732018 CEST	49787	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.499747038 CEST	443	49787	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.504498005 CEST	443	49792	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.505449057 CEST	49792	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.505474091 CEST	443	49792	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.507013083 CEST	443	49792	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.507288933 CEST	49792	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.507587910 CEST	49792	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.507672071 CEST	443	49792	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.507740021 CEST	49792	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.507751942 CEST	443	49792	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.507774115 CEST	49792	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.509896040 CEST	49791	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.509896040 CEST	49790	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.521688938 CEST	49798	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:09.521720886 CEST	443	49798	216.58.206.66	192.168.2.18
May 27, 2024 15:01:09.521863937 CEST	49798	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:09.522644043 CEST	49798	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:09.522655964 CEST	443	49798	216.58.206.66	192.168.2.18
May 27, 2024 15:01:09.541902065 CEST	49789	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.547735929 CEST	49799	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:09.547780991 CEST	443	49799	216.58.206.66	192.168.2.18
May 27, 2024 15:01:09.547956944 CEST	49799	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:09.548240900 CEST	49799	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:09.548254967 CEST	443	49799	216.58.206.66	192.168.2.18
May 27, 2024 15:01:09.551922083 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.552284002 CEST	49793	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.552309990 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.553041935 CEST	443	49783	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.553153038 CEST	443	49783	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.553297997 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.553385973 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.553705931 CEST	49793	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.553705931 CEST	49793	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.553760052 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.553893089 CEST	49793	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.553900003 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.554167986 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.554188013 CEST	443	49783	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.554199934 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.554228067 CEST	49783	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.554491043 CEST	443	49792	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.556355953 CEST	49800	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.556380033 CEST	443	49800	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.556740046 CEST	49800	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.556905031 CEST	49792	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.557168961 CEST	49800	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:09.557180882 CEST	443	49800	87.250.250.119	192.168.2.18
May 27, 2024 15:01:09.604913950 CEST	49793	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.613930941 CEST	443	49790	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.614056110 CEST	443	49790	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.614140034 CEST	49790	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.614908934 CEST	49790	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.614945889 CEST	443	49790	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.615437031 CEST	49801	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.615475893 CEST	443	49801	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.615566969 CEST	49801	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.615921974 CEST	49801	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.615932941 CEST	443	49801	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.631623030 CEST	443	49791	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.631736040 CEST	443	49791	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.631911039 CEST	49791	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.632563114 CEST	49791	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.632602930 CEST	443	49791	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.633197069 CEST	49802	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.633219957 CEST	443	49802	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.633291006 CEST	49802	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.634351969 CEST	49802	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.634366989 CEST	443	49802	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.652218103 CEST	443	49789	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.652384996 CEST	443	49789	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.652589083 CEST	49789	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.653595924 CEST	443	49792	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.653743029 CEST	443	49792	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.653793097 CEST	49792	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.653844118 CEST	49789	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.653884888 CEST	443	49789	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.654247046 CEST	49803	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.654282093 CEST	443	49803	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.654407024 CEST	49803	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.655503988 CEST	49792	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.655517101 CEST	443	49792	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.655755043 CEST	49804	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.655780077 CEST	443	49804	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.655947924 CEST	49804	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.656116962 CEST	49803	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.656132936 CEST	443	49803	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.656502008 CEST	49804	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.656513929 CEST	443	49804	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.668855906 CEST	443	49788	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.669150114 CEST	443	49788	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.669219971 CEST	49788	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.672126055 CEST	49788	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.672158957 CEST	443	49788	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.672923088 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.672941923 CEST	443	49805	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.673001051 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.673837900 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.673851013 CEST	443	49805	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.698777914 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.698836088 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.698894024 CEST	49793	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.698904037 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.698926926 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.698971987 CEST	49793	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.701003075 CEST	49793	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.701009035 CEST	443	49793	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.798342943 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.798813105 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.798826933 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.799108028 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.799458027 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.799506903 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.799693108 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.839929104 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.839951992 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.947491884 CEST	443	49797	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.947825909 CEST	49797	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.947849989 CEST	443	49797	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.948216915 CEST	443	49797	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.948596954 CEST	49797	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.948669910 CEST	443	49797	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.948817968 CEST	49797	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.973521948 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.973587990 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.973625898 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.973664999 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.973675966 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.973689079 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.973726988 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.973737955 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.973793030 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.973795891 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.973968029 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.976811886 CEST	49806	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.976854086 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.976912975 CEST	49806	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.977940083 CEST	49806	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.977966070 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.978018999 CEST	49796	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:09.978032112 CEST	443	49796	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.987008095 CEST	443	49795	184.28.90.27	192.168.2.18
May 27, 2024 15:01:09.987185955 CEST	49795	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:09.990080118 CEST	49795	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:09.990092993 CEST	443	49795	184.28.90.27	192.168.2.18
May 27, 2024 15:01:09.990443945 CEST	443	49795	184.28.90.27	192.168.2.18
May 27, 2024 15:01:09.990494013 CEST	443	49797	172.67.176.164	192.168.2.18
May 27, 2024 15:01:09.991892099 CEST	49795	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:10.034502029 CEST	443	49795	184.28.90.27	192.168.2.18
May 27, 2024 15:01:10.058473110 CEST	49807	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.058528900 CEST	443	49807	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.058619976 CEST	49807	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.058908939 CEST	49807	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.058917999 CEST	443	49807	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.104825974 CEST	443	49802	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.105324030 CEST	49802	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.105345011 CEST	443	49802	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.105654001 CEST	443	49802	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.106048107 CEST	49802	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.106101036 CEST	443	49802	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.106220961 CEST	49802	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.119276047 CEST	443	49801	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.119537115 CEST	49801	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.119563103 CEST	443	49801	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.120220900 CEST	443	49801	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.120685101 CEST	49801	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.120778084 CEST	49801	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.120781898 CEST	443	49801	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.120805025 CEST	443	49801	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.120839119 CEST	49801	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.123230934 CEST	443	49804	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.124156952 CEST	443	49803	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.124399900 CEST	49803	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.124408960 CEST	443	49803	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.124604940 CEST	49804	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.124620914 CEST	443	49804	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.125730038 CEST	443	49803	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.125744104 CEST	443	49804	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.125816107 CEST	49803	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.125967979 CEST	49804	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.126260042 CEST	49804	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.126332045 CEST	443	49804	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.126629114 CEST	49803	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.126699924 CEST	443	49803	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.126859903 CEST	49804	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.126867056 CEST	443	49804	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.126897097 CEST	49804	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.126930952 CEST	49803	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.126939058 CEST	443	49803	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.126944065 CEST	443	49804	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.126975060 CEST	49803	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.127003908 CEST	443	49803	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.139375925 CEST	443	49797	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.139704943 CEST	443	49797	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.139755011 CEST	49797	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.140387058 CEST	49797	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.140399933 CEST	443	49797	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.140747070 CEST	49808	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.140783072 CEST	443	49808	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.140933037 CEST	49808	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.141256094 CEST	49808	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.141274929 CEST	443	49808	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.150496960 CEST	443	49802	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.164324045 CEST	443	49798	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.164669991 CEST	49798	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.164680004 CEST	443	49798	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.164764881 CEST	443	49805	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.165088892 CEST	443	49798	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.165709972 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.165723085 CEST	443	49805	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.165741920 CEST	49798	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.165810108 CEST	443	49798	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.166435003 CEST	49798	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.166464090 CEST	443	49798	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.166496038 CEST	443	49801	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.166748047 CEST	443	49805	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.166798115 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.167252064 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.167252064 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.167273045 CEST	443	49805	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.167282104 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.167326927 CEST	443	49805	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.172875881 CEST	49801	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.172893047 CEST	49803	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.173042059 CEST	49804	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.182534933 CEST	443	49799	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.182794094 CEST	49799	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.182807922 CEST	443	49799	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.183475018 CEST	443	49799	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.183800936 CEST	49799	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.183893919 CEST	443	49799	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.183962107 CEST	49799	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.184000969 CEST	443	49799	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.219989061 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.220016956 CEST	443	49805	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.265943050 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.268615007 CEST	443	49795	184.28.90.27	192.168.2.18
May 27, 2024 15:01:10.268708944 CEST	443	49795	184.28.90.27	192.168.2.18
May 27, 2024 15:01:10.268764019 CEST	49795	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:10.271920919 CEST	49795	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:10.271939993 CEST	443	49795	184.28.90.27	192.168.2.18
May 27, 2024 15:01:10.271950960 CEST	49795	443	192.168.2.18	184.28.90.27
May 27, 2024 15:01:10.271956921 CEST	443	49795	184.28.90.27	192.168.2.18
May 27, 2024 15:01:10.290817976 CEST	443	49800	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.291105032 CEST	49800	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.291126966 CEST	443	49800	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.291408062 CEST	443	49800	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.291723013 CEST	49800	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.291779995 CEST	443	49800	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.291944027 CEST	49800	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.291956902 CEST	49800	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.291965008 CEST	443	49800	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.293929100 CEST	443	49801	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.294029951 CEST	443	49801	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.294078112 CEST	49801	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.294728041 CEST	49801	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.294744015 CEST	443	49801	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.295234919 CEST	49810	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.295259953 CEST	443	49810	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.295375109 CEST	49810	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.296447039 CEST	49810	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.296457052 CEST	443	49810	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.321233988 CEST	443	49805	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.321352959 CEST	443	49805	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.321559906 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.322118044 CEST	49805	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.322135925 CEST	443	49805	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.337166071 CEST	443	49804	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.337300062 CEST	443	49804	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.337445974 CEST	49804	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.337990046 CEST	49804	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.338006973 CEST	443	49804	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.342551947 CEST	443	49803	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.342664003 CEST	443	49803	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.342938900 CEST	49803	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.343183994 CEST	49803	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.343200922 CEST	443	49803	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.359344959 CEST	443	49802	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.359464884 CEST	443	49802	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.359707117 CEST	49802	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.360351086 CEST	49802	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.360373020 CEST	443	49802	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.457211971 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.457928896 CEST	49806	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.457947016 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.458261967 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.458811045 CEST	49806	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.458877087 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.458925962 CEST	49806	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.476445913 CEST	443	49798	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.477181911 CEST	49811	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.477226973 CEST	443	49811	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.477305889 CEST	49811	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.478102922 CEST	49811	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.478116989 CEST	443	49811	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.479628086 CEST	443	49798	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.479720116 CEST	49798	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.480520010 CEST	49798	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.480531931 CEST	443	49798	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.490906954 CEST	443	49799	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.491272926 CEST	443	49799	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.491394997 CEST	49799	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.492120981 CEST	49799	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.492130041 CEST	443	49799	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.493201017 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:10.493231058 CEST	443	49812	172.217.16.194	192.168.2.18
May 27, 2024 15:01:10.493494987 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:10.493712902 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:10.493725061 CEST	443	49812	172.217.16.194	192.168.2.18
May 27, 2024 15:01:10.498056889 CEST	49813	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:10.498065948 CEST	443	49813	172.217.16.194	192.168.2.18
May 27, 2024 15:01:10.498199940 CEST	49813	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:10.498429060 CEST	49813	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:10.498440027 CEST	443	49813	172.217.16.194	192.168.2.18
May 27, 2024 15:01:10.504915953 CEST	49806	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.504926920 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.595868111 CEST	443	49808	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.596106052 CEST	49808	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.596118927 CEST	443	49808	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.596472025 CEST	443	49808	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.596786976 CEST	49808	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.596859932 CEST	443	49808	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.596945047 CEST	49808	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.596976995 CEST	49808	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.597007036 CEST	443	49808	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.621354103 CEST	443	49800	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.621453047 CEST	443	49800	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.621496916 CEST	49800	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.624543905 CEST	49800	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.624553919 CEST	443	49800	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.636174917 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.636229992 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.636264086 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.636293888 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.636337042 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.636336088 CEST	49806	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.636353016 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.636429071 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.636640072 CEST	49806	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.636640072 CEST	49806	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.647932053 CEST	49808	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.651328087 CEST	49806	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.651350021 CEST	443	49806	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.661168098 CEST	49816	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.661190987 CEST	443	49816	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.661417007 CEST	49816	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.668276072 CEST	49816	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.668291092 CEST	443	49816	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.706792116 CEST	49817	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.706828117 CEST	443	49817	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.708014965 CEST	49818	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.708046913 CEST	443	49818	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.708106041 CEST	49818	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.708290100 CEST	49817	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.708290100 CEST	49817	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:10.708331108 CEST	443	49817	216.58.206.66	192.168.2.18
May 27, 2024 15:01:10.708664894 CEST	49818	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.708673954 CEST	443	49818	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.716411114 CEST	49819	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.716419935 CEST	443	49819	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.717694998 CEST	49819	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.718195915 CEST	49819	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.718203068 CEST	443	49819	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.793488026 CEST	443	49808	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.793617010 CEST	443	49808	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.793683052 CEST	49808	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.794295073 CEST	49808	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.794310093 CEST	443	49808	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.795335054 CEST	443	49807	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.795581102 CEST	443	49810	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.795805931 CEST	49807	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.795824051 CEST	443	49807	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.795996904 CEST	49810	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.796005011 CEST	443	49810	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.796159029 CEST	443	49807	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.796370983 CEST	443	49810	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.796473980 CEST	49807	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.796539068 CEST	443	49807	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.796704054 CEST	49810	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.796770096 CEST	443	49810	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.796897888 CEST	49807	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:10.796922922 CEST	443	49807	87.250.250.119	192.168.2.18
May 27, 2024 15:01:10.796932936 CEST	49810	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.842492104 CEST	443	49810	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.949807882 CEST	443	49811	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.950149059 CEST	49811	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.950159073 CEST	443	49811	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.950665951 CEST	443	49811	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.951016903 CEST	49811	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.951122046 CEST	443	49811	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.951209068 CEST	49811	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.951299906 CEST	49811	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.951314926 CEST	443	49811	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.986759901 CEST	443	49810	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.986875057 CEST	443	49810	172.67.176.164	192.168.2.18
May 27, 2024 15:01:10.986928940 CEST	49810	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.987504005 CEST	49810	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:10.987519026 CEST	443	49810	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.104717016 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.104757071 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.104947090 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.105221033 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.105236053 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.120428085 CEST	443	49811	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.120543003 CEST	443	49811	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.122292042 CEST	49811	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.122771978 CEST	49811	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.122785091 CEST	443	49811	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.153239965 CEST	443	49807	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.153350115 CEST	443	49807	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.154028893 CEST	443	49812	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.154126883 CEST	49807	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.154263973 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.154285908 CEST	443	49812	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.154592991 CEST	49807	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.154606104 CEST	443	49807	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.155452013 CEST	443	49812	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.155517101 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.156054974 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.156138897 CEST	443	49812	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.156357050 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.156991005 CEST	443	49813	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.157496929 CEST	49813	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.157502890 CEST	443	49813	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.158648968 CEST	443	49813	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.158737898 CEST	49813	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.158967972 CEST	49822	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.159004927 CEST	443	49822	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.159295082 CEST	49813	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.159337044 CEST	49822	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.159415007 CEST	443	49813	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.159818888 CEST	49822	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.159832954 CEST	443	49822	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.160105944 CEST	49813	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.160113096 CEST	443	49813	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.188363075 CEST	443	49818	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.188780069 CEST	49818	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.188806057 CEST	443	49818	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.189131021 CEST	443	49818	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.189493895 CEST	49818	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.189543962 CEST	443	49818	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.189939976 CEST	49818	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.190006971 CEST	49818	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.190021038 CEST	443	49818	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.199088097 CEST	443	49819	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.199399948 CEST	49819	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.199407101 CEST	443	49819	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.200438023 CEST	443	49819	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.200527906 CEST	49819	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.200858116 CEST	49819	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.200906992 CEST	443	49819	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.201109886 CEST	49819	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.201114893 CEST	443	49819	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.201176882 CEST	49819	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.201194048 CEST	443	49819	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.202487946 CEST	443	49812	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.207935095 CEST	49813	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.208009005 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.208014011 CEST	443	49812	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.254893064 CEST	49819	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.261881113 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.344371080 CEST	443	49819	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.344501019 CEST	443	49819	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.344611883 CEST	49819	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.345264912 CEST	49819	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.345282078 CEST	443	49819	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.351942062 CEST	443	49817	216.58.206.66	192.168.2.18
May 27, 2024 15:01:11.352250099 CEST	49817	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:11.352274895 CEST	443	49817	216.58.206.66	192.168.2.18
May 27, 2024 15:01:11.352607012 CEST	443	49817	216.58.206.66	192.168.2.18
May 27, 2024 15:01:11.352974892 CEST	49817	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:11.353038073 CEST	443	49817	216.58.206.66	192.168.2.18
May 27, 2024 15:01:11.353158951 CEST	49817	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:11.353178024 CEST	443	49817	216.58.206.66	192.168.2.18
May 27, 2024 15:01:11.370132923 CEST	443	49818	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.370234013 CEST	443	49818	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.370284081 CEST	49818	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.371047020 CEST	49818	443	192.168.2.18	172.67.176.164
May 27, 2024 15:01:11.371058941 CEST	443	49818	172.67.176.164	192.168.2.18
May 27, 2024 15:01:11.425729036 CEST	443	49816	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.426112890 CEST	49816	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.426125050 CEST	443	49816	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.426645994 CEST	443	49816	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.427001953 CEST	49816	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.427212954 CEST	49816	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.427217960 CEST	443	49816	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.427297115 CEST	443	49816	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.467030048 CEST	443	49812	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.467099905 CEST	443	49812	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.467284918 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.467873096 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.467885971 CEST	443	49812	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.467896938 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.467941046 CEST	49812	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.468915939 CEST	443	49813	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.469458103 CEST	49813	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.469494104 CEST	443	49813	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.469552040 CEST	49813	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.475910902 CEST	49816	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.532938957 CEST	49826	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.532979965 CEST	443	49826	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.533051968 CEST	49826	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.533365965 CEST	49826	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.533380032 CEST	443	49826	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.579338074 CEST	443	49817	216.58.206.66	192.168.2.18
May 27, 2024 15:01:11.580110073 CEST	443	49817	216.58.206.66	192.168.2.18
May 27, 2024 15:01:11.580117941 CEST	49817	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:11.580137968 CEST	443	49817	216.58.206.66	192.168.2.18
May 27, 2024 15:01:11.580204010 CEST	49817	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:11.580250025 CEST	49817	443	192.168.2.18	216.58.206.66
May 27, 2024 15:01:11.588649988 CEST	49827	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.588675022 CEST	443	49827	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.588737965 CEST	49827	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.589020967 CEST	49827	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:11.589031935 CEST	443	49827	172.217.16.194	192.168.2.18
May 27, 2024 15:01:11.794246912 CEST	443	49816	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.794357061 CEST	443	49816	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.794408083 CEST	49816	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.794891119 CEST	49816	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.794909954 CEST	443	49816	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.828361988 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.828782082 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.828814030 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.829147100 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.829592943 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.829665899 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.829845905 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.829879999 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.829994917 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.830041885 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.830142975 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.830187082 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.830339909 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.830384016 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.830394030 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.830462933 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.830509901 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.883151054 CEST	443	49822	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.883424997 CEST	49822	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.883451939 CEST	443	49822	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.883817911 CEST	443	49822	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.884144068 CEST	49822	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.884212971 CEST	443	49822	87.250.250.119	192.168.2.18
May 27, 2024 15:01:11.884305954 CEST	49822	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:11.930494070 CEST	443	49822	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.238986969 CEST	443	49822	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.239109993 CEST	443	49822	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.239166021 CEST	49822	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.239922047 CEST	49822	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.239938974 CEST	443	49822	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.252664089 CEST	443	49827	172.217.16.194	192.168.2.18
May 27, 2024 15:01:12.252865076 CEST	49827	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:12.252891064 CEST	443	49827	172.217.16.194	192.168.2.18
May 27, 2024 15:01:12.253249884 CEST	443	49827	172.217.16.194	192.168.2.18
May 27, 2024 15:01:12.253537893 CEST	49827	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:12.253609896 CEST	443	49827	172.217.16.194	192.168.2.18
May 27, 2024 15:01:12.253664017 CEST	49827	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:12.254475117 CEST	443	49826	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.254668951 CEST	49826	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.254693985 CEST	443	49826	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.255032063 CEST	443	49826	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.255374908 CEST	49826	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.255441904 CEST	443	49826	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.255544901 CEST	49826	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.255562067 CEST	49826	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.255574942 CEST	443	49826	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.294509888 CEST	443	49827	172.217.16.194	192.168.2.18
May 27, 2024 15:01:12.458101034 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.458350897 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.458437920 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.458789110 CEST	49820	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.458825111 CEST	443	49820	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.462940931 CEST	49832	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.462974072 CEST	443	49832	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.463098049 CEST	49832	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.463310003 CEST	49832	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.463325024 CEST	443	49832	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.568591118 CEST	443	49827	172.217.16.194	192.168.2.18
May 27, 2024 15:01:12.569000959 CEST	443	49827	172.217.16.194	192.168.2.18
May 27, 2024 15:01:12.569562912 CEST	49827	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:12.569591999 CEST	443	49827	172.217.16.194	192.168.2.18
May 27, 2024 15:01:12.569622040 CEST	49827	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:12.569751978 CEST	49827	443	192.168.2.18	172.217.16.194
May 27, 2024 15:01:12.581058979 CEST	443	49826	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.581151009 CEST	443	49826	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.581406116 CEST	49826	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.581778049 CEST	49826	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.581794977 CEST	443	49826	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.585685015 CEST	49833	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.585716009 CEST	443	49833	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.586499929 CEST	49833	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.588592052 CEST	49833	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.588609934 CEST	443	49833	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.753468037 CEST	49835	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.753508091 CEST	443	49835	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.754225016 CEST	49835	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.754321098 CEST	49835	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.754342079 CEST	443	49835	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.845069885 CEST	49836	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.845110893 CEST	443	49836	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.848102093 CEST	49836	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.849091053 CEST	49836	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.849107027 CEST	443	49836	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.980669022 CEST	49837	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.980709076 CEST	443	49837	87.250.250.119	192.168.2.18
May 27, 2024 15:01:12.981029987 CEST	49837	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.981029987 CEST	49837	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:12.981070995 CEST	443	49837	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.166001081 CEST	443	49714	216.58.212.164	192.168.2.18
May 27, 2024 15:01:13.166096926 CEST	443	49714	216.58.212.164	192.168.2.18
May 27, 2024 15:01:13.166338921 CEST	49714	443	192.168.2.18	216.58.212.164
May 27, 2024 15:01:13.187958956 CEST	443	49832	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.188301086 CEST	49832	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.188327074 CEST	443	49832	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.189685106 CEST	443	49832	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.190236092 CEST	49832	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.190422058 CEST	443	49832	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.190500975 CEST	49832	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.234508038 CEST	443	49832	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.245001078 CEST	49832	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.330218077 CEST	443	49833	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.332643032 CEST	49833	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.332653999 CEST	443	49833	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.333076954 CEST	443	49833	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.335386038 CEST	49833	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.335484028 CEST	443	49833	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.335575104 CEST	49833	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.378505945 CEST	443	49833	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.389383078 CEST	49833	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.473063946 CEST	443	49835	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.477339983 CEST	49835	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.477365971 CEST	443	49835	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.477706909 CEST	443	49835	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.478811026 CEST	49835	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.478811026 CEST	49835	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.478836060 CEST	443	49835	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.478883028 CEST	443	49835	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.478907108 CEST	49835	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.522506952 CEST	443	49835	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.531904936 CEST	49835	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.539155006 CEST	443	49832	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.539304972 CEST	443	49832	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.539441109 CEST	49832	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.539967060 CEST	49832	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.539999008 CEST	443	49832	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.600011110 CEST	443	49836	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.600812912 CEST	49836	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.600835085 CEST	443	49836	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.601191998 CEST	443	49836	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.606592894 CEST	49836	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.606832981 CEST	49836	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.606841087 CEST	443	49836	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.606852055 CEST	49836	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.606890917 CEST	443	49836	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.658890963 CEST	49836	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.693202972 CEST	443	49833	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.693475962 CEST	443	49833	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.693564892 CEST	49833	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.694402933 CEST	49833	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.694422960 CEST	443	49833	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.714350939 CEST	49714	443	192.168.2.18	216.58.212.164
May 27, 2024 15:01:13.714386940 CEST	443	49714	216.58.212.164	192.168.2.18
May 27, 2024 15:01:13.714782000 CEST	49838	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.714816093 CEST	443	49838	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.714894056 CEST	49838	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.714921951 CEST	443	49837	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.715147018 CEST	49838	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.715159893 CEST	443	49838	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.715285063 CEST	49837	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.715292931 CEST	443	49837	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.716393948 CEST	443	49837	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.716459036 CEST	49837	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.716844082 CEST	49837	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.716922045 CEST	443	49837	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.717103004 CEST	49837	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.717113018 CEST	443	49837	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.717124939 CEST	49837	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.762491941 CEST	443	49837	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.770883083 CEST	49837	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.814644098 CEST	443	49835	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.814747095 CEST	443	49835	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.814820051 CEST	49835	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.815877914 CEST	49835	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.815896034 CEST	443	49835	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.819222927 CEST	49839	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.819245100 CEST	443	49839	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.819309950 CEST	49839	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.819773912 CEST	49839	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.819788933 CEST	443	49839	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.949671984 CEST	443	49836	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.949788094 CEST	443	49836	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.949845076 CEST	49836	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.955115080 CEST	49836	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.955130100 CEST	443	49836	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.958673000 CEST	49840	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.958749056 CEST	443	49840	87.250.250.119	192.168.2.18
May 27, 2024 15:01:13.958879948 CEST	49840	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.959172964 CEST	49840	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:13.959208012 CEST	443	49840	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.053040981 CEST	443	49837	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.053174973 CEST	443	49837	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.053225994 CEST	49837	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.053721905 CEST	49837	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.053735971 CEST	443	49837	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.059298992 CEST	49841	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.059350014 CEST	443	49841	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.059437990 CEST	49841	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.059839964 CEST	49841	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.059864044 CEST	443	49841	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.453885078 CEST	443	49838	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.454232931 CEST	49838	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.454248905 CEST	443	49838	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.454600096 CEST	443	49838	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.455058098 CEST	49838	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.455121994 CEST	443	49838	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.455492973 CEST	49838	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.455518007 CEST	443	49838	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.455725908 CEST	49838	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.498528957 CEST	443	49838	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.562664986 CEST	443	49839	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.563142061 CEST	49839	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.563167095 CEST	443	49839	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.563502073 CEST	443	49839	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.563919067 CEST	49839	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.563981056 CEST	443	49839	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.564106941 CEST	49839	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.606544018 CEST	443	49839	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.648699999 CEST	49842	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.648796082 CEST	443	49842	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.648920059 CEST	49842	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.649209976 CEST	49842	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.649251938 CEST	443	49842	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.695561886 CEST	443	49840	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.696341038 CEST	49840	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.696365118 CEST	443	49840	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.696734905 CEST	443	49840	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.697180986 CEST	49840	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.697256088 CEST	443	49840	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.697381020 CEST	49840	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.738573074 CEST	443	49840	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.773824930 CEST	443	49841	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.776138067 CEST	49841	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.776179075 CEST	443	49841	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.777261019 CEST	443	49841	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.777357101 CEST	49841	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.777740002 CEST	49841	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.777820110 CEST	443	49841	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.777930021 CEST	49841	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.777946949 CEST	443	49841	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.805341959 CEST	443	49838	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.805646896 CEST	443	49838	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.805741072 CEST	49838	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.808444977 CEST	49838	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.808468103 CEST	443	49838	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.811707020 CEST	49843	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.811799049 CEST	443	49843	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.811918020 CEST	49843	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.812175035 CEST	49843	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.812215090 CEST	443	49843	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.819931030 CEST	49841	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.925455093 CEST	443	49839	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.925721884 CEST	443	49839	87.250.250.119	192.168.2.18
May 27, 2024 15:01:14.925806999 CEST	49839	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.926515102 CEST	49839	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:14.926551104 CEST	443	49839	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.055588961 CEST	443	49840	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.055685043 CEST	443	49840	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.055799007 CEST	49840	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.056303024 CEST	49840	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.056341887 CEST	443	49840	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.149512053 CEST	443	49841	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.149637938 CEST	443	49841	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.149708033 CEST	49841	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.150325060 CEST	49841	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.150368929 CEST	443	49841	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.367146969 CEST	443	49842	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.367517948 CEST	49842	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.367559910 CEST	443	49842	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.367921114 CEST	443	49842	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.368249893 CEST	49842	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.368313074 CEST	443	49842	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.368462086 CEST	49842	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.368498087 CEST	49842	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.368503094 CEST	443	49842	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.410501003 CEST	443	49842	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.548290014 CEST	49673	443	192.168.2.18	204.79.197.203
May 27, 2024 15:01:15.561085939 CEST	443	49843	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.561435938 CEST	49843	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.561497927 CEST	443	49843	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.562659025 CEST	443	49843	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.562994957 CEST	49843	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.563179016 CEST	443	49843	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.563183069 CEST	49843	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.610518932 CEST	443	49843	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.611057997 CEST	49843	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.701816082 CEST	443	49842	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.701910019 CEST	443	49842	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.702116966 CEST	49842	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.702541113 CEST	49842	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.702584028 CEST	443	49842	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.706571102 CEST	49844	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.706613064 CEST	443	49844	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.706686974 CEST	49844	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.706975937 CEST	49844	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.706989050 CEST	443	49844	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.850935936 CEST	49673	443	192.168.2.18	204.79.197.203
May 27, 2024 15:01:15.919575930 CEST	443	49843	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.919857025 CEST	443	49843	87.250.250.119	192.168.2.18
May 27, 2024 15:01:15.919943094 CEST	49843	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.921231985 CEST	49843	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:15.921257973 CEST	443	49843	87.250.250.119	192.168.2.18
May 27, 2024 15:01:16.420701027 CEST	443	49844	87.250.250.119	192.168.2.18
May 27, 2024 15:01:16.421039104 CEST	49844	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:16.421066999 CEST	443	49844	87.250.250.119	192.168.2.18
May 27, 2024 15:01:16.421401024 CEST	443	49844	87.250.250.119	192.168.2.18
May 27, 2024 15:01:16.421710968 CEST	49844	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:16.421782017 CEST	443	49844	87.250.250.119	192.168.2.18
May 27, 2024 15:01:16.421920061 CEST	49844	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:16.454909086 CEST	49673	443	192.168.2.18	204.79.197.203
May 27, 2024 15:01:16.462500095 CEST	443	49844	87.250.250.119	192.168.2.18
May 27, 2024 15:01:16.776771069 CEST	443	49844	87.250.250.119	192.168.2.18
May 27, 2024 15:01:16.822112083 CEST	49844	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:16.822134972 CEST	443	49844	87.250.250.119	192.168.2.18
May 27, 2024 15:01:16.822504997 CEST	49844	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:16.822608948 CEST	443	49844	87.250.250.119	192.168.2.18
May 27, 2024 15:01:16.822694063 CEST	49844	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:17.669933081 CEST	49673	443	192.168.2.18	204.79.197.203
May 27, 2024 15:01:18.489258051 CEST	49845	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:18.489303112 CEST	443	49845	87.250.250.119	192.168.2.18
May 27, 2024 15:01:18.489392996 CEST	49845	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:18.489795923 CEST	49845	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:18.489814997 CEST	443	49845	87.250.250.119	192.168.2.18
May 27, 2024 15:01:19.233717918 CEST	443	49845	87.250.250.119	192.168.2.18
May 27, 2024 15:01:19.234108925 CEST	49845	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:19.234122992 CEST	443	49845	87.250.250.119	192.168.2.18
May 27, 2024 15:01:19.234457970 CEST	443	49845	87.250.250.119	192.168.2.18
May 27, 2024 15:01:19.234839916 CEST	49845	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:19.234905958 CEST	443	49845	87.250.250.119	192.168.2.18
May 27, 2024 15:01:19.235040903 CEST	49845	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:19.235059023 CEST	49845	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:19.235064030 CEST	443	49845	87.250.250.119	192.168.2.18
May 27, 2024 15:01:19.278511047 CEST	443	49845	87.250.250.119	192.168.2.18
May 27, 2024 15:01:19.597462893 CEST	443	49845	87.250.250.119	192.168.2.18
May 27, 2024 15:01:19.597580910 CEST	443	49845	87.250.250.119	192.168.2.18
May 27, 2024 15:01:19.597825050 CEST	49845	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:19.598612070 CEST	49845	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:19.598634005 CEST	443	49845	87.250.250.119	192.168.2.18
May 27, 2024 15:01:19.602180958 CEST	49846	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:19.602212906 CEST	443	49846	87.250.250.119	192.168.2.18
May 27, 2024 15:01:19.602358103 CEST	49846	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:19.602633953 CEST	49846	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:19.602646112 CEST	443	49846	87.250.250.119	192.168.2.18
May 27, 2024 15:01:20.080060005 CEST	49673	443	192.168.2.18	204.79.197.203
May 27, 2024 15:01:20.330821991 CEST	443	49846	87.250.250.119	192.168.2.18
May 27, 2024 15:01:20.331187010 CEST	49846	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:20.331204891 CEST	443	49846	87.250.250.119	192.168.2.18
May 27, 2024 15:01:20.334053993 CEST	443	49846	87.250.250.119	192.168.2.18
May 27, 2024 15:01:20.334127903 CEST	49846	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:20.334429026 CEST	49846	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:20.334496021 CEST	443	49846	87.250.250.119	192.168.2.18
May 27, 2024 15:01:20.334598064 CEST	49846	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:20.334609032 CEST	443	49846	87.250.250.119	192.168.2.18
May 27, 2024 15:01:20.381912947 CEST	49846	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:20.682374001 CEST	443	49846	87.250.250.119	192.168.2.18
May 27, 2024 15:01:20.682653904 CEST	443	49846	87.250.250.119	192.168.2.18
May 27, 2024 15:01:20.682730913 CEST	49846	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:20.683558941 CEST	49846	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:20.683579922 CEST	443	49846	87.250.250.119	192.168.2.18
May 27, 2024 15:01:22.684936047 CEST	49679	443	192.168.2.18	52.182.141.63
May 27, 2024 15:01:22.999982119 CEST	49679	443	192.168.2.18	52.182.141.63
May 27, 2024 15:01:23.604165077 CEST	49679	443	192.168.2.18	52.182.141.63
May 27, 2024 15:01:24.815927982 CEST	49679	443	192.168.2.18	52.182.141.63
May 27, 2024 15:01:24.880033970 CEST	49673	443	192.168.2.18	204.79.197.203
May 27, 2024 15:01:26.499414921 CEST	49847	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:26.499452114 CEST	443	49847	87.250.250.119	192.168.2.18
May 27, 2024 15:01:26.499556065 CEST	49847	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:26.499835968 CEST	49847	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:26.499855042 CEST	443	49847	87.250.250.119	192.168.2.18
May 27, 2024 15:01:27.230946064 CEST	49679	443	192.168.2.18	52.182.141.63
May 27, 2024 15:01:27.268230915 CEST	443	49847	87.250.250.119	192.168.2.18
May 27, 2024 15:01:27.268656969 CEST	49847	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:27.268671036 CEST	443	49847	87.250.250.119	192.168.2.18
May 27, 2024 15:01:27.269766092 CEST	443	49847	87.250.250.119	192.168.2.18
May 27, 2024 15:01:27.270270109 CEST	49847	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:27.270452023 CEST	443	49847	87.250.250.119	192.168.2.18
May 27, 2024 15:01:27.270487070 CEST	49847	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:27.270576000 CEST	443	49847	87.250.250.119	192.168.2.18
May 27, 2024 15:01:27.323924065 CEST	49847	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:27.646915913 CEST	443	49847	87.250.250.119	192.168.2.18
May 27, 2024 15:01:27.647013903 CEST	443	49847	87.250.250.119	192.168.2.18
May 27, 2024 15:01:27.647097111 CEST	49847	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:27.648184061 CEST	49847	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:27.648200035 CEST	443	49847	87.250.250.119	192.168.2.18
May 27, 2024 15:01:28.250960112 CEST	443	49771	65.108.228.44	192.168.2.18
May 27, 2024 15:01:28.251144886 CEST	443	49771	65.108.228.44	192.168.2.18
May 27, 2024 15:01:28.251218081 CEST	49771	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:30.036925077 CEST	49771	443	192.168.2.18	65.108.228.44
May 27, 2024 15:01:30.036964893 CEST	443	49771	65.108.228.44	192.168.2.18
May 27, 2024 15:01:32.042936087 CEST	49679	443	192.168.2.18	52.182.141.63
May 27, 2024 15:01:34.486980915 CEST	49673	443	192.168.2.18	204.79.197.203
May 27, 2024 15:01:34.489824057 CEST	49848	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:34.489861965 CEST	443	49848	87.250.250.119	192.168.2.18
May 27, 2024 15:01:34.489944935 CEST	49848	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:34.490379095 CEST	49848	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:34.490387917 CEST	443	49848	87.250.250.119	192.168.2.18
May 27, 2024 15:01:35.201313972 CEST	443	49848	87.250.250.119	192.168.2.18
May 27, 2024 15:01:35.201735020 CEST	49848	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:35.201761007 CEST	443	49848	87.250.250.119	192.168.2.18
May 27, 2024 15:01:35.202112913 CEST	443	49848	87.250.250.119	192.168.2.18
May 27, 2024 15:01:35.202449083 CEST	49848	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:35.202521086 CEST	443	49848	87.250.250.119	192.168.2.18
May 27, 2024 15:01:35.202652931 CEST	49848	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:35.202652931 CEST	49848	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:35.202680111 CEST	443	49848	87.250.250.119	192.168.2.18
May 27, 2024 15:01:35.524909973 CEST	443	49848	87.250.250.119	192.168.2.18
May 27, 2024 15:01:35.525039911 CEST	443	49848	87.250.250.119	192.168.2.18
May 27, 2024 15:01:35.525116920 CEST	49848	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:35.526180983 CEST	49848	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:35.526204109 CEST	443	49848	87.250.250.119	192.168.2.18
May 27, 2024 15:01:35.529551029 CEST	49849	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:35.529573917 CEST	443	49849	87.250.250.119	192.168.2.18
May 27, 2024 15:01:35.529673100 CEST	49849	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:35.529922962 CEST	49849	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:35.529933929 CEST	443	49849	87.250.250.119	192.168.2.18
May 27, 2024 15:01:36.261496067 CEST	443	49849	87.250.250.119	192.168.2.18
May 27, 2024 15:01:36.261944056 CEST	49849	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:36.261977911 CEST	443	49849	87.250.250.119	192.168.2.18
May 27, 2024 15:01:36.262458086 CEST	443	49849	87.250.250.119	192.168.2.18
May 27, 2024 15:01:36.262805939 CEST	49849	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:36.262888908 CEST	443	49849	87.250.250.119	192.168.2.18
May 27, 2024 15:01:36.262998104 CEST	49849	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:36.306512117 CEST	443	49849	87.250.250.119	192.168.2.18
May 27, 2024 15:01:36.618104935 CEST	443	49849	87.250.250.119	192.168.2.18
May 27, 2024 15:01:36.618210077 CEST	443	49849	87.250.250.119	192.168.2.18
May 27, 2024 15:01:36.618424892 CEST	49849	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:36.619149923 CEST	49849	443	192.168.2.18	87.250.250.119
May 27, 2024 15:01:36.619173050 CEST	443	49849	87.250.250.119	192.168.2.18
May 27, 2024 15:01:41.646065950 CEST	49679	443	192.168.2.18	52.182.141.63
May 27, 2024 15:01:44.601253033 CEST	49688	80	192.168.2.18	199.232.214.172
May 27, 2024 15:01:44.609436035 CEST	80	49688	199.232.214.172	192.168.2.18
May 27, 2024 15:01:44.609530926 CEST	49688	80	192.168.2.18	199.232.214.172
May 27, 2024 15:01:45.565182924 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:45.565224886 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:45.565332890 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:45.565712929 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:45.565725088 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.347034931 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.347122908 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:46.348522902 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:46.348532915 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.348808050 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.350142002 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:46.390501976 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.677793980 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.677820921 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.677839994 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.677968979 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:46.677998066 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.678045988 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.678059101 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:46.678066969 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.678108931 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:46.678131104 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:46.678590059 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.678638935 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:46.678647041 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.678693056 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:46.680951118 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:46.680963039 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:46.680974007 CEST	49850	443	192.168.2.18	20.114.59.183
May 27, 2024 15:01:46.680979013 CEST	443	49850	20.114.59.183	192.168.2.18
May 27, 2024 15:01:49.068980932 CEST	49721	443	192.168.2.18	172.217.18.98
May 27, 2024 15:01:49.068999052 CEST	443	49721	172.217.18.98	192.168.2.18
May 27, 2024 15:02:04.027158022 CEST	49721	443	192.168.2.18	172.217.18.98
May 27, 2024 15:02:04.027357101 CEST	443	49721	172.217.18.98	192.168.2.18
May 27, 2024 15:02:04.027450085 CEST	49721	443	192.168.2.18	172.217.18.98
May 27, 2024 15:02:36.212311029 CEST	49690	80	192.168.2.18	192.229.221.95
May 27, 2024 15:02:36.217874050 CEST	80	49690	192.229.221.95	192.168.2.18
May 27, 2024 15:02:36.217998028 CEST	49690	80	192.168.2.18	192.229.221.95

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 27, 2024 15:00:57.783972025 CEST	53	63088	1.1.1.1	192.168.2.18
May 27, 2024 15:00:57.812125921 CEST	57224	53	192.168.2.18	1.1.1.1
May 27, 2024 15:00:57.812280893 CEST	62467	53	192.168.2.18	1.1.1.1
May 27, 2024 15:00:57.841135025 CEST	53	55968	1.1.1.1	192.168.2.18
May 27, 2024 15:00:57.916033030 CEST	53	62467	1.1.1.1	192.168.2.18
May 27, 2024 15:00:57.956840038 CEST	53	57224	1.1.1.1	192.168.2.18
May 27, 2024 15:00:58.820375919 CEST	53	53858	1.1.1.1	192.168.2.18
May 27, 2024 15:01:02.375556946 CEST	61990	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:02.375690937 CEST	61253	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:02.384485960 CEST	53	61990	1.1.1.1	192.168.2.18
May 27, 2024 15:01:02.384501934 CEST	53	61253	1.1.1.1	192.168.2.18
May 27, 2024 15:01:02.614075899 CEST	59837	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:02.614352942 CEST	60589	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:02.622364998 CEST	53	60589	1.1.1.1	192.168.2.18
May 27, 2024 15:01:02.622687101 CEST	53	59837	1.1.1.1	192.168.2.18
May 27, 2024 15:01:02.699342012 CEST	61594	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:02.699496984 CEST	63297	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:02.752341032 CEST	53	63297	1.1.1.1	192.168.2.18
May 27, 2024 15:01:02.755125046 CEST	53	61594	1.1.1.1	192.168.2.18
May 27, 2024 15:01:03.364097118 CEST	49747	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:03.364300966 CEST	53899	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:03.371311903 CEST	53	49747	1.1.1.1	192.168.2.18
May 27, 2024 15:01:03.371556044 CEST	53	53899	1.1.1.1	192.168.2.18
May 27, 2024 15:01:03.828901052 CEST	53	64973	1.1.1.1	192.168.2.18
May 27, 2024 15:01:04.382045984 CEST	56476	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:04.382186890 CEST	62366	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:04.391632080 CEST	53	56476	1.1.1.1	192.168.2.18
May 27, 2024 15:01:04.391772032 CEST	53	62366	1.1.1.1	192.168.2.18
May 27, 2024 15:01:04.678740025 CEST	53381	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:04.679079056 CEST	59194	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:04.686772108 CEST	53	59194	1.1.1.1	192.168.2.18
May 27, 2024 15:01:04.687403917 CEST	53	53381	1.1.1.1	192.168.2.18
May 27, 2024 15:01:04.855026007 CEST	53	57767	1.1.1.1	192.168.2.18
May 27, 2024 15:01:05.460645914 CEST	56732	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:05.460788965 CEST	63538	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:05.467866898 CEST	53	63538	1.1.1.1	192.168.2.18
May 27, 2024 15:01:05.469006062 CEST	53	56732	1.1.1.1	192.168.2.18
May 27, 2024 15:01:05.887718916 CEST	53	59910	1.1.1.1	192.168.2.18
May 27, 2024 15:01:06.803333998 CEST	53282	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:06.803500891 CEST	64989	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:06.803960085 CEST	61860	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:06.804271936 CEST	55242	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:06.817317009 CEST	53	61860	1.1.1.1	192.168.2.18
May 27, 2024 15:01:06.817342043 CEST	53	55242	1.1.1.1	192.168.2.18
May 27, 2024 15:01:06.817362070 CEST	53	64989	1.1.1.1	192.168.2.18
May 27, 2024 15:01:06.830575943 CEST	53	53282	1.1.1.1	192.168.2.18
May 27, 2024 15:01:06.841751099 CEST	53	52184	1.1.1.1	192.168.2.18
May 27, 2024 15:01:06.889951944 CEST	53	61492	1.1.1.1	192.168.2.18
May 27, 2024 15:01:06.894305944 CEST	56046	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:06.894429922 CEST	50684	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:06.902270079 CEST	53	56046	1.1.1.1	192.168.2.18
May 27, 2024 15:01:06.902276039 CEST	53	50684	1.1.1.1	192.168.2.18
May 27, 2024 15:01:08.959827900 CEST	60763	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:08.960155964 CEST	58733	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:08.990700006 CEST	53	58733	1.1.1.1	192.168.2.18
May 27, 2024 15:01:08.991028070 CEST	53	60763	1.1.1.1	192.168.2.18
May 27, 2024 15:01:09.050508976 CEST	54472	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:09.050735950 CEST	59479	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:09.084460974 CEST	53	59479	1.1.1.1	192.168.2.18
May 27, 2024 15:01:09.093102932 CEST	53	54472	1.1.1.1	192.168.2.18
May 27, 2024 15:01:10.484292030 CEST	60289	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:10.484412909 CEST	49389	53	192.168.2.18	1.1.1.1
May 27, 2024 15:01:10.491767883 CEST	53	60289	1.1.1.1	192.168.2.18
May 27, 2024 15:01:10.491775990 CEST	53	49389	1.1.1.1	192.168.2.18
May 27, 2024 15:01:15.906227112 CEST	53	51546	1.1.1.1	192.168.2.18
May 27, 2024 15:01:34.847764969 CEST	53	58693	1.1.1.1	192.168.2.18
May 27, 2024 15:01:57.620496988 CEST	53	61493	1.1.1.1	192.168.2.18
May 27, 2024 15:01:57.781882048 CEST	53	62277	1.1.1.1	192.168.2.18
May 27, 2024 15:02:22.881463051 CEST	138	138	192.168.2.18	192.168.2.255
May 27, 2024 15:02:25.312086105 CEST	53	51276	1.1.1.1	192.168.2.18

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
May 27, 2024 15:01:05.887794971 CEST	192.168.2.18	1.1.1.1	c235	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
May 27, 2024 15:00:57.812125921 CEST	192.168.2.18	1.1.1.1	0x3d16	Standard query (0)	transfiles.ru	A (IP address)	IN (0x0001)	false
May 27, 2024 15:00:57.812280893 CEST	192.168.2.18	1.1.1.1	0x66c	Standard query (0)	transfiles.ru	65	IN (0x0001)	false
May 27, 2024 15:01:02.375556946 CEST	192.168.2.18	1.1.1.1	0x3d3c	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:02.375690937 CEST	192.168.2.18	1.1.1.1	0xd191	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
May 27, 2024 15:01:02.614075899 CEST	192.168.2.18	1.1.1.1	0x5adb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:02.614352942 CEST	192.168.2.18	1.1.1.1	0xb67e	Standard query (0)	www.google.com	65	IN (0x0001)	false
May 27, 2024 15:01:02.699342012 CEST	192.168.2.18	1.1.1.1	0xc1df	Standard query (0)	transfiles.ru	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:02.699496984 CEST	192.168.2.18	1.1.1.1	0x64e2	Standard query (0)	transfiles.ru	65	IN (0x0001)	false
May 27, 2024 15:01:03.364097118 CEST	192.168.2.18	1.1.1.1	0x5050	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:03.364300966 CEST	192.168.2.18	1.1.1.1	0xf714	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 27, 2024 15:01:04.382045984 CEST	192.168.2.18	1.1.1.1	0x7780	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:04.382186890 CEST	192.168.2.18	1.1.1.1	0xc086	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
May 27, 2024 15:01:04.678740025 CEST	192.168.2.18	1.1.1.1	0x78ff	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:04.679079056 CEST	192.168.2.18	1.1.1.1	0x4faf	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
May 27, 2024 15:01:05.460645914 CEST	192.168.2.18	1.1.1.1	0xee62	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:05.460788965 CEST	192.168.2.18	1.1.1.1	0x825e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
May 27, 2024 15:01:06.803333998 CEST	192.168.2.18	1.1.1.1	0xd4f8	Standard query (0)	cdn.bidbrain.app	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.803500891 CEST	192.168.2.18	1.1.1.1	0x9ca6	Standard query (0)	cdn.bidbrain.app	65	IN (0x0001)	false
May 27, 2024 15:01:06.803960085 CEST	192.168.2.18	1.1.1.1	0x1258	Standard query (0)	serve.bidbrain.app	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.804271936 CEST	192.168.2.18	1.1.1.1	0x7994	Standard query (0)	serve.bidbrain.app	65	IN (0x0001)	false
May 27, 2024 15:01:06.894305944 CEST	192.168.2.18	1.1.1.1	0x3a0a	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.894429922 CEST	192.168.2.18	1.1.1.1	0x14b2	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
May 27, 2024 15:01:08.959827900 CEST	192.168.2.18	1.1.1.1	0xc763	Standard query (0)	g.bidbrain.app	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:08.960155964 CEST	192.168.2.18	1.1.1.1	0xa1c	Standard query (0)	g.bidbrain.app	65	IN (0x0001)	false
May 27, 2024 15:01:09.050508976 CEST	192.168.2.18	1.1.1.1	0x6d39	Standard query (0)	cdn.bidbrain.app	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:09.050735950 CEST	192.168.2.18	1.1.1.1	0x34b8	Standard query (0)	cdn.bidbrain.app	65	IN (0x0001)	false
May 27, 2024 15:01:10.484292030 CEST	192.168.2.18	1.1.1.1	0x756	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:10.484412909 CEST	192.168.2.18	1.1.1.1	0xeda3	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
May 27, 2024 15:00:57.956840038 CEST	1.1.1.1	192.168.2.18	0x3d16	No error (0)	transfiles.ru		65.108.228.44	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:02.384485960 CEST	1.1.1.1	192.168.2.18	0x3d3c	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:02.384485960 CEST	1.1.1.1	192.168.2.18	0x3d3c	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:02.384485960 CEST	1.1.1.1	192.168.2.18	0x3d3c	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:02.384485960 CEST	1.1.1.1	192.168.2.18	0x3d3c	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:02.622364998 CEST	1.1.1.1	192.168.2.18	0xb67e	No error (0)	www.google.com			65	IN (0x0001)	false
May 27, 2024 15:01:02.622687101 CEST	1.1.1.1	192.168.2.18	0x5adb	No error (0)	www.google.com		216.58.212.164	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:02.755125046 CEST	1.1.1.1	192.168.2.18	0xc1df	No error (0)	transfiles.ru		65.108.228.44	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:03.371311903 CEST	1.1.1.1	192.168.2.18	0x5050	No error (0)	googleads.g.doubleclick.net		172.217.18.98	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:03.371556044 CEST	1.1.1.1	192.168.2.18	0xf714	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 27, 2024 15:01:04.391632080 CEST	1.1.1.1	192.168.2.18	0x7780	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:01:04.391632080 CEST	1.1.1.1	192.168.2.18	0x7780	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:04.391632080 CEST	1.1.1.1	192.168.2.18	0x7780	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:04.391632080 CEST	1.1.1.1	192.168.2.18	0x7780	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:04.391632080 CEST	1.1.1.1	192.168.2.18	0x7780	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:04.391772032 CEST	1.1.1.1	192.168.2.18	0xc086	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:01:04.686772108 CEST	1.1.1.1	192.168.2.18	0x4faf	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:01:04.687403917 CEST	1.1.1.1	192.168.2.18	0x78ff	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:01:04.687403917 CEST	1.1.1.1	192.168.2.18	0x78ff	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:04.687403917 CEST	1.1.1.1	192.168.2.18	0x78ff	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:04.687403917 CEST	1.1.1.1	192.168.2.18	0x78ff	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:04.687403917 CEST	1.1.1.1	192.168.2.18	0x78ff	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:05.467866898 CEST	1.1.1.1	192.168.2.18	0x825e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
May 27, 2024 15:01:05.469006062 CEST	1.1.1.1	192.168.2.18	0xee62	No error (0)	googleads.g.doubleclick.net		216.58.206.66	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.817317009 CEST	1.1.1.1	192.168.2.18	0x1258	No error (0)	serve.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.817317009 CEST	1.1.1.1	192.168.2.18	0x1258	No error (0)	serve.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.817342043 CEST	1.1.1.1	192.168.2.18	0x7994	No error (0)	serve.bidbrain.app			65	IN (0x0001)	false
May 27, 2024 15:01:06.817362070 CEST	1.1.1.1	192.168.2.18	0x9ca6	No error (0)	cdn.bidbrain.app			65	IN (0x0001)	false
May 27, 2024 15:01:06.830575943 CEST	1.1.1.1	192.168.2.18	0xd4f8	No error (0)	cdn.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.830575943 CEST	1.1.1.1	192.168.2.18	0xd4f8	No error (0)	cdn.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.902270079 CEST	1.1.1.1	192.168.2.18	0x3a0a	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:01:06.902270079 CEST	1.1.1.1	192.168.2.18	0x3a0a	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.902270079 CEST	1.1.1.1	192.168.2.18	0x3a0a	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.902270079 CEST	1.1.1.1	192.168.2.18	0x3a0a	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.902270079 CEST	1.1.1.1	192.168.2.18	0x3a0a	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:06.902276039 CEST	1.1.1.1	192.168.2.18	0x14b2	No error (0)	mc.yandex.com	mc.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
May 27, 2024 15:01:08.990700006 CEST	1.1.1.1	192.168.2.18	0xa1c	No error (0)	g.bidbrain.app			65	IN (0x0001)	false
May 27, 2024 15:01:08.991028070 CEST	1.1.1.1	192.168.2.18	0xc763	No error (0)	g.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:08.991028070 CEST	1.1.1.1	192.168.2.18	0xc763	No error (0)	g.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:09.084460974 CEST	1.1.1.1	192.168.2.18	0x34b8	No error (0)	cdn.bidbrain.app			65	IN (0x0001)	false
May 27, 2024 15:01:09.093102932 CEST	1.1.1.1	192.168.2.18	0x6d39	No error (0)	cdn.bidbrain.app		172.67.176.164	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:09.093102932 CEST	1.1.1.1	192.168.2.18	0x6d39	No error (0)	cdn.bidbrain.app		104.21.80.92	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:10.491767883 CEST	1.1.1.1	192.168.2.18	0x756	No error (0)	googleads.g.doubleclick.net		172.217.16.194	A (IP address)	IN (0x0001)	false
May 27, 2024 15:01:10.491775990 CEST	1.1.1.1	192.168.2.18	0xeda3	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false

HTTP Request Dependency Graph

www.bing.com

transfiles.ru

https:

mc.yandex.ru

mc.yandex.com

googleads.g.doubleclick.net

serve.bidbrain.app

cdn.bidbrain.app

g.bidbrain.app

slscr.update.microsoft.com

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.18	49694	92.123.104.38	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:00:52 UTC	2726	OUT	GET /client/config?cc=CH&setlang=en-CH HTTP/1.1 X-Search-CortanaAvailableCapabilities: None X-Search-SafeSearch: Moderate Accept-Encoding: gzip, deflate X-Device-MachineId: {92C86F7C-DB2B-4F6A-95AD-98B4A2AE008A} X-UserAgeClass: Unknown X-BM-Market: CH X-BM-DateFormat: dd/MM/yyyy X-Device-OSSKU: 48 X-BM-DTZ: -240 X-DeviceID: 01000A410900B03D X-BM-WindowsFlights: FX:119E26AD,FX:11C0E96C,FX:11C6E5C2,FX:11C7EB6A,FX:11C9408A,FX:11C940DB,FX:11CB9A9F,FX:11CB9AC1,FX:11CC111C,FX:11D5BFCD,FX:11DF5B12,FX:11DF5B75,FX:1240931B,FX:124117A5,FX:124B38D0,FX:127FC878,FX:1283FFE8,FX:12840617,FX:128979F9,FX:128EBD7E,FX:129135BB,FX:129E053F,FX:12A74DB5,FX:12AB734D,FX:12B8450E,FX:12BD6E73,FX:12C3331B,FX:12C7D66E,FX:12CDE644,FX:12D1574C,FX:12D281C4,FX:12E8312D,FX:12E85C75 X-Search-TimeZone: Bias=300; DaylightBias=-60; TimeZoneKeyName=Eastern Standard Time X-BM-Theme: 000000;0078d7 X-Search-RPSToken: t%3DEwDYAkR8BAAUcvamItSE/vUHpyZRp3BeyOJPQDsAAWr/cIfQ0iYgRnvKrjOD5PqnHYoLXMgTjo/VpwvsUDD42oDUEI8D3uduU9SHbLveE1nlWYv5D52f2L63ZAmkSR2HZCiPvg2nGzGTYPUdLdTAc46iE7aLfeHmmqzw48Z5g6laki6jD8sbsbkQIBvnH0BCCzxYK982kbgAoi6Rs04D5i67hFiHIThFeGXmdL9TWtCls6y3ytmWuWkY%2BOXalSPOrCOoF5vQthkLVkpa4jgL6XXNsgPBf6p9LFZd3vHy9RB8L65ttphO7LJsaQJNThf3Op5l3TlcMxZ3bKWeVFIHSCC0H%2Bt29rRVd6kg53GSn%2BDKtmXlZcwO/lOk2b/lSGADZgAACH6woKeQ6CprqAEDMUZkyev%2BUqICcRzpAo%2BlUxHEHTte2MVulgQtVVl0gHjnlAjVlZKXjNXDusj4mrOHt5gdCpYh7/1wCmHo/agAZRVyixkNlzfs%2BXi1XGILVbue6NwsVCPq4YoAEm4rP5VSsWrKiVXMVSZa/aNJRosrUBdOXx/CjK/0gRpLwnNNWj82uO14A2902RraFMjzwKu/MCEgmDEm6ygqd06jtduUtya4HWRq0c1xEJTmLB4MfXBPFHjPQZO5S64d9EOEHLeLoUTFs2yZYkz2ZG30555ierzqSIgYX4Jmm7QrjRszggOEn4wm8co/YMMzPohbTxDXulh4lKRBa1gbYCKolTf/K4gARkYyD2AYiUv2bOR8N2Kb9E01wfEPQQU2gTOSs0RaNJxCPaOV9niwl52cydBFTB09p9MzZ%2BCs2ZZMff07h4eho4zHt3Nl6QwUp3acZmFSt5ohCuN7PCa71igeOo0zfDtXjtT%2B/hnwOF8MQu5%2BU3j19Kflq8eVhxPOByRJ7suEaXaPoB39axnnn8ZwSmU6ovnQLAXPCCmmVBZ3%2BDKap6PR/R6gJSq72AE%3D%26p%3D X-Agent-DeviceId: 01000A410900B03D X-BM-CBT: 1716814846 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; Cortana 1.14.7.19041; 10.0.0.0.19045.2006) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/70.0.3538.102 Safari/537.36 Edge/18.19045 X-Device-isOptin: false Accept-language: en-GB, en, en-US X-Device-Touch: false X-Device-ClientSession: 36D3137324E84532A906EE90FC5F958D X-Search-AppId: Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI Host: www.bing.com Connection: Keep-Alive Cookie: SRCHUID=V=2&GUID=B4BB39E5F80E411D94C438C0FA7ACF94&dmnchg=1; SRCHD=AF=NOFORM; SRCHUSR=DOB=20240207; SRCHHPGUSR=SRCHLANG=de&LUT=1707317051026&IPMH=6b344233&IPMID=1707317270835&HV=1707317277; ANON=A=680C1B1A649CBD64DD40EBFCFFFFFFFF; MUID=BC76BB0020D345C1A049A4820CB4C03C; MUIDB=BC76BB0020D345C1A049A4820CB4C03C
2024-05-27 13:00:52 UTC	1196	IN	HTTP/1.1 200 OK Content-Length: 2215 Content-Type: application/json; charset=utf-8 Cache-Control: private X-EventID: 665484042f5146d6a670e5350ce5d25e X-AS-SetSessionMarket: de-ch UserAgentReductionOptOut: A7kgTC5xdZ2WIVGZEfb1hUoNuvjzOZX3VIV/BA6C18kQOOF50Q0D3oWoAm49k3BQImkujKILc7JmPysWk3CSjwUAAACMeyJvcmlnaW4iOiJodHRwczovL3d3dy5iaW5nLmNvbTo0NDMiLCJmZWF0dXJlIjoiU2VuZEZ1bGxVc2VyQWdlbnRBZnRlclJlZHVjdGlvbiIsImV4cGlyeSI6MTY4NDg4NjM5OSwiaXNTdWJkb21haW4iOnRydWUsImlzVGhpcmRQYXJ0eSI6dHJ1ZX0= X-XSS-Protection: 0 P3P: CP="NON UNI COM NAV STA LOC CURa DEVa PSAa PSDa OUR IND" Date: Mon, 27 May 2024 13:00:52 GMT Connection: close Set-Cookie: _EDGE_S=SID=3D9C8CFFFA076C5420A69873FB366D1B&mkt=de-ch; domain=.bing.com; path=/; HttpOnly Set-Cookie: SRCHHPGUSR=SRCHLANG=en&LUT=1707317051026&IPMH=6b344233&IPMID=1707317270835&HV=1707317277; domain=.bing.com; expires=Sat, 21-Jun-2025 13:00:52 GMT; path=/; secure; SameSite=None Set-Cookie: WLS=C=0000000000000000&N=; domain=.bing.com; path=/; secure; SameSite=None Set-Cookie: _SS=SID=3D9C8CFFFA076C5420A69873FB366D1B; domain=.bing.com; path=/; secure; SameSite=None Alt-Svc: h3=":443"; ma=93600 X-CDN-TraceID: 0.a6a72917.1716814852.12f50ab
2024-05-27 13:00:52 UTC	2215	IN	Data Raw: 7b 22 76 65 72 73 69 6f 6e 22 3a 31 2c 22 63 6f 6e 66 69 67 22 3a 7b 22 46 65 61 74 75 72 65 43 6f 6e 66 69 67 22 3a 7b 22 53 65 61 72 63 68 42 6f 78 49 62 65 61 6d 50 6f 69 6e 74 65 72 4f 6e 48 6f 76 65 72 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 68 6f 77 53 65 61 72 63 68 47 6c 79 70 68 4c 65 66 74 4f 66 53 65 61 72 63 68 42 6f 78 22 3a 7b 22 76 61 6c 75 65 22 3a 74 72 75 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 6f 78 55 73 65 53 65 61 72 63 68 49 63 6f 6e 41 74 52 65 73 74 22 3a 7b 22 76 61 6c 75 65 22 3a 66 61 6c 73 65 2c 22 66 65 61 74 75 72 65 22 3a 22 22 7d 2c 22 53 65 61 72 63 68 42 75 74 74 6f 6e 55 73 65 53 65 61 72 63 68 49 63 6f 6e 22 3a 7b 22 76 61 6c 75 65 Data Ascii: {"version":1,"config":{"FeatureConfig":{"SearchBoxIbeamPointerOnHover":{"value":true,"feature":""},"ShowSearchGlyphLeftOfSearchBox":{"value":true,"feature":""},"SearchBoxUseSearchIconAtRest":{"value":false,"feature":""},"SearchButtonUseSearchIcon":{"value

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.18	49699	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:00:59 UTC	661	OUT	GET /vyjw4 HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:00 UTC	366	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:00:59 GMT Server: Apache/2.4.41 (Ubuntu) Set-Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5; path=/ Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-05-27 13:01:00 UTC	6	IN	Data Raw: 34 32 61 31 0d 0a Data Ascii: 42a1
2024-05-27 13:01:00 UTC	16384	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 6a 71 75 65 72 79 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 2e 63 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 6a 71 75 65 72 79 2e 62 78 73 6c 69 64 65 72 2e 63 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 68 72 65 66 3d 22 2f 63 73 73 2f 63 6f 6d 6d 6f 6e 2e 63 73 73 3f 72 6e 64 3d Data Ascii: <!DOCTYPE html><html><head><link rel="stylesheet" type="text/css" href="/css/jquery.mCustomScrollbar.css" /><link rel="stylesheet" type="text/css" href="/css/jquery.bxslider.css" /><link rel="stylesheet" type="text/css" href="/css/common.css?rnd=
2024-05-27 13:01:00 UTC	673	IN	Data Raw: 09 09 09 69 66 20 28 61 64 20 26 26 20 61 64 2e 69 6e 6e 65 72 48 54 4d 4c 2e 72 65 70 6c 61 63 65 28 2f 5c 73 2f 67 2c 20 27 27 29 2e 6c 65 6e 67 74 68 20 3d 3d 20 30 29 20 7b 0d 0a 09 09 09 09 09 61 64 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 20 3d 20 27 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 27 3b 0d 0a 2f 2f 09 09 09 09 09 61 64 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 27 3c 61 20 68 72 65 66 3d 22 27 2b 70 6c 69 6e 6b 2b 27 22 20 63 6c 61 73 73 3d 22 73 64 5f 62 61 6e 6e 65 72 22 20 74 61 72 67 65 74 3d 22 5f 62 6c 61 6e 6b 22 3e 27 2b 70 6c 69 6e 6b 2b 27 3c 2f 61 3e 27 3b 0d 0a 09 09 09 09 09 61 64 2e 69 6e 6e 65 72 48 54 4d 4c 20 3d 20 27 3c 61 20 68 72 65 66 3d 22 27 2b 70 6c 69 6e 6b 2b 27 22 20 63 6c 61 73 73 3d Data Ascii: if (ad && ad.innerHTML.replace(/\s/g, '').length == 0) {ad.style.cssText = 'display:block !important';//ad.innerHTML = '<a href="'+plink+'" class="sd_banner" target="_blank">'+plink+'</a>';ad.innerHTML = '<a href="'+plink+'" class=
2024-05-27 13:01:00 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-27 13:01:00 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.18	49698	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:00 UTC	607	OUT	GET /css/jquery.mCustomScrollbar.css HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:00 UTC	273	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:00 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:24:25 GMT ETag: "a871-5c07ed594d403" Accept-Ranges: bytes Content-Length: 43121 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-05-27 13:01:00 UTC	16384	IN	Data Raw: 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 69 6e 63 68 2d 7a 6f 6f 6d 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 70 69 6e 63 68 2d 7a 6f 6f 6d 7d 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 2e 6d 43 53 5f 6e 6f 5f 73 63 72 6f 6c 6c 62 61 72 2c 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 62 61 72 2e 6d 43 53 5f 74 6f 75 63 68 5f 61 63 74 69 6f 6e 7b 2d 6d 73 2d 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 61 75 74 6f 3b 74 6f 75 63 68 2d 61 63 74 69 6f 6e 3a 61 75 74 6f 7d 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 42 6f 78 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 Data Ascii: .mCustomScrollbar{-ms-touch-action:pinch-zoom;touch-action:pinch-zoom}.mCustomScrollbar.mCS_no_scrollbar,.mCustomScrollbar.mCS_touch_action{-ms-touch-action:auto;touch-action:auto}.mCustomScrollBox{position:relative;overflow:hidden;height:100%;max-width:1
2024-05-27 13:01:00 UTC	16384	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 35 29 7d 2e 6d 43 53 2d 64 61 72 6b 2d 74 68 69 6e 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 6f 6e 44 72 61 67 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 62 61 72 2c 2e 6d 43 53 2d 64 61 72 6b 2d 74 68 69 6e 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 3a 61 63 74 69 76 65 20 2e 6d 43 53 42 5f 64 72 61 67 67 65 72 5f 62 61 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 39 29 7d 2e 6d 43 53 2d 64 61 72 6b 2d 74 68 69 6e 2e 6d Data Ascii: kground-color:rgba(0,0,0,.85)}.mCS-dark-thin.mCSB_scrollTools .mCSB_dragger.mCSB_dragger_onDrag .mCSB_dragger_bar,.mCS-dark-thin.mCSB_scrollTools .mCSB_dragger:active .mCSB_dragger_bar{background-color:#000;background-color:rgba(0,0,0,.9)}.mCS-dark-thin.m
2024-05-27 13:01:00 UTC	10353	IN	Data Raw: 68 6f 72 69 7a 6f 6e 74 61 6c 2c 2e 6d 43 75 73 74 6f 6d 53 63 72 6f 6c 6c 42 6f 78 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2d 64 61 72 6b 2b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 68 6f 72 69 7a 6f 6e 74 61 6c 7b 62 6f 74 74 6f 6d 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 7d 2e 6d 43 53 2d 64 69 72 2d 72 74 6c 3e 2e 6d 43 53 42 5f 6f 75 74 73 69 64 65 2b 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2d 64 61 72 6b 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 2c 2e 6d 43 53 2d 64 69 72 2d 72 74 6c 3e 2e 6d 43 53 42 5f 6f 75 74 73 69 64 65 2b 2e 6d 43 53 2d 6d 69 6e 69 6d 61 6c 2e 6d 43 53 42 5f 73 63 72 6f 6c 6c 54 6f 6f 6c 73 5f 76 65 72 74 69 63 61 6c 7b 6c 65 66 Data Ascii: horizontal,.mCustomScrollBox.mCS-minimal-dark+.mCSB_scrollTools.mCSB_scrollTools_horizontal{bottom:0;margin:0 12px}.mCS-dir-rtl>.mCSB_outside+.mCS-minimal-dark.mCSB_scrollTools_vertical,.mCS-dir-rtl>.mCSB_outside+.mCS-minimal.mCSB_scrollTools_vertical{lef

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.18	49704	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:01 UTC	599	OUT	GET /css/jquery.bxslider.css HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:01 UTC	271	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:01 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:24:25 GMT ETag: "efc-5c07ed597c1fd" Accept-Ranges: bytes Content-Length: 3836 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-05-27 13:01:01 UTC	3836	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 42 78 53 6c 69 64 65 72 20 76 34 2e 31 2e 32 20 2d 20 46 75 6c 6c 79 20 6c 6f 61 64 65 64 2c 20 72 65 73 70 6f 6e 73 69 76 65 20 63 6f 6e 74 65 6e 74 20 73 6c 69 64 65 72 0a 20 2a 20 68 74 74 70 3a 2f 2f 62 78 73 6c 69 64 65 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 57 72 69 74 74 65 6e 20 62 79 3a 20 53 74 65 76 65 6e 20 57 61 6e 64 65 72 73 6b 69 2c 20 32 30 31 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 74 65 76 65 6e 77 61 6e 64 65 72 73 6b 69 2e 63 6f 6d 0a 20 2a 20 28 77 68 69 6c 65 20 64 72 69 6e 6b 69 6e 67 20 42 65 6c 67 69 61 6e 20 61 6c 65 73 20 61 6e 64 20 6c 69 73 74 65 6e 69 6e 67 20 74 6f 20 6a 61 7a 7a 29 0a 20 2a 0a 20 2a 20 43 45 4f 20 61 6e 64 20 66 6f 75 6e 64 65 72 20 6f 66 20 62 78 43 72 65 61 74 69 76 65 2c 20 4c 54 44 0a Data Ascii: /** * BxSlider v4.1.2 - Fully loaded, responsive content slider * http://bxslider.com * * Written by: Steven Wanderski, 2014 * http://stevenwanderski.com * (while drinking Belgian ales and listening to jazz) * * CEO and founder of bxCreative, LTD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.18	49703	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:01 UTC	597	OUT	GET /css/common.css?rnd=11 HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:01 UTC	273	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:01 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:24:25 GMT ETag: "af66-5c07ed5934d67" Accept-Ranges: bytes Content-Length: 44902 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-05-27 13:01:01 UTC	16384	IN	Data Raw: 62 6f 64 79 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 54 61 68 6f 6d 61 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 36 35 25 3b 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 0a 20 20 20 20 2d 6d 6f 7a 2d 75 73 65 72 2d 73 65 6c 65 63 74 3a 20 6e 6f 6e 65 3b 0a 09 0a 09 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 20 2f 2a 2a 2f 0a 7d 0a 0a 68 74 6d 6c 2c 20 62 6f 64 79 20 7b 0a 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 7d 0a 62 6f 64 79 2c 20 68 31 2c 20 68 32 2c 20 68 33 2c 20 68 34 2c 20 68 35 2c 20 68 36 2c 20 70 2c 20 66 6f 72 6d 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 Data Ascii: body{background:#fff; font-family: Tahoma,Helvetica,sans-serif; font-size:65%; text-align:left; -moz-user-select: none;line-height:1.5; /**/}html, body { height: 100%;}body, h1, h2, h3, h4, h5, h6, p, form{ margin: 0;
2024-05-27 13:01:01 UTC	16384	IN	Data Raw: 68 3a 31 30 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 33 30 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 30 70 78 20 35 70 78 20 31 30 70 78 20 30 3b 0a 09 70 61 64 64 69 6e 67 3a 33 70 78 20 35 70 78 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 34 37 34 37 32 33 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 34 37 34 37 32 33 3b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 20 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 0a 09 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a Data Ascii: h:100px;height:30px;margin:0px 5px 10px 0;padding:3px 5px;background:#474723;border:1px solid #474723;border-radius:2px;-webkit-border-radius:2px; -moz-border-radius:2px;color:#fff;font-size:12px;font-weight:bold;cursor:pointer;
2024-05-27 13:01:01 UTC	12134	IN	Data Raw: 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 20 20 20 2d 6d 6f 7a 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 3b 0a 09 63 6f 6c 6f 72 3a 23 66 66 66 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 3b 0a 09 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 0a 09 74 72 61 6e 73 69 74 69 6f 6e 3a 20 62 61 63 6b 67 72 6f 75 6e 64 20 30 2e 35 73 2c 20 62 6f 72 64 65 72 20 30 2e 35 73 3b 0a 7d 0a 23 63 6f 6d 70 6c 61 69 6e 5f 73 65 6e 64 5f 62 74 6e 3a 68 6f 76 65 72 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 41 38 43 30 30 3b 0a 09 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 45 41 38 43 30 30 3b 0a Data Ascii: r-radius:2px;-webkit-border-radius:2px; -moz-border-radius:2px;color:#fff;font-size:12px;font-weight:bold;cursor:pointer;transition: background 0.5s, border 0.5s;}#complain_send_btn:hover{background:#EA8C00;border:1px solid #EA8C00;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.18	49702	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:01 UTC	599	OUT	GET /css/common_m.css?rnd=11 HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:01 UTC	273	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:01 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:24:24 GMT ETag: "35b2-5c07ed58e2cf2" Accept-Ranges: bytes Content-Length: 13746 Vary: Accept-Encoding Connection: close Content-Type: text/css
2024-05-27 13:01:01 UTC	13746	IN	Data Raw: 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 31 32 35 30 70 78 29 20 7b 0a 09 23 6c 6f 67 6f 7b 0a 09 09 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 0a 09 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 35 30 30 70 78 3b 0a 09 7d 0a 09 75 6c 2e 74 6f 70 5f 6e 61 76 69 67 61 74 69 6f 6e 7b 0a 09 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 37 30 70 78 3b 0a 09 7d 0a 09 23 6c 61 6e 67 5f 73 65 6c 65 63 74 6f 72 7b 0a 09 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 36 30 70 78 3b 0a 09 7d 0a 09 23 74 69 74 6c 65 7b 0a 09 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 30 30 70 78 3b 0a 09 7d 0a 09 2e 61 64 73 67 6f 6f 67 6c 65 5f 63 6f 6e 74 5f 68 65 61 64 65 72 7b 0a 09 09 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 Data Ascii: @media screen and (max-width: 1250px) {#logo{position:absolute;margin-left:-500px;}ul.top_navigation{margin-left:-370px;}#lang_selector{margin-left:260px;}#title{margin-left:-300px;}.adsgoogle_cont_header{margin-left:-3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.18	49701	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:01 UTC	591	OUT	GET /assets/504097ca/jquery.min.js HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:02 UTC	288	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:02 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 18:54:34 GMT ETag: "16dc4-5c08017fc8490" Accept-Ranges: bytes Content-Length: 93636 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-05-27 13:01:02 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 31 2e 38 2e 33 20 6a 71 75 65 72 79 2e 63 6f 6d 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 28 65 29 7b 76 61 72 20 74 3d 4d 5b 65 5d 3d 7b 7d 3b 72 65 74 75 72 6e 20 76 2e 65 61 63 68 28 65 2e 73 70 6c 69 74 28 79 29 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 74 5b 6e 5d 3d 21 30 7d 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 6e 2c 72 29 7b 69 66 28 72 3d 3d 3d 74 26 26 65 2e 6e 6f 64 65 54 79 70 65 3d 3d 3d 31 29 7b 76 61 72 20 69 3d 22 64 61 74 61 2d 22 2b 6e 2e 72 65 70 6c 61 63 65 28 50 2c 22 2d 24 31 22 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 Data Ascii: /! jQuery v1.8.3 jquery.com \| jquery.org/license /(function(e,t){function _(e){var t=M[e]={};return v.each(e.split(y),function(e,n){t[n]=!0}),t}function H(e,n,r){if(r===t&&e.nodeType===1){var i="data-"+n.replace(P,"-$1").toLowerCase();r=e.getAttribute(
2024-05-27 13:01:02 UTC	16384	IN	Data Raw: 65 6e 74 4c 6f 61 64 65 64 22 2c 41 2c 21 31 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 76 2e 72 65 61 64 79 2c 21 31 29 3b 65 6c 73 65 7b 69 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 41 29 2c 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 6c 6f 61 64 22 2c 76 2e 72 65 61 64 79 29 3b 76 61 72 20 6e 3d 21 31 3b 74 72 79 7b 6e 3d 65 2e 66 72 61 6d 65 45 6c 65 6d 65 6e 74 3d 3d 6e 75 6c 6c 26 26 69 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7d 63 61 74 63 68 28 73 29 7b 7d 6e 26 26 6e 2e 64 6f 53 63 72 6f 6c 6c 26 26 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 21 76 2e 69 73 52 65 61 64 79 29 7b 74 72 79 7b 6e 2e 64 6f 53 63 72 6f 6c 6c 28 22 6c Data Ascii: entLoaded",A,!1),e.addEventListener("load",v.ready,!1);else{i.attachEvent("onreadystatechange",A),e.attachEvent("onload",v.ready);var n=!1;try{n=e.frameElement==null&&i.documentElement}catch(s){}n&&n.doScroll&&function o(){if(!v.isReady){try{n.doScroll("l
2024-05-27 13:01:02 UTC	16384	IN	Data Raw: 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 3d 74 2b 22 22 7d 7d 29 2c 76 2e 73 75 70 70 6f 72 74 2e 6f 70 74 53 65 6c 65 63 74 65 64 7c 7c 28 76 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 3d 76 2e 65 78 74 65 6e 64 28 76 2e 70 72 6f 70 48 6f 6f 6b 73 2e 73 65 6c 65 63 74 65 64 2c 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 28 74 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 74 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 2c 6e 75 6c 6c 7d 7d 29 29 2c 76 2e 73 75 70 70 6f 72 74 2e 65 6e 63 74 79 70 65 Data Ascii: set:function(e,t){return e.style.cssText=t+""}}),v.support.optSelected\|\|(v.propHooks.selected=v.extend(v.propHooks.selected,{get:function(e){var t=e.parentNode;return t&&(t.selectedIndex,t.parentNode&&t.parentNode.selectedIndex),null}})),v.support.enctype
2024-05-27 13:01:02 UTC	16384	IN	Data Raw: 75 65 53 6f 72 74 28 6c 29 7d 72 65 74 75 72 6e 20 54 26 26 28 62 3d 6b 2c 63 3d 4e 29 2c 78 7d 3b 72 65 74 75 72 6e 20 6f 2e 65 6c 3d 30 2c 72 3f 4e 28 6f 29 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 64 74 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 30 2c 69 3d 74 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 3b 72 3c 69 3b 72 2b 2b 29 6e 74 28 65 2c 74 5b 72 5d 2c 6e 29 3b 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 76 74 28 65 2c 74 2c 6e 2c 72 2c 73 29 7b 76 61 72 20 6f 2c 75 2c 66 2c 6c 2c 63 2c 68 3d 75 74 28 65 29 2c 70 3d 68 2e 6c 65 6e 67 74 68 3b 69 66 28 21 72 26 26 68 2e 6c 65 6e 67 74 68 3d 3d 3d 31 29 7b 75 3d 68 5b 30 5d 3d 68 5b 30 5d 2e 73 6c 69 63 65 28 30 29 3b 69 66 28 75 2e 6c 65 6e 67 74 68 3e 32 26 26 28 66 3d 75 5b 30 5d 29 2e 74 79 70 65 Data Ascii: ueSort(l)}return T&&(b=k,c=N),x};return o.el=0,r?N(o):o}function dt(e,t,n){var r=0,i=t.length;for(;r<i;r++)nt(e,t[r],n);return n}function vt(e,t,n,r,s){var o,u,f,l,c,h=ut(e),p=h.length;if(!r&&h.length===1){u=h[0]=h[0].slice(0);if(u.length>2&&(f=u[0]).type
2024-05-27 13:01:02 UTC	16384	IN	Data Raw: 74 65 6e 64 28 7b 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 76 2e 61 63 63 65 73 73 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 74 3f 76 2e 74 65 78 74 28 74 68 69 73 29 3a 74 68 69 73 2e 65 6d 70 74 79 28 29 2e 61 70 70 65 6e 64 28 28 74 68 69 73 5b 30 5d 26 26 74 68 69 73 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 69 29 2e 63 72 65 61 74 65 54 65 78 74 4e 6f 64 65 28 65 29 29 7d 2c 6e 75 6c 6c 2c 65 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 77 72 61 70 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 76 2e 69 73 46 75 6e 63 74 69 6f 6e 28 65 29 29 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 28 74 Data Ascii: tend({text:function(e){return v.access(this,function(e){return e===t?v.text(this):this.empty().append((this[0]&&this[0].ownerDocument\|\|i).createTextNode(e))},null,e,arguments.length)},wrapAll:function(e){if(v.isFunction(e))return this.each(function(t){v(t
2024-05-27 13:01:02 UTC	11716	IN	Data Raw: 29 2c 74 68 69 73 7d 7d 3b 64 2e 70 72 6f 6d 69 73 65 28 78 29 2c 78 2e 73 75 63 63 65 73 73 3d 78 2e 64 6f 6e 65 2c 78 2e 65 72 72 6f 72 3d 78 2e 66 61 69 6c 2c 78 2e 63 6f 6d 70 6c 65 74 65 3d 6d 2e 61 64 64 2c 78 2e 73 74 61 74 75 73 43 6f 64 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 65 29 7b 76 61 72 20 74 3b 69 66 28 45 3c 32 29 66 6f 72 28 74 20 69 6e 20 65 29 67 5b 74 5d 3d 5b 67 5b 74 5d 2c 65 5b 74 5d 5d 3b 65 6c 73 65 20 74 3d 65 5b 78 2e 73 74 61 74 75 73 5d 2c 78 2e 61 6c 77 61 79 73 28 74 29 7d 72 65 74 75 72 6e 20 74 68 69 73 7d 2c 63 2e 75 72 6c 3d 28 28 65 7c 7c 63 2e 75 72 6c 29 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 68 6e 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 6d 6e 2c 6c 6e 5b 31 5d 2b 22 2f 2f 22 29 2c 63 2e 64 61 74 61 54 79 Data Ascii: ),this}};d.promise(x),x.success=x.done,x.error=x.fail,x.complete=m.add,x.statusCode=function(e){if(e){var t;if(E<2)for(t in e)g[t]=[g[t],e[t]];else t=e[x.status],x.always(t)}return this},c.url=((e\|\|c.url)+"").replace(hn,"").replace(mn,ln[1]+"//"),c.dataTy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.18	49705	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:02 UTC	635	OUT	GET /images/ru.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:02 UTC	247	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:02 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:31 GMT ETag: "e0-5c07ee0b1c31c" Accept-Ranges: bytes Content-Length: 224 Connection: close Content-Type: image/png
2024-05-27 13:01:02 UTC	224	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 0d 08 06 00 00 00 a9 50 4e 5e 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 39 2f 30 34 2f 31 36 f4 5f a1 90 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 35 71 b5 e3 36 00 00 00 38 49 44 41 54 38 8d 63 fc ff ff ff 7f 06 2a 02 26 6a 1a 36 34 0c 64 59 b0 ae 87 ba 06 f2 08 bc a0 aa 81 43 20 0c a5 2f 1c a6 ae 81 2a ff 4f 51 d5 c0 c1 1f 86 54 37 10 00 86 6f 0a 97 09 5f 08 e2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPN^sBIT\|dpHYsZtEXtCreation Time09/04/16_tEXtSoftwareAdobe Fireworks CS5q68IDAT8c&j64dYC /OQT7o_IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.18	49706	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:02 UTC	635	OUT	GET /images/en.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:02 UTC	248	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:02 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:25 GMT ETag: "2f6-5c07ee0525e13" Accept-Ranges: bytes Content-Length: 758 Connection: close Content-Type: image/png
2024-05-27 13:01:02 UTC	758	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 0d 08 03 00 00 00 9e 8e be 6c 00 00 01 b9 50 4c 54 45 9e b5 61 9f b3 5e 9f b3 5f 9f b4 5f a0 b4 5f a1 b9 6b a3 b7 65 a5 bd 73 a5 bd 74 a6 be 75 a7 bd 74 a9 bb 6e a9 bb 6f ab bd 72 ab bd 73 af c9 8e af ca 8f b0 c1 7d b0 cb 91 b1 c1 7e b1 cb 92 b2 c3 80 b3 c3 81 bc dd b8 bc dd ba bd cc 94 be cd 95 be cd 97 bf cd 97 bf df be c0 ce 98 c0 cf 99 c0 d5 ab c0 e0 c0 c1 ce 98 c1 cf 9a c4 d9 af c5 d6 a8 c6 d6 a8 c6 da b6 c7 d6 a9 c8 d6 a9 ca dd b9 ca de b9 cb de be cb de bf cd e0 bf cd e0 c0 dc e7 cd dd e8 cf de e9 d2 df d3 a2 df d3 a3 df ea d3 e1 d2 9f e1 d2 a0 e5 de b8 e5 de b9 e6 df bd e6 df be e7 7c 00 e7 7e 00 e8 df ba e8 e0 bf ea 88 00 ea 89 00 ea 8a 00 ea 8b 00 ea 8c 00 eb 8b 02 eb b7 66 eb Data Ascii: PNGIHDRlPLTEa^___kestutnors}~\|~f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.18	49709	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:03 UTC	651	OUT	GET /images/bg.jpg HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/css/common.css?rnd=11 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:03 UTC	251	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:29 GMT ETag: "1430-5c07ee0893c77" Accept-Ranges: bytes Content-Length: 5168 Connection: close Content-Type: image/jpeg
2024-05-27 13:01:03 UTC	5168	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff db 00 43 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 ae 00 ae 03 01 11 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 02 03 08 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f6 c0 11 01 1a 30 68 40 88 40 04 08 40 88 40 40 Data Ascii: JFIFCC0h@@@@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.18	49711	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:03 UTC	653	OUT	GET /images/logo.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/css/common.css?rnd=11 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:03 UTC	250	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:24 GMT ETag: "16c3-5c07ee041185a" Accept-Ranges: bytes Content-Length: 5827 Connection: close Content-Type: image/png
2024-05-27 13:01:03 UTC	5827	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6f 00 00 00 6f 08 03 00 00 00 d5 1b 6e 52 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ed ed ed eb eb eb ea ea ea ec ec ec ea 8c 00 ab bd 73 ee ee ee e9 e9 e9 ef ef ef e8 e8 e8 f0 f0 f0 e7 e7 e7 f1 f1 f1 e6 e6 e6 ea 8c 01 e5 e5 e5 ab bc 73 ea 8f 07 f2 f2 f2 ea ea e9 ea 94 11 da de cd b3 c2 84 ae bf 7a b7 c4 8e ec ec eb b9 c6 90 ea 8d 04 b1 c0 83 ea 9c 26 f3 f3 f3 ed ea e5 e4 e4 e4 b5 c3 89 ea a4 3b b6 c3 8d bb c7 94 eb a5 3c d4 d9 c5 e9 9f 30 bc c8 95 ed ed ec b2 c0 84 e8 e9 Data Ascii: PNGIHDRoonRgAMAasRGBPLTEssz&;<0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.18	49710	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:03 UTC	655	OUT	GET /images/donate.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/css/common.css?rnd=11 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:03 UTC	248	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:28 GMT ETag: "33f-5c07ee087c57b" Accept-Ranges: bytes Content-Length: 831 Connection: close Content-Type: image/png
2024-05-27 13:01:03 UTC	831	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e6 00 00 00 48 08 03 00 00 00 d5 a2 79 17 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 c0 50 4c 54 45 4c 69 71 ea c9 47 f5 f5 f5 f8 c5 19 e4 e4 e4 3c 3c 3c ed c8 3d f8 f8 f8 ff db 4d fa c5 14 fc d9 4c fa c9 23 d7 ab 05 f8 e1 94 48 48 48 f9 e5 a2 de b0 08 c9 c9 c9 ec ec ec 60 60 60 f8 c3 13 d4 d4 d4 53 53 53 e4 b5 0b f8 e8 b0 f3 c0 11 e0 e0 e0 f8 f4 e9 fa cb 30 e6 b6 0c d9 ad 06 b1 b1 b1 a5 a5 a5 f8 eb bf fa d5 5c f8 ee cd e1 e1 e1 db ae 07 ed bb 0e fa cf 3f 21 1a 04 7e 64 0b 8f 8f 8f 9a 9a 9a 77 77 77 fa dc 78 f6 c7 28 f9 de 86 f1 c0 16 f3 bf 11 ea ba 0d e2 b3 0a f1 be 10 e8 b8 0c cc a0 11 e4 b9 1b 02 02 02 eb b9 13 e9 b9 12 ad 88 0e de b2 10 8d 70 Data Ascii: PNGIHDRHygAMAasRGBPLTELiqG<<<=ML#HHH```SSS0\?!~dwwwx(p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.18	49708	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:03 UTC	654	OUT	GET /images/abuse.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/css/common.css?rnd=11 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:03 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:28 GMT ETag: "4c6-5c07ee07ae4b8" Accept-Ranges: bytes Content-Length: 1222 Connection: close Content-Type: image/png
2024-05-27 13:01:03 UTC	1222	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 03 00 00 00 0c ee 5e 90 00 00 02 6d 50 4c 54 45 ff ff ff 95 ca ff aa 8c 5c cd 91 29 d3 8c 27 a7 9c 83 a8 a1 94 bc 8c 41 bc 8c 46 bd 96 5b bd 97 60 c5 8c 34 d4 71 00 d8 a6 5d d0 94 39 d3 8d 26 c3 9e 66 c6 ac 86 cf 8a 23 d8 be 9a d7 90 26 d7 90 27 dd 93 23 de 96 2b cf 8d 2a d0 94 3a d0 94 3c d1 a2 59 d5 8b 1b ce 90 33 d6 89 1b e4 8b 06 da 9a 3c d2 93 36 d4 9e 4e c7 c0 b6 d8 98 3c d8 9a 3c e1 89 05 eb 8b 00 d5 a2 53 da ab 67 e1 8c 0d e0 8c 0e e0 8c 10 dd 8c 13 d2 bd 9c e1 8d 10 e4 8b 08 e0 8b 0d e3 8e 0f e3 8f 12 dc 8c 15 dd 8b 13 e2 8f 15 e2 93 1c de 8f 19 de 91 1e dc 90 1e de 8b 11 e4 92 17 e5 94 1d e1 93 1f e0 8f 17 e0 95 22 dd 8f 1c de 98 2e e5 8c 09 e1 99 30 e8 8c 04 e9 8c 02 e7 Data Ascii: PNGIHDR^mPLTE\)'AF[`4q]9&f#&'#+*:<Y3<6N<<Sg".0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.18	49712	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:03 UTC	523	OUT	GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:03 UTC	1324	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 211069 Content-Type: application/javascript Date: Mon, 27 May 2024 13:01:03 GMT ETag: "66544f4c-3387d" Expires: Mon, 27 May 2024 14:01:03 GMT Last-Modified: Mon, 27 May 2024 09:15:56 GMT Set-Cookie: _yasc=M2xrlVMMbMXtEFES+D3y6s5oNEtFZmsXhM+SLxwIrdryklBIqjg2mcyR84PErETg; domain=.yandex.ru; path=/; expires=Thu, 25 May 2034 13:01:03 GMT; secure Set-Cookie: i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; Expires=Wed, 27-May-2026 13:01:03 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=5250530921716814863; Expires=Wed, 27-May-2026 13:01:03 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yashr=9089241241716814863; Path=/; Domain=.yandex.ru; Expires=Tue, 27 May 2025 13:01:03 GMT; SameSite=None; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2024-05-27 13:01:03 UTC	7766	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 57 65 28 61 2c 63 2c 62 2c 64 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 42 28 77 69 6e 64 6f 77 2c 22 63 2e 69 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 66 28 46 29 7b 28 46 3d 58 65 28 6c 2c 6d 2c 22 22 2c 46 29 28 6c 2c 6d 29 29 26 26 28 56 28 46 2e 74 68 65 6e 29 3f 46 2e 74 68 65 6e 28 67 29 3a 67 28 46 29 29 3b 72 65 74 75 72 6e 20 46 7d 66 75 6e 63 74 69 6f 6e 20 67 28 46 29 7b 46 26 26 28 56 28 46 29 3f 70 2e 70 75 73 68 28 46 29 3a 6c 61 28 46 29 26 26 78 28 66 75 6e 63 74 69 6f 6e 28 4e 29 7b 76 61 72 20 4d 3d 4e 5b 30 5d 3b 4e 3d 4e 5b 31 5d 3b 56 28 4e 29 26 26 28 22 75 22 3d 3d 3d 4d Data Ascii: (function(){try{(function(){function We(a,c,b,d){var e=this;return B(window,"c.i",function(){function f(F){(F=Xe(l,m,"",F)(l,m))&&(V(F.then)?F.then(g):g(F));return F}function g(F){F&&(V(F)?p.push(F):la(F)&&x(function(N){var M=N[0];N=N[1];V(N)&&("u"===M
2024-05-27 13:01:03 UTC	8168	IN	Data Raw: 6e 28 66 75 6e 63 74 69 6f 6e 28 72 29 7b 67 2e 64 63 28 22 67 64 70 72 5f 70 6f 70 75 70 22 29 3b 69 66 28 72 29 7b 76 61 72 20 74 3d 72 2e 76 61 6c 75 65 3b 72 3d 72 2e 45 64 3b 47 28 74 2c 71 63 29 26 26 67 2e 44 28 22 67 64 70 72 22 2c 74 2c 72 3f 76 6f 69 64 20 30 3a 35 32 35 36 30 30 29 7d 74 3d 24 62 28 7a 68 2c 6e 61 29 3b 63 64 28 61 2c 74 2c 32 30 29 28 51 61 28 42 28 61 2c 22 67 64 72 22 29 2c 45 29 29 3b 6b 2e 44 28 22 66 31 22 2c 6e 61 29 7d 29 5b 22 63 61 74 63 68 22 5d 28 42 28 61 2c 22 67 64 70 2e 61 22 29 29 29 7d 29 29 3a 28 66 28 22 31 34 22 29 2c 68 28 29 29 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 56 6d 28 61 2c 63 29 7b 69 66 28 62 65 28 61 29 29 7b 76 61 72 20 62 3d 5a 64 28 61 29 2c 64 3d 42 61 28 61 2c 63 29 3b 64 3d 64 26 26 64 2e Data Ascii: n(function(r){g.dc("gdpr_popup");if(r){var t=r.value;r=r.Ed;G(t,qc)&&g.D("gdpr",t,r?void 0:525600)}t=$b(zh,na);cd(a,t,20)(Qa(B(a,"gdr"),E));k.D("f1",na)})["catch"](B(a,"gdp.a")))})):(f("14"),h())}}}}function Vm(a,c){if(be(a)){var b=Zd(a),d=Ba(a,c);d=d&&d.
2024-05-27 13:01:03 UTC	8168	IN	Data Raw: 65 6d 49 64 3a 22 22 7d 2c 61 2e 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 74 79 70 65 29 2c 62 3d 63 2e 70 75 62 6c 69 63 49 64 2c 64 3d 63 2e 73 79 73 74 65 6d 49 64 3b 72 65 74 75 72 6e 22 3c 21 44 4f 43 54 59 50 45 20 22 2b 4b 28 22 22 2c 5b 63 2e 6e 61 6d 65 2c 62 3f 27 20 50 55 42 4c 49 43 20 22 27 2b 62 2b 27 22 27 3a 22 22 2c 21 62 26 26 64 3f 22 20 53 59 53 54 45 4d 22 3a 22 22 2c 64 3f 27 20 22 27 2b 64 2b 27 22 27 3a 22 22 5d 29 2b 22 3e 22 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 6e 28 61 2c 63 2c 62 29 7b 76 61 72 20 64 3d 68 64 28 61 29 2c 65 3d 66 61 28 61 29 2c 66 3d 73 62 28 61 29 2c 67 3d 63 2e 71 64 28 29 2c 68 3d 21 6e 28 61 2c 22 70 6f 73 74 4d 65 73 73 61 67 65 22 29 7c 7c 66 26 26 21 6e 28 61 2c 22 70 61 Data Ascii: emId:""},a.document.doctype),b=c.publicId,d=c.systemId;return"<!DOCTYPE "+K("",[c.name,b?' PUBLIC "'+b+'"':"",!b&&d?" SYSTEM":"",d?' "'+d+'"':""])+">"}return null}}}function yn(a,c,b){var d=hd(a),e=fa(a),f=sb(a),g=c.qd(),h=!n(a,"postMessage")\|\|f&&!n(a,"pa
2024-05-27 13:01:03 UTC	8168	IN	Data Raw: 79 2c 58 5d 2c 5b 31 37 34 34 2c 61 2e 74 65 78 74 43 68 61 6e 67 65 4d 75 74 61 74 69 6f 6e 2c 58 6e 5d 2c 5b 31 36 38 30 2c 61 2e 72 65 6d 6f 76 65 64 4e 6f 64 65 73 4d 75 74 61 74 69 6f 6e 2c 59 6e 5d 2c 5b 31 36 31 36 2c 61 2e 61 64 64 65 64 4e 6f 64 65 73 4d 75 74 61 74 69 6f 6e 2c 5a 6e 5d 2c 5b 31 35 35 32 2c 61 2e 61 74 74 72 69 62 75 74 65 73 43 68 61 6e 67 65 4d 75 74 61 74 69 6f 6e 2c 24 6e 5d 2c 5b 31 34 38 38 2c 61 2e 70 75 62 6c 69 73 68 65 72 73 48 65 61 64 65 72 2c 61 6f 5d 2c 5b 31 34 32 34 2c 61 2e 61 72 74 69 63 6c 65 49 6e 66 6f 2c 62 6f 5d 2c 5b 31 33 36 30 2c 61 2e 66 6f 63 75 73 45 76 65 6e 74 2c 63 6f 5d 2c 5b 31 32 39 36 2c 61 2e 66 61 74 61 6c 45 72 72 6f 72 45 76 65 6e 74 2c 65 6f 5d 2c 5b 31 32 33 32 2c 61 2e 64 65 76 69 63 65 Data Ascii: y,X],[1744,a.textChangeMutation,Xn],[1680,a.removedNodesMutation,Yn],[1616,a.addedNodesMutation,Zn],[1552,a.attributesChangeMutation,$n],[1488,a.publishersHeader,ao],[1424,a.articleInfo,bo],[1360,a.focusEvent,co],[1296,a.fatalErrorEvent,eo],[1232,a.device
2024-05-27 13:01:03 UTC	8168	IN	Data Raw: 74 69 6f 6e 20 6b 70 28 61 2c 63 29 7b 76 61 72 20 62 3d 61 2e 6c 65 6e 67 74 68 3f 41 28 66 75 6e 63 74 69 6f 6e 28 64 2c 65 29 7b 76 61 72 20 66 3d 63 5b 65 5d 3b 72 65 74 75 72 6e 20 66 3d 3d 3d 64 3f 6e 75 6c 6c 3a 66 7d 2c 61 29 3a 63 3b 61 2e 6c 65 6e 67 74 68 3d 30 3b 78 28 77 28 53 2c 57 61 28 22 70 75 73 68 22 2c 61 29 29 2c 63 29 3b 72 65 74 75 72 6e 20 68 61 28 7a 61 28 6e 75 6c 6c 29 2c 62 29 2e 6c 65 6e 67 74 68 3d 3d 3d 61 2e 6c 65 6e 67 74 68 3f 6e 75 6c 6c 3a 62 7d 66 75 6e 63 74 69 6f 6e 20 69 70 28 61 2c 63 2c 62 29 7b 72 65 74 75 72 6e 20 41 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 65 3d 64 5b 30 5d 2c 66 3d 64 5b 31 5d 3b 69 66 28 56 28 65 29 29 72 65 74 75 72 6e 20 65 28 61 2c 63 29 7c 7c 6e 75 6c 6c 3b 69 66 28 31 3d 3d 3d Data Ascii: tion kp(a,c){var b=a.length?A(function(d,e){var f=c[e];return f===d?null:f},a):c;a.length=0;x(w(S,Wa("push",a)),c);return ha(za(null),b).length===a.length?null:b}function ip(a,c,b){return A(function(d){var e=d[0],f=d[1];if(V(e))return e(a,c)\|\|null;if(1===
2024-05-27 13:01:03 UTC	8168	IN	Data Raw: 20 70 3d 6c 2e 6e 6f 64 65 73 2c 71 3d 6c 2e 62 67 2c 72 3d 64 28 22 73 6d 61 6c 6c 22 29 3b 72 2e 69 6e 6e 65 72 48 54 4d 4c 3d 6d 3b 76 61 72 20 74 3d 45 70 2e 74 65 73 74 28 6d 29 3b 4c 69 28 72 29 3b 74 26 26 28 72 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 3d 22 22 2b 28 6b 2d 71 2d 31 29 2f 6b 29 3b 70 2e 70 75 73 68 28 72 29 3b 72 65 74 75 72 6e 7b 6e 6f 64 65 73 3a 70 2c 62 67 3a 71 2b 28 74 3f 31 3a 30 29 7d 7d 2c 7b 6e 6f 64 65 73 3a 5b 5d 2c 62 67 3a 30 7d 2c 68 29 2e 6e 6f 64 65 73 29 3b 46 70 28 61 2c 63 2c 62 2c 66 29 3b 67 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 62 2c 65 29 3b 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 22 22 3b 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 46 70 28 61 2c 63 2c 62 2c 64 29 7b 66 75 6e 63 74 69 6f 6e Data Ascii: p=l.nodes,q=l.bg,r=d("small");r.innerHTML=m;var t=Ep.test(m);Li(r);t&&(r.style.opacity=""+(k-q-1)/k);p.push(r);return{nodes:p,bg:q+(t?1:0)}},{nodes:[],bg:0},h).nodes);Fp(a,c,b,f);g.insertBefore(b,e);e.textContent="";return!0}function Fp(a,c,b,d){function
2024-05-27 13:01:03 UTC	8168	IN	Data Raw: 65 2c 64 29 29 7d 66 75 6e 63 74 69 6f 6e 20 61 71 28 61 2c 63 2c 62 2c 64 29 7b 76 61 72 20 65 3d 54 28 61 29 2c 66 3d 65 2e 68 6f 73 74 6e 61 6d 65 3b 65 3d 65 2e 68 72 65 66 3b 69 66 28 63 3d 78 64 28 63 29 2e 75 72 6c 29 61 3d 4b 63 28 61 2c 63 29 2c 66 3d 61 2e 68 6f 73 74 6e 61 6d 65 2c 65 3d 61 2e 68 72 65 66 3b 72 65 74 75 72 6e 5b 64 2b 22 3a 2f 2f 22 2b 66 2b 22 2f 22 2b 62 2c 65 7c 7c 22 22 5d 7d 66 75 6e 63 74 69 6f 6e 20 63 6a 28 61 29 7b 72 65 74 75 72 6e 28 61 2e 73 70 6c 69 74 28 22 3a 22 29 5b 31 5d 7c 7c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 5c 2f 2a 2f 2c 22 22 29 2e 72 65 70 6c 61 63 65 28 2f 5e 77 77 77 5c 2e 2f 2c 22 22 29 2e 73 70 6c 69 74 28 22 2f 22 29 5b 30 5d 7d 0a 66 75 6e 63 74 69 6f 6e 20 62 71 28 61 2c 63 2c 62 2c 64 29 Data Ascii: e,d))}function aq(a,c,b,d){var e=T(a),f=e.hostname;e=e.href;if(c=xd(c).url)a=Kc(a,c),f=a.hostname,e=a.href;return[d+"://"+f+"/"+b,e\|\|""]}function cj(a){return(a.split(":")[1]\|\|"").replace(/^\/*/,"").replace(/^www\./,"").split("/")[0]}function bq(a,c,b,d)
2024-05-27 13:01:03 UTC	8168	IN	Data Raw: 61 6e 67 65 3d 6c 3b 74 72 79 7b 65 2e 73 65 6e 64 28 66 29 7d 63 61 74 63 68 28 6d 29 7b 7d 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 71 28 61 2c 63 2c 62 2c 64 2c 65 2c 66 2c 67 2c 68 29 7b 69 66 28 34 3d 3d 3d 63 2e 72 65 61 64 79 53 74 61 74 65 29 69 66 28 32 30 30 3d 3d 3d 63 2e 73 74 61 74 75 73 7c 7c 65 7c 7c 67 28 62 29 2c 65 29 32 30 30 3d 3d 3d 63 2e 73 74 61 74 75 73 3f 66 28 63 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 3a 67 28 6e 6a 28 63 29 29 3b 65 6c 73 65 7b 65 3d 6e 75 6c 6c 3b 69 66 28 64 29 74 72 79 7b 28 65 3d 48 62 28 61 2c 63 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 29 29 7c 7c 67 28 62 29 7d 63 61 74 63 68 28 6b 29 7b 67 28 62 29 7d 66 28 65 29 7d 72 65 74 75 72 6e 20 68 7d 0a 66 75 6e 63 74 69 6f 6e 20 6d 6a 28 61 2c 63 2c 62 29 7b 28 Data Ascii: ange=l;try{e.send(f)}catch(m){}})}function yq(a,c,b,d,e,f,g,h){if(4===c.readyState)if(200===c.status\|\|e\|\|g(b),e)200===c.status?f(c.responseText):g(nj(c));else{e=null;if(d)try{(e=Hb(a,c.responseText))\|\|g(b)}catch(k){g(b)}f(e)}return h}function mj(a,c,b){(
2024-05-27 13:01:03 UTC	8168	IN	Data Raw: 6e 63 74 69 6f 6e 20 69 64 28 61 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 26 26 61 2e 67 65 74 42 6f 75 6e 64 69 6e 67 43 6c 69 65 6e 74 52 65 63 74 28 29 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 79 70 65 6f 66 20 63 26 26 6e 75 6c 6c 21 3d 3d 63 26 26 31 36 33 38 39 3d 3d 3d 28 63 2e 6b 66 26 26 63 2e 6b 66 26 36 35 35 33 35 29 3f 7b 74 6f 70 3a 30 2c 62 6f 74 74 6f 6d 3a 30 2c 6c 65 66 74 3a 30 2c 77 69 64 74 68 3a 30 2c 0a 68 65 69 67 68 74 3a 30 2c 72 69 67 68 74 3a 30 7d 3a 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 50 66 28 61 29 7b 76 61 72 20 63 3d 43 63 28 61 29 2c 62 3d 6e 28 61 2c 22 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e Data Ascii: nction id(a){try{return a.getBoundingClientRect&&a.getBoundingClientRect()}catch(c){return"object"===typeof c&&null!==c&&16389===(c.kf&&c.kf&65535)?{top:0,bottom:0,left:0,width:0,height:0,right:0}:null}}function Pf(a){var c=Cc(a),b=n(a,"document");return
2024-05-27 13:01:03 UTC	8168	IN	Data Raw: 74 72 69 6e 67 22 3d 3d 3d 74 79 70 65 6f 66 20 62 2e 73 74 61 63 6b 26 26 62 2e 73 74 61 63 6b 2e 72 65 70 6c 61 63 65 28 2f 5c 6e 2f 67 2c 22 5c 5c 6e 22 29 7c 7c 22 6e 2e 73 2e 65 2e 73 22 29 3a 64 3d 22 22 2b 62 29 3b 62 72 28 64 29 7c 7c 59 61 28 75 28 64 2c 68 62 29 2c 63 72 29 7c 7c 0a 64 72 28 64 29 26 26 2e 31 3c 3d 61 2e 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 7c 78 28 77 28 53 2c 47 63 28 5b 22 6a 73 65 72 72 73 22 2c 64 2c 63 2c 65 5d 29 2c 6e 61 29 2c 56 6a 29 7d 66 75 6e 63 74 69 6f 6e 20 55 64 28 29 7b 76 61 72 20 61 3d 4d 61 28 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 54 61 28 4e 61 28 61 29 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 61 28 61 29 7b 76 61 72 20 63 3d 22 22 3b 50 28 61 29 3f 63 3d 4b 28 22 2e 22 2c 61 29 3a 6a 61 28 Data Ascii: tring"===typeof b.stack&&b.stack.replace(/\n/g,"\\n")\|\|"n.s.e.s"):d=""+b);br(d)\|\|Ya(u(d,hb),cr)\|\|dr(d)&&.1<=a.Math.random()\|\|x(w(S,Gc(["jserrs",d,c,e]),na),Vj)}function Ud(){var a=Ma(arguments);return Ta(Na(a))}function Na(a){var c="";P(a)?c=K(".",a):ja(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.18	49716	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:03 UTC	659	OUT	GET /images/btn_qrcode.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/css/common.css?rnd=11 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:03 UTC	248	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:24 GMT ETag: "270-5c07ee03cc303" Accept-Ranges: bytes Content-Length: 624 Connection: close Content-Type: image/png
2024-05-27 13:01:03 UTC	624	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 00 16 08 03 00 00 00 f3 6a 9c 09 00 00 01 0e 50 4c 54 45 ff ff ff ea 8c 00 ea 8c 00 ea 8c 00 ea 8c 00 ea 8c 00 ea 8c 00 ea 8c 00 33 33 33 34 34 34 35 35 35 36 36 36 37 37 37 39 39 39 3b 3b 3b 3e 3e 3e 3f 3f 3f 40 40 40 41 41 41 49 49 49 4a 4a 4a 4c 4c 4c 4e 4e 4e 53 53 53 55 55 55 56 56 56 59 59 59 5b 5b 5b 5c 5c 5c 5e 5e 5e 62 62 62 66 66 66 6a 6a 6a 6b 6b 6b 6c 6c 6c 6d 6d 6d 70 70 70 71 71 71 72 72 72 73 73 73 74 74 74 75 75 75 77 77 77 78 78 78 7c 7c 7c 7d 7d 7d 80 80 80 81 81 81 83 83 83 85 85 85 86 86 86 89 89 89 8c 8c 8c 8d 8d 8d 90 90 90 95 95 95 a0 a0 a0 a1 a1 a1 a3 a3 a3 a8 a8 a8 a9 a9 a9 ab ab ab ae ae ae b0 b0 b0 b1 b1 b1 b2 b2 b2 b3 b3 b3 b4 b4 b4 b5 b5 b5 b6 b6 b6 b7 b7 b7 b8 Data Ascii: PNGIHDRjPLTE333444555666777999;;;>>>???@@@AAAIIIJJJLLLNNNSSSUUUVVVYYY[[[\\\^^^bbbfffjjjkkklllmmmpppqqqrrrssstttuuuwwwxxx\|\|\|}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.18	49715	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:03 UTC	637	OUT	GET /securimage/show HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:03 UTC	357	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:03 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Last-Modified: Mon, 27 May 2024 13:01:03GMT Cache-Control: post-check=0, pre-check=0 Connection: close Transfer-Encoding: chunked Content-Type: image/png
2024-05-27 13:01:03 UTC	6	IN	Data Raw: 32 30 33 65 0d 0a Data Ascii: 203e
2024-05-27 13:01:03 UTC	8254	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 20 00 00 00 3f 08 02 00 00 00 cf 16 82 2d 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c dc bd 77 dc 6d 55 79 2e fa 3c ef 18 73 ad f5 b5 5d d8 b0 61 d3 b1 61 45 54 b0 c7 86 44 3c 27 07 6c 60 4c a2 a2 52 82 98 78 ec b1 25 62 2c 47 45 c0 8e 44 50 af 27 39 46 54 94 e4 04 11 41 ec a8 08 a8 54 11 01 11 37 1b d8 f5 2b ab cc 31 de e7 fe 31 e6 5a df fa ca e6 e6 9e fb df 1d bf ef 07 6b cf 35 e7 98 a3 bd ed 79 cb 62 77 d7 fd 24 43 08 66 c6 60 08 06 40 80 b1 72 d0 40 89 a7 9c f4 86 27 3f f3 c8 97 bd fc a5 be 50 5b ab 7d ed af 6f 3a eb 3d ef 39 f7 82 cf 4e 4f 4d 90 34 33 c0 48 52 c6 00 f7 01 59 01 2e 09 c6 80 b8 6b 76 47 bb c5 ce e4 84 67 a6 94 ac 35 71 fe e7 be 30 Data Ascii: PNGIHDR ?-pHYs+ IDATxwmUy.<s]aaETD<'l`LRx%b,GEDP'9FTAT7+11Zk5ybw$Cf`@r@'?P[}o:=9NOM43HRY.kvGg5q0
2024-05-27 13:01:03 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-27 13:01:03 UTC	6	IN	Data Raw: 32 30 30 63 0d 0a Data Ascii: 200c
2024-05-27 13:01:03 UTC	8204	IN	Data Raw: 0d 3b 75 d7 00 00 20 00 49 44 41 54 26 4b 25 0c 53 5a 1a 30 a2 84 a1 b9 bb 31 76 fb fd 76 6b 8a 24 bb bd 5d e5 8e 32 ab 26 31 ac 3c 66 25 f2 5a dd 6e 77 6e b0 50 0f 06 51 21 8b 43 0d 1b 01 45 6b 29 12 ad 61 1b 92 2c 20 84 30 d1 6e cf cc cc 84 38 ca db a5 19 dc bd 3f 9f fa bd ee 7c bf 57 b3 44 7f 89 f0 ca 8b f2 07 aa 44 79 a3 04 6b 33 bb 99 b9 b1 aa da d3 d3 93 eb d6 4c 8d eb d3 b5 d7 73 3b e6 77 cd cf 0d 72 89 d3 15 4a b2 70 55 05 15 a5 74 d1 50 2c 6a 5f a6 52 ca 87 3d ee b3 00 e6 76 7d c0 ac c4 dd 09 01 39 6b fb b6 9d f3 f3 0b 0f 7f d4 27 c6 d7 fa fa eb fe a6 38 22 45 8a 78 dc 63 9a 6f 47 d4 f5 ff b6 5d f6 e2 5b 00 dc 78 dd e9 59 14 6a 49 7f f3 fa 2b be ff 83 df 8e 6e b8 e5 fa d3 a6 66 d6 ee b1 c7 86 a2 e7 96 f3 5d 22 9a 73 4a bd f9 85 f9 5e 77 90 06 30 Data Ascii: ;u IDAT&K%SZ01vvk$]2&1<f%ZnwnPQ!CEk)a, 0n8?\|WDDyk3Ls;wrJpUtP,j_R=v}9k'8"ExcoG][xYjI+nf]"sJ^w0
2024-05-27 13:01:03 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-27 13:01:03 UTC	6	IN	Data Raw: 32 30 30 63 0d 0a Data Ascii: 200c
2024-05-27 13:01:03 UTC	8204	IN	Data Raw: 8d b2 88 ea 00 00 20 00 49 44 41 54 be 86 78 31 27 7f e8 3e 4e 3a c3 0d ce 28 6e 9e 29 a8 92 7b 67 f3 7c f1 e9 ab cb 4f 7c e9 9e b7 fd cd e6 03 1e 38 77 d9 1b f4 f8 63 30 18 99 58 53 62 95 71 86 a3 0e 7c bd 61 38 6d e6 34 c9 56 68 99 44 4e 4d ef 7d ef 07 fc 5b 5f 4d 8b 2b ed 5d 7b f8 c1 4b f8 57 97 89 d5 91 57 b2 51 a0 34 9d 2b 59 6b 98 fb 1a 1f c9 ac 6c c1 cd 22 23 11 b0 69 01 58 ad 0e 17 17 3d cf 47 4e a1 7b 6a b5 43 96 30 d8 6f 40 02 c0 09 45 84 29 00 f1 68 b7 2e 6f 38 eb b4 e5 2f ff c9 86 b9 fd e3 24 ee 7b 75 01 f8 c6 d7 5e 5c 1f d9 5d 44 22 1a fc f2 c4 08 21 28 4c d5 63 2c 76 de f1 a6 ed 07 ae 56 c9 33 47 c8 7e 3b 8e f7 bb 0e ef bb 7e 9d c7 3e 46 6c 34 4a d3 bf e3 ea 7e f0 fb 3f de fe 9c 17 f1 31 27 20 ad 92 40 fe ff 1c ee ee c1 15 a1 2a ab 5b ff e6 Data Ascii: IDATx1'>N:(n){g\|O\|8wc0XSbq\|a8m4VhDNM}[_M+]{KWWQ4+Ykl"#iX=GN{jC0o@E)h.o8/${u^\]D"!(Lc,vV3G~;~>Fl4J~?1' @*[
2024-05-27 13:01:03 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-27 13:01:03 UTC	1294	IN	Data Raw: 35 30 32 0d 0a d7 0b 88 53 00 00 04 e6 49 44 41 54 d9 fb ca d2 c7 66 69 38 5a 9e 99 e9 00 d2 ac b1 31 e0 63 75 81 f5 7a 83 dc 0f b6 da 43 b1 fa e7 6c ba 1a b3 2f a1 68 ab 4f 15 f0 58 00 11 5e 89 8b 49 93 5c f6 3a cb 27 b9 bd c1 4a 3a c8 a0 d4 7c 07 6b 03 dd b4 c0 04 b2 25 51 29 5a b9 c7 16 ac 0a c3 d4 66 ac 8a c2 44 93 a1 80 a7 d0 82 27 33 13 50 6b 5f dc d0 00 b5 c6 27 99 5d 17 47 40 30 77 88 57 47 3e e8 a0 a8 92 ca 3e 42 43 56 05 4d 1e 52 39 8a b1 65 70 5a c8 a8 0f 61 50 1a e0 54 87 b9 5a 25 88 a1 88 29 25 27 48 81 fa 96 b9 39 83 6b 55 46 ef 58 48 22 34 53 cd 76 5b bc ca 58 31 66 2e 3a 73 8b 14 6f fc 25 03 42 a0 a8 a9 c0 3a 1d 74 bb 53 ee 5d 31 f5 a1 2a 85 a1 1d 50 59 a6 ef a7 a7 75 b2 57 d7 3d fe 5c 77 cd 91 b9 34 a9 8b 7c d5 09 72 e0 d6 19 22 94 65 12 Data Ascii: 502SIDATfi8Z1cuzCl/hOX^I\:'J:\|k%Q)ZfD'3Pk_']G@0wWG>>BCVMR9epZaPTZ%)%'H9kUFXH"4Sv[X1f.:so%B:tS]1*PYuW=\w4\|r"e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.18	49718	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:03 UTC	396	OUT	GET /images/ru.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:03 UTC	247	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:31 GMT ETag: "e0-5c07ee0b1c31c" Accept-Ranges: bytes Content-Length: 224 Connection: close Content-Type: image/png
2024-05-27 13:01:03 UTC	224	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 0d 08 06 00 00 00 a9 50 4e 5e 00 00 00 04 73 42 49 54 08 08 08 08 7c 08 64 88 00 00 00 09 70 48 59 73 00 00 0a eb 00 00 0a eb 01 82 8b 0d 5a 00 00 00 16 74 45 58 74 43 72 65 61 74 69 6f 6e 20 54 69 6d 65 00 30 39 2f 30 34 2f 31 36 f4 5f a1 90 00 00 00 1c 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 46 69 72 65 77 6f 72 6b 73 20 43 53 35 71 b5 e3 36 00 00 00 38 49 44 41 54 38 8d 63 fc ff ff ff 7f 06 2a 02 26 6a 1a 36 34 0c 64 59 b0 ae 87 ba 06 f2 08 bc a0 aa 81 43 20 0c a5 2f 1c a6 ae 81 2a ff 4f 51 d5 c0 c1 1f 86 54 37 10 00 86 6f 0a 97 09 5f 08 e2 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRPN^sBIT\|dpHYsZtEXtCreation Time09/04/16_tEXtSoftwareAdobe Fireworks CS5q68IDAT8c&j64dYC /OQT7o_IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.18	49717	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:03 UTC	396	OUT	GET /images/en.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:03 UTC	248	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:03 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:25 GMT ETag: "2f6-5c07ee0525e13" Accept-Ranges: bytes Content-Length: 758 Connection: close Content-Type: image/png
2024-05-27 13:01:03 UTC	758	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 0d 08 03 00 00 00 9e 8e be 6c 00 00 01 b9 50 4c 54 45 9e b5 61 9f b3 5e 9f b3 5f 9f b4 5f a0 b4 5f a1 b9 6b a3 b7 65 a5 bd 73 a5 bd 74 a6 be 75 a7 bd 74 a9 bb 6e a9 bb 6f ab bd 72 ab bd 73 af c9 8e af ca 8f b0 c1 7d b0 cb 91 b1 c1 7e b1 cb 92 b2 c3 80 b3 c3 81 bc dd b8 bc dd ba bd cc 94 be cd 95 be cd 97 bf cd 97 bf df be c0 ce 98 c0 cf 99 c0 d5 ab c0 e0 c0 c1 ce 98 c1 cf 9a c4 d9 af c5 d6 a8 c6 d6 a8 c6 da b6 c7 d6 a9 c8 d6 a9 ca dd b9 ca de b9 cb de be cb de bf cd e0 bf cd e0 c0 dc e7 cd dd e8 cf de e9 d2 df d3 a2 df d3 a3 df ea d3 e1 d2 9f e1 d2 a0 e5 de b8 e5 de b9 e6 df bd e6 df be e7 7c 00 e7 7e 00 e8 df ba e8 e0 bf ea 88 00 ea 89 00 ea 8a 00 ea 8b 00 ea 8c 00 eb 8b 02 eb b7 66 eb Data Ascii: PNGIHDRlPLTEa^___kestutnors}~\|~f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.18	49720	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:04 UTC	396	OUT	GET /images/bg.jpg HTTP/1.1 Host: transfiles.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:04 UTC	251	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:29 GMT ETag: "1430-5c07ee0893c77" Accept-Ranges: bytes Content-Length: 5168 Connection: close Content-Type: image/jpeg
2024-05-27 13:01:04 UTC	5168	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 02 02 02 02 02 02 02 02 02 03 02 02 02 03 04 03 02 02 03 04 05 04 04 04 04 04 05 06 05 05 05 05 05 05 06 06 07 07 08 07 07 06 09 09 0a 0a 09 09 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff db 00 43 01 03 03 03 05 04 05 09 06 06 09 0d 0b 09 0b 0d 0f 0e 0e 0e 0e 0f 0f 0c 0c 0c 0c 0c 0f 0f 0c 0c 0c 0c 0c 0c 0f 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c2 00 11 08 00 ae 00 ae 03 01 11 00 02 11 01 03 11 01 ff c4 00 18 00 01 01 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 00 02 03 08 ff c4 00 14 01 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f6 c0 11 01 1a 30 68 40 88 40 04 08 40 88 40 40 Data Ascii: JFIFCC0h@@@@@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.18	49719	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:04 UTC	584	OUT	GET /js/functions.js?rnd=11 HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:04 UTC	287	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Tue, 14 May 2024 08:13:41 GMT ETag: "31e7-618659469f740" Accept-Ranges: bytes Content-Length: 12775 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-05-27 13:01:04 UTC	12775	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 73 65 6e 64 41 6a 61 78 28 75 72 6c 2c 70 61 72 61 6d 73 2c 63 61 6c 6c 62 61 63 6b 2c 72 65 74 72 79 2c 65 72 72 6f 72 43 61 6c 6c 62 61 63 6b 29 0d 0a 7b 0d 0a 20 20 20 20 24 2e 61 6a 61 78 28 7b 0d 0a 09 09 09 74 79 70 65 3a 20 27 50 4f 53 54 27 2c 0d 0a 09 09 09 75 72 6c 3a 20 75 72 6c 2c 0d 0a 09 09 09 09 74 72 79 43 6f 75 6e 74 20 3a 20 30 2c 0d 0a 09 09 09 09 72 65 74 72 79 4c 69 6d 69 74 20 3a 20 31 30 2c 0d 0a 09 09 09 09 72 65 74 72 79 54 69 6d 65 6f 75 74 20 3a 20 35 30 30 30 2c 0d 0a 09 09 09 64 61 74 61 3a 20 70 61 72 61 6d 73 2c 0d 0a 09 09 09 64 61 74 61 54 79 70 65 3a 20 27 6a 73 6f 6e 27 2c 0d 0a 20 20 20 20 20 20 20 20 73 75 63 63 65 73 73 3a 20 66 75 6e 63 74 69 6f 6e 28 6d 73 67 29 7b 20 20 0d 0a 20 20 20 20 Data Ascii: function sendAjax(url,params,callback,retry,errorCallback){ $.ajax({type: 'POST',url: url,tryCount : 0,retryLimit : 10,retryTimeout : 5000,data: params,dataType: 'json', success: function(msg){

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.18	49725	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:04 UTC	398	OUT	GET /images/logo.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:04 UTC	250	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:24 GMT ETag: "16c3-5c07ee041185a" Accept-Ranges: bytes Content-Length: 5827 Connection: close Content-Type: image/png
2024-05-27 13:01:04 UTC	5827	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6f 00 00 00 6f 08 03 00 00 00 d5 1b 6e 52 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 00 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ed ed ed eb eb eb ea ea ea ec ec ec ea 8c 00 ab bd 73 ee ee ee e9 e9 e9 ef ef ef e8 e8 e8 f0 f0 f0 e7 e7 e7 f1 f1 f1 e6 e6 e6 ea 8c 01 e5 e5 e5 ab bc 73 ea 8f 07 f2 f2 f2 ea ea e9 ea 94 11 da de cd b3 c2 84 ae bf 7a b7 c4 8e ec ec eb b9 c6 90 ea 8d 04 b1 c0 83 ea 9c 26 f3 f3 f3 ed ea e5 e4 e4 e4 b5 c3 89 ea a4 3b b6 c3 8d bb c7 94 eb a5 3c d4 d9 c5 e9 9f 30 bc c8 95 ed ed ec b2 c0 84 e8 e9 Data Ascii: PNGIHDRoonRgAMAasRGBPLTEssz&;<0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.18	49723	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:04 UTC	400	OUT	GET /images/donate.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:04 UTC	248	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:28 GMT ETag: "33f-5c07ee087c57b" Accept-Ranges: bytes Content-Length: 831 Connection: close Content-Type: image/png
2024-05-27 13:01:04 UTC	831	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 e6 00 00 00 48 08 03 00 00 00 d5 a2 79 17 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 c0 50 4c 54 45 4c 69 71 ea c9 47 f5 f5 f5 f8 c5 19 e4 e4 e4 3c 3c 3c ed c8 3d f8 f8 f8 ff db 4d fa c5 14 fc d9 4c fa c9 23 d7 ab 05 f8 e1 94 48 48 48 f9 e5 a2 de b0 08 c9 c9 c9 ec ec ec 60 60 60 f8 c3 13 d4 d4 d4 53 53 53 e4 b5 0b f8 e8 b0 f3 c0 11 e0 e0 e0 f8 f4 e9 fa cb 30 e6 b6 0c d9 ad 06 b1 b1 b1 a5 a5 a5 f8 eb bf fa d5 5c f8 ee cd e1 e1 e1 db ae 07 ed bb 0e fa cf 3f 21 1a 04 7e 64 0b 8f 8f 8f 9a 9a 9a 77 77 77 fa dc 78 f6 c7 28 f9 de 86 f1 c0 16 f3 bf 11 ea ba 0d e2 b3 0a f1 be 10 e8 b8 0c cc a0 11 e4 b9 1b 02 02 02 eb b9 13 e9 b9 12 ad 88 0e de b2 10 8d 70 Data Ascii: PNGIHDRHygAMAasRGBPLTELiqG<<<=ML#HHH```SSS0\?!~dwwwx(p

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.18	49724	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:04 UTC	583	OUT	GET /js/download.js?rnd=11 HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:04 UTC	287	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Fri, 04 Mar 2022 10:57:11 GMT ETag: "5022-5d9626067efc0" Accept-Ranges: bytes Content-Length: 20514 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-05-27 13:01:04 UTC	16384	IN	Data Raw: 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0d 0a 0d 0a 09 69 66 28 69 73 5f 69 66 72 61 6d 65 29 7b 0d 0a 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0d 0a 09 7d 0d 0a 0d 0a 09 76 61 72 20 66 69 6c 65 73 5f 74 6f 5f 64 6c 20 3d 20 5b 5d 3b 0d 0a 09 76 61 72 20 66 69 6c 65 73 5f 74 6f 5f 64 6c 5f 6f 6c 64 20 3d 20 5b 5d 3b 0d 0a 09 76 61 72 20 66 69 6c 65 73 5f 74 6f 74 61 6c 20 3d 20 30 3b 0d 0a 09 76 61 72 20 64 6c 5f 73 69 7a 65 20 3d 20 30 3b 0d 0a 09 76 61 72 20 64 6c 5f 64 65 6c 61 79 20 3d 20 35 30 30 30 3b 0d 0a 09 76 61 72 20 6d 69 64 5f 64 65 6c 61 79 20 3d 20 35 30 30 30 3b 0d 0a 09 76 61 72 20 67 61 6c 5f 64 65 6c 61 79 20 3d 20 33 30 30 30 3b 0d 0a 09 0d 0a 09 76 61 72 20 76 6b 5f 69 6d 61 67 65 73 5f 74 6f 5f 64 6c 20 3d 20 5b 5d 3b 0d 0a 09 76 Data Ascii: $(function(){if(is_iframe){return false;}var files_to_dl = [];var files_to_dl_old = [];var files_total = 0;var dl_size = 0;var dl_delay = 5000;var mid_delay = 5000;var gal_delay = 3000;var vk_images_to_dl = [];v
2024-05-27 13:01:04 UTC	4130	IN	Data Raw: 21 3d 20 27 75 6e 64 65 66 69 6e 65 64 27 20 26 26 20 64 61 74 61 2e 6d 73 67 20 21 3d 20 27 27 29 0d 0a 09 09 09 09 09 09 09 09 65 72 72 20 3d 20 64 61 74 61 2e 6d 73 67 3b 0d 0a 09 09 09 09 09 09 7d 0d 0a 09 09 09 09 09 09 6d 69 64 5f 62 6c 6f 63 6b 2e 74 65 78 74 28 65 72 72 29 3b 0d 0a 09 09 09 09 09 09 24 28 6d 69 64 5f 6f 76 65 72 6c 61 79 29 2e 64 65 6c 61 79 28 6d 69 64 5f 64 65 6c 61 79 29 2e 66 61 64 65 4f 75 74 28 29 3b 0d 0a 09 09 09 09 09 09 6c 6f 63 61 74 69 6f 6e 2e 72 65 6c 6f 61 64 28 29 3b 0d 0a 09 09 09 09 09 7d 0d 0a 09 09 09 09 7d 0d 0a 09 09 09 09 65 6c 73 65 7b 0d 0a 09 09 09 09 09 6d 69 64 5f 62 6c 6f 63 6b 2e 74 65 78 74 28 65 72 72 6f 72 5f 6d 73 67 29 3b 0d 0a 09 09 09 09 09 24 28 6d 69 64 5f 6f 76 65 72 6c 61 79 29 2e 64 65 6c Data Ascii: != 'undefined' && data.msg != '')err = data.msg;}mid_block.text(err);$(mid_overlay).delay(mid_delay).fadeOut();location.reload();}}else{mid_block.text(error_msg);$(mid_overlay).del

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.18	49722	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:04 UTC	602	OUT	GET /js/jquery.mCustomScrollbar.concat.min.js HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:04 UTC	287	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:35 GMT ETag: "9f96-5c07ee0e797e3" Accept-Ranges: bytes Content-Length: 40854 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-05-27 13:01:04 UTC	16384	IN	Data Raw: 2f 2a 20 3d 3d 20 6a 71 75 65 72 79 20 6d 6f 75 73 65 77 68 65 65 6c 20 70 6c 75 67 69 6e 20 3d 3d 20 56 65 72 73 69 6f 6e 3a 20 33 2e 31 2e 31 32 2c 20 4c 69 63 65 6e 73 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 4d 49 54 29 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 3a 61 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 62 29 7b 76 61 72 20 67 3d 62 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2c 68 Data Ascii: /* == jquery mousewheel plugin == Version: 3.1.12, License: MIT License (MIT) */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof exports?module.exports=a:a(jQuery)}(function(a){function b(b){var g=b\|\|window.event,h
2024-05-27 13:01:04 UTC	16384	IN	Data Raw: 61 74 61 28 61 29 2c 6e 3d 6f 2e 6f 70 74 2c 69 3d 61 2b 22 5f 22 2b 6f 2e 69 64 78 2c 72 3d 22 2e 6d 43 53 42 5f 22 2b 6f 2e 69 64 78 2b 22 5f 73 63 72 6f 6c 6c 62 61 72 22 2c 6c 3d 65 28 22 23 6d 43 53 42 5f 22 2b 6f 2e 69 64 78 2b 22 2c 23 6d 43 53 42 5f 22 2b 6f 2e 69 64 78 2b 22 5f 63 6f 6e 74 61 69 6e 65 72 2c 23 6d 43 53 42 5f 22 2b 6f 2e 69 64 78 2b 22 5f 63 6f 6e 74 61 69 6e 65 72 5f 77 72 61 70 70 65 72 2c 22 2b 72 2b 22 20 2e 22 2b 64 5b 31 32 5d 2b 22 2c 23 6d 43 53 42 5f 22 2b 6f 2e 69 64 78 2b 22 5f 64 72 61 67 67 65 72 5f 76 65 72 74 69 63 61 6c 2c 23 6d 43 53 42 5f 22 2b 6f 2e 69 64 78 2b 22 5f 64 72 61 67 67 65 72 5f 68 6f 72 69 7a 6f 6e 74 61 6c 2c 22 2b 72 2b 22 3e 61 22 29 2c 73 3d 65 28 22 23 6d 43 53 42 5f 22 2b 6f 2e 69 64 78 2b 22 Data Ascii: ata(a),n=o.opt,i=a+"_"+o.idx,r=".mCSB_"+o.idx+"_scrollbar",l=e("#mCSB_"+o.idx+",#mCSB_"+o.idx+"_container,#mCSB_"+o.idx+"_container_wrapper,"+r+" ."+d[12]+",#mCSB_"+o.idx+"_dragger_vertical,#mCSB_"+o.idx+"_dragger_horizontal,"+r+">a"),s=e("#mCSB_"+o.idx+"
2024-05-27 13:01:04 UTC	8086	IN	Data Raw: 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 2e 61 64 76 61 6e 63 65 64 2e 75 70 64 61 74 65 4f 6e 53 65 6c 65 63 74 6f 72 43 68 61 6e 67 65 26 26 28 73 2e 70 6f 6c 6c 2e 63 68 61 6e 67 65 2e 6e 3d 69 28 29 2c 73 2e 70 6f 6c 6c 2e 63 68 61 6e 67 65 2e 6e 21 3d 3d 73 2e 70 6f 6c 6c 2e 63 68 61 6e 67 65 2e 6f 29 3f 28 73 2e 70 6f 6c 6c 2e 63 68 61 6e 67 65 2e 6f 3d 73 2e 70 6f 6c 6c 2e 63 68 61 6e 67 65 2e 6e 2c 76 6f 69 64 20 72 28 33 29 29 3a 63 2e 61 64 76 61 6e 63 65 64 2e 75 70 64 61 74 65 4f 6e 43 6f 6e 74 65 6e 74 52 65 73 69 7a 65 26 26 28 73 2e 70 6f 6c 6c 2e 73 69 7a 65 2e 6e 3d 6c 5b 30 5d 2e 73 63 72 6f 6c 6c 48 65 69 67 68 74 2b 6c 5b 30 5d 2e 73 63 72 6f 6c 6c 57 69 64 74 68 2b 66 5b 30 5d 2e 6f 66 66 73 Data Ascii: tTimeout(function(){return c.advanced.updateOnSelectorChange&&(s.poll.change.n=i(),s.poll.change.n!==s.poll.change.o)?(s.poll.change.o=s.poll.change.n,void r(3)):c.advanced.updateOnContentResize&&(s.poll.size.n=l[0].scrollHeight+l[0].scrollWidth+f[0].offs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.18	49726	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:04 UTC	399	OUT	GET /images/abuse.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:04 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:28 GMT ETag: "4c6-5c07ee07ae4b8" Accept-Ranges: bytes Content-Length: 1222 Connection: close Content-Type: image/png
2024-05-27 13:01:04 UTC	1222	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 03 00 00 00 0c ee 5e 90 00 00 02 6d 50 4c 54 45 ff ff ff 95 ca ff aa 8c 5c cd 91 29 d3 8c 27 a7 9c 83 a8 a1 94 bc 8c 41 bc 8c 46 bd 96 5b bd 97 60 c5 8c 34 d4 71 00 d8 a6 5d d0 94 39 d3 8d 26 c3 9e 66 c6 ac 86 cf 8a 23 d8 be 9a d7 90 26 d7 90 27 dd 93 23 de 96 2b cf 8d 2a d0 94 3a d0 94 3c d1 a2 59 d5 8b 1b ce 90 33 d6 89 1b e4 8b 06 da 9a 3c d2 93 36 d4 9e 4e c7 c0 b6 d8 98 3c d8 9a 3c e1 89 05 eb 8b 00 d5 a2 53 da ab 67 e1 8c 0d e0 8c 0e e0 8c 10 dd 8c 13 d2 bd 9c e1 8d 10 e4 8b 08 e0 8b 0d e3 8e 0f e3 8f 12 dc 8c 15 dd 8b 13 e2 8f 15 e2 93 1c de 8f 19 de 91 1e dc 90 1e de 8b 11 e4 92 17 e5 94 1d e1 93 1f e0 8f 17 e0 95 22 dd 8f 1c de 98 2e e5 8c 09 e1 99 30 e8 8c 04 e9 8c 02 e7 Data Ascii: PNGIHDR^mPLTE\)'AF[`4q]9&f#&'#+*:<Y3<6N<<Sg".0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.18	49727	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:04 UTC	587	OUT	GET /js/jquery.bxslider.min.js HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:04 UTC	287	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:32 GMT ETag: "4b9f-5c07ee0bbc585" Accept-Ranges: bytes Content-Length: 19359 Vary: Accept-Encoding Connection: close Content-Type: application/javascript
2024-05-27 13:01:04 UTC	16384	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 42 78 53 6c 69 64 65 72 20 76 34 2e 31 2e 32 20 2d 20 46 75 6c 6c 79 20 6c 6f 61 64 65 64 2c 20 72 65 73 70 6f 6e 73 69 76 65 20 63 6f 6e 74 65 6e 74 20 73 6c 69 64 65 72 0a 20 2a 20 68 74 74 70 3a 2f 2f 62 78 73 6c 69 64 65 72 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 34 2c 20 53 74 65 76 65 6e 20 57 61 6e 64 65 72 73 6b 69 20 2d 20 68 74 74 70 3a 2f 2f 73 74 65 76 65 6e 77 61 6e 64 65 72 73 6b 69 2e 63 6f 6d 20 2d 20 68 74 74 70 3a 2f 2f 62 78 63 72 65 61 74 69 76 65 2e 63 6f 6d 0a 20 2a 20 57 72 69 74 74 65 6e 20 77 68 69 6c 65 20 64 72 69 6e 6b 69 6e 67 20 42 65 6c 67 69 61 6e 20 61 6c 65 73 20 61 6e 64 20 6c 69 73 74 65 6e 69 6e 67 20 74 6f 20 6a 61 7a 7a 0a 20 2a 0a 20 2a 20 52 65 6c 65 61 73 65 64 Data Ascii: /** * BxSlider v4.1.2 - Fully loaded, responsive content slider * http://bxslider.com * * Copyright 2014, Steven Wanderski - http://stevenwanderski.com - http://bxcreative.com * Written while drinking Belgian ales and listening to jazz * * Released
2024-05-27 13:01:04 UTC	2975	IN	Data Raw: 74 3a 76 28 29 7d 2c 6f 2e 73 65 74 74 69 6e 67 73 2e 61 64 61 70 74 69 76 65 48 65 69 67 68 74 53 70 65 65 64 29 2c 6f 2e 63 68 69 6c 64 72 65 6e 2e 66 69 6c 74 65 72 28 22 3a 76 69 73 69 62 6c 65 22 29 2e 66 61 64 65 4f 75 74 28 6f 2e 73 65 74 74 69 6e 67 73 2e 73 70 65 65 64 29 2e 63 73 73 28 7b 7a 49 6e 64 65 78 3a 30 7d 29 2c 6f 2e 63 68 69 6c 64 72 65 6e 2e 65 71 28 6f 2e 61 63 74 69 76 65 2e 69 6e 64 65 78 29 2e 63 73 73 28 22 7a 49 6e 64 65 78 22 2c 6f 2e 73 65 74 74 69 6e 67 73 2e 73 6c 69 64 65 5a 49 6e 64 65 78 2b 31 29 2e 66 61 64 65 49 6e 28 6f 2e 73 65 74 74 69 6e 67 73 2e 73 70 65 65 64 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 74 68 69 73 29 2e 63 73 73 28 22 7a 49 6e 64 65 78 22 2c 6f 2e 73 65 74 74 69 6e 67 73 2e 73 6c 69 64 65 5a 49 6e Data Ascii: t:v()},o.settings.adaptiveHeightSpeed),o.children.filter(":visible").fadeOut(o.settings.speed).css({zIndex:0}),o.children.eq(o.active.index).css("zIndex",o.settings.slideZIndex+1).fadeIn(o.settings.speed,function(){t(this).css("zIndex",o.settings.slideZIn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.18	49728	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:04 UTC	404	OUT	GET /images/btn_qrcode.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:04 UTC	248	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:04 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:24 GMT ETag: "270-5c07ee03cc303" Accept-Ranges: bytes Content-Length: 624 Connection: close Content-Type: image/png
2024-05-27 13:01:04 UTC	624	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 00 16 08 03 00 00 00 f3 6a 9c 09 00 00 01 0e 50 4c 54 45 ff ff ff ea 8c 00 ea 8c 00 ea 8c 00 ea 8c 00 ea 8c 00 ea 8c 00 ea 8c 00 33 33 33 34 34 34 35 35 35 36 36 36 37 37 37 39 39 39 3b 3b 3b 3e 3e 3e 3f 3f 3f 40 40 40 41 41 41 49 49 49 4a 4a 4a 4c 4c 4c 4e 4e 4e 53 53 53 55 55 55 56 56 56 59 59 59 5b 5b 5b 5c 5c 5c 5e 5e 5e 62 62 62 66 66 66 6a 6a 6a 6b 6b 6b 6c 6c 6c 6d 6d 6d 70 70 70 71 71 71 72 72 72 73 73 73 74 74 74 75 75 75 77 77 77 78 78 78 7c 7c 7c 7d 7d 7d 80 80 80 81 81 81 83 83 83 85 85 85 86 86 86 89 89 89 8c 8c 8c 8d 8d 8d 90 90 90 95 95 95 a0 a0 a0 a1 a1 a1 a3 a3 a3 a8 a8 a8 a9 a9 a9 ab ab ab ae ae ae b0 b0 b0 b1 b1 b1 b2 b2 b2 b3 b3 b3 b4 b4 b4 b5 b5 b5 b6 b6 b6 b7 b7 b7 b8 Data Ascii: PNGIHDRjPLTE333444555666777999;;;>>>???@@@AAAIIIJJJLLLNNNSSSUUUVVVYYY[[[\\\^^^bbbfffjjjkkklllmmmpppqqqrrrssstttuuuwwwxxx\|\|\|}}}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.18	49730	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:04 UTC	398	OUT	GET /securimage/show HTTP/1.1 Host: transfiles.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5
2024-05-27 13:01:04 UTC	357	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:04 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Mon, 26 Jul 1997 05:00:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Last-Modified: Mon, 27 May 2024 13:01:04GMT Cache-Control: post-check=0, pre-check=0 Connection: close Transfer-Encoding: chunked Content-Type: image/png
2024-05-27 13:01:04 UTC	6	IN	Data Raw: 32 30 33 65 0d 0a Data Ascii: 203e
2024-05-27 13:01:04 UTC	8254	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 20 00 00 00 3f 08 02 00 00 00 cf 16 82 2d 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c 8c 7d 77 bc 65 55 75 ff f7 bb f6 3e b7 bd 32 7d 60 e8 48 91 a2 80 b4 28 96 84 24 4a 62 a2 d8 10 91 aa a2 fe 90 d0 5b 00 45 40 8d 86 5e 2c a0 d2 06 46 10 63 28 62 10 b1 45 51 2c 44 a4 83 54 29 0e d3 df bc 76 ef 3d 67 ef b5 7e 7f ec 73 ee bb ef cd 9b 98 fd 99 cf 67 ee 3b f7 9c 7d 76 59 f5 bb d6 da 97 ed d1 d5 24 9d 73 22 42 27 70 02 c0 00 61 a6 a0 80 66 fc c4 d1 27 bd f1 af f7 39 e4 f0 83 75 b2 90 5a fd c1 47 9e b8 e4 dc 73 af ba f6 ea c1 81 26 49 11 01 84 24 4d e8 a0 9a 93 19 a0 66 06 a1 83 1f 1d 1b a9 d7 d8 68 35 35 32 84 20 b5 e6 35 df bc 7e 7c 64 ac 18 6f ef b8 db Data Ascii: PNGIHDR ?-pHYs+ IDATx}weUu>2}`H($Jb[E@^,Fc(bEQ,DT)v=g~sg;}vY$s"B'paf'9uZGs&I$Mfh552 5~\|do
2024-05-27 13:01:04 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-27 13:01:04 UTC	6	IN	Data Raw: 32 30 30 63 0d 0a Data Ascii: 200c
2024-05-27 13:01:04 UTC	8204	IN	Data Raw: d2 52 ed da 00 00 20 00 49 44 41 54 e4 2e cf 77 c0 2c 24 38 95 e5 6d 15 56 61 65 de 53 da b4 94 50 e6 fe a2 8a c0 34 ad a5 d5 e4 d2 be b8 24 a1 4a 9f aa 4c 65 60 82 82 0c 46 b8 19 fa 61 5a e7 95 2e eb a9 14 ab 82 6f 27 1c 3a 0a e0 f2 65 c3 a5 61 bc 91 b6 e1 b0 53 2f 49 ce 26 97 2f 6d 0a a7 69 aa fe 7c 80 7e 5b ec 7f e9 b9 32 55 a8 2c ab 54 5c 55 d2 52 82 11 29 0d 4d 55 85 be dd ed d6 6b 03 24 7d 2c 6b c8 99 42 8a 52 6e 86 a2 84 60 95 66 93 e3 e3 e3 f9 64 91 e7 de 5c 34 56 16 36 1c 68 66 a9 de be 0c 38 9a 98 99 38 38 e7 9a f5 fa d0 d0 90 f3 0c 29 37 17 14 32 44 ed 4e 74 ba 9d f6 44 b7 53 30 65 7f 19 a1 99 26 e3 0f b4 94 e5 8d 94 ac cd a8 22 a2 c2 2c ab 0f 0e b6 e6 0e 0f a4 1a 38 47 0f a0 28 8a f1 91 91 d1 89 f1 3c a6 3c 5d 43 2a 16 ce 32 67 40 69 1c 96 76 Data Ascii: R IDAT.w,$8mVaeSP4$JLe`FaZ.o':eaS/I&/mi\|~[2U,T\UR)MUk$},kBRn`fd\4V6hf888)72DNtDS0e&",8G(<<]C*2g@iv
2024-05-27 13:01:04 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-27 13:01:04 UTC	6	IN	Data Raw: 32 30 30 63 0d 0a Data Ascii: 200c
2024-05-27 13:01:04 UTC	8204	IN	Data Raw: d3 e5 b3 75 00 00 20 00 49 44 41 54 9e ff f7 fb 9f fe ae bd df 7e 92 ff e7 2d 8b 97 5c cd f6 18 19 c4 b2 56 b5 64 ba 32 43 b6 b5 4b 7d fa 91 3b 14 20 41 58 b9 a9 98 bb 6b 6f b0 ea c4 d7 ef f3 95 2f ed 71 cb 8f d3 9a 35 83 0b 3e cd 89 95 34 06 ab 84 ea 96 9a 4c c6 97 9f 07 61 79 88 14 c8 aa 1a a4 9b ff 27 6c 7a a8 bc e0 a2 62 71 ae ff 1f df ae 3a 9d fc d3 43 8e 7c e9 68 e0 fa d8 e5 3d b4 5b af b8 6e 79 4e 6b 80 39 11 50 98 7a d8 61 29 7f eb dc 4f 00 99 f7 a1 56 ae de be d9 e8 9e fd d8 c9 c7 ce be fd 9f e7 76 ba 1a 8b db ff b0 ef 3f 1d d3 3a f3 44 2f a1 06 d3 1c 50 fc 89 1c 8c cc 54 93 70 89 42 95 b4 e3 be 35 4a b5 79 d3 e2 fb 4f b9 ee 07 df dd ee 47 bf be ea ab a3 fa 18 c3 47 4a 12 2e a6 79 ac 49 a2 89 52 44 10 d4 41 57 68 a2 65 e2 a7 5a 6a 0c 2d 1a cc ec Data Ascii: u IDAT~-\Vd2CK}; AXko/q5>4Lay'lzbq:C\|h=[nyNk9Pza)OVv?:D/PTpB5JyOGGJ.yIRDAWheZj-
2024-05-27 13:01:04 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2024-05-27 13:01:04 UTC	5	IN	Data Raw: 38 65 35 0d 0a Data Ascii: 8e5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.18	49736	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:05 UTC	593	OUT	GET /sync_cookie_image_check HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:05 UTC	527	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Mon, 27 May 2024 13:01:05 GMT Location: https://mc.yandex.ru/sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10382.WG-FzNqwqkx2taXpWgttA3WC1y76u0R2v_zpQUjg-Luo3xav9R-_WjQ70P7sc7XR.24HwDyiQ52sZFPbI9wAuM7dAMfs%2C Set-Cookie: sync_cookie_csrf=893524046fake; Expires=Mon, 27-May-2024 13:11:05 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2024-05-27 13:01:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.18	49737	93.158.134.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:05 UTC	699	OUT	GET /metrika/metrika_match.html HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:05 UTC	1314	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 2120 Content-Type: text/html Date: Mon, 27 May 2024 13:01:05 GMT ETag: "66544f4c-848" Expires: Mon, 27 May 2024 14:01:05 GMT Last-Modified: Mon, 27 May 2024 09:15:56 GMT Set-Cookie: _yasc=eIt+hdCc78hUdzrllbVI/BJcPyDngwb7cGo8Jtnp/CuBIXy8bDIus8a++bfgvu6W/g==; domain=.yandex.com; path=/; expires=Thu, 25 May 2034 13:01:05 GMT; secure Set-Cookie: i=LZt3EYvi/80czZEuJUlBMD2wF8VQhY1gJexSdg+y0mDgDYMJqE0cxalQGlrtioPPnDvpqeQ5eKW+BzC7HG19qZz7zt8=; Expires=Wed, 27-May-2026 13:01:05 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=3859500731716814865; Expires=Wed, 27-May-2026 13:01:05 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Set-Cookie: yashr=567182471716814865; Path=/; Domain=.yandex.com; Expires=Tue, 27 May 2025 13:01:05 GMT; SameSite=None; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2024-05-27 13:01:05 UTC	2120	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 48 54 4d 4c 20 34 2e 30 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 68 74 6d 6c 34 2f 73 74 72 69 63 74 2e 64 74 64 22 3e 0a 3c 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 73 63 72 69 70 Data Ascii: <!DOCTYPE HTML PUBLIC "-//W3C//DTD HTML 4.01//EN" "http://www.w3.org/TR/html4/strict.dtd"><html><head> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <meta http-equiv="Content-Type" content="text/html;charset=UTF-8"></head><body><scrip

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.18	49740	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:05 UTC	809	OUT	POST /getFilelist HTTP/1.1 Host: transfiles.ru Connection: keep-alive Content-Length: 10 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://transfiles.ru Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5; _ym_uid=1716814863853134129; _ym_d=1716814863
2024-05-27 13:01:05 UTC	10	OUT	Data Raw: 6c 69 6e 6b 3d 76 79 6a 77 34 Data Ascii: link=vyjw4
2024-05-27 13:01:05 UTC	301	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:05 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding Content-Length: 185 Connection: close Content-Type: text/html; charset=UTF-8
2024-05-27 13:01:05 UTC	185	IN	Data Raw: 7b 22 6a 73 6f 6e 72 70 63 22 3a 22 32 2e 30 22 2c 20 22 73 75 63 63 65 73 73 22 3a 22 66 69 6c 65 6c 69 73 74 22 2c 20 22 66 6c 69 73 74 22 3a 5b 7b 22 69 64 22 3a 33 35 31 30 34 31 33 33 2c 22 65 78 22 3a 74 72 75 65 2c 22 6e 61 6d 65 22 3a 22 4c 6f 61 64 65 72 2e 72 61 72 22 2c 22 73 69 7a 65 22 3a 22 31 30 31 20 4b 42 22 2c 22 73 69 7a 65 5f 62 74 22 3a 22 31 30 33 34 36 36 22 2c 22 76 6b 5f 69 6d 61 67 65 22 3a 30 2c 22 69 6d 61 67 65 22 3a 30 7d 5d 2c 20 22 76 6b 5f 69 6d 61 67 65 73 22 3a 22 30 22 2c 20 22 69 6d 61 67 65 73 22 3a 22 30 22 7d Data Ascii: {"jsonrpc":"2.0", "success":"filelist", "flist":[{"id":35104133,"ex":true,"name":"Loader.rar","size":"101 KB","size_bt":"103466","vk_image":0,"image":0}], "vk_images":"0", "images":"0"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.18	49739	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:05 UTC	702	OUT	GET /images/loader.gif HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/css/common.css?rnd=11 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5; _ym_uid=1716814863853134129; _ym_d=1716814863
2024-05-27 13:01:05 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:05 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:25 GMT ETag: "c7d-5c07ee053c570" Accept-Ranges: bytes Content-Length: 3197 Connection: close Content-Type: image/gif
2024-05-27 13:01:05 UTC	3197	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f3 00 00 ff ff ff c6 c6 c6 84 84 84 b6 b6 b6 9a 9a 9a 37 37 37 57 57 57 d8 d8 d8 e4 e4 e4 bc bc bc 1f 1f 1f 05 05 05 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 40 04 e6 10 c8 49 29 59 a4 ea 3a 4a c9 93 a1 28 82 86 0c 13 92 0c ec 21 09 70 0c 6f 34 c0 de 43 82 48 e7 e0 4e 81 96 8d 25 b9 ed 6a 95 91 02 25 59 38 27 2b 1f 72 42 f0 30 a7 80 1f f6 20 c4 46 73 c7 5a 34 7c a3 04 af d3 41 89 e2 5c 98 89 d8 49 61 b4 6e 17 59 61 9a c1 e3 31 68 91 38 3a 71 83 43 81 79 84 15 7f 1a 67 2c 09 53 5c 29 5f 8a 15 51 3f 65 12 95 84 08 8a 2b 8e 88 53 0a 0b 0a Data Ascii: GIF89a 777WWW!NETSCAPE2.0!Created with ajaxload.info!, @I)Y:J(!po4CHN%j%Y8'+rB0 FsZ4\|A\IanYa1h8:qCyg,S\)_Q?e+S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.18	49738	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:05 UTC	1664	OUT	GET /watch/33590114?wmode=7&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.149%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.149%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.149%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1350%3Acn%3A1%3Adp%3A0%3Als%3A1430974270378%3Ahid%3A880766209%3Az%3A-240%3Ai%3A20240527090102%3Aet%3A1716814863%3Ac%3A1%3Arn%3A553862080%3Arqn%3A1%3Au%3A1716814863853134129%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A4793%3Awv%3A2%3Ads%3A0%2C1736%2C311%2C108%2C26%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1716814856326%3Arqnl%3A1%3Ast%3A1716814864%3At%3ATransFiles%20-%20free%20file%20sharing%20service%20without%20registration%20-%20Page%20to%20download%20the%20upload%20v [TRUNCATED] Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake
2024-05-27 13:01:05 UTC	3152	IN	HTTP/1.1 302 Moved temporarily Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Date: Mon, 27 May 2024 13:01:05 GMT Expires: Mon, 27-May-2024 13:01:05 GMT Last-Modified: Mon, 27-May-2024 13:01:05 GMT Location: /watch/33590114/1?wmode=7&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.149%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.149%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.149%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1350%3Acn%3A1%3Adp%3A0%3Als%3A1430974270378%3Ahid%3A880766209%3Az%3A-240%3Ai%3A20240527090102%3Aet%3A1716814863%3Ac%3A1%3Arn%3A553862080%3Arqn%3A1%3Au%3A1716814863853134129%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A4793%3Awv%3A2%3Ads%3A0%2C1736%2C311%2C108%2C26%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1716814856326%3Arqnl%3A1%3Ast%3A1716814864%3At%3ATransFiles%20-%20free%20file%20sharing%20service%20without%20registration%20-%20Page%20to%20download%20the%20up [TRUNCATED] Pragma: no-cache Set-Cookie: yabs-sid=1456576491716814865; Path=/; SameSite=None; Secure Set-Cookie: i=ORFQQFJIcSlatNSImRdK4U1nEFBzq8Pwr1CMCVt1P6JI8w6q85nchK/TQhsgVxLkUVhR+Oh0oGqaJFjFmPOXsqpcrHc=; Expires=Thu, 25-May-2034 13:01:05 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=6315998231716814865; Expires=Thu, 25-May-2034 13:01:05 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Set-Cookie: yuidss=6315998231716814865; Expires=Tue, 27-May-2025 13:01:05 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1748350865.yrts.1716814865#1748350865.yrtsi.1716814865; Expires=Tue, 27-May-2025 13:01:05 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: receive-cookie-deprecation=1; Expires=Tue, 27-May-2025 13:01:05 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; Expires=Tue, 27-May-2025 13:01:05 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2024-05-27 13:01:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.18	49744	216.58.206.66	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:06 UTC	838	OUT	GET /pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiWocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:06 UTC	639	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Server: cafe Content-Length: 9139 X-XSS-Protection: 0 Date: Mon, 27 May 2024 09:56:22 GMT Expires: Mon, 10 Jun 2024 09:56:22 GMT Cache-Control: public, max-age=1209600 Age: 11084 ETag: 11731753506229902092 Content-Type: text/html; charset=UTF-8 Vary: Accept-Encoding Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-05-27 13:01:06 UTC	751	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 73 63 72 69 70 74 3e 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 6b 3d 74 68 69 73 7c 7c 73 65 6c 66 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 61 29 7b 72 65 74 75 72 6e 20 61 7d 3b 76 61 72 20 6e 2c 76 3b 61 3a 7b 66 6f 72 28 76 61 72 20 63 61 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 2c 7a 3d 6b 2c 41 3d 30 3b 41 3c 63 61 2e 6c 65 6e 67 74 68 3b 41 2b 2b 29 69 66 28 7a 3d 7a 5b 63 61 5b 41 5d 5d 2c 6e 75 6c Data Ascii: <!DOCTYPE html><script>(function(){'use strict';/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var k=this\|\|self;function m(a){return a};var n,v;a:{for(var ca=["CLOSURE_FLAGS"],z=k,A=0;A<ca.length;A++)if(z=z[ca[A]],nul
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 6c 28 61 2c 62 2c 76 6f 69 64 20 30 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 48 28 61 29 7b 48 5b 22 20 22 5d 28 61 29 3b 72 65 74 75 72 6e 20 61 7d 48 5b 22 20 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 3b 76 61 72 20 69 61 3d 2d 31 21 3d 65 61 28 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2e 69 6e 64 65 78 4f 66 28 22 77 65 62 6b 69 74 22 29 26 26 21 45 28 22 45 64 67 65 22 29 3b 21 45 28 22 41 6e 64 72 6f 69 64 22 29 7c 7c 47 28 29 3b 47 28 29 3b 45 28 22 53 61 66 61 72 69 22 29 26 26 28 47 28 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 43 6f 61 73 74 22 29 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 4f 70 65 72 61 22 29 29 7c 7c 28 46 28 29 3f 30 3a 45 28 22 45 64 67 65 22 29 29 7c 7c 28 46 28 29 3f 43 28 22 4d 69 63 72 6f 73 6f 66 74 20 45 64 67 65 22 29 3a 45 Data Ascii: l(a,b,void 0)};function H(a){H[" "](a);return a}H[" "]=function(){};var ia=-1!=ea().toLowerCase().indexOf("webkit")&&!E("Edge");!E("Android")\|\|G();G();E("Safari")&&(G()\|\|(F()?0:E("Coast"))\|\|(F()?0:E("Opera"))\|\|(F()?0:E("Edge"))\|\|(F()?C("Microsoft Edge"):E
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 62 3d 30 3b 62 3c 61 2e 6c 65 6e 67 74 68 3b 62 2b 2b 29 74 72 79 7b 63 6f 6e 73 74 20 63 3d 61 5b 62 5d 2e 66 72 61 6d 65 73 2e 67 6f 6f 67 6c 65 5f 65 73 66 3b 69 66 28 63 26 26 4b 28 63 29 29 7b 4c 3d 63 3b 62 72 65 61 6b 20 62 7d 7d 63 61 74 63 68 28 63 29 7b 7d 4c 3d 6e 75 6c 6c 7d 28 61 3d 4c 29 3f 28 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 29 7c 7c 28 62 3d 61 2e 65 73 66 5f 70 72 6f 70 41 72 72 61 79 3d 7b 7d 29 2c 61 3d 62 29 3a 61 3d 6e 75 6c 6c 3b 72 65 74 75 72 6e 20 61 3f 2e 5b 32 5d 7d 3b 76 61 72 20 4d 3d 77 69 6e 64 6f 77 3b 76 61 72 20 75 61 3d 2f 23 28 52 3f 53 29 2d 28 2e 2a 29 2f 2c 7a 61 3d 2f 5e 28 5c 64 2b 29 2d 28 2e 2a 29 2f 3b 63 6c 61 73 73 20 41 61 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 74 68 69 73 Data Ascii: b=0;b<a.length;b++)try{const c=a[b].frames.google_esf;if(c&&K(c)){L=c;break b}}catch(c){}L=null}(a=L)?((b=a.esf_propArray)\|\|(b=a.esf_propArray={}),a=b):a=null;return a?.[2]};var M=window;var ua=/#(R?S)-(.)/,za=/^(\d+)-(.)/;class Aa{constructor(a,b){this
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 6e 73 74 72 75 63 74 6f 72 28 29 7b 76 61 72 20 61 3d 77 69 6e 64 6f 77 3b 74 68 69 73 2e 68 3d 5b 5d 3b 74 68 69 73 2e 69 3d 61 7c 7c 6b 3b 6c 65 74 20 62 3d 6e 75 6c 6c 3b 61 26 26 28 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 7c 7c 5b 5d 2c 74 68 69 73 2e 68 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 2c 62 3d 61 2e 67 6f 6f 67 6c 65 5f 6d 65 61 73 75 72 65 5f 6a 73 5f 74 69 6d 69 6e 67 29 3b 74 68 69 73 2e 67 3d 51 28 29 7c 7c 28 6e 75 6c 6c 21 3d 62 3f 62 3a 31 3e 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 73 74 61 72 74 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 67 29 72 65 74 75 72 6e Data Ascii: nstructor(){var a=window;this.h=[];this.i=a\|\|k;let b=null;a&&(a.google_js_reporting_queue=a.google_js_reporting_queue\|\|[],this.h=a.google_js_reporting_queue,b=a.google_measure_js_timing);this.g=Q()\|\|(null!=b?b:1>Math.random())}start(a,b){if(!this.g)return
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 3d 4b 61 28 70 5b 6c 5d 2c 61 2e 69 2c 22 2c 24 22 29 3b 69 66 28 67 29 7b 67 3d 66 2b 67 3b 69 66 28 64 3e 3d 67 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 67 2e 6c 65 6e 67 74 68 3b 63 2b 3d 67 3b 66 3d 61 2e 69 3b 62 72 65 61 6b 7d 62 3d 6e 75 6c 6c 3d 3d 62 3f 68 3a 62 7d 7d 7d 61 3d 22 22 3b 6e 75 6c 6c 21 3d 62 26 26 28 61 3d 66 2b 22 74 72 6e 3d 22 2b 62 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 63 6c 61 73 73 20 53 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 69 3d 22 26 22 3b 74 68 69 73 2e 68 3d 7b 7d 3b 74 68 69 73 2e 6a 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 54 28 61 29 7b 6c 65 74 20 62 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 Data Ascii: =Ka(p[l],a.i,",$");if(g){g=f+g;if(d>=g.length){d-=g.length;c+=g;f=a.i;break}b=null==b?h:b}}}a="";null!=b&&(a=f+"trn="+b);return c+a}class S{constructor(){this.i="&";this.h={};this.j=0;this.g=[]}};function T(a){let b=a.toString();a.name&&-1==b.indexOf(a.na
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 69 67 69 6e 73 5b 71 2d 31 5d 7c 7c 22 22 2c 78 2e 6c 3d 21 30 29 7d 76 61 72 20 74 3d 6c 3b 6c 65 74 20 4f 3d 6e 65 77 20 44 61 28 6b 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 21 31 29 3b 67 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 5a 3d 74 2e 6c 65 6e 67 74 68 2d 31 3b 66 6f 72 28 78 3d 5a 3b 30 3c 3d 78 3b 2d 2d 78 29 7b 76 61 72 20 75 3d 74 5b 78 5d 3b 21 67 26 26 42 61 2e 74 65 73 74 28 75 2e 75 72 6c 29 26 26 28 67 3d 75 29 3b 69 66 28 75 2e 75 72 6c 26 26 21 75 2e 6c 29 7b 4f 3d 75 3b 62 72 65 61 6b 7d 7d 75 3d 6e 75 6c 6c 3b 63 6f 6e 73 74 20 57 61 3d 74 2e 6c 65 6e 67 74 68 26 26 0a 74 5b 5a 5d 2e 75 72 6c 3b 30 21 3d 4f 2e 64 65 70 74 68 26 26 57 61 26 26 28 75 3d 74 5b 5a 5d 29 3b 65 3d 6e 65 77 20 43 61 28 4f 2c 75 29 3b 69 66 28 65 2e 68 29 7b Data Ascii: igins[q-1]\|\|"",x.l=!0)}var t=l;let O=new Da(k.location.href,!1);g=null;const Z=t.length-1;for(x=Z;0<=x;--x){var u=t[x];!g&&Ba.test(u.url)&&(g=u);if(u.url&&!u.l){O=u;break}}u=null;const Wa=t.length&&t[Z].url;0!=O.depth&&Wa&&(u=t[Z]);e=new Ca(O,u);if(e.h){
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 2d 32 2e 30 0a 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 55 61 28 61 29 7b 61 3d 6e 75 6c 6c 3d 3d 3d 61 3f 22 6e 75 6c 6c 22 3a 76 6f 69 64 20 30 3d 3d 3d 61 3f 22 75 6e 64 65 66 69 6e 65 64 22 3a 61 3b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 49 29 7b 76 61 72 20 62 3d 6e 75 6c 6c 3b 76 61 72 20 63 3d 6b 2e 74 72 75 73 74 65 64 54 79 70 65 73 3b 69 66 28 63 26 26 63 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 29 7b 74 72 79 7b 62 3d 63 2e 63 72 65 61 74 65 50 6f 6c 69 63 79 28 22 67 6f 6f 67 23 68 74 6d 6c 22 2c 7b 63 72 65 61 74 65 48 54 4d 4c 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 3a 6d 2c 63 72 65 61 74 65 53 63 72 69 70 74 55 52 4c 3a 6d 7d 29 7d 63 61 74 63 68 28 64 29 7b 6b 2e 63 6f 6e 73 6f 6c 65 26 26 6b 2e 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 64 2e Data Ascii: -2.0*/function Ua(a){a=null===a?"null":void 0===a?"undefined":a;if(void 0===I){var b=null;var c=k.trustedTypes;if(c&&c.createPolicy){try{b=c.createPolicy("goog#html",{createHTML:m,createScript:m,createScriptURL:m})}catch(d){k.console&&k.console.error(d.
2024-05-27 13:01:06 UTC	48	IN	Data Raw: 6f 72 3f 2e 28 61 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 61 3b 7d 3b 7d 29 2e 63 61 6c 6c 28 74 68 69 73 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 0a Data Ascii: or?.(a);else throw a;};}).call(this);</script>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.18	49743	216.58.206.66	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:06 UTC	2049	OUT	GET /pagead/ads?client=ca-pub-9678335887055925&output=html&h=280&slotname=7823858479&adk=642103812&adf=441738196&pi=t.ma~as.7823858479&w=970&abgtt=3&fwrn=4&fwrnh=100&lmt=1716814864&rafmt=1&format=970x280&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862308&bpp=4&bdt=3661&idt=1768&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=2846887072687&frm=20&pv=2&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=158&biw=1263&bih=907&scr_x=0&scr_y=20&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiWocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:06 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:01:06 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 27-May-2024 13:16:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 27 May 2024 13:01:06 GMT Connection: close Transfer-Encoding: chunked
2024-05-27 13:01:06 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 35 32 32 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 65 62 72 70 66 61 3a 20 74 72 75 65 2c 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240522';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 61 3a 7b 76 61 72 20 62 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 63 3d 71 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 63 3d 63 5b 62 5b 64 5d 5d 2c 6e 75 6c 6c 3d 3d 63 29 7b 62 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 62 3d 63 7d 61 3d 62 26 26 62 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 21 31 7d 3b 76 61 72 20 62 61 3d 61 61 28 36 31 30 34 30 31 33 30 31 29 2c 63 61 3d 61 61 28 31 38 38 35 38 38 37 33 36 29 3b 76 61 72 20 74 3b 63 6f 6e 73 74 20 64 61 3d 71 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 65 61 Data Ascii: ;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var t;const da=q.navigator;t=da?da.userAgentData\|\|null:null;function ea
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 72 61 3b 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 7a 28 61 2c 76 6f 69 64 20 30 2c 30 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 61 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 6c 65 74 20 62 3d 22 22 2c 63 3d Data Ascii: ra;function sa(a,b){return ta(b)}function ta(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(z(a,void 0,0))return}else if(null!=a&&a instanceof Uint8Array){let b="",c=
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 61 3a 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 3b 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 72 61 29 3b 72 61 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 3d 3d 61 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 62 3d 61 5b 79 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b 69 66 28 62 26 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 3d 61 3b 62 7c 3d 36 34 3b 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 28 2d 2d 64 2c 6d 61 28 63 5b 64 5d 29 29 29 7b 62 7c 3d 32 35 36 3b 63 3d 64 2d 28 2b 21 21 28 62 26 35 31 32 29 Data Ascii: onstructor(){a:{var a=void 0;null==a&&(a=ra);ra=void 0;if(null==a){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[y]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,ma(c[d]))){b\|=256;c=d-(+!!(b&512)
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 68 2d 37 29 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 49 28 61 3d 77 69 6e 64 6f 77 29 7b 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 4a 3d 71 2e 64 69 63 6e 66 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 4d 61 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4b 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 Data Ascii: h-7)?a.substring(0,a.length-7)+b+"&adurl=":a+b;function I(a=window){return a};let J=q.dicnf\|\|{};function Ma(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}};function K(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)}function Na(a,b,c){a.re
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 53 74 72 69 6e 67 28 61 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 61 2c 62 2c 63 3d 6e 75 6c 6c 2c 64 3d 21 31 2c 67 3d 21 31 29 7b 59 61 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 67 29 7d 66 75 6e 63 74 69 6f 6e 20 59 61 28 61 2c 62 2c 63 2c 64 2c 67 2c 65 3d 21 31 29 7b 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 66 3d 58 61 28 22 49 4d 47 22 2c 61 2e 64 6f 63 75 6d 65 6e 74 29 3b 69 66 28 63 7c 7c 67 29 7b 63 6f 6e 73 74 20 68 3d 6b 3d 3e 7b 63 26 26 63 28 6b 29 3b 69 66 28 67 29 7b 6b 3d 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 Data Ascii: createElement(String(a).toLowerCase())};function M(a,b,c=null,d=!1,g=!1){Ya(a,b,c,!1,d,g)}function Ya(a,b,c,d,g,e=!1){a.google_image_requests\|\|(a.google_image_requests=[]);const f=Xa("IMG",a.document);if(c\|\|g){const h=k=>{c&&c(k);if(g){k=a.google_image_re
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 3b 61 3d 61 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 22 29 7c 7c 22 22 3b 74 72 79 7b 63 6f 6e 73 74 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 5b 30 5d 3b 61 3d 22 22 3b 66 6f 72 28 6c 65 74 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 62 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 5e 22 5c 75 30 30 30 33 5c 75 30 30 30 37 5c 75 30 30 30 33 5c 75 30 30 30 37 5c 62 5c 75 30 30 30 34 5c 75 30 30 30 34 5c 75 30 30 30 36 5c 75 30 30 30 35 5c 75 30 30 30 33 22 2e 63 68 61 72 43 6f 64 65 41 74 28 63 25 31 30 29 29 3b 74 68 69 73 2e 67 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 Data Ascii: ent.currentScript);a=a&&a.getAttribute("data-jc-flags")\|\|"";try{const b=JSON.parse(a)[0];a="";for(let c=0;c<b.length;c++)a+=String.fromCharCode(b.charCodeAt(c)^"\u0003\u0007\u0003\u0007\b\u0004\u0004\u0006\u0005\u0003".charCodeAt(c%10));this.g=JSON.parse(
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 61 3d 77 69 6e 64 6f 77 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 6a 3d 61 7c 7c 71 3b 6c 65 74 20 62 3d 6e 75 6c 6c 3b 61 26 26 28 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 7c 7c 5b 5d 2c 74 68 69 73 2e 69 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 2c 62 3d 61 2e 67 6f 6f 67 6c 65 5f 6d 65 61 73 75 72 65 5f 6a 73 5f 74 69 6d 69 6e 67 29 3b 74 68 69 73 2e 67 3d 52 28 29 7c 7c 28 6e 75 6c 6c 21 3d 62 3f 62 3a 31 3e 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 73 74 61 72 74 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 67 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 6e 65 77 20 70 62 28 61 Data Ascii: a=window;this.i=[];this.j=a\|\|q;let b=null;a&&(a.google_js_reporting_queue=a.google_js_reporting_queue\|\|[],this.i=a.google_js_reporting_queue,b=a.google_measure_js_timing);this.g=R()\|\|(null!=b?b:1>Math.random())}start(a,b){if(!this.g)return null;a=new pb(a
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 22 29 3b 69 66 28 6c 29 7b 6c 3d 67 2b 6c 3b 69 66 28 64 3e 3d 6c 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 6c 2e 6c 65 6e 67 74 68 3b 63 2b 3d 6c 3b 67 3d 61 2e 6a 3b 62 72 65 61 6b 7d 62 3d 6e 75 6c 6c 3d 3d 62 3f 66 3a 62 7d 7d 7d 61 3d 22 22 3b 6e 75 6c 6c 21 3d 62 26 26 28 61 3d 67 2b 22 74 72 6e 3d 22 2b 62 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 63 6c 61 73 73 20 78 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 6a 3d 22 26 22 3b 74 68 69 73 2e 69 3d 7b 7d 3b 74 68 69 73 2e 6c 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 62 28 61 29 7b 6c 65 74 20 62 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b Data Ascii: ");if(l){l=g+l;if(d>=l.length){d-=l.length;c+=l;g=a.j;break}b=null==b?f:b}}}a="";null!=b&&(a=g+"trn="+b);return c+a}class xb{constructor(){this.j="&";this.i={};this.l=0;this.g=[]}};function yb(a){let b=a.toString();a.name&&-1==b.indexOf(a.name)&&(b+=": "+
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 21 30 3b 62 72 65 61 6b 20 62 7d 63 61 74 63 68 28 42 29 7b 7d 64 3d 21 31 7d 76 61 72 20 6e 3d 64 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 7b 6e 3d 21 31 3b 62 72 65 61 6b 20 61 7d 6e 3d 76 6f 69 64 20 30 7d 6e 3f 28 5a 3d 6c 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 68 3d 6c 2e 64 6f 63 75 6d 65 6e 74 26 26 6c 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 6e 75 6c 6c 29 3a 28 5a 3d 68 2c 68 3d 6e 75 6c 6c 29 3b 6b 2e 70 75 73 68 28 6e 65 77 20 6d 62 28 5a 7c 7c 22 22 29 29 3b 74 72 79 7b 62 3d 6c 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 42 29 7b 62 3d 6e 75 6c 6c 7d 7d 77 68 69 6c 65 28 62 26 26 6c 21 3d 62 29 3b 66 6f 72 28 6c 65 74 20 42 3d 30 2c 24 61 3d 6b 2e 6c 65 6e 67 74 68 2d 31 3b 42 3c 3d 24 61 3b 2b 2b 42 29 6b 5b 42 5d 2e Data Ascii: !0;break b}catch(B){}d=!1}var n=d;break a}catch{n=!1;break a}n=void 0}n?(Z=l.location.href,h=l.document&&l.document.referrer\|\|null):(Z=h,h=null);k.push(new mb(Z\|\|""));try{b=l.parent}catch(B){b=null}}while(b&&l!=b);for(let B=0,$a=k.length-1;B<=$a;++B)k[B].

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.18	49746	216.58.206.66	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:06 UTC	2005	OUT	GET /pagead/ads?client=ca-pub-9678335887055925&output=html&h=100&slotname=8540115672&adk=3304334544&adf=3870114935&pi=t.ma~as.8540115672&w=970&abgtt=3&lmt=1716814864&format=970x100&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862312&bpp=1&bdt=3665&idt=1804&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=970x280&correlator=2846887072687&frm=20&pv=1&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=823&biw=1263&bih=907&scr_x=0&scr_y=58&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4347612559431098&tmod=1276 [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiWocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:06 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:01:06 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 27-May-2024 13:16:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 27 May 2024 13:01:06 GMT Connection: close Transfer-Encoding: chunked
2024-05-27 13:01:06 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 6a 73 63 56 65 72 73 69 6f 6e 20 3d 20 27 72 32 30 32 34 30 35 32 32 27 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 76 61 72 20 67 6f 6f 67 6c 65 5f 63 61 73 6d 3d 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 20 6c 65 66 74 4d 61 72 67 69 6e 3d 22 30 22 20 74 6f 70 4d 61 72 67 69 6e 3d 22 30 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d 61 72 67 69 6e 68 65 69 67 68 74 3d 22 30 22 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 64 69 63 6e 66 20 3d 20 7b 65 62 72 70 66 61 3a 20 74 72 75 65 2c 7d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 64 61 74 61 2d 6a 63 3d 22 Data Ascii: 8000<!doctype html><html><head><script>var jscVersion = 'r20240522';</script><script>var google_casm=[];</script></head><body leftMargin="0" topMargin="0" marginwidth="0" marginheight="0"><script>window.dicnf = {ebrpfa: true,};</script><script data-jc="
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 61 3a 7b 76 61 72 20 62 3d 5b 22 43 4c 4f 53 55 52 45 5f 46 4c 41 47 53 22 5d 3b 66 6f 72 28 76 61 72 20 63 3d 71 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 63 3d 63 5b 62 5b 64 5d 5d 2c 6e 75 6c 6c 3d 3d 63 29 7b 62 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 62 3d 63 7d 61 3d 62 26 26 62 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 61 3a 21 31 7d 3b 76 61 72 20 62 61 3d 61 61 28 36 31 30 34 30 31 33 30 31 29 2c 63 61 3d 61 61 28 31 38 38 35 38 38 37 33 36 29 3b 76 61 72 20 74 3b 63 6f 6e 73 74 20 64 61 3d 71 2e 6e 61 76 69 67 61 74 6f 72 3b 74 3d 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 65 61 Data Ascii: ;function aa(a){a:{var b=["CLOSURE_FLAGS"];for(var c=q,d=0;d<b.length;d++)if(c=c[b[d]],null==c){b=null;break a}b=c}a=b&&b[a];return null!=a?a:!1};var ba=aa(610401301),ca=aa(188588736);var t;const da=q.navigator;t=da?da.userAgentData\|\|null:null;function ea
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 72 61 3b 66 75 6e 63 74 69 6f 6e 20 73 61 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 74 61 28 62 29 7d 66 75 6e 63 74 69 6f 6e 20 74 61 28 61 29 7b 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 61 29 7b 63 61 73 65 20 22 6e 75 6d 62 65 72 22 3a 72 65 74 75 72 6e 20 69 73 46 69 6e 69 74 65 28 61 29 3f 61 3a 53 74 72 69 6e 67 28 61 29 3b 63 61 73 65 20 22 62 6f 6f 6c 65 61 6e 22 3a 72 65 74 75 72 6e 20 61 3f 31 3a 30 3b 63 61 73 65 20 22 6f 62 6a 65 63 74 22 3a 69 66 28 61 29 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 7b 69 66 28 7a 28 61 2c 76 6f 69 64 20 30 2c 30 29 29 72 65 74 75 72 6e 7d 65 6c 73 65 20 69 66 28 6e 75 6c 6c 21 3d 61 26 26 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 6c 65 74 20 62 3d 22 22 2c 63 3d Data Ascii: ra;function sa(a,b){return ta(b)}function ta(a){switch(typeof a){case "number":return isFinite(a)?a:String(a);case "boolean":return a?1:0;case "object":if(a)if(Array.isArray(a)){if(z(a,void 0,0))return}else if(null!=a&&a instanceof Uint8Array){let b="",c=
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 61 3a 7b 76 61 72 20 61 3d 76 6f 69 64 20 30 3b 6e 75 6c 6c 3d 3d 61 26 26 28 61 3d 72 61 29 3b 72 61 3d 76 6f 69 64 20 30 3b 69 66 28 6e 75 6c 6c 3d 3d 61 29 7b 76 61 72 20 62 3d 39 36 3b 61 3d 5b 5d 7d 65 6c 73 65 7b 69 66 28 21 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 6e 61 72 72 22 29 3b 62 3d 61 5b 79 5d 7c 30 3b 69 66 28 62 26 32 30 34 38 29 74 68 72 6f 77 20 45 72 72 6f 72 28 22 66 61 72 72 22 29 3b 69 66 28 62 26 36 34 29 62 72 65 61 6b 20 61 3b 76 61 72 20 63 3d 61 3b 62 7c 3d 36 34 3b 76 61 72 20 64 3d 63 2e 6c 65 6e 67 74 68 3b 69 66 28 64 26 26 28 2d 2d 64 2c 6d 61 28 63 5b 64 5d 29 29 29 7b 62 7c 3d 32 35 36 3b 63 3d 64 2d 28 2b 21 21 28 62 26 35 31 32 29 Data Ascii: onstructor(){a:{var a=void 0;null==a&&(a=ra);ra=void 0;if(null==a){var b=96;a=[]}else{if(!Array.isArray(a))throw Error("narr");b=a[y]\|0;if(b&2048)throw Error("farr");if(b&64)break a;var c=a;b\|=64;var d=c.length;if(d&&(--d,ma(c[d]))){b\|=256;c=d-(+!!(b&512)
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 68 2d 37 29 3f 61 2e 73 75 62 73 74 72 69 6e 67 28 30 2c 61 2e 6c 65 6e 67 74 68 2d 37 29 2b 62 2b 22 26 61 64 75 72 6c 3d 22 3a 61 2b 62 3b 66 75 6e 63 74 69 6f 6e 20 49 28 61 3d 77 69 6e 64 6f 77 29 7b 72 65 74 75 72 6e 20 61 7d 3b 6c 65 74 20 4a 3d 71 2e 64 69 63 6e 66 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 4d 61 28 61 29 7b 6c 65 74 20 62 3d 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 3d 61 28 29 2c 62 3d 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4b 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 26 26 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 Data Ascii: h-7)?a.substring(0,a.length-7)+b+"&adurl=":a+b;function I(a=window){return a};let J=q.dicnf\|\|{};function Ma(a){let b=!1,c;return function(){b\|\|(c=a(),b=!0);return c}};function K(a,b,c){a.addEventListener&&a.addEventListener(b,c,!1)}function Na(a,b,c){a.re
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 53 74 72 69 6e 67 28 61 29 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 4d 28 61 2c 62 2c 63 3d 6e 75 6c 6c 2c 64 3d 21 31 2c 67 3d 21 31 29 7b 59 61 28 61 2c 62 2c 63 2c 21 31 2c 64 2c 67 29 7d 66 75 6e 63 74 69 6f 6e 20 59 61 28 61 2c 62 2c 63 2c 64 2c 67 2c 65 3d 21 31 29 7b 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 7c 7c 28 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 71 75 65 73 74 73 3d 5b 5d 29 3b 63 6f 6e 73 74 20 66 3d 58 61 28 22 49 4d 47 22 2c 61 2e 64 6f 63 75 6d 65 6e 74 29 3b 69 66 28 63 7c 7c 67 29 7b 63 6f 6e 73 74 20 68 3d 6b 3d 3e 7b 63 26 26 63 28 6b 29 3b 69 66 28 67 29 7b 6b 3d 61 2e 67 6f 6f 67 6c 65 5f 69 6d 61 67 65 5f 72 65 Data Ascii: createElement(String(a).toLowerCase())};function M(a,b,c=null,d=!1,g=!1){Ya(a,b,c,!1,d,g)}function Ya(a,b,c,d,g,e=!1){a.google_image_requests\|\|(a.google_image_requests=[]);const f=Xa("IMG",a.document);if(c\|\|g){const h=k=>{c&&c(k);if(g){k=a.google_image_re
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 29 3b 61 3d 61 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6a 63 2d 66 6c 61 67 73 22 29 7c 7c 22 22 3b 74 72 79 7b 63 6f 6e 73 74 20 62 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 61 29 5b 30 5d 3b 61 3d 22 22 3b 66 6f 72 28 6c 65 74 20 63 3d 30 3b 63 3c 62 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 61 2b 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 62 2e 63 68 61 72 43 6f 64 65 41 74 28 63 29 5e 22 5c 75 30 30 30 33 5c 75 30 30 30 37 5c 75 30 30 30 33 5c 75 30 30 30 37 5c 62 5c 75 30 30 30 34 5c 75 30 30 30 34 5c 75 30 30 30 36 5c 75 30 30 30 35 5c 75 30 30 30 33 22 2e 63 68 61 72 43 6f 64 65 41 74 28 63 25 31 30 29 29 3b 74 68 69 73 2e 67 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 Data Ascii: ent.currentScript);a=a&&a.getAttribute("data-jc-flags")\|\|"";try{const b=JSON.parse(a)[0];a="";for(let c=0;c<b.length;c++)a+=String.fromCharCode(b.charCodeAt(c)^"\u0003\u0007\u0003\u0007\b\u0004\u0004\u0006\u0005\u0003".charCodeAt(c%10));this.g=JSON.parse(
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 61 3d 77 69 6e 64 6f 77 3b 74 68 69 73 2e 69 3d 5b 5d 3b 74 68 69 73 2e 6a 3d 61 7c 7c 71 3b 6c 65 74 20 62 3d 6e 75 6c 6c 3b 61 26 26 28 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 7c 7c 5b 5d 2c 74 68 69 73 2e 69 3d 61 2e 67 6f 6f 67 6c 65 5f 6a 73 5f 72 65 70 6f 72 74 69 6e 67 5f 71 75 65 75 65 2c 62 3d 61 2e 67 6f 6f 67 6c 65 5f 6d 65 61 73 75 72 65 5f 6a 73 5f 74 69 6d 69 6e 67 29 3b 74 68 69 73 2e 67 3d 52 28 29 7c 7c 28 6e 75 6c 6c 21 3d 62 3f 62 3a 31 3e 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 7d 73 74 61 72 74 28 61 2c 62 29 7b 69 66 28 21 74 68 69 73 2e 67 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 61 3d 6e 65 77 20 70 62 28 61 Data Ascii: a=window;this.i=[];this.j=a\|\|q;let b=null;a&&(a.google_js_reporting_queue=a.google_js_reporting_queue\|\|[],this.i=a.google_js_reporting_queue,b=a.google_measure_js_timing);this.g=R()\|\|(null!=b?b:1>Math.random())}start(a,b){if(!this.g)return null;a=new pb(a
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 22 29 3b 69 66 28 6c 29 7b 6c 3d 67 2b 6c 3b 69 66 28 64 3e 3d 6c 2e 6c 65 6e 67 74 68 29 7b 64 2d 3d 6c 2e 6c 65 6e 67 74 68 3b 63 2b 3d 6c 3b 67 3d 61 2e 6a 3b 62 72 65 61 6b 7d 62 3d 6e 75 6c 6c 3d 3d 62 3f 66 3a 62 7d 7d 7d 61 3d 22 22 3b 6e 75 6c 6c 21 3d 62 26 26 28 61 3d 67 2b 22 74 72 6e 3d 22 2b 62 29 3b 72 65 74 75 72 6e 20 63 2b 61 7d 63 6c 61 73 73 20 78 62 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7b 74 68 69 73 2e 6a 3d 22 26 22 3b 74 68 69 73 2e 69 3d 7b 7d 3b 74 68 69 73 2e 6c 3d 30 3b 74 68 69 73 2e 67 3d 5b 5d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 79 62 28 61 29 7b 6c 65 74 20 62 3d 61 2e 74 6f 53 74 72 69 6e 67 28 29 3b 61 2e 6e 61 6d 65 26 26 2d 31 3d 3d 62 2e 69 6e 64 65 78 4f 66 28 61 2e 6e 61 6d 65 29 26 26 28 62 2b 3d 22 3a 20 22 2b Data Ascii: ");if(l){l=g+l;if(d>=l.length){d-=l.length;c+=l;g=a.j;break}b=null==b?f:b}}}a="";null!=b&&(a=g+"trn="+b);return c+a}class xb{constructor(){this.j="&";this.i={};this.l=0;this.g=[]}};function yb(a){let b=a.toString();a.name&&-1==b.indexOf(a.name)&&(b+=": "+
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 21 30 3b 62 72 65 61 6b 20 62 7d 63 61 74 63 68 28 42 29 7b 7d 64 3d 21 31 7d 76 61 72 20 6e 3d 64 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 7b 6e 3d 21 31 3b 62 72 65 61 6b 20 61 7d 6e 3d 76 6f 69 64 20 30 7d 6e 3f 28 5a 3d 6c 2e 6c 6f 63 61 74 69 6f 6e 2e 68 72 65 66 2c 68 3d 6c 2e 64 6f 63 75 6d 65 6e 74 26 26 6c 2e 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 7c 7c 6e 75 6c 6c 29 3a 28 5a 3d 68 2c 68 3d 6e 75 6c 6c 29 3b 6b 2e 70 75 73 68 28 6e 65 77 20 6d 62 28 5a 7c 7c 22 22 29 29 3b 74 72 79 7b 62 3d 6c 2e 70 61 72 65 6e 74 7d 63 61 74 63 68 28 42 29 7b 62 3d 6e 75 6c 6c 7d 7d 77 68 69 6c 65 28 62 26 26 6c 21 3d 62 29 3b 66 6f 72 28 6c 65 74 20 42 3d 30 2c 24 61 3d 6b 2e 6c 65 6e 67 74 68 2d 31 3b 42 3c 3d 24 61 3b 2b 2b 42 29 6b 5b 42 5d 2e Data Ascii: !0;break b}catch(B){}d=!1}var n=d;break a}catch{n=!1;break a}n=void 0}n?(Z=l.location.href,h=l.document&&l.document.referrer\|\|null):(Z=h,h=null);k.push(new mb(Z\|\|""));try{b=l.parent}catch(B){b=null}}while(b&&l!=b);for(let B=0,$a=k.length-1;B<=$a;++B)k[B].

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.18	49747	216.58.206.66	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:06 UTC	2209	OUT	GET /pagead/ads?client=ca-pub-9678335887055925&output=html&adk=1812271804&adf=3025194257&abgtt=3&lmt=1716814864&plat=2%3A16777216%2C3%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=135x714_r&format=0x0&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&pra=7&wgl=1&easpi=0&aihb=0&asro=0&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814863478&bpp=2&bdt=4830&idt=648&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=970x280%2C970x100&nras=1&correlator=2846887072687&frm=20&pv=1&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=58&eid= [TRUNCATED] Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiWocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:06 UTC	788	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Observe-Browsing-Topics: ?1 Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:01:06 GMT Server: cafe Cache-Control: private X-XSS-Protection: 0 Set-Cookie: test_cookie=CheckForPermission; expires=Mon, 27-May-2024 13:16:06 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Expires: Mon, 27 May 2024 13:01:06 GMT Connection: close Transfer-Encoding: chunked
2024-05-27 13:01:06 UTC	602	IN	Data Raw: 38 30 30 30 0d 0a 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 20 3d 20 5b 5d 3b 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 73 72 61 5f 6c 61 74 65 72 5f 62 6c 6f 63 6b 73 2e 70 75 73 68 28 7b 63 72 65 61 74 69 76 65 3a 27 5c 78 33 63 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 5c 78 33 65 5c 78 33 63 68 74 6d 6c 20 5c 78 33 65 5c 78 33 63 68 65 61 64 5c 78 33 65 5c 78 33 63 73 74 79 6c 65 5c 78 33 65 2a 20 7b 6d 61 72 67 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 7d 62 6f 64 79 20 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 61 28 35 32 2c 20 35 38 2c 20 36 35 2c 20 30 2e 36 30 30 30 30 30 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c Data Ascii: 8000<script>window.sra_later_blocks = [];</script><script>window.sra_later_blocks.push({creative:'\x3c!doctype html\x3e\x3chtml \x3e\x3chead\x3e\x3cstyle\x3e* {margin: 0;padding: 0;outline: none;}body {background: rgba(52, 58, 65, 0.600000);backdrop-fil
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 66 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 70 61 64 64 69 6e 67 3a 20 30 20 36 70 78 20 31 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 38 70 78 20 31 32 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 31 35 29 2c 20 30 70 78 20 34 70 78 20 34 70 78 20 72 67 62 61 28 36 30 2c 20 36 34 2c 20 36 37 2c 20 30 2e 33 29 3b 7d 68 74 6d 6c 20 7b 68 65 69 67 68 74 3a 20 31 30 30 25 3b 7d 2e 74 6f 70 72 6f 77 20 7b 77 69 64 74 68 3a 20 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 68 65 69 67 68 74 3a 20 32 34 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 7d 2e 62 74 6e 20 7b 64 69 73 70 6c 61 79 3a 20 74 61 62 6c Data Ascii: f;border-radius: 6px;padding: 0 6px 1px;position: relative;box-shadow: 0px 8px 12px rgba(60, 64, 67, 0.15), 0px 4px 4px rgba(60, 64, 67, 0.3);}html {height: 100%;}.toprow {width: 100%;display: table;height: 24px;background-color: #fff;}.btn {display: tabl
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 61 64 5c 78 33 65 5c 78 33 63 62 6f 64 79 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 70 6f 73 69 74 69 6f 6e 5f 62 6f 78 5c 78 32 32 20 64 61 74 61 2d 6d 61 67 69 63 77 6f 72 64 5c 78 33 64 5c 78 32 32 30 34 33 66 31 30 34 62 2d 30 36 34 62 2d 34 38 65 66 2d 38 39 39 38 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 63 61 72 64 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 74 6f 70 72 6f 77 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 69 64 5c 78 33 64 5c 78 32 32 64 69 73 6d 69 73 73 2d 62 75 74 74 6f 6e 5c 78 32 32 20 63 6c 61 73 73 5c 78 33 64 5c 78 32 32 62 74 6e 20 73 6b 69 70 5c 78 32 32 5c 78 33 65 5c 78 33 63 64 69 76 20 73 74 79 6c 65 5c 78 Data Ascii: ad\x3e\x3cbody\x3e\x3cdiv id\x3d\x22ad_position_box\x22 data-magicword\x3d\x22043f104b-064b-48ef-8998\x22\x3e\x3cdiv id\x3d\x22card\x22\x3e\x3cdiv class\x3d\x22toprow\x22\x3e\x3cdiv id\x3d\x22dismiss-button\x22 class\x3d\x22btn skip\x22\x3e\x3cdiv style\x
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 72 74 69 73 65 6d 65 6e 74 5c 78 32 32 20 69 64 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 6e 61 6d 65 5c 78 33 64 5c 78 32 32 61 64 5f 69 66 72 61 6d 65 5c 78 32 32 20 73 63 72 6f 6c 6c 69 6e 67 5c 78 33 64 5c 78 32 32 6e 6f 5c 78 32 32 20 73 72 63 5c 78 33 64 5c 78 32 32 61 62 6f 75 74 3a 62 6c 61 6e 6b 5c 78 32 32 66 72 61 6d 65 62 6f 72 64 65 72 5c 78 33 64 5c 78 32 32 30 5c 78 32 32 77 69 64 74 68 5c 78 33 64 5c 78 32 32 31 32 31 35 70 78 5c 78 32 32 20 68 65 69 67 68 74 5c 78 33 64 5c 78 32 32 38 32 35 70 78 5c 78 32 32 73 74 79 6c 65 5c 78 33 64 5c 78 32 32 62 6f 72 64 65 72 3a 20 30 70 78 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 20 77 69 64 74 68 3a 20 31 32 31 35 70 78 3b 20 68 65 69 67 68 Data Ascii: rtisement\x22 id\x3d\x22ad_iframe\x22 name\x3d\x22ad_iframe\x22 scrolling\x3d\x22no\x22 src\x3d\x22about:blank\x22frameborder\x3d\x220\x22width\x3d\x221215px\x22 height\x3d\x22825px\x22style\x3d\x22border: 0px; vertical-align: bottom; width: 1215px; heigh
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 5c 78 33 64 71 2c 64 5c 5c 78 33 64 30 3b 64 5c 5c 78 33 63 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 69 66 28 63 5c 5c 78 33 64 63 5b 62 5b 64 5d 5d 2c 6e 75 6c 6c 5c 5c 78 33 64 5c 5c 78 33 64 63 29 7b 62 5c 5c 78 33 64 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 7d 62 5c 5c 78 33 64 63 7d 61 5c 5c 78 33 64 62 5c 5c 78 32 36 5c 5c 78 32 36 62 5b 61 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 5c 5c 78 33 64 61 3f 61 3a 21 31 7d 3b 76 61 72 20 62 61 5c 5c 78 33 64 61 61 28 36 31 30 34 30 31 33 30 31 29 2c 63 61 5c 5c 78 33 64 61 61 28 31 38 38 35 38 38 37 33 36 29 3b 76 61 72 20 74 3b 63 6f 6e 73 74 20 64 61 5c 5c 78 33 64 71 2e 6e 61 76 69 67 61 74 6f 72 3b 74 5c 5c 78 33 64 64 61 3f 64 61 2e 75 73 65 72 41 67 65 6e 74 44 61 74 61 7c 7c 6e 75 6c 6c 3a 6e 75 6c 6c 3b Data Ascii: \x3dq,d\\x3d0;d\\x3cb.length;d++)if(c\\x3dc[b[d]],null\\x3d\\x3dc){b\\x3dnull;break a}b\\x3dc}a\\x3db\\x26\\x26b[a];return null!\\x3da?a:!1};var ba\\x3daa(610401301),ca\\x3daa(188588736);var t;const da\\x3dq.navigator;t\\x3dda?da.userAgentData\|\|null:null;
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 69 66 28 64 5c 5c 78 32 36 31 29 72 65 74 75 72 6e 21 30 3b 69 66 28 21 28 62 5c 5c 78 32 36 5c 5c 78 32 36 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 62 29 3f 62 2e 69 6e 63 6c 75 64 65 73 28 63 29 3a 62 2e 68 61 73 28 63 29 29 29 29 72 65 74 75 72 6e 21 31 3b 61 5b 79 5d 5c 5c 78 33 64 64 7c 31 3b 72 65 74 75 72 6e 21 30 7d 63 6c 61 73 73 20 6f 61 7b 7d 63 6c 61 73 73 20 70 61 7b 7d 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 6f 61 29 3b 4f 62 6a 65 63 74 2e 66 72 65 65 7a 65 28 6e 65 77 20 70 61 29 3b 66 75 6e 63 74 69 6f 6e 20 71 61 28 61 29 7b 69 66 28 5c 5c 78 32 32 62 6f 6f 6c 65 61 6e 5c 5c 78 32 32 21 5c 5c 78 33 64 5c 5c 78 33 64 74 79 70 65 6f 66 20 61 29 7b 76 61 72 20 62 5c 5c 78 33 64 74 79 70 65 6f 66 20 61 3b 74 68 72 6f 77 20 Data Ascii: if(d\\x261)return!0;if(!(b\\x26\\x26(Array.isArray(b)?b.includes(c):b.has(c))))return!1;a[y]\\x3dd\|1;return!0}class oa{}class pa{}Object.freeze(new oa);Object.freeze(new pa);function qa(a){if(\\x22boolean\\x22!\\x3d\\x3dtypeof a){var b\\x3dtypeof a;throw
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 4a 53 4f 4e 28 29 3a 74 61 28 61 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 44 28 61 2c 62 2c 63 29 7b 63 6f 6e 73 74 20 64 5c 5c 78 33 64 61 2e 6d 3b 6c 65 74 20 67 5c 5c 78 33 64 64 5b 79 5d 3b 69 66 28 67 5c 5c 78 32 36 32 29 74 68 72 6f 77 20 45 72 72 6f 72 28 29 3b 41 61 28 64 2c 67 2c 62 2c 63 29 3b 72 65 74 75 72 6e 20 61 7d 66 75 6e 63 74 69 6f 6e 20 41 61 28 61 2c 62 2c 63 2c 64 29 7b 76 61 72 20 67 5c 5c 78 33 64 62 5c 5c 78 33 65 5c 5c 78 33 65 31 34 5c 5c 78 32 36 31 30 32 33 3b 67 5c 5c 78 33 64 30 5c 5c 78 33 64 5c 5c 78 33 64 5c 5c 78 33 64 67 3f 35 33 36 38 37 30 39 31 32 3a 67 3b 69 66 28 63 5c 5c 78 33 65 5c 5c 78 33 64 67 29 7b 6c 65 74 20 65 2c 66 5c 5c 78 33 64 62 3b 69 66 28 62 5c 5c 78 32 36 32 35 36 29 65 5c 5c 78 33 64 61 5b 61 2e 6c 65 Data Ascii: JSON():ta(a)};function D(a,b,c){const d\\x3da.m;let g\\x3dd[y];if(g\\x262)throw Error();Aa(d,g,b,c);return a}function Aa(a,b,c,d){var g\\x3db\\x3e\\x3e14\\x261023;g\\x3d0\\x3d\\x3d\\x3dg?536870912:g;if(c\\x3e\\x3dg){let e,f\\x3db;if(b\\x26256)e\\x3da[a.le
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 20 43 61 28 74 68 69 73 2c 74 68 69 73 2e 6d 2c 21 31 29 2e 74 6f 53 74 72 69 6e 67 28 29 7d 3b 20 66 75 6e 63 74 69 6f 6e 20 43 61 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 5c 5c 78 33 64 63 61 3f 76 6f 69 64 20 30 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 43 3b 63 6f 6e 73 74 20 67 5c 5c 78 33 64 28 63 3f 61 2e 6d 3a 62 29 5b 79 5d 3b 61 5c 5c 78 33 64 62 2e 6c 65 6e 67 74 68 3b 69 66 28 21 61 29 72 65 74 75 72 6e 20 62 3b 6c 65 74 20 65 2c 66 3b 69 66 28 6d 61 28 63 5c 5c 78 33 64 62 5b 61 2d 31 5d 29 29 7b 61 3a 7b 76 61 72 20 68 5c 5c 78 33 64 63 3b 6c 65 74 20 6e 5c 5c 78 33 64 7b 7d 2c 70 5c 5c 78 33 64 21 31 3b 66 6f 72 28 76 61 72 20 6b 20 69 6e 20 68 29 7b 6c 65 74 20 6d 5c 5c 78 33 64 68 5b 6b 5d 3b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 Data Ascii: Ca(this,this.m,!1).toString()}; function Ca(a,b,c){var d\\x3dca?void 0:a.constructor.C;const g\\x3d(c?a.m:b)[y];a\\x3db.length;if(!a)return b;let e,f;if(ma(c\\x3db[a-1])){a:{var h\\x3dc;let n\\x3d{},p\\x3d!1;for(var k in h){let m\\x3dh[k];if(Array.isArra
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 69 63 6e 66 7c 7c 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 4d 61 28 61 29 7b 6c 65 74 20 62 5c 5c 78 33 64 21 31 2c 63 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 62 7c 7c 28 63 5c 5c 78 33 64 61 28 29 2c 62 5c 5c 78 33 64 21 30 29 3b 72 65 74 75 72 6e 20 63 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 4b 28 61 2c 62 2c 63 29 7b 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 5c 5c 78 32 36 5c 5c 78 32 36 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 66 75 6e 63 74 69 6f 6e 20 4e 61 28 61 2c 62 2c 63 29 7b 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 5c 5c 78 32 36 5c 5c 78 32 36 61 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 62 2c 63 2c 21 31 29 7d 3b 76 61 72 20 4f 61 5c 5c 78 Data Ascii: icnf\|\|{};function Ma(a){let b\\x3d!1,c;return function(){b\|\|(c\\x3da(),b\\x3d!0);return c}};function K(a,b,c){a.addEventListener\\x26\\x26a.addEventListener(b,c,!1)}function Na(a,b,c){a.removeEventListener\\x26\\x26a.removeEventListener(b,c,!1)};var Oa\\x
2024-05-27 13:01:06 UTC	1390	IN	Data Raw: 6e 74 65 72 61 63 74 69 76 65 5c 5c 78 32 32 5c 5c 78 33 64 5c 5c 78 33 64 5c 5c 78 33 64 61 2e 72 65 61 64 79 53 74 61 74 65 3f 28 4c 2e 70 75 73 68 28 62 29 2c 31 5c 5c 78 33 64 5c 5c 78 33 64 4c 2e 6c 65 6e 67 74 68 5c 5c 78 32 36 5c 5c 78 32 36 28 77 69 6e 64 6f 77 2e 50 72 6f 6d 69 73 65 3f 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 29 2e 74 68 65 6e 28 56 61 29 3a 77 69 6e 64 6f 77 2e 73 65 74 49 6d 6d 65 64 69 61 74 65 3f 73 65 74 49 6d 6d 65 64 69 61 74 65 28 56 61 29 3a 73 65 74 54 69 6d 65 6f 75 74 28 56 61 2c 30 29 29 29 3a 61 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 5c 5c 78 32 32 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 5c 5c 78 32 32 2c 62 29 7d 3b 66 75 6e 63 74 69 6f 6e 20 58 61 28 61 2c 62 5c 5c 78 33 64 64 6f 63 Data Ascii: nteractive\\x22\\x3d\\x3d\\x3da.readyState?(L.push(b),1\\x3d\\x3dL.length\\x26\\x26(window.Promise?Promise.resolve().then(Va):window.setImmediate?setImmediate(Va):setTimeout(Va,0))):a.addEventListener(\\x22DOMContentLoaded\\x22,b)};function Xa(a,b\\x3ddoc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.18	49745	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:06 UTC	892	OUT	GET /sync_cookie_image_start?redirect_domain=mc.yandex.com&token=10382.WG-FzNqwqkx2taXpWgttA3WC1y76u0R2v_zpQUjg-Luo3xav9R-_WjQ70P7sc7XR.24HwDyiQ52sZFPbI9wAuM7dAMfs%2C HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; yandexuid=5250530921716814863; yashr=9089241241716814863
2024-05-27 13:01:06 UTC	673	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Mon, 27 May 2024 13:01:06 GMT Location: https://mc.yandex.com/sync_cookie_image_decide?token=10382.5cq1dBE50Kkuy_ARErnvu9SKCgJTJxFW2cpOJu9Sdq3gGgXRMKvorLoop8NRfDk3GMhryxP_ppLhfOrWk4RceX3RtDx_xjsTIYw3gTJPHtJoj1lvKzIrRPbt-iAw-k50H0zvA__wZp2KUy6xvE_BhMBtOiAkkuIB91VBkYaqLXnSy8MedR0zL-5PANJFdJU8agVa0XYp53ptHQ-1tJ-XuR7Gvs6wvT905mfTiMdU57E%2C.i5qyiL9n8tsRGycvaZLcp45yue8%2C Set-Cookie: sync_cookie_csrf=3835061975fake; Expires=Mon, 27-May-2024 13:11:06 GMT; Domain=.mc.yandex.ru; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2024-05-27 13:01:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.18	49748	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:06 UTC	2274	OUT	GET /watch/33590114/1?wmode=7&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.149%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.149%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.149%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1350%3Acn%3A1%3Adp%3A0%3Als%3A1430974270378%3Ahid%3A880766209%3Az%3A-240%3Ai%3A20240527090102%3Aet%3A1716814863%3Ac%3A1%3Arn%3A553862080%3Arqn%3A1%3Au%3A1716814863853134129%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A4793%3Awv%3A2%3Ads%3A0%2C1736%2C311%2C108%2C26%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1716814856326%3Arqnl%3A1%3Ast%3A1716814864%3At%3ATransFiles%20-%20free%20file%20sharing%20service%20without%20registration%20-%20Page%20to%20download%20the%20upload%2 [TRUNCATED] Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; i=ORFQQFJIcSlatNSImRdK4U1nEFBzq8Pwr1CMCVt1P6JI8w6q85nchK/TQhsgVxLkUVhR+Oh0oGqaJFjFmPOXsqpcrHc=; yandexuid=6315998231716814865; yuidss=6315998231716814865; ymex=1748350865.yrts.1716814865#1748350865.yrtsi.1716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi
2024-05-27 13:01:06 UTC	812	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 467 Content-Type: application/json; charset=utf-8 Date: Mon, 27 May 2024 13:01:06 GMT Expires: Mon, 27-May-2024 13:01:06 GMT Last-Modified: Mon, 27-May-2024 13:01:06 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-05-27 13:01:06 UTC	467	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 31 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 31 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 38 2d 32 36 20 32 31 3a 32 33 3a 34 33 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 75 72 6c 73 22 3a 22 72 65 67 65 78 70 3a 2e 2a 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 41 52 71 35 6f 55 7a 6b 79 6e 77 70 56 46 46 6c 65 63 2b 47 53 66 47 6f 55 49 30 63 6b 65 74 58 32 38 4f 6a 79 52 6e 67 4d 6c 65 75 73 55 Data Ascii: {"settings":{"auto_goals":1,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"1","webvisor":{"arch_type":"none","date":"2022-08-26 21:23:43","forms":1,"recp":"1.00000","urls":"regexp:.*"},"sbp": {"a":"ARq5oUzkynwpVFFlec+GSfGoUI0cketX28OjyRngMleusU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.18	49750	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:06 UTC	520	OUT	GET /images/loader.gif HTTP/1.1 Host: transfiles.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5; _ym_uid=1716814863853134129; _ym_d=1716814863; _ga=GA1.2.625688542.1716814864; _gid=GA1.2.919659162.1716814864; _gat=1
2024-05-27 13:01:06 UTC	249	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:25 GMT ETag: "c7d-5c07ee053c570" Accept-Ranges: bytes Content-Length: 3197 Connection: close Content-Type: image/gif
2024-05-27 13:01:06 UTC	3197	IN	Data Raw: 47 49 46 38 39 61 20 00 20 00 f3 00 00 ff ff ff c6 c6 c6 84 84 84 b6 b6 b6 9a 9a 9a 37 37 37 57 57 57 d8 d8 d8 e4 e4 e4 bc bc bc 1f 1f 1f 05 05 05 00 00 00 00 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 fe 1a 43 72 65 61 74 65 64 20 77 69 74 68 20 61 6a 61 78 6c 6f 61 64 2e 69 6e 66 6f 00 21 f9 04 09 0a 00 00 00 2c 00 00 00 00 20 00 20 00 40 04 e6 10 c8 49 29 59 a4 ea 3a 4a c9 93 a1 28 82 86 0c 13 92 0c ec 21 09 70 0c 6f 34 c0 de 43 82 48 e7 e0 4e 81 96 8d 25 b9 ed 6a 95 91 02 25 59 38 27 2b 1f 72 42 f0 30 a7 80 1f f6 20 c4 46 73 c7 5a 34 7c a3 04 af d3 41 89 e2 5c 98 89 d8 49 61 b4 6e 17 59 61 9a c1 e3 31 68 91 38 3a 71 83 43 81 79 84 15 7f 1a 67 2c 09 53 5c 29 5f 8a 15 51 3f 65 12 95 84 08 8a 2b 8e 88 53 0a 0b 0a Data Ascii: GIF89a 777WWW!NETSCAPE2.0!Created with ajaxload.info!, @I)Y:J(!po4CHN%j%Y8'+rB0 FsZ4\|A\IanYa1h8:qCyg,S\)_Q?e+S

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.18	49753	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:06 UTC	514	OUT	GET /getFilelist HTTP/1.1 Host: transfiles.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5; _ym_uid=1716814863853134129; _ym_d=1716814863; _ga=GA1.2.625688542.1716814864; _gid=GA1.2.919659162.1716814864; _gat=1
2024-05-27 13:01:06 UTC	276	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:06 GMT Server: Apache/2.4.41 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Content-Length: 0 Connection: close Content-Type: text/html; charset=UTF-8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.18	49749	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:06 UTC	588	OUT	GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:06 UTC	1312	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:06 GMT ETag: "66544f4c-2b" Expires: Mon, 27 May 2024 14:01:06 GMT Last-Modified: Mon, 27 May 2024 09:15:56 GMT Set-Cookie: _yasc=Tzpa/fiRug3dfL0sl/CiQi6y0t3Hc8Hq8FBidLcqVDWByNcVtlRZEtIjMDcYtk+1eg==; domain=.yandex.com; path=/; expires=Thu, 25 May 2034 13:01:06 GMT; secure Set-Cookie: i=E8hbGjy9F06yRkF6KIk+v/s06ZPrxPdqEa8IDocIGnRIZqQQfznGQcOEYd2lPEs1eBQOAnDRM5qZt6sx6pZTv3L8fBU=; Expires=Wed, 27-May-2026 13:01:06 GMT; Domain=.yandex.com; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=2608371041716814866; Expires=Wed, 27-May-2026 13:01:06 GMT; Domain=.yandex.com; Path=/; Secure; SameSite=None Set-Cookie: yashr=9366239991716814866; Path=/; Domain=.yandex.com; Expires=Tue, 27 May 2025 13:01:06 GMT; SameSite=None; Secure; HttpOnly Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2024-05-27 13:01:06 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.18	49752	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:06 UTC	783	OUT	GET /images/btn_ok_passive.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/css/common.css?rnd=11 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5; _ym_uid=1716814863853134129; _ym_d=1716814863; _ga=GA1.2.625688542.1716814864; _gid=GA1.2.919659162.1716814864; _gat=1
2024-05-27 13:01:06 UTC	247	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:06 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:24 GMT ETag: "fb-5c07ee046c56d" Accept-Ranges: bytes Content-Length: 251 Connection: close Content-Type: image/png
2024-05-27 13:01:06 UTC	251	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0f 08 03 00 00 00 0c 08 65 78 00 00 00 33 50 4c 54 45 00 00 00 af bf 70 af bf 70 aa bf 75 ab bb 74 ab bd 72 aa bd 73 aa bd 72 ab bc 73 ab bc 73 aa bd 72 aa bc 73 aa bd 72 aa bd 72 ab bd 73 ab bd 72 ab bd 73 a7 da d2 2f 00 00 00 10 74 52 4e 53 00 10 20 30 40 80 90 9f a0 bf c0 cf d0 df e0 ef cb c4 cc e0 00 00 00 67 49 44 41 54 08 1d 05 c1 01 62 82 30 00 00 b1 eb a8 28 a5 62 fe ff da 25 55 cd f7 f5 bd de b3 aa 1a 17 e0 1a 55 e3 06 70 8f 6a 01 e0 aa 09 f0 1c 9b d9 07 60 b6 39 5b 80 b3 17 56 0f f6 b6 3b e0 69 e1 6f ec a3 0d ab 0f ee 51 2f 70 36 e1 1e 07 30 6b c1 f7 07 56 35 36 80 3d aa c6 02 ac 51 55 cd 73 3d eb 9c 55 ff 62 48 09 48 0d fc 41 8f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRex3PLTEpputrsrssrsrrsrs/tRNS 0@gIDATb0(b%UUpj`9[V;ioQ/p60kV56=QUs=UbHHAIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.18	49756	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:07 UTC	535	OUT	GET /sig.js HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:07 UTC	1316	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:07 GMT Content-Type: text/javascript Content-Length: 5778 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=2ead4dc8-1c29-11ef-adde-becbebe4528c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=2ead4dc8-1c29-11ef-adde-becbebe4528c; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: mid=2ead566a-1c29-11ef-adde-becbebe4528c; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MKA081FEGcnNziTQ6qWZtsCRfNdUHq09bVBcEco4HkTGzu%2F1bsZaI6QuM%2FX83aKXvXeRNnzguu%2B97Z6g6MrCKVhMepWZ7QVlKrrFwkylLYIgXdVm85gwVnAd3h2nwMUPyVs3Gdo%3D"}],"group":"cf-nel","max_age":604800}
2024-05-27 13:01:07 UTC	149	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 31 39 32 65 33 31 37 64 30 32 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 88a631192e317d02-EWRalt-svc: h3=":443"; ma=86400
2024-05-27 13:01:07 UTC	1273	IN	Data Raw: 76 61 72 20 79 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 6d 3d 28 67 2c 68 2c 6b 29 3d 3e 68 20 69 6e 20 67 3f 79 28 67 2c 68 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6b 7d 29 3a 67 5b 68 5d 3d 6b 2c 70 3d 28 67 2c 68 2c 6b 29 3d 3e 28 6d 28 67 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 68 3f 68 2b 22 22 3a 68 2c 6b 29 2c 6b 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 77 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 68 2c 31 30 Data Ascii: var y=Object.defineProperty,m=(g,h,k)=>h in g?y(g,h,{enumerable:!0,configurable:!0,writable:!0,value:k}):g[h]=k,p=(g,h,k)=>(m(g,"symbol"!=typeof h?h+"":h,k),k);(function(){function g(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(w\|\|=setInterval(h,10
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 65 74 77 6f 72 6b 22 2c 61 2e 49 4c 69 6e 6b 73 3d 22 69 6c 69 6e 6b 73 22 2c 61 29 29 28 66 7c 7c 7b 7d 29 2c 75 3d 28 61 3d 3e 28 61 2e 4c 6f 67 69 6e 3d 22 6c 6f 67 69 6e 22 2c 61 2e 49 70 3d 22 69 70 22 2c 61 29 29 28 75 7c 7c 7b 7d 29 3b 66 2e 49 4c 69 6e 6b 73 3b 66 2e 4e 65 74 77 6f 72 6b 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 75 2e 49 70 3b 66 2e 49 4c 69 6e 6b 73 3b 66 2e 4e 65 74 77 6f 72 6b 3b 75 2e 4c 6f 67 69 6e 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 63 6f 6e 73 74 20 47 3d 7b 76 65 72 73 69 6f 6e 3a 31 2c 63 6f 6c 6c 65 63 74 6f 72 73 3a 7b 7d 7d 3b 76 61 72 20 72 3d 28 61 3d 3e 28 61 2e 53 69 67 6e 61 6c 3d 22 73 69 67 22 2c 61 2e 49 6e 69 74 3d 22 69 Data Ascii: etwork",a.ILinks="ilinks",a))(f\|\|{}),u=(a=>(a.Login="login",a.Ip="ip",a))(u\|\|{});f.ILinks;f.Network;f.Static;f.Static;f.Static;u.Ip;f.ILinks;f.Network;u.Login;f.Static;f.Static;f.Static;const G={version:1,collectors:{}};var r=(a=>(a.Signal="sig",a.Init="i
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 2c 62 29 7d 61 73 79 6e 63 20 67 65 74 46 65 74 63 68 55 72 6c 44 75 72 61 74 69 6f 6e 4d 73 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 69 6d 65 6f 75 74 4d 73 3f 3f 35 45 33 2c 64 3d 6e 65 77 20 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 2c 65 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 0a 64 2e 61 62 6f 72 74 28 45 72 72 6f 72 28 60 74 69 6d 65 6f 75 74 20 24 7b 63 7d 60 29 29 2c 63 29 2c 6c 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 61 77 61 69 74 20 66 65 74 63 68 28 61 2c 7b 6d 6f 64 65 3a 22 6e 6f 2d 63 6f 72 73 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 62 3f 22 6f 6d 69 74 22 3a 22 69 6e 63 6c 75 64 65 22 2c 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3a 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 Data Ascii: ,b)}async getFetchUrlDurationMs(a,b){const c=this.config.timeoutMs??5E3,d=new AbortController,e=setTimeout(()=>d.abort(Error(`timeout ${c}`)),c),l=performance.now();await fetch(a,{mode:"no-cors",credentials:b?"omit":"include",referrerPolicy:"no-referrer"
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 79 7b 64 5b 71 5d 3d 61 77 61 69 74 20 43 28 74 68 69 73 2e 63 6f 6c 6c 65 63 74 53 69 6e 67 6c 65 28 6e 2c 63 29 2c 6c 29 7d 63 61 74 63 68 28 7a 29 7b 65 5b 71 5d 3d 60 24 7b 6e 7d 3a 20 24 7b 6e 75 6c 6c 3d 3d 7a 3f 76 6f 69 64 20 30 3a 7a 2e 6d 65 73 73 61 67 65 7d 60 7d 7d 29 29 3b 74 68 69 73 2e 72 65 70 6f 72 74 28 64 2c 65 29 7d 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 32 33 34 5e 78 28 22 32 31 37 22 2c 32 33 34 29 3b 63 6f 6e 73 74 20 62 3d 30 21 3d 3d 61 3b 6c 65 74 20 63 3d 22 53 42 46 51 58 46 39 66 56 6c 42 48 58 45 46 41 45 51 6c 49 45 56 35 63 52 6b 42 57 45 51 6c 49 45 56 4a 51 52 31 70 46 56 68 45 4a 56 56 4a 66 51 46 59 66 45 56 5a 46 56 6c 31 48 59 31 4a 42 55 6c 35 41 45 51 6c 49 45 56 42 66 57 6c 42 59 45 51 6c 49 45 Data Ascii: y{d[q]=await C(this.collectSingle(n,c),l)}catch(z){e[q]=`${n}: ${null==z?void 0:z.message}`}}));this.report(d,e)}}(function(){var a=234^x("217",234);const b=0!==a;let c="SBFQXF9fVlBHXEFAEQlIEV5cRkBWEQlIEVJQR1pFVhEJVVJfQFYfEVZFVl1HY1JBUl5AEQlIEVBfWlBYEQlIE
2024-05-27 13:01:07 UTC	398	IN	Data Raw: 52 56 30 46 61 52 56 5a 42 45 30 39 50 45 30 5a 64 56 31 5a 56 57 6c 31 57 56 78 46 4f 54 68 38 52 52 30 70 44 56 68 45 4a 45 55 42 48 55 6b 64 61 55 42 46 4f 54 68 38 52 52 56 5a 42 51 46 70 63 58 52 45 4a 41 6b 34 3d 22 3b 61 3d 28 62 26 26 28 63 3d 41 28 63 2c 61 29 29 2c 78 28 63 2c 47 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 69 66 28 65 2e 61 63 74 69 76 65 29 69 66 28 65 2e 74 79 70 65 3d 3d 3d 0a 66 2e 53 74 61 74 69 63 29 6e 65 77 20 4a 28 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 65 2e 74 79 70 65 3d 3d 3d 66 2e 4e 65 74 77 6f 72 6b 29 6e 65 77 20 49 28 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 65 2e 74 79 70 65 3d 3d 3d 66 Data Ascii: RV0FaRVZBE09PE0ZdV1ZVWl1WVxFOTh8RR0pDVhEJEUBHUkdaUBFOTh8RRVZBQFpcXREJAk4=";a=(b&&(c=A(c,a)),x(c,G,!b));for(const [d,e]of Object.entries(a.collectors))try{if(e.active)if(e.type===f.Static)new J(d,e);else if(e.type===f.Network)new I(d,e);else if(e.type===f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.18	49757	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:07 UTC	616	OUT	GET /ng-assets/creative/assets/polyfills-89a25f2d.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:07 UTC	1289	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:07 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close Expires: Mon, 27 May 2024 13:51:51 GMT Cache-Control: public, max-age=14400 Last-Modified: Wed, 15 May 2024 09:16:46 GMT ETag: W/"cabad8a4033aea2eed4fcfb729319c61" x-goog-generation: 1715764606510687 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 11824 Content-Language: en x-goog-hash: crc32c=82hS9Q== x-goog-hash: md5=yrrYpAM66i7tT8+3KTGcYQ== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: ABPtcPpYIzFzvsD3AjW6mrNQS-8BPR475myE5ddSsNJQctlZQClxz4ERb3wOOWPinvY-8fHlZvc Vary: Accept-Encoding CF-Cache-Status: HIT Age: 60 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MKCI4kiJ61zYeQtV%2BdLSZ4rtxRiQTok5IJ2AieXVfOmBs1ikleB92kOUT9LRiizvo26LmQ0FiDQtOJ8N8OUDPCy81wa9cjCEX5KT8vov2QpepWVKjGjYZIoHASE2hQ5MUd%2BX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a631193a54729b-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 13:01:07 UTC	80	IN	Data Raw: 32 65 33 30 0d 0a 65 78 70 6f 72 74 20 66 75 6e 63 74 69 6f 6e 20 5f 5f 76 69 74 65 5f 6c 65 67 61 63 79 5f 67 75 61 72 64 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 3b 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 Data Ascii: 2e30export function __vite_legacy_guard(){import.meta.url;import("_").catch(()
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 3d 3e 31 29 3b 28 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 29 28 29 2e 6e 65 78 74 28 29 7d 3b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 7b 7d 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 26 26 74 2e 4d 61 74 68 3d 3d 3d 4d 61 74 68 26 26 74 7d 2c 72 3d 6e 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c Data Ascii: =>1);(async function*(){})().next()};var t="undefined"!=typeof globalThis?globalThis:"undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},n=function(t){return t&&t.Math===Math&&t},r=n("object"==typeof global
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 75 72 6e 20 6e 75 6c 6c 3d 3d 74 7d 2c 49 3d 43 2c 6b 3d 54 79 70 65 45 72 72 6f 72 2c 7a 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 49 28 74 29 29 74 68 72 6f 77 20 6e 65 77 20 6b 28 22 43 61 6e 27 74 20 63 61 6c 6c 20 6d 65 74 68 6f 64 20 6f 6e 20 22 2b 74 29 3b 72 65 74 75 72 6e 20 74 7d 2c 4c 3d 4d 2c 4e 3d 7a 2c 44 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 4c 28 4e 28 74 29 29 7d 2c 52 3d 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 26 26 64 6f 63 75 6d 65 6e 74 2e 61 6c 6c 2c 5f 3d 76 6f 69 64 20 30 3d 3d 3d 52 26 26 76 6f 69 64 20 30 21 3d 3d 52 3f 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 7c 7c 74 3d 3d 3d 52 7d 3a 66 75 6e Data Ascii: urn null==t},I=C,k=TypeError,z=function(t){if(I(t))throw new k("Can't call method on "+t);return t},L=M,N=z,D=function(t){return L(N(t))},R="object"==typeof document&&document.all,_=void 0===R&&void 0!==R?function(t){return"function"==typeof t\|\|t===R}:fun
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 79 7b 4f 74 28 77 74 2c 74 2c 7b 76 61 6c 75 65 3a 6e 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 7d 63 61 74 63 68 28 72 29 7b 77 74 5b 74 5d 3d 6e 7d 72 65 74 75 72 6e 20 6e 7d 2c 6a 74 3d 72 2c 50 74 3d 53 74 2c 45 74 3d 22 5f 5f 63 6f 72 65 2d 6a 73 5f 73 68 61 72 65 64 5f 5f 22 2c 54 74 3d 6d 74 2e 65 78 70 6f 72 74 73 3d 6a 74 5b 45 74 5d 7c 7c 50 74 28 45 74 2c 7b 7d 29 3b 28 54 74 2e 76 65 72 73 69 6f 6e 73 7c 7c 28 54 74 2e 76 65 72 73 69 6f 6e 73 3d 5b 5d 29 29 2e 70 75 73 68 28 7b 76 65 72 73 69 6f 6e 3a 22 33 2e 33 37 2e 30 22 2c 6d 6f 64 65 3a 22 67 6c 6f 62 61 6c 22 2c 63 6f 70 79 72 69 67 68 74 3a 22 c2 a9 20 32 30 31 34 2d 32 30 32 34 20 44 65 6e 69 73 20 50 75 73 68 6b 61 72 65 76 20 28 7a 6c Data Ascii: y{Ot(wt,t,{value:n,configurable:!0,writable:!0})}catch(r){wt[t]=n}return n},jt=r,Pt=St,Et="__core-js_shared__",Tt=mt.exports=jt[Et]\|\|Pt(Et,{});(Tt.versions\|\|(Tt.versions=[])).push({version:"3.37.0",mode:"global",copyright:" 2014-2024 Denis Pushkarev (zl
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 43 61 6e 27 74 20 63 6f 6e 76 65 72 74 20 6f 62 6a 65 63 74 20 74 6f 20 70 72 69 6d 69 74 69 76 65 20 76 61 6c 75 65 22 29 7d 72 65 74 75 72 6e 20 76 6f 69 64 20 30 3d 3d 3d 6e 26 26 28 6e 3d 22 6e 75 6d 62 65 72 22 29 2c 74 6e 28 74 2c 6e 29 7d 2c 6f 6e 3d 63 74 2c 75 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 65 6e 28 74 2c 22 73 74 72 69 6e 67 22 29 3b 72 65 74 75 72 6e 20 6f 6e 28 6e 29 3f 6e 3a 6e 2b 22 22 7d 2c 63 6e 3d 55 2c 61 6e 3d 72 2e 64 6f 63 75 6d 65 6e 74 2c 66 6e 3d 63 6e 28 61 6e 29 26 26 63 6e 28 61 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 29 2c 6c 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 66 6e 3f 61 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3a 7b 7d 7d 2c 73 6e 3d 21 69 26 26 21 6f Data Ascii: Can't convert object to primitive value")}return void 0===n&&(n="number"),tn(t,n)},on=ct,un=function(t){var n=en(t,"string");return on(n)?n:n+""},cn=U,an=r.document,fn=cn(an)&&cn(an.createElement),ln=function(t){return fn?an.createElement(t):{}},sn=!i&&!o
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 67 2c 47 6e 3d 69 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 52 6e 2e 66 28 74 2c 6e 2c 5f 6e 28 31 2c 72 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 72 65 74 75 72 6e 20 74 5b 6e 5d 3d 72 2c 74 7d 2c 55 6e 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 57 6e 3d 69 2c 42 6e 3d 4c 74 2c 24 6e 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2c 71 6e 3d 57 6e 26 26 4f 62 6a 65 63 74 2e 67 65 74 4f 77 6e 50 72 6f 70 65 72 74 79 44 65 73 63 72 69 70 74 6f 72 2c 4b 6e 3d 42 6e 28 24 6e 2c 22 6e 61 6d 65 22 29 2c 56 6e 3d 7b 45 58 49 53 54 53 3a 4b 6e 2c 50 52 4f 50 45 52 3a 4b 6e 26 26 22 73 6f 6d 65 74 68 69 6e 67 22 3d 3d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2e 6e 61 6d 65 2c 43 4f 4e 46 49 47 55 52 41 42 4c Data Ascii: g,Gn=i?function(t,n,r){return Rn.f(t,n,_n(1,r))}:function(t,n,r){return t[n]=r,t},Un={exports:{}},Wn=i,Bn=Lt,$n=Function.prototype,qn=Wn&&Object.getOwnPropertyDescriptor,Kn=Bn($n,"name"),Vn={EXISTS:Kn,PROPER:Kn&&"something"===function(){}.name,CONFIGURABL
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 72 3d 77 72 2e 65 6e 66 6f 72 63 65 2c 78 72 3d 77 72 2e 67 65 74 2c 4d 72 3d 53 74 72 69 6e 67 2c 43 72 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 49 72 3d 4f 72 28 22 22 2e 73 6c 69 63 65 29 2c 6b 72 3d 4f 72 28 22 22 2e 72 65 70 6c 61 63 65 29 2c 7a 72 3d 4f 72 28 5b 5d 2e 6a 6f 69 6e 29 2c 4c 72 3d 45 72 26 26 21 53 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 38 21 3d 3d 43 72 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 2c 22 6c 65 6e 67 74 68 22 2c 7b 76 61 6c 75 65 3a 38 7d 29 2e 6c 65 6e 67 74 68 7d 29 29 2c 4e 72 3d 53 74 72 69 6e 67 28 53 74 72 69 6e 67 29 2e 73 70 6c 69 74 28 22 53 74 72 69 6e 67 22 29 2c 44 72 3d 55 6e 2e 65 78 70 6f 72 74 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 72 29 7b 22 53 Data Ascii: r=wr.enforce,xr=wr.get,Mr=String,Cr=Object.defineProperty,Ir=Or("".slice),kr=Or("".replace),zr=Or([].join),Lr=Er&&!Sr((function(){return 8!==Cr((function(){}),"length",{value:8}).length})),Nr=String(String).split("String"),Dr=Un.exports=function(t,n,r){"S
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 3d 6f 5b 63 2b 2b 5d 29 21 3d 75 29 72 65 74 75 72 6e 21 30 7d 65 6c 73 65 20 66 6f 72 28 3b 69 3e 63 3b 63 2b 2b 29 69 66 28 28 74 7c 7c 63 20 69 6e 20 6f 29 26 26 6f 5b 63 5d 3d 3d 3d 72 29 72 65 74 75 72 6e 20 74 7c 7c 63 7c 7c 30 3b 72 65 74 75 72 6e 21 74 26 26 2d 31 7d 7d 2c 69 65 3d 7b 69 6e 63 6c 75 64 65 73 3a 6f 65 28 21 30 29 2c 69 6e 64 65 78 4f 66 3a 6f 65 28 21 31 29 7d 2c 75 65 3d 4c 74 2c 63 65 3d 44 2c 61 65 3d 69 65 2e 69 6e 64 65 78 4f 66 2c 66 65 3d 75 72 2c 6c 65 3d 4f 28 5b 5d 2e 70 75 73 68 29 2c 73 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 29 7b 76 61 72 20 72 2c 65 3d 63 65 28 74 29 2c 6f 3d 30 2c 69 3d 5b 5d 3b 66 6f 72 28 72 20 69 6e 20 65 29 21 75 65 28 66 65 2c 72 29 26 26 75 65 28 65 2c 72 29 26 26 6c 65 28 69 2c 72 29 3b 66 Data Ascii: =o[c++])!=u)return!0}else for(;i>c;c++)if((t\|\|c in o)&&o[c]===r)return t\|\|c\|\|0;return!t&&-1}},ie={includes:oe(!0),indexOf:oe(!1)},ue=Lt,ce=D,ae=ie.indexOf,fe=ur,le=O([].push),se=function(t,n){var r,e=ce(t),o=0,i=[];for(r in e)!ue(fe,r)&&ue(e,r)&&le(i,r);f
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 74 2c 63 2c 69 28 6e 2c 63 29 29 7d 7d 2c 5f 65 3d 49 65 2c 47 65 3d 45 2c 55 65 3d 41 72 72 61 79 2e 69 73 41 72 72 61 79 7c 7c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 22 41 72 72 61 79 22 3d 3d 3d 47 65 28 74 29 7d 2c 57 65 3d 54 79 70 65 45 72 72 6f 72 2c 42 65 3d 45 2c 24 65 3d 4f 2c 71 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 46 75 6e 63 74 69 6f 6e 22 3d 3d 3d 42 65 28 74 29 29 72 65 74 75 72 6e 20 24 65 28 74 29 7d 2c 4b 65 3d 70 74 2c 56 65 3d 75 2c 58 65 3d 71 65 28 71 65 2e 62 69 6e 64 29 2c 59 65 3d 55 65 2c 48 65 3d 74 65 2c 4a 65 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 3e 39 30 30 37 31 39 39 32 35 34 37 34 30 39 39 31 29 74 68 72 6f 77 20 57 65 28 22 4d 61 78 69 6d 75 6d 20 61 6c 6c 6f 77 65 64 20 69 6e Data Ascii: t,c,i(n,c))}},_e=Ie,Ge=E,Ue=Array.isArray\|\|function(t){return"Array"===Ge(t)},We=TypeError,Be=E,$e=O,qe=function(t){if("Function"===Be(t))return $e(t)},Ke=pt,Ve=u,Xe=qe(qe.bind),Ye=Ue,He=te,Je=function(t){if(t>9007199254740991)throw We("Maximum allowed in
2024-05-27 13:01:07 UTC	800	IN	Data Raw: 6d 6f 2e 63 61 6c 6c 29 7c 7c 21 6d 6f 28 4f 62 6a 65 63 74 29 7c 7c 21 6d 6f 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d 21 30 7d 29 29 7c 7c 74 7d 29 29 3f 77 6f 3a 6d 6f 2c 53 6f 3d 55 65 2c 6a 6f 3d 4f 6f 2c 50 6f 3d 55 2c 45 6f 3d 59 74 28 22 73 70 65 63 69 65 73 22 29 2c 54 6f 3d 41 72 72 61 79 2c 41 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3b 72 65 74 75 72 6e 20 53 6f 28 74 29 26 26 28 6e 3d 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 28 6a 6f 28 6e 29 26 26 28 6e 3d 3d 3d 54 6f 7c 7c 53 6f 28 6e 2e 70 72 6f 74 6f 74 79 70 65 29 29 7c 7c 50 6f 28 6e 29 26 26 6e 75 6c 6c 3d 3d 3d 28 6e 3d 6e 5b 45 6f 5d 29 29 26 26 28 6e 3d 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 3d 3d 3d 6e 3f 54 6f 3a 6e 7d 2c 46 6f 3d 74 6f 2c 78 6f 3d 70 74 Data Ascii: mo.call)\|\|!mo(Object)\|\|!mo((function(){t=!0}))\|\|t}))?wo:mo,So=Ue,jo=Oo,Po=U,Eo=Yt("species"),To=Array,Ao=function(t){var n;return So(t)&&(n=t.constructor,(jo(n)&&(n===To\|\|So(n.prototype))\|\|Po(n)&&null===(n=n[Eo]))&&(n=void 0)),void 0===n?To:n},Fo=to,xo=pt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.18	49759	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:07 UTC	585	OUT	GET /ng-assets/creative/assets/index-cb91ca65.css HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:07 UTC	1200	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:07 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close Expires: Mon, 27 May 2024 13:47:23 GMT Cache-Control: public, max-age=14400 Last-Modified: Sun, 26 May 2024 13:46:38 GMT ETag: W/"b54bec465dec46a5f91fb40e972eea06" x-goog-generation: 1716731198122351 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 12941 Content-Language: en x-goog-hash: crc32c=gtmv5g== x-goog-hash: md5=tUvsRl3sRqX5H7QOly7qBg== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type X-GUploader-UploadID: ABPtcPrTB0sQwEfG8v7EzdoXHbA97nQYsqqOxmAYSNj8tsdViVcEIAuHnbwvq-oOuZSs-YUPG-4yUvoFMA Vary: Accept-Encoding CF-Cache-Status: HIT Age: 76 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A2wiPwMPLk07Hz2UIwnWBKQW8Gplta8a1pumQ3NQG6ODxt8OyMe5R1vYTli4kflz4QYXndgoFZRb8Gr58z94s3YqOdy9BDCZiIjmmfE8VMGoj16Agwn2LpKt2qyJkGxcIv%2FS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a631193af1c409-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 13:01:07 UTC	169	IN	Data Raw: 33 32 38 64 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 5f 61 64 76 65 72 74 69 73 65 72 5f 31 71 73 68 30 5f 31 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 7a 2d 69 6e 64 65 78 3a 35 30 31 3b 77 69 64 74 68 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 68 65 69 67 68 74 3a 66 69 74 2d 63 6f 6e 74 65 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e Data Ascii: 328d@charset "UTF-8";._advertiser_1qsh0_1{position:absolute;z-index:501;width:fit-content;height:fit-content;font-size:12px;font-weight:700;background-color:transparen
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 74 7d 2e 5f 61 64 76 65 72 74 69 73 65 72 4e 61 6d 65 5f 31 71 73 68 30 5f 31 31 7b 7a 2d 69 6e 64 65 78 3a 35 30 34 3b 63 6f 6c 6f 72 3a 23 62 39 62 38 62 38 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 5f 63 6c 69 63 6b 61 62 6c 65 5f 31 71 73 68 30 5f 31 37 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 5f 62 6f 74 74 6f 6d 5f 6c 65 66 74 5f 31 72 6d 70 69 5f 31 7b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 30 7d 2e 5f 74 6f 70 5f 6c 65 66 74 5f 31 72 6d 70 69 5f 36 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 7d 2e 5f 62 6f 74 74 6f 6d 5f 72 69 67 68 74 5f 31 72 6d 70 69 5f 31 31 7b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 7d 2e 5f 74 6f 70 5f 72 69 67 68 74 5f 31 72 6d 70 69 5f 31 36 7b 74 6f 70 3a 30 3b 72 69 67 68 74 3a 30 7d 2e 5f Data Ascii: t}._advertiserName_1qsh0_11{z-index:504;color:#b9b8b8;user-select:none}._clickable_1qsh0_17{cursor:pointer}._bottom_left_1rmpi_1{bottom:0;left:0}._top_left_1rmpi_6{top:0;left:0}._bottom_right_1rmpi_11{bottom:0;right:0}._top_right_1rmpi_16{top:0;right:0}._
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 64 6f 77 6e 43 6c 6f 73 65 5f 35 62 34 77 62 5f 39 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 39 65 34 65 34 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 38 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 38 29 3b 70 6f 73 69 74 69 6f 6e 3a 75 6e 73 65 74 7d 2e 5f 63 6c 6f 73 65 4e 65 69 67 68 62 6f 72 5f 31 6b 68 6e 72 5f 31 7b 6f 70 61 63 69 74 79 3a 2e 32 3b 77 69 64 74 68 3a 38 30 70 78 3b 68 65 69 67 68 74 3a 38 30 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 5f 63 6c 6f 73 65 5f 37 35 33 30 66 5f 31 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 Data Ascii: downClose_5b4wb_91{background-color:#fff;border:1px solid #e9e4e4;box-shadow:0 0 8px rgba(0,0,0,.28);position:unset}._closeNeighbor_1khnr_1{opacity:.2;width:80px;height:80px;display:flex;-webkit-tap-highlight-color:transparent}._close_7530f_1{position:abs
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 3a 22 22 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 6c 6f 61 64 5f 31 69 35 38 38 5f 31 7b 30 25 7b 77 69 64 74 68 3a 30 7d 74 6f 7b 77 69 64 74 68 3a 31 30 30 25 7d 7d 2e 5f 76 69 64 65 6f 45 6c 65 6d 65 6e 74 5f 76 37 34 6d 38 5f 31 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 66 69 6c 6c 3b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 77 69 64 74 68 3a 69 6e 68 65 72 69 74 7d 2e 5f 69 63 6f 6e 5f 31 30 6c 34 65 5f 31 7b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 5f 63 6f 6e 74 72 6f 6c 53 6d 6f 6f 74 68 41 70 70 65 61 72 5f 78 32 65 64 61 5f 31 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 66 61 64 65 49 6e 43 6f 6e 74 72 6f 6c 5f 78 32 65 64 61 5f 31 20 2e 36 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 Data Ascii: :""}@keyframes _load_1i588_1{0%{width:0}to{width:100%}}._videoElement_v74m8_1{display:block;object-fit:fill;height:inherit;width:inherit}._icon_10l4e_1{width:100%;height:100%}._controlSmoothAppear_x2eda_1{animation:_fadeInControl_x2eda_1 .6s ease forwards
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 32 70 78 7d 2e 5f 69 6e 70 75 74 5f 6d 76 39 35 36 5f 31 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 35 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 30 20 31 36 70 78 3b 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 31 70 78 3b 62 6f 72 64 65 72 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 36 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 63 61 6c 63 28 32 76 77 20 2b 20 31 76 68 29 3b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 41 72 69 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 63 75 72 73 6f 72 3a Data Ascii: order-radius:12px}._input_mv956_1{background-color:transparent;width:100%;height:50px;padding:0 0 0 16px;border-width:1px;border-style:solid;border-radius:6px;font-size:calc(2vw + 1vh);outline:none;box-shadow:none;font-family:Arial;font-weight:700;cursor:
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 73 6c 69 64 65 44 6f 77 6e 5f 6b 71 64 70 77 5f 33 39 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 76 68 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 2e 5f 72 65 76 65 72 73 65 53 6c 69 64 65 44 6f 77 6e 5f 6b 71 64 70 77 5f 35 31 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 72 65 76 65 72 73 65 53 6c 69 64 65 44 6f 77 6e 5f 6b 71 64 70 77 5f 35 31 20 2e 34 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 72 65 76 65 72 73 65 53 6c 69 64 65 44 6f 77 6e 5f 6b 71 64 70 77 5f 35 31 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f Data Ascii: ease forwards}@keyframes _slideDown_kqdpw_39{0%{transform:translateY(-100vh)}to{transform:translateY(0)}}._reverseSlideDown_kqdpw_51{animation:_reverseSlideDown_kqdpw_51 .4s ease forwards}@keyframes _reverseSlideDown_kqdpw_51{0%{transform:translateY(0)}to
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 6c 64 56 65 72 74 69 63 61 6c 5f 6b 71 64 70 77 5f 31 33 37 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 30 29 20 73 63 61 6c 65 58 28 2e 30 30 35 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 31 29 20 73 63 61 6c 65 58 28 2e 30 30 35 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 31 29 20 73 63 61 6c 65 58 28 31 29 7d 7d 2e 5f 75 6e 66 6f 6c 64 48 6f 72 69 7a 6f 6e 74 61 6c 5f 6b 71 64 70 77 5f 31 35 32 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 75 6e 66 6f 6c 64 48 6f 72 69 7a 6f 6e 74 61 6c 5f 6b 71 64 70 77 5f 31 35 32 20 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 36 35 2c 2e 38 34 2c 2e 34 34 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 75 6e 66 6f 6c 64 48 Data Ascii: ldVertical_kqdpw_137{0%{transform:scaleY(0) scaleX(.005)}50%{transform:scaleY(1) scaleX(.005)}to{transform:scaleY(1) scaleX(1)}}._unfoldHorizontal_kqdpw_152{animation:_unfoldHorizontal_kqdpw_152 1s cubic-bezier(.165,.84,.44,1) forwards}@keyframes _unfoldH
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 64 64 69 6e 67 3a 30 7d 7d 2e 5f 63 61 72 64 42 61 63 6b 67 72 6f 75 6e 64 5f 6b 71 64 70 77 5f 32 33 32 3e 64 69 76 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 5f 73 74 72 65 74 63 68 48 65 69 67 68 74 5f 6b 71 64 70 77 5f 32 33 36 3e 2a 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 66 69 6c 6c 7d 2e 5f 73 74 72 65 74 63 68 57 69 64 74 68 5f 6b 71 64 70 77 5f 32 34 31 3e 2a 7b 77 69 64 74 68 3a 31 30 30 25 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 66 69 6c 6c 7d 2e 5f 66 75 6c 6c 57 69 64 74 68 5f 6b 71 64 70 77 5f 32 34 36 7b 68 65 69 67 68 74 3a 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 5f 66 75 6c 6c 48 65 69 67 68 74 5f 6b 71 64 70 77 5f 32 35 31 7b 77 69 64 74 68 3a 61 75 Data Ascii: dding:0}}._cardBackground_kqdpw_232>div{background-color:transparent}._stretchHeight_kqdpw_236>{height:100%;object-fit:fill}._stretchWidth_kqdpw_241>{width:100%;object-fit:fill}._fullWidth_kqdpw_246{height:auto;width:100%}._fullHeight_kqdpw_251{width:au
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 6d 61 74 69 6f 6e 3a 5f 72 65 76 65 72 73 65 53 6c 69 64 65 44 6f 77 6e 5f 31 79 6f 30 32 5f 35 31 20 2e 34 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 72 65 76 65 72 73 65 53 6c 69 64 65 44 6f 77 6e 5f 31 79 6f 30 32 5f 35 31 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 59 28 2d 31 30 30 76 68 29 7d 7d 2e 5f 73 6c 69 64 65 4c 65 66 74 5f 31 79 6f 30 32 5f 36 33 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 73 6c 69 64 65 4c 65 66 74 5f 31 79 6f 30 32 5f 36 33 20 2e 34 73 20 65 61 73 65 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 73 6c 69 64 65 4c 65 66 74 5f 31 79 6f 30 32 5f 36 33 7b 30 25 7b 74 72 Data Ascii: mation:_reverseSlideDown_1yo02_51 .4s ease forwards}@keyframes _reverseSlideDown_1yo02_51{0%{transform:translateY(0)}to{transform:translateY(-100vh)}}._slideLeft_1yo02_63{animation:_slideLeft_1yo02_63 .4s ease forwards}@keyframes _slideLeft_1yo02_63{0%{tr
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 48 6f 72 69 7a 6f 6e 74 61 6c 5f 31 79 6f 30 32 5f 31 35 32 7b 61 6e 69 6d 61 74 69 6f 6e 3a 5f 75 6e 66 6f 6c 64 48 6f 72 69 7a 6f 6e 74 61 6c 5f 31 79 6f 30 32 5f 31 35 32 20 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 31 36 35 2c 2e 38 34 2c 2e 34 34 2c 31 29 20 66 6f 72 77 61 72 64 73 7d 40 6b 65 79 66 72 61 6d 65 73 20 5f 75 6e 66 6f 6c 64 48 6f 72 69 7a 6f 6e 74 61 6c 5f 31 79 6f 30 32 5f 31 35 32 7b 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2e 30 30 35 29 20 73 63 61 6c 65 58 28 30 29 7d 35 30 25 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 2e 30 30 35 29 20 73 63 61 6c 65 58 28 31 29 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 59 28 31 29 20 73 63 61 6c 65 58 28 31 29 7d 7d 2e 5f 72 65 76 65 72 73 65 Data Ascii: Horizontal_1yo02_152{animation:_unfoldHorizontal_1yo02_152 1s cubic-bezier(.165,.84,.44,1) forwards}@keyframes _unfoldHorizontal_1yo02_152{0%{transform:scaleY(.005) scaleX(0)}50%{transform:scaleY(.005) scaleX(1)}to{transform:scaleY(1) scaleX(1)}}._reverse

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.18	49758	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:07 UTC	612	OUT	GET /ng-assets/creative/assets/index-5ff4bbc8.js HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:07 UTC	1298	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:07 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-goog-generation: 1716731199907835 x-goog-metageneration: 2 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 116880 Content-Language: en x-goog-hash: crc32c=a49ctg== x-goog-hash: md5=1X37h7RlWpu/aU228C0DEw== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace X-GUploader-UploadID: ABPtcPrkF_m4OsvgV5WKB9PZGbeIfAQJoXxOu4DPY8yL0PG2-Ca24mKKYqML41ioH08bZ5LZ7ytmwzyhqw Expires: Mon, 27 May 2024 12:49:35 GMT Cache-Control: public, max-age=14400 Last-Modified: Sun, 26 May 2024 13:46:39 GMT ETag: W/"d57dfb87b4655a9bbf694db6f02d0313" Vary: Accept-Encoding Age: 753 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IOmEPe6YnehAR1mkVNUkLv7xpUMeswrLB5FuQugfouJsKj326MhNdh4VgYi4qN%2F7OFN5PsCodCsoyu5T7B4J9ydyb5cYaF5DExCw6loRepuGcX5PP40nyR7gaqLSIHRp5%2BM9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a6311948847c6c-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 13:01:07 UTC	71	IN	Data Raw: 37 61 39 66 0d 0a 76 61 72 20 6c 73 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3b 76 61 72 20 61 73 3d 28 65 2c 74 2c 6e 29 3d 3e 74 20 69 6e 20 65 3f 6c 73 28 65 2c 74 2c 7b 65 6e 75 6d 65 Data Ascii: 7a9fvar ls=Object.defineProperty;var as=(e,t,n)=>t in e?ls(e,t,{enume
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6e 7d 29 3a 65 5b 74 5d 3d 6e 3b 76 61 72 20 57 3d 28 65 2c 74 2c 6e 29 3d 3e 28 61 73 28 65 2c 74 79 70 65 6f 66 20 74 21 3d 22 73 79 6d 62 6f 6c 22 3f 74 2b 22 22 3a 74 2c 6e 29 2c 6e 29 3b 66 75 6e 63 74 69 6f 6e 20 47 64 28 29 7b 69 6d 70 6f 72 74 2e 6d 65 74 61 2e 75 72 6c 2c 69 6d 70 6f 72 74 28 22 5f 22 29 2e 63 61 74 63 68 28 28 29 3d 3e 31 29 2c 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 2a 28 29 7b 7d 28 29 2e 6e 65 78 74 28 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 2e 72 65 6c 4c 69 73 74 3b 69 66 28 74 26 Data Ascii: rable:!0,configurable:!0,writable:!0,value:n}):e[t]=n;var W=(e,t,n)=>(as(e,typeof t!="symbol"?t+"":t,n),n);function Gd(){import.meta.url,import("_").catch(()=>1),async function*(){}().next()}(function(){const t=document.createElement("link").relList;if(t&
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 65 66 61 75 6c 74 50 72 6f 70 73 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 43 74 28 65 2c 69 2c 72 2c 73 2c 6e 75 6c 6c 29 7d 66 75 6e 63 74 69 6f 6e 20 43 74 28 65 2c 74 2c 6e 2c 72 2c 73 29 7b 76 61 72 20 6f 3d 7b 74 79 70 65 3a 65 2c 70 72 6f 70 73 3a 74 2c 6b 65 79 3a 6e 2c 72 65 66 3a 72 2c 5f 5f 6b 3a 6e 75 6c 6c 2c 5f 5f 3a 6e 75 6c 6c 2c 5f 5f 62 3a 30 2c 5f 5f 65 3a 6e 75 6c 6c 2c 5f 5f 64 3a 76 6f 69 64 20 30 2c 5f 5f 63 3a 6e 75 6c 6c 2c 5f 5f 68 3a 6e 75 6c 6c 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 76 6f 69 64 20 30 2c 5f 5f 76 3a 73 3d 3d 6e 75 6c 6c 3f 2b 2b 4a 72 3a 73 7d 3b 72 65 74 75 72 6e 20 73 3d 3d 6e 75 6c 6c 26 26 24 2e 76 6e 6f 64 65 21 3d 6e 75 6c 6c 26 26 24 2e 76 6e 6f 64 65 28 6f 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 29 7b Data Ascii: efaultProps[o]);return Ct(e,i,r,s,null)}function Ct(e,t,n,r,s){var o={type:e,props:t,key:n,ref:r,__k:null,__:null,__b:0,__e:null,__d:void 0,__c:null,__h:null,constructor:void 0,__v:s==null?++Jr:s};return s==null&&$.vnode!=null&&$.vnode(o),o}function ye(){
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 67 22 7c 7c 74 79 70 65 6f 66 20 66 3d 3d 22 6e 75 6d 62 65 72 22 7c 7c 74 79 70 65 6f 66 20 66 3d 3d 22 62 69 67 69 6e 74 22 3f 43 74 28 6e 75 6c 6c 2c 66 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 66 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 66 29 3f 43 74 28 42 2c 7b 63 68 69 6c 64 72 65 6e 3a 66 7d 2c 6e 75 6c 6c 2c 6e 75 6c 6c 2c 6e 75 6c 6c 29 3a 66 2e 5f 5f 62 3e 30 3f 43 74 28 66 2e 74 79 70 65 2c 66 2e 70 72 6f 70 73 2c 66 2e 6b 65 79 2c 66 2e 72 65 66 3f 66 2e 72 65 66 3a 6e 75 6c 6c 2c 66 2e 5f 5f 76 29 3a 66 29 21 3d 6e 75 6c 6c 29 7b 69 66 28 66 2e 5f 5f 3d 6e 2c 66 2e 5f 5f 62 3d 6e 2e 5f 5f 62 2b 31 2c 28 64 3d 78 5b 63 5d 29 3d 3d 3d 6e 75 6c 6c 7c 7c 64 26 26 66 2e 6b 65 79 3d 3d 64 2e 6b 65 79 26 26 66 2e 74 79 70 65 3d 3d 3d 64 2e 74 79 70 Data Ascii: g"\|\|typeof f=="number"\|\|typeof f=="bigint"?Ct(null,f,null,null,f):Array.isArray(f)?Ct(B,{children:f},null,null,null):f.__b>0?Ct(f.type,f.props,f.key,f.ref?f.ref:null,f.__v):f)!=null){if(f.__=n,f.__b=n.__b+1,(d=x[c])===null\|\|d&&f.key==d.key&&f.type===d.typ
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 69 3d 6f 7d 72 65 74 75 72 6e 20 69 21 3d 3d 76 6f 69 64 20 30 3f 69 3a 73 2e 6e 65 78 74 53 69 62 6c 69 6e 67 7d 66 75 6e 63 74 69 6f 6e 20 72 6f 28 65 29 7b 76 61 72 20 74 2c 6e 2c 72 3b 69 66 28 65 2e 74 79 70 65 3d 3d 6e 75 6c 6c 7c 7c 74 79 70 65 6f 66 20 65 2e 74 79 70 65 3d 3d 22 73 74 72 69 6e 67 22 29 72 65 74 75 72 6e 20 65 2e 5f 5f 65 3b 69 66 28 65 2e 5f 5f 6b 29 7b 66 6f 72 28 74 3d 65 2e 5f 5f 6b 2e 6c 65 6e 67 74 68 2d 31 3b 74 3e 3d 30 3b 74 2d 2d 29 69 66 28 28 6e 3d 65 2e 5f 5f 6b 5b 74 5d 29 26 26 28 72 3d 72 6f 28 6e 29 29 29 72 65 74 75 72 6e 20 72 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 64 73 28 65 2c 74 2c 6e 2c 72 2c 73 29 7b 76 61 72 20 6f 3b 66 6f 72 28 6f 20 69 6e 20 6e 29 6f 3d 3d 3d 22 63 68 69 6c 64 Data Ascii: i=o}return i!==void 0?i:s.nextSibling}function ro(e){var t,n,r;if(e.type==null\|\|typeof e.type=="string")return e.__e;if(e.__k){for(t=e.__k.length-1;t>=0;t--)if((n=e.__k[t])&&(r=ro(n)))return r}return null}function ds(e,t,n,r,s){var o;for(o in n)o==="child
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 2b 21 31 5d 28 24 2e 65 76 65 6e 74 3f 24 2e 65 76 65 6e 74 28 65 29 3a 65 29 7d 66 75 6e 63 74 69 6f 6e 20 51 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 6c 5b 65 2e 74 79 70 65 2b 21 30 5d 28 24 2e 65 76 65 6e 74 3f 24 2e 65 76 65 6e 74 28 65 29 3a 65 29 7d 66 75 6e 63 74 69 6f 6e 20 24 6e 28 65 2c 74 2c 6e 2c 72 2c 73 2c 6f 2c 69 2c 6c 2c 5f 29 7b 76 61 72 20 68 2c 63 2c 67 2c 64 2c 66 2c 62 2c 41 2c 53 2c 78 2c 44 2c 6f 65 2c 73 65 2c 6c 65 2c 69 65 2c 61 65 2c 59 3d 74 2e 74 79 70 65 3b 69 66 28 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 21 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6e 2e 5f 5f 68 21 3d 6e 75 6c 6c 26 26 28 5f 3d 6e 2e 5f 5f 68 2c 6c 3d 74 2e 5f 5f 65 3d 6e 2e 5f 5f 65 2c 74 2e 5f 5f 68 3d 6e 75 6c 6c 2c 6f 3d Data Ascii: +!1]($.event?$.event(e):e)}function Qn(e){return this.l[e.type+!0]($.event?$.event(e):e)}function $n(e,t,n,r,s,o,i,l,_){var h,c,g,d,f,b,A,S,x,D,oe,se,le,ie,ae,Y=t.type;if(t.constructor!==void 0)return null;n.__h!=null&&(_=n.__h,l=t.__e=n.__e,t.__h=null,o=
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 6f 6e 65 6e 74 57 69 6c 6c 55 70 64 61 74 65 21 3d 6e 75 6c 6c 26 26 63 2e 63 6f 6d 70 6f 6e 65 6e 74 57 69 6c 6c 55 70 64 61 74 65 28 53 2c 63 2e 5f 5f 73 2c 44 29 2c 63 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 21 3d 6e 75 6c 6c 26 26 63 2e 5f 5f 68 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 63 6f 6d 70 6f 6e 65 6e 74 44 69 64 55 70 64 61 74 65 28 64 2c 66 2c 62 29 7d 29 7d 69 66 28 63 2e 63 6f 6e 74 65 78 74 3d 44 2c 63 2e 70 72 6f 70 73 3d 53 2c 63 2e 5f 5f 50 3d 65 2c 73 65 3d 24 2e 5f 5f 72 2c 6c 65 3d 30 2c 22 70 72 6f 74 6f 74 79 70 65 22 69 6e 20 59 26 26 59 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 6e 64 65 72 29 7b 66 6f 72 28 63 2e 73 74 61 74 65 3d 63 2e 5f 5f 73 2c 63 2e 5f 5f 64 3d 21 31 2c 73 65 26 26 73 65 28 74 Data Ascii: onentWillUpdate!=null&&c.componentWillUpdate(S,c.__s,D),c.componentDidUpdate!=null&&c.__h.push(function(){c.componentDidUpdate(d,f,b)})}if(c.context=D,c.props=S,c.__P=e,se=$.__r,le=0,"prototype"in Y&&Y.prototype.render){for(c.state=c.__s,c.__d=!1,se&&se(t
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 74 65 54 65 78 74 4e 6f 64 65 28 64 29 3b 65 3d 73 3f 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 4e 53 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 2c 66 29 3a 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 66 2c 64 2e 69 73 26 26 64 29 2c 6f 3d 6e 75 6c 6c 2c 6c 3d 21 31 7d 69 66 28 66 3d 3d 3d 6e 75 6c 6c 29 67 3d 3d 3d 64 7c 7c 6c 26 26 65 2e 64 61 74 61 3d 3d 3d 64 7c 7c 28 65 2e 64 61 74 61 3d 64 29 3b 65 6c 73 65 7b 69 66 28 6f 3d 6f 26 26 48 74 2e 63 61 6c 6c 28 65 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 68 3d 28 67 3d 6e 2e 70 72 6f 70 73 7c 7c 4c 74 29 2e 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 2c 63 3d 64 2e 64 61 6e 67 65 72 6f 75 Data Ascii: teTextNode(d);e=s?document.createElementNS("http://www.w3.org/2000/svg",f):document.createElement(f,d.is&&d),o=null,l=!1}if(f===null)g===d\|\|l&&e.data===d\|\|(e.data=d);else{if(o=o&&Ht.call(e.childNodes),h=(g=n.props\|\|Lt).dangerouslySetInnerHTML,c=d.dangerou
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 68 73 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 73 2c 6f 3b 24 2e 5f 5f 26 26 24 2e 5f 5f 28 65 2c 74 29 2c 73 3d 28 72 3d 74 79 70 65 6f 66 20 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 3f 6e 75 6c 6c 3a 6e 26 26 6e 2e 5f 5f 6b 7c 7c 74 2e 5f 5f 6b 2c 6f 3d 5b 5d 2c 24 6e 28 74 2c 65 3d 28 21 72 26 26 6e 7c 7c 74 29 2e 5f 5f 6b 3d 75 74 28 42 2c 6e 75 6c 6c 2c 5b 65 5d 29 2c 73 7c 7c 4c 74 2c 4c 74 2c 74 2e 6f 77 6e 65 72 53 56 47 45 6c 65 6d 65 6e 74 21 3d 3d 76 6f 69 64 20 30 2c 21 72 26 26 6e 3f 5b 6e 5d 3a 73 3f 6e 75 6c 6c 3a 74 2e 66 69 72 73 74 43 68 69 6c 64 3f 48 74 2e 63 61 6c 6c 28 74 2e 63 68 69 6c 64 4e 6f 64 65 73 29 3a 6e 75 6c 6c 2c 6f 2c 21 72 26 26 6e 3f 6e 3a 73 3f 73 2e 5f 5f 65 3a 74 2e 66 69 72 73 74 43 68 Data Ascii: function hs(e,t,n){var r,s,o;$.__&&$.__(e,t),s=(r=typeof n=="function")?null:n&&n.__k\|\|t.__k,o=[],$n(t,e=(!r&&n\|\|t).__k=ut(B,null,[e]),s\|\|Lt,Lt,t.ownerSVGElement!==void 0,!r&&n?[n]:s?null:t.firstChild?Ht.call(t.childNodes):null,o,!r&&n?n:s?s.__e:t.firstCh
2024-05-27 13:01:07 UTC	1369	IN	Data Raw: 2e 5f 5f 3d 5b 6e 3f 6e 28 74 29 3a 6c 6f 28 76 6f 69 64 20 30 2c 74 29 2c 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 76 61 72 20 5f 3d 72 2e 5f 5f 4e 3f 72 2e 5f 5f 4e 5b 30 5d 3a 72 2e 5f 5f 5b 30 5d 2c 68 3d 72 2e 74 28 5f 2c 6c 29 3b 5f 21 3d 3d 68 26 26 28 72 2e 5f 5f 4e 3d 5b 68 2c 72 2e 5f 5f 5b 31 5d 5d 2c 72 2e 5f 5f 63 2e 73 65 74 53 74 61 74 65 28 7b 7d 29 29 7d 5d 2c 72 2e 5f 5f 63 3d 7a 2c 21 7a 2e 75 29 29 7b 76 61 72 20 73 3d 66 75 6e 63 74 69 6f 6e 28 6c 2c 5f 2c 68 29 7b 69 66 28 21 72 2e 5f 5f 63 2e 5f 5f 48 29 72 65 74 75 72 6e 21 30 3b 76 61 72 20 63 3d 72 2e 5f 5f 63 2e 5f 5f 48 2e 5f 5f 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 72 65 74 75 72 6e 20 64 2e 5f 5f 63 7d 29 3b 69 66 28 63 2e 65 76 65 72 79 28 66 75 6e 63 74 69 Data Ascii: .__=[n?n(t):lo(void 0,t),function(l){var _=r.__N?r.__N[0]:r.__[0],h=r.t(_,l);_!==h&&(r.__N=[h,r.__[1]],r.__c.setState({}))}],r.__c=z,!z.u)){var s=function(l,_,h){if(!r.__c.__H)return!0;var c=r.__c.__H.__.filter(function(d){return d.__c});if(c.every(functi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.18	49762	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:07 UTC	528	OUT	GET /images/btn_ok_passive.png HTTP/1.1 Host: transfiles.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5; _ym_uid=1716814863853134129; _ym_d=1716814863; _ga=GA1.2.625688542.1716814864; _gid=GA1.2.919659162.1716814864; _gat=1
2024-05-27 13:01:07 UTC	247	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:07 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Wed, 21 Apr 2021 17:27:24 GMT ETag: "fb-5c07ee046c56d" Accept-Ranges: bytes Content-Length: 251 Connection: close Content-Type: image/png
2024-05-27 13:01:07 UTC	251	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0f 00 00 00 0f 08 03 00 00 00 0c 08 65 78 00 00 00 33 50 4c 54 45 00 00 00 af bf 70 af bf 70 aa bf 75 ab bb 74 ab bd 72 aa bd 73 aa bd 72 ab bc 73 ab bc 73 aa bd 72 aa bc 73 aa bd 72 aa bd 72 ab bd 73 ab bd 72 ab bd 73 a7 da d2 2f 00 00 00 10 74 52 4e 53 00 10 20 30 40 80 90 9f a0 bf c0 cf d0 df e0 ef cb c4 cc e0 00 00 00 67 49 44 41 54 08 1d 05 c1 01 62 82 30 00 00 b1 eb a8 28 a5 62 fe ff da 25 55 cd f7 f5 bd de b3 aa 1a 17 e0 1a 55 e3 06 70 8f 6a 01 e0 aa 09 f0 1c 9b d9 07 60 b6 39 5b 80 b3 17 56 0f f6 b6 3b e0 69 e1 6f ec a3 0d ab 0f ee 51 2f 70 36 e1 1e 07 30 6b c1 f7 07 56 35 36 80 3d aa c6 02 ac 51 55 cd 73 3d eb 9c 55 ff 62 48 09 48 0d fc 41 8f 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRex3PLTEpputrsrssrsrrsrs/tRNS 0@gIDATb0(b%UUpj`9[V;ioQ/p60kV56=QUs=UbHHAIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.18	49761	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:07 UTC	528	OUT	GET /manifest.json HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:07 UTC	254	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:07 GMT Server: Apache/2.4.41 (Ubuntu) Last-Modified: Sat, 11 May 2024 11:19:36 GMT ETag: "c0-6182bd3cbbfc6" Accept-Ranges: bytes Content-Length: 192 Connection: close Content-Type: application/json
2024-05-27 13:01:07 UTC	192	IN	Data Raw: 7b 0a 20 22 6e 61 6d 65 22 3a 20 22 54 72 61 6e 73 66 69 6c 65 73 22 2c 0a 20 22 69 63 6f 6e 73 22 3a 20 5b 0a 20 20 7b 0a 20 20 20 22 73 72 63 22 3a 20 22 5c 2f 69 6d 61 67 65 73 5c 2f 69 63 6f 6e 2d 31 39 32 2e 70 6e 67 22 2c 0a 20 20 20 22 73 69 7a 65 73 22 3a 20 22 31 39 32 78 31 39 32 22 2c 0a 20 20 20 22 74 79 70 65 22 3a 20 22 69 6d 61 67 65 5c 2f 70 6e 67 22 0a 20 20 7d 0a 20 5d 2c 0a 20 20 22 74 68 65 6d 65 5f 63 6f 6c 6f 72 22 3a 20 22 23 66 66 66 66 66 66 22 2c 0a 20 20 22 73 74 61 72 74 5f 75 72 6c 22 3a 20 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 0a 7d Data Ascii: { "name": "Transfiles", "icons": [ { "src": "\/images\/icon-192.png", "sizes": "192x192", "type": "image\/png" } ], "theme_color": "#ffffff", "start_url": "transfiles.ru"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.18	49763	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:07 UTC	1454	OUT	GET /clmap/33590114?page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&pointer-click=rn%3A532174762%3Ax%3A38665%3Ay%3A28398%3At%3A33%3Ap%3APA1AA1AAAAA%3AX%3A206%3AY%3A679&browser-info=u%3A1716814863853134129%3Av%3A1350%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Arqnl%3A1%3Ast%3A1716814866&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; yuidss=6315998231716814865; ymex=1748350865.yrts.1716814865#1748350865.yrtsi.1716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; i=E8hbGjy9F06yRkF6KIk+v/s06ZPrxPdqEa8IDocIGnRIZqQQfznGQcOEYd2lPEs1eBQOAnDRM5qZt6sx6pZTv3L8fBU=; yandexuid=2608371041716814866; yashr=9366239991716814866
2024-05-27 13:01:07 UTC	466	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:07 GMT Expires: Mon, 27-May-2024 13:01:07 GMT Last-Modified: Mon, 27-May-2024 13:01:07 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.18	49765	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:07 UTC	1507	OUT	GET /sync_cookie_image_decide?token=10382.5cq1dBE50Kkuy_ARErnvu9SKCgJTJxFW2cpOJu9Sdq3gGgXRMKvorLoop8NRfDk3GMhryxP_ppLhfOrWk4RceX3RtDx_xjsTIYw3gTJPHtJoj1lvKzIrRPbt-iAw-k50H0zvA__wZp2KUy6xvE_BhMBtOiAkkuIB91VBkYaqLXnSy8MedR0zL-5PANJFdJU8agVa0XYp53ptHQ-1tJ-XuR7Gvs6wvT905mfTiMdU57E%2C.i5qyiL9n8tsRGycvaZLcp45yue8%2C HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; yuidss=6315998231716814865; ymex=1748350865.yrts.1716814865#1748350865.yrtsi.1716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; i=LZt3EYvi/80czZEuJUlBMD2wF8VQhY1gJexSdg+y0mDgDYMJqE0cxalQGlrtioPPnDvpqeQ5eKW+BzC7HG19qZz7zt8=; yandexuid=3859500731716814865; yashr=567182471716814865
2024-05-27 13:01:07 UTC	1125	IN	HTTP/1.1 200 Ok Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:07 GMT Set-Cookie: yandexuid=5250530921716814863; Expires=Thu, 25-May-2034 13:01:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=5250530921716814863; Expires=Thu, 25-May-2034 13:01:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; Expires=Thu, 25-May-2034 13:01:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yp=1716901267.yu.3859500731716814865; Expires=Thu, 25-May-2034 13:01:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1719406867.oyu.3859500731716814865#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865; Expires=Tue, 27-May-2025 13:01:07 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: sync_cookie_ok=synced; Expires=Tue, 28-May-2024 13:01:07 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.18	49767	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:07 UTC	2070	OUT	GET /watch/33590114/1?wmode=7&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.149%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.149%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.149%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1350%3Acn%3A1%3Adp%3A0%3Als%3A1430974270378%3Ahid%3A880766209%3Az%3A-240%3Ai%3A20240527090102%3Aet%3A1716814863%3Ac%3A1%3Arn%3A553862080%3Arqn%3A1%3Au%3A1716814863853134129%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A4793%3Awv%3A2%3Ads%3A0%2C1736%2C311%2C108%2C26%2C0%2C%2C%2C%2C%2C%2C%2C%3Aco%3A0%3Acpf%3A1%3Ans%3A1716814856326%3Arqnl%3A1%3Ast%3A1716814864%3At%3ATransFiles%20-%20free%20file%20sharing%20service%20without%20registration%20-%20Page%20to%20download%20the%20upload%2 [TRUNCATED] Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; yuidss=6315998231716814865; ymex=1748350865.yrts.1716814865#1748350865.yrtsi.1716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; i=LZt3EYvi/80czZEuJUlBMD2wF8VQhY1gJexSdg+y0mDgDYMJqE0cxalQGlrtioPPnDvpqeQ5eKW+BzC7HG19qZz7zt8=; yandexuid=3859500731716814865; yashr=567182471716814865
2024-05-27 13:01:07 UTC	720	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 467 Content-Type: application/json; charset=utf-8 Date: Mon, 27 May 2024 13:01:07 GMT Expires: Mon, 27-May-2024 13:01:07 GMT Last-Modified: Mon, 27-May-2024 13:01:07 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block
2024-05-27 13:01:07 UTC	467	IN	Data Raw: 7b 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 61 75 74 6f 5f 67 6f 61 6c 73 22 3a 31 2c 22 62 75 74 74 6f 6e 5f 67 6f 61 6c 73 22 3a 30 2c 22 63 5f 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 66 6f 72 6d 5f 67 6f 61 6c 73 22 3a 31 2c 22 70 63 73 22 3a 22 31 22 2c 22 77 65 62 76 69 73 6f 72 22 3a 7b 22 61 72 63 68 5f 74 79 70 65 22 3a 22 6e 6f 6e 65 22 2c 22 64 61 74 65 22 3a 22 32 30 32 32 2d 30 38 2d 32 36 20 32 31 3a 32 33 3a 34 33 22 2c 22 66 6f 72 6d 73 22 3a 31 2c 22 72 65 63 70 22 3a 22 31 2e 30 30 30 30 30 22 2c 22 75 72 6c 73 22 3a 22 72 65 67 65 78 70 3a 2e 2a 22 7d 2c 22 73 62 70 22 3a 20 7b 22 61 22 3a 22 75 38 52 66 58 71 43 2b 31 6a 48 48 5a 49 70 4d 45 31 6d 2f 7a 6f 69 42 49 51 7a 54 37 62 59 42 63 78 6f 59 6f 63 74 73 42 6a 56 64 56 4a Data Ascii: {"settings":{"auto_goals":1,"button_goals":0,"c_recp":"1.00000","form_goals":1,"pcs":"1","webvisor":{"arch_type":"none","date":"2022-08-26 21:23:43","forms":1,"recp":"1.00000","urls":"regexp:.*"},"sbp": {"a":"u8RfXqC+1jHHZIpME1m/zoiBIQzT7bYBcxoYoctsBjVdVJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.18	49768	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:07 UTC	957	OUT	GET /metrika/advert.gif HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; yuidss=6315998231716814865; ymex=1748350865.yrts.1716814865#1748350865.yrtsi.1716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; i=E8hbGjy9F06yRkF6KIk+v/s06ZPrxPdqEa8IDocIGnRIZqQQfznGQcOEYd2lPEs1eBQOAnDRM5qZt6sx6pZTv3L8fBU=; yandexuid=2608371041716814866; yashr=9366239991716814866
2024-05-27 13:01:07 UTC	832	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:07 GMT ETag: "66544f4c-2b" Expires: Mon, 27 May 2024 14:01:07 GMT Last-Modified: Mon, 27 May 2024 09:15:56 GMT Set-Cookie: _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; domain=.yandex.com; path=/; expires=Thu, 25 May 2034 13:01:07 GMT; secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2024-05-27 13:01:07 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.18	49773	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:07 UTC	535	OUT	GET /sig.js HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:08 UTC	1316	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:08 GMT Content-Type: text/javascript Content-Length: 5778 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/; SameSite=none; Secure Set-Cookie: mid=2f13debc-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=A%2FRr606SX4YKzHSmubF5UabxB1qq3HR36cL8VrWL5J5R17rkPLhn7FGz%2B4DnTO0s9Vvp16yQ2xZBnYT2R58U5ak5RJCWOqAK4R1uLEtuDMFP%2FaX4sS0R4m0yfIa9pkBTNkl5bmg%3D"}],"group":"cf-nel","max_age":604800}
2024-05-27 13:01:08 UTC	149	IN	Data Raw: 4e 45 4c 3a 20 7b 22 73 75 63 63 65 73 73 5f 66 72 61 63 74 69 6f 6e 22 3a 30 2c 22 72 65 70 6f 72 74 5f 74 6f 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 30 30 7d 0d 0a 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 31 64 36 61 35 39 30 63 38 34 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 88a6311d6a590c84-EWRalt-svc: h3=":443"; ma=86400
2024-05-27 13:01:08 UTC	1273	IN	Data Raw: 76 61 72 20 79 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 6d 3d 28 67 2c 68 2c 6b 29 3d 3e 68 20 69 6e 20 67 3f 79 28 67 2c 68 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6b 7d 29 3a 67 5b 68 5d 3d 6b 2c 70 3d 28 67 2c 68 2c 6b 29 3d 3e 28 6d 28 67 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 68 3f 68 2b 22 22 3a 68 2c 6b 29 2c 6b 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 77 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 68 2c 31 30 Data Ascii: var y=Object.defineProperty,m=(g,h,k)=>h in g?y(g,h,{enumerable:!0,configurable:!0,writable:!0,value:k}):g[h]=k,p=(g,h,k)=>(m(g,"symbol"!=typeof h?h+"":h,k),k);(function(){function g(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(w\|\|=setInterval(h,10
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 65 74 77 6f 72 6b 22 2c 61 2e 49 4c 69 6e 6b 73 3d 22 69 6c 69 6e 6b 73 22 2c 61 29 29 28 66 7c 7c 7b 7d 29 2c 75 3d 28 61 3d 3e 28 61 2e 4c 6f 67 69 6e 3d 22 6c 6f 67 69 6e 22 2c 61 2e 49 70 3d 22 69 70 22 2c 61 29 29 28 75 7c 7c 7b 7d 29 3b 66 2e 49 4c 69 6e 6b 73 3b 66 2e 4e 65 74 77 6f 72 6b 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 75 2e 49 70 3b 66 2e 49 4c 69 6e 6b 73 3b 66 2e 4e 65 74 77 6f 72 6b 3b 75 2e 4c 6f 67 69 6e 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 63 6f 6e 73 74 20 47 3d 7b 76 65 72 73 69 6f 6e 3a 31 2c 63 6f 6c 6c 65 63 74 6f 72 73 3a 7b 7d 7d 3b 76 61 72 20 72 3d 28 61 3d 3e 28 61 2e 53 69 67 6e 61 6c 3d 22 73 69 67 22 2c 61 2e 49 6e 69 74 3d 22 69 Data Ascii: etwork",a.ILinks="ilinks",a))(f\|\|{}),u=(a=>(a.Login="login",a.Ip="ip",a))(u\|\|{});f.ILinks;f.Network;f.Static;f.Static;f.Static;u.Ip;f.ILinks;f.Network;u.Login;f.Static;f.Static;f.Static;const G={version:1,collectors:{}};var r=(a=>(a.Signal="sig",a.Init="i
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 2c 62 29 7d 61 73 79 6e 63 20 67 65 74 46 65 74 63 68 55 72 6c 44 75 72 61 74 69 6f 6e 4d 73 28 61 2c 62 29 7b 63 6f 6e 73 74 20 63 3d 74 68 69 73 2e 63 6f 6e 66 69 67 2e 74 69 6d 65 6f 75 74 4d 73 3f 3f 35 45 33 2c 64 3d 6e 65 77 20 41 62 6f 72 74 43 6f 6e 74 72 6f 6c 6c 65 72 2c 65 3d 73 65 74 54 69 6d 65 6f 75 74 28 28 29 3d 3e 0a 64 2e 61 62 6f 72 74 28 45 72 72 6f 72 28 60 74 69 6d 65 6f 75 74 20 24 7b 63 7d 60 29 29 2c 63 29 2c 6c 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 61 77 61 69 74 20 66 65 74 63 68 28 61 2c 7b 6d 6f 64 65 3a 22 6e 6f 2d 63 6f 72 73 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 62 3f 22 6f 6d 69 74 22 3a 22 69 6e 63 6c 75 64 65 22 2c 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3a 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 Data Ascii: ,b)}async getFetchUrlDurationMs(a,b){const c=this.config.timeoutMs??5E3,d=new AbortController,e=setTimeout(()=>d.abort(Error(`timeout ${c}`)),c),l=performance.now();await fetch(a,{mode:"no-cors",credentials:b?"omit":"include",referrerPolicy:"no-referrer"
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 79 7b 64 5b 71 5d 3d 61 77 61 69 74 20 43 28 74 68 69 73 2e 63 6f 6c 6c 65 63 74 53 69 6e 67 6c 65 28 6e 2c 63 29 2c 6c 29 7d 63 61 74 63 68 28 7a 29 7b 65 5b 71 5d 3d 60 24 7b 6e 7d 3a 20 24 7b 6e 75 6c 6c 3d 3d 7a 3f 76 6f 69 64 20 30 3a 7a 2e 6d 65 73 73 61 67 65 7d 60 7d 7d 29 29 3b 74 68 69 73 2e 72 65 70 6f 72 74 28 64 2c 65 29 7d 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 3d 32 33 34 5e 78 28 22 32 33 30 22 2c 32 33 34 29 3b 63 6f 6e 73 74 20 62 3d 30 21 3d 3d 61 3b 6c 65 74 20 63 3d 22 64 79 35 76 59 32 42 67 61 57 39 34 59 33 35 2f 4c 6a 5a 33 4c 6d 46 6a 65 58 39 70 4c 6a 5a 33 4c 6d 31 76 65 47 56 36 61 53 34 32 61 6d 31 67 66 32 6b 67 4c 6d 6c 36 61 57 4a 34 58 47 31 2b 62 57 46 2f 4c 6a 5a 33 4c 6d 39 67 5a 57 39 6e 4c 6a 5a 33 4c Data Ascii: y{d[q]=await C(this.collectSingle(n,c),l)}catch(z){e[q]=`${n}: ${null==z?void 0:z.message}`}}));this.report(d,e)}}(function(){var a=234^x("230",234);const b=0!==a;let c="dy5vY2BgaW94Y35/LjZ3LmFjeX9pLjZ3Lm1veGV6aS42am1gf2kgLml6aWJ4XG1+bWF/LjZ3Lm9gZW9nLjZ3L
2024-05-27 13:01:08 UTC	398	IN	Data Raw: 75 61 48 35 6c 65 6d 6c 2b 4c 48 42 77 4c 48 6c 69 61 47 6c 71 5a 57 4a 70 61 43 35 78 63 53 41 75 65 48 56 38 61 53 34 32 4c 6e 39 34 62 58 68 6c 62 79 35 78 63 53 41 75 65 6d 6c 2b 66 32 56 6a 59 69 34 32 50 58 45 3d 22 3b 61 3d 28 62 26 26 28 63 3d 41 28 63 2c 61 29 29 2c 78 28 63 2c 47 2c 21 62 29 29 3b 66 6f 72 28 63 6f 6e 73 74 20 5b 64 2c 65 5d 6f 66 20 4f 62 6a 65 63 74 2e 65 6e 74 72 69 65 73 28 61 2e 63 6f 6c 6c 65 63 74 6f 72 73 29 29 74 72 79 7b 69 66 28 65 2e 61 63 74 69 76 65 29 69 66 28 65 2e 74 79 70 65 3d 3d 3d 0a 66 2e 53 74 61 74 69 63 29 6e 65 77 20 4a 28 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 65 2e 74 79 70 65 3d 3d 3d 66 2e 4e 65 74 77 6f 72 6b 29 6e 65 77 20 49 28 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 65 2e 74 79 70 65 3d 3d 3d 66 Data Ascii: uaH5leml+LHBwLHliaGlqZWJpaC5xcSAueHV8aS42Ln94bXhlby5xcSAueml+f2VjYi42PXE=";a=(b&&(c=A(c,a)),x(c,G,!b));for(const [d,e]of Object.entries(a.collectors))try{if(e.active)if(e.type===f.Static)new J(d,e);else if(e.type===f.Network)new I(d,e);else if(e.type===f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.18	49772	65.108.228.44	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:08 UTC	895	OUT	GET /getFiles/4002015 HTTP/1.1 Host: transfiles.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://transfiles.ru/vyjw4 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=qojvda9ph9engcv3r0ohk3pes5; _ym_uid=1716814863853134129; _ym_d=1716814863; _ga=GA1.2.625688542.1716814864; _gid=GA1.2.919659162.1716814864; _gat=1; _ym_isad=2
2024-05-27 13:01:08 UTC	358	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:08 GMT Server: Apache/2.4.41 (Ubuntu) Expires: 0 Cache-Control: must-revalidate Pragma: public Content-Description: File Transfer Content-Disposition: attachment; filename="Loader.rar" Content-Transfer-Encoding: binary Content-Length: 103466 Connection: close Content-Type: application/octet-stream
2024-05-27 13:01:08 UTC	16384	IN	Data Raw: 52 61 72 21 1a 07 01 00 ac e0 d4 56 0c 01 05 08 00 07 01 01 9f a7 86 80 00 93 8b b3 54 59 02 03 3c b0 a6 06 04 80 a8 13 20 35 18 3b 30 80 13 00 0a 4c 6f 61 64 65 72 2e 65 78 65 30 01 00 03 0f 41 64 9a b2 58 20 95 ee 36 88 d8 32 93 3d 6e fb ae 17 0e f2 d5 3e ff 2b 53 f0 07 80 d1 db f0 6f ca a3 e1 46 ad bb be 72 f3 ce b7 4b 0a 03 02 3e 9a 75 a8 33 b0 da 01 2b 0e 61 ff 66 fc b6 df 7c 8f 7d f0 aa c0 6f ed f5 15 45 d4 9b 80 4b 22 e3 b1 93 4f ea 27 2a 4e 6b 49 1a af 33 ec 28 61 6e f0 e8 49 f7 6b e3 d6 65 52 bd 6e 1d 52 bb 0d a2 82 15 31 3d 01 c1 05 e1 46 ef 45 bc b0 46 f5 93 57 c1 13 bb b1 d0 d4 37 88 31 86 d5 53 fd 5d 3f 54 4c a8 14 cf 48 d1 00 d2 04 51 dd 99 f0 f5 2a 4b b0 2b 7f f0 c6 c9 ad cb 14 17 07 fb 9e 13 08 a6 6b 48 66 dc ec 6f da 2f 9f a1 c7 62 ab fa Data Ascii: Rar!VTY< 5;0Loader.exe0AdX 62=n>+SoFrK>u3+af\|}oEK"O'NkI3(anIkeRnR1=FEFW71S]?TLHQK+kHfo/b
2024-05-27 13:01:08 UTC	16384	IN	Data Raw: 95 e9 d1 16 f7 fc 96 5f 07 34 cb 17 e4 45 eb 5a 63 fc 7c 0c ba 1a 5d d1 fb 08 ba 01 ef 6d f3 8f dc dd 85 16 9c 1e 66 36 75 2b 7a 0a 55 33 b8 0b b8 5b e1 9a 8b e9 ca 08 19 43 fd 05 b1 9d c9 e6 4b af c6 70 09 0b 71 64 41 92 58 bd 4c 71 8f 55 bc 80 13 2a a8 b3 6a 33 79 ea ad 7c e9 52 b5 af a9 6e 82 12 27 fd ad fb 3d 97 ad 71 74 1a 76 f0 ac 05 3c d3 ac 2c c3 0d 38 d7 7d 3d ab ad 1c e2 58 2d 34 88 ca e4 3b 51 e1 d5 cd 22 fb b5 d8 ef 3c 70 36 53 02 e1 85 c0 60 01 23 c6 b1 2c 52 0c 41 7b c7 b7 5f 81 ad 23 00 fe e6 5a d2 5a 67 c9 fa b4 74 7e 8b 92 1a 04 f0 16 b5 5d 60 23 aa 25 90 c1 8b 57 0d f6 47 03 20 e4 33 b9 00 4d 89 a7 ac 22 ce eb 17 49 45 2a de 24 d1 1a fe 2e 0c d7 7d dd e9 e6 0d fa 04 8a f4 2e d8 0f 55 a9 5c eb 56 e5 0e a1 c6 e5 22 40 de 61 ac 89 ce 37 ca Data Ascii: _4EZc\|]mf6u+zU3[CKpqdAXLqUj3y\|Rn'=qtv<,8}=X-4;Q"<p6S`#,RA{_#ZZgt~]`#%WG 3M"IE$.}.U\V"@a7
2024-05-27 13:01:08 UTC	16384	IN	Data Raw: 7b 01 80 75 46 fd 55 95 46 a0 2f 4c 33 7b 5c 2d b4 dc f8 f6 ca f4 c7 67 22 ec eb f5 35 79 48 c8 21 6f 81 1a 39 44 63 49 11 12 a8 0d df e9 5e b4 d5 50 51 f5 63 18 b7 50 dc d9 a0 8d 50 8c 27 83 13 fb a5 21 50 dd 35 1b 4f 39 29 3b 05 b0 f2 3b 86 3e 75 de a8 38 af 91 d8 1d 72 8a dd b8 5e 9e 9e 0d da 90 f1 7b b3 65 bf 5e 90 f2 7c 03 fc 0d d2 03 5b 2e 0d 19 96 10 71 50 37 d3 d1 1c c5 05 0b cd ab 77 1a 4b ca 61 b6 31 d2 91 d2 d3 4c b4 0c 62 ff 3a 09 b0 90 92 69 eb 7f 63 53 be 4b 3b 7b b2 5c 32 47 7e f6 d6 83 55 12 19 9e 7a ed 52 01 9d 36 ad b6 70 d4 10 e5 d8 e0 53 fe 76 92 62 3c 3a ad 22 ff 8f 24 24 04 ce 55 66 b2 9f 26 39 5e fc 7a 38 41 ee b9 62 a2 c6 dd 96 f1 64 05 f5 72 0b aa be f3 46 3d 01 dd c7 ea 56 3c b7 b8 13 71 d8 c1 23 1e 86 30 de b6 f1 e0 d2 d4 3f 7e Data Ascii: {uFUF/L3{\-g"5yH!o9DcI^PQcPP'!P5O9);;>u8r^{e^\|[.qP7wKa1Lb:icSK;{\2G~UzR6pSvb<:"$$Uf&9^z8AbdrF=V<q#0?~
2024-05-27 13:01:08 UTC	16384	IN	Data Raw: 2f 71 63 73 31 54 6e 95 38 d5 87 7c dd 72 aa de 31 ff 71 d6 fc ac b5 e3 2b b9 cc d5 9a ca 64 e3 5e 2f 16 d5 34 04 bf 92 d1 1f 61 77 b4 a4 a8 5f b6 a0 f6 95 39 5f a5 cf 4c 13 72 79 8b 6d de 32 ca 6c 00 0f 43 87 4a a6 0a f9 61 68 1f 37 f5 8a 18 5c d6 7d bc 8c ed 54 29 fd 78 07 88 44 45 95 09 27 9c c6 72 7a 31 10 e0 64 04 bf 31 59 62 dd 34 7c 7e 4f 04 46 3f 6b 2f 98 81 f8 e7 2a 73 92 28 0a c1 8f 8a 27 44 bb 14 87 87 bc 3a 01 6c 88 55 f4 b2 f1 54 93 c7 45 ed 45 85 a5 4a a8 d1 4a 5c 87 c9 05 65 83 db a9 86 02 bc e2 d7 44 59 e2 97 71 58 9f e9 65 16 cc f7 81 b9 b6 70 e8 10 7f de aa c8 01 fb 01 56 01 e2 d1 36 21 98 17 68 89 fe c8 72 da 61 8b d8 50 79 c8 3d 41 b5 8d 99 f6 d1 7d 65 f3 30 1c 01 6e 90 84 47 a9 6a e6 95 8d 21 71 7a 6a 40 e1 f4 51 8e 0d 8c ff e6 5b 93 Data Ascii: /qcs1Tn8\|r1q+d^/4aw_9_Lrym2lCJah7\}T)xDE'rz1d1Yb4\|~OF?k/*s('D:lUTEEJJ\eDYqXepV6!hraPy=A}e0nGj!qzj@Q[
2024-05-27 13:01:08 UTC	16384	IN	Data Raw: ba 80 ca 66 c0 de be 9a e5 c6 41 8c c1 0e fd d8 80 b6 ff c1 f8 a5 cb b7 39 a7 61 e9 54 18 b4 26 e5 81 1a 29 23 6f 46 47 ea 90 61 75 82 3c e1 d5 79 49 ca 3b 92 82 9b 6f d5 b1 c8 da 42 68 7c 38 69 ad 32 bb 9e 4f 6f 1b 31 78 62 ee 92 33 98 5b 6d 79 11 33 3e 24 79 2b 76 6b b2 72 94 69 f1 90 79 02 c1 2d 34 8a d6 5d 35 00 56 c7 6e b2 6d e6 b8 92 6f 46 63 c1 1b f6 1f 6d 1d 06 bd 11 77 db f6 6e c6 b1 84 2f 3c 8e b5 44 8e 39 c9 19 5a f3 94 d2 f6 54 4e 78 93 42 eb 2e bd 5f 92 0f db c1 44 89 71 39 80 94 78 cd 8b 94 04 f9 26 7a 8f a5 25 74 15 5c ce 08 9f f8 6b 94 c9 44 08 2b 6a 8f c0 55 02 36 a2 6b b6 49 a4 53 96 a1 66 5a 44 68 f3 46 6f e0 a8 51 4e a3 09 0d bc 62 24 67 85 51 5f 73 4d ea a5 bf 71 bb 36 3d bd 8b 56 54 ae 86 f6 e5 d5 69 72 7e b5 5e 4f 2e 50 1d 74 e8 7a Data Ascii: fA9aT&)#oFGau<yI;oBh\|8i2Oo1xb3[my3>$y+vkriy-4]5VnmoFcmwn/<D9ZTNxB._Dq9x&z%t\kD+jU6kISfZDhFoQNb$gQ_sMq6=VTir~^O.Ptz
2024-05-27 13:01:08 UTC	16384	IN	Data Raw: c4 87 33 ce 80 2b 0c 4e fc 4b ab 30 ee 11 6b 64 d7 cb 7e a2 2f 80 8e ca 0a f8 08 b9 10 cc 24 60 9d 3e 84 46 65 65 10 e8 c6 73 fd 40 85 b1 93 72 f0 6e 93 ef ab f6 25 0c 41 87 40 14 c3 e2 85 0b b5 48 f2 90 f2 c9 0f 07 81 9b bd 64 26 61 69 ec 28 56 70 3c 28 e0 21 59 ea d8 99 a9 e7 4b 1b f4 2c dd 83 a1 ae da 10 71 fc ef bc 0c 02 f8 b2 35 d0 16 4d a3 fa 52 8d fc 53 92 ca bb 4e fd 47 21 44 35 e8 a4 25 67 f3 36 96 e8 4a 21 5d 90 64 57 87 c6 8c 4e b7 2d 90 53 15 cf 18 c7 f9 6d 74 38 8c ab 25 72 c0 9a a8 6f 96 4b c9 e2 47 e7 d7 95 b0 73 b0 18 16 8b 2d 24 c3 31 6b 59 c1 b5 33 34 fa 61 be 20 18 81 74 d8 d9 ce 97 7d 12 d5 66 df d9 20 7d 1d 78 7e 59 33 9c 95 46 9a a3 2c b9 ff 75 02 5c 05 8b 4a d7 44 b5 bd 70 43 d8 5d 5c 0b 65 30 db 4c 94 8e 54 7e aa a0 5f 88 56 3d b0 Data Ascii: 3+NK0kd~/$`>Fees@rn%A@Hd&ai(Vp<(!YK,q5MRSNG!D5%g6J!]dWN-Smt8%roKGs-$1kY34a t}f }x~Y3F,u\JDpC]\e0LT~_V=
2024-05-27 13:01:08 UTC	5162	IN	Data Raw: 49 dc 7b cc 99 74 d1 3f a2 99 49 c6 a6 04 4e a9 aa 0e b7 c2 6e 0a a5 95 9d 3b 28 ca a7 93 b7 4d 1c 7b 86 13 3c 17 7d 81 0d 58 bc 0b 5e e1 c3 c0 a3 ed 46 fb be 40 0a 0d b3 4f d1 ae 40 cb 34 24 63 c3 b9 06 4d ed 83 95 5b bc 14 64 65 6e 6d 91 a8 4e 25 7d 3b 57 49 f4 e3 17 b6 65 74 bc be 19 71 91 9d 46 1a e1 a4 64 19 2b c4 0f 69 d0 c0 11 bb 49 c1 fa ab 6a 31 2d 89 90 b7 17 9a b7 a6 70 b9 e1 c4 70 ea ff 81 eb e3 20 b6 ba 6a 97 85 46 2c 79 d4 f2 40 20 29 12 07 9a c5 00 d0 c5 e1 14 c3 61 f1 43 dd 0c 46 25 29 4f c5 59 f2 c3 a9 d4 17 48 b1 8d bd 41 dd 7a e0 9b dc 9d 5c 3f cc 9d 7e 8c 78 92 cd 61 ee 1a b0 50 7b 4a 95 aa 52 6f 71 38 d7 ac b1 d4 19 ad e8 d8 82 1a 15 08 22 65 67 92 0f 33 89 02 7c a6 b4 7d 7a 4f da a0 d2 e3 0e 34 27 93 83 09 df fc 90 cb e4 24 24 07 0c Data Ascii: I{t?INn;(M{<}X^F@O@4$cM[denmN%};WIetqFd+iIj1-pp jF,y@ )aCF%)OYHAz\?~xaP{JRoq8"eg3\|}zO4'$$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.18	49770	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:08 UTC	1234	OUT	GET /sync_cookie_image_check_secondary HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; yuidss=6315998231716814865; ymex=1748350865.yrts.1716814865#1748350865.yrtsi.1716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; i=LZt3EYvi/80czZEuJUlBMD2wF8VQhY1gJexSdg+y0mDgDYMJqE0cxalQGlrtioPPnDvpqeQ5eKW+BzC7HG19qZz7zt8=; yandexuid=3859500731716814865; yashr=567182471716814865
2024-05-27 13:01:08 UTC	523	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Mon, 27 May 2024 13:01:08 GMT Location: https://mc.yandex.ru/sync_cookie_image_start_secondary?redirect_domain=mc.yandex.com&token=10382.91OTDC7CGhMUgd5msKBQIdMJAOVISv1vNGp9EokNsvH6IRYIY439ilpR9ghFy4Z1.AZ1YOtlm9mvrCEh9G3ToKwugLbw%2C Set-Cookie: sync_cookie_csrf_secondary=68503744fake; Expires=Mon, 27-May-2024 13:11:08 GMT; Domain=.mc.yandex.com; Path=/ Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2024-05-27 13:01:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.18	49774	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:08 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cP8+YHrWZlfcSED&MD=TPoykatH HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-27 13:01:08 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: a861f34a-988b-444d-8fc6-836c76f232ca MS-RequestId: f5bd1e6f-2f15-4631-af32-e059a75c68a3 MS-CV: 9DBvWkm29Ui1o9o3.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:01:07 GMT Connection: close Content-Length: 24490
2024-05-27 13:01:08 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-27 13:01:08 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.18	49777	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:08 UTC	1320	OUT	GET /clmap/33590114?page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&pointer-click=rn%3A532174762%3Ax%3A38665%3Ay%3A28398%3At%3A33%3Ap%3APA1AA1AAAAA%3AX%3A206%3AY%3A679&browser-info=u%3A1716814863853134129%3Av%3A1350%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Arqnl%3A1%3Ast%3A1716814866&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; yp=1716901267.yu.3859500731716814865; ymex=1719406867.oyu.3859500731716814865#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865; sync_cookie_ok=synced
2024-05-27 13:01:09 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:08 GMT Expires: Mon, 27-May-2024 13:01:08 GMT Last-Modified: Mon, 27-May-2024 13:01:08 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.18	49776	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:08 UTC	1341	OUT	GET /sync_cookie_image_decide?token=10382.5cq1dBE50Kkuy_ARErnvu9SKCgJTJxFW2cpOJu9Sdq3gGgXRMKvorLoop8NRfDk3GMhryxP_ppLhfOrWk4RceX3RtDx_xjsTIYw3gTJPHtJoj1lvKzIrRPbt-iAw-k50H0zvA__wZp2KUy6xvE_BhMBtOiAkkuIB91VBkYaqLXnSy8MedR0zL-5PANJFdJU8agVa0XYp53ptHQ-1tJ-XuR7Gvs6wvT905mfTiMdU57E%2C.i5qyiL9n8tsRGycvaZLcp45yue8%2C HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; yp=1716901267.yu.3859500731716814865; ymex=1719406867.oyu.3859500731716814865#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865; sync_cookie_ok=synced
2024-05-27 13:01:09 UTC	1125	IN	HTTP/1.1 200 Ok Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:08 GMT Set-Cookie: yandexuid=5250530921716814863; Expires=Thu, 25-May-2034 13:01:08 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yuidss=5250530921716814863; Expires=Thu, 25-May-2034 13:01:08 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; Expires=Thu, 25-May-2034 13:01:08 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: yp=1716901268.yu.5250530921716814863; Expires=Thu, 25-May-2034 13:01:08 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865; Expires=Tue, 27-May-2025 13:01:08 GMT; Domain=.yandex.com; Path=/; SameSite=None; Secure Set-Cookie: sync_cookie_ok=synced; Expires=Tue, 28-May-2024 13:01:08 GMT; Domain=.mc.yandex.com; Path=/; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:09 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.18	49781	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:08 UTC	667	OUT	GET /sqoutlogo_1716467887.png HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:08 UTC	1170	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:08 GMT Content-Type: image/png Content-Length: 2660 Connection: close Expires: Mon, 27 May 2024 13:18:28 GMT Cache-Control: public, max-age=14400 Last-Modified: Thu, 23 May 2024 12:38:07 GMT ETag: "5e001b8b0fdd7c038c577e433d8ace56" x-goog-generation: 1716467887230262 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 2660 x-goog-hash: crc32c=8i2zAw== x-goog-hash: md5=XgAbiw/dfAOMV35DPYrOVg== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type X-GUploader-UploadID: ABPtcPpyYFLAcJ8FWe_koYMCZahtHxeIdp1LuSxvA0c9F6VwrWkhccPrSI_a9x_jzwdpOIWMGwc CF-Cache-Status: HIT Age: 2560 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mRCpcdeWWFgVhb16k%2B2FPpXuQDF6ZmbtPHGt9O%2BqgpuEWLYGvH4OK%2FzUfA4kOQTfuaGVFP39hw1%2BJw3Uw8TfE7FVsw7AF9WKSR8FDVnXq20HMGHf7YEGS7y7raXrTrVGBAmH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a631229c704286-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 13:01:08 UTC	199	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 2c 08 06 00 00 00 87 50 41 f1 00 00 0a 2b 49 44 41 54 78 9c ed 9c 7f 8c 5c 55 15 c7 3f e7 ed 6e 7f 40 4b a7 04 f9 51 8c 4c 45 2b 12 dd 9d 6d 51 12 15 98 46 83 82 bb d3 2d 89 69 34 9a 6e 81 dd 42 44 59 48 40 50 c9 0e 24 0a 86 18 6a 83 b1 dd c5 76 6b a2 98 98 d2 fd 51 ea 8f 98 74 1b 44 24 d0 ed 6c ab 48 40 c2 50 40 a8 40 99 f2 b3 bb 9d 79 c7 3f ee 9b ce db b7 ef cd cc db ce ce 6e 61 3e c9 64 e6 de 77 ee bd 67 de fb ce bd e7 dd 7b e7 41 8d 1a 35 6a d4 a8 f1 a1 46 fc 32 57 7d 66 0b 5a 9f 3b 1d 74 29 30 af ca 3e 79 90 63 88 1e Data Ascii: PNGIHDR,PA+IDATx\U?n@KQLE+mQF-i4nBDYH@P$jvkQtD$lH@P@@y?na>dwg{A5jF2W}fZ;t)0>yc
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 1c dc d7 f9 ea cc fa 51 23 0c be c2 4a 34 3e 70 0e 96 7d 37 d0 0a 9c 5e 5d 97 26 f1 2e f0 30 70 ef 60 aa f3 c9 19 f6 a5 46 99 d4 fb 65 aa 95 eb 12 64 2d 30 0e 1c 06 b4 aa 5e 15 3c 51 90 08 70 15 30 96 88 6d be 79 30 b5 fe f5 99 f1 a5 46 18 7c 85 25 c8 7a 60 0c b4 1b d8 02 72 22 c2 12 a6 2a 4c 01 41 5a 54 75 2b d0 ac f0 71 a0 26 ac 93 00 5f 61 01 8b 80 b7 41 0e 0d a6 3a 5f ab a6 43 5e 56 37 f5 3c 9a 33 03 f6 3c c1 9a 33 93 be d4 28 1f 6b a6 1d 28 49 9d b8 7c 9c a1 11 b9 46 68 66 bf b0 6a 9c 94 d4 84 55 63 5a 08 8a b1 02 49 2c ef 05 d5 3a ec 0a 7b 62 09 0d b6 e6 b6 8f 76 56 b8 e2 1a 33 41 68 61 a1 7a 09 d0 05 cc ad 98 17 82 a0 fa 7e 56 e4 67 c0 13 15 ab b7 c6 8c 31 05 61 71 25 d0 82 50 f1 3b 34 1b 46 39 f9 84 15 07 2e 73 de a3 ae fc 34 30 00 f4 3b 9f 3f 54 Data Ascii: Q#J4>p}7^]&.0p`Fed-0^<Qp0my0F\|%z`r"*LAZTu+q&_aA:_C^V7<3<3(k(I\|FhfjUcZI,:{bvV3Ahaz~Vg1aq%P;4F9.s40;?T
2024-05-27 13:01:08 UTC	1092	IN	Data Raw: 67 30 bd 81 7b 62 34 4f b1 e9 81 0c 26 38 cf f7 80 71 8c 30 07 9c 63 de d9 ef be 12 75 b9 59 8b e9 11 87 1d 3f ef 23 1c 7e f5 65 9c 57 dc cf 97 70 c2 12 fb 20 c8 6b c0 12 a0 b1 b5 a9 67 d9 d0 28 cf 04 da 67 e7 d4 8b f0 b2 c2 4f 50 3d 1b cb f6 9b 01 ae 36 51 cc 89 69 77 d2 69 8c 10 22 2e 9b 34 c5 7b 83 3e a7 1e 77 4f d5 ee 67 e8 a2 9c 3b ce 2e cc 32 4b d4 49 27 29 2c 60 bb 49 53 7c 41 3b 83 f1 3f ee a4 23 4c fc 21 84 65 98 c2 0f 06 26 4f 32 f7 79 0b 84 1a 0a d5 b2 fe 81 99 9f 52 60 89 25 d2 95 88 6d 6e 88 c7 93 93 6c e3 17 fe 92 ac 2d 75 aa fc 1d d5 fb 40 6e 01 6b 47 5b ec 44 be df b4 10 65 b2 a8 56 97 51 2e 89 59 ca 48 97 b0 4b 63 62 b9 64 19 75 66 1c db 62 75 a6 cb b0 01 d3 3b 06 d9 a4 09 37 af 98 21 e4 ce 8c 50 3d d6 d0 48 c7 a1 44 ac e7 f7 c0 c5 c0 02 Data Ascii: g0{b4O&8q0cuY?#~eWp kg(gOP=6Qiwi".4{>wOg;.2KI'),`IS\|A;?#L!e&O2yR`%mnl-u@nkG[DeVQ.YHKcbdufbu;7!P=HD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.18	49782	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:08 UTC	602	OUT	GET /compressedFonts/RobotoRegular.woff2 HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:08 UTC	1277	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:08 GMT Content-Type: application/octet-stream Content-Length: 61736 Connection: close X-GUploader-UploadID: ABPtcPqdO_qkAWYCQ-WEetnlVHy-TKvVF9hS1RX3l-NAYbjbtyXe4n4NKvxdEyQveMXOvMqGKE-BRZ5vhg x-goog-generation: 1701252459996546 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 61736 x-goog-hash: crc32c=fte1vA== x-goog-hash: md5=7ehNloCMSG4950y9jyosgA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Mon, 27 May 2024 12:18:50 GMT Cache-Control: public, max-age=14400 Age: 3565 Last-Modified: Wed, 29 Nov 2023 10:07:40 GMT ETag: "ede84d96808c486e3de74cbd8f2a2c80" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=44f3wroezsVW7EP2az3tQd2VkCgCqBAstS6latuu2z6XwZtxLo9nLyUt1SSoich%2B6NI0S9pHj9KAX7RTcWIAY%2FhBfPhBw1CS3oQFVeyO45mHdGEG3gujwam1SFLWUehzVAKg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a63122cbef17f9-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 13:01:08 UTC	92	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 f1 28 00 12 00 00 00 02 80 e4 00 00 f0 c3 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 84 44 1b 81 a4 24 1c af 68 06 60 00 a5 48 08 4c 09 83 3c 11 0c 0a 87 af 60 86 d2 43 0b 93 46 00 12 89 6c 01 36 02 24 03 a7 08 04 Data Ascii: wOF2(D$h`HL<`CFl6$
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 20 05 85 18 07 20 0c 81 5b 5b 4f 47 92 aa 2a d7 be b7 e8 ef 04 92 9d d0 6d 08 50 e5 74 aa fe 2f 1e e0 46 34 c7 ee 05 1d 56 e9 3c 6d aa 42 48 37 fa 02 ed f2 0b d3 8d ba eb 2a 6b 0c fe b1 6f f6 ff ff ff ff ff ff 2f 4b 26 32 66 c9 01 97 a6 85 02 20 73 02 3a 15 7f ce df 3b 7f 42 68 01 51 82 47 95 dc a5 d6 34 a2 c6 0c 51 48 89 99 26 c4 6d a7 3a 4a 13 ac d7 0c 83 07 95 58 e7 38 3a 9b 5d ea 53 5b 4f 6f fb f7 24 87 59 96 7d 8c 92 9b f5 d8 c5 f1 f4 01 26 39 ab 8b e6 3a 2f 97 a0 5d ce 88 95 69 e7 90 ce bd 1a e9 3e 99 f2 2b 24 21 09 59 de 26 c7 15 4c a3 e4 ce 54 f2 d2 6f 2c 33 7a 6f 85 bc 3a 17 b8 bf b8 9d 48 e5 95 db 0c 39 61 1f 96 c5 6b 09 5b b4 39 86 3f 74 52 ad 1e 24 a8 c3 e7 e2 ca 07 e9 6a d7 dc 93 b4 42 1e 9c 3a 55 6f 5c ae 8d 24 c9 4d 83 b6 1e 2d 6f 70 0d 86 Data Ascii: [[OGmPt/F4V<mBH7ko/K&2f s:;BhQG4QH&m:JX8:]S[Oo$Y}&9:/]i>+$!Y&LTo,3zo:H9ak[9?tR$jB:Uo\$M-op
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 77 42 7a 26 89 b4 fc 6d 5f ea 2e 64 c8 11 78 81 b6 83 54 00 04 50 d1 9a dd 04 08 3a b5 13 78 22 c5 28 ec 2b cd 42 0a 40 93 4e 93 ef d8 e0 6b 9d 40 b4 36 b6 95 f0 b9 48 c5 67 2b cf 87 37 0e ec 3f eb 00 c3 73 db 6c 01 86 01 86 01 60 80 5d 95 ae fa 66 a2 ee 9b 2e 90 36 10 b3 13 2b d6 c2 59 60 9d 79 73 d6 bd d6 bc ce 9a 6f 75 75 37 dd d5 52 23 87 18 21 86 5b 21 98 39 b5 d6 61 d6 31 cc 6c 8c b4 d6 39 c4 58 8d 17 ac 73 cc ac 67 cf 7a 17 ff 7b fc ee fb 30 c6 bf ee f1 7a 3b fb 3e ff 29 a7 d5 b5 64 27 3c 90 9e 25 2f 00 1c 8e 88 b7 a3 f4 aa be 4a aa 92 64 5b 92 1d 5b 8e d3 21 77 b0 c9 9d a6 64 c1 92 93 19 43 83 93 41 38 2d e0 6d 8f c3 70 db 3d cf 6d 09 9e f6 33 ed ff 57 00 d2 47 42 b8 cb 6c 76 df 21 cb 9e 2b a0 02 ca 26 39 72 05 65 2a 2c c9 aa ea 42 50 cb 52 7a 5f Data Ascii: wBz&m_.dxTP:x"(+B@Nk@6Hg+7?sl`]f.6+Y`ysouu7R#![!9a1l9Xsgz{0z;>)d'<%/Jd[[!wdCA8-mp=m3WGBlv!+&9re*,BPRz_
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 10 01 5b cb 2b d7 63 cd 21 d1 49 8a d7 fa 57 07 90 7e 73 f7 31 86 47 96 da 9b ce 97 48 f9 28 4b 42 0c b5 ac ba fa 3d bf 98 de 35 7f dc 30 d4 ae 8f 68 68 46 12 17 d3 d2 fc a9 c0 fc d8 dd 8f 0e f8 42 27 a1 0e 6d e8 c7 10 46 63 8a 69 2c b7 1d eb 94 65 24 e3 59 48 53 5a 32 99 f9 2c e9 40 19 ec bd 39 6e 0f b4 b8 35 2a 7a 21 9f 9e 42 63 c8 5f 84 09 9f c4 e1 cc b9 ba 4d 67 79 f3 78 5e 9b 7f 13 b7 68 3d ae f2 83 73 3b 43 2a 20 b2 ba ab 4d 95 96 02 47 be 2e 5c 37 cd 4d 75 33 97 b7 7d 3b bc bb 7b 24 dc 87 22 55 ac 2c 09 0e 58 50 ff 02 f3 dc 47 16 54 38 e3 b2 b2 e7 f7 73 67 44 22 84 0f 12 ac a8 ec 80 05 bd 62 fd 23 f8 7b 6c 44 a8 70 af db 4e 44 ce 0b 70 96 5e 26 5b 07 03 1a 85 c2 d1 6c dc be cb b0 4d 75 2f 99 a2 1a 01 2d 07 04 28 40 49 56 b8 14 98 b9 42 40 ae ac a9 Data Ascii: [+c!IW~s1GH(KB=50hhFB'mFci,e$YHSZ2,@9n5z!Bc_Mgyx^h=s;C MG.\7Mu3};{$"U,XPGT8sgD"b#{lDpNDp^&[lMu/-(@IVB@
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: a9 5a a1 8a ef 0d 88 15 69 cf 78 6c 4a ae 67 44 44 44 9f 17 11 16 c3 b4 ff a7 71 eb 58 c3 00 6f df 7f 74 e8 c8 3d 30 94 27 e3 1e f9 af dd f7 07 be d3 64 81 73 c3 25 6b f2 0c 06 2a 21 ad 8c b2 aa 9e 9a 3a cd 31 84 89 eb f1 be a1 dd 7b 90 6c 55 33 c6 60 e7 7f 76 05 99 67 59 24 34 76 e1 4a b3 35 eb 72 d1 4d 58 4a 3d 59 34 d5 08 16 27 39 be 9f c6 a4 b5 73 24 88 4d fa 79 6f c2 37 aa a8 2d ae 54 8b 9e c4 29 c4 5e 58 7f 91 dd 17 63 98 24 9b 06 0e 1d 71 66 09 71 2f 33 7c 5a 46 62 ae 5b ac 60 dc b3 01 ce 6c e0 ad ae 26 3c a2 68 e1 d5 f4 06 af 3c f9 31 53 b8 2c e6 07 9f 27 b1 eb 53 44 7f 6d 43 ef 49 16 a4 6b 54 ba fe 77 ec 2e 25 4c 68 b1 e7 56 e0 68 38 af dc 6d 93 f5 a0 b6 20 d8 ae 59 e2 81 03 d2 1c 81 52 97 2b 73 53 b3 46 ad b0 da 44 6b 77 49 ae dd 50 a6 31 6a e3 Data Ascii: ZixlJgDDDqXot=0'ds%k*!:1{lU3`vgY$4vJ5rMXJ=Y4'9s$Myo7-T)^Xc$qfq/3\|ZFb[`l&<h<1S,'SDmCIkTw.%LhVh8m YR+sSFDkwIP1j
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 70 d6 96 f5 74 45 45 b6 71 57 53 b8 10 70 b1 67 da a3 94 81 d6 cf ab b1 9f 1e bf 90 9e 84 52 31 0c 4c 46 40 a0 f3 29 a4 f0 a2 ab f5 85 62 c7 0f 1d c4 f2 d5 86 4d b8 93 a7 62 8f 3c d3 7c 59 7d ff b9 fd 78 7c 36 63 d6 9c 05 71 ca bd 82 1f 20 aa e6 cb 96 2b e1 e6 20 04 8b 87 40 e5 aa f4 19 33 5e 96 ea a0 a4 c8 b9 e1 2e d3 f2 a0 ea c7 5f 80 40 41 32 65 cb 91 0b 23 1f 16 5e a1 62 24 64 a5 85 5a f3 86 56 00 af 05 a8 d7 a4 69 33 d6 ca fb 7a 0e 5c b8 f1 e2 27 48 98 88 f3 2e 52 2e 6a 8f a0 c0 9f 26 5a 0d 17 21 52 94 68 c3 46 cb 78 2d 10 42 9e 95 b2 51 7f 8a 34 59 f2 14 9d 76 b6 a8 3c 02 8e e4 79 e1 d4 f9 09 12 56 10 97 88 f9 8d 88 88 88 88 88 88 88 1e 08 f2 70 ec 9e b9 a0 51 7d 18 e5 4c 9d 78 f3 31 f3 e5 2f a0 04 6e 98 e0 9b 58 3e d7 82 61 95 a8 6c 55 a6 6a 75 e9 Data Ascii: ptEEqWSpgR1LF@)bMb<\|Y}x\|6cq + @3^._@A2e#^b$dZVi3z\'H.R.j&Z!RhFx-BQ4Yv<yVpQ}Lx1/nX>alUju
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 4a 2d 84 59 a8 70 11 25 f2 92 5b 8f e3 cd 66 22 71 84 72 42 03 03 b3 49 2c 4a c9 ba 0d a6 4d 6c 88 6b 01 e2 59 ef 7c 7b 9c 0e 35 17 8d c2 29 11 14 e2 14 d2 9d 72 54 f6 2a 5c cd 49 a3 d2 d4 b7 dc 9b ce f4 5b 4c b7 cb bd 3c 98 f3 8c fe d2 d6 2b b6 4c 1c 6a 16 fa 01 c2 9a 84 1b de 3b 82 ea 72 25 c5 2b 4a 53 51 d3 2c 5a a6 98 b4 18 8f b4 30 13 cf ee ba e4 e2 78 86 17 ef 7e da 7c 48 7d 11 6a b9 ef 01 0f f9 30 cf fd 49 e0 94 a0 1b 22 d7 4f 6e 1a 6a cb d2 6f 5c 1e 88 66 7c 3c 3c 29 dc 7e de d2 5b bc 6e 4f 66 30 0f 99 89 c5 0d 4a aa d2 c8 58 6c 59 ba c9 11 e8 2a d3 24 9d 79 25 54 0a aa 45 93 61 18 4f cc d0 ed b5 7c 4d 20 04 98 e3 30 e1 08 b9 e0 70 ef c6 43 88 de 2d 55 91 f3 00 d3 43 5b c4 6d cf d7 0c 8c 44 9e 41 49 55 1a 59 c5 da 67 3b 35 04 54 47 93 b0 8c 71 6a Data Ascii: J-Yp%[f"qrBI,JMlkY\|{5)rT\I[L<+Lj;r%+JSQ,Z0x~\|H}j0I"Onjo\f\|<<)~[nOf0JXlY$y%TEaO\|M 0pC-UC[mDAIUYg;5TGqj
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 21 4a 9c 24 69 b2 e4 69 d3 a5 cf b8 41 0a ef 79 c0 2b 98 2a ca 6f fb 0a e4 87 e6 8b be 2f f5 fd 60 fe dd 18 ff 70 e6 0f e5 df e6 2c fa b3 78 bb 8e df a1 c3 45 9c 8a 48 d5 85 08 15 2e a2 44 d6 6e b9 5d ee 5d 1e 12 11 11 11 29 99 18 01 45 95 67 34 3e 7c df ed 6f 64 89 69 a2 59 0d 47 84 48 51 a2 0d 1b 35 de e6 ce e4 bc 45 cb 65 75 a3 c0 33 86 90 97 c2 6e a5 6c ac 3f 05 69 b2 e4 29 3a ed 6c 51 29 ee 27 ff 80 2e 9f 00 8c 1a be 73 53 4c 43 2e 5d e0 fa dc c0 88 9c b9 66 5d de c6 f7 76 e9 73 a1 bb bd 96 75 7b 87 69 3c 61 32 f5 39 f7 28 a7 f7 33 6d b3 f6 60 a9 66 b7 7a ea cd 7d f1 e9 e2 5b 45 a1 d7 68 1c 2f 70 93 ed d5 da 19 74 33 85 8d 9f b4 59 ed 82 c0 aa 3f b3 22 8d cd b8 ea dc bb 57 4b 59 5a 39 d3 4a 03 93 b5 e6 31 59 2c f0 c7 8e 1b e6 6e c3 9e 6e d1 ca 66 1b Data Ascii: !J$iiAy+*o/`p,xEH.Dn]])Eg4>\|odiYGHQ5Eeu3nl?i):lQ)'.sSLC.]f]vsu{i<a29(3m`fz}[Eh/pt3Y?"WKYZ9J1Y,nnf
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 11 f9 a6 9b 69 c7 73 22 1e 8f a2 dc 72 08 f1 3c a4 36 42 6a 2b 72 6d 47 ba 9d 28 b6 3b c2 bd f6 dc 6f df 97 bd 3c de 12 f1 f8 12 e5 3e 47 a6 af 43 3c ea 87 df 5a f2 47 cb fe 6a c5 3f fd b9 ff d7 fa cb 33 76 80 24 26 a2 52 22 51 4e c4 0f 41 30 10 0c 72 35 44 61 a2 b0 86 28 a2 28 51 54 4b 14 53 9c 28 ae 27 4a 28 39 18 47 a5 e7 a6 49 d9 85 e5 52 f9 d5 51 93 8e 62 3a ca e9 a9 a4 1e 07 a4 9c 9c cf d2 ae 5c 2e aa 5d bb b9 51 fd d6 dd 9d f4 7b 0f 0f 6a 3d 1e 37 5c d5 df c7 87 d7 f8 19 de 88 e7 98 f6 87 86 e8 3c f9 fe c8 14 e8 32 85 c7 4f 30 51 31 13 dd 45 6d 44 f8 66 fd 2b d1 82 82 82 23 42 b2 fe ad 94 bf 93 c3 df bd d2 bf ad 0f 6c c4 61 ea a6 6e f2 57 68 17 4d 1f a6 ff c8 af ca 3c 4e 6e d2 e8 d1 90 3e 0d e9 27 24 56 61 12 86 59 18 e6 29 b2 48 18 cb ff 71 48 09 Data Ascii: is"r<6Bj+rmG(;o<>GC<ZGj?3v$&R"QNA0r5Da((QTKS('J(9GIRQb:\.]Q{j=7\<2O0Q1EmDf+#BlanWhM<Nn>'$VaY)HqH
2024-05-27 13:01:08 UTC	1369	IN	Data Raw: 71 4c 2b 4a 10 cd c8 58 8e 17 98 dd 30 b9 b4 f2 c5 fe 77 fe a7 7e fa fe af bf 0d 78 fb 2a f8 bd 16 f9 56 7e 5b ff b5 be bf c1 6f c2 c2 30 7e cf dd f3 b7 ef fe bd 34 3c 61 12 86 b8 bf a3 a6 f8 92 40 7b fd b8 8b b1 39 e6 9c 6b ee 79 b6 b5 ed ed 6c b7 8a d2 b3 83 1d 16 ce 4b 16 f8 7f 55 85 16 5e 64 d1 c5 16 df e5 ae ae b6 ab 61 d7 bb d9 ed ee 76 bf 87 3d f6 d4 73 2f bd f6 d6 7b 1f 7d f6 d5 77 3f fd f6 d7 ff 23 2d a4 ff 07 14 68 48 c0 40 0a 16 1c 78 c8 80 78 40 51 a1 54 a9 35 5a bd c1 64 f4 ff fe 1d e8 14 15 4d 37 4c cb 76 5c 8f d7 27 fd 04 49 d1 0c cb f1 82 28 c9 8a aa e9 86 69 d9 8e eb f9 41 18 c5 49 9a e5 45 59 d5 4d db f5 c3 38 cd cb ba ed c4 a2 6e 31 e6 da e7 66 f5 a3 39 de 7e 36 87 cb e3 0b 84 22 b1 44 2a 93 2b 94 2a b5 46 ab d3 1b 34 e4 96 61 23 46 37 Data Ascii: qL+JX0w~xV~[o0~4<a@{9kylKU^dav=s/{}w?#-hH@xx@QT5ZdM7Lv\'I(iAIEYM8n1f9~6"D+*F4a#F7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.18	49779	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-27 13:01:09 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=184085 Date: Mon, 27 May 2024 13:01:09 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.18	49784	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	591	OUT	GET /sig.js HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:09 UTC	1313	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:09 GMT Content-Type: text/javascript Content-Length: 5778 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=2fc5e10c-1c29-11ef-a267-96c509900667; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O0bMBjRt04ltUlSPGdQ6RCr%2BfWyYc5oS4dhcgX%2FEax9h03PmMm62%2Ba5y5UT4SwEYXgjSE5xItzal0aPDzV9vpCqA089O4qxrYSCnzUmLPzVmfII9ok7X5U6nYmNRQguXe7TNT20%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a63124ab2ec457-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 13:01:09 UTC	56	IN	Data Raw: 76 61 72 20 79 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 6d 3d 28 67 2c 68 2c 6b 29 3d 3e 68 20 69 6e 20 67 3f 79 28 67 2c 68 2c 7b 65 6e 75 Data Ascii: var y=Object.defineProperty,m=(g,h,k)=>h in g?y(g,h,{enu
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6b 7d 29 3a 67 5b 68 5d 3d 6b 2c 70 3d 28 67 2c 68 2c 6b 29 3d 3e 28 6d 28 67 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 68 3f 68 2b 22 22 3a 68 2c 6b 29 2c 6b 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 77 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 68 2c 31 30 30 29 2c 74 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 61 2c 65 78 74 72 61 3a 62 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 Data Ascii: merable:!0,configurable:!0,writable:!0,value:k}):g[h]=k,p=(g,h,k)=>(m(g,"symbol"!=typeof h?h+"":h,k),k);(function(){function g(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(w\|\|=setInterval(h,100),t.push({event:a,extra:b}))}function h(){window.sendEv
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 2e 4c 6f 67 69 6e 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 63 6f 6e 73 74 20 47 3d 7b 76 65 72 73 69 6f 6e 3a 31 2c 63 6f 6c 6c 65 63 74 6f 72 73 3a 7b 7d 7d 3b 76 61 72 20 72 3d 28 61 3d 3e 28 61 2e 53 69 67 6e 61 6c 3d 22 73 69 67 22 2c 61 2e 49 6e 69 74 3d 22 69 6e 69 74 22 2c 61 2e 45 72 72 6f 72 3d 22 65 72 72 6f 72 22 2c 61 29 29 28 72 7c 7c 7b 7d 29 3b 6c 65 74 20 74 3d 5b 5d 2c 77 3b 63 6c 61 73 73 20 76 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 70 28 74 68 69 73 2c 22 63 6f 6e 66 69 67 22 29 3b 70 28 74 68 69 73 2c 22 6e 61 6d 65 22 29 3b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 62 3b 74 68 69 73 2e 6e 61 6d 65 3d 61 3b 74 72 79 7b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a 65 28 29 7d 63 61 74 63 Data Ascii: .Login;f.Static;f.Static;f.Static;const G={version:1,collectors:{}};var r=(a=>(a.Signal="sig",a.Init="init",a.Error="error",a))(r\|\|{});let t=[],w;class v{constructor(a,b){p(this,"config");p(this,"name");this.config=b;this.name=a;try{this.initialize()}catc
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 61 77 61 69 74 20 66 65 74 63 68 28 61 2c 7b 6d 6f 64 65 3a 22 6e 6f 2d 63 6f 72 73 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 62 3f 22 6f 6d 69 74 22 3a 22 69 6e 63 6c 75 64 65 22 2c 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3a 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 2c 63 61 63 68 65 3a 22 6e 6f 2d 73 74 6f 72 65 22 2c 73 69 67 6e 61 6c 3a 64 2e 73 69 67 6e 61 6c 7d 29 3b 61 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 61 2d 6c 29 7d 61 73 79 6e 63 20 63 6f 6c 6c 65 63 74 28 61 2c 62 2c 63 2c 64 29 7b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 6c 65 74 20 6c 3d 21 30 2c 71 3d 30 3b 69 66 28 61 77 61 69 74 20 45 Data Ascii: ormance.now();await fetch(a,{mode:"no-cors",credentials:b?"omit":"include",referrerPolicy:"no-referrer",cache:"no-store",signal:d.signal});a=performance.now();return clearTimeout(e),Math.round(a-l)}async collect(a,b,c,d){const e=[];let l=!0,q=0;if(await E
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 73 74 20 62 3d 30 21 3d 3d 61 3b 6c 65 74 20 63 3d 22 65 79 4a 6a 62 32 78 73 5a 57 4e 30 62 33 4a 7a 49 6a 70 37 49 6d 31 76 64 58 4e 6c 49 6a 70 37 49 6d 46 6a 64 47 6c 32 5a 53 49 36 5a 6d 46 73 63 32 55 73 49 6d 56 32 5a 57 35 30 55 47 46 79 59 57 31 7a 49 6a 70 37 49 6d 4e 73 61 57 4e 72 49 6a 70 37 49 6d 4e 34 49 6a 6f 69 5a 53 35 6a 62 47 6c 6c 62 6e 52 59 49 69 77 69 59 33 6b 69 4f 69 4a 6c 4c 6d 4e 73 61 57 56 75 64 46 6b 69 4c 43 4a 70 5a 43 49 36 49 6d 55 75 64 47 46 79 5a 32 56 30 4c 6d 6c 6b 49 48 78 38 49 48 56 75 5a 47 56 6d 61 57 35 6c 5a 43 4a 39 4c 43 4a 74 62 33 56 7a 5a 58 56 77 49 6a 70 37 49 6d 31 31 65 43 49 36 49 6d 55 75 59 32 78 70 5a 57 35 30 57 43 49 73 49 6d 31 31 65 53 49 36 49 6d 55 75 59 32 78 70 5a 57 35 30 57 53 4a 39 4c Data Ascii: st b=0!==a;let c="eyJjb2xsZWN0b3JzIjp7Im1vdXNlIjp7ImFjdGl2ZSI6ZmFsc2UsImV2ZW50UGFyYW1zIjp7ImNsaWNrIjp7ImN4IjoiZS5jbGllbnRYIiwiY3kiOiJlLmNsaWVudFkiLCJpZCI6ImUudGFyZ2V0LmlkIHx8IHVuZGVmaW5lZCJ9LCJtb3VzZXVwIjp7Im11eCI6ImUuY2xpZW50WCIsIm11eSI6ImUuY2xpZW50WSJ9L
2024-05-27 13:01:09 UTC	246	IN	Data Raw: 79 7b 69 66 28 65 2e 61 63 74 69 76 65 29 69 66 28 65 2e 74 79 70 65 3d 3d 3d 0a 66 2e 53 74 61 74 69 63 29 6e 65 77 20 4a 28 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 65 2e 74 79 70 65 3d 3d 3d 66 2e 4e 65 74 77 6f 72 6b 29 6e 65 77 20 49 28 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 65 2e 74 79 70 65 3d 3d 3d 66 2e 49 4c 69 6e 6b 73 29 6e 65 77 20 48 28 64 2c 65 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 60 69 6e 76 61 6c 69 64 20 74 79 70 65 20 24 7b 65 2e 74 79 70 65 7d 20 69 6e 20 24 7b 64 7d 60 29 3b 7d 63 61 74 63 68 28 6c 29 7b 6b 28 60 66 61 69 6c 65 64 20 63 72 65 61 74 69 6e 67 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 7d 60 2c 6c 29 7d 67 28 72 2e 49 6e 69 74 29 7d 29 28 29 7d 29 28 29 3b 0a Data Ascii: y{if(e.active)if(e.type===f.Static)new J(d,e);else if(e.type===f.Network)new I(d,e);else if(e.type===f.ILinks)new H(d,e);else throw Error(`invalid type ${e.type} in ${d}`);}catch(l){k(`failed creating ${JSON.stringify(e)}`,l)}g(r.Init)})()})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.18	49787	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	599	OUT	GET /compressedFonts/RobotoBold.woff2 HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://googleads.g.doubleclick.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-27 13:01:09 UTC	1274	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:09 GMT Content-Type: application/octet-stream Content-Length: 61628 Connection: close X-GUploader-UploadID: ABPtcPqyU_Gwub0z37rIkLq_WO4PUWPg9PL_dRPYiLBHal_ut49jqnXBVNuLyLzequMU0RLcbYY x-goog-generation: 1701252540208192 x-goog-metageneration: 1 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 61628 x-goog-hash: crc32c=8QCKtg== x-goog-hash: md5=EDOkdzHkX3vUahliNZ6WtA== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Length, Content-Type, Date, Server, Transfer-Encoding, X-GUploader-UploadID, X-Google-Trace Expires: Mon, 27 May 2024 12:52:44 GMT Cache-Control: public, max-age=14400 Age: 2967 Last-Modified: Wed, 29 Nov 2023 10:09:00 GMT ETag: "1033a47731e45f7bd46a1962359e96b4" CF-Cache-Status: HIT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SEUEyQgFwMr9ZWzURRtpab3OHyFSOErdK9Krkt5kW6Ztqr6jm1bRupVLJWXpv5J1Dhl5Ms%2FyarPLQ8RGV3OgyekYNLQQqyJvhAlzz5%2B0J9oHu37faJOO%2F6SCy%2FV8FgpCCI7t"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a63124ed920cba-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 13:01:09 UTC	95	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 f0 bc 00 12 00 00 00 02 7e 94 00 00 f0 55 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 84 44 1b 81 b2 7c 1c af 68 06 60 00 a5 48 08 42 09 83 3c 11 0c 0a 87 9c 6c 86 bb 04 0b 93 46 00 12 89 6c 01 36 02 24 03 a7 08 04 20 05 85 Data Ascii: wOF2~UD\|h`HB<lFl6$
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 22 07 20 0c 81 22 5b af 42 92 08 99 72 d7 b7 2e cb 60 90 07 76 8e b6 2d 95 38 c4 6b 6f e3 88 30 0e 57 89 bb 9f cd a3 29 ef ca d1 9e 42 ba c0 9c 03 d5 ea eb db da 34 1e ec 77 66 ff ff ff ff ff ff ef 4a 26 32 96 49 5a 2e 69 29 45 85 a2 a0 80 a0 fe f6 be db 46 50 83 22 c4 5a 02 25 6a 28 b7 a1 8d 3c a8 c1 0e 2c 1c 63 8c cd 29 b7 35 d5 e8 62 57 c7 68 d4 09 7d 19 ce 07 bb b0 91 4d 76 c2 15 89 82 86 db dc 2c a9 a6 95 dd 37 48 81 ad 2a ec 26 a2 90 09 47 f1 f1 78 d2 95 db 53 7a 41 1c 56 95 f4 a4 82 92 7d d1 ce 8d 20 a6 d6 21 73 90 12 48 a1 09 a4 ec 3a 18 eb f6 c3 af 18 59 5a f1 34 ae c3 91 8c 99 f2 b3 b9 fd fe 7e bf 9c e6 2a 86 40 b5 d3 54 99 57 4f 4b e1 3f c6 6b a6 04 11 f2 22 c3 7b 9e 86 22 bd 52 13 3e 3c 54 66 a3 26 d1 7c a1 89 72 8e d4 b2 46 bc a0 7a 7f 1e 49 Data Ascii: " "[Br.`v-8ko0W)B4wfJ&2IZ.i)EFP"Z%j(<,c)5bWh}Mv,7H&GxSzAV} !sH:YZ4~@TWOK?k"{"R><Tf&\|rFzI
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 4a 86 94 9d 1c 59 69 d2 d4 a4 73 5a 27 48 37 ca ce 89 c4 b4 2e 3b ad 97 d5 94 d2 f7 b3 9d ed c6 c9 d4 b6 9b c5 6e 35 59 4d a9 ab e1 f9 ff a6 29 d5 9e e7 ce fe a2 0b 10 9c 71 1d db 69 92 d2 d1 c2 94 4a 63 4e 16 86 c0 c6 02 60 78 9e 7e 99 bd f4 1d ab a6 6a 9a ad 98 e1 3e b6 62 db 80 fd 08 98 19 68 b5 66 4b 7d b7 1d a6 9d e7 cb 29 bd 9f c7 79 1c 23 60 66 68 67 1d 05 b5 0e 21 21 03 68 06 0c 18 30 4f 5f 27 ea 3e cb 0a 7e 3c cb b9 65 52 ba e9 94 a0 ff a7 a9 55 fa 3f 40 1a 23 d2 30 0d b4 a7 8f 68 26 eb d9 24 43 49 b2 dd c7 ee 9d 25 d4 27 e1 4f a2 00 c9 0d 50 ee 79 92 35 3e d5 73 dc 9a bd 0e 56 15 28 a3 0a 54 8f 48 79 2e b7 7b ef 23 db f4 be a3 2b 4a af 78 93 6c 37 c9 37 1c ff d3 d4 6c 01 bc ff 15 08 72 4c 90 f2 ac e8 4c 39 ac 53 ae 5d fa 3a 76 25 09 ee bf 95 0e Data Ascii: JYisZ'H7.;n5YM)qiJcN`x~j>bhfK})y#`fhg!!h0O_'>~<eRU?@#0h&$CI%'OPy5>sV(THy.{#+Jxl77lrLL9S]:v%
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 90 75 bd bb 66 67 ad 3d bf 6a e7 c6 eb fc 25 28 82 80 f4 67 47 a6 f1 3e cd d1 41 71 b5 5d 2d 1f 6e 14 9f e5 9e 97 9d 81 b2 fc 93 48 7b 68 ab 39 87 ce ae c7 e9 fd 3c cb 38 5f b4 7f 85 00 bb 95 69 64 06 06 d6 97 34 72 02 1d 20 5e d4 95 bc 76 35 27 31 56 92 76 ec bf 1d f9 fd 35 90 b7 23 95 18 72 90 5f d1 e0 b0 e8 dc 02 39 43 d5 69 c5 d3 b2 09 c6 e1 fc 07 24 66 25 07 bd 90 37 64 47 2b 63 d0 f1 da 45 b7 ad 89 e0 3d 3a c0 07 30 90 13 c8 c5 85 7b 47 3f 81 e3 61 07 ec 84 dc 8c 01 59 88 32 d6 73 e4 c5 6b 6c fb 3b 28 95 83 b5 e8 80 e6 82 fb ce 60 f2 bd b8 60 09 75 49 d1 9f 39 1e c0 a0 15 ea 0a d8 1e 02 dd 9f 63 60 8d 1d 38 88 71 87 05 5e f8 a3 4b 28 61 18 21 27 12 13 a2 9b 14 90 40 32 66 28 58 92 ca 8a f4 b4 26 93 2c 84 b4 11 b1 f9 92 2d 03 1c c2 8e 23 1c c3 89 13 Data Ascii: ufg=j%(gG>Aq]-nH{h9<8_id4r ^v5'1Vv5#r_9Ci$f%7dG+cE=:0{G?aY2skl;(``uI9c`8q^K(a!'@2f(X&,-#
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: dc 3b 5b f6 d3 ce 12 73 03 4d 26 43 ce cf 58 8d cb 6c 34 68 66 3c 07 7c 7f ca 03 25 2c 09 39 92 62 69 58 6b 29 5c 25 1f 52 39 d2 bd 88 b2 c5 f1 19 5b 73 94 b5 be 6c 03 ee 86 bb 67 c7 4c 8a 37 e7 de 06 b8 d5 3e 24 12 2d 26 5a 47 90 c6 a3 cd 82 3f c1 a2 4e 59 d8 c7 f2 55 e8 94 f8 42 5e 62 3a 19 b8 73 62 58 04 31 25 b9 30 ce 27 1a 39 5c 85 5b 0f 29 61 58 52 26 55 b9 fd 45 20 4b 8a d8 b8 a9 1a 65 f0 5b 63 b5 60 6b 85 1b 21 c6 6b ad 1e 38 4a ee 94 bd 46 ed 32 e1 96 21 3b cc f8 e8 aa bd e6 ed b1 60 b7 6d ef 3c af 0a 26 0d 77 df 3b 9b 7d b1 df 17 1f fd b6 c7 3f 1f a9 ec 4f fa 1f 90 2c d5 b6 2c de 05 44 68 66 4b 83 9a b2 3b 90 d3 f5 bc f6 e4 f7 a9 b0 fb 21 bb 53 dc 0c 5b 5d 0a 5c de aa 88 8b 69 de 74 61 57 fa 88 a2 2e 70 5c cc 23 31 ef aa 51 c4 83 a1 fd 5c 97 ba Data Ascii: ;[sM&CXl4hf<\|%,9biXk)\%R9[slgL7>$-&ZG?NYUB^b:sbX1%0'9\[)aXR&UE Ke[c`k!k8JF2!;`m<&w;}?O,,DhfK;!S[]\itaW.p\#1Q\
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: f3 07 73 16 2c da c9 55 8f 03 17 3e 42 44 48 c0 90 63 c5 8e 23 3c 1b 14 b4 27 0c 16 47 36 49 a1 d2 e8 89 3a 30 5a 70 22 54 a9 c5 a0 ba 70 e5 c6 9d 87 78 89 50 52 a4 c9 90 25 47 9e 02 45 4a 94 a5 a2 39 4a 95 29 47 9b 6e 03 e6 2c 58 b4 93 ab 1e 07 2e 7c 84 88 90 80 21 c7 8a 1d 47 78 6e 1c 42 74 1a 65 f5 e3 2f 40 a0 20 13 a6 32 d3 dc f9 4a b7 9d dd fe 19 5a f4 e0 18 31 63 09 d7 8d 16 c8 9e b3 0e 96 d2 32 2a 4c d1 67 0f 01 80 3c 6c cb 3e 4e d4 02 41 a6 57 c1 c0 5b 2b 87 a9 18 41 7f ea 50 9f 86 c5 2e 85 dd 49 b5 46 1f fc 64 1e 0b cc 6a f8 cc f7 b3 00 0f 5f 02 3d 0b 27 dc 0d aa 4b 0a 36 85 ec f8 08 88 94 2e 47 5b 56 3b 06 3e 23 26 04 68 5e 99 5c 45 6c d9 13 4b 94 29 4b b6 1c 53 b4 68 b3 c4 32 9b 75 ea d6 eb bc 21 97 f2 a3 29 e4 69 b5 c4 71 27 dd 71 2f c3 bd 11 Data Ascii: s,U>BDHc#<'G6I:0Zp"TpxPR%GEJ9J)Gn,X.\|!GxnBte/@ 2JZ1c2*Lg<l>NAW[+AP.IFdj_='K6.G[V;>#&h^\ElK)KSh2u!)iq'q/
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 81 b2 aa 5a 89 d7 03 1e 32 86 fe 72 05 2b 70 fc 1c 50 e0 e8 8b d1 08 8d e9 d5 a9 2f 0d 7b 6a bd da 2a 64 16 b1 6c a5 da 04 3a b8 42 cd 13 4d 17 0a 6b 3a 3e 3c 27 62 73 47 dd f2 0c 4b c6 33 6f 7a de 91 cf e1 47 4c 73 b3 68 64 c5 70 46 9d 69 da 9c 7e e4 3d 4b fb 6c 29 fb 38 6c 6e 79 5e f8 9f 0b 8a 8b e8 f7 31 5f 02 1d f4 7a 36 a0 0a 63 e7 1d 47 04 17 f0 17 89 2f 89 59 ae da 43 8f 2a a3 31 2c ba 67 05 3f 60 22 f4 0d c2 cd 80 0a 49 5d d2 10 ca 13 bc 39 42 90 c6 48 67 39 63 cc 31 9d 75 ae b6 e9 38 c7 26 a5 09 8c 43 bc e0 0b 94 55 d5 4a dc 0d 38 64 e8 2e 57 65 05 95 d2 04 05 a6 11 be a7 b7 3a f5 a5 e1 65 6a 3d d9 7a 5f 24 b1 68 d9 4a b5 a9 e8 e0 0a 35 4f 34 5d 28 ac e9 60 78 4e c4 e6 8e ba e9 0c 4b c6 33 6f 7a de 31 ee 43 3e 67 7e 78 67 f2 24 df be 07 65 f4 cc Data Ascii: Z2r+pP/{jdl:BMk:><'bsGK3ozGLshdpFi~=Kl)8lny^1_z6cG/YC1,g?`"I]9BHg9c1u8&CUJ8d.We:ej=z_$hJ5O4](`xNK3oz1C>g~xg$e
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: fd db 9e 97 56 67 54 dd b3 38 2f ed cd 57 89 d2 ff 97 b7 32 9b 9f 7f fd 43 80 40 41 5f 17 1b 33 13 cf 32 a5 32 73 61 5b c6 3d e3 ab d1 ae 4c ba 64 8e 48 1b f7 6c c9 2f b6 24 b3 3d 8f 2e bb f9 55 db 91 ed 99 ff d3 06 7a 70 8c 98 b1 7c 91 55 19 ae 5e 78 0e 78 57 0b 18 88 d2 dd 1a 0d 30 60 71 4d 74 42 f6 17 98 6f 00 27 88 ce ce 25 c0 10 cf 40 d4 f2 0c f7 9e 01 07 00 00 00 83 c1 60 fb 58 14 08 ed c4 9e 03 47 4e b3 73 75 00 00 be 2d 9e 11 5f 9a 73 f9 43 a2 c5 26 7e 97 c4 80 92 22 4d 86 2c 39 f2 14 28 52 a2 4c c5 17 3e 6f be 67 d4 c1 ea 34 64 4b 11 a5 9e d2 93 c9 c6 ac 7b 2c 60 b0 81 ec db 69 db 18 76 70 82 5c b8 cd 53 95 06 00 27 f8 16 27 e3 ee fc 6c 9f 49 5f b7 b9 0d 77 7e 78 f0 cb 1f ff ca 63 77 10 c8 8c d5 28 30 00 1f 21 22 24 60 c8 bf d2 e7 e6 e7 02 00 a7 Data Ascii: VgT8/W2C@A_322sa[=LdHl/$=.Uzp\|U^xxW0`qMtBo'%@`XGNsu-_sC&~"M,9(RL>og4dK{,`ivp\S''lI_w~xcw(0!"$`
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 73 c3 e1 85 e2 8d 4b 4a 83 0f 1e 5f 9a fc 68 f1 a7 2d 94 0a d3 84 ab e4 ba e8 1c 12 fc 35 24 99 92 35 0a 2f e9 96 4c 5b 96 25 db a3 4d 33 e0 74 80 71 d2 32 68 18 9a da a6 ba 6f 07 b3 38 fc ab 61 44 8a 47 c0 13 e0 99 af e7 be de 8e d7 b2 e6 f6 88 9b b6 f9 35 ea 47 75 df f6 15 7a d0 6a 2a 06 87 c6 51 63 78 ec e8 1f 12 c6 71 ac 98 8b 0b 2b ac cd f5 2e f3 3e 57 56 9f 4e a4 55 79 5e 7d be c1 7c 42 04 8f 79 4d e9 f8 af b2 e9 c6 c3 0c 53 40 a6 99 4c 16 b9 7c 36 79 52 b6 a5 34 97 32 35 18 d9 f4 9f f7 46 7e 2d 66 61 01 56 91 a0 45 a3 c5 a2 c5 61 8b a7 96 d0 ab 12 a3 2a 29 ba 50 31 95 1c 5b 29 71 e7 2d c9 64 9a c0 32 e8 65 76 55 56 4a 65 a7 56 4e 5a e5 a6 57 5e 46 e5 67 56 41 d6 a8 04 a8 8a 51 f5 0a 5e 48 20 10 08 c4 87 23 91 c8 24 0d a0 41 46 43 dd 35 dc 70 8d 34 Data Ascii: sKJ_h-5$5/L[%M3tq2ho8aDG5GuzjQcxq+.>WVNUy^}\|ByMS@L\|6yR425F~-faVEa)P1[)q-d2evUVJeVNZW^FgVAQ^H #$AFC5p4
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: f9 f8 e4 e7 57 40 40 41 c1 19 c2 81 b0 43 11 a7 14 75 6c 31 27 10 77 6c 09 27 90 72 02 99 8e 72 72 2a 28 a8 a4 34 d4 03 01 11 10 59 50 47 67 f6 94 31 f0 68 0d 63 5c 34 71 c6 d4 45 b3 cc c8 08 8c d6 70 c5 b1 bb 63 4f c7 5e 0e bc dd ed e3 c4 7f b6 f0 9c a6 be 76 f9 fe 10 cf e4 04 20 fd d7 eb 7f 2b f7 27 27 20 e2 26 08 82 63 88 34 36 1f 02 4b a2 0b 7c 11 31 0a 66 6c b9 0b 86 e2 99 62 ad dd 97 c8 96 ea df d6 31 56 89 66 c7 43 08 8c c0 92 e8 1c 7e 24 8e cc 60 83 4a 6f c3 7c c9 9d ce 6d 2c d8 a8 1f 3b 8e b5 9c 6f d2 c4 c0 0c fe e4 a7 66 62 31 4a e1 9c 8a 39 7b ae 3c c9 e0 44 b6 54 ef 44 92 b9 72 63 62 82 90 a8 59 10 f3 12 8a 20 71 64 06 17 8a c2 53 98 82 08 92 d7 b0 e4 c0 5b 18 92 cc 95 1b dd 68 2a 5f 69 1e 18 4a 60 c4 8a 23 29 7f e1 28 0a 4f 61 f2 c0 d0 04 2a Data Ascii: W@@ACul1'wl'rrr(4YPGg1hc\4qEpcO^v +'' &c46K\|1flb1VfC~$`Jo\|m,;ofb1J9{<DTDrcbY qdS[h_iJ`#)(Oa*

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.18	49783	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	935	OUT	GET /sync_cookie_image_start_secondary?redirect_domain=mc.yandex.com&token=10382.91OTDC7CGhMUgd5msKBQIdMJAOVISv1vNGp9EokNsvH6IRYIY439ilpR9ghFy4Z1.AZ1YOtlm9mvrCEh9G3ToKwugLbw%2C HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; yandexuid=5250530921716814863; yashr=9089241241716814863; sync_cookie_csrf=3835061975fake
2024-05-27 13:01:09 UTC	670	IN	HTTP/1.1 302 Moved temporarily Connection: Close Date: Mon, 27 May 2024 13:01:09 GMT Location: https://mc.yandex.com/sync_cookie_image_decide_secondary?token=10382.PHokSIao8yHItpVHoilKJ7LvElhcKk_OfeMiRfRUAgZFbdT46izlmiBOc95P41WQVdZoaHSNmzacvchSIRLsAY-LRphnUACZ3FDhGTBBZqn6Bhvm3QpWT2dpAkU5csY4NoyTXdi0OOB-upnzWehEU4VYYeizz3kakGib1K_v3IrBnoGG5wDQeWCaVEMh-C_xZ5S90lf4fiLJREm5w_U2Nvm1jAiRpncuE676e0bo3io%2C.z5voVyT0_z8pviNRWNtRjPKoezg%2C Set-Cookie: sync_cookie_csrf_secondary=1973400091fake; Expires=Mon, 27-May-2024 13:11:09 GMT; Domain=.mc.yandex.ru; Path=/ Strict-Transport-Security: max-age=31536000 Transfer-Encoding: chunked X-XSS-Protection: 1; mode=block
2024-05-27 13:01:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.18	49791	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	694	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 12759 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:09 UTC	12759	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 32 34 63 30 34 38 2d 31 63 32 39 2d 31 31 65 66 2d 39 66 62 33 2d 34 36 31 64 65 66 33 39 62 39 63 35 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 63 73 54 43 6c 67 6e 4e 66 63 70 7a 64 5a 4b 4f 59 50 56 53 34 41 76 47 43 37 31 78 4f 4d 4a 70 64 52 66 69 72 46 36 7a 61 6b 53 48 61 70 70 72 51 45 59 72 37 30 56 5a 42 59 32 43 44 44 69 6d 72 71 44 62 78 42 72 71 51 52 67 4d 32 6b 50 62 66 61 47 6a 45 33 57 70 42 4c 63 73 77 6e 54 78 4a 67 6f 4f 62 58 30 32 6b 36 2d 4b 69 7a 74 54 5f 76 59 52 34 77 4f 34 68 59 31 79 7a 31 45 58 58 75 35 Data Ascii: {"entries":[{"sid":"2e24c048-1c29-11ef-9fb3-461def39b9c5","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"csTClgnNfcpzdZKOYPVS4AvGC71xOMJpdRfirF6zakSHapprQEYr70VZBY2CDDimrqDbxBrqQRgM2kPbfaGjE3WpBLcswnTxJgoObX02k6-KiztT_vYR4wO4hY1yz1EXXu5
2024-05-27 13:01:09 UTC	1361	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:09 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e24c048-1c29-11ef-9fb3-461def39b9c5; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e24c048-1c29-11ef-9fb3-461def39b9c5; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fb%2B8H96YWHxadKEq3MW2csBqalJjW5hjy%2FZsnKns3V0IAPM7t1Kfv6JDq62JanGTPpXnAysFQqhkorchnfvQOpeSh9u0yDEddMAcPgVrDcwT6S2zb08mR2up8FjVDPw3Og%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-27 13:01:09 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 32 36 38 64 32 31 31 38 36 31 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 88a631268d211861-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.18	49790	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	693	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2124 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:09 UTC	2124	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 32 34 63 30 34 38 2d 31 63 32 39 2d 31 31 65 66 2d 39 66 62 33 2d 34 36 31 64 65 66 33 39 62 39 63 35 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 63 73 54 43 6c 67 6e 4e 66 63 70 7a 64 5a 4b 4f 59 50 56 53 34 41 76 47 43 37 31 78 4f 4d 4a 70 64 52 66 69 72 46 36 7a 61 6b 53 48 61 70 70 72 51 45 59 72 37 30 56 5a 42 59 32 43 44 44 69 6d 72 71 44 62 78 42 72 71 51 52 67 4d 32 6b 50 62 66 61 47 6a 45 33 57 70 42 4c 63 73 77 6e 54 78 4a 67 6f 4f 62 58 30 32 6b 36 2d 4b 69 7a 74 54 5f 76 59 52 34 77 4f 34 68 59 31 79 7a 31 45 58 58 75 35 Data Ascii: {"entries":[{"sid":"2e24c048-1c29-11ef-9fb3-461def39b9c5","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"csTClgnNfcpzdZKOYPVS4AvGC71xOMJpdRfirF6zakSHapprQEYr70VZBY2CDDimrqDbxBrqQRgM2kPbfaGjE3WpBLcswnTxJgoObX02k6-KiztT_vYR4wO4hY1yz1EXXu5
2024-05-27 13:01:09 UTC	1365	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:09 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e24c048-1c29-11ef-9fb3-461def39b9c5; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e24c048-1c29-11ef-9fb3-461def39b9c5; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GAbuJoOJ%2FjE%2FqSGTdnuBCPrAZ%2B9MQYkflMe7dboyKAOD0D7P5b6wGjmIdXBDPGT0nUFUZZOWhBwAC10HmrKTCasFs8SZeP8N2c8MdtaA8EfqjmoVH5ZgLakFkO28I%2FeyeA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-27 13:01:09 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 32 36 38 65 36 34 38 63 63 61 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 88a631268e648cca-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.18	49788	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	694	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 14866 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:09 UTC	14866	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 30 65 39 34 31 65 2d 31 63 32 39 2d 31 31 65 66 2d 39 66 62 38 2d 31 36 63 37 37 38 37 30 63 38 35 35 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 79 77 66 6d 52 32 70 44 68 67 46 5a 32 39 4d 31 51 44 30 75 37 4b 62 47 4e 76 4b 71 6f 49 65 43 4e 48 68 34 4b 47 6b 51 31 64 43 32 58 53 48 35 62 37 46 58 5a 79 76 7a 38 66 58 42 77 72 6e 50 5f 6a 33 33 36 62 65 68 61 42 68 47 5f 6c 39 32 35 68 73 2d 6f 50 35 37 59 7a 52 5f 53 72 61 50 6f 57 57 4e 44 61 46 68 72 31 31 79 5f 4c 75 31 2d 50 2d 66 4a 72 67 49 66 5a 6d 32 53 46 69 39 65 5f 75 Data Ascii: {"entries":[{"sid":"2e0e941e-1c29-11ef-9fb8-16c77870c855","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"ywfmR2pDhgFZ29M1QD0u7KbGNvKqoIeCNHh4KGkQ1dC2XSH5b7FXZyvz8fXBwrnP_j336behaBhG_l925hs-oP57YzR_SraPoWWNDaFhr11y_Lu1-P-fJrgIfZm2SFi9e_u
2024-05-27 13:01:09 UTC	1365	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:09 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e0e941e-1c29-11ef-9fb8-16c77870c855; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e0e941e-1c29-11ef-9fb8-16c77870c855; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7PS1wY%2Ff10zRSaAwK4dkNZbaquw%2BkMN7dX%2FYSL23di2DLEHe3HR7NISJysmXI%2Bx1HeBIojfUj29FGf62b7XL2cLhhG5NKd7lG3fAUM47WNjJEvv38xoVyOjKUjbT2RBpUQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-27 13:01:09 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 32 36 61 61 61 32 34 32 34 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 88a63126aaa24249-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.18	49789	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	693	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 6092 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:09 UTC	6092	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 32 34 34 66 62 31 2d 31 63 32 39 2d 31 31 65 66 2d 62 30 66 34 2d 64 32 32 37 37 65 62 63 62 62 62 35 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 70 75 35 59 59 67 4f 64 4d 4b 68 33 68 5a 63 51 54 35 70 4f 74 51 31 66 75 65 66 61 5f 4f 32 74 68 6d 47 50 38 71 61 46 48 4c 77 32 5f 73 65 48 41 43 74 63 49 42 32 50 41 48 77 74 50 7a 53 6a 69 35 5f 71 50 46 4d 55 65 79 45 69 74 4a 63 46 55 37 65 34 37 7a 6d 69 2d 2d 6a 32 52 6c 43 38 53 4d 44 54 71 4b 58 70 67 39 79 65 51 5f 67 70 6f 48 4c 4f 39 68 6e 77 67 70 4e 6d 66 49 58 65 71 78 6b Data Ascii: {"entries":[{"sid":"2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"pu5YYgOdMKh3hZcQT5pOtQ1fuefa_O2thmGP8qaFHLw2_seHACtcIB2PAHwtPzSji5_qPFMUeyEitJcFU7e47zmi--j2RlC8SMDTqKXpg9yeQ_gpoHLO9hnwgpNmfIXeqxk
2024-05-27 13:01:09 UTC	1351	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:09 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jws7yvz8DxavnVTHqQg9E4NZ%2FK1MMtA6Ku%2FLA%2Bt81%2FLpdKtvvfcbZbm0Db%2FoIQVTf44tt2uhS4EfFXbKL2MQayyI7VT5vmCwNmKQmDEmnBBxGRW%2FUiI0I8ZLH%2FU8ewqopQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
2024-05-27 13:01:09 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 32 36 62 65 37 34 34 32 61 63 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 88a63126be7442ac-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.18	49792	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	692	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 992 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:09 UTC	992	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 32 34 34 66 62 31 2d 31 63 32 39 2d 31 31 65 66 2d 62 30 66 34 2d 64 32 32 37 37 65 62 63 62 62 62 35 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 70 75 35 59 59 67 4f 64 4d 4b 68 33 68 5a 63 51 54 35 70 4f 74 51 31 66 75 65 66 61 5f 4f 32 74 68 6d 47 50 38 71 61 46 48 4c 77 32 5f 73 65 48 41 43 74 63 49 42 32 50 41 48 77 74 50 7a 53 6a 69 35 5f 71 50 46 4d 55 65 79 45 69 74 4a 63 46 55 37 65 34 37 7a 6d 69 2d 2d 6a 32 52 6c 43 38 53 4d 44 54 71 4b 58 70 67 39 79 65 51 5f 67 70 6f 48 4c 4f 39 68 6e 77 67 70 4e 6d 66 49 58 65 71 78 6b Data Ascii: {"entries":[{"sid":"2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"pu5YYgOdMKh3hZcQT5pOtQ1fuefa_O2thmGP8qaFHLw2_seHACtcIB2PAHwtPzSji5_qPFMUeyEitJcFU7e47zmi--j2RlC8SMDTqKXpg9yeQ_gpoHLO9hnwgpNmfIXeqxk
2024-05-27 13:01:09 UTC	1363	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:09 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y3DBKphn%2BLHEIGIvIHEOwmqhifuNsaIIpgrzPlrziP4guUKkyRLgvieXQ60ETRtYci3MCbzNweedyFJXv0NzkYHhctjwCsIlWh0o%2BljaWt1zseWi0H1%2B5P8g5Ns1wEg7cw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-27 13:01:09 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 32 36 63 61 38 38 39 65 31 36 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 88a63126ca889e16-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.18	49793	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	420	OUT	GET /sqoutlogo_1716467887.png HTTP/1.1 Host: cdn.bidbrain.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:09 UTC	1172	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:09 GMT Content-Type: image/png Content-Length: 2660 Connection: close Expires: Mon, 27 May 2024 13:18:28 GMT Cache-Control: public, max-age=14400 Last-Modified: Thu, 23 May 2024 12:38:07 GMT ETag: "5e001b8b0fdd7c038c577e433d8ace56" x-goog-generation: 1716467887230262 x-goog-metageneration: 3 x-goog-stored-content-encoding: identity x-goog-stored-content-length: 2660 x-goog-hash: crc32c=8i2zAw== x-goog-hash: md5=XgAbiw/dfAOMV35DPYrOVg== x-goog-storage-class: STANDARD Access-Control-Allow-Origin: * Access-Control-Expose-Headers: Content-Type X-GUploader-UploadID: ABPtcPpyYFLAcJ8FWe_koYMCZahtHxeIdp1LuSxvA0c9F6VwrWkhccPrSI_a9x_jzwdpOIWMGwc CF-Cache-Status: HIT Age: 2561 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KB2Hp4OebpZzeWRmy2wJ%2BLZBL4uOjiqJnNd42NsbZTvtIhtSzbKhLVK6na2nuNZnOUCxyxFfO7vr4OjNX30zxrlvcfxLeavrN5q2CTUfat7gL70Qc%2FQD2b%2BOF%2Bq1Zhy%2BoUTM"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a631275cd37d0e-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 13:01:09 UTC	197	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 96 00 00 00 2c 08 06 00 00 00 87 50 41 f1 00 00 0a 2b 49 44 41 54 78 9c ed 9c 7f 8c 5c 55 15 c7 3f e7 ed 6e 7f 40 4b a7 04 f9 51 8c 4c 45 2b 12 dd 9d 6d 51 12 15 98 46 83 82 bb d3 2d 89 69 34 9a 6e 81 dd 42 44 59 48 40 50 c9 0e 24 0a 86 18 6a 83 b1 dd c5 76 6b a2 98 98 d2 fd 51 ea 8f 98 74 1b 44 24 d0 ed 6c ab 48 40 c2 50 40 a8 40 99 f2 b3 bb 9d 79 c7 3f ee 9b ce db b7 ef cd cc db ce ce 6e 61 3e c9 64 e6 de 77 ee bd 67 de fb ce bd e7 dd 7b e7 41 8d 1a 35 6a d4 a8 f1 a1 46 fc 32 57 7d 66 0b 5a 9f 3b 1d 74 29 30 af ca 3e 79 90 63 Data Ascii: PNGIHDR,PA+IDATx\U?n@KQLE+mQF-i4nBDYH@P$jvkQtD$lH@P@@y?na>dwg{A5jF2W}fZ;t)0>yc
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 88 1e 1c dc d7 f9 ea cc fa 51 23 0c be c2 4a 34 3e 70 0e 96 7d 37 d0 0a 9c 5e 5d 97 26 f1 2e f0 30 70 ef 60 aa f3 c9 19 f6 a5 46 99 d4 fb 65 aa 95 eb 12 64 2d 30 0e 1c 06 b4 aa 5e 15 3c 51 90 08 70 15 30 96 88 6d be 79 30 b5 fe f5 99 f1 a5 46 18 7c 85 25 c8 7a 60 0c b4 1b d8 02 72 22 c2 12 a6 2a 4c 01 41 5a 54 75 2b d0 ac f0 71 a0 26 ac 93 00 5f 61 01 8b 80 b7 41 0e 0d a6 3a 5f ab a6 43 5e 56 37 f5 3c 9a 33 03 f6 3c c1 9a 33 93 be d4 28 1f 6b a6 1d 28 49 9d b8 7c 9c a1 11 b9 46 68 66 bf b0 6a 9c 94 d4 84 55 63 5a 08 8a b1 02 49 2c ef 05 d5 3a ec 0a 7b 62 09 0d b6 e6 b6 8f 76 56 b8 e2 1a 33 41 68 61 a1 7a 09 d0 05 cc ad 98 17 82 a0 fa 7e 56 e4 67 c0 13 15 ab b7 c6 8c 31 05 61 71 25 d0 82 50 f1 3b 34 1b 46 39 f9 84 15 07 2e 73 de a3 ae fc 34 30 00 f4 3b 9f Data Ascii: Q#J4>p}7^]&.0p`Fed-0^<Qp0my0F\|%z`r"*LAZTu+q&_aA:_C^V7<3<3(k(I\|FhfjUcZI,:{bvV3Ahaz~Vg1aq%P;4F9.s40;
2024-05-27 13:01:09 UTC	1094	IN	Data Raw: 13 70 67 30 bd 81 7b 62 34 4f b1 e9 81 0c 26 38 cf f7 80 71 8c 30 07 9c 63 de d9 ef be 12 75 b9 59 8b e9 11 87 1d 3f ef 23 1c 7e f5 65 9c 57 dc cf 97 70 c2 12 fb 20 c8 6b c0 12 a0 b1 b5 a9 67 d9 d0 28 cf 04 da 67 e7 d4 8b f0 b2 c2 4f 50 3d 1b cb f6 9b 01 ae 36 51 cc 89 69 77 d2 69 8c 10 22 2e 9b 34 c5 7b 83 3e a7 1e 77 4f d5 ee 67 e8 a2 9c 3b ce 2e cc 32 4b d4 49 27 29 2c 60 bb 49 53 7c 41 3b 83 f1 3f ee a4 23 4c fc 21 84 65 98 c2 0f 06 26 4f 32 f7 79 0b 84 1a 0a d5 b2 fe 81 99 9f 52 60 89 25 d2 95 88 6d 6e 88 c7 93 93 6c e3 17 fe 92 ac 2d 75 aa fc 1d d5 fb 40 6e 01 6b 47 5b ec 44 be df b4 10 65 b2 a8 56 97 51 2e 89 59 ca 48 97 b0 4b 63 62 b9 64 19 75 66 1c db 62 75 a6 cb b0 01 d3 3b 06 d9 a4 09 37 af 98 21 e4 ce 8c 50 3d d6 d0 48 c7 a1 44 ac e7 f7 c0 c5 Data Ascii: pg0{b4O&8q0cuY?#~eWp kg(gOP=6Qiwi".4{>wOg;.2KI'),`IS\|A;?#L!e&O2yR`%mnl-u@nkG[DeVQ.YHKcbdufbu;7!P=HD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.18	49796	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	591	OUT	GET /sig.js HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:09 UTC	1321	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:09 GMT Content-Type: text/javascript Content-Length: 5778 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=302b6b6c-1c29-11ef-807f-3232b5c96064; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hXROiwN4TotK3oX8AauM0JkZtB8v9XdOAJY3hMCQHNZ12U8uMULvXCExtV23PaVZiK%2F0%2BLA2O%2FXU1hRHu3TszTuvSPYjhIzyOFf3S9Bu%2Ftk%2Bqb%2Br2hmyolR%2FxdatWvskodrZu4g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a63128d90543c1-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 13:01:09 UTC	48	IN	Data Raw: 76 61 72 20 79 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 6d 3d 28 67 2c 68 2c 6b 29 3d 3e 68 20 69 6e 20 67 3f 79 28 Data Ascii: var y=Object.defineProperty,m=(g,h,k)=>h in g?y(
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 67 2c 68 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6b 7d 29 3a 67 5b 68 5d 3d 6b 2c 70 3d 28 67 2c 68 2c 6b 29 3d 3e 28 6d 28 67 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 68 3f 68 2b 22 22 3a 68 2c 6b 29 2c 6b 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 77 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 68 2c 31 30 30 29 2c 74 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 61 2c 65 78 74 72 61 3a 62 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 77 69 6e 64 6f Data Ascii: g,h,{enumerable:!0,configurable:!0,writable:!0,value:k}):g[h]=k,p=(g,h,k)=>(m(g,"symbol"!=typeof h?h+"":h,k),k);(function(){function g(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(w\|\|=setInterval(h,100),t.push({event:a,extra:b}))}function h(){windo
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 65 74 77 6f 72 6b 3b 75 2e 4c 6f 67 69 6e 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 63 6f 6e 73 74 20 47 3d 7b 76 65 72 73 69 6f 6e 3a 31 2c 63 6f 6c 6c 65 63 74 6f 72 73 3a 7b 7d 7d 3b 76 61 72 20 72 3d 28 61 3d 3e 28 61 2e 53 69 67 6e 61 6c 3d 22 73 69 67 22 2c 61 2e 49 6e 69 74 3d 22 69 6e 69 74 22 2c 61 2e 45 72 72 6f 72 3d 22 65 72 72 6f 72 22 2c 61 29 29 28 72 7c 7c 7b 7d 29 3b 6c 65 74 20 74 3d 5b 5d 2c 77 3b 63 6c 61 73 73 20 76 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 70 28 74 68 69 73 2c 22 63 6f 6e 66 69 67 22 29 3b 70 28 74 68 69 73 2c 22 6e 61 6d 65 22 29 3b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 62 3b 74 68 69 73 2e 6e 61 6d 65 3d 61 3b 74 72 79 7b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a Data Ascii: etwork;u.Login;f.Static;f.Static;f.Static;const G={version:1,collectors:{}};var r=(a=>(a.Signal="sig",a.Init="init",a.Error="error",a))(r\|\|{});let t=[],w;class v{constructor(a,b){p(this,"config");p(this,"name");this.config=b;this.name=a;try{this.initializ
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 29 2c 6c 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 61 77 61 69 74 20 66 65 74 63 68 28 61 2c 7b 6d 6f 64 65 3a 22 6e 6f 2d 63 6f 72 73 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 62 3f 22 6f 6d 69 74 22 3a 22 69 6e 63 6c 75 64 65 22 2c 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3a 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 2c 63 61 63 68 65 3a 22 6e 6f 2d 73 74 6f 72 65 22 2c 73 69 67 6e 61 6c 3a 64 2e 73 69 67 6e 61 6c 7d 29 3b 61 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 61 2d 6c 29 7d 61 73 79 6e 63 20 63 6f 6c 6c 65 63 74 28 61 2c 62 2c 63 2c 64 29 7b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 6c 65 74 20 6c 3d 21 30 2c 71 3d 30 3b 69 66 Data Ascii: ),l=performance.now();await fetch(a,{mode:"no-cors",credentials:b?"omit":"include",referrerPolicy:"no-referrer",cache:"no-store",signal:d.signal});a=performance.now();return clearTimeout(e),Math.round(a-l)}async collect(a,b,c,d){const e=[];let l=!0,q=0;if
2024-05-27 13:01:09 UTC	1369	IN	Data Raw: 32 33 34 29 3b 63 6f 6e 73 74 20 62 3d 30 21 3d 3d 61 3b 6c 65 74 20 63 3d 22 42 6c 38 65 45 68 45 52 47 42 34 4a 45 67 38 4f 58 30 63 47 58 78 41 53 43 41 34 59 58 30 63 47 58 78 77 65 43 52 51 4c 47 46 39 48 47 78 77 52 44 68 68 52 58 78 67 4c 47 42 4d 4a 4c 52 77 50 48 42 41 4f 58 30 63 47 58 78 34 52 46 42 34 57 58 30 63 47 58 78 34 46 58 30 64 66 47 46 4d 65 45 52 51 59 45 77 6b 6c 58 31 46 66 48 67 52 66 52 31 38 59 55 78 34 52 46 42 67 54 43 53 52 66 55 56 38 55 47 56 39 48 58 78 68 54 43 52 77 50 47 68 67 4a 55 78 51 5a 58 51 45 42 58 51 67 54 47 52 67 62 46 42 4d 59 47 56 38 41 55 56 38 51 45 67 67 4f 47 41 67 4e 58 30 63 47 58 78 41 49 42 56 39 48 58 78 68 54 48 68 45 55 47 42 4d 4a 4a 56 39 52 58 78 41 49 42 46 39 48 58 78 68 54 48 68 45 55 47 Data Ascii: 234);const b=0!==a;let c="Bl8eEhERGB4JEg8OX0cGXxASCA4YX0cGXxweCRQLGF9HGxwRDhhRXxgLGBMJLRwPHBAOX0cGXx4RFB4WX0cGXx4FX0dfGFMeERQYEwklX1FfHgRfR18YUx4RFBgTCSRfUV8UGV9HXxhTCRwPGhgJUxQZXQEBXQgTGRgbFBMYGV8AUV8QEggOGAgNX0cGXxAIBV9HXxhTHhEUGBMJJV9RXxAIBF9HXxhTHhEUG
2024-05-27 13:01:09 UTC	254	IN	Data Raw: 74 6f 72 73 29 29 74 72 79 7b 69 66 28 65 2e 61 63 74 69 76 65 29 69 66 28 65 2e 74 79 70 65 3d 3d 3d 0a 66 2e 53 74 61 74 69 63 29 6e 65 77 20 4a 28 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 65 2e 74 79 70 65 3d 3d 3d 66 2e 4e 65 74 77 6f 72 6b 29 6e 65 77 20 49 28 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 65 2e 74 79 70 65 3d 3d 3d 66 2e 49 4c 69 6e 6b 73 29 6e 65 77 20 48 28 64 2c 65 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 60 69 6e 76 61 6c 69 64 20 74 79 70 65 20 24 7b 65 2e 74 79 70 65 7d 20 69 6e 20 24 7b 64 7d 60 29 3b 7d 63 61 74 63 68 28 6c 29 7b 6b 28 60 66 61 69 6c 65 64 20 63 72 65 61 74 69 6e 67 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 7d 60 2c 6c 29 7d 67 28 72 2e 49 6e 69 74 29 7d 29 28 29 7d 29 28 29 3b 0a Data Ascii: tors))try{if(e.active)if(e.type===f.Static)new J(d,e);else if(e.type===f.Network)new I(d,e);else if(e.type===f.ILinks)new H(d,e);else throw Error(`invalid type ${e.type} in ${d}`);}catch(l){k(`failed creating ${JSON.stringify(e)}`,l)}g(r.Init)})()})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.18	49797	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	1108	OUT	GET /rtimp?sid=2e0e941e-1c29-11ef-9fb8-16c77870c855&d=transfiles.ru&cr=ext_continue_sqout_nd32&a=imp&p=ZlSEEgAD5a4CO87BAAXqAkO-BDQEmDBZTmf2Jw&im=ywfmR2pDhgFZ29M1QD0u7KbGNvKqoIeCNHh4KGkQ1dC2XSH5b7FXZyvz8fXBwrnP_j336behaBhG_l925hs-oP57YzR_SraPoWWNDaFhr11y_Lu1-P-fJrgIfZm2SFi9e_uJWGoA1WacgJ_5BBNOM88Y5rIKRcYHKI7inJGL1bvY7oqQ8cXdlucoAPyei5KnxwwgvgUwFwT2GCM3ZaLZryWSVhRAvSjj4bn3G0skWmojUUgxhDZY5pA1Q4FMtWNt0e-5w0CPeyryGO_fFIKaPBAXKYoUN-dDujfjxw3XKBjvd-3qhajYhJlX2qQgp7Ar&cbvp=2 HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:10 UTC	1359	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e0e941e-1c29-11ef-9fb8-16c77870c855; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e0e941e-1c29-11ef-9fb8-16c77870c855; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rq12gAApltyLE%2BDMRUxW0Goyayyl6yGi5dc9y1LcNZUiL9Fp4rr%2FUUnJwJqOxs70Ttl7%2FZAg3d6i3q08Tk8foyF5DsgkfaoPL1KXZTl0wu0zsS70DRqRByoO6pofKZiYzA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a63129c98042b1-EWR
2024-05-27 13:01:10 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.18	49795	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:09 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-27 13:01:10 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=184167 Date: Mon, 27 May 2024 13:01:10 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-27 13:01:10 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.18	49802	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	1151	OUT	GET /rtimp?sid=2e24c048-1c29-11ef-9fb3-461def39b9c5&d=transfiles.ru&cr=ext_continue_sqout_nd32&a=imp&p=ZlSEEgAF0l4CO9JEAAYDwf_oVh8NlMxuVSTtyg&im=csTClgnNfcpzdZKOYPVS4AvGC71xOMJpdRfirF6zakSHapprQEYr70VZBY2CDDimrqDbxBrqQRgM2kPbfaGjE3WpBLcswnTxJgoObX02k6-KiztT_vYR4wO4hY1yz1EXXu5TxjYh-Qj7HmQ5PbFloc0nQhX8IVDC866aJqbSTql8vHj7_pJX_a95XX4rSjiXd4Na51NTHs1Fbk7EPhLVXq21sQ37tP1x0rHKsWQdP-mTgMcQTLcuZUk6guOp_Ji83jtLJQlmRol5AMRJw4VTLm49kqz2sd3npcfeWRDMzVAK6RO6QPn_MeolthgAxovwV6N8r04wYn-ewqY1oQ5RFWv2_PeqDr4kKCJvAOAFDsU&cbvp=2 HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:10 UTC	1363	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e24c048-1c29-11ef-9fb3-461def39b9c5; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e24c048-1c29-11ef-9fb3-461def39b9c5; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ewLo3cEefSAGgR2NA0yj3qP5VFRzeIFoNqYKUj41No0Pn5ZJXm%2BPXvr%2Fd4Or9pNpl6e9gCw%2Fe4GBVTcsh9sDpL0JCDBMPFhTFjv9V86%2BwAre%2B2IsKuzuSUrPHi6GbF4AYw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a6312ac9ef4204-EWR
2024-05-27 13:01:10 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.18	49801	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	692	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 907 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:10 UTC	907	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 32 34 33 36 37 38 2d 31 63 32 39 2d 31 31 65 66 2d 61 38 31 34 2d 36 61 37 36 37 36 35 31 39 34 63 64 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 68 7a 65 2d 75 4e 44 6f 52 61 4b 63 50 6d 57 6a 68 43 78 57 76 42 2d 44 5a 62 47 78 38 34 66 57 6b 56 6b 77 67 37 37 52 56 72 56 56 53 47 44 6d 42 46 5f 75 57 53 4f 38 76 59 69 5a 39 34 49 45 51 63 51 6e 36 4d 31 37 70 48 66 39 36 65 4b 35 69 4d 37 55 4e 4a 4b 47 49 4b 57 58 6d 6a 64 5a 31 64 32 47 35 43 65 79 70 45 2d 4e 39 6f 59 46 78 5f 37 70 56 63 64 52 50 55 57 38 79 76 61 4a 5f 49 4e Data Ascii: {"entries":[{"sid":"2e243678-1c29-11ef-a814-6a76765194cd","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"hze-uNDoRaKcPmWjhCxWvB-DZbGx84fWkVkwg77RVrVVSGDmBF_uWSO8vYiZ94IEQcQn6M17pHf96eK5iM7UNJKGIKWXmjdZ1d2G5CeypE-N9oYFx_7pVcdRPUW8yvaJ_IN
2024-05-27 13:01:10 UTC	1367	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e243678-1c29-11ef-a814-6a76765194cd; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e243678-1c29-11ef-a814-6a76765194cd; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4FnCLHUQ%2B6c6RN6YwI%2BRooPDpxq6GIVWB4uAbykeOV8lbhDHiczcNUN6R2%2FmZ38bP%2FqgS0YJHNuxem12zy9UfJvuf2N%2B75tlpa08sgQkWROMF3Dl4yzepXW99UJ9f9qAOQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-27 13:01:10 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 32 61 39 63 32 65 30 63 39 32 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 88a6312a9c2e0c92-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.18	49804	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	693	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 7216 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:10 UTC	7216	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 30 65 39 34 31 65 2d 31 63 32 39 2d 31 31 65 66 2d 39 66 62 38 2d 31 36 63 37 37 38 37 30 63 38 35 35 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 79 77 66 6d 52 32 70 44 68 67 46 5a 32 39 4d 31 51 44 30 75 37 4b 62 47 4e 76 4b 71 6f 49 65 43 4e 48 68 34 4b 47 6b 51 31 64 43 32 58 53 48 35 62 37 46 58 5a 79 76 7a 38 66 58 42 77 72 6e 50 5f 6a 33 33 36 62 65 68 61 42 68 47 5f 6c 39 32 35 68 73 2d 6f 50 35 37 59 7a 52 5f 53 72 61 50 6f 57 57 4e 44 61 46 68 72 31 31 79 5f 4c 75 31 2d 50 2d 66 4a 72 67 49 66 5a 6d 32 53 46 69 39 65 5f 75 Data Ascii: {"entries":[{"sid":"2e0e941e-1c29-11ef-9fb8-16c77870c855","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"ywfmR2pDhgFZ29M1QD0u7KbGNvKqoIeCNHh4KGkQ1dC2XSH5b7FXZyvz8fXBwrnP_j336behaBhG_l925hs-oP57YzR_SraPoWWNDaFhr11y_Lu1-P-fJrgIfZm2SFi9e_u
2024-05-27 13:01:10 UTC	1365	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e0e941e-1c29-11ef-9fb8-16c77870c855; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e0e941e-1c29-11ef-9fb8-16c77870c855; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C8RqfbKFgmHfIqkn8gJViw5bjD7UvSBl%2FP3srGCFDViX8l3iCpzh3LI2%2Bz%2FWgYPYAcv8xOmT6bTAx7cpbOP8871Y8l5zU05fIsB0j0GxMIqvnsn%2BLXjokzyQZLpIhvKfdg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-27 13:01:10 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 32 61 61 61 64 64 35 35 38 39 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 88a6312aaadd5589-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.18	49803	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	693	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 7214 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:10 UTC	7214	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 32 34 63 30 34 38 2d 31 63 32 39 2d 31 31 65 66 2d 39 66 62 33 2d 34 36 31 64 65 66 33 39 62 39 63 35 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 63 73 54 43 6c 67 6e 4e 66 63 70 7a 64 5a 4b 4f 59 50 56 53 34 41 76 47 43 37 31 78 4f 4d 4a 70 64 52 66 69 72 46 36 7a 61 6b 53 48 61 70 70 72 51 45 59 72 37 30 56 5a 42 59 32 43 44 44 69 6d 72 71 44 62 78 42 72 71 51 52 67 4d 32 6b 50 62 66 61 47 6a 45 33 57 70 42 4c 63 73 77 6e 54 78 4a 67 6f 4f 62 58 30 32 6b 36 2d 4b 69 7a 74 54 5f 76 59 52 34 77 4f 34 68 59 31 79 7a 31 45 58 58 75 35 Data Ascii: {"entries":[{"sid":"2e24c048-1c29-11ef-9fb3-461def39b9c5","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"csTClgnNfcpzdZKOYPVS4AvGC71xOMJpdRfirF6zakSHapprQEYr70VZBY2CDDimrqDbxBrqQRgM2kPbfaGjE3WpBLcswnTxJgoObX02k6-KiztT_vYR4wO4hY1yz1EXXu5
2024-05-27 13:01:10 UTC	1351	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e24c048-1c29-11ef-9fb3-461def39b9c5; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e24c048-1c29-11ef-9fb3-461def39b9c5; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=B4jOA0cNA%2BOI8HapOLJ4m1%2F7f8gOFGzzt1ZoXD87BKU%2F0xXKoZPxPyaEyRA5STQusKFrl0Du68jtgNcz4%2Bl2%2F2Z2JaALSmttBs%2F%2FxZAThbsnlTjoKKgCnWw1LrV09wBxTg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}
2024-05-27 13:01:10 UTC	82	IN	Data Raw: 53 65 72 76 65 72 3a 20 63 6c 6f 75 64 66 6c 61 72 65 0d 0a 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 32 61 61 38 37 64 34 33 31 33 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: Server: cloudflareCF-RAY: 88a6312aa87d4313-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.18	49798	216.58.206.66	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	2791	OUT	GET /pagead/adview?ai=CAIqXEoRUZq7LD8Gd78EPgtSXmAe9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOkBT9DtPGeYQY5dYXYiBj0xruaMf1DEhRVGynZK6w48Ujl41s1YPYGOkYOeHnwQe97oPGQH0hefM4OQTmRK9is87HziHmkIVO0EeFPn3aSDtoDufow8b7k6amJVFY1EeWS0hifj7LDmnZUcELLtYABjxNzTh529P4wHkBv2BKadUbtokO9GZBiTODx8EiP32YbxhtXI0KAi1FCczvBC6nmsWM2BI4BoNaS0hSCvCvhn9TWKDRYF4MqYhV87SQGKWj58APy9zEhQ1PkFIlgKbhRGezn4zFWaRUTVRP1cLa9a3j8uNBULEHk3sDuABq_-tKHlnqO4kwGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAetvrEC2AcA0ggiCIBhEAEyAooCOgmAQIDAgICAoChIvf3BOliwhv3h8a2GA4AKAfoLAggBgAwB0BUBgBcBshcaChgSFHB1Yi05Njc4MzM1ODg3MDU1OTI1GAA&sigh=X-cx5vN0UcU&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLTW7u4oge14IuBjKtz3YT8jNF6w2C2f2dpMInZBKZdkhNtx6SNLsj0rEk5kU2Z30Vy-VDSFFKHeVSUvnj0Vh7CRDgM4E2fEuvdBgB&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiWocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&h=280&slotname=7823858479&adk=642103812&adf=441738196&pi=t.ma~as.7823858479&w=970&abgtt=3&fwrn=4&fwrnh=100&lmt=1716814864&rafmt=1&format=970x280&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862308&bpp=4&bdt=3661&idt=1768&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=2846887072687&frm=20&pv=2&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=158&biw=1263&bih=907&scr_x=0&scr_y=20&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724% [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-27 13:01:10 UTC	1013	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:01:10 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUmZGr8Gb454sMA-vt-6SWpqQt1dgsCDcIJcX7DgxXRw5CeM5VDq0RisShoaBEQ; expires=Wed, 27-May-2026 13:01:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 27 May 2024 13:01:10 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.18	49805	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	693	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4216 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:10 UTC	4216	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 32 34 62 32 62 36 2d 31 63 32 39 2d 31 31 65 66 2d 39 61 39 33 2d 37 65 66 30 32 66 64 30 38 39 66 30 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 38 6e 6e 55 7a 36 73 41 6a 30 47 4e 45 63 69 58 30 59 62 64 6f 6a 6c 61 6d 54 76 51 53 2d 44 73 72 32 57 4a 30 6a 4f 32 37 43 4c 51 33 76 6c 69 36 5f 41 6f 61 66 62 4c 5a 34 59 43 49 4a 44 4d 48 50 2d 41 73 30 38 4d 46 32 4f 43 50 73 6f 73 72 6f 47 44 54 69 45 71 36 64 31 43 4e 6a 50 71 2d 6f 33 43 66 6c 42 76 73 67 34 34 33 34 52 63 4f 6d 31 4f 33 6b 63 76 6d 50 4d 6d 56 4f 56 70 45 54 77 Data Ascii: {"entries":[{"sid":"2e24b2b6-1c29-11ef-9a93-7ef02fd089f0","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"8nnUz6sAj0GNEciX0YbdojlamTvQS-Dsr2WJ0jO27CLQ3vli6_AoafbLZ4YCIJDMHP-As08MF2OCPsosroGDTiEq6d1CNjPq-o3CflBvsg4434RcOm1O3kcvmPMmVOVpETw
2024-05-27 13:01:10 UTC	1365	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e24b2b6-1c29-11ef-9a93-7ef02fd089f0; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e24b2b6-1c29-11ef-9a93-7ef02fd089f0; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZYJUxTG%2BSTrMIaPOcFAcPJsPCOgEsjlucenedB%2FU1fwf2TycUxlSgsnV1bcXutop0PFKWYMn6t93SJ3bc3Rb%2FbnpznlIx8D7ZJwcrlFF4HQJ7NXOSB28uACAUYAzc%2Fg9UQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-27 13:01:10 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 32 61 65 64 34 32 34 31 65 64 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 88a6312aed4241ed-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.18	49799	216.58.206.66	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	2747	OUT	GET /pagead/adview?ai=ClnvfEoRUZt6kF8Sk78EPwYeYiAi9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOkBT9DJs4DwZkFXazdC1vb_IfyT66cVwzssloIAuPYWdk2pvdtdkGfl8RgS3j-Rb1GTsGsjffrBVrJompxkEBZ924zCEaxLXjpE8OBkyCvMc-kiBz_1sMZqZ6htcQ27oYfZHqEPFnNPxSHQPU1iEcdIX0FhjqCDTxj4rDa-b17-SC3kMU1BJlX07cp2Z9WAoB96JWUXADgY-JX7-YKhNJ443k1YUuN81i0TyhiIYfAGYqM-zP8TWNDBiwTRBYrnljr4fSJestOWOB7pVjcW6IT-vAxBFegz9lpnTD1Nae1FR4Aefzq-zoyo2HGABq_-tKHlnqO4kwGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAetvrEC2AcA0ggiCIBhEAEyAooCOgmAQIDAgICAoChIvf3BOljO2oTi8a2GA4AKAfoLAggBgAwB0BUBgBcBshcaChgSFHB1Yi05Njc4MzM1ODg3MDU1OTI1GAA&sigh=2wcJhgJJwFM&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLoh93Sadr21NHJ2zkjDpMZfnXwrBt59depIsu5gVxrAevUT4Mr3AQrbvEezgmEpr4CE-bTyWvTiwSPN_8bxGxnJJ5_qKbjddvxxgB&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiWocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&h=100&slotname=8540115672&adk=3304334544&adf=3870114935&pi=t.ma~as.8540115672&w=970&abgtt=3&lmt=1716814864&format=970x100&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862312&bpp=1&bdt=3665&idt=1804&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=970x280&correlator=2846887072687&frm=20&pv=1&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=823&biw=1263&bih=907&scr_x=0&scr_y=58&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C3107867 [TRUNCATED] Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: test_cookie=CheckForPermission
2024-05-27 13:01:10 UTC	1013	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:01:10 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Set-Cookie: IDE=AHWqTUk2Co9pq95NGzMu5KOeKWs8P98oKa60jC9vhZG0ZyYTPcE6LZk_6y2W_PG2NHY; expires=Wed, 27-May-2026 13:01:10 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Set-Cookie: test_cookie=; expires=Fri, 01-Aug-2008 22:45:55 GMT; path=/; domain=.doubleclick.net; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Expires: Mon, 27 May 2024 13:01:10 GMT Cache-Control: private Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.18	49800	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	1636	OUT	POST /webvisor/33590114?wv-part=1&wv-check=5780&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=716971472&browser-info=we%3A1%3Aet%3A1716814869%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090108%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814869&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 224 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:10 UTC	224	OUT	Data Raw: 77 76 2d 64 61 74 61 3d 44 2a 67 42 41 51 46 45 41 43 73 41 41 4f 38 4a 39 67 6b 41 41 51 4a 4d 41 51 30 41 41 51 4e 6b 41 68 6f 41 67 77 48 76 43 62 51 47 42 77 42 6a 41 47 38 41 62 67 42 30 41 47 55 41 62 67 42 30 41 41 45 45 62 41 4d 61 43 77 42 31 41 48 41 41 62 41 42 76 41 47 45 41 5a 41 42 66 41 48 6f 41 62 77 42 75 41 47 55 41 41 51 56 45 42 42 6f 41 69 67 48 76 43 61 30 47 41 41 45 47 52 41 55 61 68 41 47 4b 41 65 67 48 72 51 59 41 41 51 64 4d 42 68 6f 41 41 51 68 41 42 78 6f 42 6b 77 47 37 41 38 6f 48 36 41 49 41 41 51 6c 4d 43 42 6f 41 41 51 70 41 43 52 6f 42 6b 77 47 61 42 66 6f 42 52 67 41 42 43 30 51 4b 4c 35 4d 42 6d 67 56 6b 48 67 41 53 36 41 45 4c Data Ascii: wv-data=D*gBAQFEACsAAO8J9gkAAQJMAQ0AAQNkAhoAgwHvCbQGBwBjAG8AbgB0AGUAbgB0AAEEbAMaCwB1AHAAbABvAGEAZABfAHoAbwBuAGUAAQVEBBoAigHvCa0GAAEGRAUahAGKAegHrQYAAQdMBhoAAQhABxoBkwG7A8oH6AIAAQlMCBoAAQpACRoBkwGaBfoBRgABC0QKL5MBmgVkHgAS6AEL
2024-05-27 13:01:10 UTC	466	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:10 GMT Expires: Mon, 27-May-2024 13:01:10 GMT Last-Modified: Mon, 27-May-2024 13:01:10 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:10 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.18	49806	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	591	OUT	GET /sig.js HTTP/1.1 Host: serve.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:10 UTC	1321	IN	HTTP/1.1 200 OK Date: Mon, 27 May 2024 13:01:10 GMT Content-Type: text/javascript Content-Length: 5777 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Via: 1.1 google CF-Cache-Status: BYPASS Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: mid=308f2882-1c29-11ef-8b29-3232b5c96064; Domain=.bidbrain.app; Max-Age=7200; Path=/ Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ffl9W%2Br3%2BJFRavDzKKf43W5iIlAEawQLObsjMRH5rYXfElcfB1fM2UVmPtniDqPE7B4vM%2FQJxD3syAOkc3NFR52M0GKm6Q%2Fbg2hu8d%2Fh9n%2B1SY2AEEiQv41oARu3gJY%2FDRR3Qgs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a6312cedd5c484-EWR alt-svc: h3=":443"; ma=86400
2024-05-27 13:01:10 UTC	48	IN	Data Raw: 76 61 72 20 79 3d 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 2c 6d 3d 28 67 2c 68 2c 6b 29 3d 3e 68 20 69 6e 20 67 3f 79 28 Data Ascii: var y=Object.defineProperty,m=(g,h,k)=>h in g?y(
2024-05-27 13:01:10 UTC	1369	IN	Data Raw: 67 2c 68 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 6b 7d 29 3a 67 5b 68 5d 3d 6b 2c 70 3d 28 67 2c 68 2c 6b 29 3d 3e 28 6d 28 67 2c 22 73 79 6d 62 6f 6c 22 21 3d 74 79 70 65 6f 66 20 68 3f 68 2b 22 22 3a 68 2c 6b 29 2c 6b 29 3b 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 61 2c 62 29 7b 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 3f 77 69 6e 64 6f 77 2e 73 65 6e 64 45 76 65 6e 74 28 22 66 6c 5f 22 2b 61 2c 62 29 3a 28 77 7c 7c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 68 2c 31 30 30 29 2c 74 2e 70 75 73 68 28 7b 65 76 65 6e 74 3a 61 2c 65 78 74 72 61 3a 62 7d 29 29 7d 66 75 6e 63 74 69 6f 6e 20 68 28 29 7b 77 69 6e 64 6f Data Ascii: g,h,{enumerable:!0,configurable:!0,writable:!0,value:k}):g[h]=k,p=(g,h,k)=>(m(g,"symbol"!=typeof h?h+"":h,k),k);(function(){function g(a,b){window.sendEvent?window.sendEvent("fl_"+a,b):(w\|\|=setInterval(h,100),t.push({event:a,extra:b}))}function h(){windo
2024-05-27 13:01:10 UTC	1369	IN	Data Raw: 65 74 77 6f 72 6b 3b 75 2e 4c 6f 67 69 6e 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 66 2e 53 74 61 74 69 63 3b 63 6f 6e 73 74 20 47 3d 7b 76 65 72 73 69 6f 6e 3a 31 2c 63 6f 6c 6c 65 63 74 6f 72 73 3a 7b 7d 7d 3b 76 61 72 20 72 3d 28 61 3d 3e 28 61 2e 53 69 67 6e 61 6c 3d 22 73 69 67 22 2c 61 2e 49 6e 69 74 3d 22 69 6e 69 74 22 2c 61 2e 45 72 72 6f 72 3d 22 65 72 72 6f 72 22 2c 61 29 29 28 72 7c 7c 7b 7d 29 3b 6c 65 74 20 74 3d 5b 5d 2c 77 3b 63 6c 61 73 73 20 76 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 61 2c 62 29 7b 70 28 74 68 69 73 2c 22 63 6f 6e 66 69 67 22 29 3b 70 28 74 68 69 73 2c 22 6e 61 6d 65 22 29 3b 74 68 69 73 2e 63 6f 6e 66 69 67 3d 62 3b 74 68 69 73 2e 6e 61 6d 65 3d 61 3b 74 72 79 7b 74 68 69 73 2e 69 6e 69 74 69 61 6c 69 7a Data Ascii: etwork;u.Login;f.Static;f.Static;f.Static;const G={version:1,collectors:{}};var r=(a=>(a.Signal="sig",a.Init="init",a.Error="error",a))(r\|\|{});let t=[],w;class v{constructor(a,b){p(this,"config");p(this,"name");this.config=b;this.name=a;try{this.initializ
2024-05-27 13:01:10 UTC	1369	IN	Data Raw: 29 2c 6c 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 61 77 61 69 74 20 66 65 74 63 68 28 61 2c 7b 6d 6f 64 65 3a 22 6e 6f 2d 63 6f 72 73 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 62 3f 22 6f 6d 69 74 22 3a 22 69 6e 63 6c 75 64 65 22 2c 72 65 66 65 72 72 65 72 50 6f 6c 69 63 79 3a 22 6e 6f 2d 72 65 66 65 72 72 65 72 22 2c 63 61 63 68 65 3a 22 6e 6f 2d 73 74 6f 72 65 22 2c 73 69 67 6e 61 6c 3a 64 2e 73 69 67 6e 61 6c 7d 29 3b 61 3d 70 65 72 66 6f 72 6d 61 6e 63 65 2e 6e 6f 77 28 29 3b 72 65 74 75 72 6e 20 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 65 29 2c 4d 61 74 68 2e 72 6f 75 6e 64 28 61 2d 6c 29 7d 61 73 79 6e 63 20 63 6f 6c 6c 65 63 74 28 61 2c 62 2c 63 2c 64 29 7b 63 6f 6e 73 74 20 65 3d 5b 5d 3b 6c 65 74 20 6c 3d 21 30 2c 71 3d 30 3b 69 66 Data Ascii: ),l=performance.now();await fetch(a,{mode:"no-cors",credentials:b?"omit":"include",referrerPolicy:"no-referrer",cache:"no-store",signal:d.signal});a=performance.now();return clearTimeout(e),Math.round(a-l)}async collect(a,b,c,d){const e=[];let l=!0,q=0;if
2024-05-27 13:01:10 UTC	1369	IN	Data Raw: 33 34 29 3b 63 6f 6e 73 74 20 62 3d 30 21 3d 3d 61 3b 6c 65 74 20 63 3d 22 79 35 4c 54 33 39 7a 63 31 64 50 45 33 38 4c 44 6b 6f 72 4c 6b 74 33 66 78 63 50 56 6b 6f 72 4c 6b 74 48 54 78 4e 6e 47 31 5a 4b 4b 31 74 48 63 77 39 57 63 6b 74 58 47 31 64 37 45 34 4e 48 43 30 64 33 44 6b 6f 72 4c 6b 74 50 63 32 64 50 62 6b 6f 72 4c 6b 74 50 49 6b 6f 71 53 31 5a 37 54 33 4e 6e 56 33 73 54 6f 6b 70 79 53 30 38 6d 53 69 70 4c 56 6e 74 50 63 32 64 58 65 78 4f 6d 53 6e 4a 4c 5a 31 4a 4b 4b 6b 74 57 65 78 4e 48 43 31 39 58 45 6e 74 6e 55 6b 4d 7a 4d 6b 4d 58 65 31 4e 58 57 32 64 37 56 31 4a 4c 4e 6e 4a 4c 64 33 38 58 44 31 63 58 41 6b 6f 72 4c 6b 74 33 46 79 4a 4b 4b 6b 74 57 65 30 39 7a 5a 31 64 37 45 36 4a 4b 63 6b 74 33 46 79 5a 4b 4b 6b 74 57 65 30 39 7a 5a 31 64 Data Ascii: 34);const b=0!==a;let c="y5LT39zc1dPE38LDkorLkt3fxcPVkorLktHTxNnG1ZKK1tHcw9WcktXG1d7E4NHC0d3DkorLktPc2dPbkorLktPIkoqS1Z7T3NnV3sTokpyS08mSipLVntPc2dXexOmSnJLZ1JKKktWexNHC19XEntnUkMzMkMXe1NXW2d7V1JLNnJLd38XD1cXAkorLkt3FyJKKktWe09zZ1d7E6JKckt3FyZKKktWe09zZ1d
2024-05-27 13:01:10 UTC	253	IN	Data Raw: 6f 72 73 29 29 74 72 79 7b 69 66 28 65 2e 61 63 74 69 76 65 29 69 66 28 65 2e 74 79 70 65 3d 3d 3d 0a 66 2e 53 74 61 74 69 63 29 6e 65 77 20 4a 28 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 65 2e 74 79 70 65 3d 3d 3d 66 2e 4e 65 74 77 6f 72 6b 29 6e 65 77 20 49 28 64 2c 65 29 3b 65 6c 73 65 20 69 66 28 65 2e 74 79 70 65 3d 3d 3d 66 2e 49 4c 69 6e 6b 73 29 6e 65 77 20 48 28 64 2c 65 29 3b 65 6c 73 65 20 74 68 72 6f 77 20 45 72 72 6f 72 28 60 69 6e 76 61 6c 69 64 20 74 79 70 65 20 24 7b 65 2e 74 79 70 65 7d 20 69 6e 20 24 7b 64 7d 60 29 3b 7d 63 61 74 63 68 28 6c 29 7b 6b 28 60 66 61 69 6c 65 64 20 63 72 65 61 74 69 6e 67 20 24 7b 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 29 7d 60 2c 6c 29 7d 67 28 72 2e 49 6e 69 74 29 7d 29 28 29 7d 29 28 29 3b 0a Data Ascii: ors))try{if(e.active)if(e.type===f.Static)new J(d,e);else if(e.type===f.Network)new I(d,e);else if(e.type===f.ILinks)new H(d,e);else throw Error(`invalid type ${e.type} in ${d}`);}catch(l){k(`failed creating ${JSON.stringify(e)}`,l)}g(r.Init)})()})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.18	49808	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	693	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2477 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec
2024-05-27 13:01:10 UTC	2477	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 32 34 62 32 62 36 2d 31 63 32 39 2d 31 31 65 66 2d 39 61 39 33 2d 37 65 66 30 32 66 64 30 38 39 66 30 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 38 6e 6e 55 7a 36 73 41 6a 30 47 4e 45 63 69 58 30 59 62 64 6f 6a 6c 61 6d 54 76 51 53 2d 44 73 72 32 57 4a 30 6a 4f 32 37 43 4c 51 33 76 6c 69 36 5f 41 6f 61 66 62 4c 5a 34 59 43 49 4a 44 4d 48 50 2d 41 73 30 38 4d 46 32 4f 43 50 73 6f 73 72 6f 47 44 54 69 45 71 36 64 31 43 4e 6a 50 71 2d 6f 33 43 66 6c 42 76 73 67 34 34 33 34 52 63 4f 6d 31 4f 33 6b 63 76 6d 50 4d 6d 56 4f 56 70 45 54 77 Data Ascii: {"entries":[{"sid":"2e24b2b6-1c29-11ef-9a93-7ef02fd089f0","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"8nnUz6sAj0GNEciX0YbdojlamTvQS-Dsr2WJ0jO27CLQ3vli6_AoafbLZ4YCIJDMHP-As08MF2OCPsosroGDTiEq6d1CNjPq-o3CflBvsg4434RcOm1O3kcvmPMmVOVpETw
2024-05-27 13:01:10 UTC	1363	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e24b2b6-1c29-11ef-9a93-7ef02fd089f0; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e24b2b6-1c29-11ef-9a93-7ef02fd089f0; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=szg%2BseQR2PccMekAX5CUVY1n6xBHQ9ytoN27TS0voXKoqkLGKWXs2cA22GLJ7eDOlawTGEhhRzUtwGbURV3FXFhyyGOpOrKrWHHdHC34710Q2RN9pZzHzW83was1%2Ft%2BcOw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-27 13:01:10 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 32 64 39 66 30 31 63 34 36 31 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 88a6312d9f01c461-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.18	49807	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	1614	OUT	GET /sync_cookie_image_decide_secondary?token=10382.PHokSIao8yHItpVHoilKJ7LvElhcKk_OfeMiRfRUAgZFbdT46izlmiBOc95P41WQVdZoaHSNmzacvchSIRLsAY-LRphnUACZ3FDhGTBBZqn6Bhvm3QpWT2dpAkU5csY4NoyTXdi0OOB-upnzWehEU4VYYeizz3kakGib1K_v3IrBnoGG5wDQeWCaVEMh-C_xZ5S90lf4fiLJREm5w_U2Nvm1jAiRpncuE676e0bo3io%2C.z5voVyT0_z8pviNRWNtRjPKoezg%2C HTTP/1.1 Host: mc.yandex.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:11 UTC	198	IN	HTTP/1.1 200 Ok Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:10 GMT Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.18	49810	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	1156	OUT	GET /rtimp?sid=2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5&d=transfiles.ru&cr=ext_continue_sqout_nd32&a=imp&p=ZlSEEgAGDdYCO-r6AAcJC_-W3iwZbgKf8EC6zw&im=pu5YYgOdMKh3hZcQT5pOtQ1fuefa_O2thmGP8qaFHLw2_seHACtcIB2PAHwtPzSji5_qPFMUeyEitJcFU7e47zmi--j2RlC8SMDTqKXpg9yeQ_gpoHLO9hnwgpNmfIXeqxkSi8CLj8GFc58ltkT69bN-jEFuvWc6Bm-499LDV5_Vv3yjs-xc-A9gHG2JKWMIh_T4zsjcXkk26PYT9wH63dr-VAWIZx10MW7BJDYhYJ6MqnmSHC81C9qd6XTW-wInF1qD8KfoxCYz37lwP7FMNLiyeAMpcHJ1DfLtWx65USjwDbFYowUFSevDYCcRt8Km&cbvp=2 HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec; sid_cross=2e24c048-1c29-11ef-9fb3-461def39b9c5
2024-05-27 13:01:10 UTC	1361	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:10 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NrSjH3tKoZhMfok24VpM9BPf6Ue15oVCTkJuMdNwp%2Fq9T8qe48s1BxqmxxhTwPrC4jY3L%2Baczq1QdWYiHxr9LPbCMrZCqNt33UtwWOpFjvwnhzWcWCbJ%2F%2BwzPru27J4Rxw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 88a6312f0bf60ca5-EWR
2024-05-27 13:01:10 UTC	32	IN	Data Raw: 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.18	49811	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:10 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 2594 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec; sid_cross=2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5
2024-05-27 13:01:10 UTC	2594	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 32 34 62 32 62 36 2d 31 63 32 39 2d 31 31 65 66 2d 39 61 39 33 2d 37 65 66 30 32 66 64 30 38 39 66 30 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 38 6e 6e 55 7a 36 73 41 6a 30 47 4e 45 63 69 58 30 59 62 64 6f 6a 6c 61 6d 54 76 51 53 2d 44 73 72 32 57 4a 30 6a 4f 32 37 43 4c 51 33 76 6c 69 36 5f 41 6f 61 66 62 4c 5a 34 59 43 49 4a 44 4d 48 50 2d 41 73 30 38 4d 46 32 4f 43 50 73 6f 73 72 6f 47 44 54 69 45 71 36 64 31 43 4e 6a 50 71 2d 6f 33 43 66 6c 42 76 73 67 34 34 33 34 52 63 4f 6d 31 4f 33 6b 63 76 6d 50 4d 6d 56 4f 56 70 45 54 77 Data Ascii: {"entries":[{"sid":"2e24b2b6-1c29-11ef-9a93-7ef02fd089f0","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"8nnUz6sAj0GNEciX0YbdojlamTvQS-Dsr2WJ0jO27CLQ3vli6_AoafbLZ4YCIJDMHP-As08MF2OCPsosroGDTiEq6d1CNjPq-o3CflBvsg4434RcOm1O3kcvmPMmVOVpETw
2024-05-27 13:01:11 UTC	1361	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e24b2b6-1c29-11ef-9a93-7ef02fd089f0; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e24b2b6-1c29-11ef-9a93-7ef02fd089f0; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nFO2bJoL1Xqjh6lcAaR2wSaubR4ckjqqGPSDIEbIiIEkhQl8uVuZauAXY40WiX59sMmnB%2Feh52abQmsjQIggveH4oaVf4kXuhlyKMfdDQSdfKbawAips91Myv2%2FU6nVW6Q%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-27 13:01:11 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 32 66 63 61 39 33 31 39 33 31 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 88a6312fca931931-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.18	49812	172.217.16.194	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:11 UTC	1319	OUT	GET /pagead/adview?ai=CAIqXEoRUZq7LD8Gd78EPgtSXmAe9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOkBT9DtPGeYQY5dYXYiBj0xruaMf1DEhRVGynZK6w48Ujl41s1YPYGOkYOeHnwQe97oPGQH0hefM4OQTmRK9is87HziHmkIVO0EeFPn3aSDtoDufow8b7k6amJVFY1EeWS0hifj7LDmnZUcELLtYABjxNzTh529P4wHkBv2BKadUbtokO9GZBiTODx8EiP32YbxhtXI0KAi1FCczvBC6nmsWM2BI4BoNaS0hSCvCvhn9TWKDRYF4MqYhV87SQGKWj58APy9zEhQ1PkFIlgKbhRGezn4zFWaRUTVRP1cLa9a3j8uNBULEHk3sDuABq_-tKHlnqO4kwGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAetvrEC2AcA0ggiCIBhEAEyAooCOgmAQIDAgICAoChIvf3BOliwhv3h8a2GA4AKAfoLAggBgAwB0BUBgBcBshcaChgSFHB1Yi05Njc4MzM1ODg3MDU1OTI1GAA&sigh=X-cx5vN0UcU&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLTW7u4oge14IuBjKtz3YT8jNF6w2C2f2dpMInZBKZdkhNtx6SNLsj0rEk5kU2Z30Vy-VDSFFKHeVSUvnj0Vh7CRDgM4E2fEuvdBgB&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiWocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUmZGr8Gb454sMA-vt-6SWpqQt1dgsCDcIJcX7DgxXRw5CeM5VDq0RisShoaBEQ
2024-05-27 13:01:11 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:01:11 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.18	49813	172.217.16.194	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:11 UTC	1319	OUT	GET /pagead/adview?ai=ClnvfEoRUZt6kF8Sk78EPwYeYiAi9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOkBT9DJs4DwZkFXazdC1vb_IfyT66cVwzssloIAuPYWdk2pvdtdkGfl8RgS3j-Rb1GTsGsjffrBVrJompxkEBZ924zCEaxLXjpE8OBkyCvMc-kiBz_1sMZqZ6htcQ27oYfZHqEPFnNPxSHQPU1iEcdIX0FhjqCDTxj4rDa-b17-SC3kMU1BJlX07cp2Z9WAoB96JWUXADgY-JX7-YKhNJ443k1YUuN81i0TyhiIYfAGYqM-zP8TWNDBiwTRBYrnljr4fSJestOWOB7pVjcW6IT-vAxBFegz9lpnTD1Nae1FR4Aefzq-zoyo2HGABq_-tKHlnqO4kwGgBiGoB6a-G6gHltgbqAeqm7ECqAeDrbECqAf_nrECqAffn7ECqAetvrEC2AcA0ggiCIBhEAEyAooCOgmAQIDAgICAoChIvf3BOljO2oTi8a2GA4AKAfoLAggBgAwB0BUBgBcBshcaChgSFHB1Yi05Njc4MzM1ODg3MDU1OTI1GAA&sigh=2wcJhgJJwFM&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLoh93Sadr21NHJ2zkjDpMZfnXwrBt59depIsu5gVxrAevUT4Mr3AQrbvEezgmEpr4CE-bTyWvTiwSPN_8bxGxnJJ5_qKbjddvxxgB&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiWocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2Co9pq95NGzMu5KOeKWs8P98oKa60jC9vhZG0ZyYTPcE6LZk_6y2W_PG2NHY
2024-05-27 13:01:11 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:01:11 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.18	49818	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:11 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 9208 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec; sid_cross=2e24c048-1c29-11ef-9fb3-461def39b9c5
2024-05-27 13:01:11 UTC	9208	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 32 34 33 36 37 38 2d 31 63 32 39 2d 31 31 65 66 2d 61 38 31 34 2d 36 61 37 36 37 36 35 31 39 34 63 64 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 68 7a 65 2d 75 4e 44 6f 52 61 4b 63 50 6d 57 6a 68 43 78 57 76 42 2d 44 5a 62 47 78 38 34 66 57 6b 56 6b 77 67 37 37 52 56 72 56 56 53 47 44 6d 42 46 5f 75 57 53 4f 38 76 59 69 5a 39 34 49 45 51 63 51 6e 36 4d 31 37 70 48 66 39 36 65 4b 35 69 4d 37 55 4e 4a 4b 47 49 4b 57 58 6d 6a 64 5a 31 64 32 47 35 43 65 79 70 45 2d 4e 39 6f 59 46 78 5f 37 70 56 63 64 52 50 55 57 38 79 76 61 4a 5f 49 4e Data Ascii: {"entries":[{"sid":"2e243678-1c29-11ef-a814-6a76765194cd","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"hze-uNDoRaKcPmWjhCxWvB-DZbGx84fWkVkwg77RVrVVSGDmBF_uWSO8vYiZ94IEQcQn6M17pHf96eK5iM7UNJKGIKWXmjdZ1d2G5CeypE-N9oYFx_7pVcdRPUW8yvaJ_IN
2024-05-27 13:01:11 UTC	1369	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e243678-1c29-11ef-a814-6a76765194cd; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e243678-1c29-11ef-a814-6a76765194cd; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FcPwr%2FdgVeHT4CIWM6uqXmI8ixbfbA6Wrpx3Fsplm4WpQmfPx%2FjBd7Q%2B3cLJGJFdZphbFN5h1h8tdG9tD%2FuFZeJ0Y6pMO1Bw0hoifPOQEjYyp7Ca8gmgQPM8UPcBSAAO%2FQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-27 13:01:11 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 33 31 34 62 36 37 34 32 30 31 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 88a631314b674201-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.18	49819	172.67.176.164	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:11 UTC	741	OUT	POST /rtimp HTTP/1.1 Host: g.bidbrain.app Connection: keep-alive Content-Length: 4665 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: https://googleads.g.doubleclick.net Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://googleads.g.doubleclick.net/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uid_cross=2f13d336-1c29-11ef-973a-429466836eec; sid_cross=2e24c048-1c29-11ef-9fb3-461def39b9c5
2024-05-27 13:01:11 UTC	4665	OUT	Data Raw: 7b 22 65 6e 74 72 69 65 73 22 3a 5b 7b 22 73 69 64 22 3a 22 32 65 32 34 34 66 62 31 2d 31 63 32 39 2d 31 31 65 66 2d 62 30 66 34 2d 64 32 32 37 37 65 62 63 62 62 62 35 22 2c 22 64 22 3a 22 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 22 2c 22 63 72 22 3a 22 65 78 74 5f 63 6f 6e 74 69 6e 75 65 5f 73 71 6f 75 74 5f 6e 64 33 32 22 2c 22 67 69 64 22 3a 22 22 2c 22 69 6d 22 3a 22 70 75 35 59 59 67 4f 64 4d 4b 68 33 68 5a 63 51 54 35 70 4f 74 51 31 66 75 65 66 61 5f 4f 32 74 68 6d 47 50 38 71 61 46 48 4c 77 32 5f 73 65 48 41 43 74 63 49 42 32 50 41 48 77 74 50 7a 53 6a 69 35 5f 71 50 46 4d 55 65 79 45 69 74 4a 63 46 55 37 65 34 37 7a 6d 69 2d 2d 6a 32 52 6c 43 38 53 4d 44 54 71 4b 58 70 67 39 79 65 51 5f 67 70 6f 48 4c 4f 39 68 6e 77 67 70 4e 6d 66 49 58 65 71 78 6b Data Ascii: {"entries":[{"sid":"2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5","d":"transfiles.ru","cr":"ext_continue_sqout_nd32","gid":"","im":"pu5YYgOdMKh3hZcQT5pOtQ1fuefa_O2thmGP8qaFHLw2_seHACtcIB2PAHwtPzSji5_qPFMUeyEitJcFU7e47zmi--j2RlC8SMDTqKXpg9yeQ_gpoHLO9hnwgpNmfIXeqxk
2024-05-27 13:01:11 UTC	1365	IN	HTTP/1.1 204 No Content Date: Mon, 27 May 2024 13:01:11 GMT Content-Length: 0 Connection: close Cache-Control: no-cache, no-store, must-revalidate Pragma: no-cache Expires: 0 Access-Control-Allow-Origin: https://googleads.g.doubleclick.net Access-Control-Allow-Methods: GET,HEAD,OPTIONS,POST,PUT Access-Control-Allow-Headers: Access-Control-Allow-Headers, Access-Control-Allow-Origin, Origin, Accept, X-Requested-With, X-Forwarded-For, Content-Type, Access-Control-Request-Method, Access-Control-Request-Headers, Authorization, Configs-Guid, X-Service-Auth, X-Client-Version Access-Control-Allow-Credentials: true Set-Cookie: uid=2f13d336-1c29-11ef-973a-429466836eec; Domain=.bidbrain.app; expires=Tue, 19 Jan 2038 03:14:07 GMT; Path=/ Set-Cookie: sid=2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5; Domain=.bidbrain.app; Max-Age=7200; Path=/ Set-Cookie: sid_cross=2e244fb1-1c29-11ef-b0f4-d2277ebcbbb5; Domain=.bidbrain.app; Max-Age=7200; Path=/; SameSite=none; Secure Via: 1.1 google CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IhNsU%2FfbBUVxxof7I0TcxU00lM3CDfMR3vse0khP7xsVqiKs%2BGFtPAufQ5Mg70gD3hO16Pmb84D%2BvPyKPUBmRiY8ywWcCjoiDW3%2Ft0KPHlsAO4NnDeaBD1zpfZLclDfZKA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare
2024-05-27 13:01:11 UTC	62	IN	Data Raw: 43 46 2d 52 41 59 3a 20 38 38 61 36 33 31 33 31 35 61 34 63 63 33 35 38 2d 45 57 52 0d 0a 61 6c 74 2d 73 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 0d 0a Data Ascii: CF-RAY: 88a631315a4cc358-EWRalt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.18	49817	216.58.206.66	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:11 UTC	1622	OUT	GET /pagead/adview?ai=ChkXoEoRUZtabGPrV78EPi5KcyAW9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOoBT9AlBXsp115XZA7Amy_hNtZN7Fu4gGE0K_C2VEOzYhKFiTzi6z6F5bSB43mKXoWFjL0rhutsk1D7LCgTdJZVmsyPLS6iHWK6xDS3uYNkAHIRo2qMqVqABDQRBkP-wc6m2NgRWxnlFJlOwd8xLNYpS5AVzvKA-MhbiJo0PoYWk4H0BKkTlI_Dv39CQ7SkJna53Mqr0XWRmCK5qNfbcFwe_YfuwyZS6H7S8VI4DNgSq2eIQ8oFmKODii4u_asf7HU2op18-afZVnT8ogGJRPG6RVAIN4b1g-GhHBb8yN1jaxJBy1CERrewT5lhgAav_rSh5Z6juJMBoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpY9LeF4vGthgOACgH6CwIIAYAMAdAVAYAXAbIXGgoYEhRwdWItOTY3ODMzNTg4NzA1NTkyNRgA&sigh=BZmvZsc00Ug&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLNLBfoQVCmJOdffnJqi40f_xWMBJ0aoP0NYY3lCOpK9Ard5Y6VEggUHLn7qVkB0kkfAYylevaQD5lNX5wuqGnRSXClVGmF7emcxgB&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiWocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2Co9pq95NGzMu5KOeKWs8P98oKa60jC9vhZG0ZyYTPcE6LZk_6y2W_PG2NHY
2024-05-27 13:01:11 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:01:11 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.18	49816	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:11 UTC	1434	OUT	GET /webvisor/33590114?wv-part=1&wv-check=5780&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=716971472&browser-info=we%3A1%3Aet%3A1716814869%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090108%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814869&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:11 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:11 GMT Expires: Mon, 27-May-2024 13:01:11 GMT Last-Modified: Mon, 27-May-2024 13:01:11 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:11 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.18	49820	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:11 UTC	1633	OUT	POST /webvisor/33590114?wv-part=1&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=487012232&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1716814870%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090109%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814870&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 92071 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:11 UTC	16384	OUT	Data Raw: 0a bb fd 01 08 00 10 00 18 1b 20 00 4a af fd 01 0a 0f 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 12 5f 54 72 61 6e 73 46 69 6c 65 73 20 2d 20 66 72 65 65 20 66 69 6c 65 20 73 68 61 72 69 6e 67 20 73 65 72 76 69 63 65 20 77 69 74 68 6f 75 74 20 72 65 67 69 73 74 72 61 74 69 6f 6e 20 2d 20 50 61 67 65 20 74 6f 20 64 6f 77 6e 6c 6f 61 64 20 74 68 65 20 75 70 6c 6f 61 64 20 76 79 6a 77 34 1a 1b 68 74 74 70 73 3a 2f 2f 74 72 61 6e 73 66 69 6c 65 73 2e 72 75 2f 76 79 6a 77 34 22 6f 4d 6f 7a 69 6c 6c 61 2f 35 2e 30 20 28 57 69 6e 64 6f 77 73 20 4e 54 20 31 30 2e 30 3b 20 57 69 6e 36 34 3b 20 78 36 34 29 20 41 70 70 6c 65 57 65 62 4b 69 74 2f 35 33 37 2e 33 36 20 28 4b 48 54 4d 4c 2c 20 6c 69 6b 65 20 47 65 63 6b 6f 29 20 43 68 72 6f 6d 65 2f 31 31 37 2e 30 2e Data Ascii: J<!DOCTYPE html>_TransFiles - free file sharing service without registration - Page to download the upload vyjw4https://transfiles.ru/vyjw4"oMozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.
2024-05-27 13:01:11 UTC	16384	OUT	Data Raw: e5 01 12 05 23 74 65 78 74 20 e4 01 2a 02 0a 09 30 e6 01 6a 26 08 e6 01 12 03 64 69 76 1a 13 0a 05 63 6c 61 73 73 12 0a 64 6c 5f 75 70 6c 6f 61 64 73 20 e4 01 30 df 02 38 e5 01 6a 16 08 e7 01 12 05 23 74 65 78 74 20 e6 01 2a 04 0a 0a 09 09 30 e8 01 6a 23 08 e8 01 12 03 64 69 76 1a 10 0a 05 63 6c 61 73 73 12 07 64 6c 5f 69 6e 66 6f 20 e6 01 30 84 02 38 e7 01 6a 16 08 e9 01 12 05 23 74 65 78 74 20 e8 01 2a 04 0a 09 09 09 30 ea 01 6a 23 08 ea 01 12 01 62 1a 12 0a 05 63 6c 61 73 73 12 09 6d 61 69 6e 5f 6c 69 6e 6b 20 e8 01 30 ed 01 38 e9 01 6a 0c 08 eb 01 12 04 73 70 61 6e 20 ea 01 6a 2a 08 ec 01 12 05 23 74 65 78 74 20 eb 01 2a 1b 68 74 74 70 73 3a 2f 2f 54 72 61 6e 73 46 69 6c 65 73 2e 72 75 2f 76 79 6a 77 34 6a 19 08 ed 01 12 05 23 74 65 78 74 20 e8 01 2a Data Ascii: #text 0j&divclassdl_uploads 08j#text 0j#divclassdl_info 08j#text 0j#bclassmain_link 08jspan j#text https://TransFiles.ru/vyjw4j#text
2024-05-27 13:01:11 UTC	16384	OUT	Data Raw: 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 c2 04 10 00 0a 5d 08 b2 01 10 02 18 1f 20 00 c2 01 51 08 c2 04 10 06 1a 1f 0a 17 64 61 74 61 2d 61 64 73 62 79 67 6f 6f 67 6c 65 2d 73 74 61 74 75 73 12 04 64 6f 6e 65 1a 29 0a 05 63 6c 61 73 73 12 20 61 64 73 62 79 67 6f 6f 67 6c 65 20 61 64 73 62 79 67 6f 6f 67 6c 65 2d 6e 6f 61 62 6c 61 74 65 0a b0 02 08 b2 01 10 02 18 1c 20 00 ca 01 a3 02 0a 4b 08 c3 04 12 03 69 6e 73 1a 14 0a 05 63 6c 61 73 73 12 0b 61 64 73 62 79 67 6f 6f 67 6c 65 1a 23 0a 17 64 61 74 61 2d 61 64 73 62 79 67 6f 6f 67 6c 65 2d 73 74 61 74 75 73 12 08 72 65 73 65 72 76 65 64 20 5b 30 c4 04 38 bd 04 0a d1 01 08 c6 04 12 03 64 69 76 1a 13 0a 02 69 64 12 0d 61 73 77 69 66 74 5f 34 5f 68 6f 73 74 1a ae 01 0a 05 73 74 79 6c 65 12 a4 01 62 6f Data Ascii: : inline-block; ] Qdata-adsbygoogle-statusdone)class adsbygoogle adsbygoogle-noablate Kinsclassadsbygoogle#data-adsbygoogle-statusreserved [08dividaswift_4_hoststylebo
2024-05-27 13:01:11 UTC	16384	OUT	Data Raw: 70 6f 72 74 61 6e 74 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6d 61 78 2d 77 69 64 74 68 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 6f 70 61 63 69 74 79 3a 20 31 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 61 64 64 69 6e 67 3a 20 30 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 20 72 69 67 68 74 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 74 6f 70 3a 20 61 75 74 6f 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 Data Ascii: portant; max-height: none !important; max-width: none !important; opacity: 1; overflow: visible !important; padding: 0px !important; position: fixed; right: auto !important; top: auto !important; vertical-align: baseline !important; visibility: visible !i
2024-05-27 13:01:11 UTC	16384	OUT	Data Raw: 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 32 35 30 2c 20 32 35 30 2c 20 32 35 30 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 87 04 08 b5 07 10 02 18 1f 20 00 c2 01 fa 03 08 c4 04 10 4e 1a f2 03 0a 05 73 74 79 6c 65 12 e8 03 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 31 32 39 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 62 6f 74 74 6f 6d 3a 20 2d 31 38 2e 34 31 38 35 70 78 3b 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 20 21 69 Data Ascii: ign: baseline !important; visibility: visible !important; z-index: 2147483647; background: rgb(250, 250, 250) !important; Nstyledisplay: block; width: 100% !important; height: 129px !important; bottom: -18.4185px; clear: none !i
2024-05-27 13:01:11 UTC	10151	OUT	Data Raw: 70 6f 72 74 61 6e 74 3b 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 72 67 62 28 32 35 30 2c 20 32 35 30 2c 20 32 35 30 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 88 04 08 97 0b 10 02 18 1f 20 00 c2 01 fb 03 08 c4 04 10 71 1a f3 03 0a 05 73 74 79 6c 65 12 e9 03 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 77 69 64 74 68 3a 20 31 30 30 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 68 65 69 67 68 74 3a 20 31 32 39 70 78 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 62 6f 74 74 6f 6d 3a 20 2d 30 2e 38 37 30 39 34 38 70 78 3b 20 63 6c 65 61 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 20 66 6c 6f 61 74 3a Data Ascii: portant; visibility: visible !important; z-index: 2147483647; background: rgb(250, 250, 250) !important; qstyledisplay: block; width: 100% !important; height: 129px !important; bottom: -0.870948px; clear: none !important; float:
2024-05-27 13:01:12 UTC	466	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:12 GMT Expires: Mon, 27-May-2024 13:01:12 GMT Last-Modified: Mon, 27-May-2024 13:01:12 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.18	49822	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:11 UTC	1427	OUT	GET /sync_cookie_image_decide_secondary?token=10382.PHokSIao8yHItpVHoilKJ7LvElhcKk_OfeMiRfRUAgZFbdT46izlmiBOc95P41WQVdZoaHSNmzacvchSIRLsAY-LRphnUACZ3FDhGTBBZqn6Bhvm3QpWT2dpAkU5csY4NoyTXdi0OOB-upnzWehEU4VYYeizz3kakGib1K_v3IrBnoGG5wDQeWCaVEMh-C_xZ5S90lf4fiLJREm5w_U2Nvm1jAiRpncuE676e0bo3io%2C.z5voVyT0_z8pviNRWNtRjPKoezg%2C HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:12 UTC	198	IN	HTTP/1.1 200 Ok Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:12 GMT Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.18	49827	172.217.16.194	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:12 UTC	1320	OUT	GET /pagead/adview?ai=ChkXoEoRUZtabGPrV78EPi5KcyAW9qs_Ndemi3NbEEsCNtwEQASAAYMkGggEXY2EtcHViLTk2NzgzMzU4ODcwNTU5MjXIAQmoAwHIAwKqBOoBT9AlBXsp115XZA7Amy_hNtZN7Fu4gGE0K_C2VEOzYhKFiTzi6z6F5bSB43mKXoWFjL0rhutsk1D7LCgTdJZVmsyPLS6iHWK6xDS3uYNkAHIRo2qMqVqABDQRBkP-wc6m2NgRWxnlFJlOwd8xLNYpS5AVzvKA-MhbiJo0PoYWk4H0BKkTlI_Dv39CQ7SkJna53Mqr0XWRmCK5qNfbcFwe_YfuwyZS6H7S8VI4DNgSq2eIQ8oFmKODii4u_asf7HU2op18-afZVnT8ogGJRPG6RVAIN4b1g-GhHBb8yN1jaxJBy1CERrewT5lhgAav_rSh5Z6juJMBoAYhqAemvhuoB5bYG6gHqpuxAqgHg62xAqgH_56xAqgH35-xAqgHrb6xAtgHANIIIgiAYRABMgKKAjoJgECAwICAgKAoSL39wTpY9LeF4vGthgOACgH6CwIIAYAMAdAVAYAXAbIXGgoYEhRwdWItOTY3ODMzNTg4NzA1NTkyNRgA&sigh=BZmvZsc00Ug&uach_m=%5BUACH%5D&cid=CAQSTgDaQooLNLBfoQVCmJOdffnJqi40f_xWMBJ0aoP0NYY3lCOpK9Ard5Y6VEggUHLn7qVkB0kkfAYylevaQD5lNX5wuqGnRSXClVGmF7emcxgB&cbvp=2&vis=1 HTTP/1.1 Host: googleads.g.doubleclick.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / X-Client-Data: CIu2yQEIprbJAQipncoBCOvUygEI/IPLAQiWocsBCIWgzQEI6cXNAQi5ys0BCInTzQEYwcvMARjrjaUX Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: IDE=AHWqTUk2Co9pq95NGzMu5KOeKWs8P98oKa60jC9vhZG0ZyYTPcE6LZk_6y2W_PG2NHY
2024-05-27 13:01:12 UTC	628	IN	HTTP/1.1 200 OK P3P: policyref="https://googleads.g.doubleclick.net/pagead/gcn_p3p_.xml", CP="CURa ADMa DEVa TAIo PSAo PSDo OUR IND UNI PUR INT DEM STA PRE COM NAV OTC NOI DSP COR" Timing-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Security-Policy: script-src 'none'; object-src 'none' Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Content-Type: text/html; charset=UTF-8 X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:01:12 GMT Server: cafe Content-Length: 0 X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.18	49826	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:12 UTC	1622	OUT	POST /webvisor/33590114?wv-part=1&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=613221953&browser-info=we%3A1%3Aet%3A1716814870%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090110%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814870&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 337 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:12 UTC	337	OUT	Data Raw: 0a 17 08 00 10 01 18 13 20 00 8a 01 0c 08 ef 09 10 8b 07 18 ef 09 20 f6 09 0a 1b 08 00 10 01 18 04 20 00 62 11 08 00 10 64 18 01 20 ff ff ff ff ff ff ff ff ff 01 0a 14 08 96 01 10 01 18 00 20 00 5a 09 08 c6 03 10 81 05 18 e6 01 0a 14 08 ec 02 10 01 18 00 20 00 5a 09 08 c6 03 10 ff 04 18 e6 01 0a 14 08 e1 03 10 01 18 00 20 00 5a 09 08 bc 03 10 fb 04 18 e6 01 0a 14 08 9a 05 10 01 18 00 20 00 5a 09 08 ac 03 10 87 05 18 e6 01 0a 14 08 92 06 10 01 18 00 20 00 5a 09 08 ae 03 10 87 05 18 e6 01 0a 0f 08 f9 06 10 01 18 08 20 00 aa 01 03 08 87 02 0a 0e 08 fd 06 10 01 18 08 20 00 aa 01 02 08 01 0a 14 08 89 07 10 01 18 00 20 00 5a 09 08 ba 03 10 87 05 18 e6 01 0a 14 08 92 08 10 01 18 00 20 00 5a 09 08 ee 02 10 a1 05 18 e6 01 0a 14 08 ff 08 10 01 18 00 20 00 5a 09 08 Data Ascii: bd Z Z Z Z Z Z Z Z
2024-05-27 13:01:12 UTC	466	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:12 GMT Expires: Mon, 27-May-2024 13:01:12 GMT Last-Modified: Mon, 27-May-2024 13:01:12 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:12 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.18	49832	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:13 UTC	1429	OUT	GET /webvisor/33590114?wv-part=1&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=487012232&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1716814870%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090109%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814870&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:13 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:13 GMT Expires: Mon, 27-May-2024 13:01:13 GMT Last-Modified: Mon, 27-May-2024 13:01:13 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.18	49833	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:13 UTC	1420	OUT	GET /webvisor/33590114?wv-part=1&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=613221953&browser-info=we%3A1%3Aet%3A1716814870%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090110%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814870&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:13 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:13 GMT Expires: Mon, 27-May-2024 13:01:13 GMT Last-Modified: Mon, 27-May-2024 13:01:13 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.18	49835	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:13 UTC	1630	OUT	POST /webvisor/33590114?wv-part=2&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=137156753&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1716814871%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814871&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 48 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:13 UTC	48	OUT	Data Raw: 0a 2e 08 e2 11 10 02 18 1f 20 00 c2 01 22 08 c9 04 10 85 01 1a 1a 0a 12 64 61 74 61 2d 6c 6f 61 64 2d 63 6f 6d 70 6c 65 74 65 12 04 74 72 75 65 Data Ascii: . "data-load-completetrue
2024-05-27 13:01:13 UTC	466	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:13 GMT Expires: Mon, 27-May-2024 13:01:13 GMT Last-Modified: Mon, 27-May-2024 13:01:13 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.18	49836	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:13 UTC	1635	OUT	POST /webvisor/33590114?wv-part=2&wv-check=20957&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=25282607&browser-info=we%3A1%3Aet%3A1716814871%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814871&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 20 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:13 UTC	20	OUT	Data Raw: 77 76 2d 64 61 74 61 3d 44 70 45 43 45 5a 45 43 43 77 5f 5f Data Ascii: wv-data=DpECEZECCw__
2024-05-27 13:01:13 UTC	466	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:13 GMT Expires: Mon, 27-May-2024 13:01:13 GMT Last-Modified: Mon, 27-May-2024 13:01:13 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:13 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.18	49837	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:13 UTC	1621	OUT	POST /webvisor/33590114?wv-part=2&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=305471114&browser-info=we%3A1%3Aet%3A1716814872%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814872&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 85 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:13 UTC	85	OUT	Data Raw: 0a 0e 08 e1 16 10 01 18 07 20 00 aa 01 02 08 01 0a 0f 08 e2 16 10 01 18 07 20 00 aa 01 03 08 87 02 0a 14 08 a1 18 10 01 18 00 20 00 5a 09 08 e8 06 10 cf 02 18 de 01 0a 14 08 d1 19 10 01 18 00 20 00 5a 09 08 f8 03 10 99 06 18 c9 04 0a 06 10 04 e0 01 af 07 Data Ascii: Z Z
2024-05-27 13:01:14 UTC	466	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:13 GMT Expires: Mon, 27-May-2024 13:01:13 GMT Last-Modified: Mon, 27-May-2024 13:01:13 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.18	49838	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:14 UTC	1636	OUT	POST /webvisor/33590114?wv-part=3&wv-check=38163&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=196412308&browser-info=we%3A1%3Aet%3A1716814872%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090112%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814872&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 20 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:14 UTC	20	OUT	Data Raw: 77 76 2d 64 61 74 61 3d 44 37 49 43 45 72 49 43 43 77 5f 5f Data Ascii: wv-data=D7ICErICCw__
2024-05-27 13:01:14 UTC	466	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:14 GMT Expires: Mon, 27-May-2024 13:01:14 GMT Last-Modified: Mon, 27-May-2024 13:01:14 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.18	49839	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:14 UTC	1429	OUT	GET /webvisor/33590114?wv-part=2&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=137156753&browser-info=bt%3A1%3Awe%3A1%3Aet%3A1716814871%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814871&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:14 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:14 GMT Expires: Mon, 27-May-2024 13:01:14 GMT Last-Modified: Mon, 27-May-2024 13:01:14 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:14 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.18	49840	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:14 UTC	1434	OUT	GET /webvisor/33590114?wv-part=2&wv-check=20957&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=25282607&browser-info=we%3A1%3Aet%3A1716814871%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814871&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:15 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:14 GMT Expires: Mon, 27-May-2024 13:01:14 GMT Last-Modified: Mon, 27-May-2024 13:01:14 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.18	49841	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:14 UTC	1420	OUT	GET /webvisor/33590114?wv-part=2&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=305471114&browser-info=we%3A1%3Aet%3A1716814872%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090111%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814872&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:15 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:14 GMT Expires: Mon, 27-May-2024 13:01:14 GMT Last-Modified: Mon, 27-May-2024 13:01:14 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.18	49842	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:15 UTC	1622	OUT	POST /webvisor/33590114?wv-part=3&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=638068873&browser-info=we%3A1%3Aet%3A1716814873%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090113%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814873&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 107 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:15 UTC	107	OUT	Data Raw: 0a 0f 08 80 24 10 01 18 08 20 00 aa 01 03 08 87 02 0a 0e 08 81 24 10 01 18 08 20 00 aa 01 02 08 01 0a 14 08 99 29 10 01 18 00 20 00 5a 09 08 ac 04 10 db 06 18 c9 04 0a 14 08 8a 2a 10 01 18 00 20 00 5a 09 08 ac 04 10 db 06 18 c9 04 0a 14 08 f9 2a 10 01 18 00 20 00 5a 09 08 9f 08 10 a2 01 18 de 01 0a 06 10 04 e0 01 81 0c Data Ascii: $ $ ) Z* Z* Z
2024-05-27 13:01:15 UTC	466	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:15 GMT Expires: Mon, 27-May-2024 13:01:15 GMT Last-Modified: Mon, 27-May-2024 13:01:15 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.18	49843	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:15 UTC	1435	OUT	GET /webvisor/33590114?wv-part=3&wv-check=38163&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=196412308&browser-info=we%3A1%3Aet%3A1716814872%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090112%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814872&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:15 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:15 GMT Expires: Mon, 27-May-2024 13:01:15 GMT Last-Modified: Mon, 27-May-2024 13:01:15 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:15 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.18	49844	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:16 UTC	1420	OUT	GET /webvisor/33590114?wv-part=3&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=638068873&browser-info=we%3A1%3Aet%3A1716814873%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090113%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814873&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:16 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:16 GMT Expires: Mon, 27-May-2024 13:01:16 GMT Last-Modified: Mon, 27-May-2024 13:01:16 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:16 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.18	49845	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:19 UTC	1620	OUT	POST /webvisor/33590114?wv-part=4&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=99049005&browser-info=we%3A1%3Aet%3A1716814877%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090117%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814877&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 85 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:19 UTC	85	OUT	Data Raw: 0a 0e 08 8a 30 10 01 18 07 20 00 aa 01 02 08 01 0a 0f 08 8b 30 10 01 18 07 20 00 aa 01 03 08 87 02 0a 0f 08 82 31 10 01 18 08 20 00 aa 01 03 08 87 02 0a 0e 08 83 31 10 01 18 08 20 00 aa 01 02 08 01 0a 09 08 84 31 10 01 18 05 20 00 0a 06 10 04 e0 01 96 13 Data Ascii: 0 0 1 1 1
2024-05-27 13:01:19 UTC	466	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:19 GMT Expires: Mon, 27-May-2024 13:01:19 GMT Last-Modified: Mon, 27-May-2024 13:01:19 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:19 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.18	49846	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:20 UTC	1419	OUT	GET /webvisor/33590114?wv-part=4&wv-type=7&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=99049005&browser-info=we%3A1%3Aet%3A1716814877%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090117%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814877&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:20 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:20 GMT Expires: Mon, 27-May-2024 13:01:20 GMT Last-Modified: Mon, 27-May-2024 13:01:20 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:20 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.18	49847	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:27 UTC	2094	OUT	POST /watch/33590114/1?page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&charset=utf-8&hittoken=1716814866_a54e6e707aa72c8d42e3cb06a15c3291caee60b99711d9e761410aa4eb2bb118&browser-info=nb%3A1%3Acl%3A4367%3Aar%3A1%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1350%3Acn%3A1%3Adp%3A1%3Als%3A1430974270378%3Ahid%3A880766209%3Az%3A-240%3Ai%3A20240527090125%3Aet%3A1716814885%3Ac%3A1%3Arn%3A3598640%3Arqn%3A2%3Au%3A1716814863853134129%3Aw%3A1263x907%3As%3A1280x1024x24%3Ask%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C4718%2C10%2C9666%2C%2C%2C7143%3Aco%3A0%3Acpf%3A1%3Aeu%3A2%3Ans%3A1716814856326%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1716814885&t=gdpr(14)clc(1-206-579)rqnt(2)lt(8900)aw(0)rcm(1)cdl(na)eco(21037572)dss(2)fid(140)ti(0)&force-urlencoded=1&site-info=%7B%22__ym%22%3A%7B%22ct%22%3A%5B%5D%7D%7D HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:27 UTC	756	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:27 GMT Expires: Mon, 27-May-2024 13:01:27 GMT Last-Modified: Mon, 27-May-2024 13:01:27 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:27 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.18	49848	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:35 UTC	1636	OUT	POST /webvisor/33590114?wv-part=4&wv-check=43811&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=629003795&browser-info=we%3A1%3Aet%3A1716814893%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090133%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814893&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive Content-Length: 28 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: https://transfiles.ru Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://transfiles.ru/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; receive-cookie-deprecation=1; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:35 UTC	28	OUT	Data Raw: 77 76 2d 64 61 74 61 3d 44 74 45 43 45 64 45 43 43 77 2d 55 41 68 4c 55 41 67 73 5f Data Ascii: wv-data=DtECEdECCw-UAhLUAgs_
2024-05-27 13:01:35 UTC	466	IN	HTTP/1.1 200 Ok Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: https://transfiles.ru Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:35 GMT Expires: Mon, 27-May-2024 13:01:35 GMT Last-Modified: Mon, 27-May-2024 13:01:35 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:35 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.18	49849	87.250.250.119	443	6552	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:36 UTC	1435	OUT	GET /webvisor/33590114?wv-part=4&wv-check=43811&wv-type=0&wmode=0&wv-hit=880766209&page-url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&rn=629003795&browser-info=we%3A1%3Aet%3A1716814893%3Aw%3A1263x907%3Av%3A1350%3Az%3A-240%3Ai%3A20240527090133%3Au%3A1716814863853134129%3Avf%3Aqwnfzu763lnwkqrexyqp4e3mj%3Ast%3A1716814893&t=gdpr(14)ti(1) HTTP/1.1 Host: mc.yandex.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sync_cookie_csrf=893524046fake; yabs-sid=1456576491716814865; bh=Ej4iR29vZ2xlIENocm9tZSI7dj0iMTE3IiwiTm90O0E9QnJhbmQiO3Y9IjgiLCJDaHJvbWl1bSI7dj0iMTE3IhoFIng4NiIiECIxMTcuMC41OTM4LjE0OSIqAj8wOgkiV2luZG93cyJCCCIxMC4wLjAiSgQiNjQiUlsiR29vZ2xlIENocm9tZSI7dj0iMTE3LjAuNTkzOC4xNDkiLCJOb3Q7QT1CcmFuZCI7dj0iOC4wLjAuMCIsIkNocm9taXVtIjt2PSIxMTcuMC41OTM4LjE0OSIi; yashr=9366239991716814866; yandexuid=5250530921716814863; yuidss=5250530921716814863; i=DdY40elwu0sXLWjGEuz9mDbga5A1v8G6CA/R7F2AqkTtU/gnsgQ4+UBS4F+TjvTC137ep0q5/pRjSoN8jqQ2Yp1Gbsk=; sync_cookie_ok=synced; _yasc=5TkufLKNFZ1SUivFRNmv77/RbNybJb776YeoHFmfLwNa4UkekAK6FN35ofSbC2Iqqw==; yp=1716901268.yu.5250530921716814863; ymex=1719406868.oyu.5250530921716814863#1748350865.yrts.1716814865#1748350865.yrtsi.1716814865
2024-05-27 13:01:36 UTC	374	IN	HTTP/1.1 200 Ok Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Connection: Close Content-Length: 43 Content-Type: image/gif Date: Mon, 27 May 2024 13:01:36 GMT Expires: Mon, 27-May-2024 13:01:36 GMT Last-Modified: Mon, 27-May-2024 13:01:36 GMT Pragma: no-cache Strict-Transport-Security: max-age=31536000 X-XSS-Protection: 1; mode=block
2024-05-27 13:01:36 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.18	49850	20.114.59.183	443

Timestamp	Bytes transferred	Direction	Data
2024-05-27 13:01:46 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cP8+YHrWZlfcSED&MD=TPoykatH HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-27 13:01:46 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "Mx1RoJH/qEwpWfKllx7sbsl28AuERz5IYdcsvtTJcgM=_1440" MS-CorrelationId: 4e6821d9-7df9-49b1-b73b-2774a1f5e3ef MS-RequestId: da807cf0-4d4d-439d-b7e9-343588bf941e MS-CV: hAZiD3M/EEO+opxN.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Mon, 27 May 2024 13:01:45 GMT Connection: close Content-Length: 25457
2024-05-27 13:01:46 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 51 22 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 db 8e 00 00 14 00 00 00 00 00 10 00 51 22 00 00 20 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 f3 43 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 0d 92 6f db e5 21 f3 43 43 4b ed 5a 09 38 55 5b df 3f 93 99 90 29 99 e7 29 ec 73 cc 4a 66 32 cf 84 32 64 c8 31 c7 11 52 38 87 90 42 66 09 99 87 32 0f 19 0a 09 51 a6 a8 08 29 53 86 4a 52 84 50 df 46 83 ba dd 7b df fb 7e ef 7d ee 7d bf ef 9e e7 d9 67 ef 35 ee b5 fe eb 3f ff b6 96 81 a2 0a 04 fc 31 40 21 5b 3f a5 ed 1b 04 0e 85 42 a0 10 04 64 12 6c a5 de aa a1 d8 ea f3 58 01 f2 f5 67 0b 5e 9b bd e8 a0 90 1d bf 40 88 9d eb 49 b4 87 9b ab 8b 9d 2b 46 c8 c7 c5 19 92 Data Ascii: MSCFQ"DQ" AdCenvironment.cabo!CCKZ8U[?))sJf22d1R8Bf2Q)SJRPF{~}}g5?1@![?BdlXg^@I+F
2024-05-27 13:01:46 UTC	9633	IN	Data Raw: 21 6f b3 eb a6 cc f5 31 be cf 05 e2 a9 fe fa 57 6d 19 30 b3 c2 c5 66 c9 6a df f5 e7 f0 78 bd c7 a8 9e 25 e3 f9 bc ed 6b 54 57 08 2b 51 82 44 12 fb b9 53 8c cc f4 60 12 8a 76 cc 40 40 41 9b dc 5c 17 ff 5c f9 5e 17 35 98 24 56 4b 74 ef 42 10 c8 af bf 7f c6 7f f2 37 7d 5a 3f 1c f2 99 79 4a 91 52 00 af 38 0f 17 f5 2f 79 81 65 d9 a9 b5 6b e4 c7 ce f6 ca 7a 00 6f 4b 30 44 24 22 3c cf ed 03 a5 96 8f 59 29 bc b6 fd 04 e1 70 9f 32 4a 27 fd 55 af 2f fe b6 e5 8e 33 bb 62 5f 9a db 57 40 e9 f1 ce 99 66 90 8c ff 6a 62 7f dd c5 4a 0b 91 26 e2 39 ec 19 4a 71 63 9d 7b 21 6d c3 9c a3 a2 3c fa 7f 7d 96 6a 90 78 a6 6d d2 e1 9c f9 1d fc 38 d8 94 f4 c6 a5 0a 96 86 a4 bd 9e 1a ae 04 42 83 b8 b5 80 9b 22 38 20 b5 25 e5 64 ec f7 f4 bf 7e 63 59 25 0f 7a 2e 39 57 76 a2 71 aa 06 8a Data Ascii: !o1Wm0fjx%kTW+QDS`v@@A\\^5$VKtB7}Z?yJR8/yekzoK0D$"<Y)p2J'U/3b_W@fjbJ&9Jqc{!m<}jxm8B"8 %d~cY%z.9Wvq

Target ID:	0
Start time:	09:00:55
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://transfiles.ru/vyjw4
Imagebase:	0x7ff728d30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	09:00:56
Start date:	27/05/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2236 --field-trial-handle=1980,i,5191005634875542788,15932232829212940879,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff728d30000
File size:	3'242'272 bytes
MD5 hash:	83395EAB5B03DEA9720F8D7AC0D15CAA
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	09:01:07
Start date:	27/05/2024
Path:	C:\Windows\System32\OpenWith.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\OpenWith.exe -Embedding
Imagebase:	0x7ff7b7e10000
File size:	123'984 bytes
MD5 hash:	E4A834784FA08C17D47A1E72429C5109
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	7
Start time:	09:01:14
Start date:	27/05/2024
Path:	C:\Windows\System32\rundll32.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
Imagebase:	0x7ff6a0490000
File size:	71'680 bytes
MD5 hash:	EF3179D498793BF4234F708D3BE28633
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	11
Start time:	09:01:21
Start date:	27/05/2024
Path:	C:\Program Files\7-Zip\7zG.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\7-Zip\7zG.exe" x -o"C:\Users\user\Desktop\" -an -ai#7zMap29805:70:7zEvent23307
Imagebase:	0x240000
File size:	700'416 bytes
MD5 hash:	50F289DF0C19484E970849AAC4E6F977
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	17
Start time:	09:01:29
Start date:	27/05/2024
Path:	C:\Users\user\Desktop\Loader.exe
Wow64 process (32bit):	false
Commandline:	"C:\Users\user\Desktop\Loader.exe"
Imagebase:	0x7ff73df10000
File size:	316'416 bytes
MD5 hash:	14E9EBF2C5C0DBC0DDAF0ADC2F52F1FB
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	18
Start time:	09:01:29
Start date:	27/05/2024
Path:	C:\Windows\System32\conhost.exe
Wow64 process (32bit):	false
Commandline:	C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Imagebase:	0x7ff7c1080000
File size:	862'208 bytes
MD5 hash:	0D698AF330FD17BEE3BF90011D49251D
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: https://transfiles.ru/vyjw4	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&h=280&slotname=7823858479&adk=642103812&adf=441738196&pi=t.ma~as.7823858479&w=970&abgtt=3&fwrn=4&fwrnh=100&lmt=1716814864&rafmt=1&format=970x280&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862308&bpp=4&bdt=3661&idt=1768&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=2846887072687&frm=20&pv=2&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=158&biw=1263&bih=907&scr_x=0&scr_y=20&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4347612559431098&tmod=1276184472&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CeoE%7C&abl=CS&pfx=0&fu=128&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=1&uci=a!1&fsb=1&dtd=1792
Source: https://transfiles.ru/vyjw4	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&h=100&slotname=8540115672&adk=3304334544&adf=3870114935&pi=t.ma~as.8540115672&w=970&abgtt=3&lmt=1716814864&format=970x100&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862312&bpp=1&bdt=3665&idt=1804&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=970x280&correlator=2846887072687&frm=20&pv=1&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=823&biw=1263&bih=907&scr_x=0&scr_y=58&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4347612559431098&tmod=1276184472&uas=0&nvt=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7CoeE%7C&abl=CS&pfx=0&fu=0&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=2&uci=a!2&fsb=1&dtd=1809
Source: https://transfiles.ru/vyjw4	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&adk=1812271804&adf=3025194257&abgtt=3&lmt=1716814864&plat=2%3A16777216%2C3%3A16%2C9%3A32776%2C16%3A8388608%2C17%3A32%2C24%3A32%2C25%3A32%2C30%3A1081344%2C32%3A32%2C41%3A32%2C42%3A32&plas=135x714_r&format=0x0&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&pra=7&wgl=1&easpi=0&aihb=0&asro=0&aiael=1~2~4~6~7~8~9~10~11~12~13~14~15~16~17~18~19~20~21~24&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814863478&bpp=2&bdt=4830&idt=648&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=970x280%2C970x100&nras=1&correlator=2846887072687&frm=20&pv=1&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=-12245933&ady=-12245933&biw=1263&bih=907&scr_x=0&scr_y=58&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&pvsid=4347612559431098&tmod=1276184472&uas=0&nvt=1&fsapi=1&fc=896&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C1280%2C907&vis=1&rsz=%7C%7Cs%7C&abl=NS&fu=32768&bc=31&bz=1&td=1&psd=W251bGwsbnVsbCxudWxsLDNd&nt=1&ifi=3&uci=a!3&fsb=1&dtd=660
Source: https://transfiles.ru/vyjw4	HTTP Parser: Iframe src: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html

Source: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&h=280&slotname=7823858479&adk=642103812&adf=441738196&pi=t.ma~as.7823858479&w=970&abgtt=3&fwrn=4&fwrnh=100&lmt=1716814864&rafmt=1&format=970x280&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&fwr=0&fwrattr=true&rpe=1&resp_fmts=3&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862308&bpp=4&bdt=3661&idt=1768&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&correlator=2846887072687&frm=20&pv=2&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=158&biw=1263&bih=907&scr_x=0&scr_y=20&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C3107866...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/ads?client=ca-pub-9678335887055925&output=html&h=100&slotname=8540115672&adk=3304334544&adf=3870114935&pi=t.ma~as.8540115672&w=970&abgtt=3&lmt=1716814864&format=970x100&url=https%3A%2F%2Ftransfiles.ru%2Fvyjw4&wgl=1&uach=WyJXaW5kb3dzIiwiMTAuMC4wIiwieDg2IiwiIiwiMTE3LjAuNTkzOC4xNDkiLG51bGwsMCxudWxsLCI2NCIsW1siR29vZ2xlIENocm9tZSIsIjExNy4wLjU5MzguMTQ5Il0sWyJOb3Q7QT1CcmFuZCIsIjguMC4wLjAiXSxbIkNocm9taXVtIiwiMTE3LjAuNTkzOC4xNDkiXV0sMF0.&dt=1716814862312&bpp=1&bdt=3665&idt=1804&shv=r20240522&mjsv=m202405220101&ptt=9&saldr=aa&abxe=1&cookie_enabled=1&eoidce=1&prev_fmts=970x280&correlator=2846887072687&frm=20&pv=1&ga_vid=625688542.1716814864&ga_sid=1716814864&ga_hid=478524190&ga_fc=1&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&u_sd=1&dmc=8&adx=147&ady=823&biw=1263&bih=907&scr_x=0&scr_y=58&eid=44759876%2C44759927%2C44759842%2C31081564%2C31083869%2C31083906%2C42532523%2C95331982%2C31083976%2C95331711%2C21065724%2C31078663%2C31078665%2C31078668%2C31078670&oid=2&p...	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html#RS-0-&adk=1812271808&client=ca-pub-9678335887055925&fa=8&ifi=4&uci=a!4	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html#RS-2-&adk=1812271801&client=ca-pub-9678335887055925&fa=1&ifi=6&uci=a!6&btvi=2	HTTP Parser: No favicon
Source: https://googleads.g.doubleclick.net/pagead/html/r20240522/r20110914/zrt_lookup_fy2021.html#RS-1-&adk=1812271804&client=ca-pub-9678335887055925&fa=4&ifi=5&uci=a!5&btvi=1	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 92.123.104.38
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 20.114.59.183
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.182.141.63

Description:	Adversaries may gain access to a system through a user visiting a website over the normal course of browsing. With this technique, the user's web browser is typically targeted for exploitation, but adversaries may also use compromised websites for non-exploitation behavior such as acquiring Application Access Token .
Tactics:	Initial Access
Data Sources:	Application Log: Application Log Content, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Process: Process Creation
Platforms:	Linux, macOS, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may execute their own malicious payloads by side-loading DLLs. Similar to DLL Search Order Hijacking , side-loading involves hijacking which DLL a program loads. But rather than just planting the DLL within the search order of a program then waiting for the victim application to be invoked, adversaries may directly side-load their payloads by planting then invoking a legitimate application that executes their payload(s).
Tactics:	Defense Evasion, Persistence, Privilege Escalation
Data Sources:	File: File Creation, File: File Modification, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may abuse rundll32.exe to proxy execution of malicious code. Using rundll32.exe, vice executing directly (i.e. Shared Modules ), may avoid triggering security tools that may not monitor execution of the rundll32.exe process because of allowlists or false positives from normal operations. Rundll32.exe is commonly associated with executing DLL payloads (ex: `rundll32.exe {DLLname, DLLfunction}` ).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, Module: Module Load, Process: Process Creation
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may enumerate files and directories or may search in specific locations of a host or network share for certain information within a file system. Adversaries may use the information from File and Directory Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	An adversary may attempt to get detailed information about the operating system and hardware, including version, patches, hotfixes, service packs, and architecture. Adversaries may use the information from System Information Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Process: OS API Execution, Process: Process Creation
Platforms:	IaaS, Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://transfiles.ru/vyjw4

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Hooking and other Techniques for Hiding and Protection

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Desktop\Loader.exe

C:\Users\user\Downloads\7a171e63-c919-4223-98ab-f871613dd714.tmp

C:\Users\user\Downloads\Loader.rar (copy)

C:\Users\user\Downloads\Loader.rar.crdownload

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Windows Analysis Report
https://transfiles.ru/vyjw4