Edit tour

Windows Analysis Report
http://www.telegramkv.com/

Overview

General Information

Sample URL:	http://www.telegramkv.com/
Analysis ID:	1467894
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3156 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6808 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2896 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6376 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.telegramkv.com/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://www.telegramkv.com/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://www.telegramkv.com/wp-content/themes/tgtheme/js/jquery.min.js	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/plugins/faq-schema-ultimate/public/css/faq-schema-ultimate-pub	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/uploads/2024/05/so-verwalten-und-loschen-sie-ihr-telegram-kont	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/yingyong.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/pingguo_a.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/788	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/wangye_a.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/uploads/2024/05/3.jpg	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d8.gif	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/uploads/2024/05/12022.jpeg	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/?p=299	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/faq	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/android-768x512.png	Avira URL Cloud: Label: phishing
Source: https://www.tgxiazai.com	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-json/wp/v2/pages/299	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.mi	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-admin/admin-ajax.php	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/plugins/faq-schema-ultimate/public/js/faq-schema-ultimate-publ	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/zhongwen_a.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/uploads/2024/05/0723-tituli-1-1024x601.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/yuyan.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/uploads/2024/05/	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/anzhuo_a.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/pc_img1.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/news.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/jiandan.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-82-1.jpg	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d5.gif	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/why.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/td_laptop.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/arrow1.jpg	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/fei.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/code.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/apple-768x512.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/hot.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d9.gif	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/yuandaima.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/anzhuo.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.5	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/790	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/792	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/icon.png	Avira URL Cloud: Label: phishing
Source: https://www.telegramjq.com	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/798	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/794	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/796	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/uploads/2024/05/Telegram-3-1.jpg	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d4.gif	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/yingyong.jpg	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	Avira URL Cloud: Label: phishing
Source: https://www.telegramkv.com/wp-content/themes/tgtheme/img/banner.jpg	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://www.telegramkv.com

LLM: Score: 8 brands: Telegram Reasons: The URL 'https://www.telegramkv.com' does not match the legitimate domain 'telegram.org' associated with the Telegram brand. The domain 'telegramkv.com' is suspicious as it uses the brand name with additional characters, which is a common phishing technique. The website content appears to be mimicking Telegram's legitimate content, which is another indicator of phishing. The presence of social engineering techniques and suspicious links further supports the conclusion that this is a phishing site. DOM: 7.8.pages.csv

Source: https://www.telegramkv.com/	HTTP Parser: No favicon
Source: https://www.telegramkv.com/blog	HTTP Parser: No favicon
Source: https://www.telegramkv.com/apps	HTTP Parser: No favicon
Source: https://www.telegramkv.com/pc	HTTP Parser: No favicon
Source: https://www.telegramkv.com/android	HTTP Parser: No favicon
Source: https://apps.apple.com/cn/app/telegram-messenger/id686449807	HTTP Parser: No favicon
Source: https://apps.apple.com/cn/app/telegram-messenger/id686449807	HTTP Parser: No favicon
Source: https://www.telegramkv.com/752	HTTP Parser: No favicon
Source: https://www.telegramkv.com/752	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/qVZVO3NgeAk?feature=oembed	HTTP Parser: No favicon
Source: https://www.youtube.com/embed/qVZVO3NgeAk?feature=oembed	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.4:49761 version: TLS 1.2

Source: chrome.exe

Memory has grown: Private usage: 0MB later: 65MB

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.211.4.90
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/scss/style.css HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/scss/base.css HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/scss/media.css HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.5 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/faq-schema-ultimate/public/css/faq-schema-ultimate-public.css?ver=1.0.0 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.6 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/faq-schema-ultimate/public/js/faq-schema-ultimate-public.js?ver=1.0.0 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/icon.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/td_laptop.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min.js?ver=5.4.6 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/icon.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/t_logo_sprite.svg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/anzhuo_a.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d2.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d3.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/why.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/apple-768x512.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/pingguo_a.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/jiandan.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/zhongwen.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/td_laptop.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/anzhuo_a.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/t_logo_sprite.svg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/why.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/zhongwen_a.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/js/jquery.min.js HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/pingguo_a.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/apple-768x512.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/anzhuo.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/jiandan.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/zhongwen.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/pingguo.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d4.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d5.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d6.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d7.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/zhongwen_a.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/anzhuo.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d2.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d8.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d3.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/pingguo.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d9.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/news.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d5.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/12022.jpeg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d6.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-80-1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/news.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d8.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/telegram-groups-cn.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d4.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/3.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/image-20-1-1-1024x516-1.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d7.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-2024-04-24T175141.860-1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/12022.jpeg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/so-verwalten-und-loschen-sie-ihr-telegram-konto.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-81-1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-2024-05-14T065012.987.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-82-1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/d9.gif HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/Telegram-3-1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-80-1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/%E7%94%B5%E6%8A%A5%E5%A6%82%E4%BD%95%E6%89%AB%E6%8F%8F%E4%BA%8C%E7%BB%B4%E7%A0%81%E6%B7%BB%E5%8A%A0%E5%A5%BD%E5%8F%8B%EF%BC%9F.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/arrow1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/code.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.5 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/telegram-groups-cn.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/so-verwalten-und-loschen-sie-ihr-telegram-konto.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-2024-04-24T175141.860-1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/image-20-1-1-1024x516-1.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-81-1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-2024-05-14T065012.987.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-82-1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/Telegram-3-1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/arrow1.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/%E7%94%B5%E6%8A%A5%E5%A6%82%E4%BD%95%E6%89%AB%E6%8F%8F%E4%BA%8C%E7%BB%B4%E7%A0%81%E6%B7%BB%E5%8A%A0%E5%A5%BD%E5%8F%8B%EF%BC%9F.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/code.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /blog HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2.0.58 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.telegramkv.com/blogAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/zixun.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/blogAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/3.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/blogAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=73143-73143If-Range: "66547d39-1b77e"
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/3.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/blogAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=73143-112509If-Range: "66547d39-1b77e"
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.58 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.telegramkv.com/blogAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.telegramkv.com/blogAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.telegramkv.com/blogAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.58-1700928976 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.telegramkv.com/blogAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/zixun.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/image-20-1-1-1024x516-1.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=277672-277672If-Range: "66407ecc-50db5"
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/3.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/image-20-1-1-1024x516-1.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=277672-331188If-Range: "66407ecc-50db5"
Source: global traffic	HTTP traffic detected: GET /apps HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/yingyong.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/appsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/wangye.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/appsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/wangye_a.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/appsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/yingyong.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/appsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/code1.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/appsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/yuandaima.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/appsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/fei.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/appsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/yingyong.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/loudong.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/appsAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/wangye_a.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/yingyong.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/wangye.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/code1.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/yuandaima.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/fei.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/loudong.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-Modified-Since: Thu, 04 Jul 2024 22:20:37 GMT
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=184137-184137If-Range: "66346867-33649"
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=184137-210504If-Range: "66346867-33649"
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc/ HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pc HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /android/ HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /android HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/how.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/androidAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/shipin.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/androidAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=175669-175669If-Range: "66346867-33649"
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/how.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Range: bytes=175669-210504If-Range: "66346867-33649"
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/shipin.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /752 HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/12022-1024x558.jpeg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/752Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/canales-telegram-1024x536.webp HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/752Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-2024-05-14T065012.987-1024x576.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/752Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/0723-tituli-1-1024x601.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/752Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/hot.png HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/752Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/kk-star-ratings/src/core/public/svg/inactive.svg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/kk-star-ratings/src/core/public/svg/active.svg HTTP/1.1Host: www.telegramkv.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.6Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/qVZVO3NgeAk?feature=oembed HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://www.telegramkv.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/12022-1024x558.jpeg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/tgtheme/img/hot.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/kk-star-ratings/src/core/public/svg/active.svg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/kk-star-ratings/src/core/public/svg/inactive.svg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/maxresdefault-2024-05-14T065012.987-1024x576.jpg HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/canales-telegram-1024x536.webp HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.youtube.com/embed/qVZVO3NgeAk?feature=oembedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=zR4LuK50jpk; VISITOR_INFO1_LIVE=PrPVsjSEvmU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/qVZVO3NgeAk?feature=oembedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=zR4LuK50jpk; VISITOR_INFO1_LIVE=PrPVsjSEvmU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/qVZVO3NgeAk?feature=oembedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=zR4LuK50jpk; VISITOR_INFO1_LIVE=PrPVsjSEvmU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/qVZVO3NgeAk?feature=oembedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=zR4LuK50jpk; VISITOR_INFO1_LIVE=PrPVsjSEvmU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2024/05/0723-tituli-1-1024x601.png HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/qVZVO3NgeAk/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/th/jRfVs40gTXMRpWu0B8K2-2MIOM9vkusCAZGFEOBnG6M.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/5352eb4f/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/embed/qVZVO3NgeAk?feature=oembedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=zR4LuK50jpk; VISITOR_INFO1_LIVE=PrPVsjSEvmU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_mKkW4pRnZp6gFR2woTy2yOtuEJgosaWtv2GOdhFWPcbQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi/qVZVO3NgeAk/sddefault.jpg HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_mKkW4pRnZp6gFR2woTy2yOtuEJgosaWtv2GOdhFWPcbQ=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?5MQ38A HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.youtube.com/embed/qVZVO3NgeAk?feature=oembedAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: YSC=zR4LuK50jpk; VISITOR_INFO1_LIVE=PrPVsjSEvmU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXQ%3D%3D
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=dyBMF7JEG9dJIRNNY_wWoZHO5jhzkso7pd86MhmjuJnVn9TYO2n0uCWTScPZLJv0weU-l1iC3APEyTKZUEu9q2FhjDOzMJselLRGzfJ4UoiDr4dCZPY8pNEA6TYx6pC1pbDjPsIeQM0PvAeqK0wFujpZMpdVqyza8CTYRJeRc_s
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=cjiEXedEgVXqp0S91V7t3CAXpBCjZlOJFRCyoWbwe6Y6vv7bUTQsqjlSah2NrhDmE-TAu-YyFzr_rHrILI9gY1WHi7Aoji0r2DBME_QsM6jbseApiynxg-nzx_fUBGwdg2xbafybBSeJL8n52yqlH-2q_Bq5kpxmUigyz1NgVY0
Source: global traffic	HTTP traffic detected: GET /log?format=json&hasfast=true&authuser=0 HTTP/1.1Host: play.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=515=cjiEXedEgVXqp0S91V7t3CAXpBCjZlOJFRCyoWbwe6Y6vv7bUTQsqjlSah2NrhDmE-TAu-YyFzr_rHrILI9gY1WHi7Aoji0r2DBME_QsM6jbseApiynxg-nzx_fUBGwdg2xbafybBSeJL8n52yqlH-2q_Bq5kpxmUigyz1NgVY0
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8 HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUXSec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.telegramkv.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_295.2.dr	String found in binary or memory: "")\|\|KCa(this.rf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=aB(d,h,dVa):h&&(d="embedded");this.Ma=d;rva();h=null;d=b?b.playerStyle:a.ps;f=g.Eb(eVa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.va=(this.K=g.Eb(eVa,this.playerStyle))&&this.playerStyle!=="play"&&this.playerStyle!=="jamboard";this.yp=!this.va;this.Sa=$A(!1,a.disableplaybackui);this.disablePaidContentOverlay=$A(!1,b==null?void 0:b.disablePaidContentOverlay); equals www.youtube.com (Youtube)
Source: chromecache_295.2.dr	String found in binary or memory: (g.jq(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.jq(c,"www.youtube.com"),d=c.toString()):(c=TCa(d),PI(c)&&(d=c));c=new g.eP(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_295.2.dr	String found in binary or memory: aUa=function(a,b){if(!a.j["0"]){var c=new TJ("0","fakesb",{video:new PJ(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new hQ(new g.eP("http://www.youtube.com/videoplayback"),c,"fake"):new sQ(new g.eP("http://www.youtube.com/videoplayback"),c,new VP(0,0),new VP(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_295.2.dr	String found in binary or memory: g.KR=function(a){var b=g.zR(a);tVa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_295.2.dr	String found in binary or memory: g.zR=function(a){a=xR(a.Ha);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_165.2.dr	String found in binary or memory: return a=n===l.CARD_DISPLAY_STYLES.appOfTheDay?_:n===l.CARD_DISPLAY_STYLES.gameOfTheDay?P:n===l.CARD_DISPLAY_STYLES.inAppPurchase?O:this.getTitleKey(e),this.i18n.t(a,{appName:r,storyTitle:i,_disableSafeString:!0})}getOGType(){return i.default.meta.og.type.story}getTwitterSite(){return this.appViewState.isMacAppStoreView?this.i18n.t("WEA.EditorialItemProductPages.Twitter.site.macOs",{_disableSafeString:!0}):super.getTwitterSite(...arguments)}getTwitterTitle(){return this.getOGTitle(...arguments)}getSchemaTags(e){const{product:t}=e.viewModel,r=E(t),[i]=r,n=(0,l.hasShelfDisplay)(i,"collectionLockup"),{lastPublishedDate:a}=t,o={"@type":"Organization",name:"Apple Inc",url:"http://www.apple.com",logo:{"@type":"ImageObject",url:"https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png"}},s=this.getOGImageTags(e).find((e=>"og:image"===e.name))\|\|{},p={"@context":"http://schema.org",name:this.getSeoTitle(e)??this.getTitle(e),description:this.getSeoDescription(e)??this.getDescription(e),image:s.content,author:o,publisher:o,headline:this.getOGTitle(e),dateModified:a,datePublished:a} equals www.twitter.com (Twitter)
Source: chromecache_295.2.dr	String found in binary or memory: this.X.Da&&(a.authuser=this.X.Da);this.X.pageId&&(a.pageid=this.X.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.oc()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.ra=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(VQ(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.ra=!1);b="";g.OQ(this.B)?NQ(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_295.2.dr	String found in binary or memory: this.hostLanguage=b?b.hostLanguage\|\|"en":cB("en",a.host_language);this.mp=!this.Cc&&Math.random()<g.nI(this.experiments,"web_player_api_logging_fraction");this.Ya=!this.Cc;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(b==null\|\|!b.deviceIsAudioOnly);this.Yd=bB(this.Yd,a.ismb);this.yp?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=xR(this.Ha)\|\|"www.youtube.com")):r="video.google.com";this.Bn=r;iVa(this,a,!0);this.Oa=new XQ;g.M(this,this.Oa);q=b?b.innertubeApiKey:cB("",a.innertube_api_key); equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.telegramkv.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: is1-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is2-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is5-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is4-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is3-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com

Source: unknown

HTTP traffic detected: POST /report/v4?s=XqfpNCB3SFktbW8RwhTHy5mnn3vxB%2BvJRTV3K6uw8TmEM%2FZFd7owIcjs%2BJOODDsiPpio9unaCdbtKh3k%2BodyQqfkCz%2BbXRjOteWK5lPa4MXMy9wG4Z16lB3l%2FSXJMECm0KoIHAc%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 499Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_165.2.dr	String found in binary or memory: http://reportaproblem.apple.com
Source: chromecache_165.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_165.2.dr	String found in binary or memory: http://schema.org/ItemListOrderAscending
Source: chromecache_295.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_165.2.dr	String found in binary or memory: http://www.apple.com
Source: chromecache_295.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_295.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_295.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_295.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_165.2.dr	String found in binary or memory: https://amp-api-search-edge.apps.apple.com/v1/catalog/$
Source: chromecache_165.2.dr	String found in binary or memory: https://amp-api.books.apple.com/
Source: chromecache_165.2.dr	String found in binary or memory: https://amp.apple.com
Source: chromecache_295.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_165.2.dr	String found in binary or memory: https://api.books.apple.com/
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_165.2.dr	String found in binary or memory: https://apps.apple.com
Source: chromecache_165.2.dr	String found in binary or memory: https://apps.apple.com/
Source: chromecache_165.2.dr	String found in binary or memory: https://apps.apple.com/$
Source: chromecache_259.2.dr	String found in binary or memory: https://apps.apple.com/cn/app/telegram-messenger/id686449807
Source: chromecache_165.2.dr	String found in binary or memory: https://apps.apple.com/story/id1538632801
Source: chromecache_165.2.dr	String found in binary or memory: https://apps.apple.com/story/id1539235847
Source: chromecache_165.2.dr	String found in binary or memory: https://apps.apple.com/story/id1604959672
Source: chromecache_165.2.dr	String found in binary or memory: https://apps.apple.com/us/app/apple-podcasts/id525463029
Source: chromecache_200.2.dr	String found in binary or memory: https://buy.music.apple.com/account/v1/affiliation/association
Source: chromecache_200.2.dr	String found in binary or memory: https://buy.tv.apple.com/account/v1/affiliation/association
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://core.telegram.org/api
Source: chromecache_295.2.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_200.2.dr	String found in binary or memory: https://git.io/fjule
Source: chromecache_200.2.dr	String found in binary or memory: https://git.io/fxCyr
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/Ajaxy/telegram-tt
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/Ajaxy/telegram-tt/blob/master/LICENSE
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/DrKLO/Telegram
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/TGX-Android/Telegram-X
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/TGX-Android/Telegram-X/blob/main/LICENSE
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/TelegramMessenger/Telegram-iOS
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/UnigramDev/Unigram
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/danog/MadelineProto
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/evgeny-nadymov/telegram-react
Source: chromecache_275.2.dr	String found in binary or memory: https://github.com/js-cookie/js-cookie
Source: chromecache_295.2.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/overtake/TelegramSwift
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/tdlib/td
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/telegramdesktop/tdesktop
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/vysheng/tg
Source: chromecache_177.2.dr	String found in binary or memory: https://github.com/zhukov/webogram
Source: chromecache_165.2.dr	String found in binary or memory: https://itunes.apple.com$
Source: chromecache_165.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewFeature?id=1476734846&mt=11
Source: chromecache_165.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewTop?cc=
Source: chromecache_165.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewTop?genreId=38&mt=11
Source: chromecache_200.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStoreServices.woa/wa/processRedirectUrl
Source: chromecache_295.2.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: chromecache_179.2.dr, chromecache_252.2.dr, chromecache_309.2.dr, chromecache_174.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt
Source: chromecache_200.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/media-api
Source: chromecache_259.2.dr	String found in binary or memory: https://laowang-vpn.com/download1.html
Source: chromecache_295.2.dr	String found in binary or memory: https://music.youtube.com
Source: chromecache_295.2.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_165.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.apple.android.music&referrer=utm_source=$
Source: chromecache_295.2.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_295.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_295.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_295.2.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_295.2.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_177.2.dr	String found in binary or memory: https://telegram.org/dl/android
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://translations.telegram.org/
Source: chromecache_165.2.dr	String found in binary or memory: https://tv.apple.com/search?q=
Source: chromecache_259.2.dr	String found in binary or memory: https://web.telegram.org/
Source: chromecache_177.2.dr	String found in binary or memory: https://web.telegram.org/a/
Source: chromecache_177.2.dr	String found in binary or memory: https://web.telegram.org/k/
Source: chromecache_165.2.dr	String found in binary or memory: https://www.apple.com
Source: chromecache_165.2.dr	String found in binary or memory: https://www.apple.com/
Source: chromecache_165.2.dr	String found in binary or memory: https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png
Source: chromecache_165.2.dr	String found in binary or memory: https://www.apple.com/apple-books/
Source: chromecache_165.2.dr	String found in binary or memory: https://www.apple.com/apple-vision-pro/
Source: chromecache_165.2.dr	String found in binary or memory: https://www.apple.com/ios/app-store/
Source: chromecache_165.2.dr	String found in binary or memory: https://www.apple.com/osx/apps/app-store/
Source: chromecache_177.2.dr	String found in binary or memory: https://www.boost.org/LICENSE_1_0.txt
Source: chromecache_177.2.dr	String found in binary or memory: https://www.gnu.org/licenses/gpl.html
Source: chromecache_177.2.dr	String found in binary or memory: https://www.gnu.org/licenses/old-licenses/gpl-2.0.html
Source: chromecache_295.2.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_292.2.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegram-apk.com
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramchinese.org
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramjq.com
Source: chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/#breadcrumb
Source: chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/#website
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/752
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/788
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/790
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/792
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/794
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/796
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/798
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/800
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/804
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/806
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/810
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/812
Source: chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/?p=299
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/?p=303
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/?s=
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/android
Source: chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/apps
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/apps#breadcrumb
Source: chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/blog
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/faq
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/page/2
Source: chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/pc
Source: chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/pc#breadcrumb
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-admin/admin-ajax.php
Source: chromecache_177.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2
Source: chromecache_177.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.
Source: chromecache_177.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?
Source: chromecache_177.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.
Source: chromecache_177.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/plugins/faq-schema-ultimate/public/css/faq-schema-ultimate-pub
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/plugins/faq-schema-ultimate/public/js/faq-schema-ultimate-publ
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.mi
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/android-768x512.png
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/anzhuo.png
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/anzhuo_a.png
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/apple-768x512.png
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/arrow.png
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/arrow1.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/banner.jpg
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/code.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/code1.png
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d2.gif
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d3.gif
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d4.gif
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d5.gif
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d6.gif
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d7.gif
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d8.gif
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/d9.gif
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/fei.png
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/icon.png
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/jiandan.png
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/logo.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/loudong.png
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/news.png
Source: chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/pc_img1.png
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/pingguo.png
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/pingguo_a.png
Source: chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/td_laptop.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/wangye.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/wangye_a.png
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/why.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/yingyong.jpg
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/yingyong.png
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/yuandaima.png
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/yuyan.png
Source: chromecache_177.2.dr, chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/zhongwen.png
Source: chromecache_177.2.dr, chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/img/zhongwen_a.png
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/js/jquery.min.js
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/scss/base.css
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/scss/media.css
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/12022.jpeg
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/3.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/Telegram-3-1.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/image-20-1-1-1024x516-1.png
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-2024-04-24T175141.860-1.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-2024-05-14T065012.987.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-80-1.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-81-1.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-82-1.jpg
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/so-verwalten-und-loschen-sie-ihr-telegram-kont
Source: chromecache_214.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-content/uploads/2024/05/telegram-groups-cn.jpg
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.5
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-json/
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.telegramkv.com%2Fapps
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.telegramkv.com%2Fapps&#038
Source: chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.telegramkv.com%2Fpc
Source: chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.telegramkv.com%2Fpc&f
Source: chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-json/wp/v2/pages/299
Source: chromecache_177.2.dr	String found in binary or memory: https://www.telegramkv.com/wp-json/wp/v2/pages/303
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.telegramkv.com/xmlrpc.php?rsd
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://www.tgxiazai.com
Source: chromecache_295.2.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_313.2.dr	String found in binary or memory: https://xp.apple.com/config/1/report
Source: chromecache_200.2.dr	String found in binary or memory: https://xp.apple.com/register
Source: chromecache_223.2.dr, chromecache_313.2.dr, chromecache_196.2.dr, chromecache_234.2.dr	String found in binary or memory: https://xp.apple.com/report
Source: chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	String found in binary or memory: https://yoast.com/wordpress/plugins/seo/
Source: chromecache_295.2.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_295.2.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49986
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49984
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49983
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49949 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49980
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49932 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49961 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49979
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49977
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49974
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 49950 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49973
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49971
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49970
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49967 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49943 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49969
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49967
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49965
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49964
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49963
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49962
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49961
Source: unknown	Network traffic detected: HTTP traffic on port 49989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49933 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49959
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49957
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49956
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49954
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49953
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49952
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49951
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49950
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49983 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49938 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49949
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49948
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49947
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49946
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49943
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 49951 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 49974 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49939 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49980 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49957 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49956 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49979 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 49973 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49990
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49934 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49962 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49988
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49970 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49935 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49946 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49964 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49947 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49963 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 49952 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49969 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49941 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49942
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49941
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49965 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49939
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49938
Source: unknown	Network traffic detected: HTTP traffic on port 49942 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49937
Source: unknown	Network traffic detected: HTTP traffic on port 49977 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49936
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49935
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49934
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49933
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49932
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49954 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49971 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49936 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49953 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49937 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49948 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49959 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.211.4.90:443 -> 192.168.2.4:49761 version: TLS 1.2

Source: classification engine

Classification label: mal64.phis.win@29/303@46/19

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.telegramkv.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6808 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6376 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6808 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6376 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Extra Window Memory Injection	1 Extra Window Memory Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.telegramkv.com/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	0%	URL Reputation	safe
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	0%	URL Reputation	safe
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	0%	URL Reputation	safe
https://schema.org	0%	URL Reputation	safe
http://tools.ietf.org/html/rfc1950	0%	URL Reputation	safe
https://yoast.com/wordpress/plugins/seo/	0%	URL Reputation	safe
https://a.nel.cloudflare.com/report/v4?s=yipAoR7AGwC4wg%2BNkLLxJxtgswryUf0lpiZAbhNj5eLZQ%2FOZL1kCGH8sUYOh17Nnck3IalCnfPPhVwBU6V5btx8eV4zKBc1JAr7Ax9vVNEXwhZBAexWRUj%2FOjBPrBBUXdkELGoc%3D	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/themes/tgtheme/js/jquery.min.js	100%	Avira URL Cloud	phishing
https://telegram.org/dl/android	0%	Avira URL Cloud	safe
https://translations.telegram.org/	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/plugins/faq-schema-ultimate/public/css/faq-schema-ultimate-pub	100%	Avira URL Cloud	phishing
https://github.com/zhukov/webogram	0%	Avira URL Cloud	safe
https://www.youtube.com/generate_204?5MQ38A	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/uploads/2024/05/so-verwalten-und-loschen-sie-ihr-telegram-kont	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/yingyong.png	100%	Avira URL Cloud	phishing
http://youtube.com/streaming/metadata/segment/102015	0%	URL Reputation	safe
https://www.telegramkv.com/wp-content/themes/tgtheme/img/pingguo_a.png	100%	Avira URL Cloud	phishing
http://schema.org	0%	URL Reputation	safe
https://youtube.com/api/drm/fps?ek=uninitialized	0%	URL Reputation	safe
https://github.com/Ajaxy/telegram-tt/blob/master/LICENSE	0%	Avira URL Cloud	safe
https://www.telegramkv.com/788	100%	Avira URL Cloud	phishing
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/qVZVO3NgeAk/sddefault.jpg	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/themes/tgtheme/img/wangye_a.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/uploads/2024/05/3.jpg	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/d8.gif	100%	Avira URL Cloud	phishing
https://core.telegram.org/api	0%	Avira URL Cloud	safe
https://web.telegram.org/	0%	Avira URL Cloud	safe
https://git.io/fjule	0%	Avira URL Cloud	safe
https://github.com/danog/MadelineProto	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/uploads/2024/05/12022.jpeg	100%	Avira URL Cloud	phishing
https://github.com/TGX-Android/Telegram-X/blob/main/LICENSE	0%	Avira URL Cloud	safe
https://www.telegramkv.com/?p=299	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/faq	100%	Avira URL Cloud	phishing
https://www.boost.org/LICENSE_1_0.txt	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/themes/tgtheme/img/android-768x512.png	100%	Avira URL Cloud	phishing
https://www.tgxiazai.com	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-json/wp/v2/pages/299	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.mi	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-admin/admin-ajax.php	100%	Avira URL Cloud	phishing
https://github.com/js-cookie/js-cookie	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/plugins/faq-schema-ultimate/public/js/faq-schema-ultimate-publ	100%	Avira URL Cloud	phishing
https://laowang-vpn.com/download1.html	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/themes/tgtheme/img/zhongwen_a.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/uploads/2024/05/0723-tituli-1-1024x601.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/yuyan.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/uploads/2024/05/	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/anzhuo_a.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/pc_img1.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/news.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/jiandan.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-82-1.jpg	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/d5.gif	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/why.png	100%	Avira URL Cloud	phishing
https://web.telegram.org/k/	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/themes/tgtheme/img/td_laptop.png	100%	Avira URL Cloud	phishing
https://a.nel.cloudflare.com/report/v4?s=iR9yhtT5wVysqxmrU%2BQqeKmWUXvWC4CzgIijupjHmUq%2FXiD1KmMxrwHCipE%2Bg9D9XB%2FlafwkMTRgh3aqoq3zKufBi7YS0KIxerjWY05myf0WW8g85pB7VlXWpDbUgyNP9keRsgI%3D	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/themes/tgtheme/img/arrow1.jpg	100%	Avira URL Cloud	phishing
https://www.gnu.org/licenses/gpl.html	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/remote.js	0%	Avira URL Cloud	safe
https://a.nel.cloudflare.com/report/v4?s=XqfpNCB3SFktbW8RwhTHy5mnn3vxB%2BvJRTV3K6uw8TmEM%2FZFd7owIcjs%2BJOODDsiPpio9unaCdbtKh3k%2BodyQqfkCz%2BbXRjOteWK5lPa4MXMy9wG4Z16lB3l%2FSXJMECm0KoIHAc%3D	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/themes/tgtheme/img/fei.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/code.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/apple-768x512.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/hot.png	100%	Avira URL Cloud	phishing
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/base.js	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/themes/tgtheme/img/d9.gif	100%	Avira URL Cloud	phishing
https://yt3.ggpht.com/ytc/AIdro_mKkW4pRnZp6gFR2woTy2yOtuEJgosaWtv2GOdhFWPcbQ=s68-c-k-c0x00ffffff-no-rj	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/themes/tgtheme/img/yuandaima.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2	100%	Avira URL Cloud	phishing
https://github.com/telegramdesktop/tdesktop	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/themes/tgtheme/img/anzhuo.png	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.5	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/790	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/792	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/icon.png	100%	Avira URL Cloud	phishing
https://play.google.com/log?format=json&hasfast=true&authuser=0	0%	Avira URL Cloud	safe
https://docs.google.com/get_video_info	0%	Avira URL Cloud	safe
https://www.gnu.org/licenses/old-licenses/gpl-2.0.html	0%	Avira URL Cloud	safe
http://schema.org/ItemListOrderAscending	0%	Avira URL Cloud	safe
https://www.youtube.com/s/player/5352eb4f/www-player.css	0%	Avira URL Cloud	safe
https://www.telegramjq.com	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/798	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/794	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/796	100%	Avira URL Cloud	phishing
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/embed.js	0%	Avira URL Cloud	safe
https://www.telegramkv.com/wp-content/uploads/2024/05/Telegram-3-1.jpg	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/d4.gif	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/yingyong.jpg	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	100%	Avira URL Cloud	phishing
https://www.telegramkv.com/wp-content/themes/tgtheme/img/banner.jpg	100%	Avira URL Cloud	phishing
https://github.com/UnigramDev/Unigram	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
youtube-ui.l.google.com	216.58.206.78	true	false	unknown
googleads.g.doubleclick.net	142.250.184.194	true	false	unknown
play.google.com	172.217.18.110	true	false	unknown
i.ytimg.com	142.250.185.182	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.185.193	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
static.doubleclick.net	142.250.185.166	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
www.telegramkv.com	188.114.96.3	true	true	unknown
is2-ssl.mzstatic.com	unknown	unknown	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
is4-ssl.mzstatic.com	unknown	unknown	false	unknown
is3-ssl.mzstatic.com	unknown	unknown	false	unknown
is1-ssl.mzstatic.com	unknown	unknown	false	unknown
is5-ssl.mzstatic.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://a.nel.cloudflare.com/report/v4?s=yipAoR7AGwC4wg%2BNkLLxJxtgswryUf0lpiZAbhNj5eLZQ%2FOZL1kCGH8sUYOh17Nnck3IalCnfPPhVwBU6V5btx8eV4zKBc1JAr7Ax9vVNEXwhZBAexWRUj%2FOjBPrBBUXdkELGoc%3D	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?5MQ38A	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/pingguo_a.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/js/jquery.min.js	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/yingyong.png	true	Avira URL Cloud: phishing	unknown
https://www.youtube.com/youtubei/v1/log_event?alt=json&key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8	false	URL Reputation: safe	unknown
https://www.telegramkv.com/android	true		unknown
https://i.ytimg.com/vi/qVZVO3NgeAk/sddefault.jpg	false	Avira URL Cloud: safe	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/d8.gif	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/wangye_a.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/uploads/2024/05/3.jpg	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/uploads/2024/05/12022.jpeg	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/android-768x512.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/apps	true		unknown
https://www.telegramkv.com/752	true		unknown
https://www.telegramkv.com/##	true		unknown
https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1	true	Avira URL Cloud: phishing	unknown
https://www.youtube.com/embed/qVZVO3NgeAk?feature=oembed	false		unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/zhongwen_a.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/uploads/2024/05/0723-tituli-1-1024x601.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/jiandan.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/anzhuo_a.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/news.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-82-1.jpg	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/d5.gif	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/why.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/td_laptop.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/arrow1.jpg	true	Avira URL Cloud: phishing	unknown
https://a.nel.cloudflare.com/report/v4?s=XqfpNCB3SFktbW8RwhTHy5mnn3vxB%2BvJRTV3K6uw8TmEM%2FZFd7owIcjs%2BJOODDsiPpio9unaCdbtKh3k%2BodyQqfkCz%2BbXRjOteWK5lPa4MXMy9wG4Z16lB3l%2FSXJMECm0KoIHAc%3D	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/code.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/fei.png	true	Avira URL Cloud: phishing	unknown
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/remote.js	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=iR9yhtT5wVysqxmrU%2BQqeKmWUXvWC4CzgIijupjHmUq%2FXiD1KmMxrwHCipE%2Bg9D9XB%2FlafwkMTRgh3aqoq3zKufBi7YS0KIxerjWY05myf0WW8g85pB7VlXWpDbUgyNP9keRsgI%3D	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/apple-768x512.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/hot.png	true	Avira URL Cloud: phishing	unknown
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/base.js	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/d9.gif	true	Avira URL Cloud: phishing	unknown
https://yt3.ggpht.com/ytc/AIdro_mKkW4pRnZp6gFR2woTy2yOtuEJgosaWtv2GOdhFWPcbQ=s68-c-k-c0x00ffffff-no-rj	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/yuandaima.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/anzhuo.png	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.5	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/icon.png	true	Avira URL Cloud: phishing	unknown
https://play.google.com/log?format=json&hasfast=true&authuser=0	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/5352eb4f/www-player.css	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/embed.js	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/d4.gif	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/uploads/2024/05/Telegram-3-1.jpg	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/yingyong.jpg	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://telegram.org/dl/android	chromecache_177.2.dr	false	Avira URL Cloud: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers	chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://translations.telegram.org/	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/wp-content/plugins/faq-schema-ultimate/public/css/faq-schema-ultimate-pub	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/uploads/2024/05/so-verwalten-und-loschen-sie-ihr-telegram-kont	chromecache_214.2.dr	true	Avira URL Cloud: phishing	unknown
https://github.com/zhukov/webogram	chromecache_177.2.dr	false	Avira URL Cloud: safe	unknown
https://redux.js.org/tutorials/fundamentals/part-4-store#middleware	chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://www.telegramkv.com/788	chromecache_214.2.dr	true	Avira URL Cloud: phishing	unknown
https://github.com/Ajaxy/telegram-tt/blob/master/LICENSE	chromecache_177.2.dr	false	Avira URL Cloud: safe	unknown
https://web.telegram.org/	chromecache_259.2.dr	false	Avira URL Cloud: safe	unknown
https://core.telegram.org/api	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	false	Avira URL Cloud: safe	unknown
https://git.io/fjule	chromecache_200.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/danog/MadelineProto	chromecache_177.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/TGX-Android/Telegram-X/blob/main/LICENSE	chromecache_177.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	false	URL Reputation: safe	unknown
https://www.telegramkv.com/?p=299	chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
https://www.boost.org/LICENSE_1_0.txt	chromecache_177.2.dr	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/faq	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
https://www.tgxiazai.com	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	false	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
http://tools.ietf.org/html/rfc1950	chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://www.telegramkv.com/wp-json/wp/v2/pages/299	chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.mi	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
https://github.com/js-cookie/js-cookie	chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/wp-admin/admin-ajax.php	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/plugins/faq-schema-ultimate/public/js/faq-schema-ultimate-publ	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
https://laowang-vpn.com/download1.html	chromecache_259.2.dr	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/yuyan.png	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/pc_img1.png	chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
https://yoast.com/wordpress/plugins/seo/	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	false	URL Reputation: safe	unknown
https://www.telegramkv.com/wp-content/uploads/2024/05/	chromecache_214.2.dr	true	Avira URL Cloud: phishing	unknown
https://web.telegram.org/k/	chromecache_177.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gnu.org/licenses/gpl.html	chromecache_177.2.dr	false	Avira URL Cloud: safe	unknown
http://youtube.com/streaming/metadata/segment/102015	chromecache_295.2.dr	false	URL Reputation: safe	unknown
http://schema.org	chromecache_165.2.dr	false	URL Reputation: safe	unknown
https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2	chromecache_177.2.dr, chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?	chromecache_177.2.dr, chromecache_259.2.dr	true	Avira URL Cloud: phishing	unknown
https://github.com/telegramdesktop/tdesktop	chromecache_177.2.dr	false	Avira URL Cloud: safe	unknown
https://youtube.com/api/drm/fps?ek=uninitialized	chromecache_295.2.dr	false	URL Reputation: safe	unknown
https://www.telegramkv.com/790	chromecache_214.2.dr	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/792	chromecache_214.2.dr	true	Avira URL Cloud: phishing	unknown
https://docs.google.com/get_video_info	chromecache_295.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gnu.org/licenses/old-licenses/gpl-2.0.html	chromecache_177.2.dr	false	Avira URL Cloud: safe	unknown
http://schema.org/ItemListOrderAscending	chromecache_165.2.dr	false	Avira URL Cloud: safe	unknown
https://www.telegramkv.com/798	chromecache_214.2.dr	true	Avira URL Cloud: phishing	unknown
https://www.telegramjq.com	chromecache_177.2.dr, chromecache_214.2.dr, chromecache_259.2.dr	false	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/794	chromecache_214.2.dr	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/796	chromecache_214.2.dr	true	Avira URL Cloud: phishing	unknown
https://www.telegramkv.com/wp-content/themes/tgtheme/img/banner.jpg	chromecache_214.2.dr	true	Avira URL Cloud: phishing	unknown
https://github.com/UnigramDev/Unigram	chromecache_177.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
216.58.206.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.166	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.225	unknown	United States	15169	GOOGLEUS	false
142.250.185.182	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.181.238	unknown	United States	15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
216.58.212.130	unknown	United States	15169	GOOGLEUS	false
172.217.18.110	play.google.com	United States	15169	GOOGLEUS	false
142.250.186.36	unknown	United States	15169	GOOGLEUS	false
142.250.184.194	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
142.250.185.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	www.telegramkv.com	European Union	13335	CLOUDFLARENETUS	true
216.58.212.182	unknown	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1467894
Start date and time:	2024-07-05 00:38:35 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.telegramkv.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@29/303@46/19
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://www.telegramkv.com/blog Browse: https://www.telegramkv.com/apps Browse: https://www.telegramkv.com/## Browse: https://www.telegramkv.com/pc/ Browse: https://www.telegramkv.com/android/ Browse: https://apps.apple.com/cn/app/telegram-messenger/id686449807 Browse: https://www.telegramkv.com/752

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.99, 142.250.185.142, 66.102.1.84, 34.104.35.123, 40.68.123.157, 199.232.214.172, 192.229.221.95, 20.3.187.198, 2.19.224.19, 2.16.202.121, 95.101.54.216, 2.23.196.201, 23.201.252.52, 23.36.225.161, 23.53.112.28, 142.250.186.163, 172.217.18.3, 142.250.186.42, 142.250.186.138, 142.250.181.234, 142.250.74.202, 216.58.206.42, 142.250.186.74, 172.217.18.10, 142.250.185.138, 142.250.186.106, 142.250.185.106, 142.250.184.202, 142.250.185.202, 142.250.185.170, 172.217.23.106, 216.58.212.170, 142.250.185.234, 142.250.184.227, 142.250.185.74, 216.58.206.74, 172.217.16.138, 142.250.184.234
Excluded domains from analysis (whitelisted): www.apple.com.edgekey.net.globalredir.akadns.net, xp.itunes-apple.com.akadns.net, js-cdn.music.apple.com, slscr.update.microsoft.com, clientservices.googleapis.com, amp-api-edge.apps.apple.com, www.apple.com, e17437.dsct.akamaiedge.net, clients2.google.com, ocsp.digicert.com, xp.apple.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, itunes.apple.com.edgekey.net, sls.update.microsoft.com, update.googleapis.com, xp.apple.com.edgekey.net, js-cdn-music-lb.itunes-apple.com.akadns.net, www.gstatic.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, apps-cdn.itunes-apple.com.akadns.net, e8143.dscb.akamaiedge.net, fs.microsoft.com, accounts.google.com, ctldl.windowsupdate.com.delivery.microsoft.com, e673.dsce9.akamaiedge.net, fonts.gstatic.com, ctldl.windowsupdate.com, authorize.music.apple.com.edgekey.net, e6858.dscx.akamaiedge.net, jnn-pa.googleapis.com, apps.apple.com, amp-api-edge-cdn-lb.itunes-apple.com.akadns.net, fe3cr.
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.telegramkv.com/

Input	Output
URL: https://www.telegramkv.com/ Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title and text do not contain any elements indicating the presence of a login form, as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","There is no language in the text that creates a sense of urgency, such as 'Click here to view document' or 'To view secured document click here'. The text is merely promoting the Telegram app for Android and iPhone/iPad.","There is no CAPTCHA or anti-robot detection mechanism present in the webpage."]}
Title: Telegram - OCR: Telegram for elegram Androidghfi Telegram Androi& Telegram iPhone/iPad
URL: https://www.telegramkv.com/apps Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title and text of the webpage do not contain any elements that would suggest a login form is present.","There is no language in the text that creates a sense of urgency or interest.","There is no mention or evidence of a CAPTCHA or any other anti-robot detection mechanism on the webpage."]}
Title: Telegram - Telegram OCR: TELEGRAM App Google Play Telegram Windowsh iPhonehfi Telegram X for Telegram CLI for Linux
URL: https://www.telegramkv.com/blog Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title and text of the webpage do not contain any elements indicating the presence of a login form. There are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text of the webpage does not create a sense of urgency or interest. There are no phrases or words that encourage the user to click a link or view a document.","There is no evidence of a CAPTCHA or anti-robot detection mechanism on the webpage."]}
Title: - Telegram OCR: Telegram 1:33 4G e_ TelegramlK#? 28 02 20206E30a an QVPN telegram Telegram 2024=06 _ 2020626E
URL: https://www.telegramkv.com/## Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The title and text of the webpage do not contain any explicit request for sensitive information, thus it is assessed that the webpage does not contain a login form.","The text does not create a sense of urgency or interest, as it only mentions 'Telegram for Telegram Android-Q' and 'Telegram iPhone/iPad', without implying any immediate action or importance.","There is no evidence of a CAPTCHA or anti-robot detection mechanism in the provided title and text."]}
Title: Telegram - OCR: Telegram for Telegram Android-Qh& Telegram iPhone/iPad
URL: https://www.telegramkv.com/pc Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form as there are no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV).","The text 'Slicker will by thin. do did do by t_ 20 TelegramZBE*2hfi' does not create a sense of urgency or interest as it does not contain any calls to action or incentives to take immediate action.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism as there are no visual or interactive elements indicating its presence."]}
Title: Telegram - Telegram OCR: Slicker will by thin. do did do by t_ 20 TelegramZBE*2hfi
URL: https://www.telegramkv.com/android Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["The webpage does not contain a login form as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers or credit card numbers (CVV).","The text does not create a sense of urgency or interest as it does not contain any calls to action related to viewing documents, invoices or other secured content.","The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism."]}
Title: Telegram - Telegram OCR: Telegra m Am,' gat deas a puppy. Mud' O Message
URL: https://apps.apple.com/cn/app/telegram-messenger/id686449807 Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": false,"captcha": false,"reasons": ["After inspecting the provided webpage title and text, I did not find any evidence of a login form. There were no explicit requests for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.","The text provided does not create a sense of urgency or interest. There are no phrases such as 'Click here to view document', 'To view secured document click here', or 'Open the link to see your invoice'.","There is no CAPTCHA or anti-robot detection mechanism present in the provided webpage title and text."]}
Title: AppleMusic OCR: iEtFiC...
URL: https://www.telegramkv.com/752 Model: Perplexity: mixtral-8x7b-instruct	{"loginform": false,"urgency": true,"captcha": false,"reasons": ["The text 'Telegram <o 28 Rate this post Telegram' creates a sense of urgency as it asks the user to rate the post.","No login form was found in the provided webpage content.","No CAPTCHA or anti-robot detection mechanism was found in the provided webpage content."]}
Title: Telegram - Telegram OCR: Telegram <o 28 Rate this post Telegram
URL: https://www.telegramkv.com Model: gpt-4o	```json{ "phishing_score": 8, "brands": "Telegram", "phishing": true, "suspicious_domain": true, "has_prominent_loginform": false, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "telegram.org", "reasons": "The URL 'https://www.telegramkv.com' does not match the legitimate domain 'telegram.org' associated with the Telegram brand. The domain 'telegramkv.com' is suspicious as it uses the brand name with additional characters, which is a common phishing technique. The website content appears to be mimicking Telegram's legitimate content, which is another indicator of phishing. The presence of social engineering techniques and suspicious links further supports the conclusion that this is a phishing site."}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (821)
Category:	downloaded
Size (bytes):	7626
Entropy (8bit):	5.215559608926212
Encrypted:	false
SSDEEP:	192:OtQ0m8mBOZgS9tn0Ll9829FAeHlVPrMNW:OtFuSD4829FAeHzPAW
MD5:	33AF753815E0763128B33C38F393AF19
SHA1:	FD81C07EDD497B91F91629687D2AB6976F287E17
SHA-256:	A7A8465112A5F495E5C95139568A59BF35B3116624A5861B71472070520D699E
SHA-512:	D5981A0D80035A3E0B8EFBE12B90C5E82A53F8C2CBC100001D344DC645B07A76DB3B75D863A5BB733F54B9E13B4C0A515B63041F50DCFC9AC750C092C436DBF5
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.26.d8fd25d7ba389f9fe03e.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[26],{71026:function(e,t,n){n.r(t),n.d(t,{environment:function(){return a},eventRecorder:function(){return F},immediateEventRecorder:function(){return q},logger:function(){return D},network:function(){return E},setEventQueuePostIntervalEnabled:function(){return N}}).var s=n(76588),r=n(24178),u=n(32722),o=r.SC.attachDelegate,a={setDelegate:function(e){return o(this,e)},globalScope:function(){return window}},i={AJAX:"ajax",AJAX_SYNCHRONOUS:"ajaxSynchronous",IMAGE:"image",BEACON:"beacon"},v=r.vc.metricsDisabledOrDenylistedEvent,c=r.vc.removeDenylistedFields,l={},p=["dsId","consumerId"].function f(e,t,n){var s=null.return n&&!v.call(u.Z,n.eventType,t)&&(c.call(u.Z,n,t),m(t,n),e.apply(null,Array.prototype.slice.call(arguments,1)),s=n),s}function d(e,t){l[e]=l[e]\|\|{},l[e]=t}function Q(){l={}}function m(e,t){l[e]=l[e]\|\|{},l[e].anonymous&&p.forEach((function(e){delete t[e]}))}var y=r.SC.attachDel

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1516
Entropy (8bit):	7.091695289966244
Encrypted:	false
SSDEEP:	24:d1hNo7FCWwjx82lY2T3/VL7JyJ3VPrMGEH0O7gglLTXRyrA0lsBuasu0hBjEUFl/:Dzo7FDNn2DJsJ3hMLVFRyZCuasFBxF7R
MD5:	98CB1719DC98BD01179A29C90C8B6583
SHA1:	2CB8B20B522B915CF8769B65FC0206F016E5485D
SHA-256:	15AF8F2CAE909145904EBA5C7B96E056DD0E7DE92490409A07DE5CE8036DA9D5
SHA-512:	5A81B20CE4D1E69243B738FADFBFB6812633C0389EE42B817CE233E8EB9EFB2E70DC2D0CAD678FB102AE325DED99BD6D1FD23FB72445230030A4D00FA1EBB55B
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/wangye.png
Preview:	.PNG........IHDR..............w=.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:270D42EB4FB611EE8D20A136704C7A04" xmpMM:DocumentID="xmp.did:270D42EC4FB611EE8D20A136704C7A04"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:270D42E94FB611EE8D20A136704C7A04" stRef:documentID="xmp.did:270D42EA4FB611EE8D20A136704C7A04"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...E...aIDATx..MHTQ....!.X.........4.7..0.A`..p.).f.E..V...4..(.EA..fU.@HQp........H3.;q^\...yc.....;..s.9...3.L.?$...

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1342
Entropy (8bit):	6.868963683451565
Encrypted:	false
SSDEEP:	24:+1hNo7FCWwjx82lY2T3/Vo92yJ3VXjGZghFVb39o8r3cQkAx11yqB:Ezo7FDNn2DOtJ3pzVb39trDDkqB
MD5:	7A3F43936C2DE9F18ACB58B102070218
SHA1:	81FAED88163726311B2F0BD6D7E83F4AE387D888
SHA-256:	5F5031CF6F3C0D0D480FB44BD589F2E9AA986149E630BDB5491D57170CD316B3
SHA-512:	130A36673F6E9EACF059675B0DE7B4C9865310BDB84B90023205331C1D4AB3F1270E1F1F941ABB6238424D95F7D178F7082305F7D31DED949CB71C8449677579
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/icon.png
Preview:	.PNG........IHDR.............A.......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:85A41F524F3811EE858E843608C2FC7E" xmpMM:DocumentID="xmp.did:85A41F534F3811EE858E843608C2FC7E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:85A41F504F3811EE858E843608C2FC7E" stRef:documentID="xmp.did:85A41F514F3811EE858E843608C2FC7E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?> S......IDATx..;K.A..7..o...P,b!.E..~...Bk.J.XZX(.(.V._.N._.(h...D.FI#.."......5.....~..y...eG...H..........>.{.:.0...

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	210505
Entropy (8bit):	7.9922535991806765
Encrypted:	true
SSDEEP:	3072:y9uaNyEjlkHoafn4kHwZB8gpmI84iLMQnMRy8+o8gymUcGZcAop0gi1Np5aJY7Ji:y8aFPrh8JjNnM1nq2x0giJ5DJ24mAyp
MD5:	FD093A0A931F4A017811311412C9271B
SHA1:	EA04EB557D2E98A4BA4C576E91E54586A57F45E1
SHA-256:	8AE4C9DFAEDD3BE0A3324ABFDF858093B55AE08C30582177B0A774B2F2AC2D1B
SHA-512:	67CCDE69FCBB3CBDF1765749363CEFD0E6FB19D89DE97EE04B5B36CE340A0364EAFE269B753191FF855C228BAFF5CFB114B6A0EA9AA2D1412F274E8EA13873B7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............5..:....pHYs..........+.... .IDATx..{.d.]..9.{.YYY..Z.n..%Y.m,![3..1....`.....c.`..e.........3.k"....,1f..X..6.c.-c.e........w......{.....m..\|".2.f.7O...........p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p..k}.....V^.sp8.D...g..p8.5.?...&.N..u...`0.k}....f.58...p8.t..]........}..V...g.l...n.........m.mf..8...p8~p.........?x.H..v..............."4.....\..s.........9.3..........p\E6........u.s......y..&....!.z8....2..\2Q..*.C..^........p8.......p\%.....}&...u9.]$1.2..zo........ 2.9\............_.i...FA.......?..p..u....~kmQ`...`+B...J...n.[..P.7.z..........t{=..vd....i...Z.8..BH.....Hk-....l.!...AX..!p..........".`-.PJ.+...)%J). G..7.\|.R.Du.b.#...T\(...\.....\|.).hcm.h"....6.v.R..9...U.......N.......B.bM.Z..V....4...P9y.d...3.......V.-.^O.a.,.i-...q(.1.8....'....H)..J....I..k-2......d#{.d.O.....g".mO..k....y .....B.\.P..M>

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 688 x 61, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8893
Entropy (8bit):	7.938424971957831
Encrypted:	false
SSDEEP:	192:o7FWT/U8Ay4/oicMNgJp3/9xVgfy4MweLFC5qlO99S9AfJyLR8tko45d:oYtDrfxW9Mwey8ofyV8tko4z
MD5:	07B93D6CE82DEB5165BCD0BA380D77C5
SHA1:	D52E30CF1D9C95D5D9AAD5EADA4A2C0B64BEE76E
SHA-256:	5BD053210D8C4E2A4814DB1F7E7BD87330FD8103C4EF7207994715A179DA5C84
SHA-512:	1B533B44C2A5D15929A59FAA9C14C3F10561ECDE8CF324D42C951F24A4C1DDFC7E7AACB70F9109459026820BB60BB8A70D7F3A86B3D7FD900E6625F8F20C8545
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/yingyong.png
Preview:	.PNG........IHDR.......=.....U.Z.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:0ABF05C34FB611EE8106EC8499A9C549" xmpMM:DocumentID="xmp.did:0ABF05C44FB611EE8106EC8499A9C549"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0ABF05C14FB611EE8106EC8499A9C549" stRef:documentID="xmp.did:0ABF05C24FB611EE8106EC8499A9C549"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>#.-....2IDATx..]}...u......NBH.c...F......v..).2.8..c.`'.w..G......!.8%.Sq ..(.1...+.-U..WE.>L.;.....b>O.H'.t........

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	downloaded
Size (bytes):	2002471
Entropy (8bit):	7.980025595488585
Encrypted:	false
SSDEEP:	49152:Q9I1skJEpF7xMJjZb/lII8XKTb9dZpmKcFItbP:V1s8Epm/n8aVpkyFP
MD5:	6A88BBD5858B7D9234FB7D0C6C5059A6
SHA1:	C3412D69DFA2CE6B208D52E6842EA7807CFF42D3
SHA-256:	F8152A8D500807F824571C3256320BBF578CDCE88D45D0FD048A6422F71C272B
SHA-512:	F7AE19293C681636C1D32F7D4391633B1E0BE4AADADE5E874A9D7D48AA1880A02F39F8794E02AA35C61987D25B2D18A0AE28099D202502E6413474E4D445C7F2
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/d5.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,......................5.......;KK..'SEV....].....W......w........)......!RDU:JJ......r..M^^...>PP{.....HYY\ll\N^i{{_ppw..9KK..vtdv...CSSa`K..#WIXewwUggm.....Qbc.y...!....................M.l^n.T..............O..=..4.....`........V..q..Z.....J.............\|m~.D...&....9.Vii=MM....:..........u..........`sr....?.............bTeFVV....W.....5...$.a.........\|....o...............$..fXilxx..?5.....j........."..............y...........\|.................!....QG-......#A..4_v0&.{s^MNC.B.Vaa.3..Q.....\.........B.._O..k0..uqo...Gy..@ ...x=...md\.w.p...F$..k.f.........^o....gg........aX..o]..-....x......G.~,eC9&&&.....p..A.....R@..[_....t..;...u..;..._......AA@.Z...93...H0......@.......[(...n.....[..{8B8...^..JNYx...3...`U@..y..>...P@P.R......r.b}.]..Y.........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L.....-.

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	4286
Entropy (8bit):	5.157520760822341
Encrypted:	false
SSDEEP:	48:er7z41Fi4mXEJyfetrETUzkPPgl0TzcHdCC8ZzsVhRItkhXj4FOKWXG8Q:u7z41c4mXEpHzk3gqzNCBKwKWWB
MD5:	975B4112A366CCA6B9BF2C84E268268C
SHA1:	97992BEA1D222B36E9B77B1E0E2C9F0CFDE0CCF5
SHA-256:	181349B08B8DA309823B3B6A670CE13581FF82AF7B03DB71BA60C705D0620261
SHA-512:	1440CD81F276F753DE3B6DFC7851D569689E998F14C55DCE698F68B4487D36E18B9D010DE66EC791FC97704CCC674AB65B26AC46F298A97B664FFE7BCCC90034
Malicious:	false
Reputation:	low
Preview:	...... .... .........(... ...@..... ..................................................................+..+G.'..(..)..(..)..(..(..'..(G.+..........................................................................+..)..(..(..(..(..(..(..(..(..(..(..(..(..)..+..........................................................I..)..)..)..)..(..)..(..(..(..(..(..(..(..(..(..(..)..)..I..............................................+..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..+......................................,..+....)....)..)....)......)....)..)..)..)..)..)..)..)..)....--.............................+..+..............................................+..+......................I....+..............+....+..+..+..+..+..+....+......+....+..+....,..I..................+..+..+..+..+..+..+..+..

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	23116
Entropy (8bit):	4.416888886221028
Encrypted:	false
SSDEEP:	384:wWjhl+ZZx0roaRvQgeMr2VxtaA93S/JKhV3PXASow7/XP5oP5VP5uP5sP5H6NC7E:wQhl2cfvrSxtaCDPaw756TUGLfY
MD5:	E75F7F8AC71782DDA40464528A4F619B
SHA1:	1294A00A625B50FF7C3EB3119A71D49399C9AC29
SHA-256:	832FBEFD7A4FE8F651058597D9F1910883D1CBD56D0CEB343E7D6170AEECF982
SHA-512:	AF128E227ED56355357FA0D3D46C9701E3B10F076F3515D84907ACE6BBF282177A74EF577A0AC48E4E4CC1FE0DFE3D14368F7DB08797AACC767E8841032C4E31
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/t_logo_sprite.svg
Preview:	<svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGradient><linearGradient id="b" gradientUnits="userSpaceOnUse" x1="1080" x2="1080" xlink:href="#a" y1="31.7861" y2="112.214"/><linearGradient id="c" gradientUnits="userSpaceOnUse" x1="1224" x2="1224" xlink:href="#a" y1="24.856" y2="119.144"/><linearGradient id="d" gradientUnits="userSpaceOnUse" x1="1368" x2="1368" xlink:href="#a" y1="19.1113" y2="124.889"/><linearGradient id="e" gradientUnits="userSpaceOnUse" x1="1512" x2="1512" xlink:href="#a" y1="14.4526" y2="129.547"/><linearGradient id="f" gradientUnits="userSpaceOnUse" x1="1656" x2="1656" xlink:href="#a" y1="10.7817" y2="133.218"/><linearGradient id="g" gradientUnits="userSpaceOnUse" x1="1800" x2="1800" xlink:href="#a" y1="8" y2="136"/><linearGradient id="h" gradientUnits="userSpace

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 99196, version 1.0
Category:	downloaded
Size (bytes):	99196
Entropy (8bit):	7.997868398992993
Encrypted:	true
SSDEEP:	1536:SQIJfyDgC8VN2bW1ToDcINoJjl3ox2/OSTGaaLDg39z0mRGRBLfG:lgpEW1T+Hel402bxk3ymQP+
MD5:	474D73A771E0CC31B43849CD2BAD9CC4
SHA1:	1D973B9CD90543FA43E6E74F164149278B9331FD
SHA-256:	AE98C3B1ED18478144791BFA0C71056B422287CD41F9B7D35C99063B04BE58EB
SHA-512:	257279598503AA3203ADA4A1A29CFA550F0485D3F7231E815A3734405D6BA18472D3E3F248CABDF39A774BF9B752D83218244F578D2FECA2C33711AA53888C01
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v2/sf-pro-text_regular.woff2
Preview:	wOF2.......\|....../0...............................&..H.`H...>...,..c.6.$..$..(.. ?meta....@. 8.t[;5..Cng....5.P........-..3.j......1.c..6@..;.......FI}..#.........a.....{0.w.. .fd.i.K.+..p.cL.b]YJ.%..+...c.HF4.ett....=...N......."F......../p,1Z...V$...)^.M..-M%..y/\|.^I......;..>..%...Jl....4.L%....<.l.,.:..u.Wy......:W.F.....}j,. V......-.U.F...8Q..Z}^t{x7......j.]-..V.]..7.).....Zqt..kD...~.......dG.U..b.V1S..8......Q...D7.]....n.9b'....="........&...OtG..R......S._.D$.1d..&...9..=.l..yQ.._J.5.{.T.6TX...\..NX.....#.tqR8L.iDuRkW..2hUa)..7.+........Y...!.........z.J.5U6..C......R..;CN....=..\...j......o...[..P.....{@.L........Y....B..?..;.f..Y...j.]...`..$.iW0=.9Yue.xH7....5F.o6.._[......K.,...-..J[.f!w...VaT.r..\..^TXq....S..G..6...n]l..TA0..0A,D1....R.\|...S?..v...!1Z.lR.......5.LF.....H=..X......`$....`0....F]..m..1...i.S.x..Vc.v?..DQ_&..(.(.......3.........K....`.....E.......n.?..5L...5P.c.( .*..EAQ.....c.F.+.l.s.3..J.k:....+...}v..

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1346
Entropy (8bit):	6.800098720503328
Encrypted:	false
SSDEEP:	24:g1hNo7FCWwjx82lY2T3/VOWFa9oWqyJ3VsWx5CWvGcH323H86cTAtApjh8UWAi:+zo7FDNn2DM1oaJ3uvYNXpc4NfM
MD5:	909375ADB64B4088D4FB0AD704D5DB94
SHA1:	0365B7349FD78DAFBB881CD84E6374AAE55F9D46
SHA-256:	60FE3B2BBD88E93EEAE9667B0CB381B4AC6028E16C317D207E6389EB9549CD74
SHA-512:	430C1C955F88F6E927D14762024DD5BA453CB4F06C49E9C41B4A6A97082F210A607C2B198F14A09F83C1DADE364E1028FCB157B23163EDA7410F932875DF8B5D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............v.@....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:4A90E53C4FD811EE95908161A8D7BCCC" xmpMM:DocumentID="xmp.did:4A90E53D4FD811EE95908161A8D7BCCC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4A90E53A4FD811EE95908161A8D7BCCC" stRef:documentID="xmp.did:4A90E53B4FD811EE95908161A8D7BCCC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..i.....IDATx.b._.....< ..........X521....X..'..M .a .0.....V...@.C-.....@<.R.M.X..x:..Pb0>...%.`5 .#`q-...........1H.

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (878)
Category:	downloaded
Size (bytes):	1441
Entropy (8bit):	4.923625217494772
Encrypted:	false
SSDEEP:	24:ildT+lZadfID4P9Gpl3fBzR1SQLA2RAMRMT6XFKg/7/GpSw8G9bFw4YZn:ild2ZbI9GpvRQQ82OUugFKg/7/Gpj8Gw
MD5:	188415311B33E9DFC79C3CC6147ED47D
SHA1:	486B072C15EA89B3D39F607F92327F1A338254B0
SHA-256:	8B3DA2AC016CE7C6F38F10052C50C7958935276BD5885009716FEC7B3D8ED681
SHA-512:	DD95C297899B58507824F3A3129E060BBA8A9F7D2045526DC66DAB584D19571069D84EB2591B7FBE71A0FBA96DD1BE1A32995184D37FCA9A1F699FC71739644B
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.356.4d5c8581cf04321d0a9b.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[356],{84356:function(t){var o="touch".function s(t,o){this._target=t\|\|document.body,this._attr=o\|\|"data-focus-method",this._focusMethod=this._lastFocusMethod=!1,this._onKeyDown=this._onKeyDown.bind(this),this._onMouseDown=this._onMouseDown.bind(this),this._onTouchStart=this._onTouchStart.bind(this),this._onFocus=this._onFocus.bind(this),this._onBlur=this._onBlur.bind(this),this._onWindowBlur=this._onWindowBlur.bind(this),this._bindEvents()}var n=s.prototype.n._bindEvents=function(){this._target.addEventListener("keydown",this._onKeyDown,!0),this._target.addEventListener("mousedown",this._onMouseDown,!0),this._target.addEventListener("touchstart",this._onTouchStart,!0),this._target.addEventListener("focus",this._onFocus,!0),this._target.addEventListener("blur",this._onBlur,!0),window.addEventListener("blur",this._onWindowBlur)},n._onKeyDown=function(t){this._focusMethod="key"},n._onMouseD

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 571x517, components 3
Category:	dropped
Size (bytes):	14519
Entropy (8bit):	7.136156674273734
Encrypted:	false
SSDEEP:	192:m7FtUWXXbsUq3Lk28alQCbif8FKH6p+ityNE60x2Z11goixCp3xiQQSA5c2/n6:m7nnwLvg8AU+ig2x2qoig3JH0Z/6
MD5:	C538E1F1AF8562A206574EDCD250DF7F
SHA1:	5D16A40CBF544EFF245AE83B293106C52D2D6086
SHA-256:	2220F48F1EBB66A68BD287D46FC511D2EC31CA94A83E324539A1D15276278056
SHA-512:	C216B6C5DD17C12CBFD9BB71AE784018759AA2AEB39333DAE8646D15A3843DA2E43511E29FAFF2B50044BC7D2E6128217F9CAB55D61A8F2D13AE5BB79FE9D3E4
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:F7ED497C4FB511EE821FF56BA0A0DC1E" xmpMM:DocumentID="xmp.did:F7ED497D4FB511EE821FF56BA0A0DC1E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F7ED497A4FB511EE821FF56BA0A0DC1E" stRef:documentID="xmp.did:F7ED497B4FB511EE821FF56BA0A0DC1E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3537)
Category:	downloaded
Size (bytes):	52603
Entropy (8bit):	5.316331138717284
Encrypted:	false
SSDEEP:	1536:yYrF+dXpn0e+99D7FPUzHhbtjFnmFRbdwWRI32nB7PXAlnuhPisfq3ECoe5EzpGS:yYrF+d5n0e+99DJPUzHhbtjFnmFRbdwM
MD5:	F0A9F2F65F95B61810777606051EE17D
SHA1:	872BF131CB4BEFD0242339F072F2F9B9FBF8019F
SHA-256:	9CDF2602AC04F7E2BED582D4299C73D464FC4AB069E3AD5A20EE2B6635A015B8
SHA-512:	6823914507BA31E0F61B95CC53F09543C3C14E5530E9EF1B00338FBBD7C25D2E398F5F628DF4ED25D6FF88E0F8BEE506EFE62BA704778BA7CFF09AEC9579D9F0
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/eureka/clank/117/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var f,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},h="function"==typeof Object.defineProperties?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ba=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},ca=ba(this),da=function(a,b){if(b)a:{var c=ca;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&null!=b&&h(c,a,{configurable:!0,writable:!0,value:b})}};.da("Symbol",function(a){if(a)return a;var b=function(g,k){this.g=g;h(this,"description",{configurable:!0,writable:!0,value:k})};b.prototype.toStri

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3391)
Category:	downloaded
Size (bytes):	64791
Entropy (8bit):	5.60491257337714
Encrypted:	false
SSDEEP:	768:R+1pVWIEUmn2qYVi+f4KieWtRzt/0CnWAb2km4QQ9XJD90dUoT3JZrOGqa:pn2qbzt/vw4QQ9XJD9Pa
MD5:	B9F9680EF0C18C790F0A1D16707B4E4D
SHA1:	8D7FED5D02E45C88483C8EBF2DE95AB326D74999
SHA-256:	E99514B5186F540F8C66C390D19AF9006407C31EB83970780F5E22C2171C507E
SHA-512:	B65EDC7E269FF3E12DBB688E43ABF6D7C2C28EA20BA26D596DBF74B8AD7238831E2B8098946EE95F4DA2FCAF54D907057E4A20726B79398E007CE28B94DAE4FC
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/embed.js
Preview:	(function(g){var window=this;/. SPDX-License-Identifier: Apache-2.0././.. Copyright 2017 Google LLC. SPDX-License-Identifier: BSD-3-Clause./.'use strict';var Ptb=function(a){a.mutedAutoplay=!1;a.endSeconds=NaN;a.limitedPlaybackDurationInSeconds=NaN;g.uS(a)},Qtb=function(a){g.ev(a);.for(var b=0;b<a.rg.length;b++){var c=a.rg[b],d=a.gy[b];if(d!==c.version)return!0;if(!g.bv(c)\|\|c.bl)if(c.bl\|\|c.HZ!==g.hv)(c.X0(c)\|\|Qtb(c))&&c.Y0(c),c.bl=!1,c.HZ=g.hv;if(d!==c.version)return!0}return!1},Rtb=function(a){g.ev(a);.if(g.bv(a))for(var b=0;b<a.rg.length;b++)g.cv(a.rg[b],a.Vm[b]);a.rg.length=a.gy.length=a.Vm.length=0;a.Zi&&(a.Zi.length=a.Bu.length=0)},Stb=function(a,b,c){function d(f){e.Cz=f}.var e=Object.create(g.gmb);c&&(e.Dt=!0);e.Bm=a;e.schedule=b;a={};e.VB=(a.notify=function(){return g.Tka(e)},a.dC=function(){if(e.Bm!==null){if(g.$u)throw Error("Schedulers cannot synchronously execute watches while scheduling.");.e.bl=!1;if(!e.lF\|\|Qtb(e)){e.lF=!0;var f=g.av(e);try{e.Cz(),e.Cz=g.iv,e.Bm(d)}fi

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x536, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	dropped
Size (bytes):	18362
Entropy (8bit):	7.988947886433394
Encrypted:	false
SSDEEP:	384:i0aky3Ovz62n5A+TfJf9MP6gqQB/kihJlB3xpMFmB:qkye7O+7JlMCo/kihJlB7MFmB
MD5:	978E1C5E539080FED9C815C2F81D77AF
SHA1:	3F947C86EC59C52FCA3AEDF986A1382664D214CE
SHA-256:	D2EE99B26C8C6B935B44055E4551CDD79820271757A03A871F3A890957586BBC
SHA-512:	2DB95B0082BCA7D237B12A838EE7B0A4641DE9440B353910AFC7B743B8976571806173CB9FBCB750012C5134FC3013AA59A0A5F95B996CDCB8DC9920CC3A3120
Malicious:	false
Reputation:	low
Preview:	RIFF.G..WEBPVP8 .G..P........>I$.E.#"..$\|@....p..Uk..g./.\|8......q.?0..{..?..\|.g.ci........~X.I.).o..........}.?t}Z~...{..]...B........../.O.g..g>....G.... =]........`..f..\|..'...Y..o..B.......t.}.......x}..O.....c.n...=.>.......H.z.1.Ol.$...`.LiS.0.&7.R......I..p..{f.$.=...cJ..e.@86...et'.....T...I.{f.$.=.Y,r4}.......=.Qe.M..`.LiS.0.&4.....s..n.8.SEK.k....)....S.....)..a....IV.Py..../..6.&.....a.9Xk..n7+.i..H...N.8...#l."N.HkUUd....+....t.c..Cz'.........:....-..w...\.Tp.'...;......e...3....{o5...n~.m....Oh...k.36Q-{....$.G...w....X....;I..I......V_.1...d. ."..E..C.H\|....i.:w..Ij....`!")....}P>....6".}Zh.t....zy.g.V...-.5?~..R..R.h8{f.I5....N.kf.$..........0...C.....>....F..4?D..C...4zw.~J........g.fT...I&?cB..f.h..2~8y..@....I. ...}R..=4f-!....g....^...#R.....RcJ..&.4.rB..;.).\.J..@G...q.....B...$sj...h.#........nS........3..cH..\|....H.Y.[h....yx.3.......".H.h..-....?%.w....v.0.B....X.....w..n.$..Zn.(=.............[Z..Zs.wyv.&..

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1274
Entropy (8bit):	6.653929774733886
Encrypted:	false
SSDEEP:	24:Wn1hmYaWwjx82lY2T3XV7Hh75yJ3V7L68GDC7SQSMtrXhh7sBil:gMYLNn2DtHKJ3tLJJLhxh7X
MD5:	3B92FB5F00B1C371FB5E6C5A5C1A6FAC
SHA1:	852DFBCFBD0702797FE29527E3BBB10D7BDD55BC
SHA-256:	D760CCD7E36938E74F5BA8CC916CA0A69EB772C08486A3846D5079B520761890
SHA-512:	07B108880C3E588770CFCF0DC13149C0A145ACAA0039A8E8140FFF4E197184E64D7FCB3FC0646A9BE8CC820B6069FCB74E561F164BD35C37B063A6BCFDAFE958
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/pingguo_a.png
Preview:	.PNG........IHDR..............K.v....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:2B65932C539011EE87E2F93861CDACDD" xmpMM:DocumentID="xmp.did:2B65932D539011EE87E2F93861CDACDD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2B65932A539011EE87E2F93861CDACDD" stRef:documentID="xmp.did:2B65932B539011EE87E2F93861CDACDD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.+.....jIDATx.b..s..D...m@...~/... K..h.....bq(....R....c@,.....w.H00..0.......s..k ...;...r.2.K .u.q..+... ..bM..

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1024x558, components 3
Category:	downloaded
Size (bytes):	46879
Entropy (8bit):	7.758873077168859
Encrypted:	false
SSDEEP:	768:btGvJ4vWEYd9kzBMqHc02ztBAzGKA2a5GjIxNedXYFvMl78rd0R6+Rz/ScUE4o:btGWvxYduERBvKA2a5sIve9H98rdSDn9
MD5:	8D8772ECC5D80F5D77D10BF6F9260024
SHA1:	E903BCC6A0787B30B93B0C18C950E73E3358B667
SHA-256:	F3BF4ACA89FF00CEECBA3B1CC7C2812E5E6F0CCE3E9D2E65BA4F2A44B4BA361A
SHA-512:	AA7EE344B7AE789F1EB4ABF4EA50E70431694F92BE020EC8D19E50237CBCA93D6DC0E491C07259C82BD100FAE8DE219BCA5E281E44A348FBE27DEA678134E120
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/12022-1024x558.jpeg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..R.(.....'.......u.hd.+......z_...E.../...;\.U.oFS.?Z...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(....$..*;

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 810x410, components 3
Category:	dropped
Size (bytes):	75593
Entropy (8bit):	7.975262430964009
Encrypted:	false
SSDEEP:	1536:zmzyWX+/Nhf3KHhJFrDD96SbQyuHcstkFWXf/yLL+TGs:6zjANliJFrkJyMSWTp
MD5:	BAE97AEF3715A58AA319A25632613ABD
SHA1:	462B4618E21EC38643B70491D730F6917AC9268D
SHA-256:	0DC36367A2980A602B5525F24A706A8D3D52B51369422926953DE33D8B283D75
SHA-512:	0EA611D31CBDF9138B2BBCA21050FF8EA811F5D6630CADD16DB5C06564AAA028CA823DB3AEB961BCFA406D0469A3209FE9058CBBCE9122DFC2EEACA547DFB8C5
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:7FE8156D28B311ED9DD5AC9D3B8F9FFD" xmpMM:DocumentID="xmp.did:7FE8156E28B311ED9DD5AC9D3B8F9FFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B65BCB5E284811ED9DD5AC9D3B8F9FFD" stRef:documentID="xmp.did:7FE8156C28B311ED9DD5AC9D3B8F9FFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1373
Entropy (8bit):	6.951376319537284
Encrypted:	false
SSDEEP:	24:pN1hNo7FCWwjx82lY2T3/VuaqyyJ3VeqG82TUu3bfdKFrKeGo:hzo7FDNn2DcB5J392T/RK1KeGo
MD5:	26B53D9D8FC5983ABB803F30B2C431AC
SHA1:	399FA06E7C366F1E3ECF08269CBCFC464A44759F
SHA-256:	32C9BAF6E4B992C39C955DA80E50C63080E9898E01F87B670DBC37B4E76DB253
SHA-512:	D98AF54144947BDFAC4CC4A5BC516EA740EBD46A3EE60759C1E12E102DAE43933D63B0178C584B6C72A0E01D769AE1680488599FC0D6418996792753A6110C8D
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/anzhuo_a.png
Preview:	.PNG........IHDR................K....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:1B1B32624FB611EEBB89ADFD8FC6EBC7" xmpMM:DocumentID="xmp.did:1B1B32634FB611EEBB89ADFD8FC6EBC7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1B1B32604FB611EEBB89ADFD8FC6EBC7" stRef:documentID="xmp.did:1B1B32614FB611EEBB89ADFD8FC6EBC7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>vb......IDATx..O(.Q..g.....nZI.I.l..B........)%).{.".n.$.@!%'.....]......o.5..;.....f.}g...{.Q.+O.De`.,.]...D.C.%.M.b

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (579)
Category:	downloaded
Size (bytes):	17977
Entropy (8bit):	5.172440917667389
Encrypted:	false
SSDEEP:	384:xV1W44hioeBevmrjGRp1AFjga2dCjrI7KV0t:s44hioeBA7AFjgaU7KV0
MD5:	E62FEA2030907AF7E89AE14B53FFA550
SHA1:	7B4F41FC31DA2F829A183DFF72CDD708EA76665D
SHA-256:	F66B859A3A06C27EF58D1CC069E5BA8A9A47B3C7AEAF448EADF1F589582C360B
SHA-512:	1CDD5DCFCA7F6EFB33854F4ED6BA0D535CC0D444A78499240DAFBBCA2ABE9772E14A5D0E7A34CDE9A9716E068CE5FD6F5EB3271BC549BF17DE075F18E31661CA
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.359.1a547c0d896fa5233fdb.js
Preview:	/! For license information please see chunk.359.1a547c0d896fa5233fdb.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[359],{65359:function(t,e,n){t=n.nmd(t),function(e){"use strict".var n=function(){return(n=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function r(t){var e="function"==typeof Symbol&&Symbol.iterator,n=e&&t[e],r=0.if(n)return n.call(t).if(t&&"number"==typeof t.length)return{next:function(){return t&&r>=t.length&&(t=void 0),{value:t&&t[r++],done:!t}}}.throw new TypeError(e?"Object is not iterable.":"Symbol.iterator is not defined.")}function o(t){switch(Object.prototype.toString.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0.default:return s(t,Error)}}function i(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function a(t)

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 68x68, components 3
Category:	downloaded
Size (bytes):	3343
Entropy (8bit):	7.819650143881753
Encrypted:	false
SSDEEP:	96:IiXpgM0ArMtvxXbjc72pSzEXbi8I2IHCg:Iup0AwtvxX0WbilB
MD5:	E935FEC70A3F79AD086ED5599BFAEEC8
SHA1:	8EE0309471DE4B5E544EBCEAEE18522AEDAFFE46
SHA-256:	8A9ACE753D835F97541401D507F6060DA64C1E2DAFEB2689BEEB40937C1F334E
SHA-512:	1B376D1285A981E10BBC65E47FD17FD9C5B6CBE10F15C7B1EF625A4F6564A594F87C3C058CCB65E67076E640D2CFDAAE5BE48BA57EA29A0FF1F1B4085F272169
Malicious:	false
Reputation:	low
URL:	https://yt3.ggpht.com/ytc/AIdro_mKkW4pRnZp6gFR2woTy2yOtuEJgosaWtv2GOdhFWPcbQ=s68-c-k-c0x00ffffff-no-rj
Preview:	......JFIF.............Exif..II.......1...............Picasa..............................................................................................................................................D.D...........................................3..........................!..."1ABQaq..2.#3....b..................................6........................!1.AQ."aq..2....B.......#Rb.............?..\|_[..(.sO.?2...M..Fs..>.iAI.W.J.s..>`..\|x.T..=....oY.5.i....$...,....i.fU$u..XF:.kh..R+..Q..0QL.;l.Gdy..~B.....{.=..'..?.X...(.<..$...U/.g.mv...U..../,..z..+.v<...6a...........a..:......g^.i..g..<@..:.....&...\...}$G... .....C.q..X.6.(.t#Q.w..E3z.)6.....[..:.I.}..o.n'.v..m....\...hA~.. z.'.\|.Z..khd.....j%.j\|.%a.........l..).z...Zb..`t..uma.]\........G.W.JB.....n.$..C....7.*\|o.........}..n..'Q..`b0....&..9xr.#.e..\.p~`.?.0&R.. ..VH....k.0QP.z...n6.........;.......f......Xx....M4V...u=.M<...P.,Rmv...U.H..7.#.....V..N.Q.W.K.c.V.....n...@P...I.cS$.X.r>...L2.A.%....K%...e.

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 184 x 184, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	9343
Entropy (8bit):	7.942958460187462
Encrypted:	false
SSDEEP:	192:h7F0XSqZqfAhjbh7AH/qzLP1x/uPND5Tl5JHRwpTQS+3NZD0R:hyXSqZqU98HyPXCpqpH+3NZoR
MD5:	EA89A525FC4415B6EA4A4B0740837CBB
SHA1:	470DC704D57AD9B44E32DEFE2C7BE7A66D4B5482
SHA-256:	E9E58AA82DBC26F4C787ADE904ED5A62C310964C1B75E713DD64B3E66DF75713
SHA-512:	05114F96C24933B6F6A2B4E1888941CBAEFC346CAE24406586D897EA4B5D7536C2C6B83A62F6501F61185915AEB9CC02A5ABB08B5315095D614C740473BAF53E
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/code1.png
Preview:	.PNG........IHDR..............Q......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:8D4AC4244FBA11EEBC8084CD464D2EBB" xmpMM:DocumentID="xmp.did:8D4AC4254FBA11EEBC8084CD464D2EBB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8D4AC4224FBA11EEBC8084CD464D2EBB" stRef:documentID="xmp.did:8D4AC4234FBA11EEBC8084CD464D2EBB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...... .IDATx..].pU..O./.. B.\|.X0..b a.I. E..Q...:-...@..T..V....h....%..Ba.....LQ.&\|..A>.@.>..B....._..o....g..f..

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1603
Entropy (8bit):	5.2727801090429285
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8x/S8f:3qD+2+pUAew85zsaA
MD5:	78FD7C1A980B9162702E6F984A25B7A6
SHA1:	E832ABE897CDAA5E36131733AF619F174AD0F9C5
SHA-256:	1C5A3539A6FBE5420A519540FF6662EFEACB0BB1B9B8314C74064694A0D52C0B
SHA-512:	06B0C9A98D1F6B5BCF81D81574258B7D479579CD80FC51105C58B99263D802EFD64ECF6B5A9A3105C1046FB7EE3F776547E1593436AFC3E6C0820D149C0913BA
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3857)
Category:	downloaded
Size (bytes):	1135394
Entropy (8bit):	5.445612165858414
Encrypted:	false
SSDEEP:	12288:eX1RsN8h+Oov2C8OGMVi7pvV2dCTIeIp9lW:qcvSzvhy9I
MD5:	695B32E575008C772D927A54A91C3514
SHA1:	FED559F2FEEB22F2FA423DB9B2A98AADB777F0A0
SHA-256:	BE6E9C3DFB62FD6075D38AA0CCCE7C819EE95D0F7CA556523224B1730721D11F
SHA-512:	6D5043DFAF3C1EC50A758137941C74CFFAEA3F9704BD9C673AFE628865E6BAEAA08B93A543DFEE84AF4B5C9111BF1C335008BCCE6693BC40847682924A264575
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/web-experience-app-f0cfd45511f5c6fbc46df945d83eb2cd.modern.js
Preview:	/! See /acknowledgements.txt for open-source licenses /."use strict".define("web-experience-app/app",["exports","@ember/application","@ember/debug","@amp/web-apps-featurekit","web-experience-app/resolver","ember-load-initializers","web-experience-app/config/environment","web-experience-app/utils/config","web-experience-app/utils/consts"],(function(e,t,r,i,n,a,o,l,s){function p(e,t,r){var i.return(t="symbol"==typeof(i=function(e,t){if("object"!=typeof e\|\|!e)return e.var r=e[Symbol.toPrimitive].if(void 0!==r){var i=r.call(e,t\|\|"default").if("object"!=typeof i)return i.throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(t,"string"))?i:String(i))in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,"undefined"==typeof global&&"undefined"!=typeof window&&(window.global=window).class c extends t.default{constructor(...e){super(...e)

Chrome Cache Entry: 166

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1483
Entropy (8bit):	7.040356147973546
Encrypted:	false
SSDEEP:	24:U1hmYaWwjx82lY2T3XVKKN6kyJ3V8P49GWyCBD/w6gaAkgArugog5xzyLrRxL71T:aMYLNn2D9CJ3/LBD46g7ny9vz0rvL71T
MD5:	5EF37DDA1CF34C87E1D8DF3D3AD892D3
SHA1:	E3409FD1ACF4A44ED0D5A0655AAE8DC036E49A14
SHA-256:	3F4916D4DD945744B333087F7DCE11B59455DE86127EB34BF45970B59AB5187C
SHA-512:	B532E9CA5A7716F7B2C77F1ACD460A81095CD2E63BF0C434C1C87285D22908239886742EE1D80DF3BC0F37D8F6D7A51A151B8226D49038E10B3B5CB3E119CFDC
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/zhongwen_a.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:3AE5F0DC539011EEB35CD39B770895B6" xmpMM:DocumentID="xmp.did:3AE5F0DD539011EEB35CD39B770895B6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3AE5F0DA539011EEB35CD39B770895B6" stRef:documentID="xmp.did:3AE5F0DB539011EEB35CD39B770895B6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>:`-b...;IDATx..MHUA.....H..r.=....].E...>...[..P[WF.&.hU.,..kSQ..j.%R..zPH../.2.0.J.w./..z...{....sf.....yl9.

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586), with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	40262
Entropy (8bit):	5.526085450449746
Encrypted:	false
SSDEEP:	768:O6n3N0gZdapFYaeTkuuJ71Cejvw4k9JfJwRJR78iBRPX:O6zapreTkuuJ71CejY4k9JfJwRJR78Ul
MD5:	08B1EBFE833DB5B03EB3BC4664BBBA60
SHA1:	6D435E3D809100B743917CC2D79AF6C4D7BDC19B
SHA-256:	EE001F54E3E20EC84180EAAA8C1C8A7DEB25033003FCE941F1437A4781E79E64
SHA-512:	32F493D43D772453411E6C069B6A4085BE2A1E13212D201682B7676B9019CEBD43155003E75D8994B2995FCB6D591B808BFBD7ED34F269EEC2C333228AFB7F6A
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/blog
Preview:	<!DOCTYPE html>.<html lang="zh_CN">..<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/base.css">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/media.css">. <title>.... - Telegram....</title>. <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO Premium plugin v20.4 (Yoast SEO v20.4) - https://yoast.com/wordpress/plugins/seo/ -->..<link rel="canonical" href="https://www.telegramkv.com/blog" />..<meta property="og:locale" content="zh_CN" />..<meta property="og:type" content="article" />..<meta property="og:title" content="...." />..<meta property="og:url" conte

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3003)
Category:	downloaded
Size (bytes):	18440
Entropy (8bit):	5.255534167782927
Encrypted:	false
SSDEEP:	384:kz8E0CXVpU4y7FeTEkrHfcBkoNiIvYcaSRCF+q4nAHY+6dDlqW1hCSallZsWY:kz8E0CXVpU4y7ZkrHfcBkSiIvYc/Re+J
MD5:	5F765A4A59A407D5DAA33CC0B48F2A35
SHA1:	44E29FDCCC78BAD49465D30F2AD9D5DE816AE150
SHA-256:	5C98E1CF88ADBADBE52321041E084AA2D5BC4DAAFFBF8EC6C45A438E8D393202
SHA-512:	ABD01A44A94A0BE2B000DB5BB60A439AFDA8948B32B3F0685AC9AFE175EC9E3701C3747457BE42032C1EA0707AF02109D46187FCA39F2815BD8AEDBBD365F38C
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.934.167974858ffab5c06580.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[934],{7934:function(e,t,r){r.r(t),r.d(t,{default:function(){return W}}).var n,o,a=r(32722),i=r(24178).function s(){return o\|\|(o=["app","appVersion","hardwareFamily","hardwareModel","os","osBuildNumber","osLanguages","osVersion","resourceRevNum","screenHeight","screenWidth","userAgent"].concat(["delegateApp","hardwareBrand","storeFrontCountryCode","storeFrontHeader"])),o}var p,c=i.SC.attachDelegate,u=i.Z_.cryptoRandomBase62String,l=i.Z_.exceptionString.function m(e){this.setDelegate({topic:e}),p\|\|(p=!0,s().forEach((function(e){m.prototype[e]=function(t){return t&&t.hasOwnProperty(e)?t[e]:this.environment()[e]()}})))}m._className="eventHandlers.base",m.prototype.setDelegate=function(e){return c(this,e)},m.prototype.topic=function(){throw l(m._className,"topic")},m.prototype.environment=function(){throw l(m._className,"environment")},m.prototype.eventRecorder=function(){throw l(m._className

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 14x8, components 3
Category:	dropped
Size (bytes):	1206
Entropy (8bit):	6.12611506425524
Encrypted:	false
SSDEEP:	24:gK1hNo7FCWwjx82lY2T3/VTC4PCayJ3V1CBtCfGQEwlrNKQhk:tzo7FDNn2DsJ3nDHlrNLhk
MD5:	0F7C406854D2C3C17C4E27196046F0B6
SHA1:	C51D840F9A2A94A1D007766FE97A77DD17AAFA14
SHA-256:	DFBCD00D52652090CBE1B19009CFAF5DD1234BF5A09073F187C6427BAF24067C
SHA-512:	10356D722829839217E009BC3E3EBB4A58E81959D2FE82CF737D2D28885C296A24112DFD698D1C729BCD20851D12CEA280BD6FB2A5E102EBD71D7EE40330C870
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:376DF08C4F9A11EE8BE8CF3ADB30233A" xmpMM:DocumentID="xmp.did:376DF08D4F9A11EE8BE8CF3ADB30233A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:376DF08A4F9A11EE8BE8CF3ADB30233A" stRef:documentID="xmp.did:376DF08B4F9A11EE8BE8CF3ADB30233A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x818, components 3
Category:	dropped
Size (bytes):	65787
Entropy (8bit):	7.740000223975757
Encrypted:	false
SSDEEP:	1536:nVF1LxEusf1nMJ73natVTU496lQkNe2MqwZiOEH8Pf4:n59Io3aXQFTNKqwsqI
MD5:	AA6F1D3D0F04852331BCCDBE91682464
SHA1:	862C1D3E4B332EC0AF727BBBA333830C42A628B2
SHA-256:	B659AF8080EC9A8A3F4148BB17910CFA440D7BE7AFA3D7A2AE155C8C763D9B1C
SHA-512:	4EC526A282FAD0FEB9B31F01A30B139F5D0D617265E7D0F012A0B8F4A638A3484E26E52882822ACD75CC8BEAAD89BECC51F2D2F272B4EE0ADD16BF4204346696
Malicious:	false
Reputation:	low
Preview:	......JFIF.............C...........................".##!. %*5-%'2( .?/279<<<$-BFA:F5;<9...C...........9& &99999999999999999999999999999999999999999999999999......2......................................................................................`..............................................................................................................................................q....d.....................................................................jL3.e.....u./y3...gq......(:.......k@.................................................................P\|....^....~;n...e..a......y.W_...h<.{.}.....................................................................$.#...;n...{.....\e./.+/<.W.....9.)....^.............................................................................................................................................................................................................................................................................

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	dropped
Size (bytes):	2700330
Entropy (8bit):	7.966932248745433
Encrypted:	false
SSDEEP:	49152:Ppp0RYYGh/a/0XHz/qBu6AKHloz7uR40Yjf0S/+AUhfgbsuPO7lQRqVUVI:Bp0hs/DDb61Foz7ky3+AkesuOBd
MD5:	21528F532493017CA7A8CDFA73BA1F09
SHA1:	798073FD3B30C0688787EDAC94667D6025B027AE
SHA-256:	3DA30018745EE9D2032BB71F2907A2FA3647D1660D402200D35F161854B0EF48
SHA-512:	D95F338D7FF896C524ED4BEBD1855E2A73A41C809AA44F86DDE0576EB6702B2A7BFBB8ECC4E744641A12E1E8322A96C4A9DFCC4060EB46A45BCEBB30DD07565E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.............!.5........`......'.....r}...]...q........r.....&..q.. .....q..$.."..%.............`...&........$..v............#.. ..#.....&.`...........!............................".......{............%.."..........$..!...."....<.........%....s.....&.G?;..f...........x...B..{4^MD.&!.....b.X..J..\|...x ....n..........f..s.........5....=3...........r......v..`..7....w..n..`...9.zg\.J..R...$.S.......}..sg..E.o...#..!.J..P~i...@3..iX.?.#..E....g]V.l......2.......v2".....r........l..Q......$..k...L.V.....3.!.....p..h.`..#...m....u.......B.....b.XA3.....P9..p5yM..yJ..j.wc.F....p.G..-....+._O....g;.///.m+.J....oVH...U..Q....\|.."...v.........T......t.2..;....rpo.9...RQPWD9....`..-..h,..}....b%...................H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x.v<...?...K A0`.z.+.+!....#K.LY....<

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	145071
Entropy (8bit):	7.977649520074786
Encrypted:	false
SSDEEP:	3072:96KGClku3Cl04UZTbHkBeqqQII7ux/7eSuAcnKTivAOZicSU35sNOgw:wn6ku3C7UZTIBe1JPP6qitZicSU3GI
MD5:	43106BFD1D665507352A962D2E14C23C
SHA1:	1567921A46FAAE056A9CBCC448AE3124C2D4AB24
SHA-256:	A06AEFE868631CFA0EF6E5D64F5B9C0D1D90C2AD7FD4C49AEC636D0A5DAF4434
SHA-512:	345E7974BC7EB62AB0D7F7B06043960B7CA3C3290A5513AE252B972D32C29588A8A203A38D570E2318320BDBCE439C4509D26C5EB1E775227A06235DA633D4A1
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-2024-04-24T175141.860-1.jpg
Preview:	......JFIF...........................................................................................................................................................".........................................g..........................!1....AQa.."Uq...#2RT.........BSbr....$3c...4Cs....%Vd...5D....Eet...&Fu....................................K.........................!.1Q.ARaq....."S.....2B....#Tb.$3C....cr..D.%4.............?..@..5c.#S..Y...55..P...`@jsOqH..L..=h..B.\.(H..;.B.S.u......)..B.=....P..N.(.).J.....N.=e1.Q.........:..<R..a.....HGbP.R...........+JP.5"MA....'..d...9c..[z....g.....B[..J.%d.\|.>s..%...:D"..)......9.,...'...1....O...B...X%.F.RMQ...bD.`.K.:.r...2D...#Pu..(J....:.]A.......L..I.1.(FP.....j...%..f(j..Z..(J.Q...# K.;.;.....!q)..z.j......K.....Pu..K.....#.A/&:... H...A'&:.xBL.....z..c.'..F.$.o&:....%..&...j...%....:.........J#.I.%@hI...c. F:..T..3.....u....0."..L..RQ..N.J...b..:.....a/&.,b1..:...(.$.g&:...Rp...c.$...PG$.z..........v.3i.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (15752)
Category:	downloaded
Size (bytes):	18726
Entropy (8bit):	4.756109283632968
Encrypted:	false
SSDEEP:	384:WTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpr:WX6U9Uh3o//YrXgAGfACr
MD5:	B976B651932BFD25B9DDB5B7693D88A7
SHA1:	7FCB7CB5C11227F9213B1E08A07D0212209E1432
SHA-256:	4E6CE5444C7F396CEF0EB1FA3611034151E485DD06FBE5573A5583E1EEBC98C3
SHA-512:	A241EBDCFAF153D5C2A86761145B2575CBE734B4F416ACBFAC082AE5C6EB7C706BD6CA3BC286B7E1A0F9E326729252DCB95B776750C4A3A0D81F2AA6258EA39F
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-includes/js/wp-emoji-release.min.js?ver=6.5.5
Preview:	/! This file is auto-generated /.// Source: wp-includes/js/twemoji.min.js.var twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typeof d?parseInt(d,16):d;if(d<65536)return e(d);return e(55296+((d-=65536)>>10),56320+(1023&d))},toCodePoint:o},onerror:function(){this.parentNode&&this.parentNode.replaceChild(x(this.alt,!1),this)},parse:function(d,u){u&&"function"!=typeof u\|\|(u={callback:u});return h.doNotParse=u.doNotParse,("string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.indexOf("on")&&-1===c.indexOf(" "+f+"=")&&(c=c.concat(" ",f,'="',u[f].replace(t,r),'"'));c=c.concat("/>")}return c})}:function(d,u){var f,c,e,b,a,t,r,n,o,s,i,l=function d(u,f){v

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12513)
Category:	downloaded
Size (bytes):	13517
Entropy (8bit):	5.314863543101727
Encrypted:	false
SSDEEP:	384:8nlFipHnQ5/BRZJ/bzwT62waHKsR5ssRaREW+ou:8lF2HQ5JRjbQw9sRasROEWY
MD5:	24F387A60FE0B05A15426D721C397D47
SHA1:	012EB578C3C097193F20F123732AC646D2800096
SHA-256:	6AD8C8A703856136FEA1D1911FE8C0E09BCE87EDE20F4C8B98AB8F8961462738
SHA-512:	787E1A2BCCBCD973135E53B53FA5BC89E59AC277D95F30B0595B225667B1F0DEB6616914915200ABB6E522DDEA144E2EEF140876CA502D1317E13E86E63DA9A1
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//p-1ec6e574.js
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const e="musickit-components";let t,n,l,s=!1,o=!1,i=!1,r=!1,c=null,f=!1;const a="undefined"!=typeof window?window:{},u=a.document\|\|{head:{}},d={t:0,l:"",jmp:e=>e(),raf:e=>requestAnimationFrame(e),ael:(e,t,n,l)=>e.addEventListener(t,n,l),rel:(e,t,n,l)=>e.removeEventListener(t,n,l),ce:(e,t)=>new CustomEvent(e,t)},p=e=>Promise.resolve(e),$=(()=>{try{return new CSSStyleSheet,"function"==typeof(new CSSStyleSheet).replaceSync}catch(e){}return!1})(),m=(e,t,n)

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	downloaded
Size (bytes):	3422486
Entropy (8bit):	7.978761675756364
Encrypted:	false
SSDEEP:	49152:UMnCaXRGlcMKTAIS5pTziQgIeU7nc67hMcgJ3NJLsqgFJelJn/FfDWF5zRW:UMCaINkAb7rfLc6buNmwpdfstW
MD5:	E60746B12F4E6CCA778727472F415218
SHA1:	4E3B517A1911D891D018BC63B66E1B69837A3E15
SHA-256:	B285715D34361C4FED5058A10EB830BF2DD61126518477DED340DD7F95221417
SHA-512:	5DB7FC6C0E1EC272C02EC741FA278D162EDAF2ACF9AC0421729585B1C1CE2CF13BAB0204C0F5B425D02989F34B1DB592C65B500B6E6EDD909E8ED138C59E2D18
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/d4.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,........... z...]. ......{...!......`.._.........5...D.i7..y......}....q..!.........`..y.......................\|..................?........y..9....................S..O............>>>5.....Y...i..X....C...K........J.....r..3..r9...........,.@...;..[..?.C..$....`.....&........F.N....(......m.....(...V.j.._ZW....J.......3.r...........O....c...........\|<a&%.. ........bjh`}z..B...........`.`......G.]./........ S......7......P..f)....5...b.~E..`65.U.E.2..........b...o...,..z...aGE.B@..X..ld.........s._....Jk.......^._....).p6..x......e.A.......\|..>@@@...`......%..O..,t.-...`....#w4..U....dW..!.\|.....'j.f..".ee../..l... ..W........#....(.....g.^5.@.."r..7{1z...~kY...X..%.....r..\.F=@._.....9{R~~~......F...e....,.;....}%%.w..v1.q...^x+.........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...P.J.J...X.j....`..K...h.]...p..K...x.^......h....a..........#K.L....3k

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	159
Entropy (8bit):	4.901457072646745
Encrypted:	false
SSDEEP:	3:YAv+ecwqcbSvpmT22y+YEjjgjJpWvRjWRNSF+RUex8ERbJtGu4Yn:YAmoqJu22HYEgjJpWvARNSMCex8EBJ0o
MD5:	C735208FCF5A35182CA488A2FC1AD05A
SHA1:	F07B001EA79827483C3BCD9A4BE758A6A7525F91
SHA-256:	E5B762474632ED2463ADE980653714ADFF82354CAE2ECF3510971000AC13908D
SHA-512:	00A521014C39EADC7C9A6B960723A723E7AF5AC2E90E27963B22705A9710C48D10A3504E85DDAF3ADC9F5433F4E36E33FD79C2978270DCFE9AD9D0908C527F6E
Malicious:	false
Reputation:	low
URL:	https://amp-api-edge.apps.apple.com/v1/catalog/cn/apps/686449807?l=zh-cn&platform=web&additionalPlatforms=appletv%2Cipad%2Ciphone%2Cmac%2CrealityDevice&extend=customPromotionalText%2CcustomScreenshotsByType%2CcustomVideoPreviewsByType%2Cdescription%2CdeveloperInfo%2CdistributionKind%2CeditorialVideo%2CfileSizeByDevice%2CmessagesScreenshots%2Cprivacy%2CprivacyPolicyUrl%2CrequirementsByDeviceFamily%2CsellerInfo%2CsupportURLForLanguage%2CversionHistory%2CwebsiteUrl%2CvideoPreviewsByType&include=app-events%2Cgenres%2Cdeveloper%2Creviews%2Cmerchandised-in-apps%2Ccustomers-also-bought-apps%2Cdeveloper-other-apps%2Ctop-in-apps%2Crelated-editorial-items&limit%5Bmerchandised-in-apps%5D=20&omit%5Bresource%5D=autos&meta=robots&sparseLimit%5Bapps%3Arelated-editorial-items%5D=20&sparseLimit%5Bapps%3Acustomers-also-bought-apps%5D=20&sparseLimit%5Bapps%3Adeveloper-other-apps%5D=20
Preview:	{"errors":[{"id":"RE3HJPKECB7JKCC6KF2NLG6YFQ","title":"Resource Not Found","detail":"Resource with requested id was not found","status":"404","code":"40400"}]}

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586)
Category:	downloaded
Size (bytes):	46577
Entropy (8bit):	5.338528237377755
Encrypted:	false
SSDEEP:	768:sXN0gZdapFYaeLOuuJa5gk9JfJwRJR78iBRP8:AapreLOuuJugk9JfJwRJR78URP8
MD5:	816A3E88F7E498343062DE53C3531FF8
SHA1:	E4509FD7148636E2BF44344BE354B6411A7CD2F0
SHA-256:	6453FED2069B1AB11B320846ABBC442168DCCBD9CA3FB54F6D5418EAA6BAA6F6
SHA-512:	FA66705D9567A6A6A710A43A8FCF4EEA7B0CA55604B0D04D2129566FD1F786EE6FDB9605D6F2C23CF14BD4F87FEA46989F3AFBE0FBCB3A7DC3FA505160ACA9AE
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/apps
Preview:	<!DOCTYPE html>.<html lang="zh_CN">..<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/base.css">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/media.css">. <title>Telegram.. - Telegram....</title>. <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO Premium plugin v20.4 (Yoast SEO v20.4) - https://yoast.com/wordpress/plugins/seo/ -->..<link rel="canonical" href="https://www.telegramkv.com/apps" />..<meta property="og:locale" content="zh_CN" />..<meta property="og:type" content="article" />..<meta property="og:title" content="Telegram.." />..<meta property="og:url" c

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 62, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5589
Entropy (8bit):	7.876010524267059
Encrypted:	false
SSDEEP:	96:Yuo7F52SGMAUcYdj6BkH40AkAGxKrLeA0vC66MQPbMaHlgQn/eW9:Y/7FpG/izH40rZxCJbPg+/B
MD5:	AFE24FBEFE5BFF96FD63F9A91AB27203
SHA1:	78D7F878E5864F0DA3E4BA8DD3828B8A601B9A71
SHA-256:	FA5519A775B680515BFFA05449D27B1DA75E0E58C7D1FFE1B07B27FAE087FF1B
SHA-512:	D6129DCD282C7DBA4DBFFF505F5DC3A82D911F130D5EA69B986A5E4FC775A5F5CE3506E1071891F666A27CA41915062F77B9B6B2462BF0D008B3C6D2C14DD36B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......>......k.H....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:AA54F7514F3F11EE90B9A9C5BFEBA4AA" xmpMM:DocumentID="xmp.did:AA54F7524F3F11EE90B9A9C5BFEBA4AA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AA54F74F4F3F11EE90B9A9C5BFEBA4AA" stRef:documentID="xmp.did:AA54F7504F3F11EE90B9A9C5BFEBA4AA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>1SX....JIDATx..]}l......W...G......$.RlZ5D....-...6i%.m.X.P..SJ....D...d7....IQ[..T......\K[....."'!./..}g..v..u.......

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65005)
Category:	downloaded
Size (bytes):	696227
Entropy (8bit):	5.38605387106501
Encrypted:	false
SSDEEP:	6144:MGryUmPKObVMvcDMbtZNNVJKEq5f+dtaL6rHYGd/0GOCl/FQ1:TryUmiObivKMJZNTJKjp+dtaLq/FQ1
MD5:	90ED61CCFDBF59C72D9D5422BEA4C15D
SHA1:	DEC09B632108E19481F94F9CBD378E7AEB11452F
SHA-256:	6604C5A7BFA2E3F142248368D7C69135A8191D03C72D1024807150C32F4E8E55
SHA-512:	E99CFB370A8AF78ADA7252C5C28756731BBCDB28B71C7B671473C461BCF76A6147111D585A89631CEE3A0F693D45F7A9D3DC7462790EF8048631D96C457694D3
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/amp/musickit.js?t=1719422930691
Preview:	/*. IMPORTANT NOTE:. . This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. . ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. /..!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((e="undefined"!=typeof globalThis?globalThis:e\|\|self).MusicKit={})}(this,(function(e){"use strict";var n=void 0!==typeof self?self:this;function formatArtworkURL(e,n,d){return n=n\|\|e.height\|\|100,d=d\|\|e.width\|\|100,window.devicePixelRatio>=1.5&&(d=2,n*=2),e.url.replace("{h}",""+n).replace("{w}",""+d).replace("{f}","jpeg")}const

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	dropped
Size (bytes):	52284
Entropy (8bit):	7.659877676306892
Encrypted:	false
SSDEEP:	768:qExgAUgcXSvkjFvVUKB8TnVuaoZiaych9a1189XFmbkKR7KLeBeeeeeeLyccXma/:qExgAB4QFTVxo7DEumL7KLsylfU/I4O
MD5:	FF05BBB4990DE81E8EB408337351A46D
SHA1:	DC2FEE87B8ED72F82D90BDDCB04EE7153FBDF503
SHA-256:	B18B04953B4661789CB99E163AD2D2136F91D38C92235FA262C57903D0BBB772
SHA-512:	D57178042B926AA669471480DDDC4C03C1B5111EE7665B2C1AF78BAA533BDBAE4449F29E83414A2301B449D4886A73A7DDF4C2B90012A078C09EFD3D951C0659
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........8...."..........5.................................................................................................................................................................................................S.r.m.T..&j..P..!5.MB.P..!5.MB.P..!5.MB.P..!5.MB.P..!5.M...mb{D..~..@....................................................................<..g..,..8......f...^}k.~.....a.\.t..A...t..1...t..?gIsa.\.t.6.%.Iso.Ks1...t.3.2..t.sQ.s.P.....S...Rt<.\...:V..w_....[........................................................................~..;...t...9......M).rg.wq...p.w.!...)....Y1D.A-.KD.......2.!.}.!...wq...p.q.....H..VL}g%..{*..~..[s...{.....................................................................q.}...z}GC..&R.Z.].vN;"H.....x...<.{..qj.G.......;O...p...y..e.\|..g...>B.E.....[....+....n.x.........................

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	103129
Entropy (8bit):	7.979106734749978
Encrypted:	false
SSDEEP:	3072:fsio9YYMRA/thGXyjvGR9xjv7WQ23hHqjtQsiQfSV:fsicYYMCV2yK71v6BoesdSV
MD5:	2139FB819EF376933E44A70500FBA162
SHA1:	6F5C3F886FF5BB1BC95FC29A8922860E8224DE53
SHA-256:	B38BB5A4CE6ED5752D34AA3FD9B47A8410F4ECF5FBC253A03EF420D0543CC799
SHA-512:	78F73A2BA24979F83CF49A53B4C05BC137633980DEAE5EAAE023932F47AD42DEC1F39BF0611AD22980EC1ED399DD9B23FB2EA6475CE5B4B0D0DE524CC55121C9
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-81-1.jpg
Preview:	......JFIF...........................................................................................................................................................".........................................e........................!...1..AQaq."2...#456BRUrt...........$%3Tbs........&Su.....CD..Ve...Ecd...F.................................L..........................!1AQaq.."23r.....#R.....4BS...5b....Ts...$6Cc.%D............?....?r.z..Gu.j....?..+......G5q.e.U....e.....P....7H.!...E.F@1...@U...R.....t%.Ar.:..iE.......:.!......H.`D..B."-.t.`.H...$.`."...!I2....F..SH....S)"....f."..d.(..V.Z..H..M..)"..,.. ..E.....,.JA.HJBe.Lb...7..4..Kd.(pT.d..)HNB.$IH.....R.YlX..,...P.&Sr..(.D.!.l.$=.P.....!M.d.HL...LM..........U...V+"..8L.;B.1.3S..8..L.....7Z.2.Th...zz}.l.....9. .e....~A].kw.........;.T.......(..B.0B......!.@....!.@..B..B...!..B...!..B...!..B. B......!.A B...!B...!...-8..z.Qd.E.Fl.....^Y...A.L......%.(.b3E.I!l......%"P...Y&.$.PSYAK%.BYC.e.Q.,Q....%.IG..%re.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (829)
Category:	downloaded
Size (bytes):	333108
Entropy (8bit):	5.610208957106117
Encrypted:	false
SSDEEP:	3072:xVFSt/8dRjukD2MJyuNjwBbCV0si1VA7nzvcDR1txpxN:x4/a2MJybBeV0sgA7nzEDvJf
MD5:	F65C984D9A1AFFC72F1E38C1C4DB8F5A
SHA1:	ED7D6C5F7D8EFA327EF8430280793E4898324F38
SHA-256:	A7F9D511EE07DF6991043D2A20D9325420308EB6893B854A993CAC7E11FCEB97
SHA-512:	8AC28AA7B257FEE70F142F32FB40B53B5385CCCEE67B7FEBBF2F7E796E918FCB3A6FD1D6345EAF119B433B905E3B0BF6EA1D55F0C579A6B644548D813498583C
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/5352eb4f/www-embed-player.vflset/www-embed-player.js
Preview:	(function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}.var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a};.function ca(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");}.var fa=ca(this);function w(a,b){if(b)a:{var c=fa;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}.w("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}.function c(f,g){this.h=f;ba(this,"description",{configurable:!0,writable:!0,va

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	238
Entropy (8bit):	5.029871559573576
Encrypted:	false
SSDEEP:	6:tI9mc4sl3GRtuWR69G0uvwLqFiHcQJ5fLkVX:t41cCYZw2rQJ54B
MD5:	5E86CB665CF3001E54A890D4C32275D7
SHA1:	555F2D46621A249C86A3A319792E675D87BFC8B6
SHA-256:	2C0C291BC0981BA13C0FAB388914B31AB2729AB42036EF251081077A196403F6
SHA-512:	63D2B7A9DD81921CDD37F64AC732BF86E5CA8A98C8E58C93FB1526FE539A2D8C0ED8C7F49D378AEFBDB1466C5F1B60257F4BC1036C3A6A1B1A3E8DE6D68CB0C9
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">. <path fill="#fff" stroke="#777" stroke-width=".5" d="M12 .587l3.668 7.568L24 9.306l-6.064 5.828 1.48 8.279L12 19.446l-7.417 3.967 1.481-8.279L0 9.306l8.332-1.151z"/>.</svg>.

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Category:	downloaded
Size (bytes):	39151
Entropy (8bit):	7.968064051469883
Encrypted:	false
SSDEEP:	768:08YUWJqOH5XN5iWAm0/WfmM+2mlpM66ywBiqbdw20Qj3e9f0:08O4OZjAlWV3GDHw0qbSTQ40
MD5:	E7AF6D892F95B0B5FE6F76B8CF0ECCC1
SHA1:	48F7D667075DC64EE6A9CA51005467AF2033DAA4
SHA-256:	7F326B95AF278CEDDB0E81D887774E2965D60690CDE088CEC0A7363C327CB0EC
SHA-512:	9E0C3CA5F060EEBCD4708FCAAE0EA6C8AEE9B9417EF9A219FC96FDD5CD03768007A8389511256943F0CF0E46AA13F597F496AE8F474F60259FA27CDCB834A207
Malicious:	false
Reputation:	low
URL:	https://i.ytimg.com/vi/qVZVO3NgeAk/sddefault.jpg
Preview:	......JFIF..........................................................................................................................................................."........................................e..........................!1..A.."Qad..2q.....#BR.$3Tbr...6CSVu..........%4FUs........&5Dc......t..................................@.......................!..1AQR......"aq.....2...3B#b...%4Sr...............?....B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ....R......R8K...._.m....Wq<H...S....e...'...\|Dy}~^...,x...W....c...&....Dy}~^..x..rh]o.g....S...?c.....z..x...9....+.~..)...?c.....z..z.8..=...G..........~"<....w.

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 379 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	7338
Entropy (8bit):	7.916537824803543
Encrypted:	false
SSDEEP:	192:U7FapgFb7YsmpnrVb4z0YfJglnNKVc8g87aMyF/WLpMvp:U+hnnrVbi0s0n6c8PGF/Ec
MD5:	29AA484035D8D4FD023AD98E8058B5E0
SHA1:	DB8B8F90A00BAAFAB093D93E6F7EEC61A68B160D
SHA-256:	581114BF2545DD0C1E3FF8A6D16D7B2BB66FCFD58FEB3978F94A44E9E31A20E8
SHA-512:	91AEC339B4743DF1CB90FAD7486F74BA09C12A164F0B953A6D59B3838B4FE40DB25E9ACFBF7BB40B826937BAF81EE9E86D25D75B9A1A1E1D15714EDCADD8A021
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/how.png
Preview:	.PNG........IHDR...{...B......<v.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:978B0F8D4FA911EEAEC8F9B45E82BBA7" xmpMM:DocumentID="xmp.did:978B0F8E4FA911EEAEC8F9B45E82BBA7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:978B0F8B4FA911EEAEC8F9B45E82BBA7" stRef:documentID="xmp.did:978B0F8C4FA911EEAEC8F9B45E82BBA7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>O.DA....IDATx..]}.\.u.ogwm/....1......4....V.. ..C.4 .A..?.TH..+..".JT..h..)....I *V..A..V.... .D...T.c.!...9..<.z{.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	95543
Entropy (8bit):	7.978985300444378
Encrypted:	false
SSDEEP:	1536:dOtvMgeRnCnKAikic7j6rvvtlTuLknvPeZI3msDdFIcvN7xQVj5EArmYkhX37:0tvMgepnpZvtgKOadKcFy5LsXr
MD5:	4A2D3A283549C0EC00A4C5CB098813B4
SHA1:	2D61C7BEB1A8CDA9EFAED281D4B8A1ED1643E120
SHA-256:	0FA3F9E004DB4E0B973AE2A2D5CB33B84ECCEFC56BA911ECB2DE857B65FD2A12
SHA-512:	A24607AE1FB2F12DBA7CFEB6AA950ECE5BE3119CBF11119BA2DD3D1CA4DBF9EE759A5E96A64A6B8664DBE34531059B68AE4D62FB1190797099E3F63AFDC4F8CC
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-80-1.jpg
Preview:	......JFIF...........................................................................................................................................................".........................................b........................!...1..AQa."5q.....236RSTUrst...........#%4Bu....$b.......&C...Dce.d.E...................................D..........................!1.3AQq.."2ar....#45R..S....Bbs.$%..C...............?..:..E'..u:.n..X..4}..uP.P......Q..u..&.....F.......E........P.h\|YP....i..0S.PA@o........N...A .2TAE.......].A].P.F.BL..wQ.J.'!I..]0.I.)8...$1..d..!...y...D.1.......".M.?.2cj.AH%H.\...U.OH.Bjczi.9,..HM.'...+)..F...pB..L...Q% .)..eI"..L..M....4=2...[(...B.(...R..`.......p<...k([z....Jn.6M.!;"..I......y....H&.....TCU@.F.&..E.L4....B.R........M+...y.T..0..LaL$....L..H)5H..0(jn....L..m............H...4!....D4.;.t....W..u..Q.`..<.om..F0...]Y.B..@.........a..7x.p..U.B9.d.d..d.6...z.)X.xC.(..Q.z@M&.......o2.!..>.j.......N..<...D...\R.c0[]..74.Ex.P...).-&.+...$..

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	838
Entropy (8bit):	4.670822471754643
Encrypted:	false
SSDEEP:	24:2b7Ksen60AfVXF2ACfiVSApbE3zWlSabWH:C0A1gfMhG36YkWH
MD5:	49CEA0A781874A962879C2CACA9BC322
SHA1:	72C1650DE2B93EF320D2DB873FBB473FE360269C
SHA-256:	57A50C99A31EF4E89E86664E96F6DFBDDE163A2EB96E88B3B492C49AA4BE2F37
SHA-512:	7EBF5DA4637794CDAB0D199E8B0550E9230A1550804A4CE7FC723A8881E16D12327B9C40BCEECFF54ECE29DDE71BF41E63E8510ADF0827C4CD13C2392E6250A6
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/plugins/faq-schema-ultimate/public/js/faq-schema-ultimate-public.js?ver=1.0.0
Preview:	(function( $ ) {..'use strict';.../*.. All of the code for your public-facing JavaScript source.. * should reside in this file... .. Note: It has been assumed you will write jQuery code here, so the.. * $ function reference has been prepared for usage within the scope.. * of this function... .. This enables you to define handlers, for when the DOM is ready:.. .. $(function() {.. .. });.. .. When the window is loaded:.. .. $( window ).load(function() {.. .. });.. .. ...and/or other possibilities... .. Ideally, it is not considered best practise to attach more than a.. * single DOM-ready or window-load handler for a particular page... * Although scripts in the WordPress core, Plugins and Themes may be.. * practising this, we should strive to set a better example in our own work... */..})( jQuery );.

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1599
Entropy (8bit):	5.267838660635414
Encrypted:	false
SSDEEP:	24:hY6svD+6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z8xZS8f:3qD+2+pUAew85zssA
MD5:	5EDBA73F30F0D3A342CECCB3A34BFE45
SHA1:	3F39E4C8EF00408D327260F5328162AB3E5D3CAF
SHA-256:	F768529B209DB7EDF38AA0DA2A69C1C1DBE5A760D457FE74080D3AD76F14A0C2
SHA-512:	C302E3CCC2D9F2E12133ED07082A78260613F1B8C756D9EB2CF0A7AF63C425D4A8956B01EAE3FC3DFAB506DACF6416B0B53929D535CFA2AD81951183A6526FE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 404 (Not Found)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//www.

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
Category:	dropped
Size (bytes):	12014
Entropy (8bit):	5.8597190788401115
Encrypted:	false
SSDEEP:	192:L7xWVSgHQUkVbBQZf8POXQu2jMLlZYrZ7667V776+:L7xWVSgiV27QfjMLcrj
MD5:	87052396F5FFD63B642D1BAB54E7EDB7
SHA1:	F3E75DDE1FAD3A5FE639E3D0C04122FCFAB918E2
SHA-256:	EA54FEA4CE7FCA6339E5B437CA43CBD46C84AA46477BE66436608B5FB0A9E02C
SHA-512:	84F96774BF4E8CE6BDFFC68AB6ADFBAA7508BD8E9A3372A33C0032FB519BF51A6AFB34CD70CE8A84C32A1F4BEC2442B87CB5CBEE86EDD468D510E502705D4788
Malicious:	false
Reputation:	low
Preview:	......00..........6... ......................h....)..(...0...`................................r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..v..v..u..v..v..u..u..u..v..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..v..u..v..u..u..u..v..u..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..u..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..}..}..}..}..}..}..}..}..}..}..}..}..}..}.

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	254911
Entropy (8bit):	7.995345167524393
Encrypted:	true
SSDEEP:	6144:IfPptcB+ncP+snmHmeuYUGwOQOLCsJrL/0/8wzr/90W8UQ:I25mHmbKwOxLCsJ9s2oQ
MD5:	64D61A21BAFAD4355D3C314B678BEB26
SHA1:	93CC5E065053834BE5DA3392E2076E80B7892D03
SHA-256:	294AB18442242A5A048FF4D24C85EA061F9828C3BB0E30673CCB98885E859D38
SHA-512:	AB5F60419970591C5BAC568E8852368A0157DFC5BD7A59FFD474C17A48753C716A2EB032340166651C6C485BFF30F81245E76D55AF6EC3F1DEA90C1C77E54E55
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/apple-768x512.png
Preview:	.PNG........IHDR.............5..:....pHYs..........+.... .IDATx..y.$.u..y......{.17....H........<M.-.6.2.Xy.........{..:B{.z.!.Z.j.2I.H..H........`.....+.......9@. ....bf..2..2.......0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0.[......o.,M...R....OU..S...f.....g..?...kG^.;w.\...b}....n.$.K.]....)Y.AAUI..4.P.Q`._..).h~..m..?.+Z.^..?.9z.c.\.h+ ..H~mlXJ..s..U..#.BB....a..E..("r!A%H..j...........;........^.e.....s..Q.S....T5..{w`..0.....\|.PT...f.zm.L):.~JD..$j.W.#G.._y....'.3gN.W..^.N7\n6.f.I......s.....>7.D...s.....Ha^......(...e.G(r.)..2._._....wN.:EP.....p{I..$A}...Ep.(..Z.

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (750)
Category:	downloaded
Size (bytes):	2169
Entropy (8bit):	4.9548772147686115
Encrypted:	false
SSDEEP:	48:ildRbgqluYoCoLUmledemlxUlIUvfALSAl/lmmqlmWlfBlAlVlWlgwheAYf9hbF5:INx4gd/d4fTvsaMefp5oD
MD5:	89F8EE167E82FADB507197C109ED684B
SHA1:	F5A728E7805C71BAE1A8786921AB2735AB07C15E
SHA-256:	0B70D5380DCC5A0C4BDD30DE4D68C4B0F598EB4EA92BEEC1B6D5F0852BD96D22
SHA-512:	BC12D7CB827E364176A691C2ED5C73A481547C572A0C00E5FF6B8BD8E698AC7DA96F2D8DA08485F9363F98A1F21338E61A9E813A31DF0A2EB7E96D43A902E5CE
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.961.e281a7b797aa9204873b.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[961],{54961:function(n,e,t){t.r(e),t.d(e,{cleanup:function(){return c},environment:function(){return o},eventQueue:function(){return i},eventRecorder:function(){return r},immediateEventRecorder:function(){return u}}).var i=t(71026),o={_document:function(){if("undefined"!=typeof document)return document.throw"metricskit-delegates-html.environment HTML delegate 'document' object not found"},_window:function(){if("undefined"!=typeof window)return window.throw"metricskit-delegates-html.environment HTML delegate 'window' object not found"},cookie:function(){return o._window().document.cookie},pageUrl:function(){return o._window().location.href},parentPageUrl:function(){var n,e=o._window(),t=e.parent.if(t!==e)try{n=t.location.href}catch(e){n=o._document().referrer}return n},pixelRatio:function(){return o._window().devicePixelRatio},screenHeight:function(){return o._window().screen.height},scre

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2181)
Category:	downloaded
Size (bytes):	2259
Entropy (8bit):	4.64787713863996
Encrypted:	false
SSDEEP:	48:qXReRPdeMGvyXDQCUyF5pQq5pLpIp5pt1Z5:q4PdTcoDqgWo5pIzdZ5
MD5:	533AF03C49BAEDABF2E6A0BADF1269CF
SHA1:	5837BB0D22601BC1E4FD6B610C090B7280A644BE
SHA-256:	1CD6396792D7BFDD898DCB9F2EE195387179B30FB4CC2CDC0C57575FAB655230
SHA-512:	D0C64D59A8B002E02378882511B3D0C2D3AF3EBDBDFBE5D96CBFBDBD9C17C08DA7283C1900729E36040601FA10787DDDB65B8E77570103CF8E04EB2A22B96295
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.6
Preview:	/*. kk Star Ratings.* @see https://github.com/kamalkhan/kk-star-ratings.*/. .kk-star-ratings {display: -webkit-box;display: -webkit-flex;display: -ms-flexbox;display: flex;-webkit-box-align: center;-webkit-align-items: center;-ms-flex-align: center;align-items: center;}.kk-star-ratings.kksr-shortcode {display: -webkit-inline-box;display: -webkit-inline-flex;display: -ms-inline-flexbox;display: inline-flex;}.kk-star-ratings.kksr-valign-top {margin-bottom: 2rem;}.kk-star-ratings.kksr-valign-bottom {margin-top: 2rem;}.kk-star-ratings.kksr-align-left {-webkit-box-pack: flex-start;-webkit-justify-content: flex-start;-ms-flex-pack: flex-start;justify-content: flex-start;}.kk-star-ratings.kksr-align-center {-webkit-box-pack: center;-webkit-justify-content: center;-ms-flex-pack: center;justify-content: center;}.kk-star-ratings.kksr-align-right {-webkit-box-pack: flex-end;-webkit-justify-content: flex-end;-ms-flex-pack: flex-end;justify-content: flex-end;}.kk-star-ratings .kksr-muted {opacity

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 688 x 61, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8893
Entropy (8bit):	7.938424971957831
Encrypted:	false
SSDEEP:	192:o7FWT/U8Ay4/oicMNgJp3/9xVgfy4MweLFC5qlO99S9AfJyLR8tko45d:oYtDrfxW9Mwey8ofyV8tko4z
MD5:	07B93D6CE82DEB5165BCD0BA380D77C5
SHA1:	D52E30CF1D9C95D5D9AAD5EADA4A2C0B64BEE76E
SHA-256:	5BD053210D8C4E2A4814DB1F7E7BD87330FD8103C4EF7207994715A179DA5C84
SHA-512:	1B533B44C2A5D15929A59FAA9C14C3F10561ECDE8CF324D42C951F24A4C1DDFC7E7AACB70F9109459026820BB60BB8A70D7F3A86B3D7FD900E6625F8F20C8545
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......=.....U.Z.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:0ABF05C34FB611EE8106EC8499A9C549" xmpMM:DocumentID="xmp.did:0ABF05C44FB611EE8106EC8499A9C549"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0ABF05C14FB611EE8106EC8499A9C549" stRef:documentID="xmp.did:0ABF05C24FB611EE8106EC8499A9C549"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>#.-....2IDATx..]}...u......NBH.c...F......v..).2.8..c.`'.w..G......!.8%.Sq ..(.1...+.-U..WE.>L.;.....b>O.H'.t........

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	64407
Entropy (8bit):	4.777870877276673
Encrypted:	false
SSDEEP:	384:rFoFbrFIaSFoFa4hOjOs2nhgliB/aYFbTDmFoFg70IOuT:rFoFbrFIaSFoFa4hOIDmFoFg7FT
MD5:	FFB01FA658F004656B531672817FE23B
SHA1:	E3E3E366076FABE39DB1C119AD80573FE8B7304B
SHA-256:	D18EBB5CFE2E0508E5849595EE01E8FA9ED7D6B88C7726574E0906F2E118FC92
SHA-512:	C597B7CAF13D90969309DF8866C2CBADC10575CF15C089E894D447420AC665979A747A7417724E12B6247B005076DE1069C6C0B764D666C4533E3B5C4BB5B775
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css
Preview:	.top {. width: 100%;. height: auto;.}...top .header {. width: 100%;. height: 65px;. -webkit-box-sizing: border-box;. box-sizing: border-box;. background-color: #fff;. border-bottom: 1px solid #ccc;.}...top .header .header_c {. display: -webkit-box;. display: -ms-flexbox;. display: flex;. -webkit-box-align: center;. -ms-flex-align: center;. align-items: center;. -webkit-box-pack: justify;. -ms-flex-pack: justify;. justify-content: space-between;.}...top .header .header_c .logo {. width: 156px;. height: 46px;. display: -webkit-box;. display: -ms-flexbox;. display: flex;. -webkit-box-orient: horizontal;. -webkit-box-direction: normal;. -ms-flex-direction: row;. flex-direction: row;. -webkit-box-align: center;. -ms-flex-align: center;. align-items: center;. -webkit-box-pack: center;. -ms-flex-pack: center;. justify-content: center;.}...top .header .header_c .logo .tl_main_logo {. width: 50p

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1386
Entropy (8bit):	4.8492224043496055
Encrypted:	false
SSDEEP:	24:Yorj8jYfQypuazl92Qypua5HR9Iszb9mPuazEBb9mPuaSlSfvBLRKkfkMqVlM:Y4XzZzlkZTyszbgzEBbg+SJRKtpM
MD5:	662EA2BBC39B50BCDCBE04DC2CD7A087
SHA1:	4705F797D3E54D7953493DEBA121A8B4C397060F
SHA-256:	BFA43BCF43FA6CED5E1AF0BA042098DA244E4441A9C1D53E4B7B0DBFE764B1C6
SHA-512:	7E9903DE3548135C5C17813B2438D337BB565CEA17E6C3A5A4D7FF4B3A197A67B9FA6A16296A13174C5FA0D2E77EFBEC019E816541E074ACDB764F88EC685028
Malicious:	false
Reputation:	low
Preview:	{"blacklistedFields":[],"constraints":{"profiles":{"AMPWeb":{"precedenceOrderedRules":[{"filters":{"nonEmptyFields":["isSignedIn"]},"fieldConstraints":{"clientId":{"generateValue":true,"namespace":"AMPWeb_isSignedOut","expirationPeriod":86400000}}},{"filters":{"valueMatches":{"isSignedIn":[true]}},"fieldConstraints":{"clientId":{"fieldType":"id","generateValue":true,"namespace":"AMPWeb_isSignedIn","expirationPeriod":15552000000}}}]}}},"treatmentProfiles":{"AMPWeb":{"treatments":[{"filters":{"isSignedIn":{"nonEmpty":true}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedOut","lifespan":86400000}}},{"filters":{"isSignedIn":{"valueMatches":[true]}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedIn","lifespan":15552000000}}}]}},"compoundSeparator":"_","fieldsMap":{"cookies":["itcCt","itscc"],"custom":{"impressions":["id","adamId","link.type","station-

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
Category:	downloaded
Size (bytes):	12014
Entropy (8bit):	5.8597190788401115
Encrypted:	false
SSDEEP:	192:L7xWVSgHQUkVbBQZf8POXQu2jMLlZYrZ7667V776+:L7xWVSgiV27QfjMLcrj
MD5:	87052396F5FFD63B642D1BAB54E7EDB7
SHA1:	F3E75DDE1FAD3A5FE639E3D0C04122FCFAB918E2
SHA-256:	EA54FEA4CE7FCA6339E5B437CA43CBD46C84AA46477BE66436608B5FB0A9E02C
SHA-512:	84F96774BF4E8CE6BDFFC68AB6ADFBAA7508BD8E9A3372A33C0032FB519BF51A6AFB34CD70CE8A84C32A1F4BEC2442B87CB5CBEE86EDD468D510E502705D4788
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/favicon.ico
Preview:	......00..........6... ......................h....)..(...0...`................................r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..v..v..u..v..v..u..u..u..v..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..v..u..v..u..u..u..v..u..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..u..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..}..}..}..}..}..}..}..}..}..}..}..}..}..}.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 18, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1342
Entropy (8bit):	6.868963683451565
Encrypted:	false
SSDEEP:	24:+1hNo7FCWwjx82lY2T3/Vo92yJ3VXjGZghFVb39o8r3cQkAx11yqB:Ezo7FDNn2DOtJ3pzVb39trDDkqB
MD5:	7A3F43936C2DE9F18ACB58B102070218
SHA1:	81FAED88163726311B2F0BD6D7E83F4AE387D888
SHA-256:	5F5031CF6F3C0D0D480FB44BD589F2E9AA986149E630BDB5491D57170CD316B3
SHA-512:	130A36673F6E9EACF059675B0DE7B4C9865310BDB84B90023205331C1D4AB3F1270E1F1F941ABB6238424D95F7D178F7082305F7D31DED949CB71C8449677579
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............A.......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:85A41F524F3811EE858E843608C2FC7E" xmpMM:DocumentID="xmp.did:85A41F534F3811EE858E843608C2FC7E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:85A41F504F3811EE858E843608C2FC7E" stRef:documentID="xmp.did:85A41F514F3811EE858E843608C2FC7E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?> S......IDATx..;K.A..7..o...P,b!.E..~...Bk.J.XZX(.(.V._.N._.(h...D.FI#.."......5.....~..y...eG...H..........>.{.:.0...

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1024x576, components 3
Category:	dropped
Size (bytes):	68960
Entropy (8bit):	7.968075827470143
Encrypted:	false
SSDEEP:	1536:6ak6NOdAihzLzTs+QEAF374tJiyPLqA/6BgFRkVq5qGtnzx+zoPl:+0iBzTs+QEAF374ZG+6BtVovnzxGW
MD5:	E5A6B7DF7DA830C9FD4D213961B2E6FB
SHA1:	1D6569A4C8496EFC3C2F031F21F9EC434D1C2CD7
SHA-256:	3525B7FAD1A8DA3795FDE119095FC16FCB6F02383F162F68722C6B96FDCBE0BA
SHA-512:	B4C36FA24F3D6BEC18B499E3AA9D8EC29C948234B8EF6EADE7AF6BB1D6941D3E928FE17F5D596A88C858AABC80911DDC95366BD4A9BBD550381E59E1B04112C0
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......@...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..1E-.+.c....("....(..)..i1N...)...r.Rh...Z)@.IH;P.i..6.@.....@........@E....X.^.Wj..5Q.......N^.c..:..z......YDL).VZf.R%.Z...@..Z.qI.$.0*9.f.QL._......(..4..Z+c.=).S.Jk.(.7.".gSS..CbB.).R.Sr....R.d.q..S..q.Q...11E:.U. ..H).)0..S...5H.Q.}......M.R.(B....Q..R.ZCLB.....0..)GJW%....%1.K..R$;..Fh..4Q

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1827)
Category:	downloaded
Size (bytes):	262961
Entropy (8bit):	5.23813262677432
Encrypted:	false
SSDEEP:	1536:n704E5LJB0R0J0qzioyhqJmEJcqt6UqZSqCs94MF2ymxwxJ3P5A4GaGHk6uv3W19:nxWehEmEJcqt6UqZS44MFJA4GJDQahZ
MD5:	A9CB7E537707AB2AAA83815F8CB2CA5C
SHA1:	9C311FF38BE0EDC0695C8E8975EF1CFCFD8073E3
SHA-256:	DEB6C181DB15C6ACACA699FD64801CE046F55721A7E22514AA4BC190A527C565
SHA-512:	95B2BF58FC7E6C04F0A10074B5C1BBD1C9AFED11ABA777CCD1F1FCF2821816C1DC652400E618B5F73D156EE4C7DD5A9FFF3E1C6CC439F6E76D6308B96D3AB067
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.526.04cd0c888ecd9194aa60.js
Preview:	/! For license information please see chunk.526.04cd0c888ecd9194aa60.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[526],{2353:function(e,t,r){"use strict".r.r(t),r.d(t,{KNOWN_CAMPAIGN_AND_AFFILIATE_QUERY_PARAMS:function(){return n},KNOWN_MARKETING_QUERY_PARAMS:function(){return a},METRICS_REGISTER_ENDPOINT:function(){return o},MUSIC_AFFILIATIONS_ENDPOINT:function(){return u},PROCESS_REDIRECT_URL_ENDPOINT:function(){return i},TV_AFFILIATIONS_ENDPOINT:function(){return s},default:function(){return c},handleCampaignAndAffiliateUrls:function(){return f}}).var n=["affC","adId","advp","at","ct","itsct","itscg","itscc","itcCt","its_qt","ls","partnerId","pt","qtkid","uo"],a=["mttn3pid","mttnagencyid","mttncc","mttnmyad","mttnmyadg","mttnmycmp","mttnmykw","mttnmypla","mttnmypub","mttnmysite","mttnpid","mttnrefid","mttnsiteid","mttnsub1","mttnsub2","mttnsub3","mttnsubad","mttnsubadgp","mttnsubcmp","mttnsubkw","mttnsubpid","mttnsubplmnt"

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1482
Entropy (8bit):	7.0268648716044995
Encrypted:	false
SSDEEP:	24:U1hmYaWwjx82lY2T3XVAMHNStyJ3VAtfAGWEtpRgJipS1GPZ8cqzUwbCKUZ9:aMYLNn2DmM3J3maNH+0pbCK2
MD5:	1039E4724E6E71DF55FDD19AF799EADB
SHA1:	258CD0A3D5307AC1159F28919FD0589CDDAA0C27
SHA-256:	7918A824B075102848E36CF7640770CA9A92DFCFDDF962C9DA857E635B0AC83D
SHA-512:	499DAE3760BF7ED0F13501B3217B80C15816981A8482AC67F5379B94B945CF36255C86A2557AEA98705487B31A31B35195254313A54B1E2BBB2E392F89003C2C
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/zhongwen.png
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:386ABD19539011EE967FFC465CF8BE2D" xmpMM:DocumentID="xmp.did:386ABD1A539011EE967FFC465CF8BE2D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:386ABD17539011EE967FFC465CF8BE2D" stRef:documentID="xmp.did:386ABD18539011EE967FFC465CF8BE2D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.9.....:IDATx..KHUQ......%!...DH.e.K..=P. .AB......j.4...... ..j..A".$.It......dH.....a...h.w7....Zk.sKr.\2.-..

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1274
Entropy (8bit):	6.653929774733886
Encrypted:	false
SSDEEP:	24:Wn1hmYaWwjx82lY2T3XV7Hh75yJ3V7L68GDC7SQSMtrXhh7sBil:gMYLNn2DtHKJ3tLJJLhxh7X
MD5:	3B92FB5F00B1C371FB5E6C5A5C1A6FAC
SHA1:	852DFBCFBD0702797FE29527E3BBB10D7BDD55BC
SHA-256:	D760CCD7E36938E74F5BA8CC916CA0A69EB772C08486A3846D5079B520761890
SHA-512:	07B108880C3E588770CFCF0DC13149C0A145ACAA0039A8E8140FFF4E197184E64D7FCB3FC0646A9BE8CC820B6069FCB74E561F164BD35C37B063A6BCFDAFE958
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............K.v....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:2B65932C539011EE87E2F93861CDACDD" xmpMM:DocumentID="xmp.did:2B65932D539011EE87E2F93861CDACDD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2B65932A539011EE87E2F93861CDACDD" stRef:documentID="xmp.did:2B65932B539011EE87E2F93861CDACDD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.+.....jIDATx.b..s..D...m@...~/... K..h.....bq(....R....c@,.....w.H00..0.......s..k ...;...r.2.K .u.q..+... ..bM..

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 1200x628, components 3
Category:	dropped
Size (bytes):	15898
Entropy (8bit):	7.5224152849316654
Encrypted:	false
SSDEEP:	384:iLIbwJ1mGVnp9+/xIHLaMNbaVKvuy+HQA7036:sIkSGVEYLaMNbk9HQAwK
MD5:	2CAD5B8958909ECE03F09CF081C0C538
SHA1:	1304A56CCC71EB0403F3F61924FC21820B199D6E
SHA-256:	B19F8B89AD4402FCD0D8037F7B975963672F5F5870957FAB572DE73220CECB1C
SHA-512:	8DDCBFB6EB8545E01DC140FD8D049F59F47CDC5979770B838C66E494CB67FED421A5B7F88E7CB36A89B1810A55C4BAE2EC26CFA7772D57D8342B3FB27253B57E
Malicious:	false
Reputation:	low
Preview:	......JFIF..............Compressed by jpeg-recompress.......................... ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............................ ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............t...."..........4.................................................................z............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................"..r.r.r.r..U........................................................A8.a...j....:"g.....".Y.&..WGH...w>j...................................................T.@A'pN;.GQ..?^..8.

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	95543
Entropy (8bit):	7.978985300444378
Encrypted:	false
SSDEEP:	1536:dOtvMgeRnCnKAikic7j6rvvtlTuLknvPeZI3msDdFIcvN7xQVj5EArmYkhX37:0tvMgepnpZvtgKOadKcFy5LsXr
MD5:	4A2D3A283549C0EC00A4C5CB098813B4
SHA1:	2D61C7BEB1A8CDA9EFAED281D4B8A1ED1643E120
SHA-256:	0FA3F9E004DB4E0B973AE2A2D5CB33B84ECCEFC56BA911ECB2DE857B65FD2A12
SHA-512:	A24607AE1FB2F12DBA7CFEB6AA950ECE5BE3119CBF11119BA2DD3D1CA4DBF9EE759A5E96A64A6B8664DBE34531059B68AE4D62FB1190797099E3F63AFDC4F8CC
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................................................................................................................".........................................b........................!...1..AQa."5q.....236RSTUrst...........#%4Bu....$b.......&C...Dce.d.E...................................D..........................!1.3AQq.."2ar....#45R..S....Bbs.$%..C...............?..:..E'..u:.n..X..4}..uP.P......Q..u..&.....F.......E........P.h\|YP....i..0S.PA@o........N...A .2TAE.......].A].P.F.BL..wQ.J.'!I..]0.I.)8...$1..d..!...y...D.1.......".M.?.2cj.AH%H.\...U.OH.Bjczi.9,..HM.'...+)..F...pB..L...Q% .)..eI"..L..M....4=2...[(...B.(...R..`.......p<...k([z....Jn.6M.!;"..I......y....H&.....TCU@.F.&..E.L4....B.R........M+...y.T..0..LaL$....L..H)5H..0(jn....L..m............H...4!....D4.;.t....W..u..Q.`..<.om..F0...]Y.B..@.........a..7x.p..U.B9.d.d..d.6...z.)X.xC.(..Q.z@M&.......o2.!..>.j.......N..<...D...\R.c0[]..74.Ex.P...).-&.+...$..

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	downloaded
Size (bytes):	2424803
Entropy (8bit):	7.9715202133811625
Encrypted:	false
SSDEEP:	49152:aTLwT3cNXxZJp0FNysSNAYJDS9EIpWiX3UELUT0/wbeIdo:kcT3cn6NyspYH81Ui4pu
MD5:	14C0A01070573BC00E0F462023E8162F
SHA1:	8D8725F9BDBE99060B86E0A03434BB5C4E3BE8AF
SHA-256:	116029BD091EC390064879DF7DAD05E601E284413F53B9D51978875B85DC7471
SHA-512:	C8A6C5BCC48EE2D4F0A365886AC97407E8FBEF6E04502A68423F055730DC32BB91E9576A7ACE7557BA3597999E2545B1865033F8BB7E2F33FB7B392614B5B410
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/d6.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........555.....!.].....5...!....w.}...T...fff.c..>....444.......)... ..... .)..............J..'..M.....O.....W..P.@@@.. ..... .U..[..G... ....Y... .. MMM.T...........C........E..H..'............ ..... .K... .. ....R... ..........7..............)..............B.....].....=... ..... .......9..G.....C.....U.....y..l..S.....S..@..O..Z..l.....8./......%..G.......&.......d'.....1.... ......6..6......y....q..i...[..2...W.[....J...........-..D....a....B./(..r...@.W.......(..6....?6...}.......P...........z...aaa...X..........N.t..}C....,..h..%......O....9.......H..=.......o^.......~~~.;..o..i..#..p5..s...OC..._.M..<._Q.....A..D......000HHH..g...qqq.F........4........y....<:9....>.....K....@6.YYY... .....UUUfS/TE0.... ..,..W..^....n"..(.h#..O.s..........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J.......v...P....T..X.j...U.`..{......].mM.^..K...p.............[.'%.....A...L...g'_

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	downloaded
Size (bytes):	2254846
Entropy (8bit):	7.954275198982014
Encrypted:	false
SSDEEP:	49152:yQZjB1p5xW9tkpszhhGc+zHLfzWXJO/FGS33KVCxjb846id5Xv:yQ5enfGc+zHLfz4AN53eCGUd5v
MD5:	999CCB074C15D6377F97302832038C14
SHA1:	C08B94482AD5540F68A896F30CC890474C058E1D
SHA-256:	15D01829FAC9057A922B9168D68D9EA940D7612B0128AE9B67FE69A1DD10E62D
SHA-512:	A3F571FFD449803E6FBC583CF15FAD48A5A6F17AA1BA1D11AACD0A9A94DDAEFFC96283D86918AC4DA046C3544313860174DE46E44AEA2541B0DABEF5228B7DBA
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/d3.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........!.....!...r....6....]..5....}................\.. ..... q.... .......R... .Z... .I..>...........N..7..W... ....U.r...?...........9... ....3........\... .<.....F..q... ...T.....H.....D........3...........0..!}...d(.. t....x....'../.\|....A.....h...............>6......-.H...=...z....$.....)..........Y.....F....... ..d.)...L...._Q..l... ..t........Y.....>.$.........cMD......v..X.\|G...5..:..N..?...O..8.m3..../..O.p;...C...5..U.......!...5......C...................'''..:...c.o^.....r8............n.. .......s...]]]....N.S....E..}.b........B.....h..R...u@!..y...$...t.........j.........z.....5.@6.~......x..b...............o...2...Ug..].ez...w....T.]...1.........@@@..o........u..]...ppp.....8..... ....s.M.......w.......f9.................H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...P.J.J...X.j....`..K...h.]...p..K...x....._..&.&.a.&.(^\|.....K..e..%K

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	112510
Entropy (8bit):	7.985977921091217
Encrypted:	false
SSDEEP:	3072:8J8ywCWkLG/o1c1g+ZESAl3AfMnwjHL074:k1Tq/o2VZExQfMwa4
MD5:	0C97BA715B8E96A4F43905F8D1D042B6
SHA1:	83399E9892022E8EDCD29F430C9C22B6AF1451ED
SHA-256:	96654FDE3632E7D77365C6851F36BAC06FB7BFA10EE42857E147BEA8536AACFC
SHA-512:	362447CDFB62773879EB336069B29A1E74470A0348C744125374359B80EBD96934C38783BE668106F713585E349B7E4D77964315B7E54F070A76022A67791FD1
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/3.jpg
Preview:	......JFIF...........................................................................................................................................................".........................................a.........................!..1A..Qa"2q....#Bt.......356RUrs.....$%4STb........&Cc..DEdu......e.................................J.........................!.1AQ..."aq23....#BRr....56S....%4bs.$.....DTcC............?..X.NbO...tSZ.&3) ....SW_w.T.Iok,Z...y...k......A......>..f....'n.D....!..c..t+".T..f.....2..`$......QSY.$.E`....%%..d<..JwT.F..b.....R..y.A.4'BM..........E.!. .zH(H.S9....j...t.....r .$..P.e,..@...wMH.9.!...I{..r.....X..G.F.F.C..XpRJA.d..5%`.NI.ro0P&..g...(Al..W.8c$@:.P..........A.....H%,$9U.......$C.JS.J.....D..h...R[..W....WJx.LH\.P......>".jb7)..lE.)N....x.j3.....s.....ScX....,.\8.yt.T..j.+.*#e...2`.IN...b.......}.IXN?.../...."[...NM.d..8.yG.+...2..Lmof....y....39.....S...;G..a.^I...B....:>5m'..W.b.gU ..q...........O.6.u....Y.`...M..Rm....R....

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1283)
Category:	downloaded
Size (bytes):	62120
Entropy (8bit):	5.200233203039825
Encrypted:	false
SSDEEP:	768:rPksmcJcApCeZygCoEOuTudKEEB8xAnpFyS5eCyDvmojEWCykh5kNbeAFjg5gvC8:rPksrJCeZygColbQJL5/U
MD5:	3EA70AE6D554F9FC0FFB8CB0281EC0A6
SHA1:	58D41E45856B15260F69F19200B6DE7FDCBC82E6
SHA-256:	A5B0CC4EF0FF84660C52A703030A8F948CC8702EF6B0535CC31FF8611823DBB9
SHA-512:	00E5EA6FF4C91E1419C4F7FE95815E67C11EDE4849810C2F3371E694622084D439F0E73C855101CB0A1A5B516A8821DE3B2EB1AEB450325F8A38E3EF3B9CC19B
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.171.ce33468efea141bac957.js
Preview:	/! For license information please see chunk.171.ce33468efea141bac957.js.LICENSE.txt /."use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[171],{70171:function(t,e,n){function r(t,e){(null==e\|\|e>t.length)&&(e=t.length).for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n].return r}n.r(e),t=n.hmd(t).var o=function(t,e){return(o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)}.function i(t,e){function n(){this.constructor=t}o(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var a,s,c=function(){return(c=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function u(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator].if(!n)return t.var r,o,i=n.call(t),a=[].try{for(;(void 0===e\|\|e-- >0

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 476 x 62, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8230
Entropy (8bit):	7.925798020042435
Encrypted:	false
SSDEEP:	192:e7Fl6MXB3oviIYOR+bBDjd9crK3BKP6Bm4na1Rhp/:e3WviBPDjgrKxKOnaVh
MD5:	9B703FB1B9063E07F8AAF74D98815527
SHA1:	99163C3AAAE0777AD90DB550D22E86AD3396138C
SHA-256:	7DEE32F938C1E25F05EC91228820FBEAF69374C03916FB43FF56C3D295A937C8
SHA-512:	0FACC317EDBC3F2E8C0EF1EFFDD60F90EC77F03C9C25789E574A38F497B5DAE94FD391E45BBFCCD755CC7B64C52C274BF9A580AA67BBB500E0063E5E79AAE028
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/why.png
Preview:	.PNG........IHDR.......>......X......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:99B591CE4F3F11EE87D2CE5C59C8D500" xmpMM:DocumentID="xmp.did:99B591CF4F3F11EE87D2CE5C59C8D500"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:99B591CC4F3F11EE87D2CE5C59C8D500" stRef:documentID="xmp.did:99B591CD4F3F11EE87D2CE5C59C8D500"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..]i...u...y..R.i...0.:p.d..:...,.#:...P.H.Cy.H.....B.`.J...J [.1k..D..v......E~8d.g'6.Xr...P.I4.]..c..t....

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1483
Entropy (8bit):	7.040356147973546
Encrypted:	false
SSDEEP:	24:U1hmYaWwjx82lY2T3XVKKN6kyJ3V8P49GWyCBD/w6gaAkgArugog5xzyLrRxL71T:aMYLNn2D9CJ3/LBD46g7ny9vz0rvL71T
MD5:	5EF37DDA1CF34C87E1D8DF3D3AD892D3
SHA1:	E3409FD1ACF4A44ED0D5A0655AAE8DC036E49A14
SHA-256:	3F4916D4DD945744B333087F7DCE11B59455DE86127EB34BF45970B59AB5187C
SHA-512:	B532E9CA5A7716F7B2C77F1ACD460A81095CD2E63BF0C434C1C87285D22908239886742EE1D80DF3BC0F37D8F6D7A51A151B8226D49038E10B3B5CB3E119CFDC
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:3AE5F0DC539011EEB35CD39B770895B6" xmpMM:DocumentID="xmp.did:3AE5F0DD539011EEB35CD39B770895B6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3AE5F0DA539011EEB35CD39B770895B6" stRef:documentID="xmp.did:3AE5F0DB539011EEB35CD39B770895B6"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>:`-b...;IDATx..MHUA.....H..r.=....].E...>...[..P[WF.&.hU.,..kSQ..j.%R..zPH../.2.0.J.w./..z...{....sf.....yl9.

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	103129
Entropy (8bit):	7.979106734749978
Encrypted:	false
SSDEEP:	3072:fsio9YYMRA/thGXyjvGR9xjv7WQ23hHqjtQsiQfSV:fsicYYMCV2yK71v6BoesdSV
MD5:	2139FB819EF376933E44A70500FBA162
SHA1:	6F5C3F886FF5BB1BC95FC29A8922860E8224DE53
SHA-256:	B38BB5A4CE6ED5752D34AA3FD9B47A8410F4ECF5FBC253A03EF420D0543CC799
SHA-512:	78F73A2BA24979F83CF49A53B4C05BC137633980DEAE5EAAE023932F47AD42DEC1F39BF0611AD22980EC1ED399DD9B23FB2EA6475CE5B4B0D0DE524CC55121C9
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................................................................................................................".........................................e........................!...1..AQaq."2...#456BRUrt...........$%3Tbs........&Su.....CD..Ve...Ecd...F.................................L..........................!1AQaq.."23r.....#R.....4BS...5b....Ts...$6Cc.%D............?....?r.z..Gu.j....?..+......G5q.e.U....e.....P....7H.!...E.F@1...@U...R.....t%.Ar.:..iE.......:.!......H.`D..B."-.t.`.H...$.`."...!I2....F..SH....S)"....f."..d.(..V.Z..H..M..)"..,.. ..E.....,.JA.HJBe.Lb...7..4..Kd.(pT.d..)HNB.$IH.....R.YlX..,...P.&Sr..(.D.!.l.$=.P.....!M.d.HL...LM..........U...V+"..8L.;B.1.3S..8..L.....7Z.2.Th...zz}.l.....9. .e....~A].kw.........;.T.......(..B.0B......!.@....!.@..B..B...!..B...!..B...!..B. B......!.A B...!B...!...-8..z.Qd.E.Fl.....^Y...A.L......%.(.b3E.I!l......%"P...Y&.$.PSYAK%.BYC.e.Q.,Q....%.IG..%re.

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1376
Entropy (8bit):	6.921957060507552
Encrypted:	false
SSDEEP:	24:pW1hmYaWwjx82lY2T3XVQZs7FLyJ3VQ5KbG7Tr90l1gl6N9Zn0dKgI:mMYLNn2D/AJ33Ko+dKgI
MD5:	DBD5EA2180E785F76E3F626318254BD0
SHA1:	7A65C468F485BA692102B375F0DBB937C11B4649
SHA-256:	5788136B28395C74F558D5254CA03559F2F333D4DCA6F659986F0F8DB54AD2C1
SHA-512:	732E2A8551ED9897388E01C683ECE48405AD493085C26D2EC2CF91A829A0E89292E41E173D5FD7CD4F391C794C61A2E4C3B6163BA6280046C88ABDC5C6B0CFB5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................K....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:328D6A5C539011EEADAFC2B303B27E32" xmpMM:DocumentID="xmp.did:328D6A5D539011EEADAFC2B303B27E32"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:328D6A5A539011EEADAFC2B303B27E32" stRef:documentID="xmp.did:328D6A5B539011EEADAFC2B303B27E32"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.i.....IDATx...+DQ...\&.A#+..`....PJ.#d.)EJ.....j...)..Y...S>.P.1>2....s.v;..{..{..x.9.}..x<.)T.&...iju..D".

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 99 x 97, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	2989
Entropy (8bit):	7.704180697786099
Encrypted:	false
SSDEEP:	48:Azo7FDNn2DKqmJ3tVFcOyu3S4czDnS0GXarEYNitdLd5dS6uaTJYSF4gAn4:2o7F52eqsVFcBkS4czDnS0prMhS9mPA4
MD5:	59987F70FB88245E2E54551B15F4A84B
SHA1:	AEBCA50992F245F7897F94D4C4D8FE95DA945316
SHA-256:	44E71AE9E01E554D34870D121DCEEA9E3BA13C51F49AA700FBBC9B989DF22786
SHA-512:	7BBE1C0A5E833B9A23B0FF70876213CB108792AE6C799E8302DDE0BBF8127DA2F4AC3215173903C7F87B9497764D7D2D77CCB8E597D63119A3DAB859A69A69B1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...c...a.....M.......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:BB687D5B4F3F11EE9E84FB76668467DE" xmpMM:DocumentID="xmp.did:BB687D5C4F3F11EE9E84FB76668467DE"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BB687D594F3F11EE9E84FB76668467DE" stRef:documentID="xmp.did:BB687D5A4F3F11EE9E84FB76668467DE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>\|....."IDATx..\[lTE.>.vOw......RZ..X@...r..i. F}1.0...........<."^.D......5...A(...K)P...v.{.=..n..3s....l..tng..f.

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586)
Category:	downloaded
Size (bytes):	44742
Entropy (8bit):	5.4366961831161715
Encrypted:	false
SSDEEP:	768:lLp5N0gZdapFY+ekhuuJtIiAE6x6u6k9J8iBRPi:lLpZapLekhuuJtIiAEQ6k9J8URPi
MD5:	98B2086C01FEFFB796AB42A7512F0EBD
SHA1:	8D2C47F6C1A962E9E1DAFE36E7FB6A4C21CF6030
SHA-256:	3054DA54AF48AC4429A72DA4C82D44593644B0DFD38EBCF0920B979CE74FC0AC
SHA-512:	8F844FED0F55D9AE189DB5AC33D0B8EBA4DEAEEA61C859BC1353BB2FEF67EDC8602256C052A272C9BEF8CDD04D70C655B3DECDFE9C77FEF8CD0BCF0A93228363
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/
Preview:	<!DOCTYPE html>.<html lang="zh_CN">..<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/base.css">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/media.css">. <title>Telegram.... - ..................</title>. <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO Premium plugin v20.4 (Yoast SEO v20.4) - https://yoast.com/wordpress/plugins/seo/ -->..<meta name="description" content=".......telegram.........telegram...................." />..<link rel="canonical" href="https:/

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	733
Entropy (8bit):	4.7574006224426535
Encrypted:	false
SSDEEP:	12:YGKzFDsip968DDp8MIfE1lI11I1581f58zrF8qWKxk8IV5wDKOBuGpQJNGzF/BQU:YdxDsinqMIqlI3I1y1fyzr+jcdD9J+Sn
MD5:	CC64BFA00B4B3FF916A983A0C27DEA58
SHA1:	62452E81D49DF7E3EDAE74AE32A3E9A613DCFE86
SHA-256:	67CB92C8D3E193BCAC15DEBC8CC34C5D2CE531C9A13D037EBFECDC662679215A
SHA-512:	C6D1D59F4D354EF39AA6D59002D23AB6AEA977CC3B68FE9A6D0821FC0C6EE279390A35B8DB2E7E8D39C913694811CEF04763452D8075C63722700E2B5120F3EC
Malicious:	false
Reputation:	low
Preview:	{"compoundSeparator":"_","fieldsMap":{"loadUrl":{"timestampFields":{"fetchStartTime":["fetchStart"],"domainLookupStartTime":["domainLookupStart"],"domainLookupEndTime":["domainLookupEnd"],"connectionStartTime":["connectStart"],"connectionEndTime":["connectEnd"],"secureConnectionStartTime":["secureConnectionStart"],"requestStartTime":["requestStart"],"responseStartTime":["responseStart"],"responseEndTime":["responseEnd"]},"otherFields":{"requestUrl":["name"],"transferSize":["transferSize"]}}},"metricsUrl":"https://xp.apple.com/report","performance":{"samplingPercentage":0.25,"samplingPercentageUsers":0.25,"sessionDuration":60000,"samplingPercentageUsersPageRender":0.25,"sessionDurationPageRender":60000},"postFrequency":5000}

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	246
Entropy (8bit):	5.059655753372202
Encrypted:	false
SSDEEP:	6:tI9mc4sl3GRtEatXEl0uvwLqFiHcQJ5fLkVX:t41czlElZw2rQJ54B
MD5:	0300557E1F71E36801B50D96F299F235
SHA1:	4E6AE10512544899D1AE757C9B48BC647DFA9E84
SHA-256:	BED6CEF3A2A83B0BFC42310907AA856549A86C15B7F3103D936C3D436BDD0655
SHA-512:	80E1F438E32411AA754DA37CE0C6F40FFADBC4F78C42702D08A8E92C50A9168292EE7BED676B5D8069B0AC0F44B83589A9BB1E0D650278496D2FE68348AB6228
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">. <path fill="orange" stroke="darkorange" stroke-width=".5" d="M12 .587l3.668 7.568L24 9.306l-6.064 5.828 1.48 8.279L12 19.446l-7.417 3.967 1.481-8.279L0 9.306l8.332-1.151z"/>.</svg>.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32025), with CRLF line terminators
Category:	downloaded
Size (bytes):	84266
Entropy (8bit):	5.3656518304612195
Encrypted:	false
SSDEEP:	1536:iP10iSi65U/dXXeyhzeBuG+HYE0mdDuJO1z6Oy4sh3J1x72BjmN7TwpDKba98HrA:d+41hJiz6fhdlTqya98HrA
MD5:	C60C35472B663F15AD7358DEFF9AA90C
SHA1:	645B481D44E7F2611805A1F2313B507F6F55D84D
SHA-256:	7292FD7007F254595E88D05F99DEB53B53FB36AB61C6B41C1ACC1E970A075C21
SHA-512:	1203B636F789BD497C6927F7F253432D54BFAABC71A345A94D445D84DA564E4FC0672339B4764A9B5609B1AA9CAD343E1CCF298332A84916D447C620D813499D
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/js/jquery.min.js
Preview:	;!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return n.each(this,a,b)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushStack(d.apply(th

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 262 x 62, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5589
Entropy (8bit):	7.876010524267059
Encrypted:	false
SSDEEP:	96:Yuo7F52SGMAUcYdj6BkH40AkAGxKrLeA0vC66MQPbMaHlgQn/eW9:Y/7FpG/izH40rZxCJbPg+/B
MD5:	AFE24FBEFE5BFF96FD63F9A91AB27203
SHA1:	78D7F878E5864F0DA3E4BA8DD3828B8A601B9A71
SHA-256:	FA5519A775B680515BFFA05449D27B1DA75E0E58C7D1FFE1B07B27FAE087FF1B
SHA-512:	D6129DCD282C7DBA4DBFFF505F5DC3A82D911F130D5EA69B986A5E4FC775A5F5CE3506E1071891F666A27CA41915062F77B9B6B2462BF0D008B3C6D2C14DD36B
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/news.png
Preview:	.PNG........IHDR.......>......k.H....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:AA54F7514F3F11EE90B9A9C5BFEBA4AA" xmpMM:DocumentID="xmp.did:AA54F7524F3F11EE90B9A9C5BFEBA4AA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AA54F74F4F3F11EE90B9A9C5BFEBA4AA" stRef:documentID="xmp.did:AA54F7504F3F11EE90B9A9C5BFEBA4AA"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>1SX....JIDATx..]}l......W...G......$.RlZ5D....-...6i%.m.X.P..SJ....D...d7....IQ[..T......\K[....."'!./..}g..v..u.......

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 643388, version 2.66
Category:	downloaded
Size (bytes):	643388
Entropy (8bit):	7.999303543134304
Encrypted:	true
SSDEEP:	12288:vBkFommDtcWEiT4dkBTXCmW/kWWeGZEjm1FbOL7ZV7Nv1B:vBkFNWF46BTR7WWeG2xLHRv1B
MD5:	DE5A86DF84A9ACA70D02AFC4ECE460AD
SHA1:	B839E16E9AD71311987CAFDA55B3562FF561BFAE
SHA-256:	5D1E4E7D28462B795054CFEC5F429DC7773654AA9D08608927F1308A8241C5A4
SHA-512:	1EBF9AB8CA95AF4B107308A51A84F0AF8E92979BB538599A1518EE1498BEFC7FB0F30E61A8EA57F8B07BAFDF5D2CF1EABA21EF307A3829D4281D29A45F0C1530
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-SC/v1/PingFangSC-Regular.woff2
Preview:	wOF2.......<...............B......................J.`...V....b........g.6.$.......@.. ..1...e...[!........a....s&.6".3.."..V..}...~B.H".ll..jd.^....l....n.z..y[c..Y'm.....................#..<}n.{g....3......C..B.\|..B..Ei.-.BA[.RJ.V...j?....5.@QS.\7..=u..v..^.`....f.#.P;...B.f....,..(.S.es.<-,........eO>.s....+!.9._...5Z^......5.BG.I..\|...[s..`...;F5 n...Y.lJ...9c%." B...b.O.&[.z.;.(..DI'.O.>.GB(..Q:.V.Q..ggf.L.97G.{.9L:/......" 4..M..R.9.hD....P..5" ..=.3........9..^..a.7&.;.....k.Z..qR<P.=...o.n.6=.w.9..s...n...n. ..9.sB."Px...(.....J.......\7Rkc./......k+....th......~%..u.C...n]..I.3.....@i....I?.}.J..]..3.?nv.....X........Om..`.h.!.!g..........p.4....B9.R&...d...........d./....O...).hg.....$o.......xC1x.E..y.;Z8...v..[s.R(..D..."..G.l.[....f.:....l&....d-g.\|.s..}9..X....8.....2@D9.n.........A9+.m{0........d...RJ.?/.r.H....x..T.t"T`._..}.h_BuvE ..e.....n....e...Z...Ej...........^.....W'.3W.E..W...2.../........3. (.]..'.fY.. .7..{7.NI/.;C...

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 449 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8437
Entropy (8bit):	7.924769298015021
Encrypted:	false
SSDEEP:	192:I7FaQ+3cdvRjB8gdqz2RrqIkNHOhIDX8aZwemCUSJ5aZM8o0:IF+uMgdqGqISfPKYJGMx0
MD5:	FA4F36628D1D284D3C2F8280F5B8383E
SHA1:	00D4093839798746FDAC0515A132309AC2115A61
SHA-256:	CF5E317D1DE438EEB4ECCE89560D38A8FBEFE426C50984652E51DFB37DA2AD66
SHA-512:	09696912BC8DF1C2C382260F36F2C66AAD3712A40C74F88B8B37F75B19BC2FB7258E5D182F8E95E7E856870120FD6826C5F9B32ADE7B63EE55E18E276C590560
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/loudong.png
Preview:	.PNG........IHDR.......B...../.m....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:1FB4E4B84FC711EEA7E2D8DF26ED85E9" xmpMM:DocumentID="xmp.did:1FB4E4B94FC711EEA7E2D8DF26ED85E9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1FB4E4B64FC711EEA7E2D8DF26ED85E9" stRef:documentID="xmp.did:1FB4E4B74FC711EEA7E2D8DF26ED85E9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...s...jIDATx..]}l\.q.w.QGR.t....1.8..7N...M@..'hQ.mZ....h.".T.p..E%.0..E.A.&.Z.h.X.#.....6....$.nM'.kI.lJ.)~....5

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3175)
Category:	downloaded
Size (bytes):	45694
Entropy (8bit):	5.118242929635633
Encrypted:	false
SSDEEP:	768:tpi7T07ytsSwuLFB3t8KbX3zrcW3HsBtuv3BtlK7vKH5v9u8kEFsW1:tpK1L5bTIByv9u1EFd
MD5:	8B2EA74C2950F702116F9B02ABC52BCB
SHA1:	AD7455A6E9F0D7E73BA4B80422EF805FC66F7879
SHA-256:	FFEA291B7D7F014FDC619350CAC7B5CECF876DD20EFB498EF0D915FE3AC4BA17
SHA-512:	942397EE9B53797364C02D073689CD3FC049E2EA7AF9D89F19608A61EBB76DA8A554D124F8BE99CECE74EB540806C9BBC383DAC238448D07A42DFC4D421B89A3
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.990.023f8bfb4104e9778375.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[990],{67990:function(e,t,n){n.r(t),n.d(t,{ClickstreamProcessor:function(){return we}}).var r=n(24178),i=n(32722),o=n(76588),s=function(){}.s.prototype.setDelegate=function(e){return r.SC.attachDelegate(this,e)},s.prototype.localStorageObject=r.tO.localStorageObject,s.prototype.sessionStorageObject=r.tO.sessionStorageObject.var a=function(){this.environment=new s,this.logger=(0,o.RG)("mt-client-constraints")},c={nonEmpty:function(e,t){return!!r.SC.isObject(t)&&t.hasOwnProperty(e)&&r.SC.isDefinedNonNullNonEmpty(t[e])},valueMatches:function(e,t,n){if(!r.SC.isObject(t))return!1.var i=t[e].return t.hasOwnProperty(e)&&n.indexOf(i)>-1}},p="overrideFieldValue",u=function(){}.u.prototype.constrainedValue=function(e,t,n){var r=e&&e.hasOwnProperty(n)?e[n]:null.return this.applyConstraintRules(r,t)},u.prototype.applyConstraintRules=function(e,t){var n=e.return t&&t.blacklisted?n=null:t&&t.hasOwnProp

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1386
Entropy (8bit):	4.8492224043496055
Encrypted:	false
SSDEEP:	24:Yorj8jYfQypuazl92Qypua5HR9Iszb9mPuazEBb9mPuaSlSfvBLRKkfkMqVlM:Y4XzZzlkZTyszbgzEBbg+SJRKtpM
MD5:	662EA2BBC39B50BCDCBE04DC2CD7A087
SHA1:	4705F797D3E54D7953493DEBA121A8B4C397060F
SHA-256:	BFA43BCF43FA6CED5E1AF0BA042098DA244E4441A9C1D53E4B7B0DBFE764B1C6
SHA-512:	7E9903DE3548135C5C17813B2438D337BB565CEA17E6C3A5A4D7FF4B3A197A67B9FA6A16296A13174C5FA0D2E77EFBEC019E816541E074ACDB764F88EC685028
Malicious:	false
Reputation:	low
URL:	https://xp.apple.com/config/1/report/xp_amp_web_exp
Preview:	{"blacklistedFields":[],"constraints":{"profiles":{"AMPWeb":{"precedenceOrderedRules":[{"filters":{"nonEmptyFields":["isSignedIn"]},"fieldConstraints":{"clientId":{"generateValue":true,"namespace":"AMPWeb_isSignedOut","expirationPeriod":86400000}}},{"filters":{"valueMatches":{"isSignedIn":[true]}},"fieldConstraints":{"clientId":{"fieldType":"id","generateValue":true,"namespace":"AMPWeb_isSignedIn","expirationPeriod":15552000000}}}]}}},"treatmentProfiles":{"AMPWeb":{"treatments":[{"filters":{"isSignedIn":{"nonEmpty":true}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedOut","lifespan":86400000}}},{"filters":{"isSignedIn":{"valueMatches":[true]}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedIn","lifespan":15552000000}}}]}},"compoundSeparator":"_","fieldsMap":{"cookies":["itcCt","itscc"],"custom":{"impressions":["id","adamId","link.type","station-

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 482 x 67, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6465
Entropy (8bit):	7.898204302995327
Encrypted:	false
SSDEEP:	192:u7FccQuFtHwXpffSpf1EReuISuAOsntHH8tgZXeS:uibuFNwXpInbCtAgZuS
MD5:	C4468FBF63A8AA99C2D49E1C9DFC53AC
SHA1:	719D9160F2E8F874FB5ECB8E7769EB6817BDD670
SHA-256:	2F216AAD0A3EBD4129D81E8BE1D322B99914C000C45F0C8468D9706FF5567974
SHA-512:	73C76085A0908193245CB863A1A09F44E8392011364BA62DC1E7DD22215BF278BA31DC0D218B0A472B85DD398FB1507FDB69C34063143C6D1663B5C4CF08E9C2
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......C.....@..\....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:CE7AE83C4FC411EEB826DC9D3681D04E" xmpMM:DocumentID="xmp.did:CE7AE83D4FC411EEB826DC9D3681D04E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CE7AE83A4FC411EEB826DC9D3681D04E" stRef:documentID="xmp.did:CE7AE83B4FC411EEB826DC9D3681D04E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>!;.W....IDATx..]].dG...=.3.?....&.... .Qp...(..M.>.>..b.%.>../.\|..Q.Dv./F}.~........8......$1q.......L.V.....u.....9.4

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	dropped
Size (bytes):	2424803
Entropy (8bit):	7.9715202133811625
Encrypted:	false
SSDEEP:	49152:aTLwT3cNXxZJp0FNysSNAYJDS9EIpWiX3UELUT0/wbeIdo:kcT3cn6NyspYH81Ui4pu
MD5:	14C0A01070573BC00E0F462023E8162F
SHA1:	8D8725F9BDBE99060B86E0A03434BB5C4E3BE8AF
SHA-256:	116029BD091EC390064879DF7DAD05E601E284413F53B9D51978875B85DC7471
SHA-512:	C8A6C5BCC48EE2D4F0A365886AC97407E8FBEF6E04502A68423F055730DC32BB91E9576A7ACE7557BA3597999E2545B1865033F8BB7E2F33FB7B392614B5B410
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........555.....!.].....5...!....w.}...T...fff.c..>....444.......)... ..... .)..............J..'..M.....O.....W..P.@@@.. ..... .U..[..G... ....Y... .. MMM.T...........C........E..H..'............ ..... .K... .. ....R... ..........7..............)..............B.....].....=... ..... .......9..G.....C.....U.....y..l..S.....S..@..O..Z..l.....8./......%..G.......&.......d'.....1.... ......6..6......y....q..i...[..2...W.[....J...........-..D....a....B./(..r...@.W.......(..6....?6...}.......P...........z...aaa...X..........N.t..}C....,..h..%......O....9.......H..=.......o^.......~~~.;..o..i..#..p5..s...OC..._.M..<._Q.....A..D......000HHH..g...qqq.F........4........y....<:9....>.....K....@6.YYY... .....UUUfS/TE0.... ..,..W..^....n"..(.h#..O.s..........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J.......v...P....T..X.j...U.`..{......].mM.^..K...p.............[.'%.....A...L...g'_

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 220 x 62, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5185
Entropy (8bit):	7.866605228776372
Encrypted:	false
SSDEEP:	96:so7F52LitrF90OZWvtUnDuftoq6BFqBY6U1P+PoLjbnW09kLswR:B7Fb6OZ1noCq6BS1UPgsbKIwR
MD5:	4363600101CB88D4BEFA3FE58DAC2E20
SHA1:	61816970C0915203DCA7FEDA7B29D51D2560892C
SHA-256:	B5F11FE8B659F7207DC376BC18B7CBC98C769C59EE19162D09E416BF1761D7C8
SHA-512:	CD22E13B115CC5E1D20FA375220F0199CA042C634E7E5D82535338C691410481E22D5085AB7A669B2FFD2776131071C39385F2E43421DDAB1562FB46EA49437F
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/zixun.png
Preview:	.PNG........IHDR.......>.....@.u.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:03B24E754FC811EE820BEA59DA5A13D7" xmpMM:DocumentID="xmp.did:03B24E764FC811EE820BEA59DA5A13D7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:03B24E734FC811EE820BEA59DA5A13D7" stRef:documentID="xmp.did:03B24E744FC811EE820BEA59DA5A13D7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..]m.\U.>.;..N?.tH..h.-...`f...Hb..@0.m....1....t.D..?v-H....cl...&.h.;J4...@......kfg.^...-g....sgfw

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	downloaded
Size (bytes):	2202471
Entropy (8bit):	7.979052935208376
Encrypted:	false
SSDEEP:	49152:6vlOdSROHsszcNNbDPEZbaseHhV0G80Y/Ren4gzGJI:6vlklMszgNbewHT8fRXdK
MD5:	9F6CB1E0D2A29541764755E05B484DE7
SHA1:	D443F92ED7059A30DB98857F6C5C290589EBFE24
SHA-256:	ABDBFC359A2954FADB7D335A20C2AE29CC5B00DBD538E88B03D612F978654E45
SHA-512:	8C5C6FA02B9B16D781C40FB0E124FC3E7B5C16A67FF131AAC73D00A2D1A453B8E56145F9639896F4A3F33DE3150DDF128B9474FB3BD65EBF14FD1AA1F9E728D8
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/d2.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,..........~h.]... ..q>9-....vb..'.......5...\|3+....NMM...5/ .....!}.....c[J50!...=8,2........333...=8-..&.}g..........{e.xb........ GA3....."..%....ydnfS...B</QK<......$..yp\........!ZTE.T.iaOLF8....>...$..$VO@......}t_..#..qvmY..m.I..."...rjVZYY..... ...f^M_XG..z.E..va$...Y....-.0'......C..vgff.&.....O...9..........{.uiB.K...+$.../..y....:7+.x...MLL......_^^OF,...i[+...s...RQP..).m....:.XN+..,....Y....i.......5...5..4.vf+.......E...'..{.1..v....T....2zR.......\|{{....l...X..K.>.---...O>...c.u........b`T+..(..-.U4/..d'.#....sss..0.....\E..]..~........B7..-.-...]........gF..&.......n2.~>g.....3....J....B.Y=5&.....B.1.^.3.'N...%..d.c.>4..g...g[>....'kkk....4..[.tG...@..A,.....q.}P.....h.v;.........C..]Z.......S....Lv$...L.;.........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	100745
Entropy (8bit):	7.976541051391702
Encrypted:	false
SSDEEP:	3072:BG57Qns5av+1PRyUu4fyNj1/Nsn2U1NgA:wEs5s8ocyn02AeA
MD5:	F4DAAE2EF198326B8D82B5EE3AEB36E1
SHA1:	D4FEDFC00D6CD03A36EFBE54713F23128EE5413B
SHA-256:	F1666F4DB4E2BBA5FF06BDB1998889889B024F9A1DFD324DB0751C4FB9424ACD
SHA-512:	8429420CC85AAE11F8F82B4AEC48D1FEAB591EFCCADD15C6C79C26AF3D2BA4D65D49EDC02F394FE59494CF25C27869621E077B78D3EF7674EFAAF78ABC9252ED
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................................................................................................................".........................................j.........................!.1A..."Qaq.2...BRt......#46Urs.....$35STbu.........%&C....V....DEcdf........................................>........................!.1AQ.."2aq...3.#BR....br...CD.4S$..............?..I.@H..;.V..P@.B..S..X.&..4 FP.! .!.!.@.B.......9..\.....N.."m..Yc..A.a.8s.....eu..1W....]VH.M..3].!.C@B.... .!...B.B...`Y-@K.2...IY.d..E.Y. .aX...D.....;.sw...F..{..HaO4.l.l=.t}..F..K...aq..[6.T..<7.l(.......[...5..s.<.....vc.wF.c`..I.g...ST0F.z....1x....1....V.[@V.Q.I8s.=..l.`9..b.h.L".;.<.)....:.....`..$._.Mm..zL....;).\.....H6.:f...n......t.Z..mV.......V;O...5.+].h.l....j......H+..j........ ........lPA.F.[k:...1..y"../......xam...5;..A...h.m.`.........I.7v+X&.x]".L.-;.Wh..b8.W.....<P...B.....b.fZ.}=K.pFH..wE...oZ.,./...].....Xh,........"

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1024x536, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	18362
Entropy (8bit):	7.988947886433394
Encrypted:	false
SSDEEP:	384:i0aky3Ovz62n5A+TfJf9MP6gqQB/kihJlB3xpMFmB:qkye7O+7JlMCo/kihJlB7MFmB
MD5:	978E1C5E539080FED9C815C2F81D77AF
SHA1:	3F947C86EC59C52FCA3AEDF986A1382664D214CE
SHA-256:	D2EE99B26C8C6B935B44055E4551CDD79820271757A03A871F3A890957586BBC
SHA-512:	2DB95B0082BCA7D237B12A838EE7B0A4641DE9440B353910AFC7B743B8976571806173CB9FBCB750012C5134FC3013AA59A0A5F95B996CDCB8DC9920CC3A3120
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/canales-telegram-1024x536.webp
Preview:	RIFF.G..WEBPVP8 .G..P........>I$.E.#"..$\|@....p..Uk..g./.\|8......q.?0..{..?..\|.g.ci........~X.I.).o..........}.?t}Z~...{..]...B........../.O.g..g>....G.... =]........`..f..\|..'...Y..o..B.......t.}.......x}..O.....c.n...=.>.......H.z.1.Ol.$...`.LiS.0.&7.R......I..p..{f.$.=...cJ..e.@86...et'.....T...I.{f.$.=.Y,r4}.......=.Qe.M..`.LiS.0.&4.....s..n.8.SEK.k....)....S.....)..a....IV.Py..../..6.&.....a.9Xk..n7+.i..H...N.8...#l."N.HkUUd....+....t.c..Cz'.........:....-..w...\.Tp.'...;......e...3....{o5...n~.m....Oh...k.36Q-{....$.G...w....X....;I..I......V_.1...d. ."..E..C.H\|....i.:w..Ij....`!")....}P>....6".}Zh.t....zy.g.V...-.5?~..R..R.h8{f.I5....N.kf.$..........0...C.....>....F..4?D..C...4zw.~J........g.fT...I&?cB..f.h..2~8y..@....I. ...}R..=4f-!....g....^...#R.....RcJ..&.4.rB..;.).\.J..@G...q.....B...$sj...h.#........nS........3..cH..\|....H.Y.[h....yx.3.......".H.h..-....?%.w....v.0.B....X.....w..n.$..Zn.(=.............[Z..Zs.wyv.&..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (45951)
Category:	downloaded
Size (bytes):	150811
Entropy (8bit):	5.880247679052543
Encrypted:	false
SSDEEP:	1536:u3T1baprfHqyVIOvhsXDD1XSxrqduH8fGetBLQaRY+dExxXGMZj/LT8oX4WvY:4b8rfqA7pW/16QWQ
MD5:	A772BC2B8F858A8081ECFB3B232B06D9
SHA1:	623D84C086686A8E235D484A33EF564B9257F697
SHA-256:	9C657431059EC43253D68D6B85ADF698FF3DF61B6C9E02B9F51B049BFFF9E689
SHA-512:	00584AAF0AADD48442F6506CF2EA22C770E88A30E6FF498CDB54492702F12E52CC305A792026C8281A75B4C3072B4731031225E0D43714C2D1C74C5718873A40
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/cn/app/telegram-messenger/id686449807
Preview:	<!DOCTYPE html><html dir="ltr" lang="zh-CN"><head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">. <meta name="applicable-device" content="pc,mobile">.. <script id="perfkit">window.initialPageRequestTime = +new Date();</script>. <link rel="preconnect" href="https://amp-api-edge.apps.apple.com" crossorigin="">.<link rel="preconnect" href="https://is1-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is2-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is3-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is4-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is5-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://xp.apple.com" crossorigin="">.<link rel="preconnect" href="https://js-cdn.music.apple.com" crossorigin="">.<link rel="preconnect" href="

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1278)
Category:	downloaded
Size (bytes):	1359
Entropy (8bit):	5.176207274217756
Encrypted:	false
SSDEEP:	24:wWKXZ68FrXAy+W+vuwaOqX6AxD51x/BjiCY61RyETurgmWkj5589+p9i:qXxEzLvGOqX6Ar1jLTyBWkj57p9i
MD5:	F5E63BD61D061E63482B1D4DF3768EE4
SHA1:	91DF0BCE4537E6B65FE380F4F6DB9ED9DBE95A41
SHA-256:	ACDEBF935DED5CB063DCCA7C46BE5BBC503AF5E76E295F6D0B7093C4514ED256
SHA-512:	EA99E35812F3ABAC9B598AED7B608F8A78B342D04922FCDC775390E87FA238891728F7BFD6B8E210580FDD332786FB7FDE91F0F10BACAED872BB00610E315A6E
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min.js?ver=5.4.6
Preview:	/*. kk Star Ratings. * @see https://github.com/kamalkhan/kk-star-ratings. */. "use strict";!function(t){if("loading"!=document.readyState)return t();document.addEventListener("DOMContentLoaded",t)}(function(){var t=!1;Array.prototype.forEach.call(document.querySelectorAll(".kk-star-ratings"),function e(n){function r(r){var c={rating:r.getAttribute("data-star")},i=JSON.parse(n.getAttribute("data-payload"));for(var s in i)c["payload["+s+"]"]=i[s];!function(e,n,r){if(!t){t=!0,e=Object.assign({nonce:kk_star_ratings.nonce,action:kk_star_ratings.action},e);var a=[];for(var o in e)a.push(encodeURIComponent(o)+"="+encodeURIComponent(e[o]));var c=new XMLHttpRequest;c.open("POST",kk_star_ratings.endpoint,!0),c.onload=function(){c.status>=200&&c.status<400?n(c.responseText,c):r(c.responseText,c)},c.onloadend=function(){t=!1},c.setRequestHeader("Content-type","application/x-www-form-urlencoded; charset=UTF-8"),c.send(a.join("&"))}}(c,function(t){var r=function(t){var e=document.createElement("d

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65447)
Category:	downloaded
Size (bytes):	87553
Entropy (8bit):	5.262620498676155
Encrypted:	false
SSDEEP:	1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO
MD5:	826EB77E86B02AB7724FE3D0141FF87C
SHA1:	79CD3587D565AFE290076A8D36C31C305A573D18
SHA-256:	CB6F2D32C49D1C2B25E9FFC9AAAFA3F83075346C01BCD4AE6EB187392A4292CF
SHA-512:	FC79FDB76763025DC39FAC045A215FF155EF2F492A0E9640079D6F089FA6218AF2B3AB7C6EAF636827DEE9294E6939A95AB24554E870C976679C25567AD6374C
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1
Preview:	/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(ie,e){"use strict";var oe=[],r=Object.getPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i,o=(n=n\|\|C).createElement("script");if(o.text=e,t)for(r in u)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.remove

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	dropped
Size (bytes):	3327196
Entropy (8bit):	7.960651343982663
Encrypted:	false
SSDEEP:	49152:IeR3w2GydSueIfKAwIkgMgOgGGXL/nUQlf5tXAS3mTvYIIjrLo8U659kP:IeR30yd91frwIyCGGLnUatXZ0comq
MD5:	3CA4222D4871D2C299E44DBBD14EBB46
SHA1:	19EE2E1C0D6DA440C08076DC1A657C8E58AA0662
SHA-256:	E21CCEB8262A91F878FE4E5202139793E9CD3A02DA2DD08D2DC4180CD29AC402
SHA-512:	4D54E6AF4755363DA902D0AFAA0160AB2847506EAF67E3C34B6B627650EC4FF8FC0719F50B59AB8A1723F4A216031156979C39294AAACC080104B61447ACCE87
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.............5..2R.. .......]...'....X...!.......X..VTV..}......W........W......&....................%.....&........%........&..#........".j.........$.m...... .....!..".....!....]...#..#................Cm....[........T..s..`...".y...$.v..c..p...........{...7.=...$..C.Y./'..f...'.G...".N.....F.....Ix.7..>....~..Z..6Y..@5... ^N..<c.[.....%....S.....Q....R.......$..OB..M...Q..jC.....].(...j.o\......%.....".g...6...........l...]....J...L.....6....'....x...%........!.R......w.....!.OM.. "f...........{.....<;..{......3.....0!?K.%&xd..>..FE.!.Y.L...T..r...G...I.L}o..Y.q...O./.<...Y.2pz.)....d..<[.i..T...f.e...eT...A.".'....r.`.p).6..A..u;yF... ..bBxt..0....#B"...o....9?,.U.O.<dp.xIdm].h/..3`9..}>?IBlJ6.7P....}`3aV9\|tS...Q.MN>^...........e...."?...-.........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@.....Q.D.*]..S.G.>.J...(.Fe....`...U..h..$.U..p.d+U..x...kT...........I..F..c...>.L.r..3k

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	733
Entropy (8bit):	4.7574006224426535
Encrypted:	false
SSDEEP:	12:YGKzFDsip968DDp8MIfE1lI11I1581f58zrF8qWKxk8IV5wDKOBuGpQJNGzF/BQU:YdxDsinqMIqlI3I1y1fyzr+jcdD9J+Sn
MD5:	CC64BFA00B4B3FF916A983A0C27DEA58
SHA1:	62452E81D49DF7E3EDAE74AE32A3E9A613DCFE86
SHA-256:	67CB92C8D3E193BCAC15DEBC8CC34C5D2CE531C9A13D037EBFECDC662679215A
SHA-512:	C6D1D59F4D354EF39AA6D59002D23AB6AEA977CC3B68FE9A6D0821FC0C6EE279390A35B8DB2E7E8D39C913694811CEF04763452D8075C63722700E2B5120F3EC
Malicious:	false
Reputation:	low
URL:	https://xp.apple.com/config/1/report/xp_amp_appstore_perf
Preview:	{"compoundSeparator":"_","fieldsMap":{"loadUrl":{"timestampFields":{"fetchStartTime":["fetchStart"],"domainLookupStartTime":["domainLookupStart"],"domainLookupEndTime":["domainLookupEnd"],"connectionStartTime":["connectStart"],"connectionEndTime":["connectEnd"],"secureConnectionStartTime":["secureConnectionStart"],"requestStartTime":["requestStart"],"responseStartTime":["responseStart"],"responseEndTime":["responseEnd"]},"otherFields":{"requestUrl":["name"],"transferSize":["transferSize"]}}},"metricsUrl":"https://xp.apple.com/report","performance":{"samplingPercentage":0.25,"samplingPercentageUsers":0.25,"sessionDuration":60000,"samplingPercentageUsersPageRender":0.25,"sessionDurationPageRender":60000},"postFrequency":5000}

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 379 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	7338
Entropy (8bit):	7.916537824803543
Encrypted:	false
SSDEEP:	192:U7FapgFb7YsmpnrVb4z0YfJglnNKVc8g87aMyF/WLpMvp:U+hnnrVbi0s0n6c8PGF/Ec
MD5:	29AA484035D8D4FD023AD98E8058B5E0
SHA1:	DB8B8F90A00BAAFAB093D93E6F7EEC61A68B160D
SHA-256:	581114BF2545DD0C1E3FF8A6D16D7B2BB66FCFD58FEB3978F94A44E9E31A20E8
SHA-512:	91AEC339B4743DF1CB90FAD7486F74BA09C12A164F0B953A6D59B3838B4FE40DB25E9ACFBF7BB40B826937BAF81EE9E86D25D75B9A1A1E1D15714EDCADD8A021
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...{...B......<v.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:978B0F8D4FA911EEAEC8F9B45E82BBA7" xmpMM:DocumentID="xmp.did:978B0F8E4FA911EEAEC8F9B45E82BBA7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:978B0F8B4FA911EEAEC8F9B45E82BBA7" stRef:documentID="xmp.did:978B0F8C4FA911EEAEC8F9B45E82BBA7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>O.DA....IDATx..]}.\.u.ogwm/....1......4....V.. ..C.4 .A..?.TH..+..".JT..h..)....I *V..A..V.... .D...T.c.!...9..<.z{.

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64931), with no line terminators
Category:	downloaded
Size (bytes):	1005958
Entropy (8bit):	5.432490905264395
Encrypted:	false
SSDEEP:	3072:Ot0Ebp2itYQmgT5APul8KFIVChBVbIjvOmCC/fYUasWtHOKbP87VDu:jitYQmgTjROKbP87M
MD5:	D613C48C13E83A15AE24E866B295DB83
SHA1:	680F6B2913E77957CBBDE5D67D89C9D6F1478C08
SHA-256:	2C8B4603588B07529A7993AB5AF5B4BD62B5918EA10F480A49677F89CB6452A7
SHA-512:	B1A0329443D498AFCA72CAA17935ECB92AB45EF5A704F993848B3D85957E8B6D8B42178B7EC96EF61DBDF38A6B22A29459EB13B873C2AAE4CD9C39883AE4F7CF
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/web-experience-app-real-d613c48c13e83a15ae24e866b295db83.css
Preview:	@charset "UTF-8";#localnav-viewport-emitter{overflow:hidden;position:absolute;top:0;left:0;width:0;height:0;visibility:hidden;z-index:-1}#localnav-viewport-emitter::before{content:"ac-localnav:large"}@media only screen and (max-width:1023px){#localnav-viewport-emitter::before{content:"ac-localnav:medium"}}@media only screen and (max-width:767px){#localnav-viewport-emitter::before{content:"ac-localnav:small"}}.localnav{position:relative;top:0;left:0;width:100%;height:52px;min-width:1024px;z-index:9997}@media only screen and (max-width:1044px){.localnav{min-width:320px}}.localnav.localnav-stacked{height:66px}@media only screen and (max-width:767px){.localnav{height:48px}.localnav.localnav-stacked{height:63px}}.localnav-overlap .localnav{margin-bottom:-52px}.localnav.localnav-stacked .localnav-overlap .localnav{margin-bottom:-66px}@media only screen and (max-width:767px){.localnav-overlap .localnav{margin-bottom:-48px}.localnav.localnav-stacked .localnav-overlap .localnav{margin-bottom:-6

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15344, version 1.0
Category:	downloaded
Size (bytes):	15344
Entropy (8bit):	7.984625225844861
Encrypted:	false
SSDEEP:	384:ctE5KIuhGO+DSdXwye6i9Xm81v4vMHCbppV0pr3Ll9/w:cqrVO++tw/9CICFbQLlxw
MD5:	5D4AEB4E5F5EF754E307D7FFAEF688BD
SHA1:	06DB651CDF354C64A7383EA9C77024EF4FB4CEF8
SHA-256:	3E253B66056519AA065B00A453BAC37AC5ED8F3E6FE7B542E93A9DCDCC11D0BC
SHA-512:	7EB7C301DF79D35A6A521FAE9D3DCCC0A695D3480B4D34C7D262DD0C67ABEC8437ED40E2920625E98AAEAFBA1D908DEC69C3B07494EC7C29307DE49E91C2EF48
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOmCnqEu92Fr1Mu4mxK.woff2
Preview:	wOF2......;........H..;..........................d..@..J.`..L.T..<.....x.....^...x.6.$..6. ..t. ..I.h\|.l....A....b6........(......@e.]...:..-.0..r.)..hS..h...N.).D.........b.].......^..t?.m{...."84...9......c...?..r3o....}...S]....zbO.../z..{.....~cc....I...#.G.D....#e.A..b...b`a5P.4........M....v4..fI#X.z,.,...=avy..F.a.\9.P\|.[....r.Q@M.I.._.9..V..Q..]......[ {u..L@...]..K......]C....l$.Z.Z...Zs.4........ x.........F.?.7N..].\|.wb\....Z{1L#..t....0.dM...$JV...{..oX...i....6.v.~......)\|.TtAP&).KQ.]y........'...:.d..+..d..."C.h..p.2.M..e,.UP..@.q..7..D.@...,......B.n. r&.......F!.....\...;R.?-.i...,7..cb../I...Eg...!X.)5.Aj7...Ok..l7.j.A@B`".}.w.m..R.9..T.X.X.d....S..`XI..1... .$C.H.,.\. ..A(.AZ.................`Wr.0]y..-..K.1.............1.tBs..n.0...9.F[b.3x...$....T..PM.Z-.N.rS?I.<8eR'.3..27..?;..OLf.Rj.@.o.W...........j~ATA....vX.N:.3dM.r.)Q.B...4i.f..K.l..s....e.U.2...k..a.GO.}..../.'..%$..ed..'..qP....M..j....../.z&.=...q<....-..?.A.%..K..

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1024x576, components 3
Category:	downloaded
Size (bytes):	68960
Entropy (8bit):	7.968075827470143
Encrypted:	false
SSDEEP:	1536:6ak6NOdAihzLzTs+QEAF374tJiyPLqA/6BgFRkVq5qGtnzx+zoPl:+0iBzTs+QEAF374ZG+6BtVovnzxGW
MD5:	E5A6B7DF7DA830C9FD4D213961B2E6FB
SHA1:	1D6569A4C8496EFC3C2F031F21F9EC434D1C2CD7
SHA-256:	3525B7FAD1A8DA3795FDE119095FC16FCB6F02383F162F68722C6B96FDCBE0BA
SHA-512:	B4C36FA24F3D6BEC18B499E3AA9D8EC29C948234B8EF6EADE7AF6BB1D6941D3E928FE17F5D596A88C858AABC80911DDC95366BD4A9BBD550381E59E1B04112C0
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-2024-05-14T065012.987-1024x576.jpg
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$......@...."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..1E-.+.c....("....(..)..i1N...)...r.Rh...Z)@.IH;P.i..6.@.....@........@E....X.^.Wj..5Q.......N^.c..:..z......YDL).VZf.R%.Z...@..Z.qI.$.0*9.f.QL._......(..4..Z+c.=).S.Jk.(.7.".gSS..CbB.).R.Sr....R.d.q..S..q.Q...11E:.U. ..H).)0..S...5H.Q.}......M.R.(B....Q..R.ZCLB.....0..)GJW%....%1.K..R$;..Fh..4Q

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	77466
Entropy (8bit):	7.994393970007788
Encrypted:	true
SSDEEP:	1536:2KsKwK2IQ2aU+yBmRPKuIXpmw0sb2YdmYYNC5hu17:1s3iQ2Rqmmw96YYNEu17
MD5:	02DAF211A48ED1F493EA452FB3E1CA38
SHA1:	949D1A75596B601C77D60B9A792DD1B571CB3404
SHA-256:	1969A35E31FCE2C06346BDB20BDC8EC121B1A029591321088CA02542EED462A2
SHA-512:	22A8C133A1854049BA4D0BACC4E442D4A056D70CC98DD187E2208C94DED87E903605A542C542AC4689D9D467571600837D37B0E1C53FDDF84E828D890C964DA8
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/icons/apps-02daf211a48ed1f493ea452fb3e1ca38.png
Preview:	.PNG........IHDR...,...,.....y}.u....sRGB........DeXIfMM........i.......................................,...........,.....`....@.IDATx......U.w.o?f.gz4#1.'zP..`....(.Qd....... v@2V..B0E.....c..8.`.C.#....QN...b.!..U.0..R y.H...tO.Lw...._k....A....V......k..........w..upp..M.6..d.N......&.M.6..d..l6..:.d`..;&.....M...l2..6k`..M...l6.;f.6.n2...f...M.6..c2........&...k..6..d....f.c.j..&...l6....d`..;&.....M...l2..6k`..M...l6.;f.6.n2...f...M.6..c2........&...k..6..d....f.c.j..&...l6....d`..;&.....M...l2..6k`..M...l6.;f.6.n2...f...M.6..c2........&...k..6..d.....QE...uT.....\|6.b....o2.G..4..u.1....&..........q}...my..x6..M.ba/..q3..E..O..M}.g.7..mN..t.A.....<..g.\|.a-.{x..n..u.,....d}..g.....7......e.=.-{...2...}..o....>..N ...f.S.i...l.~..l....V...lY.....k.]...gN...\|x..{.Z......}....W....}fkg.,..V[.....;l.:..%..w...8&.p0.....t.q.V..Y~.B.`.T..zt..KQ.>.9.X./...m.u..q..g...c$...0M..k...].k....a........av...s.p[...n...1Q.[....c.N...L

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1500x818, components 3
Category:	downloaded
Size (bytes):	65787
Entropy (8bit):	7.740000223975757
Encrypted:	false
SSDEEP:	1536:nVF1LxEusf1nMJ73natVTU496lQkNe2MqwZiOEH8Pf4:n59Io3aXQFTNKqwsqI
MD5:	AA6F1D3D0F04852331BCCDBE91682464
SHA1:	862C1D3E4B332EC0AF727BBBA333830C42A628B2
SHA-256:	B659AF8080EC9A8A3F4148BB17910CFA440D7BE7AFA3D7A2AE155C8C763D9B1C
SHA-512:	4EC526A282FAD0FEB9B31F01A30B139F5D0D617265E7D0F012A0B8F4A638A3484E26E52882822ACD75CC8BEAAD89BECC51F2D2F272B4EE0ADD16BF4204346696
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/12022.jpeg
Preview:	......JFIF.............C...........................".##!. %*5-%'2( .?/279<<<$-BFA:F5;<9...C...........9& &99999999999999999999999999999999999999999999999999......2......................................................................................`..............................................................................................................................................q....d.....................................................................jL3.e.....u./y3...gq......(:.......k@.................................................................P\|....^....~;n...e..a......y.W_...h<.{.}.....................................................................$.#...;n...{.....\e./.+/<.W.....9.)....^.............................................................................................................................................................................................................................................................................

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 15552, version 1.0
Category:	downloaded
Size (bytes):	15552
Entropy (8bit):	7.983966851275127
Encrypted:	false
SSDEEP:	384:HDKhlQ8AGL0dgUoEGBQTc7r6QYMkyr/iobA2E4/jKcJZI7lhzi:jslQ+LhUoTB0Qr6Qjkg/DmcJufzi
MD5:	285467176F7FE6BB6A9C6873B3DAD2CC
SHA1:	EA04E4FF5142DDD69307C183DEF721A160E0A64E
SHA-256:	5A8C1E7681318CAA29E9F44E8A6E271F6A4067A2703E9916DFD4FE9099241DB7
SHA-512:	5F9BB763406EA8CE978EC675BD51A0263E9547021EA71188DBD62F0212EB00C1421B750D3B94550B50425BEBFF5F881C41299F6A33BBFA12FB1FF18C12BC7FF1
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fBBc4.woff2
Preview:	wOF2......<...........<Z.........................d..z..J.`..L.\..<.....<.....^...x.6.$..6. .... ..S..}%.......\|....x..[j.E...d..-A...]=sjf$X.o.5......V....i?}.\...;...V......5..mO=,[.B..d'..=..M...q...8..U'..N..G...[..8....Jp..xP...'.?....}.-.1F.C.....%z..#...Q...~.~..3.............r.Xk..v..7t.+bw...f..b...q.W..'E.....O..a..HI.....Y.B..i.K.0.:.d.E.Lw....Q..~.6.}B...bT.F.,<./....Qu....\|...H....Fk.-..H..p4.$......{.2.....".T'..........Va.6+.9uv....RW..U$8...p...........H5...B..N..V...{.1....5}p.q6..T...U.P.N...U...!.w..?..mI..8q.}.... >.Z.K.....tq..}.><Ok..w.. ..v....W...{....o...."+#+,..vdt...p.WKK:.p1...3`. 3.......Q.].V.$}.......:.S..bb!I...c.of.2uq.n.MaJ..Cf.......w.$.9C...sj.=...=.Z7...h.w M.D..A.t.....]..GVpL...U(.+.)m..e)..H.}i.o.L...S.r..m..Ko....i..M..J..84.=............S..@......Z.V.E..b...0.....@h>...."$.?....../..?.....?.J.a,..\|..d...\|`.m5..b..LWc...L...?.G.].i...Q..1.:..LJV.J...bU.2.:\.kt.......t.....k....B..i.z+...........A.....

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	380684
Entropy (8bit):	5.188705236149285
Encrypted:	false
SSDEEP:	1536:ayi8ZHMCbS/SgVABEILJPptpJKztM6oyi+MOn4y2Ox5juDEnXrDJc7MsByDh+TzR:ayi8ZiSgeB1SoyJufvJckQohN
MD5:	FCF38A570817128BEDD9A271806528E8
SHA1:	038412FA53DF5548B81A3CC419E9C827CB85A040
SHA-256:	05B373AECBA402509752252B9CFFF73A326769B38D05E8BF3FA6125AEF203A4A
SHA-512:	C2F3CB77230DD0F858EA625EA671A4BA55CE6F6E26C0621954E609F942A01CFBFB08AA0D93E534E6C6E8FFEFFA33906F638ACCE92BA426FD8F2353256026E95E
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/5352eb4f/www-player.css
Preview:	@charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-font-smoothing:antialiased;-webkit-tap-highlight-color:rgba(0,0,0,0);touch-action:manipulation}.html5-video-player,.ytp-contextmenu{-ms-high-contrast-adjust:none;forced-color-adjust:none}.html5-video-player:not(.ytp-transparent),.html5-video-player.unstarted-mode,.html5-video-player.ad-showing,.html5-video-player.ended-mode{background-color:#000}.ytd-video-masthead-ad-primary-video-renderer .html5-video-player:not(.ytp-transparent),.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-mode{font-size:17px}.ytp-autohide{cu

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 840 x 487, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	189734
Entropy (8bit):	7.995418777360924
Encrypted:	true
SSDEEP:	3072:qKCCO9mMyY1K6SCUQB4AxtinSEItHFDukVnxJQTu6r6R7NApp4rFDwGIQ:nzOkMy97CRR3Ljn5n2uYgGkKQ
MD5:	40D4266E5AADC87CCEEC1AB420DC2692
SHA1:	266C56990A106B6E9EFB0F9EF2A1A752AA6FA0FC
SHA-256:	3A1D4890B3E91A01C20C65B75F1AE028E3C445CAD1FD2D249DD0868876DFE4B4
SHA-512:	7DE32DEFDD87034F29930A7A32915100C2A109A80C79EED4C0A5F3127D1101FE0BF59B41CB4C5807F6FEA29A7721EBE74C55A8A4942C4EF67EDC40B860F46277
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/td_laptop.png
Preview:	.PNG........IHDR...H..........2}.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx....%gu...p.9..{.hF......H..D2\..?0.m.`..y...6.e..}..#...X.....X...H..@.......S....V.L+.hF...R.P......$......x-M/..r.NK..ko)..(..(O...)....v......x.v.S....).H..t-M/....Q.EQ.EQ...h..M.HB.....F.S.J..L..4.H.UQ.EQ.E9.../h......M... =I...\|).I..(..(..t.i..\|.7.....Nq..T...7.EQ.EQ....hz9...v....C.]A...)...(..(...!\|......O..yb.h.....#EQ.EQ....+)_....Q.....+..+s..EQ.EQ...$....}.{wiW<~........EQ.EQ.#....h7.@:\.W.@Q.EQ.E9.y..W^y.v...C..d....'.EQ.EQ.....]...P.2.3EQ.EQ..(......5...P.EQ.EQ..V^y.'k7.@:...].(..(......I1...P.EQ.EQ.~U...j....(..(.QDY.@...(..(..(..$EQ.EQ.EQ..H..(..(..(O..v..I.D;AQ.EQ.EQ....IQ.EQ.EQ.E...(..(..(..$EQ.EQ.EQ..H..(..(..(.B.4.!.J%.[.N;BQ.EQ...e...h6.....f...i..5o.....^.q.C.G1:A.R.F.Q...(..(.R.q.....c..d...^..uX4{_....]....AP..d.,.{..vI$.(..(..,C,E.M..^..d?1....~....EQ.EQ.EQ..H..(..(..(..EQ.EQ.EQ.Es.......G..EQ.EQ..7...$EQ.EQ.EQ..H..(..(..(*..EQ.EQ.EQT )..(..

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, comment: "CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82", baseline, precision 8, 1024x558, components 3
Category:	dropped
Size (bytes):	46879
Entropy (8bit):	7.758873077168859
Encrypted:	false
SSDEEP:	768:btGvJ4vWEYd9kzBMqHc02ztBAzGKA2a5GjIxNedXYFvMl78rd0R6+Rz/ScUE4o:btGWvxYduERBvKA2a5sIve9H98rdSDn9
MD5:	8D8772ECC5D80F5D77D10BF6F9260024
SHA1:	E903BCC6A0787B30B93B0C18C950E73E3358B667
SHA-256:	F3BF4ACA89FF00CEECBA3B1CC7C2812E5E6F0CCE3E9D2E65BA4F2A44B4BA361A
SHA-512:	AA7EE344B7AE789F1EB4ABF4EA50E70431694F92BE020EC8D19E50237CBCA93D6DC0E491C07259C82BD100FAE8DE219BCA5E281E44A348FBE27DEA678134E120
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82....C.....................................!........'.."#%%%..),($+!$%$...C...........$...$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz....................................................................................?..R.(.....'.......u.hd.+......z_...E.../...;\.U.oFS.?Z...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(...(....$..*;

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1282
Entropy (8bit):	6.812115332319578
Encrypted:	false
SSDEEP:	24:Wn1hmYaWwjx82lY2T3XVLKCkMyJ3VEUX5UVGuhVExIdvnFeA0z:gMYLNn2DZKvfJ3OUiVLhVExFx
MD5:	1AD800A637BB5ABAB82CB874736A4314
SHA1:	9AE8ACD3AED4E4728EBBA2E8FC9AA6F57AE741F4
SHA-256:	F2CED12D8B4A6F16578FAF0A46F2665D6E1C8CC23BDCAC64AB3E04AFAF8F2AAE
SHA-512:	5B3F2C58D1D820A16F76B7D015F0858C8BD77DAE49DE14A4732613E1835F5754856E1A6396B098173D52F037ED037F2BB84ABBE28EF72056E5FD7DF56EB69B11
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/pingguo.png
Preview:	.PNG........IHDR..............K.v....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:284A6D1B539011EEAE8B825C3DC15B6D" xmpMM:DocumentID="xmp.did:284A6D1C539011EEAE8B825C3DC15B6D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:284A6D19539011EEAE8B825C3DC15B6D" stRef:documentID="xmp.did:284A6D1A539011EEAE8B825C3DC15B6D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4.]`...rIDATx...K.@..S+UD:..Z\...!....uq....qH..A...Z..:. ........*...H..P............&...].......+..Z..5.agJ.

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	112510
Entropy (8bit):	7.985977921091217
Encrypted:	false
SSDEEP:	3072:8J8ywCWkLG/o1c1g+ZESAl3AfMnwjHL074:k1Tq/o2VZExQfMwa4
MD5:	0C97BA715B8E96A4F43905F8D1D042B6
SHA1:	83399E9892022E8EDCD29F430C9C22B6AF1451ED
SHA-256:	96654FDE3632E7D77365C6851F36BAC06FB7BFA10EE42857E147BEA8536AACFC
SHA-512:	362447CDFB62773879EB336069B29A1E74470A0348C744125374359B80EBD96934C38783BE668106F713585E349B7E4D77964315B7E54F070A76022A67791FD1
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................................................................................................................".........................................a.........................!..1A..Qa"2q....#Bt.......356RUrs.....$%4STb........&Cc..DEdu......e.................................J.........................!.1AQ..."aq23....#BRr....56S....%4bs.$.....DTcC............?..X.NbO...tSZ.&3) ....SW_w.T.Iok,Z...y...k......A......>..f....'n.D....!..c..t+".T..f.....2..`$......QSY.$.E`....%%..d<..JwT.F..b.....R..y.A.4'BM..........E.!. .zH(H.S9....j...t.....r .$..P.e,..@...wMH.9.!...I{..r.....X..G.F.F.C..XpRJA.d..5%`.NI.ro0P&..g...(Al..W.8c$@:.P..........A.....H%,$9U.......$C.JS.J.....D..h...R[..W....WJx.LH\.P......>".jb7)..lE.)N....x.j3.....s.....ScX....,.\8.yt.T..j.+.*#e...2`.IN...b.......}.IXN?.../...."[...NM.d..8.yG.+...2..Lmof....y....39.....S...;G..a.^I...B....:>5m'..W.b.gU ..q...........O.6.u....Y.`...M..Rm....R....

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1609
Entropy (8bit):	5.268171846580519
Encrypted:	false
SSDEEP:	24:hY6sv7zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5zF5cUehk2:3q3+pUAew85zvc/hk2
MD5:	20D444971B8254AC39C8145D99D6CA4C
SHA1:	72E41F2A340F4A6E3A748CB57D293631390B733A
SHA-256:	A04F41837D317573EA61EA29ABBA7C4FF4E38C9177DA68F4706B9C13921A8D82
SHA-512:	BEA16497D014481EE10EB80A129846B7B184AB1ECA242FA38B84255C6461C748A62F1BD6C15D1807F8B5E926E550C30AB47F8A40AE43BE229E6AB857C4EA6F6F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 405 (Method Not Allowed)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:u

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	dropped
Size (bytes):	2002471
Entropy (8bit):	7.980025595488585
Encrypted:	false
SSDEEP:	49152:Q9I1skJEpF7xMJjZb/lII8XKTb9dZpmKcFItbP:V1s8Epm/n8aVpkyFP
MD5:	6A88BBD5858B7D9234FB7D0C6C5059A6
SHA1:	C3412D69DFA2CE6B208D52E6842EA7807CFF42D3
SHA-256:	F8152A8D500807F824571C3256320BBF578CDCE88D45D0FD048A6422F71C272B
SHA-512:	F7AE19293C681636C1D32F7D4391633B1E0BE4AADADE5E874A9D7D48AA1880A02F39F8794E02AA35C61987D25B2D18A0AE28099D202502E6413474E4D445C7F2
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,......................5.......;KK..'SEV....].....W......w........)......!RDU:JJ......r..M^^...>PP{.....HYY\ll\N^i{{_ppw..9KK..vtdv...CSSa`K..#WIXewwUggm.....Qbc.y...!....................M.l^n.T..............O..=..4.....`........V..q..Z.....J.............\|m~.D...&....9.Vii=MM....:..........u..........`sr....?.............bTeFVV....W.....5...$.a.........\|....o...............$..fXilxx..?5.....j........."..............y...........\|.................!....QG-......#A..4_v0&.{s^MNC.B.Vaa.3..Q.....\.........B.._O..k0..uqo...Gy..@ ...x=...md\.w.p...F$..k.f.........^o....gg........aX..o]..-....x......G.~,eC9&&&.....p..A.....R@..[_....t..;...u..;..._......AA@.Z...93...H0......@.......[(...n.....[..{8B8...^..JNYx...3...`U@..y..>...P@P.R......r.b}.]..Y.........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L.....-.

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 99 x 105, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11995
Entropy (8bit):	7.962832512047426
Encrypted:	false
SSDEEP:	192:g7FQE4KCjt6CY7H4Hb7n+K7Gp7fQA3ILS5KVeu6t2vHHuXpPay1NX:gyEnUUL47z+K7GhfQA3X5Kg8vuXLNX
MD5:	A67BF830F0746E7EDC199013A5FBF7FE
SHA1:	C6EC3AAB180496F4815E5F1713112B2A8D9C5A23
SHA-256:	BBD2FB3FA5AC33414E3C3EBF9093863B41DE921347C389466956C8BA5BE7FCD0
SHA-512:	BB07EA1D31A1C05206FE5195FC5D77F39B0EF2EB7ED6BE3736C6E3F386D60E60559E5CE19BDCFFCA03F0D67B4C3ED2784A1F33B7E3D6264997D1DDE75BD1BCEB
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/jiandan.png
Preview:	.PNG........IHDR...c...i.............tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:C88819194F3F11EEBB7EF4CC1D96585D" xmpMM:DocumentID="xmp.did:C888191A4F3F11EEBB7EF4CC1D96585D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C88819174F3F11EEBB7EF4CC1D96585D" stRef:documentID="xmp.did:C88819184F3F11EEBB7EF4CC1D96585D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.._...+PIDATx..}..^Uy.s..:...$......."....@.]K......n.R..j......U.k)..(. "......,....>.z....s.73.L..BH.;.3.~..y......

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	dropped
Size (bytes):	3145277
Entropy (8bit):	7.953143514728729
Encrypted:	false
SSDEEP:	49152:CemZo1qgcCRvd01jW8Ww32uqinShq264q6PfzRhmpt5ZcB6Ioo9hl:CVoQ4MjW8ouqiiq264qiz3ouoo9n
MD5:	5433CF6CF6DAA107F38CC2F2B221ADC5
SHA1:	84156830CC0E51264342C37F2043C441562B137F
SHA-256:	321FB7936DADA76CE957347F61CD05BE88581C5C3532D5CF87D346BA677474F6
SHA-512:	DE25BD62C56F7529C96968B557D048F65F5B0E0427C94768D56D42EFE2E6B09F07A4EB0AC560BB05CD76A7C955BDC7EB8752BAA523764829F049791FE82F6F63
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.........[%....z..."n.....!.<..o....[$..M..... .Z$..n..k.[%..n..`.....g..\.Z"..m..!m....U.[#..b.d(..I..h..R..^.`&..Y.z..}4.g..f..S.[$..6..b.....m..?.m,..j..K.x2.b'.j,..?..L..k..P..Y..W..D..;.o..u0..o..h..e..:.r/..>.]&.._..R..F..I..d..7..B..8..U..[..O....<..r..x%.@..A..V..E..{.z2..N..........N..[..............i.......H....O......n.......H....D...C.B..o.>...i........v...P.b..E......]).........9..%.......................1.D..U........}7......}..^....N..R.........l> .....V:...).....jT...-..............n.vI,.V..].....\......\.......P.._GP!...\|. l...f...z.x...l7..i......{ic...x..d........<..............k.....g6.zG........=.............```......I.U.?....555...r\.....K..s>..w2.......\.{E.. PPP.pA.W&^....c..J.x...l0....p.r"..i...ppp..L.........H......\....#J.H....3j.... C..I...(S.\...0c.L8._..^........3...J...F3..B...P.N.....X.j.9..S.`......h.n..-X.j..K....n...J........@.b'......$.....&D.zuB

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 896x501, components 3
Category:	dropped
Size (bytes):	28049
Entropy (8bit):	7.758736018157201
Encrypted:	false
SSDEEP:	768:mqOrZc9grDWuVNENdoNL/QH5piTswaiNjTx9V/4xb:hOrZc23bNEXoJ/cLT03KZ
MD5:	3AA11F22AD97B6F4C37E2EB264786DD8
SHA1:	D1FF913A9678A0CCCF84BF05FA679F063F3A3EC0
SHA-256:	FA1F1D475D2E80D4E26F8C666D4E5B439A8526A3D355508E404C8057E58F3008
SHA-512:	82E4BE94A453B826847B4D582073945779ADAF4135417FB5386CEA51A64534432A2E5E3D647ACAC7E342B07466BEB3B4AF1C37493B02AA46719C48969C616283
Malicious:	false
Reputation:	low
Preview:	......Exif..II.................Ducky.......<.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:74DDAF084FA011EEAEC7C41735FC9156" xmpMM:DocumentID="xmp.did:74DDAF094FA011EEAEC7C41735FC9156"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:74DDAF064FA011EEAEC7C41735FC9156" stRef:documentID="xmp.did:74DDAF074FA011EEAEC7C41735FC9156"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9869)
Category:	downloaded
Size (bytes):	10413
Entropy (8bit):	5.257533978847801
Encrypted:	false
SSDEEP:	192:8nla2OCNzv/zCPfx1WY6Q8X4tYPNF9cxi3/lpemo+AW4mr+oaq5:8nl3OCRvbIfxkgUPRcxw/lpemoPW4mrb
MD5:	1B5686244F6C6516B3C0CB73B85DEB30
SHA1:	207E5F9CC6C80B1B84C18CDFA732A5C3CC43AE2B
SHA-256:	3A91FF301DBC45B9035E65C7CACB68C5C06105196AB82BDE6AD6970348F2D819
SHA-512:	73AC415260CAA2291E3F2A24393B226E1275A1981775E3AA4183B2ECC941872AEB3F1024756479FD56E26F3E27976607E576A835864892F547E17DA17A3B6A32
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.esm.js?t=1719422930691
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.import{d as e,N as a,w as i,p as t,b as o}from"./p-1ec6e574.js";import{g as l}from"./p-42d04e97.js";(()=>{const o=Array.from(e.querySelectorAll("script")).find((e=>new RegExp(`/${a}(\\.esm)?\\.js($\|\\?\|#)`).test(e.src)\|\|e.getAttribute("data-stencil-namespace")===a)),l={};return"onbeforeload"in o&&!history.scrollRestoration?{then(){}}:(l.resourcesUrl=new URL(".",new URL(o.getAttribute("data-resources-url")\|\|o.src,i.location.href)).href,t(l))})().then((e

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 810x410, components 3
Category:	downloaded
Size (bytes):	75593
Entropy (8bit):	7.975262430964009
Encrypted:	false
SSDEEP:	1536:zmzyWX+/Nhf3KHhJFrDD96SbQyuHcstkFWXf/yLL+TGs:6zjANliJFrkJyMSWTp
MD5:	BAE97AEF3715A58AA319A25632613ABD
SHA1:	462B4618E21EC38643B70491D730F6917AC9268D
SHA-256:	0DC36367A2980A602B5525F24A706A8D3D52B51369422926953DE33D8B283D75
SHA-512:	0EA611D31CBDF9138B2BBCA21050FF8EA811F5D6630CADD16DB5C06564AAA028CA823DB3AEB961BCFA406D0469A3209FE9058CBBCE9122DFC2EEACA547DFB8C5
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/telegram-groups-cn.jpg
Preview:	......Exif..II*.................Ducky.......F......http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 21.0 (Macintosh)" xmpMM:InstanceID="xmp.iid:7FE8156D28B311ED9DD5AC9D3B8F9FFD" xmpMM:DocumentID="xmp.did:7FE8156E28B311ED9DD5AC9D3B8F9FFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B65BCB5E284811ED9DD5AC9D3B8F9FFD" stRef:documentID="xmp.did:7FE8156C28B311ED9DD5AC9D3B8F9FFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..............................................................................................................................

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	downloaded
Size (bytes):	2700330
Entropy (8bit):	7.966932248745433
Encrypted:	false
SSDEEP:	49152:Ppp0RYYGh/a/0XHz/qBu6AKHloz7uR40Yjf0S/+AUhfgbsuPO7lQRqVUVI:Bp0hs/DDb61Foz7ky3+AkesuOBd
MD5:	21528F532493017CA7A8CDFA73BA1F09
SHA1:	798073FD3B30C0688787EDAC94667D6025B027AE
SHA-256:	3DA30018745EE9D2032BB71F2907A2FA3647D1660D402200D35F161854B0EF48
SHA-512:	D95F338D7FF896C524ED4BEBD1855E2A73A41C809AA44F86DDE0576EB6702B2A7BFBB8ECC4E744641A12E1E8322A96C4A9DFCC4060EB46A45BCEBB30DD07565E
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/d8.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.............!.5........`......'.....r}...]...q........r.....&..q.. .....q..$.."..%.............`...&........$..v............#.. ..#.....&.`...........!............................".......{............%.."..........$..!...."....<.........%....s.....&.G?;..f...........x...B..{4^MD.&!.....b.X..J..\|...x ....n..........f..s.........5....=3...........r......v..`..7....w..n..`...9.zg\.J..R...$.S.......}..sg..E.o...#..!.J..P~i...@3..iX.?.#..E....g]V.l......2.......v2".....r........l..Q......$..k...L.V.....3.!.....p..h.`..#...m....u.......B.....b.XA3.....P9..p5yM..yJ..j.wc.F....p.G..-....+._O....g;.///.m+.J....oVH...U..Q....\|.."...v.........T......t.2..;....rpo.9...RQPWD9....`..-..h,..}....b%...................H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x.v<...?...K A0`.z.+.+!....#K.LY....<

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 571x517, components 3
Category:	downloaded
Size (bytes):	14519
Entropy (8bit):	7.136156674273734
Encrypted:	false
SSDEEP:	192:m7FtUWXXbsUq3Lk28alQCbif8FKH6p+ityNE60x2Z11goixCp3xiQQSA5c2/n6:m7nnwLvg8AU+ig2x2qoig3JH0Z/6
MD5:	C538E1F1AF8562A206574EDCD250DF7F
SHA1:	5D16A40CBF544EFF245AE83B293106C52D2D6086
SHA-256:	2220F48F1EBB66A68BD287D46FC511D2EC31CA94A83E324539A1D15276278056
SHA-512:	C216B6C5DD17C12CBFD9BB71AE784018759AA2AEB39333DAE8646D15A3843DA2E43511E29FAFF2B50044BC7D2E6128217F9CAB55D61A8F2D13AE5BB79FE9D3E4
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/yingyong.jpg
Preview:	......Exif..II.................Ducky.......<.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:F7ED497C4FB511EE821FF56BA0A0DC1E" xmpMM:DocumentID="xmp.did:F7ED497D4FB511EE821FF56BA0A0DC1E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F7ED497A4FB511EE821FF56BA0A0DC1E" stRef:documentID="xmp.did:F7ED497B4FB511EE821FF56BA0A0DC1E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 512, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	210505
Entropy (8bit):	7.9922535991806765
Encrypted:	true
SSDEEP:	3072:y9uaNyEjlkHoafn4kHwZB8gpmI84iLMQnMRy8+o8gymUcGZcAop0gi1Np5aJY7Ji:y8aFPrh8JjNnM1nq2x0giJ5DJ24mAyp
MD5:	FD093A0A931F4A017811311412C9271B
SHA1:	EA04EB557D2E98A4BA4C576E91E54586A57F45E1
SHA-256:	8AE4C9DFAEDD3BE0A3324ABFDF858093B55AE08C30582177B0A774B2F2AC2D1B
SHA-512:	67CCDE69FCBB3CBDF1765749363CEFD0E6FB19D89DE97EE04B5B36CE340A0364EAFE269B753191FF855C228BAFF5CFB114B6A0EA9AA2D1412F274E8EA13873B7
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/android-768x512.png
Preview:	.PNG........IHDR.............5..:....pHYs..........+.... .IDATx..{.d.]..9.{.YYY..Z.n..%Y.m,![3..1....`.....c.`..e.........3.k"....,1f..X..6.c.-c.e........w......{.....m..\|".2.f.7O...........p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p8.....p..k}.....V^.sp8.D...g..p8.5.?...&.N..u...`0.k}....f.58...p8.t..]........}..V...g.l...n.........m.mf..8...p8~p.........?x.H..v..............."4.....\..s.........9.3..........p\E6........u.s......y..&....!.z8....2..\2Q..*.C..^........p8.......p\%.....}&...u9.]$1.2..zo........ 2.9\............_.i...FA.......?..p..u....~kmQ`...`+B...J...n.[..P.7.z..........t{=..vd....i...Z.8..BH.....Hk-....l.!...AX..!p..........".`-.PJ.+...)%J). G..7.\|.R.Du.b.#...T\(...\.....\|.).hcm.h"....6.v.R..9...U.......N.......B.bM.Z..V....4...P9y.d...3.......V.-.^O.a.,.i-...q(.1.8....'....H)..J....I..k-2......d#{.d.O.....g".mO..k....y .....B.\.P..M>

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 840 x 487, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	189734
Entropy (8bit):	7.995418777360924
Encrypted:	true
SSDEEP:	3072:qKCCO9mMyY1K6SCUQB4AxtinSEItHFDukVnxJQTu6r6R7NApp4rFDwGIQ:nzOkMy97CRR3Ljn5n2uYgGkKQ
MD5:	40D4266E5AADC87CCEEC1AB420DC2692
SHA1:	266C56990A106B6E9EFB0F9EF2A1A752AA6FA0FC
SHA-256:	3A1D4890B3E91A01C20C65B75F1AE028E3C445CAD1FD2D249DD0868876DFE4B4
SHA-512:	7DE32DEFDD87034F29930A7A32915100C2A109A80C79EED4C0A5F3127D1101FE0BF59B41CB4C5807F6FEA29A7721EBE74C55A8A4942C4EF67EDC40B860F46277
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H..........2}.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx....%gu...p.9..{.hF......H..D2\..?0.m.`..y...6.e..}..#...X.....X...H..@.......S....V.L+.hF...R.P......$......x-M/..r.NK..ko)..(..(O...)....v......x.v.S....).H..t-M/....Q.EQ.EQ...h..M.HB.....F.S.J..L..4.H.UQ.EQ.E9.../h......M... =I...\|).I..(..(..t.i..\|.7.....Nq..T...7.EQ.EQ....hz9...v....C.]A...)...(..(...!\|......O..yb.h.....#EQ.EQ....+)_....Q.....+..+s..EQ.EQ...$....}.{wiW<~........EQ.EQ.#....h7.@:\.W.@Q.EQ.E9.y..W^y.v...C..d....'.EQ.EQ.....]...P.2.3EQ.EQ..(......5...P.EQ.EQ..V^y.'k7.@:...].(..(......I1...P.EQ.EQ.~U...j....(..(.QDY.@...(..(..(..$EQ.EQ.EQ..H..(..(..(O..v..I.D;AQ.EQ.EQ....IQ.EQ.EQ.E...(..(..(..$EQ.EQ.EQ..H..(..(..(.B.4.!.J%.[.N;BQ.EQ...e...h6.....f...i..5o.....^.q.C.G1:A.R.F.Q...(..(.R.q.....c..d...^..uX4{_....]....AP..d.,.{..vI$.(..(..,C,E.M..^..d?1....~....EQ.EQ.EQ..H..(..(..(..EQ.EQ.EQ.Es.......G..EQ.EQ..7...$EQ.EQ.EQ..H..(..(..(*..EQ.EQ.EQT )..(..

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (664)
Category:	downloaded
Size (bytes):	14214
Entropy (8bit):	5.423098025111413
Encrypted:	false
SSDEEP:	192:5Ou495s6yYMkJqYWJ+Jaucgd/ix0BSc1e6t44KfKb6m3PbBISj:5BVuqYWJ+Jauld/g0BS56t4IuoPlISj
MD5:	853877426A53490ADEDBCB2E1CE9624E
SHA1:	BA2E275A1C0148B2F12CA53F17746BB920B7D555
SHA-256:	F3163FB2E48B27F81ECCDB331EEBD4F05AEAF9AF7253765323A35E869D8E5D6B
SHA-512:	12368317D1C18BD215ACB20B1D4EB859C72A7DA8FBD8299348E2D5A462EBE57BC015748330C4C1E07FF5404CEBE61B1A228145F9748D92C12DD2B00346AC910E
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.572.93058cb1137c31242bbc.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[572],{24178:function(e,t,n){n.d(t,{BU:function(){return J},EE:function(){return q},GP:function(){return H},L5:function(){return Z},P0:function(){return R},Qk:function(){return B},SC:function(){return O},Z_:function(){return X},tO:function(){return ce},vc:function(){return k},wr:function(){return oe}}).var r={setDelegate:!0}.function o(e){return void 0!==e}function i(e){return o(e)&&null!==e}function a(e){return d(e)&&0===e.length}function u(e){return v(e)&&0===e.length}function s(e){return p(e)&&0===Object.keys(e).length}function l(e){return"function"==typeof e}function c(e){return"number"==typeof e}function f(e){return c(e)&&e%1==0}function d(e){return"string"==typeof e\|\|e instanceof String}function v(e){return!!e&&e.constructor===Array}function p(e){return!!e&&e.constructor===Object}function h(e){return p(e)&&l(e.__lookupGetter__)&&l(e.__lookupSetter__)&&l(e.__defineGetter__)&&l(e.__de

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586)
Category:	downloaded
Size (bytes):	34911
Entropy (8bit):	5.393603224157629
Encrypted:	false
SSDEEP:	768:/bN0gZdapFYaeF6uuJnsk9JfJwRJR78iBRP6:napreF6uuJnsk9JfJwRJR78URP6
MD5:	957C1E8B72A608353519FDED4CF859FC
SHA1:	4A1A6BAF95E590C8D165800FC51CCEAF70FE47F8
SHA-256:	8CA7C61FBC8C73E689A13923749FD72A48EE6377E84AB153B5949C3DDEA1E33E
SHA-512:	C4A07563D99AFEF2710633B3380AF410BA3EDFB9FB12DAC49CBF7FA4E325437271DF3614408409917977EEAF8D2E46C312D9CFB54F3266D9803D4CEADE37E5F9
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/pc
Preview:	<!DOCTYPE html>.<html lang="zh_CN">..<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/base.css">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/media.css">. <title>Telegram..... - Telegram....</title>. <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO Premium plugin v20.4 (Yoast SEO v20.4) - https://yoast.com/wordpress/plugins/seo/ -->..<link rel="canonical" href="https://www.telegramkv.com/pc" />..<meta property="og:locale" content="zh_CN" />..<meta property="og:type" content="article" />..<meta property="og:title" content="Telegram....." />..<meta pro

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (5676), with no line terminators
Category:	downloaded
Size (bytes):	5676
Entropy (8bit):	4.917207128936421
Encrypted:	false
SSDEEP:	96:r0JLTnCNWPAKwUDwAcZoZ6dOxdOdZoT3OdFDsYZoZnOQMvDBzkCcc:aLYWB/DguAdOxdOFhsYuCrBzkbc
MD5:	15699E3D49DE186C4BB3B78771234139
SHA1:	F20452115851323A3D1963B19C24DDF59EFBD51C
SHA-256:	0806FF4935144C0E146860185404E24577E79C60A063BC5B33B493FB14C2D941
SHA-512:	A9F0FA362998C8C2E0D746E51F6BEB35B627EFA9BD620919B0FD8CA3928FFF678AACA12609697516E03858C5341DFD12DEB9102517F8A81B957424FF4BFD2624
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2.0.58
Preview:	#ez-toc-container{background:#f9f9f9;border:1px solid #aaa;border-radius:4px;-webkit-box-shadow:0 1px 1px rgba(0,0,0,.05);box-shadow:0 1px 1px rgba(0,0,0,.05);display:table;margin-bottom:1em;padding:10px;position:relative;width:auto}div.ez-toc-widget-container{padding:0;position:relative}#ez-toc-container.ez-toc-light-blue{background:#edf6ff}#ez-toc-container.ez-toc-white{background:#fff}#ez-toc-container.ez-toc-black{background:#000}#ez-toc-container.ez-toc-transparent{background:none}div.ez-toc-widget-container ul{display:block}div.ez-toc-widget-container li{border:none;padding:0}div.ez-toc-widget-container ul.ez-toc-list{padding:10px}#ez-toc-container ul ul,.ez-toc div.ez-toc-widget-container ul ul{margin-left:1.5em}#ez-toc-container li,#ez-toc-container ul{padding:0}#ez-toc-container li,#ez-toc-container ul,#ez-toc-container ul li,div.ez-toc-widget-container,div.ez-toc-widget-container li{background:0 0;list-style:none;line-height:1.6;margin:0;overflow:hidden;z-index:1}#ez-toc-cont

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 601, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	430486
Entropy (8bit):	7.992941047807891
Encrypted:	true
SSDEEP:	12288:icGBSJtXs9iq9xmYQWgCM+td1hNFMtLkciI4SiWj05Eawta:8BOt89T9xmYQWgf+zVOiIEx5Eg
MD5:	1A9C83A0657F27990A7FBC38D601E6E5
SHA1:	D4F9C48E8D118614414914CA533416F3EE629E14
SHA-256:	8C2FBD35972BC547A154715C72A6EE5252D5C720E42509F5907422F3DABBFFAE
SHA-512:	2EBBF8C638C29BFE1E5A2226CE9F46AD14F7BA5C4BF939DEAB25DAF9AC66D48A7AC9B50D6BE9142E350EF20CB9CCC856A4CF8AF31E5F34D044BD92BA08403AE1
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/0723-tituli-1-1024x601.png
Preview:	.PNG........IHDR.......Y.....7LG.....pHYs..........+.... .IDATx...$Wu..;1ff.=w.%!.2 ...m..F..-.1.@.^..^..z.....~..w.wm..5.l....Bb....RK..[.U.]S....'"22+.....Y..JUuVf.3..>..#........b.O..U..J.(-..2..)@..L;......J),e...q..]..o.#c..T..}$.2fW.........^..#QJ...X.....j..~....IS......n.2'. s....0...X...h.i.1u..u.~.....zxv...)C4z..X..}g.B.[.....l=M.P..B.&E....]..N6FQ.e...9..Z...... P..{..$.2...ecV4.i..........b[..U.u@..."~.)..\&>..T..n:..\|.Q^..D.iY#34R.i.q..I.w4Y%.5.......ab'.S.B2.y..{.c&G'd.....P.&Sl..yo.2.Y....;2.g\|/.G.d.zU.....2.5b....5.{.L..#.[...0a\|.G9.no...(#QD..V...UN.7....5.RQ..k...V..o..Z.IG..A.V..... '.D.._+&g..S.....PQQQ8z.......+.pW..Aq...+......=d..\.....p..>e.....+'..TQ8.ar..D.....P.1......]..\|...7#nw.v.W.Q..e /Y...$...U$@!...o7M....'.e.....{..7/1j....85.l3.....m;...[9.*2.2..e.^@#...B.'F%..4.....'I..(..0U........3$...V....mVY!Y.u..D:i.(..7...t.k21{Ln.AdQ...PQa<[.z...PV.L.!.....^.a..G....Jf..P.r=...O.....XFv...>l..2.].M?._?;.

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	23116
Entropy (8bit):	4.416888886221028
Encrypted:	false
SSDEEP:	384:wWjhl+ZZx0roaRvQgeMr2VxtaA93S/JKhV3PXASow7/XP5oP5VP5uP5sP5H6NC7E:wQhl2cfvrSxtaCDPaw756TUGLfY
MD5:	E75F7F8AC71782DDA40464528A4F619B
SHA1:	1294A00A625B50FF7C3EB3119A71D49399C9AC29
SHA-256:	832FBEFD7A4FE8F651058597D9F1910883D1CBD56D0CEB343E7D6170AEECF982
SHA-512:	AF128E227ED56355357FA0D3D46C9701E3B10F076F3515D84907ACE6BBF282177A74EF577A0AC48E4E4CC1FE0DFE3D14368F7DB08797AACC767E8841032C4E31
Malicious:	false
Reputation:	low
Preview:	<svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGradient><linearGradient id="b" gradientUnits="userSpaceOnUse" x1="1080" x2="1080" xlink:href="#a" y1="31.7861" y2="112.214"/><linearGradient id="c" gradientUnits="userSpaceOnUse" x1="1224" x2="1224" xlink:href="#a" y1="24.856" y2="119.144"/><linearGradient id="d" gradientUnits="userSpaceOnUse" x1="1368" x2="1368" xlink:href="#a" y1="19.1113" y2="124.889"/><linearGradient id="e" gradientUnits="userSpaceOnUse" x1="1512" x2="1512" xlink:href="#a" y1="14.4526" y2="129.547"/><linearGradient id="f" gradientUnits="userSpaceOnUse" x1="1656" x2="1656" xlink:href="#a" y1="10.7817" y2="133.218"/><linearGradient id="g" gradientUnits="userSpaceOnUse" x1="1800" x2="1800" xlink:href="#a" y1="8" y2="136"/><linearGradient id="h" gradientUnits="userSpace

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3534), with no line terminators
Category:	downloaded
Size (bytes):	3534
Entropy (8bit):	5.10076776334417
Encrypted:	false
SSDEEP:	48:hgZ/tH+p4B3yXXPIwZNDZgZIys41qexZJEdZJCZJhdZJ1akGwlMx9Kj+xHQdixTk:uBtHfB3C/+qys4H3k3C3b31wGMx9NY8y
MD5:	C0A647FFF42BAEEA49A842072257642F
SHA1:	5CC1786EDB625A0F030BD8763C7751BAA8BEF293
SHA-256:	E3226B56ED31A696D393C8297B98F6B53D65CB2A364939FC2677BE158D02C48E
SHA-512:	B0D87BAF04E9ADE8CC1BAD535966B8DCE5AC0C8C6CCC7738FC7C11FCA9F2370E2A96EB904BD32DD3B2F13E3CFAB019D823D5853A03BA5C5F4F669C4864EC2D37
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.58-1700928976
Preview:	jQuery((function(e){if("undefined"!=typeof ezTOC){function t(){if(0!==e(".ez-toc-widget-container.ez-toc-affix").length){var t=30;void 0!==ezTOC.scroll_offset&&(t=parseInt(ezTOC.scroll_offset)),e(ezTOC.affixSelector).stick_in_parent({inner_scrolling:!1,offset_top:t})}if(e.fn.shrinkTOCWidth=function(){e(this).css({width:"auto",display:"table"}),/MSIE 7\./.test(navigator.userAgent)&&e(this).css("width","")},void 0!==ezTOC.visibility_hide_by_default){var i=e(".ez-toc-toggle:not(.ez-toc-loaded),.ez-toc-widget-sticky-toggle:not(.ez-toc-loaded)"),o=ezTOC.visibility_hide_by_default;e.each(i,(function(t,i){var n=e(this);e(n).addClass("ez-toc-loaded");var c=e(n).parents("#ez-toc-container,#ez-toc-widget-container,#ez-toc-widget-sticky-container").find("ul.ez-toc-list,ul.ez-toc-widget-sticky-list");e(c).hasClass("eztoc-toggle-hide-by-default")&&(o=1),Cookies?(1==Cookies.get("ezTOC_hidetoc-"+t)?e(n).data("visible",!1):e(n).data("visible",!0),Cookies.remove("ezTOC_hidetoc-"+t)):(e(n).data("visible

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1516
Entropy (8bit):	7.091695289966244
Encrypted:	false
SSDEEP:	24:d1hNo7FCWwjx82lY2T3/VL7JyJ3VPrMGEH0O7gglLTXRyrA0lsBuasu0hBjEUFl/:Dzo7FDNn2DJsJ3hMLVFRyZCuasFBxF7R
MD5:	98CB1719DC98BD01179A29C90C8B6583
SHA1:	2CB8B20B522B915CF8769B65FC0206F016E5485D
SHA-256:	15AF8F2CAE909145904EBA5C7B96E056DD0E7DE92490409A07DE5CE8036DA9D5
SHA-512:	5A81B20CE4D1E69243B738FADFBFB6812633C0389EE42B817CE233E8EB9EFB2E70DC2D0CAD678FB102AE325DED99BD6D1FD23FB72445230030A4D00FA1EBB55B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:270D42EB4FB611EE8D20A136704C7A04" xmpMM:DocumentID="xmp.did:270D42EC4FB611EE8D20A136704C7A04"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:270D42E94FB611EE8D20A136704C7A04" stRef:documentID="xmp.did:270D42EA4FB611EE8D20A136704C7A04"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...E...aIDATx..MHTQ....!.X.........4.7..0.A`..p.).f.E..V...4..(.EA..fU.@HQp........H3.;q^\...yc.....;..s.9...3.L.?$...

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 220 x 62, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5185
Entropy (8bit):	7.866605228776372
Encrypted:	false
SSDEEP:	96:so7F52LitrF90OZWvtUnDuftoq6BFqBY6U1P+PoLjbnW09kLswR:B7Fb6OZ1noCq6BS1UPgsbKIwR
MD5:	4363600101CB88D4BEFA3FE58DAC2E20
SHA1:	61816970C0915203DCA7FEDA7B29D51D2560892C
SHA-256:	B5F11FE8B659F7207DC376BC18B7CBC98C769C59EE19162D09E416BF1761D7C8
SHA-512:	CD22E13B115CC5E1D20FA375220F0199CA042C634E7E5D82535338C691410481E22D5085AB7A669B2FFD2776131071C39385F2E43421DDAB1562FB46EA49437F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......>.....@.u.....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:03B24E754FC811EE820BEA59DA5A13D7" xmpMM:DocumentID="xmp.did:03B24E764FC811EE820BEA59DA5A13D7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:03B24E734FC811EE820BEA59DA5A13D7" stRef:documentID="xmp.did:03B24E744FC811EE820BEA59DA5A13D7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..]m.\U.>.;..N?.tH..h.-...`f...Hb..@0.m....1....t.D..?v-H....cl...&.h.;J4...@......kfg.^...-g....sgfw

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (847)
Category:	downloaded
Size (bytes):	13822
Entropy (8bit):	5.308557467153006
Encrypted:	false
SSDEEP:	192:YPNfrSf3gy1fQx56zKsvEsSDIiFtTislPchPTwFlOvHChmC82YFK:YPNzSf3g6zKIHqtpRKEuvHTC82Yg
MD5:	2A92CDD99A42BFCD7DAB16887539E231
SHA1:	310E2855E334F6F49937490D621710021B15066B
SHA-256:	F20C946DA61069DF3F4DC8097FB617DB50F266D25D53758D91FCCBD8341C533C
SHA-512:	7DBD1CA6AF6E7AA86F408C6E3D5D35AA49AD39908D8AB10AEF4CF8C806AF27889DA43D8AEDDEE030E6351DF1D81442B431C6AF206A4DF6E9BFB043892850EF49
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.15.097368f212a6a942763f.js
Preview:	/! For license information please see chunk.15.097368f212a6a942763f.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[15],{21015:function(e,t,n){"use strict".e.exports={canvasAvailable:n(1892),continuousScrollEventsAvailable:n(93117),cookiesAvailable:n(2022),cssLinearGradientAvailable:n(83353),cssPropertyAvailable:n(15871),cssViewportUnitsAvailable:n(77499),elementAttributeAvailable:n(13462),eventTypeAvailable:n(70683),isDesktop:n(13459),isHandheld:n(30677),isRetina:n(25152),isTablet:n(53489),localStorageAvailable:n(83574),mediaElementsAvailable:n(58093),mediaQueriesAvailable:n(28342),prefersReducedMotion:n(54719),sessionStorageAvailable:n(63160),svgAvailable:n(91676),threeDTransformsAvailable:n(78795),touchAvailable:n(50012),webGLAvailable:n(72810)}},1892:function(e,t,n){"use strict".var r=n(93796),i=n(6379),o=function(){var e=r.getDocument().createElement("canvas").return!("function"!=typeof e.getContext\|\|!e.getContext("2d"))}.e

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	38867
Entropy (8bit):	5.373726806313631
Encrypted:	false
SSDEEP:	768:xLV9hhNz5ouQq7vDsCYDHlo+yg2GsGsgo4ST5dX4+eT7Fi8mR5lfwycInZVYWbJJ:f
MD5:	CFBFA60AD49E0A36D38CDABB46E4F52D
SHA1:	1D1B54D5ADB11FB20B36B8B81E49EB923505D537
SHA-256:	3C5FF2A6B622D6A9C073E4E6AE255A61E5A08289F6A9D7FE7D3FDCE3B2CEA5CE
SHA-512:	10ED1A29D1ACAB10D504B9046533FC877109CD9C6B15B7BB9FE1EB379F79312B5793A2C9E1EAA665441F82C08B6C5B195FF9B8E8840155C0F3680D54D5C086F5
Malicious:	false
Reputation:	low
URL:	"https://www.apple.com/wss/fonts?families=SF+Pro,v2\|SF+Pro+SC,v1\|SF+Pro+Icons,v1\|SF+Pro+Rounded,v1\|New+York+Small,v1\|New+York+Medium,v1"
Preview:	@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.ttf") format("truetype");.../* (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display';...font-style:italic;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.ttf") format("truetype");.../ (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display 100';...src:url('/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.eot');.../ (C) 2015 Apple Inc. All righ

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1376
Entropy (8bit):	6.921957060507552
Encrypted:	false
SSDEEP:	24:pW1hmYaWwjx82lY2T3XVQZs7FLyJ3VQ5KbG7Tr90l1gl6N9Zn0dKgI:mMYLNn2D/AJ33Ko+dKgI
MD5:	DBD5EA2180E785F76E3F626318254BD0
SHA1:	7A65C468F485BA692102B375F0DBB937C11B4649
SHA-256:	5788136B28395C74F558D5254CA03559F2F333D4DCA6F659986F0F8DB54AD2C1
SHA-512:	732E2A8551ED9897388E01C683ECE48405AD493085C26D2EC2CF91A829A0E89292E41E173D5FD7CD4F391C794C61A2E4C3B6163BA6280046C88ABDC5C6B0CFB5
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/anzhuo.png
Preview:	.PNG........IHDR................K....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:328D6A5C539011EEADAFC2B303B27E32" xmpMM:DocumentID="xmp.did:328D6A5D539011EEADAFC2B303B27E32"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:328D6A5A539011EEADAFC2B303B27E32" stRef:documentID="xmp.did:328D6A5B539011EEADAFC2B303B27E32"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>Y.i.....IDATx...+DQ...\&.A#+..`....PJ.#d.)EJ.....j...)..Y...S>.P.1>2....s.v;..{..{..x.9.}..x<.)T.&...iju..D".

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 516, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	331189
Entropy (8bit):	7.9964404025671145
Encrypted:	true
SSDEEP:	6144:O/gX+56mglDHozhl1lpxD3HSf/lgK9HcqQVC4gGuAT67cMdjYa:OYO56mgM5D3HY/lDl1kfgGwcMua
MD5:	F92DB1715986DA3FD38B9BB1A3164AE2
SHA1:	D403ADB2BDCC68CE1794920D74A77B354E1228F0
SHA-256:	0C6F1DA01761205450BD93C4F00ED4C944086625EA5A28D37A62E4FA0F6D31A3
SHA-512:	AFD9D4EC142920B7DF43939E88F9FF3FB89728ACFB71F365D1064118E405EE44FC7C64818488D20E080481254CD6BB1849A4601AD200A737F35244930B6FD9D5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............\\.....pHYs..........+.... .IDATx...v.F.-.O.@j.Tf.<..r....j.\.P.?...[e;.LI..D.?"..$"... @a{9%..y<3._....h.T37"j.Xq.M.Q.me.....za..W..].\|..;...A.U....1o'...G".LW.\Q....{..9f....6........F.v.......l..m.6.+.w,?......!.6!$g...#...db.z....]G.q.oW.%..q........M......:..C.{.t>I.@.g_h.uQ......D..k..m#.QuZ.@...aD./..~.5J.J.0..Q..1...7.&..t.K.P^.9.......OD..#z...&L...........<77p.z.6...o....5...PuQ.+X.v.7....9.....O..?<.I.O.@....H..D.:eK..PV=mW6x..L...... E.....t.?.T.e....0...{&...^'.. ..P..M7.95.........E(./.6.../...9v.`.....0..z...R+..........I..x. `.....~..X..k.......%......#.}p..............:G.....;..O...A2.....CV^...Mh,.X...i..........3....[h..[.x..............u.e.6..oIzA.g"........u.z.O.6.....i.jB+m#F..]2..'.v..6/N..l....^v..R~U..h..`................UY...N.....S.6.....o.+..q^s..n..d..{B..T....?..H4...H.,.1H;..kr?.........K6.c..d=......Mm.U5.&.%...^.t.../,n..4.....&...N0.C.!b}._.cho.#..F&...Z...:O*..K]{.H.#..u..fi

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 640x480, components 3
Category:	dropped
Size (bytes):	39151
Entropy (8bit):	7.968064051469883
Encrypted:	false
SSDEEP:	768:08YUWJqOH5XN5iWAm0/WfmM+2mlpM66ywBiqbdw20Qj3e9f0:08O4OZjAlWV3GDHw0qbSTQ40
MD5:	E7AF6D892F95B0B5FE6F76B8CF0ECCC1
SHA1:	48F7D667075DC64EE6A9CA51005467AF2033DAA4
SHA-256:	7F326B95AF278CEDDB0E81D887774E2965D60690CDE088CEC0A7363C327CB0EC
SHA-512:	9E0C3CA5F060EEBCD4708FCAAE0EA6C8AEE9B9417EF9A219FC96FDD5CD03768007A8389511256943F0CF0E46AA13F597F496AE8F474F60259FA27CDCB834A207
Malicious:	false
Reputation:	low
Preview:	......JFIF..........................................................................................................................................................."........................................e..........................!1..A.."Qad..2q.....#BR.$3Tbr...6CSVu..........%4FUs........&5Dc......t..................................@.......................!..1AQR......"aq.....2...3B#b...%4Sr...............?....B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ..B... ....R......R8K...._.m....Wq<H...S....e...'...\|Dy}~^...,x...W....c...&....Dy}~^..x..rh]o.g....S...?c.....z..x...9....+.~..)...?c.....z..z.8..=...G..........~"<....w.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1373
Entropy (8bit):	6.951376319537284
Encrypted:	false
SSDEEP:	24:pN1hNo7FCWwjx82lY2T3/VuaqyyJ3VeqG82TUu3bfdKFrKeGo:hzo7FDNn2DcB5J392T/RK1KeGo
MD5:	26B53D9D8FC5983ABB803F30B2C431AC
SHA1:	399FA06E7C366F1E3ECF08269CBCFC464A44759F
SHA-256:	32C9BAF6E4B992C39C955DA80E50C63080E9898E01F87B670DBC37B4E76DB253
SHA-512:	D98AF54144947BDFAC4CC4A5BC516EA740EBD46A3EE60759C1E12E102DAE43933D63B0178C584B6C72A0E01D769AE1680488599FC0D6418996792753A6110C8D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................K....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:1B1B32624FB611EEBB89ADFD8FC6EBC7" xmpMM:DocumentID="xmp.did:1B1B32634FB611EEBB89ADFD8FC6EBC7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1B1B32604FB611EEBB89ADFD8FC6EBC7" stRef:documentID="xmp.did:1B1B32614FB611EEBB89ADFD8FC6EBC7"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>vb......IDATx..O(.Q..g.....nZI.I.l..B........)%).{.".n.$.@!%'.....]......o.5..;.....f.}g...{.Q.+O.De`.,.]...D.C.%.M.b

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2916)
Category:	downloaded
Size (bytes):	7203
Entropy (8bit):	5.3241143484254
Encrypted:	false
SSDEEP:	192:Mi9TDfZmRHx+tvDkXKzB7fk+sI4F1G6qS8w:LeW7kXKpfk+sIi1//N
MD5:	3347699592BBCEB86DF451D1CC283C9B
SHA1:	7C6BB8CC21ACE6FB8607030F68A809AA25ACA4BA
SHA-256:	EDEAFED1BBFE586D373B513B026F17F18192A22D1C85816D77FC4012B445CB9C
SHA-512:	EFB9564DD2E15727E2E892A48E25B2F2D32D0E2688D79CB0D2B63E7B4B7FBECD4672EC64437CA29E5A36CA583DDAE42A5263BEB11FBA574B3E64207A9806C478
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.143.bea5c7c07f57ac3647d4.js
Preview:	var __ember_auto_import__.!function(){var e,n,t,r,i,o={99421:function(e,n,t){e.exports=function(){var e=_eai_d,n=_eai_r.function r(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?n("_eai_dyn_"+e):n("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return n("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@amp/affiliate-util",[],(function(){return r(t(2353))})),e("@amp/foundation/-internals/network",[],(function(){return r(t(73624))})),e("@amp/foundation/-internals/storage",[],(function(){return r(t(92141))})),e("@amp/media-api-config-amp-books-realm",[],(function(){return r(t(52215))})),e("@amp/media-api-config-amp-podcasts-realm",[],(function(){return r(t(61384))})),e("@amp/media-api-config-apps-realm",[],(function(){return r(t(61069))})),e("@amp/media-api-legacy",[],(function(){return r(t(89176))})),e("@amp/web-apps-featurekit",[],(function(){retur

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	100045
Entropy (8bit):	7.980156259768424
Encrypted:	false
SSDEEP:	1536:RCgST1V2rvHlFag2TxqOs0WmrU0+2+XRg1VUoQQkH21NVbDUIV1EVDqqCKM:RLY1V2rv+ZmYUJBXRgXQYtPUIV1U5M
MD5:	6A4AFC26B71FE84FB760385040625B3F
SHA1:	02BEEF47835689FA2EAA2DBA2DCE0A395A823F3E
SHA-256:	369B738BE528CB51C70936C9CF13BCAB6E4FBDFAA0ABD146FC9CB38DE98B722E
SHA-512:	60F0BBC176574C00A13A005D57BBB0A6CC3F957E6AD5964F3D924A25C431A062E5E88C03388327C07F0CE538E4DAB99A695CD0782A656183775A78A2CDE0FB6C
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-2024-05-14T065012.987.jpg
Preview:	......JFIF...........................................................................................................................................................".........................................O......................!.1..AQaq..".....2...BRb....#r..3S...$Cs.c...4...Dd...T.................................A.......................!1..AQ.."aq...2....#B..3Rb.r.S...C..$...............?..$.(_S>7q.I.O...r%$.%.H.I&...1.....2..Bv.`....t...H&.&.....E.Rh@. S...0O.Bx@...B.S`J..B....($.r.G..'5X.Y...0.L.Y..."..M.J. P.......Y.F.j...@..mU.n.U.].j.!Z.W..$O2e.J.i.w....E)..3.I..)91L#......GhK&2#....%.(..T..a.$@".......9 .N.Q.R...1.&..R...pPqRqPL.bSkS5.p...1.Ju.@..xLJ...L.N.. .L....AE8(...$RRC.$.u..)L..A#..2H xH'H....... .8A.I$....d.@..A:..8I)A..H'Qr..t.A....4'J+b...H..0I<'PE.$. .0DkT@F..Lh...S.)...\.,...S..T....]..,P.vRD.h-....g..N.f...:......)..$.4.R-..?.h.M.l.=.V.%.fO O....*.^).jXI...z...'VH....vNr6Y>'..\A...g` ...HS..$H.bI7=...UO.J).%.[Kf.%...]5..8Xq.V...%.@..;.2y...zm..%

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1015)
Category:	downloaded
Size (bytes):	967014
Entropy (8bit):	5.452924629076052
Encrypted:	false
SSDEEP:	6144:ditwb/REGJzy7bbOUp8o/LJAG21vNzVTuOCsPvHw+KztSRuo9qixj9qDNixjaP9/:8twbZEGJzYbaUpl/LG91vNyW1CXjUBi
MD5:	B5D49C10005C0B34BD1CA9D133B07A72
SHA1:	7779E11ED3A11E3E56E528C8E29766FD1B97F62F
SHA-256:	ED51235061270904656A9B7D33797975578B2EAADFBA687305984CF62EDFF995
SHA-512:	45D504DC0028F6D91D00C0AB2609138AF1818109BDA66F9843C38741351737DDD7B84A4C996DAAC4F141EB9393D78F5E5660623CD74FE586D4A0E9A4872F547B
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/vendor-ce9e9db10c3d67c2557c0c4ef3228e95.js
Preview:	window.EmberENV=function(e,t){for(var r in t)e[r]=t[r].return e}(window.EmberENV\|\|{},{FEATURES:{},EXTEND_PROTOTYPES:{Date:!1},_APPLICATION_TEMPLATE_WRAPPER:!1,_DEFAULT_ASYNC_OBSERVERS:!0,_JQUERY_INTEGRATION:!1,_TEMPLATE_ONLY_GLIMMER_COMPONENTS:!0}).var loader,define,requireModule,require,requirejs,runningTests=!1;(function(e){"use strict".function t(){var e=Object.create(null).return e.__=void 0,delete e.__,e}var r={loader:loader,define:define,requireModule:requireModule,require:require,requirejs:requirejs}.requirejs=require=requireModule=function(e){for(var t=[],r=c(e,"(require)",t),n=t.length-1;n>=0;n--)t[n].exports().return r.module.exports},loader={noConflict:function(t){var n,i.for(n in t)t.hasOwnProperty(n)&&r.hasOwnProperty(n)&&(i=t[n],e[i]=e[n],e[n]=r[n])},makeDefaultExport:!0}.var n=t(),i=(t(),0).function o(e){throw new Error("an unsupported module was defined, expected `define(id, deps, module)` instead got: `"+e+"` arguments to define`")}var a=["require","exports","module"].

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2369), with CRLF line terminators
Category:	downloaded
Size (bytes):	2542
Entropy (8bit):	5.293874239119043
Encrypted:	false
SSDEEP:	48:l23korf/ZW3kOLOtm51s0WivdE1c2mA1ERN80Ks:l23kMnZ91SeqFE9mC45/
MD5:	634EE9F21B34EB24EA532F2EE6042BAF
SHA1:	6C32DEDD95DA07AA54C3B852D789BB529956427D
SHA-256:	EF09F4BEC10862578AB2A20B0B0F5CFF4FAEF4B3CE0FE01872A1460AD0D72C50
SHA-512:	26BBC3E0AE94D2DFF02F696B53E5A15B3455CD25EB10941672FE81715B80A1BD94B5C535AC3A8730B401737B1E0C236524CCB29F212AB4EA1295DA2992D0E508
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1
Preview:	/!.. JavaScript Cookie v2.2.1.. * https://github.com/js-cookie/js-cookie.. .. Copyright 2006, 2015 Klaus Hartl & Fagner Brack.. * Released under the MIT license.. */..!function(factory){var registeredInModuleLoader;if("function"==typeof define&&define.amd&&(define(factory),registeredInModuleLoader=!0),"object"==typeof exports&&(module.exports=factory(),registeredInModuleLoader=!0),!registeredInModuleLoader){var OldCookies=window.Cookies,api=window.Cookies=factory();api.noConflict=function(){return window.Cookies=OldCookies,api}}}((function(){function extend(){for(var i=0,result={};i<arguments.length;i++){var attributes=arguments[i];for(var key in attributes)result[key]=attributes[key]}return result}function decode(s){return s.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}function init(converter){function api(){}function set(key,value,attributes){if("undefined"!=typeof document){"number"==typeof(attributes=extend({path:"/"},api.defaults,attributes)).expires&&(attributes.expires=n

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	11960
Entropy (8bit):	4.330664079077663
Encrypted:	false
SSDEEP:	192:CRKhARupWxn3hfgBqqqyF7tHSrDHS6F0fRkeok1It6WJJYximtWfH9krKyrVXsRu:CF0h
MD5:	324EDCB7264419C67989EEE2DF8EA735
SHA1:	161E18276D5988DD0C9DD53D1A74CB0BDACA9E25
SHA-256:	A7AB0FACBB3DAAAC95B9331F05C61A653C503C78431B1FA27F400C40AEA87103
SHA-512:	DFF7ED185FD19361681388AA47B960601B371480A89B7DE7031FAF873E43536305ED9FA512DF6B750063A01CC395B18C28D721EE57420B82027BB6429D2D00BB
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/scss/media.css
Preview:	@media (max-width:1699px){. .top .banner .banner_c .neirong{. padding-left: 10%;. }. .detail .detail_banner{. height: auto;. }. .detail .detail_con .detail_right{. right: 3% !important;. }. .wenti .wenti_con .wenti_right{. right: 3% !important;. }.}..@media (max-width:1199px){. .detail .detail_con{. width: 100%;. box-sizing: border-box;. padding: 0 3%;. }. .detail .detail_banner .di{. height: auto;. object-fit: cover;. display: none;. }. .detail .detail_banner .banner_con{. width: 100%;. box-sizing: border-box;. padding: 3%;. height: auto;. background: url(../img/banner3.jpg) center no-repeat;. background-size: cover;. position: relative;. }. .detail .detail_banner .banner_con h1{. font-size: 22px;. margin-bottom: 15px;. }. .top .banner .banner_c .neirong2{. padding-left: 10%;. }. .top .banne

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (59701)
Category:	downloaded
Size (bytes):	113381
Entropy (8bit):	4.921824878665509
Encrypted:	false
SSDEEP:	1536:MZeJKfZdlk2u5SOV+UQ37410kxJdPfrF3Ps:MZeJMTk2u5SOV+UQ37410kTd3Z3Ps
MD5:	51A8390B47AA0582CF2D9C96C5ADDEE2
SHA1:	B16A640874025D085C38119A1A02A3460F83F2DE
SHA-256:	98CECF88A23542FA047CE46EEDB650B5C5128761ED4386C0977B847094DDFA20
SHA-512:	711162AB43E59E0FF5F050CCA4278682194248A13EF2EE1F00AB276B6221E7A4DDDEB9645E8798E7F67A34F0001C8F63469F2B2C3E6D4E2519ADA30B6775E191
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-includes/css/dist/block-library/style.min.css?ver=6.5.5
Preview:	@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-audio{box-sizing:border-box}.wp-block-audio figcaption{margin-bottom:1em;margin-top:.5em}.wp-block-audio audio{min-width:300px;width:100%}.wp-block-button__link{box-sizing:border-box;cursor:pointer;display:inline-block;text-align:center;word-break:break-word}.wp-block-button__link.aligncenter{text-align:center}.wp-block-button__link.alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-block-buttons>.wp-block-button.has-custom-width{max-width:none}.wp-block-buttons>.wp-block-button.has-custom-width .wp-block-button__link{width:100%}.wp-bl

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 184 x 184, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	9343
Entropy (8bit):	7.942958460187462
Encrypted:	false
SSDEEP:	192:h7F0XSqZqfAhjbh7AH/qzLP1x/uPND5Tl5JHRwpTQS+3NZD0R:hyXSqZqU98HyPXCpqpH+3NZoR
MD5:	EA89A525FC4415B6EA4A4B0740837CBB
SHA1:	470DC704D57AD9B44E32DEFE2C7BE7A66D4B5482
SHA-256:	E9E58AA82DBC26F4C787ADE904ED5A62C310964C1B75E713DD64B3E66DF75713
SHA-512:	05114F96C24933B6F6A2B4E1888941CBAEFC346CAE24406586D897EA4B5D7536C2C6B83A62F6501F61185915AEB9CC02A5ABB08B5315095D614C740473BAF53E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............Q......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:8D4AC4244FBA11EEBC8084CD464D2EBB" xmpMM:DocumentID="xmp.did:8D4AC4254FBA11EEBC8084CD464D2EBB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8D4AC4224FBA11EEBC8084CD464D2EBB" stRef:documentID="xmp.did:8D4AC4234FBA11EEBC8084CD464D2EBB"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...... .IDATx..].pU..O./.. B.\|.X0..b a.I. E..Q...:-...@..T..V....h....%..Ba.....LQ.&\|..A>.@.>..B....._..o....g..f..

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	2
Entropy (8bit):	1.0
Encrypted:	false
SSDEEP:	3:H:H
MD5:	99914B932BD37A50B983C5E7C90AE93B
SHA1:	BF21A9E8FBC5A3846FB05B4FA0859E0917B2202F
SHA-256:	44136FA355B3678A1146AD16F7E8649E94FB4FC21FE77E8310C060F61CAAFF8A
SHA-512:	27C74670ADB75075FAD058D5CEAF7B20C4E7786C83BAE8A32F626F9782AF34C9A33C2046EF60FD2A7878D378E29FEC851806BBD9A67878F3A9F1CDA4830763FD
Malicious:	false
Reputation:	low
Preview:	{}

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	145071
Entropy (8bit):	7.977649520074786
Encrypted:	false
SSDEEP:	3072:96KGClku3Cl04UZTbHkBeqqQII7ux/7eSuAcnKTivAOZicSU35sNOgw:wn6ku3C7UZTIBe1JPP6qitZicSU3GI
MD5:	43106BFD1D665507352A962D2E14C23C
SHA1:	1567921A46FAAE056A9CBCC448AE3124C2D4AB24
SHA-256:	A06AEFE868631CFA0EF6E5D64F5B9C0D1D90C2AD7FD4C49AEC636D0A5DAF4434
SHA-512:	345E7974BC7EB62AB0D7F7B06043960B7CA3C3290A5513AE252B972D32C29588A8A203A38D570E2318320BDBCE439C4509D26C5EB1E775227A06235DA633D4A1
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................................................................................................................".........................................g..........................!1....AQa.."Uq...#2RT.........BSbr....$3c...4Cs....%Vd...5D....Eet...&Fu....................................K.........................!.1Q.ARaq....."S.....2B....#Tb.$3C....cr..D.%4.............?..@..5c.#S..Y...55..P...`@jsOqH..L..=h..B.\.(H..;.B.S.u......)..B.=....P..N.(.).J.....N.=e1.Q.........:..<R..a.....HGbP.R...........+JP.5"MA....'..d...9c..[z....g.....B[..J.%d.\|.>s..%...:D"..)......9.,...'...1....O...B...X%.F.RMQ...bD.`.K.:.r...2D...#Pu..(J....:.]A.......L..I.1.(FP.....j...%..f(j..Z..(J.Q...# K.;.;.....!q)..z.j......K.....Pu..K.....#.A/&:... H...A'&:.xBL.....z..c.'..F.$.o&:....%..&...j...%....:.........J#.I.%@hI...c. F:..T..3.....u....0."..L..RQ..N.J...b..:.....a/&.,b1..:...(.$.g&:...Rp...c.$...PG$.z..........v.3i.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 261 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	5568
Entropy (8bit):	7.890455757101775
Encrypted:	false
SSDEEP:	96:Vo7F52Yc37fFb5RzWBJBV1FPCjzJIwCc0N0456N/9ZYYYzM9x4eIsl:67F0fzWBJBV1OJNy0456N/9eziueIsl
MD5:	2169E7E6581D20C5F64214A864BF4395
SHA1:	2A1F07D49E9D7202AAE77613E6B07AC80A15D9B4
SHA-256:	1853B1A99AC858C4DB3832389A6E6AC90D90E5AEC0995780AE7A77B922658479
SHA-512:	144C324E9A92A267D0375DD16E4146B9B6FE87FA47D81CA6C34A075FF6778AF010A659DD0AE7D6E365D27C356EB5487ECC213D6B353AECA4828722AD87E73B22
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......B.....^.......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:12FDD53A4FBE11EE8A22EC8A27CDF72B" xmpMM:DocumentID="xmp.did:12FDD53B4FBE11EE8A22EC8A27CDF72B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12FDD5384FBE11EE8A22EC8A27CDF72B" stRef:documentID="xmp.did:12FDD5394FBE11EE8A22EC8A27CDF72B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.#]....5IDATx..]}l.G..=...'.&i.6M[..mJ?m$HR..\....J..jU.R[..........P%.............('.h]..ji..R.....&....-...a<73;.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (51740)
Category:	downloaded
Size (bytes):	53009
Entropy (8bit):	5.735746151201697
Encrypted:	false
SSDEEP:	768:jC6w335hlHzaoiH9dBtiqN1eqnI7f4yGBh9T9l3dxaQ+LjPaeB+WPo:jC6w3vlTwH9bRnkfKBb/3zaxh+WPo
MD5:	26DA13A568081B6B822C328A22E8599D
SHA1:	B449C2D28024C64BAB332A82CA36A96FA3DC3EFE
SHA-256:	8D17D5B38D204D7311A56BB407C2B6FB630838CF6F92EB0201918510E0671BA3
SHA-512:	407141032595E9E1F5A11E51582678CD80937BCFC1E0A3525389F9CD74AF260D9EB22D4C6C4145DC3B2518C0D903CB51F71C8137135543166F7E8D8DDCBA4790
Malicious:	false
Reputation:	low
URL:	https://www.google.com/js/th/jRfVs40gTXMRpWu0B8K2-2MIOM9vkusCAZGFEOBnG6M.js
Preview:	//# sourceMappingURL=data:application/json;charset=utf-8;base64,eyJ2ZXJzaW9uIjogMywic291cmNlcyI6WyIiXSwic291cmNlc0NvbnRlbnQiOlsiICJdLCJuYW1lcyI6WyJjbG9zdXJlRHluYW1pY0J1dHRvbiJdLCJtYXBwaW5ncyI6IkFBQUE7QUFBQTtBQUFBO0FBQUE7QUFBQTtBQUFBO0FBQUEifQ==.(function(){function G(x){return x}var J=function(x,y,W,U,L,R,d,K,O,A,m,g){for(A=(g=0,71);;)try{if(g==W)break;else if(g==41)g=O&&O.createPolicy?U:44;else if(g==92)E.console[L](m.message),g=x;else if(g==U)A=y,K=O.createPolicy(R,{createHTML:f,createScript:f,createScriptURL:f}),g=x;else{if(g==x)return A=71,K;if(g==0)O=E.trustedTypes,K=d,g=41;else{if(g==44)return K;g==35?(A=71,g=53):g==53&&(g=E.console?92:x)}}}catch(l){if(A==71)throw l;A==y&&(m=l,g=35)}},E=this\|\|self,f=function(x){return G.call(this,x)};(0,eval)(function(x,y){return(y=J(4,7,99,87,"error","ad",null))&&x.eval(y.createScript("1"))===1?function(W){return y.createScript(W)}:function(W){return""+W}}(E)(Array(Math.random()*7824\|0).join("\n")+['//# sourceMappingURL=data:application/json;cha

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 601, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	430486
Entropy (8bit):	7.992941047807891
Encrypted:	true
SSDEEP:	12288:icGBSJtXs9iq9xmYQWgCM+td1hNFMtLkciI4SiWj05Eawta:8BOt89T9xmYQWgf+zVOiIEx5Eg
MD5:	1A9C83A0657F27990A7FBC38D601E6E5
SHA1:	D4F9C48E8D118614414914CA533416F3EE629E14
SHA-256:	8C2FBD35972BC547A154715C72A6EE5252D5C720E42509F5907422F3DABBFFAE
SHA-512:	2EBBF8C638C29BFE1E5A2226CE9F46AD14F7BA5C4BF939DEAB25DAF9AC66D48A7AC9B50D6BE9142E350EF20CB9CCC856A4CF8AF31E5F34D044BD92BA08403AE1
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......Y.....7LG.....pHYs..........+.... .IDATx...$Wu..;1ff.=w.%!.2 ...m..F..-.1.@.^..^..z.....~..w.wm..5.l....Bb....RK..[.U.]S....'"22+.....Y..JUuVf.3..>..#........b.O..U..J.(-..2..)@..L;......J),e...q..]..o.#c..T..}$.2fW.........^..#QJ...X.....j..~....IS......n.2'. s....0...X...h.i.1u..u.~.....zxv...)C4z..X..}g.B.[.....l=M.P..B.&E....]..N6FQ.e...9..Z...... P..{..$.2...ecV4.i..........b[..U.u@..."~.)..\&>..T..n:..\|.Q^..D.iY#34R.i.q..I.w4Y%.5.......ab'.S.B2.y..{.c&G'd.....P.&Sl..yo.2.Y....;2.g\|/.G.d.zU.....2.5b....5.{.L..#.[...0a\|.G9.no...(#QD..V...UN.7....5.RQ..k...V..o..Z.IG..A.V..... '.D.._+&g..S.....PQQQ8z.......+.pW..Aq...+......=d..\.....p..>e.....+'..TQ8.ar..D.....P.1......]..\|...7#nw.v.W.Q..e /Y...$...U$@!...o7M....'.e.....{..7/1j....85.l3.....m;...[9.*2.2..e.^@#...B.'F%..4.....'I..(..0U........3$...V....mVY!Y.u..D:i.(..7...t.k21{Ln.AdQ...PQa<[.z...PV.L.!.....^.a..G....Jf..P.r=...O.....XFv...>l..2.].M?._?;.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 1 icon, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	4286
Entropy (8bit):	5.157520760822341
Encrypted:	false
SSDEEP:	48:er7z41Fi4mXEJyfetrETUzkPPgl0TzcHdCC8ZzsVhRItkhXj4FOKWXG8Q:u7z41c4mXEpHzk3gqzNCBKwKWWB
MD5:	975B4112A366CCA6B9BF2C84E268268C
SHA1:	97992BEA1D222B36E9B77B1E0E2C9F0CFDE0CCF5
SHA-256:	181349B08B8DA309823B3B6A670CE13581FF82AF7B03DB71BA60C705D0620261
SHA-512:	1440CD81F276F753DE3B6DFC7851D569689E998F14C55DCE698F68B4487D36E18B9D010DE66EC791FC97704CCC674AB65B26AC46F298A97B664FFE7BCCC90034
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/favicon.ico
Preview:	...... .... .........(... ...@..... ..................................................................+..+G.'..(..)..(..)..(..(..'..(G.+..........................................................................+..)..(..(..(..(..(..(..(..(..(..(..(..(..)..+..........................................................I..)..)..)..)..(..)..(..(..(..(..(..(..(..(..(..(..)..)..I..............................................+..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..)..+......................................,..+....)....)..)....)......)....)..)..)..)..)..)..)..)..)....--.............................+..+..............................................+..+......................I....+..............+....+..+..+..+..+..+....+......+....+..+....,..I..................+..+..+..+..+..+..+..+..

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	1607
Entropy (8bit):	5.1652453747545986
Encrypted:	false
SSDEEP:	24:c86DSWb2HJBQLSf3pss9QCjrZNF5P4FPnLwylaxYLa5qSY1WgwFqwgb+qrazOcwm:KSW6HJ+G9r330vLsWL+8wFqKq+icAS
MD5:	6FF13B62455AD58F06B82ABB98711977
SHA1:	A9334DBAFF4E9DC57F812C8E322707256F3FC731
SHA-256:	87E288B331FD5CB9E6EA884D5194DEC57C739994D2495BF6D10DD3EA0CDE7199
SHA-512:	6859FDDFB5CD94F3B109BE7EC0FECC34D83D943C3AE5F769DD55BD22D5CDDE0805D945FC3C52D1BDCF9DABC05255F8D8F16B3695CE40639F476DCFE277A88565
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/scss/base.css
Preview:	html {..-ms-text-size-adjust: 100%;..-webkit-text-size-adjust: 100%;..line-height: 1.15;..-webkit-tap-highlight-color: rgba(0,0,0,0);..background-color: #ffffff;.}.body {..margin: 0 auto;..font-family: "Microsoft Yahei", PingFangSC-Regular, "Helvetica Neue", Helvetica, Arial, "Hiragino Sans GB", "Heiti SC", "WenQuanYi Micro Hei", sans-serif;..line-height: 1.42857143;..font-size: 14px;..max-width: 100%;../* background:#e8e8e8; */..background:#ffffff;..color: #333;..overflow-x: hidden;..overflow-y: auto;. position: relative;..min-height: 100%;.}.::-webkit-scrollbar {..width:10px;..height:10px..}..::-webkit-scrollbar-track {..border-radius:0;..background:rgba(0,0,0,0.1);..}..::-webkit-scrollbar-thumb {..background:rgba(0,0,0,0.2);..}..::-webkit-scrollbar-thumb:hover {..background:rgba(0,0,0,0.4);..background-color:#1e58a7;..}...a {..color: #333;..text-decoration: none;.}..ul {..margin: 0;..list-style: none;..padding: 0;.}..p{..margin: 0;..text-align: left;.}.h1,h2,h3,h4,h5,h6{..margin:

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 261 x 66, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	5568
Entropy (8bit):	7.890455757101775
Encrypted:	false
SSDEEP:	96:Vo7F52Yc37fFb5RzWBJBV1FPCjzJIwCc0N0456N/9ZYYYzM9x4eIsl:67F0fzWBJBV1OJNy0456N/9eziueIsl
MD5:	2169E7E6581D20C5F64214A864BF4395
SHA1:	2A1F07D49E9D7202AAE77613E6B07AC80A15D9B4
SHA-256:	1853B1A99AC858C4DB3832389A6E6AC90D90E5AEC0995780AE7A77B922658479
SHA-512:	144C324E9A92A267D0375DD16E4146B9B6FE87FA47D81CA6C34A075FF6778AF010A659DD0AE7D6E365D27C356EB5487ECC213D6B353AECA4828722AD87E73B22
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/yuandaima.png
Preview:	.PNG........IHDR.......B.....^.......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:12FDD53A4FBE11EE8A22EC8A27CDF72B" xmpMM:DocumentID="xmp.did:12FDD53B4FBE11EE8A22EC8A27CDF72B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12FDD5384FBE11EE8A22EC8A27CDF72B" stRef:documentID="xmp.did:12FDD5394FBE11EE8A22EC8A27CDF72B"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.#]....5IDATx..]}l.G..=...'.&i.6M[..mJ?m$HR..\....J..jU.R[..........P%.............('.h]..ji..R.....&....-...a<73;.

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 880 x 536, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	161759
Entropy (8bit):	7.992489063298861
Encrypted:	true
SSDEEP:	3072:OEhaErwKjjRJLnmy95IkJU1dJuMWBxg8jkr2fyFKQ9JkmO:1aErfR4y9UdJu5xe2fyFKQ7kmO
MD5:	A2D1B7E8265D4D9EDDC4B90605C55680
SHA1:	DD321E58322B9C3F1BCB784C2C6FBADCAC2BD9A1
SHA-256:	24FC10ABAF2557BBE71BEAA8D5C7E0C1D2FB1ECD9D0900A6C29A3660D71FB0DF
SHA-512:	0A6CAE55F54D39D1FF13EA15D2D2865CC49F2E7C7B4CE50659CD1BCD19926C3A68DEED4671D985450D08028FD927E47CB46C82A31B7BBC851A3AFB0B1D2A130B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p.........,:.T.. .IDATx..y.d.]..9.]r..zo...,Y6..l.....=..c.....&x..3..0.A...y..l.. X..01.....c{l..d,.Em[.Zrkm.......+.{.Y..73..[..]Uu..D.......v...~..O\|..'.....@`.....R.:-....P..VN#....{..[.).#-......AU@...Q.{.......O...)...~...d....j......H.U2...~.........D.........r..`.-............@ ..#E....T..$.,...;@...q.).i...o...+..Pc.:8..F.tDN..$......{.R..X.J..m!.zt....J..J(.<...Y.....].l.V. .....@`-"..,..S.i...cp...........,#I....q.c+..T.J".(A.<..x......0=.g........9.......KK.........x....y&.}..C.tv.N....@ p..$PX(....-opJ....)4.$9...d.a..L...ZJ.k..4:..R...`..R.Y..h-PJ...a.....I.<\|...7rl..<T.`N....KB.p.@ .....V..S....X.CD....g.Y.u.u...+p0..Ib.h,p..%.. ....=...H...].g....8.vE.2.>.Vp.Qpog.4...e.........KB.p.@ ......B......HP.......,N.b.+..............<..... 6..'.........sXkQj.v.p..V.B[P.1#..$..<.9F...............x......Z.S.)......GEJ..p.Ck.T.l.D;gbt..Y.K......*...p;.._.BP:qz......?o...4w.:EEp:.H..t..nX..Dh#.....@`;a.......0..s.mdZA...A.

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1508
Entropy (8bit):	7.05130664412254
Encrypted:	false
SSDEEP:	24:m1hmYaWwjx82lY2T3XVqEyJ3VcEGOgUOO1QULDFeDBjU6ril3C3rrCBa8r:sMYLNn2DIJ3ljgRMLIDBjmy7rL8r
MD5:	A1789A8BE60AB9EF7173E6984E137510
SHA1:	771D59FB99EE975B4CBC35BE8A55CA136E4F02B3
SHA-256:	8563A37FAACEA5666B6EDE762BAC1321533969BC0477D51DECC99B20EDE900EA
SHA-512:	768DB0DE430B6F62B7B5037E9745244BCE51AED5E83E5911CA7C6B1038AE4BCE3030E4A39A00D7D2768881EDBA4A0EF1A59E10582C82E4A51826A0953AEF428B
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............w=.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:45B6D88A539011EEA6ADAB0A1EDFD353" xmpMM:DocumentID="xmp.did:45B6D88B539011EEA6ADAB0A1EDFD353"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:45B6D888539011EEA6ADAB0A1EDFD353" stRef:documentID="xmp.did:45B6D889539011EEA6ADAB0A1EDFD353"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..._...TIDATx..OH.A..w.....Rof..C.A.....x...PB.A.K.PD.AH)......CT...aexK.D....!-j.Z.<y?.........~..7.7.x...."

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 896x501, components 3
Category:	downloaded
Size (bytes):	28049
Entropy (8bit):	7.758736018157201
Encrypted:	false
SSDEEP:	768:mqOrZc9grDWuVNENdoNL/QH5piTswaiNjTx9V/4xb:hOrZc23bNEXoJ/cLT03KZ
MD5:	3AA11F22AD97B6F4C37E2EB264786DD8
SHA1:	D1FF913A9678A0CCCF84BF05FA679F063F3A3EC0
SHA-256:	FA1F1D475D2E80D4E26F8C666D4E5B439A8526A3D355508E404C8057E58F3008
SHA-512:	82E4BE94A453B826847B4D582073945779ADAF4135417FB5386CEA51A64534432A2E5E3D647ACAC7E342B07466BEB3B4AF1C37493B02AA46719C48969C616283
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/shipin.jpg
Preview:	......Exif..II.................Ducky.......<.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:74DDAF084FA011EEAEC7C41735FC9156" xmpMM:DocumentID="xmp.did:74DDAF094FA011EEAEC7C41735FC9156"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:74DDAF064FA011EEAEC7C41735FC9156" stRef:documentID="xmp.did:74DDAF074FA011EEAEC7C41735FC9156"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 476 x 62, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8230
Entropy (8bit):	7.925798020042435
Encrypted:	false
SSDEEP:	192:e7Fl6MXB3oviIYOR+bBDjd9crK3BKP6Bm4na1Rhp/:e3WviBPDjgrKxKOnaVh
MD5:	9B703FB1B9063E07F8AAF74D98815527
SHA1:	99163C3AAAE0777AD90DB550D22E86AD3396138C
SHA-256:	7DEE32F938C1E25F05EC91228820FBEAF69374C03916FB43FF56C3D295A937C8
SHA-512:	0FACC317EDBC3F2E8C0EF1EFFDD60F90EC77F03C9C25789E574A38F497B5DAE94FD391E45BBFCCD755CC7B64C52C274BF9A580AA67BBB500E0063E5E79AAE028
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......>......X......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:99B591CE4F3F11EE87D2CE5C59C8D500" xmpMM:DocumentID="xmp.did:99B591CF4F3F11EE87D2CE5C59C8D500"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:99B591CC4F3F11EE87D2CE5C59C8D500" stRef:documentID="xmp.did:99B591CD4F3F11EE87D2CE5C59C8D500"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>........IDATx..]i...u...y..R.i...0.:p.d..:...,.#:...P.H.Cy.H.....B.`.J...J [.1k..D..v......E~8d.g'6.Xr...P.I4.]..c..t....

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	dropped
Size (bytes):	2202471
Entropy (8bit):	7.979052935208376
Encrypted:	false
SSDEEP:	49152:6vlOdSROHsszcNNbDPEZbaseHhV0G80Y/Ren4gzGJI:6vlklMszgNbewHT8fRXdK
MD5:	9F6CB1E0D2A29541764755E05B484DE7
SHA1:	D443F92ED7059A30DB98857F6C5C290589EBFE24
SHA-256:	ABDBFC359A2954FADB7D335A20C2AE29CC5B00DBD538E88B03D612F978654E45
SHA-512:	8C5C6FA02B9B16D781C40FB0E124FC3E7B5C16A67FF131AAC73D00A2D1A453B8E56145F9639896F4A3F33DE3150DDF128B9474FB3BD65EBF14FD1AA1F9E728D8
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,..........~h.]... ..q>9-....vb..'.......5...\|3+....NMM...5/ .....!}.....c[J50!...=8,2........333...=8-..&.}g..........{e.xb........ GA3....."..%....ydnfS...B</QK<......$..yp\........!ZTE.T.iaOLF8....>...$..$VO@......}t_..#..qvmY..m.I..."...rjVZYY..... ...f^M_XG..z.E..va$...Y....-.0'......C..vgff.&.....O...9..........{.uiB.K...+$.../..y....:7+.x...MLL......_^^OF,...i[+...s...RQP..).m....:.XN+..,....Y....i.......5...5..4.vf+.......E...'..{.1..v....T....2zR.......\|{{....l...X..K.>.---...O>...c.u........b`T+..(..-.U4/..d'.#....sss..0.....\E..]..~........B7..-.-...]........gF..&.......n2.~>g.....3....J....B.Y=5&.....B.1.^.3.'N...%..d.c.>4..g...g[>....'kkk....4..[.tG...@..A,.....q.}P.....h.v;.........C..]Z.......S....Lv$...L.;.........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (543)
Category:	downloaded
Size (bytes):	120844
Entropy (8bit):	5.475236267814473
Encrypted:	false
SSDEEP:	3072:pDYCw7Dw7dKO19ot9Vx90CGgJ4DgiBHuLeUd0o1Y:phwI7dKOfot9Vx90CGgJ4DgiBHuLeUdC
MD5:	43E25947F146DC811F8D587DFCD29C3D
SHA1:	1E27C12FE02F0E1B67C3DF55F18582A78DC95788
SHA-256:	AF99246283374474C1BE3EA31CE96948E4B51E8396F097C04FF577AAD36E3C87
SHA-512:	157DFF2385B500761C23D565D83304AB8D555AD9C882592B168AE52AF71D72B91D4820DC11D2D4EF6916BA96DD4F66B4AD8C97447F7A45CF52DCCE2025021C04
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/remote.js
Preview:	(function(g){var window=this;'use strict';var b8=function(a){g.pq(a,"zx",Math.floor(Math.random()2147483648).toString(36)+Math.abs(Math.floor(Math.random()2147483648)^g.kb()).toString(36));return a},c8=function(a,b,c){Array.isArray(c)\|\|(c=[String(c)]);.g.Iga(a.C,b,c)},MDb=function(a){if(a instanceof g.Dt)return a;.if(typeof a.mm=="function")return a.mm(!1);if(g.bb(a)){var b=0,c=new g.Dt;c.next=function(){for(;;){if(b>=a.length)return g.n2;if(b in a)return g.Et(a[b++]);b++}};.return c}throw Error("Not implemented");},NDb=function(a,b,c){if(g.bb(a))g.Zb(a,b,c);.else for(a=MDb(a);;){var d=a.next();if(d.done)break;b.call(c,d.value,void 0,a)}},ODb=function(a,b){var c=[];.NDb(b,function(d){try{var e=g.dw.prototype.B.call(this,d,!0)}catch(f){if(f=="Storage: Invalid value was encountered")return;throw f;}e===void 0?c.push(d):g.Ila(e)&&c.push(d)},a);.return c},PDb=function(a,b){ODb(a,b).forEach(function(c){g.dw.prototype.remove.call(this,c)},a)},QDb=function(a){if(a.ra){if(a.ra.locationOverri

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 14x8, components 3
Category:	downloaded
Size (bytes):	1206
Entropy (8bit):	6.12611506425524
Encrypted:	false
SSDEEP:	24:gK1hNo7FCWwjx82lY2T3/VTC4PCayJ3V1CBtCfGQEwlrNKQhk:tzo7FDNn2DsJ3nDHlrNLhk
MD5:	0F7C406854D2C3C17C4E27196046F0B6
SHA1:	C51D840F9A2A94A1D007766FE97A77DD17AAFA14
SHA-256:	DFBCD00D52652090CBE1B19009CFAF5DD1234BF5A09073F187C6427BAF24067C
SHA-512:	10356D722829839217E009BC3E3EBB4A58E81959D2FE82CF737D2D28885C296A24112DFD698D1C729BCD20851D12CEA280BD6FB2A5E102EBD71D7EE40330C870
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/arrow1.jpg
Preview:	......Exif..II.................Ducky.......<.....http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:376DF08C4F9A11EE8BE8CF3ADB30233A" xmpMM:DocumentID="xmp.did:376DF08D4F9A11EE8BE8CF3ADB30233A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:376DF08A4F9A11EE8BE8CF3ADB30233A" stRef:documentID="xmp.did:376DF08B4F9A11EE8BE8CF3ADB30233A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d..................................................................................................................................

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 99 x 105, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11995
Entropy (8bit):	7.962832512047426
Encrypted:	false
SSDEEP:	192:g7FQE4KCjt6CY7H4Hb7n+K7Gp7fQA3ILS5KVeu6t2vHHuXpPay1NX:gyEnUUL47z+K7GhfQA3X5Kg8vuXLNX
MD5:	A67BF830F0746E7EDC199013A5FBF7FE
SHA1:	C6EC3AAB180496F4815E5F1713112B2A8D9C5A23
SHA-256:	BBD2FB3FA5AC33414E3C3EBF9093863B41DE921347C389466956C8BA5BE7FCD0
SHA-512:	BB07EA1D31A1C05206FE5195FC5D77F39B0EF2EB7ED6BE3736C6E3F386D60E60559E5CE19BDCFFCA03F0D67B4C3ED2784A1F33B7E3D6264997D1DDE75BD1BCEB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...c...i.............tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:C88819194F3F11EEBB7EF4CC1D96585D" xmpMM:DocumentID="xmp.did:C888191A4F3F11EEBB7EF4CC1D96585D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C88819174F3F11EEBB7EF4CC1D96585D" stRef:documentID="xmp.did:C88819184F3F11EEBB7EF4CC1D96585D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.._...+PIDATx..}..^Uy.s..:...$......."....@.]K......n.R..j......U.k)..(. "......,....>.z....s.73.L..BH.;.3.~..y......

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	2613871
Entropy (8bit):	5.659746932460755
Encrypted:	false
SSDEEP:	24576:8fLkspnefWt6oJp1eeCpXPlH1DVRb0RhGQR3t/:ULkspnAWtZIeCpXp1DgB
MD5:	A0955BD75EE1EBCAECF8AA6780D674E9
SHA1:	526F291FD2A13FC60D04ED4098D257FA459CD900
SHA-256:	029445EFA2B9FEFC24051D5FD28A89C903ABF284C4756F0E42A5F4CA99A6EF1F
SHA-512:	20001A6D54826584291467DD505B2D7806D1B7FF83F379F6F95967E241A3E02709F3509953BE918F6FA9D604564299CCCD85F996CD437E11F44AE85A8CC281A2
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/5352eb4f/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.io/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the Software... THE SOFTWAR

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (1136)
Category:	dropped
Size (bytes):	1555
Entropy (8bit):	5.249530958699059
Encrypted:	false
SSDEEP:	24:hY6svN/6zSU6pedQf3Zvcn1BZdAe1nCr1LTHI5z1sW:3qN/2+pUAew85zf
MD5:	FBE36EB2EECF1B90451A3A72701E49D2
SHA1:	AE56EA57C52D1153CEC33CEF91CF935D2D3AF14D
SHA-256:	E8F2DED5D74C0EE5F427A20B6715E65BC79ED5C4FC67FB00D89005515C8EFE63
SHA-512:	7B1FD6CF34C26AF2436AF61A1DE16C9DBFB4C43579A9499F4852A7848F873BAC15BEEEA6124CF17F46A9F5DD632162364E0EC120ACA5F65E7C5615FF178A248F
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang=en>. <meta charset=utf-8>. <meta name=viewport content="initial-scale=1, minimum-scale=1, width=device-width">. <title>Error 400 (Bad Request)!!1</title>. <style>. {margin:0;padding:0}html,code{font:15px/22px arial,sans-serif}html{background:#fff;color:#222;padding:15px}body{margin:7% auto 0;max-width:390px;min-height:180px;padding:30px 0 15px} > body{background:url(//www.google.com/images/errors/robot.png) 100% 5px no-repeat;padding-right:205px}p{margin:11px 0 22px;overflow:hidden}ins{color:#777;text-decoration:none}a img{border:0}@media screen and (max-width:772px){body{background:none;margin-top:0;max-width:none;padding-right:0}}#logo{background:url(//www.google.com/images/branding/googlelogo/1x/googlelogo_color_150x54dp.png) no-repeat;margin-left:-5px}@media only screen and (min-resolution:192dpi){#logo{background:url(//www.google.com/images/branding/googlelogo/2x/googlelogo_color_150x54dp.png) no-repeat 0% 0%/100% 100%;-moz-border-image:url(//ww

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	dropped
Size (bytes):	100045
Entropy (8bit):	7.980156259768424
Encrypted:	false
SSDEEP:	1536:RCgST1V2rvHlFag2TxqOs0WmrU0+2+XRg1VUoQQkH21NVbDUIV1EVDqqCKM:RLY1V2rv+ZmYUJBXRgXQYtPUIV1U5M
MD5:	6A4AFC26B71FE84FB760385040625B3F
SHA1:	02BEEF47835689FA2EAA2DBA2DCE0A395A823F3E
SHA-256:	369B738BE528CB51C70936C9CF13BCAB6E4FBDFAA0ABD146FC9CB38DE98B722E
SHA-512:	60F0BBC176574C00A13A005D57BBB0A6CC3F957E6AD5964F3D924A25C431A062E5E88C03388327C07F0CE538E4DAB99A695CD0782A656183775A78A2CDE0FB6C
Malicious:	false
Reputation:	low
Preview:	......JFIF...........................................................................................................................................................".........................................O......................!.1..AQaq..".....2...BRb....#r..3S...$Cs.c...4...Dd...T.................................A.......................!1..AQ.."aq...2....#B..3Rb.r.S...C..$...............?..$.(_S>7q.I.O...r%$.%.H.I&...1.....2..Bv.`....t...H&.&.....E.Rh@. S...0O.Bx@...B.S`J..B....($.r.G..'5X.Y...0.L.Y..."..M.J. P.......Y.F.j...@..mU.n.U.].j.!Z.W..$O2e.J.i.w....E)..3.I..)91L#......GhK&2#....%.(..T..a.$@".......9 .N.Q.R...1.&..R...pPqRqPL.bSkS5.p...1.Ju.@..xLJ...L.N.. .L....AE8(...$RRC.$.u..)L..A#..2H xH'H....... .8A.I$....d.@..A:..8I)A..H'Qr..t.A....4'J+b...H..0I<'PE.$. .0DkT@F..Lh...S.)...\.,...S..T....]..,P.vRD.h-....g..N.f...:......)..$.4.R-..?.h.M.l.=.V.%.fO O....*.^).jXI...z...'VH....vNr6Y>'..\A...g` ...HS..$H.bI7=...UO.J).%.[Kf.%...]5..8Xq.V...%.@..;.2y...zm..%

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 26 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1482
Entropy (8bit):	7.0268648716044995
Encrypted:	false
SSDEEP:	24:U1hmYaWwjx82lY2T3XVAMHNStyJ3VAtfAGWEtpRgJipS1GPZ8cqzUwbCKUZ9:aMYLNn2DmM3J3maNH+0pbCK2
MD5:	1039E4724E6E71DF55FDD19AF799EADB
SHA1:	258CD0A3D5307AC1159F28919FD0589CDDAA0C27
SHA-256:	7918A824B075102848E36CF7640770CA9A92DFCFDDF962C9DA857E635B0AC83D
SHA-512:	499DAE3760BF7ED0F13501B3217B80C15816981A8482AC67F5379B94B945CF36255C86A2557AEA98705487B31A31B35195254313A54B1E2BBB2E392F89003C2C
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:386ABD19539011EE967FFC465CF8BE2D" xmpMM:DocumentID="xmp.did:386ABD1A539011EE967FFC465CF8BE2D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:386ABD17539011EE967FFC465CF8BE2D" stRef:documentID="xmp.did:386ABD18539011EE967FFC465CF8BE2D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.9.....:IDATx..KHUQ......%!...DH.e.K..=P. .AB......j.4...... ..j..A".$.It......dH.....a...h.w7....Zk.sKr.\2.-..

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	98
Entropy (8bit):	4.3345953784587445
Encrypted:	false
SSDEEP:	3:UV9DZUAKVcLfA2OnMz9BF+RUAzKZMAyn:UbFKVU4Vu9zTAO6
MD5:	E6094661D8923E95B233019EBFF7C8F0
SHA1:	CFD836D385D475BAFFEE45D85CFEB9BB36E70D9E
SHA-256:	547DDA3C14B284819BE511BE1E410DA94A5EFC6CCC4A9AFE1C75394F9333191A
SHA-512:	B5684920345CCC14419CEC135D43521BDC9B77618BEFA0096E11E33414DBA09225FFE8E19EF10F3D75A74A086CFA40BE2EBF3A4310FA6395E3E2D407A7451995
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/plugins/faq-schema-ultimate/public/css/faq-schema-ultimate-public.css?ver=1.0.0
Preview:	/*. All of the CSS for your public-facing functionality should be. * included in this file.. */

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 20 x 24, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1282
Entropy (8bit):	6.812115332319578
Encrypted:	false
SSDEEP:	24:Wn1hmYaWwjx82lY2T3XVLKCkMyJ3VEUX5UVGuhVExIdvnFeA0z:gMYLNn2DZKvfJ3OUiVLhVExFx
MD5:	1AD800A637BB5ABAB82CB874736A4314
SHA1:	9AE8ACD3AED4E4728EBBA2E8FC9AA6F57AE741F4
SHA-256:	F2CED12D8B4A6F16578FAF0A46F2665D6E1C8CC23BDCAC64AB3E04AFAF8F2AAE
SHA-512:	5B3F2C58D1D820A16F76B7D015F0858C8BD77DAE49DE14A4732613E1835F5754856E1A6396B098173D52F037ED037F2BB84ABBE28EF72056E5FD7DF56EB69B11
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR..............K.v....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:284A6D1B539011EEAE8B825C3DC15B6D" xmpMM:DocumentID="xmp.did:284A6D1C539011EEAE8B825C3DC15B6D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:284A6D19539011EEAE8B825C3DC15B6D" stRef:documentID="xmp.did:284A6D1A539011EEAE8B825C3DC15B6D"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>4.]`...rIDATx...K.@..S+UD:..Z\...!....uq....qH..A...Z..:. ........*...H..P............&...].......+..Z..5.agJ.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	77466
Entropy (8bit):	7.994393970007788
Encrypted:	true
SSDEEP:	1536:2KsKwK2IQ2aU+yBmRPKuIXpmw0sb2YdmYYNC5hu17:1s3iQ2Rqmmw96YYNEu17
MD5:	02DAF211A48ED1F493EA452FB3E1CA38
SHA1:	949D1A75596B601C77D60B9A792DD1B571CB3404
SHA-256:	1969A35E31FCE2C06346BDB20BDC8EC121B1A029591321088CA02542EED462A2
SHA-512:	22A8C133A1854049BA4D0BACC4E442D4A056D70CC98DD187E2208C94DED87E903605A542C542AC4689D9D467571600837D37B0E1C53FDDF84E828D890C964DA8
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...,...,.....y}.u....sRGB........DeXIfMM........i.......................................,...........,.....`....@.IDATx......U.w.o?f.gz4#1.'zP..`....(.Qd....... v@2V..B0E.....c..8.`.C.#....QN...b.!..U.0..R y.H...tO.Lw...._k....A....V......k..........w..upp..M.6..d.N......&.M.6..d..l6..:.d`..;&.....M...l2..6k`..M...l6.;f.6.n2...f...M.6..c2........&...k..6..d....f.c.j..&...l6....d`..;&.....M...l2..6k`..M...l6.;f.6.n2...f...M.6..c2........&...k..6..d....f.c.j..&...l6....d`..;&.....M...l2..6k`..M...l6.;f.6.n2...f...M.6..c2........&...k..6..d.....QE...uT.....\|6.b....o2.G..4..u.1....&..........q}...my..x6..M.ba/..q3..E..O..M}.g.7..mN..t.A.....<..g.\|.a-.{x..n..u.,....d}..g.....7......e.=.-{...2...}..o....>..N ...f.S.i...l.~..l....V...lY.....k.]...gN...\|x..{.Z......}....W....}fkg.,..V[.....;l.:..%..w...8&.p0.....t.q.V..Y~.B.`.T..zt..KQ.>.9.X./...m.u..q..g...c$...0M..k...].k....a........av...s.p[...n...1Q.[....c.N...L

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	238
Entropy (8bit):	5.029871559573576
Encrypted:	false
SSDEEP:	6:tI9mc4sl3GRtuWR69G0uvwLqFiHcQJ5fLkVX:t41cCYZw2rQJ54B
MD5:	5E86CB665CF3001E54A890D4C32275D7
SHA1:	555F2D46621A249C86A3A319792E675D87BFC8B6
SHA-256:	2C0C291BC0981BA13C0FAB388914B31AB2729AB42036EF251081077A196403F6
SHA-512:	63D2B7A9DD81921CDD37F64AC732BF86E5CA8A98C8E58C93FB1526FE539A2D8C0ED8C7F49D378AEFBDB1466C5F1B60257F4BC1036C3A6A1B1A3E8DE6D68CB0C9
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/svg/inactive.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">. <path fill="#fff" stroke="#777" stroke-width=".5" d="M12 .587l3.668 7.568L24 9.306l-6.064 5.828 1.48 8.279L12 19.446l-7.417 3.967 1.481-8.279L0 9.306l8.332-1.151z"/>.</svg>.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	dropped
Size (bytes):	2254846
Entropy (8bit):	7.954275198982014
Encrypted:	false
SSDEEP:	49152:yQZjB1p5xW9tkpszhhGc+zHLfzWXJO/FGS33KVCxjb846id5Xv:yQ5enfGc+zHLfz4AN53eCGUd5v
MD5:	999CCB074C15D6377F97302832038C14
SHA1:	C08B94482AD5540F68A896F30CC890474C058E1D
SHA-256:	15D01829FAC9057A922B9168D68D9EA940D7612B0128AE9B67FE69A1DD10E62D
SHA-512:	A3F571FFD449803E6FBC583CF15FAD48A5A6F17AA1BA1D11AACD0A9A94DDAEFFC96283D86918AC4DA046C3544313860174DE46E44AEA2541B0DABEF5228B7DBA
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,...........!.....!...r....6....]..5....}................\.. ..... q.... .......R... .Z... .I..>...........N..7..W... ....U.r...?...........9... ....3........\... .<.....F..q... ...T.....H.....D........3...........0..!}...d(.. t....x....'../.\|....A.....h...............>6......-.H...=...z....$.....)..........Y.....F....... ..d.)...L...._Q..l... ..t........Y.....>.$.........cMD......v..X.\|G...5..:..N..?...O..8.m3..../..O.p;...C...5..U.......!...5......C...................'''..:...c.o^.....r8............n.. .......s...]]]....N.S....E..}.b........B.....h..R...u@!..y...$...t.........j.........z.....5.@6.~......x..b...............o...2...Ug..].ez...w....T.]...1.........@@@..o........u..]...ppp.....8..... ....s.M.......w.......f9.................H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...P.J.J...X.j....`..K...h.]...p..K...x....._..&.&.a.&.(^\|.....K..e..%K

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	downloaded
Size (bytes):	3145277
Entropy (8bit):	7.953143514728729
Encrypted:	false
SSDEEP:	49152:CemZo1qgcCRvd01jW8Ww32uqinShq264q6PfzRhmpt5ZcB6Ioo9hl:CVoQ4MjW8ouqiiq264qiz3ouoo9n
MD5:	5433CF6CF6DAA107F38CC2F2B221ADC5
SHA1:	84156830CC0E51264342C37F2043C441562B137F
SHA-256:	321FB7936DADA76CE957347F61CD05BE88581C5C3532D5CF87D346BA677474F6
SHA-512:	DE25BD62C56F7529C96968B557D048F65F5B0E0427C94768D56D42EFE2E6B09F07A4EB0AC560BB05CD76A7C955BDC7EB8752BAA523764829F049791FE82F6F63
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/d9.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.........[%....z..."n.....!.<..o....[$..M..... .Z$..n..k.[%..n..`.....g..\.Z"..m..!m....U.[#..b.d(..I..h..R..^.`&..Y.z..}4.g..f..S.[$..6..b.....m..?.m,..j..K.x2.b'.j,..?..L..k..P..Y..W..D..;.o..u0..o..h..e..:.r/..>.]&.._..R..F..I..d..7..B..8..U..[..O....<..r..x%.@..A..V..E..{.z2..N..........N..[..............i.......H....O......n.......H....D...C.B..o.>...i........v...P.b..E......]).........9..%.......................1.D..U........}7......}..^....N..R.........l> .....V:...).....jT...-..............n.vI,.V..].....\......\.......P.._GP!...\|. l...f...z.x...l7..i......{ic...x..d........<..............k.....g6.zG........=.............```......I.U.?....555...r\.....K..s>..w2.......\.{E.. PPP.pA.W&^....c..J.x...l0....p.r"..i...ppp..L.........H......\....#J.H....3j.... C..I...(S.\...0c.L8._..^........3...J...F3..B...P.N.....X.j.9..S.`......h.n..-X.j..K....n...J........@.b'......$.....&D.zuB

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	29
Entropy (8bit):	4.142295219190901
Encrypted:	false
SSDEEP:	3:lZOwFQvn:lQw6n
MD5:	1FA71744DB23D0F8DF9CCE6719DEFCB7
SHA1:	E4BE9B7136697942A036F97CF26EBAF703AD2067
SHA-256:	EED0DC1FDB5D97ED188AE16FD5E1024A5BB744AF47340346BE2146300A6C54B9
SHA-512:	17FA262901B608368EB4B70910DA67E1F11B9CFB2C9DC81844F55BEE1DB3EC11F704D81AB20F2DDA973378F9C0DF56EAAD8111F34B92E4161A4D194BA902F82F
Malicious:	false
Reputation:	low
URL:	https://static.doubleclick.net/instream/ad_status.js
Preview:	window.google_ad_status = 1;.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	246
Entropy (8bit):	5.059655753372202
Encrypted:	false
SSDEEP:	6:tI9mc4sl3GRtEatXEl0uvwLqFiHcQJ5fLkVX:t41czlElZw2rQJ54B
MD5:	0300557E1F71E36801B50D96F299F235
SHA1:	4E6AE10512544899D1AE757C9B48BC647DFA9E84
SHA-256:	BED6CEF3A2A83B0BFC42310907AA856549A86C15B7F3103D936C3D436BDD0655
SHA-512:	80E1F438E32411AA754DA37CE0C6F40FFADBC4F78C42702D08A8E92C50A9168292EE7BED676B5D8069B0AC0F44B83589A9BB1E0D650278496D2FE68348AB6228
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/svg/active.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24">. <path fill="orange" stroke="darkorange" stroke-width=".5" d="M12 .587l3.668 7.568L24 9.306l-6.064 5.828 1.48 8.279L12 19.446l-7.417 3.967 1.481-8.279L0 9.306l8.332-1.151z"/>.</svg>.

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 768 x 512, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	254911
Entropy (8bit):	7.995345167524393
Encrypted:	true
SSDEEP:	6144:IfPptcB+ncP+snmHmeuYUGwOQOLCsJrL/0/8wzr/90W8UQ:I25mHmbKwOxLCsJ9s2oQ
MD5:	64D61A21BAFAD4355D3C314B678BEB26
SHA1:	93CC5E065053834BE5DA3392E2076E80B7892D03
SHA-256:	294AB18442242A5A048FF4D24C85EA061F9828C3BB0E30673CCB98885E859D38
SHA-512:	AB5F60419970591C5BAC568E8852368A0157DFC5BD7A59FFD474C17A48753C716A2EB032340166651C6C485BFF30F81245E76D55AF6EC3F1DEA90C1C77E54E55
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............5..:....pHYs..........+.... .IDATx..y.$.u..y......{.17....H........<M.-.6.2.Xy.........{..:B{.z.!.Z.j.2I.H..H........`.....+.......9@. ....bf..2..2.......0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0..0.[......o.,M...R....OU..S...f.....g..?...kG^.;w.\...b}....n.$.K.]....)Y.AAUI..4.P.Q`._..).h~..m..?.+Z.^..?.9z.c.\.h+ ..H~mlXJ..s..U..#.BB....a..E..("r!A%H..j...........;........^.e.....s..Q.S....T5..{w`..0.....\|.PT...f.zm.L):.~JD..$j.W.#G.._y....'.3gN.W..^.N7\n6.f.I......s.....>7.D...s.....Ha^......(...e.G(r.)..2._._....wN.:EP.....p{I..$A}...Ep.(..Z.

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 1280x720, components 3
Category:	downloaded
Size (bytes):	100745
Entropy (8bit):	7.976541051391702
Encrypted:	false
SSDEEP:	3072:BG57Qns5av+1PRyUu4fyNj1/Nsn2U1NgA:wEs5s8ocyn02AeA
MD5:	F4DAAE2EF198326B8D82B5EE3AEB36E1
SHA1:	D4FEDFC00D6CD03A36EFBE54713F23128EE5413B
SHA-256:	F1666F4DB4E2BBA5FF06BDB1998889889B024F9A1DFD324DB0751C4FB9424ACD
SHA-512:	8429420CC85AAE11F8F82B4AEC48D1FEAB591EFCCADD15C6C79C26AF3D2BA4D65D49EDC02F394FE59494CF25C27869621E077B78D3EF7674EFAAF78ABC9252ED
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/maxresdefault-82-1.jpg
Preview:	......JFIF...........................................................................................................................................................".........................................j.........................!.1A..."Qaq.2...BRt......#46Urs.....$35STbu.........%&C....V....DEcdf........................................>........................!.1AQ.."2aq...3.#BR....br...CD.4S$..............?..I.@H..;.V..P@.B..S..X.&..4 FP.! .!.!.@.B.......9..\.....N.."m..Yc..A.a.8s.....eu..1W....]VH.M..3].!.C@B.... .!...B.B...`Y-@K.2...IY.d..E.Y. .aX...D.....;.sw...F..{..HaO4.l.l=.t}..F..K...aq..[6.T..<7.l(.......[...5..s.<.....vc.wF.c`..I.g...ST0F.z....1x....1....V.[@V.Q.I8s.=..l.`9..b.h.L".;.<.)....:.....`..$._.Mm..zL....;).\.....H6.:f...n......t.Z..mV.......V;O...5.+].h.l....j......H+..j........ ........lPA.F.[k:...1..y"../......xam...5;..A...h.m.`.........I.7v+X&.x]".L.-;.Wh..b8.W.....<P...B.....b.fZ.}=K.pFH..wE...oZ.,./...].....Xh,........"

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	4.952963038414406
Encrypted:	false
SSDEEP:	12:UXv7Fc4DpWNRKL+BK/sgl9hrIYerznR3zueIDRTLG9fkVlF38LG0DAvYodXotHNu:u6oTTlrIYevhTuKtLG0MAodXcNu
MD5:	2DFF575911FD65E601AC64F87F07D5D1
SHA1:	AE28A08E8E333C9234AD0D024D0865E5E36C5B2C
SHA-256:	7DF89772DEFA309D97987A7D985ED3F0DA91D81180FE69BB11DA8A8B181B418D
SHA-512:	3E6530272A6497738135CE998D2221588C487A27F20BD3745224F3FA43FDBFF8A2C8DDD42709B01B1CBF8FCE8EB6DC1EC9FADFE5FCF1AAEF0DE5B18CAAA6CBD7
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//p-42d04e97.js
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const n=function(){window.MusicKitComponents={version:"2350.1.0"}};export{n as g}

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (8586)
Category:	downloaded
Size (bytes):	35601
Entropy (8bit):	5.417870799802453
Encrypted:	false
SSDEEP:	768:CON0gZdapFYaeJ6uuJWaak9JfJwRJR78iBRPh:9apreJ6uuJZak9JfJwRJR78URPh
MD5:	95F7D8440CB093645647C8D33F7B4B2C
SHA1:	0D55E225D0FDBA90D6143EBD4C0345C3448EF5B7
SHA-256:	5E5A77CF4EDEDCFDE66FF6D134664554F62CEE77E699BAB4DA8F47E2E4A2285A
SHA-512:	8C5905208D1DBABC5F7A0C530B4411B8DFF7FB6306D4AF3B8BF174F580A7827577ED03C9842C8404024B6488FAFFE5E556E7AFBB3BD49163B8D1DEA00A6B2D1C
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/android
Preview:	<!DOCTYPE html>.<html lang="zh_CN">..<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/base.css">. <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/media.css">. <title>Telegram....... - Telegram....</title>. <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO Premium plugin v20.4 (Yoast SEO v20.4) - https://yoast.com/wordpress/plugins/seo/ -->..<link rel="canonical" href="https://www.telegramkv.com/android" />..<meta property="og:locale" content="zh_CN" />..<meta property="og:type" content="article" />..<meta property="og:title" content="Telegram.......

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: "Compressed by jpeg-recompress", progressive, precision 8, 1200x628, components 3
Category:	downloaded
Size (bytes):	15898
Entropy (8bit):	7.5224152849316654
Encrypted:	false
SSDEEP:	384:iLIbwJ1mGVnp9+/xIHLaMNbaVKvuy+HQA7036:sIkSGVEYLaMNbk9HQAwK
MD5:	2CAD5B8958909ECE03F09CF081C0C538
SHA1:	1304A56CCC71EB0403F3F61924FC21820B199D6E
SHA-256:	B19F8B89AD4402FCD0D8037F7B975963672F5F5870957FAB572DE73220CECB1C
SHA-512:	8DDCBFB6EB8545E01DC140FD8D049F59F47CDC5979770B838C66E494CB67FED421A5B7F88E7CB36A89B1810A55C4BAE2EC26CFA7772D57D8342B3FB27253B57E
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/Telegram-3-1.jpg
Preview:	......JFIF..............Compressed by jpeg-recompress.......................... ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............................ ..... 1.$..$.1,5+(+5,N=77=NZLHLZnbbn............t...."..........4.................................................................z............................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................"..r.r.r.r..U........................................................A8.a...j....:"g.....".Y.&..WGH...w>j...................................................T.@A'pN;.GQ..?^..8.

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 449 x 66, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8437
Entropy (8bit):	7.924769298015021
Encrypted:	false
SSDEEP:	192:I7FaQ+3cdvRjB8gdqz2RrqIkNHOhIDX8aZwemCUSJ5aZM8o0:IF+uMgdqGqISfPKYJGMx0
MD5:	FA4F36628D1D284D3C2F8280F5B8383E
SHA1:	00D4093839798746FDAC0515A132309AC2115A61
SHA-256:	CF5E317D1DE438EEB4ECCE89560D38A8FBEFE426C50984652E51DFB37DA2AD66
SHA-512:	09696912BC8DF1C2C382260F36F2C66AAD3712A40C74F88B8B37F75B19BC2FB7258E5D182F8E95E7E856870120FD6826C5F9B32ADE7B63EE55E18E276C590560
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......B...../.m....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:1FB4E4B84FC711EEA7E2D8DF26ED85E9" xmpMM:DocumentID="xmp.did:1FB4E4B94FC711EEA7E2D8DF26ED85E9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1FB4E4B64FC711EEA7E2D8DF26ED85E9" stRef:documentID="xmp.did:1FB4E4B74FC711EEA7E2D8DF26ED85E9"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>...s...jIDATx..]}l\.q.w.QGR.t....1.8..7N...M@..'hQ.mZ....h.".T.p..E%.0..E.A.&.Z.h.X.#.....6....$.nM'.kI.lJ.)~....5

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	downloaded
Size (bytes):	9946
Entropy (8bit):	5.303383252274076
Encrypted:	false
SSDEEP:	192:NdbWsWxwiKpBpVyPPjg9bt9MVzclvs4oRL19n3kufDi/9secuFjel:LbWsWx3KDXR9THl1iL1l3kufG/9sebjS
MD5:	9BB28E4E947B15C91F9178EFF5B23264
SHA1:	87F5AC3AE29A7455DD00F79435B1D91F664F0395
SHA-256:	9FEC8921027F561C8BD0FDF17C244E35F26ABA8E336571597FCCCD9D42D7A0CA
SHA-512:	4566D611CDC37D0F4C34D36ABA45AF69036C4A9E155FAAEC80D70B20C24555A319C8227377D9AA7E7EF02077C2E83C050DB8BACCDBF48417D8772F64818AA7A5
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.722.c70bd733e7b77d8198f0.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[722],{32722:function(e,t,i){var n=i(24178),r=i(76588),o=n.SC.attachDelegate,s={setDelegate:function(e){return o(this,e)},localStorageObject:n.tO.localStorageObject,sessionStorageObject:n.tO.sessionStorageObject},a=n.SC.attachDelegate,c={setDelegate:function(e){return a(this,e)},makeAjaxRequest:n.L5.makeAjaxRequest},l=n.SC.attachDelegate,u=n.SC.hasAnyKeys,p=n.SC.isArray,h=n.tO.saveObjectToStorage,d=n.tO.objectFromStorage,g=n.P0.exponentialBackoff,f=n.EE.valueForKeyPath,S="noTopicConfig",v={blacklistedFields:["capacitySystem","capacitySystemAvailable","capacityDisk","capacityData","capacityDataAvailable"],compoundSeparator:"_",configBaseUrl:"https://xp.apple.com/config/1/report",constraints:{profiles:{AMPWeb:{precedenceOrderedRules:[{filters:"any",fieldConstraints:{clientId:{generateValue:!0,namespace:"AMPWeb_isSignedOut",expirationPeriod:864e5}}},{filters:{valueMatches:{isSignedIn:[!0]}},

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 880 x 536, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	161759
Entropy (8bit):	7.992489063298861
Encrypted:	true
SSDEEP:	3072:OEhaErwKjjRJLnmy95IkJU1dJuMWBxg8jkr2fyFKQ9JkmO:1aErfR4y9UdJu5xe2fyFKQ7kmO
MD5:	A2D1B7E8265D4D9EDDC4B90605C55680
SHA1:	DD321E58322B9C3F1BCB784C2C6FBADCAC2BD9A1
SHA-256:	24FC10ABAF2557BBE71BEAA8D5C7E0C1D2FB1ECD9D0900A6C29A3660D71FB0DF
SHA-512:	0A6CAE55F54D39D1FF13EA15D2D2865CC49F2E7C7B4CE50659CD1BCD19926C3A68DEED4671D985450D08028FD927E47CB46C82A31B7BBC851A3AFB0B1D2A130B
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/%E7%94%B5%E6%8A%A5%E5%A6%82%E4%BD%95%E6%89%AB%E6%8F%8F%E4%BA%8C%E7%BB%B4%E7%A0%81%E6%B7%BB%E5%8A%A0%E5%A5%BD%E5%8F%8B%EF%BC%9F.png
Preview:	.PNG........IHDR...p.........,:.T.. .IDATx..y.d.]..9.]r..zo...,Y6..l.....=..c.....&x..3..0.A...y..l.. X..01.....c{l..d,.Em[.Zrkm.......+.{.Y..73..[..]Uu..D.......v...~..O\|..'.....@`.....R.:-....P..VN#....{..[.).#-......AU@...Q.{.......O...)...~...d....j......H.U2...~.........D.........r..`.-............@ ..#E....T..$.,...;@...q.).i...o...+..Pc.:8..F.tDN..$......{.R..X.J..m!.zt....J..J(.<...Y.....].l.V. .....@`-"..,..S.i...cp...........,#I....q.c+..T.J".(A.<..x......0=.g........9.......KK.........x....y&.}..C.tv.N....@ p..$PX(....-opJ....)4.$9...d.a..L...ZJ.k..4:..R...`..R.Y..h-PJ...a.....I.<\|...7rl..<T.`N....KB.p.@ .....V..S....X.CD....g.Y.u.u...+p0..Ib.h,p..%.. ....=...H...].g....8.vE.2.>.Vp.Qpog.4...e.........KB.p.@ ......B......HP.......,N.b.+..............<..... 6..'.........sXkQj.v.p..V.B[P.1#..$..<.9F...............x......Z.S.)......GEJ..p.Ck.T.l.D;gbt..Y.K......*...p;.._.BP:qz......?o...4w.:EEp:.H..t..nX..Dh#.....@`;a.......0..s.mdZA...A.

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2907
Entropy (8bit):	5.281482030291948
Encrypted:	false
SSDEEP:	48:B9qQmnG9HnjzjFdgkF01oahGCRnL0wenjgqTZMG+RZqY+1aML/ICCw+VRepN6Eef:PqQmnG5nPjFdgCkhLL0BZD+7/Qa0Qfpx
MD5:	F74050F4BACB44B594F0014217A4B3C0
SHA1:	7F45D27C9185B2B4312140F234258BB76573A2C4
SHA-256:	66361C617E79F2F0643B4CE1A922A59CB6D4E048FA3EE5CBC2309AB826AF40AC
SHA-512:	69AAD8EB67D3EB01CE4C2FC225AB620D79BDF63CA9FB5009AFEB113E725F028C80CCCA020F7DD049299F3504043DA7C7EC76C4780E50321503CAD287AB07DDD4
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2
Preview:	(function(){var a,b;a=this.jQuery\|\|window.jQuery;b=a(window);a.fn.stick_in_parent=function(d){var p,m,o,n,j,h,k,f,l,e,c,g;if(d==null){d={};}g=d.sticky_class,h=d.inner_scrolling,c=d.recalc_every,e=d.parent,l=d.offset_top,f=d.spacer,o=d.bottoming;..if(l==null){l=0;}if(e==null){e=void 0;}if(h==null){h=true;}if(g==null){g="is_stuck";}p=a(document);if(o==null){o=true;}n=function(t,G,q,i,B,C,y,z){var D,H,r,F,I,s,w,u,x,A,v,E;..if(t.data("sticky_kit")){return;}t.data("sticky_kit",true);I=p.height();w=t.parent();if(e!=null){w=w.closest(e);}if(!w.length){throw"failed to find stick parent";..}r=false;D=false;v=f!=null?f&&t.closest(f):a("<div />");u=function(){var J,L,K;if(z){return;}I=p.height();J=parseInt(w.css("border-top-width"),10);L=parseInt(w.css("padding-top"),10);..G=parseInt(w.css("padding-bottom"),10);q=w.offset().top+J+L;i=w.height();if(r){r=false;D=false;if(f==null){t.insertAfter(v);v.detach();}t.css({position:"",top:"",width:"",bottom:""}).removeClass(g);..K=true;}B=t.offset().top-(p

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 99 x 97, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	2989
Entropy (8bit):	7.704180697786099
Encrypted:	false
SSDEEP:	48:Azo7FDNn2DKqmJ3tVFcOyu3S4czDnS0GXarEYNitdLd5dS6uaTJYSF4gAn4:2o7F52eqsVFcBkS4czDnS0prMhS9mPA4
MD5:	59987F70FB88245E2E54551B15F4A84B
SHA1:	AEBCA50992F245F7897F94D4C4D8FE95DA945316
SHA-256:	44E71AE9E01E554D34870D121DCEEA9E3BA13C51F49AA700FBBC9B989DF22786
SHA-512:	7BBE1C0A5E833B9A23B0FF70876213CB108792AE6C799E8302DDE0BBF8127DA2F4AC3215173903C7F87B9497764D7D2D77CCB8E597D63119A3DAB859A69A69B1
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/code.png
Preview:	.PNG........IHDR...c...a.....M.......tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:BB687D5B4F3F11EE9E84FB76668467DE" xmpMM:DocumentID="xmp.did:BB687D5C4F3F11EE9E84FB76668467DE"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BB687D594F3F11EE9E84FB76668467DE" stRef:documentID="xmp.did:BB687D5A4F3F11EE9E84FB76668467DE"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>\|....."IDATx..\[lTE.>.vOw......RZ..X@...r..i. F}1.0...........<."^.D......5...A(...K)P...v.{.=..n..3s....l..tng..f.

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 22 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1346
Entropy (8bit):	6.800098720503328
Encrypted:	false
SSDEEP:	24:g1hNo7FCWwjx82lY2T3/VOWFa9oWqyJ3VsWx5CWvGcH323H86cTAtApjh8UWAi:+zo7FDNn2DM1oaJ3uvYNXpc4NfM
MD5:	909375ADB64B4088D4FB0AD704D5DB94
SHA1:	0365B7349FD78DAFBB881CD84E6374AAE55F9D46
SHA-256:	60FE3B2BBD88E93EEAE9667B0CB381B4AC6028E16C317D207E6389EB9549CD74
SHA-512:	430C1C955F88F6E927D14762024DD5BA453CB4F06C49E9C41B4A6A97082F210A607C2B198F14A09F83C1DADE364E1028FCB157B23163EDA7410F932875DF8B5D
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/hot.png
Preview:	.PNG........IHDR..............v.@....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:4A90E53C4FD811EE95908161A8D7BCCC" xmpMM:DocumentID="xmp.did:4A90E53D4FD811EE95908161A8D7BCCC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4A90E53A4FD811EE95908161A8D7BCCC" stRef:documentID="xmp.did:4A90E53B4FD811EE95908161A8D7BCCC"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..i.....IDATx.b._.....< ..........X521....X..'..M .a .0.....V...@.C-.....@<.R.M.X..x:..Pb0>...%.`5 .#`q-...........1H.

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 482 x 67, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6465
Entropy (8bit):	7.898204302995327
Encrypted:	false
SSDEEP:	192:u7FccQuFtHwXpffSpf1EReuISuAOsntHH8tgZXeS:uibuFNwXpInbCtAgZuS
MD5:	C4468FBF63A8AA99C2D49E1C9DFC53AC
SHA1:	719D9160F2E8F874FB5ECB8E7769EB6817BDD670
SHA-256:	2F216AAD0A3EBD4129D81E8BE1D322B99914C000C45F0C8468D9706FF5567974
SHA-512:	73C76085A0908193245CB863A1A09F44E8392011364BA62DC1E7DD22215BF278BA31DC0D218B0A472B85DD398FB1507FDB69C34063143C6D1663B5C4CF08E9C2
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/fei.png
Preview:	.PNG........IHDR.......C.....@..\....tEXtSoftware.Adobe ImageReadyq.e<...!iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC (Windows)" xmpMM:InstanceID="xmp.iid:CE7AE83C4FC411EEB826DC9D3681D04E" xmpMM:DocumentID="xmp.did:CE7AE83D4FC411EEB826DC9D3681D04E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CE7AE83A4FC411EEB826DC9D3681D04E" stRef:documentID="xmp.did:CE7AE83B4FC411EEB826DC9D3681D04E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>!;.W....IDATx..]].dG...=.3.?....&.... .Qp...(..M.>.>..b.%.>../.\|..Q.Dv./F}.~........8......$1q.......L.V.....u.....9.4

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 68x68, components 3
Category:	dropped
Size (bytes):	3343
Entropy (8bit):	7.819650143881753
Encrypted:	false
SSDEEP:	96:IiXpgM0ArMtvxXbjc72pSzEXbi8I2IHCg:Iup0AwtvxX0WbilB
MD5:	E935FEC70A3F79AD086ED5599BFAEEC8
SHA1:	8EE0309471DE4B5E544EBCEAEE18522AEDAFFE46
SHA-256:	8A9ACE753D835F97541401D507F6060DA64C1E2DAFEB2689BEEB40937C1F334E
SHA-512:	1B376D1285A981E10BBC65E47FD17FD9C5B6CBE10F15C7B1EF625A4F6564A594F87C3C058CCB65E67076E640D2CFDAAE5BE48BA57EA29A0FF1F1B4085F272169
Malicious:	false
Reputation:	low
Preview:	......JFIF.............Exif..II.......1...............Picasa..............................................................................................................................................D.D...........................................3..........................!..."1ABQaq..2.#3....b..................................6........................!1.AQ."aq..2....B.......#Rb.............?..\|_[..(.sO.?2...M..Fs..>.iAI.W.J.s..>`..\|x.T..=....oY.5.i....$...,....i.fU$u..XF:.kh..R+..Q..0QL.;l.Gdy..~B.....{.=..'..?.X...(.<..$...U/.g.mv...U..../,..z..+.v<...6a...........a..:......g^.i..g..<@..:.....&...\...}$G... .....C.q..X.6.(.t#Q.w..E3z.)6.....[..:.I.}..o.n'.v..m....\...hA~.. z.'.\|.Z..khd.....j%.j\|.%a.........l..).z...Zb..`t..uma.]\........G.W.JB.....n.$..C....7.*\|o.........}..n..'Q..`b0....&..9xr.#.e..\.p~`.?.0&R.. ..VH....k.0QP.z...n6.........;.......f......Xx....M4V...u=.M<...P.,Rmv...U.H..7.#.....V..N.Q.W.K.c.V.....n...@P...I.cS$.X.r>...L2.A.%....K%...e.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	downloaded
Size (bytes):	3327196
Entropy (8bit):	7.960651343982663
Encrypted:	false
SSDEEP:	49152:IeR3w2GydSueIfKAwIkgMgOgGGXL/nUQlf5tXAS3mTvYIIjrLo8U659kP:IeR30yd91frwIyCGGLnUatXZ0comq
MD5:	3CA4222D4871D2C299E44DBBD14EBB46
SHA1:	19EE2E1C0D6DA440C08076DC1A657C8E58AA0662
SHA-256:	E21CCEB8262A91F878FE4E5202139793E9CD3A02DA2DD08D2DC4180CD29AC402
SHA-512:	4D54E6AF4755363DA902D0AFAA0160AB2847506EAF67E3C34B6B627650EC4FF8FC0719F50B59AB8A1723F4A216031156979C39294AAACC080104B61447ACCE87
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/d7.gif
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,.............5..2R.. .......]...'....X...!.......X..VTV..}......W........W......&....................%.....&........%........&..#........".j.........$.m...... .....!..".....!....]...#..#................Cm....[........T..s..`...".y...$.v..c..p...........{...7.=...$..C.Y./'..f...'.G...".N.....F.....Ix.7..>....~..Z..6Y..@5... ^N..<c.[.....%....S.....Q....R.......$..OB..M...Q..jC.....].(...j.o\......%.....".g...6...........l...]....J...L.....6....'....x...%........!.R......w.....!.OM.. "f...........{.....<;..{......3.....0!?K.%&xd..>..FE.!.Y.L...T..r...G...I.L}o..Y.q...O./.<...Y.2pz.)....d..<[.i..T...f.e...eT...A.".'....r.`.p).6..A..u;yF... ..bBxt..0....#B"...o....9?,.U.O.<dp.xIdm].h/..3`9..}>?IBlJ6.7P....}`3aV9\|tS...Q.MN>^...........e...."?...-.........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@.....Q.D.*]..S.G.>.J...(.Fe....`...U..h..$.U..p.d+U..x...kT...........I..F..c...>.L.r..3k

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1920x1080, components 3
Category:	downloaded
Size (bytes):	52284
Entropy (8bit):	7.659877676306892
Encrypted:	false
SSDEEP:	768:qExgAUgcXSvkjFvVUKB8TnVuaoZiaych9a1189XFmbkKR7KLeBeeeeeeLyccXma/:qExgAB4QFTVxo7DEumL7KLsylfU/I4O
MD5:	FF05BBB4990DE81E8EB408337351A46D
SHA1:	DC2FEE87B8ED72F82D90BDDCB04EE7153FBDF503
SHA-256:	B18B04953B4661789CB99E163AD2D2136F91D38C92235FA262C57903D0BBB772
SHA-512:	D57178042B926AA669471480DDDC4C03C1B5111EE7665B2C1AF78BAA533BDBAE4449F29E83414A2301B449D4886A73A7DDF4C2B90012A078C09EFD3D951C0659
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/so-verwalten-und-loschen-sie-ihr-telegram-konto.jpg
Preview:	......JFIF...........................................+......+&.%#%.&D5//5DNB>BN_UU_wqw................................+......+&.%#%.&D5//5DNB>BN_UU_wqw.........8...."..........5.................................................................................................................................................................................................S.r.m.T..&j..P..!5.MB.P..!5.MB.P..!5.MB.P..!5.MB.P..!5.M...mb{D..~..@....................................................................<..g..,..8......f...^}k.~.....a.\.t..A...t..1...t..?gIsa.\.t.6.%.Iso.Ks1...t.3.2..t.sQ.s.P.....S...Rt<.\...:V..w_....[........................................................................~..;...t...9......M).rg.wq...p.w.!...)....Y1D.A-.KD.......2.!.}.!...wq...p.q.....H..VL}g%..{*..~..[s...{.....................................................................q.}...z}GC..&R.Z.].vN;"H.....x...<.{..qj.G.......;O...p...y..e.\|..g...>B.E.....[....+....n.x.........................

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 1024 x 516, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	331189
Entropy (8bit):	7.9964404025671145
Encrypted:	true
SSDEEP:	6144:O/gX+56mglDHozhl1lpxD3HSf/lgK9HcqQVC4gGuAT67cMdjYa:OYO56mgM5D3HY/lDl1kfgGwcMua
MD5:	F92DB1715986DA3FD38B9BB1A3164AE2
SHA1:	D403ADB2BDCC68CE1794920D74A77B354E1228F0
SHA-256:	0C6F1DA01761205450BD93C4F00ED4C944086625EA5A28D37A62E4FA0F6D31A3
SHA-512:	AFD9D4EC142920B7DF43939E88F9FF3FB89728ACFB71F365D1064118E405EE44FC7C64818488D20E080481254CD6BB1849A4601AD200A737F35244930B6FD9D5
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/uploads/2024/05/image-20-1-1-1024x516-1.png
Preview:	.PNG........IHDR..............\\.....pHYs..........+.... .IDATx...v.F.-.O.@j.Tf.<..r....j.\.P.?...[e;.LI..D.?"..$"... @a{9%..y<3._....h.T37"j.Xq.M.Q.me.....za..W..].\|..;...A.U....1o'...G".LW.\Q....{..9f....6........F.v.......l..m.6.+.w,?......!.6!$g...#...db.z....]G.q.oW.%..q........M......:..C.{.t>I.@.g_h.uQ......D..k..m#.QuZ.@...aD./..~.5J.J.0..Q..1...7.&..t.K.P^.9.......OD..#z...&L...........<77p.z.6...o....5...PuQ.+X.v.7....9.....O..?<.I.O.@....H..D.:eK..PV=mW6x..L...... E.....t.?.T.e....0...{&...^'.. ..P..M7.95.........E(./.6.../...9v.`.....0..z...R+..........I..x. `.....~..X..k.......%......#.}p..............:G.....;..O...A2.....CV^...Mh,.X...i..........3....[h..[.x..............u.e.6..oIzA.g"........u.z.O.6.....i.jB+m#F..]2..'.v..6/N..l....^v..R~U..h..`................UY...N.....S.6.....o.+..q^s..n..d..{B..T....?..H4...H.,.1H;..kr?.........K6.c..d=......Mm.U5.&.%...^.t.../,n..4.....&...N0.C.!b}._.cho.#..F&...Z...:O*..K]{.H.#..u..fi

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 512 x 512
Category:	dropped
Size (bytes):	3422486
Entropy (8bit):	7.978761675756364
Encrypted:	false
SSDEEP:	49152:UMnCaXRGlcMKTAIS5pTziQgIeU7nc67hMcgJ3NJLsqgFJelJn/FfDWF5zRW:UMCaINkAb7rfLc6buNmwpdfstW
MD5:	E60746B12F4E6CCA778727472F415218
SHA1:	4E3B517A1911D891D018BC63B66E1B69837A3E15
SHA-256:	B285715D34361C4FED5058A10EB830BF2DD61126518477DED340DD7F95221417
SHA-512:	5DB7FC6C0E1EC272C02EC741FA278D162EDAF2ACF9AC0421729585B1C1CE2CF13BAB0204C0F5B425D02989F34B1DB592C65B500B6E6EDD909E8ED138C59E2D18
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!..NETSCAPE2.0.....!.......,........... z...]. ......{...!......`.._.........5...D.i7..y......}....q..!.........`..y.......................\|..................?........y..9....................S..O............>>>5.....Y...i..X....C...K........J.....r..3..r9...........,.@...;..[..?.C..$....`.....&........F.N....(......m.....(...V.j.._ZW....J.......3.r...........O....c...........\|<a&%.. ........bjh`}z..B...........`.`......G.]./........ S......7......P..f)....5...b.~E..`65.U.E.2..........b...o...,..z...aGE.B@..X..ld.........s._....Jk.......^._....).p6..x......e.A.......\|..>@@@...`......%..O..,t.-...`....#w4..U....dW..!.\|.....'j.f..".ee../..l... ..W........#....(.....g.^5.@.."r..7{1z...~kY...X..%.....r..\.F=@._.....9{R~~~......F...e....,.;....}%%.w..v1.q...^x+.........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.*]...P.J.J...X.j....`..K...h.]...p..K...x.^......h....a..........#K.L....3k

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1143)
Category:	downloaded
Size (bytes):	4272
Entropy (8bit):	5.407649241930215
Encrypted:	false
SSDEEP:	96:bVcC0LhyRs71268NYZOAx/rfuNfnAZe5PwGNHW:B3qhpRByNPx54GN2
MD5:	B427175FA1078775EB792756E7B6D1E7
SHA1:	4C55C0233D3D9002B3449C025F97821F8BB8900D
SHA-256:	EE147E859AD0F09AA50367974E38AB53E7C7054C4A51D400A7F45B0EB251454F
SHA-512:	AF8D384188363378BC99C2E51523E74E1D18BA77D51BFF7647A377A117499421F9E94477E09907925E46DAD0A908B799A616D0B4855FFFF064BA6350815063D3
Malicious:	false
Reputation:	low
URL:	https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Preview:	(function(){/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d];.return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="Asse

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1508
Entropy (8bit):	7.05130664412254
Encrypted:	false
SSDEEP:	24:m1hmYaWwjx82lY2T3XVqEyJ3VcEGOgUOO1QULDFeDBjU6ril3C3rrCBa8r:sMYLNn2DIJ3ljgRMLIDBjmy7rL8r
MD5:	A1789A8BE60AB9EF7173E6984E137510
SHA1:	771D59FB99EE975B4CBC35BE8A55CA136E4F02B3
SHA-256:	8563A37FAACEA5666B6EDE762BAC1321533969BC0477D51DECC99B20EDE900EA
SHA-512:	768DB0DE430B6F62B7B5037E9745244BCE51AED5E83E5911CA7C6B1038AE4BCE3030E4A39A00D7D2768881EDBA4A0EF1A59E10582C82E4A51826A0953AEF428B
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/themes/tgtheme/img/wangye_a.png
Preview:	.PNG........IHDR..............w=.....tEXtSoftware.Adobe ImageReadyq.e<...&iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Windows)" xmpMM:InstanceID="xmp.iid:45B6D88A539011EEA6ADAB0A1EDFD353" xmpMM:DocumentID="xmp.did:45B6D88B539011EEA6ADAB0A1EDFD353"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:45B6D888539011EEA6ADAB0A1EDFD353" stRef:documentID="xmp.did:45B6D889539011EEA6ADAB0A1EDFD353"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>..._...TIDATx..OH.A..w.....Rof..C.A.....x...PB.A.K.PD.AH)......CT...aexK.D....!-j.Z.<y?.........~..7.7.x...."

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (729), with no line terminators
Category:	downloaded
Size (bytes):	729
Entropy (8bit):	5.128417124880025
Encrypted:	false
SSDEEP:	12:zAMkXCGs6gcy1jy/s6vMA0/fbiQ32E8kO1mIMRjJ3Qomo7ATnx0BeCo1nJ1nnzrc:zAMkq6gc26vtoTv32E8hmIMrA5BJ1zrc
MD5:	DFB26055C12DEF4DB65A0E2F5F728FAC
SHA1:	1C1DDC0888120990F0109D5F90E20B62831B31D6
SHA-256:	49DD57A7501EEF70C04A145EA90CB21386D823D42B770B43F9C3E6387B41681C
SHA-512:	22BF8B434352B8C786ECB13F3136EA897D3011E564548D203DF5767C9704598DA33EB6B0166CC9DC74271D16A96BAF26CBA99B80B1983E97524F080C1C3E2541
Malicious:	false
Reputation:	low
URL:	https://www.telegramkv.com/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.58
Preview:	jQuery(document).ready(function(){document.querySelectorAll(".ez-toc-link").forEach(t=>{t=t.replaceWith(t.cloneNode(!0))}),document.querySelectorAll(".ez-toc-section").forEach(t=>{t.setAttribute("ez-toc-data-id","#"+decodeURI(t.getAttribute("id")))}),jQuery("a.ez-toc-link").click(function(){let t=jQuery(this).attr("href"),e=jQuery("#wpadminbar"),i=jQuery("header"),o=0;eztoc_smooth_local.scroll_offset>30&&(o=eztoc_smooth_local.scroll_offset),e.length&&(o+=e.height()),(i.length&&"fixed"==i.css("position")\|\|"sticky"==i.css("position"))&&(o+=i.height()),jQuery('[ez-toc-data-id="'+decodeURI(t)+'"]').length>0&&(o=jQuery('[ez-toc-data-id="'+decodeURI(t)+'"]').offset().top-o),jQuery("html, body").animate({scrollTop:o},500)})});

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jul 5, 2024 00:39:27.107372046 CEST	192.168.2.4	1.1.1.1	0x4229	Standard query (0)	www.telegramkv.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:27.107634068 CEST	192.168.2.4	1.1.1.1	0x8ee6	Standard query (0)	www.telegramkv.com	65	IN (0x0001)	false
Jul 5, 2024 00:39:27.698091030 CEST	192.168.2.4	1.1.1.1	0x123a	Standard query (0)	www.telegramkv.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:27.698273897 CEST	192.168.2.4	1.1.1.1	0xf0ea	Standard query (0)	www.telegramkv.com	65	IN (0x0001)	false
Jul 5, 2024 00:39:29.808428049 CEST	192.168.2.4	1.1.1.1	0x86bb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:29.808897018 CEST	192.168.2.4	1.1.1.1	0x671e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 5, 2024 00:39:30.387676954 CEST	192.168.2.4	1.1.1.1	0xb4b0	Standard query (0)	www.telegramkv.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:30.388350010 CEST	192.168.2.4	1.1.1.1	0x6924	Standard query (0)	www.telegramkv.com	65	IN (0x0001)	false
Jul 5, 2024 00:39:33.462399006 CEST	192.168.2.4	1.1.1.1	0x39e	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:33.462573051 CEST	192.168.2.4	1.1.1.1	0x698a	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:18.910049915 CEST	192.168.2.4	1.1.1.1	0x6edc	Standard query (0)	is1-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:18.910201073 CEST	192.168.2.4	1.1.1.1	0xd6e1	Standard query (0)	is1-ssl.mzstatic.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:18.910942078 CEST	192.168.2.4	1.1.1.1	0x8fde	Standard query (0)	is2-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:18.911098003 CEST	192.168.2.4	1.1.1.1	0x44ed	Standard query (0)	is2-ssl.mzstatic.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:18.931263924 CEST	192.168.2.4	1.1.1.1	0xb0c1	Standard query (0)	is5-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:18.931436062 CEST	192.168.2.4	1.1.1.1	0xeb46	Standard query (0)	is5-ssl.mzstatic.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:18.932066917 CEST	192.168.2.4	1.1.1.1	0xe3c8	Standard query (0)	is4-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:18.932208061 CEST	192.168.2.4	1.1.1.1	0x1576	Standard query (0)	is4-ssl.mzstatic.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:18.933260918 CEST	192.168.2.4	1.1.1.1	0x9794	Standard query (0)	is3-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:18.933398008 CEST	192.168.2.4	1.1.1.1	0x2476	Standard query (0)	is3-ssl.mzstatic.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:28.140604973 CEST	192.168.2.4	1.1.1.1	0xb236	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.140899897 CEST	192.168.2.4	1.1.1.1	0x7ad9	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:29.415324926 CEST	192.168.2.4	1.1.1.1	0x76f1	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.415595055 CEST	192.168.2.4	1.1.1.1	0xf67	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:33.581898928 CEST	192.168.2.4	1.1.1.1	0x8997	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:33.582709074 CEST	192.168.2.4	1.1.1.1	0x9c35	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:34.269782066 CEST	192.168.2.4	1.1.1.1	0x2bba	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.269856930 CEST	192.168.2.4	1.1.1.1	0xa728	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 5, 2024 00:40:34.305835009 CEST	192.168.2.4	1.1.1.1	0x4b47	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.306340933 CEST	192.168.2.4	1.1.1.1	0x5127	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jul 5, 2024 00:40:34.311873913 CEST	192.168.2.4	1.1.1.1	0xbb92	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.312529087 CEST	192.168.2.4	1.1.1.1	0xb5c1	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:34.430644989 CEST	192.168.2.4	1.1.1.1	0x4ff3	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.431165934 CEST	192.168.2.4	1.1.1.1	0xe315	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:34.654728889 CEST	192.168.2.4	1.1.1.1	0x2b2	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.655242920 CEST	192.168.2.4	1.1.1.1	0xe2	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:35.400425911 CEST	192.168.2.4	1.1.1.1	0x9c8e	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:35.400971889 CEST	192.168.2.4	1.1.1.1	0xa3d6	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:36.180613041 CEST	192.168.2.4	1.1.1.1	0x3707	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:36.181416988 CEST	192.168.2.4	1.1.1.1	0xf5b8	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:37.090830088 CEST	192.168.2.4	1.1.1.1	0xac1a	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:37.091130972 CEST	192.168.2.4	1.1.1.1	0x140e	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jul 5, 2024 00:40:38.130343914 CEST	192.168.2.4	1.1.1.1	0xf651	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.203007936 CEST	192.168.2.4	1.1.1.1	0x6b53	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jul 5, 2024 00:40:38.224910975 CEST	192.168.2.4	1.1.1.1	0x2060	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.225428104 CEST	192.168.2.4	1.1.1.1	0x77fd	Standard query (0)	www.youtube.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Jul 5, 2024 00:39:27.125163078 CEST	1.1.1.1	192.168.2.4	0x4229	No error (0)	www.telegramkv.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:27.125163078 CEST	1.1.1.1	192.168.2.4	0x4229	No error (0)	www.telegramkv.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:27.286272049 CEST	1.1.1.1	192.168.2.4	0x8ee6	No error (0)	www.telegramkv.com			65	IN (0x0001)	false
Jul 5, 2024 00:39:27.708432913 CEST	1.1.1.1	192.168.2.4	0xf0ea	No error (0)	www.telegramkv.com			65	IN (0x0001)	false
Jul 5, 2024 00:39:27.714243889 CEST	1.1.1.1	192.168.2.4	0x123a	No error (0)	www.telegramkv.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:27.714243889 CEST	1.1.1.1	192.168.2.4	0x123a	No error (0)	www.telegramkv.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:29.815119982 CEST	1.1.1.1	192.168.2.4	0x86bb	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:29.815716028 CEST	1.1.1.1	192.168.2.4	0x671e	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 5, 2024 00:39:30.401928902 CEST	1.1.1.1	192.168.2.4	0xb4b0	No error (0)	www.telegramkv.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:30.401928902 CEST	1.1.1.1	192.168.2.4	0xb4b0	No error (0)	www.telegramkv.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:30.425071955 CEST	1.1.1.1	192.168.2.4	0x6924	No error (0)	www.telegramkv.com			65	IN (0x0001)	false
Jul 5, 2024 00:39:33.469959021 CEST	1.1.1.1	192.168.2.4	0x39e	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:42.825406075 CEST	1.1.1.1	192.168.2.4	0x8cb8	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:42.825406075 CEST	1.1.1.1	192.168.2.4	0x8cb8	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:43.323535919 CEST	1.1.1.1	192.168.2.4	0x1fd4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:39:43.323535919 CEST	1.1.1.1	192.168.2.4	0x1fd4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:39:56.249762058 CEST	1.1.1.1	192.168.2.4	0xda7c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:39:56.249762058 CEST	1.1.1.1	192.168.2.4	0xda7c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:17.772309065 CEST	1.1.1.1	192.168.2.4	0xf658	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:17.772309065 CEST	1.1.1.1	192.168.2.4	0xf658	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:18.918075085 CEST	1.1.1.1	192.168.2.4	0x6edc	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:18.918143034 CEST	1.1.1.1	192.168.2.4	0xd6e1	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:18.919646025 CEST	1.1.1.1	192.168.2.4	0x44ed	No error (0)	is2-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:18.920059919 CEST	1.1.1.1	192.168.2.4	0x8fde	No error (0)	is2-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:18.939080000 CEST	1.1.1.1	192.168.2.4	0xeb46	No error (0)	is5-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:18.939589977 CEST	1.1.1.1	192.168.2.4	0xe3c8	No error (0)	is4-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:18.939970016 CEST	1.1.1.1	192.168.2.4	0x1576	No error (0)	is4-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:18.940438986 CEST	1.1.1.1	192.168.2.4	0xb0c1	No error (0)	is5-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:18.941337109 CEST	1.1.1.1	192.168.2.4	0x2476	No error (0)	is3-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:18.941499949 CEST	1.1.1.1	192.168.2.4	0x9794	No error (0)	is3-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.185.174	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.186.78	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.185.238	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.185.206	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.185.110	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147712946 CEST	1.1.1.1	192.168.2.4	0xb236	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147793055 CEST	1.1.1.1	192.168.2.4	0x7ad9	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:28.147793055 CEST	1.1.1.1	192.168.2.4	0x7ad9	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.186.150	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.74.214	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.186.118	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		172.217.16.150	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		172.217.18.22	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		172.217.16.214	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:29.425050974 CEST	1.1.1.1	192.168.2.4	0x76f1	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:33.589859962 CEST	1.1.1.1	192.168.2.4	0x8997	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.288360119 CEST	1.1.1.1	192.168.2.4	0x2bba	No error (0)	googleads.g.doubleclick.net		142.250.184.194	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.288372993 CEST	1.1.1.1	192.168.2.4	0xa728	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 5, 2024 00:40:34.312864065 CEST	1.1.1.1	192.168.2.4	0x4b47	No error (0)	static.doubleclick.net		142.250.185.166	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.319008112 CEST	1.1.1.1	192.168.2.4	0xbb92	No error (0)	www.google.com		142.250.186.36	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.319179058 CEST	1.1.1.1	192.168.2.4	0xb5c1	No error (0)	www.google.com			65	IN (0x0001)	false
Jul 5, 2024 00:40:34.437578917 CEST	1.1.1.1	192.168.2.4	0x4ff3	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:34.437578917 CEST	1.1.1.1	192.168.2.4	0x4ff3	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.193	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.437906027 CEST	1.1.1.1	192.168.2.4	0xe315	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		216.58.212.182	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.185.214	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.185.86	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.186.182	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		172.217.18.118	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.185.118	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		216.58.206.86	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.185.246	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.181.246	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.185.150	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.184.214	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.184.246	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.186.54	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.185.182	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		142.250.186.86	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:34.662446022 CEST	1.1.1.1	192.168.2.4	0x2b2	No error (0)	i.ytimg.com		216.58.206.54	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:35.407826900 CEST	1.1.1.1	192.168.2.4	0x9c8e	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:35.407826900 CEST	1.1.1.1	192.168.2.4	0x9c8e	No error (0)	photos-ugc.l.googleusercontent.com		142.250.185.225	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:35.409818888 CEST	1.1.1.1	192.168.2.4	0xa3d6	No error (0)	yt3.ggpht.com	photos-ugc.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:36.189656973 CEST	1.1.1.1	192.168.2.4	0x3707	No error (0)	play.google.com		172.217.18.110	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:37.097784042 CEST	1.1.1.1	192.168.2.4	0xac1a	No error (0)	googleads.g.doubleclick.net		216.58.212.130	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:37.097910881 CEST	1.1.1.1	192.168.2.4	0x140e	No error (0)	googleads.g.doubleclick.net			65	IN (0x0001)	false
Jul 5, 2024 00:40:38.137185097 CEST	1.1.1.1	192.168.2.4	0xf651	No error (0)	play.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232408047 CEST	1.1.1.1	192.168.2.4	0x77fd	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232408047 CEST	1.1.1.1	192.168.2.4	0x77fd	No error (0)	youtube-ui.l.google.com			65	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	www.youtube.com	youtube-ui.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		142.250.181.238	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		172.217.18.14	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		142.250.186.174	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		142.250.185.78	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		142.250.184.238	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		172.217.16.206	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		142.250.186.46	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		216.58.212.174	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		172.217.16.142	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		216.58.206.46	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		216.58.206.78	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		142.250.186.142	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		142.250.186.110	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.232424974 CEST	1.1.1.1	192.168.2.4	0x2060	No error (0)	youtube-ui.l.google.com		172.217.23.110	A (IP address)	IN (0x0001)	false
Jul 5, 2024 00:40:38.797318935 CEST	1.1.1.1	192.168.2.4	0x5dbf	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Jul 5, 2024 00:40:38.797318935 CEST	1.1.1.1	192.168.2.4	0x5dbf	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	188.114.96.3	80	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Jul 5, 2024 00:39:27.147399902 CEST	433	OUT	GET / HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jul 5, 2024 00:39:27.695262909 CEST	842	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 04 Jul 2024 22:39:27 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Location: https://www.telegramkv.com/ Strict-Transport-Security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lk6RdfgB%2FTWvsz1tGEC%2FWT%2FY7r06GhvtrY4rtvlnsp%2F3oaQZkleS0g9gEg4T6rLbEUMwP9bYIHTLMMnQEKOWVsdLxO7J1v3bk7fiQXO2Zhuyrp92aSjRIyncVZC53ueXVUrTbAM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c853fe6189d-EWR alt-svc: h3=":443"; ma=86400 Data Raw: 61 32 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a2<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>0
Jul 5, 2024 00:40:12.707683086 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49739	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:28 UTC	661	OUT	GET / HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:28 UTC	743	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:28 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close vary: Accept-Encoding, Cookie Cache-Control: max-age=3, must-revalidate last-modified: Thu, 04 Jul 2024 22:20:37 GMT strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4zqDB9UhvUK7ZD70Y4A7q4%2BfiR%2Fw1JF3FHtxxIogeSzvZTcWK0C8oo2IE9MTqqoB4TaxbhHJbFDGfL9rpd2W60rCkyfbgM0zxpfnZs5jichGpK3gv64WZwXFI2M138w%2BP8URXGo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c8bbd69c44a-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:28 UTC	626	IN	Data Raw: 37 63 63 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 5f 43 4e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 67 74 68 65 6d 65 2f 73 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a Data Ascii: 7cca<!DOCTYPE html><html lang="zh_CN"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css">
2024-07-04 22:39:28 UTC	1369	IN	Data Raw: 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 50 72 65 6d 69 75 6d 20 70 6c 75 67 69 6e 20 76 32 30 2e 34 20 28 59 6f 61 73 74 20 53 45 4f 20 76 32 30 2e 34 29 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e 63 6f 6d 2f 77 6f 72 64 70 72 65 73 73 2f 70 6c 75 67 69 6e 73 2f 73 65 6f 2f 20 2d 2d 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 e6 82 a8 e7 9a 84 e9 80 9a e4 bf a1 e5 ae 89 e5 85 a8 e7 94 b1 74 65 6c 65 67 72 61 6d e5 ae 98 e7 bd 91 e4 bf 9d e9 9a Data Ascii: ge, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO Premium plugin v20.4 (Yoast SEO v20.4) - https://yoast.com/wordpress/plugins/seo/ --><meta name="description" content="telegram
2024-07-04 22:39:28 UTC	1369	IN	Data Raw: 65 6c 65 67 72 61 6d e5 ae 98 e7 bd 91 e4 bf 9d e9 9a 9c ef bc 8c e7 ab 8b e5 8d b3 e4 b8 8b e8 bd bd 74 65 6c 65 67 72 61 6d e4 b8 ad e6 96 87 e7 89 88 ef bc 8c e4 ba ab e5 8f 97 e7 94 b5 e6 8a a5 e7 94 a8 e6 88 b7 e4 b9 8b e9 97 b4 e6 97 a0 e9 99 90 e5 88 b6 e7 9a 84 e9 ab 98 e6 95 88 e9 80 9a e8 ae af 22 2c 22 62 72 65 61 64 63 72 75 6d 62 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 23 62 72 65 61 64 63 72 75 6d 62 22 7d 2c 22 69 6e 4c 61 6e 67 75 61 67 65 22 3a 22 7a 68 2d 43 4e 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 42 72 65 61 64 63 72 75 6d 62 4c 69 73 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 23 62 72 65 61 64 63 Data Ascii: elegramtelegram","breadcrumb":{"@id":"https://www.telegramkv.com/#breadcrumb"},"inLanguage":"zh-CN"},{"@type":"BreadcrumbList","@id":"https://www.telegramkv.com/#breadc
2024-07-04 22:39:28 UTC	1369	IN	Data Raw: 69 66 79 28 74 29 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 2c 6e 29 7b 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2c 65 2e 66 69 6c 6c 54 65 78 74 28 74 2c 30 2c 30 29 3b 76 61 72 20 74 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 2c 72 3d 28 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2c 65 2e 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 Data Ascii: ify(t))}catch(e){}}function p(e,t,n){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new
2024-07-04 22:39:28 UTC	1369	IN	Data Raw: 67 45 78 63 65 70 74 46 6c 61 67 3a 21 30 7d 2c 65 3d 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 2c 7b 6f 6e 63 65 3a 21 30 7d 29 7d 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 Data Ascii: gExceptFlag:!0},e=new Promise(function(e){i.addEventListener("DOMContentLoaded",e,{once:!0})}),new Promise(function(t){var n=function(){try{var e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf
2024-07-04 22:39:28 UTC	1369	IN	Data Raw: 6e 64 6f 77 2e 5f 77 70 65 6d 6f 6a 69 53 65 74 74 69 6e 67 73 29 3b 0a 2f 2a 20 5d 5d 3e 20 2a 2f 0a 3c 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 65 6d 6f 6a 69 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 0a 09 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d Data Ascii: ndow._wpemojiSettings);/* ... */</script><style id='wp-emoji-styles-inline-css' type='text/css'>img.wp-smiley, img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em
2024-07-04 22:39:28 UTC	1369	IN	Data Raw: 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 30 30 64 30 38 34 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 3a 20 23 38 65 64 31 66 63 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 3a 20 23 30 36 39 33 65 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 23 39 62 35 31 65 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 36 2c 31 34 37 2c 32 32 37 2c 31 Data Ascii: ivid-green-cyan: #00d084;--wp--preset--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1
2024-07-04 22:39:28 UTC	1369	IN	Data Raw: 2d 70 61 6c 65 2d 6f 63 65 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c 32 34 35 2c 32 30 33 29 20 30 25 2c 72 67 62 28 31 38 32 2c 32 32 37 2c 32 31 32 29 20 35 30 25 2c 72 67 62 28 35 31 2c 31 36 37 2c 31 38 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 30 32 2c 32 34 38 2c 31 32 38 29 20 30 25 2c 72 67 62 28 31 31 33 2c 32 30 36 2c 31 32 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 Data Ascii: -pale-ocean: linear-gradient(135deg,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(
2024-07-04 22:39:28 UTC	1369	IN	Data Raw: 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 63 6f 6c 6f 72 Data Ascii: block-columns.is-layout-grid){gap: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color
2024-07-04 22:39:28 UTC	1369	IN	Data Raw: 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 Data Ascii: ant;}.has-white-background-color{background-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--pr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:29 UTC	575	OUT	GET /wp-content/themes/tgtheme/scss/style.css HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:29 UTC	773	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT vary: Accept-Encoding etag: W/"66346867-fb97" expires: Fri, 05 Jul 2024 10:39:29 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dF4ekJK449lWIxvJS0YtglP7huaz43ZyekZ8onlK8%2FYIW6JsAY3GKp415p3wtOmj7aoV4Z%2FJYXCdI44lQB4gwR10x1q3gfbAZLCFoi0bGJStsY203aC9DnSFtVpMiULeXX1hW58%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c90f8a10f95-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:29 UTC	596	IN	Data Raw: 37 63 61 63 0d 0a 2e 74 6f 70 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 2e 74 6f 70 20 2e 68 65 61 64 65 72 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 36 35 70 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 7d 0a 0a 2e 74 6f 70 20 2e 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 5f 63 20 7b 0a 20 20 64 69 73 70 6c Data Ascii: 7cac.top { width: 100%; height: auto;}.top .header { width: 100%; height: 65px; -webkit-box-sizing: border-box; box-sizing: border-box; background-color: #fff; border-bottom: 1px solid #ccc;}.top .header .header_c { displ
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 20 68 6f 72 69 7a 6f 6e 74 61 6c 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 72 6f 77 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 Data Ascii: display: -ms-flexbox; display: flex; -webkit-box-orient: horizontal; -webkit-box-direction: normal; -ms-flex-direction: row; flex-direction: row; -webkit-box-align: center; -ms-flex-align: center; align-items: cente
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 7d 0a 0a 2e 74 6f 70 20 2e 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 5f 63 20 2e 6e 61 76 20 75 6c 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 36 35 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 Data Ascii: nter; justify-content: center;}.top .header .header_c .nav ul { width: 100%; height: 65px; display: -webkit-box; display: -ms-flexbox; display: flex; -webkit-box-align: center; -ms-flex-align: center; align-items:
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 20 23 45 38 46 35 46 43 2c 20 74 72 61 6e 73 70 61 72 65 6e 74 29 3b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 31 37 39 43 44 45 3b 0a 7d 0a 0a 2e 74 6f 70 20 2e 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 5f 63 20 2e 6e 61 76 20 75 6c 20 6c 69 2e 61 63 74 69 76 65 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 37 39 43 44 45 3b 0a 7d 0a 0a 2e 74 6f 70 20 2e 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 5f 63 20 2e 6e 61 76 20 75 6c 20 6c 69 2e 63 75 72 72 65 6e 74 2d 6d 65 6e 75 2d 69 74 65 6d 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 Data Ascii: ; background: linear-gradient(to bottom, #E8F5FC, transparent); border-bottom: 2px solid #179CDE;}.top .header .header_c .nav ul li.active a { color: #179CDE;}.top .header .header_c .nav ul li.current-menu-item { background: -webkit-gradient
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 68 3a 20 31 34 30 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 32 38 61 38 65 61 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 Data Ascii: h: 140px; height: 40px; background-color: #28a8ea; display: -webkit-box; display: -ms-flexbox; display: flex; -webkit-box-align: center; -ms-flex-align: center; align-items: center; -webkit-box-pack: center; -ms-flex-pa
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 7d 0a 0a 2e 74 6f 70 20 2e 68 65 61 64 65 72 20 2e 68 65 61 64 65 72 5f 63 20 2e 79 75 79 61 6e 20 2e 78 69 61 6c 61 79 75 79 61 6e 20 2e 63 6e 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 34 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 20 76 65 72 74 69 63 61 6c 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d Data Ascii: ; border: 1px solid #ccc;}.top .header .header_c .yuyan .xialayuyan .cn { width: 100%; height: 40px; display: -webkit-box; display: -ms-flexbox; display: flex; -webkit-box-orient: vertical; -webkit-box-direction: normal; -ms-flex-
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 3a 20 66 6c 65 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 20 76 65 72 74 69 63 61 6c 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 63 65 6e 74 Data Ascii: : flex; -webkit-box-orient: vertical; -webkit-box-direction: normal; -ms-flex-direction: column; flex-direction: column; -webkit-box-align: center; -ms-flex-align: center; align-items: center; -webkit-box-pack: cent
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 69 64 20 23 63 63 63 3b 0a 7d 0a 0a 2e 74 6f 70 20 2e 68 65 61 64 65 72 20 2e 6e 61 76 5f 6d 20 75 6c 20 6c 69 2e 61 63 74 69 76 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 31 37 39 43 44 45 3b 0a 7d 0a 0a 2e 74 6f 70 20 2e 68 65 61 64 65 72 20 2e 6e 61 76 5f 6d 20 75 6c 20 6c 69 2e 61 63 74 69 76 65 20 61 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 31 37 39 43 44 45 3b 0a 7d 0a 0a 2e 74 6f 70 20 2e 68 65 61 64 65 72 20 2e 6e 61 76 5f 6d 20 75 6c 20 6c 69 20 61 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 33 35 70 78 3b 0a 20 20 74 65 78 74 2d 61 6c 69 67 Data Ascii: id #ccc;}.top .header .nav_m ul li.active { border-bottom: 1px solid #179CDE;}.top .header .nav_m ul li.active a { color: #179CDE;}.top .header .nav_m ul li a { display: block; width: 100%; height: 100%; line-height: 35px; text-alig
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 6a 75 Data Ascii: bkit-box-direction: normal; -ms-flex-direction: column; flex-direction: column; -webkit-box-align: center; -ms-flex-align: center; align-items: center; -webkit-box-pack: center; -ms-flex-pack: center; ju
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 20 76 65 72 74 69 63 61 6c 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 Data Ascii: ox; display: -ms-flexbox; display: flex; -webkit-box-orient: vertical; -webkit-box-direction: normal; -ms-flex-direction: column; flex-direction: column; -webkit-box-align: center; -ms-flex-align: center; align-it

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:29 UTC	574	OUT	GET /wp-content/themes/tgtheme/scss/base.css HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:29 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT vary: Accept-Encoding etag: W/"66346867-647" expires: Fri, 05 Jul 2024 10:39:29 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5z4YQph3kfjRKbs%2BRmZLzme5QtEcMa%2B9m%2Fwm7cAd%2FGJCyYo3CJ5%2FBTVzOJWtz5BWf%2BIJxs8dE1ydLPxChgvxQHxt%2FOFWxqd015WXGZVZq%2Frwl0rzOBWyMJlshvEe6Tp0MmXHITk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c910ccc6a5b-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:29 UTC	585	IN	Data Raw: 36 34 37 0d 0a 68 74 6d 6c 20 7b 0a 09 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 35 3b 0a 09 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 30 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 62 6f 64 79 20 7b 0a 09 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4d 69 63 72 6f 73 6f 66 74 20 59 61 68 65 69 22 2c 20 50 69 6e 67 46 61 6e 67 53 43 2d 52 65 67 75 6c 61 72 2c 20 22 48 65 6c 76 65 74 69 63 Data Ascii: 647html {-ms-text-size-adjust: 100%;-webkit-text-size-adjust: 100%;line-height: 1.15;-webkit-tap-highlight-color: rgba(0,0,0,0);background-color: #ffffff;}body {margin: 0 auto;font-family: "Microsoft Yahei", PingFangSC-Regular, "Helvetic
2024-07-04 22:39:29 UTC	1029	IN	Data Raw: 68 3a 31 30 70 78 3b 0a 09 68 65 69 67 68 74 3a 31 30 70 78 0a 09 7d 0a 09 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 72 61 63 6b 20 7b 0a 09 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 31 29 3b 0a 09 7d 0a 09 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 32 29 3b 0a 09 7d 0a 09 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 3a 68 6f 76 65 72 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 3b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 65 35 38 61 37 3b 0a Data Ascii: h:10px;height:10px}::-webkit-scrollbar-track {border-radius:0;background:rgba(0,0,0,0.1);}::-webkit-scrollbar-thumb {background:rgba(0,0,0,0.2);}::-webkit-scrollbar-thumb:hover {background:rgba(0,0,0,0.4);background-color:#1e58a7;
2024-07-04 22:39:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49741	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:29 UTC	575	OUT	GET /wp-content/themes/tgtheme/scss/media.css HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:29 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT vary: Accept-Encoding etag: W/"66346867-2eb8" expires: Fri, 05 Jul 2024 10:39:29 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=dDbLbY%2BXR3TyvlcO8wKTINlrXgyi26nd00SzZHSxsZMr5REP7IJ63mqq6zXuGx%2FX3tzycwLoy7dA0s8bgnNuktmT8guHYgQCRlM4R3iDjIA%2FQvO%2FSosTgifpY9vXC5JUd91WE8o%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c90f8508cda-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:29 UTC	592	IN	Data Raw: 32 65 62 38 0d 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 36 39 39 70 78 29 7b 0a 20 20 20 20 2e 74 6f 70 20 2e 62 61 6e 6e 65 72 20 2e 62 61 6e 6e 65 72 5f 63 20 2e 6e 65 69 72 6f 6e 67 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 31 30 25 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 64 65 74 61 69 6c 20 2e 64 65 74 61 69 6c 5f 62 61 6e 6e 65 72 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 64 65 74 61 69 6c 20 2e 64 65 74 61 69 6c 5f 63 6f 6e 20 2e 64 65 74 61 69 6c 5f 72 69 67 68 74 7b 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 33 25 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 77 65 6e 74 69 20 2e 77 65 6e 74 69 5f 63 6f 6e Data Ascii: 2eb8@media (max-width:1699px){ .top .banner .banner_c .neirong{ padding-left: 10%; } .detail .detail_banner{ height: auto; } .detail .detail_con .detail_right{ right: 3% !important; } .wenti .wenti_con
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 33 25 3b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2e 2e 2f 69 6d 67 2f 62 61 6e 6e 65 72 33 2e 6a 70 67 29 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 63 6f 76 65 72 3b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 64 65 74 61 69 6c 20 2e 64 65 74 61 69 6c 5f 62 61 6e 6e 65 72 20 2e 62 61 Data Ascii: width: 100%; box-sizing: border-box; padding: 3%; height: auto; background: url(../img/banner3.jpg) center no-repeat; background-size: cover; position: relative; } .detail .detail_banner .ba
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 65 6e 64 3b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 Data Ascii: play: -ms-flexbox; display: flex; -webkit-box-align: center; -ms-flex-align: center; align-items: center; -webkit-box-pack: center; -ms-flex-pack: center; justify-content: flex-end; width: 10
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 5f 6c 69 73 74 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 33 25 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 7a 69 78 75 6e 20 2e 7a 69 78 75 6e 5f 6c 69 73 74 20 2e 6c 69 73 74 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 7a 69 78 75 6e 20 2e 7a 69 78 75 6e 5f 74 69 74 6c 65 7b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 35 70 78 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 7a 69 78 75 6e 20 2e 7a 69 78 75 6e 5f 6c 69 73 74 20 2e 6c 69 73 74 20 70 7b 0a 20 20 20 20 20 20 20 20 66 6f Data Ascii: _list{ width: 100%; box-sizing: border-box; padding: 0 3%; } .zixun .zixun_list .list{ height: auto; } .zixun .zixun_title{ margin: 15px 0 !important; } .zixun .zixun_list .list p{ fo
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 20 33 25 3b 0a 20 20 20 20 7d 0a 0a 0a 0a 7d 0a 0a 0a 0a 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 35 70 78 29 7b 0a 20 20 20 20 2e 77 65 6e 74 69 20 2e 77 65 6e 74 69 5f 63 6f 6e 20 2e 77 65 6e 74 69 5f 72 69 67 68 74 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 20 20 20 20 72 69 67 68 74 3a 20 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 64 65 74 61 69 6c 20 2e 64 65 74 61 69 6c 5f 63 6f 6e 20 2e 64 65 74 61 69 6c 5f 72 69 67 68 74 7b 0a 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 20 21 69 6d 70 6f 72 74 61 6e Data Ascii: -box; padding: 0 3%; }}@media (max-width:765px){ .wenti .wenti_con .wenti_right{ position: relative !important; right: 0 !important; } .detail .detail_con .detail_right{ position: relative !importan
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 20 2e 62 61 6e 6e 65 72 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 74 6f 70 20 2e 62 61 6e 6e 65 72 20 2e 62 61 6e 6e 65 72 5f 63 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 0a 20 20 20 20 7d 0a 20 20 20 20 2e 74 6f 70 20 2e 62 61 6e 6e 65 72 20 2e 62 61 6e 6e 65 72 5f 63 20 2e 6e 65 69 72 6f 6e 67 7b 0a 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 6a 75 73 74 69 66 79 2d 63 6f Data Ascii: .banner{ height: auto; } .top .banner .banner_c{ display: flex; flex-direction: column; align-items: center; } .top .banner .banner_c .neirong{ padding: 0; display: flex; justify-co
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 63 6f 6e 20 2e 63 6f 6e 5f 63 20 2e 63 6f 6e 5f 63 5f 6c 69 73 74 20 2e 6c 69 73 74 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 34 38 25 3b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 63 6f 6e 20 2e 63 6f 6e 5f 63 20 2e 63 6f 6e 5f 63 5f 6c 69 73 74 20 2e 6c 69 73 74 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 63 6f 6e 20 2e 63 6f 6e 5f 63 20 Data Ascii: -bottom: 0; } .con .con_c .con_c_list .list{ width: 48%; display: flex; flex-direction: column; align-items: center; } .con .con_c .con_c_list .list:last-child{ display: none; } .con .con_c
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 74 69 5f 74 69 74 6c 65 20 69 6d 67 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 39 30 25 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 74 6f 70 20 2e 62 61 6e 6e 65 72 20 2e 62 61 6e 6e 65 72 5f 79 79 20 2e 79 79 5f 64 65 73 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 74 6f 70 20 2e 62 61 6e 6e 65 72 20 2e 62 61 6e 6e 65 72 5f 79 79 20 2e 79 79 5f 63 6f 64 65 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 7d 0a 0a 20 20 20 20 2e 74 6f 70 20 2e 62 61 6e 6e 65 72 20 2e 62 61 6e 6e 65 72 5f 79 79 7b 0a 20 20 20 20 20 20 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 20 20 20 20 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 Data Ascii: ti_title img{ width: 90%; } .top .banner .banner_yy .yy_des{ width: 100%; } .top .banner .banner_yy .yy_code{ width: 100%; } .top .banner .banner_yy{ flex-direction: column; align-items: ce
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 6e 67 20 2e 79 79 5f 32 20 2e 79 79 5f 32 5f 63 6f 6e 20 2e 79 79 5f 32 5f 63 6f 6e 5f 6e 65 74 20 2e 6e 65 74 5f 6c 69 73 74 20 2e 6e 65 74 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 79 69 6e 67 79 6f 6e 67 20 2e 79 79 5f 32 20 2e 79 79 5f 32 5f 63 6f 6e 20 2e 79 79 5f 32 5f 63 6f 6e 5f 6e 65 74 20 2e 6e 65 74 5f 6c 69 73 74 20 2e 6e 65 74 20 2e 61 6e 6e 69 75 7b 0a 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 79 69 6e 67 79 6f 6e 67 20 2e 79 79 5f 32 20 2e 79 79 5f 32 5f 63 6f 6e 20 2e 79 79 5f 32 5f 63 6f 6e 5f 6e 65 74 7b 0a 20 20 20 20 20 20 20 20 62 6f 78 Data Ascii: ng .yy_2 .yy_2_con .yy_2_con_net .net_list .net{ width: 100%; margin-bottom: 30px; } .yingyong .yy_2 .yy_2_con .yy_2_con_net .net_list .net .anniu{ width: 100%; } .yingyong .yy_2 .yy_2_con .yy_2_con_net{ box
2024-07-04 22:39:29 UTC	424	IN	Data Raw: 69 78 75 6e 20 2e 7a 69 78 75 6e 5f 6c 69 73 74 20 2e 6c 69 73 74 20 69 6d 67 20 7b 0a 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 7a 69 78 75 6e 20 2e 7a 69 78 75 6e 5f 6c 69 73 74 20 2e 6c 69 73 74 20 68 32 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 7a 69 78 75 6e 20 2e 7a 69 78 75 6e 5f 6c 69 73 74 20 2e 6c 69 73 74 20 70 20 7b 0a 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 20 20 7d 0a 20 20 20 20 2e 66 6f 6f 74 65 72 5f 6d 6f 62 7b 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 75 6e 73 65 74 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 2e 66 6f 6f 74 65 72 7b 0a 20 20 20 20 20 20 Data Ascii: ixun .zixun_list .list img { height: 100px; } .zixun .zixun_list .list h2 { font-size: 18px; } .zixun .zixun_list .list p { font-size: 14px; } .footer_mob{ display: unset; } .footer{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49742	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:29 UTC	593	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.5.5 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:29 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Tue, 27 Feb 2024 14:48:23 GMT vary: Accept-Encoding etag: W/"65ddf637-1bae5" expires: Fri, 05 Jul 2024 10:39:29 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ErOc2NlLdhUn1h0XN3rU6iYNmUIZREyP%2F1C6gVoZs7IYgE521i02XUWIsc2VLVYGg6aAjwRpbhgDp3viaM5uezsaR%2BDsnOIkuWeaJufkYtTZTrAnzLVkxOguakU8n6rwv8i3haM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c910ca8c452-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:29 UTC	595	IN	Data Raw: 37 63 61 61 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 Data Ascii: 7caa@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-b
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 61 6c 69 67 6e 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5b 73 74 79 6c 65 2a 3d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 2e 77 70 Data Ascii: alignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 3a 77 68 65 72 65 28 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 3a 2e 36 36 37 65 6d 20 31 2e 33 33 33 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 Data Ascii: {border-radius:0!important}.wp-block-button .wp-block-button__link:where(.is-style-outline),.wp-block-button:where(.is-style-outline)>.wp-block-button__link{border:2px solid;padding:.667em 1.333em}.wp-block-button .wp-block-button__link:where(.is-style-ou
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 5d 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 5d 29 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 Data Ascii: idth:medium}.wp-block-button .wp-block-button__link:where([style=border-bottom-style]){border-bottom-width:medium}.wp-block-button .wp-block-button__link:where([style=border-left-style]){border-left-width:medium}.wp-block-buttons.is-vertical{flex-direct
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 66 6f 6e 74 2d 73 69 7a 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 61 6c 69 67 6e 63 65 6e 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 68 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c Data Ascii: t-decoration:inherit}.wp-block-buttons.has-custom-font-size .wp-block-button__link{font-size:inherit}.wp-block-button.aligncenter,.wp-block-calendar{text-align:center}.wp-block-calendar td,.wp-block-calendar th{border:1px solid;padding:.25em}.wp-block-cal
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 72 65 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 72 65 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 62 6f 74 74 6f 6d 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 31 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 Data Ascii: {align-items:flex-start}.wp-block-columns.are-vertically-aligned-center{align-items:center}.wp-block-columns.are-vertically-aligned-bottom{align-items:flex-end}@media (max-width:781px){.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 6e 61 76 69 67 61 74 69 6f 6e 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e Data Ascii: ox-sizing:border-box}.wp-block-post-comments .alignleft{float:left}.wp-block-post-comments .alignright{float:right}.wp-block-post-comments .navigation:after{clear:both;content:"";display:table}.wp-block-post-comments .commentlist{clear:both;list-style:non
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 Data Ascii: omments .comment-form input:not([type=submit]):not([type=checkbox]),.wp-block-post-comments .comment-form textarea{box-sizing:border-box;display:block;width:100%}.wp-block-post-comments .comment-form-cookies-consent{display:flex;gap:.25em}.wp-block-post-c
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 Data Ascii: ments-pagination-previous:last-child{margin-right:0}.wp-block-comments-pagination .wp-block-comments-pagination-previous-arrow{display:inline-block;margin-right:1ch}.wp-block-comments-pagination .wp-block-comments-pagination-previous-arrow:not(.is-arrow-c
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 Data Ascii: round-color]),.wp-block-cover-image.has-background-dim:not([class=-background-color]),.wp-block-cover.has-background-dim:not([class=-background-color]){background-color:#000}.wp-block-cover .has-background-dim.has-background-gradient,.wp-block-cover-ima

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49744	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:29 UTC	625	OUT	GET /wp-content/plugins/faq-schema-ultimate/public/css/faq-schema-ultimate-public.css?ver=1.0.0 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:29 UTC	764	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:29 GMT Content-Type: text/css Content-Length: 98 Connection: close last-modified: Sat, 25 Nov 2023 16:16:30 GMT etag: "65621dde-62" expires: Fri, 05 Jul 2024 10:39:29 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kX147bzZUfbLV37BXUK%2Bv5p1dt9Y4TUD6HcMD2PRBjrUBytqbXoMeRLVlhJgcDKjzpm1Z%2BASckhfhpfeHridgJM9e4myk2O0T9%2B1jeQTQqLkuIO35qqWDzC4MlVYDFQCcdJS%2FiM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c916cf9c358-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:29 UTC	98	IN	Data Raw: 2f 2a 2a 0a 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 43 53 53 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 66 75 6e 63 74 69 6f 6e 61 6c 69 74 79 20 73 68 6f 75 6c 64 20 62 65 0a 20 2a 20 69 6e 63 6c 75 64 65 64 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0a 20 2a 2f Data Ascii: /** * All of the CSS for your public-facing functionality should be * included in this file. */

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49745	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:29 UTC	623	OUT	GET /wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.6 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:29 UTC	780	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:29 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sun, 24 Dec 2023 07:55:12 GMT vary: Accept-Encoding etag: W/"6587e3e0-8d3" expires: Fri, 05 Jul 2024 10:39:29 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J7%2BBXp8q0iTMzqJfXm6gCKYwy%2Bx99fWLk8xxYr5aiDVKwheLe1Vur3flkVzGguc3WGypa6YCuuDnTK8Vg%2BMPyLuBd%2FpB9HenYys9Jqew2vug%2FQC2tYLyDP7UPd1%2FYedu7dL2vpw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c91dfb28ca1-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:29 UTC	589	IN	Data Raw: 38 64 33 0d 0a 2f 2a 2a 0a 2a 20 6b 6b 20 53 74 61 72 20 52 61 74 69 6e 67 73 0a 2a 20 40 73 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6b 61 6d 61 6c 6b 68 61 6e 2f 6b 6b 2d 73 74 61 72 2d 72 61 74 69 6e 67 73 0a 2a 2f 0a 20 2e 6b 6b 2d 73 74 61 72 2d 72 61 74 69 6e 67 73 20 7b 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 Data Ascii: 8d3/*** kk Star Ratings* @see https://github.com/kamalkhan/kk-star-ratings*/ .kk-star-ratings {display: -webkit-box;display: -webkit-flex;display: -ms-flexbox;display: flex;-webkit-box-align: center;-webkit-align-items: center;-ms-flex-align: center
2024-07-04 22:39:29 UTC	1369	IN	Data Raw: 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 66 6c 65 78 2d 73 74 61 72 74 3b 7d 2e 6b 6b 2d 73 74 61 72 2d 72 61 74 69 6e 67 73 2e 6b 6b 73 72 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 20 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 7d 2e 6b 6b 2d 73 74 61 72 2d 72 61 74 69 6e 67 73 2e 6b 6b 73 72 2d 61 Data Ascii: ;-webkit-justify-content: flex-start;-ms-flex-pack: flex-start;justify-content: flex-start;}.kk-star-ratings.kksr-align-center {-webkit-box-pack: center;-webkit-justify-content: center;-ms-flex-pack: center;justify-content: center;}.kk-star-ratings.kksr-a
2024-07-04 22:39:29 UTC	308	IN	Data Raw: 76 65 20 2e 6b 6b 73 72 2d 73 74 61 72 20 2e 6b 6b 73 72 2d 69 63 6f 6e 2c 20 2e 6b 6b 2d 73 74 61 72 2d 72 61 74 69 6e 67 73 3a 6e 6f 74 28 2e 6b 6b 73 72 2d 64 69 73 61 62 6c 65 64 29 20 2e 6b 6b 73 72 2d 73 74 61 72 73 3a 68 6f 76 65 72 20 2e 6b 6b 73 72 2d 73 74 61 72 20 2e 6b 6b 73 72 2d 69 63 6f 6e 20 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 75 72 6c 28 22 2e 2e 2f 73 76 67 2f 73 65 6c 65 63 74 65 64 2e 73 76 67 22 29 3b 7d 2e 6b 6b 2d 73 74 61 72 2d 72 61 74 69 6e 67 73 20 2e 6b 6b 73 72 2d 6c 65 67 65 6e 64 20 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2e 37 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 2e 37 35 72 65 6d 3b 7d 5b 64 69 72 3d 22 72 74 6c 22 5d 20 2e 6b 6b 2d 73 74 61 72 2d 72 61 74 69 6e 67 73 20 2e 6b 6b Data Ascii: ve .kksr-star .kksr-icon, .kk-star-ratings:not(.kksr-disabled) .kksr-stars:hover .kksr-star .kksr-icon {background-image: url("../svg/selected.svg");}.kk-star-ratings .kksr-legend {margin-left: .75rem;margin-right: .75rem;}[dir="rtl"] .kk-star-ratings .kk
2024-07-04 22:39:29 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49746	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:30 UTC	566	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:30 UTC	792	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Mon, 28 Aug 2023 17:14:23 GMT vary: Accept-Encoding etag: W/"64ecd5ef-15601" expires: Fri, 05 Jul 2024 06:10:42 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 16128 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=J6Y9MKXmdACfrCQ1TeMdm%2BN7dPKLoWyHKlJYoHpNS4iYWYQMfKB9UnHp23S6l40jqKkVUG7x8U5tOmMNf8opo5Cmx6RqeC6OMB6dS588RmZo3vpZpMSVf8UggX3oo7%2FjNXywWvk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c95aa67c454-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:30 UTC	577	IN	Data Raw: 37 63 39 38 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7c98/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 70 65 72 74 79 2c 6f 3d 75 65 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6c 65 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 69 74 65 6d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 43 3d 69 65 2e 64 6f 63 75 6d 65 6e 74 2c 75 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 2c 6e Data Ascii: perty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: eturn this.pushStack(ce.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(ce.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 63 65 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 69 7c 7c 31 31 3d 3d 3d 69 3f 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 39 3d 3d 3d 69 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3a 33 3d 3d 3d 69 7c 7c 34 3d 3d 3d 69 3f 65 2e 6e 6f 64 65 56 61 6c 75 65 3a 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 63 28 4f 62 6a 65 63 74 28 65 29 29 3f 63 65 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 Data Ascii: ction(e){var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=ce.text(t);return 1===i\|\|11===i?e.textContent:9===i?e.documentElement.textContent:3===i\|\|4===i?e.nodeValue:n},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(c(Object(e))?ce.merge(n,"string
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 3b 76 61 72 20 66 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d 3d 3d 65 3f 22 5c 75 66 66 66 64 22 3a 65 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 63 65 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 66 2c 70 29 7d 3b 76 61 72 20 79 65 3d 43 2c 6d 65 3d 73 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 62 Data Ascii: ;var f=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;function p(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e}ce.escapeSelector=function(e){return(e+"").replace(f,p)};var ye=C,me=s;!function(){var e,b
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 67 65 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 4e 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 71 3d 2f 5e 68 5c 64 24 2f 69 2c 4c 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 48 3d 2f 5b 2b 7e 5d 2f 2c 4f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b Data Ascii: \|last)(?:\$"+ge+"((?:-\\d)?\\d)"+ge+"*\$\|)(?=[^-]\|$)","i")},N=/^(?:input\|select\|textarea\|button)$/i,q=/^h\d$/i,L=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,H=/[+~]/,O=new RegExp("\\\\[\\da-fA-F]{1,6}"+ge+"?\|\\\\([^\\r\\n\\f])","g"),P=function(e,t){var n="0x"+
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 29 29 2c 6f 3d 28 6c 3d 59 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 51 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 73 3d 3d 3d 53 26 26 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 72 65 28 74 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 24 31 22 29 2c 65 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 Data Ascii: )),o=(l=Y(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+Q(l[o]);c=l.join(",")}try{return k.apply(n,f.querySelectorAll(c)),n}catch(e){h(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return re(t.replace(ve,"$1"),e,n,r)}function W(){var r=[];return funct
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 4d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 63 65 2e 65 78 70 61 6e 64 6f 29 2e 6c 65 6e 67 74 68 7d 29 2c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 7d 29 2c 6c 65 2e 73 63 6f 70 65 3d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 2e 71 75 65 72 79 53 65 Data Ascii: &t.addEventListener("unload",M),le.getById=$(function(e){return r.appendChild(e).id=ce.expando,!T.getElementsByName\|\|!T.getElementsByName(ce.expando).length}),le.disconnectedMatch=$(function(e){return i.call(e,"*")}),le.scope=$(function(){return T.querySe
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 69 64 3d 27 22 2b 53 2b 22 2d 5c 72 5c 5c 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 67 65 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 66 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 53 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 7e 3d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 Data Ascii: id='"+S+"-\r\\' disabled='disabled'><option selected=''></option></select>",e.querySelectorAll("[selected]").length\|\|d.push("\\["+ge+"(?:value\|"+f+")"),e.querySelectorAll("[id~="+S+"-]").length\|\|d.push("~="),e.querySelectorAll("a#"+S+"+").length\|\|d.push
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 29 7b 68 28 74 2c 21 30 29 7d 72 65 74 75 72 6e 20 30 3c 49 28 74 2c 54 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 49 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 54 26 26 56 28 65 29 2c 63 65 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 74 29 7d 2c 49 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 54 26 26 56 28 65 29 3b 76 61 72 20 6e 3d 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 72 3d 6e 26 26 75 65 2e 63 61 6c 6c 28 62 2e 61 74 74 72 48 61 6e 64 6c 65 2c 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 6e 28 65 Data Ascii: ){h(t,!0)}return 0<I(t,T,null,[e]).length},I.contains=function(e,t){return(e.ownerDocument\|\|e)!=T&&V(e),ce.contains(e,t)},I.attr=function(e,t){(e.ownerDocument\|\|e)!=T&&V(e);var n=b.attrHandle[t.toLowerCase()],r=n&&ue.call(b.attrHandle,t.toLowerCase())?n(e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49747	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:30 UTC	574	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:30 UTC	793	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:30 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 09 Jun 2023 05:49:24 GMT vary: Accept-Encoding etag: W/"6482bd64-3509" expires: Thu, 04 Jul 2024 22:41:47 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 43063 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EFlgObwmAbtpQ3N%2B5KkQ4J8ndOkDNPUrWyczzFSccZ2dHEf5%2FwvtWE00mKltHIEbHWh7F5Qr1apLMlaemwbvhJxtW7ofkNreqsb4SJx1PzYlkayLUPeXvQtiMp40VL2CxLH6%2Fuk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c95b81c43a3-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:30 UTC	576	IN	Data Raw: 33 35 30 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 3509/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 74 75 72 6e 20 30 7d 28 73 2e 66 6e 2e 6a 71 75 65 72 79 2c 65 29 7d 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 3d 22 33 2e 34 2e 31 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 73 2e 6d 69 67 72 61 74 65 44 69 73 61 62 6c 65 50 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5d 3d 21 30 7d 2c 73 2e 6d 69 67 72 61 74 65 45 6e 61 62 6c 65 50 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 64 65 6c 65 74 65 20 74 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5d Data Ascii: turn 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 69 67 72 61 74 65 52 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 3d 7b 7d 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 75 28 22 71 75 69 72 6b 73 22 2c 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 64 2c 6c 2c 70 2c 66 3d 7b 7d 2c 6d 3d 73 2e 66 6e 2e 69 6e 69 74 2c 79 3d 73 2e 66 69 6e 64 2c 68 3d 2f 5c 5b 28 5c 73 2a 5b 2d 5c 77 5d 2b 5c 73 2a 29 28 5b 7e 7c 5e 24 2a 5d 3f 3d 29 5c 73 2a 28 5b 2d 5c 77 23 5d 2a 3f 23 5b 2d 5c 77 23 5d 2a 29 5c 73 2a 5c 5d 2f 2c 67 3d 2f 5c 5b 28 5c 73 2a 5b 2d Data Ascii: igrateReset=function(){o={},s.migrateWarnings.length=0},"BackCompat"===n.document.compatMode&&u("quirks","jQuery is not compatible with Quirks Mode");var d,l,p,f={},m=s.fn.init,y=s.find,h=/\[(\s[-\w]+\s)([~\|^$]?=)\s([-\w#]?#[-\w#])\s\]/,g=/\[(\s[-
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 4e 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 4a 53 4f 4e 2e 70 61 72 73 65 22 29 2c 63 28 73 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 73 2e 68 6f 6c 64 52 65 61 64 79 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 22 6a 51 75 65 72 79 2e 68 6f 6c 64 52 65 61 64 79 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 75 6e 69 71 75 65 22 2c 73 2e 75 6e 69 71 75 65 53 6f 72 74 2c 22 75 6e 69 71 75 65 22 2c 22 6a 51 75 65 72 79 2e 75 6e 69 71 75 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 75 6e 69 71 75 65 53 6f 72 74 22 29 2c 72 28 73 2e 65 78 70 72 2c 22 66 69 6c 74 65 72 73 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 65 78 70 72 2d 70 72 65 2d 70 73 65 75 64 6f 73 22 2c 22 6a 51 75 65 Data Ascii: N is deprecated; use JSON.parse"),c(s,"holdReady",s.holdReady,"holdReady","jQuery.holdReady is deprecated"),c(s,"unique",s.uniqueSort,"unique","jQuery.unique is deprecated; use jQuery.uniqueSort"),r(s.expr,"filters",s.expr.pseudos,"expr-pre-pseudos","jQue
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 57 69 6e 64 6f 77 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 22 69 73 57 69 6e 64 6f 77 22 2c 22 6a 51 75 65 72 79 2e 69 73 57 69 6e 64 6f 77 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 29 2c 73 2e 61 6a 61 78 26 26 28 6c 3d 73 2e 61 6a 61 78 2c 70 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 2c 69 28 73 2c 22 61 6a 61 78 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 65 2e 70 72 6f 6d 69 73 65 26 26 28 63 28 65 2c 22 73 75 63 63 65 73 73 22 2c 65 2e 64 6f 6e 65 2c 22 6a 71 Data Ascii: is deprecated"),c(s,"isWindow",function(e){return null!=e&&e===e.window},"isWindow","jQuery.isWindow() is deprecated")),s.ajax&&(l=s.ajax,p=/(=)\?(?=&\|$)\|\?\?/,i(s,"ajax",function(){var e=l.apply(this,arguments);return e.promise&&(c(e,"success",e.done,"jq
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 3b 65 26 26 73 2e 64 61 74 61 28 74 68 69 73 2c 22 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 5f 22 2c 65 29 2c 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 26 26 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 21 65 26 26 21 31 21 3d 3d 74 26 26 73 2e 64 61 74 61 28 74 68 69 73 2c 22 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 5f 22 29 7c 7c 22 22 29 7d 29 29 7d 2c 22 74 6f 67 67 6c 65 43 6c 61 73 73 2d 62 6f 6f 6c 22 29 3b 76 61 72 20 51 2c 41 2c 52 3d 21 31 2c 43 3d 2f 5e 5b 61 2d 7a 5d 2f 2c 4e 3d 2f 5e 28 Data Ascii: this.each(function(){var e=this.getAttribute&&this.getAttribute("class")\|\|"";e&&s.data(this,"__className__",e),this.setAttribute&&this.setAttribute("class",!e&&!1!==t&&s.data(this,"__className__")\|\|"")}))},"toggleClass-bool");var Q,A,R=!1,C=/^[a-z]/,N=/^(
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 65 63 61 74 65 64 22 29 2c 52 65 66 6c 65 63 74 2e 67 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 22 6a 51 75 65 72 79 2e 63 73 73 4e 75 6d 62 65 72 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 52 65 66 6c 65 63 74 2e 73 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 3a 73 2e 63 73 73 4e 75 6d 62 65 72 3d 41 29 3a 41 3d 73 2e 63 73 73 4e 75 6d 62 65 72 2c 51 3d 73 2e 66 6e 2e 63 73 73 2c 69 28 73 2e 66 6e 2c 22 63 73 73 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 Data Ascii: ecated"),Reflect.get.apply(this,arguments)},set:function(){return u("css-number","jQuery.cssNumber is deprecated"),Reflect.set.apply(this,arguments)}}):s.cssNumber=A):A=s.cssNumber,Q=s.fn.css,i(s.fn,"css",function(e,t){var r,n,o=this;return e&&"object"==t
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 65 72 76 61 6c 2c 50 3d 22 6a 51 75 65 72 79 2e 66 78 2e 69 6e 74 65 72 76 61 6c 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 2c 6e 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 73 2e 66 78 2c 22 69 6e 74 65 72 76 61 6c 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 7c 7c 75 28 22 66 78 2d 69 6e 74 65 72 76 61 6c 22 2c 50 29 2c 73 2e 6d 69 67 72 61 74 65 49 73 50 61 74 63 68 45 6e 61 62 6c 65 64 28 22 66 78 2d 69 6e 74 65 72 76 61 6c 22 29 26 26 76 6f 69 64 20 30 3d 3d 3d 53 3f 31 33 3a 53 7d 2c 73 Data Ascii: erval,P="jQuery.fx.interval is deprecated",n.requestAnimationFrame&&Object.defineProperty(s.fx,"interval",{configurable:!0,enumerable:!0,get:function(){return n.document.hidden\|\|u("fx-interval",P),s.migrateIsPatchEnabled("fx-interval")&&void 0===S?13:S},s
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 76 65 64 2d 76 33 22 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 22 2b 74 2b 22 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 65 2e 73 70 6c 69 63 65 28 30 2c 30 2c 74 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 3a 28 74 68 69 73 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 2c 74 68 69 73 29 29 7d 2c 22 73 68 6f 72 74 68 61 6e 64 2d 72 65 6d 6f 76 65 64 2d 76 33 22 29 7d 29 2c 73 2e 65 61 63 68 28 22 62 6c 75 72 20 66 6f 63 75 73 20 66 6f 63 75 73 69 6e 20 66 6f 63 75 73 6f 75 74 20 72 65 73 69 7a 65 20 73 63 72 6f 6c 6c 20 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 Data Ascii: ved-v3","jQuery.fn."+t+"() is deprecated"),e.splice(0,0,t),arguments.length?this.on.apply(this,e):(this.triggerHandler.apply(this,e),this))},"shorthand-removed-v3")}),s.each("blur focus focusin focusout resize scroll click dblclick mousedown mouseup mouse
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 74 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 3b 72 65 74 75 72 6e 20 74 2e 62 6f 64 79 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 2c 74 2e 62 6f 64 79 26 26 74 2e 62 6f 64 79 2e 69 6e 6e 65 72 48 54 4d 4c 7d 76 61 72 20 46 3d 2f 3c 28 3f 21 61 72 65 61 7c 62 72 7c 63 6f 6c 7c 65 6d 62 65 64 7c 68 72 7c 69 6d 67 7c 69 6e 70 75 74 7c 6c 69 6e 6b 7c 6d 65 74 61 7c 70 61 72 61 6d 29 28 28 5b 61 2d 7a 5d 5b 5e 5c 2f 5c 30 3e 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 29 5b 5e 3e 5d 2a 29 5c 2f 3e 2f 67 69 3b 73 2e 55 4e 53 41 46 45 5f 72 65 73 74 6f 72 65 4c 65 67 61 63 79 48 74 6d 6c 50 72 65 66 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 6d 69 67 72 61 74 65 45 6e 61 62 6c 65 50 61 Data Ascii: t.implementation.createHTMLDocument("");return t.body.innerHTML=e,t.body&&t.body.innerHTML}var F=/<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\/\0>\x20\t\r\n\f])[^>])\/>/gi;s.UNSAFE_restoreLegacyHtmlPrefilter=function(){s.migrateEnablePa

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49748	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:30 UTC	609	OUT	GET /wp-content/plugins/faq-schema-ultimate/public/js/faq-schema-ultimate-public.js?ver=1.0.0 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:30 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:30 GMT Content-Type: application/javascript Content-Length: 838 Connection: close last-modified: Sat, 25 Nov 2023 16:16:30 GMT etag: "65621dde-346" expires: Thu, 04 Jul 2024 22:41:47 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 43063 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nbKodbDLmiSB8n5TdL9rToPYUKyJXmMCWiWCvA3HgIB4eXgxwY%2F0kyt5XxzIbQHTSLvXW%2Bsi%2FHoqoLL9iWvblcpS0vJL0Ds64GZjHYfLUbSfIxDwQvAE78Nrn9fvZi5X6%2BDyYUo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c960ef67cff-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:30 UTC	585	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 20 7b 0a 09 27 75 73 65 20 73 74 72 69 63 74 27 3b 0a 0a 09 2f 2a 2a 0a 09 20 2a 20 41 6c 6c 20 6f 66 20 74 68 65 20 63 6f 64 65 20 66 6f 72 20 79 6f 75 72 20 70 75 62 6c 69 63 2d 66 61 63 69 6e 67 20 4a 61 76 61 53 63 72 69 70 74 20 73 6f 75 72 63 65 0a 09 20 2a 20 73 68 6f 75 6c 64 20 72 65 73 69 64 65 20 69 6e 20 74 68 69 73 20 66 69 6c 65 2e 0a 09 20 2a 0a 09 20 2a 20 4e 6f 74 65 3a 20 49 74 20 68 61 73 20 62 65 65 6e 20 61 73 73 75 6d 65 64 20 79 6f 75 20 77 69 6c 6c 20 77 72 69 74 65 20 6a 51 75 65 72 79 20 63 6f 64 65 20 68 65 72 65 2c 20 73 6f 20 74 68 65 0a 09 20 2a 20 24 20 66 75 6e 63 74 69 6f 6e 20 72 65 66 65 72 65 6e 63 65 20 68 61 73 20 62 65 65 6e 20 70 72 65 70 61 72 65 64 20 66 6f 72 20 75 73 61 Data Ascii: (function( $ ) {'use strict';/** * All of the code for your public-facing JavaScript source * should reside in this file. * * Note: It has been assumed you will write jQuery code here, so the * $ function reference has been prepared for usa
2024-07-04 22:39:30 UTC	253	IN	Data Raw: 74 61 63 68 20 6d 6f 72 65 20 74 68 61 6e 20 61 0a 09 20 2a 20 73 69 6e 67 6c 65 20 44 4f 4d 2d 72 65 61 64 79 20 6f 72 20 77 69 6e 64 6f 77 2d 6c 6f 61 64 20 68 61 6e 64 6c 65 72 20 66 6f 72 20 61 20 70 61 72 74 69 63 75 6c 61 72 20 70 61 67 65 2e 0a 09 20 2a 20 41 6c 74 68 6f 75 67 68 20 73 63 72 69 70 74 73 20 69 6e 20 74 68 65 20 57 6f 72 64 50 72 65 73 73 20 63 6f 72 65 2c 20 50 6c 75 67 69 6e 73 20 61 6e 64 20 54 68 65 6d 65 73 20 6d 61 79 20 62 65 0a 09 20 2a 20 70 72 61 63 74 69 73 69 6e 67 20 74 68 69 73 2c 20 77 65 20 73 68 6f 75 6c 64 20 73 74 72 69 76 65 20 74 6f 20 73 65 74 20 61 20 62 65 74 74 65 72 20 65 78 61 6d 70 6c 65 20 69 6e 20 6f 75 72 20 6f 77 6e 20 77 6f 72 6b 2e 0a 09 20 2a 2f 0a 0a 7d 29 28 20 6a 51 75 65 72 79 20 29 3b 0a Data Ascii: tach more than a * single DOM-ready or window-load handler for a particular page. * Although scripts in the WordPress core, Plugins and Themes may be * practising this, we should strive to set a better example in our own work. */})( jQuery );

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49749	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:30 UTC	619	OUT	GET /wp-content/themes/tgtheme/img/icon.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:30 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:30 GMT Content-Type: image/png Content-Length: 1342 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-53e" expires: Wed, 17 Jul 2024 18:16:46 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 1484564 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qURbaw6v024LtHlXbohiUr4v%2F67zD9r4mHCAzIW1H%2FbW1iKw7Rlw90AG3nJTmmG7tVBDVymdFeJQtyQy8fVcH6ZdUv%2BoF5mxSLCqaYkuksW7rcTl7H3f605R06mz763HNCV7VxA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c966b501a17-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:30 UTC	595	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 12 08 06 00 00 00 41 ec 1e 9e 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRAtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:30 UTC	747	IN	Data Raw: 45 45 38 35 38 45 38 34 33 36 30 38 43 32 46 43 37 45 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 35 41 34 31 46 35 33 34 46 33 38 31 31 45 45 38 35 38 45 38 34 33 36 30 38 43 32 46 43 37 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 35 41 34 31 46 35 30 34 46 33 38 31 31 45 45 38 35 38 45 38 34 33 36 30 38 43 32 46 43 37 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 35 41 34 31 46 35 31 34 46 33 38 31 31 45 45 38 35 38 45 38 34 33 36 30 38 43 32 46 43 37 45 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 Data Ascii: EE858E843608C2FC7E" xmpMM:DocumentID="xmp.did:85A41F534F3811EE858E843608C2FC7E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:85A41F504F3811EE858E843608C2FC7E" stRef:documentID="xmp.did:85A41F514F3811EE858E843608C2FC7E"/> </rdf:Description> </rdf:RDF> </x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49751	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:30 UTC	624	OUT	GET /wp-content/themes/tgtheme/img/td_laptop.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:30 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:30 GMT Content-Type: image/png Content-Length: 189734 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-2e526" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609572 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gDYhDfz2EXIQfwMLC8StAKemX9ZLLK47PLXS%2FyjI0CDdXIelFJrFvKHz4kP4zso6IsSRD2%2FXGO5zx6mFtnZBmK8yHR5Y6VDUiLbgx3eBmsqDpJk%2FeLixig15%2BNtFPuKjOJ4RVCY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c970bb34303-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:30 UTC	590	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 48 00 00 01 e7 08 06 00 00 00 82 32 7d c9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 02 e4 c8 49 44 41 54 78 da ec bd 07 94 25 67 75 ef fb af 70 f2 39 9d a7 7b f2 68 46 a3 9c 03 92 10 0a 48 02 91 44 32 5c 1b 1b 3f 30 ef 82 6d e2 ba 60 cc 03 79 f9 1a 03 36 b6 65 bc 8c 7d b1 cd 23 18 1e 0b 58 80 01 03 b6 11 58 02 84 04 48 02 84 40 12 ca d2 e4 d4 f1 e4 53 f9 ed bd bf aa ee 9e 56 f7 4c 2b cc 68 46 b3 7f a3 52 9f 50 e1 ab af c2 d9 ff da e1 b3 92 24 81 f2 c4 b9 ea aa ab 16 fb 78 2d 4d 2f a3 e9 72 9a 4e 4b df f7 6b 6f 29 8a a2 28 8a a2 28 4f 00 8f a6 29 9a 1e a0 e9 76 9a fe 9b a6 ef dd 78 e3 8d 91 76 cd 53 8f a5 02 e9 29 15 48 97 d0 74 Data Ascii: PNGIHDRH2}tEXtSoftwareAdobe ImageReadyqe<IDATx%gup9{hFHD2\?0m`y6e}#XXH@SVL+hFRP$x-M/rNKko)((O)vxvS)Ht
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 5e 79 e5 95 27 6b 37 a8 40 3a 94 9c aa 5d a0 28 8a a2 28 8a a2 a8 fd aa 02 49 31 ac d5 2e 50 14 45 51 14 45 51 d4 7e 55 81 a4 18 6a da 05 8a a2 28 8a a2 28 ca 51 44 59 bb 40 05 92 a2 28 8a a2 28 8a a2 28 8a 0a 24 45 51 14 45 51 14 45 51 14 15 48 8a a2 28 8a a2 28 8a a2 28 4f 01 ae 76 c1 f2 49 92 44 3b 41 51 14 45 51 14 45 51 9e c1 a8 07 49 51 14 45 51 14 45 51 14 45 05 92 a2 28 8a a2 28 8a a2 28 8a 0a 24 45 51 14 45 51 14 45 51 14 15 48 8a a2 28 8a a2 28 8a a2 28 07 42 8b 34 1c 21 94 4a 25 ac 5b b7 4e 3b 42 51 14 45 51 14 e5 18 65 f7 ee dd 68 36 9b da 11 2a 90 14 66 f3 e6 cd b8 69 d3 eb 97 35 6f c3 0b b1 b0 a0 5e 7f 71 e9 43 e9 47 31 3a 41 8c 52 ce 46 c1 51 a7 a1 a2 28 8a a2 28 ca 52 04 71 82 b6 1f c9 eb 9c 63 89 fd 64 c3 92 f7 f5 5e b8 ac 75 58 34 7b 5f Data Ascii: ^y'k7@:]((I1.PEQEQ~Uj((QDY@((($EQEQEQH(((OvID;AQEQEQIQEQEQE((($EQEQEQH(((B4!J%[N;BQEQeh6*fi5o^qCG1:ARFQ((Rqcd^uX4{_
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 92 a9 bb 50 ec dc 0c e4 07 e9 b3 74 75 4e 19 05 bb 0e 6f df 37 90 0c 9e 49 4b 9b 30 1d 87 5e 7d 65 fa 3f e0 e5 42 f4 45 55 b9 11 f2 66 06 dd 41 7c b7 77 33 fe a0 bd 15 1b 2b eb e1 27 81 1e 24 45 39 8c f8 be 8f 93 cf 38 0f e7 5e 70 21 76 de 77 3f 5e f2 ea d7 62 43 5f 17 ff e7 ef 3e 82 8e 17 e0 05 af fc 6d 54 ca 15 94 8a 05 dc 7e d3 f5 f8 e6 77 6f 46 6c e5 f0 ba 37 fe 01 26 1e b8 0d 5f fb f6 2d 74 7d 27 58 77 d2 59 58 3f e4 e2 96 1f ff 14 e7 5e fa 5c b4 76 3f 82 6d 7b a7 e1 e4 2a f8 dd d7 be 0a 5f f9 ff 3e 83 76 04 04 b4 ce fe fe 7e ec db bb 17 57 5c f3 6a bc e8 b9 17 ec 17 ce a7 28 ca 31 ac 92 90 99 27 ea 3d 52 1e 1f ea 41 7a 9c 62 e0 50 4d 47 2d 56 7a f7 59 a8 8f f8 46 14 45 b0 9b 4d 52 33 ce dc 0d 2a 75 71 db fc d4 b8 d3 e2 01 0b d2 05 c8 24 0a a7 61 5b Data Ascii: PtuNo7IK0^}e?BEUfA\|w3+'$E98^p!vw?^bC_>mT~woFl7&_-t}'XwYX?^\v?m{_>v~W\j(1'=RAzbPMG-VzYFEMR3uq$a[
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 36 51 14 92 38 72 c5 9b cc 12 ca 8c 6b a4 28 8a b2 7c d8 d3 ec 8a 75 9b 0e 0e ab 28 2a 90 94 a7 0b 7e 5a e3 ba 39 d8 f9 12 2a 79 ed 0f 45 69 b5 5a 28 95 4a 22 92 14 45 51 94 c3 47 ec 46 e6 a1 ad 0a 24 45 05 d2 e1 11 01 47 e3 ba 15 45 79 e6 dd 33 14 45 51 94 67 e6 bd 57 7f 3b 9e 7e b4 cc b7 a2 28 8a a2 28 8a a2 28 8a 0a 24 45 51 14 45 51 14 45 51 14 15 48 8a a2 28 8a a2 28 8a a2 28 8b a2 39 48 ca 33 0a 8d db 55 0e 27 5a a1 4e 51 14 45 51 54 20 29 ca 11 4b af d7 43 10 04 da 11 ca 61 a3 50 28 20 9f 7f 72 65 1b b9 1c f8 2f 7f f9 4b 4c 4f 4f 8b c0 bf f0 c2 0b d1 d7 d7 b7 ec e5 77 ec d8 81 5b 6f bd 15 03 03 03 78 f6 b3 9f 8d 4a a5 a2 07 46 51 14 45 51 54 20 29 c7 3a 51 14 c1 f3 3c 7d a2 af 1c 76 51 ee ba 2e 6c fb 89 47 2b 37 9b 4d bc fd ed 6f c7 65 97 5d 86 c1 Data Ascii: 6Q8rk(\|u(~Z9yEiZ(J"EQGF$EGEy3EQgW;~((($EQEQEQH(((9H3U'ZNQEQT )KCaP( re/KLOOw[oxJFQEQT ):Q<}vQ.lG+7Moe]
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 47 72 ef 60 8f f6 93 85 73 2e 7f f6 b3 9f 61 f3 e6 cd 72 5f 7c 3c b4 bc 10 97 fe fd 2d d8 d3 89 45 bc 59 f4 db 4e ff 93 df fc a3 81 b5 df 7a d7 53 bd ca f7 dd 72 cb 2d 7f a5 67 ee f2 51 0f 92 72 d8 e1 9b 15 87 10 1d be c7 00 24 72 48 c8 fd e2 e7 b7 63 60 d5 46 f4 e5 8c a0 72 1d 1b e3 fb f6 21 b2 5c 8c 0c 0f 22 0a 03 4c 93 21 1a c6 96 b8 f4 f9 7d 48 c6 6b ab d9 44 df c0 10 59 b2 1d 4c 4e d7 31 44 f3 d6 67 ea c8 95 a7 91 04 1d f4 0f 0c ca ba 54 24 29 4f 04 f6 ee 70 f8 dc 42 d8 28 c8 60 71 c2 de 9c c5 ae a5 0b 2e b8 60 ff 9b 3a 09 32 ae 6a 37 1f 0e a1 63 38 74 8e 27 86 73 9d 98 f9 1e da 6c 3e 0e b5 cb e0 6a 76 1c e6 97 c1 e2 4a 51 94 63 1b ae aa c9 0f 6a e6 8b 23 86 8b b7 f0 03 1a fe 3d 7c b2 15 2e 79 fd 5c 6c e6 c9 54 09 55 14 15 48 ca 51 03 3f 31 e7 a4 f1 Data Ascii: Gr`s.ar_\|<-EYNzSr-gQr$rHc`Fr!\"L!}HkDYLN1DgT$)OpB(`q.`:2j7c8t'sl>jvJQcj#=\|.y\lTUHQ?1
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 8a 8b 37 9d 3d 8c 6b 4e 18 40 2d 6f e1 c1 c9 1e f6 f6 22 fc 84 d6 57 cb d9 a8 fb 1a a2 a1 28 ca 53 8b a5 6e 69 e5 58 79 20 a0 5d a0 28 8a f2 f4 71 dc 40 01 9f bd 6b 4a 8a 30 70 a8 dd 19 43 05 f4 c2 18 85 d8 08 9c 76 60 3c 94 bd 30 11 61 94 fd e5 8f 69 36 74 e8 45 cb 8f 31 54 72 d1 4f c2 e8 35 a7 0c 60 f0 9c 11 f4 17 1c ed 5c 45 51 14 45 51 81 a4 1c ab 38 8e 23 53 96 5b a4 28 87 e5 06 ea ba 4f fa 89 2a 87 c8 bd ea a4 01 7c f8 07 bb 50 2a bb 78 e3 d9 c3 b8 f1 91 06 06 ca a6 52 e2 f3 37 d4 d0 5f 74 70 d9 da 32 aa 79 1b 97 ad 2b a3 56 b0 71 29 2d d7 47 9f bb b6 85 ab 68 9e d3 56 94 f0 bf 2e 18 c5 c7 6f db 87 72 de c1 1f 5e b0 02 95 bc 16 72 50 14 45 51 14 15 48 ca 31 09 1b a9 3c 26 03 57 be 53 94 c3 05 17 1c 79 2a 42 4e de 78 ee 08 c0 53 ca 35 27 cd 8d fb f1 Data Ascii: 7=kN@-o"W(SniXy ](q@kJ0pCv`<0ai6tE1TrO5`\EQEQ8#S[(O\|PxR7_tp2y+Vq)-GhV.or^rPEQH1<&WSy*BNxS5'
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: de 7b 49 48 6d b1 51 22 71 59 2c d0 b6 82 90 5a 46 fd 45 fd 17 d0 be 87 d4 9f 3e b5 85 b4 17 6a 24 7e 78 3e 9f da c3 fa 22 a6 f3 27 a1 2f 92 24 80 4b 9f 57 0a 39 ac 28 04 b4 36 12 39 b4 bc 9b 78 b4 3c 0b f6 1c 22 da 37 3e 3f 66 da 3e 9d 97 b4 7e 3a 8f 7c df a7 75 90 18 71 f3 24 90 f2 58 5b 0c 8c e8 f0 3c 12 bc 21 1a cd 36 f6 ed 9b c4 f8 f8 24 bd ee 90 f8 a7 73 57 84 0b 9d 5f b9 12 89 45 0b 5e 63 02 89 17 20 a0 fd 72 49 48 e7 44 1a c5 c8 e7 72 e8 d0 71 ab d3 31 74 68 3b 21 9d a3 5e b1 06 b7 6f 00 71 63 1a 74 81 91 68 a6 73 c9 c9 04 a0 8d 8e 5d 42 58 ab a1 38 34 86 5c b5 5f c4 b2 79 08 40 6d b2 6c f9 eb d0 7c 01 3f cc a0 fe 8c 52 81 c5 9d 93 4b 07 62 06 5d 4f 43 74 ec bd 28 22 f1 43 d7 af 63 4b 97 37 7a 5d 9c 18 4e 60 43 7f 15 0f 74 80 4b 4e ca e3 7f bf f1 Data Ascii: {IHmQ"qY,ZFE>j$~x>"'/$KW9(69x<"7>?f>~:\|uq$X[<!6$sW_E^c rIHDrq1th;!^oqcths]BX84\_y@ml\|?RKb]OCt("CcK7z]N`CtKN
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: ac 9b bd 32 ed 20 94 10 c4 55 03 39 d4 58 d0 15 72 d8 39 dd c2 54 cb 87 47 c2 b0 e5 7b d4 37 ec 39 0b 69 dd 91 08 d4 fe 92 11 08 53 8d 1e ba e2 e9 a2 35 86 b4 7d c7 84 ce 39 4e 22 9e 05 0e 9b b3 1c 17 cd 5e 88 69 5a c7 de 2e 09 14 ee 13 0e 79 0b da a8 90 28 60 c3 3f cf 21 66 0e 87 5f 99 3e b0 c4 03 c1 31 61 a1 58 6e 8e 84 af 19 4f 82 2d de 34 16 a6 bc 0d f3 24 de 76 8c 47 a1 ea f8 58 5b b3 b0 a1 bf 00 bf d3 c3 03 0f 37 30 56 1d 42 a9 6f 08 1d 67 08 7b 7a 45 8c 37 3c 58 b9 22 09 a0 40 04 25 e9 35 09 07 b3 d3 f1 5d d8 53 c6 de 0f 0e 61 2c d2 b9 c5 e2 27 a2 63 c2 c2 38 22 d1 43 27 85 ec 7b 10 27 b2 9c 88 21 f6 ac 79 e2 ec 92 63 15 51 bb 59 8b e4 a9 9d ae ec 47 24 de 21 31 e8 41 42 86 bd 50 31 9f 8b 71 1a ae 17 cf 9a b8 7c 2e 18 af 21 8b e4 10 a7 6d 18 c3 b9 Data Ascii: 2 U9Xr9TG{79iS5}9N"^iZ.y(`?!f_>1aXnO-4$vGX[70VBog{zE7<X"@%5]Sa,'c8"C'{'!ycQYG$!1ABP1q\|.!m
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 89 ca 1c 07 27 06 58 8e 36 50 23 23 da e7 e4 f3 98 73 98 48 3c b9 ae 09 11 8b 22 b3 dd 79 85 1f 6c 09 e3 71 45 30 24 71 9a ff c2 46 75 1a de 12 67 85 07 78 b9 c8 08 30 87 da 46 bb 85 2d 75 1f 3b 48 d4 78 7e 84 f5 7d b4 4d 32 32 39 6c af 4e 6d f4 d9 75 43 42 31 26 c3 bd 4a 46 f6 ca 5a 09 fd 05 88 17 69 77 2b 12 2f ce 9e 86 8f ed 53 1e 02 6a 7b c7 2f 52 3f 70 71 0b ea 07 0e 71 22 b1 f3 c8 9e 86 18 fd 01 09 2c 16 91 01 7b 0c 48 84 72 1b 23 f6 9a d0 fe f5 64 0f 72 d4 73 f4 8f dd 25 ec 71 a3 49 f6 27 31 f9 3b ec 4e 88 d3 a7 e3 61 c2 e2 c8 92 5c 2f d1 51 51 24 06 a6 63 65 79 24 dc 35 91 f1 a2 71 ae 8c 63 fa 49 0a 42 24 b6 b8 a3 8c d7 20 16 d1 53 cc 39 52 c8 c1 78 92 d8 0f 16 b0 93 04 95 22 87 f9 45 e8 fa 01 c2 5a 15 f5 76 0b 4d 3f c6 58 df 3a 04 61 1b a5 72 1e Data Ascii: 'X6P##sH<"ylqE0$qFugx0F-u;Hx~}M229lNmuCB1&JFZiw+/Sj{/R?pqq",{Hr#drs%qI'1;Na\/QQ$cey$5qcIB$ S9Rx"EZvM?X:ar
2024-07-04 22:39:30 UTC	1369	IN	Data Raw: 5e 83 87 1e 7a c8 9c 88 fc 04 9d 0c b4 1c fd e8 72 a2 73 b7 dd 92 1f 69 fe 8c ab 23 f1 0f 09 87 db f1 8d ff 91 47 1e c1 ce 9d 3b 71 fe f9 e7 e3 f4 d3 4f d7 ce 54 8e 48 1c 97 bd 0a 7c 5e 5b f2 d4 d9 25 23 d3 66 03 b6 e1 90 1d ed 4b 35 30 7e 0a 3e 57 3e d8 54 d8 72 ed 9c 09 61 e3 27 e7 76 24 4f dc f9 46 5d cc 3b c6 23 60 87 58 35 50 c2 6a 0e b7 aa d4 f0 f0 78 80 c1 22 19 c7 96 27 15 d9 06 72 16 86 8a 5d 32 de da d8 b4 7a 14 fd 03 35 ec 26 43 ef 27 5b ea 78 74 92 2b 99 b1 97 26 34 c5 19 c4 92 b6 c8 a6 4c 43 ad 12 53 fa 58 3c 22 f3 aa 53 71 d8 98 54 c3 13 43 24 12 09 81 64 ee 89 b1 3c 3d cf 9e 9d 5b b1 08 00 8e 2a eb 75 21 9e a5 d8 4e c4 eb c0 ff 22 c9 cb 89 65 f9 d8 71 48 f2 79 62 98 07 5c 6d 8d fa ca f5 e7 c4 88 2d e6 7a 2c f9 22 76 92 93 75 65 65 96 25 ad Data Ascii: ^zrsi#G;qOTH\|^[%#fK50~>W>Tra'v$OF];#`X5Pjx"'r]2z5&C'[xt+&4LCSX<"SqTC$d<=[*u!N"eqHyb\m-z,"vuee%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49753	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:31 UTC	607	OUT	GET /wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min.js?ver=5.4.6 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:31 UTC	794	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:31 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sun, 24 Dec 2023 07:55:12 GMT vary: Accept-Encoding etag: W/"6587e3e0-54f" expires: Fri, 05 Jul 2024 04:41:03 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 21508 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tH0T3OjBW9Knhaq9cjkJx5Le93ibkMJKnTf6aFqqM3hQHoLNkQrU7vudYD1w5b1%2B%2BPkUbEgWfpdlJTxvLitOny3FU5kytPX%2FlrNuMEDZc1%2Fwb92rqMhUZdsBUq1kneqlFoFLP0w%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c9bc9fb7ca8-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:31 UTC	575	IN	Data Raw: 35 34 66 0d 0a 2f 2a 2a 0a 20 2a 20 6b 6b 20 53 74 61 72 20 52 61 74 69 6e 67 73 0a 20 2a 20 40 73 65 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6b 61 6d 61 6c 6b 68 61 6e 2f 6b 6b 2d 73 74 61 72 2d 72 61 74 69 6e 67 73 0a 20 2a 2f 0a 20 22 75 73 65 20 73 74 72 69 63 74 22 3b 21 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 22 6c 6f 61 64 69 6e 67 22 21 3d 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 29 72 65 74 75 72 6e 20 74 28 29 3b 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 74 29 7d 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 21 31 3b 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 2e 63 61 6c 6c 28 Data Ascii: 54f/** * kk Star Ratings * @see https://github.com/kamalkhan/kk-star-ratings */ "use strict";!function(t){if("loading"!=document.readyState)return t();document.addEventListener("DOMContentLoaded",t)}(function(){var t=!1;Array.prototype.forEach.call(
2024-07-04 22:39:31 UTC	791	IN	Data Raw: 6f 72 28 76 61 72 20 6f 20 69 6e 20 65 29 61 2e 70 75 73 68 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 6f 29 2b 22 3d 22 2b 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 5b 6f 5d 29 29 3b 76 61 72 20 63 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 63 2e 6f 70 65 6e 28 22 50 4f 53 54 22 2c 6b 6b 5f 73 74 61 72 5f 72 61 74 69 6e 67 73 2e 65 6e 64 70 6f 69 6e 74 2c 21 30 29 2c 63 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 2e 73 74 61 74 75 73 3e 3d 32 30 30 26 26 63 2e 73 74 61 74 75 73 3c 34 30 30 3f 6e 28 63 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 63 29 3a 72 28 63 2e 72 65 73 70 6f 6e 73 65 54 65 78 74 2c 63 29 7d 2c 63 2e 6f 6e 6c 6f 61 64 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 3d Data Ascii: or(var o in e)a.push(encodeURIComponent(o)+"="+encodeURIComponent(e[o]));var c=new XMLHttpRequest;c.open("POST",kk_star_ratings.endpoint,!0),c.onload=function(){c.status>=200&&c.status<400?n(c.responseText,c):r(c.responseText,c)},c.onloadend=function(){t=
2024-07-04 22:39:31 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49754	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:31 UTC	380	OUT	GET /wp-content/themes/tgtheme/img/icon.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:31 UTC	776	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:31 GMT Content-Type: image/png Content-Length: 1342 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-53e" expires: Wed, 17 Jul 2024 18:16:46 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 1484565 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=E4Rs%2Fhlrf5HM4p2h26iJlakgnk3ZzwuBZK79s4pASwlefEXthF2DvE50mt14sTeLnkgr%2BjX3G67%2FRcgTBXkAMTdljg7A%2FVplA2xKUOCMx8HIfYmq5exTwBITbDLz6W08UZO3Adk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c9bc92f1784-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:31 UTC	593	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 12 08 06 00 00 00 41 ec 1e 9e 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRAtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:31 UTC	749	IN	Data Raw: 31 31 45 45 38 35 38 45 38 34 33 36 30 38 43 32 46 43 37 45 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 35 41 34 31 46 35 33 34 46 33 38 31 31 45 45 38 35 38 45 38 34 33 36 30 38 43 32 46 43 37 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 35 41 34 31 46 35 30 34 46 33 38 31 31 45 45 38 35 38 45 38 34 33 36 30 38 43 32 46 43 37 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 35 41 34 31 46 35 31 34 46 33 38 31 31 45 45 38 35 38 45 38 34 33 36 30 38 43 32 46 43 37 45 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c Data Ascii: 11EE858E843608C2FC7E" xmpMM:DocumentID="xmp.did:85A41F534F3811EE858E843608C2FC7E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:85A41F504F3811EE858E843608C2FC7E" stRef:documentID="xmp.did:85A41F514F3811EE858E843608C2FC7E"/> </rdf:Description> </rdf:RDF> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49752	23.211.4.90	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 22:39:31 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=235766 Date: Thu, 04 Jul 2024 22:39:31 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49755	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:31 UTC	668	OUT	GET /wp-content/themes/tgtheme/img/t_logo_sprite.svg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:31 UTC	738	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:31 GMT Content-Type: image/svg+xml Content-Length: 23116 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-5a4c" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P%2Ft7YB32bMVJ8kwGDZbWkvcHNYS6M%2BYjE3C9LKKTPH3a%2BOuaR10CBBvRcTeCc%2FVYmcAItk7Rth0emDWaVdRmafaDWCAeFyqXfryg6oZ7bpyV5nWJxpfvIP%2BkNfJNeVWmQ%2FsjNVA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c9d5a8e17ad-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:31 UTC	631	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 68 65 69 67 68 74 3d 22 31 34 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 36 34 20 31 34 34 22 20 77 69 64 74 68 3d 22 34 34 36 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 61 22 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 61 61 62 65 65 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 32 39 65 64 39 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 Data Ascii: <svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGr
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 22 65 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 31 35 31 32 22 20 78 32 3d 22 31 35 31 32 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 61 22 20 79 31 3d 22 31 34 2e 34 35 32 36 22 20 79 32 3d 22 31 32 39 2e 35 34 37 22 2f 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 66 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 31 36 35 36 22 20 78 32 3d 22 31 36 35 36 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 61 22 20 79 31 3d 22 31 30 2e 37 38 31 37 22 20 79 32 3d 22 31 33 33 2e 32 31 38 22 2f 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 67 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 Data Ascii: "e" gradientUnits="userSpaceOnUse" x1="1512" x2="1512" xlink:href="#a" y1="14.4526" y2="129.547"/><linearGradient id="f" gradientUnits="userSpaceOnUse" x1="1656" x2="1656" xlink:href="#a" y1="10.7817" y2="133.218"/><linearGradient id="g" gradientUnits="us
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 47 72 61 64 69 65 6e 74 20 69 64 3d 22 71 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 33 32 34 30 22 20 78 32 3d 22 33 32 34 30 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 61 22 20 79 31 3d 22 37 2e 33 34 31 38 22 20 79 32 3d 22 31 33 36 2e 36 35 39 22 2f 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 72 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 33 33 38 34 22 20 78 32 3d 22 33 33 38 34 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 61 22 20 79 31 3d 22 37 2e 38 31 38 38 35 22 20 79 32 3d 22 31 33 36 2e 31 38 31 22 2f 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 73 22 20 67 72 61 64 69 65 Data Ascii: Gradient id="q" gradientUnits="userSpaceOnUse" x1="3240" x2="3240" xlink:href="#a" y1="7.3418" y2="136.659"/><linearGradient id="r" gradientUnits="userSpaceOnUse" x1="3384" x2="3384" xlink:href="#a" y1="7.81885" y2="136.181"/><linearGradient id="s" gradie
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 20 32 30 2e 38 33 37 37 2d 31 33 2e 38 20 33 33 2e 33 33 36 73 34 2e 39 37 20 32 34 2e 34 39 38 20 31 33 2e 38 20 33 33 2e 33 33 36 63 38 2e 38 34 20 38 2e 38 33 38 20 32 30 2e 38 34 20 31 33 2e 38 30 38 20 33 33 2e 33 34 20 31 33 2e 38 30 38 73 32 34 2e 35 2d 34 2e 39 37 20 33 33 2e 33 34 2d 31 33 2e 38 30 38 63 38 2e 38 33 2d 38 2e 38 33 38 20 31 33 2e 38 2d 32 30 2e 38 33 37 37 20 31 33 2e 38 2d 33 33 2e 33 33 36 73 2d 34 2e 39 37 2d 32 34 2e 34 39 38 2d 31 33 2e 38 2d 33 33 2e 33 33 36 63 2d 38 2e 38 34 2d 38 2e 38 33 38 2d 32 30 2e 38 34 2d 31 33 2e 38 30 38 2d 33 33 2e 33 34 2d 31 33 2e 38 30 38 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 34 35 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 31 33 36 38 20 31 39 2e 31 Data Ascii: 20.8377-13.8 33.336s4.97 24.498 13.8 33.336c8.84 8.838 20.84 13.808 33.34 13.808s24.5-4.97 33.34-13.808c8.83-8.838 13.8-20.8377 13.8-33.336s-4.97-24.498-13.8-33.336c-8.84-8.838-20.84-13.808-33.34-13.808z" fill="url(#c)" opacity=".45"/><path d="m1368 19.1
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 2e 32 39 2d 31 37 2e 39 33 63 31 31 2e 34 37 2d 31 31 2e 34 37 37 20 31 37 2e 39 33 2d 32 37 2e 30 35 38 37 20 31 37 2e 39 33 2d 34 33 2e 32 38 38 32 20 30 2d 31 36 2e 32 32 39 34 2d 36 2e 34 36 2d 33 31 2e 38 31 31 34 2d 31 37 2e 39 33 2d 34 33 2e 32 38 37 39 2d 31 31 2e 34 38 2d 31 31 2e 34 37 36 34 2d 32 37 2e 30 36 2d 31 37 2e 39 33 30 32 2d 34 33 2e 32 39 2d 31 37 2e 39 33 30 32 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 66 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 39 38 22 2f 3e 3c 70 61 74 68 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 6d 31 36 32 38 2e 33 36 20 31 32 36 2e 36 32 34 63 31 2e 33 35 2d 38 2e 33 30 36 20 32 2e 35 34 2d 31 36 2e 34 32 32 20 33 2d 32 31 2e 31 39 2e 30 38 2d 2e 38 34 37 2d 2e 30 33 2d 31 2e 39 33 Data Ascii: .29-17.93c11.47-11.477 17.93-27.0587 17.93-43.2882 0-16.2294-6.46-31.8114-17.93-43.2879-11.48-11.4764-27.06-17.9302-43.29-17.9302z" fill="url(#f)" opacity=".98"/><path clip-rule="evenodd" d="m1628.36 126.624c1.35-8.306 2.54-16.422 3-21.19.08-.847-.03-1.93
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 36 33 34 63 30 20 31 37 2e 34 39 35 20 36 2e 39 36 20 33 34 2e 32 39 31 39 20 31 39 2e 33 33 20 34 36 2e 36 36 32 39 20 31 32 2e 33 37 20 31 32 2e 33 37 32 20 32 39 2e 31 37 20 31 39 2e 33 32 39 20 34 36 2e 36 36 20 31 39 2e 33 32 39 20 31 37 2e 35 20 30 20 33 34 2e 32 39 2d 36 2e 39 35 37 20 34 36 2e 36 36 2d 31 39 2e 33 32 39 20 31 32 2e 33 37 2d 31 32 2e 33 37 31 20 31 39 2e 33 33 2d 32 39 2e 31 36 37 39 20 31 39 2e 33 33 2d 34 36 2e 36 36 32 39 20 30 2d 31 37 2e 34 39 35 31 2d 36 2e 39 36 2d 33 34 2e 32 39 32 2d 31 39 2e 33 33 2d 34 36 2e 36 36 33 34 73 2d 32 39 2e 31 36 2d 31 39 2e 33 32 38 34 2d 34 36 2e 36 36 2d 31 39 2e 33 32 38 34 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 68 29 22 2f 3e 3c 70 61 74 68 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 Data Ascii: 634c0 17.495 6.96 34.2919 19.33 46.6629 12.37 12.372 29.17 19.329 46.66 19.329 17.5 0 34.29-6.957 46.66-19.329 12.37-12.371 19.33-29.1679 19.33-46.6629 0-17.4951-6.96-34.292-19.33-46.6634s-29.16-19.3284-46.66-19.3284z" fill="url(#h)"/><path clip-rule="eve
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 37 39 2d 31 38 2e 36 32 36 34 20 32 38 2e 33 38 2d 31 38 2e 37 36 31 2e 34 32 2d 2e 30 39 34 36 20 31 2d 2e 32 31 34 34 20 31 2e 33 39 2e 31 33 35 37 2e 34 2e 33 34 39 31 2e 33 36 20 31 2e 30 31 31 35 2e 33 32 20 31 2e 31 38 39 32 2d 2e 32 36 20 31 2e 30 38 32 33 2d 31 30 2e 33 31 20 31 30 2e 34 33 32 33 2d 31 35 2e 35 33 20 31 35 2e 32 37 38 31 2d 31 2e 36 32 20 31 2e 35 31 34 2d 32 2e 37 38 20 32 2e 35 38 38 2d 33 2e 30 31 20 32 2e 38 33 33 2d 2e 35 33 2e 35 34 38 2d 31 2e 30 37 20 31 2e 30 36 36 2d 31 2e 35 39 20 31 2e 35 36 34 2d 33 2e 31 39 20 33 2e 30 37 37 2d 35 2e 35 38 20 35 2e 33 38 35 2e 31 34 20 39 2e 31 35 33 20 32 2e 37 35 20 31 2e 38 31 34 20 34 2e 39 35 20 33 2e 33 31 33 20 37 2e 31 35 20 34 2e 38 30 39 20 32 2e 33 39 20 31 2e 36 32 39 20 Data Ascii: 79-18.6264 28.38-18.761.42-.0946 1-.2144 1.39.1357.4.3491.36 1.0115.32 1.1892-.26 1.0823-10.31 10.4323-15.53 15.2781-1.62 1.514-2.78 2.588-3.01 2.833-.53.548-1.07 1.066-1.59 1.564-3.19 3.077-5.58 5.385.14 9.153 2.75 1.814 4.95 3.313 7.15 4.809 2.39 1.629
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 35 2d 2e 31 37 39 35 2e 30 39 2d 2e 38 34 38 39 2d 2e 33 31 2d 31 2e 32 30 31 36 2d 2e 34 2d 2e 33 35 33 39 2d 2e 39 39 2d 2e 32 33 32 37 2d 31 2e 34 31 2d 2e 31 33 37 31 2d 2e 36 2e 31 33 36 2d 31 30 2e 31 36 20 36 2e 34 35 35 37 2d 32 38 2e 36 38 20 31 38 2e 39 35 38 32 2d 32 2e 37 32 20 31 2e 38 36 33 34 2d 35 2e 31 37 20 32 2e 37 37 32 34 2d 37 2e 33 38 20 32 2e 37 32 34 34 2d 32 2e 34 32 2d 2e 30 35 32 2d 37 2e 30 39 2d 31 2e 33 37 32 39 2d 31 30 2e 35 37 2d 32 2e 35 30 31 33 2d 34 2e 32 36 2d 31 2e 33 38 34 34 2d 37 2e 36 34 2d 32 2e 31 31 36 35 2d 37 2e 33 35 2d 34 2e 34 36 37 38 2e 31 36 2d 31 2e 32 32 34 20 31 2e 38 34 2d 32 2e 34 37 36 37 20 35 2e 30 36 2d 33 2e 37 35 37 7a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 64 3d 22 Data Ascii: 5-.1795.09-.8489-.31-1.2016-.4-.3539-.99-.2327-1.41-.1371-.6.136-10.16 6.4557-28.68 18.9582-2.72 1.8634-5.17 2.7724-7.38 2.7244-2.42-.052-7.09-1.3729-10.57-2.5013-4.26-1.3844-7.64-2.1165-7.35-4.4678.16-1.224 1.84-2.4767 5.06-3.757z" fill="#fff"/><path d="
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 30 2e 30 37 20 31 39 2e 39 32 36 20 34 38 2e 31 31 20 31 39 2e 39 32 36 73 33 35 2e 33 35 2d 37 2e 31 37 32 20 34 38 2e 31 31 2d 31 39 2e 39 32 36 63 31 32 2e 37 35 2d 31 32 2e 37 35 34 20 31 39 2e 39 32 2d 33 30 2e 30 37 30 36 20 31 39 2e 39 32 2d 34 38 2e 31 30 36 38 73 2d 37 2e 31 37 2d 33 35 2e 33 35 32 37 2d 31 39 2e 39 32 2d 34 38 2e 31 30 36 37 63 2d 31 32 2e 37 36 2d 31 32 2e 37 35 34 31 2d 33 30 2e 30 37 2d 31 39 2e 39 32 36 32 31 2d 34 38 2e 31 31 2d 31 39 2e 39 32 36 32 31 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 6c 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 32 34 37 32 2e 39 34 20 38 31 2e 31 30 37 63 31 39 2e 38 33 2d 38 2e 36 34 30 32 20 33 33 2e 30 35 2d 31 34 2e 33 33 36 39 20 33 39 2e 36 37 2d 31 37 2e 30 38 39 20 31 38 2e 39 2d 37 2e 38 Data Ascii: 0.07 19.926 48.11 19.926s35.35-7.172 48.11-19.926c12.75-12.754 19.92-30.0706 19.92-48.1068s-7.17-35.3527-19.92-48.1067c-12.76-12.7541-30.07-19.92621-48.11-19.92621z" fill="url(#l)"/><path d="m2472.94 81.107c19.83-8.6402 33.05-14.3369 39.67-17.089 18.9-7.8
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 35 36 39 37 2d 2e 39 35 20 35 2e 30 36 32 2d 32 2e 38 31 20 36 2e 37 35 39 2d 34 2e 36 32 20 36 2e 39 32 35 2d 33 2e 39 32 2e 33 36 31 2d 36 2e 39 2d 32 2e 35 39 32 2d 31 30 2e 37 2d 35 2e 30 38 32 2d 35 2e 39 34 2d 33 2e 38 39 39 2d 39 2e 33 2d 36 2e 33 32 34 2d 31 35 2e 30 38 2d 31 30 2e 31 32 37 34 2d 36 2e 36 37 2d 34 2e 33 39 35 33 2d 32 2e 33 34 2d 36 2e 38 31 31 35 20 31 2e 34 36 2d 31 30 2e 37 35 39 33 2e 39 39 2d 31 2e 30 33 33 34 20 31 38 2e 32 38 2d 31 36 2e 37 35 35 39 20 31 38 2e 36 31 2d 31 38 2e 31 38 31 39 2e 30 35 2d 2e 31 37 38 34 2e 30 39 2d 2e 38 34 33 34 2d 2e 33 31 2d 31 2e 31 39 33 39 2d 2e 34 2d 2e 33 35 31 35 2d 2e 39 38 2d 2e 32 33 31 31 2d 31 2e 34 2d 2e 31 33 36 31 2d 2e 35 39 2e 31 33 35 31 2d 31 30 2e 30 39 20 36 2e 34 31 33 Data Ascii: 5697-.95 5.062-2.81 6.759-4.62 6.925-3.92.361-6.9-2.592-10.7-5.082-5.94-3.899-9.3-6.324-15.08-10.1274-6.67-4.3953-2.34-6.8115 1.46-10.7593.99-1.0334 18.28-16.7559 18.61-18.1819.05-.1784.09-.8434-.31-1.1939-.4-.3515-.98-.2311-1.4-.1361-.59.1351-10.09 6.413

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:31 UTC	623	OUT	GET /wp-content/themes/tgtheme/img/anzhuo_a.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:31 UTC	783	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:31 GMT Content-Type: image/png Content-Length: 1373 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-55d" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609573 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x6603RydH3wyb8NeG6KCd6ZdCil9U1dRkUYMtw9OfDQpyow0%2BxVm5OtFKllaiI13MM0BeyJ2sE6H%2BI1HQah7%2B7wTjk%2FzSljkuPFdrNq%2FUs%2BfDGGVQ8B1%2FyFtFB6Hb%2FZFcouHht0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c9dbb448c15-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:31 UTC	586	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 00 18 08 06 00 00 00 fe be 0d 4b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRKtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:31 UTC	787	IN	Data Raw: 32 36 32 34 46 42 36 31 31 45 45 42 42 38 39 41 44 46 44 38 46 43 36 45 42 43 37 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 42 31 42 33 32 36 33 34 46 42 36 31 31 45 45 42 42 38 39 41 44 46 44 38 46 43 36 45 42 43 37 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 42 31 42 33 32 36 30 34 46 42 36 31 31 45 45 42 42 38 39 41 44 46 44 38 46 43 36 45 42 43 37 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 42 31 42 33 32 36 31 34 46 42 36 31 31 45 45 42 42 38 39 41 44 46 44 38 46 43 36 45 42 43 37 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 Data Ascii: 2624FB611EEBB89ADFD8FC6EBC7" xmpMM:DocumentID="xmp.did:1B1B32634FB611EEBB89ADFD8FC6EBC7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1B1B32604FB611EEBB89ADFD8FC6EBC7" stRef:documentID="xmp.did:1B1B32614FB611EEBB89ADFD8FC6EBC7"/> </rdf:Description> </rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49756	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:31 UTC	617	OUT	GET /wp-content/themes/tgtheme/img/d2.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:31 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:31 GMT Content-Type: image/gif Content-Length: 2202471 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-219b67" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609573 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4OibTWZ3fqGlk5Y82Pnj8hHsNF8Bn2TgUCu5wEPamLTF6uBYvgRYaVywYONyukyi3cB4OCG4A2L%2Fiu6qlKCUEom81A2jbYoQIX6swxkgvkIqAKb1%2BTAphqOSGTcpRRHpzQzxmrc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c9dcc7a4244-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:31 UTC	592	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 88 7e 68 ff 5d 1f fe d8 20 bc a8 71 3e 39 2d 00 00 00 80 76 62 ff d5 27 fa 90 16 ff fa ca cf 35 02 9c 92 7c 33 2b 07 ff 8c 00 4e 4d 4d ff ff ff 35 2f 20 a7 f6 ff fc ee 21 7d 09 09 80 80 80 63 5b 4a 35 30 21 ff 8b 00 3d 38 2c 32 1d 04 fb 90 15 ff b4 84 33 33 33 f9 90 15 3d 38 2d ff d4 26 87 7d 67 fa 97 17 cc cb cb fb a0 19 85 7b 65 81 78 62 fa 93 16 fb 9c 18 fe c0 20 47 41 33 0b 08 02 fe c5 22 ff d0 25 fd ba 1f 83 79 64 6e 66 53 fd b6 1d 42 3c 2f 51 4b 3c 12 0d 01 19 14 03 24 1e 04 79 70 5c fd af 1b fc 8f 13 fe e4 21 5a 54 45 f4 54 18 69 61 4f 4c 46 38 fc a5 19 db 3e 08 ff cc 24 ff d8 24 56 Data Ascii: GIF89a!NETSCAPE2.0!,~h] q>9-vb'5\|3+NMM5/ !}c[J50!=8,2333=8-&}g{exb GA3"%ydnfSB</QK<$yp\!ZTETiaOLF8>$$V
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 01 f7 f9 f9 73 73 73 ff da 30 bb ee ce ff ef ab 5c 45 17 96 5d 13 97 7e 16 ff f9 e5 d2 c3 8e d6 e5 8c 42 37 1c d4 b4 2d 96 2d 04 ff 92 5d 14 14 14 1d 1d 1d da cd 99 67 46 19 d0 ae 26 f3 86 02 d5 c8 95 2a 18 03 ff 6e 32 91 7e 3e 67 1b 01 b5 f7 ff 33 0c 00 ff 83 4a d4 fb ff f2 92 42 d0 b5 59 3d 35 26 a6 f6 ff ff dd 42 e4 96 31 cd b3 5e c6 a9 33 c8 a9 27 4e 13 00 d6 84 25 a5 95 64 e1 63 1c 3e 34 09 a9 67 14 c2 bd 96 67 5b 3e f0 a0 1a e6 c1 27 6b 6b 6b ee 8f 1e bc a2 34 9c 88 5b 83 74 47 ff 94 07 40 10 00 41 2c 06 f4 8e 17 e1 e1 71 8d 7d 50 b2 ad 89 b4 a1 68 ff 76 3b d2 d1 d1 de de de 92 92 92 c3 88 43 fc ba 5d 5a 17 00 89 89 89 b4 87 53 fe e9 d1 da a0 4c 76 24 02 fb aa 4c df bf 3b 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a Data Ascii: sss0\E]~B7--]gF&n2~>g3JBY=5&B1^3'N%dc>4gg[>'kkk4[tG@A,q}Phv;C]ZSLv$L;H\#J
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 60 37 3f fe b1 29 4f 92 c2 ce 88 58 c8 ae dd 0f 91 a0 04 40 e2 1e d8 c8 52 9e 8c 69 47 90 a4 2a bd 00 b0 1c 5d 72 29 d3 28 23 01 74 00 b6 4e 2a 4f 83 a1 44 24 08 14 17 47 53 42 50 88 49 50 a5 30 93 00 40 01 11 ef 95 43 91 a5 0c 70 39 33 5b 96 ee 90 b9 04 a5 0b d0 e4 4b 17 be e0 84 00 c0 a3 30 25 d9 04 1f 22 f3 28 cb e9 01 34 89 05 02 67 ae 31 9a e8 4c 94 12 ad 58 cd a0 f1 c0 86 8a 4a e5 36 85 59 c9 e4 7c d3 28 35 8a 01 3c 77 56 ff 4e 73 0a 8e 99 e9 8c 26 f4 48 d9 4e 76 f1 40 88 8a 82 e4 3c 55 79 84 62 8a ea 9e 42 91 e5 0b 0e e7 4f 23 06 f4 a2 8c 1a 28 3b 9b 78 26 03 a4 4a 9b 0b 8d 64 37 2d 09 51 9f ec 48 08 a8 e3 64 45 07 87 d1 96 32 2a 71 3e db 68 d9 2a 17 c3 55 85 54 98 54 e8 01 49 4b ca 93 e5 a4 e0 93 60 53 e9 4a 17 06 50 97 1a f5 58 45 b0 c1 14 91 60 Data Ascii: `7?)OX@RiG]r)(#tNOD$GSBPIP0@Cp93[K0%"(4g1LXJ6Y\|(5<wVNs&HNv@<UybBO#(;x&Jd7-QHdE2q>hUTTIK`SJPXE`
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 52 f8 85 0b e4 82 40 b7 7a 3e 28 5b 7b f3 71 0b 84 82 69 e8 35 6c a8 83 df 45 73 5a 17 6c c3 a5 1c 15 90 44 5c b8 52 6b 98 87 ed 83 84 92 14 82 23 08 23 3f 68 1c f3 ff 46 5a 76 78 87 35 13 7c 86 88 3a 55 a8 4a 89 12 83 69 07 5a 1e c7 3e c6 32 88 f9 55 88 95 c8 3e 1f 28 81 41 97 7b 58 05 07 ca f1 7e a8 13 89 92 c8 35 a2 38 8a d9 e3 86 9c 67 7c d0 36 5c 7b 83 01 1c 18 2c 9f f8 8a 09 24 8b 7a e8 5f 88 02 79 76 c7 89 c9 21 7a 61 83 86 be d8 35 bb 08 8c 6c 84 88 91 44 73 56 c0 84 8e a5 8a c9 41 61 3a d3 7f cb 18 57 b1 e8 8c ce 43 8b f3 54 69 68 e7 87 3c c5 25 cd 58 2c a0 f8 7b 94 e8 8d a8 83 6f 67 b7 6f b7 b1 1a 7c d5 75 60 33 7e db 58 3a 5e c8 8e 88 04 8d 7a 14 6b 25 80 7f a9 a8 1c d8 88 3e f7 48 3a f9 a8 8f 6d 74 89 91 24 8e 4b 48 86 10 55 23 07 b9 28 f6 58 Data Ascii: R@z>([{qi5lEsZlD\Rk##?hFZvx5\|:UJiZ>2U>(A{X~58g\|6\{,$z_yv!za5lDsVAa:WCTih<%X,{ogo\|u`3~X:^zk%>H:mt$KHU#(X
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 11 1f 9b 6b be 92 63 9f 64 62 26 a0 9b b3 ec eb 52 70 74 2f 0c f4 3e 3f 73 b9 bb 1b 21 9f f3 0f cf b1 b6 bf eb b9 e8 ab 03 c2 cb 03 52 14 35 00 1c c0 bc 55 31 68 e2 b7 71 92 c0 2f 52 b1 62 61 09 7f f0 0d b9 90 07 77 a0 bf 26 02 c1 b7 23 c1 fb a9 be a7 8a c1 19 06 29 1b 5c 01 65 ab b4 bc 09 c2 61 81 03 08 b0 c3 3b ac 01 1d 90 05 96 40 c2 7b 60 c2 28 bc 24 d4 b2 c2 f9 c9 9f 4e 55 bc 30 bc 33 c7 22 b6 7e fb 2e 1e 3c 99 38 2c 16 1a c0 c3 58 bc c3 26 70 03 07 d0 c5 7e 90 08 ad c0 06 7b f0 08 82 30 c5 45 9c 24 76 42 2d e8 8b 9f fa c9 9f 15 5c 04 f2 da c4 a2 64 00 4a a5 2e ed 42 34 67 5c 81 6f d1 01 59 9c c5 2c d0 c5 80 1c c8 5d 3c 09 bf 10 c6 65 f0 08 44 9c c7 bc ff 99 c6 6a 0c 27 ee a2 03 12 ac 9f 2d 0c 45 15 ec 54 70 0c 31 79 f8 28 02 5a c7 2f 30 b6 95 e2 26 Data Ascii: kcdb&Rpt/>?s!R5U1hq/Rbaw&#)\ea;@{`($NU03"~.<8,X&p~{0E$vB-\dJ.B4g\oY,]<eDj'-ETp1y(Z/0&
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 84 5f f8 86 7f f8 88 9f f8 8a bf f8 87 cf 07 9e fd f8 90 ff 07 ff 50 00 93 5f f9 94 7f f9 96 9f f9 98 bf f9 99 1f 18 25 5d f1 29 8d ec 9f ae 08 7c 5f fa a6 7f fa a8 9f fa 75 8f 0c a0 5e 06 a0 f0 fa b0 1f fb b2 0f 0a a8 50 fb b6 7f fb b8 af 0b ba bf fb bc df fb 9f f0 fb c0 1f fc c2 0f fc 7c f0 09 7c 70 fc c8 9f fc ca 7f fc 4c c0 07 cd 8f f8 d9 30 09 2a fd 01 c6 30 03 05 70 fd d8 9f fd da bf fd dc ff df fd de af fd 44 f0 fd e2 3f fe e4 ff 17 68 ad d6 a2 ef e9 7a a0 fa ec df fe ee df fe c4 00 ea 3a 40 fe 44 10 fe f4 4f fe f8 8f fd f5 6f ff f9 5f ff e4 8f 0b 00 e1 e7 c0 40 82 05 0d 1e 98 34 a3 c0 42 86 0d 1d 3e 84 18 51 e2 44 8a 15 2d 46 fc 97 51 e3 46 8e 1d 3d 7e 04 19 52 e4 48 92 25 4d 76 44 90 52 e5 4a 2e 07 5d be 34 a8 69 c0 4c 9a 34 e3 24 c0 99 53 e7 4e Data Ascii: _P_%])\|_u^P\|\|pL0*0pD?hz:@DOo_@4B>QD-FQF=~RH%MvDRJ.]4iL4$SN
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 50 7e 8b 6c 64 2e 67 c7 8f 75 ac 2a 96 12 d1 62 01 88 a0 c9 8a 71 b2 72 19 e3 8b 28 49 39 4a 53 c2 24 4a 8e 99 d2 2a 43 86 2c c7 28 ff 6b 59 bf 9c 08 11 86 41 0a 4b 7a 6f 21 65 bc 9a f5 20 82 4b 5d ea 52 0b bd 2c 15 36 9f b2 b3 9e 15 d3 98 67 8b 63 62 50 60 96 1c 2c 73 99 77 7c 09 26 1c 25 cd 90 dd 8b 64 d6 f2 e6 24 29 12 c9 ab cd d0 19 8c fc 41 15 94 b0 50 25 fc e0 07 b9 ac 04 33 d2 a9 19 76 ba f3 9d 66 73 cf 3c cb a2 4c 7b 4a 60 09 30 11 16 5d 88 c5 cf 7a 8d 8c 2e e8 00 e8 6f 08 ea b2 ae a9 a0 8b 37 54 02 16 02 30 53 9a ce 14 0b 0d fd 62 20 14 c0 0f 52 a9 d3 29 42 bc 55 3b f3 72 51 ca b9 87 68 30 09 42 47 49 d9 4c 97 74 8c 2e f3 22 29 bd 9a 46 97 a7 2d 2b a0 7f d9 9d cb 16 d8 90 1a da b0 0a 35 05 2b 58 b1 50 05 46 02 e3 52 3e 6d 0a 50 05 45 b6 bf 10 f5 Data Ascii: P~ld.gubqr(I9JS$JC,(kYAKzo!e K]R,6gcbP`,sw\|&%d$)AP%3vfs<L{J`0]z.o7T0Sb R)BU;rQh0BGILt.")F-+5+XPFR>mPE
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 35 32 2c c3 9d c3 2e 8e 0b 80 da da 37 3b 89 38 5b d9 99 08 84 08 3a ac c3 b0 58 30 3c 9c 2b f9 a0 8f 3e 9c 0c 86 43 0a 87 53 98 12 24 82 09 5c 96 05 82 3f f2 01 31 45 b4 ae 11 e3 40 9a 82 44 08 6a 43 87 20 82 76 83 c3 2e 64 42 4c 64 10 f7 c8 2c a4 b3 bc 14 59 11 50 8c 8c d1 4a 8b d2 ea 9b 1a 88 40 1a 50 1f 97 11 bd 85 e8 31 07 0a 84 1f 74 c5 20 bc 37 d7 7b c4 1b 1a a3 85 50 81 21 69 46 38 81 43 db e3 45 f6 48 c1 94 38 2a 98 d8 bd 8e 7a c1 83 78 26 ba 88 26 62 8c 0b a8 a3 8b 18 aa 81 15 ba c5 49 74 46 3e 59 ad 8a ab c6 10 63 44 33 cb b7 c2 7b 34 08 58 95 24 94 2c 37 1a c7 05 29 47 04 98 bc 02 3c c0 7c da 27 78 84 0c 14 8a 21 ff 01 a3 81 19 58 13 2d c1 c7 70 42 97 55 1c 9f bf eb c7 45 ac bf 9a 0a 3b f2 71 ac 52 31 48 9e 41 c8 84 64 8f 76 31 8b 16 ec 35 97 Data Ascii: 52,.7;8[:X0<+>CS$\?1E@DjC v.dBLd,YPJ@P1t 7{P!iF8CEH8*zx&&bItF>YcD3{4X$,7)G<\|'x!X-pBUE;qR1HAdv15
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 30 83 0b 36 03 3a d0 60 3a 98 80 0e a6 83 f2 84 a0 7f a5 df d2 e0 de 2a a5 4b 82 9d c9 9a a8 c9 a1 4d 58 9a 58 58 b5 d9 5d 07 22 e0 02 06 b2 1d b8 d8 8c 65 e0 51 80 e0 09 b6 e0 0b d6 e0 0e 06 e2 20 16 e2 21 26 e2 22 ee 60 33 00 dc 11 2e 0d 13 a8 5a ab 75 c1 03 50 57 9a 60 d7 ad 2d da 99 90 06 b5 81 81 ac b3 de 1b 56 60 1d 8e 60 2d a0 60 0c fe 61 23 26 e3 32 36 e3 ff 33 0e 62 61 15 61 25 3e 0c fb 65 0c f0 5d 2a 28 36 d8 e5 ed da 9a f8 da a2 11 e0 da 01 c9 7c e5 e2 1c 7e 60 1e f6 61 0e 46 e3 41 26 e4 42 2e 64 24 26 9f 35 66 63 c3 e0 de dd 74 e2 70 2b 59 9a 38 59 94 05 d2 9a b0 db a2 89 e1 a0 9c b7 03 c6 61 07 fe e3 30 0e 64 43 16 e5 51 26 e5 52 a6 83 44 5e 64 e2 15 d8 37 8e b2 df ac 89 e0 1c 5a ba 45 0a b5 79 20 c4 14 b3 1d d0 02 41 2e e5 5d e6 e5 5e de 65 Data Ascii: 06:`:KMXXX]"eQ !&"`3.ZuPW`-V``-`a#&263baa%>e](6\|~`aFA&B.d$&5fctp+Y8Ya0dCQ&RD^d7ZEy A.]^e
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: bd e7 fb 2c 30 fd 2c 10 07 43 50 7d ec 34 82 94 d0 80 d7 c7 01 1c d0 00 d9 d7 00 c2 ef b6 26 66 0c ff e6 9e 09 74 f8 6b 7d b6 fc c7 af f5 5c c7 85 06 28 78 ca 17 f8 33 c7 05 49 ef f5 a6 b6 80 05 a8 0d fe 3e 5a e6 69 01 d0 0f 7d 2e bf fb 42 28 84 d3 2f 07 d5 37 04 20 a0 84 4e 78 00 3c 40 84 45 60 8c 13 70 8f 0e b0 7d 25 a9 f0 10 a8 76 b3 80 ef 99 80 07 fa ee eb 7c 3e 03 e0 77 f4 c9 9f f4 fa 6f 00 fc 3f 79 5f d0 7f 6f 07 08 5f 16 06 5a 80 00 0b 02 c2 84 0a 15 96 48 e0 f0 21 c4 88 12 27 66 1a 60 f1 e2 c5 43 07 36 72 ec e8 f1 23 48 8e 30 0a 29 28 69 f2 24 ca 94 2a 57 b2 6c 99 32 50 a1 98 85 ce 64 a9 29 ce 10 ce 90 3a 77 82 6c 81 e0 27 d0 a0 08 3a fc 2b 6a f4 28 d2 a4 4a 97 32 6d ea f4 29 d4 a8 52 a7 52 ad 6a d5 a8 d0 ac 4f 78 7e 4c 83 d1 22 9a 85 62 21 10 34 Data Ascii: ,0,CP}4&ftk}\(x3I>Zi}.B(/7 Nx<@E`p}%v\|>wo?y_o_ZH!'f`C6r#H0)(i$*Wl2Pd):wl':+j(J2m)RRjOx~L"b!4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49758	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:31 UTC	617	OUT	GET /wp-content/themes/tgtheme/img/d3.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:31 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:31 GMT Content-Type: image/gif Content-Length: 2254846 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-2267fe" expires: Fri, 02 Aug 2024 18:49:35 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 100196 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WjPJN0nrZLpO09ajvn553Fs8tal3kt%2FLLJvG7cXsrDATjpJgX5DEIscA3ehFBfHSIbGdVmrRMB7D3OjrdGxJ2LXSniYQaYXjW5nsD5SlHWc0WV2yb2oWEAxVsLkOinc%2BLQU%2FbyM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c9f1a20238a-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:31 UTC	590	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 fe d8 21 ff ff ff fc ee 21 03 b4 ff 72 89 12 a6 c8 36 00 00 00 ff 5d 1f cf 35 01 fa 90 16 7d 09 09 ff a9 8f 02 b3 ff 01 b4 ff ff b4 84 cf f2 5c fe d8 20 fb 8f 15 fe d7 20 71 89 11 ff d9 20 01 b6 ff f9 90 15 f2 52 17 fe d4 20 fd 5a 1d ff d8 20 e9 49 10 db 3e 08 fe d0 1f fa 95 16 fb 99 17 ee 4e 13 d2 37 02 f9 57 1b fc eb 20 fb a2 18 f6 55 19 72 88 10 d2 3f 03 fc b4 1b fc ce 1f fe c7 1d d4 39 04 fe db 20 fc af 1a cf 33 00 fb 92 15 fc aa 19 dc 5c 09 fe e2 20 d7 3c 06 fe fd f3 e5 46 0e e1 71 0d fe de 20 f3 af 18 d8 54 07 fd bd 1c d4 48 05 00 b3 ff e1 44 0c e7 86 11 fd b9 1b a3 c5 33 fb 9e 17 fe Data Ascii: GIF89a!NETSCAPE2.0!,!!r6]5}\ q R Z I>N7W Ur?9 3\ <Fq THD3
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 5d 5d 5d b4 ae 18 d8 4e 06 53 c0 b8 d4 d2 45 ff ae 7d dc 62 0a c8 b9 1a 10 10 10 ab cb 42 90 99 14 bc d6 68 c5 d0 52 e2 ef b6 ff 75 40 21 b8 e2 8e 79 12 ff d5 24 80 80 80 74 c4 9a f6 8a 14 ff f9 dc ff 9e 6a f0 d0 1f d0 d0 d0 ff ef a3 f0 7a 10 bf b5 19 c7 35 03 40 36 08 7e 08 08 cc 8e 14 9a ca 78 b3 cd 62 c0 c0 c0 b9 88 1a f0 f0 f0 a0 a0 a0 ef a0 15 f4 b6 1a 6f a4 98 db 94 32 00 bd ff 55 67 0d c3 5d 0f 65 7a 0d d7 f4 77 fd cc 8e b7 99 54 a0 5d 12 aa bb 31 cd e0 8e 1c 07 00 e0 e0 e0 40 40 40 9b 9d 6f dd f6 8a 9f 9f 9f c2 d9 75 fc b8 5d 90 90 90 70 70 70 90 8d 15 fb a3 38 e3 f8 9e fd d9 20 2e 0c 00 bd 73 17 4d 13 00 c7 dd 81 16 1b 03 77 1d 01 af af af d2 f2 66 39 92 bb b0 b0 b0 8f 8f 8f 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 Data Ascii: ]]]NSE}bBhRu@!y$tjz5@6~xbo2Ug]ezwT]1@@@ou]ppp8 .sMwf9H*\
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 55 fc 38 9f 36 89 28 09 c6 9b 9c 19 ca c1 89 f3 a9 8f 06 bf e8 85 21 b7 f6 0b 44 ca 10 89 cb 12 e3 97 24 19 16 13 12 c4 45 46 80 5c df 76 71 8f 2e 14 f1 17 bb 18 e5 0b 3d 69 ca 01 1a 10 11 ea ba 21 03 59 f9 15 08 0a c4 45 80 9c 9c f9 10 89 8a 5c ea 52 63 66 e0 65 2f d3 a7 8e f7 ad 4b 0b 76 94 4f 24 89 49 15 d7 89 28 93 7d 63 87 2d 7b a9 8a 67 c6 ac 17 d2 ec 65 17 70 36 30 22 30 b1 36 23 e4 e6 56 f2 57 a1 24 b0 91 6f 19 9c a6 11 cd 19 ff 33 33 70 42 9f 34 28 a4 c6 1c 69 a1 4d c9 b3 2b 42 ab 98 2c f7 06 40 7d a6 4f 94 fc 14 58 24 30 56 4b 53 72 42 a0 31 8b c4 23 b5 79 d0 ae 50 d1 48 5e 58 28 d7 1a ea 50 f4 41 34 a2 1a eb c5 2f d2 39 c0 5f b0 63 6f bf e3 4f 12 3a da 15 7a 6a c6 08 57 e4 5a 00 4b 8a 3e 8c a2 b4 9f e5 50 05 27 86 ca 89 5f a8 e2 a4 7c 8b 69 77 Data Ascii: U86(!D$EF\vq.=i!YE\Rcfe/KvO$I(}c-{gep60"06#VW$o33pB4(iM+B,@}OX$0VKSrB1#yPH^X(PA4/9_coO:zjWZK>P'_\|iw
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 98 71 67 90 85 45 78 72 9b a7 84 5d f8 85 16 d1 1d 74 27 39 0c b8 25 4b 90 0a 67 98 86 7c b8 6f 55 c0 86 30 88 78 9c c7 85 71 28 87 13 d1 1e 24 c8 35 4c 30 7b 6d d7 09 9a ff 20 01 7d 18 89 19 07 88 2f 18 80 b8 37 04 5d 08 73 86 18 11 f2 51 6a cb 02 04 52 18 25 49 e0 88 b7 97 6d c2 10 07 db 76 84 cf 50 0a 60 e0 86 92 c8 82 94 98 81 d6 17 05 5d a8 7c 9b d8 10 74 c8 35 40 50 04 ef 67 21 a6 90 0b a5 58 6d 60 90 8a df e7 07 82 f8 8a 12 e8 82 b1 68 76 48 68 7d 1e d0 85 37 78 8b 28 d4 1d c6 26 33 ee 07 25 7b d0 0c 41 78 6d 67 10 76 45 f8 0c 96 88 8c f4 47 81 cb 08 70 32 68 7d 1d 58 83 9a 28 8d 0b 31 75 d6 08 5d 3c 62 0a 8f b8 6f e4 98 85 1b 28 8e d7 37 0a e5 18 70 c2 70 7d 84 b8 84 ec c8 10 e8 b1 83 19 b3 8b bd d8 1d 7b 30 0b db 88 6d 55 a0 8c ff 16 0a ef e0 0f Data Ascii: qgExr]t'9%Kg\|oU0xq($5L0{m }/7]sQjR%ImvP`]\|t5@Pg!Xm`hvHh}7x(&3%{AxmgvEGp2h}X(1u]<bo(7pp}{0mU
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: a8 1b f4 b1 85 d8 bd f2 c1 b4 e0 0b 00 64 90 a9 91 89 71 69 a0 98 cb 9b be 58 7a 07 cf eb 00 6c 70 0a d1 bb 01 5d 5a a1 2b 00 05 1c 30 03 17 40 bb 8a f9 a5 19 d7 04 45 8b 6d 41 90 bf a2 2b 1f 9d d0 af e2 e8 b4 cb e8 0a 50 5b 6d 29 70 a7 44 89 be 06 bc a7 82 90 c0 0e 00 0b 8d d0 08 a7 d0 be 07 00 02 35 a0 a3 89 c9 01 3d b0 01 17 90 01 19 a0 07 0a a0 00 6a 60 08 19 30 03 89 79 02 3e 17 43 20 7a b4 1e 2c 8d 09 c7 1b da 5a 6d 37 80 04 ad 80 04 37 80 8f e2 0b 88 e4 8b 6d cd 49 c0 2d 1c aa 8a 80 b5 30 5c ae b0 c0 be 7d 7a 01 25 50 ac 42 3c c4 0a c0 07 6a ac 98 38 a0 71 64 7b 6d 98 b8 84 96 c0 92 d1 e0 1a 9f 36 a6 d5 86 04 02 10 c8 81 dc 0a e2 68 93 e5 d8 c5 d7 f6 c5 70 ff 1b c6 c5 7a 04 af 5b c6 c9 0a 0b 90 9b 05 6e ec c6 59 70 00 35 90 98 73 ec b7 1b 44 07 65 Data Ascii: dqiXzlp]Z+0@EmA+P[m)pD5=j`0y>C z,Zm77mI-0\}z%PB<j8qd{m6hpz[nYp5sDe
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: b9 03 f1 8d 7b 1a dc c9 d7 76 ef 39 de f6 1e 88 01 16 ef d2 19 2f e4 f1 b9 c3 ae 2e cc 8e 0e e9 78 5f f0 d0 a0 06 59 40 eb b6 5e f9 ad 0b 02 97 2b 9f 36 d0 f0 7f c7 ec 1a 14 08 d8 6d b6 d2 b8 df 04 28 04 d8 76 cd 35 af ea 00 b0 f1 85 be 01 a0 9f c6 bb ce eb 87 50 08 84 f0 fb 85 70 08 87 90 09 89 6e 08 6a fc f5 06 7c 01 f0 eb b5 3b 80 94 f5 b7 0c 8c ea c4 4b f8 bb 0f 11 a9 8f 07 73 da ed 67 b5 18 05 d8 ff 16 f5 aa 3c f5 aa ee 04 cf 19 02 26 8e e6 90 5b 02 1b 00 05 63 9f ae a6 bf 79 22 3d 40 a0 80 6d 7c ce fa 0b 91 00 ae 7f 7e da df 85 3f 60 6f 71 8f cd fe 4e f5 00 81 40 e0 40 82 04 67 6c 10 71 40 e1 42 86 0d 1d 3e 84 d8 f0 c2 06 0e 05 2d 5e 2c 28 65 0a 00 8e 1d 3d 7e 04 19 92 63 93 00 25 4d 9a 5c f6 51 45 02 96 2d 5d 46 f8 17 53 e6 4c 9a 2f 2c b8 c4 e9 92 Data Ascii: {v9/.x_Y@^+6m(v5Ppnj\|;Ksg<&[cy"=@m\|~?`oqN@@glq@B>-^,(e=~c%M\QE-]FSL/,
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 4d 72 d2 66 9e c4 e5 27 0f e8 3e ca 50 b2 2f 59 8c 4a d0 b8 c8 4a 56 82 71 3d 31 bb a4 19 cb a3 47 bd 5c cc 96 14 cb 65 2e 73 a4 17 60 6e ff 45 08 95 84 25 10 57 48 4c 56 32 b3 2f f6 53 0d 13 4f 42 cb 5c 3d 13 9a d1 94 a6 7c 74 48 99 2b 3a 25 85 7e 0a 9a d0 b8 29 c9 fe 05 c7 8d 93 09 84 b5 bc 99 13 73 9e 13 9d ba 74 4f 28 59 d2 47 ad 38 c9 2f 04 f5 c8 c6 54 39 4f 3b b6 33 27 2f 40 28 57 92 46 43 1b f6 93 5c ff 4c a7 7b fa d2 ae c9 38 14 27 5c d2 0a 1d 01 c5 50 3b ce cf 29 93 48 4e 00 eb 82 c6 8a 5a 94 57 18 c5 25 7c 04 9a 80 88 8a 24 0a eb 61 a4 36 b7 48 d2 22 42 60 9f 38 01 27 65 30 29 c0 34 ba b4 57 30 05 68 7b 66 ca 51 c9 78 b4 56 35 05 00 0b 1c 49 95 ee f1 34 79 10 80 80 04 34 40 01 08 00 00 77 2e 09 42 36 55 43 ba d6 4c ef 89 46 3d 2a 52 e1 43 39 a8 Data Ascii: Mrf'>P/YJJVq=1G\e.s`nE%WHLV2/SOB\=\|tH+:%~)stO(YG8/T9O;3'/@(WFC\L{8'\P;)HNZW%\|$a6H"B`8'e0)4W0h{fQxV5I4y4@w.B6UCLF=*RC9
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 11 74 af 34 5c c3 00 54 42 16 8c 26 73 c8 87 39 7c c2 13 70 82 58 a8 a2 97 d9 34 ca d0 bb 3f 94 0b d9 fa 91 5d d3 8b 6d 50 33 45 e3 0d 35 1b c3 41 42 c4 44 54 c3 45 6c 3c 72 80 87 52 a0 07 7a 30 87 59 fc 03 7b c8 02 49 c4 45 04 90 82 6c 68 3d ab eb 8b 1e d3 8a ac 02 b7 2e e4 44 24 f1 29 c2 f9 87 44 23 44 dd 50 33 33 84 31 af 63 45 9a 4b 85 6a a8 87 7a f0 86 6b dc 01 7d 99 c3 19 90 0e 10 00 01 ce 10 01 11 20 8b 0c 28 81 0b 50 8b 1a e8 01 0e 98 01 d2 40 14 8d 08 89 2a 44 21 ac c0 37 7d 2b c6 bf f9 c1 64 63 89 98 50 c6 53 3c 0c 44 73 c6 17 a3 02 13 24 87 69 b4 46 8c 70 86 27 7c 8e 1a 00 81 ce f0 8c b2 10 01 10 e8 01 76 1c 92 4a f4 88 ff 60 cb 43 07 72 a3 ac a2 3f 91 20 c6 7a 04 12 4c 73 99 bf 48 c6 65 cc 0d fe 3b 44 18 1b 83 55 04 3b 72 18 85 6a f0 86 52 11 Data Ascii: t4\TB&s9\|pX4?]mP3E5ABDTEl<rRz0Y{IElh=.D$)D#DP331cEKjzk} (P@*D!7}+dcPS<Ds$iFp'\|vJ`Cr? zLsHe;DU;rjR
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 00 d6 0d 5f 5b ed 8d 56 4b 51 5b 6a 8e 1a 28 e0 0f e6 5b 45 20 5a d1 d4 5d b3 c8 80 a6 6d 0b 29 18 18 0d c0 ab f9 d5 42 70 eb a2 1c d4 5f ab 95 bd f2 7d 5d ed 03 60 a7 dd 5b 10 e6 61 8b c5 dd e4 dc d8 b2 10 5d b6 90 82 07 36 46 0a a0 80 16 f6 10 e0 cd 2b b8 bd 20 fc 95 dc 66 0b 5f 24 c3 e0 52 34 c9 1c be 8c 15 70 de 1e e6 62 6a fd 61 b5 6d c8 21 06 0b c5 35 9b 7c bb c0 ff 16 46 e3 34 e6 08 d9 02 37 27 26 a2 e1 cd 5f c3 9b 62 2a 76 0f ad eb 5f 2c 6e 0b 0e a0 dd 2e e6 e3 5e fd 62 bc 34 5a 2f 15 e3 8b 70 01 b7 3d d9 02 d1 aa 28 de df f0 4d b3 e3 fd 0d 44 53 5e a3 3a 5f 8b f0 e0 3e b6 e4 79 fd e3 e5 f4 56 52 75 d4 cb 70 d5 43 4e 0e bc 5a 5d 5f 90 dc 34 9b 63 57 8b 0f 21 5c de 98 2d 0d cd bd e4 57 2e 55 47 20 5a 4c 00 dd 52 ed e4 b6 80 5a 50 e6 0a ac ca df 43 Data Ascii: _[VKQ[j([E Z]m)Bp_}]`[a]6F+ f_$R4pbjam!5\|F47'&_b*v_,n.^b4Z/p=(MDS^:_>yVRupCNZ]_4cW!\-W.UG ZLRZPC
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: b0 01 5c 50 4b 66 89 81 c5 b7 ec b5 df ec 12 d8 80 c8 7f c1 10 88 7b 27 b8 82 91 09 69 fd 20 03 c0 ef fc ff 68 7a 86 2a f0 88 29 c0 81 7b 29 7d 12 d9 01 d4 7f 35 b6 70 fc af 5e ca 88 5c cb 13 88 7b 1f b8 82 4d 28 58 79 01 03 a4 0a 05 a4 72 05 32 10 89 14 a8 17 29 08 7e ee 70 01 63 20 fe 99 66 fa 8c 16 81 b5 c0 c5 13 c0 05 1f 48 83 e8 27 9a e9 47 a7 50 58 87 73 30 09 6a 90 05 8c 72 85 33 d8 8a 58 b8 02 43 f9 8f b8 0b ff ae 06 08 04 02 07 0e 0c 91 e1 00 c2 84 0a 17 32 6c e8 f0 21 c4 86 17 6a cc 20 68 f1 22 c6 8c 18 4f e0 f2 91 66 0a 80 90 22 47 92 2c 69 f2 24 4a 94 60 0c b0 6c 69 40 56 80 98 32 63 ae 73 e9 d2 15 99 94 24 b3 f9 88 a1 11 a3 b1 04 ff 86 12 2d 6a f4 28 d2 a4 4a 97 32 6d ea f4 29 d4 a8 52 a7 52 ad 6a f5 ea d5 9f 35 22 72 ed ea f5 61 06 10 3d 42 Data Ascii: \PKf{'i hz*){)}5p^\{M(Xyr2)~pc fH'GPXs0jr3XC2l!j h"Of"G,i$J`li@V2cs$-j(J2m)RRj5"ra=B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49759	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:31 UTC	618	OUT	GET /wp-content/themes/tgtheme/img/why.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:31 UTC	780	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:31 GMT Content-Type: image/png Content-Length: 8230 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-2026" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609573 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z5ttV1doCAkZbN0UJ8fU7k7b8i3PD1MhzaocEHsEXKwMduZPsGddFfBB1taURf%2Ba0pEeThBBmpMcCzlXatKI1lbXxyQJFva8hrDUT8RCA%2BaUzDxGeueThl8LXUXknaJ%2F%2F%2Fa%2FPHE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29c9f3e2c426b-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:31 UTC	589	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 dc 00 00 00 3e 08 06 00 00 00 81 58 aa c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR>XtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 34 46 33 46 31 31 45 45 38 37 44 32 43 45 35 43 35 39 43 38 44 35 30 30 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 39 42 35 39 31 43 46 34 46 33 46 31 31 45 45 38 37 44 32 43 45 35 43 35 39 43 38 44 35 30 30 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 39 42 35 39 31 43 43 34 46 33 46 31 31 45 45 38 37 44 32 43 45 35 43 35 39 43 38 44 35 30 30 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 39 42 35 39 31 43 44 34 46 33 46 31 31 45 45 38 37 44 32 43 45 35 43 35 39 43 38 44 35 30 30 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 Data Ascii: 4F3F11EE87D2CE5C59C8D500" xmpMM:DocumentID="xmp.did:99B591CF4F3F11EE87D2CE5C59C8D500"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:99B591CC4F3F11EE87D2CE5C59C8D500" stRef:documentID="xmp.did:99B591CD4F3F11EE87D2CE5C59C8D500"/> </rdf:Description> </rdf:RD
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: a3 18 13 70 b1 b3 08 44 e0 2d 72 ce 89 ea 7e 99 03 ed 72 b8 e6 39 5c 1d bb 5d 4f a1 2d 5d 02 e4 6f b1 f3 22 16 a0 7d b8 79 92 72 4e d9 6d 99 4d 38 6c b1 ce b2 82 81 d5 15 80 46 19 aa ad bd c5 94 89 1e 26 3b f9 f8 bc e4 bd ab 5c 3f 44 ca d9 30 88 2a 88 2b 0d 7b 11 36 8f 98 96 6e dd b3 96 d9 8e ed fa 23 27 b2 aa 39 7e 0d 0b ef 50 24 7a c7 00 9a f6 5b 85 c8 d3 54 aa b9 5d d2 b8 6f d6 e0 fe 92 61 7b 26 15 11 a6 79 24 ca 25 7b 46 e7 94 3b 4f 33 02 16 45 ef 3c cd 6b 4a 62 9f a0 fb fb 59 b0 39 39 a3 cb 24 b3 b8 ea 12 c3 9a 27 86 5b d5 f0 64 cb 0a 43 a5 7b 62 52 56 92 25 c3 2d 12 b3 53 5a 4c 2f 1d f6 6b 83 e1 d6 2d b7 d1 94 e1 d6 53 e8 a3 59 62 ff d4 2f 55 7b 67 35 99 85 ed 08 95 2d bb b1 64 a1 6f 16 63 d8 81 38 db 82 ea c4 6c ed 0c 2f 4b 24 d9 36 a4 85 04 73 ae Data Ascii: pD-r~r9\]O-]o"}yrNmM8lF&;\?D0*+{6n#'9~P$z[T]oa{&y$%{F;O3E<kJbY99$'[dC{bRV%-SZL/k-SYb/U{g5-doc8l/K$6s
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 9e 2a ed ea 08 ef b6 d2 f2 1d 8d 79 ac 0d db ff 7f e9 b5 e7 ca 9b e7 de d8 f5 c3 c1 a7 5f 79 82 95 2d 95 6b 3f f8 d7 d2 ca cb 4f 75 cf cc 17 e6 4e 0f 1f 3d 6e c5 23 de 5a 59 1a 5d 7a e9 2b 4f f8 3f f9 fe 51 f1 37 fa 7e b7 9e 6e be 13 d6 f5 50 f8 cf 87 84 7e 9d 07 fa b5 34 f0 6b bf 7d ee b6 3f fc a6 16 48 41 7d c3 8f a9 ac 6d b7 fd dd 42 71 e0 e0 e1 33 58 3f 8d 3c fc 4c fd d6 87 9f be 7f f5 7f da 47 2f 4f 57 77 8d db a1 7a ab 34 fa e9 72 54 cf f3 ec cf b1 cb f3 af 8f ad be 71 46 d5 d7 cf cb de 29 d4 91 af ed f2 0a 4f fc 7a e7 f6 67 5f 3b ab 78 26 0b 43 83 4d c2 0a c9 66 b5 79 1a f5 77 24 60 37 6d 08 86 b6 a5 6c d0 07 e5 9b 08 70 55 bb 17 20 c7 7e 46 01 6a b2 50 6f 1c 9d a1 a0 bb a0 e9 24 4e 58 8e 3e 78 1c 58 d6 34 23 30 1d ae 9f ea 0a 40 4f 6d 2e 2b 19 2e Data Ascii: *y_y-k?OuN=n#ZY]z+O?Q7~nP~4k}?HA}mBq3X?<LG/OWwz4rTqF)Ozg_;x&CMfyw$`7mlpU ~FjPo$NX>xX4#0@Om.+.
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 99 77 30 16 4b 17 d1 50 26 66 3a b2 94 31 ef fb dc 6f f4 c5 5e 5b 0a 76 34 a4 2a 73 48 d2 12 1a de a5 61 ec 08 74 36 cf fd 83 76 1b e8 98 46 8e c2 b5 6f 3f 6b b5 5d 87 ea ad ed 5c 93 b8 8a 39 e7 32 49 ec 1e 17 1a 2d e0 49 12 86 4a f2 bc 8d fa e3 b4 a7 28 69 8f cd f7 e3 0d b2 aa 0c dd fd cd 33 c4 3c 4f ea f5 58 cf d2 16 6a 23 e2 9c 59 0e 2d 88 9a 66 e0 ab bb b0 4a 3c 27 20 3a bb 21 ce 81 14 75 40 77 a8 4e 2e 10 7c 0b 10 94 8f a5 75 f3 0b 11 41 bd 0c d9 ec 84 49 67 15 68 be 56 05 b6 fb fe e0 c5 96 6c 0b d0 e0 27 3f f3 41 9c 11 1e fb bd bf 78 3b 0b d6 65 4b 0e fe d6 a9 f3 bd aa 9b 86 89 a3 7c 30 b4 b8 e9 e0 d3 af 9c a5 17 cd d3 66 d1 1e ba e5 89 46 3b e8 25 2e cc 72 b2 27 a4 8a 00 a3 4b 47 f4 a7 cc 13 b3 93 fd 28 a8 1e 96 38 41 51 3a 60 dc 50 27 26 58 5b 4a Data Ascii: w0KP&f:1o^[v4*sHat6vFo?k]\92I-IJ(i3<OXj#Y-fJ<' :!u@wN.\|uAIghVl'?Ax;eK\|0fF;%.r'KG(8AQ:`P'&X[J
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: fc 9b 71 c0 96 3a 45 47 24 3a be c5 9c ae eb a2 fe 72 6c 6c 8c e8 a7 5e a4 fd cb c0 71 1f 32 0f 09 fb 7f d3 d0 32 14 a2 bd 0e e8 e8 b0 85 39 b7 26 d8 03 3a f7 87 74 52 43 6c 2c 86 01 a7 5b ec db c0 61 84 63 b8 37 83 6c 20 60 a4 1a 93 11 0d 10 a3 13 69 55 32 e6 e2 f3 58 fe 36 4d 86 1b 48 40 f2 10 02 aa 2b 08 a3 80 3c f5 b5 14 73 b7 81 85 e7 f3 c6 70 d3 6e 1f 95 22 12 89 d8 1e f7 70 bc ae 4a c0 32 ca e1 5f 65 63 7e 30 69 fb 99 7e ac 84 e5 f9 48 79 05 5d 00 53 b0 c6 35 00 88 c7 0c 1d c2 00 71 50 02 a0 7e 9d f6 52 3b e2 71 cf d3 67 7c c0 fe 38 b4 b5 28 2e 7e df 3b 59 27 bb 3f a3 16 5d 83 cc fb c4 64 48 b8 7f 0b 2a 43 e1 64 89 f7 af 29 0c 97 78 c5 35 e0 ca 32 98 61 dd 04 ee f7 18 cb c1 0c 9c 78 5d 4d 11 6c 93 f6 89 ad 7e 4d ab 4c eb ed 0b c7 6e 3f a2 7b db 9f Data Ascii: q:EG$:rll^q229&:tRCl,[ac7l `iU2X6MH@+<spn"pJ2_ec~0i~Hy]S5qP~R;qg\|8(.~;Y'?]dH*Cd)x52ax]Ml~MLn?{
2024-07-04 22:39:31 UTC	796	IN	Data Raw: 00 80 74 1a f3 dd 89 03 dc dc 03 2e 34 16 11 48 7a 2a 76 ca f2 9d be 68 c8 d8 36 00 c8 73 f5 13 ae 8c cc 8c 11 32 96 bb 85 b0 16 bf 07 df bb 0d 52 78 3e 4f 65 da 2c cb ef 81 1e 05 88 1e 5d 67 73 c2 63 a0 37 00 38 01 da 1f 15 60 e5 80 67 43 23 c7 90 ca da e7 29 56 2b eb bc 27 f4 05 b2 02 f7 a7 8a 85 07 29 d9 00 27 00 03 72 d2 23 61 de 30 94 3f 51 e6 6f 01 10 86 f2 38 05 02 1f 0b a7 6b e4 b2 3e 69 0a 63 06 41 cc f7 b0 0d b6 ee 68 47 73 c0 c5 74 3b 0d 3d 92 b6 9f ce 1d 76 38 0a 76 66 b7 2e 93 1e 20 76 d7 34 0c 24 7c f7 2d e4 7d 3c c0 06 40 36 c4 ed c3 75 80 bb a7 58 ae b8 b9 1d 02 5b d9 26 7e ec 80 09 0f f8 cd d7 34 70 e2 61 05 71 42 4e d0 e9 4c 71 cb f0 49 b2 93 af 6c 00 6e d2 3e b1 71 78 86 4e 1f 07 16 ca 4a d4 cf cc a8 fb 48 fb 06 52 6a 93 ee bd d0 c1 33 Data Ascii: t.4Hz*vh6s2Rx>Oe,]gsc78`gC#)V+')'r#a0?Qo8k>icAhGst;=v8vf. v4$\|-}<@6uX[&~4paqBNLqIln>qxNJHRj3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49760	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:31 UTC	628	OUT	GET /wp-content/themes/tgtheme/img/apple-768x512.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:31 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:31 GMT Content-Type: image/png Content-Length: 254911 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-3e3bf" expires: Fri, 02 Aug 2024 22:39:27 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 86404 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QcwJwqJH88CLplp6nwHBqKlRPwWVdxF1JJ3MPDuGPjuD9Fqt5NUtlAMp3NASdBb4HZNGb46m7ihqM1zcFL6Bu3pG%2FTU%2Fauvv1N47r9xFJ6DOCJaa9x7TGWssPVgpz7LkgWPAQiQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca02f3141e1-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:31 UTC	595	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 00 00 00 02 00 08 06 00 00 00 35 f6 0b 3a 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 79 90 24 f7 75 df f9 79 bf cc ca ca aa ae be 7b ba 31 37 e6 c0 1c 00 48 00 04 86 c0 80 04 01 11 3c 4d cb 82 2d cb 36 b9 32 e5 58 79 bd 96 e4 d8 f0 c6 fe eb fd 7b c3 bb ff 3a 42 7b c4 7a 1d 21 c5 5a d6 6a c3 32 49 ad 48 f1 02 48 f0 02 08 e2 1e cc 81 19 cc 60 ee 9e 9e be aa ba ba 2a 2b f3 f7 f6 8f cc ac ae ee 39 40 82 20 85 19 bc 0f 62 66 ba ab 32 b3 b2 32 13 99 ef f8 be f7 c0 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 Data Ascii: PNGIHDR5:pHYs+ IDATxy$uy{17H<M-62Xy{:B{z!Zj2IHH`*+9@ bf22000000000000000000000
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 8c 5b 15 f9 db de 01 e3 6f 97 2c 4d 11 11 07 52 07 9d 00 b7 4f 55 b7 01 53 02 93 a9 66 13 cb cb cd b1 b3 67 ce 8d 1d 3f f1 e6 c8 6b 47 5e 1f 3b 77 fe 5c fd ea c2 62 7d a5 dd 8e bb dd 6e 9c 24 89 4b ba 5d d7 eb f5 e8 a5 29 59 e6 41 41 55 49 b3 94 34 cd 50 ef 51 60 e0 af 5f 88 d4 29 a9 68 7e c1 ca 86 6d e8 c0 3f fd 2b 5a 06 5e fc c5 3f cf b8 39 7a 83 63 aa 5c ff 68 2b 20 08 a1 48 7e 6d 6c 58 4a 90 b5 73 e7 15 55 c5 ab e2 9c 23 0c 42 42 c0 a9 80 08 61 18 10 45 15 a2 28 22 72 21 41 25 48 e3 b8 9a d4 6a b5 a4 16 c7 ed d1 d1 d1 f6 8e 1d 3b da 07 f6 df d5 ba ef c3 1f 5e dc be 65 eb e2 c8 c8 c8 9c 73 ee bc aa 1e 51 d5 53 0e b9 00 b4 54 35 0d 2a e1 7b 77 60 0c c3 30 0c e3 16 c0 9e 7c 1f 50 54 Data Ascii: 00000000[o,MROUSfg?kG^;w\b}n$K])YAAUI4PQ`_)h~m?+Z^?9zc\h+ H~mlXJsU#BBaE("r!A%Hj;^esQST5*{w`0\|PT
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 51 f0 20 6d af 9a ba 77 2a 76 30 0c c3 30 8c 5b 10 73 00 6e 73 ca e8 bf 88 38 55 0d 55 35 06 ea 22 d2 40 19 53 91 a9 85 c5 a5 a9 1f fc e8 87 9b bf f7 cc f7 a7 8f 1d 3f 31 7d e1 f2 95 b1 f9 85 85 91 a4 9b 36 5c 10 d4 c3 30 8c 34 cf 1c e4 8a 7e 11 97 f5 ba 24 dd 94 30 08 a9 54 2a 8c 8c 0e 33 31 36 ca c4 e4 24 8d e1 61 a2 4a 85 30 0c 89 aa 55 c2 4a 85 c0 15 d2 20 9f de a0 86 57 11 71 08 82 57 0f 40 10 04 a8 7a 16 17 17 39 76 fc 2d 4e bd 7d 0e 8f 07 81 cc 67 80 e4 46 61 ae 12 59 4f df 6a bc ce 7b c6 2f cd 0d 73 2e 52 74 f4 41 09 83 80 1d bb 76 b2 7b f7 2e c6 c6 46 89 c2 10 7a 8a 94 b6 ff 40 81 b6 b2 ee 94 ad 65 8d 0a 67 af d3 eb d1 49 33 92 24 a1 97 24 b4 57 57 b9 7a f5 2a 97 67 2f d3 59 4d e8 a5 29 dd 5e 46 e8 02 57 89 22 e7 55 3d 82 53 55 27 41 e8 9c 66 ae Data Ascii: Q mwv00[sns8UU5"@S?1}6\04~$0T316$aJ0UJ WqW@z9v-N}gFaYOj{/s.RtAv{.Fz@egI3$$WWz*g/YM)^FW"U=SU'Af
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: ee b9 ce b6 6d 5b 97 eb b5 5a 5b 55 db 40 9b 5c 02 94 16 fb 67 4e 80 61 18 86 71 5b 60 0e c0 6d 48 6e 48 01 b9 c9 14 aa fa 08 88 b4 28 fe cd bc 1f 3b 7e e2 cd 4d cf fd f4 85 89 cb b3 73 63 0b 8b 4b 23 ed d5 4e 03 75 31 e2 22 c9 af 0b 97 a6 a9 eb b4 db 7c e8 9e 7b f9 fd 7f f6 65 9e fa c2 e7 98 9c 1c cf 0d 38 f5 78 af 38 57 c6 f6 73 63 df 7b 05 29 8c bb 52 a3 af 14 06 1f 6b 83 bc 8a 68 ff 5a 66 40 10 27 78 9f ef bf 73 6e 60 78 58 be 50 10 38 a2 28 04 97 d7 06 04 08 81 2b 22 cc 1b 8d c9 fc 40 94 61 e9 77 79 20 6f 6f 63 4f e4 fa c5 bc fd f7 07 a4 5b 83 c7 50 8b 73 5b 66 7a fa c5 bb c5 89 75 ce 51 a9 84 fd 99 10 ac 9d c2 7e 7b d0 b2 60 b8 fc 27 5f b5 e8 e8 c4 da b6 29 1c 05 29 ce e3 9a 01 5e 38 8b aa 04 c5 7b 65 d6 28 8c 62 0e 1e 3c c0 8e 1d db 19 1e 1d e7 7f Data Ascii: m[Z[U@\gNaq[`mHnH(;~MscK#Nu1"\|{e8x8Wsc{)RkhZf@'xsn`xXP8(+"@awy oocO[Ps[fzuQ~{`'_))^8{e(b<
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: fe 7d 44 51 a5 9f e5 51 f5 04 41 80 f7 9e 73 e7 ce 31 3f 3f cf b6 6d db 98 9c 9c 04 a0 d3 e9 70 e2 c4 09 5e 7f fd 75 ba dd 2e 63 63 63 1c 38 70 80 7d fb f6 15 45 e6 4a a7 d3 e1 d8 b1 a3 ac ac b4 71 4e 70 2e 4f 25 e5 b5 27 6b 17 4d 10 04 dc 71 c7 1d 6c d9 bc 85 20 70 78 85 91 91 11 3e f7 99 4f f3 fd 67 7f c0 37 fe e6 db a4 de 3b 51 0f 48 88 b8 48 35 8b 57 da ed fa fc e2 42 e3 d4 5b 6f 35 ce 9f 3f 3f 3a 36 3e b2 e8 9c 8b 81 48 44 22 55 4d 44 a4 1c 10 66 18 86 61 18 b7 2c e6 00 dc 9e f4 33 00 de 13 a9 6a dd 39 a9 27 dd 5e e3 b5 37 8e 8e 9c 39 f3 76 a3 d9 6c 35 da ab ab 75 e7 24 16 91 50 8b e8 66 da 4b 78 e8 23 1f e1 4b ff f8 1f b1 6b c7 76 92 34 43 8b 88 bf 2b a4 3d fd b8 78 11 ed f7 de f7 a3 b0 7f fd d7 df e0 fb df ff 1e 99 57 ea f5 9f f0 8f ff d1 3f 24 53 Data Ascii: }DQQAs1??mp^u.ccc8p}EJqNp.O%'kMql px>Og7;QHH5WB[o5??:6>HD"UMDfa,3j9'^79vl5u$PfKx#Kkv4C+=xW?$S
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 26 27 a7 98 9d 9d e5 ca 95 2b bc 71 f4 38 67 ce 9c 66 61 7e 8e 93 27 4f 31 3d 3d c9 a3 87 3f 0a 9a d1 59 6d 81 66 85 ed ae d7 8e ef 2d a4 47 5e 05 e7 42 ee 3e 78 80 3f fa 83 7f c1 f8 c4 24 df fc d6 b7 38 75 fa 0c cd 66 93 66 73 19 9f 65 80 22 f9 88 e2 1b 4e ae 7d 47 3e 08 0e 80 e8 86 54 c8 c6 ef 5c 36 ee 97 fe db 41 10 50 a9 44 c4 71 95 c9 c9 09 b6 6d dd ca 17 be f0 79 9e fa cd df 64 df 9e dd 74 bb 5d fe e6 9b df e2 d5 57 5e c1 7b cf d3 4f 3f c3 fe fd fb f2 82 5e 9f d2 ed 76 59 5d 6d 93 24 09 ce 39 a6 a7 a7 19 1a 1a a2 d7 eb f1 8d 6f 7c 83 c5 c5 45 f6 ec d9 c3 e3 8f 3f ce a1 43 87 08 c3 90 d5 d5 55 92 24 a1 5a ad 32 3e 3e 4e 92 24 f9 de c9 9a 0c 48 55 a9 d5 6a 0c 0d 0d 31 3c 3c cc fe fd fb 19 1b 1d 2d 2e 25 25 f3 4a a5 52 e1 c0 fe bb b8 e7 9e bb 39 7d fa Data Ascii: &'+q8gfa~'O1==?Ymf-G^B>x?$8uffse"N}G>T\6APDqmydt]W^{O?^vY]m$9o\|E?CU$Z2>>N$HUj1<<-.%%JR9}
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 01 54 09 3b 9d 4e d8 ed 74 43 55 0d 7d e6 9d 80 13 02 50 9c 66 29 81 38 26 26 27 69 0c 8f 50 8e cf 02 7f 8d 46 7c d0 98 1e 94 60 a8 2f 96 d3 8c 7a ad c6 50 bd 8e 2a 7d 03 af 3f 39 16 e9 4f 72 2d 5f cb 23 fb 79 4f f7 dc 01 b8 d6 28 2d b3 02 79 31 b0 07 1c ce b9 62 3b f9 2e 95 83 c5 b2 7c f3 b8 72 24 ec 0d 7b dd bc 83 fd b6 51 1e bf b6 33 37 5f ef 66 46 f5 bb 5d f7 3d 5a af 1f bd 2e cf c1 46 f7 61 63 bb 9f f2 c7 6b 36 ab 6b 13 7d 9d e0 44 8a 8b 2f 8f b5 97 85 e1 40 3e c8 4b 21 70 6e dd 40 b8 bc 26 c0 f7 cf fd e0 76 b3 2c eb ef 6f 19 d9 17 11 6a b5 1a b5 5a ed ba f2 9f 72 f9 32 8b 94 65 59 6e f8 67 19 e2 5c 31 ad 3a ff 2e 43 c3 0d 66 66 66 f0 59 86 06 79 64 5f 51 a7 e0 d2 d4 bb 6e 27 71 ad 95 95 b0 d5 6a 85 53 9b 36 f5 b3 6a 03 fa 7f c3 30 0c c3 b8 65 31 07 Data Ascii: T;NtCU}Pf)8&&'iPF\|`/zP*}?9Or-_#yO(-y1b;.\|r${Q37_fF]=Z.Fack6k}D/@>K!pn@&v,ojZr2eYng\1:.CfffYyd_Qn'qjS6j0e1
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 35 45 45 49 03 10 9f 47 f2 35 d7 b2 10 a6 82 73 19 d0 05 ad a0 5a c9 8d 33 59 eb f4 53 1a 5d eb 50 87 e0 10 75 50 ba 13 45 76 e0 d7 c9 a0 f1 3c 68 cc 0e 6a d3 83 20 c0 7b df d7 ae bf 1f d1 75 ce d7 fb 91 d2 80 cf 7f 1b f8 b1 af 59 12 9f 4b 83 56 83 fc 96 15 65 19 a1 66 20 19 9a e7 05 a8 d2 41 14 32 22 bc 04 48 26 64 59 42 e0 7a 54 a8 92 65 21 68 06 de 53 09 03 86 6a 15 54 33 52 3c ce 29 a2 01 ea 71 3d 3c 49 96 b9 6e a7 13 26 9d 6e 3e 07 40 35 76 48 1d a1 2e a8 17 25 14 25 bd e1 37 7a bf 1e 6a c3 30 6e 33 36 de 6c e4 9d 62 5e fd 07 a9 68 bf c7 b7 1f 78 af fc e3 54 75 f0 a1 6b 0e c1 6d 86 39 00 1f 00 d4 2b 69 af 47 9a a6 8e a2 27 ba 96 c1 7d 71 b9 5c c1 7b 82 30 0f b9 7a 5f 74 75 d1 2c 37 f8 9d 2b 24 3a 01 ae 30 26 9d e4 66 97 68 0f 75 01 19 21 01 f9 72 5e Data Ascii: 5EEIG5sZ3YS]PuPEv<hj {uYKVef A2"H&dYBzTe!hSjT3R<)q=<In&n>@5vH.%%7zj0n36lb^hxTukm9+iG'}q\{0z_tu,7+$:0&fhu!r^
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: f2 6d 15 8a ec 01 20 ca 40 ef a0 f7 f6 c8 0c 18 e9 49 92 f0 9d ef 7c 87 93 27 4f 22 22 cc cc cc f0 f1 8f 7f 9c 30 0c f9 de f7 be 47 bd 5e e7 c9 27 9f 24 8a a2 fe 7a ad 56 8b ef 7c e7 3b a4 69 ca e3 8f 3f ce f2 f2 32 63 63 63 8c 8f 8f 13 04 41 3f 03 d0 6c 36 f9 fe f7 bf 4f b3 d9 e4 33 9f f9 0c 13 13 13 9c 3c 79 92 e3 c7 8f f3 e0 83 0f 32 33 33 c3 eb af bf ce a5 4b 97 78 e0 81 07 98 9e 9e ee 67 16 4a 83 7e a3 d4 e8 46 19 85 41 27 c0 39 c7 d2 d2 12 df fe f6 b7 99 9c 9c e4 89 27 9e b8 66 bb d7 ed e8 f3 2b 4e ef 6e 94 c8 48 ff b5 5c f3 a5 52 b6 fd cc af db 54 1c 8b 99 e3 7b 17 3c 3f 3b 15 70 72 a1 8e 64 11 5b 5d 9b 54 8f e2 75 8e 38 aa 83 4c e1 bb 5b 38 ba 38 cc 99 5e ca a9 14 9e dc 95 b1 7f 04 82 30 7f 6a b9 a2 8b 90 97 10 f1 82 f3 79 86 4a 5d 8a 90 86 81 12 Data Ascii: m @I\|'O""0G^'$zV\|;i?2cccA?l6O3<y233KxgJ~FA'9'f+NnH\RT{<?;prd[]Tu8L[88^0jyJ]
2024-07-04 22:39:31 UTC	1369	IN	Data Raw: 4d 47 46 46 3a 93 e3 13 9d a9 a9 c9 f6 ee 5d bb db 07 0f 1e 68 1d d8 bb 77 61 7c 6c 64 b9 12 86 cb aa c4 aa 1a 39 e7 5a a0 2d 24 9f 8e ee f3 59 29 83 05 c3 c6 2d 82 39 00 1f 70 3c b9 90 59 25 ef f4 9f 77 e0 49 0a 63 2c 46 24 c4 13 f0 c6 e5 8c 3f 79 fa 2d 5e 7d 6b 91 cf 3f ba 87 e1 46 84 92 22 84 f4 5c 48 b3 07 17 66 57 59 59 5d 66 72 ac c2 d8 68 4c 27 01 97 a6 4c d6 02 02 e7 48 33 01 cd f2 9e eb 2e 77 43 32 55 d2 d4 83 66 84 ce e1 5c d1 0c 34 70 79 ef f7 d4 e7 f7 b6 e0 bd 8f fe 6f 2c f0 85 5c f7 3f 35 35 c5 ae 5d bb b8 e3 8e 3b f8 ca 57 be c2 89 13 27 a8 54 2a 88 08 e7 ce 9d e3 c0 81 03 dc 7f ff fd fc 97 ff f2 5f a8 56 ab 0c 0d 0d e1 bd e7 c1 07 1f e4 de 7b ef e5 a3 1f fd 28 93 93 93 34 1a 0d ee bc f3 4e 5e 7c f1 45 7a bd 1e b5 5a ad af ff 07 a8 56 ab 3c Data Ascii: MGFF:]hwa\|ld9Z-$Y)-9p<Y%wIc,F$?y-^}k?F"\HfWYY]frhL'LH3.wC2Uf\4pyo,\?55];W'T*_V{(4N^\|EzZV<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49762	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:32 UTC	624	OUT	GET /wp-content/themes/tgtheme/img/pingguo_a.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:32 UTC	781	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:32 GMT Content-Type: image/png Content-Length: 1274 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-4fa" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609574 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Um4C1k6udw%2BuGH2aUxbF%2FbwMblUQuz9kaOHeNwNNh%2BXp46lNuQ%2FitoC8ORhaNuuKtITl5AN%2BceNrbQoMXevkeVHYNzbC1ROj6wnMBDNtk%2FZavcypLvJhiY8auaZNFWkWn4ebu%2FY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca1df2341e6-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:32 UTC	588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 18 08 06 00 00 00 fa 4b dd 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRKvtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:32 UTC	686	IN	Data Raw: 36 35 39 33 32 43 35 33 39 30 31 31 45 45 38 37 45 32 46 39 33 38 36 31 43 44 41 43 44 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 42 36 35 39 33 32 44 35 33 39 30 31 31 45 45 38 37 45 32 46 39 33 38 36 31 43 44 41 43 44 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 42 36 35 39 33 32 41 35 33 39 30 31 31 45 45 38 37 45 32 46 39 33 38 36 31 43 44 41 43 44 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 42 36 35 39 33 32 42 35 33 39 30 31 31 45 45 38 37 45 32 46 39 33 38 36 31 43 44 41 43 44 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f Data Ascii: 65932C539011EE87E2F93861CDACDD" xmpMM:DocumentID="xmp.did:2B65932D539011EE87E2F93861CDACDD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2B65932A539011EE87E2F93861CDACDD" stRef:documentID="xmp.did:2B65932B539011EE87E2F93861CDACDD"/> </rdf:Description> </

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49761	23.211.4.90	443

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-07-04 22:39:32 UTC	535	IN	HTTP/1.1 200 OK Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Content-Type: application/octet-stream ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=235883 Date: Thu, 04 Jul 2024 22:39:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-07-04 22:39:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49764	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:32 UTC	622	OUT	GET /wp-content/themes/tgtheme/img/jiandan.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:32 UTC	773	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:32 GMT Content-Type: image/png Content-Length: 11995 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-2edb" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609574 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JOwv%2Fi8gakR8MUBiDE%2B7Mhql2eA2uPY4yYrrqtU25DWuhLmqJBgmSYE7daUWRBrx643PmxChSg1TWitLr14Kyv0DdwXVHhkFUKCcIbKlfyUpkrxX1n0CGAYLRHPYlXl1aJHMLVg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca41b53430e-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:32 UTC	596	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 63 00 00 00 69 08 06 00 00 00 2e a0 9d f3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRci.tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 45 42 42 37 45 46 34 43 43 31 44 39 36 35 38 35 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 38 38 38 31 39 31 41 34 46 33 46 31 31 45 45 42 42 37 45 46 34 43 43 31 44 39 36 35 38 35 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 38 38 38 31 39 31 37 34 46 33 46 31 31 45 45 42 42 37 45 46 34 43 43 31 44 39 36 35 38 35 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 38 38 38 31 39 31 38 34 46 33 46 31 31 45 45 42 42 37 45 46 34 43 43 31 44 39 36 35 38 35 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a Data Ascii: EBB7EF4CC1D96585D" xmpMM:DocumentID="xmp.did:C888191A4F3F11EEBB7EF4CC1D96585D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C88819174F3F11EEBB7EF4CC1D96585D" stRef:documentID="xmp.did:C88819184F3F11EEBB7EF4CC1D96585D"/> </rdf:Description> </rdf:RDF> </x:
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 1b aa ff 23 50 83 37 9b c0 52 b5 a5 8c 81 0f 6e af a6 2b ce 6b 6b 0a 2b 12 f2 6d 8e 77 1c 89 c0 eb 48 6e 37 8e 01 41 1f 5e b5 84 f0 de 3a 04 35 83 40 f4 b8 13 ac e7 b1 b0 69 7b f9 6e 86 de 54 c6 e4 15 55 ff bf c2 d9 b9 82 c4 ff ac fd d8 6d 83 6e f9 06 74 9b d0 9a 00 6c 2f 99 6b 49 bc 6d 98 be 41 cc 5c 96 82 6f e7 f8 da b1 04 86 e8 ce 3f 31 6a 9a 27 a9 e6 f0 a4 df 32 64 3c 11 dd e7 3e 0f 6a e9 60 71 89 41 d1 bb a1 76 7d 18 aa f3 34 ba bf 0f d8 8f 6b de 06 3d fb 51 e8 ec c9 f4 b2 ca d0 49 32 d9 5b 46 18 98 06 86 e9 e2 6b 7b 77 1c 43 3d ef 60 bc 97 e3 6f 8c 8d 20 e1 9d 76 02 71 e5 b0 75 cd 07 9d 63 1b 88 49 a0 d0 73 4a d3 50 17 1f 86 da 79 16 a5 e4 d3 f6 a3 c4 12 e8 59 0f 53 8d bd 01 e8 f5 a1 c3 32 dc 2b 47 4c 90 aa fb 9c 4a 8e eb 43 1c ef 7b 3e c1 78 39 c7 Data Ascii: #P7Rn+kk+mwHn7A^:5@i{nTUmntl/kImA\o?1j'2d<>j`qAv}4k=QI2[Fk{wC=`o vqucIsJPyYS2+GLJC{>x9
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: f8 98 8f 93 4e 29 e1 89 ad 01 bc 55 91 a9 8b 88 d5 e3 2b 0f 57 4d 9d 6e bc 28 1a 22 87 7e b3 c4 38 3a 87 a3 17 e8 09 71 68 1f 6e 25 10 6f 7f 5b 69 ca af d4 31 02 ea 98 a9 50 5b a3 30 42 c1 ed a6 ca ea ed 9d 4c c0 ce 4e 3d 2d dc 51 eb e0 2f df 5a c4 93 4f 4e 46 4d 26 04 e7 cf 56 3c a6 c2 e8 08 b0 b3 47 4f 09 56 d7 4e 8d cf 5e 5f c6 7f 7f 34 82 fb 80 47 e1 36 df 39 ed 70 c1 58 69 b3 c9 1a aa 31 3c 3a ae e3 14 67 fa 95 1b fc 49 6f bf e1 0d 2e de fd 4e 0f a7 9d e8 60 e6 8c 38 85 49 8f 6f 90 06 7b 3d 39 fb be fb 23 7c ff d6 00 8f 3e 16 e1 ac b3 1c 7c e8 cf b9 a3 c1 d8 90 ef c7 71 12 40 da 66 ec c9 6d ab 56 39 b8 f6 9a 04 5e c5 fd cc 97 42 92 94 3d 56 2f 81 5f b7 39 c2 4f 7f 19 61 f5 6d 21 36 6d 1a 07 f0 94 53 78 a0 9a 00 da 4d 55 e8 b6 e2 70 22 f0 66 8e 6d 84 Data Ascii: N)U+WMn("~8:qhn%o[i1P[0BLN=-Q/ZONFM&V<GOVN^_4G69pXi1<:gIo.N`8Io{=9#\|>\|q@fmV9^B=V/_9Oam!6mSxMUp"fm
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 52 65 f3 fa e1 d1 9b d0 5f ae 45 96 8e f8 69 1d d5 a8 4d 3b 58 d9 96 c4 f6 a1 00 db 07 ca e8 1d 8d d0 97 af 45 8f 7a 13 36 25 de 84 a6 44 17 da 12 b7 61 4e 72 35 66 7a 77 13 94 5c 4c 3c 8f 0f 89 c3 07 22 8a 8d e5 7c 07 a3 0f 86 78 ea 9d 65 14 e9 31 b9 8b 81 79 ed cd 98 39 ab 91 d2 20 6b 33 f6 01 84 bc d7 b7 0b b8 e0 75 c0 b9 17 a3 fa bf af c7 ca f2 13 d8 e2 a5 30 50 43 e9 ba 3b c0 d0 bd 01 aa 68 43 d2 22 21 54 57 3e 63 8f dc 06 6d 54 9a f0 57 d7 cd 0c 2e ff 2b 89 34 a5 52 ef b4 86 df d8 d8 f2 84 75 8a 1a 43 53 4a c6 cb ff 79 03 a2 44 0d 5a 7b 7e 0a b7 44 e9 f1 12 d0 4e 62 a2 82 a3 9e c1 9b 25 a7 af e8 9e c9 aa 54 e5 95 b0 3d ff 66 3c 9c ff 28 74 39 8f d3 e7 26 31 bb de 2a 52 97 9c d2 98 a5 6b d8 98 40 47 83 87 fa b4 cf 60 b8 84 52 99 3a bb d8 84 ce f2 a9 Data Ascii: Re_EiM;XEz6%DaNr5fzw\L<"\|xe1y9 k3u0PC;hC"!TW>cmTW.+4RuCSJyDZ{~DNb%T=f<(t9&1*Rk@G`R:
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 4d 2d 75 fb f7 98 0e d6 4f 16 26 91 72 4e 91 06 b3 84 99 b6 2c 1d 1a c9 fc ea ba 02 fe b7 2b 85 21 be 7f 5e 6b 02 ef 59 92 c1 96 0d 7d 70 f9 f5 cc 2c 7b 6c 2d 0d 07 64 ed df b8 b3 f8 d0 c1 4c 2e bd d2 1a 6c bc 4d 6a 0f 54 6e 14 2d 94 d6 59 0d 09 cc 5f 98 41 43 66 62 9c 98 d8 23 52 30 0b 7b 23 3b 28 30 b4 05 da 78 34 32 fc 18 00 79 94 d7 45 7e a9 6c de b7 ae b4 53 a9 fa 21 30 09 47 3e 77 f8 99 03 8f c0 24 a8 c0 6a 78 3d c3 61 35 1e d3 97 60 69 f9 0c e8 6b bf 87 7e 6a af d4 49 54 e7 35 55 98 37 a7 19 a9 6c 6a dc 50 2b 75 64 62 96 ca c9 c9 fc 48 92 27 51 72 70 57 4f 09 b7 6f cd e3 b1 dd 3e 4a bc a6 d3 68 9f 3e 71 56 13 d4 c0 30 7a fa 42 64 9b 1d 54 2d 95 20 52 9b d2 57 bd db b3 49 56 bb bf 5f 4d 07 8c 37 c1 16 5a 9d 37 16 c4 92 4e 0d 34 ce 73 09 84 18 e9 92 Data Ascii: M-uO&rN,+!^kY}p,{l-dL.lMjTn-Y_ACfb#R0{#;(0x42yE~lS!0G>w$jx=a5`ik~jIT5U7ljP+udbH'QrpWOo>Jh>qV0zBdT- RWIV_M7Z7N4s
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 5e 69 14 51 73 2d 1a 72 8f e3 fc 9f 5e 65 55 d1 1f c8 9a f2 6c 3c 47 a0 f7 4c f8 f7 68 d4 5f ec a0 ee 74 07 03 8f 44 d8 94 e8 c1 52 cf 65 ac 52 85 45 0d 0e 3e 77 aa 87 88 94 17 c6 15 30 04 08 71 0e ca 7a dc 44 48 79 ae 51 a9 c6 c4 c4 92 ec 4e 30 d8 7b bb 86 7e 1c 95 53 12 e0 44 18 1a ca a3 7b f7 20 06 fa f3 f0 b7 89 2b ae 30 e7 df 13 68 ff 80 67 e7 da 49 a0 68 4d c6 66 69 ed fa 0c 71 f1 be 72 58 60 84 4e 12 49 72 c3 ca f5 d7 d9 4a eb 04 86 aa 87 d7 7f 29 53 1e fc 8b 01 d4 9b 80 6f bf 60 28 72 70 75 0b 4a 3d 9b e0 d1 3f 5f 93 6f c2 03 33 cf 86 bf fc 6c a8 e0 c3 38 25 77 23 4e df f9 7d e0 f1 bb 51 76 69 7f 6a db a0 7f 2c d7 4b 43 78 4a d1 fa e7 7b e3 4b c1 72 5a 14 16 5e 9f c2 13 17 15 51 78 56 e3 29 bd 13 ed f9 66 b4 8b 84 24 93 74 86 e8 5e 52 1c b3 15 ca Data Ascii: ^iQs-r^eUl<GLh_tDReRE>w0qzDHyQN0{~SD{ +0hgIhMfiqrX`NIrJ)So`(rpuJ=?_o3l8%w#N}Qvij,KCxJ{KrZ^QxV)f$t^R
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 77 a8 44 75 a4 13 a8 a1 b6 9a bd e3 27 58 1a fe 07 66 be f2 ce f8 a6 09 1e 09 45 af a2 d9 37 06 39 b8 a3 da 96 88 d2 0e b8 97 8e da c8 54 3c 81 28 67 ea ac 54 07 9d 75 6f 0e f4 ce 87 e0 df 78 3a 9f 37 99 9a 27 d3 a9 a7 a4 26 1b f3 fd 94 13 99 b9 70 31 67 59 65 83 cd c4 3e dc 95 28 e6 5d 3f 2e 03 2d 4e 58 07 88 69 16 b2 98 c8 92 4c f6 a3 6a 53 78 60 56 b9 26 2a 65 21 e6 1b d2 e5 f3 b3 1c 8f ec 57 32 1c 1e 35 9f ae 36 0e c7 cb d6 7d 1a 27 3e 7a dd 58 75 f6 be 4a 60 78 51 7f dc 79 e5 05 ee b6 99 ed 68 62 d4 79 42 dd ff 60 d9 23 5f c2 8c fb 7e 65 0a 7f a3 1c 0d d8 39 bc ba 46 ee 68 20 b2 89 32 69 ab cd 93 34 6d 80 08 a0 f4 d7 10 6f 49 4b 40 e0 32 a6 f0 a5 09 ca 47 28 e2 df a6 1d 38 0d ce a2 f3 18 34 dd 43 a9 99 69 3b bb b5 04 b6 70 78 9a e5 44 86 06 e2 dd 97 Data Ascii: wDu'XfE79T<(gTuox:7'&p1gYe>(]?.-NXiLjSx`V&*e!W256}'>zXuJ`xQyhbyB`#_~e9Fh 2i4moIK@2G(84Ci;pxD
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: b0 60 75 0d 1d 13 cf dc de 48 da 7e 98 d6 1f 96 e1 e4 df 2b a7 03 86 28 f0 0b c7 4c c0 2c ff e0 f5 85 9a c0 3d 07 72 51 93 91 f1 bc e4 46 54 4a ee 52 46 30 9c 79 c1 d1 6b ea 75 38 31 86 b6 9e a6 c9 73 51 4a dc d7 e4 e0 5d 9c b3 45 09 71 45 61 f0 a3 6a eb c4 08 1d 65 fe a3 34 16 cc ae 9a 0e 18 72 27 c9 19 a6 ec 9e 9c ad da e2 74 f6 73 a5 31 e4 a6 53 e4 18 f7 e5 45 eb 61 9c 95 87 43 3b 63 2e f2 78 69 4a 29 01 ae dc b4 a5 d7 b5 92 42 50 4c 38 50 13 99 0a 43 ff 96 5a d3 ab cb 91 55 60 e3 99 88 c5 d3 f1 a6 ce b7 77 cb b1 cd 84 4d 47 9d dc 73 18 7d 85 56 d7 3a 67 16 cc 9d 68 24 b3 ab 8b ea d8 77 6d f7 a1 0d 64 e6 cf 39 a9 08 b7 87 c6 fc 21 71 75 c9 cc 9d 1e 82 6f d5 1b 2d a3 6a c6 c4 bd 69 3a 54 3d 7d 6c 9a 53 3a ea 24 9e 63 dd 1d 7b 6c c6 26 49 b0 98 8f 6f 15 Data Ascii: `uH~+(L,=rQFTJRF0yku81sQJ]EqEaje4r'ts1SEaC;c.xiJ)BPL8PCZU`wMGs}V:gh$wmd9!quo-ji:T=}lS:$c{l&Io
2024-07-04 22:39:32 UTC	447	IN	Data Raw: bb 4e da 00 93 8d ec 9c ba 44 f3 99 09 2a c0 8b bb f1 cb 05 c7 b5 cf 7b 14 3f 8f f5 3d 9c 82 e8 13 d7 79 a8 09 6f a8 98 d0 51 7c 6e 72 5e 32 4a b1 3a cd 0b e7 bb 16 80 51 65 eb 5f 73 31 e1 fd 78 19 42 52 7a fa 46 e3 13 43 f6 b8 db 39 7e ca f1 3f 1c 3f 3f 22 41 fc 61 82 51 d9 5e 0e d3 64 15 97 72 2c 1d 23 4e a5 94 3f b0 9c 6f 00 8a 6c 75 b9 8a 57 88 6a 09 ea 13 f1 4d 52 04 10 99 da 4d da 7c 98 29 26 96 f6 39 1e 2a 6d 48 ad 54 39 31 0a 6e ac 56 02 8c d5 55 e9 30 96 b2 b1 f6 14 b6 8a 51 62 24 54 46 29 ae e3 95 e7 7e 7c 5e f1 ad 5a cd 79 c5 12 3c e6 8c d8 c3 c9 5e 1f 87 5d 71 f4 b3 f8 71 f4 88 66 54 8e 10 18 7b 03 23 eb d5 56 c1 de ec 49 e6 d1 67 4c e2 60 3d 01 ac 28 2e 52 0b ed a3 8e f6 c5 f5 7b b6 1e d4 13 88 a5 26 6a 0d 3d f1 18 31 77 c7 8d e4 2b cb 84 e1 Data Ascii: ND{?=yoQ\|nr^2J:Qe_s1xBRzFC9~???"AaQ^dr,#N?oluWjMRM\|)&9mHT91nVU0Qb$TF)~\|^Zy<^]qqfT{#VIgL`=(.R{&j=1w+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49763	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:32 UTC	623	OUT	GET /wp-content/themes/tgtheme/img/zhongwen.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:32 UTC	781	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:32 GMT Content-Type: image/png Content-Length: 1482 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-5ca" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609574 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lETxJYYbCLs%2BuZCaOqiuXUWg1N0X4oQsgX%2FWPCcuxxAzvYmCCsQCRpk2dcFsRPgAc%2F%2BzylQuBiWiHPf%2F%2BzeERO37acKUwerMI134ddlLQTHo5eyozyUXPxJSmSvjA%2B0Y2ULj6kM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca43ee88c84-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:32 UTC	588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 18 08 06 00 00 00 e4 82 ed c5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:32 UTC	894	IN	Data Raw: 36 41 42 44 31 39 35 33 39 30 31 31 45 45 39 36 37 46 46 43 34 36 35 43 46 38 42 45 32 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 38 36 41 42 44 31 41 35 33 39 30 31 31 45 45 39 36 37 46 46 43 34 36 35 43 46 38 42 45 32 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 38 36 41 42 44 31 37 35 33 39 30 31 31 45 45 39 36 37 46 46 43 34 36 35 43 46 38 42 45 32 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 38 36 41 42 44 31 38 35 33 39 30 31 31 45 45 39 36 37 46 46 43 34 36 35 43 46 38 42 45 32 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f Data Ascii: 6ABD19539011EE967FFC465CF8BE2D" xmpMM:DocumentID="xmp.did:386ABD1A539011EE967FFC465CF8BE2D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:386ABD17539011EE967FFC465CF8BE2D" stRef:documentID="xmp.did:386ABD18539011EE967FFC465CF8BE2D"/> </rdf:Description> </

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49765	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:32 UTC	385	OUT	GET /wp-content/themes/tgtheme/img/td_laptop.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:32 UTC	781	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:32 GMT Content-Type: image/png Content-Length: 189734 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-2e526" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609574 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Jp2TqHrklaF%2FAGuYAik2mF62yA8n6%2Bt9U3ArG%2FOF1eLoPTuFv8RfDjqMPSL8RQkMxcqqOQjUaZSGf8%2By10vBhtJE3J2Y%2BWB7d8MSzhvl5sZhzv28HUwO621tO2lfMKh6YlbVNNM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca41bc9c41d-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:32 UTC	588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 48 00 00 01 e7 08 06 00 00 00 82 32 7d c9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 02 e4 c8 49 44 41 54 78 da ec bd 07 94 25 67 75 ef fb af 70 f2 39 9d a7 7b f2 68 46 a3 9c 03 92 10 0a 48 02 91 44 32 5c 1b 1b 3f 30 ef 82 6d e2 ba 60 cc 03 79 f9 1a 03 36 b6 65 bc 8c 7d b1 cd 23 18 1e 0b 58 80 01 03 b6 11 58 02 84 04 48 02 84 40 12 ca d2 e4 d4 f1 e4 53 f9 ed bd bf aa ee 9e 56 f7 4c 2b cc 68 46 b3 7f a3 52 9f 50 e1 ab af c2 d9 ff da e1 b3 92 24 81 f2 c4 b9 ea aa ab 16 fb 78 2d 4d 2f a3 e9 72 9a 4e 4b df f7 6b 6f 29 8a a2 28 8a a2 28 4f 00 8f a6 29 9a 1e a0 e9 76 9a fe 9b a6 ef dd 78 e3 8d 91 76 cd 53 8f a5 02 e9 29 15 48 97 d0 74 Data Ascii: PNGIHDRH2}tEXtSoftwareAdobe ImageReadyqe<IDATx%gup9{hFHD2\?0m`y6e}#XXH@SVL+hFRP$x-M/rNKko)((O)vxvS)Ht
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 12 56 5e 79 e5 95 27 6b 37 a8 40 3a 94 9c aa 5d a0 28 8a a2 28 8a a2 a8 fd aa 02 49 31 ac d5 2e 50 14 45 51 14 45 51 d4 7e 55 81 a4 18 6a da 05 8a a2 28 8a a2 28 ca 51 44 59 bb 40 05 92 a2 28 8a a2 28 8a a2 28 8a 0a 24 45 51 14 45 51 14 45 51 14 15 48 8a a2 28 8a a2 28 8a a2 28 4f 01 ae 76 c1 f2 49 92 44 3b 41 51 14 45 51 14 45 51 9e c1 a8 07 49 51 14 45 51 14 45 51 14 45 05 92 a2 28 8a a2 28 8a a2 28 8a 0a 24 45 51 14 45 51 14 45 51 14 15 48 8a a2 28 8a a2 28 8a a2 28 07 42 8b 34 1c 21 94 4a 25 ac 5b b7 4e 3b 42 51 14 45 51 14 e5 18 65 f7 ee dd 68 36 9b da 11 2a 90 14 66 f3 e6 cd b8 69 d3 eb 97 35 6f c3 0b b1 b0 a0 5e 7f 71 e9 43 e9 47 31 3a 41 8c 52 ce 46 c1 51 a7 a1 a2 28 8a a2 28 ca 52 04 71 82 b6 1f c9 eb 9c 63 89 fd 64 c3 92 f7 f5 5e b8 ac 75 58 34 Data Ascii: V^y'k7@:]((I1.PEQEQ~Uj((QDY@((($EQEQEQH(((OvID;AQEQEQIQEQEQE((($EQEQEQH(((B4!J%[N;BQEQeh6*fi5o^qCG1:ARFQ((Rqcd^uX4
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 9c 3c 92 a9 bb 50 ec dc 0c e4 07 e9 b3 74 75 4e 19 05 bb 0e 6f df 37 90 0c 9e 49 4b 9b 30 1d 87 5e 7d 65 fa 3f e0 e5 42 f4 45 55 b9 11 f2 66 06 dd 41 7c b7 77 33 fe a0 bd 15 1b 2b eb e1 27 81 1e 24 45 39 8c f8 be 8f 93 cf 38 0f e7 5e 70 21 76 de 77 3f 5e f2 ea d7 62 43 5f 17 ff e7 ef 3e 82 8e 17 e0 05 af fc 6d 54 ca 15 94 8a 05 dc 7e d3 f5 f8 e6 77 6f 46 6c e5 f0 ba 37 fe 01 26 1e b8 0d 5f fb f6 2d 74 7d 27 58 77 d2 59 58 3f e4 e2 96 1f ff 14 e7 5e fa 5c b4 76 3f 82 6d 7b a7 e1 e4 2a f8 dd d7 be 0a 5f f9 ff 3e 83 76 04 04 b4 ce fe fe 7e ec db bb 17 57 5c f3 6a bc e8 b9 17 ec 17 ce a7 28 ca 31 ac 92 90 99 27 ea 3d 52 1e 1f ea 41 7a 9c 62 e0 50 4d 47 2d 56 7a f7 59 a8 8f f8 46 14 45 b0 9b 4d 52 33 ce dc 0d 2a 75 71 db fc d4 b8 d3 e2 01 0b d2 05 c8 24 0a a7 Data Ascii: <PtuNo7IK0^}e?BEUfA\|w3+'$E98^p!vw?^bC_>mT~woFl7&_-t}'XwYX?^\v?m{_>v~W\j(1'=RAzbPMG-VzYFEMR3uq$
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 96 5d 36 51 14 92 38 72 c5 9b cc 12 ca 8c 6b a4 28 8a b2 7c d8 d3 ec 8a 75 9b 0e 0e ab 28 2a 90 94 a7 0b 7e 5a e3 ba 39 d8 f9 12 2a 79 ed 0f 45 69 b5 5a 28 95 4a 22 92 14 45 51 94 c3 47 ec 46 e6 a1 ad 0a 24 45 05 d2 e1 11 01 47 e3 ba 15 45 79 e6 dd 33 14 45 51 94 67 e6 bd 57 7f 3b 9e 7e b4 cc b7 a2 28 8a a2 28 8a a2 28 8a 0a 24 45 51 14 45 51 14 45 51 14 15 48 8a a2 28 8a a2 28 8a a2 28 8b a2 39 48 ca 33 0a 8d db 55 0e 27 5a a1 4e 51 14 45 51 54 20 29 ca 11 4b af d7 43 10 04 da 11 ca 61 a3 50 28 20 9f 7f 72 65 1b b9 1c f8 2f 7f f9 4b 4c 4f 4f 8b c0 bf f0 c2 0b d1 d7 d7 b7 ec e5 77 ec d8 81 5b 6f bd 15 03 03 03 78 f6 b3 9f 8d 4a a5 a2 07 46 51 14 45 51 54 20 29 c7 3a 51 14 c1 f3 3c 7d a2 af 1c 76 51 ee ba 2e 6c fb 89 47 2b 37 9b 4d bc fd ed 6f c7 65 97 5d Data Ascii: ]6Q8rk(\|u(~Z9yEiZ(J"EQGF$EGEy3EQgW;~((($EQEQEQH(((9H3U'ZNQEQT )KCaP( re/KLOOw[oxJFQEQT ):Q<}vQ.lG+7Moe]
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: fd e8 47 72 ef 60 8f f6 93 85 73 2e 7f f6 b3 9f 61 f3 e6 cd 72 5f 7c 3c b4 bc 10 97 fe fd 2d d8 d3 89 45 bc 59 f4 db 4e ff 93 df fc a3 81 b5 df 7a d7 53 bd ca f7 dd 72 cb 2d 7f a5 67 ee f2 51 0f 92 72 d8 e1 9b 15 87 10 1d be c7 00 24 72 48 c8 fd e2 e7 b7 63 60 d5 46 f4 e5 8c a0 72 1d 1b e3 fb f6 21 b2 5c 8c 0c 0f 22 0a 03 4c 93 21 1a c6 96 b8 f4 f9 7d 48 c6 6b ab d9 44 df c0 10 59 b2 1d 4c 4e d7 31 44 f3 d6 67 ea c8 95 a7 91 04 1d f4 0f 0c ca ba 54 24 29 4f 04 f6 ee 70 f8 dc 42 d8 28 c8 60 71 c2 de 9c c5 ae a5 0b 2e b8 60 ff 9b 3a 09 32 ae 6a 37 1f 0e a1 63 38 74 8e 27 86 73 9d 98 f9 1e da 6c 3e 0e b5 cb e0 6a 76 1c e6 97 c1 e2 4a 51 94 63 1b ae aa c9 0f 6a e6 8b 23 86 8b b7 f0 03 1a fe 3d 7c b2 15 2e 79 fd 5c 6c e6 c9 54 09 55 14 15 48 ca 51 03 3f 31 e7 Data Ascii: Gr`s.ar_\|<-EYNzSr-gQr$rHc`Fr!\"L!}HkDYLN1DgT$)OpB(`q.`:2j7c8t'sl>jvJQcj#=\|.y\lTUHQ?1
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: c8 9a 8a 8b 37 9d 3d 8c 6b 4e 18 40 2d 6f e1 c1 c9 1e f6 f6 22 fc 84 d6 57 cb d9 a8 fb 1a a2 a1 28 ca 53 8b a5 6e 69 e5 58 79 20 a0 5d a0 28 8a f2 f4 71 dc 40 01 9f bd 6b 4a 8a 30 70 a8 dd 19 43 05 f4 c2 18 85 d8 08 9c 76 60 3c 94 bd 30 11 61 94 fd e5 8f 69 36 74 e8 45 cb 8f 31 54 72 d1 4f c2 e8 35 a7 0c 60 f0 9c 11 f4 17 1c ed 5c 45 51 14 45 51 81 a4 1c ab 38 8e 23 53 96 5b a4 28 87 e5 06 ea ba 4f fa 89 2a 87 c8 bd ea a4 01 7c f8 07 bb 50 2a bb 78 e3 d9 c3 b8 f1 91 06 06 ca a6 52 e2 f3 37 d4 d0 5f 74 70 d9 da 32 aa 79 1b 97 ad 2b a3 56 b0 71 29 2d d7 47 9f bb b6 85 ab 68 9e d3 56 94 f0 bf 2e 18 c5 c7 6f db 87 72 de c1 1f 5e b0 02 95 bc 16 72 50 14 45 51 14 15 48 ca 31 09 1b a9 3c 26 03 57 be 53 94 c3 05 17 1c 79 2a 42 4e de 78 ee 08 c0 53 ca 35 27 cd 8d Data Ascii: 7=kN@-o"W(SniXy ](q@kJ0pCv`<0ai6tE1TrO5`\EQEQ8#S[(O\|PxR7_tp2y+Vq)-GhV.or^rPEQH1<&WSy*BNxS5'
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: ab 88 de 7b 49 48 6d b1 51 22 71 59 2c d0 b6 82 90 5a 46 fd 45 fd 17 d0 be 87 d4 9f 3e b5 85 b4 17 6a 24 7e 78 3e 9f da c3 fa 22 a6 f3 27 a1 2f 92 24 80 4b 9f 57 0a 39 ac 28 04 b4 36 12 39 b4 bc 9b 78 b4 3c 0b f6 1c 22 da 37 3e 3f 66 da 3e 9d 97 b4 7e 3a 8f 7c df a7 75 90 18 71 f3 24 90 f2 58 5b 0c 8c e8 f0 3c 12 bc 21 1a cd 36 f6 ed 9b c4 f8 f8 24 bd ee 90 f8 a7 73 57 84 0b 9d 5f b9 12 89 45 0b 5e 63 02 89 17 20 a0 fd 72 49 48 e7 44 1a c5 c8 e7 72 e8 d0 71 ab d3 31 74 68 3b 21 9d a3 5e b1 06 b7 6f 00 71 63 1a 74 81 91 68 a6 73 c9 c9 04 a0 8d 8e 5d 42 58 ab a1 38 34 86 5c b5 5f c4 b2 79 08 40 6d b2 6c f9 eb d0 7c 01 3f cc a0 fe 8c 52 81 c5 9d 93 4b 07 62 06 5d 4f 43 74 ec bd 28 22 f1 43 d7 af 63 4b 97 37 7a 5d 9c 18 4e 60 43 7f 15 0f 74 80 4b 4e ca e3 7f Data Ascii: {IHmQ"qY,ZFE>j$~x>"'/$KW9(69x<"7>?f>~:\|uq$X[<!6$sW_E^c rIHDrq1th;!^oqcths]BX84\_y@ml\|?RKb]OCt("CcK7z]N`CtKN
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 15 91 ac 9b bd 32 ed 20 94 10 c4 55 03 39 d4 58 d0 15 72 d8 39 dd c2 54 cb 87 47 c2 b0 e5 7b d4 37 ec 39 0b 69 dd 91 08 d4 fe 92 11 08 53 8d 1e ba e2 e9 a2 35 86 b4 7d c7 84 ce 39 4e 22 9e 05 0e 9b b3 1c 17 cd 5e 88 69 5a c7 de 2e 09 14 ee 13 0e 79 0b da a8 90 28 60 c3 3f cf 21 66 0e 87 5f 99 3e b0 c4 03 c1 31 61 a1 58 6e 8e 84 af 19 4f 82 2d de 34 16 a6 bc 0d f3 24 de 76 8c 47 a1 ea f8 58 5b b3 b0 a1 bf 00 bf d3 c3 03 0f 37 30 56 1d 42 a9 6f 08 1d 67 08 7b 7a 45 8c 37 3c 58 b9 22 09 a0 40 04 25 e9 35 09 07 b3 d3 f1 5d d8 53 c6 de 0f 0e 61 2c d2 b9 c5 e2 27 a2 63 c2 c2 38 22 d1 43 27 85 ec 7b 10 27 b2 9c 88 21 f6 ac 79 e2 ec 92 63 15 51 bb 59 8b e4 a9 9d ae ec 47 24 de 21 31 e8 41 42 86 bd 50 31 9f 8b 71 1a ae 17 cf 9a b8 7c 2e 18 af 21 8b e4 10 a7 6d 18 Data Ascii: 2 U9Xr9TG{79iS5}9N"^iZ.y(`?!f_>1aXnO-4$vGX[70VBog{zE7<X"@%5]Sa,'c8"C'{'!ycQYG$!1ABP1q\|.!m
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: a6 29 89 ca 1c 07 27 06 58 8e 36 50 23 23 da e7 e4 f3 98 73 98 48 3c b9 ae 09 11 8b 22 b3 dd 79 85 1f 6c 09 e3 71 45 30 24 71 9a ff c2 46 75 1a de 12 67 85 07 78 b9 c8 08 30 87 da 46 bb 85 2d 75 1f 3b 48 d4 78 7e 84 f5 7d b4 4d 32 32 39 6c af 4e 6d f4 d9 75 43 42 31 26 c3 bd 4a 46 f6 ca 5a 09 fd 05 88 17 69 77 2b 12 2f ce 9e 86 8f ed 53 1e 02 6a 7b c7 2f 52 3f 70 71 0b ea 07 0e 71 22 b1 f3 c8 9e 86 18 fd 01 09 2c 16 91 01 7b 0c 48 84 72 1b 23 f6 9a d0 fe f5 64 0f 72 d4 73 f4 8f dd 25 ec 71 a3 49 f6 27 31 f9 3b ec 4e 88 d3 a7 e3 61 c2 e2 c8 92 5c 2f d1 51 51 24 06 a6 63 65 79 24 dc 35 91 f1 a2 71 ae 8c 63 fa 49 0a 42 24 b6 b8 a3 8c d7 20 16 d1 53 cc 39 52 c8 c1 78 92 d8 0f 16 b0 93 04 95 22 87 f9 45 e8 fa 01 c2 5a 15 f5 76 0b 4d 3f c6 58 df 3a 04 61 1b a5 Data Ascii: )'X6P##sH<"ylqE0$qFugx0F-u;Hx~}M229lNmuCB1&JFZiw+/Sj{/R?pqq",{Hr#drs%qI'1;Na\/QQ$cey$5qcIB$ S9Rx"EZvM?X:a
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: cd 6b 5e 83 87 1e 7a c8 9c 88 fc 04 9d 0c b4 1c fd e8 72 a2 73 b7 dd 92 1f 69 fe 8c ab 23 f1 0f 09 87 db f1 8d ff 91 47 1e c1 ce 9d 3b 71 fe f9 e7 e3 f4 d3 4f d7 ce 54 8e 48 1c 97 bd 0a 7c 5e 5b f2 d4 d9 25 23 d3 66 03 b6 e1 90 1d ed 4b 35 30 7e 0a 3e 57 3e d8 54 d8 72 ed 9c 09 61 e3 27 e7 76 24 4f dc f9 46 5d cc 3b c6 23 60 87 58 35 50 c2 6a 0e b7 aa d4 f0 f0 78 80 c1 22 19 c7 96 27 15 d9 06 72 16 86 8a 5d 32 de da d8 b4 7a 14 fd 03 35 ec 26 43 ef 27 5b ea 78 74 92 2b 99 b1 97 26 34 c5 19 c4 92 b6 c8 a6 4c 43 ad 12 53 fa 58 3c 22 f3 aa 53 71 d8 98 54 c3 13 43 24 12 09 81 64 ee 89 b1 3c 3d cf 9e 9d 5b b1 08 00 8e 2a eb 75 21 9e a5 d8 4e c4 eb c0 ff 22 c9 cb 89 65 f9 d8 71 48 f2 79 62 98 07 5c 6d 8d fa ca f5 e7 c4 88 2d e6 7a 2c f9 22 76 92 93 75 65 65 96 Data Ascii: k^zrsi#G;qOTH\|^[%#fK50~>W>Tra'v$OF];#`X5Pjx"'r]2z5&C'[xt+&4LCSX<"SqTC$d<=[*u!N"eqHyb\m-z,"vuee

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49768	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:32 UTC	384	OUT	GET /wp-content/themes/tgtheme/img/anzhuo_a.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:32 UTC	773	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:32 GMT Content-Type: image/png Content-Length: 1373 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-55d" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609574 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tbC9UmBImF9E1kUbwYF4On1LRjMg8MoLcLDhnSgxgajBhe2h2g3uNVUDYqa%2BIYaI%2BN5wwnz8zWFvy9BC0FZ0v4bYFPxJT8iB7BJHCtTkzw8HyWFuYinmq%2BZPzfvLDNGYbiXAV8c%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca47a001a1f-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:32 UTC	596	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 00 18 08 06 00 00 00 fe be 0d 4b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRKtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:32 UTC	777	IN	Data Raw: 45 42 42 38 39 41 44 46 44 38 46 43 36 45 42 43 37 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 42 31 42 33 32 36 33 34 46 42 36 31 31 45 45 42 42 38 39 41 44 46 44 38 46 43 36 45 42 43 37 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 42 31 42 33 32 36 30 34 46 42 36 31 31 45 45 42 42 38 39 41 44 46 44 38 46 43 36 45 42 43 37 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 42 31 42 33 32 36 31 34 46 42 36 31 31 45 45 42 42 38 39 41 44 46 44 38 46 43 36 45 42 43 37 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a Data Ascii: EBB89ADFD8FC6EBC7" xmpMM:DocumentID="xmp.did:1B1B32634FB611EEBB89ADFD8FC6EBC7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1B1B32604FB611EEBB89ADFD8FC6EBC7" stRef:documentID="xmp.did:1B1B32614FB611EEBB89ADFD8FC6EBC7"/> </rdf:Description> </rdf:RDF> </x:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49766	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:32 UTC	389	OUT	GET /wp-content/themes/tgtheme/img/t_logo_sprite.svg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:32 UTC	736	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:32 GMT Content-Type: image/svg+xml Content-Length: 23116 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-5a4c" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 1 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3j5zsA%2BkyVF%2BSZAKRPijguHxnBXIUmUf6%2BSHFUrTSEVCzAF4n9pORvSUGM2TeBd%2BofrOy8Ix18e8rrU%2BwjQeqmtciEdL2WxSUBnvcFOke2INPtGfBprRkVDnmORXgIQVkkMZS1A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca47ccfc3fd-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:32 UTC	633	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 68 65 69 67 68 74 3d 22 31 34 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 36 34 20 31 34 34 22 20 77 69 64 74 68 3d 22 34 34 36 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 61 22 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 61 61 62 65 65 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 32 39 65 64 39 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 Data Ascii: <svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGr
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 31 35 31 32 22 20 78 32 3d 22 31 35 31 32 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 61 22 20 79 31 3d 22 31 34 2e 34 35 32 36 22 20 79 32 3d 22 31 32 39 2e 35 34 37 22 2f 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 66 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 31 36 35 36 22 20 78 32 3d 22 31 36 35 36 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 61 22 20 79 31 3d 22 31 30 2e 37 38 31 37 22 20 79 32 3d 22 31 33 33 2e 32 31 38 22 2f 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 67 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 Data Ascii: " gradientUnits="userSpaceOnUse" x1="1512" x2="1512" xlink:href="#a" y1="14.4526" y2="129.547"/><linearGradient id="f" gradientUnits="userSpaceOnUse" x1="1656" x2="1656" xlink:href="#a" y1="10.7817" y2="133.218"/><linearGradient id="g" gradientUnits="user
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 61 64 69 65 6e 74 20 69 64 3d 22 71 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 33 32 34 30 22 20 78 32 3d 22 33 32 34 30 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 61 22 20 79 31 3d 22 37 2e 33 34 31 38 22 20 79 32 3d 22 31 33 36 2e 36 35 39 22 2f 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 72 22 20 67 72 61 64 69 65 6e 74 55 6e 69 74 73 3d 22 75 73 65 72 53 70 61 63 65 4f 6e 55 73 65 22 20 78 31 3d 22 33 33 38 34 22 20 78 32 3d 22 33 33 38 34 22 20 78 6c 69 6e 6b 3a 68 72 65 66 3d 22 23 61 22 20 79 31 3d 22 37 2e 38 31 38 38 35 22 20 79 32 3d 22 31 33 36 2e 31 38 31 22 2f 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 73 22 20 67 72 61 64 69 65 6e 74 Data Ascii: adient id="q" gradientUnits="userSpaceOnUse" x1="3240" x2="3240" xlink:href="#a" y1="7.3418" y2="136.659"/><linearGradient id="r" gradientUnits="userSpaceOnUse" x1="3384" x2="3384" xlink:href="#a" y1="7.81885" y2="136.181"/><linearGradient id="s" gradient
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 30 2e 38 33 37 37 2d 31 33 2e 38 20 33 33 2e 33 33 36 73 34 2e 39 37 20 32 34 2e 34 39 38 20 31 33 2e 38 20 33 33 2e 33 33 36 63 38 2e 38 34 20 38 2e 38 33 38 20 32 30 2e 38 34 20 31 33 2e 38 30 38 20 33 33 2e 33 34 20 31 33 2e 38 30 38 73 32 34 2e 35 2d 34 2e 39 37 20 33 33 2e 33 34 2d 31 33 2e 38 30 38 63 38 2e 38 33 2d 38 2e 38 33 38 20 31 33 2e 38 2d 32 30 2e 38 33 37 37 20 31 33 2e 38 2d 33 33 2e 33 33 36 73 2d 34 2e 39 37 2d 32 34 2e 34 39 38 2d 31 33 2e 38 2d 33 33 2e 33 33 36 63 2d 38 2e 38 34 2d 38 2e 38 33 38 2d 32 30 2e 38 34 2d 31 33 2e 38 30 38 2d 33 33 2e 33 34 2d 31 33 2e 38 30 38 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 63 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 34 35 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 31 33 36 38 20 31 39 2e 31 31 31 Data Ascii: 0.8377-13.8 33.336s4.97 24.498 13.8 33.336c8.84 8.838 20.84 13.808 33.34 13.808s24.5-4.97 33.34-13.808c8.83-8.838 13.8-20.8377 13.8-33.336s-4.97-24.498-13.8-33.336c-8.84-8.838-20.84-13.808-33.34-13.808z" fill="url(#c)" opacity=".45"/><path d="m1368 19.111
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 39 2d 31 37 2e 39 33 63 31 31 2e 34 37 2d 31 31 2e 34 37 37 20 31 37 2e 39 33 2d 32 37 2e 30 35 38 37 20 31 37 2e 39 33 2d 34 33 2e 32 38 38 32 20 30 2d 31 36 2e 32 32 39 34 2d 36 2e 34 36 2d 33 31 2e 38 31 31 34 2d 31 37 2e 39 33 2d 34 33 2e 32 38 37 39 2d 31 31 2e 34 38 2d 31 31 2e 34 37 36 34 2d 32 37 2e 30 36 2d 31 37 2e 39 33 30 32 2d 34 33 2e 32 39 2d 31 37 2e 39 33 30 32 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 66 29 22 20 6f 70 61 63 69 74 79 3d 22 2e 39 38 22 2f 3e 3c 70 61 74 68 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 20 64 3d 22 6d 31 36 32 38 2e 33 36 20 31 32 36 2e 36 32 34 63 31 2e 33 35 2d 38 2e 33 30 36 20 32 2e 35 34 2d 31 36 2e 34 32 32 20 33 2d 32 31 2e 31 39 2e 30 38 2d 2e 38 34 37 2d 2e 30 33 2d 31 2e 39 33 33 2d Data Ascii: 9-17.93c11.47-11.477 17.93-27.0587 17.93-43.2882 0-16.2294-6.46-31.8114-17.93-43.2879-11.48-11.4764-27.06-17.9302-43.29-17.9302z" fill="url(#f)" opacity=".98"/><path clip-rule="evenodd" d="m1628.36 126.624c1.35-8.306 2.54-16.422 3-21.19.08-.847-.03-1.933-
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 34 63 30 20 31 37 2e 34 39 35 20 36 2e 39 36 20 33 34 2e 32 39 31 39 20 31 39 2e 33 33 20 34 36 2e 36 36 32 39 20 31 32 2e 33 37 20 31 32 2e 33 37 32 20 32 39 2e 31 37 20 31 39 2e 33 32 39 20 34 36 2e 36 36 20 31 39 2e 33 32 39 20 31 37 2e 35 20 30 20 33 34 2e 32 39 2d 36 2e 39 35 37 20 34 36 2e 36 36 2d 31 39 2e 33 32 39 20 31 32 2e 33 37 2d 31 32 2e 33 37 31 20 31 39 2e 33 33 2d 32 39 2e 31 36 37 39 20 31 39 2e 33 33 2d 34 36 2e 36 36 32 39 20 30 2d 31 37 2e 34 39 35 31 2d 36 2e 39 36 2d 33 34 2e 32 39 32 2d 31 39 2e 33 33 2d 34 36 2e 36 36 33 34 73 2d 32 39 2e 31 36 2d 31 39 2e 33 32 38 34 2d 34 36 2e 36 36 2d 31 39 2e 33 32 38 34 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 68 29 22 2f 3e 3c 70 61 74 68 20 63 6c 69 70 2d 72 75 6c 65 3d 22 65 76 65 6e 6f Data Ascii: 4c0 17.495 6.96 34.2919 19.33 46.6629 12.37 12.372 29.17 19.329 46.66 19.329 17.5 0 34.29-6.957 46.66-19.329 12.37-12.371 19.33-29.1679 19.33-46.6629 0-17.4951-6.96-34.292-19.33-46.6634s-29.16-19.3284-46.66-19.3284z" fill="url(#h)"/><path clip-rule="eveno
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 2d 31 38 2e 36 32 36 34 20 32 38 2e 33 38 2d 31 38 2e 37 36 31 2e 34 32 2d 2e 30 39 34 36 20 31 2d 2e 32 31 34 34 20 31 2e 33 39 2e 31 33 35 37 2e 34 2e 33 34 39 31 2e 33 36 20 31 2e 30 31 31 35 2e 33 32 20 31 2e 31 38 39 32 2d 2e 32 36 20 31 2e 30 38 32 33 2d 31 30 2e 33 31 20 31 30 2e 34 33 32 33 2d 31 35 2e 35 33 20 31 35 2e 32 37 38 31 2d 31 2e 36 32 20 31 2e 35 31 34 2d 32 2e 37 38 20 32 2e 35 38 38 2d 33 2e 30 31 20 32 2e 38 33 33 2d 2e 35 33 2e 35 34 38 2d 31 2e 30 37 20 31 2e 30 36 36 2d 31 2e 35 39 20 31 2e 35 36 34 2d 33 2e 31 39 20 33 2e 30 37 37 2d 35 2e 35 38 20 35 2e 33 38 35 2e 31 34 20 39 2e 31 35 33 20 32 2e 37 35 20 31 2e 38 31 34 20 34 2e 39 35 20 33 2e 33 31 33 20 37 2e 31 35 20 34 2e 38 30 39 20 32 2e 33 39 20 31 2e 36 32 39 20 34 2e Data Ascii: -18.6264 28.38-18.761.42-.0946 1-.2144 1.39.1357.4.3491.36 1.0115.32 1.1892-.26 1.0823-10.31 10.4323-15.53 15.2781-1.62 1.514-2.78 2.588-3.01 2.833-.53.548-1.07 1.066-1.59 1.564-3.19 3.077-5.58 5.385.14 9.153 2.75 1.814 4.95 3.313 7.15 4.809 2.39 1.629 4.
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 2e 31 37 39 35 2e 30 39 2d 2e 38 34 38 39 2d 2e 33 31 2d 31 2e 32 30 31 36 2d 2e 34 2d 2e 33 35 33 39 2d 2e 39 39 2d 2e 32 33 32 37 2d 31 2e 34 31 2d 2e 31 33 37 31 2d 2e 36 2e 31 33 36 2d 31 30 2e 31 36 20 36 2e 34 35 35 37 2d 32 38 2e 36 38 20 31 38 2e 39 35 38 32 2d 32 2e 37 32 20 31 2e 38 36 33 34 2d 35 2e 31 37 20 32 2e 37 37 32 34 2d 37 2e 33 38 20 32 2e 37 32 34 34 2d 32 2e 34 32 2d 2e 30 35 32 2d 37 2e 30 39 2d 31 2e 33 37 32 39 2d 31 30 2e 35 37 2d 32 2e 35 30 31 33 2d 34 2e 32 36 2d 31 2e 33 38 34 34 2d 37 2e 36 34 2d 32 2e 31 31 36 35 2d 37 2e 33 35 2d 34 2e 34 36 37 38 2e 31 36 2d 31 2e 32 32 34 20 31 2e 38 34 2d 32 2e 34 37 36 37 20 35 2e 30 36 2d 33 2e 37 35 37 7a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 32 Data Ascii: .1795.09-.8489-.31-1.2016-.4-.3539-.99-.2327-1.41-.1371-.6.136-10.16 6.4557-28.68 18.9582-2.72 1.8634-5.17 2.7724-7.38 2.7244-2.42-.052-7.09-1.3729-10.57-2.5013-4.26-1.3844-7.64-2.1165-7.35-4.4678.16-1.224 1.84-2.4767 5.06-3.757z" fill="#fff"/><path d="m2
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 30 37 20 31 39 2e 39 32 36 20 34 38 2e 31 31 20 31 39 2e 39 32 36 73 33 35 2e 33 35 2d 37 2e 31 37 32 20 34 38 2e 31 31 2d 31 39 2e 39 32 36 63 31 32 2e 37 35 2d 31 32 2e 37 35 34 20 31 39 2e 39 32 2d 33 30 2e 30 37 30 36 20 31 39 2e 39 32 2d 34 38 2e 31 30 36 38 73 2d 37 2e 31 37 2d 33 35 2e 33 35 32 37 2d 31 39 2e 39 32 2d 34 38 2e 31 30 36 37 63 2d 31 32 2e 37 36 2d 31 32 2e 37 35 34 31 2d 33 30 2e 30 37 2d 31 39 2e 39 32 36 32 31 2d 34 38 2e 31 31 2d 31 39 2e 39 32 36 32 31 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 6c 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 32 34 37 32 2e 39 34 20 38 31 2e 31 30 37 63 31 39 2e 38 33 2d 38 2e 36 34 30 32 20 33 33 2e 30 35 2d 31 34 2e 33 33 36 39 20 33 39 2e 36 37 2d 31 37 2e 30 38 39 20 31 38 2e 39 2d 37 2e 38 35 38 Data Ascii: 07 19.926 48.11 19.926s35.35-7.172 48.11-19.926c12.75-12.754 19.92-30.0706 19.92-48.1068s-7.17-35.3527-19.92-48.1067c-12.76-12.7541-30.07-19.92621-48.11-19.92621z" fill="url(#l)"/><path d="m2472.94 81.107c19.83-8.6402 33.05-14.3369 39.67-17.089 18.9-7.858
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 39 37 2d 2e 39 35 20 35 2e 30 36 32 2d 32 2e 38 31 20 36 2e 37 35 39 2d 34 2e 36 32 20 36 2e 39 32 35 2d 33 2e 39 32 2e 33 36 31 2d 36 2e 39 2d 32 2e 35 39 32 2d 31 30 2e 37 2d 35 2e 30 38 32 2d 35 2e 39 34 2d 33 2e 38 39 39 2d 39 2e 33 2d 36 2e 33 32 34 2d 31 35 2e 30 38 2d 31 30 2e 31 32 37 34 2d 36 2e 36 37 2d 34 2e 33 39 35 33 2d 32 2e 33 34 2d 36 2e 38 31 31 35 20 31 2e 34 36 2d 31 30 2e 37 35 39 33 2e 39 39 2d 31 2e 30 33 33 34 20 31 38 2e 32 38 2d 31 36 2e 37 35 35 39 20 31 38 2e 36 31 2d 31 38 2e 31 38 31 39 2e 30 35 2d 2e 31 37 38 34 2e 30 39 2d 2e 38 34 33 34 2d 2e 33 31 2d 31 2e 31 39 33 39 2d 2e 34 2d 2e 33 35 31 35 2d 2e 39 38 2d 2e 32 33 31 31 2d 31 2e 34 2d 2e 31 33 36 31 2d 2e 35 39 2e 31 33 35 31 2d 31 30 2e 30 39 20 36 2e 34 31 33 35 2d Data Ascii: 97-.95 5.062-2.81 6.759-4.62 6.925-3.92.361-6.9-2.592-10.7-5.082-5.94-3.899-9.3-6.324-15.08-10.1274-6.67-4.3953-2.34-6.8115 1.46-10.7593.99-1.0334 18.28-16.7559 18.61-18.1819.05-.1784.09-.8434-.31-1.1939-.4-.3515-.98-.2311-1.4-.1361-.59.1351-10.09 6.4135-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49767	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:32 UTC	379	OUT	GET /wp-content/themes/tgtheme/img/why.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:32 UTC	770	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:32 GMT Content-Type: image/png Content-Length: 8230 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-2026" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609574 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TyGF77AbLvONDKkPtZAz5QDj3NQBnFYex3z4bbeWjKqzxUB7WBygZlAxstUR1bKKbhpGqiM8BJQDcTSP85ztQV%2FQcOQgQ9aIAbwgXqNaMeyM5Er238MQFBnCEmp3pFq1U318p0Q%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca49acd0f8c-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:32 UTC	599	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 dc 00 00 00 3e 08 06 00 00 00 81 58 aa c8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR>XtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 44 32 43 45 35 43 35 39 43 38 44 35 30 30 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 39 42 35 39 31 43 46 34 46 33 46 31 31 45 45 38 37 44 32 43 45 35 43 35 39 43 38 44 35 30 30 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 39 42 35 39 31 43 43 34 46 33 46 31 31 45 45 38 37 44 32 43 45 35 43 35 39 43 38 44 35 30 30 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 39 42 35 39 31 43 44 34 46 33 46 31 31 45 45 38 37 44 32 43 45 35 43 35 39 43 38 44 35 30 30 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 Data Ascii: D2CE5C59C8D500" xmpMM:DocumentID="xmp.did:99B591CF4F3F11EE87D2CE5C59C8D500"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:99B591CC4F3F11EE87D2CE5C59C8D500" stRef:documentID="xmp.did:99B591CD4F3F11EE87D2CE5C59C8D500"/> </rdf:Description> </rdf:RDF> </x:xmp
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 72 ce 89 ea 7e 99 03 ed 72 b8 e6 39 5c 1d bb 5d 4f a1 2d 5d 02 e4 6f b1 f3 22 16 a0 7d b8 79 92 72 4e d9 6d 99 4d 38 6c b1 ce b2 82 81 d5 15 80 46 19 aa ad bd c5 94 89 1e 26 3b f9 f8 bc e4 bd ab 5c 3f 44 ca d9 30 88 2a 88 2b 0d 7b 11 36 8f 98 96 6e dd b3 96 d9 8e ed fa 23 27 b2 aa 39 7e 0d 0b ef 50 24 7a c7 00 9a f6 5b 85 c8 d3 54 aa b9 5d d2 b8 6f d6 e0 fe 92 61 7b 26 15 11 a6 79 24 ca 25 7b 46 e7 94 3b 4f 33 02 16 45 ef 3c cd 6b 4a 62 9f a0 fb fb 59 b0 39 39 a3 cb 24 b3 b8 ea 12 c3 9a 27 86 5b d5 f0 64 cb 0a 43 a5 7b 62 52 56 92 25 c3 2d 12 b3 53 5a 4c 2f 1d f6 6b 83 e1 d6 2d b7 d1 94 e1 d6 53 e8 a3 59 62 ff d4 2f 55 7b 67 35 99 85 ed 08 95 2d bb b1 64 a1 6f 16 63 d8 81 38 db 82 ea c4 6c ed 0c 2f 4b 24 d9 36 a4 85 04 73 ae 6f 18 ae 44 9f 17 c4 93 a6 54 Data Ascii: r~r9\]O-]o"}yrNmM8lF&;\?D0*+{6n#'9~P$z[T]oa{&y$%{F;O3E<kJbY99$'[dC{bRV%-SZL/k-SYb/U{g5-doc8l/K$6soDT
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 8d 79 ac 0d db ff 7f e9 b5 e7 ca 9b e7 de d8 f5 c3 c1 a7 5f 79 82 95 2d 95 6b 3f f8 d7 d2 ca cb 4f 75 cf cc 17 e6 4e 0f 1f 3d 6e c5 23 de 5a 59 1a 5d 7a e9 2b 4f f8 3f f9 fe 51 f1 37 fa 7e b7 9e 6e be 13 d6 f5 50 f8 cf 87 84 7e 9d 07 fa b5 34 f0 6b bf 7d ee b6 3f fc a6 16 48 41 7d c3 8f a9 ac 6d b7 fd dd 42 71 e0 e0 e1 33 58 3f 8d 3c fc 4c fd d6 87 9f be 7f f5 7f da 47 2f 4f 57 77 8d db a1 7a ab 34 fa e9 72 54 cf f3 ec cf b1 cb f3 af 8f ad be 71 46 d5 d7 cf cb de 29 d4 91 af ed f2 0a 4f fc 7a e7 f6 67 5f 3b ab 78 26 0b 43 83 4d c2 0a c9 66 b5 79 1a f5 77 24 60 37 6d 08 86 b6 a5 6c d0 07 e5 9b 08 70 55 bb 17 20 c7 7e 46 01 6a b2 50 6f 1c 9d a1 a0 bb a0 e9 24 4e 58 8e 3e 78 1c 58 d6 34 23 30 1d ae 9f ea 0a 40 4f 6d 2e 2b 19 2e 35 b6 10 d8 52 20 09 c1 16 65 Data Ascii: y_y-k?OuN=n#ZY]z+O?Q7~nP~4k}?HA}mBq3X?<LG/OWwz4rTqF)Ozg_;x&CMfyw$`7mlpU ~FjPo$NX>xX4#0@Om.+.5R e
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: 3a b2 94 31 ef fb dc 6f f4 c5 5e 5b 0a 76 34 a4 2a 73 48 d2 12 1a de a5 61 ec 08 74 36 cf fd 83 76 1b e8 98 46 8e c2 b5 6f 3f 6b b5 5d 87 ea ad ed 5c 93 b8 8a 39 e7 32 49 ec 1e 17 1a 2d e0 49 12 86 4a f2 bc 8d fa e3 b4 a7 28 69 8f cd f7 e3 0d b2 aa 0c dd fd cd 33 c4 3c 4f ea f5 58 cf d2 16 6a 23 e2 9c 59 0e 2d 88 9a 66 e0 ab bb b0 4a 3c 27 20 3a bb 21 ce 81 14 75 40 77 a8 4e 2e 10 7c 0b 10 94 8f a5 75 f3 0b 11 41 bd 0c d9 ec 84 49 67 15 68 be 56 05 b6 fb fe e0 c5 96 6c 0b d0 e0 27 3f f3 41 9c 11 1e fb bd bf 78 3b 0b d6 65 4b 0e fe d6 a9 f3 bd aa 9b 86 89 a3 7c 30 b4 b8 e9 e0 d3 af 9c a5 17 cd d3 66 d1 1e ba e5 89 46 3b e8 25 2e cc 72 b2 27 a4 8a 00 a3 4b 47 f4 a7 cc 13 b3 93 fd 28 a8 1e 96 38 41 51 3a 60 dc 50 27 26 58 5b 4a 44 9d 8b 15 05 da 8b dd 62 cc Data Ascii: :1o^[v4*sHat6vFo?k]\92I-IJ(i3<OXj#Y-fJ<' :!u@wN.\|uAIghVl'?Ax;eK\|0fF;%.r'KG(8AQ:`P'&X[JDb
2024-07-04 22:39:32 UTC	1369	IN	Data Raw: be c5 9c ae eb a2 fe 72 6c 6c 8c e8 a7 5e a4 fd cb c0 71 1f 32 0f 09 fb 7f d3 d0 32 14 a2 bd 0e e8 e8 b0 85 39 b7 26 d8 03 3a f7 87 74 52 43 6c 2c 86 01 a7 5b ec db c0 61 84 63 b8 37 83 6c 20 60 a4 1a 93 11 0d 10 a3 13 69 55 32 e6 e2 f3 58 fe 36 4d 86 1b 48 40 f2 10 02 aa 2b 08 a3 80 3c f5 b5 14 73 b7 81 85 e7 f3 c6 70 d3 6e 1f 95 22 12 89 d8 1e f7 70 bc ae 4a c0 32 ca e1 5f 65 63 7e 30 69 fb 99 7e ac 84 e5 f9 48 79 05 5d 00 53 b0 c6 35 00 88 c7 0c 1d c2 00 71 50 02 a0 7e 9d f6 52 3b e2 71 cf d3 67 7c c0 fe 38 b4 b5 28 2e 7e df 3b 59 27 bb 3f a3 16 5d 83 cc fb c4 64 48 b8 7f 0b 2a 43 e1 64 89 f7 af 29 0c 97 78 c5 35 e0 ca 32 98 61 dd 04 ee f7 18 cb c1 0c 9c 78 5d 4d 11 6c 93 f6 89 ad 7e 4d ab 4c eb ed 0b c7 6e 3f a2 7b db 9f fd 93 81 2d 04 94 74 25 b4 c4 Data Ascii: rll^q229&:tRCl,[ac7l `iU2X6MH@+<spn"pJ2_ec~0i~Hy]S5qP~R;qg\|8(.~;Y'?]dH*Cd)x52ax]Ml~MLn?{-t%
2024-07-04 22:39:32 UTC	786	IN	Data Raw: 03 2e 34 16 11 48 7a 2a 76 ca f2 9d be 68 c8 d8 36 00 c8 73 f5 13 ae 8c cc 8c 11 32 96 bb 85 b0 16 bf 07 df bb 0d 52 78 3e 4f 65 da 2c cb ef 81 1e 05 88 1e 5d 67 73 c2 63 a0 37 00 38 01 da 1f 15 60 e5 80 67 43 23 c7 90 ca da e7 29 56 2b eb bc 27 f4 05 b2 02 f7 a7 8a 85 07 29 d9 00 27 00 03 72 d2 23 61 de 30 94 3f 51 e6 6f 01 10 86 f2 38 05 02 1f 0b a7 6b e4 b2 3e 69 0a 63 06 41 cc f7 b0 0d b6 ee 68 47 73 c0 c5 74 3b 0d 3d 92 b6 9f ce 1d 76 38 0a 76 66 b7 2e 93 1e 20 76 d7 34 0c 24 7c f7 2d e4 7d 3c c0 06 40 36 c4 ed c3 75 80 bb a7 58 ae b8 b9 1d 02 5b d9 26 7e ec 80 09 0f f8 cd d7 34 70 e2 61 05 71 42 4e d0 e9 4c 71 cb f0 49 b2 93 af 6c 00 6e d2 3e b1 71 78 86 4e 1f 07 16 ca 4a d4 cf cc a8 fb 48 fb 06 52 6a 93 ee bd d0 c1 33 d1 79 c4 3a b6 11 9b 9b d8 21 Data Ascii: .4Hz*vh6s2Rx>Oe,]gsc78`gC#)V+')'r#a0?Qo8k>icAhGst;=v8vf. v4$\|-}<@6uX[&~4paqBNLqIln>qxNJHRj3y:!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49769	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:32 UTC	625	OUT	GET /wp-content/themes/tgtheme/img/zhongwen_a.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:33 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:33 GMT Content-Type: image/png Content-Length: 1483 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-5cb" expires: Mon, 29 Jul 2024 23:49:05 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 427828 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gdc4kvBUga7lVBQeues48Tggs8c45%2BB12QliSgS54nKCaY1sXTbZy9t8A%2FcVLoT3HER8%2BATMtlwMEni6CQA3AxVxGtcuNpud0KphXID7%2Fq1YoseGvbKQEEFF9Dr5fIap4py1W8k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca73cfe42ad-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:33 UTC	594	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 18 08 06 00 00 00 e4 82 ed c5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:33 UTC	889	IN	Data Raw: 35 33 39 30 31 31 45 45 42 33 35 43 44 33 39 42 37 37 30 38 39 35 42 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 41 45 35 46 30 44 44 35 33 39 30 31 31 45 45 42 33 35 43 44 33 39 42 37 37 30 38 39 35 42 36 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 41 45 35 46 30 44 41 35 33 39 30 31 31 45 45 42 33 35 43 44 33 39 42 37 37 30 38 39 35 42 36 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 41 45 35 46 30 44 42 35 33 39 30 31 31 45 45 42 33 35 43 44 33 39 42 37 37 30 38 39 35 42 36 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 Data Ascii: 539011EEB35CD39B770895B6" xmpMM:DocumentID="xmp.did:3AE5F0DD539011EEB35CD39B770895B6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3AE5F0DA539011EEB35CD39B770895B6" stRef:documentID="xmp.did:3AE5F0DB539011EEB35CD39B770895B6"/> </rdf:Description> </rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49770	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:32 UTC	563	OUT	GET /wp-content/themes/tgtheme/js/jquery.min.js HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:33 UTC	796	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:33 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT vary: Accept-Encoding etag: W/"66346867-1492a" expires: Thu, 04 Jul 2024 22:41:48 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 43065 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=czBaP3uFGY8hUoMixvubCOpHX6fjZWilEWWF%2F2g7RoT6Sj32XJKCF6ZvYHRXliwT%2FFm4zIq3%2Fii50SPB2yE4I7Uk6Janmt4UgG9PoQ0FTAUl2NbY1Bo240X4larp2R%2Bs9VVmGqY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca78eb37289-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:33 UTC	573	IN	Data Raw: 37 63 39 34 0d 0a 3b 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 69 74 68 20 61 20 64 6f 63 75 6d 65 6e 74 22 29 3b 72 65 74 75 72 6e 20 62 28 61 29 7d 3a 62 28 61 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 74 68 Data Ascii: 7c94;!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:th
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 6f 72 3a 6e 2c 73 65 6c 65 63 74 6f 72 3a 22 22 2c 6c 65 6e 67 74 68 3a 30 2c 74 6f 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 3f 30 3e 61 3f 74 68 69 73 5b 61 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 61 5d 3a 64 2e 63 61 6c 6c 28 74 68 69 73 29 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 6e 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 2c 62 7d 2c 65 61 63 Data Ascii: or:n,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},eac
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 61 3d 3d 3d 61 2e 77 69 6e 64 6f 77 7d 2c 69 73 4e 75 6d 65 72 69 63 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 6e 2e 69 73 41 72 72 61 79 28 61 29 26 26 61 2d 70 61 72 73 65 46 6c 6f 61 74 28 61 29 2b 31 3e 3d 30 7d 2c 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 6f 62 6a 65 63 74 22 21 3d 3d 6e 2e 74 79 70 65 28 61 29 7c 7c 61 2e 6e 6f 64 65 54 79 70 65 7c 7c 6e 2e 69 73 57 69 6e 64 6f 77 28 61 29 3f 21 31 3a 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 21 6a 2e 63 61 6c 6c 28 61 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 3f Data Ascii: :function(a){return null!=a&&a===a.window},isNumeric:function(a){return!n.isArray(a)&&a-parseFloat(a)+1>=0},isPlainObject:function(a){return"object"!==n.type(a)\|\|a.nodeType\|\|n.isWindow(a)?!1:a.constructor&&!j.call(a.constructor.prototype,"isPrototypeOf")?
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 2c 65 3d 5b 5d 2c 66 3d 30 2c 67 3d 61 2e 6c 65 6e 67 74 68 2c 68 3d 21 63 3b 67 3e 66 3b 66 2b 2b 29 64 3d 21 62 28 61 5b 66 5d 2c 66 29 2c 64 21 3d 3d 68 26 26 65 2e 70 75 73 68 28 61 5b 66 5d 29 3b 72 65 74 75 72 6e 20 65 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 66 3d 30 2c 67 3d 61 2e 6c 65 6e 67 74 68 2c 68 3d 73 28 61 29 2c 69 3d 5b 5d 3b 69 66 28 68 29 66 6f 72 28 3b 67 3e 66 3b 66 2b 2b 29 64 3d 62 28 61 5b 66 5d 2c 66 2c 63 29 2c 6e 75 6c 6c 21 3d 64 26 26 69 2e 70 75 73 68 28 64 29 3b 65 6c 73 65 20 66 6f 72 28 66 20 69 6e 20 61 29 64 3d 62 28 61 5b 66 5d 2c 66 2c 63 29 2c 6e 75 6c 6c 21 3d 64 26 26 69 2e 70 75 73 Data Ascii: grep:function(a,b,c){for(var d,e=[],f=0,g=a.length,h=!c;g>f;f++)d=!b(a[f],f),d!==h&&e.push(a[f]);return e},map:function(a,b,c){var d,f=0,g=a.length,h=s(a),i=[];if(h)for(;g>f;f++)d=b(a[f],f,c),null!=d&&i.push(d);else for(f in a)d=b(a[f],f,c),null!=d&&i.pus
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 2a 28 22 2b 4d 2b 22 29 28 3f 3a 22 2b 4c 2b 22 2a 28 5b 2a 5e 24 7c 21 7e 5d 3f 3d 29 22 2b 4c 2b 22 2a 28 3f 3a 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 7c 28 22 2b 4e 2b 22 29 29 7c 29 22 2b 4c 2b 22 2a 5c 5c 5d 22 2c 50 3d 22 3a 28 22 2b 4d 2b 22 29 28 3f 3a 5c 5c 28 28 28 27 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 27 5d 29 2a 29 27 7c 5c 22 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 5c 22 5d 29 2a 29 5c 22 29 7c 28 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5e 5c 5c 5c 5c 28 29 5b 5c 5c 5d 5d 7c 22 2b 4f 2b 22 29 2a 29 7c 2e 2a 29 5c 5c 29 7c 29 22 2c 51 3d 6e 65 77 20 52 65 67 45 78 70 28 4c 2b 22 2b 22 2c 22 67 22 29 2c 52 3d 6e 65 77 20 52 Data Ascii: ("+M+")(?:"+L+"([^$\|!~]?=)"+L+"(?:'((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\"\|("+N+"))\|)"+L+"\\]",P=":("+M+")(?:\$(('((?:\\\\.\|[^\\\\']))'\|\"((?:\\\\.\|[^\\\\\"]))\")\|((?:\\\\.\|[^\\\\()[\\]]\|"+O+"))\|.*)\$\|)",Q=new RegExp(L+"+","g"),R=new R
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 64 65 54 79 70 65 7d 63 61 74 63 68 28 66 61 29 7b 48 3d 7b 61 70 70 6c 79 3a 45 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 47 2e 61 70 70 6c 79 28 61 2c 49 2e 63 61 6c 6c 28 62 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 6c 65 6e 67 74 68 2c 64 3d 30 3b 77 68 69 6c 65 28 61 5b 63 2b 2b 5d 3d 62 5b 64 2b 2b 5d 29 3b 61 2e 6c 65 6e 67 74 68 3d 63 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 61 28 61 2c 62 2c 64 2c 65 29 7b 76 61 72 20 66 2c 68 2c 6a 2c 6b 2c 6c 2c 6f 2c 72 2c 73 2c 77 2c 78 3b 69 66 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 64 3d 64 7c 7c 5b 5d 2c 6b 3d 62 2e 6e 6f 64 65 54 79 70 65 2c 22 73 74 72 Data Ascii: deType}catch(fa){H={apply:E.length?function(a,b){G.apply(a,I.call(b))}:function(a,b){var c=a.length,d=0;while(a[c++]=b[d++]);a.length=c-1}}}function ga(a,b,d,e){var f,h,j,k,l,o,r,s,w,x;if((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,d=d\|\|[],k=b.nodeType,"str
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 64 28 62 29 2c 62 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 6b 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 61 2e 73 70 6c 69 74 28 22 7c 22 29 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 65 2d 2d 29 64 2e 61 74 74 72 48 61 6e 64 6c 65 5b 63 5b 65 5d 5d 3d 62 7d 66 75 6e 63 74 69 6f 6e 20 6c 61 28 61 2c 62 29 7b 76 61 72 20 63 3d 62 26 26 61 2c 64 3d 63 26 26 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 62 2e 6e 6f 64 65 54 79 70 65 26 26 28 7e 62 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 2d 28 7e 61 2e 73 6f 75 72 63 65 49 6e 64 65 78 7c 7c 43 29 3b 69 66 28 64 29 72 65 74 75 72 6e 20 64 3b 69 66 28 63 29 77 68 69 6c 65 28 63 3d 63 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 63 3d 3d 3d 62 29 72 65 74 75 72 6e 2d 31 3b Data Ascii: d(b),b=null}}function ka(a,b){var c=a.split("\|"),e=a.length;while(e--)d.attrHandle[c[e]]=b}function la(a,b){var c=b&&a,d=c&&1===a.nodeType&&1===b.nodeType&&(~b.sourceIndex\|\|C)-(~a.sourceIndex\|\|C);if(d)return d;if(c)while(c=c.nextSibling)if(c===b)return-1;
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 2e 69 64 3d 75 2c 21 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 63 5d 3a 5b 5d 7d 7d 2c 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 Data Ascii: return o.appendChild(a).id=u,!g.getElementsByName\|\|!g.getElementsByName(u).length}),c.getById?(d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a);return c&&c.parentNode?[c]:[]}},d.filter.ID=function(a){var b=a.re
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 7d 29 2c 6a 61 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 67 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4c 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a Data Ascii: l("a#"+u+"+").length\|\|q.push(".#.+[+~]")}),ja(function(a){var b=g.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+L+"[*^$\|!~]?="),a.querySelectorAll(":
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 68 3d 5b 61 5d 2c 69 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 67 3f 2d 31 3a 62 3d 3d 3d 67 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 68 2e 75 6e 73 68 69 66 74 28 63 29 3b 63 3d 62 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 69 2e 75 6e 73 68 69 66 74 28 63 29 3b 77 68 69 6c 65 28 68 5b 64 5d 3d 3d 3d 69 5b 64 5d 29 64 2b 2b 3b 72 65 74 75 72 6e 20 64 3f 6c 61 28 68 5b 64 5d 2c 69 5b 64 5d 29 3a 68 5b 64 5d 3d 3d 3d 76 3f 2d 31 3a 69 5b Data Ascii: entNode,f=b.parentNode,h=[a],i=[b];if(!e\|\|!f)return a===g?-1:b===g?1:e?-1:f?1:k?J(k,a)-J(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)h.unshift(c);c=b;while(c=c.parentNode)i.unshift(c);while(h[d]===i[d])d++;return d?la(h[d],i[d]):h[d]===v?-1:i[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49772	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:33 UTC	385	OUT	GET /wp-content/themes/tgtheme/img/pingguo_a.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:33 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:33 GMT Content-Type: image/png Content-Length: 1274 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-4fa" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609575 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OqiI%2FNAzHvSU%2B8CrCSBoZRBJ0b%2FZS7TQ4Vk0aeb10A8qf%2BCOCi7mSoWRj%2Fx8%2F%2BuDgu7%2FL4mBhSqeVab4p1Fd2BbH5iWQw4fZ2gJov1DomHsvVdl1NZmsuabd%2ByK3fPlWHjqWjsE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca7e8b5c45e-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:33 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 18 08 06 00 00 00 fa 4b dd 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRKvtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:33 UTC	690	IN	Data Raw: 64 3a 32 42 36 35 39 33 32 43 35 33 39 30 31 31 45 45 38 37 45 32 46 39 33 38 36 31 43 44 41 43 44 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 42 36 35 39 33 32 44 35 33 39 30 31 31 45 45 38 37 45 32 46 39 33 38 36 31 43 44 41 43 44 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 42 36 35 39 33 32 41 35 33 39 30 31 31 45 45 38 37 45 32 46 39 33 38 36 31 43 44 41 43 44 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 42 36 35 39 33 32 42 35 33 39 30 31 31 45 45 38 37 45 32 46 39 33 38 36 31 43 44 41 43 44 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e Data Ascii: d:2B65932C539011EE87E2F93861CDACDD" xmpMM:DocumentID="xmp.did:2B65932D539011EE87E2F93861CDACDD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:2B65932A539011EE87E2F93861CDACDD" stRef:documentID="xmp.did:2B65932B539011EE87E2F93861CDACDD"/> </rdf:Description

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49771	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:33 UTC	389	OUT	GET /wp-content/themes/tgtheme/img/apple-768x512.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:33 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:33 GMT Content-Type: image/png Content-Length: 254911 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-3e3bf" expires: Fri, 02 Aug 2024 22:39:27 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 86406 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ohDPSJwsUrUWG4L3aJ%2BWPQnOBgUFV2oOMM1XtU3RjGmx7yqyTB9rV%2BHTITJNYThA8rAL6AkQRql8qe8IritV0nVZRBD7TbK7BnkgZriIhn8Medg1Elz4Ps9XB6TyKXkLQRKBMss%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca7fab24297-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:33 UTC	595	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 00 00 00 02 00 08 06 00 00 00 35 f6 0b 3a 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 79 90 24 f7 75 df f9 79 bf cc ca ca aa ae be 7b ba 31 37 e6 c0 1c 00 48 00 04 86 c0 80 04 01 11 3c 4d cb 82 2d cb 36 b9 32 e5 58 79 bd 96 e4 d8 f0 c6 fe eb fd 7b c3 bb ff 3a 42 7b c4 7a 1d 21 c5 5a d6 6a c3 32 49 ad 48 f1 02 48 f0 02 08 e2 1e cc 81 19 cc 60 ee 9e 9e be aa ba ba 2a 2b f3 f7 f6 8f cc ac ae ee 39 40 82 20 85 19 bc 0f 62 66 ba ab 32 b3 b2 32 13 99 ef f8 be f7 c0 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 Data Ascii: PNGIHDR5:pHYs+ IDATxy$uy{17H<M-62Xy{:B{z!Zj2IHH`*+9@ bf22000000000000000000000
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 0c c3 30 8c 5b 15 f9 db de 01 e3 6f 97 2c 4d 11 11 07 52 07 9d 00 b7 4f 55 b7 01 53 02 93 a9 66 13 cb cb cd b1 b3 67 ce 8d 1d 3f f1 e6 c8 6b 47 5e 1f 3b 77 fe 5c fd ea c2 62 7d a5 dd 8e bb dd 6e 9c 24 89 4b ba 5d d7 eb f5 e8 a5 29 59 e6 41 41 55 49 b3 94 34 cd 50 ef 51 60 e0 af 5f 88 d4 29 a9 68 7e c1 ca 86 6d e8 c0 3f fd 2b 5a 06 5e fc c5 3f cf b8 39 7a 83 63 aa 5c ff 68 2b 20 08 a1 48 7e 6d 6c 58 4a 90 b5 73 e7 15 55 c5 ab e2 9c 23 0c 42 42 c0 a9 80 08 61 18 10 45 15 a2 28 22 72 21 41 25 48 e3 b8 9a d4 6a b5 a4 16 c7 ed d1 d1 d1 f6 8e 1d 3b da 07 f6 df d5 ba ef c3 1f 5e dc be 65 eb e2 c8 c8 c8 9c 73 ee bc aa 1e 51 d5 53 0e b9 00 b4 54 35 0d 2a e1 7b 77 60 0c c3 30 0c e3 16 c0 9e 7c 1f 50 54 Data Ascii: 00000000[o,MROUSfg?kG^;w\b}n$K])YAAUI4PQ`_)h~m?+Z^?9zc\h+ H~mlXJsU#BBaE("r!A%Hj;^esQST5*{w`0\|PT
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 51 f0 20 6d af 9a ba 77 2a 76 30 0c c3 30 8c 5b 10 73 00 6e 73 ca e8 bf 88 38 55 0d 55 35 06 ea 22 d2 40 19 53 91 a9 85 c5 a5 a9 1f fc e8 87 9b bf f7 cc f7 a7 8f 1d 3f 31 7d e1 f2 95 b1 f9 85 85 91 a4 9b 36 5c 10 d4 c3 30 8c 34 cf 1c e4 8a 7e 11 97 f5 ba 24 dd 94 30 08 a9 54 2a 8c 8c 0e 33 31 36 ca c4 e4 24 8d e1 61 a2 4a 85 30 0c 89 aa 55 c2 4a 85 c0 15 d2 20 9f de a0 86 57 11 71 08 82 57 0f 40 10 04 a8 7a 16 17 17 39 76 fc 2d 4e bd 7d 0e 8f 07 81 cc 67 80 e4 46 61 ae 12 59 4f df 6a bc ce 7b c6 2f cd 0d 73 2e 52 74 f4 41 09 83 80 1d bb 76 b2 7b f7 2e c6 c6 46 89 c2 10 7a 8a 94 b6 ff 40 81 b6 b2 ee 94 ad 65 8d 0a 67 af d3 eb d1 49 33 92 24 a1 97 24 b4 57 57 b9 7a f5 2a 97 67 2f d3 59 4d e8 a5 29 dd 5e 46 e8 02 57 89 22 e7 55 3d 82 53 55 27 41 e8 9c 66 ae Data Ascii: Q mwv00[sns8UU5"@S?1}6\04~$0T316$aJ0UJ WqW@z9v-N}gFaYOj{/s.RtAv{.Fz@egI3$$WWz*g/YM)^FW"U=SU'Af
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: ee b9 ce b6 6d 5b 97 eb b5 5a 5b 55 db 40 9b 5c 02 94 16 fb 67 4e 80 61 18 86 71 5b 60 0e c0 6d 48 6e 48 01 b9 c9 14 aa fa 08 88 b4 28 fe cd bc 1f 3b 7e e2 cd 4d cf fd f4 85 89 cb b3 73 63 0b 8b 4b 23 ed d5 4e 03 75 31 e2 22 c9 af 0b 97 a6 a9 eb b4 db 7c e8 9e 7b f9 fd 7f f6 65 9e fa c2 e7 98 9c 1c cf 0d 38 f5 78 af 38 57 c6 f6 73 63 df 7b 05 29 8c bb 52 a3 af 14 06 1f 6b 83 bc 8a 68 ff 5a 66 40 10 27 78 9f ef bf 73 6e 60 78 58 be 50 10 38 a2 28 04 97 d7 06 04 08 81 2b 22 cc 1b 8d c9 fc 40 94 61 e9 77 79 20 6f 6f 63 4f e4 fa c5 bc fd f7 07 a4 5b 83 c7 50 8b 73 5b 66 7a fa c5 bb c5 89 75 ce 51 a9 84 fd 99 10 ac 9d c2 7e 7b d0 b2 60 b8 fc 27 5f b5 e8 e8 c4 da b6 29 1c 05 29 ce e3 9a 01 5e 38 8b aa 04 c5 7b 65 d6 28 8c 62 0e 1e 3c c0 8e 1d db 19 1e 1d e7 7f Data Ascii: m[Z[U@\gNaq[`mHnH(;~MscK#Nu1"\|{e8x8Wsc{)RkhZf@'xsn`xXP8(+"@awy oocO[Ps[fzuQ~{`'_))^8{e(b<
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: fe 7d 44 51 a5 9f e5 51 f5 04 41 80 f7 9e 73 e7 ce 31 3f 3f cf b6 6d db 98 9c 9c 04 a0 d3 e9 70 e2 c4 09 5e 7f fd 75 ba dd 2e 63 63 63 1c 38 70 80 7d fb f6 15 45 e6 4a a7 d3 e1 d8 b1 a3 ac ac b4 71 4e 70 2e 4f 25 e5 b5 27 6b 17 4d 10 04 dc 71 c7 1d 6c d9 bc 85 20 70 78 85 91 91 11 3e f7 99 4f f3 fd 67 7f c0 37 fe e6 db a4 de 3b 51 0f 48 88 b8 48 35 8b 57 da ed fa fc e2 42 e3 d4 5b 6f 35 ce 9f 3f 3f 3a 36 3e b2 e8 9c 8b 81 48 44 22 55 4d 44 a4 1c 10 66 18 86 61 18 b7 2c e6 00 dc 9e f4 33 00 de 13 a9 6a dd 39 a9 27 dd 5e e3 b5 37 8e 8e 9c 39 f3 76 a3 d9 6c 35 da ab ab 75 e7 24 16 91 50 8b e8 66 da 4b 78 e8 23 1f e1 4b ff f8 1f b1 6b c7 76 92 34 43 8b 88 bf 2b a4 3d fd b8 78 11 ed f7 de f7 a3 b0 7f fd d7 df e0 fb df ff 1e 99 57 ea f5 9f f0 8f ff d1 3f 24 53 Data Ascii: }DQQAs1??mp^u.ccc8p}EJqNp.O%'kMql px>Og7;QHH5WB[o5??:6>HD"UMDfa,3j9'^79vl5u$PfKx#Kkv4C+=xW?$S
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 26 27 a7 98 9d 9d e5 ca 95 2b bc 71 f4 38 67 ce 9c 66 61 7e 8e 93 27 4f 31 3d 3d c9 a3 87 3f 0a 9a d1 59 6d 81 66 85 ed ae d7 8e ef 2d a4 47 5e 05 e7 42 ee 3e 78 80 3f fa 83 7f c1 f8 c4 24 df fc d6 b7 38 75 fa 0c cd 66 93 66 73 19 9f 65 80 22 f9 88 e2 1b 4e ae 7d 47 3e 08 0e 80 e8 86 54 c8 c6 ef 5c 36 ee 97 fe db 41 10 50 a9 44 c4 71 95 c9 c9 09 b6 6d dd ca 17 be f0 79 9e fa cd df 64 df 9e dd 74 bb 5d fe e6 9b df e2 d5 57 5e c1 7b cf d3 4f 3f c3 fe fd fb f2 82 5e 9f d2 ed 76 59 5d 6d 93 24 09 ce 39 a6 a7 a7 19 1a 1a a2 d7 eb f1 8d 6f 7c 83 c5 c5 45 f6 ec d9 c3 e3 8f 3f ce a1 43 87 08 c3 90 d5 d5 55 92 24 a1 5a ad 32 3e 3e 4e 92 24 f9 de c9 9a 0c 48 55 a9 d5 6a 0c 0d 0d 31 3c 3c cc fe fd fb 19 1b 1d 2d 2e 25 25 f3 4a a5 52 e1 c0 fe bb b8 e7 9e bb 39 7d fa Data Ascii: &'+q8gfa~'O1==?Ymf-G^B>x?$8uffse"N}G>T\6APDqmydt]W^{O?^vY]m$9o\|E?CU$Z2>>N$HUj1<<-.%%JR9}
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 01 54 09 3b 9d 4e d8 ed 74 43 55 0d 7d e6 9d 80 13 02 50 9c 66 29 81 38 26 26 27 69 0c 8f 50 8e cf 02 7f 8d 46 7c d0 98 1e 94 60 a8 2f 96 d3 8c 7a ad c6 50 bd 8e 2a 7d 03 af 3f 39 16 e9 4f 72 2d 5f cb 23 fb 79 4f f7 dc 01 b8 d6 28 2d b3 02 79 31 b0 07 1c ce b9 62 3b f9 2e 95 83 c5 b2 7c f3 b8 72 24 ec 0d 7b dd bc 83 fd b6 51 1e bf b6 33 37 5f ef 66 46 f5 bb 5d f7 3d 5a af 1f bd 2e cf c1 46 f7 61 63 bb 9f f2 c7 6b 36 ab 6b 13 7d 9d e0 44 8a 8b 2f 8f b5 97 85 e1 40 3e c8 4b 21 70 6e dd 40 b8 bc 26 c0 f7 cf fd e0 76 b3 2c eb ef 6f 19 d9 17 11 6a b5 1a b5 5a ed ba f2 9f 72 f9 32 8b 94 65 59 6e f8 67 19 e2 5c 31 ad 3a ff 2e 43 c3 0d 66 66 66 f0 59 86 06 79 64 5f 51 a7 e0 d2 d4 bb 6e 27 71 ad 95 95 b0 d5 6a 85 53 9b 36 f5 b3 6a 03 fa 7f c3 30 0c c3 b8 65 31 07 Data Ascii: T;NtCU}Pf)8&&'iPF\|`/zP*}?9Or-_#yO(-y1b;.\|r${Q37_fF]=Z.Fack6k}D/@>K!pn@&v,ojZr2eYng\1:.CfffYyd_Qn'qjS6j0e1
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 35 45 45 49 03 10 9f 47 f2 35 d7 b2 10 a6 82 73 19 d0 05 ad a0 5a c9 8d 33 59 eb f4 53 1a 5d eb 50 87 e0 10 75 50 ba 13 45 76 e0 d7 c9 a0 f1 3c 68 cc 0e 6a d3 83 20 c0 7b df d7 ae bf 1f d1 75 ce d7 fb 91 d2 80 cf 7f 1b f8 b1 af 59 12 9f 4b 83 56 83 fc 96 15 65 19 a1 66 20 19 9a e7 05 a8 d2 41 14 32 22 bc 04 48 26 64 59 42 e0 7a 54 a8 92 65 21 68 06 de 53 09 03 86 6a 15 54 33 52 3c ce 29 a2 01 ea 71 3d 3c 49 96 b9 6e a7 13 26 9d 6e 3e 07 40 35 76 48 1d a1 2e a8 17 25 14 25 bd e1 37 7a bf 1e 6a c3 30 6e 33 36 de 6c e4 9d 62 5e fd 07 a9 68 bf c7 b7 1f 78 af fc e3 54 75 f0 a1 6b 0e c1 6d 86 39 00 1f 00 d4 2b 69 af 47 9a a6 8e a2 27 ba 96 c1 7d 71 b9 5c c1 7b 82 30 0f b9 7a 5f 74 75 d1 2c 37 f8 9d 2b 24 3a 01 ae 30 26 9d e4 66 97 68 0f 75 01 19 21 01 f9 72 5e Data Ascii: 5EEIG5sZ3YS]PuPEv<hj {uYKVef A2"H&dYBzTe!hSjT3R<)q=<In&n>@5vH.%%7zj0n36lb^hxTukm9+iG'}q\{0z_tu,7+$:0&fhu!r^
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: f2 6d 15 8a ec 01 20 ca 40 ef a0 f7 f6 c8 0c 18 e9 49 92 f0 9d ef 7c 87 93 27 4f 22 22 cc cc cc f0 f1 8f 7f 9c 30 0c f9 de f7 be 47 bd 5e e7 c9 27 9f 24 8a a2 fe 7a ad 56 8b ef 7c e7 3b a4 69 ca e3 8f 3f ce f2 f2 32 63 63 63 8c 8f 8f 13 04 41 3f 03 d0 6c 36 f9 fe f7 bf 4f b3 d9 e4 33 9f f9 0c 13 13 13 9c 3c 79 92 e3 c7 8f f3 e0 83 0f 32 33 33 c3 eb af bf ce a5 4b 97 78 e0 81 07 98 9e 9e ee 67 16 4a 83 7e a3 d4 e8 46 19 85 41 27 c0 39 c7 d2 d2 12 df fe f6 b7 99 9c 9c e4 89 27 9e b8 66 bb d7 ed e8 f3 2b 4e ef 6e 94 c8 48 ff b5 5c f3 a5 52 b6 fd cc af db 54 1c 8b 99 e3 7b 17 3c 3f 3b 15 70 72 a1 8e 64 11 5b 5d 9b 54 8f e2 75 8e 38 aa 83 4c e1 bb 5b 38 ba 38 cc 99 5e ca a9 14 9e dc 95 b1 7f 04 82 30 7f 6a b9 a2 8b 90 97 10 f1 82 f3 79 86 4a 5d 8a 90 86 81 12 Data Ascii: m @I\|'O""0G^'$zV\|;i?2cccA?l6O3<y233KxgJ~FA'9'f+NnH\RT{<?;prd[]Tu8L[88^0jyJ]
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 4d 47 46 46 3a 93 e3 13 9d a9 a9 c9 f6 ee 5d bb db 07 0f 1e 68 1d d8 bb 77 61 7c 6c 64 b9 12 86 cb aa c4 aa 1a 39 e7 5a a0 2d 24 9f 8e ee f3 59 29 83 05 c3 c6 2d 82 39 00 1f 70 3c b9 90 59 25 ef f4 9f 77 e0 49 0a 63 2c 46 24 c4 13 f0 c6 e5 8c 3f 79 fa 2d 5e 7d 6b 91 cf 3f ba 87 e1 46 84 92 22 84 f4 5c 48 b3 07 17 66 57 59 59 5d 66 72 ac c2 d8 68 4c 27 01 97 a6 4c d6 02 02 e7 48 33 01 cd f2 9e eb 2e 77 43 32 55 d2 d4 83 66 84 ce e1 5c d1 0c 34 70 79 ef f7 d4 e7 f7 b6 e0 bd 8f fe 6f 2c f0 85 5c f7 3f 35 35 c5 ae 5d bb b8 e3 8e 3b f8 ca 57 be c2 89 13 27 a8 54 2a 88 08 e7 ce 9d e3 c0 81 03 dc 7f ff fd fc 97 ff f2 5f a8 56 ab 0c 0d 0d e1 bd e7 c1 07 1f e4 de 7b ef e5 a3 1f fd 28 93 93 93 34 1a 0d ee bc f3 4e 5e 7c f1 45 7a bd 1e b5 5a ad af ff 07 a8 56 ab 3c Data Ascii: MGFF:]hwa\|ld9Z-$Y)-9p<Y%wIc,F$?y-^}k?F"\HfWYY]frhL'LH3.wC2Uf\4pyo,\?55];W'T*_V{(4N^\|EzZV<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49773	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:33 UTC	630	OUT	GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:33 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:33 GMT Content-Type: image/png Content-Length: 210505 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-33649" expires: Thu, 01 Aug 2024 11:35:07 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 212666 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2OplZaZukZU6xAbtZNSMdEbX4cCNvBjRwVRwswWuBjPuZCxlYkyf68zWUHs4f%2FYL7IvDtFIOSoJJk52sEU1tWKxv5fbK7wVraCiPkoOOfrbrWSfrPfBFshp4%2BAO87W2MLYYtel4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca7faefc34d-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:33 UTC	594	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 00 00 00 02 00 08 06 00 00 00 35 f6 0b 3a 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 7b 90 64 d7 5d e7 f9 39 e7 9e 7b f3 59 59 59 cf ae ea 87 5a 8f 6e b5 ba 25 59 92 6d 2c 21 5b 33 c2 96 90 31 f6 1a 83 c1 60 bc 0b c4 10 8b 63 82 60 86 88 65 07 83 83 08 c0 1b cb 10 0e 33 1b 6b 22 bc 1b 03 bb 2c 31 66 d9 c1 58 8c 0d 36 8b 63 90 2d 63 ec b5 65 a9 f5 ee a7 fa dd f5 ae ca 77 e6 bd f7 9c b3 7f dc 7b b3 b2 aa ab fa 6d f5 eb 7c 22 b2 32 f3 66 de 9b 37 4f 9e ac fc fe ce ef 05 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 Data Ascii: PNGIHDR5:pHYs+ IDATx{d]9{YYYZn%Ym,![31`c`e3k",1fX6c-cew{m\|"2f7Op8p8p8p8p8p8p8p8
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 5c 25 06 e2 fb 07 85 7d 26 f6 8b e9 75 39 bd 5d 24 31 06 32 af c0 7a 6f 01 e7 b9 cf c0 fd ab c1 f5 20 32 dd 39 5c f8 f5 af f5 f9 c1 e5 9d c3 e0 aa fe a0 f0 5f 7f 69 a7 97 f5 46 41 ec 8c 00 87 c3 e1 b8 ba a8 0b 3f c5 e1 70 9c 8f 75 ab fe fd d5 7e 6b 6d 51 60 cb 16 ca 60 2b 42 88 0a c8 4a 1c c7 e5 6e b7 5b 0e c3 b0 50 af 37 83 7a a3 ae 96 96 96 d4 ca f2 8a ac d5 1a 74 7b 3d d9 ee 76 64 18 86 b2 d3 69 11 c7 b1 d4 5a cb 38 8e 11 42 48 8b c5 18 8b 10 48 6b 2d d8 f3 9d dd 05 6c 04 21 c0 da eb 41 58 c2 f5 21 70 c1 9d c7 9a d7 b7 18 ac b0 88 81 f5 22 0b 60 2d 16 50 4a e1 2b 85 90 02 29 25 4a 29 82 20 47 a1 90 37 f9 7c 9e 52 b1 44 75 a8 62 c6 aa 23 f1 d4 d4 54 5c 28 15 ba f9 5c ae 93 cf e7 bb f9 7c be 29 a5 68 63 6d 13 68 22 c4 ca c0 ed 36 88 76 f2 52 d6 85 04 39 Data Ascii: \%}&u9]$12zo 29\_iFA?pu~kmQ``+BJn[P7zt{=vdiZ8BHHk-l!AX!p"`-PJ+)%J) G7\|RDub#T\(\\|)hcmh"6vR9
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 4a 04 36 a9 c4 22 64 e2 1c 10 26 31 06 ce ab 7b 04 86 08 84 e6 56 76 f6 5d c9 3b b7 57 7a 80 eb 80 2b 7f 0f b6 9f 4c 9e 19 a7 83 2e 85 cc 58 cd 1e cf 2c 85 e4 af 41 22 f1 44 80 15 16 83 06 84 14 16 b4 b6 c6 18 4c 6c 42 15 46 b1 ac 37 db aa d1 ee ca 7a a3 15 34 9b 4d d5 68 b6 54 ab d5 96 f7 ee db a7 ee dd 7b 4f 50 2a 15 95 01 84 10 52 60 a5 b5 49 38 10 2e 39 d8 e1 70 38 2e 19 67 00 38 1c 17 49 1a f3 9f 89 ff 00 4b 99 24 de 7f 6a 65 a5 b6 f5 b9 ef 3d bf e3 b5 03 af dd b6 b0 b0 30 79 fc c4 c9 d1 63 27 4e 54 17 6a f5 72 6c 4c 3e 8e 23 65 ac 91 71 a8 95 d6 9a 74 91 94 58 6b 80 24 79 32 0d b3 b0 de 40 b8 45 9a bf 2b 84 00 9b 09 2c d2 db e9 ea fe 05 a3 80 9c 30 ba 22 6e f0 e1 13 5c 0d 2f 46 16 7a 96 dd 1c 1c 14 8b 4c 27 a6 94 62 e0 b9 49 b9 da 6c ae 1b 63 10 32 Data Ascii: J6"d&1{Vv];Wz+L.X,A"DLlBF7z4MhT{OP*R`I8.9p8.g8IK$je=0yc'NTjrlL>#eqtXk$y2@E+,0"n\/FzL'bIlc2
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 5f 19 9f 9f 9f 1f 3f 7e e2 f8 e8 dc dc 5c b5 db eb 15 3b bd 5e 5e 6b 2d a5 e7 c9 48 c7 68 6d 89 c3 2e 3a 0c 79 eb 43 0f f2 2b bf f2 df f3 c1 1f 7f 1f 43 a5 22 c6 80 d1 69 f0 82 00 30 58 9b 34 fd ea f7 02 e8 af 61 4a 2e d7 00 b8 95 c3 ff 33 ce 19 82 f5 1b 2e 20 8e 6f 8a 10 aa 2b 9c 07 e7 d5 ff 69 af 04 b1 be 2a 6d 3a 87 ad b0 69 a9 50 40 0a c4 40 3f 8b a7 de fd 38 fb f6 ec e1 af fe fa 6f f8 b3 3f fb 73 8e 1e 3d c2 f0 c8 28 58 43 14 59 29 a4 24 0c 43 25 a5 90 c6 78 f2 d4 a9 d3 a6 94 cf 9b 42 3e 08 5f 7d f5 d5 ee 63 8f 3d b6 ec 79 aa 69 ad 6d 5a 6c 5b 20 da 90 75 0e 76 46 80 c3 e1 70 6c 86 33 00 1c 8e cd 49 43 7f 6c 00 a2 08 94 e3 38 1e 3d 73 e6 cc f8 89 93 27 b7 cc cf cf 8d 9f 39 75 ba da a8 37 ca a1 31 f9 5e d8 53 b1 b5 32 69 df eb 13 c7 21 a6 d5 e6 dd ef Data Ascii: _?~\;^^k-Hhm.:yC+C"i0X4aJ.3. o+i*m:iP@@?8o?s=(XCY)$C%xB>_}c=yimZl[ uvFpl3ICl8=s'9u71^S2i!
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 13 03 96 f7 3c f1 04 3f f2 ee 7f 89 90 e9 2a aa b5 6b 44 7d 26 d2 07 3b ac 66 db a3 28 a2 5e af 13 c7 31 d6 1a e6 e7 17 38 70 e0 20 f5 7a 33 f5 02 24 2b fc 51 14 f2 fa eb 07 38 7d fa 2c c6 18 96 96 96 38 78 f0 10 87 0f 1f e1 f4 e9 33 84 61 78 0d 86 ed fa 22 d6 9a ef 7c 7f 3f ff db ff fe 1f 39 7c f8 08 43 43 43 0c 95 4a e4 82 80 44 57 7a 08 04 cf 7f ff 39 3e f3 1f fe 17 4e 9e 99 49 cb cf 67 a1 30 f6 82 dd 96 af 17 32 71 bf 3e 04 08 e8 cf b7 13 27 4e b0 b8 b8 98 bc ef f4 f9 d9 7c 8b a2 08 80 7a a3 c1 a1 43 87 58 5c 5c 44 4a 49 b7 db e5 f0 e1 c3 9c 3e 7d 06 80 4e a7 cb ec ec 1c cd 66 2b 49 77 91 82 d4 c9 90 8c 99 d6 1c 3d 72 94 bf f9 d2 97 f9 de f3 2f 10 c5 31 52 78 fd d0 22 6b 93 31 15 e9 7e 83 06 84 b1 96 91 ea 08 4f 3d f1 04 f7 df 7b 1f dd 6e 07 a5 3c a4 Data Ascii: <?*kD}&;f(^18p z3$+Q8},8x3ax"\|?9\|CCCJDWz9>NIg02q>'N\|zCX\\DJI>}Nf+Iw=r/1Rx"k1~O={n<
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: e4 db ed 76 a1 d1 68 14 bb 61 2f 1f c6 51 10 eb 58 09 84 34 e9 2a ab 00 8c d1 6c dd be 95 db 77 6e c7 f7 3d 8c 5e 4d 24 1d 64 23 2f c0 9a 44 cc 14 63 2c 4a f9 2c 2d 2d 71 f4 e8 1b 6c dd 3a cd f8 f8 28 30 da 4f f6 7d e5 95 a3 e4 72 39 6e bb ed 36 3c cf 63 66 66 96 38 d6 8c 8c 8c f4 73 0e 6e 65 82 20 47 a1 58 62 66 76 1e e9 29 7c df 4f 64 bd 31 28 e5 61 8c 4e 3a b2 61 f0 3c 8f 89 c9 49 94 1f a4 fd 14 2c 62 4d 91 cb eb 97 8d 42 7e 00 8e 1d 3b 46 bd 5e a7 d7 eb 51 a9 54 30 03 a1 42 52 4a b4 d6 49 c9 d9 d4 30 d0 69 f2 ef e0 71 ad b5 fd 9c 01 b0 8c 8f 8f 31 3c 5c a1 d3 e9 d0 68 34 38 71 fc 04 53 d3 53 0c 0f 57 e8 1b 4d 24 22 5f f6 7b d8 ad f6 bc b0 24 15 ab 3c 2f 4b 60 4f c6 58 a6 c7 b7 d6 60 8c c0 f7 14 fb f6 de 43 b9 5c 62 a5 1b 82 5d ad 96 15 1b 43 14 6b da Data Ascii: vha/QX4*lwn=^M$d#/Dc,J,--ql:(0O}r9n6<cff8sne GXbfv)\|Od1(aN:a<I,bMB~;F^QT0BRJI0iq1<\h48qSSWM$"_{$</K`OX`C\b]Ck
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: fc f5 3f 96 99 11 e9 fb 3e 3b 76 ec 00 ce ed 10 bc 3e 51 d8 5a 4b a9 54 a2 54 2a f5 b7 4f 4e 4e f6 93 7c e3 38 a6 5c 2e 73 cf 3d f7 ac 39 1e 24 f3 76 7a 7a 6a 4d 4e 8b ef 2b a6 a6 b6 ac 29 3f 9b ec 63 d3 30 25 81 52 1b f7 9f b4 fd bf a2 df a5 38 08 02 26 27 b6 e0 21 88 31 fd ee d8 32 79 53 52 1b 23 23 1d ab 38 8e 54 a7 dd c9 bc 76 f2 06 49 dd 70 38 1c 8e 6b 86 33 00 1c 8e 0b 60 52 21 84 35 18 2c 56 80 f4 04 c6 5a 99 e5 37 da 34 19 b8 32 54 06 52 31 63 2f 1c 3d b2 be 33 70 bf 3e fd c0 b6 c1 50 a1 cd ca 87 66 64 a5 1f b3 84 ce d5 e4 cd 5b 13 01 44 c6 52 2e 97 79 ff 53 3f ca 43 0f 3c c0 8b fb 5f a4 d1 a8 23 84 64 db d6 ad ec dd 7b 0f 63 23 55 90 02 9d d6 b9 37 18 c0 5b 93 c0 7a bd 32 f8 79 0f 7a 93 60 ad 01 90 25 fb 0e ee 07 ab 06 68 16 8a 26 a5 ec 27 05 2b Data Ascii: ?>;v>QZKTT*ONN\|8\.s=9$vzzjMN+)?c0%R8&'!12ySR##8TvIp8k3`R!5,VZ742TR1c/=3p>Pfd[DR.yS?C<_#d{c#U7[z2yz`%h&'+
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 96 4f 34 39 bb 74 9c d3 73 27 89 0f 9d a2 bc d0 c0 4e 55 18 bf 73 07 f7 ed d9 ce db 1e bc 8b bd fb 7e 98 e1 b1 ad f8 9e 42 9a 02 42 4a ac d0 08 eb 81 2e a1 04 48 99 78 47 8c 02 61 2d 18 bb 66 85 78 a3 1c 86 ec 36 ac 1a 05 59 8d f8 6c db e0 3e d9 b6 f5 b1 e7 1b 79 19 32 83 41 ca f5 86 c0 ad cd 8d 33 02 a9 ff c9 4a a4 95 49 b3 30 52 2f 8d 95 12 84 b2 58 05 76 c0 00 10 83 c6 40 8c 0b 77 85 6b 60 04 5d 83 46 6c 1b be 47 f7 7d 77 38 ce c5 19 00 0e c7 a5 33 98 9d bb 26 96 e1 7a 5b 39 b6 d6 43 18 d2 f3 b4 d8 38 c2 53 1e a1 d1 ec 7f e5 30 7f fa 5f 9f e6 f5 d3 87 10 67 0d c5 56 91 7a 34 c3 d9 85 13 ec a8 49 aa 75 38 dd 6c 32 d7 e8 10 ae 9c 26 67 67 f1 d4 30 3b 77 05 4c 4d 8d e2 ab 00 ac c1 0a 0d c6 43 d8 24 01 da 23 f1 32 64 99 05 92 55 d1 af b5 a6 56 ab a1 94 a2 Data Ascii: O49ts'NUs~BBJ.HxGa-fx6Yl>y2A3JI0R/Xv@wk`]FlG}w83&z[9C8S0_gVz4Iu8l2&gg0;wLMC$#2dUV
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: fc 20 a5 52 89 e5 e5 65 7e ee e7 7e 8e f1 f1 71 5e 7d f5 55 be f4 a5 2f 51 2c 16 09 82 80 cf 7c e6 33 3c f9 e4 93 68 ad 79 fa e9 a7 d9 b3 67 0f 5f fc e2 17 f9 e2 17 bf c8 4f fd d4 4f f1 cc 33 cf d0 68 34 f8 d0 87 3e d4 6f 7c 26 a5 a4 50 28 d0 6c 36 f9 fc e7 3f cf 97 bf fc 65 9e 78 e2 09 be f1 8d 6f 70 f6 ec 59 3e f9 c9 4f b2 73 e7 ce 35 63 0b b7 4e b7 e4 0d 67 63 96 5b bb 5e d0 db 01 43 36 bb ee 1b 4b f4 8f 94 54 60 4a 9a ab 65 55 9b b4 36 d8 b4 1f 81 c5 62 4d d6 03 e0 f2 ce db 53 1e ad 56 93 5c 21 4f 9e 24 84 2b f9 bc 3d 82 c0 97 be f2 94 10 22 1f c5 71 b9 d3 ed 8e d6 6a f5 d8 f3 64 de 42 55 08 d1 05 11 0a b1 26 24 e4 52 d1 97 b1 cf f5 2c e6 df 2c a1 7e d5 f7 11 03 37 b2 90 4b 29 84 c9 be ff 52 4a 23 92 fb d9 6a ff 46 a2 bf 49 e2 15 6a a7 f7 db 03 8f 1b Data Ascii: Re~~q^}U/Q,\|3<hyg_OO3h4>o\|&P(l6?exopY>Os5cNgc[^C6KT`JeU6bMSV\!O$+="qjdBU&$R,,~7K)RJ#jFIj
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 63 74 3a 1d 6e bf fd 76 7c df a7 d3 e9 50 2c 16 d9 bf 7f 3f 7f f5 57 7f c5 53 4f 3d c5 c9 93 27 f9 a7 7f fa 27 de ff fe f7 f3 e0 83 0f f2 cc 33 cf b0 77 ef 5e 16 17 17 d9 b2 65 0b c3 c3 c3 d4 6a 35 ba dd 2e a5 52 89 a5 a5 25 46 46 46 78 e8 a1 87 f8 e6 37 bf c9 f6 ed db 29 14 0a 58 6b fb 09 c6 83 63 7a eb 94 00 b5 c8 2c 40 6b a0 5b b0 b5 36 a9 a7 9f 19 92 32 69 9e 6b ac a5 d9 68 b0 b0 b8 c0 f7 be ff 7d 9e df ff 32 67 ce cc d0 ed 74 e8 f6 7a b4 db ed f4 76 97 6e b7 87 8e 63 e2 38 09 03 d2 5a 27 1d a3 a5 44 0a 81 b1 06 6b c0 9e 67 95 7f 7d c2 f1 46 8f eb b4 58 4b df 00 90 89 01 e0 4b 0f e5 7b 2a 50 8a 20 f0 55 ce f7 03 df 0f 8a be 52 46 29 65 84 27 4d d2 ed f9 92 12 bd 7f d0 95 61 6e c6 2a 3c 57 f8 5a e7 71 11 91 78 89 3c 40 c8 34 45 25 cd 53 11 02 3c a5 8c Data Ascii: ct:nv\|P,?WSO=''3w^ej5.R%FFFx7)Xkcz,@k[62ikh}2gtzvnc8Z'Dkg}FXKK{P URF)e'Man<WZqx<@4E%S<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49774	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:33 UTC	621	OUT	GET /wp-content/themes/tgtheme/img/anzhuo.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:33 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:33 GMT Content-Type: image/png Content-Length: 1376 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-560" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609575 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XqfpNCB3SFktbW8RwhTHy5mnn3vxB%2BvJRTV3K6uw8TmEM%2FZFd7owIcjs%2BJOODDsiPpio9unaCdbtKh3k%2BodyQqfkCz%2BbXRjOteWK5lPa4MXMy9wG4Z16lB3l%2FSXJMECm0KoIHAc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca83c804204-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:33 UTC	590	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 00 18 08 06 00 00 00 fe be 0d 4b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRKtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:33 UTC	786	IN	Data Raw: 36 41 35 43 35 33 39 30 31 31 45 45 41 44 41 46 43 32 42 33 30 33 42 32 37 45 33 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 32 38 44 36 41 35 44 35 33 39 30 31 31 45 45 41 44 41 46 43 32 42 33 30 33 42 32 37 45 33 32 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 32 38 44 36 41 35 41 35 33 39 30 31 31 45 45 41 44 41 46 43 32 42 33 30 33 42 32 37 45 33 32 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 32 38 44 36 41 35 42 35 33 39 30 31 31 45 45 41 44 41 46 43 32 42 33 30 33 42 32 37 45 33 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 Data Ascii: 6A5C539011EEADAFC2B303B27E32" xmpMM:DocumentID="xmp.did:328D6A5D539011EEADAFC2B303B27E32"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:328D6A5A539011EEADAFC2B303B27E32" stRef:documentID="xmp.did:328D6A5B539011EEADAFC2B303B27E32"/> </rdf:Description> </rd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49775	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:33 UTC	383	OUT	GET /wp-content/themes/tgtheme/img/jiandan.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:33 UTC	787	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:33 GMT Content-Type: image/png Content-Length: 11995 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-2edb" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609575 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IiJniHNRWQ%2BCUi6jO9wFT%2Fu6GShvRj3KXrYfJKimdFCWu0%2B%2FRki6l79vwbyvTTPyuGjA%2FBf%2F6HUTX0YdEJ2SoGjbrs3eaqW8EIHl5LNK2CNPF6%2Bw%2BWvlxM%2BL6ypu9QiG3cl0k3s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca84b832395-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:33 UTC	582	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 63 00 00 00 69 08 06 00 00 00 2e a0 9d f3 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRci.tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 38 38 38 31 39 31 39 34 46 33 46 31 31 45 45 42 42 37 45 46 34 43 43 31 44 39 36 35 38 35 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 38 38 38 31 39 31 41 34 46 33 46 31 31 45 45 42 42 37 45 46 34 43 43 31 44 39 36 35 38 35 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 38 38 38 31 39 31 37 34 46 33 46 31 31 45 45 42 42 37 45 46 34 43 43 31 44 39 36 35 38 35 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 38 38 38 31 39 31 38 34 46 33 46 31 31 45 45 42 42 37 45 46 34 43 43 31 44 39 36 35 38 35 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c Data Ascii: 88819194F3F11EEBB7EF4CC1D96585D" xmpMM:DocumentID="xmp.did:C888191A4F3F11EEBB7EF4CC1D96585D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:C88819174F3F11EEBB7EF4CC1D96585D" stRef:documentID="xmp.did:C88819184F3F11EEBB7EF4CC1D96585D"/> </rdf:Description> <
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 78 82 6a ab e6 1a e8 3a 3a 4d 5e 4c 93 b0 1b aa ff 23 50 83 37 9b c0 52 b5 a5 8c 81 0f 6e af a6 2b ce 6b 6b 0a 2b 12 f2 6d 8e 77 1c 89 c0 eb 48 6e 37 8e 01 41 1f 5e b5 84 f0 de 3a 04 35 83 40 f4 b8 13 ac e7 b1 b0 69 7b f9 6e 86 de 54 c6 e4 15 55 ff bf c2 d9 b9 82 c4 ff ac fd d8 6d 83 6e f9 06 74 9b d0 9a 00 6c 2f 99 6b 49 bc 6d 98 be 41 cc 5c 96 82 6f e7 f8 da b1 04 86 e8 ce 3f 31 6a 9a 27 a9 e6 f0 a4 df 32 64 3c 11 dd e7 3e 0f 6a e9 60 71 89 41 d1 bb a1 76 7d 18 aa f3 34 ba bf 0f d8 8f 6b de 06 3d fb 51 e8 ec c9 f4 b2 ca d0 49 32 d9 5b 46 18 98 06 86 e9 e2 6b 7b 77 1c 43 3d ef 60 bc 97 e3 6f 8c 8d 20 e1 9d 76 02 71 e5 b0 75 cd 07 9d 63 1b 88 49 a0 d0 73 4a d3 50 17 1f 86 da 79 16 a5 e4 d3 f6 a3 c4 12 e8 59 0f 53 8d bd 01 e8 f5 a1 c3 32 dc 2b 47 4c 90 aa Data Ascii: xj::M^L#P7Rn+kk+mwHn7A^:5@i{nTUmntl/kImA\o?1j'2d<>j`qAv}4k=QI2[Fk{wC=`o vqucIsJPyYS2+GL
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: b3 8b f8 f4 3f f9 d3 06 42 b6 4d 64 96 7f f8 98 8f 93 4e 29 e1 89 ad 01 bc 55 91 a9 8b 88 d5 e3 2b 0f 57 4d 9d 6e bc 28 1a 22 87 7e b3 c4 38 3a 87 a3 17 e8 09 71 68 1f 6e 25 10 6f 7f 5b 69 ca af d4 31 02 ea 98 a9 50 5b a3 30 42 c1 ed a6 ca ea ed 9d 4c c0 ce 4e 3d 2d dc 51 eb e0 2f df 5a c4 93 4f 4e 46 4d 26 04 e7 cf 56 3c a6 c2 e8 08 b0 b3 47 4f 09 56 d7 4e 8d cf 5e 5f c6 7f 7f 34 82 fb 80 47 e1 36 df 39 ed 70 c1 58 69 b3 c9 1a aa 31 3c 3a ae e3 14 67 fa 95 1b fc 49 6f bf e1 0d 2e de fd 4e 0f a7 9d e8 60 e6 8c 38 85 49 8f 6f 90 06 7b 3d 39 fb be fb 23 7c ff d6 00 8f 3e 16 e1 ac b3 1c 7c e8 cf b9 a3 c1 d8 90 ef c7 71 12 40 da 66 ec c9 6d ab 56 39 b8 f6 9a 04 5e c5 fd cc 97 42 92 94 3d 56 2f 81 5f b7 39 c2 4f 7f 19 61 f5 6d 21 36 6d 1a 07 f0 94 53 78 a0 9a Data Ascii: ?BMdN)U+WMn("~8:qhn%o[i1P[0BLN=-Q/ZONFM&V<GOVN^_4G69pXi1<:gIo.N`8Io{=9#\|>\|q@fmV9^B=V/_9Oam!6mSx
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 50 2a b2 f5 a4 f0 7f 64 8c 7b ca 76 0d b5 52 65 f3 fa e1 d1 9b d0 5f ae 45 96 8e f8 69 1d d5 a8 4d 3b 58 d9 96 c4 f6 a1 00 db 07 ca e8 1d 8d d0 97 af 45 8f 7a 13 36 25 de 84 a6 44 17 da 12 b7 61 4e 72 35 66 7a 77 13 94 5c 4c 3c 8f 0f 89 c3 07 22 8a 8d e5 7c 07 a3 0f 86 78 ea 9d 65 14 e9 31 b9 8b 81 79 ed cd 98 39 ab 91 d2 20 6b 33 f6 01 84 bc d7 b7 0b b8 e0 75 c0 b9 17 a3 fa bf af c7 ca f2 13 d8 e2 a5 30 50 43 e9 ba 3b c0 d0 bd 01 aa 68 43 d2 22 21 54 57 3e 63 8f dc 06 6d 54 9a f0 57 d7 cd 0c 2e ff 2b 89 34 a5 52 ef b4 86 df d8 d8 f2 84 75 8a 1a 43 53 4a c6 cb ff 79 03 a2 44 0d 5a 7b 7e 0a b7 44 e9 f1 12 d0 4e 62 a2 82 a3 9e c1 9b 25 a7 af e8 9e c9 aa 54 e5 95 b0 3d ff 66 3c 9c ff 28 74 39 8f d3 e7 26 31 bb de 2a 52 97 9c d2 98 a5 6b d8 98 40 47 83 87 fa Data Ascii: Pd{vRe_EiM;XEz6%DaNr5fzw\L<"\|xe1y9 k3u0PC;hC"!TW>cmTW.+4RuCSJyDZ{~DNb%T=f<(t9&1Rk@G
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 2f 0d e9 7d 74 cd 5b 79 6e 8b 64 8e a1 05 4d 2d 75 fb f7 98 0e d6 4f 16 26 91 72 4e 91 06 b3 84 99 b6 2c 1d 1a c9 fc ea ba 02 fe b7 2b 85 21 be 7f 5e 6b 02 ef 59 92 c1 96 0d 7d 70 f9 f5 cc 2c 7b 6c 2d 0d 07 64 ed df b8 b3 f8 d0 c1 4c 2e bd d2 1a 6c bc 4d 6a 0f 54 6e 14 2d 94 d6 59 0d 09 cc 5f 98 41 43 66 62 9c 98 d8 23 52 30 0b 7b 23 3b 28 30 b4 05 da 78 34 32 fc 18 00 79 94 d7 45 7e a9 6c de b7 ae b4 53 a9 fa 21 30 09 47 3e 77 f8 99 03 8f c0 24 a8 c0 6a 78 3d c3 61 35 1e d3 97 60 69 f9 0c e8 6b bf 87 7e 6a af d4 49 54 e7 35 55 98 37 a7 19 a9 6c 6a dc 50 2b 75 64 62 96 ca c9 c9 fc 48 92 27 51 72 70 57 4f 09 b7 6f cd e3 b1 dd 3e 4a bc a6 d3 68 9f 3e 71 56 13 d4 c0 30 7a fa 42 64 9b 1d 54 2d 95 20 52 9b d2 57 bd db b3 49 56 bb bf 5f 4d 07 8c 37 c1 16 5a 9d Data Ascii: /}t[yndM-uO&rN,+!^kY}p,{l-dL.lMjTn-Y_ACfb#R0{#;(0x42yE~lS!0G>w$jx=a5`ik~jIT5U7ljP+udbH'QrpWOo>Jh>qV0zBdT- RWIV_M7Z
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: ec 42 ec 7e f2 3e cc de fd 2b d4 ed 7c 18 5e 69 14 51 73 2d 1a 72 8f e3 fc 9f 5e 65 55 d1 1f c8 9a f2 6c 3c 47 a0 f7 4c f8 f7 68 d4 5f ec a0 ee 74 07 03 8f 44 d8 94 e8 c1 52 cf 65 ac 52 85 45 0d 0e 3e 77 aa 87 88 94 17 c6 15 30 04 08 71 0e ca 7a dc 44 48 79 ae 51 a9 c6 c4 c4 92 ec 4e 30 d8 7b bb 86 7e 1c 95 53 12 e0 44 18 1a ca a3 7b f7 20 06 fa f3 f0 b7 89 2b ae 30 e7 df 13 68 ff 80 67 e7 da 49 a0 68 4d c6 66 69 ed fa 0c 71 f1 be 72 58 60 84 4e 12 49 72 c3 ca f5 d7 d9 4a eb 04 86 aa 87 d7 7f 29 53 1e fc 8b 01 d4 9b 80 6f bf 60 28 72 70 75 0b 4a 3d 9b e0 d1 3f 5f 93 6f c2 03 33 cf 86 bf fc 6c a8 e0 c3 38 25 77 23 4e df f9 7d e0 f1 bb 51 76 69 7f 6a db a0 7f 2c d7 4b 43 78 4a d1 fa e7 7b e3 4b c1 72 5a 14 16 5e 9f c2 13 17 15 51 78 56 e3 29 bd 13 ed f9 66 Data Ascii: B~>+\|^iQs-r^eUl<GLh_tDReRE>w0qzDHyQN0{~SD{ +0hgIhMfiqrX`NIrJ)So`(rpuJ=?_o3l8%w#N}Qvij,KCxJ{KrZ^QxV)f
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: d7 2e 5c 11 64 ea 9b 76 cc 7a 4b 8f a3 43 77 a8 44 75 a4 13 a8 a1 b6 9a bd e3 27 58 1a fe 07 66 be f2 ce f8 a6 09 1e 09 45 af a2 d9 37 06 39 b8 a3 da 96 88 d2 0e b8 97 8e da c8 54 3c 81 28 67 ea ac 54 07 9d 75 6f 0e f4 ce 87 e0 df 78 3a 9f 37 99 9a 27 d3 a9 a7 a4 26 1b f3 fd 94 13 99 b9 70 31 67 59 65 83 cd c4 3e dc 95 28 e6 5d 3f 2e 03 2d 4e 58 07 88 69 16 b2 98 c8 92 4c f6 a3 6a 53 78 60 56 b9 26 2a 65 21 e6 1b d2 e5 f3 b3 1c 8f ec 57 32 1c 1e 35 9f ae 36 0e c7 cb d6 7d 1a 27 3e 7a dd 58 75 f6 be 4a 60 78 51 7f dc 79 e5 05 ee b6 99 ed 68 62 d4 79 42 dd ff 60 d9 23 5f c2 8c fb 7e 65 0a 7f a3 1c 0d d8 39 bc ba 46 ee 68 20 b2 89 32 69 ab cd 93 34 6d 80 08 a0 f4 d7 10 6f 49 4b 40 e0 32 a6 f0 a5 09 ca 47 28 e2 df a6 1d 38 0d ce a2 f3 18 34 dd 43 a9 99 69 3b Data Ascii: .\dvzKCwDu'XfE79T<(gTuox:7'&p1gYe>(]?.-NXiLjSx`V&*e!W256}'>zXuJ`xQyhbyB`#_~e9Fh 2i4moIK@2G(84Ci;
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 0e c3 bb 9c ee fd cb 4a 26 19 2a 49 44 61 b0 60 75 0d 1d 13 cf dc de 48 da 7e 98 d6 1f 96 e1 e4 df 2b a7 03 86 28 f0 0b c7 4c c0 2c ff e0 f5 85 9a c0 3d 07 72 51 93 91 f1 bc e4 46 54 4a ee 52 46 30 9c 79 c1 d1 6b ea 75 38 31 86 b6 9e a6 c9 73 51 4a dc d7 e4 e0 5d 9c b3 45 09 71 45 61 f0 a3 6a eb c4 08 1d 65 fe a3 34 16 cc ae 9a 0e 18 72 27 c9 19 a6 ec 9e 9c ad da e2 74 f6 73 a5 31 e4 a6 53 e4 18 f7 e5 45 eb 61 9c 95 87 43 3b 63 2e f2 78 69 4a 29 01 ae dc b4 a5 d7 b5 92 42 50 4c 38 50 13 99 0a 43 ff 96 5a d3 ab cb 91 55 60 e3 99 88 c5 d3 f1 a6 ce b7 77 cb b1 cd 84 4d 47 9d dc 73 18 7d 85 56 d7 3a 67 16 cc 9d 68 24 b3 ab 8b ea d8 77 6d f7 a1 0d 64 e6 cf 39 a9 08 b7 87 c6 fc 21 71 75 c9 cc 9d 1e 82 6f d5 1b 2d a3 6a c6 c4 bd 69 3a 54 3d 7d 6c 9a 53 3a ea 24 Data Ascii: J&*IDa`uH~+(L,=rQFTJRF0yku81sQJ]EqEaje4r'ts1SEaC;c.xiJ)BPL8PCZU`wMGs}V:gh$wmd9!quo-ji:T=}lS:$
2024-07-04 22:39:33 UTC	461	IN	Data Raw: ca 05 cb 05 15 ac b4 18 ce 49 c6 13 ef 19 bb 4e da 00 93 8d ec 9c ba 44 f3 99 09 2a c0 8b bb f1 cb 05 c7 b5 cf 7b 14 3f 8f f5 3d 9c 82 e8 13 d7 79 a8 09 6f a8 98 d0 51 7c 6e 72 5e 32 4a b1 3a cd 0b e7 bb 16 80 51 65 eb 5f 73 31 e1 fd 78 19 42 52 7a fa 46 e3 13 43 f6 b8 db 39 7e ca f1 3f 1c 3f 3f 22 41 fc 61 82 51 d9 5e 0e d3 64 15 97 72 2c 1d 23 4e a5 94 3f b0 9c 6f 00 8a 6c 75 b9 8a 57 88 6a 09 ea 13 f1 4d 52 04 10 99 da 4d da 7c 98 29 26 96 f6 39 1e 2a 6d 48 ad 54 39 31 0a 6e ac 56 02 8c d5 55 e9 30 96 b2 b1 f6 14 b6 8a 51 62 24 54 46 29 ae e3 95 e7 7e 7c 5e f1 ad 5a cd 79 c5 12 3c e6 8c d8 c3 c9 5e 1f 87 5d 71 f4 b3 f8 71 f4 88 66 54 8e 10 18 7b 03 23 eb d5 56 c1 de ec 49 e6 d1 67 4c e2 60 3d 01 ac 28 2e 52 0b ed a3 8e f6 c5 f5 7b b6 1e d4 13 88 a5 26 Data Ascii: IND{?=yoQ\|nr^2J:Qe_s1xBRzFC9~???"AaQ^dr,#N?oluWjMRM\|)&9mHT91nVU0Qb$TF)~\|^Zy<^]qqfT{#VIgL`=(.R{&

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49776	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:33 UTC	384	OUT	GET /wp-content/themes/tgtheme/img/zhongwen.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:33 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:33 GMT Content-Type: image/png Content-Length: 1482 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-5ca" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609575 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gK7mCoV9deHANSYRb5Mho7KzDgF01ZSbseWgjpMgbN7%2BFQiUiLgjPlbbkKLldsEoQvT%2BLwpkU8QS08C6hFp6wFOeLSOHmPy3s2YY2aT%2FF%2FVET%2F3AMWTzzNSNVoEignIokpGC1Sg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ca89cb35e76-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:33 UTC	592	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 18 08 06 00 00 00 e4 82 ed c5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:33 UTC	890	IN	Data Raw: 31 39 35 33 39 30 31 31 45 45 39 36 37 46 46 43 34 36 35 43 46 38 42 45 32 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 38 36 41 42 44 31 41 35 33 39 30 31 31 45 45 39 36 37 46 46 43 34 36 35 43 46 38 42 45 32 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 38 36 41 42 44 31 37 35 33 39 30 31 31 45 45 39 36 37 46 46 43 34 36 35 43 46 38 42 45 32 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 38 36 41 42 44 31 38 35 33 39 30 31 31 45 45 39 36 37 46 46 43 34 36 35 43 46 38 42 45 32 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a Data Ascii: 19539011EE967FFC465CF8BE2D" xmpMM:DocumentID="xmp.did:386ABD1A539011EE967FFC465CF8BE2D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:386ABD17539011EE967FFC465CF8BE2D" stRef:documentID="xmp.did:386ABD18539011EE967FFC465CF8BE2D"/> </rdf:Description> </rdf:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49777	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:33 UTC	622	OUT	GET /wp-content/themes/tgtheme/img/pingguo.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:33 UTC	768	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:33 GMT Content-Type: image/png Content-Length: 1282 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-502" expires: Fri, 02 Aug 2024 22:39:29 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 86404 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sSN58CY5blCuNBcNJzPVBdPH1tUEXz2nEzbDRHNHi0a4rCzB1gOGnCdaayYJz0eRVynkvne9fPgvvJ8BLQA14jy1bC3G2Zxj9V5uLPtsd94eO3Z%2BtvCI45UZqzOq4mzQVst2ygk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cab6aa841b2-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:33 UTC	601	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 18 08 06 00 00 00 fa 4b dd 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRKvtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:33 UTC	681	IN	Data Raw: 45 41 45 38 42 38 32 35 43 33 44 43 31 35 42 36 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 38 34 41 36 44 31 43 35 33 39 30 31 31 45 45 41 45 38 42 38 32 35 43 33 44 43 31 35 42 36 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 38 34 41 36 44 31 39 35 33 39 30 31 31 45 45 41 45 38 42 38 32 35 43 33 44 43 31 35 42 36 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 38 34 41 36 44 31 41 35 33 39 30 31 31 45 45 41 45 38 42 38 32 35 43 33 44 43 31 35 42 36 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a Data Ascii: EAE8B825C3DC15B6D" xmpMM:DocumentID="xmp.did:284A6D1C539011EEAE8B825C3DC15B6D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:284A6D19539011EEAE8B825C3DC15B6D" stRef:documentID="xmp.did:284A6D1A539011EEAE8B825C3DC15B6D"/> </rdf:Description> </rdf:RDF> </x:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49778	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:33 UTC	617	OUT	GET /wp-content/themes/tgtheme/img/d4.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:33 UTC	789	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:33 GMT Content-Type: image/gif Content-Length: 3422486 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-343916" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609575 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D0BoaVlTUozmX7%2Fn%2BRQKUom5wew5x1ZCo%2FIi8LYilhBontXc2YmcVdfM%2BfUdQ1ac5D4g7mLtWX%2FSPQq0CY%2FIWwmOCzTEHftI80ng728akiW%2BnXKVH63H3GdbxH63Z%2FcNgrhLT0s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cac49008c29-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:33 UTC	580	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 fe d8 20 7a 02 02 ff 5d 1f 20 7f a9 fa 90 16 ff 7b 17 fe d8 21 ae 06 06 ff ff ff 60 b5 b1 5f 02 02 9b de ff bd ea ff cf 35 02 00 92 44 02 69 37 93 8e 79 00 00 00 e0 db c7 7d 09 09 1a d5 71 fc ee 21 ff 00 00 ff b4 84 cd ee ff 60 bf e9 79 01 01 fe c6 1d fa 8f 15 bd ea ff fe cd 1e fe d3 1f fc a3 18 a9 05 05 7c 01 01 fd c0 1c fb 9c 17 9d 04 04 fa 95 17 fd aa 1a d9 3f 0a 96 04 04 8f 03 03 ff 79 15 d3 39 06 84 04 03 7f 03 02 fe fd fa ac e4 ff fe d7 1f fd b4 1b f5 53 18 e3 a3 4f a4 04 04 8a 03 03 fd b9 1c fd af 1a 3e 3e 3e 35 91 ac bd ec ff 59 af b0 f3 69 13 fb 58 1b ff f7 d4 43 9d ae df 4b 11 ff Data Ascii: GIF89a!NETSCAPE2.0!, z] {!`_5Di7y}q!`y\|?y9SO>>>5YiXCK
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: bd 5f 07 07 e5 cb 29 11 70 36 dd 9b 9b 78 c1 bd d8 d5 c6 dd ab 65 a3 41 0c a1 e0 ff fe e1 1f 7c cd a2 ed 9f 3e 40 40 40 fe e2 c1 60 10 0f cc 8d 1a c1 bd 25 06 a3 4f 87 a1 2c 74 96 2d bd 05 04 60 1a 19 fd ca 90 23 77 34 19 9b 55 ce 03 03 a5 64 57 f7 d3 21 e6 96 7c 84 99 8e a8 b2 27 6a 8f 66 f0 d1 22 cd 65 65 ec b7 ab 90 2f 0b b4 6c 11 fb d6 20 bb ab 57 d7 82 82 ec ad 97 f8 01 01 d4 c6 23 bb c5 b7 97 ab 28 ee 05 04 a5 9a 67 d9 5e 35 d7 bd 40 b2 8d 22 72 ad 97 37 7b 31 7a 1f 0f 97 7e 6b 59 b8 85 aa 58 0e ea 25 1a b0 cc c5 83 8c 72 fc b2 5c 9c 46 3d 40 90 5f ae e3 c6 a7 d7 e9 39 7b 52 7e 7e 7e 13 13 13 ab 13 0f 46 dc 8c 2e a6 65 c0 df cf 90 dc b4 2c 92 3b 9f dc f7 82 7d 25 25 d6 77 f2 c8 76 31 c6 71 a3 0b 05 5e 78 2b 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 Data Ascii: _)p6xeA\|>@@@`%O,t-`#w4UdW!\|'jf"ee/l W#(g^5@"r7{1z~kYX%r\F=@_9{R~~~F.e,;}%%wv1q^x+H
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 33 a4 b4 66 95 ad 69 89 e4 23 ce a4 98 1b 40 b2 45 90 91 79 1e 1f 0f c9 ae 48 a2 0a 6c 8b bc d0 d8 5e c5 b7 a6 cd 4f 92 09 44 a3 6b 2c 89 96 dc b8 91 8f 1d 24 d8 29 bd 74 b7 50 5a 88 4b cd 9a 5c d7 ce 86 4a 9c f9 f1 35 ac 2c 0b 26 21 43 c8 5e c6 92 5d b3 ec 92 e3 6c 69 80 0f a4 6b 75 7d 43 65 24 64 e1 0a 57 58 83 0b cd a2 24 30 83 09 16 dc a8 a0 97 ea a2 1c c5 50 e5 3b 66 1a 80 77 94 d2 1e e5 18 07 45 51 20 e0 9d f0 94 05 0d bd 14 82 1d 8e 86 9b 5d 19 66 63 44 50 ff 48 70 1e 13 5a bc a4 94 22 cc 69 80 25 52 ca 52 94 a3 9e 19 b9 90 07 78 3a 74 09 a2 68 d6 ce 5c b3 39 7c 4e 05 37 2d 60 21 38 6d 58 b3 80 52 8a 7d cc 14 1e aa 38 c9 ae 0a 9a d1 1a 0e 4d 29 02 a2 81 4d 54 95 60 8a a1 c1 9f 45 a5 e2 4d 70 26 6e 8c e9 0a 60 28 ef 98 bb 31 1a 11 8a ac 50 69 4a f3 Data Ascii: 3fi#@EyHl^ODk,$)tPZK\J5,&!C^]liku}Ce$dWX$0P;fwEQ ]fcDPHpZ"i%RRx:th\9\|N7-`!8mXR}8M)MT`EMp&n`(1PiJ
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 8e c7 7c 7b f7 85 68 47 68 76 d5 7a 44 d2 76 2d 88 6e 57 d8 18 1b 58 84 60 c6 31 37 28 37 78 57 7a 5e b2 80 2b 53 6c 88 27 0a 23 67 5a 16 d8 25 2c e8 7e cf 96 42 8d 01 83 5c 48 24 dd c6 31 7c d8 25 49 ff 66 4e 1b e6 25 33 48 5b 09 28 0a c8 26 7c 94 02 84 cf d6 68 89 e8 6b 47 b7 78 d0 17 5a d3 f7 7d 8a c0 58 ac e7 3d 6f 68 7c 73 36 1a 5b d8 89 5d 52 6d de 06 40 04 d5 71 5d e8 61 31 f8 7f 5c 35 7c 17 78 6e 5a 86 49 71 98 88 fc 47 30 07 46 29 bb b7 48 fa 47 29 b0 d8 7f 09 58 7d 42 25 80 82 88 81 28 c6 1a 88 e8 8a 5f a2 78 cf 67 4e 0f b8 27 c1 d8 49 5c 18 7c ef a4 86 99 e8 6c 40 26 48 44 48 8d 44 12 73 35 13 7a 94 42 7e b6 e4 67 af 82 8e 2b 23 69 12 98 52 e0 88 8a 6e 17 8d a2 d1 8a e6 48 24 1d 06 72 5d 64 83 af 42 82 35 63 82 95 48 4d d7 f4 34 6c 88 6b 10 36 Data Ascii: \|{hGhvzDv-nWX`17(7xWz^+Sl'#gZ%,~B\H$1\|%IfN%3H[(&\|hkGxZ}X=oh\|s6[]Rm@q]a1\5\|xnZIqG0F)HG)X}B%(_xgN'I\\|l@&HDHDs5zB~g+#iRnH$r]dB5cHM4lk6
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 30 02 20 75 02 1c 93 ba 04 83 05 32 c0 21 1f 30 02 d4 bb be c8 14 04 2c 20 05 8e 0a a6 b9 3a 3d d1 c3 a7 fb 3a 24 02 59 33 71 3b af 52 c0 02 41 a0 be fc 2b 2b ee 3b 02 b6 9a 21 37 20 04 2b 43 bf 1c 23 04 23 80 25 fa fb 06 d6 1b c1 fb 22 06 28 00 c0 e6 8a a7 ec 12 a3 43 02 a9 6e 45 ae b5 b9 b2 0d 1c 04 3a 6b bc 58 20 04 6f 80 03 14 fc 23 23 80 c1 65 ab c1 1c f3 06 8c f7 23 1e 70 03 27 c0 c3 22 9c 29 41 a0 a0 1d 89 c2 d0 32 a4 99 c5 a7 82 d9 25 fd fa 27 2a fc ad 28 30 c3 c6 2b 04 20 70 03 41 ec 23 1f f0 06 4d f3 b4 2a 31 46 27 10 29 1b 40 c4 55 70 bd 22 6c 04 10 3b 9b 8c 7a 29 f1 89 2a 7c 9a 8d 36 b9 77 f7 1a ab 53 80 c5 7c 8b 05 ee 7b 03 1b 10 29 38 a0 c6 19 ec 12 92 5b 33 42 f0 c7 ac 72 c6 27 ff 00 c2 22 dc 03 0b ec 90 53 ec 27 7b f4 2a 5d dc 67 5b fb a8 Data Ascii: 0 u2!0, :=:$Y3q;RA++;!7 +C##%"(CnE:kX o##e#p'")A2%'(0+ pA#M1F')@Up"l;z)\|6wS\|{)8[3Br'"S'{]g[
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 39 1d 0a 59 7f f6 80 cf f5 d8 ae f0 dd 0e f6 97 8d f3 cb 9e 0a 65 1f f8 8c 4f f1 a9 50 07 59 2d b5 09 37 2b 71 7e 31 14 fd f1 69 31 46 d0 7b 31 7a 3e 2b 4e 4c 24 01 70 d5 af 40 06 8b df f8 a6 df f3 3c d0 f5 da fe f5 86 9f d3 38 0f f1 64 7f fa b2 df f3 a9 50 09 58 bd d9 08 ba e8 17 83 e4 4b cf 16 f9 ee 27 7e ad 2c 93 0e 50 66 88 f2 3a 4d 0c 7f 3f fb ca bf f5 d5 3e f8 b3 6e ea 85 6f e5 e1 fe e9 e4 6e ee a5 bf fc d8 cf f2 7b 10 fd 5a ff dd bd 6a da c1 d9 ac b7 6e 11 e9 ac a2 f4 b2 52 ce 7c 7f d0 95 70 fd d9 df fe 67 bf ee d9 fe fc 41 2f db ad be e9 9f ae f3 e5 2e 08 c9 ef fe fc af f5 82 30 ff 00 a1 40 e0 40 82 2e 0e 1c 44 98 f0 60 9a 02 0d 1d 3e ac 62 40 e2 44 8a 15 29 6e 10 f2 50 e3 46 87 ff 3c 7e 04 19 52 e4 48 92 25 4d 9e 44 99 52 a5 c9 15 1c 5d 3a 04 e1 Data Ascii: 9YeOPY-7+q~1i1F{1z>+NL$p@<8dPXK'~,Pf:M?>non{ZjnR\|pgA/.0@@.D`>b@D)nPF<~RH%MDR]:
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 88 ee 31 48 4a 0f 10 c6 38 49 5a 92 b1 92 90 ac 8c 24 6b 49 49 4b ae 27 93 03 54 c8 1d 39 92 a9 11 38 d1 94 d4 21 65 05 8f e9 10 21 9c 60 03 18 b9 8b db 0e 60 a6 c7 00 ff cf 3c 3c d0 c1 2e b5 39 00 47 e2 d2 2c d8 dc e6 2e bb a9 9e 5f 06 40 21 0e 1c c1 06 40 b9 4c 87 8c 32 99 ca 64 67 43 84 80 83 c2 6d 44 0a 07 a1 e6 5a ac 49 1c 2d 84 73 9b 61 78 a4 37 9f d2 4f 7f ee 12 a0 ea 99 c0 2f 29 84 10 2f e1 20 94 80 74 e7 3b 69 57 bb 78 6e 44 9a be 7b 0c a8 8a 93 cd 82 6e 13 08 02 75 0a 47 3b ba cb 8f a2 67 1c 0a 4d 48 45 37 24 51 cd 1d 41 98 2a 75 c8 ad 0e 82 d1 ed 6d 74 a4 e1 2c 29 48 93 22 d2 9b d6 32 a7 c5 39 69 00 d4 30 06 a2 1e 30 00 35 48 08 15 60 6a 38 4b 44 94 a5 67 1b a0 1c 08 f1 d2 8a 2a e6 20 3c 79 0c 50 88 c3 d3 9e fa 54 a7 48 e1 6a 57 27 f9 d3 e1 d4 Data Ascii: 1HJ8IZ$kIIK'T98!e!``<<.9G,._@!@L2dgCmDZI-sax7O/)/ t;iWxnD{nuG;gMHE7$QAumt,)H"29i005H`j8KDg <yPTHjW'
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 27 2b 3c 8b 99 f3 89 88 6b c0 6b f3 42 3d d1 b4 03 18 43 8e d3 99 9b 53 80 57 a8 84 35 7c c3 4a b4 c4 38 9c 43 40 ec c0 e0 80 84 36 d8 c3 4f f4 bf 36 80 84 3f d4 44 6d 12 44 b3 90 3a 9f 58 3f f2 a3 38 e4 4a c4 4a 29 a7 0e 23 43 8f d3 09 2b 20 03 67 b0 c4 5c d4 45 66 10 8b 23 2c 45 3b fc 8d 3c 04 c5 61 ec 3f 36 c8 0c 5f fc c5 01 38 c5 b2 80 bc c7 90 3c f2 bb ba f3 7b 45 2e d9 3a 85 20 c3 af 4b 08 79 58 07 36 d4 c5 6e d4 45 39 5c 0a 64 fc 45 25 2c 8b 55 68 c2 27 cc 03 57 58 86 65 68 85 56 f0 86 76 5c 86 6b 70 85 4c f8 44 3c f0 43 0d 4c c6 24 cc 0c e4 e0 3a 18 ac bc 39 ba b4 69 a4 c6 5f e2 bd 83 f8 b9 6e c3 c6 03 d0 46 6f 64 c8 6e 04 c7 a4 10 c7 52 04 3f b3 e8 c4 ff 27 64 85 65 f0 86 06 d0 c8 8d e4 c8 8d cc 82 56 b8 06 56 78 42 51 a4 bf 7c ac 25 72 14 8b 08 Data Ascii: '+<kkB=CSW5\|J8C@6O6?DmD:X?8JJ)#C+ g\Ef#,E;<a?6_8<{E.: KyX6nE9\dE%,Uh'WXehVv\kpLD<CL$:9i_nFodnR?'deVVxBQ\|%r
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 28 a7 88 63 54 47 75 c3 76 25 df a5 14 41 ab fd 52 62 cd 5a a7 b8 57 81 1b 60 a1 f0 da e0 9d df fa b5 5f 01 c0 5f e4 fd 04 53 e5 5f a3 f4 5f ff 33 46 ad ad c3 0f 5e 0a b5 9c 54 6e 2d 22 2b 85 41 bd 6d 60 eb c8 d5 e6 4c 88 c2 4c b2 a7 b5 c4 c0 95 dd 77 f5 3f c3 fd 52 c4 ad 44 c5 85 c8 85 15 8b 02 16 41 f9 75 4b 12 2e 61 01 90 d9 fc bd 80 49 50 e1 ce 75 42 e8 6d 0a c6 1d 29 19 4e 56 c8 e5 84 ec ed cb ff d4 45 a0 80 dc e1 fd 18 be 37 7b dd 4a 9c 03 f2 95 00 c2 ad 5d 91 cd 54 a7 00 e3 ef 13 0b 30 f8 d8 c8 7d 4b 2a ae 62 49 c0 62 fd 2d 55 ce 6d 5e 27 7c 81 9e 0d dd b9 ad 8c 55 e0 63 eb 3b e0 39 da b6 88 d5 e1 35 7e 8d 72 b2 d2 f0 b5 80 c4 ac c4 a8 95 5a f3 45 df 17 1d 8b 3c 36 a8 01 06 41 27 0c d5 29 ae 62 53 bd dc 41 d6 e2 42 5e 61 9d 7d c2 38 40 58 7b 35 40 Data Ascii: (cTGuv%ARbZW`__S__3F^Tn-"+Am`LLw?RDAuK.aIPuBm)NVE7{J]T0}K*bIb-Um^'\|Uc;95~rZE<6A')bSAB^a}8@X{5@
2024-07-04 22:39:33 UTC	1369	IN	Data Raw: 9d d7 f5 e1 2e a7 5b 7f fb d5 78 f4 fa a2 e7 46 3d e6 74 2f 5c 09 78 f7 36 fc 06 83 2f 7b 26 78 82 3f 58 84 a7 2f f4 4c b8 06 77 6c f9 ff 05 8d 02 26 4f fc 55 6e f6 b9 9e 04 95 8f d3 40 7f fc 06 48 d5 8f 9c fc af 0f f3 21 58 84 3f 78 02 9b d7 7c b3 57 86 5e 36 a1 27 6d c0 45 77 fb d0 0f f7 c3 56 04 4d 0e e2 7b 46 7d 11 14 56 4c 77 c3 6a 88 7e 83 77 02 2f 00 84 2b a0 7d 50 a4 77 7b 2f 7e 8d dc fd de 4f ed df 57 68 e1 17 80 3b 8d ff cb 1c f4 61 1c 82 2b 00 08 40 5e 9c 00 28 68 f0 20 42 00 31 7c 05 68 e8 f0 a1 8d 03 12 27 52 ac 68 f1 e2 c4 14 0f 37 06 d0 f0 ef 23 c8 90 22 47 92 2c 69 f2 24 ca 94 2a 57 b2 6c e9 f2 25 c7 87 2d 28 9e b2 60 f3 a6 85 73 10 76 f2 84 e0 47 02 d0 a0 12 30 21 28 6a f4 e8 0b 09 94 7a f2 ec 96 f0 69 41 26 4e cc 3c 79 e2 65 d0 1f 40 5b Data Ascii: .[xF=t/\x6/{&x?X/Lwl&OUn@H!X?x\|W^6'mEwVM{F}VLwj~w/+}Pw{/~OWh;a+@^(h B1\|h'Rh7#"G,i$*Wl%-(`svG0!(jziA&N<ye@[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49779	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:33 UTC	617	OUT	GET /wp-content/themes/tgtheme/img/d5.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	783	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:33 GMT Content-Type: image/gif Content-Length: 2002471 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-1e8e27" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609575 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uA0REHr%2Frq%2B7rj7kJBgRlI2iGg7EJneOfVsBHLj%2B90dFL4PLlwNlbjENKV4%2BVISq4aG8TBcbYU3SAY17SEJ87fObuek8KbqxNXQwONyLpRs%2Fk60euvfC38diUHXbfEViuHzQ874%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cad5e0d80cd-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:34 UTC	586	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 85 98 98 fa 90 16 9c b4 b4 94 83 95 cf 35 01 01 9c ff ff ff ff 3b 4b 4b ff d5 27 53 45 56 85 99 99 ff 5d 1f a6 93 a6 03 57 90 00 00 00 b7 b1 77 f7 ff bd 97 be e5 9c b5 b5 98 29 04 ba a7 ba fc ee 21 52 44 55 3a 4a 4a 89 d1 ff fa 90 15 72 85 85 4d 5e 5e 80 93 93 3e 50 50 7b 8e 8f ff b3 83 48 59 59 5c 6c 6c 5c 4e 5e 69 7b 7b 5f 70 70 77 8a 8a 39 4b 4b b7 b1 76 74 64 76 9a b2 b2 43 53 53 61 60 4b fd ca 23 57 49 58 65 77 77 55 67 67 6d 80 80 fa fb fc 51 62 63 89 79 8b fc c1 21 90 7f 91 90 a6 a6 8b 9f 9f 88 9c 9d 97 af af a0 c4 e6 83 96 96 d7 4d 0a 6c 5e 6e f4 54 18 a1 90 a2 9d 8b 9e f5 b1 1e 97 Data Ascii: GIF89a!NETSCAPE2.0!,5;KK'SEV]Ww)!RDU:JJrM^^>PP{HYY\ll\N^i{{_ppw9KKvtdvCSSa`K#WIXewwUggmQbcy!Ml^nT
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: a9 80 40 20 fe fb f1 81 78 3d 91 8d 92 6d 64 5c 90 77 15 70 c7 ff b6 46 24 8a 81 6b ff 66 1f af 92 1b c0 bc c1 ff f0 ba 5e 6f 8f 84 8e 8e 67 67 7f ca c1 cb db dc 9e ff 96 61 58 be ff 6f 5d 11 a2 2d 06 ff e3 86 fc 78 19 a9 b8 b8 ff 80 47 bf 7e 2c 65 43 39 26 26 26 94 a6 a6 9b 96 70 dd cb 41 87 c9 f8 ff e9 a3 52 40 0b 81 5b 5f 9b bc d7 af a8 74 b2 a3 3b f3 81 12 1c 75 a9 9c 3b 19 ff e0 5f a4 a1 89 91 9a 9a 41 41 40 99 5a 0d 9f 8a 39 33 b0 ff a8 48 30 89 a5 c8 ec ea da 40 b5 ff b1 ae b2 fd c0 5b 28 a5 de ab c2 6e ab b6 a3 c1 c7 5b 9b bf 7b 38 42 38 8d bb 87 5e b1 b0 4a 4e 59 78 b7 9a cc b4 33 a0 ba c5 60 55 40 fd ce 79 fb aa 3e 87 91 91 50 40 50 00 52 94 93 2a 07 99 a2 a2 72 8e 62 7d 93 5d 85 98 59 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 Data Ascii: @ x=md\wpF$kf^oggaXo]-xG~,eC9&&&pAR@[_t;u;_AA@Z93H0@[(n[{8B8^JNYx3`U@y>P@PRrb}]YH\
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 3f 38 34 12 12 90 00 84 1f 58 f2 92 40 c8 e4 24 c9 98 36 c4 21 72 32 b6 83 df 33 f8 48 1b 19 7e 68 06 04 ac 8d 1a 82 96 23 4a fe 80 01 b0 8c a5 2c 67 c9 80 1f 00 01 09 52 ec e4 92 3e f9 98 50 2a 92 91 c5 81 1a 84 52 a9 1a 53 4a f2 95 b4 4c a6 32 6b 09 84 22 f2 e8 8d 77 e4 65 5f 14 e9 bd 51 62 47 98 0e 2a 5f 6d 8c d9 22 4a 2e f3 9b df fc 01 2e 51 88 ca 37 4a 93 31 d4 84 1f 30 13 84 43 5d 96 d2 41 40 10 03 05 28 20 86 1f 7c 08 08 e0 cc 67 38 c7 99 ff 42 62 a6 e6 9c 79 4c a7 f7 0e c1 42 51 dd cf 37 8d 63 c0 3c 17 4a 81 24 c0 53 9f 10 dd a7 06 cb b9 4b 80 0e 46 a0 de e3 03 04 5a a1 22 56 7e b1 71 3f 60 28 43 6b 19 d1 92 2e 93 9f 53 02 96 27 2d 0a 98 13 f8 52 a0 aa 80 80 4c b9 f1 1d 99 b5 c8 6f 8d 03 82 48 45 6a d2 9e 26 b3 99 61 aa 62 d6 58 ea 17 8c 7a 8f 11 Data Ascii: ?84X@$6!r23H~h#J,gR>PRSJL2k"we_QbG_m"J..Q7J10C]A@( \|g8BbyLBQ7c<J$SKFZ"V~q?`(Ck.S'-RLoHEj&abXz
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 1d f7 36 52 48 85 47 71 85 6c a8 0e f0 17 7a 7e e6 74 6c 04 83 e3 15 51 33 98 71 91 e0 53 37 c8 22 6f a7 86 43 c1 86 80 e8 83 f0 37 84 5f 36 07 39 07 79 0c e8 60 19 97 6a 3e 75 86 3b ff 52 27 53 e8 87 2e 01 88 80 98 07 06 40 0e 87 90 7c 5c 98 5c 26 b7 2a 0e 22 75 22 a5 84 cb 34 86 bd 96 87 3e a5 41 d7 37 6c 92 f8 13 94 c8 86 5d 00 63 31 d0 0a 5a f8 59 18 58 5b 2d b3 81 48 08 58 25 75 87 d2 c6 88 3d 05 85 37 35 81 ab 88 13 ad 78 85 af 08 65 46 c0 07 f0 27 7f ee a5 81 8f 37 00 3b c7 50 a2 f8 4d 4c 58 8a 55 85 42 07 87 7d c3 c8 13 c5 68 85 c7 28 65 e4 a0 07 c9 77 80 8b 25 76 b9 f5 20 48 10 6a 4e f8 4d a4 d8 68 be 68 52 c0 e8 38 03 b3 8d 3d d1 8d 64 f0 73 70 16 03 93 30 8b 74 65 57 b5 f5 74 db c4 22 cd 84 04 81 e5 64 bc 66 8a 3d 85 42 92 76 39 f4 a8 13 dd 18 Data Ascii: 6RHGqlz~tlQ3qS7"oC7_69y`j>u;R'S.@\|\\&*"u"4>A7l]c1ZYX[-HX%u=75xeF'7;PMLXUB}h(ew%v HjNMhhR8=dsp0teWt"df=Bv9
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: eb 3d 27 e0 b8 e4 0a 67 51 70 a2 cb 8a 06 33 9b be c6 2a 02 36 d0 8a d9 0b 01 73 c0 bd f2 3b 14 8a a4 ba 56 da ba 30 a6 b1 f7 9b 04 c9 22 bd 24 d2 1c 3f 10 05 ad e8 be 32 25 0c 77 7b c0 42 41 4d 74 a0 bc 81 ea ab 53 da b7 c5 88 92 54 c6 a4 fe 9b 1a 53 e0 64 fa 0b 88 5f a7 b8 26 cb c1 08 9c 4e c9 fb ac cc 3a b9 b9 fa 04 5a 00 b8 29 5c 7a 7d 40 6a 16 4c 89 18 0c 01 83 b0 c1 32 1c 14 18 65 bf 90 5b ae 7f 6a c3 3b 3c aa d0 23 02 e6 f0 64 2d cc 86 5f 67 b7 d4 44 bc 47 0c 14 04 b8 ba ac 1a 65 e2 8a b6 06 60 04 e6 10 97 6c 5b 7a 9e a1 01 96 1a c4 ed 8b 57 30 4c bf 5b 4c 14 04 48 07 c9 20 b5 69 4a be 7e 8b 06 b4 60 46 9c 11 1a be e1 0b e3 d0 b1 1b 7b 85 44 18 a1 15 1b c7 a8 8b 51 35 ff 5c b5 37 5c c5 c5 68 b6 46 10 0c 3f d0 bf 87 ea 01 ec bb a3 ae db 8a 60 90 6c Data Ascii: ='gQp3*6s;V0"$?2%w{BAMtSTSd_&N:Z)\z}@jL2e[j;<#d-_gDGe`l[zW0L[LH iJ~`F{DQ5\7\hF?`l
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: df 10 0b d3 e0 09 d3 10 0b 5f e0 f7 60 bf f7 7c af 11 66 9f f7 80 ef 09 0e 10 f9 92 1f f9 df 80 f8 89 bf f8 18 e1 f6 7e ff 07 b1 70 06 93 ff f9 91 bf 0c 96 ff f5 43 8f f9 13 d1 f8 79 bf 0c a7 00 fa ac 5f f9 a3 4f fa 44 6f fa 0d 81 fa 79 ff 0d ac 7f fb ae ff fa 97 2f fb 08 41 fb b5 7f fb ac 7f 06 9b 80 00 70 c0 02 2c 40 03 56 60 05 61 c0 05 69 a0 fb 53 af f8 bc ef fb 77 2f 05 b6 00 fc ac 2f 09 08 90 fd da bf fd 08 ff 70 fc cb ef fc 01 c0 fb 8e 20 fd 6f 2f 05 61 40 03 70 b0 09 9e 6f fd 93 8f fd dc ff fe dc 6f fc 61 20 05 96 0f fd 6c af f9 77 9f 01 5c 60 05 2c b0 fd d3 c0 fe 00 e1 40 e0 99 5d 08 0c 1e 44 98 50 21 02 16 61 a4 04 80 18 51 e2 44 8a 19 fe 5d c4 98 51 e3 46 8e 1d 3d 7e 04 19 52 e4 48 92 25 4d 9e 44 99 52 e5 4a 96 2d 5d be 84 19 13 64 06 8a 35 6b Data Ascii: _`\|f~pCy_ODoy/Ap,@V`aiSw//p o/a@pooa lw\`,@]DP!aQD]QF=~RH%MDRJ-]d5k
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 15 49 43 0b 44 b5 51 20 25 84 a3 cc 3a 54 94 1d aa 49 85 35 51 5e 2b 85 59 27 9b b4 cf 8f 66 a9 c4 6e 78 81 28 57 f4 44 45 5a d4 4e 7d 3c 21 41 6a 19 ff 10 8f 25 31 c1 3f 0e f0 8f 0b 1c a0 9b 17 e8 e6 01 c4 39 ce 03 98 c0 04 17 30 81 38 cd e9 cd 0b 70 73 98 cc 1b 50 06 60 79 c9 c5 18 2d 2c b4 3c 14 24 84 93 4b c2 fd 44 14 90 70 85 26 17 96 90 9b 21 ea 97 6c 09 49 38 bd 49 4e 86 36 d4 a1 0f 2d 27 3a d1 f9 4e c8 bd d0 92 66 a4 0e 29 37 89 28 51 f8 04 97 26 d4 95 5f cc c1 24 23 d8 d2 01 49 4c c8 04 af b7 40 dd 6d 44 9d 0a 85 68 4c 65 2a d3 73 d6 94 a2 3d e3 e3 f7 8a b8 18 9e 04 67 99 24 25 25 4a 21 28 ab b0 c0 e3 50 68 d8 e7 50 ea 88 a8 2f 26 0f 23 35 9d 69 54 a5 3a d5 6f 66 f3 a6 17 db 4a 19 a3 47 1d 40 06 e7 0c 88 58 12 1a 4c 2a 90 67 46 70 73 3e c1 a7 9a Data Ascii: ICDQ %:TI5Q^+Y'fnx(WDEZN}<!Aj%1?908psP`y-,<$KDp&!lI8IN6-':Nf)7(Q&_$#IL@mDhLes=g$%%J!(PhP/&#5iT:ofJG@XLgFps>
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 9e 20 08 c3 5f 3b 3c 32 ac 3a 56 38 c3 33 0c 42 aa 5b 43 33 2b 83 60 3b 88 2a 18 36 07 80 c3 a8 5a 03 8b e3 33 3a b4 c3 4f 64 bb 1c c8 c3 51 04 80 12 78 81 cb 9a 2e 40 94 8a a5 48 83 81 73 1b 2f f8 83 3f f8 82 1d 2c b7 44 54 44 aa 63 c4 46 4c c3 aa 63 bc 33 23 42 51 6a 3f c3 18 bb 99 7a 01 26 04 00 e5 03 c5 64 64 3b 29 24 45 2a 24 01 bc ab 2b 73 52 c5 a9 d8 0a 57 ec 18 2f a0 c5 04 33 37 5b bc 45 aa 6b 44 47 b4 ba 5e 3c b3 23 00 3e 44 52 24 41 18 c6 98 ea 00 0f e4 b3 1b 60 3e 65 fc c4 14 68 46 52 dc 01 17 30 3d ba 9a a8 69 7c 8a ad e8 af bf 41 40 4b 09 82 da 53 38 04 23 82 dc eb 46 ab 33 43 5d 44 3c 26 10 c7 18 4b b3 23 a0 04 1a 6b 1d d7 a9 82 ff 4d 48 47 88 02 01 0f e0 33 05 70 42 78 84 47 3c 14 3a 23 1b 81 31 18 83 22 33 32 cc 9b c7 3d bc 47 a9 12 40 7d Data Ascii: _;<2:V83B[C3+`;6Z3:OdQx.@Hs/?,DTDcFLc3#BQj?z&dd;)$E$+sRW/37[EkDG^<#>DR$A`>ehFR0=i\|A@KS8#F3C]D<&K#kMHG3pBxG<:#1"32=G@}
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 40 5b f8 b5 c3 14 58 58 3f 5b 5e 8e c4 5f fc 95 de e9 a5 de e4 14 a7 0e 70 01 ec ed 33 48 9d a9 54 9c ce 17 c2 1c f0 8d 31 22 48 44 26 20 85 2d 60 60 07 a6 e1 b2 8d 29 d5 54 00 d0 a5 60 fc 6b 82 9b 3d b5 98 92 81 55 dd 60 fc f5 60 05 c8 33 0e 18 b4 0c 25 61 86 65 5a 22 15 22 fe c4 4e 87 a4 82 ae 5d d9 b1 a5 61 07 7e 83 40 1d 27 ff 7d df 1d ee bc 14 68 82 f6 4c b5 98 da 00 05 18 e2 ff fb b5 d9 e9 5d e2 68 03 e1 8d fd 50 dc 2d e0 4b 45 dc 21 58 d6 36 20 05 b1 9d e1 2b d6 d7 50 18 02 5c 90 29 09 0e 4e 2f be bf 26 b8 60 55 3b da 10 76 de 33 7e de 1e 56 e3 35 d6 b8 ed 95 29 36 a5 d4 d5 19 bf 72 bb bd b1 ac 3a 1f b8 63 2b d6 e3 09 78 dc 2d e0 81 14 65 82 e6 ba de 3d 33 5e 0a 26 64 1f 8e b6 da 65 28 0f 50 e4 d5 85 be 46 76 64 8d 63 e5 86 12 60 40 54 e1 d5 d1 c1 Data Ascii: @[XX?[^_p3HT1"HD& -``)T`k=U``3%aeZ""N]a~@'}hL]hP-KE!X6 +P\)N/&`U;v3~V5)6r:c+x-e=3^&de(PFvdc`@T
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: a1 48 f7 87 f2 5f 25 f7 c8 33 77 6e 75 14 57 28 60 f5 af c7 d9 87 ea 06 c4 f7 15 0a c7 75 7b 7b ee 0e 20 81 70 1d da ff 2a c4 7a 86 5a 9e ee 41 9e cb 0f 00 47 38 82 8b 5e b0 22 c0 86 ce ff 7c b3 98 3c 88 ba 58 1c d0 56 17 57 5a 99 62 de 1c 86 f0 c1 ef 56 d1 87 7d 5f e9 06 e5 ce b8 c2 67 28 2c 80 5b 0f 9e 72 ee dd 9d 49 46 00 38 a0 81 30 70 53 b6 17 7e 06 bb 82 e3 c7 8b 95 4f fe 85 60 f8 6b dd b3 98 c7 51 6e c5 de 91 0f e1 70 55 6a fc 05 08 28 0a 06 12 04 60 f0 20 80 17 07 16 32 5c 08 c6 00 c4 88 12 27 52 9c 68 a6 61 43 84 1a 37 72 84 d1 01 e3 86 12 04 47 92 24 a9 41 05 c6 94 0b 2f fc 6b e9 f2 25 cc 98 32 67 d2 ac 69 f3 26 ce 9c 3a 73 66 08 e0 f3 e7 cf 30 08 86 12 a5 c1 05 28 d2 a4 4a b1 1d 21 e0 94 88 23 a5 49 b9 10 ad 6a f5 2a d6 ac 5a b7 72 ed 3a 74 85 Data Ascii: H_%3wnuW(`u{{ pzZAG8^"\|<XVWZbV}_g(,[rIF80pS~O`kQnpUj(` 2\'RhaC7rG$A/k%2gi&:sf0(J!#IjZr:t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49780	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:33 UTC	617	OUT	GET /wp-content/themes/tgtheme/img/d6.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:34 GMT Content-Type: image/gif Content-Length: 2424803 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-24ffe3" expires: Thu, 01 Aug 2024 11:35:07 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 212667 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4qkRYbvSTft3a2u8BK7ZOTf2%2Ftlqi2AWDnuWoF9se3AkwU8EQ7cY7ds%2BtIBIxwUje6DBADx7FxGc3VQh5rIhj7l2YLVdE8Ra5KDcKF93Qw3G1DJqCsiodiztGWe5AnU6URtrwBU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cadaa6017d9-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:34 UTC	592	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 98 2a 05 35 35 35 ff ff ff fc ee 21 ff 5d 1f 00 00 00 cf 35 02 fe d8 21 fa 90 16 d5 77 15 7d 09 09 b1 54 0b 97 2a 03 66 66 66 c5 63 10 a8 3e 09 ff b4 84 34 34 34 98 98 98 fa 90 15 97 29 03 fe d7 20 f9 90 15 fe d8 20 98 29 03 fa 8f 14 fa 92 15 fa 8f 16 f9 8f 15 b2 4a 0a 97 27 03 b5 4d 0b fa 99 17 b6 4f 0c fa 94 16 bc 57 0d b7 50 0c 40 40 40 ff d9 20 fe cc 1e fe d4 20 bb 55 0d c0 5b 0e b0 47 0a fe dd 20 fe c3 1d be 59 0d fc ed 20 fe da 20 4d 4d 4d ba 54 0d fb a4 18 fb a2 18 fe ce 1f ad 43 09 fd b8 1b fc b0 1a ae 45 0a b1 48 0a 99 27 03 fe c6 1d fd c9 1e fe d1 1f fd e4 20 fd b5 1b fd e6 20 eb Data Ascii: GIF89a!NETSCAPE2.0!,555!]5!w}Tfffc>444) )J'MOWP@@@ U[G Y MMMTCEH'
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 4e e1 74 0d ff 7d 43 86 0e 0a 7f 2c 10 ca 68 11 9b 25 00 ff f9 dd ff 87 4f fc cf 1f c9 39 15 fa c9 1e e7 86 11 e0 48 19 d2 3d 02 f5 b8 1a f7 bf 1c 6f 5e 0e 8f 8f 8f 0f 0d 02 7e 7e 7e a6 3b 08 df 6f 0c de 69 0b a6 23 0f ff 70 35 ff a5 73 81 0a 08 4f 43 0a ff e4 5f e7 4d 1a cd 3c 16 5f 51 0c bf bf bf d4 41 17 d9 44 17 fb cd 1f ee 9d 14 30 30 30 48 48 48 ff 9b 67 af af af 71 71 71 dc 46 18 f6 ba 1b f0 f0 f0 cf 34 01 10 0e 02 ae 94 16 8e 79 12 a0 a0 a0 3c 3a 39 e0 e0 e0 d0 3e 17 84 84 84 d9 4b 0c fa 8e 12 40 36 08 59 59 59 10 10 10 20 20 20 ff 95 0f 89 2a 0a 55 55 55 66 53 2f 54 45 30 af 95 16 de b4 20 ff 85 2c ff 8e 57 ff 93 5e b7 b7 b7 b0 6e 22 9e 80 28 a6 68 23 ee d2 4f bc 73 1f 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a Data Ascii: Nt}C,h%O9H=o^~~~;oi#p5sOC_M<_QAD000HHHgqqqF4y<:9>K@6YYY UUUfS/TE0 ,W^n"(h#OsH\#J
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 61 08 ca e5 01 73 b9 68 e3 ef f8 80 08 39 7e b1 8f 6b fa 0b bc 9e 57 47 22 25 81 7a 81 4c 65 b1 12 c1 08 43 e4 a1 13 7a d0 a4 ee ee 60 88 21 ae ac 0b 30 ec a3 b5 7c 93 9b e7 85 81 4b 4f 68 81 2a 87 69 ae 39 c8 a2 10 6f 20 45 19 da 58 86 37 6c 62 65 5a 00 82 ff 88 c4 35 c0 50 e5 7c a5 14 d2 14 a8 40 cc 6e fa 6b 0e 8c 78 43 26 d9 18 88 67 ac cc 07 5e d8 52 35 cf f7 17 32 d2 48 04 38 f4 a6 3c ff b5 09 43 f0 21 96 56 cc 45 21 6c 69 ff 31 1e 1c 91 9a ec ec 8b 3b 69 94 06 a9 cd f3 a0 ff 4a 04 22 62 51 45 1f 86 e2 0d fa b3 58 13 a2 00 a5 50 06 d4 2d 03 95 91 08 b8 89 d0 8e 5a 8c 11 75 e8 84 0f cb 50 07 7e 5a 0d 07 51 da a5 5b 9e b3 30 37 d5 f0 49 33 30 a8 47 67 5a 31 38 18 22 10 cb 34 61 2a 0c c1 c2 8a d5 80 06 51 a2 cb 28 67 95 cd 19 6d 94 a6 48 55 59 1f ec 90 Data Ascii: ash9~kWG"%zLeCz`!0\|KOhi9o EX7lbeZ5P\|@nkxC&g^R52H8<C!VE!li1;iJ"bQEXP-ZuP~ZQ[07I30GgZ18"4aQ(gmHUY
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 91 c7 84 73 e7 84 c8 91 5d 4f 40 65 c5 52 76 1c 67 85 c4 32 06 41 28 86 c1 07 09 8b e7 85 e5 02 86 7a 38 84 90 20 05 0d 85 3d 9d e0 70 e5 82 52 bb d5 75 36 11 83 a5 ff 31 81 51 b0 55 e3 e2 6e 54 67 87 c3 72 06 81 e8 7d e1 e7 87 c6 02 88 99 28 84 99 d0 0f 6c d7 3b b2 85 31 0d c8 6a 6d 08 7d dd e1 27 41 a2 01 e2 35 2e 2c 10 74 42 b7 7b e3 22 05 39 f8 89 c2 57 84 9c 48 2c 24 88 8b 42 28 0d aa a7 3d c4 e5 2f 28 e0 82 e9 77 13 6e 58 1c 03 06 08 fc 72 04 b2 c8 71 ba 47 2e 9e e8 8b c2 17 0e 8e b0 8b 07 30 06 d4 38 84 92 a0 82 bd 93 0a 5c d6 2f 4b 18 24 a9 68 1d dd 11 76 52 c6 2f 30 00 73 d0 48 8b 9d 18 86 db e8 81 d7 e8 87 52 d0 7d f1 58 82 e1 20 05 74 25 72 b3 25 24 ad 46 13 aa c8 1d 42 12 05 b6 47 2c ec c8 71 ee 58 2c d3 78 8f c1 97 8f 7e 28 0d 0c a9 83 ce 40 Data Ascii: s]O@eRvg2A(z8 =pRu61QUnTgr}(l;1jm}'A5.,tB{"9WH,$B(=/(wnXrqG.08\/K$hvR/0sHR}X t%r%$FBG,qX,x~(@
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: db 06 a0 5b a9 8f 40 b5 67 43 ba de 67 42 d3 50 82 b9 1a 48 3e 60 b1 93 12 24 67 7b 9d 31 97 90 2b e3 bf 02 48 0c f3 73 bd 3a 38 b3 67 63 09 95 2a 04 f6 9b c1 77 2b 06 b0 aa 06 7d 5a 35 55 59 82 d5 fb 40 12 2c 80 86 3b 42 18 29 23 a0 aa 24 41 62 93 8f 1b 73 f0 c9 32 0a 3a 80 31 f0 40 c4 a0 83 c4 3b 35 02 4b a9 f4 ab c1 3e 4c 00 7b 5b a9 6a 20 89 3e 63 b5 c3 c7 0a 10 c4 0a 03 98 c3 81 84 02 26 a7 21 4c 14 24 44 4c 2c c5 9a 6c 8c da 33 6d 2b 7c ea 3b 3f 11 cb 95 55 e3 07 95 2a 06 3f 3c c6 42 00 ab 96 80 36 0e 1c 7c 23 2c 3f 01 2c 80 ba 48 4c 9e 9a 91 62 9b 1c 48 10 24 56 60 2e 51 c9 71 31 dc 33 33 ec 7d ee 60 42 ed 3b 80 00 ab 32 a5 60 a5 79 9a 05 75 3b c6 3f ff cc 06 e0 50 a9 96 50 ab 17 d3 0a 61 2a 80 ed b0 0d f2 b3 0d c2 fb 7d c5 30 b1 c3 e4 c4 34 c2 94 Data Ascii: [@gCgBPH>`$g{1+Hs:8gcw+}Z5UY@,;B)#$Abs2:1@;5K>L{[j >c&!L$DL,l3m+\|;?U?<B6\|#,?,HLbH$V`.Qq133}`B;2`yu;?PPa*}04
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 7e e0 0d 1f ac 04 bd 90 ec 7e e0 0b c9 d0 f3 ce fa f3 61 4f ce 43 7f ce f8 90 f0 4a db 08 42 90 f2 6a 3f b0 76 9e 59 4f 1d 23 cd 8d 1e 17 8f 00 01 0d 8b d0 88 54 bb 50 09 b3 a0 06 f0 be f9 f3 1b f9 19 8c d6 93 3f 0a f7 70 f2 9d ab b7 9a ef fa b0 0a 0c 1f 6c 58 28 b0 57 c8 d5 1e 41 12 05 fc 12 e2 03 b0 c7 f2 04 0b dd ae fb ce aa db b0 6f bf b2 3f f9 18 ad 0b b6 cf b9 64 20 04 62 90 fb cc af a5 af ff c0 5a 12 3a a8 f4 91 51 74 4f 2e b5 9b df 07 e5 0d cb bf fd 95 fa 05 df fe fc 1a 1c fd d2 ff db f8 40 0b 96 af b4 4d 0b 06 60 20 06 62 b0 06 6b 90 05 fe ef ff 00 b1 46 8c 18 30 60 84 08 61 83 06 0d 9b 83 62 be 18 80 18 51 22 a5 03 15 2d 5e c4 98 51 e3 46 8e 1d 3d 56 6c 82 40 e4 48 92 1b fe 9d 44 99 52 e5 4a 96 2a 03 b4 84 19 53 e6 4c 9a 35 6d de c4 49 93 e4 4e Data Ascii: ~~aOCJBj?vYO#TP?plX(WAo?d bZ:QtO.@M` bkF0`abQ"-^QF=Vl@HDRJ*SL5mIN
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 8d 91 5b 71 45 35 20 19 cb 3a 45 cf 96 57 59 a2 65 14 b1 8b 53 1a 85 06 e4 13 65 32 0b 73 45 92 44 a1 98 1d b9 a1 af 92 88 15 53 c4 ff c1 67 bc bc d3 27 06 d1 8d 4a 96 11 0d dd 18 c4 27 22 89 4d 39 0c c2 72 5b 69 a3 65 2c a1 84 67 16 05 81 b1 51 66 3c 0b e3 1b 1a b4 93 23 15 7c ca 1a d4 f2 c1 b6 61 13 7a 91 d0 66 37 7e a9 31 34 fc 22 1a 71 88 84 21 fd d9 43 6a a4 85 2d 97 99 85 29 ed d9 91 22 60 4b 9e 17 cd cb a2 62 63 85 89 6a c4 1a 94 80 4a 66 36 53 8d 34 2e 54 54 72 00 e8 20 ce f1 0b 53 9c 73 45 68 80 46 37 78 11 07 65 f4 d3 a4 75 f2 c4 20 06 ba af 25 5c e6 2d 1d f5 c8 78 e0 19 21 8c a6 cf 37 37 00 6a 46 96 47 29 c4 6d 06 0d 83 18 e7 4d 41 d6 0c 94 2a 23 0e 83 18 04 2f 78 11 0d 6a 54 a3 1a bf a8 06 35 ce c1 0b ac c6 e1 13 ca 38 6b 24 e4 70 4d a9 82 4c Data Ascii: [qE5 :EWYeSe2sEDSg'J'"M9r[ie,gQf<#\|azf7~14"q!Cj-)"`KbcjJf6S4.TTr SsEhF7xeu %\-x!77jFG)mMA*#/xjT58k$pML
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: b8 d4 3b 1f 40 24 8c 24 43 80 c1 32 c4 48 ec 23 ec 33 b6 63 33 3b 46 cc 09 41 54 3b 49 e4 44 2d a2 c1 4a 14 b8 4b 74 35 0c f8 07 00 c0 00 53 a4 80 54 54 c5 55 64 c5 56 74 c5 55 04 85 2a 90 c5 59 a4 45 1d 58 80 5b c4 c5 5c d4 c5 5d e4 c5 5e f4 c5 5f 04 c6 60 14 c6 61 24 c6 62 34 c6 63 44 c6 64 54 c6 65 64 c6 66 74 c6 05 a0 c5 68 ac 02 4c 78 c5 6a 7c 45 78 b0 85 6c d4 46 5b 80 07 6b a4 80 53 34 45 52 94 27 0c 60 00 00 30 c7 73 44 c7 74 54 c7 75 64 c7 76 74 c7 77 84 c7 78 94 c7 79 a4 c7 7a b4 c7 7b c4 c7 7c d4 c7 7d e4 c7 7e f4 c7 7f 04 c8 80 44 c7 54 fc 07 5c 80 21 0a 28 47 81 54 c8 85 64 c8 86 74 c8 87 84 c8 88 94 c8 89 a4 c8 ff 7b 2c c7 f4 a9 c8 8c d4 c8 8d e4 c8 8e f4 c8 8f 04 49 88 44 c8 d0 01 c7 75 3c 86 0f 70 01 07 b8 05 4d 48 80 96 74 c9 97 84 c9 98 Data Ascii: ;@$$C2H#3c3;FAT;ID-JKt5STTUdVtU*YEX[\]^_`a$b4cDdTedfthLxj\|ExlF[kS4ER'`0sDtTudvtwxyz{\|}~DT\!(GTdt{,IDu<pMHt
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 90 db 18 70 82 6d 20 07 63 f0 df 0e 6e 00 56 08 e0 ad 1d 60 74 8c de 02 e6 5d f6 4d 60 ec 45 47 cb 0d b0 07 d1 d6 08 26 d6 fa 95 22 cf 3d 0f 6e f8 06 01 c0 61 01 98 06 0f ee e0 78 10 e1 94 80 de dd cd 5e c0 f0 80 d4 55 e1 06 6e 61 bd 8a 5d 18 1e d6 09 ee af c4 3d 8f 6c b8 e1 1c c6 61 62 e0 61 ff 0d e1 3b 0a e2 f4 7d 56 c1 30 62 f7 4d 47 16 2e 98 07 49 02 26 1e 56 ff 63 3d 59 db dd 0b 63 a0 e2 1c ce 87 2b f6 df a2 05 62 02 86 c9 e9 85 5c c2 28 e2 f6 05 de 2e ee 96 8f ed 09 33 ee c4 1a 78 10 08 81 d8 00 70 82 36 c6 61 26 80 e3 fe 2d 01 ef 9a 63 12 16 e2 3b 86 d6 74 9c dc 96 64 60 73 b4 d6 cb 7d 10 11 d8 3d 40 c6 43 c3 3d 5c 2c b4 8d 12 38 64 44 56 e4 45 ce e2 f3 c0 06 94 d8 62 13 b6 d5 03 d6 d8 3d 1e e2 a9 35 38 4f 2e 44 34 7e bf 29 92 10 52 46 64 01 38 65 Data Ascii: pm cnV`t]M`EG&"=nax^Una]=laba;}V0bMG.I&Vc=Yc+b\(.3xp6a&-c;td`s}=@C=\,8dDVEb=58O.D4~)RFd8e
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 10 78 82 27 48 82 19 b0 02 2c 68 82 16 38 81 c0 97 8b c1 2f 7b 77 cf 96 b4 4f 80 b5 af f7 9c d8 6b ff 73 74 fa f0 5e fa f4 91 72 ae 17 d6 ca 0f 9f 1a 10 78 9e d8 f8 a7 81 fd a2 37 fc 52 4c fc 97 b4 fd af d6 fd b7 3f 73 51 22 a5 f9 fb 30 51 17 fe d3 01 65 c4 38 7e e4 1f fb 21 27 fc c2 6f f0 55 a3 fd e7 2f 8c dc 07 80 dd 4f 00 5d c7 28 ad 6f f3 ec df 9c ba d0 68 ca df 95 e4 37 fa 6e 0e b1 f2 87 fa 49 a6 70 e9 c7 a8 df 02 88 0d 08 06 12 1c 98 46 cb 81 84 0a 17 32 6c e8 f0 21 c4 88 12 27 52 ac 68 f1 22 c6 8c 1a 37 72 94 d8 a2 20 48 82 20 6a 1c b8 d0 f1 64 c2 00 2a 57 aa 2c e1 44 00 cc 98 02 98 34 68 20 e1 26 ce 9b 31 58 b2 34 f3 ef 27 80 a0 42 73 24 28 6a b4 a8 0b a1 42 31 fc 6c ea f4 29 54 a8 1e 94 06 35 72 f4 e8 07 aa 00 a2 72 ed ea f5 2b d8 b0 4d 33 84 2c Data Ascii: x'H,h8/{wOkst^rx7RL?sQ"0Qe8~!'oU/O](oh7nIpF2l!'Rh"7r H jd*W,D4h &1X4'Bs$(jB1l)T5rr+M3,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49782	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:33 UTC	617	OUT	GET /wp-content/themes/tgtheme/img/d7.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:34 GMT Content-Type: image/gif Content-Length: 3327196 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-32c4dc" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609576 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r2w3AKt1xrunRKZ63mOt1xidtSe5tBuSZpl45ExNmnvaHLVEqSVCoOARbAzvn85iPHEIc3dE26KckqZxrwY35MMjBn7QYQu8q4N52ATx%2F%2FALVfk4foB9HNGf9KXbMp1vrJd%2FamI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29caddd8f426b-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:34 UTC	590	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 00 9b ff cf 35 02 00 32 52 fe d8 20 00 00 03 00 80 d2 ff 5d 1f ff d5 27 fa 90 16 00 58 8f fc ee 21 ff ff ff 00 00 00 00 58 90 05 56 54 56 be ff 7d 09 09 ff b4 84 00 57 8f fa 8f 15 fa 90 15 00 57 8e fa 93 16 ff d5 26 fb 91 15 00 84 d9 00 97 f9 00 98 fc 00 81 d5 00 9a fe ff cf 25 00 90 ed ff d3 26 00 8d e9 00 93 f4 ff d7 25 00 89 e2 fb 96 17 fe d5 26 fe c7 23 00 92 f0 fc a3 1a fe e3 22 00 6a ad 00 87 df fb 9e 19 ff cc 24 00 6d b3 fd ae 1c fe bd 20 00 8b e5 fc ed 21 fe c4 22 00 86 dc fe c1 21 fb 99 17 00 5d 98 fe e0 23 ff ca 23 fc a6 1a 00 80 d3 fc a9 1b fd b1 1d 10 0d 03 00 43 6d fc 90 14 00 Data Ascii: GIF89a!NETSCAPE2.0!,52R ]'X!XVTV}WW&%&%&#"j$m !"!]##Cm
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: cf 3e 16 03 46 45 d9 b5 21 00 59 8f 4c ba ff 00 54 90 89 72 15 b0 ae 47 c8 a7 1e d5 49 06 4c 7d 6f 83 98 59 be 71 15 9d a5 4f b8 2f 0c 3c 12 05 02 59 8d 32 70 7a ae 29 09 ed 99 18 aa 64 0f cb bb 3c 5b 84 69 90 9f 54 98 7f 18 66 89 65 f5 8e 16 65 54 10 bf b5 41 e0 bb 22 a5 27 07 ff f6 d1 72 8f 60 a7 70 29 c3 36 13 de 41 0b ff 75 3b 79 46 0b fe da 20 ff 97 62 42 78 74 ea cb 30 89 2a 0a e9 c2 23 42 22 08 ff a1 6f ed 89 15 f1 a2 1b 39 3f 2c 95 55 0e 4f 2a 09 3c 64 70 91 78 49 64 6d 5d 90 68 2f bc 81 33 60 39 10 a5 7d 3e 3f 49 42 6c 4a 36 0b 37 50 f3 ae 1d e9 8b 1c 7d 60 33 61 56 39 7c 74 53 c7 94 19 e0 51 1a 4d 4e 3e 5e 95 b7 8a b2 cc e3 ed f3 d2 e1 eb 65 97 ac fc ea 22 3f 81 aa e3 b7 2d 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 Data Ascii: >FE!YLTrGIL}oYqO/<Y2pz)d<[iTfeeTA"'r`p)6Au;yF bBxt0#B"o9?,UO<dpxIdm]h/3`9}>?IBlJ67P}`3aV9\|tSQMN>^e"?-H*\
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: eb 20 79 31 11 6c 0e 6e b3 c3 9b 13 99 80 38 43 aa 65 55 4d 38 22 bd ca 78 3e 0e 88 91 92 e8 d2 80 dd 50 a9 33 11 b4 10 93 af 0b 81 11 d4 e8 26 07 79 32 2c c5 13 93 15 dd 47 2f 25 da 51 7d ac 64 17 0a 59 a9 33 5f f2 2d 93 97 db 40 06 f0 17 a7 fd dd d2 2a 64 13 53 19 5e 20 4a 88 55 ef 7c 19 58 24 2b ff 68 44 62 ea 4c 86 9c 43 e6 eb 50 b0 04 0b 8a a9 02 0a 7a e6 53 c4 47 a5 5d 5e cc 87 e7 e3 41 17 bd a9 ae 07 de ec 94 f4 ac 17 3c 1d 47 ff 3f e7 69 80 0c d5 aa a5 3a 9b e2 46 15 31 c1 72 34 73 e5 f9 6a 30 c9 7c a2 0b 7a 13 23 a1 43 2d d6 81 1f 3a 4e 9b 97 ab c1 0a 6a 99 80 81 12 25 97 51 c2 42 c5 74 56 c4 db 71 a0 9f 13 45 d7 2b df c5 cb 94 8e d2 a2 70 f3 20 03 3f d0 84 5a 62 d0 a3 3a 61 67 91 b0 50 cd 06 d6 91 73 2c 00 e6 44 3b a0 40 97 5a 0c 9c 7c cb 80 50 Data Ascii: y1ln8CeUM8"x>P3&y2,G/%Q}dY3_-@*dS^ JU\|X$+hDbLCPzSG]^A<G?i:F1r4sj0\|z#C-:Nj%QBtVqE+p ?Zb:agPs,D;@Z\|P
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 77 28 54 22 81 63 c4 7f 93 65 84 79 f4 35 34 d8 85 31 65 7d 10 e3 08 d8 27 64 92 13 05 f9 53 24 54 38 22 27 98 82 48 a4 71 ee 02 83 d2 67 6e 58 18 7a 1b e8 58 08 c4 84 c1 ff f7 5e 7e 77 26 5d f2 29 47 c0 85 d3 23 83 05 d0 81 70 48 54 5f a3 84 d2 47 88 05 90 88 3a 23 76 f2 27 39 51 88 6d 38 f2 29 58 f0 7f b4 e3 76 30 63 87 49 f7 55 70 88 31 86 97 81 97 93 80 d9 f7 3a 68 38 75 38 a2 6a 4d 00 8b 5b 63 7e de 25 8a 5d 17 86 8f 36 8b f3 22 83 c4 b8 84 4d 78 60 a1 b6 35 23 58 7c 23 c2 29 0d 40 06 94 54 80 b5 86 8c 5e c7 81 da 58 2f fd a7 89 ce 53 09 eb 85 60 ce 53 00 b7 95 2a 05 d2 66 38 60 8b 08 04 8a 05 80 77 ec 37 7a 86 38 84 ea 07 35 ac 48 37 7f a0 87 ce 53 03 48 26 89 03 53 24 4c f0 85 0c 04 73 77 d5 8d 44 18 46 06 f9 45 70 03 8e d3 03 79 cf c5 07 c2 47 3b Data Ascii: w(T"cey541e}'dS$T8"'HqgnXzX^~w&])G#pHT_G:#v'9Qm8)Xv0cIUp1:h8u8jM[c~%]6"Mx`5#X\|#)@T^X/S`S*f8`w7z85H7SH&S$LswDFEpyG;
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 55 65 00 b9 13 08 37 7c db 9a 21 79 b0 d2 e9 b9 13 83 bf df c6 01 40 5a bf 43 52 96 61 25 bd 17 e7 bd 05 b8 bf 98 49 73 eb fb 6f 1a db 22 79 a1 b4 f7 05 bf b4 53 b0 02 4c 98 34 47 bc 4b e9 82 b5 cb 9b 3a 98 17 43 72 bf c6 15 92 85 eb bd 49 ea bd 00 20 b9 84 9a 90 98 5b 27 78 31 24 9c 0b 59 1d 10 6e ce 3b 9e 53 eb bd e6 b6 c1 df 36 c1 2b 62 17 e6 1b 5e 05 eb c0 ad 69 6e a0 cb bf a5 ab 93 22 60 7f e4 eb 15 84 52 0b af 0b 49 f2 9a c4 ad 09 37 2c 0c 9d 82 bb 94 58 3b a0 70 b1 b5 e1 15 ac 39 fc bf 97 c9 c2 2e 8c c1 1d 56 aa 2a 02 17 54 85 03 db 3b 90 fa 9b c5 81 bb c0 2c 6c 6e fe 7b 7b 21 80 91 ae f2 16 43 12 c2 61 55 c5 72 2c b9 48 4b b3 05 b8 bc 18 77 a6 41 79 16 54 ff b5 02 e5 d5 bb 78 16 5e 22 10 02 36 03 2d 2b 50 c9 96 ac 2b 4d 20 2c bd 12 05 0c 73 c7 af Data Ascii: Ue7\|!y@ZCRa%Iso"ySL4GK:CrI ['x1$Yn;S6+b^in"`RI7,X;p9.V*T;,ln{{!CaUr,HKwAyTx^"6-+P+M ,s
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 89 cb 8d 8d 13 54 c5 ec 78 64 6e bc 34 04 7d 0e 23 da 30 e9 b0 be f7 92 2f e1 bf a0 f3 30 02 25 ee 80 f7 af a1 f7 93 1f ec 16 2e 09 7f 2f 26 4d d0 52 39 29 9d 72 bd b1 66 1f 23 8c 5c 67 95 3b 37 19 60 db 2a c2 0b 64 de f9 b4 0f e3 db 30 f5 27 42 28 c3 70 0c 3f 40 1f 77 50 fb eb 7e 01 92 b0 0c 80 9f 2e 21 09 d9 03 58 d5 cf ee d8 32 32 d5 79 65 8c 74 da f8 2d 22 0c c8 30 f0 c0 0f fc 10 9e 0b 96 df 22 7e ff d0 0b 10 de fb ea f1 fb d7 cf f7 07 b0 0d b5 2e fa e7 02 bd e3 99 d3 ff 9c 14 20 85 03 70 6d 94 3c 19 02 26 ff 22 da 60 fd e3 8f fd e5 4f fc 15 d9 22 bc 80 ff 00 41 88 c0 40 82 05 0d 12 b8 73 40 e1 42 86 0d 1d 3e 84 18 51 e2 c4 88 db 96 25 c0 98 51 e3 c6 04 4c 3e 7c 28 10 52 64 48 16 00 4c 9e 44 99 52 e5 4a 96 2d 5d be 84 19 33 25 0a 8e 1a ff dd c4 99 53 Data Ascii: Txdn4}#0/0%./&MR9)rf#\g;7`*d0'B(p?@wP~.!X22yet-"0"~. pm<&"`O"A@s@B>Q%QL>\|(RdHLDRJ-]3%S
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 2d 4e 32 61 ca 78 da 33 6c d9 1e 41 58 12 8d aa 60 e3 26 e1 18 4b 0f ae 81 0b 7d 6c 8b 11 b4 87 14 57 72 24 95 91 69 00 65 3c 66 14 11 9c ff 12 38 70 90 22 31 11 39 81 4d 9e 70 97 e1 b2 44 2e bf e9 1a 3d f8 12 8d 7a c8 e4 26 3b a9 4d 39 86 12 41 47 c0 20 62 64 a0 c7 67 06 65 64 2b 48 0c 09 04 d9 16 38 00 81 9d 3d 9c a5 1b 6b 39 ce 6d e1 e2 69 b4 20 68 6b da 60 ce 00 46 23 98 6e 1c e6 3f 15 08 04 64 d6 a4 01 82 42 cc 3e e3 56 4f c7 04 0a 29 1d 48 42 34 81 53 01 7f 4a 54 81 af e0 a6 1b bd 99 50 5c 01 e2 a0 2c 25 8d 14 32 c1 d0 05 74 22 9d 6e 64 86 27 4d 9a 40 10 56 94 23 2f 98 26 4c f2 46 2e 8e 06 e5 29 38 93 89 06 9e e8 99 42 ee 54 81 e8 d8 a4 d2 60 ea ab 58 3c 6d 0c 53 1d 4d 25 19 da 0a 57 44 a4 8d 6e 44 87 53 a9 d8 40 e0 30 21 3c 32 e1 01 3d 8b ca 93 a1 Data Ascii: -N2ax3lAX`&K}lWr$ie<f8p"19MpD.=z&;M9AG bdged+H8=k9mi hk`F#n?dB>VO)HB4SJTP\,%2t"nd'M@V#/&LF.)8BT`X<mSM%WDnDS@0!<2=
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 88 30 81 22 b3 34 1a 9c 3e 5d 19 c3 32 84 b2 9f 4b c0 4d aa 32 1f aa a2 63 02 c4 3f 9c 8d a2 00 80 cb 62 ba 24 1a 19 09 5b c2 36 c9 c4 52 a4 c2 0a e0 20 01 78 2f 1d b2 00 0e a3 39 9b 2b 43 83 71 99 40 28 c3 03 00 2c 73 0a b5 87 98 37 37 2a b0 38 62 20 53 cc 44 ab 49 80 5a c0 90 28 dc a8 a2 42 a6 26 10 81 e1 6b 18 60 74 c6 29 84 83 2c 32 a0 e4 83 08 2f 6c b3 d4 73 8d 31 78 03 28 78 03 fb 99 aa 96 79 1a 5a bc 8a 37 20 47 28 00 04 40 b0 04 72 6c ae 49 b8 38 35 74 88 ec 33 20 0c a8 bd ea 01 03 09 78 c6 4c f4 29 21 40 81 3e f4 b7 a2 1a 99 24 b0 26 29 bc c7 81 24 41 61 38 be ca c1 35 44 e4 ba 36 63 44 b4 18 03 35 40 83 1f 60 80 89 a4 48 ff 06 40 03 3c 98 38 82 72 9a a7 69 86 a9 18 03 40 88 c8 8a 14 c9 89 fc 01 3c b0 84 ab 9a aa 2a 50 b1 88 40 36 1d 02 07 8f 4b Data Ascii: 0"4>]2KM2c?b$[6R x/9+Cq@(,s778b SDIZ(B&k`t),2/ls1x(xyZ7 G(@rlI85t3 xL)!@>$&)$Aa85D6cD5@`H@<8ri@<P@6K
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 07 f7 b5 e0 be 4d 29 03 4a 38 88 70 ce 6b 9c 08 40 10 cf 06 76 08 ba f4 4b b4 60 04 5a 7d de 01 1e e0 3c 28 54 eb 7d 08 05 76 99 ba 74 bd ab f0 50 d4 fc d5 be da 38 1d a2 80 0b e6 61 94 cd 60 e8 a9 da 86 b8 da 45 fc 60 ed 15 e1 87 20 e1 aa cc 5f 8a 28 86 59 0d 83 cb 55 61 15 9e 82 42 45 60 87 d8 b4 05 46 4a 2e bd 8a 24 ae 4b 2b cd af 27 d8 a4 1e 16 e3 1c fb e1 ca 49 19 ff 6b 15 bc 22 a6 4a fc 3d 0b f0 a5 c8 33 b1 8a b0 9d 55 28 8e e2 01 2e 82 16 7e 88 2b 8e e1 a4 d4 62 ac e0 e2 35 f6 2f f5 34 a0 1d 1e e3 42 5e 2b 37 a2 80 d2 63 88 81 a5 af 82 dd cb 35 5e e2 a9 a0 82 b7 65 80 e4 a5 0a 37 b8 d9 27 4d e1 3a 56 61 ce 25 54 cf 5d 08 75 c3 e2 8a ec e3 b3 c0 03 bf f4 62 e9 02 81 30 36 e4 56 7e 26 37 2a 81 88 68 d9 03 8d 4b 88 88 59 36 4e 8b 31 a0 ca 48 8e 88 13 Data Ascii: M)J8pk@vK`Z}<(T}vtP8a`E` _(YUaBE`FJ.$K+'Ik"J=3U(.~+b5/4B^+7c5^e7'M:Va%T]ub06V~&7*hKY6N1H
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 67 7c b8 df 79 b3 86 7c 16 9e 7c e8 ab 7c e7 2b cc 34 da f6 87 48 fa cd f7 e7 70 47 80 fa 3e 00 82 76 33 ff d0 6f 58 e1 1e 7d 01 76 7c 8b d6 fa d5 4e 7d 8e 64 6f 76 34 27 c1 ba ae 06 97 7d 69 3e 75 04 c0 ab 85 c0 fd 4b b3 94 42 58 85 80 a7 d5 74 ef fd 01 4e 67 b9 6f 72 03 18 7e 97 e9 c8 e7 a6 77 ba 95 08 f7 f6 f1 e5 67 7e 37 12 5c 3c 2d b7 ac 15 93 77 a8 7e 9c a5 50 24 cf 7e 15 8e 71 b9 0f 7e ef 0f 71 72 a8 83 55 a8 83 ff 07 08 53 6c d8 04 28 58 50 0c 1b 46 75 0a 1d 68 e8 f0 21 c4 88 12 27 52 ac 68 f1 22 46 8a aa 16 70 ec d8 71 4f 45 1d 08 46 92 2c f9 ef 24 ca 94 2a 57 b2 6c e9 f2 25 cc 98 32 67 d2 ac 69 f3 a6 4d 0a 25 77 9e 98 38 42 01 d0 a0 41 67 98 c8 68 14 a2 9b 77 75 18 6d 32 e8 f4 29 d4 30 45 0c 50 ad 6a f5 2a d6 ac 5a b5 42 8a e0 f5 2b d8 08 90 ac Data Ascii: g\|y\|\|\|+4HpG>v3oX}v\|N}dov4'}i>uKBXtNgor~wg~7\<-w~P$~q~qrUSl(XPFuh!'Rh"FpqOEF,$Wl%2giM%w8BAghwum2)0EPjZB+

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49784	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:34 UTC	386	OUT	GET /wp-content/themes/tgtheme/img/zhongwen_a.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	771	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:34 GMT Content-Type: image/png Content-Length: 1483 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-5cb" expires: Mon, 29 Jul 2024 23:49:05 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 427829 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IKgWZgFUs%2B1j8mphI5KtBFd97QeBOtsgLnAdJqfb1hafxUjnv6%2FWOtXM9Z56WJVnKJl4Pfjoxz1NUru15Lp6XyRRcbtSzMpDn3shdgJoAreQ8vLrc1kvmcvDSlgZtJQUaVAVv1g%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cae3e4843e7-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:34 UTC	598	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1a 00 00 00 18 08 06 00 00 00 e4 82 ed c5 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:34 UTC	885	IN	Data Raw: 31 31 45 45 42 33 35 43 44 33 39 42 37 37 30 38 39 35 42 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 41 45 35 46 30 44 44 35 33 39 30 31 31 45 45 42 33 35 43 44 33 39 42 37 37 30 38 39 35 42 36 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 41 45 35 46 30 44 41 35 33 39 30 31 31 45 45 42 33 35 43 44 33 39 42 37 37 30 38 39 35 42 36 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 41 45 35 46 30 44 42 35 33 39 30 31 31 45 45 42 33 35 43 44 33 39 42 37 37 30 38 39 35 42 36 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c Data Ascii: 11EEB35CD39B770895B6" xmpMM:DocumentID="xmp.did:3AE5F0DD539011EEB35CD39B770895B6"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:3AE5F0DA539011EEB35CD39B770895B6" stRef:documentID="xmp.did:3AE5F0DB539011EEB35CD39B770895B6"/> </rdf:Description> </rdf:RDF> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49783	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:34 UTC	382	OUT	GET /wp-content/themes/tgtheme/img/anzhuo.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:34 GMT Content-Type: image/png Content-Length: 1376 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-560" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609576 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TaQhE5kmHbYC7FYKVP2Qyhmt3xQqcNtSOLjXelLeXIVf5HCs4fw3qt%2FPjWvQtF3%2FI5%2FrbCnnu5bScUQGtEr3OcRu030AhtldfMMIqQGlc%2BWN9zPIHVqBwc5W79ebN1EY15mwuVE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cae29421861-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:34 UTC	594	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 00 18 08 06 00 00 00 fe be 0d 4b 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRKtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:34 UTC	782	IN	Data Raw: 35 33 39 30 31 31 45 45 41 44 41 46 43 32 42 33 30 33 42 32 37 45 33 32 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 32 38 44 36 41 35 44 35 33 39 30 31 31 45 45 41 44 41 46 43 32 42 33 30 33 42 32 37 45 33 32 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 32 38 44 36 41 35 41 35 33 39 30 31 31 45 45 41 44 41 46 43 32 42 33 30 33 42 32 37 45 33 32 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 32 38 44 36 41 35 42 35 33 39 30 31 31 45 45 41 44 41 46 43 32 42 33 30 33 42 32 37 45 33 32 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 Data Ascii: 539011EEADAFC2B303B27E32" xmpMM:DocumentID="xmp.did:328D6A5D539011EEADAFC2B303B27E32"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:328D6A5A539011EEADAFC2B303B27E32" stRef:documentID="xmp.did:328D6A5B539011EEADAFC2B303B27E32"/> </rdf:Description> </rdf:RD

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49781	35.190.80.1	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:34 UTC	549	OUT	OPTIONS /report/v4?s=XqfpNCB3SFktbW8RwhTHy5mnn3vxB%2BvJRTV3K6uw8TmEM%2FZFd7owIcjs%2BJOODDsiPpio9unaCdbtKh3k%2BodyQqfkCz%2BbXRjOteWK5lPa4MXMy9wG4Z16lB3l%2FSXJMECm0KoIHAc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://www.telegramkv.com Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Thu, 04 Jul 2024 22:39:34 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49785	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:34 UTC	378	OUT	GET /wp-content/themes/tgtheme/img/d2.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	783	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:34 GMT Content-Type: image/gif Content-Length: 2202471 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-219b67" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609576 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Us4Sns20vLSIb%2BanAghaj1nEFwNw3Y58ia2xWg0sFD0KDlO7%2B%2BV3MVn%2B4It1fkvVMThQQ27nXS3h76PyktHqftp32b9NBqpnsFYkROQTB59gbhQ1fQzZfp6dvcFsH0R5vdih%2BF0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cae38314263-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:34 UTC	586	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 05 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 88 7e 68 ff 5d 1f fe d8 20 bc a8 71 3e 39 2d 00 00 00 80 76 62 ff d5 27 fa 90 16 ff fa ca cf 35 02 9c 92 7c 33 2b 07 ff 8c 00 4e 4d 4d ff ff ff 35 2f 20 a7 f6 ff fc ee 21 7d 09 09 80 80 80 63 5b 4a 35 30 21 ff 8b 00 3d 38 2c 32 1d 04 fb 90 15 ff b4 84 33 33 33 f9 90 15 3d 38 2d ff d4 26 87 7d 67 fa 97 17 cc cb cb fb a0 19 85 7b 65 81 78 62 fa 93 16 fb 9c 18 fe c0 20 47 41 33 0b 08 02 fe c5 22 ff d0 25 fd ba 1f 83 79 64 6e 66 53 fd b6 1d 42 3c 2f 51 4b 3c 12 0d 01 19 14 03 24 1e 04 79 70 5c fd af 1b fc 8f 13 fe e4 21 5a 54 45 f4 54 18 69 61 4f 4c 46 38 fc a5 19 db 3e 08 ff cc 24 ff d8 24 56 Data Ascii: GIF89a!NETSCAPE2.0!,~h] q>9-vb'5\|3+NMM5/ !}c[J50!=8,2333=8-&}g{exb GA3"%ydnfSB</QK<$yp\!ZTETiaOLF8>$$V
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 1e ff 64 27 89 23 01 f7 f9 f9 73 73 73 ff da 30 bb ee ce ff ef ab 5c 45 17 96 5d 13 97 7e 16 ff f9 e5 d2 c3 8e d6 e5 8c 42 37 1c d4 b4 2d 96 2d 04 ff 92 5d 14 14 14 1d 1d 1d da cd 99 67 46 19 d0 ae 26 f3 86 02 d5 c8 95 2a 18 03 ff 6e 32 91 7e 3e 67 1b 01 b5 f7 ff 33 0c 00 ff 83 4a d4 fb ff f2 92 42 d0 b5 59 3d 35 26 a6 f6 ff ff dd 42 e4 96 31 cd b3 5e c6 a9 33 c8 a9 27 4e 13 00 d6 84 25 a5 95 64 e1 63 1c 3e 34 09 a9 67 14 c2 bd 96 67 5b 3e f0 a0 1a e6 c1 27 6b 6b 6b ee 8f 1e bc a2 34 9c 88 5b 83 74 47 ff 94 07 40 10 00 41 2c 06 f4 8e 17 e1 e1 71 8d 7d 50 b2 ad 89 b4 a1 68 ff 76 3b d2 d1 d1 de de de 92 92 92 c3 88 43 fc ba 5d 5a 17 00 89 89 89 b4 87 53 fe e9 d1 da a0 4c 76 24 02 fb aa 4c df bf 3b 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 Data Ascii: d'#sss0\E]~B7--]gF&n2~>g3JBY=5&B1^3'N%dc>4gg[>'kkk4[tG@A,q}Phv;C]ZSLv$L;H\
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 0b 7a 8c 24 17 a9 60 37 3f fe b1 29 4f 92 c2 ce 88 58 c8 ae dd 0f 91 a0 04 40 e2 1e d8 c8 52 9e 8c 69 47 90 a4 2a bd 00 b0 1c 5d 72 29 d3 28 23 01 74 00 b6 4e 2a 4f 83 a1 44 24 08 14 17 47 53 42 50 88 49 50 a5 30 93 00 40 01 11 ef 95 43 91 a5 0c 70 39 33 5b 96 ee 90 b9 04 a5 0b d0 e4 4b 17 be e0 84 00 c0 a3 30 25 d9 04 1f 22 f3 28 cb e9 01 34 89 05 02 67 ae 31 9a e8 4c 94 12 ad 58 cd a0 f1 c0 86 8a 4a e5 36 85 59 c9 e4 7c d3 28 35 8a 01 3c 77 56 ff 4e 73 0a 8e 99 e9 8c 26 f4 48 d9 4e 76 f1 40 88 8a 82 e4 3c 55 79 84 62 8a ea 9e 42 91 e5 0b 0e e7 4f 23 06 f4 a2 8c 1a 28 3b 9b 78 26 03 a4 4a 9b 0b 8d 64 37 2d 09 51 9f ec 48 08 a8 e3 64 45 07 87 d1 96 32 2a 71 3e db 68 d9 2a 17 c3 55 85 54 98 54 e8 01 49 4b ca 93 e5 a4 e0 93 60 53 e9 4a 17 06 50 97 1a f5 58 Data Ascii: z$`7?)OX@RiG]r)(#tNOD$GSBPIP0@Cp93[K0%"(4g1LXJ6Y\|(5<wVNs&HNv@<UybBO#(;x&Jd7-QHdE2q>hUTTIK`SJPX
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 48 34 84 44 d8 30 52 f8 85 0b e4 82 40 b7 7a 3e 28 5b 7b f3 71 0b 84 82 69 e8 35 6c a8 83 df 45 73 5a 17 6c c3 a5 1c 15 90 44 5c b8 52 6b 98 87 ed 83 84 92 14 82 23 08 23 3f 68 1c f3 ff 46 5a 76 78 87 35 13 7c 86 88 3a 55 a8 4a 89 12 83 69 07 5a 1e c7 3e c6 32 88 f9 55 88 95 c8 3e 1f 28 81 41 97 7b 58 05 07 ca f1 7e a8 13 89 92 c8 35 a2 38 8a d9 e3 86 9c 67 7c d0 36 5c 7b 83 01 1c 18 2c 9f f8 8a 09 24 8b 7a e8 5f 88 02 79 76 c7 89 c9 21 7a 61 83 86 be d8 35 bb 08 8c 6c 84 88 91 44 73 56 c0 84 8e a5 8a c9 41 61 3a d3 7f cb 18 57 b1 e8 8c ce 43 8b f3 54 69 68 e7 87 3c c5 25 cd 58 2c a0 f8 7b 94 e8 8d a8 83 6f 67 b7 6f b7 b1 1a 7c d5 75 60 33 7e db 58 3a 5e c8 8e 88 04 8d 7a 14 6b 25 80 7f a9 a8 1c d8 88 3e f7 48 3a f9 a8 8f 6d 74 89 91 24 8e 4b 48 86 10 55 Data Ascii: H4D0R@z>([{qi5lEsZlD\Rk##?hFZvx5\|:UJiZ>2U>(A{X~58g\|6\{,$z_yv!za5lDsVAa:WCTih<%X,{ogo\|u`3~X:^zk%>H:mt$KHU
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 2b 04 36 29 21 5c 11 1f 9b 6b be 92 63 9f 64 62 26 a0 9b b3 ec eb 52 70 74 2f 0c f4 3e 3f 73 b9 bb 1b 21 9f f3 0f cf b1 b6 bf eb b9 e8 ab 03 c2 cb 03 52 14 35 00 1c c0 bc 55 31 68 e2 b7 71 92 c0 2f 52 b1 62 61 09 7f f0 0d b9 90 07 77 a0 bf 26 02 c1 b7 23 c1 fb a9 be a7 8a c1 19 06 29 1b 5c 01 65 ab b4 bc 09 c2 61 81 03 08 b0 c3 3b ac 01 1d 90 05 96 40 c2 7b 60 c2 28 bc 24 d4 b2 c2 f9 c9 9f 4e 55 bc 30 bc 33 c7 22 b6 7e fb 2e 1e 3c 99 38 2c 16 1a c0 c3 58 bc c3 26 70 03 07 d0 c5 7e 90 08 ad c0 06 7b f0 08 82 30 c5 45 9c 24 76 42 2d e8 8b 9f fa c9 9f 15 5c 04 f2 da c4 a2 64 00 4a a5 2e ed 42 34 67 5c 81 6f d1 01 59 9c c5 2c d0 c5 80 1c c8 5d 3c 09 bf 10 c6 65 f0 08 44 9c c7 bc ff 99 c6 6a 0c 27 ee a2 03 12 ac 9f 2d 0c 45 15 ec 54 70 0c 31 79 f8 28 02 5a c7 Data Ascii: +6)!\kcdb&Rpt/>?s!R5U1hq/Rbaw&#)\ea;@{`($NU03"~.<8,X&p~{0E$vB-\dJ.B4g\oY,]<eDj'-ETp1y(Z
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 65 2f d8 93 c0 04 84 5f f8 86 7f f8 88 9f f8 8a bf f8 87 cf 07 9e fd f8 90 ff 07 ff 50 00 93 5f f9 94 7f f9 96 9f f9 98 bf f9 99 1f 18 25 5d f1 29 8d ec 9f ae 08 7c 5f fa a6 7f fa a8 9f fa 75 8f 0c a0 5e 06 a0 f0 fa b0 1f fb b2 0f 0a a8 50 fb b6 7f fb b8 af 0b ba bf fb bc df fb 9f f0 fb c0 1f fc c2 0f fc 7c f0 09 7c 70 fc c8 9f fc ca 7f fc 4c c0 07 cd 8f f8 d9 30 09 2a fd 01 c6 30 03 05 70 fd d8 9f fd da bf fd dc ff df fd de af fd 44 f0 fd e2 3f fe e4 ff 17 68 ad d6 a2 ef e9 7a a0 fa ec df fe ee df fe c4 00 ea 3a 40 fe 44 10 fe f4 4f fe f8 8f fd f5 6f ff f9 5f ff e4 8f 0b 00 e1 e7 c0 40 82 05 0d 1e 98 34 a3 c0 42 86 0d 1d 3e 84 18 51 e2 44 8a 15 2d 46 fc 97 51 e3 46 8e 1d 3d 7e 04 19 52 e4 48 92 25 4d 76 44 90 52 e5 4a 2e 07 5d be 34 a8 69 c0 4c 9a 34 e3 Data Ascii: e/_P_%])\|_u^P\|\|pL0*0pD?hz:@DOo_@4B>QD-FQF=~RH%MvDRJ.]4iL4
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 45 da 07 b0 ff c4 50 7e 8b 6c 64 2e 67 c7 8f 75 ac 2a 96 12 d1 62 01 88 a0 c9 8a 71 b2 72 19 e3 8b 28 49 39 4a 53 c2 24 4a 8e 99 d2 2a 43 86 2c c7 28 ff 6b 59 bf 9c 08 11 86 41 0a 4b 7a 6f 21 65 bc 9a f5 20 82 4b 5d ea 52 0b bd 2c 15 36 9f b2 b3 9e 15 d3 98 67 8b 63 62 50 60 96 1c 2c 73 99 77 7c 09 26 1c 25 cd 90 dd 8b 64 d6 f2 e6 24 29 12 c9 ab cd d0 19 8c fc 41 15 94 b0 50 25 fc e0 07 b9 ac 04 33 d2 a9 19 76 ba f3 9d 66 73 cf 3c cb a2 4c 7b 4a 60 09 30 11 16 5d 88 c5 cf 7a 8d 8c 2e e8 00 e8 6f 08 ea b2 ae a9 a0 8b 37 54 02 16 02 30 53 9a ce 14 0b 0d fd 62 20 14 c0 0f 52 a9 d3 29 42 bc 55 3b f3 72 51 ca b9 87 68 30 09 42 47 49 d9 4c 97 74 8c 2e f3 22 29 bd 9a 46 97 a7 2d 2b a0 7f d9 9d cb 16 d8 90 1a da b0 0a 35 05 2b 58 b1 50 05 46 02 e3 52 3e 6d 0a 50 Data Ascii: EP~ld.gubqr(I9JS$JC,(kYAKzo!e K]R,6gcbP`,sw\|&%d$)AP%3vfs<L{J`0]z.o7T0Sb R)BU;rQh0BGILt.")F-+5+XPFR>mP
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: c1 99 c3 24 78 53 35 32 2c c3 9d c3 2e 8e 0b 80 da da 37 3b 89 38 5b d9 99 08 84 08 3a ac c3 b0 58 30 3c 9c 2b f9 a0 8f 3e 9c 0c 86 43 0a 87 53 98 12 24 82 09 5c 96 05 82 3f f2 01 31 45 b4 ae 11 e3 40 9a 82 44 08 6a 43 87 20 82 76 83 c3 2e 64 42 4c 64 10 f7 c8 2c a4 b3 bc 14 59 11 50 8c 8c d1 4a 8b d2 ea 9b 1a 88 40 1a 50 1f 97 11 bd 85 e8 31 07 0a 84 1f 74 c5 20 bc 37 d7 7b c4 1b 1a a3 85 50 81 21 69 46 38 81 43 db e3 45 f6 48 c1 94 38 2a 98 d8 bd 8e 7a c1 83 78 26 ba 88 26 62 8c 0b a8 a3 8b 18 aa 81 15 ba c5 49 74 46 3e 59 ad 8a ab c6 10 63 44 33 cb b7 c2 7b 34 08 58 95 24 94 2c 37 1a c7 05 29 47 04 98 bc 02 3c c0 7c da 27 78 84 0c 14 8a 21 ff 01 a3 81 19 58 13 2d c1 c7 70 42 97 55 1c 9f bf eb c7 45 ac bf 9a 0a 3b f2 71 ac 52 31 48 9e 41 c8 84 64 8f 76 Data Ascii: $xS52,.7;8[:X0<+>CS$\?1E@DjC v.dBLd,YPJ@P1t 7{P!iF8CEH8*zx&&bItF>YcD3{4X$,7)G<\|'x!X-pBUE;qR1HAdv
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 90 60 30 a0 60 30 30 83 0b 36 03 3a d0 60 3a 98 80 0e a6 83 f2 84 a0 7f a5 df d2 e0 de 2a a5 4b 82 9d c9 9a a8 c9 a1 4d 58 9a 58 58 b5 d9 5d 07 22 e0 02 06 b2 1d b8 d8 8c 65 e0 51 80 e0 09 b6 e0 0b d6 e0 0e 06 e2 20 16 e2 21 26 e2 22 ee 60 33 00 dc 11 2e 0d 13 a8 5a ab 75 c1 03 50 57 9a 60 d7 ad 2d da 99 90 06 b5 81 81 ac b3 de 1b 56 60 1d 8e 60 2d a0 60 0c fe 61 23 26 e3 32 36 e3 ff 33 0e 62 61 15 61 25 3e 0c fb 65 0c f0 5d 2a 28 36 d8 e5 ed da 9a f8 da a2 11 e0 da 01 c9 7c e5 e2 1c 7e 60 1e f6 61 0e 46 e3 41 26 e4 42 2e 64 24 26 9f 35 66 63 c3 e0 de dd 74 e2 70 2b 59 9a 38 59 94 05 d2 9a b0 db a2 89 e1 a0 9c b7 03 c6 61 07 fe e3 30 0e 64 43 16 e5 51 26 e5 52 a6 83 44 5e 64 e2 15 d8 37 8e b2 df ac 89 e0 1c 5a ba 45 0a b5 79 20 c4 14 b3 1d d0 02 41 2e e5 Data Ascii: `0`006:`:KMXXX]"eQ !&"`3.ZuPW`-V``-`a#&263baa%>e](6\|~`aFA&B.d$&5fctp+Y8Ya0dCQ&RD^d7ZEy A.
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: b9 a7 7b a9 1f 85 bd e7 fb 2c 30 fd 2c 10 07 43 50 7d ec 34 82 94 d0 80 d7 c7 01 1c d0 00 d9 d7 00 c2 ef b6 26 66 0c ff e6 9e 09 74 f8 6b 7d b6 fc c7 af f5 5c c7 85 06 28 78 ca 17 f8 33 c7 05 49 ef f5 a6 b6 80 05 a8 0d fe 3e 5a e6 69 01 d0 0f 7d 2e bf fb 42 28 84 d3 2f 07 d5 37 04 20 a0 84 4e 78 00 3c 40 84 45 60 8c 13 70 8f 0e b0 7d 25 a9 f0 10 a8 76 b3 80 ef 99 80 07 fa ee eb 7c 3e 03 e0 77 f4 c9 9f f4 fa 6f 00 fc 3f 79 5f d0 7f 6f 07 08 5f 16 06 5a 80 00 0b 02 c2 84 0a 15 96 48 e0 f0 21 c4 88 12 27 66 1a 60 f1 e2 c5 43 07 36 72 ec e8 f1 23 48 8e 30 0a 29 28 69 f2 24 ca 94 2a 57 b2 6c 99 32 50 a1 98 85 ce 64 a9 29 ce 10 ce 90 3a 77 82 6c 81 e0 27 d0 a0 08 3a fc 2b 6a f4 28 d2 a4 4a 97 32 6d ea f4 29 d4 a8 52 a7 52 ad 6a d5 a8 d0 ac 4f 78 7e 4c 83 d1 22 Data Ascii: {,0,CP}4&ftk}\(x3I>Zi}.B(/7 Nx<@E`p}%v\|>wo?y_o_ZH!'f`C6r#H0)(i$*Wl2Pd):wl':+j(J2m)RRjOx~L"

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49786	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:34 UTC	617	OUT	GET /wp-content/themes/tgtheme/img/d8.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:34 GMT Content-Type: image/gif Content-Length: 2700330 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-29342a" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609576 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=38cgRYXsnjD1bVbOagdESASfasJ73PyUXDNFg90%2BMtNk9xUmWUo7nUhugBWpgNe1y2b4Ozh3QkDMw5n5qABJ6lBqXOj6pjrXBMbE%2BFFMgHEfEF8e%2FCwdmqlS3gu5BI2br1aox5k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cae8e0e726f-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:34 UTC	590	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 f6 ce b8 fc ee 21 cf 35 02 ff ff ff 00 00 00 dc 60 0a fa e6 db ff d5 27 fa 90 16 af 88 72 7d 09 09 ff 5d 1f af 88 71 fb 90 14 fb 8f 15 af 88 72 fc a8 1b ff d5 26 ae 87 71 fd bb 20 fa 94 16 af 87 71 ff cd 24 fe c5 22 ff d1 25 f9 90 15 fd b2 1d ff b4 84 f9 8f 15 db 60 0a ff d8 26 fd b6 1e fb 91 16 fe de 24 b3 8c 76 fa e3 d6 c0 99 82 f3 ca b4 f5 cd b6 ff c9 23 fc ec 20 fe e2 23 fc 9d 18 ff d3 26 de 60 09 fa 9a 17 fb a5 1a d7 b0 9a fe bf 21 fb a2 19 e5 bd a7 fa df d0 c9 a2 8c dc b4 9e ed c5 af bc 95 7f ea c2 ac fa 98 17 c4 9d 87 fc ab 1c fd e7 22 d3 ab 95 fc ae 1d b8 91 7b fa 95 17 f6 c8 ac 10 Data Ascii: GIF89a!NETSCAPE2.0!,!5`'r}]qr&q q$"%`&$v# #&`!"{
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: af 56 13 f3 ad 1d f2 b9 97 e1 8d 33 e7 af 21 be 9d 1c ae 8c 70 ff 9c 68 b4 60 12 f1 be 23 e1 a4 1f ea 6d 0d ff f2 bc e0 75 2a da 9a 1d f6 8b 14 ff da 42 af 92 1a b8 85 62 c9 8c 58 41 33 2a aa 8e 7f f4 81 13 50 39 09 ff 70 35 79 4d 0c c0 79 4a a4 7f 6a 99 77 63 d3 8c 46 f4 b0 1e e8 a0 70 a7 47 11 95 2d 0d c7 a7 95 bf 2b 03 5f 4f 0d 92 90 8f 67 3b 08 2f 2f 2f ce 6d 2b d9 4a 06 ff f7 d6 6f 56 48 d3 90 1c e7 8f 55 fc ac 51 ff f7 d7 d8 7c 12 e1 bc 22 ff ec a1 f0 76 10 c1 bf bd fd cc 8c fe e5 c3 92 54 0c 1f 1e 1e 9c 82 74 c9 32 04 cb 3b 15 a4 9e 9b 72 70 6f 82 39 0b fd d9 ab 52 51 50 57 44 39 b3 af ad a8 60 0e b5 2d 12 ff 68 2c fd c6 7d ff f6 e3 ff 62 25 d0 d0 d0 fe f3 e2 d6 a8 88 da c9 bf 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 Data Ascii: V3!ph`#muBbXA3P9p5yMyJjwcFpG-+_Og;///m+JoVHUQ\|"vTt2;rpo9RQPWD9`-h,}b%H*\
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 8b 06 67 be 45 8a a8 91 90 69 02 24 d9 a8 c4 7e 1d ab 32 71 b4 64 79 4c d3 85 4d 4e 30 8c 97 92 d9 ef 48 f3 47 51 8e d2 34 8f 34 65 fb ac d8 27 e6 01 20 72 19 74 a5 7d 30 99 80 e9 c9 d2 7d c1 7a 98 69 42 a9 4b e8 60 72 90 bf 8c a4 02 59 94 b4 d2 14 b3 3d a6 51 63 32 db 77 c8 2b b2 08 88 ac 7c 26 79 4c 23 ae 69 b6 2f 81 97 9a d1 30 b5 b9 1d 15 6a d2 9b e0 43 a5 a5 02 37 43 ca 90 53 3b 38 84 8c 08 d0 c9 bf dd 59 4a 95 8a 7c e7 73 a2 49 ff 4f 24 fa 90 45 5f 73 a6 3e 8d 73 0a 6e f6 13 98 ad b2 25 36 69 38 d0 e2 9c c6 97 07 bd 9d 3a 2b 65 26 19 98 a6 86 0d 75 0d 1d 27 53 af 88 22 cf 9e 95 82 55 09 2e 9a d1 dd d0 ae 94 1e a5 5e 35 fd 24 b3 76 5a a6 a4 ba a1 9d 34 53 7a bb 24 5e 0a 7b ab 74 22 4c 73 03 4b 9a 22 0f 9c d6 04 40 40 1b b8 53 d7 e8 cf a7 b8 f3 5f 42 Data Ascii: gEi$~2qdyLMN0HGQ44e' rt}0}ziBK`rY=Qc2w+\|&yL#i/0jC7CS;8YJ\|sIO$E_s>sn%6i8:+e&u'S"U.^5$vZ4Sz$^{t"LsK"@@S_B
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 86 84 5f a1 84 09 40 48 5a 62 5f de 05 84 2c f8 81 0b 98 7e 4d 57 83 59 78 83 51 70 81 39 27 08 1a 98 79 50 48 86 bd 45 85 e4 c3 6b 6a a8 15 75 95 00 12 64 27 48 c6 5e 62 ff b8 0f bd a5 60 32 92 07 23 d7 7c aa 90 87 79 08 0d 4d 97 0a 32 d2 88 b1 25 86 03 e0 0e bd 25 04 1d e6 29 95 71 75 87 98 15 2a 64 47 77 92 72 ec c5 09 ef f0 67 42 40 84 30 12 79 39 b7 06 98 88 89 67 a0 73 f7 17 23 70 d8 5b 2b 78 80 e6 e7 58 22 f6 22 23 55 1a 6d 97 8a 53 d1 53 a8 62 6b 27 56 8c 32 a2 70 f4 27 6f 78 98 8b 37 08 05 4d 77 6f d2 b7 5c f2 c0 5f a3 d8 61 6b 75 84 ca c8 15 a6 91 59 d4 95 79 d7 e5 06 85 c6 22 56 48 72 b8 68 8d 79 b8 8b 39 77 79 be 98 6e de 75 6d 2e f2 46 95 31 8e 5e 41 3b 53 e0 86 3d 77 62 e8 27 23 df d0 70 f5 17 6f 5c 30 81 64 c0 0d 03 e0 0b 64 00 8f d8 18 6f Data Ascii: _@HZb_,~MWYxQp9'yPHEkjud'H^b`2#\|yM2%%)qu*dGwrgB@0y9gs#p[+xX""#UmSSbk'V2p'ox7Mwo\_akuYy"VHrhy9wynum.F1^A;S=wb'#po\0ddo
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 6f d8 6b 83 bf cb bd 03 50 a2 e0 db a8 50 90 b5 4d d7 ba 90 f1 ba e9 db 11 05 14 2b 53 9a 10 bc d4 a0 45 62 bd 62 19 a2 d5 48 81 36 ca bd ae 60 b5 fd bb a4 92 00 c0 c5 79 be cb 5a c0 24 a1 42 dd 74 8c 70 24 bd a4 f1 8f ae 37 72 db 79 06 80 6b 83 07 0b bc 7c e0 a5 17 ac b0 d9 49 a7 cc 17 27 1e 7c 12 89 e8 45 24 05 11 89 98 9f 2f 32 08 4d e7 b1 79 48 09 13 7c 80 7c 20 0a 16 1c c3 f2 ca b0 39 47 b7 a8 78 c3 1e 71 c0 2d 42 b4 2f 05 11 a7 a1 95 2e a2 ab 29 29 6f 42 8c 89 73 40 06 7b 40 06 3c ab c4 a5 5b b2 aa 7b be 04 0c c5 18 91 88 dd 64 7d b5 cb ac a6 41 9e 2f e2 c0 e7 59 00 6f b0 c2 12 68 0b 64 bc c7 13 b8 96 0e f8 c4 6a cc 11 39 ec 22 79 2a b1 11 01 c2 45 a2 73 09 ff 49 81 81 c0 08 0a c0 08 b2 e0 0d 78 cc c7 0a cb 0b ba 30 0d 0a a0 09 90 a0 a3 39 17 c8 24 Data Ascii: okPPM+SEbbH6`yZ$Btp$7ryk\|I'\|E$/2MyH\|\| 9Gxq-B/.))oBs@{@<[{d}A/Yohdj9"y*EsIx09$
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 7f 1a 56 df 22 41 6f ce 47 4d 1a 62 2d f7 87 df 6f 82 2f 10 ca aa e6 45 22 ee d0 2e d3 8b cd f5 d0 ab 9c 8f 2f 10 fc 5a f8 2d e2 f6 7c 6f 50 72 2f a5 9c 26 f8 ca 3a ed 26 3f e9 89 4f ea 7e 7f f2 7f 2e f8 b4 01 b0 30 f2 ec 23 91 97 7e ff ec 43 0f e1 fc 1a d9 93 cf e6 64 7f f9 53 e5 e7 88 ff f5 fc 2a 02 2b ff 22 b6 29 ce a5 d1 c6 53 85 dc dd ae f6 ca 9a 00 cc 6f 24 20 af a7 22 01 d9 5c 0f ae c5 2c f8 fc ff 1a ca 48 82 f6 28 0f 12 b4 23 f9 3e f5 ec 3d 7f e6 ba 1e fb 76 22 fc 4d fe c1 71 6c 56 99 1f 19 27 24 f2 b5 31 fd 46 e2 fc 69 1f 12 98 69 56 07 ef e8 8f 5e 1b 00 41 02 c0 40 82 05 0d 02 a8 91 40 e1 42 86 15 fe 3d 84 18 51 e2 44 8a 15 ff 55 60 98 31 41 8d 83 1d 3d 7e 04 19 52 e4 c8 82 38 34 36 b4 98 52 e5 4a 96 2d 5d be 84 19 53 e6 4c 9a 35 6d de c4 99 93 Data Ascii: V"AoGMb-o/E"./Z-\|oPr/&:&?O~.0#~CdS*+")So$ "\,H(#>=v"MqlV'$1FiiV^A@@B=QDU`1A=~R846RJ-]SL5m
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 20 26 4d 22 65 bc 81 ce 4c 89 1c f2 a9 b2 79 15 b4 81 d8 42 06 cb a0 79 25 7c b3 d1 22 5e 4c 57 c6 bc fc 71 97 c7 d9 c2 0e 7d b9 05 1b b0 ff ad 3f c4 6c 19 c9 52 f4 1e f5 88 f2 21 0c 28 e3 14 18 f9 cc f7 1c c1 92 be 94 c2 d1 58 88 48 6c 5e 4b 53 93 ec 8e 13 ab f7 90 53 30 b0 27 3f 38 26 39 bb d3 4b 74 06 70 9d ed 44 98 57 1e 78 1c 75 e2 e5 49 cc d4 c1 40 f5 d9 1d 29 f8 b2 79 54 30 41 2d 5b 04 50 74 91 ac 68 04 2a 01 06 e3 14 1d 16 4e 01 9e 0b ad d0 12 a4 79 49 f4 25 73 a2 14 75 27 52 04 37 a0 ed 2d c4 3f 51 44 51 3e 41 3a 20 73 3a d4 87 2d d5 08 3b 51 5a 28 50 2d c9 90 0c e9 a3 42 67 4a a0 54 0e 32 93 2b 93 8e 1e 77 6a 28 92 31 6c 47 a1 8c e4 42 3e 3a d4 25 f1 f3 92 3e 6c 82 2b 6d b3 d4 4b 69 0a 8d 15 b2 81 00 a3 6a 3c e4 51 55 54 0d f5 a5 ff aa f9 48 ae Data Ascii: &M"eLyBy%\|"^LWq}?lR!(XHl^KSS0'?8&9KtpDWxuI@)yT0A-[Pth*NyI%su'R7-?QDQ>A: s:-;QZ(P-BgJT2+wj(1lGB>:%>l+mKij<QUTH
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 09 50 40 3e c4 42 fb 53 81 a9 5b 85 39 dc 3a 19 74 38 20 c8 43 45 b4 c4 06 9c 80 2e 84 38 24 23 19 35 f0 83 32 fc 80 44 bc 44 35 bc 80 1d 60 c1 87 03 04 50 80 c4 ba 5b 3e 77 a3 44 3d 1c c5 4b ac 02 22 20 02 0f d0 41 4d 3c 3c 1b 23 0a 62 c0 c0 76 cb 01 1f 38 81 58 bc c4 15 98 80 46 b4 b9 47 5c c5 91 30 c0 87 f3 01 58 14 46 45 4c 01 14 08 80 69 e4 01 5b 3c 00 62 c4 45 cf 03 c3 9e 28 86 75 f3 c5 09 78 c6 67 bc 00 fc 83 b8 47 78 c1 64 ec 3f 3b 6c b7 16 08 c6 70 8c 45 26 98 c6 78 9c c6 14 a8 82 eb f3 81 4d 14 c4 5a ab 05 88 03 82 1a 74 47 45 f4 80 10 08 01 22 98 be 22 30 c6 a2 93 43 74 94 9e 99 73 b8 0f f8 c7 58 24 02 79 94 48 14 08 81 ff e9 bb 80 6c bc b6 0c c0 03 f4 3a 11 62 68 b8 49 ac c4 87 54 c3 2a 80 c7 78 e4 01 82 94 3e 83 84 b8 56 50 48 82 08 02 86 64 Data Ascii: P@>BS[9:t8 CE.8$#52DD5`P[>wD=K" AM<<#bv8XFG\0XFELi[<bE(uxgGxd?;lpE&xMZtGE""0CtsX$yHl:bhIT*x>VPHd
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: ce 07 8d dc 67 1a 5f 6b fb 03 23 35 d5 08 66 c0 10 a8 4f 5b b4 00 76 43 9d 9a b3 36 b6 55 5e e6 f5 e0 e9 33 dd 69 44 01 5b 5c 81 9d 45 00 68 35 2b e3 c0 db 5e 73 dd d2 5c de 15 6e 40 ee dd 5f e9 bb c7 05 ce dd 6b cb e1 d2 4c 5f 1e 46 d5 e7 e5 49 f8 25 e1 88 c8 9f a9 fc 07 00 88 08 ca ad d1 8b 45 e2 05 6c e1 00 a8 48 0c 98 de 0f 25 9b 6b 4b 5e 09 bd df 2b 46 d5 f6 9d 4e ff e9 4b d7 6a f3 e2 95 38 82 7f 68 63 29 86 63 00 32 81 39 36 81 7f a0 e3 3b b6 e3 3b 9e e3 28 1e 88 28 f6 63 38 f6 63 99 28 dc 5d cb 4a 09 e5 03 32 16 db f6 45 81 7a 9c 80 26 46 1c 05 2d 64 08 46 64 f9 5b d6 c4 8c de 6b 5b e3 04 01 5f 23 d5 d2 49 9e 3f 10 4e cc 9c 4d 50 5e 4b 1c 13 ae b6 a7 7d cf 31 50 61 4f 06 e5 b9 7c df 03 68 59 6b 43 bc 0e 71 da 1a 25 07 4f b6 cc d5 b4 45 ff ed 35 dc Data Ascii: g_k#5fO[vC6U^3iD[\Eh5+^s\n@_kL_FI%ElH%kK^+FNKj8hc)c296;;((c8c(]J2Ez&F-dFd[k[_#I?NMP^K}1PaO\|hYkCq%OE5
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: ef f7 f0 08 51 bc 6f fc c7 37 75 5d c8 35 b4 c4 17 10 6f 58 c1 3f f2 8c 1f 00 54 70 76 62 27 80 b2 47 4d ff db af f3 c8 ef 78 97 ae b6 ae 3f 7d db e7 76 ad 6f fd 6a 0b 71 7e 4d 76 37 cf 06 4e 90 07 dd 77 f1 4a d8 4d e7 cf 72 de 27 7e e8 80 d9 c6 77 7c db 57 fd b6 f7 69 e3 6f 58 e9 27 76 e8 c7 42 55 80 03 27 10 00 45 80 83 3a 90 84 1c 04 7f 17 a7 fe ea 77 8e 6b fb 79 15 a7 7a 62 a7 fe 84 09 51 a7 e6 d7 f6 37 75 f1 bf 41 49 00 08 38 4e 04 10 2c 48 f0 4e 94 03 0a 17 32 5c 48 e0 21 c4 88 12 21 c2 42 60 f1 1f c6 8c 1a 37 72 ec e8 f1 23 c8 90 1b 39 58 2c 69 12 43 c3 94 2a 57 b2 6c e9 f2 25 cc 98 32 67 ae 5c 94 66 62 44 2d 90 2c 72 10 e9 f3 27 d0 a0 42 87 8a 34 69 34 07 cd a4 4a 57 e2 6c ea f4 61 a5 98 aa 06 1a ac 2a 60 9b aa 97 97 9e e2 ac 68 31 03 d1 b0 62 41 Data Ascii: Qo7u]5oX?Tpvb'GMx?}vojq~Mv7NwJMr'~w\|WioX'vBU'E:wkyzbQ7uAI8N,HN2\H!!B`7r#9X,iCWl%2g\fbD-,r'B4i4JWla`h1bA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49787	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:34 UTC	378	OUT	GET /wp-content/themes/tgtheme/img/d3.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:34 GMT Content-Type: image/gif Content-Length: 2254846 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-2267fe" expires: Fri, 02 Aug 2024 18:49:35 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 100199 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3FAIZBNqQTvwRm6XpoKfEivoKD0LhqsAGRQE1oVmxtRjxy83j2ewyC%2F6wgcH%2FG2uHOxvsbyQN9okxJsrDf3kupmRLrQ%2BOEIi6payzUy743oT5nf7mkyVWtzlOphORYzd7pssFeU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29caf3b0f4302-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:34 UTC	590	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 fe d8 21 ff ff ff fc ee 21 03 b4 ff 72 89 12 a6 c8 36 00 00 00 ff 5d 1f cf 35 01 fa 90 16 7d 09 09 ff a9 8f 02 b3 ff 01 b4 ff ff b4 84 cf f2 5c fe d8 20 fb 8f 15 fe d7 20 71 89 11 ff d9 20 01 b6 ff f9 90 15 f2 52 17 fe d4 20 fd 5a 1d ff d8 20 e9 49 10 db 3e 08 fe d0 1f fa 95 16 fb 99 17 ee 4e 13 d2 37 02 f9 57 1b fc eb 20 fb a2 18 f6 55 19 72 88 10 d2 3f 03 fc b4 1b fc ce 1f fe c7 1d d4 39 04 fe db 20 fc af 1a cf 33 00 fb 92 15 fc aa 19 dc 5c 09 fe e2 20 d7 3c 06 fe fd f3 e5 46 0e e1 71 0d fe de 20 f3 af 18 d8 54 07 fd bd 1c d4 48 05 00 b3 ff e1 44 0c e7 86 11 fd b9 1b a3 c5 33 fb 9e 17 fe Data Ascii: GIF89a!NETSCAPE2.0!,!!r6]5}\ q R Z I>N7W Ur?9 3\ <Fq THD3
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 5d 5d 5d b4 ae 18 d8 4e 06 53 c0 b8 d4 d2 45 ff ae 7d dc 62 0a c8 b9 1a 10 10 10 ab cb 42 90 99 14 bc d6 68 c5 d0 52 e2 ef b6 ff 75 40 21 b8 e2 8e 79 12 ff d5 24 80 80 80 74 c4 9a f6 8a 14 ff f9 dc ff 9e 6a f0 d0 1f d0 d0 d0 ff ef a3 f0 7a 10 bf b5 19 c7 35 03 40 36 08 7e 08 08 cc 8e 14 9a ca 78 b3 cd 62 c0 c0 c0 b9 88 1a f0 f0 f0 a0 a0 a0 ef a0 15 f4 b6 1a 6f a4 98 db 94 32 00 bd ff 55 67 0d c3 5d 0f 65 7a 0d d7 f4 77 fd cc 8e b7 99 54 a0 5d 12 aa bb 31 cd e0 8e 1c 07 00 e0 e0 e0 40 40 40 9b 9d 6f dd f6 8a 9f 9f 9f c2 d9 75 fc b8 5d 90 90 90 70 70 70 90 8d 15 fb a3 38 e3 f8 9e fd d9 20 2e 0c 00 bd 73 17 4d 13 00 c7 dd 81 16 1b 03 77 1d 01 af af af d2 f2 66 39 92 bb b0 b0 b0 8f 8f 8f 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 Data Ascii: ]]]NSE}bBhRu@!y$tjz5@6~xbo2Ug]ezwT]1@@@ou]ppp8 .sMwf9H*\
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 55 fc 38 9f 36 89 28 09 c6 9b 9c 19 ca c1 89 f3 a9 8f 06 bf e8 85 21 b7 f6 0b 44 ca 10 89 cb 12 e3 97 24 19 16 13 12 c4 45 46 80 5c df 76 71 8f 2e 14 f1 17 bb 18 e5 0b 3d 69 ca 01 1a 10 11 ea ba 21 03 59 f9 15 08 0a c4 45 80 9c 9c f9 10 89 8a 5c ea 52 63 66 e0 65 2f d3 a7 8e f7 ad 4b 0b 76 94 4f 24 89 49 15 d7 89 28 93 7d 63 87 2d 7b a9 8a 67 c6 ac 17 d2 ec 65 17 70 36 30 22 30 b1 36 23 e4 e6 56 f2 57 a1 24 b0 91 6f 19 9c a6 11 cd 19 ff 33 33 70 42 9f 34 28 a4 c6 1c 69 a1 4d c9 b3 2b 42 ab 98 2c f7 06 40 7d a6 4f 94 fc 14 58 24 30 56 4b 53 72 42 a0 31 8b c4 23 b5 79 d0 ae 50 d1 48 5e 58 28 d7 1a ea 50 f4 41 34 a2 1a eb c5 2f d2 39 c0 5f b0 63 6f bf e3 4f 12 3a da 15 7a 6a c6 08 57 e4 5a 00 4b 8a 3e 8c a2 b4 9f e5 50 05 27 86 ca 89 5f a8 e2 a4 7c 8b 69 77 Data Ascii: U86(!D$EF\vq.=i!YE\Rcfe/KvO$I(}c-{gep60"06#VW$o33pB4(iM+B,@}OX$0VKSrB1#yPH^X(PA4/9_coO:zjWZK>P'_\|iw
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 98 71 67 90 85 45 78 72 9b a7 84 5d f8 85 16 d1 1d 74 27 39 0c b8 25 4b 90 0a 67 98 86 7c b8 6f 55 c0 86 30 88 78 9c c7 85 71 28 87 13 d1 1e 24 c8 35 4c 30 7b 6d d7 09 9a ff 20 01 7d 18 89 19 07 88 2f 18 80 b8 37 04 5d 08 73 86 18 11 f2 51 6a cb 02 04 52 18 25 49 e0 88 b7 97 6d c2 10 07 db 76 84 cf 50 0a 60 e0 86 92 c8 82 94 98 81 d6 17 05 5d a8 7c 9b d8 10 74 c8 35 40 50 04 ef 67 21 a6 90 0b a5 58 6d 60 90 8a df e7 07 82 f8 8a 12 e8 82 b1 68 76 48 68 7d 1e d0 85 37 78 8b 28 d4 1d c6 26 33 ee 07 25 7b d0 0c 41 78 6d 67 10 76 45 f8 0c 96 88 8c f4 47 81 cb 08 70 32 68 7d 1d 58 83 9a 28 8d 0b 31 75 d6 08 5d 3c 62 0a 8f b8 6f e4 98 85 1b 28 8e d7 37 0a e5 18 70 c2 70 7d 84 b8 84 ec c8 10 e8 b1 83 19 b3 8b bd d8 1d 7b 30 0b db 88 6d 55 a0 8c ff 16 0a ef e0 0f Data Ascii: qgExr]t'9%Kg\|oU0xq($5L0{m }/7]sQjR%ImvP`]\|t5@Pg!Xm`hvHh}7x(&3%{AxmgvEGp2h}X(1u]<bo(7pp}{0mU
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: a8 1b f4 b1 85 d8 bd f2 c1 b4 e0 0b 00 64 90 a9 91 89 71 69 a0 98 cb 9b be 58 7a 07 cf eb 00 6c 70 0a d1 bb 01 5d 5a a1 2b 00 05 1c 30 03 17 40 bb 8a f9 a5 19 d7 04 45 8b 6d 41 90 bf a2 2b 1f 9d d0 af e2 e8 b4 cb e8 0a 50 5b 6d 29 70 a7 44 89 be 06 bc a7 82 90 c0 0e 00 0b 8d d0 08 a7 d0 be 07 00 02 35 a0 a3 89 c9 01 3d b0 01 17 90 01 19 a0 07 0a a0 00 6a 60 08 19 30 03 89 79 02 3e 17 43 20 7a b4 1e 2c 8d 09 c7 1b da 5a 6d 37 80 04 ad 80 04 37 80 8f e2 0b 88 e4 8b 6d cd 49 c0 2d 1c aa 8a 80 b5 30 5c ae b0 c0 be 7d 7a 01 25 50 ac 42 3c c4 0a c0 07 6a ac 98 38 a0 71 64 7b 6d 98 b8 84 96 c0 92 d1 e0 1a 9f 36 a6 d5 86 04 02 10 c8 81 dc 0a e2 68 93 e5 d8 c5 d7 f6 c5 70 ff 1b c6 c5 7a 04 af 5b c6 c9 0a 0b 90 9b 05 6e ec c6 59 70 00 35 90 98 73 ec b7 1b 44 07 65 Data Ascii: dqiXzlp]Z+0@EmA+P[m)pD5=j`0y>C z,Zm77mI-0\}z%PB<j8qd{m6hpz[nYp5sDe
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: b9 03 f1 8d 7b 1a dc c9 d7 76 ef 39 de f6 1e 88 01 16 ef d2 19 2f e4 f1 b9 c3 ae 2e cc 8e 0e e9 78 5f f0 d0 a0 06 59 40 eb b6 5e f9 ad 0b 02 97 2b 9f 36 d0 f0 7f c7 ec 1a 14 08 d8 6d b6 d2 b8 df 04 28 04 d8 76 cd 35 af ea 00 b0 f1 85 be 01 a0 9f c6 bb ce eb 87 50 08 84 f0 fb 85 70 08 87 90 09 89 6e 08 6a fc f5 06 7c 01 f0 eb b5 3b 80 94 f5 b7 0c 8c ea c4 4b f8 bb 0f 11 a9 8f 07 73 da ed 67 b5 18 05 d8 ff 16 f5 aa 3c f5 aa ee 04 cf 19 02 26 8e e6 90 5b 02 1b 00 05 63 9f ae a6 bf 79 22 3d 40 a0 80 6d 7c ce fa 0b 91 00 ae 7f 7e da df 85 3f 60 6f 71 8f cd fe 4e f5 00 81 40 e0 40 82 04 67 6c 10 71 40 e1 42 86 0d 1d 3e 84 d8 f0 c2 06 0e 05 2d 5e 2c 28 65 0a 00 8e 1d 3d 7e 04 19 92 63 93 00 25 4d 9a 5c f6 51 45 02 96 2d 5d 46 f8 17 53 e6 4c 9a 2f 2c b8 c4 e9 92 Data Ascii: {v9/.x_Y@^+6m(v5Ppnj\|;Ksg<&[cy"=@m\|~?`oqN@@glq@B>-^,(e=~c%M\QE-]FSL/,
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 4d 72 d2 66 9e c4 e5 27 0f e8 3e ca 50 b2 2f 59 8c 4a d0 b8 c8 4a 56 82 71 3d 31 bb a4 19 cb a3 47 bd 5c cc 96 14 cb 65 2e 73 a4 17 60 6e ff 45 08 95 84 25 10 57 48 4c 56 32 b3 2f f6 53 0d 13 4f 42 cb 5c 3d 13 9a d1 94 a6 7c 74 48 99 2b 3a 25 85 7e 0a 9a d0 b8 29 c9 fe 05 c7 8d 93 09 84 b5 bc 99 13 73 9e 13 9d ba 74 4f 28 59 d2 47 ad 38 c9 2f 04 f5 c8 c6 54 39 4f 3b b6 33 27 2f 40 28 57 92 46 43 1b f6 93 5c ff 4c a7 7b fa d2 ae c9 38 14 27 5c d2 0a 1d 01 c5 50 3b ce cf 29 93 48 4e 00 eb 82 c6 8a 5a 94 57 18 c5 25 7c 04 9a 80 88 8a 24 0a eb 61 a4 36 b7 48 d2 22 42 60 9f 38 01 27 65 30 29 c0 34 ba b4 57 30 05 68 7b 66 ca 51 c9 78 b4 56 35 05 00 0b 1c 49 95 ee f1 34 79 10 80 80 04 34 40 01 08 00 00 77 2e 09 42 36 55 43 ba d6 4c ef 89 46 3d 2a 52 e1 43 39 a8 Data Ascii: Mrf'>P/YJJVq=1G\e.s`nE%WHLV2/SOB\=\|tH+:%~)stO(YG8/T9O;3'/@(WFC\L{8'\P;)HNZW%\|$a6H"B`8'e0)4W0h{fQxV5I4y4@w.B6UCLF=*RC9
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 11 74 af 34 5c c3 00 54 42 16 8c 26 73 c8 87 39 7c c2 13 70 82 58 a8 a2 97 d9 34 ca d0 bb 3f 94 0b d9 fa 91 5d d3 8b 6d 50 33 45 e3 0d 35 1b c3 41 42 c4 44 54 c3 45 6c 3c 72 80 87 52 a0 07 7a 30 87 59 fc 03 7b c8 02 49 c4 45 04 90 82 6c 68 3d ab eb 8b 1e d3 8a ac 02 b7 2e e4 44 24 f1 29 c2 f9 87 44 23 44 dd 50 33 33 84 31 af 63 45 9a 4b 85 6a a8 87 7a f0 86 6b dc 01 7d 99 c3 19 90 0e 10 00 01 ce 10 01 11 20 8b 0c 28 81 0b 50 8b 1a e8 01 0e 98 01 d2 40 14 8d 08 89 2a 44 21 ac c0 37 7d 2b c6 bf f9 c1 64 63 89 98 50 c6 53 3c 0c 44 73 c6 17 a3 02 13 24 87 69 b4 46 8c 70 86 27 7c 8e 1a 00 81 ce f0 8c b2 10 01 10 e8 01 76 1c 92 4a f4 88 ff 60 cb 43 07 72 a3 ac a2 3f 91 20 c6 7a 04 12 4c 73 99 bf 48 c6 65 cc 0d fe 3b 44 18 1b 83 55 04 3b 72 18 85 6a f0 86 52 11 Data Ascii: t4\TB&s9\|pX4?]mP3E5ABDTEl<rRz0Y{IElh=.D$)D#DP331cEKjzk} (P@*D!7}+dcPS<Ds$iFp'\|vJ`Cr? zLsHe;DU;rjR
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 00 d6 0d 5f 5b ed 8d 56 4b 51 5b 6a 8e 1a 28 e0 0f e6 5b 45 20 5a d1 d4 5d b3 c8 80 a6 6d 0b 29 18 18 0d c0 ab f9 d5 42 70 eb a2 1c d4 5f ab 95 bd f2 7d 5d ed 03 60 a7 dd 5b 10 e6 61 8b c5 dd e4 dc d8 b2 10 5d b6 90 82 07 36 46 0a a0 80 16 f6 10 e0 cd 2b b8 bd 20 fc 95 dc 66 0b 5f 24 c3 e0 52 34 c9 1c be 8c 15 70 de 1e e6 62 6a fd 61 b5 6d c8 21 06 0b c5 35 9b 7c bb c0 ff 16 46 e3 34 e6 08 d9 02 37 27 26 a2 e1 cd 5f c3 9b 62 2a 76 0f ad eb 5f 2c 6e 0b 0e a0 dd 2e e6 e3 5e fd 62 bc 34 5a 2f 15 e3 8b 70 01 b7 3d d9 02 d1 aa 28 de df f0 4d b3 e3 fd 0d 44 53 5e a3 3a 5f 8b f0 e0 3e b6 e4 79 fd e3 e5 f4 56 52 75 d4 cb 70 d5 43 4e 0e bc 5a 5d 5f 90 dc 34 9b 63 57 8b 0f 21 5c de 98 2d 0d cd bd e4 57 2e 55 47 20 5a 4c 00 dd 52 ed e4 b6 80 5a 50 e6 0a ac ca df 43 Data Ascii: _[VKQ[j([E Z]m)Bp_}]`[a]6F+ f_$R4pbjam!5\|F47'&_b*v_,n.^b4Z/p=(MDS^:_>yVRupCNZ]_4cW!\-W.UG ZLRZPC
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: b0 01 5c 50 4b 66 89 81 c5 b7 ec b5 df ec 12 d8 80 c8 7f c1 10 88 7b 27 b8 82 91 09 69 fd 20 03 c0 ef fc ff 68 7a 86 2a f0 88 29 c0 81 7b 29 7d 12 d9 01 d4 7f 35 b6 70 fc af 5e ca 88 5c cb 13 88 7b 1f b8 82 4d 28 58 79 01 03 a4 0a 05 a4 72 05 32 10 89 14 a8 17 29 08 7e ee 70 01 63 20 fe 99 66 fa 8c 16 81 b5 c0 c5 13 c0 05 1f 48 83 e8 27 9a e9 47 a7 50 58 87 73 30 09 6a 90 05 8c 72 85 33 d8 8a 58 b8 02 43 f9 8f b8 0b ff ae 06 08 04 02 07 0e 0c 91 e1 00 c2 84 0a 17 32 6c e8 f0 21 c4 86 17 6a cc 20 68 f1 22 c6 8c 18 4f e0 f2 91 66 0a 80 90 22 47 92 2c 69 f2 24 4a 94 60 0c b0 6c 69 40 56 80 98 32 63 ae 73 e9 d2 15 99 94 24 b3 f9 88 a1 11 a3 b1 04 ff 86 12 2d 6a f4 28 d2 a4 4a 97 32 6d ea f4 29 d4 a8 52 a7 52 ad 6a f5 ea d5 9f 35 22 72 ed ea f5 61 06 10 3d 42 Data Ascii: \PKf{'i hz*){)}5p^\{M(Xyr2)~pc fH'GPXs0jr3XC2l!j h"Of"G,i$J`li@V2cs$-j(J2m)RRj5"ra=B

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49790	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:34 UTC	383	OUT	GET /wp-content/themes/tgtheme/img/pingguo.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	776	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:34 GMT Content-Type: image/png Content-Length: 1282 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-502" expires: Fri, 02 Aug 2024 22:39:29 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 86405 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=5fOFGid4QVykWjP6ftaPtNg5EmKKd%2F%2BIhzYpUTPYeIy3UyuU9Nh31Mm%2FvaIwi3Bdyzot4%2Bpq8PVK5dxWHDyMQP51i6exWi5aVm%2FstzqPf2ptZO4cIO7U8nM7m0yO8tcvblnkQyo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cb01ba34399-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:34 UTC	593	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 14 00 00 00 18 08 06 00 00 00 fa 4b dd 76 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRKvtEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:34 UTC	689	IN	Data Raw: 42 35 33 39 30 31 31 45 45 41 45 38 42 38 32 35 43 33 44 43 31 35 42 36 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 38 34 41 36 44 31 43 35 33 39 30 31 31 45 45 41 45 38 42 38 32 35 43 33 44 43 31 35 42 36 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 38 34 41 36 44 31 39 35 33 39 30 31 31 45 45 41 45 38 42 38 32 35 43 33 44 43 31 35 42 36 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 38 34 41 36 44 31 41 35 33 39 30 31 31 45 45 41 45 38 42 38 32 35 43 33 44 43 31 35 42 36 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 Data Ascii: B539011EEAE8B825C3DC15B6D" xmpMM:DocumentID="xmp.did:284A6D1C539011EEAE8B825C3DC15B6D"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:284A6D19539011EEAE8B825C3DC15B6D" stRef:documentID="xmp.did:284A6D1A539011EEAE8B825C3DC15B6D"/> </rdf:Description> </rdf:R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49789	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:34 UTC	617	OUT	GET /wp-content/themes/tgtheme/img/d9.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:34 GMT Content-Type: image/gif Content-Length: 3145277 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-2ffe3d" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609576 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7oXmF3%2B3UzMXaT8hnL2sJ8jrud48JfJhq8LIAZ7xcUMUSVHgEGGqIQF7uU8HoKSOcgdE2OPjg2E7u0ziLannmE0Dg2odHht5klPg7hUwZSFqz2R6eugzgs51fLpHK5wveJbt3Jk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cb03d521774-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:34 UTC	594	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 5b 25 02 00 00 00 7a 92 96 f4 22 6e b5 c3 c2 fe d8 21 98 3c 01 fa 6f 16 ff ff ff 5b 24 00 b6 4d 0a ff a4 00 b2 20 01 5a 24 01 fb 6e 15 f4 6b 15 5b 25 01 f9 6e 15 dc 60 11 b5 c2 c2 ea 67 13 d3 5c 10 5a 22 00 f6 6d 15 f4 21 6d b4 c4 c2 c8 55 0c 5b 23 00 e2 62 11 64 28 01 aa 49 0b ed 68 13 bc 52 0e d7 5e 10 60 26 01 d0 59 0e 7a 91 95 7d 34 05 67 2a 02 e8 66 12 c0 53 0d 5b 24 02 81 36 05 e0 62 11 b9 c6 c5 f8 6d 15 9e 3f 01 6d 2c 03 f0 6a 14 ad 4b 0b 78 32 04 62 27 01 6a 2c 03 95 3f 08 b0 4c 0b f2 6b 14 ba 50 0b cc 59 0f ca 57 0d a0 44 0a 8c 3b 07 6f 2e 04 75 30 04 fc 6f 15 ee 68 13 e6 65 12 89 Data Ascii: GIF89a!NETSCAPE2.0!,[%z"n!<o[$M Z$nk[%n`g\Z"m!mU[#bd(IhR^`&Yz}4g*fS[$6bm?m,jKx2b'j,?LkPYWD;o.u0ohe
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: c0 bf 82 50 08 84 5f 47 50 21 04 ff e9 7c f5 20 6c e9 ed ed 96 66 0d a0 8a 7a cb 78 10 fe f1 b1 6c 37 04 d2 93 69 d6 ac 19 ad 7f 11 95 7b 69 63 2e 07 a7 78 10 f0 64 13 fe e0 cb df 9b 17 fa 86 3c d6 89 11 e9 db d2 e0 b7 1a e7 cf c0 b8 a9 9c ff 6b 10 ff ed 95 e8 ad 1a 67 36 16 7a 47 07 b6 88 12 ce a2 17 fe dd 3d b2 1f 01 c0 c8 c6 c8 b3 a3 c3 97 15 c8 ca c5 60 60 60 fc c6 a3 ff e9 dc e2 8c 49 86 55 0a 3f 1c 05 c7 a1 86 35 35 35 dd a7 85 92 72 5c 80 80 80 fe e0 4b ed 91 01 73 3e 06 e3 77 32 d7 c9 c1 91 90 8e eb 95 5c c9 7b 45 d8 c3 b0 20 20 20 50 50 50 b9 70 41 a3 57 26 5e 1d 00 b5 84 63 fe df 4a f5 78 0f f8 1f 6c 30 1d 00 f5 1e 70 ef 72 22 ff 19 69 f6 e9 e1 70 70 70 e7 c8 4c 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a 9c 48 Data Ascii: P_GP!\| lfzxl7i{ic.xd<kg6zG=```IU?555r\Ks>w2\{E PPPpAW&^cJxl0pr"ipppLH*\#JH
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 84 24 72 59 8b 6c 8a 08 2d c2 44 47 ea ea 8f 90 8c 89 24 1f f8 bd 43 0a e4 92 b3 ca a4 61 96 e8 c9 90 81 32 94 2f 11 e4 28 01 46 47 46 f6 0c 95 9c 5b 08 76 56 f7 90 56 ce 0c 96 43 91 e5 2c 0f 45 49 a1 95 11 97 7d ca a3 4d 2a c9 49 5f 82 0c 98 42 11 e6 2c 0b 69 48 5b 12 11 99 7c 52 e6 1e 31 e2 cc 67 42 73 26 d2 1c 25 35 21 62 4a 0a 61 93 4f 15 b4 e6 45 3a d9 ca 57 7e 73 25 c3 5c 57 3e 6a e9 95 01 9e 93 4c ca 5c 23 1b bb 69 ff 2e 77 be 33 25 f1 cc 56 0c d5 89 10 33 22 53 9b c6 6c 24 3f a5 e5 cf 7f a2 24 a0 d8 12 22 33 0f e2 8c 7b 92 29 9d 04 6d e6 42 a7 e5 50 99 84 53 8e e3 84 c8 2e ed 68 d1 24 21 74 a2 15 d9 a8 13 3b 0a 93 8f 02 31 a4 22 25 e3 0c 4b aa 24 8c aa 6d 23 2a ed 15 4b 3d 0a 51 89 79 44 a6 d7 a4 29 92 6c ca a0 8b e4 94 57 3b 95 49 4f 4f 56 b9 21 Data Ascii: $rYl-DG$Ca2/(FGF[vVVC,EI}MI_B,iH[\|R1gBs&%5!bJaOE:W~s%\W>jL\#i.w3%V3"Sl$?$"3{)mBPS.h$!t;1"%K$m#K=QyD)lW;IOOV!
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 83 77 14 01 15 50 05 1d a0 74 68 a7 17 a4 90 0b 80 60 06 6d 40 0a 5c 38 16 d7 00 86 81 f1 7e 2b a7 02 36 20 01 05 53 01 58 e8 6f 73 80 4c 17 a0 03 44 30 03 21 ff f7 71 0d d0 7a 79 21 06 87 80 00 96 78 89 66 80 07 6e e1 05 2d 28 7b ba f6 89 b9 16 8a 72 01 88 13 67 02 68 00 80 05 f3 00 6a 08 70 2f 70 86 e7 84 03 8e 08 89 a0 a0 17 67 60 06 97 78 8b 96 d8 06 7b 08 16 62 70 74 3f 27 86 a8 d7 00 46 97 15 5a e8 71 5a 80 02 17 80 31 4a 50 82 10 77 05 04 84 02 1e 30 26 57 e0 81 1e d7 00 45 e0 0a 7a 31 06 b8 b8 8d 08 70 08 bb 08 15 9d f8 6d 16 d8 71 ef 36 8c 45 51 6d 20 57 04 52 50 01 28 72 05 ec f8 2d 39 10 8b 00 a7 02 e2 23 01 70 08 00 3e 60 25 15 10 85 90 08 00 d1 00 81 79 41 0a dc c8 8d ba c8 16 bd 18 6c e3 98 72 fb 96 7a 2f 81 8e 1f 67 8a a8 68 79 50 30 04 33 Data Ascii: wPth`m@\8~+6 SXosLD0!qzy!xfn-({rghjp/pg`x{bpt?'FZqZ1JPw0&WEz1pmq6EQm WRP(r-9#p>`%yAlrz/ghyP03
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: e2 3a a9 bf 99 b7 cb 02 03 5f eb 6f 9c 8a 22 12 00 bb d0 36 0a 9b a0 ac 8a 4b b9 e2 fb a4 6a fb 14 d5 99 60 e8 1b 16 b8 e8 8d 6e b1 b4 b0 69 b8 04 0c 6d 33 90 bd 57 62 b3 12 47 04 7c 82 9e 1e a7 9e cb 52 06 ff 4b ba c1 7a 00 fe 16 0d bb 20 bc 24 6a bb 0b fc a4 a4 c0 16 b1 07 c1 6c b1 8d 1d 2b 16 2c 00 0b dd 09 bf 19 fc 02 1c 00 27 2b 00 ae 13 a7 bc fa 98 72 b7 29 2b 37 a0 05 1f c7 86 38 b2 6e ab b0 0b ae 80 c0 88 c1 02 64 1b c3 4f 9a 0b 6c 31 81 eb 15 c1 60 c1 8d 8e db 16 6f 1b b7 4d 07 00 4b 00 ba 57 f2 00 11 1a 71 f9 18 27 ed f9 71 10 2b 2b 0f 70 bd 10 07 c2 3a f2 c6 d1 00 0b d7 40 be d9 08 c3 58 fc a4 44 5b 84 17 e6 c2 4d 31 90 5e 1c 16 51 f0 9a b0 ff 79 a3 d4 b6 03 45 54 05 1e 87 03 71 62 ac 20 e7 7d b3 d2 04 20 77 02 48 52 96 00 20 0c 84 bc ac 75 f9 Data Ascii: :_o"6Kj`nim3WbG\|RKz $jl+,'+r)+78ndOl1`oMKWq'q++p:@XD[M1^QyETqb } wHR u
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 08 00 10 9c 06 93 e0 1e 37 e4 49 b2 ed 1f 37 04 7d 72 02 29 37 bd 86 a3 f7 7b 0f 95 31 1e 15 e9 70 cd 59 b8 dd 6e 8b c5 6d b0 f4 4d 91 08 fd 6e 30 22 3c 71 88 cf b2 28 47 de 63 92 e4 20 c7 da 67 43 05 00 7f f9 86 3c 16 5d 70 00 27 b0 f1 73 0e 59 37 fe c7 69 1f ed 89 10 f3 df b2 dc ec 16 ee 49 e2 eb 20 57 f7 64 42 01 32 0b 72 a5 6f 38 72 30 fb b4 8f 8b 51 6d 08 da 3b ec 21 77 f2 31 5d cc 91 ff 10 d5 89 f0 0b 3f d3 02 28 a7 fc 48 22 d2 66 d9 27 ee fd 71 4f 6f 38 ff 3e fd b7 28 f4 50 b1 09 27 72 b0 85 5b e7 ea ae ce dd 0f 16 a4 a0 0c 51 b3 02 e1 3c 26 00 51 01 c0 40 82 05 0d 1e f4 70 40 e1 42 86 0d 0f c0 10 71 50 e2 44 29 0e 2d 5e c4 98 f1 40 0b 39 69 10 7c 04 19 52 e4 48 92 25 4d 9e 14 19 89 c0 4a 96 2c 33 84 63 c8 64 62 c1 06 ff 6c de c4 99 53 e7 4e 9e 3d Data Ascii: 7I7}r)7{1pYnmMn0"<q(Gc gC<]p'sY7iI WdB2ro8r0Qm;!w1]?(H"f'qOo8>(P'r[Q<&Q@p@BqPD)-^@9i\|RH%MJ,3cdblSN=
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 0d f9 5c 48 34 a1 11 00 32 68 93 bf 1c 0a 1d 59 72 88 b9 a8 cb 22 85 18 25 fe a4 f8 1f 2e 66 66 06 5b c1 62 66 26 97 11 25 14 ff c7 48 b1 b4 16 1b 6c 08 15 61 7a e1 8c 17 59 e3 48 f4 80 26 5f 02 d3 9c b9 d9 cd 19 e6 a2 30 86 4c 22 99 0b 38 e1 8f 52 45 99 6b 82 a8 38 45 f0 de ff 8a 03 4b 6c de 8b 11 99 68 a4 49 b6 83 97 48 a6 d1 22 8c b0 10 49 ba a1 91 a0 8d ec 9c 0f dd 89 30 57 12 09 a8 b8 c7 21 79 20 43 32 a3 b8 a4 6f 65 a6 39 5a 99 a7 5a 54 30 af cf d4 b3 9f 18 ab 04 24 02 3a 12 83 11 40 0c 99 ca 48 26 4c 02 99 8c a4 90 78 10 c5 e9 4d 3a 89 17 16 24 f4 24 34 6d 08 09 93 e9 86 31 d9 2c 33 ac d4 0a 0a 8a f3 b4 cb 7c 06 0c 27 dd 9d 1c 28 e1 89 5c 7e 84 81 2d e9 82 36 60 9a 11 2a 54 f5 23 69 b0 e0 45 8c 3a 91 4c e6 14 a2 12 25 00 29 50 c2 44 85 64 e1 9d 85 Data Ascii: \H42hYr"%.ff[bf&%HlazYH&_0L"8REk8EKlhIH"I0W!y C2oe9ZZT0$:@H&LxM:$$4m1,3\|'(\~-6`*T#iE:L%)PDd
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 7b a2 7d fb a2 07 c8 ab 81 a8 9e d1 c8 43 00 10 3e d1 68 39 00 38 b7 3b 74 08 1e 94 08 22 98 9d 2f 72 12 92 40 bb 86 58 3f 82 e0 bf 41 fc 94 ed 03 00 55 8c 39 56 73 08 53 7b 22 cd 9b a1 5e 22 c2 ea 48 b7 06 7b 0b d0 83 1b 4d b4 08 9d 3b 08 1f 68 8b 2f e2 42 91 80 04 8d b8 c4 fd 43 45 81 a1 09 83 60 af 7c 1b a5 02 8c a5 d8 a9 82 f7 c8 b0 60 14 0d eb 7a 81 39 e4 c5 85 70 c0 89 30 01 2d 3c a0 d6 1b 89 34 d0 08 f3 62 bc 64 14 17 c8 23 88 ed db 45 aa 1b a5 02 8b a5 0f c8 2b 01 14 0e 1d e3 3e ea f0 39 3e dc c6 03 40 c1 99 98 81 3a fb 9e 29 98 24 ef ca 08 c0 b3 3e 74 04 95 65 04 40 00 20 c1 85 80 c5 12 4a 34 6c 82 21 15 8c 0c ff 91 69 41 d1 a8 2b 2a dc 47 85 b0 36 af 28 02 8a c4 98 c3 93 be 8c 88 00 e0 a3 09 84 0c 96 ff 5b c7 7b ac 1f 8d 42 ad 1c 18 82 d5 ab 8e Data Ascii: {}C>h98;t"/r@X?AU9VsS{"^"H{M;h/BCE`\|`z9p0-<4bd#E+>9>@:)$>te@ J4l!iA+*G6([{B
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: a8 98 db 9c 39 3f ca 30 a0 c8 68 01 93 2c 88 7f 63 08 bb ac cf 03 48 cc bd 24 60 c3 30 1d 32 2c 02 ad b0 5b 60 dd 06 94 c0 da f2 5c 04 d4 0d 4d 23 70 da 75 90 0b 13 5d 04 ac 01 61 af b8 cd b7 90 4b 82 10 01 38 c5 c1 91 60 b8 86 d0 df cb 4c 61 c3 30 60 00 a8 bd 06 a0 db 8b a0 00 6e ed d4 0b 36 89 44 78 5e 23 ed 01 a7 8d 61 a8 78 07 13 6d db 53 59 4f b5 38 b6 ff d1 60 c3 83 18 53 77 2d 09 64 d8 34 79 6b 62 c1 38 da 03 2e cb 22 94 41 72 1d 33 93 70 5e 36 35 52 2b ee 56 54 d8 61 13 85 da 7b e1 49 b2 78 4b b7 e8 b7 af 80 cc 03 10 c9 bb 5c b1 83 8c 63 c0 78 62 b2 6c 80 71 bb 08 3f e6 54 a8 28 87 12 05 dd c3 74 5f b9 d5 61 94 90 60 13 cd 99 50 75 aa d1 c0 51 af 30 d6 70 0a 89 4a 58 32 48 8e e4 a3 48 80 69 b5 bd 35 be 63 72 c5 62 93 90 df ac 0d d0 2e 96 5b 54 c0 Data Ascii: 9?0h,cH$`02,[`\M#pu]aK8`La0`n6Dx^#axmSYO8`Sw-d4ykb8."Ar3p^65R+VTa{IxK\cxblq?T(t_a`PuQ0pJX2HHi5crb.[T
2024-07-04 22:39:34 UTC	1369	IN	Data Raw: 7b 8c 50 82 86 97 0f 58 fb 8f 34 57 e3 b7 38 e1 66 97 7b 9b a0 7c af 90 6c 85 30 6b ff e6 fa ff c8 58 81 bf df 03 3a a0 03 44 e0 05 df f7 7c 1c 30 4d 38 21 7c 18 47 fa ff 30 82 75 2f 8e 20 a6 8e 08 80 7b af f0 5a b7 60 a1 f9 8e 7d a4 d5 c3 bb 3f 7e 0c 47 f9 6a f3 7a 47 48 06 68 b8 83 02 20 ff f2 27 ff 3b f0 03 41 e0 05 bf ef fe 9b bc 7d f0 a6 d9 0d b9 02 61 b7 26 14 61 76 b2 90 f2 86 70 fc be b6 78 68 ef d1 98 07 88 03 07 72 04 28 68 f0 20 c2 84 0a 17 1e ac 23 f0 21 c4 88 12 05 ae 50 60 f1 22 46 8b 7b 1e 15 e8 e8 f1 23 c8 02 77 1e d1 c9 68 d2 e2 88 0b 13 57 b2 9c 18 83 21 cc 98 0c 79 b4 ac 19 31 46 02 00 3a 77 f2 ec e9 b3 67 07 0a 36 87 0a 8c f1 f3 e8 4e 0f 44 05 0a 41 da e0 1f d4 a8 52 a7 52 ad 6a f5 2a d6 ac 5a b7 72 ed ea f5 2b 58 aa 16 1a f0 cc d9 93 Data Ascii: {PX4W8f{\|l0kX:D\|0M8!\|G0u/ {Z`}?~GjzGHh ';A}a&avpxhr(h #!P`"F{#whW!y1F:wg6NDARRj*Zr+X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49791	35.190.80.1	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:34 UTC	488	OUT	POST /report/v4?s=XqfpNCB3SFktbW8RwhTHy5mnn3vxB%2BvJRTV3K6uw8TmEM%2FZFd7owIcjs%2BJOODDsiPpio9unaCdbtKh3k%2BodyQqfkCz%2BbXRjOteWK5lPa4MXMy9wG4Z16lB3l%2FSXJMECm0KoIHAc%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 499 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:34 UTC	499	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 32 36 31 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 72 65 73 70 6f 6e 73 65 2e 69 6e 76 61 6c 69 64 2e 63 6f 6e 74 65 6e 74 5f 6c 65 6e 67 74 68 5f 6d 69 73 Data Ascii: [{"age":1,"body":{"elapsed_time":2618,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://www.telegramkv.com/","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":200,"type":"http.response.invalid.content_length_mis
2024-07-04 22:39:34 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Thu, 04 Jul 2024 22:39:34 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49792	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:36 UTC	619	OUT	GET /wp-content/themes/tgtheme/img/news.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:36 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:36 GMT Content-Type: image/png Content-Length: 5589 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-15d5" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609578 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FZQBpEjUaliz9Mm8UL0WG6JZVx5srpx8HH8xfKu%2FUc%2BMI%2FPu00l7iA4dE1OzqpFHmfLw7HWNe8dJb3c4YV%2BgXuR%2B%2FlA6LtLpDgVbrM9o0gzbuMJ5jZ9%2BohY6Q6KMKvqG8q9yIZ4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cbb59d16a5c-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:36 UTC	585	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 06 00 00 00 3e 08 06 00 00 00 c9 6b b5 48 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR>kHtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 46 37 35 31 34 46 33 46 31 31 45 45 39 30 42 39 41 39 43 35 42 46 45 42 41 34 41 41 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 41 41 35 34 46 37 35 32 34 46 33 46 31 31 45 45 39 30 42 39 41 39 43 35 42 46 45 42 41 34 41 41 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 41 35 34 46 37 34 46 34 46 33 46 31 31 45 45 39 30 42 39 41 39 43 35 42 46 45 42 41 34 41 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 41 41 35 34 46 37 35 30 34 46 33 46 31 31 45 45 39 30 42 39 41 39 43 35 42 46 45 42 41 34 41 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 Data Ascii: F7514F3F11EE90B9A9C5BFEBA4AA" xmpMM:DocumentID="xmp.did:AA54F7524F3F11EE90B9A9C5BFEBA4AA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AA54F74F4F3F11EE90B9A9C5BFEBA4AA" stRef:documentID="xmp.did:AA54F7504F3F11EE90B9A9C5BFEBA4AA"/> </rdf:Description> </rd
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 04 0c 11 45 14 51 04 0c b5 4a 26 93 8f f3 8d 32 88 d7 84 e5 0e 06 f8 e7 1c c7 89 92 9c 11 30 18 a1 36 44 49 17 3a 0d 49 c2 18 d5 16 25 fd aa 98 6a 26 f9 b8 fa a9 f7 67 7f 5e 75 20 03 89 b5 99 e4 da e9 5d 65 45 76 7e 6f 25 f8 42 a0 5a 2e 8c 11 dd 0e c4 e6 83 5e a8 7c 77 6a e7 ba 08 18 16 20 ed 75 7f 28 8e 8d 36 9c fd 7e 47 6f ac b1 35 57 b7 ed 5b 47 ea ae d8 78 b2 e9 fa 5b 32 3c 50 d4 6f ff 41 67 cb f6 fb 1a 73 ef a5 d7 8c bd b0 ef f6 c4 55 1d 99 65 77 fe 70 36 b9 f7 e1 fd ed 9b 9c c9 4b 58 90 b8 e1 d6 c6 15 f7 3e 31 3b cf 87 7b 3a 5b 9d b3 97 9c 88 f8 86 ad 6d 2b 1f 7c 7a 2f 3b c7 d4 c9 e1 d6 ec 8f 4b 6f 30 93 5b 76 b4 2f bf 67 df ec 73 3c 5f cd f7 1d 78 16 f8 c5 84 3c f3 d8 3d 77 d9 6f bf d6 c6 cb e0 fe 7e ee e9 87 da 0b 47 9e 2f 45 b7 9f 0c 3e 50 b7 66 Data Ascii: EQJ&206DI:I%j&g^u ]eEv~o%BZ.^\|wj u(6~Go5W[Gx[2<PoAgsUewp6KX>1;{:[m+\|z/;Ko0[v/gs<_x<=wo~G/E>Pf
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 05 a7 e0 d2 de 43 03 a0 bc d5 ee 2d d4 af bb ce d3 68 40 4e de a0 41 16 51 5d c7 25 2f 63 6b 06 fa ae f8 c5 b1 fd e0 15 a8 de 04 c0 d8 60 f4 24 5e 7f 1c d6 11 2b b8 6a be f3 a1 97 d1 53 9d 78 22 8d df 78 f8 65 00 6c 9d a0 e0 52 e3 f6 ef a2 39 8a f9 ec 0d 46 1e 83 86 13 56 95 40 21 1b 48 38 72 f6 d7 f7 77 39 a3 23 ad 2d 9a 13 84 ba 08 0c 09 40 ae ac 3a 93 18 75 ea aa 8e 0c 16 cb bb b4 78 6b 77 3a 4b 6f 5d 92 5b 76 a4 e1 ea 74 46 76 49 1f bf 34 b3 8e 30 16 59 3f 37 1f 01 b7 3d b2 f1 e1 64 6f 36 54 c4 44 c7 3d 94 3b fc fb 2d 6e b8 d8 b0 63 ef 2b 5e 49 d1 05 79 58 92 f8 6f 15 00 b9 8f 3e 36 69 17 e1 87 d3 bb da 2e aa 74 08 30 07 4b 13 64 9e f3 7e 3a 90 f9 c0 13 6a a2 1e d1 62 c1 63 d3 10 45 88 e4 30 c1 b3 64 cc 69 f2 fc 19 1f f2 c1 18 ab 90 af ce 93 71 26 e8 Data Ascii: C-h@NAQ]%/ck`$^+jSx"xelR9FV@!H8rw9#-@:uxkw:Ko][vtFvI40Y?7=do6TD=;-nc+^IyXo>6i.t0Kd~:jbcE0diq&
2024-07-04 22:39:36 UTC	897	IN	Data Raw: 28 a1 d2 72 f0 66 a2 82 0b af b3 04 d7 54 b9 ae 57 72 4b 47 d9 b0 ad f0 fc a4 e0 fb 7a cd ee 71 58 eb e8 97 67 13 f2 6b df 4b 5a 24 67 cb 6e 26 b8 d3 be 2c e4 a5 ff 62 37 32 09 c4 43 96 95 41 97 e4 1a e8 db c2 53 3e e4 03 80 a8 c7 4e 5f bf 8b 05 a1 83 9f 7a 01 7b 1e 02 43 98 ef 4a f0 0a 97 47 9e 49 0a e2 d5 f9 54 c7 60 cf 91 fc a6 de 0d 29 78 e4 08 54 72 03 53 96 fc da 13 3b bc 3d 4b d6 69 68 3f 6e c9 6b 8e d8 96 62 c1 21 19 f4 ea 86 c6 28 79 c5 84 1f 36 87 13 b0 26 5e e4 e2 c5 0c 00 83 2e 9e a5 63 22 cf 4d 53 a5 e2 65 aa 63 92 bc b6 01 f9 c2 c8 31 cc 85 fc 26 f6 d2 a2 06 1a 47 6c c3 ad 80 8c 23 f3 da c8 18 36 e2 c9 f3 87 37 df c7 52 00 07 e8 97 a3 9e 4b ca f2 2e db 4e 10 70 48 9e da b9 ae 20 ab 96 9a a0 c5 42 93 12 64 ac f3 b1 31 ba 4e 27 db 0a e7 a4 0b Data Ascii: (rfTWrKGzqXgkKZ$gn&,b72CAS>N_z{CJGIT`)xTrS;=Kih?nkb!(y6&^.c"MSec1&Gl#67RK.NpH Bd1N'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49793	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:36 UTC	378	OUT	GET /wp-content/themes/tgtheme/img/d5.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:36 UTC	781	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:36 GMT Content-Type: image/gif Content-Length: 2002471 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-1e8e27" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609578 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mMLkPWI33X3jLHEOISUvSvxEb8%2FT7ytbZghYwnzfCDNbESRtAyCYh0qGcKKSlm24%2FobCPNhRvBPwlILp%2B8j23tGtkTUJeBreJHAAE5gwlrwv2uObGgu%2BM4gll4SBsBm7XBuv3Dc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cbb5fc94289-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:36 UTC	588	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 85 98 98 fa 90 16 9c b4 b4 94 83 95 cf 35 01 01 9c ff ff ff ff 3b 4b 4b ff d5 27 53 45 56 85 99 99 ff 5d 1f a6 93 a6 03 57 90 00 00 00 b7 b1 77 f7 ff bd 97 be e5 9c b5 b5 98 29 04 ba a7 ba fc ee 21 52 44 55 3a 4a 4a 89 d1 ff fa 90 15 72 85 85 4d 5e 5e 80 93 93 3e 50 50 7b 8e 8f ff b3 83 48 59 59 5c 6c 6c 5c 4e 5e 69 7b 7b 5f 70 70 77 8a 8a 39 4b 4b b7 b1 76 74 64 76 9a b2 b2 43 53 53 61 60 4b fd ca 23 57 49 58 65 77 77 55 67 67 6d 80 80 fa fb fc 51 62 63 89 79 8b fc c1 21 90 7f 91 90 a6 a6 8b 9f 9f 88 9c 9d 97 af af a0 c4 e6 83 96 96 d7 4d 0a 6c 5e 6e f4 54 18 a1 90 a2 9d 8b 9e f5 b1 1e 97 Data Ascii: GIF89a!NETSCAPE2.0!,5;KK'SEV]Ww)!RDU:JJrM^^>PP{HYY\ll\N^i{{_ppw9KKvtdvCSSa`K#WIXewwUggmQbcy!Ml^nT
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 40 20 fe fb f1 81 78 3d 91 8d 92 6d 64 5c 90 77 15 70 c7 ff b6 46 24 8a 81 6b ff 66 1f af 92 1b c0 bc c1 ff f0 ba 5e 6f 8f 84 8e 8e 67 67 7f ca c1 cb db dc 9e ff 96 61 58 be ff 6f 5d 11 a2 2d 06 ff e3 86 fc 78 19 a9 b8 b8 ff 80 47 bf 7e 2c 65 43 39 26 26 26 94 a6 a6 9b 96 70 dd cb 41 87 c9 f8 ff e9 a3 52 40 0b 81 5b 5f 9b bc d7 af a8 74 b2 a3 3b f3 81 12 1c 75 a9 9c 3b 19 ff e0 5f a4 a1 89 91 9a 9a 41 41 40 99 5a 0d 9f 8a 39 33 b0 ff a8 48 30 89 a5 c8 ec ea da 40 b5 ff b1 ae b2 fd c0 5b 28 a5 de ab c2 6e ab b6 a3 c1 c7 5b 9b bf 7b 38 42 38 8d bb 87 5e b1 b0 4a 4e 59 78 b7 9a cc b4 33 a0 ba c5 60 55 40 fd ce 79 fb aa 3e 87 91 91 50 40 50 00 52 94 93 2a 07 99 a2 a2 72 8e 62 7d 93 5d 85 98 59 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 Data Ascii: @ x=md\wpF$kf^oggaXo]-xG~,eC9&&&pAR@[_t;u;_AA@Z93H0@[(n[{8B8^JNYx3`U@y>P@PRrb}]YH\
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 34 12 12 90 00 84 1f 58 f2 92 40 c8 e4 24 c9 98 36 c4 21 72 32 b6 83 df 33 f8 48 1b 19 7e 68 06 04 ac 8d 1a 82 96 23 4a fe 80 01 b0 8c a5 2c 67 c9 80 1f 00 01 09 52 ec e4 92 3e f9 98 50 2a 92 91 c5 81 1a 84 52 a9 1a 53 4a f2 95 b4 4c a6 32 6b 09 84 22 f2 e8 8d 77 e4 65 5f 14 e9 bd 51 62 47 98 0e 2a 5f 6d 8c d9 22 4a 2e f3 9b df fc 01 2e 51 88 ca 37 4a 93 31 d4 84 1f 30 13 84 43 5d 96 d2 41 40 10 03 05 28 20 86 1f 7c 08 08 e0 cc 67 38 c7 99 ff 42 62 a6 e6 9c 79 4c a7 f7 0e c1 42 51 dd cf 37 8d 63 c0 3c 17 4a 81 24 c0 53 9f 10 dd a7 06 cb b9 4b 80 0e 46 a0 de e3 03 04 5a a1 22 56 7e b1 71 3f 60 28 43 6b 19 d1 92 2e 93 9f 53 02 96 27 2d 0a 98 13 f8 52 a0 aa 80 80 4c b9 f1 1d 99 b5 c8 6f 8d 03 82 48 45 6a d2 9e 26 b3 99 61 aa 62 d6 58 ea 17 8c 7a 8f 11 32 4d Data Ascii: 4X@$6!r23H~h#J,gR>PRSJL2k"we_QbG_m"J..Q7J10C]A@( \|g8BbyLBQ7c<J$SKFZ"V~q?`(Ck.S'-RLoHEj&abXz2M
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 36 52 48 85 47 71 85 6c a8 0e f0 17 7a 7e e6 74 6c 04 83 e3 15 51 33 98 71 91 e0 53 37 c8 22 6f a7 86 43 c1 86 80 e8 83 f0 37 84 5f 36 07 39 07 79 0c e8 60 19 97 6a 3e 75 86 3b ff 52 27 53 e8 87 2e 01 88 80 98 07 06 40 0e 87 90 7c 5c 98 5c 26 b7 2a 0e 22 75 22 a5 84 cb 34 86 bd 96 87 3e a5 41 d7 37 6c 92 f8 13 94 c8 86 5d 00 63 31 d0 0a 5a f8 59 18 58 5b 2d b3 81 48 08 58 25 75 87 d2 c6 88 3d 05 85 37 35 81 ab 88 13 ad 78 85 af 08 65 46 c0 07 f0 27 7f ee a5 81 8f 37 00 3b c7 50 a2 f8 4d 4c 58 8a 55 85 42 07 87 7d c3 c8 13 c5 68 85 c7 28 65 e4 a0 07 c9 77 80 8b 25 76 b9 f5 20 48 10 6a 4e f8 4d a4 d8 68 be 68 52 c0 e8 38 03 b3 8d 3d d1 8d 64 f0 73 70 16 03 93 30 8b 74 65 57 b5 f5 74 db c4 22 cd 84 04 81 e5 64 bc 66 8a 3d 85 42 92 76 39 f4 a8 13 dd 18 01 3a Data Ascii: 6RHGqlz~tlQ3qS7"oC7_69y`j>u;R'S.@\|\\&*"u"4>A7l]c1ZYX[-HX%u=75xeF'7;PMLXUB}h(ew%v HjNMhhR8=dsp0teWt"df=Bv9:
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 27 e0 b8 e4 0a 67 51 70 a2 cb 8a 06 33 9b be c6 2a 02 36 d0 8a d9 0b 01 73 c0 bd f2 3b 14 8a a4 ba 56 da ba 30 a6 b1 f7 9b 04 c9 22 bd 24 d2 1c 3f 10 05 ad e8 be 32 25 0c 77 7b c0 42 41 4d 74 a0 bc 81 ea ab 53 da b7 c5 88 92 54 c6 a4 fe 9b 1a 53 e0 64 fa 0b 88 5f a7 b8 26 cb c1 08 9c 4e c9 fb ac cc 3a b9 b9 fa 04 5a 00 b8 29 5c 7a 7d 40 6a 16 4c 89 18 0c 01 83 b0 c1 32 1c 14 18 65 bf 90 5b ae 7f 6a c3 3b 3c aa d0 23 02 e6 f0 64 2d cc 86 5f 67 b7 d4 44 bc 47 0c 14 04 b8 ba ac 1a 65 e2 8a b6 06 60 04 e6 10 97 6c 5b 7a 9e a1 01 96 1a c4 ed 8b 57 30 4c bf 5b 4c 14 04 48 07 c9 20 b5 69 4a be 7e 8b 06 b4 60 46 9c 11 1a be e1 0b e3 d0 b1 1b 7b 85 44 18 a1 15 1b c7 a8 8b 51 35 ff 5c b5 37 5c c5 c5 68 b6 46 10 0c 3f d0 bf 87 ea 01 ec bb a3 ae db 8a 60 90 6c 46 8c Data Ascii: 'gQp3*6s;V0"$?2%w{BAMtSTSd_&N:Z)\z}@jL2e[j;<#d-_gDGe`l[zW0L[LH iJ~`F{DQ5\7\hF?`lF
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 0b d3 e0 09 d3 10 0b 5f e0 f7 60 bf f7 7c af 11 66 9f f7 80 ef 09 0e 10 f9 92 1f f9 df 80 f8 89 bf f8 18 e1 f6 7e ff 07 b1 70 06 93 ff f9 91 bf 0c 96 ff f5 43 8f f9 13 d1 f8 79 bf 0c a7 00 fa ac 5f f9 a3 4f fa 44 6f fa 0d 81 fa 79 ff 0d ac 7f fb ae ff fa 97 2f fb 08 41 fb b5 7f fb ac 7f 06 9b 80 00 70 c0 02 2c 40 03 56 60 05 61 c0 05 69 a0 fb 53 af f8 bc ef fb 77 2f 05 b6 00 fc ac 2f 09 08 90 fd da bf fd 08 ff 70 fc cb ef fc 01 c0 fb 8e 20 fd 6f 2f 05 61 40 03 70 b0 09 9e 6f fd 93 8f fd dc ff fe dc 6f fc 61 20 05 96 0f fd 6c af f9 77 9f 01 5c 60 05 2c b0 fd d3 c0 fe 00 e1 40 e0 99 5d 08 0c 1e 44 98 50 21 02 16 61 a4 04 80 18 51 e2 44 8a 19 fe 5d c4 98 51 e3 46 8e 1d 3d 7e 04 19 52 e4 48 92 25 4d 9e 44 99 52 e5 4a 96 2d 5d be 84 19 13 64 06 8a 35 6b 72 b1 Data Ascii: _`\|f~pCy_ODoy/Ap,@V`aiSw//p o/a@pooa lw\`,@]DP!aQD]QF=~RH%MDRJ-]d5kr
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 43 0b 44 b5 51 20 25 84 a3 cc 3a 54 94 1d aa 49 85 35 51 5e 2b 85 59 27 9b b4 cf 8f 66 a9 c4 6e 78 81 28 57 f4 44 45 5a d4 4e 7d 3c 21 41 6a 19 ff 10 8f 25 31 c1 3f 0e f0 8f 0b 1c a0 9b 17 e8 e6 01 c4 39 ce 03 98 c0 04 17 30 81 38 cd e9 cd 0b 70 73 98 cc 1b 50 06 60 79 c9 c5 18 2d 2c b4 3c 14 24 84 93 4b c2 fd 44 14 90 70 85 26 17 96 90 9b 21 ea 97 6c 09 49 38 bd 49 4e 86 36 d4 a1 0f 2d 27 3a d1 f9 4e c8 bd d0 92 66 a4 0e 29 37 89 28 51 f8 04 97 26 d4 95 5f cc c1 24 23 d8 d2 01 49 4c c8 04 af b7 40 dd 6d 44 9d 0a 85 68 4c 65 2a d3 73 d6 94 a2 3d e3 e3 f7 8a b8 18 9e 04 67 99 24 25 25 4a 21 28 ab b0 c0 e3 50 68 d8 e7 50 ea 88 a8 2f 26 0f 23 35 9d 69 54 a5 3a d5 6f 66 f3 a6 17 db 4a 19 a3 47 1d 40 06 e7 0c 88 58 12 1a 4c 2a 90 67 46 70 73 3e c1 a7 9a 9a 29 Data Ascii: CDQ %:TI5Q^+Y'fnx(WDEZN}<!Aj%1?908psP`y-,<$KDp&!lI8IN6-':Nf)7(Q&_$#IL@mDhLes=g$%%J!(PhP/&#5iT:ofJG@XLgFps>)
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 08 c3 5f 3b 3c 32 ac 3a 56 38 c3 33 0c 42 aa 5b 43 33 2b 83 60 3b 88 2a 18 36 07 80 c3 a8 5a 03 8b e3 33 3a b4 c3 4f 64 bb 1c c8 c3 51 04 80 12 78 81 cb 9a 2e 40 94 8a a5 48 83 81 73 1b 2f f8 83 3f f8 82 1d 2c b7 44 54 44 aa 63 c4 46 4c c3 aa 63 bc 33 23 42 51 6a 3f c3 18 bb 99 7a 01 26 04 00 e5 03 c5 64 64 3b 29 24 45 2a 24 01 bc ab 2b 73 52 c5 a9 d8 0a 57 ec 18 2f a0 c5 04 33 37 5b bc 45 aa 6b 44 47 b4 ba 5e 3c b3 23 00 3e 44 52 24 41 18 c6 98 ea 00 0f e4 b3 1b 60 3e 65 fc c4 14 68 46 52 dc 01 17 30 3d ba 9a a8 69 7c 8a ad e8 af bf 41 40 4b 09 82 da 53 38 04 23 82 dc eb 46 ab 33 43 5d 44 3c 26 10 c7 18 4b b3 23 a0 04 1a 6b 1d d7 a9 82 ff 4d 48 47 88 02 01 0f e0 33 05 70 42 78 84 47 3c 14 3a 23 1b 81 31 18 83 22 33 32 cc 9b c7 3d bc 47 a9 12 40 7d 64 89 Data Ascii: _;<2:V83B[C3+`;6Z3:OdQx.@Hs/?,DTDcFLc3#BQj?z&dd;)$E$+sRW/37[EkDG^<#>DR$A`>ehFR0=i\|A@KS8#F3C]D<&K#kMHG3pBxG<:#1"32=G@}d
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: f8 b5 c3 14 58 58 3f 5b 5e 8e c4 5f fc 95 de e9 a5 de e4 14 a7 0e 70 01 ec ed 33 48 9d a9 54 9c ce 17 c2 1c f0 8d 31 22 48 44 26 20 85 2d 60 60 07 a6 e1 b2 8d 29 d5 54 00 d0 a5 60 fc 6b 82 9b 3d b5 98 92 81 55 dd 60 fc f5 60 05 c8 33 0e 18 b4 0c 25 61 86 65 5a 22 15 22 fe c4 4e 87 a4 82 ae 5d d9 b1 a5 61 07 7e 83 40 1d 27 ff 7d df 1d ee bc 14 68 82 f6 4c b5 98 da 00 05 18 e2 ff fb b5 d9 e9 5d e2 68 03 e1 8d fd 50 dc 2d e0 4b 45 dc 21 58 d6 36 20 05 b1 9d e1 2b d6 d7 50 18 02 5c 90 29 09 0e 4e 2f be bf 26 b8 60 55 3b da 10 76 de 33 7e de 1e 56 e3 35 d6 b8 ed 95 29 36 a5 d4 d5 19 bf 72 bb bd b1 ac 3a 1f b8 63 2b d6 e3 09 78 dc 2d e0 81 14 65 82 e6 ba de 3d 33 5e 0a 26 64 1f 8e b6 da 65 28 0f 50 e4 d5 85 be 46 76 64 8d 63 e5 86 12 60 40 54 e1 d5 d1 c1 81 bc Data Ascii: XX?[^_p3HT1"HD& -``)T`k=U``3%aeZ""N]a~@'}hL]hP-KE!X6 +P\)N/&`U;v3~V5)6r:c+x-e=3^&de(PFvdc`@T
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: f7 87 f2 5f 25 f7 c8 33 77 6e 75 14 57 28 60 f5 af c7 d9 87 ea 06 c4 f7 15 0a c7 75 7b 7b ee 0e 20 81 70 1d da ff 2a c4 7a 86 5a 9e ee 41 9e cb 0f 00 47 38 82 8b 5e b0 22 c0 86 ce ff 7c b3 98 3c 88 ba 58 1c d0 56 17 57 5a 99 62 de 1c 86 f0 c1 ef 56 d1 87 7d 5f e9 06 e5 ce b8 c2 67 28 2c 80 5b 0f 9e 72 ee dd 9d 49 46 00 38 a0 81 30 70 53 b6 17 7e 06 bb 82 e3 c7 8b 95 4f fe 85 60 f8 6b dd b3 98 c7 51 6e c5 de 91 0f e1 70 55 6a fc 05 08 28 0a 06 12 04 60 f0 20 80 17 07 16 32 5c 08 c6 00 c4 88 12 27 52 9c 68 a6 61 43 84 1a 37 72 84 d1 01 e3 86 12 04 47 92 24 a9 41 05 c6 94 0b 2f fc 6b e9 f2 25 cc 98 32 67 d2 ac 69 f3 26 ce 9c 3a 73 66 08 e0 f3 e7 cf 30 08 86 12 a5 c1 05 28 d2 a4 4a b1 1d 21 e0 94 88 23 a5 49 b9 10 ad 6a f5 2a d6 ac 5a b7 72 ed 3a 74 85 4a 86 Data Ascii: _%3wnuW(`u{{ pzZAG8^"\|<XVWZbV}_g(,[rIF80pS~O`kQnpUj(` 2\'RhaC7rG$A/k%2gi&:sf0(J!#IjZr:tJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49794	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:36 UTC	618	OUT	GET /wp-content/uploads/2024/05/12022.jpeg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:36 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:36 GMT Content-Type: image/jpeg Content-Length: 65787 Connection: close last-modified: Mon, 27 May 2024 11:49:25 GMT etag: "66547345-100fb" expires: Fri, 02 Aug 2024 18:49:35 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 100201 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FN%2BMz5tKJsWelpuv0QE3tIIu6X5NK7aCsgqFeXfAcYNh2WAn3W1pE7oMOPE4KQaH20yHIUMGvg32qSbuOzYxGvXqfFTZlvqmKzigs8YfX97hhz2iA4ppLD70sbLK4muaH98iGOg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cbdaf64424a-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:36 UTC	594	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 08 08 0a 0a 09 0b 0e 17 0f 0e 0d 0d 0e 1c 14 15 11 17 22 1e 23 23 21 1e 20 20 25 2a 35 2d 25 27 32 28 20 20 2e 3f 2f 32 37 39 3c 3c 3c 24 2d 42 46 41 3a 46 35 3b 3c 39 ff db 00 43 01 0a 0a 0a 0e 0c 0e 1b 0f 0f 1b 39 26 20 26 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 ff c2 00 11 08 03 32 05 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 01 03 02 07 04 05 06 08 ff c4 00 1b 01 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 05 06 04 03 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 dc 60 00 00 00 Data Ascii: JFIFC"##! %*5-%'2( .?/279<<<$-BFA:F5;<9C9& &999999999999999999999999999999999999999999999999992`
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: e2 61 e9 ef be fa 9c 17 ce 79 f7 57 5f 97 ab f5 68 3c c7 97 7b dd 7d f5 9e 9b d3 a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 24 ba 23 cf b6 ee fe 3b 6e eb d9 cb 7b 99 ea e8 fe 1b 5c 65 bf 2f 97 2b 2f 3c 9d 57 cb df 9d c7 d8 fb 39 bf 29 e4 df fa cf 5e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 1a e7 e7 ea bf e1 b7 f4 9e ae 7f bc b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ayW_h<{}$#;n{\e/+/<W9)^
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 03 50 76 bc 97 5f e9 f8 00 06 d4 e4 3a 7e ef c1 ed 00 08 b3 43 7e 87 c3 7b 3d 1e df 63 f2 fd 18 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 3b db f2 3c ef 3f db cc 6d b5 de c7 47 b5 e9 3d fe 3f 5d a5 da f8 4e 87 4b b7 b8 be ab 52 f6 5c be d0 e4 ba 5e d7 c9 e9 d6 fd 4f 3c 8f 3f b2 f0 72 fe 3f 5e d7 c7 ea e3 7d 7e 5e 7f 67 e0 f4 9a ad 8f 4d ee f2 6c 8e 5f a1 f4 fa 9d 98 03 5d 74 fc ff 00 9c d9 eb 77 47 0b d9 00 07 13 ed f1 d6 7d 5f 39 db 78 bd 54 7d 31 f4 1a df 76 af eb 79 9c 68 64 b3 26 f7 fc f3 b9 f1 7b dd 37 80 e8 f4 5c ff 00 3f df ad f5 79 b6 07 37 be f0 dd 06 96 bc b1 ab 3c 79 3f 2f a4 c6 ef e0 7b 4f 25 ba d4 eb 5e a3 9e f7 fc ee f7 a0 d8 f8 38 ff 00 5c 3d 16 af df e4 b7 5a bf 63 a3 db f9 8d b6 b2 dc 6e da e3 3a c0 00 00 00 00 00 00 Data Ascii: Pv_:~C~{=c;<?mG=?]NKR\^O<?r?^}~^gMl_]twG}_9xT}1vyhd&{7\?y7<y?/{O%^8\=Zcn:
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 00 00 d6 9d 57 37 e4 77 5a 8d f5 f9 d7 79 16 6a ce bf 97 e8 36 3e 2f 61 a4 db 0f 27 b8 d5 fa 6d 56 c3 63 f3 1d 16 86 fd 0f 86 f6 7a 3d be c7 e5 fa 3d 2d dd 71 c3 d3 ea b6 43 c4 ef b4 bb 17 98 e8 72 97 5a f5 5c ee ea e0 fb 0c 6c d2 fd df 1f b5 f8 ee a3 d2 6a f6 5a a3 b1 e5 7a 4f 77 93 78 f0 1d a4 a8 e9 bd de 3f 29 b8 d5 f4 be ef 1f 47 b2 f0 fb fe 6b 7b ee f9 ed ee 9a ee 78 fe 47 cb e9 b7 78 be b3 a0 d8 f8 35 27 69 ca 6d 1e 47 a7 f5 3a 8d 9e ad eb b9 8f 3f b2 f0 6f 3f cf bb 68 a0 34 ef 6f c8 ec 2e 6b 7f ab fa de 67 d8 e8 f6 fd 4f b7 ca 07 1f e9 87 4b ee f1 7b de 77 79 ee b9 fd e6 be e9 34 1c 2f 47 c2 2b cc ed 35 dd 97 97 d1 c9 f9 7d 33 99 51 9f cf ac f5 f9 f7 87 01 da 4a 80 35 d7 4f cf f9 cd 9e b7 74 70 bd 90 00 78 2e 8b 45 d1 6c 3c 5e 7f 67 af f4 3a bd 87 Data Ascii: W7wZyj6>/a'mVcz==-qCrZ\ljZzOwx?)Gk{xGx5'imG:?o?h4o.kgOK{wy4/G+5}3QJ5Otpx.El<^g:
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 47 bd e3 3d 0e b7 df dc f8 7d 7a fb a4 d1 73 fc ff 00 7a f2 c6 8c f0 a7 eb f3 d8 9c c7 41 e6 36 da ef 6b a1 dc f8 5e 8b 46 07 07 ed f0 a7 e9 8f 69 e5 f4 80 3d df 3b bc f2 9b 7d 5f 6d e4 f4 f8 1e 8f 45 b9 78 5e c3 57 f5 dc d5 98 5d 81 ce 6f 35 3f 63 cb ec 8e 5b a3 d7 1d 47 3f b5 39 0e 9b 89 f6 f9 79 bd a6 bb 6a 72 1d 38 8a f2 bb 7d 5f 51 ed f2 77 da ff 00 6e a7 ec 79 8d d1 c2 f6 1d 9f 93 d3 e4 f7 3a 9d 73 d3 e8 37 a7 e7 bd b6 88 fd 13 87 4b 91 47 d3 e7 b0 79 ad ff 00 41 b1 f0 e3 71 db 5c 6f 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 56 58 61 96 3c 8f 9f d4 01 c3 fb 7c 78 bf 6f 9f 67 e5 f4 67 8e 43 0c b1 ea fd 7e 6e cf c9 e9 b3 1c 87 5f e9 f3 d7 96 3d 9f 93 d3 2b e3 37 9a 7f 19 bd d3 ec 8e 5b a2 8b 3c a6 e3 57 e3 f7 Data Ascii: G=}zszA6k^Fi=;}_mEx^W]o5?c[G?9yjr8}_Qwny:s7KGyAq\oVVXa<\|xoggC~n_=+7[<W
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 99 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 07 0e 5a e1 2d 31 8a 84 00 00 00 00 00 00 00 00 92 00 00 00 49 00 00 00 00 00 00 00 00 00 00 00 00 04 90 00 06 55 6a 4d 51 8d 80 00 14 4b 2a ca 27 27 29 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 8c 71 b1 ca 8c 58 1d 61 d6 57 58 75 76 70 4a 0c 40 20 90 00 00 82 40 00 00 00 00 00 00 04 12 00 14 80 00 00 00 00 00 00 00 00 00 00 00 64 73 28 70 a2 00 05 87 2c ec 0e d2 5e c4 ed a3 96 b6 59 7e 53 9d 66 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 38 18 de 3e 37 a7 af Data Ascii: Z-1IUjMQK'')qXaWXuvpJ@ @ds(p,^Y~Sf@8>7
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 35 6f 7c 9d e4 bc 03 65 26 97 ad 27 68 ed 4f b0 31 9c 73 cf 1e 9c 1e 70 f9 47 2b 88 36 26 37 77 e3 7b 5c f1 e6 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 1d 1f cf 2d 71 94 d1 d9 40 37 fe 38 ed 29 00 00 01 ae 6e 5e d6 63 c7 35 c5 cb d2 25 47 9f 5d a1 31 ec 40 00 00 01 e5 57 57 65 7c 75 bd 69 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 3b 93 dc 49 b5 71 9d b5 00 20 d2 b6 f3 ce 74 77 47 a4 3b 14 a0 a1 7c c2 f7 09 df 1e 6c e8 49 39 27 a3 2b 3b 42 d0 0f 98 6d f1 54 3d 04 bb ff 00 0b e9 32 76 59 62 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c6 3a 8f 9e 7a 57 2c 75 a6 50 66 7d 77 86 1d 98 00 00 00 00 00 00 00 00 00 00 12 40 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 40 02 48 20 Data Ascii: 5o\|e&'hO1spG+6&7w{\-q@78)n^c5%G]1@WWe\|uiX.;Iq twG;\|lI9'+;BmT=2vYb:zW,uPf}w@@H
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: f5 fe 7b d9 ce 75 9f 7d 60 1d cf 8b a1 f4 9a fe b3 e3 ec af 56 0f 7d 2e fc c2 f3 b3 9c db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d7 63 97 9f 4f 9a 32 9c 20 6e cc 66 e5 98 f1 fe 98 6a ce cb 9a f7 bc d6 ef be d7 7b 7c c6 df 5d ad ba de 7b d0 6b bd dc 1f 47 c7 1c 5b 83 85 ea 94 00 00 00 00 00 00 00 00 01 c0 3b 02 08 3a d5 e7 a5 87 08 e6 94 15 1d 7a f6 c9 c2 5b 52 d3 92 71 4b 0c 0c 8b ce 31 42 f2 13 13 8e bc 2a ed a4 e0 ac 1d 89 75 00 00 02 62 48 a0 04 a8 09 14 04 a8 03 ca ec b8 ce b7 d3 aa 17 e3 f7 f5 1e 1e 9b cf 7a f9 fe 0f d7 c4 07 79 e2 e8 7d 17 87 a7 f8 fb 2b d5 83 61 cb bf 31 bc ac a7 32 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 75 b8 e5 e6 e3 e6 dc f1 e1 03 76 63 37 2c c4 Data Ascii: {u}`V}.cO2 nfj{\|]{kG[;:z[RqK1B*ubHzy}+a12uvc7,
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 93 13 02 cb 73 58 4c 62 cb 72 2b 5b 68 63 19 55 71 84 5f 5f 30 7b be bd 75 0f 73 2e fc c2 f6 59 ce 75 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ea f0 cb c9 1f 3b e7 8f 0c 1b 4b c9 f1 d9 9e 4f 95 52 4d 66 00 00 ae 26 b3 00 a8 b4 84 18 03 35 1c 56 3c 96 55 a5 80 0a a5 33 b6 89 8f 26 e4 08 00 a8 b4 a2 4c ed 93 3a 00 00 00 92 69 02 68 42 e1 26 46 56 c2 61 2d b9 0b 5c 98 92 5d 6c c6 35 9a d7 26 76 e4 4a c9 89 52 72 2d 12 4a aa 62 56 6c ae 51 75 c8 49 25 71 65 2d 19 00 57 02 24 f9 97 df f6 eb a8 7b 99 77 e6 17 b2 ce 73 ac 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 57 86 5e 48 f9 df 3c 78 60 da 5e 4f 8e cc f2 7c 80 84 28 03 14 a6 32 2e a0 2a 2d 04 24 54 c0 2d 29 7a d4 99 80 57 66 75 0b Data Ascii: sXLbr+[hcUq__0{us.Yu;KORMf&5V<U3&L:ihB&FVa-\]l5&vJRr-JbVlQuI%qe-W${wsW^H<x`^O\|(2.*-$T-)zWfu
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 0b 2e 58 a6 6b 5c 92 5b 6c db 20 ae 24 ce a4 c6 3e 61 f7 7d 7a ea 1e e6 5d f9 85 ec b3 9c eb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e bb 1b 86 17 c9 64 f9 df 3c 78 60 da 5e 3f 96 cd f1 fc 78 c5 e2 b2 10 aa 8b 2d 00 12 99 2e b4 41 09 89 89 06 65 80 a4 b1 00 1c 64 b6 db 2a 99 2d b4 53 25 b6 90 00 a4 0a 8a d2 02 f2 ea 54 00 02 90 a9 00 ae 48 5b aa 56 2a b8 90 4a 92 db 94 95 49 75 a2 50 b2 28 0c 82 ca c8 2b 24 17 5c aa 92 ec aa 20 ce 86 11 0b 98 33 ac 04 7c c5 ee fa f5 d4 3d cc bb f3 0b d9 67 39 d6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 6e 36 ac 72 f2 b6 7c ef 9e 3c 30 6c ff 00 1f c7 67 78 fe 70 99 ad 29 91 62 d0 96 db 95 00 42 e1 24 19 aa c0 05 12 67 56 18 95 96 90 80 60 67 55 Data Ascii: .Xk\[l $>a}z]d<x`^?x-.Aed-S%TH[VJIuP(+$\ 3\|=g9n6r\|<0lgxp)bB$gV`gU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49795	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:36 UTC	378	OUT	GET /wp-content/themes/tgtheme/img/d6.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:36 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:36 GMT Content-Type: image/gif Content-Length: 2424803 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-24ffe3" expires: Thu, 01 Aug 2024 11:35:07 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 212669 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ski3cLZNBrXhdQYUo5r57%2Fonw35f9atYJ%2F4eeho%2FFShX5xAXaXLzkW8vx989jLhtobZbjchDff3N1Q4Lypl396AvIUKHViiMWR7DEg4Rb9L26imN2UdQDrWqOJkpOuIxnEJCPhk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cbdce3941c0-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:36 UTC	590	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 98 2a 05 35 35 35 ff ff ff fc ee 21 ff 5d 1f 00 00 00 cf 35 02 fe d8 21 fa 90 16 d5 77 15 7d 09 09 b1 54 0b 97 2a 03 66 66 66 c5 63 10 a8 3e 09 ff b4 84 34 34 34 98 98 98 fa 90 15 97 29 03 fe d7 20 f9 90 15 fe d8 20 98 29 03 fa 8f 14 fa 92 15 fa 8f 16 f9 8f 15 b2 4a 0a 97 27 03 b5 4d 0b fa 99 17 b6 4f 0c fa 94 16 bc 57 0d b7 50 0c 40 40 40 ff d9 20 fe cc 1e fe d4 20 bb 55 0d c0 5b 0e b0 47 0a fe dd 20 fe c3 1d be 59 0d fc ed 20 fe da 20 4d 4d 4d ba 54 0d fb a4 18 fb a2 18 fe ce 1f ad 43 09 fd b8 1b fc b0 1a ae 45 0a b1 48 0a 99 27 03 fe c6 1d fd c9 1e fe d1 1f fd e4 20 fd b5 1b fd e6 20 eb Data Ascii: GIF89a!NETSCAPE2.0!,555!]5!w}Tfffc>444) )J'MOWP@@@ U[G Y MMMTCEH'
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: fe e0 4e e1 74 0d ff 7d 43 86 0e 0a 7f 2c 10 ca 68 11 9b 25 00 ff f9 dd ff 87 4f fc cf 1f c9 39 15 fa c9 1e e7 86 11 e0 48 19 d2 3d 02 f5 b8 1a f7 bf 1c 6f 5e 0e 8f 8f 8f 0f 0d 02 7e 7e 7e a6 3b 08 df 6f 0c de 69 0b a6 23 0f ff 70 35 ff a5 73 81 0a 08 4f 43 0a ff e4 5f e7 4d 1a cd 3c 16 5f 51 0c bf bf bf d4 41 17 d9 44 17 fb cd 1f ee 9d 14 30 30 30 48 48 48 ff 9b 67 af af af 71 71 71 dc 46 18 f6 ba 1b f0 f0 f0 cf 34 01 10 0e 02 ae 94 16 8e 79 12 a0 a0 a0 3c 3a 39 e0 e0 e0 d0 3e 17 84 84 84 d9 4b 0c fa 8e 12 40 36 08 59 59 59 10 10 10 20 20 20 ff 95 0f 89 2a 0a 55 55 55 66 53 2f 54 45 30 af 95 16 de b4 20 ff 85 2c ff 8e 57 ff 93 5e b7 b7 b7 b0 6e 22 9e 80 28 a6 68 23 ee d2 4f bc 73 1f 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 Data Ascii: Nt}C,h%O9H=o^~~~;oi#p5sOC_M<_QAD000HHHgqqqF4y<:9>K@6YYY UUUfS/TE0 ,W^n"(h#OsH\
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 21 0a 61 08 ca e5 01 73 b9 68 e3 ef f8 80 08 39 7e b1 8f 6b fa 0b bc 9e 57 47 22 25 81 7a 81 4c 65 b1 12 c1 08 43 e4 a1 13 7a d0 a4 ee ee 60 88 21 ae ac 0b 30 ec a3 b5 7c 93 9b e7 85 81 4b 4f 68 81 2a 87 69 ae 39 c8 a2 10 6f 20 45 19 da 58 86 37 6c 62 65 5a 00 82 ff 88 c4 35 c0 50 e5 7c a5 14 d2 14 a8 40 cc 6e fa 6b 0e 8c 78 43 26 d9 18 88 67 ac cc 07 5e d8 52 35 cf f7 17 32 d2 48 04 38 f4 a6 3c ff b5 09 43 f0 21 96 56 cc 45 21 6c 69 ff 31 1e 1c 91 9a ec ec 8b 3b 69 94 06 a9 cd f3 a0 ff 4a 04 22 62 51 45 1f 86 e2 0d fa b3 58 13 a2 00 a5 50 06 d4 2d 03 95 91 08 b8 89 d0 8e 5a 8c 11 75 e8 84 0f cb 50 07 7e 5a 0d 07 51 da a5 5b 9e b3 30 37 d5 f0 49 33 30 a8 47 67 5a 31 38 18 22 10 cb 34 61 2a 0c c1 c2 8a d5 80 06 51 a2 cb 28 67 95 cd 19 6d 94 a6 48 55 59 1f Data Ascii: !ash9~kWG"%zLeCz`!0\|KOhi9o EX7lbeZ5P\|@nkxC&g^R52H8<C!VE!li1;iJ"bQEXP-ZuP~ZQ[07I30GgZ18"4aQ(gmHUY
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: f5 2f 91 c7 84 73 e7 84 c8 91 5d 4f 40 65 c5 52 76 1c 67 85 c4 32 06 41 28 86 c1 07 09 8b e7 85 e5 02 86 7a 38 84 90 20 05 0d 85 3d 9d e0 70 e5 82 52 bb d5 75 36 11 83 a5 ff 31 81 51 b0 55 e3 e2 6e 54 67 87 c3 72 06 81 e8 7d e1 e7 87 c6 02 88 99 28 84 99 d0 0f 6c d7 3b b2 85 31 0d c8 6a 6d 08 7d dd e1 27 41 a2 01 e2 35 2e 2c 10 74 42 b7 7b e3 22 05 39 f8 89 c2 57 84 9c 48 2c 24 88 8b 42 28 0d aa a7 3d c4 e5 2f 28 e0 82 e9 77 13 6e 58 1c 03 06 08 fc 72 04 b2 c8 71 ba 47 2e 9e e8 8b c2 17 0e 8e b0 8b 07 30 06 d4 38 84 92 a0 82 bd 93 0a 5c d6 2f 4b 18 24 a9 68 1d dd 11 76 52 c6 2f 30 00 73 d0 48 8b 9d 18 86 db e8 81 d7 e8 87 52 d0 7d f1 58 82 e1 20 05 74 25 72 b3 25 24 ad 46 13 aa c8 1d 42 12 05 b6 47 2c ec c8 71 ee 58 2c d3 78 8f c1 97 8f 7e 28 0d 0c a9 83 Data Ascii: /s]O@eRvg2A(z8 =pRu61QUnTgr}(l;1jm}'A5.,tB{"9WH,$B(=/(wnXrqG.08\/K$hvR/0sHR}X t%r%$FBG,qX,x~(
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: bf 78 db 06 a0 5b a9 8f 40 b5 67 43 ba de 67 42 d3 50 82 b9 1a 48 3e 60 b1 93 12 24 67 7b 9d 31 97 90 2b e3 bf 02 48 0c f3 73 bd 3a 38 b3 67 63 09 95 2a 04 f6 9b c1 77 2b 06 b0 aa 06 7d 5a 35 55 59 82 d5 fb 40 12 2c 80 86 3b 42 18 29 23 a0 aa 24 41 62 93 8f 1b 73 f0 c9 32 0a 3a 80 31 f0 40 c4 a0 83 c4 3b 35 02 4b a9 f4 ab c1 3e 4c 00 7b 5b a9 6a 20 89 3e 63 b5 c3 c7 0a 10 c4 0a 03 98 c3 81 84 02 26 a7 21 4c 14 24 44 4c 2c c5 9a 6c 8c da 33 6d 2b 7c ea 3b 3f 11 cb 95 55 e3 07 95 2a 06 3f 3c c6 42 00 ab 96 80 36 0e 1c 7c 23 2c 3f 01 2c 80 ba 48 4c 9e 9a 91 62 9b 1c 48 10 24 56 60 2e 51 c9 71 31 dc 33 33 ec 7d ee 60 42 ed 3b 80 00 ab 32 a5 60 a5 79 9a 05 75 3b c6 3f ff cc 06 e0 50 a9 96 50 ab 17 d3 0a 61 2a 80 ed b0 0d f2 b3 0d c2 fb 7d c5 30 b1 c3 e4 c4 34 Data Ascii: x[@gCgBPH>`$g{1+Hs:8gcw+}Z5UY@,;B)#$Abs2:1@;5K>L{[j >c&!L$DL,l3m+\|;?U?<B6\|#,?,HLbH$V`.Qq133}`B;2`yu;?PPa*}04
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: e0 07 7e e0 0d 1f ac 04 bd 90 ec 7e e0 0b c9 d0 f3 ce fa f3 61 4f ce 43 7f ce f8 90 f0 4a db 08 42 90 f2 6a 3f b0 76 9e 59 4f 1d 23 cd 8d 1e 17 8f 00 01 0d 8b d0 88 54 bb 50 09 b3 a0 06 f0 be f9 f3 1b f9 19 8c d6 93 3f 0a f7 70 f2 9d ab b7 9a ef fa b0 0a 0c 1f 6c 58 28 b0 57 c8 d5 1e 41 12 05 fc 12 e2 03 b0 c7 f2 04 0b dd ae fb ce aa db b0 6f bf b2 3f f9 18 ad 0b b6 cf b9 64 20 04 62 90 fb cc af a5 af ff c0 5a 12 3a a8 f4 91 51 74 4f 2e b5 9b df 07 e5 0d cb bf fd 95 fa 05 df fe fc 1a 1c fd d2 ff db f8 40 0b 96 af b4 4d 0b 06 60 20 06 62 b0 06 6b 90 05 fe ef ff 00 b1 46 8c 18 30 60 84 08 61 83 06 0d 9b 83 62 be 18 80 18 51 22 a5 03 15 2d 5e c4 98 51 e3 46 8e 1d 3d 56 6c 82 40 e4 48 92 1b fe 9d 44 99 52 e5 4a 96 2a 03 b4 84 19 53 e6 4c 9a 35 6d de c4 49 93 Data Ascii: ~~aOCJBj?vYO#TP?plX(WAo?d bZ:QtO.@M` bkF0`abQ"-^QF=Vl@HDRJ*SL5mI
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 73 28 8d 91 5b 71 45 35 20 19 cb 3a 45 cf 96 57 59 a2 65 14 b1 8b 53 1a 85 06 e4 13 65 32 0b 73 45 92 44 a1 98 1d b9 a1 af 92 88 15 53 c4 ff c1 67 bc bc d3 27 06 d1 8d 4a 96 11 0d dd 18 c4 27 22 89 4d 39 0c c2 72 5b 69 a3 65 2c a1 84 67 16 05 81 b1 51 66 3c 0b e3 1b 1a b4 93 23 15 7c ca 1a d4 f2 c1 b6 61 13 7a 91 d0 66 37 7e a9 31 34 fc 22 1a 71 88 84 21 fd d9 43 6a a4 85 2d 97 99 85 29 ed d9 91 22 60 4b 9e 17 cd cb a2 62 63 85 89 6a c4 1a 94 80 4a 66 36 53 8d 34 2e 54 54 72 00 e8 20 ce f1 0b 53 9c 73 45 68 80 46 37 78 11 07 65 f4 d3 a4 75 f2 c4 20 06 ba af 25 5c e6 2d 1d f5 c8 78 e0 19 21 8c a6 cf 37 37 00 6a 46 96 47 29 c4 6d 06 0d 83 18 e7 4d 41 d6 0c 94 2a 23 0e 83 18 04 2f 78 11 0d 6a 54 a3 1a bf a8 06 35 ce c1 0b ac c6 e1 13 ca 38 6b 24 e4 70 4d a9 Data Ascii: s([qE5 :EWYeSe2sEDSg'J'"M9r[ie,gQf<#\|azf7~14"q!Cj-)"`KbcjJf6S4.TTr SsEhF7xeu %\-x!77jFG)mMA*#/xjT58k$pM
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 54 fb b8 d4 3b 1f 40 24 8c 24 43 80 c1 32 c4 48 ec 23 ec 33 b6 63 33 3b 46 cc 09 41 54 3b 49 e4 44 2d a2 c1 4a 14 b8 4b 74 35 0c f8 07 00 c0 00 53 a4 80 54 54 c5 55 64 c5 56 74 c5 55 04 85 2a 90 c5 59 a4 45 1d 58 80 5b c4 c5 5c d4 c5 5d e4 c5 5e f4 c5 5f 04 c6 60 14 c6 61 24 c6 62 34 c6 63 44 c6 64 54 c6 65 64 c6 66 74 c6 05 a0 c5 68 ac 02 4c 78 c5 6a 7c 45 78 b0 85 6c d4 46 5b 80 07 6b a4 80 53 34 45 52 94 27 0c 60 00 00 30 c7 73 44 c7 74 54 c7 75 64 c7 76 74 c7 77 84 c7 78 94 c7 79 a4 c7 7a b4 c7 7b c4 c7 7c d4 c7 7d e4 c7 7e f4 c7 7f 04 c8 80 44 c7 54 fc 07 5c 80 21 0a 28 47 81 54 c8 85 64 c8 86 74 c8 87 84 c8 88 94 c8 89 a4 c8 ff 7b 2c c7 f4 a9 c8 8c d4 c8 8d e4 c8 8e f4 c8 8f 04 49 88 44 c8 d0 01 c7 75 3c 86 0f 70 01 07 b8 05 4d 48 80 96 74 c9 97 84 Data Ascii: T;@$$C2H#3c3;FAT;ID-JKt5STTUdVtU*YEX[\]^_`a$b4cDdTedfthLxj\|ExlF[kS4ER'`0sDtTudvtwxyz{\|}~DT\!(GTdt{,IDu<pMHt
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: da 9b 90 db 18 70 82 6d 20 07 63 f0 df 0e 6e 00 56 08 e0 ad 1d 60 74 8c de 02 e6 5d f6 4d 60 ec 45 47 cb 0d b0 07 d1 d6 08 26 d6 fa 95 22 cf 3d 0f 6e f8 06 01 c0 61 01 98 06 0f ee e0 78 10 e1 94 80 de dd cd 5e c0 f0 80 d4 55 e1 06 6e 61 bd 8a 5d 18 1e d6 09 ee af c4 3d 8f 6c b8 e1 1c c6 61 62 e0 61 ff 0d e1 3b 0a e2 f4 7d 56 c1 30 62 f7 4d 47 16 2e 98 07 49 02 26 1e 56 ff 63 3d 59 db dd 0b 63 a0 e2 1c ce 87 2b f6 df a2 05 62 02 86 c9 e9 85 5c c2 28 e2 f6 05 de 2e ee 96 8f ed 09 33 ee c4 1a 78 10 08 81 d8 00 70 82 36 c6 61 26 80 e3 fe 2d 01 ef 9a 63 12 16 e2 3b 86 d6 74 9c dc 96 64 60 73 b4 d6 cb 7d 10 11 d8 3d 40 c6 43 c3 3d 5c 2c b4 8d 12 38 64 44 56 e4 45 ce e2 f3 c0 06 94 d8 62 13 b6 d5 03 d6 d8 3d 1e e2 a9 35 38 4f 2e 44 34 7e bf 29 92 10 52 46 64 01 Data Ascii: pm cnV`t]M`EG&"=nax^Una]=laba;}V0bMG.I&Vc=Yc+b\(.3xp6a&-c;td`s}=@C=\,8dDVEb=58O.D4~)RFd
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 88 02 10 78 82 27 48 82 19 b0 02 2c 68 82 16 38 81 c0 97 8b c1 2f 7b 77 cf 96 b4 4f 80 b5 af f7 9c d8 6b ff 73 74 fa f0 5e fa f4 91 72 ae 17 d6 ca 0f 9f 1a 10 78 9e d8 f8 a7 81 fd a2 37 fc 52 4c fc 97 b4 fd af d6 fd b7 3f 73 51 22 a5 f9 fb 30 51 17 fe d3 01 65 c4 38 7e e4 1f fb 21 27 fc c2 6f f0 55 a3 fd e7 2f 8c dc 07 80 dd 4f 00 5d c7 28 ad 6f f3 ec df 9c ba d0 68 ca df 95 e4 37 fa 6e 0e b1 f2 87 fa 49 a6 70 e9 c7 a8 df 02 88 0d 08 06 12 1c 98 46 cb 81 84 0a 17 32 6c e8 f0 21 c4 88 12 27 52 ac 68 f1 22 c6 8c 1a 37 72 94 d8 a2 20 48 82 20 6a 1c b8 d0 f1 64 c2 00 2a 57 aa 2c e1 44 00 cc 98 02 98 34 68 20 e1 26 ce 9b 31 58 b2 34 f3 ef 27 80 a0 42 73 24 28 6a b4 a8 0b a1 42 31 fc 6c ea f4 29 54 a8 1e 94 06 35 72 f4 e8 07 aa 00 a2 72 ed ea f5 2b d8 b0 4d 33 Data Ascii: x'H,h8/{wOkst^rx7RL?sQ"0Qe8~!'oU/O](oh7nIpF2l!'Rh"7r H jd*W,D4h &1X4'Bs$(jB1l)T5rr+M3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49796	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:36 UTC	630	OUT	GET /wp-content/uploads/2024/05/maxresdefault-80-1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:36 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:36 GMT Content-Type: image/jpeg Content-Length: 95543 Connection: close last-modified: Mon, 27 May 2024 12:27:59 GMT etag: "66547c4f-17537" expires: Wed, 31 Jul 2024 04:11:18 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 325698 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bfo9KqRwsJjb6GlZmmRy0NK6qNPIx1oc6UYfy7gYjnHSW49oW%2FaBxBkhiyrfhn9%2Fgr5y2eJHRhAw1yjsqzBHo5p9TwhmjdV91Iuxrpat2eyr7kZINAVsltXiPwVkLeytXE5F0rw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cbf6bed5e6c-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:36 UTC	594	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 09 08 08 0d 15 0d 0e 11 11 13 13 13 07 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0f 0f 0f 12 15 12 15 15 12 15 15 12 15 15 12 15 15 12 12 12 12 15 12 15 12 12 15 15 12 15 15 15 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 05 06 07 08 04 09 ff c4 00 62 10 00 01 03 02 02 04 05 08 13 0b 0a 05 04 02 03 00 01 00 02 03 04 11 05 21 06 07 12 31 08 13 41 51 61 14 22 35 71 81 91 b1 b3 17 32 33 36 52 Data Ascii: JFIF"b!1AQa"5q236R
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 25 48 8e 5c 86 a4 12 55 00 4f 48 8e 42 6a 63 7a 69 b5 39 2c 11 c8 48 4d c9 27 11 b1 d9 2b 29 04 c1 46 06 8a e8 70 42 12 8e 4c 8a 14 c1 51 25 20 b9 29 01 9a 65 49 22 99 80 4c a6 e5 4d ca a9 0a 9b d2 34 3d 32 9a 8d 95 5b 28 10 99 82 42 04 28 96 a9 90 52 b2 07 60 83 82 8a 9b 82 8d 93 70 3c 82 8d 95 6b 28 5b 7a 8d f0 14 82 4a 6e 0a 36 4d 01 21 3b 22 c8 14 49 a6 d0 a5 b2 81 04 9a 79 a6 80 00 98 48 26 02 06 92 ba 9b 54 43 55 40 10 46 d9 26 a9 b5 45 81 4c 34 a3 04 13 1b 42 9b 52 b2 a8 c0 a5 89 03 01 bd 4d 2b 2a 8d 09 e5 79 03 54 80 cd 30 14 ec 94 8e 4c 61 4c 24 02 9d 92 90 4c 02 90 48 29 35 48 9f 02 30 28 6a 6e 09 04 e5 c0 4c 92 0a 6d 09 00 a6 c4 bb c3 18 d1 cc 84 ee 84 c6 b1 dd 08 48 94 bb c0 34 21 a0 9d c0 af 44 34 8e 3b d2 74 82 94 1a a4 57 b5 98 75 f7 95 51 Data Ascii: %H\UOHBjczi9,HM'+)FpBLQ% )eI"LM4=2[(B(R`p<k([zJn6M!;"IyH&TCU@F&EL4BRM+*yT0LaL$LH)5H0(jnLmH4!D4;tWuQ
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: ef 92 80 76 48 05 0c 90 77 41 49 09 05 44 ae a3 b4 85 1b 24 63 99 2b a2 e9 21 03 07 74 5d 24 24 01 dd 17 49 09 47 0e e8 ba 48 40 83 25 0a 09 b5 08 6b 25 74 c2 85 d4 c2 92 24 4c 2e a6 a9 8e 4e d2 9d d3 c6 31 a1 08 4a 91 13 60 37 29 8e 45 10 98 4f 44 52 63 09 94 93 3c 89 e8 89 92 4d a9 34 29 b1 a9 c8 8e 4c 61 48 22 c9 80 a5 44 40 02 93 52 52 69 4a 31 b1 a2 c1 16 42 12 18 c6 2c 9a 40 24 53 b0 45 91 84 d0 91 40 b9 1a 45 01 34 82 a2 24 04 ac 13 49 c9 30 2e 48 15 4d c1 55 54 e4 48 d0 e4 c8 59 25 35 12 14 4c 7a 64 1c 14 0a a8 e5 12 13 58 f8 b2 9b 92 55 1e 14 2c 90 96 2c 89 4a ea 45 09 8f 80 ed e2 9a 69 94 26 b1 50 90 9d 90 52 0e 29 94 29 14 20 01 30 8b 84 c2 04 24 c5 24 82 61 04 72 24 02 a8 14 5a a5 ca 82 16 4d a1 55 68 54 d9 f4 aa ac 4f 43 24 3b 26 d0 81 bd 48 Data Ascii: vHwAID$c+!t]$$IGH@%k%t$L.N1J`7)EODRc<M4)LaH"D@RRiJ1B,@$SE@E4$I0.HMUTHY%5LzdXU,,JEi&PR)) 0$$ar$ZMUhTOC$;&H
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 90 71 50 94 94 42 10 19 24 85 14 25 13 24 d0 a0 52 40 dc 95 02 90 72 a4 a5 74 e4 c6 b2 aa 14 02 90 29 e8 8d bc 12 09 aa 77 53 6a 71 13 26 13 6a 88 dc a4 d4 b8 c9 1c 89 a9 b5 53 0a 6d 52 22 26 34 da 97 2a 61 2a 18 c9 34 29 dd 44 29 05 2a 2b cc 93 54 94 42 90 4e c9 13 79 24 98 48 26 9c 91 1b 64 82 69 04 ca 70 d0 40 42 12 32 26 c9 21 08 48 19 05 15 24 ac 94 37 88 90 a2 46 4a 76 28 21 04 99 29 84 9e a6 42 8b 82 47 c8 37 88 82 91 4d 22 a2 68 54 c8 15 17 2a 84 28 10 90 92 2c a6 e4 94 9e 90 09 ac 91 32 2e 54 ca ac e5 4c 84 d6 90 f4 ca 65 00 a9 59 1b 2a 36 c7 6f 09 09 d9 16 48 39 31 5d 09 d9 16 40 99 12 13 b2 2d 9a 51 06 14 da 10 02 90 08 18 0a 6d 4b 65 4d a1 39 32 3c 92 6a 9b 54 40 53 6a 7a 64 52 91 35 26 25 64 c2 52 06 f2 4c 29 24 d0 ae 54 38 79 76 6e cb 95 05 Data Ascii: qPB$%$R@rt)wSjq&jSmR"&4a4)D)+TBNy$H&dip@B2&!H$7FJv(!)BG7M"hT(,2.TLeY*6oH91]@-QmKeM92<jT@SjzdR5&%dRL)$T8yvn
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 14 c0 50 0a 40 a9 08 09 84 20 21 3d 73 23 24 13 48 26 94 6b 64 90 93 4a 69 08 49 25 74 14 20 6e f3 00 82 8b 22 c9 44 de 0b a2 e8 b2 2c 90 37 84 54 5c 14 88 48 a4 61 bc 44 a8 5d 4c aa 65 31 92 46 44 4a 4a 49 14 c6 4a a4 c8 95 02 d5 32 91 4c 1c 9b 28 90 95 95 47 05 12 91 92 45 94 c0 41 52 29 14 c4 49 90 25 24 ec 8b 27 06 40 20 84 26 80 c8 82 69 14 04 89 71 11 b1 90 a4 d4 81 52 60 52 0d 6c 98 0a 43 91 20 98 41 14 b8 22 4b d1 49 03 a4 70 02 fd 36 54 e9 a1 74 86 cd 0b 2e c2 a9 44 2c b5 b3 e7 e9 41 42 a5 4c 3e 04 30 ea 06 c6 06 77 27 7a b8 06 d9 41 bb cf 6d 55 4a 8a d2 96 45 64 27 70 91 40 c1 5d 17 49 08 10 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 Data Ascii: P@ !=s#$H&kdJiI%t n"D,7T\HaD]Le1FDJJIJ2L(GEAR)I%$'@ &iqR`RlC A"KIp6Tt.D,ABL>0w'zAmUJEd'p@]IwEBwEBwEBwEBwEBwEBwEBwEBwEBwEBwE
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 38 8a 65 40 a6 a9 b5 54 05 39 10 c9 12 0a 4d 50 05 48 15 22 64 6c 98 2a 4d 50 05 48 1d c9 72 44 d1 51 a8 29 34 a6 8c 8c 27 74 92 ba 2e 81 80 02 2e 8d c8 4a 30 68 b2 12 40 d4 c4 99 41 40 48 3d 31 28 b9 49 22 90 55 22 0e 51 b2 91 51 29 07 26 46 c1 22 a4 e4 8a 63 44 b1 65 37 28 95 32 a0 98 4c 9e 48 38 28 95 50 85 07 21 8e 12 10 84 dc 08 08 42 2c 95 a0 c9 2d 94 5f 72 65 44 e7 dc 48 83 24 94 e1 8c b8 db 9d 40 03 cc af fa 3d 41 fa 6f 1d a0 53 8a f5 64 7b b0 5c 3c 46 cd a2 05 cf 3a b9 81 b8 a0 9b f7 37 21 a5 06 63 96 59 34 c2 49 dd 03 44 51 74 89 42 41 01 09 72 a7 74 09 80 b9 4d 2b a6 81 41 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 Data Ascii: 8e@T9MPH"dl*MPHrDQ)4't..J0h@A@H=1(I"U"QQ)&F"cDe7(2LH8(P!B,-_reDH$@=AoSd{\<F:7!cY4IDQtBArtM+AB B B B B B B B B
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 08 21 08 40 14 9e 15 22 15 77 05 0b 28 6a ac a2 f5 a5 7e 8d e0 80 45 93 42 a4 d6 0e 9e 94 f7 a3 91 59 27 05 20 50 95 22 42 99 08 b2 a8 42 45 a9 c4 6d 14 c0 4d 4f 65 1b 29 d9 10 a7 b2 98 6a 90 09 80 94 63 29 ec ac 37 5d bd 80 c4 3b 54 9f 3e a5 59 bd 96 17 af 06 fe 40 c4 3b 54 9f 3e a5 55 ef 17 d8 cf dd 65 8b 3e ba 1e f2 35 de 80 76 36 9b f6 df 38 99 5f 6e ac 5a 03 d8 da 6e d4 df 38 99 5f 14 b6 5d 4c 3d d4 5a b9 eb 25 e2 34 90 9a b5 82 0c 82 45 34 8a 41 45 64 59 05 01 00 16 42 10 9a d6 40 8b 92 4d c8 09 46 89 08 42 51 49 26 4a 48 Data Ascii: B!B!B!B!B!B!B!B!B!B!B!!@"w(j~EBY' P"BBEmMOe)jc)7];T>Y@;T>Ue>5v68_nZn8_]L=Z%4E4AEdYB@MFBQI&JH
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: c9 e2 58 7e 02 6a fb 1b 71 65 eb c6 50 ee ee 7f 13 8c 81 52 05 6d e3 c1 ff 00 15 b9 b5 4d 21 ee bf ea 4b c8 03 16 f5 45 27 7d ff 00 65 6f 47 55 b6 e7 bc 72 6f 4d b8 fc ac d4 6d 2a 41 6d bf 20 1c 54 7f ea 29 3b ef fb 2a 43 50 58 af aa 29 3b ef fa 93 d6 ad 6c bf cc 44 f4 cb 9f c8 cd 4e d2 a7 75 b6 3c 80 f1 5f 4f a5 ef bf ea 4f c8 1b 14 f4 fa 5e fb fe a4 e5 ab da fe 74 47 f4 55 cf e4 66 a8 0a 4d 5b 5d ba 87 c5 3d 3e 97 be ff 00 a9 3f 20 9c 53 d3 e9 7b ef fa 93 be 97 b5 fc e8 64 b4 9b af c8 cd 52 14 9a b6 a8 d4 5e 27 ea 8a 5e fb fe ca 63 51 78 9f a7 d2 f7 df f5 24 fa 5e d7 f3 a2 2f a1 ee ff 00 23 35 61 51 5b 55 da 8d c5 07 fe a2 94 f7 5f f5 2c 2b 4d 34 42 b7 09 94 32 a9 83 65 f7 e2 e4 69 05 8f b5 af 6e 63 9e e2 a6 a1 a8 50 ab 2d d8 49 36 41 5b 4e b8 a3 1d e9 Data Ascii: X~jqePRmM!KE'}eoGUroMmAm T);CPX);lDNu<_OO^tGUfM[]=>? S{dR^'^cQx$^/#5aQ[U_,+M4B2eincP-I6A[N
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 2a 9c 3c 99 19 79 e9 fd 1b 40 da 67 43 c0 3f 18 58 62 e8 68 5c 42 b2 cc 1e 4e 32 e6 d6 a5 bc b7 2a 2c 31 a1 08 53 95 c1 7a 28 28 26 9d db 10 c6 f9 5f e8 58 2e 73 5e 75 be b5 35 87 c5 16 1b 1c cd 68 e3 25 da 73 cf 29 d9 73 9a 05 fb 41 50 d4 2f 7c da 9e f2 59 66 a6 93 a7 79 ed 6d c6 f0 8d 5f 43 ab ec 56 61 f9 b6 c7 44 8e 6b 7c 25 5e a9 35 4b 5c e1 f8 c9 62 8f a3 cb 78 0a f5 e9 0e bd e0 a6 9a 58 19 43 2b 9f 13 cb 1c 1e e0 cc c7 68 15 8e 33 5f 95 52 4f 10 ea 58 e2 85 d2 34 48 4b f6 88 61 22 f6 eb 46 76 ba e5 6a 6d 24 db c2 69 7c 0f 52 b5 f2 5d 5e 74 fa 5e 8e 4e 38 cf 16 b8 a2 db a5 9a 33 53 86 c8 23 9d a3 65 de 52 46 f9 57 db 7d b9 95 92 eb a0 35 a7 42 2b 30 a9 24 60 04 b0 36 66 9d e6 dc a0 73 65 65 cf eb a7 d3 2f 1d cd 3c cb 9a 3c cb 5a d3 55 95 7d d8 f2 7d Data Ascii: <y@gC?Xbh\BN2,1Sz((&_X.s^u5h%s)sAP/\|Yfym_CVaDk\|%^5K\bxXC+h3_ROX4HKa"Fvjm$i\|R]^t^N83S#eRFW}5B+0$`6fsee/<<ZU}}
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 83 41 d5 4c 95 b5 34 cd 23 8c 21 bb 0e 8e e4 00 5c 09 37 69 27 7a ae 75 cd 8e 7a 74 7f 06 16 fc d3 69 8c fa 35 57 24 96 73 a4 c3 9c f7 73 17 16 03 7c ba 55 bb 4d 72 ad 49 ae 39 e2 73 9a fe c7 cf 4c 82 75 52 4d e7 18 79 e4 71 73 53 51 6a 92 ee 11 e7 52 05 28 da 49 00 66 49 00 0e 92 6c 3e 34 88 59 d6 a2 b4 64 e2 78 bc 0d 73 6f 05 3f f3 89 ae 2e 2c db ec 34 f6 dc 02 8e bd 45 4a 9b 9b ec 43 e9 53 75 26 a2 bb 4e 90 d0 5c 39 98 1e 8f c6 1f 66 98 e0 74 f3 13 91 32 3e ef 20 f7 4d 97 27 e3 95 ee aa a8 9e a1 de 5a 69 1c f3 dd dd f1 58 77 17 45 70 97 d2 31 4f 40 da 16 1b 3e a8 d8 80 6d f8 b6 6c b9 de 16 ae 68 e8 5e 53 a9 d7 e9 27 fa b3 e9 3f 27 3a 57 43 6c eb b5 eb 61 2f 04 7a f0 aa 47 54 4d 0c 0d f2 d3 48 d8 c7 f5 8d 96 f1 d2 dd 68 d5 e0 53 b7 0c a7 a5 81 f1 53 c1 Data Ascii: AL4#!\7i'zuzti5W$ss\|UMrI9sLuRMyqsSQjR(IfIl>4Ydxso?.,4EJCSu&N\9ft2> M'ZiXwEp1O@>mlh^S'?':WCla/zGTMHhSS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49797	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:36 UTC	380	OUT	GET /wp-content/themes/tgtheme/img/news.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:36 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:36 GMT Content-Type: image/png Content-Length: 5589 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-15d5" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609578 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bvFcQMGbytkUXKzFC1k3P%2F8jvdVjz7FHTuK4YOYZfJI8yCjQ2r9BQW1eFEdigORzeNk16Bqg0bfdG9iKx9BZYa%2FjJQgmO11CyJ3OjVb0Ol9UsLCA2HRpzxDxVoOaBg8drCw%2BbE4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cbf8effc47c-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:36 UTC	595	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 06 00 00 00 3e 08 06 00 00 00 c9 6b b5 48 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR>kHtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 45 45 39 30 42 39 41 39 43 35 42 46 45 42 41 34 41 41 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 41 41 35 34 46 37 35 32 34 46 33 46 31 31 45 45 39 30 42 39 41 39 43 35 42 46 45 42 41 34 41 41 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 41 41 35 34 46 37 34 46 34 46 33 46 31 31 45 45 39 30 42 39 41 39 43 35 42 46 45 42 41 34 41 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 41 41 35 34 46 37 35 30 34 46 33 46 31 31 45 45 39 30 42 39 41 39 43 35 42 46 45 42 41 34 41 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 Data Ascii: EE90B9A9C5BFEBA4AA" xmpMM:DocumentID="xmp.did:AA54F7524F3F11EE90B9A9C5BFEBA4AA"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:AA54F74F4F3F11EE90B9A9C5BFEBA4AA" stRef:documentID="xmp.did:AA54F7504F3F11EE90B9A9C5BFEBA4AA"/> </rdf:Description> </rdf:RDF> </x
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 26 93 8f f3 8d 32 88 d7 84 e5 0e 06 f8 e7 1c c7 89 92 9c 11 30 18 a1 36 44 49 17 3a 0d 49 c2 18 d5 16 25 fd aa 98 6a 26 f9 b8 fa a9 f7 67 7f 5e 75 20 03 89 b5 99 e4 da e9 5d 65 45 76 7e 6f 25 f8 42 a0 5a 2e 8c 11 dd 0e c4 e6 83 5e a8 7c 77 6a e7 ba 08 18 16 20 ed 75 7f 28 8e 8d 36 9c fd 7e 47 6f ac b1 35 57 b7 ed 5b 47 ea ae d8 78 b2 e9 fa 5b 32 3c 50 d4 6f ff 41 67 cb f6 fb 1a 73 ef a5 d7 8c bd b0 ef f6 c4 55 1d 99 65 77 fe 70 36 b9 f7 e1 fd ed 9b 9c c9 4b 58 90 b8 e1 d6 c6 15 f7 3e 31 3b cf 87 7b 3a 5b 9d b3 97 9c 88 f8 86 ad 6d 2b 1f 7c 7a 2f 3b c7 d4 c9 e1 d6 ec 8f 4b 6f 30 93 5b 76 b4 2f bf 67 df ec 73 3c 5f cd f7 1d 78 16 f8 c5 84 3c f3 d8 3d 77 d9 6f bf d6 c6 cb e0 fe 7e ee e9 87 da 0b 47 9e 2f 45 b7 9f 0c 3e 50 b7 66 7d 19 a8 4d bc 79 b8 6d ec c9 Data Ascii: &206DI:I%j&g^u ]eEv~o%BZ.^\|wj u(6~Go5W[Gx[2<PoAgsUewp6KX>1;{:[m+\|z/;Ko0[v/gs<_x<=wo~G/E>Pf}Mym
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: ee 2d d4 af bb ce d3 68 40 4e de a0 41 16 51 5d c7 25 2f 63 6b 06 fa ae f8 c5 b1 fd e0 15 a8 de 04 c0 d8 60 f4 24 5e 7f 1c d6 11 2b b8 6a be f3 a1 97 d1 53 9d 78 22 8d df 78 f8 65 00 6c 9d a0 e0 52 e3 f6 ef a2 39 8a f9 ec 0d 46 1e 83 86 13 56 95 40 21 1b 48 38 72 f6 d7 f7 77 39 a3 23 ad 2d 9a 13 84 ba 08 0c 09 40 ae ac 3a 93 18 75 ea aa 8e 0c 16 cb bb b4 78 6b 77 3a 4b 6f 5d 92 5b 76 a4 e1 ea 74 46 76 49 1f bf 34 b3 8e 30 16 59 3f 37 1f 01 b7 3d b2 f1 e1 64 6f 36 54 c4 44 c7 3d 94 3b fc fb 2d 6e b8 d8 b0 63 ef 2b 5e 49 d1 05 79 58 92 f8 6f 15 00 b9 8f 3e 36 69 17 e1 87 d3 bb da 2e aa 74 08 30 07 4b 13 64 9e f3 7e 3a 90 f9 c0 13 6a a2 1e d1 62 c1 63 d3 10 45 88 e4 30 c1 b3 64 cc 69 f2 fc 19 1f f2 c1 18 ab 90 af ce 93 71 26 e8 33 20 7f 8b 66 7d 29 92 f1 4f Data Ascii: -h@NAQ]%/ck`$^+jSx"xelR9FV@!H8rw9#-@:uxkw:Ko][vtFvI40Y?7=do6TD=;-nc+^IyXo>6i.t0Kd~:jbcE0diq&3 f})O
2024-07-04 22:39:36 UTC	887	IN	Data Raw: b3 04 d7 54 b9 ae 57 72 4b 47 d9 b0 ad f0 fc a4 e0 fb 7a cd ee 71 58 eb e8 97 67 13 f2 6b df 4b 5a 24 67 cb 6e 26 b8 d3 be 2c e4 a5 ff 62 37 32 09 c4 43 96 95 41 97 e4 1a e8 db c2 53 3e e4 03 80 a8 c7 4e 5f bf 8b 05 a1 83 9f 7a 01 7b 1e 02 43 98 ef 4a f0 0a 97 47 9e 49 0a e2 d5 f9 54 c7 60 cf 91 fc a6 de 0d 29 78 e4 08 54 72 03 53 96 fc da 13 3b bc 3d 4b d6 69 68 3f 6e c9 6b 8e d8 96 62 c1 21 19 f4 ea 86 c6 28 79 c5 84 1f 36 87 13 b0 26 5e e4 e2 c5 0c 00 83 2e 9e a5 63 22 cf 4d 53 a5 e2 65 aa 63 92 bc b6 01 f9 c2 c8 31 cc 85 fc 26 f6 d2 a2 06 1a 47 6c c3 ad 80 8c 23 f3 da c8 18 36 e2 c9 f3 87 37 df c7 52 00 07 e8 97 a3 9e 4b ca f2 2e db 4e 10 70 48 9e da b9 ae 20 ab 96 9a a0 c5 42 93 12 64 ac f3 b1 31 ba 4e 27 db 0a e7 a4 0b eb 56 02 75 07 25 59 ef a4 46 Data Ascii: TWrKGzqXgkKZ$gn&,b72CAS>N_z{CJGIT`)xTrS;=Kih?nkb!(y6&^.c"MSec1&Gl#67RK.NpH Bd1N'Vu%YF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49799	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:36 UTC	378	OUT	GET /wp-content/themes/tgtheme/img/d8.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:36 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:36 GMT Content-Type: image/gif Content-Length: 2700330 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-29342a" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609578 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=asaTAR5eA8xAWRCGg5M0RYhRXx%2FVtZ597n9mE4DSaNkWlwxZNx2FQXBFLnSu2zOpe1Vr9Mi0xX4YdTAhi6r47%2BQYY66BOtmXmPdrGohl36WgO%2BaMHgrpVz7dewUNNgV3JMGexKc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cbf99db0c90-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:36 UTC	590	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 f6 ce b8 fc ee 21 cf 35 02 ff ff ff 00 00 00 dc 60 0a fa e6 db ff d5 27 fa 90 16 af 88 72 7d 09 09 ff 5d 1f af 88 71 fb 90 14 fb 8f 15 af 88 72 fc a8 1b ff d5 26 ae 87 71 fd bb 20 fa 94 16 af 87 71 ff cd 24 fe c5 22 ff d1 25 f9 90 15 fd b2 1d ff b4 84 f9 8f 15 db 60 0a ff d8 26 fd b6 1e fb 91 16 fe de 24 b3 8c 76 fa e3 d6 c0 99 82 f3 ca b4 f5 cd b6 ff c9 23 fc ec 20 fe e2 23 fc 9d 18 ff d3 26 de 60 09 fa 9a 17 fb a5 1a d7 b0 9a fe bf 21 fb a2 19 e5 bd a7 fa df d0 c9 a2 8c dc b4 9e ed c5 af bc 95 7f ea c2 ac fa 98 17 c4 9d 87 fc ab 1c fd e7 22 d3 ab 95 fc ae 1d b8 91 7b fa 95 17 f6 c8 ac 10 Data Ascii: GIF89a!NETSCAPE2.0!,!5`'r}]qr&q q$"%`&$v# #&`!"{
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: af 56 13 f3 ad 1d f2 b9 97 e1 8d 33 e7 af 21 be 9d 1c ae 8c 70 ff 9c 68 b4 60 12 f1 be 23 e1 a4 1f ea 6d 0d ff f2 bc e0 75 2a da 9a 1d f6 8b 14 ff da 42 af 92 1a b8 85 62 c9 8c 58 41 33 2a aa 8e 7f f4 81 13 50 39 09 ff 70 35 79 4d 0c c0 79 4a a4 7f 6a 99 77 63 d3 8c 46 f4 b0 1e e8 a0 70 a7 47 11 95 2d 0d c7 a7 95 bf 2b 03 5f 4f 0d 92 90 8f 67 3b 08 2f 2f 2f ce 6d 2b d9 4a 06 ff f7 d6 6f 56 48 d3 90 1c e7 8f 55 fc ac 51 ff f7 d7 d8 7c 12 e1 bc 22 ff ec a1 f0 76 10 c1 bf bd fd cc 8c fe e5 c3 92 54 0c 1f 1e 1e 9c 82 74 c9 32 04 cb 3b 15 a4 9e 9b 72 70 6f 82 39 0b fd d9 ab 52 51 50 57 44 39 b3 af ad a8 60 0e b5 2d 12 ff 68 2c fd c6 7d ff f6 e3 ff 62 25 d0 d0 d0 fe f3 e2 d6 a8 88 da c9 bf 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 Data Ascii: V3!ph`#muBbXA3P9p5yMyJjwcFpG-+_Og;///m+JoVHUQ\|"vTt2;rpo9RQPWD9`-h,}b%H*\
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 8b 06 67 be 45 8a a8 91 90 69 02 24 d9 a8 c4 7e 1d ab 32 71 b4 64 79 4c d3 85 4d 4e 30 8c 97 92 d9 ef 48 f3 47 51 8e d2 34 8f 34 65 fb ac d8 27 e6 01 20 72 19 74 a5 7d 30 99 80 e9 c9 d2 7d c1 7a 98 69 42 a9 4b e8 60 72 90 bf 8c a4 02 59 94 b4 d2 14 b3 3d a6 51 63 32 db 77 c8 2b b2 08 88 ac 7c 26 79 4c 23 ae 69 b6 2f 81 97 9a d1 30 b5 b9 1d 15 6a d2 9b e0 43 a5 a5 02 37 43 ca 90 53 3b 38 84 8c 08 d0 c9 bf dd 59 4a 95 8a 7c e7 73 a2 49 ff 4f 24 fa 90 45 5f 73 a6 3e 8d 73 0a 6e f6 13 98 ad b2 25 36 69 38 d0 e2 9c c6 97 07 bd 9d 3a 2b 65 26 19 98 a6 86 0d 75 0d 1d 27 53 af 88 22 cf 9e 95 82 55 09 2e 9a d1 dd d0 ae 94 1e a5 5e 35 fd 24 b3 76 5a a6 a4 ba a1 9d 34 53 7a bb 24 5e 0a 7b ab 74 22 4c 73 03 4b 9a 22 0f 9c d6 04 40 40 1b b8 53 d7 e8 cf a7 b8 f3 5f 42 Data Ascii: gEi$~2qdyLMN0HGQ44e' rt}0}ziBK`rY=Qc2w+\|&yL#i/0jC7CS;8YJ\|sIO$E_s>sn%6i8:+e&u'S"U.^5$vZ4Sz$^{t"LsK"@@S_B
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 86 84 5f a1 84 09 40 48 5a 62 5f de 05 84 2c f8 81 0b 98 7e 4d 57 83 59 78 83 51 70 81 39 27 08 1a 98 79 50 48 86 bd 45 85 e4 c3 6b 6a a8 15 75 95 00 12 64 27 48 c6 5e 62 ff b8 0f bd a5 60 32 92 07 23 d7 7c aa 90 87 79 08 0d 4d 97 0a 32 d2 88 b1 25 86 03 e0 0e bd 25 04 1d e6 29 95 71 75 87 98 15 2a 64 47 77 92 72 ec c5 09 ef f0 67 42 40 84 30 12 79 39 b7 06 98 88 89 67 a0 73 f7 17 23 70 d8 5b 2b 78 80 e6 e7 58 22 f6 22 23 55 1a 6d 97 8a 53 d1 53 a8 62 6b 27 56 8c 32 a2 70 f4 27 6f 78 98 8b 37 08 05 4d 77 6f d2 b7 5c f2 c0 5f a3 d8 61 6b 75 84 ca c8 15 a6 91 59 d4 95 79 d7 e5 06 85 c6 22 56 48 72 b8 68 8d 79 b8 8b 39 77 79 be 98 6e de 75 6d 2e f2 46 95 31 8e 5e 41 3b 53 e0 86 3d 77 62 e8 27 23 df d0 70 f5 17 6f 5c 30 81 64 c0 0d 03 e0 0b 64 00 8f d8 18 6f Data Ascii: _@HZb_,~MWYxQp9'yPHEkjud'H^b`2#\|yM2%%)qu*dGwrgB@0y9gs#p[+xX""#UmSSbk'V2p'ox7Mwo\_akuYy"VHrhy9wynum.F1^A;S=wb'#po\0ddo
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 6f d8 6b 83 bf cb bd 03 50 a2 e0 db a8 50 90 b5 4d d7 ba 90 f1 ba e9 db 11 05 14 2b 53 9a 10 bc d4 a0 45 62 bd 62 19 a2 d5 48 81 36 ca bd ae 60 b5 fd bb a4 92 00 c0 c5 79 be cb 5a c0 24 a1 42 dd 74 8c 70 24 bd a4 f1 8f ae 37 72 db 79 06 80 6b 83 07 0b bc 7c e0 a5 17 ac b0 d9 49 a7 cc 17 27 1e 7c 12 89 e8 45 24 05 11 89 98 9f 2f 32 08 4d e7 b1 79 48 09 13 7c 80 7c 20 0a 16 1c c3 f2 ca b0 39 47 b7 a8 78 c3 1e 71 c0 2d 42 b4 2f 05 11 a7 a1 95 2e a2 ab 29 29 6f 42 8c 89 73 40 06 7b 40 06 3c ab c4 a5 5b b2 aa 7b be 04 0c c5 18 91 88 dd 64 7d b5 cb ac a6 41 9e 2f e2 c0 e7 59 00 6f b0 c2 12 68 0b 64 bc c7 13 b8 96 0e f8 c4 6a cc 11 39 ec 22 79 2a b1 11 01 c2 45 a2 73 09 ff 49 81 81 c0 08 0a c0 08 b2 e0 0d 78 cc c7 0a cb 0b ba 30 0d 0a a0 09 90 a0 a3 39 17 c8 24 Data Ascii: okPPM+SEbbH6`yZ$Btp$7ryk\|I'\|E$/2MyH\|\| 9Gxq-B/.))oBs@{@<[{d}A/Yohdj9"y*EsIx09$
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 7f 1a 56 df 22 41 6f ce 47 4d 1a 62 2d f7 87 df 6f 82 2f 10 ca aa e6 45 22 ee d0 2e d3 8b cd f5 d0 ab 9c 8f 2f 10 fc 5a f8 2d e2 f6 7c 6f 50 72 2f a5 9c 26 f8 ca 3a ed 26 3f e9 89 4f ea 7e 7f f2 7f 2e f8 b4 01 b0 30 f2 ec 23 91 97 7e ff ec 43 0f e1 fc 1a d9 93 cf e6 64 7f f9 53 e5 e7 88 ff f5 fc 2a 02 2b ff 22 b6 29 ce a5 d1 c6 53 85 dc dd ae f6 ca 9a 00 cc 6f 24 20 af a7 22 01 d9 5c 0f ae c5 2c f8 fc ff 1a ca 48 82 f6 28 0f 12 b4 23 f9 3e f5 ec 3d 7f e6 ba 1e fb 76 22 fc 4d fe c1 71 6c 56 99 1f 19 27 24 f2 b5 31 fd 46 e2 fc 69 1f 12 98 69 56 07 ef e8 8f 5e 1b 00 41 02 c0 40 82 05 0d 02 a8 91 40 e1 42 86 15 fe 3d 84 18 51 e2 44 8a 15 ff 55 60 98 31 41 8d 83 1d 3d 7e 04 19 52 e4 c8 82 38 34 36 b4 98 52 e5 4a 96 2d 5d be 84 19 53 e6 4c 9a 35 6d de c4 99 93 Data Ascii: V"AoGMb-o/E"./Z-\|oPr/&:&?O~.0#~CdS*+")So$ "\,H(#>=v"MqlV'$1FiiV^A@@B=QDU`1A=~R846RJ-]SL5m
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 20 26 4d 22 65 bc 81 ce 4c 89 1c f2 a9 b2 79 15 b4 81 d8 42 06 cb a0 79 25 7c b3 d1 22 5e 4c 57 c6 bc fc 71 97 c7 d9 c2 0e 7d b9 05 1b b0 ff ad 3f c4 6c 19 c9 52 f4 1e f5 88 f2 21 0c 28 e3 14 18 f9 cc f7 1c c1 92 be 94 c2 d1 58 88 48 6c 5e 4b 53 93 ec 8e 13 ab f7 90 53 30 b0 27 3f 38 26 39 bb d3 4b 74 06 70 9d ed 44 98 57 1e 78 1c 75 e2 e5 49 cc d4 c1 40 f5 d9 1d 29 f8 b2 79 54 30 41 2d 5b 04 50 74 91 ac 68 04 2a 01 06 e3 14 1d 16 4e 01 9e 0b ad d0 12 a4 79 49 f4 25 73 a2 14 75 27 52 04 37 a0 ed 2d c4 3f 51 44 51 3e 41 3a 20 73 3a d4 87 2d d5 08 3b 51 5a 28 50 2d c9 90 0c e9 a3 42 67 4a a0 54 0e 32 93 2b 93 8e 1e 77 6a 28 92 31 6c 47 a1 8c e4 42 3e 3a d4 25 f1 f3 92 3e 6c 82 2b 6d b3 d4 4b 69 0a 8d 15 b2 81 00 a3 6a 3c e4 51 55 54 0d f5 a5 ff aa f9 48 ae Data Ascii: &M"eLyBy%\|"^LWq}?lR!(XHl^KSS0'?8&9KtpDWxuI@)yT0A-[Pth*NyI%su'R7-?QDQ>A: s:-;QZ(P-BgJT2+wj(1lGB>:%>l+mKij<QUTH
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 09 50 40 3e c4 42 fb 53 81 a9 5b 85 39 dc 3a 19 74 38 20 c8 43 45 b4 c4 06 9c 80 2e 84 38 24 23 19 35 f0 83 32 fc 80 44 bc 44 35 bc 80 1d 60 c1 87 03 04 50 80 c4 ba 5b 3e 77 a3 44 3d 1c c5 4b ac 02 22 20 02 0f d0 41 4d 3c 3c 1b 23 0a 62 c0 c0 76 cb 01 1f 38 81 58 bc c4 15 98 80 46 b4 b9 47 5c c5 91 30 c0 87 f3 01 58 14 46 45 4c 01 14 08 80 69 e4 01 5b 3c 00 62 c4 45 cf 03 c3 9e 28 86 75 f3 c5 09 78 c6 67 bc 00 fc 83 b8 47 78 c1 64 ec 3f 3b 6c b7 16 08 c6 70 8c 45 26 98 c6 78 9c c6 14 a8 82 eb f3 81 4d 14 c4 5a ab 05 88 03 82 1a 74 47 45 f4 80 10 08 01 22 98 be 22 30 c6 a2 93 43 74 94 9e 99 73 b8 0f f8 c7 58 24 02 79 94 48 14 08 81 ff e9 bb 80 6c bc b6 0c c0 03 f4 3a 11 62 68 b8 49 ac c4 87 54 c3 2a 80 c7 78 e4 01 82 94 3e 83 84 b8 56 50 48 82 08 02 86 64 Data Ascii: P@>BS[9:t8 CE.8$#52DD5`P[>wD=K" AM<<#bv8XFG\0XFELi[<bE(uxgGxd?;lpE&xMZtGE""0CtsX$yHl:bhIT*x>VPHd
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: ce 07 8d dc 67 1a 5f 6b fb 03 23 35 d5 08 66 c0 10 a8 4f 5b b4 00 76 43 9d 9a b3 36 b6 55 5e e6 f5 e0 e9 33 dd 69 44 01 5b 5c 81 9d 45 00 68 35 2b e3 c0 db 5e 73 dd d2 5c de 15 6e 40 ee dd 5f e9 bb c7 05 ce dd 6b cb e1 d2 4c 5f 1e 46 d5 e7 e5 49 f8 25 e1 88 c8 9f a9 fc 07 00 88 08 ca ad d1 8b 45 e2 05 6c e1 00 a8 48 0c 98 de 0f 25 9b 6b 4b 5e 09 bd df 2b 46 d5 f6 9d 4e ff e9 4b d7 6a f3 e2 95 38 82 7f 68 63 29 86 63 00 32 81 39 36 81 7f a0 e3 3b b6 e3 3b 9e e3 28 1e 88 28 f6 63 38 f6 63 99 28 dc 5d cb 4a 09 e5 03 32 16 db f6 45 81 7a 9c 80 26 46 1c 05 2d 64 08 46 64 f9 5b d6 c4 8c de 6b 5b e3 04 01 5f 23 d5 d2 49 9e 3f 10 4e cc 9c 4d 50 5e 4b 1c 13 ae b6 a7 7d cf 31 50 61 4f 06 e5 b9 7c df 03 68 59 6b 43 bc 0e 71 da 1a 25 07 4f b6 cc d5 b4 45 ff ed 35 dc Data Ascii: g_k#5fO[vC6U^3iD[\Eh5+^s\n@_kL_FI%ElH%kK^+FNKj8hc)c296;;((c8c(]J2Ez&F-dFd[k[_#I?NMP^K}1PaO\|hYkCq%OE5
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: ef f7 f0 08 51 bc 6f fc c7 37 75 5d c8 35 b4 c4 17 10 6f 58 c1 3f f2 8c 1f 00 54 70 76 62 27 80 b2 47 4d ff db af f3 c8 ef 78 97 ae b6 ae 3f 7d db e7 76 ad 6f fd 6a 0b 71 7e 4d 76 37 cf 06 4e 90 07 dd 77 f1 4a d8 4d e7 cf 72 de 27 7e e8 80 d9 c6 77 7c db 57 fd b6 f7 69 e3 6f 58 e9 27 76 e8 c7 42 55 80 03 27 10 00 45 80 83 3a 90 84 1c 04 7f 17 a7 fe ea 77 8e 6b fb 79 15 a7 7a 62 a7 fe 84 09 51 a7 e6 d7 f6 37 75 f1 bf 41 49 00 08 38 4e 04 10 2c 48 f0 4e 94 03 0a 17 32 5c 48 e0 21 c4 88 12 21 c2 42 60 f1 1f c6 8c 1a 37 72 ec e8 f1 23 c8 90 1b 39 58 2c 69 12 43 c3 94 2a 57 b2 6c e9 f2 25 cc 98 32 67 ae 5c 94 66 62 44 2d 90 2c 72 10 e9 f3 27 d0 a0 42 87 8a 34 69 34 07 cd a4 4a 57 e2 6c ea f4 61 a5 98 aa 06 1a ac 2a 60 9b aa 97 97 9e e2 ac 68 31 03 d1 b0 62 41 Data Ascii: Qo7u]5oX?Tpvb'GMx?}vojq~Mv7NwJMr'~w\|WioX'vBU'E:wkyzbQ7uAI8N,HN2\H!!B`7r#9X,iCWl%2g\fbD-,r'B4i4JWla`h1bA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49798	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:36 UTC	630	OUT	GET /wp-content/uploads/2024/05/telegram-groups-cn.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:36 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:36 GMT Content-Type: image/jpeg Content-Length: 75593 Connection: close last-modified: Mon, 27 May 2024 12:30:00 GMT etag: "66547cc8-12749" expires: Thu, 01 Aug 2024 07:08:31 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 228665 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=w%2BrhdzK2NfM0q%2F9zrBvfpBUuN9iuiX1hCjgPnxDBJXkAJ6rooNHZWaXxl0G82lXKhsxttCp2Z2sduqtjK9tZVnhPI5hBzeASPZ1jb0OiR7YJy5yuiTYzIHQ%2FBcgWlGuVJSQR5kI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cbfa968727d-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:36 UTC	592	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xm
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 46 39 46 46 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 46 45 38 31 35 36 45 32 38 42 33 31 31 45 44 39 44 44 35 41 43 39 44 33 42 38 46 39 46 46 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 36 35 42 43 42 35 45 32 38 34 38 31 31 45 44 39 44 44 35 41 43 39 44 33 42 38 46 39 46 46 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 46 45 38 31 35 36 43 32 38 42 33 31 31 45 44 39 44 44 35 41 43 39 44 33 42 38 46 39 46 46 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 Data Ascii: F9FFD" xmpMM:DocumentID="xmp.did:7FE8156E28B311ED9DD5AC9D3B8F9FFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B65BCB5E284811ED9DD5AC9D3B8F9FFD" stRef:documentID="xmp.did:7FE8156C28B311ED9DD5AC9D3B8F9FFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?x
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 02 04 c7 8e 0a 24 46 92 98 c4 4c 62 20 63 ba 83 47 53 be c8 d4 9f 40 49 91 a5 4e 6f 90 bd 37 b9 0b 8b 83 c1 cf 21 bf 9a 34 0b 06 4e b2 3b 4b 16 7b bb 71 8f 51 03 df 46 a8 96 a5 a9 55 e6 a1 05 e8 84 a0 b5 08 80 04 00 20 01 00 08 00 40 06 88 01 50 21 10 30 40 02 00 10 00 80 04 00 20 01 20 04 c0 10 02 82 81 02 00 10 31 34 40 19 3c 06 39 d9 0c 8c 4c 2d ea 86 33 d7 2f 87 48 56 5b 8d 64 60 e6 df ee ad 37 bd ec 3a 6b 5a 00 d0 51 66 33 88 6c 9c 00 5a ab 2b a9 17 02 a6 4c 50 2a 6a 93 13 65 80 01 00 2a d9 53 63 9e 00 6d 12 44 53 d4 ad d3 a9 56 d4 be a3 e1 0e ea f4 28 cb 61 09 d2 85 a3 d5 50 a9 45 0a 84 73 3d c1 aa 71 44 e0 91 1b 1e ee 9a d1 49 a2 6d 16 61 78 70 ea 21 55 25 42 89 aa 0b e6 31 c6 8e e0 12 a3 0e 16 88 24 2d 26 83 82 b1 16 c5 32 40 40 14 1c d4 48 31 b2 Data Ascii: $FLb cGS@INo7!4N;K{qQFU @P!0@ 14@<9L-3/HV[d`7:kZQf3lZ+LPjeScmDSV(aPEs=qDImaxp!U%B1$-&2@@H1
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: a2 6d 12 68 b1 01 69 35 2a b9 14 cc 90 d0 12 a2 41 10 f5 00 f2 a7 4d 0b 29 a0 f6 1e a7 68 93 d1 09 e8 8b 80 7b a0 73 05 50 cc 67 b4 d4 37 86 2b cb 03 21 03 74 26 93 fa f9 15 74 25 55 43 a1 e5 79 35 fe 1b f2 1a 51 14 3a f8 a6 74 d5 16 9a a0 44 0e fd 22 83 da 5a b6 0f 1a 38 51 34 22 71 f6 55 85 25 69 00 24 95 53 45 f1 64 2d 68 aa ad 22 c6 cb 4c 8d bd 25 5c 96 85 0e 4e a5 59 23 a1 d3 9a aa 48 be 32 11 ad 23 51 c5 2a 0d b2 7f 35 e1 a1 59 c4 55 c2 86 b9 cf 7d 02 8e d1 a4 90 d1 14 80 fa 11 c2 3e 24 48 d7 74 fd a0 a4 9d 08 b5 51 85 d5 70 51 a9 2a 13 7b a5 b5 53 dc 57 bc 81 c4 6a a0 cb 12 2c e3 60 bc ba c8 5a 5b 63 ba 8e 42 79 a3 8e d0 46 7a 5f e7 3d c1 ac e9 22 94 3d 44 51 57 39 46 31 6e 5b 12 d7 b0 b2 11 94 a4 94 76 b7 a7 69 e9 fc c6 63 66 fc b4 63 6c 30 38 9c Data Ascii: mhi5AM)h{sPg7+!t&t%UCy5Q:tD"Z8Q4"qU%i$SEd-h"L%\NY#H2#Q5YU}>$HtQpQ*{SWj,`Z[cByFz_="=DQW9F1n[vicfcl08
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: d2 2b e2 b8 dc 7b 1c 77 38 5e 9b 6b d5 4d a6 f6 cd ae f2 ef 04 b4 a5 78 ba 92 da 52 b4 b4 db 92 e0 b2 1b 87 2d f1 ee b4 82 f9 96 56 d0 d9 3e 16 c8 59 33 3a d8 e7 99 5b 4a d3 8d 16 5d ab 76 dc 1c e5 5a 56 8a 94 2a b7 0b 2e d4 ae cf 8a 8a 54 54 a6 fe d3 1b 3e d9 c7 cf 9d da f0 d9 dd cf 36 dd dd 2f a5 b4 d2 35 91 5d c4 18 f2 c9 18 f0 2a de a6 9a 51 c0 51 64 2b 11 e2 8d 1f bb 2f 39 44 b1 20 ee da 51 6d c2 ee cf b4 ba 51 af e5 76 ac 98 dd ef 8f da b7 b3 19 31 f9 3b bb 68 ec f2 30 52 93 d8 dd cc d8 c4 b1 9d 5b d4 01 a3 86 a0 38 78 51 5b dc f0 cd 45 ec f9 8c 1b b8 6e 19 31 b3 27 ee ca 4a 92 5b e2 dd 2a be 5b 4d 4f 35 6f 1e 33 3f 95 c5 c2 e7 49 6d 63 7b 73 69 13 e4 a7 59 64 13 3a 36 b9 d4 d2 a4 37 55 db 78 7f 9f 5d c3 be ad 4e 4e 56 a4 e9 af d5 dd 55 d1 d6 be 73 Data Ascii: +{w8^kMxR-V>Y3:[J]vZV.TT>6/5]QQd+/9D QmQv1;h0R[8xQ[En1'J[*[MO5o3?Imc{siYd:67Ux]NNVUs
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 0b 64 5f 4a db 7c 86 4e 5b c8 ec e4 d0 17 b6 09 a7 63 83 7c 5c 1b 27 55 3c 1a 56 bf 9c c6 5f 96 c7 bc 95 55 ae 1a f9 54 7d 94 f2 96 72 4b 30 8e 5e 55 8a d3 f3 1c 54 ed 4e 55 f4 4a be 46 73 ac de de cb 6d bc 94 b8 ac c5 b3 ad ee a2 71 68 a8 3d 0f 00 e8 e6 3b 83 9a 79 10 bb 8c 6c bb 59 36 d4 ed ba a7 e8 ed 3c 83 3f 02 fe 1d d7 6a ec 5c 64 bd 3d 6b a5 1d 7f b6 38 cb ad 97 b4 37 26 f1 cf 31 d6 76 f7 56 c2 2b 18 25 05 8f 94 b4 3b a4 f4 9d 7d f7 b9 ad 67 b4 f0 d5 71 5c ea f4 73 72 ad 63 da f7 9c 65 59 35 bb fc 12 ab 3d 27 c3 38 d3 e5 b8 19 19 97 d7 04 65 1a 45 3d 1b db 4f 3b 69 2f 2b d8 57 ed 64 71 ee 4d 81 ba b6 45 b4 8d 8f 2f 31 37 76 cd 71 e9 eb 0e 6b 00 f6 07 c6 1a e3 cb a8 2b 39 e3 78 d9 b6 72 5a ac 17 ba fd 3f 33 d3 b0 c7 f0 b2 59 bc b3 27 06 2e 97 1f bc Data Ascii: d_J\|N[c\|\'U<V_UT}rK0^UTNUJFsmqh=;ylY6<?j\d=k87&1vV+%;}gq\srceY5='8eE=O;i/+WdqME/17vqk+9xrZ?3Y'.
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 6e 5b 1a 06 de be 56 8d 7a 65 01 e0 fd 22 bf 5a ba d7 3c ca b7 b2 4f cb a9 55 de 45 8b 73 ea 53 b3 43 72 c5 f7 7a d9 cd 6c 59 8b 37 31 dc 0c d0 6a 3d 7d 0e 20 8f a4 ae 8f 1b c5 11 6a 97 63 e5 5e cf f1 39 bc 9f 0b 4d 3a da 95 7a 9f b4 de 31 1b 9b 09 99 0d 16 17 b1 c8 f7 7f 14 4f 4c 9f bd 75 0f d4 ba 9c 5e 61 8f 90 97 77 24 df 99 f9 b6 9c c6 57 2f bf 8f f1 c5 ae bd de 73 64 8d cc 00 0a eb e2 b6 f1 a2 34 b2 4c 8a 72 da 9d 78 a8 c8 9c 08 9b ab 94 37 96 32 6a 29 95 91 c8 14 64 4e 26 c7 db 6f f8 85 b4 bf fd ce 3b ff 00 ca 8d 6b 79 87 f2 b7 7e e4 ff 00 75 9b 2e 5f fc d5 af bf 0f de 47 a8 7b af f3 07 92 d8 1b ba e3 6b d8 e1 20 bc 8a de 18 5f 25 c5 c4 af 69 7b a7 60 7d 03 5a 34 00 10 35 5c 17 29 f0 f4 32 ec 2b b2 9b 55 6f 44 ba 0e ff 00 9b 78 8a 78 79 0e d4 60 a5 Data Ascii: n[Vze"Z<OUEsSCrzlY71j=} jc^9M:z1OLu^aw$W/sd4Lrx72j)dN&o;ky~u._G{k _%i{`}Z45\)2+UoDxxy`
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: 8e 8d c4 57 c4 72 2a 8d 8c ec e3 25 72 0a 4b 78 49 2d 51 51 c6 25 09 9c 0b 95 6c ca 8a d0 64 65 dd 5e e8 ab bc 3c 4a 48 94 8e ab 81 b6 f8 4c 64 10 9a f5 f4 f5 3a be 27 55 90 d1 c1 e6 dc ef 2e b6 5e 7b ab a2 69 18 a9 0d 2f 11 b5 ce e4 d0 4f d0 9b 43 a5 4e 64 f9 cc f7 32 cb 29 ab 9e e2 49 f1 25 56 9e a7 6e a1 c3 14 91 03 8f 54 94 4b 79 6a d8 55 b9 68 0e 0a 12 45 f6 de 84 4e 6d 14 4b 13 3a 0e cf 92 59 71 45 8f 75 44 4f 2d 15 f0 3a fd 4b 26 0f 43 91 e6 b1 4a f5 56 f4 6c 9d 3e e2 75 d4 d2 d7 52 0e 93 ae b4 1e 3c 94 ea 5b 53 4c cd 67 6e 6e 64 7d a5 93 cc 76 b1 92 d7 3d bc 5e 47 1d 7c 15 72 6d ec 3a 4c 4c 28 c1 29 4d 56 4f d0 6a ef 6b d8 f7 57 5a eb 55 8e ea 8d ea 69 a2 c5 9d d1 85 e1 c0 f4 bc 6a d3 e0 ac 84 a8 53 76 df 12 36 dc 1e ee 93 e2 19 63 7a ee b6 bc f4 Data Ascii: Wr*%rKxI-QQ%lde^<JHLd:'U.^{i/OCNd2)I%VnTKyjUhENmK:YqEuDO-:K&CJVl>uR<[SLgnnd}v=^G\|rm:LL()MVOjkWZUijSv6cz
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: eb 4e a6 38 57 d8 af 46 75 99 52 69 f5 9c b8 cc f6 ba 83 50 34 af 8a a3 89 9d d7 02 68 90 cc f7 10 14 f8 99 0e 14 87 79 8e 61 15 fa 51 c5 42 3c 35 30 7b c7 73 33 0d 8e 2e 0e 02 e6 66 90 d3 cd ad 1c 5c b5 3c df 98 2c 6b 5a 3f 7a 5e ae 93 69 ca b9 7b c8 bb d4 8f 3d e5 72 93 e5 ae 4c b2 13 e5 8f d1 b7 d1 e2 7d 25 79 16 45 f7 7a 55 67 af e3 63 46 c4 28 b6 94 da d3 c1 50 91 90 d9 b3 ed 1d 81 bb 37 d5 fb 71 bb 57 17 36 42 e4 fd a3 1b 49 63 47 89 77 00 b2 ed 63 4a e6 ab 61 81 91 9d 6a c7 c4 f5 e8 5a bf 31 e8 2d bf f2 31 dc dc 8c 4d 9b 2d 77 6b 8d ea 6f 57 96 5c 1e e1 5e 44 78 ac b5 8d 66 3f 14 fc c8 d5 cb 99 5f 97 e1 da d3 f4 9d 0c 96 47 e4 33 7d c1 09 7d 86 6a d2 e6 50 34 8d de e5 7d a9 fe 5e c3 d9 37 e6 0f cf e5 47 59 5a 5e 49 1c ab 76 7c b2 77 73 68 f5 cb 77 Data Ascii: N8WFuRiP4hyaQB<50{s3.f\<,kZ?z^i{=rL}%yEzUgcF(P7qW6BIcGwcJajZ1-1M-wkoW\^Dxf?_G3}}jP4}^7GYZ^Iv\|wshw
2024-07-04 22:39:36 UTC	1369	IN	Data Raw: ee e3 aa 77 b2 1c f4 d8 ba 0a 31 b0 a3 6e b2 7e f4 9e d6 f6 ff 00 81 b8 08 2b ff 00 9d 63 f1 1b 0e 01 4d b8 3e 94 b8 c6 e0 46 fb 36 b8 51 c3 a9 a7 88 3a 8f ad 49 5c a1 4c ac 29 6d 46 91 ba fb 43 b0 37 8c 6f 8f 3b 82 b5 b8 7b f8 cc 23 0c 92 a7 9f 53 56 74 33 ae 25 46 f8 97 5e a6 aa e7 29 b4 df 14 6b 07 fa 3a 1e 76 df 1f 22 9b 6b 21 e6 5c ec ec 9c 98 e9 ce ac b6 9f df 8f f7 c3 5f a9 59 de 63 dc db 1e 17 d2 bd 84 14 33 6c 7c 32 57 17 44 b4 7e 74 79 bf 7b fc a9 77 63 67 19 25 18 d3 94 b2 65 7e fe cf ef 34 1c fa 46 bf 52 8b c2 52 d6 dc 94 bd 0c b2 3c d9 45 f0 de 84 a0 fc eb ce b6 79 4e 37 90 c4 64 71 72 9b 7c 8d a4 b6 d7 0d 34 2c 95 85 87 e8 21 61 5c b3 38 69 24 d3 36 b6 72 6d dd 55 84 93 5d 45 13 19 ae 9a 1f 03 a2 aa 95 32 78 86 b9 b4 14 51 68 69 83 0c 91 b8 Data Ascii: w1n~+cM>F6Q:I\L)mFC7o;{#SVt3%F^)k:v"k!\_Yc3l\|2WD~ty{wcg%e~4FRR<EyN7dqr\|4,!a\8i$6rmU]E2xQhi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49801	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:37 UTC	378	OUT	GET /wp-content/themes/tgtheme/img/d4.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:37 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:37 GMT Content-Type: image/gif Content-Length: 3422486 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-343916" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609579 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5rPuZvFxKErVNkrlkMDs8%2BfNg0sTs976zOlyvlDPApNYlGk6ojim5Dbc6T%2FVP8CUuA5oAu5lcSHMzgRCbrmvntih938nEMh3jcyzQNx5Zmldfgt9Z7PlkCxMN4p1JimLBNFerQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc0eab55e6a-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:37 UTC	592	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 fe d8 20 7a 02 02 ff 5d 1f 20 7f a9 fa 90 16 ff 7b 17 fe d8 21 ae 06 06 ff ff ff 60 b5 b1 5f 02 02 9b de ff bd ea ff cf 35 02 00 92 44 02 69 37 93 8e 79 00 00 00 e0 db c7 7d 09 09 1a d5 71 fc ee 21 ff 00 00 ff b4 84 cd ee ff 60 bf e9 79 01 01 fe c6 1d fa 8f 15 bd ea ff fe cd 1e fe d3 1f fc a3 18 a9 05 05 7c 01 01 fd c0 1c fb 9c 17 9d 04 04 fa 95 17 fd aa 1a d9 3f 0a 96 04 04 8f 03 03 ff 79 15 d3 39 06 84 04 03 7f 03 02 fe fd fa ac e4 ff fe d7 1f fd b4 1b f5 53 18 e3 a3 4f a4 04 04 8a 03 03 fd b9 1c fd af 1a 3e 3e 3e 35 91 ac bd ec ff 59 af b0 f3 69 13 fb 58 1b ff f7 d4 43 9d ae df 4b 11 ff Data Ascii: GIF89a!NETSCAPE2.0!, z] {!`_5Di7y}q!`y\|?y9SO>>>5YiXCK
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 9b 78 c1 bd d8 d5 c6 dd ab 65 a3 41 0c a1 e0 ff fe e1 1f 7c cd a2 ed 9f 3e 40 40 40 fe e2 c1 60 10 0f cc 8d 1a c1 bd 25 06 a3 4f 87 a1 2c 74 96 2d bd 05 04 60 1a 19 fd ca 90 23 77 34 19 9b 55 ce 03 03 a5 64 57 f7 d3 21 e6 96 7c 84 99 8e a8 b2 27 6a 8f 66 f0 d1 22 cd 65 65 ec b7 ab 90 2f 0b b4 6c 11 fb d6 20 bb ab 57 d7 82 82 ec ad 97 f8 01 01 d4 c6 23 bb c5 b7 97 ab 28 ee 05 04 a5 9a 67 d9 5e 35 d7 bd 40 b2 8d 22 72 ad 97 37 7b 31 7a 1f 0f 97 7e 6b 59 b8 85 aa 58 0e ea 25 1a b0 cc c5 83 8c 72 fc b2 5c 9c 46 3d 40 90 5f ae e3 c6 a7 d7 e9 39 7b 52 7e 7e 7e 13 13 13 ab 13 0f 46 dc 8c 2e a6 65 c0 df cf 90 dc b4 2c 92 3b 9f dc f7 82 7d 25 25 d6 77 f2 c8 76 31 c6 71 a3 0b 05 5e 78 2b 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 23 4a Data Ascii: xeA\|>@@@`%O,t-`#w4UdW!\|'jf"ee/l W#(g^5@"r7{1z~kYX%r\F=@_9{R~~~F.e,;}%%wv1q^x+H*\#J
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 98 1b 40 b2 45 90 91 79 1e 1f 0f c9 ae 48 a2 0a 6c 8b bc d0 d8 5e c5 b7 a6 cd 4f 92 09 44 a3 6b 2c 89 96 dc b8 91 8f 1d 24 d8 29 bd 74 b7 50 5a 88 4b cd 9a 5c d7 ce 86 4a 9c f9 f1 35 ac 2c 0b 26 21 43 c8 5e c6 92 5d b3 ec 92 e3 6c 69 80 0f a4 6b 75 7d 43 65 24 64 e1 0a 57 58 83 0b cd a2 24 30 83 09 16 dc a8 a0 97 ea a2 1c c5 50 e5 3b 66 1a 80 77 94 d2 1e e5 18 07 45 51 20 e0 9d f0 94 05 0d bd 14 82 1d 8e 86 9b 5d 19 66 63 44 50 ff 48 70 1e 13 5a bc a4 94 22 cc 69 80 25 52 ca 52 94 a3 9e 19 b9 90 07 78 3a 74 09 a2 68 d6 ce 5c b3 39 7c 4e 05 37 2d 60 21 38 6d 58 b3 80 52 8a 7d cc 14 1e aa 38 c9 ae 0a 9a d1 1a 0e 4d 29 02 a2 81 4d 54 95 60 8a a1 c1 9f 45 a5 e2 4d 70 26 6e 8c e9 0a 60 28 ef 98 bb 31 1a 11 8a ac 50 69 4a f3 00 0d 11 da 53 34 33 bd e8 6b fa 69 Data Ascii: @EyHl^ODk,$)tPZK\J5,&!C^]liku}Ce$dWX$0P;fwEQ ]fcDPHpZ"i%RRx:th\9\|N7-`!8mXR}8M)MT`EMp&n`(1PiJS43ki
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 44 d2 76 2d 88 6e 57 d8 18 1b 58 84 60 c6 31 37 28 37 78 57 7a 5e b2 80 2b 53 6c 88 27 0a 23 67 5a 16 d8 25 2c e8 7e cf 96 42 8d 01 83 5c 48 24 dd c6 31 7c d8 25 49 ff 66 4e 1b e6 25 33 48 5b 09 28 0a c8 26 7c 94 02 84 cf d6 68 89 e8 6b 47 b7 78 d0 17 5a d3 f7 7d 8a c0 58 ac e7 3d 6f 68 7c 73 36 1a 5b d8 89 5d 52 6d de 06 40 04 d5 71 5d e8 61 31 f8 7f 5c 35 7c 17 78 6e 5a 86 49 71 98 88 fc 47 30 07 46 29 bb b7 48 fa 47 29 b0 d8 7f 09 58 7d 42 25 80 82 88 81 28 c6 1a 88 e8 8a 5f a2 78 cf 67 4e 0f b8 27 c1 d8 49 5c 18 7c ef a4 86 99 e8 6c 40 26 48 44 48 8d 44 12 73 35 13 7a 94 42 7e b6 e4 67 af 82 8e 2b 23 69 12 98 52 e0 88 8a 6e 17 8d a2 d1 8a e6 48 24 1d 06 72 5d 64 83 af 42 82 35 63 82 95 48 4d d7 f4 34 6c 88 6b 10 36 1a b4 b7 8f 74 17 81 2e 83 77 ae 46 Data Ascii: Dv-nWX`17(7xWz^+Sl'#gZ%,~B\H$1\|%IfN%3H[(&\|hkGxZ}X=oh\|s6[]Rm@q]a1\5\|xnZIqG0F)HG)X}B%(_xgN'I\\|l@&HDHDs5zB~g+#iRnH$r]dB5cHM4lk6t.wF
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: c0 21 1f 30 02 d4 bb be c8 14 04 2c 20 05 8e 0a a6 b9 3a 3d d1 c3 a7 fb 3a 24 02 59 33 71 3b af 52 c0 02 41 a0 be fc 2b 2b ee 3b 02 b6 9a 21 37 20 04 2b 43 bf 1c 23 04 23 80 25 fa fb 06 d6 1b c1 fb 22 06 28 00 c0 e6 8a a7 ec 12 a3 43 02 a9 6e 45 ae b5 b9 b2 0d 1c 04 3a 6b bc 58 20 04 6f 80 03 14 fc 23 23 80 c1 65 ab c1 1c f3 06 8c f7 23 1e 70 03 27 c0 c3 22 9c 29 41 a0 a0 1d 89 c2 d0 32 a4 99 c5 a7 82 d9 25 fd fa 27 2a fc ad 28 30 c3 c6 2b 04 20 70 03 41 ec 23 1f f0 06 4d f3 b4 2a 31 46 27 10 29 1b 40 c4 55 70 bd 22 6c 04 10 3b 9b 8c 7a 29 f1 89 2a 7c 9a 8d 36 b9 77 f7 1a ab 53 80 c5 7c 8b 05 ee 7b 03 1b 10 29 38 a0 c6 19 ec 12 92 5b 33 42 f0 c7 ac 72 c6 27 ff 00 c2 22 dc 03 0b ec 90 53 ec 27 7b f4 2a 5d dc 67 5b fb a8 7b d7 c6 4d 5a 04 8a 4b b6 36 cc ba Data Ascii: !0, :=:$Y3q;RA++;!7 +C##%"(CnE:kX o##e#p'")A2%'(0+ pA#M1F')@Up"l;z)\|6wS\|{)8[3Br'"S'{]g[{MZK6
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: dd 0e f6 97 8d f3 cb 9e 0a 65 1f f8 8c 4f f1 a9 50 07 59 2d b5 09 37 2b 71 7e 31 14 fd f1 69 31 46 d0 7b 31 7a 3e 2b 4e 4c 24 01 70 d5 af 40 06 8b df f8 a6 df f3 3c d0 f5 da fe f5 86 9f d3 38 0f f1 64 7f fa b2 df f3 a9 50 09 58 bd d9 08 ba e8 17 83 e4 4b cf 16 f9 ee 27 7e ad 2c 93 0e 50 66 88 f2 3a 4d 0c 7f 3f fb ca bf f5 d5 3e f8 b3 6e ea 85 6f e5 e1 fe e9 e4 6e ee a5 bf fc d8 cf f2 7b 10 fd 5a ff dd bd 6a da c1 d9 ac b7 6e 11 e9 ac a2 f4 b2 52 ce 7c 7f d0 95 70 fd d9 df fe 67 bf ee d9 fe fc 41 2f db ad be e9 9f ae f3 e5 2e 08 c9 ef fe fc af f5 82 30 ff 00 a1 40 e0 40 82 2e 0e 1c 44 98 f0 60 9a 02 0d 1d 3e ac 62 40 e2 44 8a 15 29 6e 10 f2 50 e3 46 87 ff 3c 7e 04 19 52 e4 48 92 25 4d 9e 44 99 52 a5 c9 15 1c 5d 3a 04 e1 c1 e2 cc 89 1f 5e 36 4c a2 50 a7 0d Data Ascii: eOPY-7+q~1i1F{1z>+NL$p@<8dPXK'~,Pf:M?>non{ZjnR\|pgA/.0@@.D`>b@D)nPF<~RH%MDR]:^6LP
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: b1 92 90 ac 8c 24 6b 49 49 4b ae 27 93 03 54 c8 1d 39 92 a9 11 38 d1 94 d4 21 65 05 8f e9 10 21 9c 60 03 18 b9 8b db 0e 60 a6 c7 00 ff cf 3c 3c d0 c1 2e b5 39 00 47 e2 d2 2c d8 dc e6 2e bb a9 9e 5f 06 40 21 0e 1c c1 06 40 b9 4c 87 8c 32 99 ca 64 67 43 84 80 83 c2 6d 44 0a 07 a1 e6 5a ac 49 1c 2d 84 73 9b 61 78 a4 37 9f d2 4f 7f ee 12 a0 ea 99 c0 2f 29 84 10 2f e1 20 94 80 74 e7 3b 69 57 bb 78 6e 44 9a be 7b 0c a8 8a 93 cd 82 6e 13 08 02 75 0a 47 3b ba cb 8f a2 67 1c 0a 4d 48 45 37 24 51 cd 1d 41 98 2a 75 c8 ad 0e 82 d1 ed 6d 74 a4 e1 2c 29 48 93 22 d2 9b d6 32 a7 c5 39 69 00 d4 30 06 a2 1e 30 00 35 48 08 15 60 6a 38 4b 44 94 a5 67 1b a0 1c 08 f1 d2 8a 2a e6 20 3c 79 0c 50 88 c3 d3 9e fa 54 a7 48 e1 6a 57 27 f9 d3 e1 d4 41 03 3e 1c c3 51 39 b9 d4 98 5a c2 Data Ascii: $kIIK'T98!e!``<<.9G,._@!@L2dgCmDZI-sax7O/)/ t;iWxnD{nuG;gMHE7$QAumt,)H"29i005H`j8KDg <yPTHjW'A>Q9Z
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 42 3d d1 b4 03 18 43 8e d3 99 9b 53 80 57 a8 84 35 7c c3 4a b4 c4 38 9c 43 40 ec c0 e0 80 84 36 d8 c3 4f f4 bf 36 80 84 3f d4 44 6d 12 44 b3 90 3a 9f 58 3f f2 a3 38 e4 4a c4 4a 29 a7 0e 23 43 8f d3 09 2b 20 03 67 b0 c4 5c d4 45 66 10 8b 23 2c 45 3b fc 8d 3c 04 c5 61 ec 3f 36 c8 0c 5f fc c5 01 38 c5 b2 80 bc c7 90 3c f2 bb ba f3 7b 45 2e d9 3a 85 20 c3 af 4b 08 79 58 07 36 d4 c5 6e d4 45 39 5c 0a 64 fc 45 25 2c 8b 55 68 c2 27 cc 03 57 58 86 65 68 85 56 f0 86 76 5c 86 6b 70 85 4c f8 44 3c f0 43 0d 4c c6 24 cc 0c e4 e0 3a 18 ac bc 39 ba b4 69 a4 c6 5f e2 bd 83 f8 b9 6e c3 c6 03 d0 46 6f 64 c8 6e 04 c7 a4 10 c7 52 04 3f b3 e8 c4 ff 27 64 85 65 f0 86 06 d0 c8 8d e4 c8 8d cc 82 56 b8 06 56 78 42 51 a4 bf 7c ac 25 72 14 8b 08 4b 1d 18 4c 08 f3 93 46 81 ec 11 30 Data Ascii: B=CSW5\|J8C@6O6?DmD:X?8JJ)#C+ g\Ef#,E;<a?6_8<{E.: KyX6nE9\dE%,Uh'WXehVv\kpLD<CL$:9i_nFodnR?'deVVxBQ\|%rKLF0
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 14 41 ab fd 52 62 cd 5a a7 b8 57 81 1b 60 a1 f0 da e0 9d df fa b5 5f 01 c0 5f e4 fd 04 53 e5 5f a3 f4 5f ff 33 46 ad ad c3 0f 5e 0a b5 9c 54 6e 2d 22 2b 85 41 bd 6d 60 eb c8 d5 e6 4c 88 c2 4c b2 a7 b5 c4 c0 95 dd 77 f5 3f c3 fd 52 c4 ad 44 c5 85 c8 85 15 8b 02 16 41 f9 75 4b 12 2e 61 01 90 d9 fc bd 80 49 50 e1 ce 75 42 e8 6d 0a c6 1d 29 19 4e 56 c8 e5 84 ec ed cb ff d4 45 a0 80 dc e1 fd 18 be 37 7b dd 4a 9c 03 f2 95 00 c2 ad 5d 91 cd 54 a7 00 e3 ef 13 0b 30 f8 d8 c8 7d 4b 2a ae 62 49 c0 62 fd 2d 55 ce 6d 5e 27 7c 81 9e 0d dd b9 ad 8c 55 e0 63 eb 3b e0 39 da b6 88 d5 e1 35 7e 8d 72 b2 d2 f0 b5 80 c4 ac c4 a8 95 5a f3 45 df 17 1d 8b 3c 36 a8 01 06 41 27 0c d5 29 ae 62 53 bd dc 41 d6 e2 42 5e 61 9d 7d c2 38 40 58 7b 35 40 31 46 59 f8 a5 be 36 b0 e1 1b 4c e0 Data Ascii: ARbZW`__S__3F^Tn-"+Am`LLw?RDAuK.aIPuBm)NVE7{J]T0}K*bIb-Um^'\|Uc;95~rZE<6A')bSAB^a}8@X{5@1FY6L
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: fa a2 e7 46 3d e6 74 2f 5c 09 78 f7 36 fc 06 83 2f 7b 26 78 82 3f 58 84 a7 2f f4 4c b8 06 77 6c f9 ff 05 8d 02 26 4f fc 55 6e f6 b9 9e 04 95 8f d3 40 7f fc 06 48 d5 8f 9c fc af 0f f3 21 58 84 3f 78 02 9b d7 7c b3 57 86 5e 36 a1 27 6d c0 45 77 fb d0 0f f7 c3 56 04 4d 0e e2 7b 46 7d 11 14 56 4c 77 c3 6a 88 7e 83 77 02 2f 00 84 2b a0 7d 50 a4 77 7b 2f 7e 8d dc fd de 4f ed df 57 68 e1 17 80 3b 8d ff cb 1c f4 61 1c 82 2b 00 08 40 5e 9c 00 28 68 f0 20 42 00 31 7c 05 68 e8 f0 a1 8d 03 12 27 52 ac 68 f1 e2 c4 14 0f 37 06 d0 f0 ef 23 c8 90 22 47 92 2c 69 f2 24 ca 94 2a 57 b2 6c e9 f2 25 c7 87 2d 28 9e b2 60 f3 a6 85 73 10 76 f2 84 e0 47 02 d0 a0 12 30 21 28 6a f4 e8 0b 09 94 7a f2 ec 96 f0 69 41 26 4e cc 3c 79 e2 65 d0 1f 40 5b 16 5d e9 da f5 93 a5 06 62 c7 92 2d Data Ascii: F=t/\x6/{&x?X/Lwl&OUn@H!X?x\|W^6'mEwVM{F}VLwj~w/+}Pw{/~OWh;a+@^(h B1\|h'Rh7#"G,i$*Wl%-(`svG0!(jziA&N<ye@[]b-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49800	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:37 UTC	613	OUT	GET /wp-content/uploads/2024/05/3.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:37 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:37 GMT Content-Type: image/jpeg Content-Length: 112510 Connection: close last-modified: Mon, 27 May 2024 12:31:53 GMT etag: "66547d39-1b77e" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609579 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rRFYj36CLY5tDfieeQt6T%2BCdQb2bAXKqm7SQFmT3tq0xlTz0TrZB3eGvCKboHQ2hEZl5yOn%2Fxe0xd1jRnjT%2FXMJrVKgpdcVcO3ATLSp1hbL2fRY51Vhu1gNYz3YxLCUwHBzof5k%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc0ffec1899-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:37 UTC	591	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0a 0a 0a 08 0a 0a 08 0a 08 08 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 09 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0f 0f 0f 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 15 12 12 12 12 15 12 12 15 12 12 12 15 12 15 12 12 15 12 12 12 15 12 15 12 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 61 10 00 01 03 02 03 04 04 06 08 0f 0c 07 08 03 01 01 01 00 02 03 04 11 05 12 21 06 07 31 41 08 13 51 61 22 32 71 81 91 a1 14 23 42 74 b1 b2 b3 Data Ascii: JFIF"a!1AQa"2q#Bt
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 7a 48 28 48 ea 53 39 a4 02 96 de 6a 00 bb a1 74 94 0a 80 1b 93 72 20 e7 24 b8 a1 50 93 65 2c a2 b8 40 15 91 14 77 4d 48 f5 39 c1 21 92 9b 2e 49 7b 93 2e 72 c6 d8 c0 ff 00 58 93 9d 47 0e 46 15 46 07 43 d1 a6 c2 58 70 52 4a 41 a1 64 db a5 01 35 25 60 08 4e 49 0f 72 6f 30 50 26 c4 02 67 d9 c3 f6 28 41 6c 1c 8d 57 c3 38 2a 63 24 40 3a 12 50 ba 08 04 a0 82 0a 09 10 e2 82 0f 41 bc d4 f8 10 10 48 25 2c 24 39 55 10 84 94 02 05 06 a3 24 43 92 4a 53 92 4a a8 12 89 c1 19 44 e4 03 68 91 a4 85 52 5b 19 99 57 bf 9a b0 99 57 4a 78 a0 4c 48 2a 5c 2e 50 83 94 a8 0a 17 89 3e 22 9d 6a 62 37 29 0d 08 6c 45 92 29 4e aa da 8c ea a9 e9 78 ab 6a 33 aa a4 bb 19 11 73 0a 97 1a 85 01 53 63 58 8c a9 8a b2 2c a9 5c 38 9b 79 74 f8 54 0a bc 6a 9a 2b 99 2a 23 65 be e9 df 32 60 b6 49 4e Data Ascii: zH(HS9jtr $Pe,@wMH9!.I{.rXGFFCXpRJAd5%`NIro0P&g(AlW8c$@:PAH%,$9U$CJSJDhR[WWJxLH\.P>"jb7)lE)Nxj3sScX,\8ytTj+*#e2`IN
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 36 f4 65 58 86 33 d2 56 b5 c0 f5 2d 6c 63 b0 5b f4 b5 73 d3 9e 7b 50 ba ae d2 72 6c bc 77 7c f8 a5 47 8d 54 e6 b4 f2 04 73 f2 2c 4f 11 da ea b9 7c 6a 87 ba fd a7 f4 85 8f a0 98 19 25 49 5c f7 78 cf 2e f2 92 98 2f 3e 5f 2a 42 0a d8 19 25 61 74 13 54 c8 22 a7 89 f3 cc ed 5b 1c 4d 73 de 40 e3 60 b6 4e cd 74 7e da 3a b2 dc 98 54 90 b0 ff 00 bc a9 92 9e 26 8f e8 99 73 7a 96 d5 fa 1e 1d 49 ad c6 33 30 3a a0 41 4c e8 de 46 ad 66 79 5a ec b7 f1 4f 05 da c4 fe de b4 c1 07 0e e0 3d 0e f1 49 32 9a ac 4e 96 96 e7 56 c7 1b e7 78 1d e4 10 3d 6b 63 60 1d 0e 70 c8 ec 6a f1 0a 9a c2 38 88 87 b1 c3 bb b4 75 c2 e9 bf 32 3b 29 c0 34 ad 2f 45 cd 99 68 00 e1 f2 3f f0 ea 65 cc 7c e1 c1 45 c5 ba 2a ec dc ad 21 94 d3 d2 bb 93 e2 a9 93 4e fb 3c 9b ad ea 92 42 90 71 5e f1 ba 23 d6 Data Ascii: 6eX3V-lc[s{Prlw\|GTs,O\|j%I\x./>_B%atT"[Ms@`Nt~:T&szI30:ALFfyZO=I2NVx=kc`pj8u2;)4/Eh?e\|E!N<Bq^#
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 8a e3 ac 4b 6e 6b 66 2e cf 52 f7 66 ed 37 54 13 e2 72 bf c6 90 bb ca 7f 4f 10 a0 b4 68 1d 7b 88 ef 53 0c 8a fe df 9c 8f b8 6b 88 3e 90 b1 1c 53 7f 54 b1 df aa a7 32 13 cd f2 16 8e ed 03 57 34 b9 e4 f1 37 f3 df f4 26 c8 44 64 f5 68 dd 98 c6 fe ea 9d f5 98 a3 8b b2 c0 12 3f a4 e0 56 21 8b 6f 5f 12 9b 35 ea 9c db fd cd 9b f1 40 58 12 48 52 59 41 22 e2 b7 1f a9 90 92 e9 de eb ea 6e 7f 4a ae 9a ad ee d4 9d 7c bf 3a 66 e8 04 2c 92 0c bc 9e 25 0c da 21 64 56 40 02 8a c8 c3 12 b2 21 22 1a 52 91 90 89 40 02 30 c4 57 4b 6b 8e 8a 40 d9 08 93 8e 08 8e 9c 45 bc b6 f9 d4 01 17 42 ea 45 15 1c b2 9c b1 44 f9 9d c0 36 28 dd 21 bf 61 c9 7b 2d 83 b1 3b 90 c7 71 27 34 43 86 cb 14 6e b5 ea 2a 72 c3 13 41 e2 7c 32 09 2a 41 b0 fa 03 47 21 c6 ea 9c 2e 62 6d 23 c4 bc f5 71 70 8f Data Ascii: Knkf.Rf7TrOh{Sk>ST2W47&Ddh?V!o_5@XHRYA"nJ\|:f,%!dV@!"R@0WKk@EBED6(!a{-;q'4CnrA\|2AG!.bm#qp
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 38 30 36 f6 2b 3a 1c 34 34 f0 42 1b 31 ba 4c 22 de e7 fc 95 8b 30 bf e6 ac 9a 3a 10 a4 0a 30 99 2b 83 19 8b 0c b7 b9 53 20 c3 fb 95 f0 a6 08 db 4a 14 0c 15 b0 51 a9 51 d2 0e c5 2c 44 12 80 b2 12 31 ec 60 94 c8 00 4f 5d 04 02 03 51 a0 82 00 04 48 c2 24 01 5d 24 a0 e4 5e af 83 ca 50 09 92 40 dd 49 b0 ed 5a a3 7a 5b da 8a 8f 34 34 ce 0f a8 e7 cf 2d ad dc a9 b7 e5 bc d3 11 75 35 33 f5 6d da 5c 0d b5 b0 26 da 6b aa e7 2a 9a a7 b9 ce 7b dc 5c f7 12 e2 4f 69 58 e4 f2 6d d3 a1 c6 59 7d b4 fb 63 57 56 e7 19 a6 2f b9 d1 b7 b3 40 ee 1c d6 39 35 41 77 6f 7d ff 00 42 4d 3d 3b e5 78 64 71 ba 49 1e 43 58 c6 02 e7 39 c7 80 68 e6 57 52 ee 6b a2 54 d5 0c 8a ab 19 a8 34 d1 48 1a e1 43 00 06 67 37 c2 39 66 98 3b c0 f7 3e 2a ac 4b ed 47 2a 34 f2 be bd 9a 05 93 6c ee c0 62 d5 Data Ascii: 806+:44B1L"0:0+S JQQ,D1`O]QH$]$^P@IZz[44-u53m\&k{\OiXmY}cWV/@95Awo}BM=;xdqICX9hWRkT4HCg79f;>KG*4lb
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 86 34 5b 85 de 6e 7c f6 59 3c 0d b0 b0 e0 2c 07 90 68 b1 8c 1d ae 7c 97 3e e4 97 1b 6a 2f c0 7a b5 59 2b 5c b4 ae f8 c4 51 e8 74 2c cd ce b3 f1 7c 64 72 e8 5d 26 e8 d7 3f 0c f5 0a 66 9b da 18 bc 65 89 d4 42 4e 9c 16 7d 8c c3 c5 51 0a 45 bd 9c 1c f9 47 2c c7 69 f0 b2 eb e8 84 bb 3c 35 b8 fd bd 2b 2f a3 a7 0d e4 a6 7b 07 32 c5 25 bb b9 b3 4e 5b 57 06 33 82 e0 cd 6e 96 59 45 05 08 16 d1 49 a0 a0 b1 56 ad 84 37 bd 4d 38 a8 94 a8 f7 72 47 8a 3d 2d d8 95 91 2d ee 09 ae b5 64 c9 8f 03 d1 46 a6 46 14 48 de 9d 6c 8a ac 91 ec a9 60 a6 1c f4 82 fe 2a 9b 49 24 99 6c 9b 7c aa 39 71 45 75 72 a9 8e 3a 42 9b 7c 89 12 14 c3 8a 9c 92 3c 65 46 1e a3 82 9f 63 54 00 9c 8c 25 65 4a 6b 54 12 36 8e c9 d0 d4 08 4c 81 8c a8 59 3b 64 92 85 5b 08 27 02 42 58 50 03 29 8a a6 dc 27 d1 Data Ascii: 4[n\|Y<,h\|>j/zY+\Qt,\|dr]&?feBN}QEG,i<5+/{2%N[W3nYEIV7M8rG=--dFFHl`*I$l\|9qEur:B\|<eFcT%eJkT6LY;d['BXP)'
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 03 6f 6d d2 72 27 42 4a ab 45 b2 23 22 2b 04 e2 4d 93 20 4d 91 12 81 e2 51 15 42 42 29 b7 25 b9 21 c8 02 44 51 a2 2a c0 08 89 40 a2 2a 00 44 a0 82 0a 00 94 10 41 00 10 41 25 00 10 48 4b 08 02 77 3f 32 e6 1e 95 12 7e ef 88 13 fe eb d0 0e 55 d3 af e6 b9 a7 a5 8d 2d aa e9 a4 b7 8f 13 bd 45 a9 2e c6 7a 1f 48 d2 91 78 ce ef 49 a6 9b ab 96 39 0e a2 39 23 7d b8 78 8f 0e bf a9 2a 67 5b 26 9d d7 4c cc 38 e9 7e 7e 6f fe d6 08 76 37 2a 77 3d 67 d9 ca c6 cd 4b 49 2b 3c 49 60 85 e2 c6 e2 ce 8d 84 58 f6 59 58 dd 69 7e 86 db 52 6b f6 7e 95 af 76 69 a8 1d 25 1c 9a dc e5 8d ef 10 9b f7 c6 1a b7 40 59 0a 01 04 11 12 80 17 42 e8 91 14 01 a0 4a 42 08 02 ba 17 44 82 00 ee 85 d1 20 80 17 42 e8 90 40 1d d0 ba 24 10 00 a0 82 08 00 82 08 20 02 08 20 80 08 20 82 00 20 82 08 00 82 Data Ascii: omr'BJE#"+M MQBB)%!DQ@DAA%HKw?2~U-E.zHxI99#}xg[&L8~~ov7w=gKI+<I`XYXi~Rk~vi%@YBJBD B@$
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: b8 6b 73 f8 c9 c8 00 77 87 03 9a e0 47 0c ae b9 21 76 b6 cd d7 0a 8a 78 65 06 f9 98 dc de 5b 59 61 a9 12 d1 25 bd 32 53 f2 0e 29 87 ac 66 5c 08 73 93 39 d3 85 a9 3d 5a 82 30 0c e9 a9 13 99 11 16 20 19 05 28 38 f6 a5 75 69 42 34 2e 37 7b a4 90 a4 75 68 75 68 51 b2 3e 54 bc 8a 4b 63 4a 10 a0 c9 14 32 e8 fa a5 2c 44 8f aa 42 d9 21 75 49 5d 4a 9a d8 52 9b 12 15 21 18 12 84 4a 69 89 1b 63 42 c8 86 d8 12 db 07 7a 9a d6 77 25 86 04 2a c8 ad 8f c8 96 c6 f9 14 8c a1 0c a1 06 e4 82 0c 46 e6 a5 d9 04 c1 57 2c b2 33 da 99 73 54 c7 b5 32 e6 a1 28 83 2c 6a 3b 9a a7 ca d5 12 46 f1 50 c9 44 29 54 77 a9 53 0d 14 47 15 06 65 c8 96 b9 38 c7 28 ae 7d 90 64 aa d1 31 4d 16 71 b9 2c b2 ea 0c 53 a9 8c 92 eb 32 79 31 84 62 44 f8 d3 b7 46 a7 05 48 bd 42 3e a1 4a 0d ef 47 91 09 21 Data Ascii: kswG!vxe[Ya%2S)f\s9=Z0 (8uiB4.7{uhuhQ>TKcJ2,DB!uI]JR!JicBzw%*FW,3sT2(,j;FPD)TwSGe8(}d1Mq,S2y1bDFHB>JG!
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 32 a1 56 46 e5 22 37 2c c9 e4 c4 f8 2c a3 95 3a d9 02 af 63 d2 c3 fb d5 8a 4a a2 5d f0 8b 22 f4 03 95 7b 24 ef 4a 32 a6 19 10 a9 19 f6 69 93 8b 91 5d 40 74 e5 06 d4 f7 a1 94 9f 64 05 94 3e bc f6 a7 1b 52 10 12 08 45 95 21 b3 25 09 10 80 ec 88 84 a0 e4 64 85 38 03 25 a8 db 1a 74 04 e3 53 04 31 b6 c4 a4 c4 c4 23 09 e6 ab a2 8c 5b 18 a4 30 26 d9 c9 3c 0a bb 30 31 c0 34 08 04 41 c8 5d 40 c0 68 8a 17 41 09 48 08 20 82 9c 96 68 08 20 82 64 80 20 82 0a 49 da 25 04 10 41 b4 08 20 95 64 1b 44 a0 8e c8 59 06 d2 8d 36 f1 c5 2c 94 97 2c c6 b1 12 6a 60 54 29 28 87 3f 81 5a 94 97 04 24 ac 65 08 fd 82 7a 3a 40 14 e0 c4 32 a0 18 64 09 7d 5a 74 22 2a 33 c0 11 95 0b 25 a2 50 04 d9 0b 25 20 a4 08 46 8c a2 25 00 10 45 74 2e 84 06 88 a1 74 0a 86 30 10 40 a3 01 24 95 05 80 88 Data Ascii: 2VF"7,,:cJ]"{$J2i]@td>RE!%d8%tS1#[0&<014A]@hAH h d I%A dDY6,,j`T)(?Z$ez:@2d}Zt"*3%P% F%Et.t0@$
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: be 57 5b c9 94 ff 00 92 6a 59 2c b4 35 18 28 61 ae 32 7a 8e 94 ad 52 6a 4a 6f 38 1e 7c e9 bf 64 28 92 4a 13 3d 68 5c 7d c7 ba 8a 2c c4 e8 fa fe f5 5c 24 46 d9 02 b2 65 b6 96 c2 74 b1 52 aa 3a ce f4 b1 27 7a 9d c5 59 73 1d 4a 79 b5 2a 8d b2 db 9a 70 4f de a3 70 c1 78 da 9e f4 eb 6a 42 a2 6c c9 62 a4 f6 ab a6 30 64 0c a8 09 e6 4e 16 3e ca 94 fb 2a 93 25 1a 32 08 e7 4f 75 fd cb 1f 6d 67 7a 75 b5 7d ea ea 45 5c 0b d1 37 72 58 97 b9 51 b6 b1 3e da b5 6d c4 6d 45 b7 59 dc 8c 48 aa c5 52 5b 6a 54 6e 0a 25 98 72 30 54 21 52 95 ec 85 28 8c 12 f3 23 51 84 e9 7d 77 05 24 0f 20 9b 6c a1 2f 30 56 01 20 8a e8 5d 00 a0 8d 26 e9 40 a8 19 02 08 04 a0 a0 93 1e 72 24 44 a0 4a d8 35 44 b9 04 10 40 04 10 08 15 0c 05 74 33 22 25 15 d4 01 45 c9 37 44 4a 2b a9 02 ae 85 d2 6e 85 Data Ascii: W[jY,5(a2zRjJo8\|d(J=h\},\$FetR:'zYsJypOpxjBlb0dN>%2Oumgzu}E\7rXQ>mmEYHR[jTn%r0T!R(#Q}w$ l/0V ]&@r$DJ5D@t3"%E7DJ+n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49802	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:37 UTC	635	OUT	GET /wp-content/uploads/2024/05/image-20-1-1-1024x516-1.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:37 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:37 GMT Content-Type: image/png Content-Length: 331189 Connection: close last-modified: Sun, 12 May 2024 08:33:16 GMT etag: "66407ecc-50db5" expires: Wed, 24 Jul 2024 13:04:13 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 898524 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iCdgxWB4VKxtR1DVfz7cXo4H3YCF936NSRYggO8xrXSsPOKREHnG7SkMrnSjm%2Bbz4z61zwt2wsi9lTnSQabjOHXROb%2Bmesn8yMZCMr2Kn7LWstGSTuYaXmTSlhx%2FHCw8RalWGxs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc3bc9843b9-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:37 UTC	592	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 02 04 08 06 00 00 00 87 5c 5c af 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd e9 76 e3 46 d6 2d b8 4f 04 40 6a ce 54 66 ba 3c 94 ed 72 f9 1b d6 ba fd 6a fd 5c fd 50 dd 3f fa f6 ea 5b 65 3b e7 4c 49 a9 81 44 c4 b9 3f 22 00 82 24 22 08 1c 02 20 40 61 7b 39 25 01 88 79 3c 33 fd 5f ff c7 ff c9 68 11 54 33 37 22 6a b3 58 71 fe 4d ea 51 b7 6d 65 b0 a8 99 0c c2 7a 61 fb f6 57 d7 fd 5d b7 7c b2 cd 3b 91 89 00 41 f5 55 83 a2 f2 fa 31 6f 27 2a bf ab ea 47 22 aa 4c 57 af 5c 51 b2 06 f9 8f 7b de c4 b0 39 66 cd ea 1a fe 36 9c 0f bb b2 c8 d6 f8 b6 46 0d 76 cc 1b 82 16 e7 dd 17 6c a4 f9 6d cf 9d 36 f2 2b f7 77 2c 3f 2e 8d f1 2e ac f2 21 88 36 2a 21 24 Data Ascii: PNGIHDR\\pHYs+ IDATxvF-O@jTf<rj\P?[e;LID?"$" @a{9%y<3_hT37"jXqMQmezaW]\|;AU1o'G"LW\Q{9f6Fvlm6+w,?..!6!$
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 12 95 9f e6 49 a2 d5 78 86 20 60 ea 8f 09 1d e0 f0 93 2a 7e a0 f6 58 91 09 6b 18 12 d1 18 82 88 17 25 b5 00 08 ac 15 da 23 cf 7d 70 08 c9 7f 97 88 09 1e 82 ad 9c e8 ff 09 13 3a 47 98 b8 ea af 0e 92 3b f0 f0 4f b0 09 ed 41 32 da dc 81 09 00 0d 43 56 5e d7 b6 af ae 4d 68 2c cf 58 ba b6 d4 69 ca 92 03 89 94 a9 ee 85 b6 ee a5 aa a9 ad 18 33 07 e7 c5 2e 5b 68 f7 ae 5b 0e 78 9d be a3 0a 8d 91 fc bd fb a4 2a 0f 8a 1e 14 75 86 65 9f 36 ae cd 6f 49 7a 41 1a 67 22 db c3 2e 90 8f cb c6 df 9b 75 d9 7a b6 4f dd 36 8b a8 bb ae 02 69 b6 6a 42 2b 6d 23 46 d8 0e 5d 32 a7 da 27 d6 76 cd ed 36 2f 4e bb fc 6c 84 de ad 17 b6 5e 76 84 f9 52 7e 55 1a 93 68 b1 c4 60 8e f9 0e a8 2e 8f a3 f6 f5 91 ec 04 e0 0a 1b c3 55 59 e1 c2 94 aa 4e e7 f6 be f0 84 53 c1 36 87 eb 18 aa 06 6f bc Data Ascii: Ix `~Xk%#}p:G;OA2CV^Mh,Xi3.[h[xue6oIzAg".uzO6ijB+m#F]2'v6/Nl^vR~Uh`.UYNS6o
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 0f 4d 94 1e 23 42 76 e7 87 46 54 5a 3b 70 8c 99 a8 1a c2 d8 b7 8d a1 8d 47 54 43 ec 00 d5 8c ed b7 87 ee b7 cd be ea ca df c1 10 da 7a ec d8 69 2a d6 53 59 43 3c ef 0e 89 29 0a 40 03 94 37 8a 2e d5 c9 c7 8e a8 8a ec d4 55 cf 04 4d 36 56 2e fd 94 98 30 04 d4 56 a3 93 2d 7e 20 c9 43 10 0d e1 40 89 99 21 84 4c 4b 86 50 6f 87 e7 7e 28 f7 89 f2 a5 ba aa df f7 bb 74 87 d7 d1 60 20 10 80 ec ec 89 68 f8 b5 8a 0c b8 54 8f 1e ce c7 e1 ac af e6 fb 7e 74 47 e7 55 1f ae a9 1c 4b db 1b 4b 47 31 a5 66 49 79 87 1b 93 5d 4c d7 43 a8 49 57 d5 e3 10 65 b4 7f b7 97 11 c2 63 08 29 37 fc b2 ba 63 22 8d 15 13 03 a0 21 aa 26 d0 73 0c cd 27 c3 a4 67 fc 7c d0 74 63 6f df ae 67 37 67 bf b9 ed 59 8d 52 03 cf fb 9c f7 b1 3a 1c c6 d6 6d ad 16 23 d8 13 8f 75 4f af 1b 5e b4 8d 0b e7 60 Data Ascii: M#BvFTZ;pGTCzi*SYC<)@7.UM6V.0V-~ C@!LKPo~(t` hT~tGUKKG1fIy]LCIWec)7c"!&s'g\|tcog7gYR:m#uO^`
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: aa 4c 7e 8a 34 d5 c9 6d f6 f9 78 10 21 69 c2 c2 b3 8e 0f e2 f5 52 7b 3d ee 1a da 79 d7 f9 72 87 b2 58 e0 cb a6 f3 73 1f 8e 72 79 3d d4 20 71 99 c3 df 31 40 42 0a af ed 83 a8 93 83 4d a2 32 5c 33 d1 66 8f b1 ff 87 aa 5e f6 88 b8 ad b1 54 57 3e 6c 8e 52 55 68 cc 01 5c c8 52 a5 aa 98 3a b5 dd a1 bc b9 23 61 9d b1 de 34 99 69 0e 57 14 37 57 8b e6 ea b5 b9 6b db 08 9e a6 b1 fb 90 68 f9 1d ed 41 1b 39 67 65 ab a8 7d 62 70 f3 dc 5d 3f 8f 82 23 13 ba 53 47 d7 c3 30 89 d8 56 6e f6 05 07 60 a5 13 54 ee 12 0a fc 0c d6 89 ca a7 b3 cf c5 1f 0a 5c 8e 90 55 3a 28 82 ed 20 82 58 87 22 c0 81 29 ea 54 99 46 56 54 af 70 aa 25 cd 93 b5 11 71 ea c0 7e 85 aa eb db ef 1e bc 83 01 d0 ae 34 66 2b dc 88 e4 42 57 73 90 e3 b6 a9 b6 d6 77 5b 79 36 98 60 b5 f2 8d 78 19 ae a5 3a 59 f1 Data Ascii: L~4mx!iR{=yrXsry= q1@BM2\3f^TW>lRUh\R:#a4iW7WkhA9ge}bp]?#SG0Vn`T\U:( X")TFVTp%q~4f+BWsw[y6`x:Y
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 19 c6 18 11 7d 62 0c f3 ad b1 45 89 4f b3 79 d9 6d 93 61 52 b7 cf a2 df d6 ac 4f ed 70 70 b1 09 3c 61 0d 9b 7d ba 46 d6 47 19 1b e5 ef 36 5f 06 12 b5 34 24 e5 3a 4b d6 6c 27 f6 db 0d 89 b2 9d fb 5e 70 0e af f6 fa 3a 61 cd 0e 81 00 ed b1 f6 45 65 5f 76 70 0e 84 5c d5 c5 4a 6a ef 1c f0 e3 53 99 dd 8e b6 92 90 d3 13 83 d0 a9 e7 b1 ef a4 95 8c 83 f0 c7 c1 47 b1 bb 5b 2c 6c ab e8 c6 b7 b9 6f 6f ec 89 44 db 55 65 71 69 52 88 f4 df 20 ec 11 41 9a 48 2d a2 7b 73 6f d5 00 10 33 01 18 de de ff cc d0 b6 e3 89 b6 67 0f 75 90 e7 84 09 13 f6 c7 98 37 ef e1 d7 7d 08 4c 25 00 71 b5 8d 70 a2 d6 ab d1 3a e2 f1 b5 0e 8e b8 b6 4c 18 92 d8 d5 7d 82 00 a8 d2 ef 5d a3 2b d7 5a 63 60 b8 36 41 54 33 ed 88 da 59 c6 6e 33 c7 60 c2 20 b6 e6 44 de af 95 f9 f8 39 24 5c eb 31 b4 6d 86 Data Ascii: }bEOymaROpp<a}FG6_4$:Kl'^p:aEe_vp\JjSG[,looDUeqiR AH-{so3gu7}L%qp:L}]+Zc`6AT3Yn3` D9$\1m
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 69 06 34 ab 62 7e 9a 9c 30 06 3b 02 1f c6 b1 12 c9 00 96 c0 e4 d8 28 8e 59 e0 08 62 06 83 36 38 fe e4 89 41 e2 5c 48 ea d9 02 f9 79 49 8e 09 90 7f bb 9e d6 b5 41 31 f9 e1 a4 52 9d fd ef 15 87 2d 13 83 c9 b1 60 89 1c f1 6f d9 b7 3f a7 e1 4b e5 28 76 ec 12 c7 14 70 bd e3 84 b9 76 c5 b0 2b 75 74 41 a8 76 36 c0 03 b9 45 46 b4 65 44 d9 f9 3c ab 40 a5 7f bb c6 3e 42 8e 67 67 02 30 26 b4 a9 ca 16 be 84 f2 74 e2 4e 08 22 3f ec da 44 50 82 c6 02 a9 e6 11 43 f5 78 6e 4a 7b 77 4d a3 a9 c3 7a e4 97 ac 21 22 df a7 57 f3 ba e1 be dd 76 bb 1a c6 70 e7 9d f5 dd 67 22 4a 44 9e 22 15 2c 0c e6 a2 19 44 db f5 eb a2 bd 1c b8 77 c4 cb aa da ab bc 10 55 58 8d 18 a3 a7 39 82 5a 6c 9d 60 a0 1b d5 48 40 60 68 b6 8e 90 55 5c 48 b6 19 da c9 70 99 9c a6 1a bc 04 96 73 f6 00 40 d6 bd Data Ascii: i4b~0;(Yb68A\HyIA1R-`o?K(vpv+utAv6EFeD<@>Bgg0&tN"?DPCxnJ{wMz!"Wvpg"JD",DwUX9Zl`H@`hU\Hps@
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 0e c9 a6 4d e0 be d2 ec 3a e9 9b aa 2d 84 43 4d 85 b9 25 f1 f2 63 65 35 0f 2f 51 5d c6 8a eb 27 43 ae 84 d4 60 a3 16 ee e9 51 81 6c 50 73 20 c2 21 94 9e 2d 82 0b 68 cc 8e 35 c6 b1 0e 95 c4 0d 3d 85 ee 13 ce 44 14 1a 6e 8f f5 29 a9 c7 a1 89 82 3a fd cb 91 70 47 c1 70 52 2d 98 e6 74 dd 37 d2 b1 ee 73 cc a2 92 e3 3d d7 f3 26 54 f0 1c 88 a0 5d 61 9c cb b2 2a 4f f6 32 95 22 c0 f4 46 59 91 fa c6 64 2d d1 29 20 98 1e 5a e5 52 a6 8a c4 81 c2 5c cb 9a 15 46 94 5f 7a eb f5 f2 9a 8d 63 a4 47 c2 7b 98 0d f6 55 7c ad 53 f0 9b 5d 5a 11 15 99 c5 cb aa 38 33 57 fb 9b 40 e2 56 2a 4a 72 66 55 83 b7 f2 db bd d6 a8 b2 ef c5 e1 08 11 3e d7 d9 13 81 a1 7a 04 f3 6b b8 56 f6 d9 43 6d 24 56 6c eb da a2 f1 cb 5b bb 65 09 fb 64 9f be 2c ef 20 ce 56 1f b0 da 13 f2 8a 9d 06 00 1b 47 Data Ascii: M:-CM%ce5/Q]'C`QlPs !-h5=Dn):pGpR-t7s=&T]aO2"FYd-) ZR\F_zcG{U\|S]Z83W@VJrfU>zkVCm$Vl[ed, VG
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 21 41 0a cd 1a 96 01 b6 16 e0 0c d4 92 29 f4 3e 68 9f b5 55 83 fd e6 3d ed ad 31 1e db 55 02 6a 3f e5 1e 5a ba c9 ca 56 e1 d0 1b df 78 36 dd 09 c3 44 55 2c ee 10 86 12 76 69 4c 97 8d 26 98 da bc 82 54 ea 33 94 3e ec d3 04 20 2e 41 6d de e6 a1 4b 8c 77 a1 ed fe 68 1b a1 1a 48 d4 c2 c7 82 b1 cf a9 31 61 eb 4c 77 0f 2b bf 6d 3b 62 52 17 7b ec 98 43 24 cb 34 87 a4 a7 9f 53 dd 37 64 91 69 eb 95 d2 1d 11 9d 50 0a b6 0a 0b a5 f0 a8 e7 b8 9f cd f1 38 9f e1 3e 4d f0 98 6a 2c 4e e6 78 ba 38 c7 b7 ab 4b 3c 5c 5d e2 ee fc 02 df 66 27 78 50 29 16 94 62 a1 53 58 9d c0 7a 7b fd 8c 0d 2c 5b 90 56 00 91 93 f2 b3 23 ed 95 d6 ab fe 67 78 bf f9 8e 90 37 59 ee 5b 00 4e 0a 9b 87 d9 c3 36 d1 98 bb cd 56 ec 35 ed 99 7d 9a 5c 7d 86 a1 94 f2 5b fa 8a d5 e0 83 19 e2 9e 33 67 12 01 Data Ascii: !A)>hU=1Uj?ZVx6DU,viL&T3> .AmKwhH1aLw+m;bR{C$4S7diP8>Mj,Nx8K<\]f'xP)bSXz{,[V#gx7Y[N6V5}\}[3g
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 75 84 a1 1e e8 47 06 0a a2 6a a3 72 f1 be 8f 4d 6d 1f f2 33 e4 28 79 bd 98 f0 3a 2a 9c 82 93 72 0e eb 60 7d 48 56 5e 11 ff 45 ff 78 e2 9f b5 0b cb c7 00 19 03 28 38 55 7e 36 00 5c 9c 7b 58 af d0 ee 09 4a 6b 7d 7b 14 61 c1 06 4b e5 c2 f2 3d 26 73 dc a5 27 b8 bb b8 c0 ed e5 25 6e 5f 5f e3 eb d5 25 1e 2e 2f b1 38 39 c3 93 4a b0 b4 0a 8f 50 58 ce d2 82 d8 67 5a e9 05 16 ad f2 04 b3 23 93 d9 13 95 b6 60 d0 e6 2a fe 8e c8 5e df ed b7 a6 c0 1a 8d e1 fa 23 5f 2b b4 96 b2 84 f2 96 c8 aa 48 bf f6 7d e9 8f 3c ad 82 06 b3 5e 31 84 0a ba 94 d6 d6 1f b3 0b 34 e8 da ce b0 94 14 35 54 4c 58 92 37 9d 50 1a b7 e9 0c 27 27 e7 98 5f be 46 f2 7a 09 2c 16 98 3f dd e3 d5 cd 7b 5c 7f f9 80 f3 2f b7 b8 f8 76 8f 8b a7 47 9c 99 05 66 bc 84 66 80 c9 c0 2a d7 4f a9 55 20 10 b4 e7 4a Data Ascii: uGjrMm3(y:r`}HV^Ex(8U~6\{XJk}{aK=&s'%n__%./89JPXgZ#`^#_+H}<^145TLX7P''_Fz,?{\/vGff*OU J
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 8d b7 72 36 de 60 06 c1 42 31 c0 d0 c8 48 83 c8 99 fa 1b 05 2c 34 70 9f 28 3c ea 04 0f c9 29 1e e7 e7 f8 76 f9 0a 5f de 7c 87 9b d7 d7 f8 fa f2 25 6e 4e 2f f1 a8 e6 58 12 c3 92 73 6a 07 10 d8 b2 f3 17 00 86 01 23 83 d3 48 60 af 78 be 8f b7 fa 63 43 29 c2 e0 ca 8e 1e ee f7 8c ad bb 73 c3 7a 29 3c 41 91 bf 17 a9 25 d8 12 c8 28 58 3d c7 32 39 c1 ed fc 0c c9 c9 05 e6 d9 15 5e bd f8 0e 4f 3f fe 8c c7 0f 6f f1 e9 c3 7b 5c dc dd e0 fa e9 1e 97 8b 07 cc 33 83 99 05 34 1b 6f a7 4f 50 d0 20 28 a7 8d 40 40 46 04 a3 8c 73 04 88 75 2d 05 c0 11 f3 9b 4c e0 32 13 60 53 a3 a5 fe 5e 7b ac 42 dc b0 e6 ce ae 43 25 09 27 9c d0 0e da de 90 36 f9 61 6d 60 38 9b e6 a1 a5 56 63 c0 b1 f6 ce 38 ee bf 52 a7 9e c3 6f d9 f0 91 f7 fd d4 97 63 80 d8 e1 60 e4 5d cc e9 b0 04 aa e5 a3 af Data Ascii: r6`B1H,4p(<)v_\|%nN/Xsj#H`xcC)sz)<A%(X=29^O?o{\34oOP (@@Fsu-L2`S^{BC%'6am`8Vc8Roc`]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49803	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:37 UTC	378	OUT	GET /wp-content/themes/tgtheme/img/d7.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:37 UTC	787	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:37 GMT Content-Type: image/gif Content-Length: 3327196 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-32c4dc" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609579 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qvT%2BYhQfGAivvMLA5B4mVFNBnLBCdyxK1EdPPopQYRT%2F%2FC0CAJuB6%2BxycKgILvby80nrahpQDZNuC68gruYEbquhSbr2LRo%2Bvr6OvmeuHx%2BNGPtrYyhf5AI%2BoaJtVhhGBu0ViA0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc3bc2e1a30-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:37 UTC	582	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 00 9b ff cf 35 02 00 32 52 fe d8 20 00 00 03 00 80 d2 ff 5d 1f ff d5 27 fa 90 16 00 58 8f fc ee 21 ff ff ff 00 00 00 00 58 90 05 56 54 56 be ff 7d 09 09 ff b4 84 00 57 8f fa 8f 15 fa 90 15 00 57 8e fa 93 16 ff d5 26 fb 91 15 00 84 d9 00 97 f9 00 98 fc 00 81 d5 00 9a fe ff cf 25 00 90 ed ff d3 26 00 8d e9 00 93 f4 ff d7 25 00 89 e2 fb 96 17 fe d5 26 fe c7 23 00 92 f0 fc a3 1a fe e3 22 00 6a ad 00 87 df fb 9e 19 ff cc 24 00 6d b3 fd ae 1c fe bd 20 00 8b e5 fc ed 21 fe c4 22 00 86 dc fe c1 21 fb 99 17 00 5d 98 fe e0 23 ff ca 23 fc a6 1a 00 80 d3 fc a9 1b fd b1 1d 10 0d 03 00 43 6d fc 90 14 00 Data Ascii: GIF89a!NETSCAPE2.0!,52R ]'X!XVTV}WW&%&%&#"j$m !"!]##Cm
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 3f 4b 01 25 26 78 64 12 cf 3e 16 03 46 45 d9 b5 21 00 59 8f 4c ba ff 00 54 90 89 72 15 b0 ae 47 c8 a7 1e d5 49 06 4c 7d 6f 83 98 59 be 71 15 9d a5 4f b8 2f 0c 3c 12 05 02 59 8d 32 70 7a ae 29 09 ed 99 18 aa 64 0f cb bb 3c 5b 84 69 90 9f 54 98 7f 18 66 89 65 f5 8e 16 65 54 10 bf b5 41 e0 bb 22 a5 27 07 ff f6 d1 72 8f 60 a7 70 29 c3 36 13 de 41 0b ff 75 3b 79 46 0b fe da 20 ff 97 62 42 78 74 ea cb 30 89 2a 0a e9 c2 23 42 22 08 ff a1 6f ed 89 15 f1 a2 1b 39 3f 2c 95 55 0e 4f 2a 09 3c 64 70 91 78 49 64 6d 5d 90 68 2f bc 81 33 60 39 10 a5 7d 3e 3f 49 42 6c 4a 36 0b 37 50 f3 ae 1d e9 8b 1c 7d 60 33 61 56 39 7c 74 53 c7 94 19 e0 51 1a 4d 4e 3e 5e 95 b7 8a b2 cc e3 ed f3 d2 e1 eb 65 97 ac fc ea 22 3f 81 aa e3 b7 2d 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 Data Ascii: ?K%&xd>FE!YLTrGIL}oYqO/<Y2pz)d<[iTfeeTA"'r`p)6Au;yF bBxt0#B"o9?,UO<dpxIdm]h/3`9}>?IBlJ67P}`3aV9\|tSQMN>^e"?-H
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 42 02 06 b0 8f f4 82 9b eb 20 79 31 11 6c 0e 6e b3 c3 9b 13 99 80 38 43 aa 65 55 4d 38 22 bd ca 78 3e 0e 88 91 92 e8 d2 80 dd 50 a9 33 11 b4 10 93 af 0b 81 11 d4 e8 26 07 79 32 2c c5 13 93 15 dd 47 2f 25 da 51 7d ac 64 17 0a 59 a9 33 5f f2 2d 93 97 db 40 06 f0 17 a7 fd dd d2 2a 64 13 53 19 5e 20 4a 88 55 ef 7c 19 58 24 2b ff 68 44 62 ea 4c 86 9c 43 e6 eb 50 b0 04 0b 8a a9 02 0a 7a e6 53 c4 47 a5 5d 5e cc 87 e7 e3 41 17 bd a9 ae 07 de ec 94 f4 ac 17 3c 1d 47 ff 3f e7 69 80 0c d5 aa a5 3a 9b e2 46 15 31 c1 72 34 73 e5 f9 6a 30 c9 7c a2 0b 7a 13 23 a1 43 2d d6 81 1f 3a 4e 9b 97 ab c1 0a 6a 99 80 81 12 25 97 51 c2 42 c5 74 56 c4 db 71 a0 9f 13 45 d7 2b df c5 cb 94 8e d2 a2 70 f3 20 03 3f d0 84 5a 62 d0 a3 3a 61 67 91 b0 50 cd 06 d6 91 73 2c 00 e6 44 3b a0 40 Data Ascii: B y1ln8CeUM8"x>P3&y2,G/%Q}dY3_-@*dS^ JU\|X$+hDbLCPzSG]^A<G?i:F1r4sj0\|z#C-:Nj%QBtVqE+p ?Zb:agPs,D;@
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 71 a8 b7 7d 5c a3 70 95 77 28 54 22 81 63 c4 7f 93 65 84 79 f4 35 34 d8 85 31 65 7d 10 e3 08 d8 27 64 92 13 05 f9 53 24 54 38 22 27 98 82 48 a4 71 ee 02 83 d2 67 6e 58 18 7a 1b e8 58 08 c4 84 c1 ff f7 5e 7e 77 26 5d f2 29 47 c0 85 d3 23 83 05 d0 81 70 48 54 5f a3 84 d2 47 88 05 90 88 3a 23 76 f2 27 39 51 88 6d 38 f2 29 58 f0 7f b4 e3 76 30 63 87 49 f7 55 70 88 31 86 97 81 97 93 80 d9 f7 3a 68 38 75 38 a2 6a 4d 00 8b 5b 63 7e de 25 8a 5d 17 86 8f 36 8b f3 22 83 c4 b8 84 4d 78 60 a1 b6 35 23 58 7c 23 c2 29 0d 40 06 94 54 80 b5 86 8c 5e c7 81 da 58 2f fd a7 89 ce 53 09 eb 85 60 ce 53 00 b7 95 2a 05 d2 66 38 60 8b 08 04 8a 05 80 77 ec 37 7a 86 38 84 ea 07 35 ac 48 37 7f a0 87 ce 53 03 48 26 89 03 53 24 4c f0 85 0c 04 73 77 d5 8d 44 18 46 06 f9 45 70 03 8e d3 Data Ascii: q}\pw(T"cey541e}'dS$T8"'HqgnXzX^~w&])G#pHT_G:#v'9Qm8)Xv0cIUp1:h8u8jM[c~%]6"Mx`5#X\|#)@T^X/S`S*f8`w7z85H7SH&S$LswDFEp
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: e5 35 04 3a f8 80 76 41 55 65 00 b9 13 08 37 7c db 9a 21 79 b0 d2 e9 b9 13 83 bf df c6 01 40 5a bf 43 52 96 61 25 bd 17 e7 bd 05 b8 bf 98 49 73 eb fb 6f 1a db 22 79 a1 b4 f7 05 bf b4 53 b0 02 4c 98 34 47 bc 4b e9 82 b5 cb 9b 3a 98 17 43 72 bf c6 15 92 85 eb bd 49 ea bd 00 20 b9 84 9a 90 98 5b 27 78 31 24 9c 0b 59 1d 10 6e ce 3b 9e 53 eb bd e6 b6 c1 df 36 c1 2b 62 17 e6 1b 5e 05 eb c0 ad 69 6e a0 cb bf a5 ab 93 22 60 7f e4 eb 15 84 52 0b af 0b 49 f2 9a c4 ad 09 37 2c 0c 9d 82 bb 94 58 3b a0 70 b1 b5 e1 15 ac 39 fc bf 97 c9 c2 2e 8c c1 1d 56 aa 2a 02 17 54 85 03 db 3b 90 fa 9b c5 81 bb c0 2c 6c 6e fe 7b 7b 21 80 91 ae f2 16 43 12 c2 61 55 c5 72 2c b9 48 4b b3 05 b8 bc 18 77 a6 41 79 16 54 ff b5 02 e5 d5 bb 78 16 5e 22 10 02 36 03 2d 2b 50 c9 96 ac 2b 4d 20 Data Ascii: 5:vAUe7\|!y@ZCRa%Iso"ySL4GK:CrI ['x1$Yn;S6+b^in"`RI7,X;p9.V*T;,ln{{!CaUr,HKwAyTx^"6-+P+M
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 0c e2 2e cd 19 0a ea e3 89 cb 8d 8d 13 54 c5 ec 78 64 6e bc 34 04 7d 0e 23 da 30 e9 b0 be f7 92 2f e1 bf a0 f3 30 02 25 ee 80 f7 af a1 f7 93 1f ec 16 2e 09 7f 2f 26 4d d0 52 39 29 9d 72 bd b1 66 1f 23 8c 5c 67 95 3b 37 19 60 db 2a c2 0b 64 de f9 b4 0f e3 db 30 f5 27 42 28 c3 70 0c 3f 40 1f 77 50 fb eb 7e 01 92 b0 0c 80 9f 2e 21 09 d9 03 58 d5 cf ee d8 32 32 d5 79 65 8c 74 da f8 2d 22 0c c8 30 f0 c0 0f fc 10 9e 0b 96 df 22 7e ff d0 0b 10 de fb ea f1 fb d7 cf f7 07 b0 0d b5 2e fa e7 02 bd e3 99 d3 ff 9c 14 20 85 03 70 6d 94 3c 19 02 26 ff 22 da 60 fd e3 8f fd e5 4f fc 15 d9 22 bc 80 ff 00 41 88 c0 40 82 05 0d 12 b8 73 40 e1 42 86 0d 1d 3e 84 18 51 e2 c4 88 db 96 25 c0 98 51 e3 c6 04 4c 3e 7c 28 10 52 64 48 16 00 4c 9e 44 99 52 e5 4a 96 2d 5d be 84 19 33 25 Data Ascii: .Txdn4}#0/0%./&MR9)rf#\g;7`*d0'B(p?@wP~.!X22yet-"0"~. pm<&"`O"A@s@B>Q%QL>\|(RdHLDRJ-]3%
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 8a 86 fc a4 02 a7 b1 c9 2d 4e 32 61 ca 78 da 33 6c d9 1e 41 58 12 8d aa 60 e3 26 e1 18 4b 0f ae 81 0b 7d 6c 8b 11 b4 87 14 57 72 24 95 91 69 00 65 3c 66 14 11 9c ff 12 38 70 90 22 31 11 39 81 4d 9e 70 97 e1 b2 44 2e bf e9 1a 3d f8 12 8d 7a c8 e4 26 3b a9 4d 39 86 12 41 47 c0 20 62 64 a0 c7 67 06 65 64 2b 48 0c 09 04 d9 16 38 00 81 9d 3d 9c a5 1b 6b 39 ce 6d e1 e2 69 b4 20 68 6b da 60 ce 00 46 23 98 6e 1c e6 3f 15 08 04 64 d6 a4 01 82 42 cc 3e e3 56 4f c7 04 0a 29 1d 48 42 34 81 53 01 7f 4a 54 81 af e0 a6 1b bd 99 50 5c 01 e2 a0 2c 25 8d 14 32 c1 d0 05 74 22 9d 6e 64 86 27 4d 9a 40 10 56 94 23 2f 98 26 4c f2 46 2e 8e 06 e5 29 38 93 89 06 9e e8 99 42 ee 54 81 e8 d8 a4 d2 60 ea ab 58 3c 6d 0c 53 1d 4d 25 19 da 0a 57 44 a4 8d 6e 44 87 53 a9 d8 40 e0 30 21 3c Data Ascii: -N2ax3lAX`&K}lWr$ie<f8p"19MpD.=z&;M9AG bdged+H8=k9mi hk`F#n?dB>VO)HB4SJTP\,%2t"nd'M@V#/&LF.)8BT`X<mSM%WDnDS@0!<
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 01 82 96 13 32 1d 8a 39 88 30 81 22 b3 34 1a 9c 3e 5d 19 c3 32 84 b2 9f 4b c0 4d aa 32 1f aa a2 63 02 c4 3f 9c 8d a2 00 80 cb 62 ba 24 1a 19 09 5b c2 36 c9 c4 52 a4 c2 0a e0 20 01 78 2f 1d b2 00 0e a3 39 9b 2b 43 83 71 99 40 28 c3 03 00 2c 73 0a b5 87 98 37 37 2a b0 38 62 20 53 cc 44 ab 49 80 5a c0 90 28 dc a8 a2 42 a6 26 10 81 e1 6b 18 60 74 c6 29 84 83 2c 32 a0 e4 83 08 2f 6c b3 d4 73 8d 31 78 03 28 78 03 fb 99 aa 96 79 1a 5a bc 8a 37 20 47 28 00 04 40 b0 04 72 6c ae 49 b8 38 35 74 88 ec 33 20 0c a8 bd ea 01 03 09 78 c6 4c f4 29 21 40 81 3e f4 b7 a2 1a 99 24 b0 26 29 bc c7 81 24 41 61 38 be ca c1 35 44 e4 ba 36 63 44 b4 18 03 35 40 83 1f 60 80 89 a4 48 ff 06 40 03 3c 98 38 82 72 9a a7 69 86 a9 18 03 40 88 c8 8a 14 c9 89 fc 01 3c b0 84 ab 9a aa 2a 50 b1 Data Ascii: 290"4>]2KM2c?b$[6R x/9+Cq@(,s778b SDIZ(B&k`t),2/ls1x(xyZ7 G(@rlI85t3 xL)!@>$&)$Aa85D6cD5@`H@<8ri@<P
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: d5 f5 2f 8e 85 9e 09 58 07 f7 b5 e0 be 4d 29 03 4a 38 88 70 ce 6b 9c 08 40 10 cf 06 76 08 ba f4 4b b4 60 04 5a 7d de 01 1e e0 3c 28 54 eb 7d 08 05 76 99 ba 74 bd ab f0 50 d4 fc d5 be da 38 1d a2 80 0b e6 61 94 cd 60 e8 a9 da 86 b8 da 45 fc 60 ed 15 e1 87 20 e1 aa cc 5f 8a 28 86 59 0d 83 cb 55 61 15 9e 82 42 45 60 87 d8 b4 05 46 4a 2e bd 8a 24 ae 4b 2b cd af 27 d8 a4 1e 16 e3 1c fb e1 ca 49 19 ff 6b 15 bc 22 a6 4a fc 3d 0b f0 a5 c8 33 b1 8a b0 9d 55 28 8e e2 01 2e 82 16 7e 88 2b 8e e1 a4 d4 62 ac e0 e2 35 f6 2f f5 34 a0 1d 1e e3 42 5e 2b 37 a2 80 d2 63 88 81 a5 af 82 dd cb 35 5e e2 a9 a0 82 b7 65 80 e4 a5 0a 37 b8 d9 27 4d e1 3a 56 61 ce 25 54 cf 5d 08 75 c3 e2 8a ec e3 b3 c0 03 bf f4 62 e9 02 81 30 36 e4 56 7e 26 37 2a 81 88 68 d9 03 8d 4b 88 88 59 36 4e Data Ascii: /XM)J8pk@vK`Z}<(T}vtP8a`E` _(YUaBE`FJ.$K+'Ik"J=3U(.~+b5/4B^+7c5^e7'M:Va%T]ub06V~&7*hKY6N
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: a3 18 2c 72 c4 57 fc c5 67 7c b8 df 79 b3 86 7c 16 9e 7c e8 ab 7c e7 2b cc 34 da f6 87 48 fa cd f7 e7 70 47 80 fa 3e 00 82 76 33 ff d0 6f 58 e1 1e 7d 01 76 7c 8b d6 fa d5 4e 7d 8e 64 6f 76 34 27 c1 ba ae 06 97 7d 69 3e 75 04 c0 ab 85 c0 fd 4b b3 94 42 58 85 80 a7 d5 74 ef fd 01 4e 67 b9 6f 72 03 18 7e 97 e9 c8 e7 a6 77 ba 95 08 f7 f6 f1 e5 67 7e 37 12 5c 3c 2d b7 ac 15 93 77 a8 7e 9c a5 50 24 cf 7e 15 8e 71 b9 0f 7e ef 0f 71 72 a8 83 55 a8 83 ff 07 08 53 6c d8 04 28 58 50 0c 1b 46 75 0a 1d 68 e8 f0 21 c4 88 12 27 52 ac 68 f1 22 46 8a aa 16 70 ec d8 71 4f 45 1d 08 46 92 2c f9 ef 24 ca 94 2a 57 b2 6c e9 f2 25 cc 98 32 67 d2 ac 69 f3 a6 4d 0a 25 77 9e 98 38 42 01 d0 a0 41 67 98 c8 68 14 a2 9b 77 75 18 6d 32 e8 f4 29 d4 30 45 0c 50 ad 6a f5 2a d6 ac 5a b5 42 Data Ascii: ,rWg\|y\|\|\|+4HpG>v3oX}v\|N}dov4'}i>uKBXtNgor~wg~7\<-w~P$~q~qrUSl(XPFuh!'Rh"FpqOEF,$Wl%2giM%w8BAghwum2)0EPjZB

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49804	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:37 UTC	649	OUT	GET /wp-content/uploads/2024/05/maxresdefault-2024-04-24T175141.860-1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:37 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:37 GMT Content-Type: image/jpeg Content-Length: 145071 Connection: close last-modified: Mon, 27 May 2024 12:35:44 GMT etag: "66547e20-236af" expires: Mon, 22 Jul 2024 16:49:52 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 1057785 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y%2BBrpg1TYmoVMi%2FS5bkw56eLAUajdZ%2BUWMknZLJMlcMgfAheGuPJv5ZeDdumjU3oND6ETJu5PrEKwRIyuAmSnUv%2BQ7IPyJFK18N1Azp%2BW%2FZ1WCpW2hHdgRNECyzw7iCptRiSRsI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc3bc0dc34d-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:37 UTC	584	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0a 0a 0a 08 0a 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 09 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 15 10 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 07 08 03 05 06 04 09 ff c4 00 67 10 00 01 03 03 00 04 08 06 0c 0a 06 06 07 06 03 09 01 00 02 03 04 05 11 06 12 21 31 07 08 13 14 41 51 61 81 18 22 55 71 91 94 17 23 32 52 54 Data Ascii: JFIF"g!1AQa"Uq#2RT
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 27 86 a1 64 a7 99 cc 39 63 8b 0f 5b 7a ba 97 a4 dd 67 fc fc 98 f3 85 e2 42 5b 04 e0 4a cf 25 64 a7 7c 8e 3e 73 ff 00 25 85 c4 9d e4 9f 3a 44 22 c1 17 29 ba 9d 81 1a 83 a9 39 09 2c 9a 86 8c 27 f2 8e f7 c5 31 09 c0 04 b7 4f e5 1d ef 8a 42 e3 d6 9a 84 58 25 b9 46 07 52 4d 51 d4 95 09 0f 62 44 8d 60 ea 4b a8 3a 82 72 12 80 0f 32 44 81 83 a8 23 50 75 04 a1 28 4a 1a 10 9b a8 3a 82 5d 41 d4 13 b0 84 fc 81 17 4c 0c 1d 49 c2 31 d4 95 28 46 50 8b a6 ea 0e a4 6a 0e a4 e4 25 ca d4 66 28 6a 0b 8f 5a 10 97 28 4a 1e 51 9e d2 8e f2 84 23 20 4b ca 3b 8a 3b ca 0a 10 8c 81 21 71 29 1c d0 7a 12 6a 0e a0 9c 84 b9 02 4b a6 ea 0e a0 97 50 75 04 b9 4b 94 b9 02 2e 9a 23 1d 41 2f 26 3a 93 90 97 20 48 93 93 1d 41 27 26 3a 82 78 42 4c 81 09 ba 83 a8 7a 12 f2 63 a8 27 04 aa 46 b0 24 Data Ascii: 'd9c[zgB[J%d\|>s%:D")9,'1OBX%FRMQbD`K:r2D#Pu(J:]ALI1(FPj%f(jZ(JQ# K;;!q)zjKPuK.#A/&: HA'&:xBLzc'F$
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 21 08 42 10 84 04 b8 43 52 a5 42 30 8c 25 4a 10 84 88 4a 42 02 78 09 0a 54 21 09 c1 22 10 84 25 b2 4b a1 09 70 84 a8 ba 30 91 39 28 4a 1a 84 88 4b 84 27 04 21 2e 12 04 e4 f0 10 90 04 a8 40 4e b2 12 b5 26 12 84 a0 25 01 09 12 a7 6a 23 55 38 04 dc c9 a0 27 84 06 ac b0 42 49 e9 4e 6b 6e 74 4d 2e 08 a7 8b 58 e1 6f 2d 76 a2 e2 36 67 6a f6 59 2d 39 de 3b b0 a4 1b 05 93 dc f8 bf 42 bd 05 37 15 42 6a 8b 6e 5a 7b 1e 8f 13 8d 9f 42 ee ac da 38 06 3c 5e ae 85 be b2 59 46 cd 9f 42 ec 2d b6 b1 b0 e3 e8 57 ac 19 aa cf 74 c5 cb 9e b6 d8 46 07 8b d4 b7 f4 96 4c 74 2e 86 96 84 0c 6c e8 5b 08 a9 b0 a1 74 a1 30 b8 ad 0c 16 b1 b0 60 2f 64 74 1d 8b 72 d8 7b 13 b9 25 01 96 e9 2e 56 a0 51 84 3a 8f b1 6d 30 98 f0 97 32 40 f5 aa 75 18 ea 0b 0c 96 e6 90 76 05 b7 2d 4d 0c 4b 74 e1 Data Ascii: !BCRB0%JJBxT!"%Kp09(JK'!.@N&%j#U8'BINkntM.Xo-v6gjY-9;B7BjnZ{B8<^YFB-WtFLt.l[t0`/dtr{%.VQ:m02@uv-MKt
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 14 61 00 24 b2 4b a7 04 a9 30 94 27 34 21 08 42 13 92 21 08 42 54 89 42 54 8d 4a 13 80 42 30 95 08 52 00 84 21 09 42 5b 21 22 5c 23 09 52 80 84 21 2e 10 96 c8 40 42 11 84 e4 d2 53 80 4e 6f 4f 99 34 27 75 27 0d e9 a8 09 d8 46 aa c9 13 32 53 c0 ba 4b a2 9e 12 4e 02 e9 ac b6 bd db 32 76 26 58 ad b9 c6 c5 21 e8 dd 97 76 42 d0 a7 80 73 aa 33 cc 8d 1b b3 e7 1b 14 8f 61 b4 63 1b 13 ac 16 7d db 17 6d 6a b7 01 8d 8a eb 9f 95 65 bc 92 52 5a 6d d8 c6 c5 d1 51 d2 63 a1 3e 92 9b 01 6c 23 89 67 cb 32 68 0b 0c 50 61 64 2c 59 88 58 5e 55 7b dd 23 8d 93 1c 56 39 0f 62 6c 92 2f 24 b3 a9 9a cb a8 5d 22 ce e9 07 52 63 a4 0b 5f 2d 42 c0 6a c2 9d b0 28 39 55 b5 32 76 a3 59 6a 79 e0 eb 47 3d 4f e4 0a 5e 59 6d 83 96 46 b8 2d 38 ac fe 72 94 56 26 98 1c a6 6c a2 cb 6a e6 82 bc d3 Data Ascii: a$K0'4!B!BTBTJB0R!B[!"\#R!.@BSNoO4'u'F2SKN2v&X!vBs3ac}mjeRZmQc>l#g2hPad,YX^U{#V9bl/$]"Rc_-Bj(9U2vYjyG=O^YmF-8rV&lj
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 49 27 2e d3 e7 65 46 b3 48 ee 53 17 06 1c 29 b6 b1 ec a5 ab 6b 21 aa 7e c8 65 61 22 1a 87 00 49 6e a9 fe a6 4d 9b 01 24 3b 70 db b1 2b 64 05 0e 8c 85 f3 12 e1 47 2c 32 49 14 d1 be 19 a1 79 8e 58 a5 69 64 91 bd a7 0e 6b d8 e1 90 e0 46 e5 7b ff 00 e8 eb b2 72 56 5a fa a2 3c 6a fb 91 68 38 df 15 24 4d 8d a3 b7 12 3e 6f 4a 5e 3c 3c 0f 45 5d 43 2d ea 92 20 db 8d be 3d 7a c1 1b 46 b5 6d 1b 35 5a f7 3f 68 cc b0 b3 2e 07 69 2d 04 75 29 13 8a 25 97 99 e8 b5 8d 8e 18 74 d4 f2 56 bf 3b 09 e7 95 12 d4 b3 3e 68 e4 8c 77 29 09 51 28 cf 86 2a de 56 ed 70 39 3a ac 92 38 1b 9e 81 0c 11 31 c0 76 72 a2 53 f1 d7 22 f3 80 4f 50 27 d1 ff 00 a1 f4 2f 4d d2 b7 97 9a 79 f6 ff 00 48 9a 69 c6 77 81 2c 8e 78 07 cc 08 0b db a2 14 3c bd 6d 0c 24 02 25 ab 81 ae 07 73 99 ca 34 bc 1e cd Data Ascii: I'.eFHS)k!~ea"InM$;p+dG,2IyXidkF{rVZ<jh8$M>oJ^<<E]C- =zFm5Z?h.i-u)%tV;>hw)Q(*Vp9:81vrS"OP'/MyHiw,x<m$%s4
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 55 65 4d be a0 0c b2 3a 97 3a ae 95 e7 67 8a f2 e2 24 8f 71 f1 83 8e 33 b8 aa 85 a4 3c 1f dc e9 6e 46 d3 2d 0c c6 e9 ac 1b 1d 34 43 95 75 40 21 ce 6c b4 ee 66 c9 62 2d 6b 8e b0 dd aa ec e0 82 be 82 70 11 a5 f5 f5 92 4f 05 49 35 30 c3 13 5f ce 9d a8 d9 22 7b 9c 43 21 79 6b 47 2d ac 03 88 3b c7 27 b4 9c a9 1e f2 ea 4a 72 ea e9 c4 31 3a 18 b9 23 54 f6 8e 51 91 17 67 93 6b c0 2e c1 71 f7 23 79 c2 9a 3a 83 65 13 99 62 a9 bf 06 3c 4e aa e7 6c 73 5e 6b 85 bc 38 07 1a 1a 46 b2 a2 a4 67 6e ac b5 3a c6 28 ce 3d e8 7f 9d 4d 76 8e 2a ba 2b 13 5a 24 b7 54 55 b8 0f 77 51 70 ae 19 3d 65 94 f2 c6 df a1 79 34 cb 86 6a 99 4b 99 40 d1 4b 10 d8 2a 24 6b 24 a8 78 d9 e3 08 e4 69 64 23 78 c1 0e 3d 3b 17 01 59 a4 d5 d2 9d 67 d7 d6 13 d9 53 33 7e 86 b8 05 13 ea 49 3b d4 8d 84 a9 Data Ascii: UeM::g$q3<nF-4Cu@!lfb-kpOI50_"{C!ykG-;'Jr1:#TQgk.q#y:eb<Nls^k8Fgn:(=Mv+Z$TUwQp=ey4jK@K$k$xid#x=;YgS3~I;
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: a5 78 27 a9 56 a2 80 aa 52 4a bd 13 d4 2f 04 d5 2b c9 55 55 fc e5 6b a7 aa ed 0b 4a 2a 62 a9 3a 55 ec 9a ab ce bc 52 54 ff 00 39 5e 39 aa 7c cb c7 25 4a bc d8 53 33 2d 8f 3b 29 39 f7 6a d2 4b 52 bc 92 d6 a9 39 34 f6 82 57 4b f8 43 f4 92 9a fe d5 c9 1a fe d4 e1 58 76 6d fa 53 4c 2a 51 70 17 5f 1d c1 7b a9 6b b3 e6 5c 65 3d 56 ed ab 6b 49 3e ed aa 37 42 8c f6 0b ab 8e a3 b5 66 12 67 7a d2 d3 4d b9 7b 59 27 6a ad 24 56 28 e5 57 b8 15 8e 48 c2 c6 d9 3b d6 56 c8 14 45 aa c3 25 5a ea da 20 47 fc 97 19 a4 76 46 b8 1d 9d 0a 42 79 c8 5a ca e8 03 81 f3 24 b2 b9 1c 8a b6 69 a6 8d 96 97 39 ad c6 09 3b 02 e1 de d2 36 11 b5 59 5d 26 b3 87 03 e2 f5 f4 28 57 4c 2c 46 37 17 34 6c c9 ce c5 1c b1 f3 85 a7 04 e3 72 e4 90 02 71 1b d2 2a f9 55 d4 b8 46 12 a3 09 c0 21 26 aa 30 Data Ascii: x'VRJ/+UUkJb:URT9^9\|%JS3-;)9jKR94WKCXvmSLQp_{k\e=VkI>7BfgzM{Y'j$V(WH;VE%Z GvFByZ$i9;6Y]&(WL,F74lrq*UF!&0
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: a8 00 63 09 19 01 f2 bc 86 33 bd c1 7b 34 07 47 1d 71 ac 8a 98 12 d8 ff 00 ac a8 90 63 da e0 66 0b 8e df ca 77 8a c1 da f0 7a 0a b5 16 6b 64 34 d1 47 0c 11 b6 28 63 18 63 1b b8 0e 93 b7 69 71 39 24 9d a7 2a 36 33 36 a5 4a f9 32 e8 15 5a bd 68 45 ca 95 86 5a 8a 09 63 89 bb 5d 23 5f 0c ed 60 f7 cf e6 d2 3f 51 bd a7 0b 9e 57 45 ed 1f cf f3 b9 54 fe 12 ad 6c a5 b9 57 d3 c4 03 62 8e 66 3a 36 81 80 d6 cf 04 55 21 83 b1 bc b6 af c5 43 d9 61 74 8c 93 31 b1 5e ae 09 ef 86 8e e3 4a fc e2 29 de da 59 c7 43 a3 98 ea b0 9f d5 94 c6 e1 fa a7 ad 77 dc 72 b4 35 f7 4d 1e a9 64 10 99 ab 69 2a 69 2a 28 d8 df 76 e7 ba a6 3a 79 58 dc f4 98 a6 7e fd 9e 28 50 a4 ae 20 12 36 39 a0 96 9e a7 0d a0 fa 55 d1 8c 87 00 7a 1c 03 87 98 ed 1f b9 3e 22 99 30 d5 46 5c 0f e8 3d 26 8a 59 04 Data Ascii: c3{4Gqcfwzkd4G(cciq9$636J2ZhEZc]#_`?QWETlWbf:6U!Cat1^J)YCwr5Mdii*(v:yX~(P 69Uz>"0F\=&Y
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: f8 ad dc e4 8a 06 d3 be 49 67 87 91 64 82 a1 d3 35 bc 9b 4b b5 b6 72 2e f7 4d 1b c2 94 45 a2 84 cc 79 95 77 7b 48 24 10 43 81 2d 73 48 21 cd 2d 38 21 c0 ed 04 1d 98 48 7e 85 22 71 83 a1 64 77 3d 76 00 0d 45 34 52 c8 07 4c 8d d6 8b 5c f6 96 31 83 e2 a8 ed 44 e1 62 a6 69 b8 ba cf 5b 57 24 cf d7 96 47 cb 21 6b 1b ae f7 6b 3b 56 36 06 31 a3 a9 ad 6b 40 03 b3 af 24 ec 6c da 2d 5d 54 d0 fa 7a 2a 89 a3 3e e6 46 c6 44 6e df b5 b2 3f 0d 23 61 e9 5d ef 01 7a 0d 1d 56 b5 6d 54 62 48 23 7f 27 4d 13 b6 c7 34 ad cf 29 24 83 38 73 18 75 40 1b 41 70 39 f7 21 74 3a 59 c6 02 c5 41 72 8a d2 f9 e6 9a b9 d5 30 d2 3d 94 f0 39 f0 d3 4b 3b 98 c6 32 59 4e 1b 90 5e dc 86 17 6a ed dd 8c 29 1b 15 c6 aa 27 cb 63 60 a1 6b c5 a6 a2 95 fc 9d 44 12 d3 c8 46 b0 6c ac 2d cb 7a da 77 38 76 Data Ascii: Igd5Kr.MEyw{H$C-sH!-8!H~"qdw=vE4RL\1Dbi[W$G!kk;V61k@$l-]Tz*>FDn?#a]zVmTbH#'M4)$8su@Ap9!t:YAr0=9K;2YN^j)'c`kDFl-zw8v
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 36 56 fc d1 91 3d c6 c1 30 6f 55 a6 aa a5 f2 be 49 24 39 92 57 be 59 08 18 06 49 1c 5e f2 07 40 d6 73 b6 22 96 77 46 f8 e4 61 d5 92 27 b6 46 3b 00 ea bd 8e 0e 6b 80 3b 0e d0 0f 72 c4 bd 34 34 13 4d ac 21 82 69 cb 35 4b c4 31 3e 42 cd 6d 6d 5d 6d 40 71 9d 47 e3 77 b8 2a 98 57 34 b2 e8 fd 92 6e fe 52 97 e6 e9 be e9 1e c9 37 7f 29 4d f3 74 df 74 b4 ff 00 8b b5 bf 00 ad f5 59 be c2 3f 17 6b 7e 01 5b ea d3 7d 84 ef 59 36 cd 59 34 83 4a 2b 6b 5a c6 d5 55 49 3b 23 71 7b 18 e1 18 0d 79 1a ba de 23 06 4e 32 3e 31 5a 75 b4 fc 5d ad f8 05 6f ab 4d f6 12 7e 2e d6 fc 02 b7 d5 66 fb 09 2c 52 82 d0 a7 4e 2e 51 62 da f7 7b fa c9 bf c2 c8 9a b4 9c 67 2b fc 5b 75 38 fc a7 d4 54 3c 74 8e 4d b1 c5 1f 71 e5 a5 f9 b5 da f0 3b 6d 7d 35 ae 8a 39 18 59 23 9b 34 d2 31 e0 b5 e0 cf Data Ascii: 6V=0oUI$9WYI^@s"wFa'F;k;r44M!i5K1>Bmm]m@qGw*W4nR7)MttY?k~[}Y6Y4J+kZUI;#q{y#N2>1Zu]oM~.f,RN.Qb{g+[u8T<tMq;m}59Y#41

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49806	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:37 UTC	379	OUT	GET /wp-content/uploads/2024/05/12022.jpeg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:37 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:37 GMT Content-Type: image/jpeg Content-Length: 65787 Connection: close last-modified: Mon, 27 May 2024 11:49:25 GMT etag: "66547345-100fb" expires: Fri, 02 Aug 2024 18:49:35 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 100202 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JC7gGMapKphHXWOO2b6r1WIHHKq2Xa87u7gXkxV8lrjV%2BYpHPiRCQGevD7y01SF5hZxN%2FYY4xU2Z8%2FwwA0VCW3kYbofKyYzYt2ldaIABEwwnVHemGKjZ2wM2GFCVai2BsF7HMx8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc3aa32436d-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:37 UTC	592	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 09 06 07 08 07 06 09 08 08 08 0a 0a 09 0b 0e 17 0f 0e 0d 0d 0e 1c 14 15 11 17 22 1e 23 23 21 1e 20 20 25 2a 35 2d 25 27 32 28 20 20 2e 3f 2f 32 37 39 3c 3c 3c 24 2d 42 46 41 3a 46 35 3b 3c 39 ff db 00 43 01 0a 0a 0a 0e 0c 0e 1b 0f 0f 1b 39 26 20 26 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 39 ff c2 00 11 08 03 32 05 dc 03 01 11 00 02 11 01 03 11 01 ff c4 00 1c 00 01 00 02 02 03 01 00 00 00 00 00 00 00 00 00 00 00 01 03 02 07 04 05 06 08 ff c4 00 1b 01 01 01 00 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 05 06 04 03 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 dc 60 00 00 00 Data Ascii: JFIFC"##! %*5-%'2( .?/279<<<$-BFA:F5;<9C9& &999999999999999999999999999999999999999999999999992`
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 65 e7 e2 61 e9 ef be fa 9c 17 ce 79 f7 57 5f 97 ab f5 68 3c c7 97 7b dd 7d f5 9e 9b d3 a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e 24 ba 23 cf b6 ee fe 3b 6e eb d9 cb 7b 99 ea e8 fe 1b 5c 65 bf 2f 97 2b 2f 3c 9d 57 cb df 9d c7 d8 fb 39 bf 29 e4 df fa cf 5e 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 1a e7 e7 ea bf e1 b7 f4 9e ae 7f bc b0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: eayW_h<{}$#;n{\e/+/<W9)^
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 03 50 76 bc 97 5f e9 f8 00 06 d4 e4 3a 7e ef c1 ed 00 08 b3 43 7e 87 c3 7b 3d 1e df 63 f2 fd 18 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 3b db f2 3c ef 3f db cc 6d b5 de c7 47 b5 e9 3d fe 3f 5d a5 da f8 4e 87 4b b7 b8 be ab 52 f6 5c be d0 e4 ba 5e d7 c9 e9 d6 fd 4f 3c 8f 3f b2 f0 72 fe 3f 5e d7 c7 ea e3 7d 7e 5e 7f 67 e0 f4 9a ad 8f 4d ee f2 6c 8e 5f a1 f4 fa 9d 98 03 5d 74 fc ff 00 9c d9 eb 77 47 0b d9 00 07 13 ed f1 d6 7d 5f 39 db 78 bd 54 7d 31 f4 1a df 76 af eb 79 9c 68 64 b3 26 f7 fc f3 b9 f1 7b dd 37 80 e8 f4 5c ff 00 3f df ad f5 79 b6 07 37 be f0 dd 06 96 bc b1 ab 3c 79 3f 2f a4 c6 ef e0 7b 4f 25 ba d4 eb 5e a3 9e f7 fc ee f7 a0 d8 f8 38 ff 00 5c 3d 16 af df e4 b7 5a bf 63 a3 db f9 8d b6 b2 dc 6e da e3 3a c0 00 00 00 00 Data Ascii: Pv_:~C~{=c;<?mG=?]NKR\^O<?r?^}~^gMl_]twG}_9xT}1vyhd&{7\?y7<y?/{O%^8\=Zcn:
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 00 00 00 00 d6 9d 57 37 e4 77 5a 8d f5 f9 d7 79 16 6a ce bf 97 e8 36 3e 2f 61 a4 db 0f 27 b8 d5 fa 6d 56 c3 63 f3 1d 16 86 fd 0f 86 f6 7a 3d be c7 e5 fa 3d 2d dd 71 c3 d3 ea b6 43 c4 ef b4 bb 17 98 e8 72 97 5a f5 5c ee ea e0 fb 0c 6c d2 fd df 1f b5 f8 ee a3 d2 6a f6 5a a3 b1 e5 7a 4f 77 93 78 f0 1d a4 a8 e9 bd de 3f 29 b8 d5 f4 be ef 1f 47 b2 f0 fb fe 6b 7b ee f9 ed ee 9a ee 78 fe 47 cb e9 b7 78 be b3 a0 d8 f8 35 27 69 ca 6d 1e 47 a7 f5 3a 8d 9e ad eb b9 8f 3f b2 f0 6f 3f cf bb 68 a0 34 ef 6f c8 ec 2e 6b 7f ab fa de 67 d8 e8 f6 fd 4f b7 ca 07 1f e9 87 4b ee f1 7b de 77 79 ee b9 fd e6 be e9 34 1c 2f 47 c2 2b cc ed 35 dd 97 97 d1 c9 f9 7d 33 99 51 9f cf ac f5 f9 f7 87 01 da 4a 80 35 d7 4f cf f9 cd 9e b7 74 70 bd 90 00 78 2e 8b 45 d1 6c 3c 5e 7f 67 af f4 3a Data Ascii: W7wZyj6>/a'mVcz==-qCrZ\ljZzOwx?)Gk{xGx5'imG:?o?h4o.kgOK{wy4/G+5}3QJ5Otpx.El<^g:
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: f7 7a 47 bd e3 3d 0e b7 df dc f8 7d 7a fb a4 d1 73 fc ff 00 7a f2 c6 8c f0 a7 eb f3 d8 9c c7 41 e6 36 da ef 6b a1 dc f8 5e 8b 46 07 07 ed f0 a7 e9 8f 69 e5 f4 80 3d df 3b bc f2 9b 7d 5f 6d e4 f4 f8 1e 8f 45 b9 78 5e c3 57 f5 dc d5 98 5d 81 ce 6f 35 3f 63 cb ec 8e 5b a3 d7 1d 47 3f b5 39 0e 9b 89 f6 f9 79 bd a6 bb 6a 72 1d 38 8a f2 bb 7d 5f 51 ed f2 77 da ff 00 6e a7 ec 79 8d d1 c2 f6 1d 9f 93 d3 e4 f7 3a 9d 73 d3 e8 37 a7 e7 bd b6 88 fd 13 87 4b 91 47 d3 e7 b0 79 ad ff 00 41 b1 f0 e3 71 db 5c 6f 56 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 56 58 61 96 3c 8f 9f d4 01 c3 fb 7c 78 bf 6f 9f 67 e5 f4 67 8e 43 0c b1 ea fd 7e 6e cf c9 e9 b3 1c 87 5f e9 f3 d7 96 3d 9f 93 d3 2b e3 37 9a 7f 19 bd d3 ec 8e 5b a2 8b 3c a6 e3 57 Data Ascii: zG=}zszA6k^Fi=;}_mEx^W]o5?c[G?9yjr8}_Qwny:s7KGyAq\oVVXa<\|xoggC~n_=+7[<W
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 99 90 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 07 0e 5a e1 2d 31 8a 84 00 00 00 00 00 00 00 00 92 00 00 00 49 00 00 00 00 00 00 00 00 00 00 00 00 04 90 00 06 55 6a 4d 51 8d 80 00 14 4b 2a ca 27 27 29 c8 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 8c 71 b1 ca 8c 58 1d 61 d6 57 58 75 76 70 4a 0c 40 20 90 00 00 82 40 00 00 00 00 00 00 04 12 00 14 80 00 00 00 00 00 00 00 00 00 00 00 64 73 28 70 a2 00 05 87 2c ec 0e d2 5e c4 ed a3 96 b6 59 7e 53 9d 66 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2a 38 18 de 3e 37 Data Ascii: Z-1IUjMQK'')qXaWXuvpJ@ @ds(p,^Y~Sf@8>7
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 73 8d 35 6f 7c 9d e4 bc 03 65 26 97 ad 27 68 ed 4f b0 31 9c 73 cf 1e 9c 1e 70 f9 47 2b 88 36 26 37 77 e3 7b 5c f1 e6 d0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 04 1d 1f cf 2d 71 94 d1 d9 40 37 fe 38 ed 29 00 00 01 ae 6e 5e d6 63 c7 35 c5 cb d2 25 47 9f 5d a1 31 ec 40 00 00 01 e5 57 57 65 7c 75 bd 69 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 2e 3b 93 dc 49 b5 71 9d b5 00 20 d2 b6 f3 ce 74 77 47 a4 3b 14 a0 a1 7c c2 f7 09 df 1e 6c e8 49 39 27 a3 2b 3b 42 d0 0f 98 6d f1 54 3d 04 bb ff 00 0b e9 32 76 59 62 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 c6 3a 8f 9e 7a 57 2c 75 a6 50 66 7d 77 86 1d 98 00 00 00 00 00 00 00 00 00 00 12 40 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 40 02 Data Ascii: s5o\|e&'hO1spG+6&7w{\-q@78)n^c5%G]1@WWe\|uiX.;Iq twG;\|lI9'+;BmT=2vYb:zW,uPf}w@@
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: ad d7 f5 fe 7b d9 ce 75 9f 7d 60 1d cf 8b a1 f4 9a fe b3 e3 ec af 56 0f 7d 2e fc c2 f3 b3 9c db 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 d7 63 97 9f 4f 9a 32 9c 20 6e cc 66 e5 98 f1 fe 98 6a ce cb 9a f7 bc d6 ef be d7 7b 7c c6 df 5d ad ba de 7b d0 6b bd dc 1f 47 c7 1c 5b 83 85 ea 94 00 00 00 00 00 00 00 00 01 c0 3b 02 08 3a d5 e7 a5 87 08 e6 94 15 1d 7a f6 c9 c2 5b 52 d3 92 71 4b 0c 0c 8b ce 31 42 f2 13 13 8e bc 2a ed a4 e0 ac 1d 89 75 00 00 02 62 48 a0 04 a8 09 14 04 a8 03 ca ec b8 ce b7 d3 aa 17 e3 f7 f5 1e 1e 9b cf 7a f9 fe 0f d7 c4 07 79 e2 e8 7d 17 87 a7 f8 fb 2b d5 83 61 cb bf 31 bc ac a7 32 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 75 b8 e5 e6 e3 e6 dc f1 e1 03 76 63 37 Data Ascii: {u}`V}.cO2 nfj{\|]{kG[;:z[RqK1B*ubHzy}+a12uvc7
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: a8 95 93 13 02 cb 73 58 4c 62 cb 72 2b 5b 68 63 19 55 71 84 5f 5f 30 7b be bd 75 0f 73 2e fc c2 f6 59 ce 75 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ea f0 cb c9 1f 3b e7 8f 0c 1b 4b c9 f1 d9 9e 4f 95 52 4d 66 00 00 ae 26 b3 00 a8 b4 84 18 03 35 1c 56 3c 96 55 a5 80 0a a5 33 b6 89 8f 26 e4 08 00 a8 b4 a2 4c ed 93 3a 00 00 00 92 69 02 68 42 e1 26 46 56 c2 61 2d b9 0b 5c 98 92 5d 6c c6 35 9a d7 26 76 e4 4a c9 89 52 72 2d 12 4a aa 62 56 6c ae 51 75 c8 49 25 71 65 2d 19 00 57 02 24 f9 97 df f6 eb a8 7b 99 77 e6 17 b2 ce 73 ac 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 57 86 5e 48 f9 df 3c 78 60 da 5e 4f 8e cc f2 7c 80 84 28 03 14 a6 32 2e a0 2a 2d 04 24 54 c0 2d 29 7a d4 99 80 57 66 Data Ascii: sXLbr+[hcUq__0{us.Yu;KORMf&5V<U3&L:ihB&FVa-\]l5&vJRr-JbVlQuI%qe-W${wsW^H<x`^O\|(2.*-$T-)zWf
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: a0 62 0b 2e 58 a6 6b 5c 92 5b 6c db 20 ae 24 ce a4 c6 3e 61 f7 7d 7a ea 1e e6 5d f9 85 ec b3 9c eb 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0e bb 1b 86 17 c9 64 f9 df 3c 78 60 da 5e 3f 96 cd f1 fc 78 c5 e2 b2 10 aa 8b 2d 00 12 99 2e b4 41 09 89 89 06 65 80 a4 b1 00 1c 64 b6 db 2a 99 2d b4 53 25 b6 90 00 a4 0a 8a d2 02 f2 ea 54 00 02 90 a9 00 ae 48 5b aa 56 2a b8 90 4a 92 db 94 95 49 75 a2 50 b2 28 0c 82 ca c8 2b 24 17 5c aa 92 ec aa 20 ce 86 11 0b 98 33 ac 04 7c c5 ee fa f5 d4 3d cc bb f3 0b d9 67 39 d6 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1d 6e 36 ac 72 f2 b6 7c ef 9e 3c 30 6c ff 00 1f c7 67 78 fe 70 99 ad 29 91 62 d0 96 db 95 00 42 e1 24 19 aa c0 05 12 67 56 18 95 96 90 80 60 Data Ascii: b.Xk\[l $>a}z]d<x`^?x-.Aed-S%TH[VJIuP(+$\ 3\|=g9n6r\|<0lgxp)bB$gV`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49805	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:37 UTC	659	OUT	GET /wp-content/uploads/2024/05/so-verwalten-und-loschen-sie-ihr-telegram-konto.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:37 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:37 GMT Content-Type: image/jpeg Content-Length: 52284 Connection: close last-modified: Sun, 12 May 2024 01:51:43 GMT etag: "664020af-cc3c" expires: Fri, 02 Aug 2024 22:39:34 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 86403 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZF%2FgUcxe59BxlIJwpD9kWHZmjC3XZm5JdhsMLn7apgDHBxXSw5EMa4q6XxVCjPxB%2FoHBuLgXo5J0w4mZDf61S4zoPEdWg8f01IoUz9U7U%2BO64BWzwquSwdajp7uU1ckjajoGeRI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc3bc84434b-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:37 UTC	594	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 01 03 05 06 07 02 08 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 05 03 04 06 02 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ce 0e d3 e7 80 00 00 00 00 00 00 00 00 Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqw8"5
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: ba 73 51 d2 ac 73 cb 50 e8 f7 b9 95 d3 a4 53 9c dc 98 e8 52 74 3c a6 5c 1b ac cd 3a 56 de 86 e3 77 5f c9 ed d7 cf 5b b9 97 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 87 98 7e b5 fc 3b 1e b0 f6 74 aa 8e 87 39 aa e3 d5 96 d5 a5 ed bf 1e 4d 29 d7 72 67 0f 77 71 c2 1d dc 70 87 77 1c 21 dd fc 9c 29 99 c3 00 01 59 31 44 b4 41 2d 10 4b 44 12 d1 04 a8 d4 00 00 32 e6 21 dd 7d 1c 21 dd c7 08 77 71 c2 1d dc 70 87 71 c5 9c 8a bb b6 9e 48 da f4 56 4c 7d 67 25 cb f7 7b 2a ad de 7e a1 b1 5b 73 f9 17 8f 7b 1a a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: sQsPSRt<\:Vw_[~;t9M)rgwqpw!)Y1DA-KD2!}!wqpqHVL}g%{*~[s{
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 9f d3 7c fa 99 f3 8f 69 e7 9b 1a bc ee 2e 6b 1f 8b 2f 6b ed ff 00 32 7d 37 ee 03 d6 30 00 00 00 00 00 06 9d b8 e9 c7 c8 32 a2 ca 88 e9 fb 06 03 3f d0 73 39 eb b6 ae d9 52 04 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 1e fc 18 8d 77 62 d7 ab ae 79 4c 49 71 39 de a7 eb 2d f7 42 df 64 09 00 00 00 00 00 00 7c d5 f4 af 00 f1 b1 c8 2b e6 66 0b 1e cb be 53 cf 41 ce c8 c5 64 3d f9 60 33 f1 e4 63 c9 62 cf bb 9b 7a ff 00 3a e0 37 ee 77 41 6d bf fd 4b f3 77 d2 33 01 ef 5c 00 00 00 00 00 01 a7 6e 3a 71 f2 0c a8 b2 a2 3a 8e 7b 03 9e bf e6 73 d7 6d 5d b3 a4 09 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \|i.k/k2}702?s9RwbyLIq9-Bd\|+fSAd=`3cbz:7wAmKw3\n:q:{sm]
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 57 6c 44 e1 f1 19 18 15 97 9c 8a 24 b8 94 1d 2f d6 5b ee 85 be c8 12 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 02 40 00 00 0d 3b 71 d3 8f 90 65 45 95 11 d5 b3 38 6c cd ff 00 33 9d bd 66 f5 9d 20 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b1 7e c4 4e 0b 1f 90 81 57 7f c8 62 4b 89 43 d1 7d 65 be e8 5b ec 87 a4 f9 7b 1e 1e aa 78 7b 1e 1e c7 87 b1 e1 ec 78 7b 1e 1e c7 87 b1 e1 ec 78 7b 1e 1e c7 87 b1 e1 ec 78 7b 1e 1e c7 87 b1 e1 ec 78 7b 1e 1e c7 87 b1 e1 ec 78 7b 1e 1e c7 87 Data Ascii: WlD$/[@;qeE8l3f L~NWbKC}e[{x{x{x{x{x{x{
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: d0 f4 5f 59 6f ba 16 fb 20 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 3b 71 d3 8f 90 65 45 95 11 d5 b2 78 dc 95 e7 3f 9e 97 12 5d af 3e 1e bc 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b1 7e c4 4e 0a 04 f8 35 77 fc 7e 2c a8 b4 3d 17 d6 5b ee 85 be c9 77 d4 98 98 aa e8 7b 7a db db 41 f7 b3 83 7b 25 56 6f c5 4a 44 c5 4a 11 52 84 54 a1 15 28 45 4a 11 52 84 54 a1 15 28 45 4a 11 52 84 54 a1 15 28 45 4a 11 52 84 54 a1 15 28 45 4a 11 52 84 54 a1 15 28 44 b5 90 8e 47 d3 b7 1d 3a 5f 20 ca 8b 2a 23 ac e4 31 59 2b de 7b 61 97 1a 4d a5 00 7a f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: _Yo H;qeEx?]>~N5w~,=[w{zA{%VoJDJRT(EJRT(EJRT(EJRT(EJRT(DG:_ *#1Y+{aMz
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 1e fc 18 8c 26 6f 09 5d 73 c8 a2 ca 8b ce f5 3f 59 6f ba 16 fb 29 37 ec 5f f3 3a c6 2b 2d 0b 91 e8 bc 79 f5 17 57 3e 63 68 d5 f6 8e 92 93 5b c2 67 70 96 9a 39 59 ba 64 b3 27 ef cc 52 7f ad 5e 51 d0 ae 40 9e 00 00 00 00 00 00 00 00 00 00 28 6b bb 1e bd b0 96 a3 48 8e 4e b5 76 d1 13 4e dc 74 ef 4f 90 65 45 95 11 d5 b3 38 6c cd ff 00 33 9e bb 6a ed 9d 20 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 ef c1 88 c1 e7 30 95 d7 3c 8a 2c a8 bc ef 53 f5 96 fb a1 6f b2 93 7e c5 ff 00 33 89 d0 ba 9a 96 cf 97 df e9 2d 4d 8c 46 5c bf a8 29 e3 36 3b Data Ascii: &o]s?Yo)7_:+-yW>ch[gp9Yd'R^Q@(kHNvNtOeE8l3j L0<,So~3-MF\)6;
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: e6 af f9 9c f5 db 37 2c e9 3d 28 98 aa 82 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1e 3d f8 31 18 3c e6 0e ba e7 91 c5 95 17 9d ea 7e b2 df 74 2d f6 52 6f d8 bf e6 74 4d 4f a9 f3 6a ce c7 70 d1 af 7b c5 b7 b0 6f b8 ac ad 97 25 8a c5 6d 4c da 1a ac 6d cc 6a 33 f3 e3 52 c7 ef a3 5e c5 ee a3 4e c9 e7 86 a5 37 60 1a 3e 5b 62 1a 0e db 91 1a 94 3d e4 6a ad a8 6a 75 da c6 9d b8 80 00 00 00 00 01 65 78 2d 7b 86 78 d3 76 3d 23 d3 e5 79 31 a4 c4 75 0c be 07 29 7b cd ec 77 31 3e b7 ea b2 95 c5 26 32 fe f0 94 89 cf fa c0 48 9f 39 9a e3 a4 64 c7 29 6b df af 3e 82 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 7,=(=1<~t-RotMOjp{o%mLmj3R^N7`>[b=jjuex-{xv=#y1u){w1>&2H9d)k>
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 55 41 55 05 54 15 50 57 17 93 b3 8f 2c a9 da fe 6f c7 bb e3 2e 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 f7 e0 c4 60 73 d8 0a eb 9e 4d 16 54 5e 77 a9 fa cb 7d d0 b7 d9 49 bf 62 ff 00 99 30 dc e7 6e bf af b9 86 3f 36 bf 5f 61 73 5a 16 be 7c 5d 79 f7 69 74 5a 5d 16 97 45 a5 d1 69 74 5a 5d 16 97 45 a5 d1 69 74 5a 5d 16 97 45 a5 d1 69 74 5a b7 26 21 84 d0 36 ad 1a ce 9b c0 e8 f9 30 00 00 00 00 00 00 00 00 02 66 d5 af b5 a4 ba c5 cd 3b 0e 46 9d 06 ca 9c 3d 79 00 00 31 b9 58 9e 35 b6 f3 be ad 5d cf ae 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: UAUTPW,o.x`sMT^w}Ib0n?6_asZ\|]yitZ]EitZ]EitZ]EitZ&!60f;F=y1X5]
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: a4 69 20 00 00 f3 ea 86 07 9b 74 fe 6f bb 5d 86 1d 3f 18 00 00 4b da f4 96 1d 9e bf 9b e0 b2 2b ad bb 93 95 e5 b4 ac 37 ef 3c f3 56 c9 8b 6b d2 68 ba e7 47 41 89 f1 be 1c c7 66 18 76 00 00 0a 70 7e c5 c7 2f 79 90 b7 a1 00 00 00 03 1f 98 c3 e6 f0 6d 4b ad 2b 9f 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 8f 7e 0c 46 b3 b3 6b 15 d7 3c ba 2c a8 bc ef 53 f5 96 fb a1 6f b2 93 7e c5 ff 00 33 ac 5f b3 0f 97 bd ce 62 ad e2 7c 7b ce ed 1a c6 cf 71 5b 83 d5 77 9c 15 9e 8e 8f b6 4c 90 68 d9 3d a6 21 ac 65 f3 32 0f 1a 1f 47 d7 4c 7c 5d e7 10 43 c4 6e b0 4c 5e 17 79 1a d4 5d 92 01 94 d8 a0 ce 00 00 00 31 bc f7 a4 69 39 30 e8 c3 b0 e0 40 00 00 00 Data Ascii: i to]?K+7<VkhGAfvp~/ymK+X~Fk<,So~3_b\|{q[wLh=!e2GL\|]CnL^y]1i90@
2024-07-04 22:39:37 UTC	1369	IN	Data Raw: 0a c4 f3 23 0e cd 33 14 93 ef c2 a6 4c 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 6b 1f 95 b5 e7 de 9d 85 df b0 fa 16 bc d3 5e ea d0 2a ee f9 93 78 c4 6a ed eb cc b7 9f 1e f1 6c 9f 94 e3 99 1f 46 31 93 23 18 c9 8c 63 26 31 8c 98 c6 32 63 18 c9 8c 63 26 31 8c 98 c6 32 63 18 c9 8c 63 26 31 8c 98 c6 32 63 18 c9 8c 63 26 31 8c 98 c6 32 63 18 c9 8c f7 4a e2 d3 ec a9 fb 03 0b 99 bc e6 aa a3 de 3a a8 2a a0 aa 82 aa 0a a8 2a a0 aa 82 aa 0a a8 2a a4 6f 3e af c3 f7 93 c5 b1 63 27 ea ee 5c 2a 9e f1 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: #3L k^xjlF1#c&12cc&12cc&12cc&12cJ:*o>c'\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49808	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:37 UTC	630	OUT	GET /wp-content/uploads/2024/05/maxresdefault-81-1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:38 UTC	786	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:38 GMT Content-Type: image/jpeg Content-Length: 103129 Connection: close last-modified: Mon, 27 May 2024 12:39:23 GMT etag: "66547efb-192d9" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609580 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DordgVixQ%2FFbRv%2B1huE2T3LfKKW%2BlNa6qJAY60Pu8e7rCBMXP%2F9pjPa2gko%2B2OKC9Z1bLY1WMQhhjppJG9FC6qyBDJkts5vkEPO8Hvy%2BfXVT3FWvY16Bqn4%2FD1Gew870AXoqwVU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc6ccf8c3f5-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:38 UTC	583	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 09 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0f 0f 10 12 15 12 15 12 12 15 15 15 15 15 12 12 15 15 15 15 15 15 15 12 12 15 15 15 15 15 12 15 15 12 12 15 15 15 12 15 12 15 15 12 15 15 12 12 15 15 15 15 15 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 02 01 03 05 06 07 08 04 09 ff c4 00 65 10 00 01 03 02 02 04 06 06 11 0f 0a 04 05 05 01 01 01 00 02 03 04 11 05 21 06 07 12 31 08 13 41 51 61 71 14 22 32 81 91 b4 23 34 35 36 42 52 Data Ascii: JFIF"e!1AQaq"2#456BR
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 53 29 22 0c 90 13 b5 2a 66 a9 22 99 0d 64 05 28 0a c4 56 d9 2a 5a a1 01 48 83 1d 4d 90 a4 29 22 b6 c8 b2 2c a5 08 20 99 16 45 94 a1 0c 08 b2 2c a5 4a 41 91 48 4a 42 65 0e 4c 62 10 91 ea ad 95 37 85 16 34 c4 17 4b 64 e0 28 70 54 be 64 f7 84 29 48 4e 42 8b 24 49 48 a6 e0 96 ca a3 82 52 14 59 6c 58 8e 0a 2c 9e ca 08 50 92 26 53 72 84 c4 28 b2 44 d3 21 0a 6c 8b 24 3d e1 50 a6 c8 b2 10 9c 80 21 4d 91 64 c5 96 48 4c d4 ad 09 82 4c 4d 95 18 9d a9 18 9d a9 15 0e c5 55 8a 93 15 56 2b 22 8a a4 38 4c d4 a1 3b 42 9a 31 e4 33 53 a8 01 38 09 94 4c 1a 13 00 86 b5 37 5a 0a 32 01 54 68 ca fe e2 7a 7a 7d b3 6c d5 da 9b 0d 0d b1 39 f4 20 83 65 be 96 94 bf 7e 41 5d e0 a5 6b 77 0f 0a ae d6 80 13 00 82 a1 9a 3b ca 54 02 a5 02 04 02 a0 a5 28 10 c4 a8 42 10 30 42 10 81 02 10 84 Data Ascii: S)"f"d(VZHM)", E,JAHJBeLb74Kd(pTd)HNB$IHRYlX,P&Sr(D!l$=P!MdHLLMUV+"8L;B13S8L7Z2Thzz}l9 e~A]kw;T(B0B
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 32 10 85 34 56 d0 c1 4a 80 a5 48 4c 10 a7 65 48 6a 45 20 84 c4 20 04 07 12 02 90 10 1a a5 02 11 43 82 7b 20 84 89 6f 14 ca 47 a7 29 1c 12 61 91 14 15 50 04 a4 28 64 9a 79 11 42 62 12 80 a2 cb 4a 6e 50 15 47 04 b6 51 26 85 2a 9b 93 92 a0 85 19 12 45 34 29 b2 2c a0 c9 e0 84 29 b2 82 92 44 c1 0a 76 51 64 f0 21 54 84 c5 aa 2c 90 b2 30 29 9a 90 27 6a 6d 10 93 1d 3b 52 27 08 48 a7 25 46 a9 0a 00 4c 14 ca a4 ca 88 05 25 ee 6c ae 98 6d 03 9e 73 1d aa 92 29 6c a5 45 48 e9 77 64 16 45 49 48 23 16 00 73 15 52 9a 9d b1 8b 37 c2 aa a0 c2 a9 2e 24 85 21 42 2e 82 ac 92 54 22 e8 40 88 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 Data Ascii: 24VJHLeHjE C{ oG)aP(dyBbJnPGQ&*E4),)DvQd!T,0)'jm;R'H%FL%lms)lEHwdEIH#sR7.$!B.T"@B!B!B!B!B!B!B!B!B!
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 4a 54 70 4b 24 80 8b 21 09 86 40 85 0a 54 14 12 52 02 14 84 ca 2d b9 09 71 20 d8 04 c0 28 09 82 98 9b 48 60 a5 29 de 39 ca be e0 f8 5e dd a4 78 c8 72 5b 7a 0a 6a d4 49 0d 82 e1 77 b3 df bb 90 2c 81 a2 db b2 43 5a 06 43 2b 26 72 58 35 93 9e 59 2d 2a 42 80 d5 3b 29 95 64 95 17 51 62 a7 65 01 92 10 a6 c8 b2 04 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 20 15 36 45 90 01 75 05 4d 91 64 00 ae cd 53 Data Ascii: JTpK$!@TR-q (H`)9^xr[zjIw,CZC+&rX5Y-*B;)dQbeB@6E!MdSdYB@6E!MdSdYB@6E!MdSdYB@6E!MdSdYB@6E!MdSdYB@6E!MdSdYB@6E 6EuMdS
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: f7 1c ee 83 5f 56 b3 6c 90 77 f4 ef 52 d5 0a 42 0c 61 90 80 84 88 34 08 42 10 30 28 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 0a 85 25 42 06 91 0e 54 9c 15 54 a7 71 51 95 34 cb ed aa b8 48 a2 50 14 94 ae 2b 5f 38 e1 9d 45 1a aa 71 c9 37 4a 42 94 28 60 c8 68 a6 51 b2 aa 28 72 9a 62 c1 49 ca 32 4e 54 29 95 b2 2c 8b 26 50 42 68 88 a8 c9 32 14 93 10 96 58 76 ba 87 dc 2a fe aa 5f 1e a6 59 a8 58 6e bb 3c c1 c4 3a a9 7c 7a 99 63 de bf a9 9f aa cb ac f8 57 8f ac 8c 03 57 de 66 d3 75 4d Data Ascii: _VlwRBa4B0(B B B B B B B B B B B B B B B B%BTTqQ4HP+_8Eq7JB(`hQ(rbI2NT),&PBh2Xv*_YXn<:\|zcWWfuM
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 80 b6 58 5e bc 47 dc 0c 43 aa 93 c7 e9 56 6d 65 85 6b cf ce fe 21 d5 49 e3 f4 aa 8b c9 7d 44 fd 56 64 59 af ae 8f ac 8d 6f a0 07 ee 6d 37 54 de 31 32 bf 5d 63 fa 05 e6 75 37 54 de 31 32 bf 05 6d 97 a1 87 aa 8c 8b 97 f5 b2 ef 26 ea 6e 95 16 59 65 23 05 05 42 12 0d e0 2a 01 42 82 54 58 b7 86 ba 12 94 04 22 44 92 a1 48 52 98 84 42 75 28 c0 c8 b2 2c a5 08 c0 c8 b2 2c a5 08 02 2c 8b 04 26 08 c0 0a d2 99 0a 42 08 64 1a a5 0d 0a 43 53 11 16 52 13 00 a2 c8 0c 83 55 44 89 c2 42 19 08 42 64 40 29 25 40 4c 14 b0 26 c8 0a 6c a4 2b 76 27 8d d3 53 1d 99 ea 23 63 bd 2e 6e 76 5f 8a d0 4f 86 ca 32 a9 18 71 93 c2 20 a3 29 bc 45 37 dc 5c 9a aa b5 63 23 4d b0 ff 00 c2 c7 ea 6a 3f 76 9b f9 6d 87 fe 16 3f 53 51 fb a5 4f d3 28 fd a5 ef 45 8e ce b7 d8 97 b8 c9 0a 90 56 35 fc b6 Data Ascii: X^GCVmek!I}DVdYom7T12]cu7T12m&nYe#B*BTX"DHRBu(,,,&BdCSRUDBBd@)%@L&l+v'S#c.nv_O2q )E7\c#Mj?vm?SQO(EV5
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 3f 45 60 19 67 2b 21 75 41 e0 4f 8b 7a ad 86 7b 4a 9f a0 a3 f9 93 e2 fe aa e1 9e d6 a7 e8 20 0e 58 42 ea 7f e6 4f 8b 7a ad 85 fb 5a 9f a0 8f e6 4f 8b fa ab 85 fb 5a 9f a0 8c 01 cb 08 5d 4f fc c9 b1 7f 55 70 cf 6b 53 fb b4 7f 32 6c 5f d5 5c 33 da d4 fe ed 00 72 c2 17 53 ff 00 32 7c 5f d5 5c 33 da d4 fd 05 23 81 3e 2d ea b6 19 ed 6a 7e 82 00 e5 74 2e a9 fe 64 f8 b7 aa d8 67 b4 a9 fa 0a 47 02 6c 57 d5 7c 33 da 54 fd 14 01 ca c1 57 a2 aa 7c 2f 6c 91 b9 cc 7b 4d da e6 9d 97 34 f3 82 37 2e 83 d6 2f 04 fc 47 04 c2 ab b1 69 b1 3a 09 a2 a1 84 cf 24 51 36 71 23 da 1c d6 90 c2 e6 d8 1e db 97 99 73 bb 85 bc 1f f7 52 8b 69 f0 e0 1c 1f 06 6f ed 5b e9 37 d7 1a 67 71 96 15 30 96 b6 6b 0b 6d 83 7d 89 00 e4 b8 19 8e 75 95 05 a5 f5 1b 39 15 f3 32 fd ab a9 89 23 a5 8f 65 af Data Ascii: ?E`g+!uAOz{J XBOzZOZ]OUpkS2l_\3rS2\|_\3#>-j~t.dgGlW\|3TW\|/l{M47./Gi:$Q6q#sRio[7gq0km}u92#e
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 1b 34 5e db d0 07 a5 0b 18 3a c1 c2 3d 58 c2 ff 00 6f a6 fa 68 fb 21 61 1e ac 61 7f b7 d3 7d 34 0b 26 4e 85 8c 7d 90 b0 8f 56 30 bf db e9 be 9a 3e c8 58 47 ab 18 5f ed f4 df 4d 01 93 1a e1 51 e7 37 48 7f b3 df f1 91 af 96 a5 7d 2a e1 33 a6 f8 64 fa 25 8e c3 0e 29 41 34 b2 d0 b9 91 45 0d 5c 12 49 23 dd 24 61 ad 63 18 f2 5c 79 6c 39 8a f9 aa f4 0c cf 35 25 e6 94 9e c5 93 e3 22 5b a4 15 a5 75 25 e6 93 fd 8b 27 c3 89 6e a6 ae e7 41 fd 5b da fe e3 84 da 2f d6 bf c2 be f1 da 55 46 95 49 aa a2 dd 1c f6 07 08 ba a5 51 50 c8 9b b5 23 d9 1b 79 de e0 dd dd 25 59 2a 74 d7 0e 88 90 fa d8 49 1b c3 36 df f0 1a 55 33 b8 a7 0f 3a 49 77 b2 c8 5a 55 9f 9b 19 3e e5 93 20 42 c5 06 b1 30 c2 6d d9 7d f3 05 4d bc 3c 52 f6 d2 69 8e 1f 29 b3 2b a0 bf 31 2e 61 ff 00 d4 0d 50 8d ed Data Ascii: 4^:=Xoh!aa}4&N}V0>XG_MQ7H}3d%)A4E\I#$ac\yl95%"[u%'nA[/UFIQP#y%YtI6U3:IwZU> B0m}M<Ri)+1.aP
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 0b 5b 6b 67 58 98 56 1f 4b 3c 55 58 ad 04 13 16 39 a2 17 54 c4 66 27 75 84 4c 71 71 3d 16 ba ba 87 09 a3 16 f2 0d d3 69 71 34 7c a3 b7 77 59 4b 75 86 54 eb 57 07 0e 77 db e0 df d2 d3 d5 b8 78 44 4a b5 1e b2 30 89 6c 1b 88 c2 09 fe b5 93 42 07 e7 4d 1b 42 ee 6d ae e8 ee a4 e6 b3 de 79 cd ce 9d 72 e6 e5 e2 e7 8e e6 65 c4 a8 b9 5e 6a 0a f8 6a 06 d4 13 45 33 79 e2 91 af 1f e5 3e fd 97 a5 67 26 9f 14 6b 27 4e 50 78 92 c3 0b 95 3b 4a 10 9e 08 e0 9d a4 6d 28 42 30 18 27 69 1b 4a 10 8c 06 09 da 46 d2 84 23 01 82 76 91 b4 a1 08 c0 60 9d a4 6d 28 42 30 18 27 69 17 50 84 06 06 09 d8 91 34 65 51 56 26 65 95 4d d9 15 98 13 04 ac 4e b5 f3 58 67 53 09 65 65 0c 02 2c a5 48 48 91 36 42 95 28 c8 b0 c5 0b 07 d7 e7 9d dc 47 fb 9f 8f d2 ac ec 2c 1b 5f a3 fa 39 88 f5 52 7f a8 Data Ascii: [kgXVK<UX9Tf'uLqq=iq4\|wYKuTWwxDJ0lBMBmyre^jjE3y>g&k'NPx;Jm(B0'iJF#v`m(B0'iP4eQV&eMNXgSee,HH6B(G,_9R
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: c5 d9 78 2f 95 69 bd 8f 07 c5 35 71 9b 57 66 e0 9e 55 a6 f6 3c 1f 14 d5 d1 ec f7 9d 3e e3 91 da df 45 4f bd fc 8f 62 10 56 b3 d6 ae b3 59 87 ed d1 d1 96 c9 5b 6e dd e7 38 e9 ef 6b 64 45 9f 25 b9 39 17 43 71 73 0a 10 de 9b 38 fb 4b 2a b7 53 54 e9 ac e7 a7 a9 75 99 76 97 e9 6d 26 17 18 75 54 b6 7b bb 88 58 36 e6 7f 53 47 72 33 de 6c 16 96 d2 cd 71 d6 54 dd 94 60 50 c5 98 da 6d a4 9d c3 92 ef 73 6c ce a6 f8 56 b9 c4 b1 09 6a 24 7c d3 c8 65 96 43 77 bd e6 ee 71 b5 b3 3d 5e 05 e3 2e 5c 95 de af 56 b7 08 f9 31 ec e6 7a 06 9f b3 f6 f6 c9 39 2d f9 75 be 5e c5 f8 9e cc 4a be 4a 97 99 27 92 49 64 39 97 48 e2 f3 e1 76 e5 e3 72 ca 74 23 40 31 4c 6d db 18 56 1d 55 5c 41 b3 9d 14 76 85 87 99 f5 12 11 1b 0d b9 dc 16 e4 d1 ce 07 7a 43 52 d0 ea a9 30 ea 00 40 25 92 54 99 Data Ascii: x/i5qWfU<>EObVY[n8kdE%9Cqs8K*STuvm&uT{X6SGr3lqT`PmslVj$\|eCwq=^.\V1z9-u^JJ'Id9Hvrt#@1LmVU\AvzCR0@%T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49807	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:37 UTC	647	OUT	GET /wp-content/uploads/2024/05/maxresdefault-2024-05-14T065012.987.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:38 UTC	782	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:38 GMT Content-Type: image/jpeg Content-Length: 100045 Connection: close last-modified: Tue, 14 May 2024 08:34:11 GMT etag: "66432203-186cd" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609580 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=QyyG0G%2BtaxOyfI5aEFBW1XefGCTM%2Bl8fVlsvrAST6xiaA1j%2FWuKMBvdooAaElGyDw0KXjqTuIp2ciNqUlnfvXfkq%2BlJLTT%2B2yYiMSS7pTXAZnfnDpWvEHjg8kITVgE4bGxSCv28%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc6cc4d9e16-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:38 UTC	587	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 10 0d 0d 0d 0e 0d 0d 0d 0d 15 0d 0e 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0d 0f 0f 12 12 12 12 15 12 15 15 15 12 12 12 12 12 12 15 15 12 12 15 15 12 12 15 12 15 12 15 12 15 15 15 15 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 12 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 ff c4 00 4f 10 00 01 03 02 02 06 07 05 05 06 04 05 04 01 02 07 01 00 02 11 03 21 04 31 05 12 41 51 61 71 06 07 22 81 91 a1 f0 13 32 b1 c1 d1 42 52 62 82 Data Ascii: JFIF"O!1AQaq"2BRb
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 23 1d 81 1d a1 0e 90 47 68 4b 26 32 23 09 da 13 c2 94 25 b9 28 8b 94 54 dc 14 61 17 24 40 22 10 93 18 93 d4 12 81 39 20 12 4e a4 51 92 52 84 d0 a6 e4 31 05 26 84 80 52 0a 18 10 70 50 71 52 71 50 4c 84 62 53 6b 53 35 aa 70 a6 e4 09 31 09 4a 75 00 40 84 8a 78 4c 4a 92 18 ce 4c 12 4e 14 dc 86 20 91 4c 92 92 06 0a 41 45 38 28 01 10 9c 24 52 52 43 1d 24 82 75 09 8a 29 4c 9c a6 41 23 a7 05 32 48 20 78 48 27 48 04 00 c9 d3 94 c8 01 e5 20 99 38 41 0c 49 24 92 08 12 92 64 90 40 e9 c2 41 3a 08 19 38 49 29 41 03 a7 48 27 51 72 18 82 74 ca 41 02 b1 04 e9 34 27 4a 2b 62 09 d2 01 48 04 10 30 49 3c 27 50 45 c8 a9 24 9c 20 94 30 44 6b 54 40 46 a6 96 4c 68 c6 e4 0b 53 86 29 c5 d4 9a 14 5c b1 2c c1 16 a2 53 a6 a4 54 83 86 ff 00 5d ca 1b 2c 50 cc 76 52 44 f6 68 2d c4 0d 87 Data Ascii: #GhK&2#%(Ta$@"9 NQR1&RpPqRqPLbSkS5p1Ju@xLJLN LAE8($RRC$u)LA#2H xH'H 8AI$d@A:8I)AH'QrtA4'J+bH0I<'PE$ 0DkT@FLhS)\,ST],PvRDh-
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 57 35 a7 b4 9b 0b a5 8f 35 0e da 8e 90 33 92 00 27 dd e0 60 13 b1 d6 54 30 65 af 23 5c 97 6e d6 36 1c 9b 90 e4 00 5e 5f 68 6d c4 db 54 f3 5c cf 73 b2 3a 2e f7 54 eb 64 f9 7f 34 3a 2c 2f 49 d8 4f f0 d8 eb 1c cb 77 ed 00 f0 e1 de a5 8c d2 b5 33 f7 07 de 68 00 91 b9 d3 ef 0e 65 63 e3 6b b1 a2 1b 12 7f 9b 9e c0 00 8e 01 67 02 e3 aa 23 31 02 f0 78 df 2c fc 17 9d a9 8e ab 53 56 cf 63 4b 66 d0 a5 a4 51 73 13 a4 1c 08 87 6f 81 10 04 df 21 30 76 d8 aa 55 31 f7 be 67 23 7f 84 65 b7 24 3f 65 aa 0e b3 80 19 02 6f 07 30 48 17 ce dc a7 74 a0 61 9c 4c 83 3c 1c 0e b0 1b 6e 09 bc 6e 30 a8 bd cd 71 8a 5a 1b 58 2c 48 39 38 4c 65 ee bb c1 c7 55 dd d0 55 91 54 ed 82 0c 01 04 83 eb b8 ac 9a 35 0c dc 35 d7 bc 70 fc 26 01 e5 d9 57 03 c1 92 d3 61 98 88 d5 d9 91 93 06 39 73 55 c9 Data Ascii: W553'`T0e#\n6^_hmT\s:.Td4:,/IOw3heckg#1x,SVcKfQso!0vU1g#e$?eo0HtaL<nn0qZX,H98LeUUT55p&Wa9sU
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 12 86 10 ee 2d cb 68 93 ba c6 0f 89 25 5d 6e 10 7d a1 ad bb 5c 90 7f aa e4 91 c4 90 bc 9e 23 17 52 b3 bd 46 df b1 ef b0 5b 3a 8e 16 3b b4 a2 97 bb f3 30 5b 42 fe fc 9e 33 f0 19 dd 6d 60 b0 4e 89 cc 5b de d6 cb be dd ea c3 b4 78 b0 2d 23 86 b3 5e 3c 58 5a eb 71 01 30 63 44 58 46 52 01 77 99 70 2d e5 75 8a 72 3a 31 56 23 43 47 ba a3 c0 da 08 98 8e e9 9f 59 2b 38 e6 b5 9a d0 78 4d c4 cd c3 80 b1 87 40 76 40 c1 bc 4a d2 a3 87 68 6c b6 c3 57 3c cb 89 06 d6 b6 c2 24 f0 24 02 42 c7 c5 34 9b 92 64 93 24 12 20 f3 24 c8 d5 d8 6d d9 4a 86 66 7e a3 a7 30 e9 26 00 12 62 22 c2 64 dc ec ba 87 ee 9f 69 b3 20 09 d5 cc 0d f0 24 b8 4d b2 9b 58 94 47 b4 b0 c1 02 1e 7b 26 fa af 3b 41 6d cd 3a 82 60 c7 81 06 15 ef 68 26 72 3b 1d 32 41 9b 4c 66 36 49 3c 3b 30 02 7d 05 b1 99 fb Data Ascii: -h%]n}\#RF[:;0[B3m`N[x-#^<XZq0cDXFRwp-ur:1V#CGY+8xM@v@JhlW<$$B4d$ $mJf~0&b"di $MXG{&;Am:`h&r;2ALf6I<;0}
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 40 93 84 a1 48 28 21 b1 93 84 f0 90 0a 50 ad 8a 13 a7 09 e1 28 b7 18 29 00 94 27 0a 08 1c 04 e4 27 a6 14 83 14 30 48 41 59 a6 db 21 b2 9a b0 c6 9e 50 7c 55 52 66 9a 50 68 66 8b 22 b5 a9 83 51 35 4f 8e dd 83 9f 1e 0a a7 23 64 60 c8 13 ba e7 70 f5 00 71 4e 29 45 dc 66 fd c3 65 86 fe 37 3b 91 20 37 9f 89 27 21 6b 5f 60 1f 00 9a a3 f5 47 e2 39 6d 0d df 1c ad 7d a6 36 14 8e 6f 81 74 69 ae 20 6b 54 74 c3 60 13 39 de 00 cc ba 32 03 ee 83 2e 24 09 17 5c af 4c 34 e7 b2 ec 33 de 22 c0 c6 b3 8e d7 3c ec 00 0d 80 0b 6a b7 7a b5 d2 ad 3a 28 34 86 de a3 b6 67 aa 24 43 67 91 92 ec e4 ce 60 47 9a b8 97 12 4e dc dd 63 27 2b 0d cd 16 dc 3b ad e7 76 b6 d3 dc bd 28 3c f8 f7 1e c3 a3 fb 13 ad b5 7a aa d1 fd 2b 9f ec 12 ae 25 cf 71 33 ac e2 20 bb dd 11 1e eb 07 d9 6f 80 b9 ce Data Ascii: @H(!P()''0HAY!P\|URfPhf"Q5O#d`pqN)Efe7; 7'!k_`G9m}6oti kTt`92.$\L43"<jz:(4g$Cg`GNc'+;v(<z+%q3 o
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 60 94 85 90 b1 4c 90 8f 48 25 51 a9 6f 98 f6 ba 30 ab 04 15 73 12 d8 55 61 69 8b c8 c7 25 66 3d 30 ae b5 8a ab 02 bd 4c 25 93 26 02 d5 41 ac 15 cd 55 5f 10 12 a6 59 25 91 9a e0 89 49 41 c8 b4 82 b4 ce 96 65 ac 28 5a f8 66 ac 9c 1e 6b 6b 0a d5 9e ab 36 52 41 5e cb 2c 3c 68 ba e8 ab 36 cb 03 14 2e 96 93 1a ba c8 ac d6 a9 ea a7 68 52 21 5d 73 3d 8a d5 d5 57 95 6e b8 54 ea 2b 22 53 3d 42 e1 5a b4 a9 b5 54 c1 b1 68 b1 96 55 cd e6 5b 4d 64 57 70 53 2d 4a 14 9c 12 dc 6b 10 01 1a 93 14 1a d5 6a 93 2c a1 b2 63 1b 81 ad 92 af 0a c5 74 20 d4 20 90 c1 a9 42 20 6a 70 d4 5c 2c 0e 13 86 a2 6a a4 f0 8b 91 62 bb c2 ae e0 ac d4 50 63 53 a6 57 25 72 2c 6a 4e 53 21 44 85 28 56 40 a8 3d c8 95 15 4a ae 4f 1c ca db b1 17 b9 32 62 a6 02 b0 a9 8a 14 49 4e e2 a2 a4 81 04 e5 28 4e Data Ascii: `LH%Qo0sUai%f=0L%&AU_Y%IAe(Zfkk6RA^,<h6.hR!]s=WnT+"S=BZThU[MdWpS-Jkj,ct B jp\,jbPcSW%r,jNS!D(V@=JO2bIN(N
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 4d 9e cf c2 60 58 00 3a 32 c5 e3 bd 4e 69 b1 4e bb e9 3c f6 6b 37 33 60 2a 32 ed 74 1d 8e 12 d3 ba db 02 f6 17 d3 dd 1c b2 1e 59 79 af 6b b2 f1 3d 6d 15 7d 63 93 3e 61 b6 b0 5f 86 c4 34 be 19 66 bc f8 09 ad 51 78 49 ae d9 79 89 82 7d 4f 72 7a 85 74 8e 46 40 5c 14 4a 29 50 73 53 5c aa 48 18 29 3b d7 7a 21 6a 81 09 91 5b 40 1c 86 42 3b c7 af 5e 2a 05 be bd 64 ac 8b 32 ce 00 84 e4 a3 ab eb ea a4 1b 7c 92 72 7b 94 35 70 4e 08 60 23 c7 09 e1 eb e6 84 e4 d1 65 33 8d 88 26 85 22 98 84 e5 56 22 42 68 52 4c a4 81 93 c2 44 a6 94 00 c9 14 92 25 00 86 29 93 a8 94 0c 8e 5a 54 81 51 84 93 9d e0 a0 a9 80 82 d4 56 25 63 26 22 14 1c 11 a1 33 98 a1 30 68 ae 54 e9 b9 27 35 44 26 d4 52 cc a9 d3 28 0c 28 f4 ca 46 32 64 ea 31 04 85 61 85 46 a5 35 09 93 62 b2 8b 82 33 9a 86 42 Data Ascii: M`X:2NiN<k73`2tYyk=m}c>a_4fQxIy}OrztF@\J)PsS\H);z!j[@B;^d2\|r{5pN`#e3&"V"BhRLD%)ZTQV%c&"30hT'5D&R((F2d1aF5b3B
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: e7 63 86 b4 1d ed b5 40 7c 8f 25 3c 30 36 1b e4 1e 60 12 0f 1f ff 00 d5 4f 17 44 c6 b0 fe 71 ba 47 65 f1 f8 48 3b 38 2b 8a 1a 22 c8 0f d5 fb 2f 1d 83 f7 48 3e ef 8c 47 76 f5 1a e4 c5 fd e6 e7 f0 3e 67 c1 c1 2a f1 0d e6 2f c7 ec 9f cc 0e a9 dd ad 39 b4 2b 78 96 ce a9 19 91 07 9c 6e d9 ac d2 d3 fd 90 08 ae e3 20 11 91 90 7b f2 3d ce 83 c4 14 56 bf 22 44 02 35 1f c0 83 1e 4e 11 6f c3 bc aa b8 66 c7 66 67 22 38 82 09 f3 13 e4 ac b1 92 73 b3 c7 83 85 89 ef b3 bb 92 b2 50 f5 98 47 6b 68 b1 e3 f2 82 2d dc 11 58 db 41 ca f1 7b c6 ed c6 4d ee 9a 8b e4 03 be c7 ba 41 6f 71 db b8 04 4a 10 d7 46 cc c1 db 1f a7 d1 25 c6 b5 ca b8 2a a4 4e f6 9e e2 3b f6 85 76 a8 d6 6e b3 62 f9 de 20 f1 dd 70 6e 81 a4 b0 a5 a4 3f b8 ec 91 c7 91 9f 14 f4 eb 6a 18 37 6b ad ce 72 9e 20 f9 Data Ascii: c@\|%<06`ODqGeH;8+"/H>Gv>g/9+xn {=V"D5Noffg"8sPGkh-XA{MAoqJF%N;vnb pn?j7kr
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 49 bd 99 fb de 5f a2 7b 0b 72 35 29 ba 33 f2 23 e6 aa 56 a6 ed fb f7 fd 4a b6 69 1f bd f0 fa 2a d5 9a 72 d6 33 f9 7e 4a 1a 04 52 aa c3 3f a8 fa 5d 40 b0 ff 00 63 1e a1 4e bb 4f f7 b7 c8 a1 df 79 f2 3e 69 1a 1d 33 c3 3a 63 a2 ce 07 1b ae 04 61 ab 38 6b 4e 4d f6 a6 e2 73 03 5c 1e f8 de ba bd 1a e7 12 e6 13 77 82 e0 48 1d a2 04 eb 77 81 af 3f 8c ed 95 d1 75 81 a1 46 22 91 6b a0 90 23 2f b2 60 7c 62 fb 09 9d 8b 82 e8 4e 36 a1 1e c5 e7 f8 d8 77 ea c9 b1 23 3a 6e 19 c0 70 00 ed b8 13 23 39 79 c6 fc 48 4e ce c7 37 a7 30 a6 8d 47 5b 23 3c 0b 0c 13 dd 04 fa 0b 84 d3 b8 3d 57 3b 56 d1 f0 f9 d8 af 69 e9 ee 10 38 0a 81 a0 c8 91 19 10 d9 0e e5 b6 dc 39 13 e6 3a 73 0f 91 3b 3b 27 8b 7e c9 be dd 5b 7e 55 7d 29 f1 2a ab 13 98 a6 d9 f5 ba 08 3e 16 ee 1b 95 aa 66 44 77 8b Data Ascii: I_{r5)3#VJir3~JR?]@cNOy>i3:ca8kNMs\wHw?uF"k#/`\|bN6w#:np#9yHN70G[#<=W;Vi89:s;;'~[~U})>fDw
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 49 c8 b4 a9 a6 d0 4d 47 a7 4d 59 a5 49 12 8d 15 71 94 e1 53 29 17 42 98 2a 74 80 43 ac f4 5a ae 54 ea 22 28 69 3b 10 72 1b dc a5 51 c8 26 ea d4 8a 24 c4 88 c6 29 52 a4 ac 06 21 b0 8c 48 06 24 42 9b ca 03 9c a1 66 4b c8 4e 7a 86 b2 89 29 26 b1 53 12 40 24 9d 4d c4 11 51 4e 4a 70 d4 5c 06 01 48 35 38 6a 98 08 b8 58 66 84 9c 9d 31 50 88 64 4a 72 13 86 a4 54 37 62 06 4e 13 02 9c 26 4e e4 31 27 0a 2a 41 02 8e 9c 26 09 c2 05 1d 3c 26 0a 4a 18 a3 80 9c 04 cd 52 6a 86 23 63 a4 d0 9d 38 50 02 84 4a 69 8b 51 28 85 5c 9e 45 d0 8e 61 69 b5 59 a2 14 1a c5 61 8d 59 a7 23 a7 46 9d 89 b0 22 10 98 04 60 16 76 cd d1 88 98 8c c0 a0 c0 8a c6 2a e4 cd 10 40 b1 06 07 20 7e 10 07 89 85 e7 bd 6b e3 b5 69 b1 bb 5c e7 54 76 57 d5 0d 0d ff 00 4c 7f 52 f4 0d 20 60 18 cf 55 c4 7f 35 Data Ascii: IMGMYIqS)BtCZT"(i;rQ&$)R!H$BfKNz)&S@$MQNJp\H58jXf1PdJrT7bN&N1'A&<&JRj#c8PJiQ(\EaiYaY#F"`v*@ ~ki\TvWLR `U5

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49809	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:37 UTC	630	OUT	GET /wp-content/uploads/2024/05/maxresdefault-82-1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:38 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:38 GMT Content-Type: image/jpeg Content-Length: 100745 Connection: close last-modified: Mon, 27 May 2024 12:42:33 GMT etag: "66547fb9-18989" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609580 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DsL6gIyTQ3F5zx8PqgRc762KaBDNYd8KT3VSEVpAUX%2BTSLHqL8wUte88GnE4zS24aHAmCLTnv771s%2B4Igo%2BrwQCmp5voluciA%2F%2Bt0lRLc%2FDHhY3S11l7VW4EeOl6CGbnivJ5qxM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc6dad578e7-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:38 UTC	585	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0a 0a 0a 0a 0a 0a 08 08 08 08 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 09 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0f 0f 0f 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 15 15 12 12 12 15 12 15 12 12 12 15 12 12 15 12 12 15 12 15 12 15 15 15 15 15 15 15 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 01 06 07 08 09 ff c4 00 6a 10 00 01 03 02 03 03 07 04 09 0b 0f 09 05 06 06 03 01 00 02 03 04 11 05 12 21 06 31 41 07 08 13 22 51 61 71 14 32 81 91 15 42 52 74 a1 b1 c1 Data Ascii: JFIF"j!1A"Qaq2BRt
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: aa d9 aa 46 19 1a 7b a1 ee 48 61 4f 34 a1 6c 08 6c 3d c1 74 7d 92 00 46 01 1f 4b 15 cf e1 61 71 b0 17 5b 36 0f 54 f8 c5 b5 3c 37 a8 6c 28 93 b1 f6 02 f6 f1 17 5b ae 0b 81 35 f1 b4 eb b9 73 da 87 3c ba e4 1e d5 d1 76 63 13 77 46 d1 63 60 14 a2 49 a7 67 80 06 c1 53 54 30 46 eb 7a d6 cb ec 83 8a d7 31 78 1c f7 f8 ad 31 92 ac ae c5 b1 56 b4 5b 40 56 b3 51 84 49 38 73 80 3d a3 bd 6c f3 60 39 8e ab 62 c3 68 c4 4c 22 dc 3b 17 3c d1 29 e4 e2 ed 91 d0 3a c6 f6 1e b5 b3 60 b8 e8 24 0b 5f e5 4d 6d be 1c 7a 4c d6 df fa 13 3b 29 86 5c dd c2 d6 ee f1 48 36 89 3a 66 1d f5 c6 6e e0 b5 1d a7 a0 b3 c6 8b 74 c3 5a 18 c1 6d 56 b3 b5 12 92 f1 a2 d4 1a 56 3b 4f 96 dd e9 9c 35 9a 2b 5d a5 68 b3 6c 98 a2 86 cc bf 6a 86 c0 c3 e2 ba c0 81 48 2b 1b f7 6a ab 9c 05 c8 86 b1 be 94 ed Data Ascii: F{HaO4ll=t}FKaq[6T<7l([5s<vcwFc`IgST0Fz1x1V[@VQI8s=l`9bhL";<):`$_MmzL;)\H6:fntZmVV;O5+]hljH+j
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 8d 6b 15 15 ce 90 92 74 d5 48 28 b6 85 a6 cd be 87 f4 85 2f 02 a7 ce dd 7d 09 cc 55 81 e0 5f 7d d4 9c 2f 2c 60 6a 3c 15 40 db f0 bd 75 0b 2c a4 0d dc 2e 55 a1 90 11 bc 24 82 05 8a c6 cc f8 1b 41 12 f0 ac 3f 40 48 0a d9 d4 96 1b 82 8d 43 5a c6 81 72 14 ef 2a 61 1b c0 5c 1e 8e 6d 9d 8a c8 a4 45 64 04 1b f0 55 75 d0 0e 90 58 2b c9 2b a3 b5 ae 15 53 c7 d7 41 bd c2 ed d3 e6 0b 0c e4 b7 0d f0 4e 86 a9 c3 4d f6 4e 3a a8 f6 27 e0 86 ed bd 93 34 a4 39 d6 23 71 5b bb 0e 66 cc 09 ce fe 25 61 d2 91 ad b5 5b 3d 3e 1c c2 dc d6 1a 0b ee 5a d6 3d 5d 1b 1c 01 d1 67 bd 67 06 7b 86 5f 3d f8 28 f5 da b4 9b 22 8e b6 37 ba c0 ab 2a c9 a2 63 48 71 1e 2b 74 81 ad 61 74 ee 2f d0 7a 7d 2b 68 c5 29 87 44 6e 15 3c 18 e4 2c 75 87 05 22 b7 68 a3 91 b9 41 26 fb 82 91 83 48 af 87 ac 42 Data Ascii: ktH(/}U_}/,`j<@u,.U$A?@HCZra\mEdUuX++SANMN:'49#q[f%a[=>Z=]gg{_=("7cHq+tat/z}+h)Dn<,u"hA&HB
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 05 bd 0a c0 e7 b8 fb 1e c6 de d6 5a 8b b1 39 01 3d 6f 89 74 5d b3 60 21 ba 68 b4 f7 61 0d 75 ec 3e 05 18 24 82 cc 6a 51 a6 62 af 70 9a b7 3f 79 2a b4 e0 5f 4b 2b 4c 13 0e 73 78 84 25 3c 16 cc 7f 79 50 f1 1a b7 b0 68 e2 a7 88 40 e3 aa 54 94 79 c5 ad 7b fc 0a 70 8a b9 33 54 83 14 91 cf d4 d9 6e 74 12 b9 cc 04 6f 01 27 0f d8 cb f5 ad bb e1 f8 54 d8 29 0c 72 64 b5 ac b3 71 27 2c b9 c0 2b 8f 98 f0 15 bc 74 0c 06 f6 ef d1 41 a1 c3 5a 08 2b 60 a5 84 6e 54 75 36 4a 90 ec 53 00 c2 3d 4b 43 da 4c 21 f2 3e e0 78 2d f1 d4 c1 46 92 1b 2e 49 d3 25 2c e4 ab c1 cb db 87 cb 1b b7 6a 38 85 57 8f be a1 e6 c6 e1 75 2a e8 19 9a ee d2 ea 3b a8 21 78 20 01 7f 05 d6 a4 d1 58 c5 36 71 7f 25 9a fa 66 57 d8 5e 15 35 83 ac 7b 56 ff 00 1e 06 d0 ef 30 11 7d ea e0 d3 b4 36 c1 a1 3d 2a Data Ascii: Z9=ot]`!hau>$jQbp?y_K+Lsx%<yPh@Ty{p3Tnto'T)rdq',+tAZ+`nTu6JS=KCL!>x-F.I%,j8Wu;!x X6q%fW^5{V0}6=*
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 6a 48 0a 6d 3b 47 62 62 a6 9d a7 82 ac 8a be 4a 2a dc 49 c0 2d 2b 68 6a a4 07 30 26 db f4 5d 06 a7 0b 0e e0 a3 e2 18 23 4b 08 00 5e dd 8a ac 98 f6 35 0d 95 da ab 1c af 3a f0 24 fe 85 bf 50 e3 6d 92 c0 10 57 26 c6 f0 f3 13 cd 86 97 e0 b6 9d 89 71 75 8f 61 08 8b 1d 31 86 e0 12 16 b7 8e 36 ef f4 ad 9e 99 bd 50 a8 71 66 f5 fd 2a c9 83 46 da f8 b4 1a 7d 34 55 38 64 37 1f 4e d2 b6 1d b6 68 b0 fa 76 2a 7c 23 cd fa 76 95 25 39 6c c9 8e dd eb 21 dd d6 52 ba 1b f0 d1 38 da 3e cf 89 53 0c ba 2b da 2e 55 a6 1e 3a c1 23 c9 08 de 14 9a 28 49 70 b0 2a 79 24 de 30 a6 7d 6f d0 a8 ab 20 fa e8 f1 5b 16 15 a3 35 16 36 54 95 47 eb a0 77 a6 18 2c 99 0d 80 f0 4d be b3 26 fb 85 67 03 46 51 a2 8d 5f 48 1f c1 4a c9 05 77 b3 9a ef 4a 18 b3 4f 0f 85 45 18 36 aa 7d 1e 16 d0 6e 7e 25 Data Ascii: jHm;GbbJI-+hj0&]#K^5:$PmW&qua16PqfF}4U8d7Nhv\|#v%9l!R8>S+.U:#(Ipy$0}o [56TGw,M&gFQ_HJwJOE6}n~%
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: ba 2a 62 e3 6d dd ea 65 26 18 5c 33 11 eb 4b 73 72 9b 0e 0a e8 c1 cd b3 68 d9 f8 23 65 80 00 13 f4 d5 6c 15 b0 07 b6 c3 e0 5a 16 1d 2b c1 cc 49 d7 72 dc b0 6a bc c0 0b dd 56 6c da 02 60 c2 2d c1 5e 50 60 c3 79 1e 84 8e c5 6d 49 25 db 65 c9 39 3c 9a 25 91 31 e1 51 9d e0 15 71 41 4a 1b a0 00 05 1a 9c ab 28 9c 00 55 53 6c d5 c7 06 bf 8e c6 33 0e db fc ca ef 07 a6 ea 0f a7 12 a8 71 a9 87 48 2f b9 6c 78 5d 73 03 06 a0 ae c8 4b 26 12 ee 4d 6c 4b 22 99 47 18 9b 2f 6d 15 ad 3c 80 8d 16 99 46 72 5c 11 99 4e b1 2d 15 fd aa 91 51 56 d6 6f 20 26 06 2b 1f 6d fd 29 dc ac 64 6a 5b 4d 80 0d 4e 5b 92 a2 6c e5 28 8c fa 42 db 31 3a a6 bc 2a 58 cb 03 af b9 46 30 68 6d 2d 7f 54 68 b5 ec 50 f5 bd 69 ea 9c 5d a0 01 7d 15 65 6d 7b 5d 62 2e a4 86 8d 67 6d e5 d0 7d 3b 14 6d 95 66 Data Ascii: bme&\3Ksrh#elZ+IrjVl`-^P`ymI%e9<%1QqAJ(USl3qH/lx]sK&MlK"G/m<Fr\N-QVo &+m)dj[MN[l(B1:XF0hm-ThPi]}em{]b.gm};mf
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 45 55 96 06 6a 9f e8 ec 99 63 75 53 73 5f 45 56 5b 18 1c a2 2e 3a 05 79 86 d2 c8 d3 98 ee f0 55 98 4f 54 df bd 6c 2c ad b8 d1 67 22 ed 64 df 76 6e ba 26 c4 43 87 58 83 7d 7c 57 30 db fa 86 be 67 58 69 7d 3d 41 5c d1 55 10 6d be fa 7c 0b 5c da df 3e ff 00 4d c1 56 26 3b 4a 17 35 65 81 64 04 b6 b5 6e 8b a4 0c 09 c6 b5 0d 6a 75 8d 46 5e 28 23 6a 53 d9 65 26 28 d6 66 6e 88 5d 94 53 ef 4e 53 14 8a 81 aa 5d 20 56 c9 cf e2 4c 8d 3d 23 74 29 30 b1 48 7b 74 2a 19 aa 45 6b 99 64 e4 06 da a2 45 86 28 33 7d cb 9a 2a bc a3 7d 95 9d 36 22 d0 b5 a8 9d b9 58 d1 c2 e7 11 60 ab 82 ca 58 24 62 55 3d 21 d0 6e 56 18 06 0f 9c e6 72 5c 18 5d 8d dd f0 85 3b a5 31 b6 c0 fa 94 ae 19 59 37 2e c4 9a d8 ac 32 81 bb 8a a8 92 81 ca 7b 26 71 d7 b5 61 c2 43 b9 25 64 42 aa 43 71 50 1b 5b Data Ascii: EUjcuSs_EV[.:yUOTl,g"dvn&CX}\|W0gXi}=A\Um\|\>MV&;J5ednjuF^(#jSe&(fn]SNS] VL=#t)0H{tEkdE(3}}6"X`X$bU=!nVr\];1Y7.2{&qaC%dBCqP[
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 0c 6e 07 88 2d 1e 3c 17 2b 8a 95 e5 f9 4d cd 89 1b b5 d0 ae c1 50 2f 6e c1 aa d6 1f 1c 0d 91 ce d2 e6 e5 7c f7 5b 69 62 4b b9 f5 1f 87 1b 96 e3 5d a4 c3 f2 1d 75 f1 e0 8a fc e7 46 ee ee 56 15 73 34 b8 d9 54 e2 55 f9 77 2f 9d 53 6c fa cf 47 8e 48 73 44 45 ef a2 67 cb f2 0b 0f 81 43 9a a1 ce 3a 93 af 05 69 4f 85 17 00 74 bf 05 16 4b 0b 92 d5 c4 86 fa f2 77 fa 15 7c 8e b9 2a f2 a7 03 73 5b 98 aa 29 9b 62 56 94 b4 fb 14 b7 39 e4 c3 92 4a c1 2b 17 5d 0c c8 50 41 28 08 2a 03 10 84 bb 22 c8 54 4b 53 89 1c 52 ca 01 b7 2c 25 90 90 50 02 10 10 80 10 84 20 04 21 08 01 08 42 00 42 10 80 10 84 20 04 21 08 01 08 42 00 42 10 80 10 84 20 04 21 08 01 08 42 00 42 10 80 10 84 20 17 65 96 d3 bb 7d 90 d5 ba e0 cd 80 c5 72 05 ed f0 aa 94 9c 8d 25 cd 23 44 5d 4d c5 5e d2 f3 94 Data Ascii: n-<+MP/n\|[ibK]uFVs4TUw/SlGHsDEgC:iOtKw\|s[)bV9J+]PA("TKSR,%P !BB !BB !BB e}r%#D]M^
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: ad 0f 3d 53 98 ff 00 07 ad eb 03 72 ea d8 fc 11 75 34 bd e7 8f 99 6f 41 52 c6 47 6b ad 7b 11 9a ef b8 dc 77 22 2a 59 9f 70 5b 90 6e b9 37 16 f0 52 a9 b0 58 db ab 8b a4 77 7e eb f7 59 7a 34 74 eb 67 df 84 79 da 9e ad 4d 5c 27 92 bc 3b 38 ea 8c c7 85 af f1 a7 29 70 37 1b 99 03 59 dd e7 1f 4e b6 57 b1 46 1a 2c 00 00 70 0b 37 5e d6 9f a5 56 b9 97 27 81 aa eb f6 4b 88 ac 15 90 60 54 ec 39 ba 30 e7 0f 6c eb fc 8a 71 68 ec b7 70 d0 27 2c b0 42 f4 a1 54 61 c2 47 89 6e a6 d9 fb d2 c9 96 27 af a2 69 a9 79 d6 d8 32 8f 98 e3 12 5c 10 c7 27 23 6d d4 12 20 15 96 32 eb 33 c2 42 97 87 b7 b9 55 90 c8 ee 85 39 4d 66 a9 95 6c b0 55 12 bd 43 e4 a4 64 4b aa 9a ea 30 25 60 14 a0 54 60 bb 19 ab 79 6b 1c eb ee 05 73 8a c9 c9 37 bf 6a dd b6 c6 b0 47 4e ed 6c 5f 66 0f 49 17 b7 7a Data Ascii: =Sru4oARGk{w"*Yp[n7RXw~Yz4tgyM\';8)p7YNWF,p7^V'K`T90lqhp',BTaGn'iy2\'#m 23BU9MflUCdK0%`T`yks7jGNl_fIz
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: b1 1d 1b a6 9a 2d 76 4d eb 60 c6 64 b0 f4 2a 02 56 f4 f6 32 9b e4 4a 2e 96 42 c2 dd 19 60 c0 09 51 ef 0a 75 35 35 db 7e 29 96 47 67 0f 15 18 09 b2 6c 14 25 c0 11 f0 29 50 50 f0 37 56 38 5d 43 1a 05 d5 a3 1e c7 6a 32 f8 2e 59 c9 ae cb 26 fe ef 2c 66 82 06 b0 02 40 49 ab da 07 6a dc da 6e 02 ea 45 55 dc 03 58 d2 e2 78 8e 0a 1d 2e cc b9 ce cc f7 58 fb 96 d8 fa cf 05 14 74 fb 6d 9e 70 cf 3f 59 af a2 11 e6 45 35 41 ce eb 91 7b fc 4a db 0f c2 0d 89 0d b5 f5 d7 4f 8d 5b 51 e1 31 47 b9 b7 23 89 de ac 5c 74 de be 9b 4d d2 12 f7 8f 9e bf ae e1 62 b4 6b 6e c1 2e e0 5f 29 36 f6 ad 06 de b3 bd 5a 53 c0 c6 e8 d6 01 df c5 2d c5 2a 21 75 ec d5 a2 a6 0b 88 9e 3d da fb 6d ee d8 e3 23 ba 4b d8 14 a6 8d 13 2f 0b ac e3 7c f7 18 ca 9b 70 4f 94 d9 08 c0 d8 2b 2b 2e 49 0a 0c c5 Data Ascii: -vM`dV2J.B`Qu55~)Ggl%)PP7V8]Cj2.Y&,f@IjnEUXx.Xtmp?YE5A{JO[Q1G#\tMbkn._)6ZS-!u=m#K/\|pO++.I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49810	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:38 UTC	378	OUT	GET /wp-content/themes/tgtheme/img/d9.gif HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:38 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:38 GMT Content-Type: image/gif Content-Length: 3145277 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-2ffe3d" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609580 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zTIolKmqEH3NhR%2FGigQcCBB5dP8WW2USUImJhI3oR2P04TO8%2FpkkSxdHMJ9g8rVrZKOpbtcN3zKSHGrJ3iuCOy74ju4PQhRaoW8XZxRX0xmlPWyYRpLU7CGq%2FxKTZcjZphiAKrk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc8ec3a4283-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:38 UTC	590	IN	Data Raw: 47 49 46 38 39 61 00 02 00 02 80 00 00 00 00 00 00 00 00 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 f9 04 09 02 00 ff 00 2c 00 00 00 00 00 02 00 02 87 5b 25 02 00 00 00 7a 92 96 f4 22 6e b5 c3 c2 fe d8 21 98 3c 01 fa 6f 16 ff ff ff 5b 24 00 b6 4d 0a ff a4 00 b2 20 01 5a 24 01 fb 6e 15 f4 6b 15 5b 25 01 f9 6e 15 dc 60 11 b5 c2 c2 ea 67 13 d3 5c 10 5a 22 00 f6 6d 15 f4 21 6d b4 c4 c2 c8 55 0c 5b 23 00 e2 62 11 64 28 01 aa 49 0b ed 68 13 bc 52 0e d7 5e 10 60 26 01 d0 59 0e 7a 91 95 7d 34 05 67 2a 02 e8 66 12 c0 53 0d 5b 24 02 81 36 05 e0 62 11 b9 c6 c5 f8 6d 15 9e 3f 01 6d 2c 03 f0 6a 14 ad 4b 0b 78 32 04 62 27 01 6a 2c 03 95 3f 08 b0 4c 0b f2 6b 14 ba 50 0b cc 59 0f ca 57 0d a0 44 0a 8c 3b 07 6f 2e 04 75 30 04 fc 6f 15 ee 68 13 e6 65 12 89 Data Ascii: GIF89a!NETSCAPE2.0!,[%z"n!<o[$M Z$nk[%n`g\Z"m!mU[#bd(IhR^`&Yz}4g*fS[$6bm?m,jKx2b'j,?LkPYWD;o.u0ohe
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: ed e7 e3 c0 c0 bf 82 50 08 84 5f 47 50 21 04 ff e9 7c f5 20 6c e9 ed ed 96 66 0d a0 8a 7a cb 78 10 fe f1 b1 6c 37 04 d2 93 69 d6 ac 19 ad 7f 11 95 7b 69 63 2e 07 a7 78 10 f0 64 13 fe e0 cb df 9b 17 fa 86 3c d6 89 11 e9 db d2 e0 b7 1a e7 cf c0 b8 a9 9c ff 6b 10 ff ed 95 e8 ad 1a 67 36 16 7a 47 07 b6 88 12 ce a2 17 fe dd 3d b2 1f 01 c0 c8 c6 c8 b3 a3 c3 97 15 c8 ca c5 60 60 60 fc c6 a3 ff e9 dc e2 8c 49 86 55 0a 3f 1c 05 c7 a1 86 35 35 35 dd a7 85 92 72 5c 80 80 80 fe e0 4b ed 91 01 73 3e 06 e3 77 32 d7 c9 c1 91 90 8e eb 95 5c c9 7b 45 d8 c3 b0 20 20 20 50 50 50 b9 70 41 a3 57 26 5e 1d 00 b5 84 63 fe df 4a f5 78 0f f8 1f 6c 30 1d 00 f5 1e 70 ef 72 22 ff 19 69 f6 e9 e1 70 70 70 e7 c8 4c 00 00 00 08 ff 00 ff 09 1c 48 b0 a0 c1 83 08 13 2a 5c c8 b0 a1 c3 87 10 Data Ascii: P_GP!\| lfzxl7i{ic.xd<kg6zG=```IU?555r\Ks>w2\{E PPPpAW&^cJxl0pr"ipppLH*\
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: ce 02 88 c3 84 24 72 59 8b 6c 8a 08 2d c2 44 47 ea ea 8f 90 8c 89 24 1f f8 bd 43 0a e4 92 b3 ca a4 61 96 e8 c9 90 81 32 94 2f 11 e4 28 01 46 47 46 f6 0c 95 9c 5b 08 76 56 f7 90 56 ce 0c 96 43 91 e5 2c 0f 45 49 a1 95 11 97 7d ca a3 4d 2a c9 49 5f 82 0c 98 42 11 e6 2c 0b 69 48 5b 12 11 99 7c 52 e6 1e 31 e2 cc 67 42 73 26 d2 1c 25 35 21 62 4a 0a 61 93 4f 15 b4 e6 45 3a d9 ca 57 7e 73 25 c3 5c 57 3e 6a e9 95 01 9e 93 4c ca 5c 23 1b bb 69 ff 2e 77 be 33 25 f1 cc 56 0c d5 89 10 33 22 53 9b c6 6c 24 3f a5 e5 cf 7f a2 24 a0 d8 12 22 33 0f e2 8c 7b 92 29 9d 04 6d e6 42 a7 e5 50 99 84 53 8e e3 84 c8 2e ed 68 d1 24 21 74 a2 15 d9 a8 13 3b 0a 93 8f 02 31 a4 22 25 e3 0c 4b aa 24 8c aa 6d 23 2a ed 15 4b 3d 0a 51 89 79 44 a6 d7 a4 29 92 6c ca a0 8b e4 94 57 3b 95 49 4f Data Ascii: $rYl-DG$Ca2/(FGF[vVVC,EI}MI_B,iH[\|R1gBs&%5!bJaOE:W~s%\W>jL\#i.w3%V3"Sl$?$"3{)mBPS.h$!t;1"%K$m#K=QyD)lW;IO
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: c0 04 00 47 83 77 14 01 15 50 05 1d a0 74 68 a7 17 a4 90 0b 80 60 06 6d 40 0a 5c 38 16 d7 00 86 81 f1 7e 2b a7 02 36 20 01 05 53 01 58 e8 6f 73 80 4c 17 a0 03 44 30 03 21 ff f7 71 0d d0 7a 79 21 06 87 80 00 96 78 89 66 80 07 6e e1 05 2d 28 7b ba f6 89 b9 16 8a 72 01 88 13 67 02 68 00 80 05 f3 00 6a 08 70 2f 70 86 e7 84 03 8e 08 89 a0 a0 17 67 60 06 97 78 8b 96 d8 06 7b 08 16 62 70 74 3f 27 86 a8 d7 00 46 97 15 5a e8 71 5a 80 02 17 80 31 4a 50 82 10 77 05 04 84 02 1e 30 26 57 e0 81 1e d7 00 45 e0 0a 7a 31 06 b8 b8 8d 08 70 08 bb 08 15 9d f8 6d 16 d8 71 ef 36 8c 45 51 6d 20 57 04 52 50 01 28 72 05 ec f8 2d 39 10 8b 00 a7 02 e2 23 01 70 08 00 3e 60 25 15 10 85 90 08 00 d1 00 81 79 41 0a dc c8 8d ba c8 16 bd 18 6c e3 98 72 fb 96 7a 2f 81 8e 1f 67 8a a8 68 79 Data Ascii: GwPth`m@\8~+6 SXosLD0!qzy!xfn-({rghjp/pg`x{bpt?'FZqZ1JPw0&WEz1pmq6EQm WRP(r-9#p>`%yAlrz/ghy
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 25 64 1a 71 e2 3a a9 bf 99 b7 cb 02 03 5f eb 6f 9c 8a 22 12 00 bb d0 36 0a 9b a0 ac 8a 4b b9 e2 fb a4 6a fb 14 d5 99 60 e8 1b 16 b8 e8 8d 6e b1 b4 b0 69 b8 04 0c 6d 33 90 bd 57 62 b3 12 47 04 7c 82 9e 1e a7 9e cb 52 06 ff 4b ba c1 7a 00 fe 16 0d bb 20 bc 24 6a bb 0b fc a4 a4 c0 16 b1 07 c1 6c b1 8d 1d 2b 16 2c 00 0b dd 09 bf 19 fc 02 1c 00 27 2b 00 ae 13 a7 bc fa 98 72 b7 29 2b 37 a0 05 1f c7 86 38 b2 6e ab b0 0b ae 80 c0 88 c1 02 64 1b c3 4f 9a 0b 6c 31 81 eb 15 c1 60 c1 8d 8e db 16 6f 1b b7 4d 07 00 4b 00 ba 57 f2 00 11 1a 71 f9 18 27 ed f9 71 10 2b 2b 0f 70 bd 10 07 c2 3a f2 c6 d1 00 0b d7 40 be d9 08 c3 58 fc a4 44 5b 84 17 e6 c2 4d 31 90 5e 1c 16 51 f0 9a b0 ff 79 a3 d4 b6 03 45 54 05 1e 87 03 71 62 ac 20 e7 7d b3 d2 04 20 77 02 48 52 96 00 20 0c 84 Data Ascii: %dq:_o"6Kj`nim3WbG\|RKz $jl+,'+r)+78ndOl1`oMKWq'q++p:@XD[M1^QyETqb } wHR
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: a0 f0 5b 92 08 00 10 9c 06 93 e0 1e 37 e4 49 b2 ed 1f 37 04 7d 72 02 29 37 bd 86 a3 f7 7b 0f 95 31 1e 15 e9 70 cd 59 b8 dd 6e 8b c5 6d b0 f4 4d 91 08 fd 6e 30 22 3c 71 88 cf b2 28 47 de 63 92 e4 20 c7 da 67 43 05 00 7f f9 86 3c 16 5d 70 00 27 b0 f1 73 0e 59 37 fe c7 69 1f ed 89 10 f3 df b2 dc ec 16 ee 49 e2 eb 20 57 f7 64 42 01 32 0b 72 a5 6f 38 72 30 fb b4 8f 8b 51 6d 08 da 3b ec 21 77 f2 31 5d cc 91 ff 10 d5 89 f0 0b 3f d3 02 28 a7 fc 48 22 d2 66 d9 27 ee fd 71 4f 6f 38 ff 3e fd b7 28 f4 50 b1 09 27 72 b0 85 5b e7 ea ae ce dd 0f 16 a4 a0 0c 51 b3 02 e1 3c 26 00 51 01 c0 40 82 05 0d 1e f4 70 40 e1 42 86 0d 0f c0 10 71 50 e2 44 29 0e 2d 5e c4 98 f1 40 0b 39 69 10 7c 04 19 52 e4 48 92 25 4d 9e 14 19 89 c0 4a 96 2c 33 84 63 c8 64 62 c1 06 ff 6c de c4 99 53 Data Ascii: [7I7}r)7{1pYnmMn0"<q(Gc gC<]p'sY7iI WdB2ro8r0Qm;!w1]?(H"f'qOo8>(P'r[Q<&Q@p@BqPD)-^@9i\|RH%MJ,3cdblS
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 47 2a 06 8f 0d f9 5c 48 34 a1 11 00 32 68 93 bf 1c 0a 1d 59 72 88 b9 a8 cb 22 85 18 25 fe a4 f8 1f 2e 66 66 06 5b c1 62 66 26 97 11 25 14 ff c7 48 b1 b4 16 1b 6c 08 15 61 7a e1 8c 17 59 e3 48 f4 80 26 5f 02 d3 9c b9 d9 cd 19 e6 a2 30 86 4c 22 99 0b 38 e1 8f 52 45 99 6b 82 a8 38 45 f0 de ff 8a 03 4b 6c de 8b 11 99 68 a4 49 b6 83 97 48 a6 d1 22 8c b0 10 49 ba a1 91 a0 8d ec 9c 0f dd 89 30 57 12 09 a8 b8 c7 21 79 20 43 32 a3 b8 a4 6f 65 a6 39 5a 99 a7 5a 54 30 af cf d4 b3 9f 18 ab 04 24 02 3a 12 83 11 40 0c 99 ca 48 26 4c 02 99 8c a4 90 78 10 c5 e9 4d 3a 89 17 16 24 f4 24 34 6d 08 09 93 e9 86 31 d9 2c 33 ac d4 0a 0a 8a f3 b4 cb 7c 06 0c 27 dd 9d 1c 28 e1 89 5c 7e 84 81 2d e9 82 36 60 9a 11 2a 54 f5 23 69 b0 e0 45 8c 3a 91 4c e6 14 a2 12 25 00 29 50 c2 44 85 Data Ascii: G\H42hYr"%.ff[bf&%HlazYH&_0L"8REk8EKlhIH"I0W!y C2oe9ZZT0$:@H&LxM:$$4m1,3\|'(\~-6`T#iE:L%)PD
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 0b 5c 08 8c 7b a2 7d fb a2 07 c8 ab 81 a8 9e d1 c8 43 00 10 3e d1 68 39 00 38 b7 3b 74 08 1e 94 08 22 98 9d 2f 72 12 92 40 bb 86 58 3f 82 e0 bf 41 fc 94 ed 03 00 55 8c 39 56 73 08 53 7b 22 cd 9b a1 5e 22 c2 ea 48 b7 06 7b 0b d0 83 1b 4d b4 08 9d 3b 08 1f 68 8b 2f e2 42 91 80 04 8d b8 c4 fd 43 45 81 a1 09 83 60 af 7c 1b a5 02 8c a5 d8 a9 82 f7 c8 b0 60 14 0d eb 7a 81 39 e4 c5 85 70 c0 89 30 01 2d 3c a0 d6 1b 89 34 d0 08 f3 62 bc 64 14 17 c8 23 88 ed db 45 aa 1b a5 02 8b a5 0f c8 2b 01 14 0e 1d e3 3e ea f0 39 3e dc c6 03 40 c1 99 98 81 3a fb 9e 29 98 24 ef ca 08 c0 b3 3e 74 04 95 65 04 40 00 20 c1 85 80 c5 12 4a 34 6c 82 21 15 8c 0c ff 91 69 41 d1 a8 2b 2a dc 47 85 b0 36 af 28 02 8a c4 98 c3 93 be 8c 88 00 e0 a3 09 84 0c 96 ff 5b c7 7b ac 1f 8d 42 ad 1c 18 Data Ascii: \{}C>h98;t"/r@X?AU9VsS{"^"H{M;h/BCE`\|`z9p0-<4bd#E+>9>@:)$>te@ J4l!iA+*G6([{B
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 5e 60 85 5f a8 98 db 9c 39 3f ca 30 a0 c8 68 01 93 2c 88 7f 63 08 bb ac cf 03 48 cc bd 24 60 c3 30 1d 32 2c 02 ad b0 5b 60 dd 06 94 c0 da f2 5c 04 d4 0d 4d 23 70 da 75 90 0b 13 5d 04 ac 01 61 af b8 cd b7 90 4b 82 10 01 38 c5 c1 91 60 b8 86 d0 df cb 4c 61 c3 30 60 00 a8 bd 06 a0 db 8b a0 00 6e ed d4 0b 36 89 44 78 5e 23 ed 01 a7 8d 61 a8 78 07 13 6d db 53 59 4f b5 38 b6 ff d1 60 c3 83 18 53 77 2d 09 64 d8 34 79 6b 62 c1 38 da 03 2e cb 22 94 41 72 1d 33 93 70 5e 36 35 52 2b ee 56 54 d8 61 13 85 da 7b e1 49 b2 78 4b b7 e8 b7 af 80 cc 03 10 c9 bb 5c b1 83 8c 63 c0 78 62 b2 6c 80 71 bb 08 3f e6 54 a8 28 87 12 05 dd c3 74 5f b9 d5 61 94 90 60 13 cd 99 50 75 aa d1 c0 51 af 30 d6 70 0a 89 4a 58 32 48 8e e4 a3 48 80 69 b5 bd 35 be 63 72 c5 62 93 90 df ac 0d d0 2e Data Ascii: ^`_9?0h,cH$`02,[`\M#pu]aK8`La0`n6Dx^#axmSYO8`Sw-d4ykb8."Ar3p^65R+VTa{IxK\cxblq?T(t_a`PuQ0pJX2HHi5crb.
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 19 6c 33 d7 7b 8c 50 82 86 97 0f 58 fb 8f 34 57 e3 b7 38 e1 66 97 7b 9b a0 7c af 90 6c 85 30 6b ff e6 fa ff c8 58 81 bf df 03 3a a0 03 44 e0 05 df f7 7c 1c 30 4d 38 21 7c 18 47 fa ff 30 82 75 2f 8e 20 a6 8e 08 80 7b af f0 5a b7 60 a1 f9 8e 7d a4 d5 c3 bb 3f 7e 0c 47 f9 6a f3 7a 47 48 06 68 b8 83 02 20 ff f2 27 ff 3b f0 03 41 e0 05 bf ef fe 9b bc 7d f0 a6 d9 0d b9 02 61 b7 26 14 61 76 b2 90 f2 86 70 fc be b6 78 68 ef d1 98 07 88 03 07 72 04 28 68 f0 20 c2 84 0a 17 1e ac 23 f0 21 c4 88 12 05 ae 50 60 f1 22 46 8b 7b 1e 15 e8 e8 f1 23 c8 02 77 1e d1 c9 68 d2 e2 88 0b 13 57 b2 9c 18 83 21 cc 98 0c 79 b4 ac 19 31 46 02 00 3a 77 f2 ec e9 b3 67 07 0a 36 87 0a 8c f1 f3 e8 4e 0f 44 05 0a 41 da e0 1f d4 a8 52 a7 52 ad 6a f5 2a d6 ac 5a b7 72 ed ea f5 2b 58 aa 16 1a Data Ascii: l3{PX4W8f{\|l0kX:D\|0M8!\|G0u/ {Z`}?~GjzGHh ';A}a&avpxhr(h #!P`"F{#whW!y1F:wg6NDARRj*Zr+X

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49811	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:38 UTC	624	OUT	GET /wp-content/uploads/2024/05/Telegram-3-1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:38 UTC	780	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:38 GMT Content-Type: image/jpeg Content-Length: 15898 Connection: close last-modified: Mon, 27 May 2024 12:00:38 GMT etag: "665475e6-3e1a" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609580 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7KZx4YQ1MDiw6hnghJnZwN6RnBR2tkS8D018KT6zfuP%2Fl%2FGXMjo82on0ciiIPQK0loBbM36qsBpMdpDOKstiIr%2BkmAmqmVz28x%2F8vPTwejvXlpfsZPP7PJb2s6hg5LrGA6XCd%2Bg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc8fb9e42e9-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:38 UTC	589	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 09 09 09 09 0a 09 0a 0c 0c 0a 0f 10 0e 10 0f 15 14 12 12 14 15 20 17 19 17 19 17 20 31 1f 24 1f 1f 24 1f 31 2c 35 2b 28 2b 35 2c 4e 3d 37 37 3d 4e 5a 4c 48 4c 5a 6e 62 62 6e 8a 83 8a b4 b4 f2 01 09 09 09 09 0a 09 0a 0c 0c 0a 0f 10 0e 10 0f 15 14 12 12 14 15 20 17 19 17 19 17 20 31 1f 24 1f 1f 24 1f 31 2c 35 2b 28 2b 35 2c 4e 3d 37 37 3d 4e 5a 4c 48 4c 5a 6e 62 62 6e 8a 83 8a b4 b4 f2 ff c2 00 11 08 02 74 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 01 02 04 05 07 03 08 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: JFIFCompressed by jpeg-recompress 1$$1,5+(+5,N=77=NZLHLZnbbn 1$$1,5+(+5,N=77=NZLHLZnbbnt"4
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 22 d8 d9 72 d1 72 d1 72 d1 72 da a2 aa 55 01 00 cb 10 98 00 00 00 00 00 00 00 00 00 Data Ascii: "rrrrU
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: d1 f7 55 74 52 db 4a 0b a3 5e 11 ee 1b 4f 59 6c 4e 53 ab a7 7d 4b 39 df 6d 64 e6 11 b1 d9 f1 f7 c7 ba 1f 3c e8 7b f4 56 01 3f e7 6c 67 9e d6 dd d5 c1 51 9e b0 48 00 00 00 00 00 00 00 00 00 00 00 00 00 03 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 d7 5e dd 5f a4 e2 49 c3 67 06 93 ed dc 36 74 55 a7 a8 19 02 54 ae 3c e1 ef 85 8d e7 31 7d 2b b1 95 b9 26 19 15 ac 4d 2f a7 a3 2a 79 5f cc 76 f3 7a 68 2d bb d0 79 d0 d9 aa a2 64 52 55 51 0a d0 39 e6 9e 45 0c f3 de 97 63 e1 8b 6e 8e 9e df bb e0 4e fa df b1 35 ff 00 29 7a f0 77 f6 fd 3f 21 f1 ef aa ec 3c 4b 2f 07 9f b7 75 e1 85 67 3f 57 45 d4 ed af b4 a5 90 c3 f6 5a 2c b5 ef 76 7e f9 3b f9 22 59 78 79 fa 3b 2b 89 22 e7 93 1d 29 07 c7 cf 4f 9f 44 87 cb ca f3 99 36 26 1b 25 55 3b ea 02 40 90 48 00 00 00 00 00 00 Data Ascii: UtRJ^OYlNS}K9md<{V?lgQH^_Ig6tUT<1}+&M/*y_vzh-ydRUQ9EcnN5)zw?!<K/ug?WEZ,v~;"Yxy;+")OD6&%U;@H
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 6a e3 38 f4 d6 b6 d6 da a2 a0 a2 a2 dc 0d 85 b8 e5 3e 92 f1 1e ab 43 7d b9 1c 9d ed 06 5f 28 ec e1 f2 ce b6 fb da 0a d2 b4 cf 10 48 43 ce 7d 02 ec d5 56 98 bc ea 55 07 69 f1 16 15 01 20 90 00 00 00 00 00 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 90 48 00 00 00 00 04 1b cd 1f b6 ad bd 5b 41 e7 2d a5 f4 bc 3f 2f 63 a3 ba a4 cb 52 bd 1a 00 a2 a4 f9 59 ef e3 af 3e b1 eb ca bd 2a 2e 31 2b 67 bd bd 40 6d d3 5a 09 04 b1 ae da 68 dd 29 94 fb c5 28 ee f4 7a 1f 6f 0b af 36 1b 34 84 80 00 00 00 00 00 02 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 32 09 00 00 00 00 00 02 1b 19 e7 34 dd 71 58 74 4e 43 d5 3d ab ae 78 ce 55 fa eb ba 4c e5 b7 6d d4 12 ad 08 63 d3 Data Ascii: j8>C}_(HC}VUi 1H[A-?/cRY>*.1+g@mZh)(zo64@F 24qXtNC=xULmc
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 58 3b 8a 93 1d c9 53 b6 3a ff 00 bc 47 72 34 ff 00 d7 3b ef 11 dc 84 87 9c 3d fc 20 e1 09 1f 39 77 dc 23 b8 f9 3f 39 77 dc 20 e0 e9 5d 93 6b f8 60 e0 e6 36 4e 2b e0 83 83 9b d9 3a 7e 08 56 0d 1a 24 89 d1 f0 42 d3 a2 a2 9d c6 30 87 f7 07 fd af ee 1f 18 fd 64 9f aa a8 c3 5e 37 97 fb 78 31 15 5d 52 0d a1 96 72 75 c0 49 3d 11 0e 3c e3 8a 2a 5a d4 a2 76 93 14 ca dc dc 8b 88 1a 65 6d 6d 41 cc 5a 19 71 2f 36 87 10 79 ab 48 50 ec 3d e1 ef ae 73 d6 31 84 85 a9 cf 7b 6f dc 0d e2 e3 93 8c 7c 39 3f 55 71 85 fc 6e cf aa bf cb 83 16 a5 42 a4 09 d4 5a 4f 00 04 91 14 a6 d6 d5 36 51 0b b8 50 6c 5f ed ce 04 18 9e ad 49 c8 be 86 5c d2 2b 20 1e 6e c0 60 10 40 20 e4 46 5c 89 8f af 73 d6 31 85 07 f6 5a bd b1 80 3d 3e 26 c2 2a 95 56 29 8d b6 b7 10 a5 69 92 00 4c 2b 18 33 b2 4c Data Ascii: X;S:Gr4;= 9w#?9w ]k`6N+:~V$B0d^7x1]RruI=<ZvemmAZq/6yHP=s1{o\|9?UqnBZO6QPl_I\+ n`@ F\s1Z=>&V)iL+3L
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 49 7b d5 14 5a e3 b5 27 dd 61 d6 10 12 51 7c a2 b7 45 5c 92 84 e4 9d c2 01 b9 03 5a 22 87 57 15 06 02 16 40 79 03 31 bf af d2 6b 88 94 a4 d4 27 2c 5b 60 84 74 95 cd 11 27 85 59 49 0a 9a 78 b9 fb 29 c8 44 b4 9c b4 aa 42 59 65 28 1d 43 38 3c 82 40 17 31 34 ef 1d 32 fb bd 37 14 79 76 31 63 ba 2c 62 d1 8b cf e9 ed 0d cd 08 0b 52 7c 15 11 d9 05 6a 56 b5 13 14 d5 a1 13 d2 aa 59 01 01 d4 92 77 00 60 d6 a9 57 36 9c 6a 3e 7a a5 f9 eb 31 f3 d5 2f cf 59 89 99 fa 14 d2 42 5f 7d 85 81 aa f1 a3 85 77 b1 1c 5e 13 de c7 bc c7 15 84 f7 b3 f1 18 9b 0d 09 97 83 46 e8 0b 56 89 1b af 97 0e 1c a5 48 cf 31 30 a9 86 8a 8a 54 90 08 51 11 dc d5 1b cd d5 f1 98 76 49 89 ba af c9 e4 5b 21 b2 bb 27 3b ea db 12 b2 ad 4a 4b b4 cb 60 68 a0 7b ce fe 0a fc db f2 94 e5 2d 95 e8 a8 ac 24 ab Data Ascii: I{Z'aQ\|E\Z"W@y1k',[`t'YIx)DBYe(C8<@1427yv1c,bR\|jVYw`W6j>z1/YB_}w^FVH10TQvI[!';JK`h{-$
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 85 28 a8 e6 6e 61 89 7b f3 96 32 82 00 e4 01 0f 48 99 89 c7 5c 3b c0 1f 60 86 65 9b 6c 0c b3 89 da 8c a4 8a 0a 9e 70 0d c9 1a cc 4f 62 79 a7 ae 99 74 f1 49 de 73 59 87 1e 71 d5 15 38 b5 2d 5b d4 6f 07 94 63 15 f8 d4 fb 24 43 6c ba e5 ca 1b 52 ad ae c2 f0 a6 dc 4a 41 28 20 1d e2 30 41 09 c5 94 42 7c e5 22 1d 61 0e 83 71 13 f4 c0 73 02 26 a4 d4 82 48 10 47 0e fe c3 0f e6 eb 9e b1 84 30 f2 c1 52 5b 51 48 d6 40 ca 14 da d0 01 52 48 07 54 61 2f 17 3d ed ff 00 94 54 bf fd 38 f6 cd 41 d6 78 71 5f 8a ff 00 15 31 30 2f 85 e5 0e e9 95 46 1e 37 a4 4b 7d ef f9 1e 02 40 04 92 00 de 61 75 4a 6a 17 a2 a9 c6 af d4 6f 18 6c 83 5b 55 b5 29 2e 46 1c ca b4 ea 7f 61 c8 b7 06 2f ca 6e 4f d9 1f f9 44 b7 f7 69 7f 64 8f cb d1 7d 5a f5 44 ad 2e 7e 6f 36 98 36 e9 2b 21 12 98 59 b4 Data Ascii: (na{2H\;`elpObytIsYq8-[oc$ClRJA( 0AB\|"aqs&HG0R[QH@RHTa/=T8Axq_10/F7K}@auJjol[U).Fa/nODid}ZD.~o66+!Y
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 8d a7 77 79 a6 c9 09 e9 b4 b0 5c 28 ba 54 6e 05 f5 47 72 68 f3 d5 7c 02 3b 93 4f 9e 9f 80 45 4e 40 48 4d 71 21 c2 be 60 55 ed 6e 0a d5 20 d4 d0 d0 0f 68 14 13 6b 8b 8c e0 e0 e9 8d 93 8d fc 26 0e 0e 9d d9 30 cc 1c 23 52 1e 5b 3f 14 1c 2b 55 1e 4b 7f 14 1c 31 57 fd 40 f8 84 77 35 57 f3 53 f1 08 18 6e b2 a5 25 09 94 24 93 61 ce 4c 77 01 8b ff 00 f0 ee 7c 68 87 30 3e 29 6b c3 a5 ac 7d f4 41 c2 f5 b4 e4 a9 42 3e f2 60 61 8a b9 ff 00 00 0e d5 08 18 4e aa 76 36 3e f4 27 08 54 0e b7 59 1f 6c 51 e9 aa a6 ca 16 54 b0 a5 15 95 12 21 c4 21 c6 d6 85 8b a5 49 21 5d 86 3f 48 a0 55 8e 57 6f f8 2d 06 26 25 e4 6b 32 56 0a ba 15 9a 16 33 29 30 ba 2d 7a 45 67 e4 aa 51 1d 26 d5 1f 35 e2 49 a2 03 ca 72 c7 6a d7 12 58 51 08 50 5c db e1 7f b0 98 42 42 12 12 91 64 81 60 37 70 14 Data Ascii: wy\(TnGrh\|;OEN@HMq!`Un hk&0#R[?+UK1W@w5WSn%$aLw\|h0>)k}AB>`aNv6>'TYlQT!!I!]?HUWo-&%k2V3)0-zEgQ&5IrjXQP\BBd`7p
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 64 88 72 a7 34 66 43 cd b8 a4 14 9e 6d a2 91 88 db 9b b3 53 04 21 ef e0 a8 49 06 2d 16 e1 af f8 a2 73 d9 9e 49 d5 18 75 9a 62 d8 e3 50 d8 2f 8f 0f 4f 32 38 6b 34 c1 3f 2c 6d f5 c8 cd b3 fc a0 82 92 a0 41 04 1b 10 75 8e 0c 3b e3 56 bd 57 38 71 2f 8c ff 00 05 1c 00 12 40 02 e4 9b 5a 28 94 b4 c8 cb e9 2c 7d 33 82 ea ea ea 8b 45 a2 be c5 31 32 c5 d7 db 1c 69 c9 1a 19 29 46 07 27 0e 67 49 96 fb df 9c 55 fc 03 13 43 9c 7d 2c b5 c1 11 4a 7f 8e 91 60 de e5 37 41 fb 22 63 c1 4f 03 cf 36 c2 0a d6 72 1f c7 aa 26 a6 dc 99 72 e7 24 8d 49 e0 19 0d 40 c5 27 11 bd 2d a0 d4 cd d6 d6 c5 f9 42 18 98 69 f6 d2 b6 d6 14 92 32 23 91 88 3c 51 3b ea 45 f9 32 f5 07 64 66 52 e3 3e 1a 75 df 51 1b 8c 53 ea 12 f5 09 54 3c c9 ea 50 da 93 b8 f0 e2 1a 4e 95 e7 19 4f 38 0f a4 4e f1 be 35 Data Ascii: dr4fCmS!I-sIubP/O28k4?,mAu;VW8q/@Z(,}3E12i)F'gIUC},J`7A"cO6r&r$I@'-Bi2#<Q;E2dfR>uQST<PNO8N5
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: a6 f5 32 69 2e 02 4b 64 d9 c4 45 6a ac ed 4e 60 2b 30 d2 09 d0 47 f3 3d 70 d3 76 00 91 9f 78 75 d0 39 a0 e6 63 0f d1 fe 73 9b d2 70 1f 93 b6 41 5e e5 1d 89 8b a5 b6 f2 16 00 6a 8a ac ed ca 85 e1 f7 4a d4 77 7a 79 25 30 5b 56 b8 a6 4e 07 00 17 89 a9 56 67 18 71 97 90 14 85 8b 11 15 7a 4b f4 b9 92 da ee 50 4d db 5e f1 fd 61 a7 f6 28 c0 20 ea e5 bc dd c6 90 d7 0d 35 e5 1e f0 e3 c0 64 22 9b 4c 98 a9 cd 71 4d 02 07 96 be 88 89 29 26 24 65 5b 61 a4 d9 29 1e f3 bc c5 4a 69 28 49 17 89 d9 92 e2 ce 7e 9e a5 5a 26 e2 24 27 74 54 01 31 25 3a 97 52 01 31 3f 23 2f 50 97 53 2f a3 49 27 56 f0 77 88 ab 51 e6 69 6f 14 ac 15 34 7c 07 00 c8 8e bd c6 1b 74 a7 2d 90 95 05 0c 8f 7d 52 92 91 73 0b 79 6a bd 85 84 52 e9 53 55 37 c2 1a 16 48 23 4d 67 52 62 9d 4e 96 a7 b0 1a 65 36 Data Ascii: 2i.KdEjN`+0G=pvxu9cspA^jJwzy%0[VNVgqzKPM^a( 5d"LqM)&$e[a)Ji(I~Z&$'tT1%:R1?#/PS/I'VwQio4\|t-}RsyjRSU7H#MgRbNe6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49813	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:38 UTC	391	OUT	GET /wp-content/uploads/2024/05/maxresdefault-80-1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:38 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:38 GMT Content-Type: image/jpeg Content-Length: 95543 Connection: close last-modified: Mon, 27 May 2024 12:27:59 GMT etag: "66547c4f-17537" expires: Wed, 31 Jul 2024 04:11:18 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 325700 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mnFkQuMi04tk6u6LU6TDl7UOozmucxeHr83BeZcnGsVC3TQD0RtB23eyr7Vnx1hHBo%2FBWmkotf26FHpykqvFjFmHPQxnPh3%2F0D2trCW1Hr0Y7Qpx0iYAmxLCrDTVhhSe5PaniD0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc97e6e421f-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:38 UTC	594	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 09 08 08 0d 15 0d 0e 11 11 13 13 13 07 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0f 0f 0f 12 15 12 15 15 12 15 15 12 15 15 12 15 15 12 12 12 12 15 12 15 12 12 15 15 12 15 15 15 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 05 06 07 08 04 09 ff c4 00 62 10 00 01 03 02 02 04 05 08 13 0b 0a 05 04 02 03 00 01 00 02 03 04 11 05 21 06 07 12 31 08 13 41 51 61 14 22 35 71 81 91 b1 b3 17 32 33 36 52 Data Ascii: JFIF"b!1AQa"5q236R
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 25 48 8e 5c 86 a4 12 55 00 4f 48 8e 42 6a 63 7a 69 b5 39 2c 11 c8 48 4d c9 27 11 b1 d9 2b 29 04 c1 46 06 8a e8 70 42 12 8e 4c 8a 14 c1 51 25 20 b9 29 01 9a 65 49 22 99 80 4c a6 e5 4d ca a9 0a 9b d2 34 3d 32 9a 8d 95 5b 28 10 99 82 42 04 28 96 a9 90 52 b2 07 60 83 82 8a 9b 82 8d 93 70 3c 82 8d 95 6b 28 5b 7a 8d f0 14 82 4a 6e 0a 36 4d 01 21 3b 22 c8 14 49 a6 d0 a5 b2 81 04 9a 79 a6 80 00 98 48 26 02 06 92 ba 9b 54 43 55 40 10 46 d9 26 a9 b5 45 81 4c 34 a3 04 13 1b 42 9b 52 b2 a8 c0 a5 89 03 01 bd 4d 2b 2a 8d 09 e5 79 03 54 80 cd 30 14 ec 94 8e 4c 61 4c 24 02 9d 92 90 4c 02 90 48 29 35 48 9f 02 30 28 6a 6e 09 04 e5 c0 4c 92 0a 6d 09 00 a6 c4 bb c3 18 d1 cc 84 ee 84 c6 b1 dd 08 48 94 bb c0 34 21 a0 9d c0 af 44 34 8e 3b d2 74 82 94 1a a4 57 b5 98 75 f7 95 51 Data Ascii: %H\UOHBjczi9,HM'+)FpBLQ% )eI"LM4=2[(B(R`p<k([zJn6M!;"IyH&TCU@F&EL4BRM+*yT0LaL$LH)5H0(jnLmH4!D4;tWuQ
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: ef 92 80 76 48 05 0c 90 77 41 49 09 05 44 ae a3 b4 85 1b 24 63 99 2b a2 e9 21 03 07 74 5d 24 24 01 dd 17 49 09 47 0e e8 ba 48 40 83 25 0a 09 b5 08 6b 25 74 c2 85 d4 c2 92 24 4c 2e a6 a9 8e 4e d2 9d d3 c6 31 a1 08 4a 91 13 60 37 29 8e 45 10 98 4f 44 52 63 09 94 93 3c 89 e8 89 92 4d a9 34 29 b1 a9 c8 8e 4c 61 48 22 c9 80 a5 44 40 02 93 52 52 69 4a 31 b1 a2 c1 16 42 12 18 c6 2c 9a 40 24 53 b0 45 91 84 d0 91 40 b9 1a 45 01 34 82 a2 24 04 ac 13 49 c9 30 2e 48 15 4d c1 55 54 e4 48 d0 e4 c8 59 25 35 12 14 4c 7a 64 1c 14 0a a8 e5 12 13 58 f8 b2 9b 92 55 1e 14 2c 90 96 2c 89 4a ea 45 09 8f 80 ed e2 9a 69 94 26 b1 50 90 9d 90 52 0e 29 94 29 14 20 01 30 8b 84 c2 04 24 c5 24 82 61 04 72 24 02 a8 14 5a a5 ca 82 16 4d a1 55 68 54 d9 f4 aa ac 4f 43 24 3b 26 d0 81 bd 48 Data Ascii: vHwAID$c+!t]$$IGH@%k%t$L.N1J`7)EODRc<M4)LaH"D@RRiJ1B,@$SE@E4$I0.HMUTHY%5LzdXU,,JEi&PR)) 0$$ar$ZMUhTOC$;&H
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 90 71 50 94 94 42 10 19 24 85 14 25 13 24 d0 a0 52 40 dc 95 02 90 72 a4 a5 74 e4 c6 b2 aa 14 02 90 29 e8 8d bc 12 09 aa 77 53 6a 71 13 26 13 6a 88 dc a4 d4 b8 c9 1c 89 a9 b5 53 0a 6d 52 22 26 34 da 97 2a 61 2a 18 c9 34 29 dd 44 29 05 2a 2b cc 93 54 94 42 90 4e c9 13 79 24 98 48 26 9c 91 1b 64 82 69 04 ca 70 d0 40 42 12 32 26 c9 21 08 48 19 05 15 24 ac 94 37 88 90 a2 46 4a 76 28 21 04 99 29 84 9e a6 42 8b 82 47 c8 37 88 82 91 4d 22 a2 68 54 c8 15 17 2a 84 28 10 90 92 2c a6 e4 94 9e 90 09 ac 91 32 2e 54 ca ac e5 4c 84 d6 90 f4 ca 65 00 a9 59 1b 2a 36 c7 6f 09 09 d9 16 48 39 31 5d 09 d9 16 40 99 12 13 b2 2d 9a 51 06 14 da 10 02 90 08 18 0a 6d 4b 65 4d a1 39 32 3c 92 6a 9b 54 40 53 6a 7a 64 52 91 35 26 25 64 c2 52 06 f2 4c 29 24 d0 ae 54 38 79 76 6e cb 95 05 Data Ascii: qPB$%$R@rt)wSjq&jSmR"&4a4)D)+TBNy$H&dip@B2&!H$7FJv(!)BG7M"hT(,2.TLeY*6oH91]@-QmKeM92<jT@SjzdR5&%dRL)$T8yvn
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 14 c0 50 0a 40 a9 08 09 84 20 21 3d 73 23 24 13 48 26 94 6b 64 90 93 4a 69 08 49 25 74 14 20 6e f3 00 82 8b 22 c9 44 de 0b a2 e8 b2 2c 90 37 84 54 5c 14 88 48 a4 61 bc 44 a8 5d 4c aa 65 31 92 46 44 4a 4a 49 14 c6 4a a4 c8 95 02 d5 32 91 4c 1c 9b 28 90 95 95 47 05 12 91 92 45 94 c0 41 52 29 14 c4 49 90 25 24 ec 8b 27 06 40 20 84 26 80 c8 82 69 14 04 89 71 11 b1 90 a4 d4 81 52 60 52 0d 6c 98 0a 43 91 20 98 41 14 b8 22 4b d1 49 03 a4 70 02 fd 36 54 e9 a1 74 86 cd 0b 2e c2 a9 44 2c b5 b3 e7 e9 41 42 a5 4c 3e 04 30 ea 06 c6 06 77 27 7a b8 06 d9 41 bb cf 6d 55 4a 8a d2 96 45 64 27 70 91 40 c1 5d 17 49 08 10 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 d2 42 00 77 45 Data Ascii: P@ !=s#$H&kdJiI%t n"D,7T\HaD]Le1FDJJIJ2L(GEAR)I%$'@ &iqR`RlC A"KIp6Tt.D,ABL>0w'zAmUJEd'p@]IwEBwEBwEBwEBwEBwEBwEBwEBwEBwEBwE
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 38 8a 65 40 a6 a9 b5 54 05 39 10 c9 12 0a 4d 50 05 48 15 22 64 6c 98 2a 4d 50 05 48 1d c9 72 44 d1 51 a8 29 34 a6 8c 8c 27 74 92 ba 2e 81 80 02 2e 8d c8 4a 30 68 b2 12 40 d4 c4 99 41 40 48 3d 31 28 b9 49 22 90 55 22 0e 51 b2 91 51 29 07 26 46 c1 22 a4 e4 8a 63 44 b1 65 37 28 95 32 a0 98 4c 9e 48 38 28 95 50 85 07 21 8e 12 10 84 dc 08 08 42 2c 95 a0 c9 2d 94 5f 72 65 44 e7 dc 48 83 24 94 e1 8c b8 db 9d 40 03 cc af fa 3d 41 fa 6f 1d a0 53 8a f5 64 7b b0 5c 3c 46 cd a2 05 cf 3a b9 81 b8 a0 9b f7 37 21 a5 06 63 96 59 34 c2 49 dd 03 44 51 74 89 42 41 01 09 72 a7 74 09 80 b9 4d 2b a6 81 41 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 Data Ascii: 8e@T9MPH"dl*MPHrDQ)4't..J0h@A@H=1(I"U"QQ)&F"cDe7(2LH8(P!B,-_reDH$@=AoSd{\<F:7!cY4IDQtBArtM+AB B B B B B B B B
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 08 21 08 40 14 9e 15 22 15 77 05 0b 28 6a ac a2 f5 a5 7e 8d e0 80 45 93 42 a4 d6 0e 9e 94 f7 a3 91 59 27 05 20 50 95 22 42 99 08 b2 a8 42 45 a9 c4 6d 14 c0 4d 4f 65 1b 29 d9 10 a7 b2 98 6a 90 09 80 94 63 29 ec ac 37 5d bd 80 c4 3b 54 9f 3e a5 59 bd 96 17 af 06 fe 40 c4 3b 54 9f 3e a5 55 ef 17 d8 cf dd 65 8b 3e ba 1e f2 35 de 80 76 36 9b f6 df 38 99 5f 6e ac 5a 03 d8 da 6e d4 df 38 99 5f 14 b6 5d 4c 3d d4 5a b9 eb 25 e2 34 90 9a b5 82 0c 82 45 34 8a 41 45 64 59 05 01 00 16 42 10 9a d6 40 8b 92 4d c8 09 46 89 08 42 51 49 26 4a 48 Data Ascii: B!B!B!B!B!B!B!B!B!B!B!!@"w(j~EBY' P"BBEmMOe)jc)7];T>Y@;T>Ue>5v68_nZn8_]L=Z%4E4AEdYB@MFBQI&JH
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: c9 e2 58 7e 02 6a fb 1b 71 65 eb c6 50 ee ee 7f 13 8c 81 52 05 6d e3 c1 ff 00 15 b9 b5 4d 21 ee bf ea 4b c8 03 16 f5 45 27 7d ff 00 65 6f 47 55 b6 e7 bc 72 6f 4d b8 fc ac d4 6d 2a 41 6d bf 20 1c 54 7f ea 29 3b ef fb 2a 43 50 58 af aa 29 3b ef fa 93 d6 ad 6c bf cc 44 f4 cb 9f c8 cd 4e d2 a7 75 b6 3c 80 f1 5f 4f a5 ef bf ea 4f c8 1b 14 f4 fa 5e fb fe a4 e5 ab da fe 74 47 f4 55 cf e4 66 a8 0a 4d 5b 5d ba 87 c5 3d 3e 97 be ff 00 a9 3f 20 9c 53 d3 e9 7b ef fa 93 be 97 b5 fc e8 64 b4 9b af c8 cd 52 14 9a b6 a8 d4 5e 27 ea 8a 5e fb fe ca 63 51 78 9f a7 d2 f7 df f5 24 fa 5e d7 f3 a2 2f a1 ee ff 00 23 35 61 51 5b 55 da 8d c5 07 fe a2 94 f7 5f f5 2c 2b 4d 34 42 b7 09 94 32 a9 83 65 f7 e2 e4 69 05 8f b5 af 6e 63 9e e2 a6 a1 a8 50 ab 2d d8 49 36 41 5b 4e b8 a3 1d e9 Data Ascii: X~jqePRmM!KE'}eoGUroMmAm T);CPX);lDNu<_OO^tGUfM[]=>? S{dR^'^cQx$^/#5aQ[U_,+M4B2eincP-I6A[N
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 2a 9c 3c 99 19 79 e9 fd 1b 40 da 67 43 c0 3f 18 58 62 e8 68 5c 42 b2 cc 1e 4e 32 e6 d6 a5 bc b7 2a 2c 31 a1 08 53 95 c1 7a 28 28 26 9d db 10 c6 f9 5f e8 58 2e 73 5e 75 be b5 35 87 c5 16 1b 1c cd 68 e3 25 da 73 cf 29 d9 73 9a 05 fb 41 50 d4 2f 7c da 9e f2 59 66 a6 93 a7 79 ed 6d c6 f0 8d 5f 43 ab ec 56 61 f9 b6 c7 44 8e 6b 7c 25 5e a9 35 4b 5c e1 f8 c9 62 8f a3 cb 78 0a f5 e9 0e bd e0 a6 9a 58 19 43 2b 9f 13 cb 1c 1e e0 cc c7 68 15 8e 33 5f 95 52 4f 10 ea 58 e2 85 d2 34 48 4b f6 88 61 22 f6 eb 46 76 ba e5 6a 6d 24 db c2 69 7c 0f 52 b5 f2 5d 5e 74 fa 5e 8e 4e 38 cf 16 b8 a2 db a5 9a 33 53 86 c8 23 9d a3 65 de 52 46 f9 57 db 7d b9 95 92 eb a0 35 a7 42 2b 30 a9 24 60 04 b0 36 66 9d e6 dc a0 73 65 65 cf eb a7 d3 2f 1d cd 3c cb 9a 3c cb 5a d3 55 95 7d d8 f2 7d Data Ascii: <y@gC?Xbh\BN2,1Sz((&_X.s^u5h%s)sAP/\|Yfym_CVaDk\|%^5K\bxXC+h3_ROX4HKa"Fvjm$i\|R]^t^N83S#eRFW}5B+0$`6fsee/<<ZU}}
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 83 41 d5 4c 95 b5 34 cd 23 8c 21 bb 0e 8e e4 00 5c 09 37 69 27 7a ae 75 cd 8e 7a 74 7f 06 16 fc d3 69 8c fa 35 57 24 96 73 a4 c3 9c f7 73 17 16 03 7c ba 55 bb 4d 72 ad 49 ae 39 e2 73 9a fe c7 cf 4c 82 75 52 4d e7 18 79 e4 71 73 53 51 6a 92 ee 11 e7 52 05 28 da 49 00 66 49 00 0e 92 6c 3e 34 88 59 d6 a2 b4 64 e2 78 bc 0d 73 6f 05 3f f3 89 ae 2e 2c db ec 34 f6 dc 02 8e bd 45 4a 9b 9b ec 43 e9 53 75 26 a2 bb 4e 90 d0 5c 39 98 1e 8f c6 1f 66 98 e0 74 f3 13 91 32 3e ef 20 f7 4d 97 27 e3 95 ee aa a8 9e a1 de 5a 69 1c f3 dd dd f1 58 77 17 45 70 97 d2 31 4f 40 da 16 1b 3e a8 d8 80 6d f8 b6 6c b9 de 16 ae 68 e8 5e 53 a9 d7 e9 27 fa b3 e9 3f 27 3a 57 43 6c eb b5 eb 61 2f 04 7a f0 aa 47 54 4d 0c 0d f2 d3 48 d8 c7 f5 8d 96 f1 d2 dd 68 d5 e0 53 b7 0c a7 a5 81 f1 53 c1 Data Ascii: AL4#!\7i'zuzti5W$ss\|UMrI9sLuRMyqsSQjR(IfIl>4Ydxso?.,4EJCSu&N\9ft2> M'ZiXwEp1O@>mlh^S'?':WCla/zGTMHhSS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49812	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:38 UTC	738	OUT	GET /wp-content/uploads/2024/05/%E7%94%B5%E6%8A%A5%E5%A6%82%E4%BD%95%E6%89%AB%E6%8F%8F%E4%BA%8C%E7%BB%B4%E7%A0%81%E6%B7%BB%E5%8A%A0%E5%A5%BD%E5%8F%8B%EF%BC%9F.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:38 UTC	781	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:38 GMT Content-Type: image/png Content-Length: 161759 Connection: close last-modified: Mon, 27 May 2024 12:46:18 GMT etag: "6654809a-277df" expires: Fri, 02 Aug 2024 18:49:35 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 100203 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lbFJRdtg%2Fr1TQR9SULeST20ibHCt8Ue229FSrJS1no9qL%2BEqyrdvblFY7JBntcbQL%2Bn7fCmrgykCckyq1v4ubzpsylnAP6GjduUMw%2FPh8tVRY57sh4OnOIfvxPaHyEj%2Bl6pB6Ys%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cc97c390cb8-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:38 UTC	588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 70 00 00 02 18 08 06 00 00 00 2c 3a 0e 54 00 00 20 00 49 44 41 54 78 9c ec bd 79 90 64 d7 5d e7 fb 39 cb 5d 72 a9 bd 7a 6f b5 ba db 92 2c 59 36 c6 b2 8d 6c 83 8c 01 8f 8d 3d 0c 06 63 0f 98 e5 c1 03 26 78 f3 1e 33 0c c3 30 cf 41 bc 89 e1 79 1c 1e 6c 82 81 20 58 9e 89 30 31 f1 82 18 e0 0d 03 63 7b 6c c0 1e 64 2c e4 45 6d 5b 96 5a 72 6b 6d a9 97 ea ee ea ea da 2b b7 7b ef 59 de 1f 37 33 ab ba 5b aa 94 5d 2a 55 75 d5 f9 44 dc c8 cc ca ac 9b e7 e6 76 cf f7 fc 7e bf ef 4f 7c cf d7 9c 27 10 08 04 02 81 40 60 9b e0 0b 87 1c 52 b4 3a 2d aa 0e 8e d5 ab 50 c0 d9 56 4e 23 8d a9 d8 1b 7b ea a2 8a 02 5b 8d 29 a4 23 2d 0a 8e c6 09 b7 0e 41 55 40 b3 d5 04 51 c3 7b 8f 17 02 0f 08 d9 fb 4f 87 f7 1e 29 d4 16 8e 7e f3 Data Ascii: PNGIHDRp,:T IDATxyd]9]rzo,Y6l=c&x30Ayl X01c{ld,Em[Zrkm+{Y73[]*UuDv~O\|'@`R:-PVN#{[)#-AU@Q{O)~
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 90 6b 81 8c 34 3a 92 c4 52 a2 11 08 60 b7 c8 97 52 c0 59 8c f1 68 2d 50 4a e1 9c db ea 61 05 b6 01 fb e3 49 e6 3c 7c b1 0d 0f 37 72 6c 06 fb 3c 54 95 60 4e 9b ad 1e de 4b 42 10 70 81 40 20 10 08 04 b6 15 56 02 de 53 95 9a 04 e8 58 c8 84 43 44 1a b1 03 e6 67 0b 59 01 75 90 75 a0 09 c3 2b 70 30 ae d2 49 62 1e 68 2c 70 da c2 25 0f 1d 20 f1 9a 8a 97 c4 ae 0c 3d ee 80 c3 1f 48 19 81 13 5d 01 67 d0 1a 94 92 38 e7 76 45 04 32 b0 3e c3 56 70 7f 51 70 6f 67 9e 34 f7 1c f3 82 65 05 97 14 ec 15 95 ad 1e de 4b 42 10 70 81 40 20 10 08 04 b6 15 d6 81 42 90 0a 8d 04 da 85 c1 48 50 91 c6 d9 ad 1e dd c6 99 cc 2c 4e c2 62 0a 2b 15 d0 02 86 0b 88 9c a4 ad 04 0f b5 0c cf b6 3c 8b 19 88 1c 2a 85 20 36 1e 9c 27 db ea c1 bf 04 94 02 0e 9c 73 58 6b 51 6a f5 76 10 70 81 fb 56 e0 Data Ascii: k4:R`RYh-PJaI<\|7rl<T`NKBp@ VSXCDgYuu+p0Ibh,p% =H]g8vE2>VpQpog4eKBp@ BHP,Nb+<* 6'sXkQjvpV
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 68 a7 46 1d c1 b2 86 c4 75 80 74 ab 87 b8 b5 78 07 5a e2 24 74 f2 02 72 c3 84 ae 70 d3 30 ec 1b 86 63 2b b0 e4 3b 2c c9 8c 4e e4 20 ae 90 c8 94 38 07 99 83 15 eb c7 e8 a4 df 5a d1 e4 b5 c0 5a 8b d6 aa ac 83 cc 0b 92 24 22 89 a0 d3 81 e6 4e 2f 82 bc c1 a9 cb cb 64 36 a6 6d 6b 14 32 41 6b 10 12 b0 60 8d 65 d2 ae e0 87 46 69 c4 70 be 0d 4f cf c2 95 66 86 d4 82 6a 25 42 04 81 36 90 10 81 0b 04 02 81 40 20 b0 6d 91 6b 22 30 42 74 d3 2a 77 79 50 46 21 40 f4 52 2d 25 4e 0a 5a 26 e7 4a 23 26 cf 41 4d 82 2a 52 12 13 51 77 16 95 49 0a e9 68 23 c8 14 54 6f 90 1c cb ae 6f 0d 00 c2 ef 8e e8 eb 4e 60 b6 18 25 d2 09 49 24 48 29 db 7f b8 c2 22 a4 23 d5 8e 78 cf 28 17 16 e1 e9 0b 4d a6 9a 8e b6 8c 49 ab 09 69 05 22 09 9d 9d 5e e4 fa 22 10 04 5c 20 10 08 04 02 81 6d 85 a2 Data Ascii: hFutxZ$trp0c+;,N 8ZZ$"N/d6mk2Ak`eFipOfj%B6@ mk"0BtwyPF!@R-%NZ&J#&AMRQwIh#TooN`%I$H)"#x(MIi"^"\ m
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 28 70 b6 cc 59 d0 5a a1 b5 66 3e ee 20 3c 68 07 ca 08 2a 46 20 db a0 56 04 d2 79 0e d7 24 ce 7b 32 ef c8 85 21 c3 91 29 47 ae 1c ce 7b 0e 14 7b 80 b2 14 e0 da 0d 40 6e 50 00 c8 01 02 6d d0 cf b3 1a f0 00 33 20 cf 79 bb d7 a9 0f 3a 3f 0d 1a ff a0 d7 67 a3 7d 8e 4c f3 fa bf ad 1d 53 4f 9f 97 b5 06 dd 95 6e b9 fa 98 b9 03 0d 24 02 bc 20 71 82 9a 81 c8 4a 22 01 78 4f 63 3e 03 05 5e 83 8f 04 56 7b 8c b2 18 61 f1 c0 b3 93 15 84 f3 a8 a2 fc 8c c7 5e 91 ba 88 21 11 31 a2 22 5a 36 ac b0 05 02 81 e7 66 bd e5 2f 41 88 c6 6c 94 6a bd 82 c7 b1 dc f2 90 79 3a 89 64 2c 16 0c 27 90 a6 29 95 25 83 14 1a a1 bb e6 28 42 60 9d a6 5d 80 71 9e 64 8b 66 8f bb bc f4 71 d3 b8 76 41 5a 35 0c 4e 4b 1a 91 c4 27 e5 df 22 03 71 01 71 ee c9 f2 59 86 6a a3 0c 8d 8e 60 81 8b 2d 38 3b 03 Data Ascii: (pYZf> <h*F Vy${2!)G{{@nPm3 y:?g}LSOn$ qJ"xOc>^V{a^!1"Z6f/Aljy:d,')%(B`]qdfqvAZ5NK'"qqYj`-8;
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 92 51 b4 1b 24 72 72 83 47 18 08 04 76 2a c6 bb 6e 0a 65 19 81 13 bd c6 de 1e 14 22 d4 42 6d 10 e5 00 3c a2 2b 86 04 65 e4 44 46 12 ef 25 73 b6 ce 8a 81 e5 65 98 6f 79 f6 26 9e b1 18 46 2b 29 d5 7a 85 66 7b d0 33 6c b4 06 e0 9a 9b 6b 22 70 d6 da b2 a6 24 f0 a2 70 ad 78 03 88 2b 09 89 2d eb de 7c 0e cb 06 2e ac c0 53 cb 6d a6 5d 46 b3 33 8a d7 a0 d2 b2 34 48 59 70 59 4e 92 e7 28 6f e8 74 6b 24 42 04 6e f3 08 df 80 4d 64 b6 05 e3 23 31 93 2a a6 75 f1 3c f3 5f 7e 08 31 75 96 c3 c0 1b 87 87 f8 a5 ef 7e 0d a3 e3 a3 ec dd 3f 41 32 52 25 b7 2d 2e 4e 9f e3 1b e7 4f 71 e5 ca 65 f2 4b fb 28 ac a1 65 72 1a 45 46 c3 74 68 db 82 8e b7 38 3c d1 d2 d2 55 e2 cd 5a 7b 95 88 5b 1b 81 f9 56 50 62 fd 15 ae 41 11 9c 81 f7 0f 70 b9 1c 14 e1 da 6c 06 09 b0 41 11 c2 41 11 d0 41 Data Ascii: Q$rrGvne"Bm<+eDF%seoy&F+)zf{3lk"p$px+-\|.Sm]F34HYpYN(otk$BnMd#1u<_~1u~?A2R%-.NOqeK(erEFth8<UZ{[VPbAplAAA
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: d0 34 95 5e 0a 66 14 45 54 ab 55 86 87 87 a9 d5 6a 1c be f3 2e 6e 3b b4 8f 37 dc 76 9c db 8f dd 4c 3a 32 c6 65 17 71 ba e3 98 ce 1c 1f bd f7 f3 d4 be e3 75 8c 7f e7 f7 20 24 14 a7 a1 da 2c 88 26 22 56 6a 86 4a 5b 97 2b c2 ce 75 8b ed 4b 01 d7 6b 9b 11 56 f0 02 81 9d 4b db c0 a1 1a dc 54 15 f8 3c 63 ae 61 a0 52 23 4e a1 d5 34 a4 c1 c4 62 4b 99 33 96 08 4f 45 38 86 95 60 54 09 46 13 cd 68 2c 49 35 44 6e 75 d2 af 28 17 de ca c5 b7 52 b4 b9 b4 5c 0d ef b5 ae 29 e7 5a ab 51 c0 1a 11 26 2a 05 9c 32 86 94 88 48 ab 5d 23 e0 c4 80 e9 e0 55 f9 55 c2 97 a9 c6 12 7a 1d 14 0f 17 8a dc 41 db 79 32 0c 85 72 14 5a 60 a4 c3 e2 79 75 5a a1 65 61 a9 80 85 02 2e 5a cf 45 93 33 5d e4 2c 99 82 31 3f b6 a9 02 ce aa b2 35 48 e4 56 b3 65 3d 50 c8 b2 bc 44 85 3e b1 03 09 02 6e 1d Data Ascii: 4^fETUj.n;7vL:2equ $,&"VjJ[+uKkVKT<caR#N4bK3OE8`TFh,I5Dnu(R\)ZQ&*2H]#UUzAy2rZ`yuZea.ZE3],1?5HVe=PD>n
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: b8 d1 05 dc 8d 6e 0b bc d6 25 f3 5a 27 d0 de df 6e 64 5e 88 89 09 ac be 8f d7 f6 9a 4b bc 47 45 11 aa 52 63 a5 28 f0 45 06 d2 90 4c 0c 31 39 3e c6 0f df f1 03 c8 fd 8a b7 fe c8 9b 79 db 77 7d 27 0f 7d f5 34 ff e9 af be cc 57 f6 de ca c8 0f bd 8b c9 d6 f5 f5 11 bd 21 09 01 3e e4 c8 07 02 3b 96 86 10 d4 b2 0e c7 ea 82 89 7a 42 3b 83 86 01 a5 41 79 83 f5 3b 7d 0a bf bd 49 9d c7 79 0f 48 9c ef ba 2a 0b a0 6b 52 d2 14 80 07 6f 4a a3 0a 2d 1c 89 10 44 5a 10 49 38 14 ad 90 68 45 35 49 a9 25 92 58 82 30 a5 f0 73 85 c1 89 98 96 2f 05 5c 55 29 52 a0 c8 cb e8 5b 83 9d 2f e0 7a 29 94 6b 85 db da 9e 6a 99 ee 20 00 e5 15 4a 44 28 4a f1 a6 ba f7 3f d3 80 56 01 8b 79 ce bc 2f 58 c4 b1 22 04 6d 01 39 70 24 ab e3 24 78 05 a8 b2 2f ba 30 e0 0b a0 80 22 d9 5c 01 17 c9 b2 15 Data Ascii: n%Z'nd^KGERc(EL19>yw}'}4W!>;zB;Ay;}IyH*kRoJ-DZI8hE5I%X0s/\U)R[/z)kj JD(J?Vy/X"m9p$$x/0"\
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: a3 8f 3e 8a 31 06 29 25 95 4a 85 8f 7c f8 3f f1 af 7e eb 3f f3 f4 e5 bf e4 8e 1f 7e 37 4d 0f 87 dc 21 ec 4a 41 8e 43 85 46 de 81 c0 8e 26 52 02 6f a1 e9 61 a2 0a 4a 48 84 71 84 b3 eb ce 47 b5 c1 2d 80 ed 48 2e 59 c7 99 b6 e4 81 66 83 6a aa 99 ea 40 75 3c 45 09 d0 b2 4c 27 8c 12 4d 2c 35 5a 82 12 70 b4 d9 d5 4f bd 5e a2 ce e3 ed aa 19 56 5e 95 78 f7 fc 25 1c 79 1a af 3b be 6a 67 7d 97 ec d1 46 d9 a9 6d ad 38 5c 7b 7d a8 3e 82 a3 4c 83 cc 81 dc 41 66 a1 00 8c 87 bf 2e 3c b9 f3 64 d6 d1 30 9e a6 71 b4 8d a3 65 2d c6 43 44 b5 dc 5f bf ac 60 ed f5 6f e2 85 de 22 6e 5e 84 4f e4 15 7e bd b5 97 1f 9e c8 b8 7c 0c 7e cc 82 72 a3 3c 7b a5 c5 63 b3 35 1a b9 e5 42 d1 e6 42 c7 71 51 c7 e8 e1 88 a8 aa 11 72 88 78 61 7b 0b d4 97 82 20 e0 d6 a1 be 5f b2 70 69 86 fa 50 42 Data Ascii: >1)%J\|?~?~7M!JACF&RoaJHqG-H.Yfj@u<EL'M,5ZpO^V^x%y;jg}Fm8\{}>LAf.<d0qe-CD_`o"n^O~\|~r<{c5BBqQrxa{ _piPB
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 6d 15 da 41 e2 20 72 10 75 7b b9 4d 57 4d df 78 05 e1 ba d7 1d bd 61 0b 5b 0a 18 21 b8 ba f6 ad 7b 7d 9b eb 37 16 23 d8 3f b4 82 1a aa 71 fa a9 45 fe c3 cc 0a ef ba e7 00 7f 74 db 18 cf cc c3 93 c9 31 48 cb d6 12 55 01 14 d0 f0 8e a6 ce 68 8d 16 ec c9 82 80 0b 02 6e 1d 5a 43 93 cc ff dd 7f e7 a7 6e 91 7c d7 ad 37 f1 85 cf 7c 99 2f dc ff 25 16 5a 4b 5c 5c 93 bf 75 6d d4 6d 27 59 c9 07 02 9b c9 b5 8d cf 7b b7 ad b5 fc d5 fd 9f e1 dd 87 de c3 d7 ff e7 49 be e7 b6 f3 fc b3 b7 7c 1b ff f1 1f be 82 3f 74 84 e5 43 37 93 86 22 e6 40 60 c7 e2 15 f8 ac 20 ad 45 34 ab 30 bb dc 84 74 88 91 21 c9 d9 46 81 94 a1 0a 66 27 a3 55 85 61 9d 22 6d c4 7c bb 4d a6 eb 28 05 ad b6 21 1b 89 10 8b b6 9c 7b 49 df 8d 9c 79 64 b7 8b b5 40 40 13 10 5d 6d 27 41 af a9 7f 13 02 6c b2 3a Data Ascii: mA ru{MWMxa[!{}7#?qEt1HUhnZCn\|7\|/%ZK\\umm'Y{I\|?tC7"@` E40t!Ff'Ua"m\|M(!{Iyd@@]m'Al:
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 63 61 61 01 e7 1c 69 9a 92 a6 e9 55 c7 bf 36 75 51 29 85 d6 1a 21 04 69 9a 32 32 32 82 52 e5 89 d2 18 d3 17 6d 3d d1 27 a5 a4 5e af 93 a6 29 b5 5a 0d 80 99 99 99 fe a2 c2 86 50 10 49 b0 cb 1d 9e 3e f9 14 27 9f 3c 83 ad 27 dc b2 6f 94 b1 a5 cb ac 34 41 d5 2a 78 9d 22 ad a2 2a 12 94 87 38 8d 42 1a 73 20 70 83 73 dd 22 92 84 42 96 56 eb 4b 0e 14 a2 34 75 c8 3d 31 92 48 2a e8 2e 04 bd 98 bf c3 81 cd 21 92 0a ac c3 1b 87 16 92 44 47 48 0f ae 30 d8 bc 20 ad 27 14 1e 5a 1d 8b 31 b6 ef 1e e9 9c c3 84 b7 f7 86 e7 75 cd 11 1e 5e 82 df e9 38 fe ce cf 70 70 45 70 cf f2 30 a6 6d f9 9d 19 58 e0 0e 7e e1 9e fd dc bc 7c 81 c7 1b 70 e5 00 cc 9b 0e 23 fa 00 23 ed 90 3c 08 bb 5d c0 79 90 1d 47 b3 a2 10 3a 65 6c 09 72 0d 4b 31 c4 27 be ca db de f0 06 92 3c e7 e4 57 1e e0 c1 Data Ascii: caaiU6uQ)!i222Rm='^)ZPI>'<'o4Ax"8Bs ps"BVK4u=1H*.!DGH0 'Z1u^8ppEp0mX~\|p##<]yG:elrK1'<W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49814	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:38 UTC	621	OUT	GET /wp-content/themes/tgtheme/img/arrow1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:38 UTC	783	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:38 GMT Content-Type: image/jpeg Content-Length: 1206 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-4b6" expires: Wed, 17 Jul 2024 18:16:46 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 1484572 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OBI%2FdZMyOVehA6CR4qzxk6M9vRMfJBg0V%2F8ag2sEAEDXjkMPON8UTl%2Bx5tE%2FDc1Xum9%2BEX7PupV4xwljkLDSYcQflADVFDnV2HwdHEJsmMBO0GhfAqcIfMkzynVkc%2B8%2F5bP6C9s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cca193a0f42-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:38 UTC	586	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifIIDucky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xm
2024-07-04 22:39:38 UTC	620	IN	Data Raw: 42 33 30 32 33 33 41 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 37 36 44 46 30 38 44 34 46 39 41 31 31 45 45 38 42 45 38 43 46 33 41 44 42 33 30 32 33 33 41 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 37 36 44 46 30 38 41 34 46 39 41 31 31 45 45 38 42 45 38 43 46 33 41 44 42 33 30 32 33 33 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 37 36 44 46 30 38 42 34 46 39 41 31 31 45 45 38 42 45 38 43 46 33 41 44 42 33 30 32 33 33 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c Data Ascii: B30233A" xmpMM:DocumentID="xmp.did:376DF08D4F9A11EE8BE8CF3ADB30233A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:376DF08A4F9A11EE8BE8CF3ADB30233A" stRef:documentID="xmp.did:376DF08B4F9A11EE8BE8CF3ADB30233A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49815	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:38 UTC	619	OUT	GET /wp-content/themes/tgtheme/img/code.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:38 UTC	772	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:38 GMT Content-Type: image/png Content-Length: 2989 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-bad" expires: Wed, 17 Jul 2024 18:16:46 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 1484572 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kp3H0sXqWNIprQRiIR2HhiHD3NYYF69Gt0wY%2F0pz4AAGk9lSkkWZgWgKkX9UnPUA%2FODofU6xpY8QYlCBx4nfRZOSjTYCz6qwizYvoVfjzHbrwpZFuPWvVQJiN4DFXTqqbKDJWB8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ccbed52424c-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:38 UTC	597	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 63 00 00 00 61 08 02 00 00 00 4d 91 88 c9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRcaMtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 39 45 38 34 46 42 37 36 36 36 38 34 36 37 44 45 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 42 42 36 38 37 44 35 43 34 46 33 46 31 31 45 45 39 45 38 34 46 42 37 36 36 36 38 34 36 37 44 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 42 36 38 37 44 35 39 34 46 33 46 31 31 45 45 39 45 38 34 46 42 37 36 36 36 38 34 36 37 44 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 42 42 36 38 37 44 35 41 34 46 33 46 31 31 45 45 39 45 38 34 46 42 37 36 36 36 38 34 36 37 44 45 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 Data Ascii: 9E84FB76668467DE" xmpMM:DocumentID="xmp.did:BB687D5C4F3F11EE9E84FB76668467DE"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BB687D594F3F11EE9E84FB76668467DE" stRef:documentID="xmp.did:BB687D5A4F3F11EE9E84FB76668467DE"/> </rdf:Description> </rdf:RDF> </x:x
2024-07-04 22:39:38 UTC	1023	IN	Data Raw: 8d ae c0 8b ab aa d0 58 08 33 bd 42 38 52 79 6e f0 5e 04 99 81 ab 97 05 24 51 40 05 94 19 c7 c2 b5 70 fa f8 f5 c8 e2 1e 59 73 77 a4 1e 66 cb 67 97 c3 9f f6 87 9b 64 e1 9d c7 eb d7 07 e5 d0 58 14 8d 84 28 0a 1d 4d 01 be 00 25 4e 29 38 cf 90 26 e7 0b 23 ac 72 2e c7 6a 59 79 f2 ac a3 b0 f8 b9 64 96 ad 18 c7 c5 3f 9c 8a cf 45 7e 76 c6 99 ff a0 5a 46 52 ca a1 be d0 07 67 46 a2 d9 42 9d ad 0d 55 1c af 3e 98 98 38 6e ee 17 55 53 f0 c1 47 51 35 4d 2f 4c 16 3d 34 7b 35 b3 a1 70 7b bf af bb 51 56 4d d2 d9 b1 0c 1a a9 44 36 37 9d cc 24 32 b9 d9 85 4e 9d 19 ac 54 4e 0d c5 73 86 a5 52 77 07 fe 9f ec 3b d0 55 d3 77 37 6e f6 5f 24 97 a6 f2 99 f1 5b a1 28 57 d6 de 50 bd 31 58 81 26 29 c4 be 81 70 ea d8 a5 71 43 8c 8c 7f 73 64 71 d8 67 06 51 cd 37 b9 30 44 64 21 d7 cc d0 Data Ascii: X3B8Ryn^$Q@pYswfgdX(M%N)8&#r.jYyd?E~vZFRgFBU>8nUSGQ5M/L=4{5p{QVMD67$2NTNsRw;Uw7n_$[(WP1X&)pqCsdqgQ70Dd!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49816	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:38 UTC	569	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.5.5 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:38 UTC	792	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:38 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Tue, 13 Feb 2024 14:36:07 GMT vary: Accept-Encoding etag: W/"65cb7e57-4926" expires: Fri, 05 Jul 2024 08:42:34 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 7024 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iXGfRaEIxYUyNOnzK2rb2PGD%2FyhZPvWCEUpAuytf1qoedC%2Bf%2BXkSz7NUjTOjPCu09pCCD14W1B7cOqeyw6CctCuTeyuQRrir36uwB77I5LjNKB89BomUN7RLMUFubo6eCr3ouAA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ccc0b3b434a-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:38 UTC	577	IN	Data Raw: 34 39 32 36 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 68 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 6a 73 64 65 6c 69 76 72 2e 6e 65 74 2f 67 68 2f 6a 64 65 63 6b 65 64 2f 74 77 65 6d 6f 6a 69 40 31 35 2e 30 2e 33 2f 61 73 73 65 74 73 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 Data Ascii: 4926/! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var h={base:"https://cdn.jsdelivr.net/gh/jdecked/twemoji@15.0.3/assets/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 64 3f 66 75 6e 63 74 69 6f 6e 28 64 2c 61 29 7b 72 65 74 75 72 6e 20 6e 28 64 2c 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 75 2c 66 2c 63 3d 64 2c 65 3d 4e 28 64 29 2c 62 3d 61 2e 63 61 6c 6c 62 61 63 6b 28 65 2c 61 29 3b 69 66 28 65 26 26 62 29 7b 66 6f 72 28 66 20 69 6e 20 63 3d 22 3c 69 6d 67 20 22 2e 63 6f 6e 63 61 74 28 27 63 6c 61 73 73 3d 22 27 2c 61 2e 63 6c 61 73 73 4e 61 6d 65 2c 27 22 20 27 2c 27 64 72 61 67 67 61 62 6c 65 3d 22 66 61 6c 73 65 22 20 27 2c 27 61 6c 74 3d 22 27 2c 64 2c 27 22 27 2c 27 20 73 72 63 3d 22 27 2c 62 2c 27 22 27 29 2c 75 3d 61 2e 61 74 74 72 69 62 75 74 65 73 28 64 2c 65 29 29 75 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 66 29 26 26 30 21 3d 3d 66 2e 69 6e 64 Data Ascii: string"==typeof d?function(d,a){return n(d,function(d){var u,f,c=d,e=N(d),b=a.callback(e,a);if(e&&b){for(f in c="<img ".concat('class="',a.className,'" ','draggable="false" ','alt="',d,'"',' src="',b,'"'),u=a.attributes(d,e))u.hasOwnProperty(f)&&0!==f.ind
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 64 29 7b 72 65 74 75 72 6e 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 64 3f 64 2b 22 78 22 2b 64 3a 64 7d 28 75 2e 73 69 7a 65 7c 7c 68 2e 73 69 7a 65 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 75 2e 63 6c 61 73 73 4e 61 6d 65 7c 7c 68 2e 63 6c 61 73 73 4e 61 6d 65 2c 6f 6e 65 72 72 6f 72 3a 75 2e 6f 6e 65 72 72 6f 72 7c 7c 68 2e 6f 6e 65 72 72 6f 72 7d 29 7d 2c 72 65 70 6c 61 63 65 3a 6e 2c 74 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 67 2e 6c 61 73 74 49 6e 64 65 78 3d 30 3b 64 3d 67 2e 74 65 73 74 28 64 29 3b 72 65 74 75 72 6e 20 67 2e 6c 61 73 74 49 6e 64 65 78 3d 30 2c 64 7d 7d 2c 75 3d 7b 22 26 22 3a 22 26 61 6d 70 3b 22 2c 22 3c 22 3a 22 26 6c 74 3b 22 2c 22 3e 22 3a 22 26 67 74 3b 22 2c 22 27 22 3a 22 26 23 33 39 3b 22 2c 27 22 27 3a 22 26 Data Ascii: d){return"number"==typeof d?d+"x"+d:d}(u.size\|\|h.size),className:u.className\|\|h.className,onerror:u.onerror\|\|h.onerror})},replace:n,test:function(d){g.lastIndex=0;d=g.test(d);return g.lastIndex=0,d}},u={"&":"&","<":"<",">":">","'":"'",'"':"&
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c Data Ascii: \ud83d\udc69\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83d\
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5c 75 64 66 Data Ascii: \ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffb\udffc\udffe\udfff]\|\ud83d\udc68\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc68\ud83c\udffe\u200d\ud83e\udd1d\u200d\ud83d\udc68\ud83c[\udffb-\udffd\udfff]\|\ud83d\udc68\ud83c\udf
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 5c 75 64 66 66 63 5c 75 64 66 66 65 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 64 38 33 63 5c 75 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 Data Ascii: d\ud83d\udc69\ud83c[\udffb\udffc\udffe\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc68\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\u2764\ufe0f\u200d\ud83d\udc69\ud83c[\udffb-\udfff]\|\ud83d\udc69\ud83c\udffe\u200d\ud83e\udd1d\u2
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 38 62 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c Data Ascii: d1\ud83c[\udffb-\udfff]\|\ud83e\uddd1\ud83c\udfff\u200d\u2764\ufe0f\u200d\ud83e\uddd1\ud83c[\udffb-\udffe]\|\ud83e\uddd1\ud83c\udfff\u200d\ud83e\udd1d\u200d\ud83e\uddd1\ud83c[\udffb-\udfff]\|\ud83d\udc68\u200d\u2764\ufe0f\u200d\ud83d\udc8b\u200d\ud83d\udc68\|
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 37 34 5c 75 64 64 37 35 5d 7c 5c 75 32 36 66 39 29 28 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 66 5d 7c 5c 75 66 65 30 66 29 5c 75 32 30 30 64 5b 5c 75 32 36 34 30 5c 75 32 36 34 32 5d 5c 75 66 65 30 66 29 7c 28 3f 3a 5c 75 64 38 33 63 5b 5c 75 64 66 63 33 5c 75 64 66 63 34 5c 75 64 66 63 61 5d 7c 5c 75 64 38 33 64 5b 5c 75 64 63 36 65 5c 75 64 63 37 30 5c 75 64 63 37 31 5c 75 64 63 37 33 5c 75 64 63 37 37 5c 75 64 63 38 31 5c 75 64 63 38 32 5c 75 64 63 38 36 5c 75 64 63 38 37 5c 75 64 65 34 35 2d 5c 75 64 65 34 37 5c 75 64 65 34 62 5c 75 64 65 34 64 5c 75 64 65 34 65 5c 75 64 65 61 33 5c 75 64 65 62 34 2d 5c 75 64 65 62 36 5d 7c 5c 75 64 38 33 65 5b 5c 75 64 64 32 36 5c 75 64 64 33 35 5c 75 64 64 33 37 2d 5c 75 64 64 33 39 5c 75 Data Ascii: 74\udd75]\|\u26f9)((?:\ud83c[\udffb-\udfff]\|\ufe0f)\u200d[\u2640\u2642]\ufe0f)\|(?:\ud83c[\udfc3\udfc4\udfca]\|\ud83d[\udc6e\udc70\udc71\udc73\udc77\udc81\udc82\udc86\udc87\ude45-\ude47\ude4b\ude4d\ude4e\udea3\udeb4-\udeb6]\|\ud83e[\udd26\udd35\udd37-\udd39\u
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 32 36 32 30 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 63 31 35 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 62 61 7c 5c 75 64 38 33 64 5c 75 64 63 33 62 5c 75 32 30 30 64 5c 75 32 37 34 34 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 63 34 31 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 64 65 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 36 5c 75 64 63 36 37 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 66 5c 75 32 30 30 64 5c 75 32 36 34 30 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 63 36 66 5c 75 32 30 30 64 5c 75 32 36 34 32 5c 75 66 65 30 66 7c 5c 75 64 38 33 64 5c 75 64 65 32 Data Ascii: 2620\ufe0f\|\ud83d\udc15\u200d\ud83e\uddba\|\ud83d\udc3b\u200d\u2744\ufe0f\|\ud83d\udc41\u200d\ud83d\udde8\|\ud83d\udc68\u200d\ud83d[\udc66\udc67]\|\ud83d\udc69\u200d\ud83d[\udc66\udc67]\|\ud83d\udc6f\u200d\u2640\ufe0f\|\ud83d\udc6f\u200d\u2642\ufe0f\|\ud83d\ude2
2024-07-04 22:39:38 UTC	1369	IN	Data Raw: 5c 75 32 36 61 31 5c 75 32 36 61 37 5c 75 32 36 61 61 5c 75 32 36 61 62 5c 75 32 36 62 30 5c 75 32 36 62 31 5c 75 32 36 62 64 5c 75 32 36 62 65 5c 75 32 36 63 34 5c 75 32 36 63 35 5c 75 32 36 63 38 5c 75 32 36 63 66 5c 75 32 36 64 31 5c 75 32 36 64 33 5c 75 32 36 64 34 5c 75 32 36 65 39 5c 75 32 36 65 61 5c 75 32 36 66 30 2d 5c 75 32 36 66 35 5c 75 32 36 66 38 5c 75 32 36 66 61 5c 75 32 36 66 64 5c 75 32 37 30 32 5c 75 32 37 30 38 5c 75 32 37 30 39 5c 75 32 37 30 66 5c 75 32 37 31 32 5c 75 32 37 31 34 5c 75 32 37 31 36 5c 75 32 37 31 64 5c 75 32 37 32 31 5c 75 32 37 33 33 5c 75 32 37 33 34 5c 75 32 37 34 34 5c 75 32 37 34 37 5c 75 32 37 35 37 5c 75 32 37 36 33 5c 75 32 37 36 34 5c 75 32 37 61 31 5c 75 32 39 33 34 5c 75 32 39 33 35 5c 75 32 62 30 35 2d 5c Data Ascii: \u26a1\u26a7\u26aa\u26ab\u26b0\u26b1\u26bd\u26be\u26c4\u26c5\u26c8\u26cf\u26d1\u26d3\u26d4\u26e9\u26ea\u26f0-\u26f5\u26f8\u26fa\u26fd\u2702\u2708\u2709\u270f\u2712\u2714\u2716\u271d\u2721\u2733\u2734\u2744\u2747\u2757\u2763\u2764\u27a1\u2934\u2935\u2b05-\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49817	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:39 UTC	391	OUT	GET /wp-content/uploads/2024/05/telegram-groups-cn.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:39 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:39 GMT Content-Type: image/jpeg Content-Length: 75593 Connection: close last-modified: Mon, 27 May 2024 12:30:00 GMT etag: "66547cc8-12749" expires: Thu, 01 Aug 2024 07:08:31 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 228668 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9yQT9TGml1X%2F4vE5c3IepvsgQXvd7iQIRhFjwXNgh9CvUxY1Lk6wmsSdxaMhoSJhCYkooUz9XHiAtsrwZxQGhdgka2qsB1qbgQTWND1354XbzwlDIqgwdcLUISs%2BNPl9mMrduNs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ccd4ff1c440-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:39 UTC	594	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 46 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 38 20 37 39 2e 31 36 34 30 33 36 2c 20 32 30 31 39 2f 30 38 2f 31 33 2d 30 31 3a 30 36 3a 35 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*DuckyF.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c148 79.164036, 2019/08/13-01:06:57 "> <rdf:RDF xm
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 46 46 44 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 46 45 38 31 35 36 45 32 38 42 33 31 31 45 44 39 44 44 35 41 43 39 44 33 42 38 46 39 46 46 44 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 36 35 42 43 42 35 45 32 38 34 38 31 31 45 44 39 44 44 35 41 43 39 44 33 42 38 46 39 46 46 44 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 46 45 38 31 35 36 43 32 38 42 33 31 31 45 44 39 44 44 35 41 43 39 44 33 42 38 46 39 46 46 44 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 Data Ascii: FFD" xmpMM:DocumentID="xmp.did:7FE8156E28B311ED9DD5AC9D3B8F9FFD"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:B65BCB5E284811ED9DD5AC9D3B8F9FFD" stRef:documentID="xmp.did:7FE8156C28B311ED9DD5AC9D3B8F9FFD"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpa
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: c7 8e 0a 24 46 92 98 c4 4c 62 20 63 ba 83 47 53 be c8 d4 9f 40 49 91 a5 4e 6f 90 bd 37 b9 0b 8b 83 c1 cf 21 bf 9a 34 0b 06 4e b2 3b 4b 16 7b bb 71 8f 51 03 df 46 a8 96 a5 a9 55 e6 a1 05 e8 84 a0 b5 08 80 04 00 20 01 00 08 00 40 06 88 01 50 21 10 30 40 02 00 10 00 80 04 00 20 01 20 04 c0 10 02 82 81 02 00 10 31 34 40 19 3c 06 39 d9 0c 8c 4c 2d ea 86 33 d7 2f 87 48 56 5b 8d 64 60 e6 df ee ad 37 bd ec 3a 6b 5a 00 d0 51 66 33 88 6c 9c 00 5a ab 2b a9 17 02 a6 4c 50 2a 6a 93 13 65 80 01 00 2a d9 53 63 9e 00 6d 12 44 53 d4 ad d3 a9 56 d4 be a3 e1 0e ea f4 28 cb 61 09 d2 85 a3 d5 50 a9 45 0a 84 73 3d c1 aa 71 44 e0 91 1b 1e ee 9a d1 49 a2 6d 16 61 78 70 ea 21 55 25 42 89 aa 0b e6 31 c6 8e e0 12 a3 0e 16 88 24 2d 26 83 82 b1 16 c5 32 40 40 14 1c d4 48 31 b2 b6 8c Data Ascii: $FLb cGS@INo7!4N;K{qQFU @P!0@ 14@<9L-3/HV[d`7:kZQf3lZ+LPjeScmDSV(aPEs=qDImaxp!U%B1$-&2@@H1
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 12 68 b1 01 69 35 2a b9 14 cc 90 d0 12 a2 41 10 f5 00 f2 a7 4d 0b 29 a0 f6 1e a7 68 93 d1 09 e8 8b 80 7b a0 73 05 50 cc 67 b4 d4 37 86 2b cb 03 21 03 74 26 93 fa f9 15 74 25 55 43 a1 e5 79 35 fe 1b f2 1a 51 14 3a f8 a6 74 d5 16 9a a0 44 0e fd 22 83 da 5a b6 0f 1a 38 51 34 22 71 f6 55 85 25 69 00 24 95 53 45 f1 64 2d 68 aa ad 22 c6 cb 4c 8d bd 25 5c 96 85 0e 4e a5 59 23 a1 d3 9a aa 48 be 32 11 ad 23 51 c5 2a 0d b2 7f 35 e1 a1 59 c4 55 c2 86 b9 cf 7d 02 8e d1 a4 90 d1 14 80 fa 11 c2 3e 24 48 d7 74 fd a0 a4 9d 08 b5 51 85 d5 70 51 a9 2a 13 7b a5 b5 53 dc 57 bc 81 c4 6a a0 cb 12 2c e3 60 bc ba c8 5a 5b 63 ba 8e 42 79 a3 8e d0 46 7a 5f e7 3d c1 ac e9 22 94 3d 44 51 57 39 46 31 6e 5b 12 d7 b0 b2 11 94 a4 94 76 b7 a7 69 e9 fc c6 63 66 fc b4 63 6c 30 38 9c 4c 19 Data Ascii: hi5AM)h{sPg7+!t&t%UCy5Q:tD"Z8Q4"qU%i$SEd-h"L%\NY#H2#Q5YU}>$HtQpQ*{SWj,`Z[cByFz_="=DQW9F1n[vicfcl08L
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: e2 b8 dc 7b 1c 77 38 5e 9b 6b d5 4d a6 f6 cd ae f2 ef 04 b4 a5 78 ba 92 da 52 b4 b4 db 92 e0 b2 1b 87 2d f1 ee b4 82 f9 96 56 d0 d9 3e 16 c8 59 33 3a d8 e7 99 5b 4a d3 8d 16 5d ab 76 dc 1c e5 5a 56 8a 94 2a b7 0b 2e d4 ae cf 8a 8a 54 54 a6 fe d3 1b 3e d9 c7 cf 9d da f0 d9 dd cf 36 dd dd 2f a5 b4 d2 35 91 5d c4 18 f2 c9 18 f0 2a de a6 9a 51 c0 51 64 2b 11 e2 8d 1f bb 2f 39 44 b1 20 ee da 51 6d c2 ee cf b4 ba 51 af e5 76 ac 98 dd ef 8f da b7 b3 19 31 f9 3b bb 68 ec f2 30 52 93 d8 dd cc d8 c4 b1 9d 5b d4 01 a3 86 a0 38 78 51 5b dc f0 cd 45 ec f9 8c 1b b8 6e 19 31 b3 27 ee ca 4a 92 5b e2 dd 2a be 5b 4d 4f 35 6f 1e 33 3f 95 c5 c2 e7 49 6d 63 7b 73 69 13 e4 a7 59 64 13 3a 36 b9 d4 d2 a4 37 55 db 78 7f 9f 5d c3 be ad 4e 4e 56 a4 e9 af d5 dd 55 d1 d6 be 73 93 e6 Data Ascii: {w8^kMxR-V>Y3:[J]vZV.TT>6/5]QQd+/9D QmQv1;h0R[8xQ[En1'J[*[MO5o3?Imc{siYd:67Ux]NNVUs
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 5f 4a db 7c 86 4e 5b c8 ec e4 d0 17 b6 09 a7 63 83 7c 5c 1b 27 55 3c 1a 56 bf 9c c6 5f 96 c7 bc 95 55 ae 1a f9 54 7d 94 f2 96 72 4b 30 8e 5e 55 8a d3 f3 1c 54 ed 4e 55 f4 4a be 46 73 ac de de cb 6d bc 94 b8 ac c5 b3 ad ee a2 71 68 a8 3d 0f 00 e8 e6 3b 83 9a 79 10 bb 8c 6c bb 59 36 d4 ed ba a7 e8 ed 3c 83 3f 02 fe 1d d7 6a ec 5c 64 bd 3d 6b a5 1d 7f b6 38 cb ad 97 b4 37 26 f1 cf 31 d6 76 f7 56 c2 2b 18 25 05 8f 94 b4 3b a4 f4 9d 7d f7 b9 ad 67 b4 f0 d5 71 5c ea f4 73 72 ad 63 da f7 9c 65 59 35 bb fc 12 ab 3d 27 c3 38 d3 e5 b8 19 19 97 d7 04 65 1a 45 3d 1b db 4f 3b 69 2f 2b d8 57 ed 64 71 ee 4d 81 ba b6 45 b4 8d 8f 2f 31 37 76 cd 71 e9 eb 0e 6b 00 f6 07 c6 1a e3 cb a8 2b 39 e3 78 d9 b6 72 5a ac 17 ba fd 3f 33 d3 b0 c7 f0 b2 59 bc b3 27 06 2e 97 1f bc ba f4 Data Ascii: _J\|N[c\|\'U<V_UT}rK0^UTNUJFsmqh=;ylY6<?j\d=k87&1vV+%;}gq\srceY5='8eE=O;i/+WdqME/17vqk+9xrZ?3Y'.
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 1a 06 de be 56 8d 7a 65 01 e0 fd 22 bf 5a ba d7 3c ca b7 b2 4f cb a9 55 de 45 8b 73 ea 53 b3 43 72 c5 f7 7a d9 cd 6c 59 8b 37 31 dc 0c d0 6a 3d 7d 0e 20 8f a4 ae 8f 1b c5 11 6a 97 63 e5 5e cf f1 39 bc 9f 0b 4d 3a da 95 7a 9f b4 de 31 1b 9b 09 99 0d 16 17 b1 c8 f7 7f 14 4f 4c 9f bd 75 0f d4 ba 9c 5e 61 8f 90 97 77 24 df 99 f9 b6 9c c6 57 2f bf 8f f1 c5 ae bd de 73 64 8d cc 00 0a eb e2 b6 f1 a2 34 b2 4c 8a 72 da 9d 78 a8 c8 9c 08 9b ab 94 37 96 32 6a 29 95 91 c8 14 64 4e 26 c7 db 6f f8 85 b4 bf fd ce 3b ff 00 ca 8d 6b 79 87 f2 b7 7e e4 ff 00 75 9b 2e 5f fc d5 af bf 0f de 47 a8 7b af f3 07 92 d8 1b ba e3 6b d8 e1 20 bc 8a de 18 5f 25 c5 c4 af 69 7b a7 60 7d 03 5a 34 00 10 35 5c 17 29 f0 f4 32 ec 2b b2 9b 55 6f 44 ba 0e ff 00 9b 78 8a 78 79 0e d4 60 a5 44 b5 Data Ascii: Vze"Z<OUEsSCrzlY71j=} jc^9M:z1OLu^aw$W/sd4Lrx72j)dN&o;ky~u._G{k _%i{`}Z45\)2+UoDxxy`D
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: c4 57 c4 72 2a 8d 8c ec e3 25 72 0a 4b 78 49 2d 51 51 c6 25 09 9c 0b 95 6c ca 8a d0 64 65 dd 5e e8 ab bc 3c 4a 48 94 8e ab 81 b6 f8 4c 64 10 9a f5 f4 f5 3a be 27 55 90 d1 c1 e6 dc ef 2e b6 5e 7b ab a2 69 18 a9 0d 2f 11 b5 ce e4 d0 4f d0 9b 43 a5 4e 64 f9 cc f7 32 cb 29 ab 9e e2 49 f1 25 56 9e a7 6e a1 c3 14 91 03 8f 54 94 4b 79 6a d8 55 b9 68 0e 0a 12 45 f6 de 84 4e 6d 14 4b 13 3a 0e cf 92 59 71 45 8f 75 44 4f 2d 15 f0 3a fd 4b 26 0f 43 91 e6 b1 4a f5 56 f4 6c 9d 3e e2 75 d4 d2 d7 52 0e 93 ae b4 1e 3c 94 ea 5b 53 4c cd 67 6e 6e 64 7d a5 93 cc 76 b1 92 d7 3d bc 5e 47 1d 7c 15 72 6d ec 3a 4c 4c 28 c1 29 4d 56 4f d0 6a ef 6b d8 f7 57 5a eb 55 8e ea 8d ea 69 a2 c5 9d d1 85 e1 c0 f4 bc 6a d3 e0 ac 84 a8 53 76 df 12 36 dc 1e ee 93 e2 19 63 7a ee b6 bc f4 c7 29 Data Ascii: Wr*%rKxI-QQ%lde^<JHLd:'U.^{i/OCNd2)I%VnTKyjUhENmK:YqEuDO-:K&CJVl>uR<[SLgnnd}v=^G\|rm:LL()MVOjkWZUijSv6cz)
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: a6 38 57 d8 af 46 75 99 52 69 f5 9c b8 cc f6 ba 83 50 34 af 8a a3 89 9d d7 02 68 90 cc f7 10 14 f8 99 0e 14 87 79 8e 61 15 fa 51 c5 42 3c 35 30 7b c7 73 33 0d 8e 2e 0e 02 e6 66 90 d3 cd ad 1c 5c b5 3c df 98 2c 6b 5a 3f 7a 5e ae 93 69 ca b9 7b c8 bb d4 8f 3d e5 72 93 e5 ae 4c b2 13 e5 8f d1 b7 d1 e2 7d 25 79 16 45 f7 7a 55 67 af e3 63 46 c4 28 b6 94 da d3 c1 50 91 90 d9 b3 ed 1d 81 bb 37 d5 fb 71 bb 57 17 36 42 e4 fd a3 1b 49 63 47 89 77 00 b2 ed 63 4a e6 ab 61 81 91 9d 6a c7 c4 f5 e8 5a bf 31 e8 2d bf f2 31 dc dc 8c 4d 9b 2d 77 6b 8d ea 6f 57 96 5c 1e e1 5e 44 78 ac b5 8d 66 3f 14 fc c8 d5 cb 99 5f 97 e1 da d3 f4 9d 0c 96 47 e4 33 7d c1 09 7d 86 6a d2 e6 50 34 8d de e5 7d a9 fe 5e c3 d9 37 e6 0f cf e5 47 59 5a 5e 49 1c ab 76 7c b2 77 73 68 f5 cb 77 84 7d Data Ascii: 8WFuRiP4hyaQB<50{s3.f\<,kZ?z^i{=rL}%yEzUgcF(P7qW6BIcGwcJajZ1-1M-wkoW\^Dxf?_G3}}jP4}^7GYZ^Iv\|wshw}
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: aa 77 b2 1c f4 d8 ba 0a 31 b0 a3 6e b2 7e f4 9e d6 f6 ff 00 81 b8 08 2b ff 00 9d 63 f1 1b 0e 01 4d b8 3e 94 b8 c6 e0 46 fb 36 b8 51 c3 a9 a7 88 3a 8f ad 49 5c a1 4c ac 29 6d 46 91 ba fb 43 b0 37 8c 6f 8f 3b 82 b5 b8 7b f8 cc 23 0c 92 a7 9f 53 56 74 33 ae 25 46 f8 97 5e a6 aa e7 29 b4 df 14 6b 07 fa 3a 1e 76 df 1f 22 9b 6b 21 e6 5c ec ec 9c 98 e9 ce ac b6 9f df 8f f7 c3 5f a9 59 de 63 dc db 1e 17 d2 bd 84 14 33 6c 7c 32 57 17 44 b4 7e 74 79 bf 7b fc a9 77 63 67 19 25 18 d3 94 b2 65 7e fe cf ef 34 1c fa 46 bf 52 8b c2 52 d6 dc 94 bd 0c b2 3c d9 45 f0 de 84 a0 fc eb ce b6 79 4e 37 90 c4 64 71 72 9b 7c 8d a4 b6 d7 0d 34 2c 95 85 87 e8 21 61 5c b3 38 69 24 d3 36 b6 72 6d dd 55 84 93 5d 45 13 19 ae 9a 1f 03 a2 aa 95 32 78 86 b9 b4 14 51 68 69 83 0c 91 b8 4b 13 Data Ascii: w1n~+cM>F6Q:I\L)mFC7o;{#SVt3%F^)k:v"k!\_Yc3l\|2WD~ty{wcg%e~4FRR<EyN7dqr\|4,!a\8i$6rmU]E2xQhiK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49818	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:39 UTC	420	OUT	GET /wp-content/uploads/2024/05/so-verwalten-und-loschen-sie-ihr-telegram-konto.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:39 UTC	773	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:39 GMT Content-Type: image/jpeg Content-Length: 52284 Connection: close last-modified: Sun, 12 May 2024 01:51:43 GMT etag: "664020af-cc3c" expires: Fri, 02 Aug 2024 22:39:34 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 86405 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I2w8TLYZBOsTGs081RwFZaa0httGFGVmKId8TCPW4rsf7ih4GahzH3CL8i4xCtGT6Z5MkxWGgi1f3qvhFYkQ5OqCLSQ7cWsAF%2B8LCn%2BkrHhkXOjhLAJVoNscLQnTmfsSm97p3ng%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29ccebca243e3-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:39 UTC	596	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 01 08 08 08 08 09 08 09 0a 0a 09 0d 0e 0c 0e 0d 13 11 10 10 11 13 1c 14 16 14 16 14 1c 2b 1b 1f 1b 1b 1f 1b 2b 26 2e 25 23 25 2e 26 44 35 2f 2f 35 44 4e 42 3e 42 4e 5f 55 55 5f 77 71 77 9c 9c d1 ff c2 00 11 08 04 38 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 04 01 03 05 06 07 02 08 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 05 03 04 06 02 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ce 0e d3 e7 80 00 00 00 00 00 00 00 00 Data Ascii: JFIF++&.%#%.&D5//5DNB>BN_UU_wqw++&.%#%.&D5//5DNB>BN_UU_wqw8"5
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 51 d2 ac 73 cb 50 e8 f7 b9 95 d3 a4 53 9c dc 98 e8 52 74 3c a6 5c 1b ac cd 3a 56 de 86 e3 77 5f c9 ed d7 cf 5b b9 97 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 87 98 7e b5 fc 3b 1e b0 f6 74 aa 8e 87 39 aa e3 d5 96 d5 a5 ed bf 1e 4d 29 d7 72 67 0f 77 71 c2 1d dc 70 87 77 1c 21 dd fc 9c 29 99 c3 00 01 59 31 44 b4 41 2d 10 4b 44 12 d1 04 a8 d4 00 00 32 e6 21 dd 7d 1c 21 dd c7 08 77 71 c2 1d dc 70 87 71 c5 9c 8a bb b6 9e 48 da f4 56 4c 7d 67 25 cb f7 7b 2a ad de 7e a1 b1 5b 73 f9 17 8f 7b 1a a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: QsPSRt<\:Vw_[~;t9M)rgwqpw!)Y1DA-KD2!}!wqpqHVL}g%{*~[s{
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 7c fa 99 f3 8f 69 e7 9b 1a bc ee 2e 6b 1f 8b 2f 6b ed ff 00 32 7d 37 ee 03 d6 30 00 00 00 00 00 06 9d b8 e9 c7 c8 32 a2 ca 88 e9 fb 06 03 3f d0 73 39 eb b6 ae d9 52 04 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 1e fc 18 8d 77 62 d7 ab ae 79 4c 49 71 39 de a7 eb 2d f7 42 df 64 09 00 00 00 00 00 00 7c d5 f4 af 00 f1 b1 c8 2b e6 66 0b 1e cb be 53 cf 41 ce c8 c5 64 3d f9 60 33 f1 e4 63 c9 62 cf bb 9b 7a ff 00 3a e0 37 ee 77 41 6d bf fd 4b f3 77 d2 33 01 ef 5c 00 00 00 00 00 01 a7 6e 3a 71 f2 0c a8 b2 a2 3a 8e 7b 03 9e bf e6 73 d7 6d 5d b3 a4 09 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: \|i.k/k2}702?s9RwbyLIq9-Bd\|+fSAd=`3cbz:7wAmKw3\n:q:{sm]
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0b 57 6c 44 e1 f1 19 18 15 97 9c 8a 24 b8 94 1d 2f d6 5b ee 85 be c8 12 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 02 40 00 00 0d 3b 71 d3 8f 90 65 45 95 11 d5 b3 38 6c cd ff 00 33 9d bd 66 f5 9d 20 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b1 7e c4 4e 0b 1f 90 81 57 7f c8 62 4b 89 43 d1 7d 65 be e8 5b ec 87 a4 f9 7b 1e 1e aa 78 7b 1e 1e c7 87 b1 e1 ec 78 7b 1e 1e c7 87 b1 e1 ec 78 7b 1e 1e c7 87 b1 e1 ec 78 7b 1e 1e c7 87 b1 e1 ec 78 7b 1e 1e c7 87 b1 e1 ec 78 7b 1e 1e c7 87 af 23 Data Ascii: WlD$/[@;qeE8l3f L~NWbKC}e[{x{x{x{x{x{x{#
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 5f 59 6f ba 16 fb 20 48 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0d 3b 71 d3 8f 90 65 45 95 11 d5 b2 78 dc 95 e7 3f 9e 97 12 5d af 3e 1e bc 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b1 7e c4 4e 0a 04 f8 35 77 fc 7e 2c a8 b4 3d 17 d6 5b ee 85 be c9 77 d4 98 98 aa e8 7b 7a db db 41 f7 b3 83 7b 25 56 6f c5 4a 44 c5 4a 11 52 84 54 a1 15 28 45 4a 11 52 84 54 a1 15 28 45 4a 11 52 84 54 a1 15 28 45 4a 11 52 84 54 a1 15 28 45 4a 11 52 84 54 a1 15 28 44 b5 90 8e 47 d3 b7 1d 3a 5f 20 ca 8b 2a 23 ac e4 31 59 2b de 7b 61 97 1a 4d a5 00 7a f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: _Yo H;qeEx?]>~N5w~,=[w{zA{%VoJDJRT(EJRT(EJRT(EJRT(EJRT(DG:_ *#1Y+{aMz
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0f 1e fc 18 8c 26 6f 09 5d 73 c8 a2 ca 8b ce f5 3f 59 6f ba 16 fb 29 37 ec 5f f3 3a c6 2b 2d 0b 91 e8 bc 79 f5 17 57 3e 63 68 d5 f6 8e 92 93 5b c2 67 70 96 9a 39 59 ba 64 b3 27 ef cc 52 7f ad 5e 51 d0 ae 40 9e 00 00 00 00 00 00 00 00 00 00 28 6b bb 1e bd b0 96 a3 48 8e 4e b5 76 d1 13 4e dc 74 ef 4f 90 65 45 95 11 d5 b3 38 6c cd ff 00 33 9e bb 6a ed 9d 20 4c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f1 ef c1 88 c1 e7 30 95 d7 3c 8a 2c a8 bc ef 53 f5 96 fb a1 6f b2 93 7e c5 ff 00 33 89 d0 ba 9a 96 cf 97 df e9 2d 4d 8c 46 5c bf a8 29 e3 36 3b 8b 62 Data Ascii: &o]s?Yo)7_:+-yW>ch[gp9Yd'R^Q@(kHNvNtOeE8l3j L0<,So~3-MF\)6;b
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: f9 9c f5 db 37 2c e9 3d 28 98 aa 82 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1e 3d f8 31 18 3c e6 0e ba e7 91 c5 95 17 9d ea 7e b2 df 74 2d f6 52 6f d8 bf e6 74 4d 4f a9 f3 6a ce c7 70 d1 af 7b c5 b7 b0 6f b8 ac ad 97 25 8a c5 6d 4c da 1a ac 6d cc 6a 33 f3 e3 52 c7 ef a3 5e c5 ee a3 4e c9 e7 86 a5 37 60 1a 3e 5b 62 1a 0e db 91 1a 94 3d e4 6a ad a8 6a 75 da c6 9d b8 80 00 00 00 00 01 65 78 2d 7b 86 78 d3 76 3d 23 d3 e5 79 31 a4 c4 75 0c be 07 29 7b cd ec 77 31 3e b7 ea b2 95 c5 26 32 fe f0 94 89 cf fa c0 48 9f 39 9a e3 a4 64 c7 29 6b df af 3e 82 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 7,=(=1<~t-RotMOjp{o%mLmj3R^N7`>[b=jjuex-{xv=#y1u){w1>&2H9d)k>
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 55 05 54 15 50 57 17 93 b3 8f 2c a9 da fe 6f c7 bb e3 2e 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 78 f7 e0 c4 60 73 d8 0a eb 9e 4d 16 54 5e 77 a9 fa cb 7d d0 b7 d9 49 bf 62 ff 00 99 30 dc e7 6e bf af b9 86 3f 36 bf 5f 61 73 5a 16 be 7c 5d 79 f7 69 74 5a 5d 16 97 45 a5 d1 69 74 5a 5d 16 97 45 a5 d1 69 74 5a 5d 16 97 45 a5 d1 69 74 5a b7 26 21 84 d0 36 ad 1a ce 9b c0 e8 f9 30 00 00 00 00 00 00 00 00 02 66 d5 af b5 a4 ba c5 cd 3b 0e 46 9d 06 ca 9c 3d 79 00 00 31 b9 58 9e 35 b6 f3 be ad 5d cf ae 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: UTPW,o.x`sMT^w}Ib0n?6_asZ\|]yitZ]EitZ]EitZ]EitZ&!60f;F=y1X5]
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 20 00 00 f3 ea 86 07 9b 74 fe 6f bb 5d 86 1d 3f 18 00 00 4b da f4 96 1d 9e bf 9b e0 b2 2b ad bb 93 95 e5 b4 ac 37 ef 3c f3 56 c9 8b 6b d2 68 ba e7 47 41 89 f1 be 1c c7 66 18 76 00 00 0a 70 7e c5 c7 2f 79 90 b7 a1 00 00 00 03 1f 98 c3 e6 f0 6d 4b ad 2b 9f 58 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 07 8f 7e 0c 46 b3 b3 6b 15 d7 3c ba 2c a8 bc ef 53 f5 96 fb a1 6f b2 93 7e c5 ff 00 33 ac 5f b3 0f 97 bd ce 62 ad e2 7c 7b ce ed 1a c6 cf 71 5b 83 d5 77 9c 15 9e 8e 8f b6 4c 90 68 d9 3d a6 21 ac 65 f3 32 0f 1a 1f 47 d7 4c 7c 5d e7 10 43 c4 6e b0 4c 5e 17 79 1a d4 5d 92 01 94 d8 a0 ce 00 00 00 31 bc f7 a4 69 39 30 e8 c3 b0 e0 40 00 00 00 00 00 Data Ascii: to]?K+7<VkhGAfvp~/ymK+X~Fk<,So~3_b\|{q[wLh=!e2GL\|]CnL^y]1i90@
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: f3 23 0e cd 33 14 93 ef c2 a6 4c 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 6b 1f 95 b5 e7 de 9d 85 df b0 fa 16 bc d3 5e ea d0 2a ee f9 93 78 c4 6a ed eb cc b7 9f 1e f1 6c 9f 94 e3 99 1f 46 31 93 23 18 c9 8c 63 26 31 8c 98 c6 32 63 18 c9 8c 63 26 31 8c 98 c6 32 63 18 c9 8c 63 26 31 8c 98 c6 32 63 18 c9 8c 63 26 31 8c 98 c6 32 63 18 c9 8c f7 4a e2 d3 ec a9 fb 03 0b 99 bc e6 aa a3 de 3a a8 2a a0 aa 82 aa 0a a8 2a a0 aa 82 aa 0a a8 2a a4 6f 3e af c3 f7 93 c5 b1 63 27 ea ee 5c 2a 9e f1 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: #3L k^xjlF1#c&12cc&12cc&12cc&12cJ:*o>c'\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49819	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:39 UTC	592	OUT	GET /favicon.ico HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:39 UTC	734	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:39 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close last-modified: Sat, 20 Apr 2024 04:34:24 GMT etag: "662345d0-10be" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=n%2BI9W0NPvWiRz9pLzcZ3QYn83s5XKT5IJz2UHW%2BtOMI5h4S94c8%2BVKfuOp6ykgV2KY4aAmO%2BFL5HDwyBhGLIyLGrRDH06aCzYKDes1OZ6NFqM95PL6br%2BQjHgWpoNXdIb6nKI4U%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cd088c18c7b-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:39 UTC	635	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d5 aa 2b 06 d4 9e 2b 47 d3 9a 27 95 d3 9c 28 bf d2 9b 29 d9 d2 9a 28 f3 d3 9b 29 f3 d1 9b 28 d9 d2 9b 28 bf d3 9a 27 95 d4 9a 28 47 d5 aa 2b 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d5 9f 2b 18 d3 9c 29 96 d3 9c 28 f1 d2 9b 28 ff d2 9b 28 ff d2 9b 28 ff d2 9b 28 ff d2 9b 28 ff d2 Data Ascii: ( @ ++G'()()(('(G++)((((((
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 9c 29 ff d5 9d 2a ff d4 9c 29 ff d4 9c 29 ff d4 9d 29 ff d4 9c 29 ff d4 9d 29 ff d4 9d 29 ff d5 9d 29 ff d4 9d 29 ff d5 9d 29 ff d5 9d 2a e3 d7 9f 2d 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 df 9f 2b 18 d7 9e 2b e3 d5 9d 2a ff d5 9d 2a ff d6 9e 2a ff d5 9d 2a ff d6 9e 2a ff d6 9e 2a ff d5 9d 2a ff d6 9e 2a ff d5 9d 2a ff d5 9d 2a ff d5 9d 2a ff d5 9d 2a ff d5 9d 2a ff d5 9d 2a ff d6 9e 2a ff d5 9d 2a ff d6 9e 2a ff d6 9e 2a ff d5 9d 2a ff d6 9e 2a ff d5 9d 2a ff d5 9d 2a ff d7 9e 2b e3 df 9f 2b 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db b6 49 07 d7 9f 2a c7 d6 9e 2b ff d6 9e 2a ff d6 9e 2a ff d6 9e 2a ff d6 9e 2a ff d6 9e 2a ff d6 9e 2a ff d7 9e 2b ff d6 9e 2a ff d7 9e 2b ff d7 9e 2b ff Data Ascii: ))))))))))--++*********************++I+*****+++
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 76 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fb f7 ff ed ce 90 ff de a5 32 ff de a4 30 ff ea c7 7f ff fe fe fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 d7 a4 ff de a4 2f ff de a4 30 ff de a4 30 ff de a4 2f ff de a4 30 ff de a4 2f ff de a4 2f ff de a4 2f f2 de a5 30 f3 de a4 30 ff de a4 30 ff df a5 30 ff de a4 30 ff df a6 33 ff eb c8 81 ff f9 ef db ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f8 ed d7 ff e4 b6 58 ff df a5 30 ff e9 c2 75 ff fe fd fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 e6 c6 ff de a4 30 ff de a4 2f ff de a4 2f ff de a4 30 ff de a4 2f ff de a4 30 ff de a4 30 ff e0 a6 30 f3 df a6 30 d9 e0 a5 31 ff e0 a5 31 ff df a5 30 ff e0 a5 31 ff df Data Ascii: v20/00/0///000003X0u0//0/00001101
2024-07-04 22:39:39 UTC	913	IN	Data Raw: ff e7 aa 36 c7 ff b6 49 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ea aa 35 18 e7 ac 37 e3 e6 aa 35 ff e6 aa 35 ff e7 ab 35 ff e6 aa 35 ff e7 ab 35 ff e7 ab 35 ff e7 ab 36 ff e7 ab 35 ff e7 ab 36 ff e7 ab 36 ff e6 aa 35 ff e7 ab 36 ff e6 aa 35 ff e6 aa 35 ff e7 ab 35 ff e6 aa 35 ff e7 ab 35 ff e7 ab 35 ff e6 aa 35 ff e7 ab 35 ff e6 aa 35 ff e6 aa 35 ff e7 ac 36 e3 ea aa 35 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e9 ac 37 2e e7 ac 37 e3 e7 ab 36 ff e8 ab 36 ff e7 ab 36 ff e8 ab 36 ff e8 ab 36 ff e7 ab 35 ff e8 ab 36 ff e7 ab 35 ff e7 ab 35 ff e7 ab 36 ff e7 ab 35 ff e7 ab 36 ff e7 ab 36 ff e8 ac 36 ff e7 ab 36 ff e8 ac 36 ff e8 ac 36 ff e7 ab 36 ff e8 ac 36 ff e7 ab 36 ff e7 ac 37 e3 e8 b0 Data Ascii: 6I575555556566565555555555657.7666665655656666666667

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49820	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:39 UTC	410	OUT	GET /wp-content/uploads/2024/05/maxresdefault-2024-04-24T175141.860-1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:39 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:39 GMT Content-Type: image/jpeg Content-Length: 145071 Connection: close last-modified: Mon, 27 May 2024 12:35:44 GMT etag: "66547e20-236af" expires: Mon, 22 Jul 2024 16:49:52 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 1057787 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=XwcnrJw8Czuj5Nspsn940ANE%2BRfffNZ3Matapgl%2BSVUQsXlG6F3HrrWhFNSs6DzHfPHriPdQ66wnM4m0MO0cjpIyeP4zDcGbhrZWtX2zj8PZHfzU9Gzr6gerqBJL7m4KIkvN9Ss%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cd0e93c80d6-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:39 UTC	592	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0a 0a 0a 08 0a 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 09 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 15 15 10 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 15 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 07 08 03 05 06 04 09 ff c4 00 67 10 00 01 03 03 00 04 08 06 0c 0a 06 06 07 06 03 09 01 00 02 03 04 05 11 06 12 21 31 07 08 13 14 41 51 61 81 18 22 55 71 91 94 17 23 32 52 54 Data Ascii: JFIF"g!1AQa"Uq#2RT
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 63 8b 0f 5b 7a ba 97 a4 dd 67 fc fc 98 f3 85 e2 42 5b 04 e0 4a cf 25 64 a7 7c 8e 3e 73 ff 00 25 85 c4 9d e4 9f 3a 44 22 c1 17 29 ba 9d 81 1a 83 a9 39 09 2c 9a 86 8c 27 f2 8e f7 c5 31 09 c0 04 b7 4f e5 1d ef 8a 42 e3 d6 9a 84 58 25 b9 46 07 52 4d 51 d4 95 09 0f 62 44 8d 60 ea 4b a8 3a 82 72 12 80 0f 32 44 81 83 a8 23 50 75 04 a1 28 4a 1a 10 9b a8 3a 82 5d 41 d4 13 b0 84 fc 81 17 4c 0c 1d 49 c2 31 d4 95 28 46 50 8b a6 ea 0e a4 6a 0e a4 e4 25 ca d4 66 28 6a 0b 8f 5a 10 97 28 4a 1e 51 9e d2 8e f2 84 23 20 4b ca 3b 8a 3b ca 0a 10 8c 81 21 71 29 1c d0 7a 12 6a 0e a0 9c 84 b9 02 4b a6 ea 0e a0 97 50 75 04 b9 4b 94 b9 02 2e 9a 23 1d 41 2f 26 3a 93 90 97 20 48 93 93 1d 41 27 26 3a 82 78 42 4c 81 09 ba 83 a8 7a 12 f2 63 a8 27 04 aa 46 b0 24 ba 6f 26 3a 91 c9 8e a4 Data Ascii: c[zgB[J%d\|>s%:D")9,'1OBX%FRMQbD`K:r2D#Pu(J:]ALI1(FPj%f(jZ(JQ# K;;!q)zjKPuK.#A/&: HA'&:xBLzc'F$o&:
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 52 a5 42 30 8c 25 4a 10 84 88 4a 42 02 78 09 0a 54 21 09 c1 22 10 84 25 b2 4b a1 09 70 84 a8 ba 30 91 39 28 4a 1a 84 88 4b 84 27 04 21 2e 12 04 e4 f0 10 90 04 a8 40 4e b2 12 b5 26 12 84 a0 25 01 09 12 a7 6a 23 55 38 04 dc c9 a0 27 84 06 ac b0 42 49 e9 4e 6b 6e 74 4d 2e 08 a7 8b 58 e1 6f 2d 76 a2 e2 36 67 6a f6 59 2d 39 de 3b b0 a4 1b 05 93 dc f8 bf 42 bd 05 37 15 42 6a 8b 6e 5a 7b 1e 8f 13 8d 9f 42 ee ac da 38 06 3c 5e ae 85 be b2 59 46 cd 9f 42 ec 2d b6 b1 b0 e3 e8 57 ac 19 aa cf 74 c5 cb 9e b6 d8 46 07 8b d4 b7 f4 96 4c 74 2e 86 96 84 0c 6c e8 5b 08 a9 b0 a1 74 a1 30 b8 ad 0c 16 b1 b0 60 2f 64 74 1d 8b 72 d8 7b 13 b9 25 01 96 e9 2e 56 a0 51 84 3a 8f b1 6d 30 98 f0 97 32 40 f5 aa 75 18 ea 0b 0c 96 e6 90 76 05 b7 2d 4d 0c 4b 74 e1 20 5c e5 55 89 a7 a0 6e Data Ascii: RB0%JJBxT!"%Kp09(JK'!.@N&%j#U8'BINkntM.Xo-v6gjY-9;B7BjnZ{B8<^YFB-WtFLt.l[t0`/dtr{%.VQ:m02@uv-MKt \Un
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: a9 30 94 27 34 21 08 42 13 92 21 08 42 54 89 42 54 8d 4a 13 80 42 30 95 08 52 00 84 21 09 42 5b 21 22 5c 23 09 52 80 84 21 2e 10 96 c8 40 42 11 84 e4 d2 53 80 4e 6f 4f 99 34 27 75 27 0d e9 a8 09 d8 46 aa c9 13 32 53 c0 ba 4b a2 9e 12 4e 02 e9 ac b6 bd db 32 76 26 58 ad b9 c6 c5 21 e8 dd 97 76 42 d0 a7 80 73 aa 33 cc 8d 1b b3 e7 1b 14 8f 61 b4 63 1b 13 ac 16 7d db 17 6d 6a b7 01 8d 8a eb 9f 95 65 bc 92 52 5a 6d d8 c6 c5 d1 51 d2 63 a1 3e 92 9b 01 6c 23 89 67 cb 32 68 0b 0c 50 61 64 2c 59 88 58 5e 55 7b dd 23 8d 93 1c 56 39 0f 62 6c 92 2f 24 b3 a9 9a cb a8 5d 22 ce e9 07 52 63 a4 0b 5f 2d 42 c0 6a c2 9d b0 28 39 55 b5 32 76 a3 59 6a 79 e0 eb 47 3d 4f e4 0a 5e 59 6d 83 96 46 b8 2d 38 ac fe 72 94 56 26 98 1c a6 6c a2 cb 6a e6 82 bc d3 40 0f 42 c1 1d 58 eb 59 Data Ascii: 0'4!B!BTBTJB0R!B[!"\#R!.@BSNoO4'u'F2SKN2v&X!vBs3ac}mjeRZmQc>l#g2hPad,YX^U{#V9bl/$]"Rc_-Bj(9U2vYjyG=O^YmF-8rV&lj@BXY
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 48 ee 53 17 06 1c 29 b6 b1 ec a5 ab 6b 21 aa 7e c8 65 61 22 1a 87 00 49 6e a9 fe a6 4d 9b 01 24 3b 70 db b1 2b 64 05 0e 8c 85 f3 12 e1 47 2c 32 49 14 d1 be 19 a1 79 8e 58 a5 69 64 91 bd a7 0e 6b d8 e1 90 e0 46 e5 7b ff 00 e8 eb b2 72 56 5a fa a2 3c 6a fb 91 68 38 df 15 24 4d 8d a3 b7 12 3e 6f 4a 5e 3c 3c 0f 45 5d 43 2d ea 92 20 db 8d be 3d 7a c1 1b 46 b5 6d 1b 35 5a f7 3f 68 cc b0 b3 2e 07 69 2d 04 75 29 13 8a 25 97 99 e8 b5 8d 8e 18 74 d4 f2 56 bf 3b 09 e7 95 12 d4 b3 3e 68 e4 8c 77 29 09 51 28 cf 86 2a de 56 ed 70 39 3a ac 92 38 1b 9e 81 0c 11 31 c0 76 72 a2 53 f1 d7 22 f3 80 4f 50 27 d1 ff 00 a1 f4 2f 4d d2 b7 97 9a 79 f6 ff 00 48 9a 69 c6 77 81 2c 8e 78 07 cc 08 0b db a2 14 3c bd 6d 0c 24 02 25 ab 81 ae 07 73 99 ca 34 bc 1e cd 40 7d 25 53 bd dc ad 8d Data Ascii: HS)k!~ea"InM$;p+dG,2IyXidkF{rVZ<jh8$M>oJ^<<E]C- =zFm5Z?h.i-u)%tV;>hw)Q(*Vp9:81vrS"OP'/MyHiw,x<m$%s4@}%S
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 97 3a ae 95 e7 67 8a f2 e2 24 8f 71 f1 83 8e 33 b8 aa 85 a4 3c 1f dc e9 6e 46 d3 2d 0c c6 e9 ac 1b 1d 34 43 95 75 40 21 ce 6c b4 ee 66 c9 62 2d 6b 8e b0 dd aa ec e0 82 be 82 70 11 a5 f5 f5 92 4f 05 49 35 30 c3 13 5f ce 9d a8 d9 22 7b 9c 43 21 79 6b 47 2d ac 03 88 3b c7 27 b4 9c a9 1e f2 ea 4a 72 ea e9 c4 31 3a 18 b9 23 54 f6 8e 51 91 17 67 93 6b c0 2e c1 71 f7 23 79 c2 9a 3a 83 65 13 99 62 a9 bf 06 3c 4e aa e7 6c 73 5e 6b 85 bc 38 07 1a 1a 46 b2 a2 a4 67 6e ac b5 3a c6 28 ce 3d e8 7f 9d 4d 76 8e 2a ba 2b 13 5a 24 b7 54 55 b8 0f 77 51 70 ae 19 3d 65 94 f2 c6 df a1 79 34 cb 86 6a 99 4b 99 40 d1 4b 10 d8 2a 24 6b 24 a8 78 d9 e3 08 e4 69 64 23 78 c1 0e 3d 3b 17 01 59 a4 d5 d2 9d 67 d7 d6 13 d9 53 33 7e 86 b8 05 13 ea 49 3b d4 8d 84 a9 5e bf 8b 16 89 c8 3f f6 Data Ascii: :g$q3<nF-4Cu@!lfb-kpOI50_"{C!ykG-;'Jr1:#TQgk.q#y:eb<Nls^k8Fgn:(=Mv+Z$TUwQp=ey4jK@K$k$xid#x=;YgS3~I;^?
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 52 4a bd 13 d4 2f 04 d5 2b c9 55 55 fc e5 6b a7 aa ed 0b 4a 2a 62 a9 3a 55 ec 9a ab ce bc 52 54 ff 00 39 5e 39 aa 7c cb c7 25 4a bc d8 53 33 2d 8f 3b 29 39 f7 6a d2 4b 52 bc 92 d6 a9 39 34 f6 82 57 4b f8 43 f4 92 9a fe d5 c9 1a fe d4 e1 58 76 6d fa 53 4c 2a 51 70 17 5f 1d c1 7b a9 6b b3 e6 5c 65 3d 56 ed ab 6b 49 3e ed aa 37 42 8c f6 0b ab 8e a3 b5 66 12 67 7a d2 d3 4d b9 7b 59 27 6a ad 24 56 28 e5 57 b8 15 8e 48 c2 c6 d9 3b d6 56 c8 14 45 aa c3 25 5a ea da 20 47 fc 97 19 a4 76 46 b8 1d 9d 0a 42 79 c8 5a ca e8 03 81 f3 24 b2 b9 1c 8a b6 69 a6 8d 96 97 39 ad c6 09 3b 02 e1 de d2 36 11 b5 59 5d 26 b3 87 03 e2 f5 f4 28 57 4c 2c 46 37 17 34 6c c9 ce c5 1c b1 f3 85 a7 04 e3 72 e4 90 02 71 1b d2 2a f9 55 d4 b8 46 12 a3 09 c0 21 26 aa 30 94 04 26 e5 42 69 09 30 Data Ascii: RJ/+UUkJb:URT9^9\|%JS3-;)9jKR94WKCXvmSLQp_{k\e=VkI>7BfgzM{Y'j$V(WH;VE%Z GvFByZ$i9;6Y]&(WL,F74lrq*UF!&0&Bi0
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 86 33 bd c1 7b 34 07 47 1d 71 ac 8a 98 12 d8 ff 00 ac a8 90 63 da e0 66 0b 8e df ca 77 8a c1 da f0 7a 0a b5 16 6b 64 34 d1 47 0c 11 b6 28 63 18 63 1b b8 0e 93 b7 69 71 39 24 9d a7 2a 36 33 36 a5 4a f9 32 e8 15 5a bd 68 45 ca 95 86 5a 8a 09 63 89 bb 5d 23 5f 0c ed 60 f7 cf e6 d2 3f 51 bd a7 0b 9e 57 45 ed 1f cf f3 b9 54 fe 12 ad 6c a5 b9 57 d3 c4 03 62 8e 66 3a 36 81 80 d6 cf 04 55 21 83 b1 bc b6 af c5 43 d9 61 74 8c 93 31 b1 5e ae 09 ef 86 8e e3 4a fc e2 29 de da 59 c7 43 a3 98 ea b0 9f d5 94 c6 e1 fa a7 ad 77 dc 72 b4 35 f7 4d 1e a9 64 10 99 ab 69 2a 69 2a 28 d8 df 76 e7 ba a6 3a 79 58 dc f4 98 a6 7e fd 9e 28 50 a4 ae 20 12 36 39 a0 96 9e a7 0d a0 fa 55 d1 8c 87 00 7a 1c 03 87 98 ed 1f b9 3e 22 99 30 d5 46 5c 0f e8 3d 26 8a 59 04 6e 73 39 48 d9 ce 6e 75 Data Ascii: 3{4Gqcfwzkd4G(cciq9$636J2ZhEZc]#_`?QWETlWbf:6U!Cat1^J)YCwr5Mdii*(v:yX~(P 69Uz>"0F\=&Yns9Hnu
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 49 67 87 91 64 82 a1 d3 35 bc 9b 4b b5 b6 72 2e f7 4d 1b c2 94 45 a2 84 cc 79 95 77 7b 48 24 10 43 81 2d 73 48 21 cd 2d 38 21 c0 ed 04 1d 98 48 7e 85 22 71 83 a1 64 77 3d 76 00 0d 45 34 52 c8 07 4c 8d d6 8b 5c f6 96 31 83 e2 a8 ed 44 e1 62 a6 69 b8 ba cf 5b 57 24 cf d7 96 47 cb 21 6b 1b ae f7 6b 3b 56 36 06 31 a3 a9 ad 6b 40 03 b3 af 24 ec 6c da 2d 5d 54 d0 fa 7a 2a 89 a3 3e e6 46 c6 44 6e df b5 b2 3f 0d 23 61 e9 5d ef 01 7a 0d 1d 56 b5 6d 54 62 48 23 7f 27 4d 13 b6 c7 34 ad cf 29 24 83 38 73 18 75 40 1b 41 70 39 f7 21 74 3a 59 c6 02 c5 41 72 8a d2 f9 e6 9a b9 d5 30 d2 3d 94 f0 39 f0 d3 4b 3b 98 c6 32 59 4e 1b 90 5e dc 86 17 6a ed dd 8c 29 1b 15 c6 aa 27 cb 63 60 a1 6b c5 a6 a2 95 fc 9d 44 12 d3 c8 46 b0 6c ac 2d cb 7a da 77 38 76 8c af 12 b2 7c 3d db a3 Data Ascii: Igd5Kr.MEyw{H$C-sH!-8!H~"qdw=vE4RL\1Dbi[W$G!kk;V61k@$l-]Tz*>FDn?#a]zVmTbH#'M4)$8su@Ap9!t:YAr0=9K;2YN^j)'c`kDFl-zw8v\|=
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 30 6f 55 a6 aa a5 f2 be 49 24 39 92 57 be 59 08 18 06 49 1c 5e f2 07 40 d6 73 b6 22 96 77 46 f8 e4 61 d5 92 27 b6 46 3b 00 ea bd 8e 0e 6b 80 3b 0e d0 0f 72 c4 bd 34 34 13 4d ac 21 82 69 cb 35 4b c4 31 3e 42 cd 6d 6d 5d 6d 40 71 9d 47 e3 77 b8 2a 98 57 34 b2 e8 fd 92 6e fe 52 97 e6 e9 be e9 1e c9 37 7f 29 4d f3 74 df 74 b4 ff 00 8b b5 bf 00 ad f5 59 be c2 3f 17 6b 7e 01 5b ea d3 7d 84 ef 59 36 cd 59 34 83 4a 2b 6b 5a c6 d5 55 49 3b 23 71 7b 18 e1 18 0d 79 1a ba de 23 06 4e 32 3e 31 5a 75 b4 fc 5d ad f8 05 6f ab 4d f6 12 7e 2e d6 fc 02 b7 d5 66 fb 09 2c 52 82 d0 a7 4e 2e 51 62 da f7 7b fa c9 bf c2 c8 9a b4 9c 67 2b fc 5b 75 38 fc a7 d4 54 3c 74 8e 4d b1 c5 1f 71 e5 a5 f9 b5 da f0 3b 6d 7d 35 ae 8a 39 18 59 23 9b 34 d2 31 e0 b5 e0 cf 3c 92 b4 3d a4 65 ae 0c Data Ascii: 0oUI$9WYI^@s"wFa'F;k;r44M!i5K1>Bmm]m@qGw*W4nR7)MttY?k~[}Y6Y4J+kZUI;#q{y#N2>1Zu]oM~.f,RN.Qb{g+[u8T<tMq;m}59Y#41<=e

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49821	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:39 UTC	396	OUT	GET /wp-content/uploads/2024/05/image-20-1-1-1024x516-1.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:39 UTC	783	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:39 GMT Content-Type: image/png Content-Length: 331189 Connection: close last-modified: Sun, 12 May 2024 08:33:16 GMT etag: "66407ecc-50db5" expires: Wed, 24 Jul 2024 13:04:13 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 898526 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ot7yTsnGe1dG9ITsw1gBMNK0A1BDLWgwt%2FxD8aMF5tu4RsWKCqUFcz3z%2Fj5DwcgxQUQ285Nh9sGvmdUD2DbAp%2BgiXzeFsktvgdtPX6vLQertcm23%2F5WRvhZNDQ%2FMiH2y0%2BVXnUs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cd279d54282-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:39 UTC	586	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 02 04 08 06 00 00 00 87 5c 5c af 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd e9 76 e3 46 d6 2d b8 4f 04 40 6a ce 54 66 ba 3c 94 ed 72 f9 1b d6 ba fd 6a fd 5c fd 50 dd 3f fa f6 ea 5b 65 3b e7 4c 49 a9 81 44 c4 b9 3f 22 00 82 24 22 08 1c 02 20 40 61 7b 39 25 01 88 79 3c 33 fd 5f ff c7 ff c9 68 11 54 33 37 22 6a b3 58 71 fe 4d ea 51 b7 6d 65 b0 a8 99 0c c2 7a 61 fb f6 57 d7 fd 5d b7 7c b2 cd 3b 91 89 00 41 f5 55 83 a2 f2 fa 31 6f 27 2a bf ab ea 47 22 aa 4c 57 af 5c 51 b2 06 f9 8f 7b de c4 b0 39 66 cd ea 1a fe 36 9c 0f bb b2 c8 d6 f8 b6 46 0d 76 cc 1b 82 16 e7 dd 17 6c a4 f9 6d cf 9d 36 f2 2b f7 77 2c 3f 2e 8d f1 2e ac f2 21 88 36 2a 21 24 Data Ascii: PNGIHDR\\pHYs+ IDATxvF-O@jTf<rj\P?[e;LID?"$" @a{9%y<3_hT37"jXqMQmezaW]\|;AU1o'G"LW\Q{9f6Fvlm6+w,?..!6!$
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: ae b8 c0 c4 a4 7f 12 95 9f e6 49 a2 d5 78 86 20 60 ea 8f 09 1d e0 f0 93 2a 7e a0 f6 58 91 09 6b 18 12 d1 18 82 88 17 25 b5 00 08 ac 15 da 23 cf 7d 70 08 c9 7f 97 88 09 1e 82 ad 9c e8 ff 09 13 3a 47 98 b8 ea af 0e 92 3b f0 f0 4f b0 09 ed 41 32 da dc 81 09 00 0d 43 56 5e d7 b6 af ae 4d 68 2c cf 58 ba b6 d4 69 ca 92 03 89 94 a9 ee 85 b6 ee a5 aa a9 ad 18 33 07 e7 c5 2e 5b 68 f7 ae 5b 0e 78 9d be a3 0a 8d 91 fc bd fb a4 2a 0f 8a 1e 14 75 86 65 9f 36 ae cd 6f 49 7a 41 1a 67 22 db c3 2e 90 8f cb c6 df 9b 75 d9 7a b6 4f dd 36 8b a8 bb ae 02 69 b6 6a 42 2b 6d 23 46 d8 0e 5d 32 a7 da 27 d6 76 cd ed 36 2f 4e bb fc 6c 84 de ad 17 b6 5e 76 84 f9 52 7e 55 1a 93 68 b1 c4 60 8e f9 0e a8 2e 8f a3 f6 f5 91 ec 04 e0 0a 1b c3 55 59 e1 c2 94 aa 4e e7 f6 be f0 84 53 c1 36 87 Data Ascii: Ix `~Xk%#}p:G;OA2CV^Mh,Xi3.[h[xue6oIzAg".uzO6ijB+m#F]2'v6/Nl^vR~Uh`.UYNS6
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: c9 5e 57 08 5d 4a 0f 4d 94 1e 23 42 76 e7 87 46 54 5a 3b 70 8c 99 a8 1a c2 d8 b7 8d a1 8d 47 54 43 ec 00 d5 8c ed b7 87 ee b7 cd be ea ca df c1 10 da 7a ec d8 69 2a d6 53 59 43 3c ef 0e 89 29 0a 40 03 94 37 8a 2e d5 c9 c7 8e a8 8a ec d4 55 cf 04 4d 36 56 2e fd 94 98 30 04 d4 56 a3 93 2d 7e 20 c9 43 10 0d e1 40 89 99 21 84 4c 4b 86 50 6f 87 e7 7e 28 f7 89 f2 a5 ba aa df f7 bb 74 87 d7 d1 60 20 10 80 ec ec 89 68 f8 b5 8a 0c b8 54 8f 1e ce c7 e1 ac af e6 fb 7e 74 47 e7 55 1f ae a9 1c 4b db 1b 4b 47 31 a5 66 49 79 87 1b 93 5d 4c d7 43 a8 49 57 d5 e3 10 65 b4 7f b7 97 11 c2 63 08 29 37 fc b2 ba 63 22 8d 15 13 03 a0 21 aa 26 d0 73 0c cd 27 c3 a4 67 fc 7c d0 74 63 6f df ae 67 37 67 bf b9 ed 59 8d 52 03 cf fb 9c f7 b1 3a 1c c6 d6 6d ad 16 23 d8 13 8f 75 4f af 1b Data Ascii: ^W]JM#BvFTZ;pGTCzi*SYC<)@7.UM6V.0V-~ C@!LKPo~(t` hT~tGUKKG1fIy]LCIWec)7c"!&s'g\|tcog7gYR:m#uO
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 52 aa 9a 1a 4d 19 aa 4c 7e 8a 34 d5 c9 6d f6 f9 78 10 21 69 c2 c2 b3 8e 0f e2 f5 52 7b 3d ee 1a da 79 d7 f9 72 87 b2 58 e0 cb a6 f3 73 1f 8e 72 79 3d d4 20 71 99 c3 df 31 40 42 0a af ed 83 a8 93 83 4d a2 32 5c 33 d1 66 8f b1 ff 87 aa 5e f6 88 b8 ad b1 54 57 3e 6c 8e 52 55 68 cc 01 5c c8 52 a5 aa 98 3a b5 dd a1 bc b9 23 61 9d b1 de 34 99 69 0e 57 14 37 57 8b e6 ea b5 b9 6b db 08 9e a6 b1 fb 90 68 f9 1d ed 41 1b 39 67 65 ab a8 7d 62 70 f3 dc 5d 3f 8f 82 23 13 ba 53 47 d7 c3 30 89 d8 56 6e f6 05 07 60 a5 13 54 ee 12 0a fc 0c d6 89 ca a7 b3 cf c5 1f 0a 5c 8e 90 55 3a 28 82 ed 20 82 58 87 22 c0 81 29 ea 54 99 46 56 54 af 70 aa 25 cd 93 b5 11 71 ea c0 7e 85 aa eb db ef 1e bc 83 01 d0 ae 34 66 2b dc 88 e4 42 57 73 90 e3 b6 a9 b6 d6 77 5b 79 36 98 60 b5 f2 8d 78 Data Ascii: RML~4mx!iR{=yrXsry= q1@BM2\3f^TW>lRUh\R:#a4iW7WkhA9ge}bp]?#SG0Vn`T\U:( X")TFVTp%q~4f+BWsw[y6`x
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: e1 0d 55 3e a6 d5 19 c6 18 11 7d 62 0c f3 ad b1 45 89 4f b3 79 d9 6d 93 61 52 b7 cf a2 df d6 ac 4f ed 70 70 b1 09 3c 61 0d 9b 7d ba 46 d6 47 19 1b e5 ef 36 5f 06 12 b5 34 24 e5 3a 4b d6 6c 27 f6 db 0d 89 b2 9d fb 5e 70 0e af f6 fa 3a 61 cd 0e 81 00 ed b1 f6 45 65 5f 76 70 0e 84 5c d5 c5 4a 6a ef 1c f0 e3 53 99 dd 8e b6 92 90 d3 13 83 d0 a9 e7 b1 ef a4 95 8c 83 f0 c7 c1 47 b1 bb 5b 2c 6c ab e8 c6 b7 b9 6f 6f ec 89 44 db 55 65 71 69 52 88 f4 df 20 ec 11 41 9a 48 2d a2 7b 73 6f d5 00 10 33 01 18 de de ff cc d0 b6 e3 89 b6 67 0f 75 90 e7 84 09 13 f6 c7 98 37 ef e1 d7 7d 08 4c 25 00 71 b5 8d 70 a2 d6 ab d1 3a e2 f1 b5 0e 8e b8 b6 4c 18 92 d8 d5 7d 82 00 a8 d2 ef 5d a3 2b d7 5a 63 60 b8 36 41 54 33 ed 88 da 59 c6 6e 33 c7 60 c2 20 b6 e6 44 de af 95 f9 f8 39 24 Data Ascii: U>}bEOymaROpp<a}FG6_4$:Kl'^p:aEe_vp\JjSG[,looDUeqiR AH-{so3gu7}L%qp:L}]+Zc`6AT3Yn3` D9$
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 87 2a 33 0a 37 d2 69 06 34 ab 62 7e 9a 9c 30 06 3b 02 1f c6 b1 12 c9 00 96 c0 e4 d8 28 8e 59 e0 08 62 06 83 36 38 fe e4 89 41 e2 5c 48 ea d9 02 f9 79 49 8e 09 90 7f bb 9e d6 b5 41 31 f9 e1 a4 52 9d fd ef 15 87 2d 13 83 c9 b1 60 89 1c f1 6f d9 b7 3f a7 e1 4b e5 28 76 ec 12 c7 14 70 bd e3 84 b9 76 c5 b0 2b 75 74 41 a8 76 36 c0 03 b9 45 46 b4 65 44 d9 f9 3c ab 40 a5 7f bb c6 3e 42 8e 67 67 02 30 26 b4 a9 ca 16 be 84 f2 74 e2 4e 08 22 3f ec da 44 50 82 c6 02 a9 e6 11 43 f5 78 6e 4a 7b 77 4d a3 a9 c3 7a e4 97 ac 21 22 df a7 57 f3 ba e1 be dd 76 bb 1a c6 70 e7 9d f5 dd 67 22 4a 44 9e 22 15 2c 0c e6 a2 19 44 db f5 eb a2 bd 1c b8 77 c4 cb aa da ab bc 10 55 58 8d 18 a3 a7 39 82 5a 6c 9d 60 a0 1b d5 48 40 60 68 b6 8e 90 55 5c 48 b6 19 da c9 70 99 9c a6 1a bc 04 96 Data Ascii: *37i4b~0;(Yb68A\HyIA1R-`o?K(vpv+utAv6EFeD<@>Bgg0&tN"?DPCxnJ{wMz!"Wvpg"JD",DwUX9Zl`H@`hU\Hp
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: 86 de e6 9a d9 af 0e c9 a6 4d e0 be d2 ec 3a e9 9b aa 2d 84 43 4d 85 b9 25 f1 f2 63 65 35 0f 2f 51 5d c6 8a eb 27 43 ae 84 d4 60 a3 16 ee e9 51 81 6c 50 73 20 c2 21 94 9e 2d 82 0b 68 cc 8e 35 c6 b1 0e 95 c4 0d 3d 85 ee 13 ce 44 14 1a 6e 8f f5 29 a9 c7 a1 89 82 3a fd cb 91 70 47 c1 70 52 2d 98 e6 74 dd 37 d2 b1 ee 73 cc a2 92 e3 3d d7 f3 26 54 f0 1c 88 a0 5d 61 9c cb b2 2a 4f f6 32 95 22 c0 f4 46 59 91 fa c6 64 2d d1 29 20 98 1e 5a e5 52 a6 8a c4 81 c2 5c cb 9a 15 46 94 5f 7a eb f5 f2 9a 8d 63 a4 47 c2 7b 98 0d f6 55 7c ad 53 f0 9b 5d 5a 11 15 99 c5 cb aa 38 33 57 fb 9b 40 e2 56 2a 4a 72 66 55 83 b7 f2 db bd d6 a8 b2 ef c5 e1 08 11 3e d7 d9 13 81 a1 7a 04 f3 6b b8 56 f6 d9 43 6d 24 56 6c eb da a2 f1 cb 5b bb 65 09 fb 64 9f be 2c ef 20 ce 56 1f b0 da 13 f2 Data Ascii: M:-CM%ce5/Q]'C`QlPs !-h5=Dn):pGpR-t7s=&T]aO2"FYd-) ZR\F_zcG{U\|S]Z83W@VJrfU>zkVCm$Vl[ed, V
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: b6 c4 89 b5 98 41 21 41 0a cd 1a 96 01 b6 16 e0 0c d4 92 29 f4 3e 68 9f b5 55 83 fd e6 3d ed ad 31 1e db 55 02 6a 3f e5 1e 5a ba c9 ca 56 e1 d0 1b df 78 36 dd 09 c3 44 55 2c ee 10 86 12 76 69 4c 97 8d 26 98 da bc 82 54 ea 33 94 3e ec d3 04 20 2e 41 6d de e6 a1 4b 8c 77 a1 ed fe 68 1b a1 1a 48 d4 c2 c7 82 b1 cf a9 31 61 eb 4c 77 0f 2b bf 6d 3b 62 52 17 7b ec 98 43 24 cb 34 87 a4 a7 9f 53 dd 37 64 91 69 eb 95 d2 1d 11 9d 50 0a b6 0a 0b a5 f0 a8 e7 b8 9f cd f1 38 9f e1 3e 4d f0 98 6a 2c 4e e6 78 ba 38 c7 b7 ab 4b 3c 5c 5d e2 ee fc 02 df 66 27 78 50 29 16 94 62 a1 53 58 9d c0 7a 7b fd 8c 0d 2c 5b 90 56 00 91 93 f2 b3 23 ed 95 d6 ab fe 67 78 bf f9 8e 90 37 59 ee 5b 00 4e 0a 9b 87 d9 c3 36 d1 98 bb cd 56 ec 35 ed 99 7d 9a 5c 7d 86 a1 94 f2 5b fa 8a d5 e0 83 19 Data Ascii: A!A)>hU=1Uj?ZVx6DU,viL&T3> .AmKwhH1aLw+m;bR{C$4S7diP8>Mj,Nx8K<\]f'xP)bSXz{,[V#gx7Y[N6V5}\}[
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: ce e7 72 fd 9a f5 75 84 a1 1e e8 47 06 0a a2 6a a3 72 f1 be 8f 4d 6d 1f f2 33 e4 28 79 bd 98 f0 3a 2a 9c 82 93 72 0e eb 60 7d 48 56 5e 11 ff 45 ff 78 e2 9f b5 0b cb c7 00 19 03 28 38 55 7e 36 00 5c 9c 7b 58 af d0 ee 09 4a 6b 7d 7b 14 61 c1 06 4b e5 c2 f2 3d 26 73 dc a5 27 b8 bb b8 c0 ed e5 25 6e 5f 5f e3 eb d5 25 1e 2e 2f b1 38 39 c3 93 4a b0 b4 0a 8f 50 58 ce d2 82 d8 67 5a e9 05 16 ad f2 04 b3 23 93 d9 13 95 b6 60 d0 e6 2a fe 8e c8 5e df ed b7 a6 c0 1a 8d e1 fa 23 5f 2b b4 96 b2 84 f2 96 c8 aa 48 bf f6 7d e9 8f 3c ad 82 06 b3 5e 31 84 0a ba 94 d6 d6 1f b3 0b 34 e8 da ce b0 94 14 35 54 4c 58 92 37 9d 50 1a b7 e9 0c 27 27 e7 98 5f be 46 f2 7a 09 2c 16 98 3f dd e3 d5 cd 7b 5c 7f f9 80 f3 2f b7 b8 f8 76 8f 8b a7 47 9c 99 05 66 bc 84 66 80 c9 c0 2a d7 4f a9 Data Ascii: ruGjrMm3(y:r`}HV^Ex(8U~6\{XJk}{aK=&s'%n__%./89JPXgZ#`^#_+H}<^145TLX7P''_Fz,?{\/vGff*O
2024-07-04 22:39:39 UTC	1369	IN	Data Raw: fb 77 ff 6b ab 9d 8d b7 72 36 de 60 06 c1 42 31 c0 d0 c8 48 83 c8 99 fa 1b 05 2c 34 70 9f 28 3c ea 04 0f c9 29 1e e7 e7 f8 76 f9 0a 5f de 7c 87 9b d7 d7 f8 fa f2 25 6e 4e 2f f1 a8 e6 58 12 c3 92 73 6a 07 10 d8 b2 f3 17 00 86 01 23 83 d3 48 60 af 78 be 8f b7 fa 63 43 29 c2 e0 ca 8e 1e ee f7 8c ad bb 73 c3 7a 29 3c 41 91 bf 17 a9 25 d8 12 c8 28 58 3d c7 32 39 c1 ed fc 0c c9 c9 05 e6 d9 15 5e bd f8 0e 4f 3f fe 8c c7 0f 6f f1 e9 c3 7b 5c dc dd e0 fa e9 1e 97 8b 07 cc 33 83 99 05 34 1b 6f a7 4f 50 d0 20 28 a7 8d 40 40 46 04 a3 8c 73 04 88 75 2d 05 c0 11 f3 9b 4c e0 32 13 60 53 a3 a5 fe 5e 7b ac 42 dc b0 e6 ce ae 43 25 09 27 9c d0 0e da de 90 36 f9 61 6d 60 38 9b e6 a1 a5 56 63 c0 b1 f6 ce 38 ee bf 52 a7 9e c3 6f d9 f0 91 f7 fd d4 97 63 80 d8 e1 60 e4 5d cc e9 Data Ascii: wkr6`B1H,4p(<)v_\|%nN/Xsj#H`xcC)sz)<A%(X=29^O?o{\34oOP (@@Fsu-L2`S^{BC%'6am`8Vc8Roc`]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49822	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:40 UTC	391	OUT	GET /wp-content/uploads/2024/05/maxresdefault-81-1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:40 UTC	786	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:40 GMT Content-Type: image/jpeg Content-Length: 103129 Connection: close last-modified: Mon, 27 May 2024 12:39:23 GMT etag: "66547efb-192d9" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609582 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TtYhO1eKfFpr5sCB%2F5EMcZPc9Ut%2BSQhaC%2F%2F5H65g3pqCU%2FOGMIcAQt8H%2FP5C6yChYcQ6ODtvbDyi4HPfi8Hn73QtLDmERMkIepf3zRc6A6TZBozbwuWh8tXiYpxb0dUgN%2F5bvAQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cd3b919435c-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:40 UTC	583	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 09 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0f 0f 10 12 15 12 15 12 12 15 15 15 15 15 12 12 15 15 15 15 15 15 15 12 12 15 15 15 15 15 12 15 15 12 12 15 15 15 12 15 12 15 15 12 15 15 12 12 15 15 15 15 15 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 02 01 03 05 06 07 08 04 09 ff c4 00 65 10 00 01 03 02 02 04 06 06 11 0f 0a 04 05 05 01 01 01 00 02 03 04 11 05 21 06 07 12 31 08 13 41 51 61 71 14 22 32 81 91 b4 23 34 35 36 42 52 Data Ascii: JFIF"e!1AQaq"2#456BR
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 53 29 22 0c 90 13 b5 2a 66 a9 22 99 0d 64 05 28 0a c4 56 d9 2a 5a a1 01 48 83 1d 4d 90 a4 29 22 b6 c8 b2 2c a5 08 20 99 16 45 94 a1 0c 08 b2 2c a5 4a 41 91 48 4a 42 65 0e 4c 62 10 91 ea ad 95 37 85 16 34 c4 17 4b 64 e0 28 70 54 be 64 f7 84 29 48 4e 42 8b 24 49 48 a6 e0 96 ca a3 82 52 14 59 6c 58 8e 0a 2c 9e ca 08 50 92 26 53 72 84 c4 28 b2 44 d3 21 0a 6c 8b 24 3d e1 50 a6 c8 b2 10 9c 80 21 4d 91 64 c5 96 48 4c d4 ad 09 82 4c 4d 95 18 9d a9 18 9d a9 15 0e c5 55 8a 93 15 56 2b 22 8a a4 38 4c d4 a1 3b 42 9a 31 e4 33 53 a8 01 38 09 94 4c 1a 13 00 86 b5 37 5a 0a 32 01 54 68 ca fe e2 7a 7a 7d b3 6c d5 da 9b 0d 0d b1 39 f4 20 83 65 be 96 94 bf 7e 41 5d e0 a5 6b 77 0f 0a ae d6 80 13 00 82 a1 9a 3b ca 54 02 a5 02 04 02 a0 a5 28 10 c4 a8 42 10 30 42 10 81 02 10 84 Data Ascii: S)"f"d(VZHM)", E,JAHJBeLb74Kd(pTd)HNB$IHRYlX,P&Sr(D!l$=P!MdHLLMUV+"8L;B13S8L7Z2Thzz}l9 e~A]kw;T(B0B
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 32 10 85 34 56 d0 c1 4a 80 a5 48 4c 10 a7 65 48 6a 45 20 84 c4 20 04 07 12 02 90 10 1a a5 02 11 43 82 7b 20 84 89 6f 14 ca 47 a7 29 1c 12 61 91 14 15 50 04 a4 28 64 9a 79 11 42 62 12 80 a2 cb 4a 6e 50 15 47 04 b6 51 26 85 2a 9b 93 92 a0 85 19 12 45 34 29 b2 2c a0 c9 e0 84 29 b2 82 92 44 c1 0a 76 51 64 f0 21 54 84 c5 aa 2c 90 b2 30 29 9a 90 27 6a 6d 10 93 1d 3b 52 27 08 48 a7 25 46 a9 0a 00 4c 14 ca a4 ca 88 05 25 ee 6c ae 98 6d 03 9e 73 1d aa 92 29 6c a5 45 48 e9 77 64 16 45 49 48 23 16 00 73 15 52 9a 9d b1 8b 37 c2 aa a0 c2 a9 2e 24 85 21 42 2e 82 ac 92 54 22 e8 40 88 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 42 10 80 04 21 08 00 Data Ascii: 24VJHLeHjE C{ oG)aP(dyBbJnPGQ&*E4),)DvQd!T,0)'jm;R'H%FL%lms)lEHwdEIH#sR7.$!B.T"@B!B!B!B!B!B!B!B!B!
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 4a 54 70 4b 24 80 8b 21 09 86 40 85 0a 54 14 12 52 02 14 84 ca 2d b9 09 71 20 d8 04 c0 28 09 82 98 9b 48 60 a5 29 de 39 ca be e0 f8 5e dd a4 78 c8 72 5b 7a 0a 6a d4 49 0d 82 e1 77 b3 df bb 90 2c 81 a2 db b2 43 5a 06 43 2b 26 72 58 35 93 9e 59 2d 2a 42 80 d5 3b 29 95 64 95 17 51 62 a7 65 01 92 10 a6 c8 b2 04 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 21 4d 91 64 01 08 53 64 59 00 42 14 d9 16 40 10 85 36 45 90 04 20 15 36 45 90 01 75 05 4d 91 64 00 ae cd 53 Data Ascii: JTpK$!@TR-q (H`)9^xr[zjIw,CZC+&rX5Y-*B;)dQbeB@6E!MdSdYB@6E!MdSdYB@6E!MdSdYB@6E!MdSdYB@6E!MdSdYB@6E!MdSdYB@6E 6EuMdS
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: f7 1c ee 83 5f 56 b3 6c 90 77 f4 ef 52 d5 0a 42 0c 61 90 80 84 88 34 08 42 10 30 28 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 10 84 20 01 08 42 00 0a 85 25 42 06 91 0e 54 9c 15 54 a7 71 51 95 34 cb ed aa b8 48 a2 50 14 94 ae 2b 5f 38 e1 9d 45 1a aa 71 c9 37 4a 42 94 28 60 c8 68 a6 51 b2 aa 28 72 9a 62 c1 49 ca 32 4e 54 29 95 b2 2c 8b 26 50 42 68 88 a8 c9 32 14 93 10 96 58 76 ba 87 dc 2a fe aa 5f 1e a6 59 a8 58 6e bb 3c c1 c4 3a a9 7c 7a 99 63 de bf a9 9f aa cb ac f8 57 8f ac 8c 03 57 de 66 d3 75 4d Data Ascii: _VlwRBa4B0(B B B B B B B B B B B B B B B B%BTTqQ4HP+_8Eq7JB(`hQ(rbI2NT),&PBh2Xv*_YXn<:\|zcWWfuM
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 80 b6 58 5e bc 47 dc 0c 43 aa 93 c7 e9 56 6d 65 85 6b cf ce fe 21 d5 49 e3 f4 aa 8b c9 7d 44 fd 56 64 59 af ae 8f ac 8d 6f a0 07 ee 6d 37 54 de 31 32 bf 5d 63 fa 05 e6 75 37 54 de 31 32 bf 05 6d 97 a1 87 aa 8c 8b 97 f5 b2 ef 26 ea 6e 95 16 59 65 23 05 05 42 12 0d e0 2a 01 42 82 54 58 b7 86 ba 12 94 04 22 44 92 a1 48 52 98 84 42 75 28 c0 c8 b2 2c a5 08 c0 c8 b2 2c a5 08 02 2c 8b 04 26 08 c0 0a d2 99 0a 42 08 64 1a a5 0d 0a 43 53 11 16 52 13 00 a2 c8 0c 83 55 44 89 c2 42 19 08 42 64 40 29 25 40 4c 14 b0 26 c8 0a 6c a4 2b 76 27 8d d3 53 1d 99 ea 23 63 bd 2e 6e 76 5f 8a d0 4f 86 ca 32 a9 18 71 93 c2 20 a3 29 bc 45 37 dc 5c 9a aa b5 63 23 4d b0 ff 00 c2 c7 ea 6a 3f 76 9b f9 6d 87 fe 16 3f 53 51 fb a5 4f d3 28 fd a5 ef 45 8e ce b7 d8 97 b8 c9 0a 90 56 35 fc b6 Data Ascii: X^GCVmek!I}DVdYom7T12]cu7T12m&nYe#B*BTX"DHRBu(,,,&BdCSRUDBBd@)%@L&l+v'S#c.nv_O2q )E7\c#Mj?vm?SQO(EV5
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 3f 45 60 19 67 2b 21 75 41 e0 4f 8b 7a ad 86 7b 4a 9f a0 a3 f9 93 e2 fe aa e1 9e d6 a7 e8 20 0e 58 42 ea 7f e6 4f 8b 7a ad 85 fb 5a 9f a0 8f e6 4f 8b fa ab 85 fb 5a 9f a0 8c 01 cb 08 5d 4f fc c9 b1 7f 55 70 cf 6b 53 fb b4 7f 32 6c 5f d5 5c 33 da d4 fe ed 00 72 c2 17 53 ff 00 32 7c 5f d5 5c 33 da d4 fd 05 23 81 3e 2d ea b6 19 ed 6a 7e 82 00 e5 74 2e a9 fe 64 f8 b7 aa d8 67 b4 a9 fa 0a 47 02 6c 57 d5 7c 33 da 54 fd 14 01 ca c1 57 a2 aa 7c 2f 6c 91 b9 cc 7b 4d da e6 9d 97 34 f3 82 37 2e 83 d6 2f 04 fc 47 04 c2 ab b1 69 b1 3a 09 a2 a1 84 cf 24 51 36 71 23 da 1c d6 90 c2 e6 d8 1e db 97 99 73 bb 85 bc 1f f7 52 8b 69 f0 e0 1c 1f 06 6f ed 5b e9 37 d7 1a 67 71 96 15 30 96 b6 6b 0b 6d 83 7d 89 00 e4 b8 19 8e 75 95 05 a5 f5 1b 39 15 f3 32 fd ab a9 89 23 a5 8f 65 af Data Ascii: ?E`g+!uAOz{J XBOzZOZ]OUpkS2l_\3rS2\|_\3#>-j~t.dgGlW\|3TW\|/l{M47./Gi:$Q6q#sRio[7gq0km}u92#e
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 1b 34 5e db d0 07 a5 0b 18 3a c1 c2 3d 58 c2 ff 00 6f a6 fa 68 fb 21 61 1e ac 61 7f b7 d3 7d 34 0b 26 4e 85 8c 7d 90 b0 8f 56 30 bf db e9 be 9a 3e c8 58 47 ab 18 5f ed f4 df 4d 01 93 1a e1 51 e7 37 48 7f b3 df f1 91 af 96 a5 7d 2a e1 33 a6 f8 64 fa 25 8e c3 0e 29 41 34 b2 d0 b9 91 45 0d 5c 12 49 23 dd 24 61 ad 63 18 f2 5c 79 6c 39 8a f9 aa f4 0c cf 35 25 e6 94 9e c5 93 e3 22 5b a4 15 a5 75 25 e6 93 fd 8b 27 c3 89 6e a6 ae e7 41 fd 5b da fe e3 84 da 2f d6 bf c2 be f1 da 55 46 95 49 aa a2 dd 1c f6 07 08 ba a5 51 50 c8 9b b5 23 d9 1b 79 de e0 dd dd 25 59 2a 74 d7 0e 88 90 fa d8 49 1b c3 36 df f0 1a 55 33 b8 a7 0f 3a 49 77 b2 c8 5a 55 9f 9b 19 3e e5 93 20 42 c5 06 b1 30 c2 6d d9 7d f3 05 4d bc 3c 52 f6 d2 69 8e 1f 29 b3 2b a0 bf 31 2e 61 ff 00 d4 0d 50 8d ed Data Ascii: 4^:=Xoh!aa}4&N}V0>XG_MQ7H}3d%)A4E\I#$ac\yl95%"[u%'nA[/UFIQP#y%YtI6U3:IwZU> B0m}M<Ri)+1.aP
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 0b 5b 6b 67 58 98 56 1f 4b 3c 55 58 ad 04 13 16 39 a2 17 54 c4 66 27 75 84 4c 71 71 3d 16 ba ba 87 09 a3 16 f2 0d d3 69 71 34 7c a3 b7 77 59 4b 75 86 54 eb 57 07 0e 77 db e0 df d2 d3 d5 b8 78 44 4a b5 1e b2 30 89 6c 1b 88 c2 09 fe b5 93 42 07 e7 4d 1b 42 ee 6d ae e8 ee a4 e6 b3 de 79 cd ce 9d 72 e6 e5 e2 e7 8e e6 65 c4 a8 b9 5e 6a 0a f8 6a 06 d4 13 45 33 79 e2 91 af 1f e5 3e fd 97 a5 67 26 9f 14 6b 27 4e 50 78 92 c3 0b 95 3b 4a 10 9e 08 e0 9d a4 6d 28 42 30 18 27 69 1b 4a 10 8c 06 09 da 46 d2 84 23 01 82 76 91 b4 a1 08 c0 60 9d a4 6d 28 42 30 18 27 69 17 50 84 06 06 09 d8 91 34 65 51 56 26 65 95 4d d9 15 98 13 04 ac 4e b5 f3 58 67 53 09 65 65 0c 02 2c a5 48 48 91 36 42 95 28 c8 b0 c5 0b 07 d7 e7 9d dc 47 fb 9f 8f d2 ac ec 2c 1b 5f a3 fa 39 88 f5 52 7f a8 Data Ascii: [kgXVK<UX9Tf'uLqq=iq4\|wYKuTWwxDJ0lBMBmyre^jjE3y>g&k'NPx;Jm(B0'iJF#v`m(B0'iP4eQV&eMNXgSee,HH6B(G,_9R
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: c5 d9 78 2f 95 69 bd 8f 07 c5 35 71 9b 57 66 e0 9e 55 a6 f6 3c 1f 14 d5 d1 ec f7 9d 3e e3 91 da df 45 4f bd fc 8f 62 10 56 b3 d6 ae b3 59 87 ed d1 d1 96 c9 5b 6e dd e7 38 e9 ef 6b 64 45 9f 25 b9 39 17 43 71 73 0a 10 de 9b 38 fb 4b 2a b7 53 54 e9 ac e7 a7 a9 75 99 76 97 e9 6d 26 17 18 75 54 b6 7b bb 88 58 36 e6 7f 53 47 72 33 de 6c 16 96 d2 cd 71 d6 54 dd 94 60 50 c5 98 da 6d a4 9d c3 92 ef 73 6c ce a6 f8 56 b9 c4 b1 09 6a 24 7c d3 c8 65 96 43 77 bd e6 ee 71 b5 b3 3d 5e 05 e3 2e 5c 95 de af 56 b7 08 f9 31 ec e6 7a 06 9f b3 f6 f6 c9 39 2d f9 75 be 5e c5 f8 9e cc 4a be 4a 97 99 27 92 49 64 39 97 48 e2 f3 e1 76 e5 e3 72 ca 74 23 40 31 4c 6d db 18 56 1d 55 5c 41 b3 9d 14 76 85 87 99 f5 12 11 1b 0d b9 dc 16 e4 d1 ce 07 7a 43 52 d0 ea a9 30 ea 00 40 25 92 54 99 Data Ascii: x/i5qWfU<>EObVY[n8kdE%9Cqs8K*STuvm&uT{X6SGr3lqT`PmslVj$\|eCwq=^.\V1z9-u^JJ'Id9Hvrt#@1LmVU\AvzCR0@%T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49823	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:40 UTC	408	OUT	GET /wp-content/uploads/2024/05/maxresdefault-2024-05-14T065012.987.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:40 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:40 GMT Content-Type: image/jpeg Content-Length: 100045 Connection: close last-modified: Tue, 14 May 2024 08:34:11 GMT etag: "66432203-186cd" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609582 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KdFsxELee6hQNez%2F4khUw2C%2F5Jan6AhJ2O%2Fmo4uTUJZMoQz0o7TCjBCJqDYTSYqnJFtjRIG%2B55BDGhXIjIIIw83%2FnjjF2j7qfmZtomnB1ZejO%2BEKWVNxGUojRk4HBHWLxjQWYKA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cd4eabe7292-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:40 UTC	585	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 0d 10 0d 0d 0d 0e 0d 0d 0d 0d 15 0d 0e 11 11 13 13 13 0d 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0d 0f 0f 12 12 12 12 15 12 15 15 15 12 12 12 12 12 12 15 15 12 12 15 15 12 12 15 12 15 12 15 12 15 15 15 15 15 15 12 15 15 15 15 15 15 15 15 15 15 15 15 15 12 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 05 01 01 01 01 00 00 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 ff c4 00 4f 10 00 01 03 02 02 06 07 05 05 06 04 05 04 01 02 07 01 00 02 11 03 21 04 31 05 12 41 51 61 71 06 07 22 81 91 a1 f0 13 32 b1 c1 d1 42 52 62 82 Data Ascii: JFIF"O!1AQaq"2BRb
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 31 4c 23 1d 81 1d a1 0e 90 47 68 4b 26 32 23 09 da 13 c2 94 25 b9 28 8b 94 54 dc 14 61 17 24 40 22 10 93 18 93 d4 12 81 39 20 12 4e a4 51 92 52 84 d0 a6 e4 31 05 26 84 80 52 0a 18 10 70 50 71 52 71 50 4c 84 62 53 6b 53 35 aa 70 a6 e4 09 31 09 4a 75 00 40 84 8a 78 4c 4a 92 18 ce 4c 12 4e 14 dc 86 20 91 4c 92 92 06 0a 41 45 38 28 01 10 9c 24 52 52 43 1d 24 82 75 09 8a 29 4c 9c a6 41 23 a7 05 32 48 20 78 48 27 48 04 00 c9 d3 94 c8 01 e5 20 99 38 41 0c 49 24 92 08 12 92 64 90 40 e9 c2 41 3a 08 19 38 49 29 41 03 a7 48 27 51 72 18 82 74 ca 41 02 b1 04 e9 34 27 4a 2b 62 09 d2 01 48 04 10 30 49 3c 27 50 45 c8 a9 24 9c 20 94 30 44 6b 54 40 46 a6 96 4c 68 c6 e4 0b 53 86 29 c5 d4 9a 14 5c b1 2c c1 16 a2 53 a6 a4 54 83 86 ff 00 5d ca 1b 2c 50 cc 76 52 44 f6 68 2d c4 Data Ascii: 1L#GhK&2#%(Ta$@"9 NQR1&RpPqRqPLbSkS5p1Ju@xLJLN LAE8($RRC$u)LA#2H xH'H 8AI$d@A:8I)AH'QrtA4'J+bH0I<'PE$ 0DkT@FLhS)\,ST],PvRDh-
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 37 5e 57 35 a7 b4 9b 0b a5 8f 35 0e da 8e 90 33 92 00 27 dd e0 60 13 b1 d6 54 30 65 af 23 5c 97 6e d6 36 1c 9b 90 e4 00 5e 5f 68 6d c4 db 54 f3 5c cf 73 b2 3a 2e f7 54 eb 64 f9 7f 34 3a 2c 2f 49 d8 4f f0 d8 eb 1c cb 77 ed 00 f0 e1 de a5 8c d2 b5 33 f7 07 de 68 00 91 b9 d3 ef 0e 65 63 e3 6b b1 a2 1b 12 7f 9b 9e c0 00 8e 01 67 02 e3 aa 23 31 02 f0 78 df 2c fc 17 9d a9 8e ab 53 56 cf 63 4b 66 d0 a5 a4 51 73 13 a4 1c 08 87 6f 81 10 04 df 21 30 76 d8 aa 55 31 f7 be 67 23 7f 84 65 b7 24 3f 65 aa 0e b3 80 19 02 6f 07 30 48 17 ce dc a7 74 a0 61 9c 4c 83 3c 1c 0e b0 1b 6e 09 bc 6e 30 a8 bd cd 71 8a 5a 1b 58 2c 48 39 38 4c 65 ee bb c1 c7 55 dd d0 55 91 54 ed 82 0c 01 04 83 eb b8 ac 9a 35 0c dc 35 d7 bc 70 fc 26 01 e5 d9 57 03 c1 92 d3 61 98 88 d5 d9 91 93 06 39 73 Data Ascii: 7^W553'`T0e#\n6^_hmT\s:.Td4:,/IOw3heckg#1x,SVcKfQso!0vU1g#e$?eo0HtaL<nn0qZX,H98LeUUT55p&Wa9s
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: c3 c5 12 86 10 ee 2d cb 68 93 ba c6 0f 89 25 5d 6e 10 7d a1 ad bb 5c 90 7f aa e4 91 c4 90 bc 9e 23 17 52 b3 bd 46 df b1 ef b0 5b 3a 8e 16 3b b4 a2 97 bb f3 30 5b 42 fe fc 9e 33 f0 19 dd 6d 60 b0 4e 89 cc 5b de d6 cb be dd ea c3 b4 78 b0 2d 23 86 b3 5e 3c 58 5a eb 71 01 30 63 44 58 46 52 01 77 99 70 2d e5 75 8a 72 3a 31 56 23 43 47 ba a3 c0 da 08 98 8e e9 9f 59 2b 38 e6 b5 9a d0 78 4d c4 cd c3 80 b1 87 40 76 40 c1 bc 4a d2 a3 87 68 6c b6 c3 57 3c cb 89 06 d6 b6 c2 24 f0 24 02 42 c7 c5 34 9b 92 64 93 24 12 20 f3 24 c8 d5 d8 6d d9 4a 86 66 7e a3 a7 30 e9 26 00 12 62 22 c2 64 dc ec ba 87 ee 9f 69 b3 20 09 d5 cc 0d f0 24 b8 4d b2 9b 58 94 47 b4 b0 c1 02 1e 7b 26 fa af 3b 41 6d cd 3a 82 60 c7 81 06 15 ef 68 26 72 3b 1d 32 41 9b 4c 66 36 49 3c 3b 30 02 7d 05 b1 Data Ascii: -h%]n}\#RF[:;0[B3m`N[x-#^<XZq0cDXFRwp-ur:1V#CGY+8xM@v@JhlW<$$B4d$ $mJf~0&b"di $MXG{&;Am:`h&r;2ALf6I<;0}
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 70 10 40 93 84 a1 48 28 21 b1 93 84 f0 90 0a 50 ad 8a 13 a7 09 e1 28 b7 18 29 00 94 27 0a 08 1c 04 e4 27 a6 14 83 14 30 48 41 59 a6 db 21 b2 9a b0 c6 9e 50 7c 55 52 66 9a 50 68 66 8b 22 b5 a9 83 51 35 4f 8e dd 83 9f 1e 0a a7 23 64 60 c8 13 ba e7 70 f5 00 71 4e 29 45 dc 66 fd c3 65 86 fe 37 3b 91 20 37 9f 89 27 21 6b 5f 60 1f 00 9a a3 f5 47 e2 39 6d 0d df 1c ad 7d a6 36 14 8e 6f 81 74 69 ae 20 6b 54 74 c3 60 13 39 de 00 cc ba 32 03 ee 83 2e 24 09 17 5c af 4c 34 e7 b2 ec 33 de 22 c0 c6 b3 8e d7 3c ec 00 0d 80 0b 6a b7 7a b5 d2 ad 3a 28 34 86 de a3 b6 67 aa 24 43 67 91 92 ec e4 ce 60 47 9a b8 97 12 4e dc dd 63 27 2b 0d cd 16 dc 3b ad e7 76 b6 d3 dc bd 28 3c f8 f7 1e c3 a3 fb 13 ad b5 7a aa d1 fd 2b 9f ec 12 ae 25 cf 71 33 ac e2 20 bb dd 11 1e eb 07 d9 6f 80 Data Ascii: p@H(!P()''0HAY!P\|URfPhf"Q5O#d`pqN)Efe7; 7'!k_`G9m}6oti kTt`92.$\L43"<jz:(4g$Cg`GNc'+;v(<z+%q3 o
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 9b 8b 60 94 85 90 b1 4c 90 8f 48 25 51 a9 6f 98 f6 ba 30 ab 04 15 73 12 d8 55 61 69 8b c8 c7 25 66 3d 30 ae b5 8a ab 02 bd 4c 25 93 26 02 d5 41 ac 15 cd 55 5f 10 12 a6 59 25 91 9a e0 89 49 41 c8 b4 82 b4 ce 96 65 ac 28 5a f8 66 ac 9c 1e 6b 6b 0a d5 9e ab 36 52 41 5e cb 2c 3c 68 ba e8 ab 36 cb 03 14 2e 96 93 1a ba c8 ac d6 a9 ea a7 68 52 21 5d 73 3d 8a d5 d5 57 95 6e b8 54 ea 2b 22 53 3d 42 e1 5a b4 a9 b5 54 c1 b1 68 b1 96 55 cd e6 5b 4d 64 57 70 53 2d 4a 14 9c 12 dc 6b 10 01 1a 93 14 1a d5 6a 93 2c a1 b2 63 1b 81 ad 92 af 0a c5 74 20 d4 20 90 c1 a9 42 20 6a 70 d4 5c 2c 0e 13 86 a2 6a a4 f0 8b 91 62 bb c2 ae e0 ac d4 50 63 53 a6 57 25 72 2c 6a 4e 53 21 44 85 28 56 40 a8 3d c8 95 15 4a ae 4f 1c ca db b1 17 b9 32 62 a6 02 b0 a9 8a 14 49 4e e2 a2 a4 81 04 e5 Data Ascii: `LH%Qo0sUai%f=0L%&AU_Y%IAe(Zfkk6RA^,<h6.hR!]s=WnT+"S=BZThU[MdWpS-Jkj,ct B jp\,jbPcSW%r,jNS!D(V@=JO2bIN
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 36 76 4d 9e cf c2 60 58 00 3a 32 c5 e3 bd 4e 69 b1 4e bb e9 3c f6 6b 37 33 60 2a 32 ed 74 1d 8e 12 d3 ba db 02 f6 17 d3 dd 1c b2 1e 59 79 af 6b b2 f1 3d 6d 15 7d 63 93 3e 61 b6 b0 5f 86 c4 34 be 19 66 bc f8 09 ad 51 78 49 ae d9 79 89 82 7d 4f 72 7a 85 74 8e 46 40 5c 14 4a 29 50 73 53 5c aa 48 18 29 3b d7 7a 21 6a 81 09 91 5b 40 1c 86 42 3b c7 af 5e 2a 05 be bd 64 ac 8b 32 ce 00 84 e4 a3 ab eb ea a4 1b 7c 92 72 7b 94 35 70 4e 08 60 23 c7 09 e1 eb e6 84 e4 d1 65 33 8d 88 26 85 22 98 84 e5 56 22 42 68 52 4c a4 81 93 c2 44 a6 94 00 c9 14 92 25 00 86 29 93 a8 94 0c 8e 5a 54 81 51 84 93 9d e0 a0 a9 80 82 d4 56 25 63 26 22 14 1c 11 a1 33 98 a1 30 68 ae 54 e9 b9 27 35 44 26 d4 52 cc a9 d3 28 0c 28 f4 ca 46 32 64 ea 31 04 85 61 85 46 a5 35 09 93 62 b2 8b 82 33 9a Data Ascii: 6vM`X:2NiN<k73`2tYyk=m}c>a_4fQxIy}OrztF@\J)PsS\H);z!j[@B;^d2\|r{5pN`#e3&"V"BhRLD%)ZTQV%c&"30hT'5D&R((F2d1aF5b3
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 7e ab e7 63 86 b4 1d ed b5 40 7c 8f 25 3c 30 36 1b e4 1e 60 12 0f 1f ff 00 d5 4f 17 44 c6 b0 fe 71 ba 47 65 f1 f8 48 3b 38 2b 8a 1a 22 c8 0f d5 fb 2f 1d 83 f7 48 3e ef 8c 47 76 f5 1a e4 c5 fd e6 e7 f0 3e 67 c1 c1 2a f1 0d e6 2f c7 ec 9f cc 0e a9 dd ad 39 b4 2b 78 96 ce a9 19 91 07 9c 6e d9 ac d2 d3 fd 90 08 ae e3 20 11 91 90 7b f2 3d ce 83 c4 14 56 bf 22 44 02 35 1f c0 83 1e 4e 11 6f c3 bc aa b8 66 c7 66 67 22 38 82 09 f3 13 e4 ac b1 92 73 b3 c7 83 85 89 ef b3 bb 92 b2 50 f5 98 47 6b 68 b1 e3 f2 82 2d dc 11 58 db 41 ca f1 7b c6 ed c6 4d ee 9a 8b e4 03 be c7 ba 41 6f 71 db b8 04 4a 10 d7 46 cc c1 db 1f a7 d1 25 c6 b5 ca b8 2a a4 4e f6 9e e2 3b f6 85 76 a8 d6 6e b3 62 f9 de 20 f1 dd 70 6e 81 a4 b0 a5 a4 3f b8 ec 91 c7 91 9f 14 f4 eb 6a 18 37 6b ad ce 72 9e Data Ascii: ~c@\|%<06`ODqGeH;8+"/H>Gv>g/9+xn {=V"D5Noffg"8sPGkh-XA{MAoqJF%N;vnb pn?j7kr
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: de fe 49 bd 99 fb de 5f a2 7b 0b 72 35 29 ba 33 f2 23 e6 aa 56 a6 ed fb f7 fd 4a b6 69 1f bd f0 fa 2a d5 9a 72 d6 33 f9 7e 4a 1a 04 52 aa c3 3f a8 fa 5d 40 b0 ff 00 63 1e a1 4e bb 4f f7 b7 c8 a1 df 79 f2 3e 69 1a 1d 33 c3 3a 63 a2 ce 07 1b ae 04 61 ab 38 6b 4e 4d f6 a6 e2 73 03 5c 1e f8 de ba bd 1a e7 12 e6 13 77 82 e0 48 1d a2 04 eb 77 81 af 3f 8c ed 95 d1 75 81 a1 46 22 91 6b a0 90 23 2f b2 60 7c 62 fb 09 9d 8b 82 e8 4e 36 a1 1e c5 e7 f8 d8 77 ea c9 b1 23 3a 6e 19 c0 70 00 ed b8 13 23 39 79 c6 fc 48 4e ce c7 37 a7 30 a6 8d 47 5b 23 3c 0b 0c 13 dd 04 fa 0b 84 d3 b8 3d 57 3b 56 d1 f0 f9 d8 af 69 e9 ee 10 38 0a 81 a0 c8 91 19 10 d9 0e e5 b6 dc 39 13 e6 3a 73 0f 91 3b 3b 27 8b 7e c9 be dd 5b 7e 55 7d 29 f1 2a ab 13 98 a6 d9 f5 ba 08 3e 16 ee 1b 95 aa 66 44 Data Ascii: I_{r5)3#VJir3~JR?]@cNOy>i3:ca8kNMs\wHw?uF"k#/`\|bN6w#:np#9yHN70G[#<=W;Vi89:s;;'~[~U})>fD
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: c8 6d 49 c8 b4 a9 a6 d0 4d 47 a7 4d 59 a5 49 12 8d 15 71 94 e1 53 29 17 42 98 2a 74 80 43 ac f4 5a ae 54 ea 22 28 69 3b 10 72 1b dc a5 51 c8 26 ea d4 8a 24 c4 88 c6 29 52 a4 ac 06 21 b0 8c 48 06 24 42 9b ca 03 9c a1 66 4b c8 4e 7a 86 b2 89 29 26 b1 53 12 40 24 9d 4d c4 11 51 4e 4a 70 d4 5c 06 01 48 35 38 6a 98 08 b8 58 66 84 9c 9d 31 50 88 64 4a 72 13 86 a4 54 37 62 06 4e 13 02 9c 26 4e e4 31 27 0a 2a 41 02 8e 9c 26 09 c2 05 1d 3c 26 0a 4a 18 a3 80 9c 04 cd 52 6a 86 23 63 a4 d0 9d 38 50 02 84 4a 69 8b 51 28 85 5c 9e 45 d0 8e 61 69 b5 59 a2 14 1a c5 61 8d 59 a7 23 a7 46 9d 89 b0 22 10 98 04 60 16 76 cd d1 88 98 8c c0 a0 c0 8a c6 2a e4 cd 10 40 b1 06 07 20 7e 10 07 89 85 e7 bd 6b e3 b5 69 b1 bb 5c e7 54 76 57 d5 0d 0d ff 00 4c 7f 52 f4 0d 20 60 18 cf 55 c4 Data Ascii: mIMGMYIqS)BtCZT"(i;rQ&$)R!H$BfKNz)&S@$MQNJp\H58jXf1PdJrT7bN&N1'A&<&JRj#c8PJiQ(\EaiYaY#F"`v*@ ~ki\TvWLR `U

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49824	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:40 UTC	391	OUT	GET /wp-content/uploads/2024/05/maxresdefault-82-1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:40 UTC	780	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:40 GMT Content-Type: image/jpeg Content-Length: 100745 Connection: close last-modified: Mon, 27 May 2024 12:42:33 GMT etag: "66547fb9-18989" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609582 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wAbWMkWT%2FFn%2Bgg3wPesIYdildphL5Rg0lDtqmgjp%2BIDEoiUyUbILE8HpxOHB8jFCNDXZYOSBucgoZgR6KFaMF0l95oVoEdvjpmcj%2BaJODPlniIsxdBWi2usYRuDIcpG8vxzCxk0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cd69a290f5f-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:40 UTC	589	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0a 0a 0a 0a 0a 0a 08 08 08 08 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 09 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0f 0f 0f 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 15 15 12 12 12 15 12 15 12 12 12 15 12 12 15 12 12 15 12 15 12 15 15 15 15 15 15 15 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 00 02 03 04 05 01 06 07 08 09 ff c4 00 6a 10 00 01 03 02 03 03 07 04 09 0b 0f 09 05 06 06 03 01 00 02 03 04 11 05 12 21 06 31 41 07 08 13 22 51 61 71 14 32 81 91 15 42 52 74 a1 b1 c1 Data Ascii: JFIF"j!1A"Qaq2BRt
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 19 1a 7b a1 ee 48 61 4f 34 a1 6c 08 6c 3d c1 74 7d 92 00 46 01 1f 4b 15 cf e1 61 71 b0 17 5b 36 0f 54 f8 c5 b5 3c 37 a8 6c 28 93 b1 f6 02 f6 f1 17 5b ae 0b 81 35 f1 b4 eb b9 73 da 87 3c ba e4 1e d5 d1 76 63 13 77 46 d1 63 60 14 a2 49 a7 67 80 06 c1 53 54 30 46 eb 7a d6 cb ec 83 8a d7 31 78 1c f7 f8 ad 31 92 ac ae c5 b1 56 b4 5b 40 56 b3 51 84 49 38 73 80 3d a3 bd 6c f3 60 39 8e ab 62 c3 68 c4 4c 22 dc 3b 17 3c d1 29 e4 e2 ed 91 d0 3a c6 f6 1e b5 b3 60 b8 e8 24 0b 5f e5 4d 6d be 1c 7a 4c d6 df fa 13 3b 29 86 5c dd c2 d6 ee f1 48 36 89 3a 66 1d f5 c6 6e e0 b5 1d a7 a0 b3 c6 8b 74 c3 5a 18 c1 6d 56 b3 b5 12 92 f1 a2 d4 1a 56 3b 4f 96 dd e9 9c 35 9a 2b 5d a5 68 b3 6c 98 a2 86 cc bf 6a 86 c0 c3 e2 ba c0 81 48 2b 1b f7 6a ab 9c 05 c8 86 b1 be 94 ed 20 eb 8d cb Data Ascii: {HaO4ll=t}FKaq[6T<7l([5s<vcwFc`IgST0Fz1x1V[@VQI8s=l`9bhL";<):`$_MmzL;)\H6:fntZmVV;O5+]hljH+j
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: ce 90 92 74 d5 48 28 b6 85 a6 cd be 87 f4 85 2f 02 a7 ce dd 7d 09 cc 55 81 e0 5f 7d d4 9c 2f 2c 60 6a 3c 15 40 db f0 bd 75 0b 2c a4 0d dc 2e 55 a1 90 11 bc 24 82 05 8a c6 cc f8 1b 41 12 f0 ac 3f 40 48 0a d9 d4 96 1b 82 8d 43 5a c6 81 72 14 ef 2a 61 1b c0 5c 1e 8e 6d 9d 8a c8 a4 45 64 04 1b f0 55 75 d0 0e 90 58 2b c9 2b a3 b5 ae 15 53 c7 d7 41 bd c2 ed d3 e6 0b 0c e4 b7 0d f0 4e 86 a9 c3 4d f6 4e 3a a8 f6 27 e0 86 ed bd 93 34 a4 39 d6 23 71 5b bb 0e 66 cc 09 ce fe 25 61 d2 91 ad b5 5b 3d 3e 1c c2 dc d6 1a 0b ee 5a d6 3d 5d 1b 1c 01 d1 67 bd 67 06 7b 86 5f 3d f8 28 f5 da b4 9b 22 8e b6 37 ba c0 ab 2a c9 a2 63 48 71 1e 2b 74 81 ad 61 74 ee 2f d0 7a 7d 2b 68 c5 29 87 44 6e 15 3c 18 e4 2c 75 87 05 22 b7 68 a3 91 b9 41 26 fb 82 91 83 48 af 87 ac 42 65 b0 ab 7a Data Ascii: tH(/}U_}/,`j<@u,.U$A?@HCZra\mEdUuX++SANMN:'49#q[f%a[=>Z=]gg{_=("7cHq+tat/z}+h)Dn<,u"hA&HBez
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: e7 b8 fb 1e c6 de d6 5a 8b b1 39 01 3d 6f 89 74 5d b3 60 21 ba 68 b4 f7 61 0d 75 ec 3e 05 18 24 82 cc 6a 51 a6 62 af 70 9a b7 3f 79 2a b4 e0 5f 4b 2b 4c 13 0e 73 78 84 25 3c 16 cc 7f 79 50 f1 1a b7 b0 68 e2 a7 88 40 e3 aa 54 94 79 c5 ad 7b fc 0a 70 8a b9 33 54 83 14 91 cf d4 d9 6e 74 12 b9 cc 04 6f 01 27 0f d8 cb f5 ad bb e1 f8 54 d8 29 0c 72 64 b5 ac b3 71 27 2c b9 c0 2b 8f 98 f0 15 bc 74 0c 06 f6 ef d1 41 a1 c3 5a 08 2b 60 a5 84 6e 54 75 36 4a 90 ec 53 00 c2 3d 4b 43 da 4c 21 f2 3e e0 78 2d f1 d4 c1 46 92 1b 2e 49 d3 25 2c e4 ab c1 cb db 87 cb 1b b7 6a 38 85 57 8f be a1 e6 c6 e1 75 2a e8 19 9a ee d2 ea 3b a8 21 78 20 01 7f 05 d6 a4 d1 58 c5 36 71 7f 25 9a fa 66 57 d8 5e 15 35 83 ac 7b 56 ff 00 1e 06 d0 ef 30 11 7d ea e0 d3 b4 36 c1 a1 3d 2a 37 f4 67 3c Data Ascii: Z9=ot]`!hau>$jQbp?y_K+Lsx%<yPh@Ty{p3Tnto'T)rdq',+tAZ+`nTu6JS=KCL!>x-F.I%,j8Wu;!x X6q%fW^5{V0}6=*7g<
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 3b 47 62 62 a6 9d a7 82 ac 8a be 4a 2a dc 49 c0 2d 2b 68 6a a4 07 30 26 db f4 5d 06 a7 0b 0e e0 a3 e2 18 23 4b 08 00 5e dd 8a ac 98 f6 35 0d 95 da ab 1c af 3a f0 24 fe 85 bf 50 e3 6d 92 c0 10 57 26 c6 f0 f3 13 cd 86 97 e0 b6 9d 89 71 75 8f 61 08 8b 1d 31 86 e0 12 16 b7 8e 36 ef f4 ad 9e 99 bd 50 a8 71 66 f5 fd 2a c9 83 46 da f8 b4 1a 7d 34 55 38 64 37 1f 4e d2 b6 1d b6 68 b0 fa 76 2a 7c 23 cd fa 76 95 25 39 6c c9 8e dd eb 21 dd d6 52 ba 1b f0 d1 38 da 3e cf 89 53 0c ba 2b da 2e 55 a6 1e 3a c1 23 c9 08 de 14 9a 28 49 70 b0 2a 79 24 de 30 a6 7d 6f d0 a8 ab 20 fa e8 f1 5b 16 15 a3 35 16 36 54 95 47 eb a0 77 a6 18 2c 99 0d 80 f0 4d be b3 26 fb 85 67 03 46 51 a2 8d 5f 48 1f c1 4a c9 05 77 b3 9a ef 4a 18 b3 4f 0f 85 45 18 36 aa 7d 1e 16 d0 6e 7e 25 46 f0 81 55 Data Ascii: ;GbbJI-+hj0&]#K^5:$PmW&qua16PqfF}4U8d7Nhv\|#v%9l!R8>S+.U:#(Ipy$0}o [56TGw,M&gFQ_HJwJOE6}n~%FU
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 6d dd ea 65 26 18 5c 33 11 eb 4b 73 72 9b 0e 0a e8 c1 cd b3 68 d9 f8 23 65 80 00 13 f4 d5 6c 15 b0 07 b6 c3 e0 5a 16 1d 2b c1 cc 49 d7 72 dc b0 6a bc c0 0b dd 56 6c da 02 60 c2 2d c1 5e 50 60 c3 79 1e 84 8e c5 6d 49 25 db 65 c9 39 3c 9a 25 91 31 e1 51 9d e0 15 71 41 4a 1b a0 00 05 1a 9c ab 28 9c 00 55 53 6c d5 c7 06 bf 8e c6 33 0e db fc ca ef 07 a6 ea 0f a7 12 a8 71 a9 87 48 2f b9 6c 78 5d 73 03 06 a0 ae c8 4b 26 12 ee 4d 6c 4b 22 99 47 18 9b 2f 6d 15 ad 3c 80 8d 16 99 46 72 5c 11 99 4e b1 2d 15 fd aa 91 51 56 d6 6f 20 26 06 2b 1f 6d fd 29 dc ac 64 6a 5b 4d 80 0d 4e 5b 92 a2 6c e5 28 8c fa 42 db 31 3a a6 bc 2a 58 cb 03 af b9 46 30 68 6d 2d 7f 54 68 b5 ec 50 f5 bd 69 ea 9c 5d a0 01 7d 15 65 6d 7b 5d 62 2e a4 86 8d 67 6d e5 d0 7d 3b 14 6d 95 66 61 af 7f ca Data Ascii: me&\3Ksrh#elZ+IrjVl`-^P`ymI%e9<%1QqAJ(USl3qH/lx]sK&MlK"G/m<Fr\N-QVo &+m)dj[MN[l(B1:*XF0hm-ThPi]}em{]b.gm};mfa
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 6a 9f e8 ec 99 63 75 53 73 5f 45 56 5b 18 1c a2 2e 3a 05 79 86 d2 c8 d3 98 ee f0 55 98 4f 54 df bd 6c 2c ad b8 d1 67 22 ed 64 df 76 6e ba 26 c4 43 87 58 83 7d 7c 57 30 db fa 86 be 67 58 69 7d 3d 41 5c d1 55 10 6d be fa 7c 0b 5c da df 3e ff 00 4d c1 56 26 3b 4a 17 35 65 81 64 04 b6 b5 6e 8b a4 0c 09 c6 b5 0d 6a 75 8d 46 5e 28 23 6a 53 d9 65 26 28 d6 66 6e 88 5d 94 53 ef 4e 53 14 8a 81 aa 5d 20 56 c9 cf e2 4c 8d 3d 23 74 29 30 b1 48 7b 74 2a 19 aa 45 6b 99 64 e4 06 da a2 45 86 28 33 7d cb 9a 2a bc a3 7d 95 9d 36 22 d0 b5 a8 9d b9 58 d1 c2 e7 11 60 ab 82 ca 58 24 62 55 3d 21 d0 6e 56 18 06 0f 9c e6 72 5c 18 5d 8d dd f0 85 3b a5 31 b6 c0 fa 94 ae 19 59 37 2e c4 9a d8 ac 32 81 bb 8a a8 92 81 ca 7b 26 71 d7 b5 61 c2 43 b9 25 64 42 aa 43 71 50 1b 5b e1 56 d8 13 Data Ascii: jcuSs_EV[.:yUOTl,g"dvn&CX}\|W0gXi}=A\Um\|\>MV&;J5ednjuF^(#jSe&(fn]SNS] VL=#t)0H{tEkdE(3}}6"X`X$bU=!nVr\];1Y7.2{&qaC%dBCqP[V
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 2d 1e 3c 17 2b 8a 95 e5 f9 4d cd 89 1b b5 d0 ae c1 50 2f 6e c1 aa d6 1f 1c 0d 91 ce d2 e6 e5 7c f7 5b 69 62 4b b9 f5 1f 87 1b 96 e3 5d a4 c3 f2 1d 75 f1 e0 8a fc e7 46 ee ee 56 15 73 34 b8 d9 54 e2 55 f9 77 2f 9d 53 6c fa cf 47 8e 48 73 44 45 ef a2 67 cb f2 0b 0f 81 43 9a a1 ce 3a 93 af 05 69 4f 85 17 00 74 bf 05 16 4b 0b 92 d5 c4 86 fa f2 77 fa 15 7c 8e b9 2a f2 a7 03 73 5b 98 aa 29 9b 62 56 94 b4 fb 14 b7 39 e4 c3 92 4a c1 2b 17 5d 0c c8 50 41 28 08 2a 03 10 84 bb 22 c8 54 4b 53 89 1c 52 ca 01 b7 2c 25 90 90 50 02 10 10 80 10 84 20 04 21 08 01 08 42 00 42 10 80 10 84 20 04 21 08 01 08 42 00 42 10 80 10 84 20 04 21 08 01 08 42 00 42 10 80 10 84 20 17 65 96 d3 bb 7d 90 d5 ba e0 cd 80 c5 72 05 ed f0 aa 94 9c 8d 25 cd 23 44 5d 4d c5 5e d2 f3 94 68 38 a8 2f Data Ascii: -<+MP/n\|[ibK]uFVs4TUw/SlGHsDEgC:iOtKw\|s[)bV9J+]PA("TKSR,%P !BB !BB !BB e}r%#D]M^h8/
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 98 ff 00 07 ad eb 03 72 ea d8 fc 11 75 34 bd e7 8f 99 6f 41 52 c6 47 6b ad 7b 11 9a ef b8 dc 77 22 2a 59 9f 70 5b 90 6e b9 37 16 f0 52 a9 b0 58 db ab 8b a4 77 7e eb f7 59 7a 34 74 eb 67 df 84 79 da 9e ad 4d 5c 27 92 bc 3b 38 ea 8c c7 85 af f1 a7 29 70 37 1b 99 03 59 dd e7 1f 4e b6 57 b1 46 1a 2c 00 00 70 0b 37 5e d6 9f a5 56 b9 97 27 81 aa eb f6 4b 88 ac 15 90 60 54 ec 39 ba 30 e7 0f 6c eb fc 8a 71 68 ec b7 70 d0 27 2c b0 42 f4 a1 54 61 c2 47 89 6e a6 d9 fb d2 c9 96 27 af a2 69 a9 79 d6 d8 32 8f 98 e3 12 5c 10 c7 27 23 6d d4 12 20 15 96 32 eb 33 c2 42 97 87 b7 b9 55 90 c8 ee 85 39 4d 66 a9 95 6c b0 55 12 bd 43 e4 a4 64 4b aa 9a ea 30 25 60 14 a0 54 60 bb 19 ab 79 6b 1c eb ee 05 73 8a c9 c9 37 bf 6a dd b6 c6 b0 47 4e ed 6c 5f 66 0f 49 17 b7 7a e6 cf 94 92 Data Ascii: ru4oARGk{w"*Yp[n7RXw~Yz4tgyM\';8)p7YNWF,p7^V'K`T90lqhp',BTaGn'iy2\'#m 23BU9MflUCdK0%`T`yks7jGNl_fIz
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 9a 2d 76 4d eb 60 c6 64 b0 f4 2a 02 56 f4 f6 32 9b e4 4a 2e 96 42 c2 dd 19 60 c0 09 51 ef 0a 75 35 35 db 7e 29 96 47 67 0f 15 18 09 b2 6c 14 25 c0 11 f0 29 50 50 f0 37 56 38 5d 43 1a 05 d5 a3 1e c7 6a 32 f8 2e 59 c9 ae cb 26 fe ef 2c 66 82 06 b0 02 40 49 ab da 07 6a dc da 6e 02 ea 45 55 dc 03 58 d2 e2 78 8e 0a 1d 2e cc b9 ce cc f7 58 fb 96 d8 fa cf 05 14 74 fb 6d 9e 70 cf 3f 59 af a2 11 e6 45 35 41 ce eb 91 7b fc 4a db 0f c2 0d 89 0d b5 f5 d7 4f 8d 5b 51 e1 31 47 b9 b7 23 89 de ac 5c 74 de be 9b 4d d2 12 f7 8f 9e bf ae e1 62 b4 6b 6e c1 2e e0 5f 29 36 f6 ad 06 de b3 bd 5a 53 c0 c6 e8 d6 01 df c5 2d c5 2a 21 75 ec d5 a2 a6 0b 88 9e 3d da fb 6d ee d8 e3 23 ba 4b d8 14 a6 8d 13 2f 0b ac e3 7c f7 18 ca 9b 70 4f 94 d9 08 c0 d8 2b 2b 2e 49 0a 0c c5 30 2c bd bb Data Ascii: -vM`dV2J.B`Qu55~)Ggl%)PP7V8]Cj2.Y&,f@IjnEUXx.Xtmp?YE5A{JO[Q1G#\tMbkn._)6ZS-!u=m#K/\|pO++.I0,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49825	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:40 UTC	385	OUT	GET /wp-content/uploads/2024/05/Telegram-3-1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:40 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:40 GMT Content-Type: image/jpeg Content-Length: 15898 Connection: close last-modified: Mon, 27 May 2024 12:00:38 GMT etag: "665475e6-3e1a" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609582 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0thKdZA4LWkHQ8RU%2F6bwPLL7dKMd5nnv5G8dzl5b1176yhozxt1vhjckFxscmLexoQbIe5O6dNK2TbSiuzcR1z5KeBRdcCCdRuDK%2BCdxSe7SeqATrDCoDZLAmez7GorgDRQncu8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cd75a444337-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:40 UTC	595	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff fe 00 1f 43 6f 6d 70 72 65 73 73 65 64 20 62 79 20 6a 70 65 67 2d 72 65 63 6f 6d 70 72 65 73 73 ff db 00 84 00 09 09 09 09 0a 09 0a 0c 0c 0a 0f 10 0e 10 0f 15 14 12 12 14 15 20 17 19 17 19 17 20 31 1f 24 1f 1f 24 1f 31 2c 35 2b 28 2b 35 2c 4e 3d 37 37 3d 4e 5a 4c 48 4c 5a 6e 62 62 6e 8a 83 8a b4 b4 f2 01 09 09 09 09 0a 09 0a 0c 0c 0a 0f 10 0e 10 0f 15 14 12 12 14 15 20 17 19 17 19 17 20 31 1f 24 1f 1f 24 1f 31 2c 35 2b 28 2b 35 2c 4e 3d 37 37 3d 4e 5a 4c 48 4c 5a 6e 62 62 6e 8a 83 8a b4 b4 f2 ff c2 00 11 08 02 74 04 b0 03 01 22 00 02 11 01 03 11 01 ff c4 00 34 00 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 06 01 02 04 05 07 03 08 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 Data Ascii: JFIFCompressed by jpeg-recompress 1$$1,5+(+5,N=77=NZLHLZnbbn 1$$1,5+(+5,N=77=NZLHLZnbbnt"4
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 22 d8 d9 72 d1 72 d1 72 d1 72 da a2 aa 55 01 00 cb 10 98 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: "rrrrU
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 4a 0b a3 5e 11 ee 1b 4f 59 6c 4e 53 ab a7 7d 4b 39 df 6d 64 e6 11 b1 d9 f1 f7 c7 ba 1f 3c e8 7b f4 56 01 3f e7 6c 67 9e d6 dd d5 c1 51 9e b0 48 00 00 00 00 00 00 00 00 00 00 00 00 00 03 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 a6 d7 5e dd 5f a4 e2 49 c3 67 06 93 ed dc 36 74 55 a7 a8 19 02 54 ae 3c e1 ef 85 8d e7 31 7d 2b b1 95 b9 26 19 15 ac 4d 2f a7 a3 2a 79 5f cc 76 f3 7a 68 2d bb d0 79 d0 d9 aa a2 64 52 55 51 0a d0 39 e6 9e 45 0c f3 de 97 63 e1 8b 6e 8e 9e df bb e0 4e fa df b1 35 ff 00 29 7a f0 77 f6 fd 3f 21 f1 ef aa ec 3c 4b 2f 07 9f b7 75 e1 85 67 3f 57 45 d4 ed af b4 a5 90 c3 f6 5a 2c b5 ef 76 7e f9 3b f9 22 59 78 79 fa 3b 2b 89 22 e7 93 1d 29 07 c7 cf 4f 9f 44 87 cb ca f3 99 36 26 1b 25 55 3b ea 02 40 90 48 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: J^OYlNS}K9md<{V?lgQH^_Ig6tUT<1}+&M/*y_vzh-ydRUQ9EcnN5)zw?!<K/ug?WEZ,v~;"Yxy;+")OD6&%U;@H
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: d6 da a2 a0 a2 a2 dc 0d 85 b8 e5 3e 92 f1 1e ab 43 7d b9 1c 9d ed 06 5f 28 ec e1 f2 ce b6 fb da 0a d2 b4 cf 10 48 43 ce 7d 02 ec d5 56 98 bc ea 55 07 69 f1 16 15 01 20 90 00 00 00 00 00 12 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 31 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 90 48 00 00 00 00 04 1b cd 1f b6 ad bd 5b 41 e7 2d a5 f4 bc 3f 2f 63 a3 ba a4 cb 52 bd 1a 00 a2 a4 f9 59 ef e3 af 3e b1 eb ca bd 2a 2e 31 2b 67 bd bd 40 6d d3 5a 09 04 b1 ae da 68 dd 29 94 fb c5 28 ee f4 7a 1f 6f 0b af 36 1b 34 84 80 00 00 00 00 00 02 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 46 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 32 09 00 00 00 00 00 02 1b 19 e7 34 dd 71 58 74 4e 43 d5 3d ab ae 78 ce 55 fa eb ba 4c e5 b7 6d d4 12 ad 08 63 d3 24 52 b5 a6 58 80 Data Ascii: >C}_(HC}VUi 1H[A-?/cRY>*.1+g@mZh)(zo64@F 24qXtNC=xULmc$RX
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 53 b6 3a ff 00 bc 47 72 34 ff 00 d7 3b ef 11 dc 84 87 9c 3d fc 20 e1 09 1f 39 77 dc 23 b8 f9 3f 39 77 dc 20 e0 e9 5d 93 6b f8 60 e0 e6 36 4e 2b e0 83 83 9b d9 3a 7e 08 56 0d 1a 24 89 d1 f0 42 d3 a2 a2 9d c6 30 87 f7 07 fd af ee 1f 18 fd 64 9f aa a8 c3 5e 37 97 fb 78 31 15 5d 52 0d a1 96 72 75 c0 49 3d 11 0e 3c e3 8a 2a 5a d4 a2 76 93 14 ca dc dc 8b 88 1a 65 6d 6d 41 cc 5a 19 71 2f 36 87 10 79 ab 48 50 ec 3d e1 ef ae 73 d6 31 84 85 a9 cf 7b 6f dc 0d e2 e3 93 8c 7c 39 3f 55 71 85 fc 6e cf aa bf cb 83 16 a5 42 a4 09 d4 5a 4f 00 04 91 14 a6 d6 d5 36 51 0b b8 50 6c 5f ed ce 04 18 9e ad 49 c8 be 86 5c d2 2b 20 1e 6e c0 60 10 40 20 e4 46 5c 89 8f af 73 d6 31 85 07 f6 5a bd b1 80 3d 3e 26 c2 2a 95 56 29 8d b6 b7 10 a5 69 92 00 4c 2b 18 33 b2 4c fc 71 dd 92 76 49 Data Ascii: S:Gr4;= 9w#?9w ]k`6N+:~V$B0d^7x1]RruI=<ZvemmAZq/6yHP=s1{o\|9?UqnBZO6QPl_I\+ n`@ F\s1Z=>&V)iL+3LqvI
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: b5 27 dd 61 d6 10 12 51 7c a2 b7 45 5c 92 84 e4 9d c2 01 b9 03 5a 22 87 57 15 06 02 16 40 79 03 31 bf af d2 6b 88 94 a4 d4 27 2c 5b 60 84 74 95 cd 11 27 85 59 49 0a 9a 78 b9 fb 29 c8 44 b4 9c b4 aa 42 59 65 28 1d 43 38 3c 82 40 17 31 34 ef 1d 32 fb bd 37 14 79 76 31 63 ba 2c 62 d1 8b cf e9 ed 0d cd 08 0b 52 7c 15 11 d9 05 6a 56 b5 13 14 d5 a1 13 d2 aa 59 01 01 d4 92 77 00 60 d6 a9 57 36 9c 6a 3e 7a a5 f9 eb 31 f3 d5 2f cf 59 89 99 fa 14 d2 42 5f 7d 85 81 aa f1 a3 85 77 b1 1c 5e 13 de c7 bc c7 15 84 f7 b3 f1 18 9b 0d 09 97 83 46 e8 0b 56 89 1b af 97 0e 1c a5 48 cf 31 30 a9 86 8a 8a 54 90 08 51 11 dc d5 1b cd d5 f1 98 76 49 89 ba af c9 e4 5b 21 b2 bb 27 3b ea db 12 b2 ad 4a 4b b4 cb 60 68 a0 7b ce fe 0a fc db f2 94 e5 2d 95 e8 a8 ac 24 ab 6c 4b ca 57 aa 4d Data Ascii: 'aQ\|E\Z"W@y1k',[`t'YIx)DBYe(C8<@1427yv1c,bR\|jVYw`W6j>z1/YB_}w^FVH10TQvI[!';JK`h{-$lKWM
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 89 7b f3 96 32 82 00 e4 01 0f 48 99 89 c7 5c 3b c0 1f 60 86 65 9b 6c 0c b3 89 da 8c a4 8a 0a 9e 70 0d c9 1a cc 4f 62 79 a7 ae 99 74 f1 49 de 73 59 87 1e 71 d5 15 38 b5 2d 5b d4 6f 07 94 63 15 f8 d4 fb 24 43 6c ba e5 ca 1b 52 ad ae c2 f0 a6 dc 4a 41 28 20 1d e2 30 41 09 c5 94 42 7c e5 22 1d 61 0e 83 71 13 f4 c0 73 02 26 a4 d4 82 48 10 47 0e fe c3 0f e6 eb 9e b1 84 30 f2 c1 52 5b 51 48 d6 40 ca 14 da d0 01 52 48 07 54 61 2f 17 3d ed ff 00 94 54 bf fd 38 f6 cd 41 d6 78 71 5f 8a ff 00 15 31 30 2f 85 e5 0e e9 95 46 1e 37 a4 4b 7d ef f9 1e 02 40 04 92 00 de 61 75 4a 6a 17 a2 a9 c6 af d4 6f 18 6c 83 5b 55 b5 29 2e 46 1c ca b4 ea 7f 61 c8 b7 06 2f ca 6e 4f d9 1f f9 44 b7 f7 69 7f 64 8f cb d1 7d 5a f5 44 ad 2e 7e 6f 36 98 36 e9 2b 21 12 98 59 b4 d9 53 2f 95 9e 8a Data Ascii: {2H\;`elpObytIsYq8-[oc$ClRJA( 0AB\|"aqs&HG0R[QH@RHTa/=T8Axq_10/F7K}@auJjol[U).Fa/nODid}ZD.~o66+!YS/
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 09 e9 b4 b0 5c 28 ba 54 6e 05 f5 47 72 68 f3 d5 7c 02 3b 93 4f 9e 9f 80 45 4e 40 48 4d 71 21 c2 be 60 55 ed 6e 0a d5 20 d4 d0 d0 0f 68 14 13 6b 8b 8c e0 e0 e9 8d 93 8d fc 26 0e 0e 9d d9 30 cc 1c 23 52 1e 5b 3f 14 1c 2b 55 1e 4b 7f 14 1c 31 57 fd 40 f8 84 77 35 57 f3 53 f1 08 18 6e b2 a5 25 09 94 24 93 61 ce 4c 77 01 8b ff 00 f0 ee 7c 68 87 30 3e 29 6b c3 a5 ac 7d f4 41 c2 f5 b4 e4 a9 42 3e f2 60 61 8a b9 ff 00 00 0e d5 08 18 4e aa 76 36 3e f4 27 08 54 0e b7 59 1f 6c 51 e9 aa a6 ca 16 54 b0 a5 15 95 12 21 c4 21 c6 d6 85 8b a5 49 21 5d 86 3f 48 a0 55 8e 57 6f f8 2d 06 26 25 e4 6b 32 56 0a ba 15 9a 16 33 29 30 ba 2d 7a 45 67 e4 aa 51 1d 26 d5 1f 35 e2 49 a2 03 ca 72 c7 6a d7 12 58 51 08 50 5c db e1 7f b0 98 42 42 12 12 91 64 81 60 37 70 14 a4 82 08 04 1d 60 Data Ascii: \(TnGrh\|;OEN@HMq!`Un hk&0#R[?+UK1W@w5WSn%$aLw\|h0>)k}AB>`aNv6>'TYlQT!!I!]?HUWo-&%k2V3)0-zEgQ&5IrjXQP\BBd`7p`
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 43 cd b8 a4 14 9e 6d a2 91 88 db 9b b3 53 04 21 ef e0 a8 49 06 2d 16 e1 af f8 a2 73 d9 9e 49 d5 18 75 9a 62 d8 e3 50 d8 2f 8f 0f 4f 32 38 6b 34 c1 3f 2c 6d f5 c8 cd b3 fc a0 82 92 a0 41 04 1b 10 75 8e 0c 3b e3 56 bd 57 38 71 2f 8c ff 00 05 1c 00 12 40 02 e4 9b 5a 28 94 b4 c8 cb e9 2c 7d 33 82 ea ea ea 8b 45 a2 be c5 31 32 c5 d7 db 1c 69 c9 1a 19 29 46 07 27 0e 67 49 96 fb df 9c 55 fc 03 13 43 9c 7d 2c b5 c1 11 4a 7f 8e 91 60 de e5 37 41 fb 22 63 c1 4f 03 cf 36 c2 0a d6 72 1f c7 aa 26 a6 dc 99 72 e7 24 8d 49 e0 19 0d 40 c5 27 11 bd 2d a0 d4 cd d6 d6 c5 f9 42 18 98 69 f6 d2 b6 d6 14 92 32 23 91 88 3c 51 3b ea 45 f9 32 f5 07 64 66 52 e3 3e 1a 75 df 51 1b 8c 53 ea 12 f5 09 54 3c c9 ea 50 da 93 b8 f0 e2 1a 4e 95 e7 19 4f 38 0f a4 4e f1 be 35 8c a3 0e f8 d5 af Data Ascii: CmS!I-sIubP/O28k4?,mAu;VW8q/@Z(,}3E12i)F'gIUC},J`7A"cO6r&r$I@'-Bi2#<Q;E2dfR>uQST<PNO8N5
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 4b 64 d9 c4 45 6a ac ed 4e 60 2b 30 d2 09 d0 47 f3 3d 70 d3 76 00 91 9f 78 75 d0 39 a0 e6 63 0f d1 fe 73 9b d2 70 1f 93 b6 41 5e e5 1d 89 8b a5 b6 f2 16 00 6a 8a ac ed ca 85 e1 f7 4a d4 77 7a 79 25 30 5b 56 b8 a6 4e 07 00 17 89 a9 56 67 18 71 97 90 14 85 8b 11 15 7a 4b f4 b9 92 da ee 50 4d db 5e f1 fd 61 a7 f6 28 c0 20 ea e5 bc dd c6 90 d7 0d 35 e5 1e f0 e3 c0 64 22 9b 4c 98 a9 cd 71 4d 02 07 96 be 88 89 29 26 24 65 5b 61 a4 d9 29 1e f3 bc c5 4a 69 28 49 17 89 d9 92 e2 ce 7e 9e a5 5a 26 e2 24 27 74 54 01 31 25 3a 97 52 01 31 3f 23 2f 50 97 53 2f a3 49 27 56 f0 77 88 ab 51 e6 69 6f 14 ac 15 34 7c 07 00 c8 8e bd c6 1b 74 a7 2d 90 95 05 0c 8f 7d 52 92 91 73 0b 79 6a bd 85 84 52 e9 53 55 37 c2 1a 16 48 23 4d 67 52 62 9d 4e 96 a7 b0 1a 65 36 da a5 6d 51 de 62 Data Ascii: KdEjN`+0G=pvxu9cspA^jJwzy%0[VNVgqzKPM^a( 5d"LqM)&$e[a)Ji(I~Z&$'tT1%:R1?#/PS/I'VwQio4\|t-}RsyjRSU7H#MgRbNe6mQb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49826	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:40 UTC	382	OUT	GET /wp-content/themes/tgtheme/img/arrow1.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:40 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:40 GMT Content-Type: image/jpeg Content-Length: 1206 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-4b6" expires: Wed, 17 Jul 2024 18:16:46 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 1484574 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JFxwbuszM4DOpeXtpF05ZYAi5%2FJ2kOqoDoPJEGoAOSPt9pnu6ki5UTG%2BgNIOeO1sZlyoZhy1c7hQdTUEmArRCQ8sGYE8hCsC%2B2ufiZpZJmTNDzWDrmJLdHiF9zBu2rw1XjHAVtI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cd8deb41835-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:40 UTC	594	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifIIDucky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xm
2024-07-04 22:39:40 UTC	612	IN	Data Raw: 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 37 36 44 46 30 38 44 34 46 39 41 31 31 45 45 38 42 45 38 43 46 33 41 44 42 33 30 32 33 33 41 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 33 37 36 44 46 30 38 41 34 46 39 41 31 31 45 45 38 42 45 38 43 46 33 41 44 42 33 30 32 33 33 41 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 33 37 36 44 46 30 38 42 34 46 39 41 31 31 45 45 38 42 45 38 43 46 33 41 44 42 33 30 32 33 33 41 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 74 Data Ascii: xmpMM:DocumentID="xmp.did:376DF08D4F9A11EE8BE8CF3ADB30233A"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:376DF08A4F9A11EE8BE8CF3ADB30233A" stRef:documentID="xmp.did:376DF08B4F9A11EE8BE8CF3ADB30233A"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49827	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:40 UTC	499	OUT	GET /wp-content/uploads/2024/05/%E7%94%B5%E6%8A%A5%E5%A6%82%E4%BD%95%E6%89%AB%E6%8F%8F%E4%BA%8C%E7%BB%B4%E7%A0%81%E6%B7%BB%E5%8A%A0%E5%A5%BD%E5%8F%8B%EF%BC%9F.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:40 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:40 GMT Content-Type: image/png Content-Length: 161759 Connection: close last-modified: Mon, 27 May 2024 12:46:18 GMT etag: "6654809a-277df" expires: Fri, 02 Aug 2024 18:49:35 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 100205 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=M22VYbt%2FU0Yu9jo1w6kP%2FykNCqev9VIIhIGBP9YmN4bSBYARzl4coVcIaXcag%2BgDxWX6hkRsw6lBkY8DLXCYH2zPMed3zlMDnaVEKraME7X2%2BpwzU3N76qtWZxaABEFz40cmXbs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cd8bd2e42e0-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:40 UTC	590	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 70 00 00 02 18 08 06 00 00 00 2c 3a 0e 54 00 00 20 00 49 44 41 54 78 9c ec bd 79 90 64 d7 5d e7 fb 39 cb 5d 72 a9 bd 7a 6f b5 ba db 92 2c 59 36 c6 b2 8d 6c 83 8c 01 8f 8d 3d 0c 06 63 0f 98 e5 c1 03 26 78 f3 1e 33 0c c3 30 cf 41 bc 89 e1 79 1c 1e 6c 82 81 20 58 9e 89 30 31 f1 82 18 e0 0d 03 63 7b 6c c0 1e 64 2c e4 45 6d 5b 96 5a 72 6b 6d a9 97 ea ee ea ea da 2b b7 7b ef 59 de 1f 37 33 ab ba 5b aa 94 5d 2a 55 75 d5 f9 44 dc c8 cc ca ac 9b e7 e6 76 cf f7 fc 7e bf ef 4f 7c cf d7 9c 27 10 08 04 02 81 40 60 9b e0 0b 87 1c 52 b4 3a 2d aa 0e 8e d5 ab 50 c0 d9 56 4e 23 8d a9 d8 1b 7b ea a2 8a 02 5b 8d 29 a4 23 2d 0a 8e c6 09 b7 0e 41 55 40 b3 d5 04 51 c3 7b 8f 17 02 0f 08 d9 fb 4f 87 f7 1e 29 d4 16 8e 7e f3 Data Ascii: PNGIHDRp,:T IDATxyd]9]rzo,Y6l=c&x30Ayl X01c{ld,Em[Zrkm+{Y73[]*UuDv~O\|'@`R:-PVN#{[)#-AU@Q{O)~
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 81 8c 34 3a 92 c4 52 a2 11 08 60 b7 c8 97 52 c0 59 8c f1 68 2d 50 4a e1 9c db ea 61 05 b6 01 fb e3 49 e6 3c 7c b1 0d 0f 37 72 6c 06 fb 3c 54 95 60 4e 9b ad 1e de 4b 42 10 70 81 40 20 10 08 04 b6 15 56 02 de 53 95 9a 04 e8 58 c8 84 43 44 1a b1 03 e6 67 0b 59 01 75 90 75 a0 09 c3 2b 70 30 ae d2 49 62 1e 68 2c 70 da c2 25 0f 1d 20 f1 9a 8a 97 c4 ae 0c 3d ee 80 c3 1f 48 19 81 13 5d 01 67 d0 1a 94 92 38 e7 76 45 04 32 b0 3e c3 56 70 7f 51 70 6f 67 9e 34 f7 1c f3 82 65 05 97 14 ec 15 95 ad 1e de 4b 42 10 70 81 40 20 10 08 04 b6 15 d6 81 42 90 0a 8d 04 da 85 c1 48 50 91 c6 d9 ad 1e dd c6 99 cc 2c 4e c2 62 0a 2b 15 d0 02 86 0b 88 9c a4 ad 04 0f b5 0c cf b6 3c 8b 19 88 1c 2a 85 20 36 1e 9c 27 db ea c1 bf 04 94 02 0e 9c 73 58 6b 51 6a f5 76 10 70 81 fb 56 e0 42 5b Data Ascii: 4:R`RYh-PJaI<\|7rl<T`NKBp@ VSXCDgYuu+p0Ibh,p% =H]g8vE2>VpQpog4eKBp@ BHP,Nb+<* 6'sXkQjvpVB[
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 46 1d c1 b2 86 c4 75 80 74 ab 87 b8 b5 78 07 5a e2 24 74 f2 02 72 c3 84 ae 70 d3 30 ec 1b 86 63 2b b0 e4 3b 2c c9 8c 4e e4 20 ae 90 c8 94 38 07 99 83 15 eb c7 e8 a4 df 5a d1 e4 b5 c0 5a 8b d6 aa ac 83 cc 0b 92 24 22 89 a0 d3 81 e6 4e 2f 82 bc c1 a9 cb cb 64 36 a6 6d 6b 14 32 41 6b 10 12 b0 60 8d 65 d2 ae e0 87 46 69 c4 70 be 0d 4f cf c2 95 66 86 d4 82 6a 25 42 04 81 36 90 10 81 0b 04 02 81 40 20 b0 6d 91 6b 22 30 42 74 d3 2a 77 79 50 46 21 40 f4 52 2d 25 4e 0a 5a 26 e7 4a 23 26 cf 41 4d 82 2a 52 12 13 51 77 16 95 49 0a e9 68 23 c8 14 54 6f 90 1c cb ae 6f 0d 00 c2 ef 8e e8 eb 4e 60 b6 18 25 d2 09 49 24 48 29 db 7f b8 c2 22 a4 23 d5 8e 78 cf 28 17 16 e1 e9 0b 4d a6 9a 8e b6 8c 49 ab 09 69 05 22 09 9d 9d 5e e4 fa 22 10 04 5c 20 10 08 04 02 81 6d 85 a2 5b f3 Data Ascii: FutxZ$trp0c+;,N 8ZZ$"N/d6mk2Ak`eFipOfj%B6@ mk"0BtwyPF!@R-%NZ&J#&AMRQwIh#TooN`%I$H)"#x(MIi"^"\ m[
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: b6 cc 59 d0 5a a1 b5 66 3e ee 20 3c 68 07 ca 08 2a 46 20 db a0 56 04 d2 79 0e d7 24 ce 7b 32 ef c8 85 21 c3 91 29 47 ae 1c ce 7b 0e 14 7b 80 b2 14 e0 da 0d 40 6e 50 00 c8 01 02 6d d0 cf b3 1a f0 00 33 20 cf 79 bb d7 a9 0f 3a 3f 0d 1a ff a0 d7 67 a3 7d 8e 4c f3 fa bf ad 1d 53 4f 9f 97 b5 06 dd 95 6e b9 fa 98 b9 03 0d 24 02 bc 20 71 82 9a 81 c8 4a 22 01 78 4f 63 3e 03 05 5e 83 8f 04 56 7b 8c b2 18 61 f1 c0 b3 93 15 84 f3 a8 a2 fc 8c c7 5e 91 ba 88 21 11 31 a2 22 5a 36 ac b0 05 02 81 e7 66 bd e5 2f 41 88 c6 6c 94 6a bd 82 c7 b1 dc f2 90 79 3a 89 64 2c 16 0c 27 90 a6 29 95 25 83 14 1a a1 bb e6 28 42 60 9d a6 5d 80 71 9e 64 8b 66 8f bb bc f4 71 d3 b8 76 41 5a 35 0c 4e 4b 1a 91 c4 27 e5 df 22 03 71 01 71 ee c9 f2 59 86 6a a3 0c 8d 8e 60 81 8b 2d 38 3b 03 17 5b Data Ascii: YZf> <h*F Vy${2!)G{{@nPm3 y:?g}LSOn$ qJ"xOc>^V{a^!1"Z6f/Aljy:d,')%(B`]qdfqvAZ5NK'"qqYj`-8;[
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: b4 1b 24 72 72 83 47 18 08 04 76 2a c6 bb 6e 0a 65 19 81 13 bd c6 de 1e 14 22 d4 42 6d 10 e5 00 3c a2 2b 86 04 65 e4 44 46 12 ef 25 73 b6 ce 8a 81 e5 65 98 6f 79 f6 26 9e b1 18 46 2b 29 d5 7a 85 66 7b d0 33 6c b4 06 e0 9a 9b 6b 22 70 d6 da b2 a6 24 f0 a2 70 ad 78 03 88 2b 09 89 2d eb de 7c 0e cb 06 2e ac c0 53 cb 6d a6 5d 46 b3 33 8a d7 a0 d2 b2 34 48 59 70 59 4e 92 e7 28 6f e8 74 6b 24 42 04 6e f3 08 df 80 4d 64 b6 05 e3 23 31 93 2a a6 75 f1 3c f3 5f 7e 08 31 75 96 c3 c0 1b 87 87 f8 a5 ef 7e 0d a3 e3 a3 ec dd 3f 41 32 52 25 b7 2d 2e 4e 9f e3 1b e7 4f 71 e5 ca 65 f2 4b fb 28 ac a1 65 72 1a 45 46 c3 74 68 db 82 8e b7 38 3c d1 d2 d2 55 e2 cd 5a 7b 95 88 5b 1b 81 f9 56 50 62 fd 15 ae 41 11 9c 81 f7 0f 70 b9 1c 14 e1 da 6c 06 09 b0 41 11 c2 41 11 d0 41 af 8f Data Ascii: $rrGvne"Bm<+eDF%seoy&F+)zf{3lk"p$px+-\|.Sm]F34HYpYN(otk$BnMd#1u<_~1u~?A2R%-.NOqeK(erEFth8<UZ{[VPbAplAAA
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 95 5e 0a 66 14 45 54 ab 55 86 87 87 a9 d5 6a 1c be f3 2e 6e 3b b4 8f 37 dc 76 9c db 8f dd 4c 3a 32 c6 65 17 71 ba e3 98 ce 1c 1f bd f7 f3 d4 be e3 75 8c 7f e7 f7 20 24 14 a7 a1 da 2c 88 26 22 56 6a 86 4a 5b 97 2b c2 ce 75 8b ed 4b 01 d7 6b 9b 11 56 f0 02 81 9d 4b db c0 a1 1a dc 54 15 f8 3c 63 ae 61 a0 52 23 4e a1 d5 34 a4 c1 c4 62 4b 99 33 96 08 4f 45 38 86 95 60 54 09 46 13 cd 68 2c 49 35 44 6e 75 d2 af 28 17 de ca c5 b7 52 b4 b9 b4 5c 0d ef b5 ae 29 e7 5a ab 51 c0 1a 11 26 2a 05 9c 32 86 94 88 48 ab 5d 23 e0 c4 80 e9 e0 55 f9 55 c2 97 a9 c6 12 7a 1d 14 0f 17 8a dc 41 db 79 32 0c 85 72 14 5a 60 a4 c3 e2 79 75 5a a1 65 61 a9 80 85 02 2e 5a cf 45 93 33 5d e4 2c 99 82 31 3f b6 a9 02 ce aa b2 35 48 e4 56 b3 65 3d 50 c8 b2 bc 44 85 3e b1 03 09 02 6e 1d a2 44 Data Ascii: ^fETUj.n;7vL:2equ $,&"VjJ[+uKkVKT<caR#N4bK3OE8`TFh,I5Dnu(R\)ZQ&*2H]#UUzAy2rZ`yuZea.ZE3],1?5HVe=PD>nD
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 05 dc 8d 6e 0b bc d6 25 f3 5a 27 d0 de df 6e 64 5e 88 89 09 ac be 8f d7 f6 9a 4b bc 47 45 11 aa 52 63 a5 28 f0 45 06 d2 90 4c 0c 31 39 3e c6 0f df f1 03 c8 fd 8a b7 fe c8 9b 79 db 77 7d 27 0f 7d f5 34 ff e9 af be cc 57 f6 de ca c8 0f bd 8b c9 d6 f5 f5 11 bd 21 09 01 3e e4 c8 07 02 3b 96 86 10 d4 b2 0e c7 ea 82 89 7a 42 3b 83 86 01 a5 41 79 83 f5 3b 7d 0a bf bd 49 9d c7 79 0f 48 9c ef ba 2a 0b a0 6b 52 d2 14 80 07 6f 4a a3 0a 2d 1c 89 10 44 5a 10 49 38 14 ad 90 68 45 35 49 a9 25 92 58 82 30 a5 f0 73 85 c1 89 98 96 2f 05 5c 55 29 52 a0 c8 cb e8 5b 83 9d 2f e0 7a 29 94 6b 85 db da 9e 6a 99 ee 20 00 e5 15 4a 44 28 4a f1 a6 ba f7 3f d3 80 56 01 8b 79 ce bc 2f 58 c4 b1 22 04 6d 01 39 70 24 ab e3 24 78 05 a8 b2 2f ba 30 e0 0b a0 80 22 d9 5c 01 17 c9 b2 15 48 e1 Data Ascii: n%Z'nd^KGERc(EL19>yw}'}4W!>;zB;Ay;}IyH*kRoJ-DZI8hE5I%X0s/\U)R[/z)kj JD(J?Vy/X"m9p$$x/0"\H
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 3e 8a 31 06 29 25 95 4a 85 8f 7c f8 3f f1 af 7e eb 3f f3 f4 e5 bf e4 8e 1f 7e 37 4d 0f 87 dc 21 ec 4a 41 8e 43 85 46 de 81 c0 8e 26 52 02 6f a1 e9 61 a2 0a 4a 48 84 71 84 b3 eb ce 47 b5 c1 2d 80 ed 48 2e 59 c7 99 b6 e4 81 66 83 6a aa 99 ea 40 75 3c 45 09 d0 b2 4c 27 8c 12 4d 2c 35 5a 82 12 70 b4 d9 d5 4f bd 5e a2 ce e3 ed aa 19 56 5e 95 78 f7 fc 25 1c 79 1a af 3b be 6a 67 7d 97 ec d1 46 d9 a9 6d ad 38 5c 7b 7d a8 3e 82 a3 4c 83 cc 81 dc 41 66 a1 00 8c 87 bf 2e 3c b9 f3 64 d6 d1 30 9e a6 71 b4 8d a3 65 2d c6 43 44 b5 dc 5f bf ac 60 ed f5 6f e2 85 de 22 6e 5e 84 4f e4 15 7e bd b5 97 1f 9e c8 b8 7c 0c 7e cc 82 72 a3 3c 7b a5 c5 63 b3 35 1a b9 e5 42 d1 e6 42 c7 71 51 c7 e8 e1 88 a8 aa 11 72 88 78 61 7b 0b d4 97 82 20 e0 d6 a1 be 5f b2 70 69 86 fa 50 42 ab 05 Data Ascii: >1)%J\|?~?~7M!JACF&RoaJHqG-H.Yfj@u<EL'M,5ZpO^V^x%y;jg}Fm8\{}>LAf.<d0qe-CD_`o"n^O~\|~r<{c5BBqQrxa{ _piPB
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: da 41 e2 20 72 10 75 7b b9 4d 57 4d df 78 05 e1 ba d7 1d bd 61 0b 5b 0a 18 21 b8 ba f6 ad 7b 7d 9b eb 37 16 23 d8 3f b4 82 1a aa 71 fa a9 45 fe c3 cc 0a ef ba e7 00 7f 74 db 18 cf cc c3 93 c9 31 48 cb d6 12 55 01 14 d0 f0 8e a6 ce 68 8d 16 ec c9 82 80 0b 02 6e 1d 5a 43 93 cc ff dd 7f e7 a7 6e 91 7c d7 ad 37 f1 85 cf 7c 99 2f dc ff 25 16 5a 4b 5c 5c 93 bf 75 6d d4 6d 27 59 c9 07 02 9b c9 b5 8d cf 7b b7 ad b5 fc d5 fd 9f e1 dd 87 de c3 d7 ff e7 49 be e7 b6 f3 fc b3 b7 7c 1b ff f1 1f be 82 3f 74 84 e5 43 37 93 86 22 e6 40 60 c7 e2 15 f8 ac 20 ad 45 34 ab 30 bb dc 84 74 88 91 21 c9 d9 46 81 94 a1 0a 66 27 a3 55 85 61 9d 22 6d c4 7c bb 4d a6 eb 28 05 ad b6 21 1b 89 10 8b b6 9c 7b 49 df 8d 9c 79 64 b7 8b b5 40 40 13 10 5d 6d 27 41 af a9 7f 13 02 6c b2 3a 4f 2b Data Ascii: A ru{MWMxa[!{}7#?qEt1HUhnZCn\|7\|/%ZK\\umm'Y{I\|?tC7"@` E40t!Ff'Ua"m\|M(!{Iyd@@]m'Al:O+
2024-07-04 22:39:40 UTC	1369	IN	Data Raw: 61 01 e7 1c 69 9a 92 a6 e9 55 c7 bf 36 75 51 29 85 d6 1a 21 04 69 9a 32 32 32 82 52 e5 89 d2 18 d3 17 6d 3d d1 27 a5 a4 5e af 93 a6 29 b5 5a 0d 80 99 99 99 fe a2 c2 86 50 10 49 b0 cb 1d 9e 3e f9 14 27 9f 3c 83 ad 27 dc b2 6f 94 b1 a5 cb ac 34 41 d5 2a 78 9d 22 ad a2 2a 12 94 87 38 8d 42 1a 73 20 70 83 73 dd 22 92 84 42 96 56 eb 4b 0e 14 a2 34 75 c8 3d 31 92 48 2a e8 2e 04 bd 98 bf c3 81 cd 21 92 0a ac c3 1b 87 16 92 44 47 48 0f ae 30 d8 bc 20 ad 27 14 1e 5a 1d 8b 31 b6 ef 1e e9 9c c3 84 b7 f7 86 e7 75 cd 11 1e 5e 82 df e9 38 fe ce cf 70 70 45 70 cf f2 30 a6 6d f9 9d 19 58 e0 0e 7e e1 9e fd dc bc 7c 81 c7 1b 70 e5 00 cc 9b 0e 23 fa 00 23 ed 90 3c 08 bb 5d c0 79 90 1d 47 b3 a2 10 3a 65 6c 09 72 0d 4b 31 c4 27 be ca db de f0 06 92 3c e7 e4 57 1e e0 c1 07 be Data Ascii: aiU6uQ)!i222Rm='^)ZPI>'<'o4Ax"8Bs ps"BVK4u=1H*.!DGH0 'Z1u^8ppEp0mX~\|p##<]yG:elrK1'<W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49828	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:41 UTC	380	OUT	GET /wp-content/themes/tgtheme/img/code.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:41 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:41 GMT Content-Type: image/png Content-Length: 2989 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-bad" expires: Wed, 17 Jul 2024 18:16:46 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 1484575 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MZ5s%2Bh1dXwMTYZS0zkCO1BROQmLqVQpsfv8k70aDgY9PcDbyaN4fvfZkQYfRtAOIu9aTKVKtknSxgNJPiPED%2BBVay9lbbX2zgHxKg2DeURj0%2BjeV%2Fk4aRAyzx3IU4ZI5%2FZyc5B8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cda19ac43c2-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:41 UTC	591	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 63 00 00 00 61 08 02 00 00 00 4d 91 88 c9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRcaMtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:41 UTC	1369	IN	Data Raw: 33 46 31 31 45 45 39 45 38 34 46 42 37 36 36 36 38 34 36 37 44 45 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 42 42 36 38 37 44 35 43 34 46 33 46 31 31 45 45 39 45 38 34 46 42 37 36 36 36 38 34 36 37 44 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 42 42 36 38 37 44 35 39 34 46 33 46 31 31 45 45 39 45 38 34 46 42 37 36 36 36 38 34 36 37 44 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 42 42 36 38 37 44 35 41 34 46 33 46 31 31 45 45 39 45 38 34 46 42 37 36 36 36 38 34 36 37 44 45 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e Data Ascii: 3F11EE9E84FB76668467DE" xmpMM:DocumentID="xmp.did:BB687D5C4F3F11EE9E84FB76668467DE"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BB687D594F3F11EE9E84FB76668467DE" stRef:documentID="xmp.did:BB687D5A4F3F11EE9E84FB76668467DE"/> </rdf:Description> </rdf:RDF>
2024-07-04 22:39:41 UTC	1029	IN	Data Raw: 95 7b 98 d2 74 e8 8d ae c0 8b ab aa d0 58 08 33 bd 42 38 52 79 6e f0 5e 04 99 81 ab 97 05 24 51 40 05 94 19 c7 c2 b5 70 fa f8 f5 c8 e2 1e 59 73 77 a4 1e 66 cb 67 97 c3 9f f6 87 9b 64 e1 9d c7 eb d7 07 e5 d0 58 14 8d 84 28 0a 1d 4d 01 be 00 25 4e 29 38 cf 90 26 e7 0b 23 ac 72 2e c7 6a 59 79 f2 ac a3 b0 f8 b9 64 96 ad 18 c7 c5 3f 9c 8a cf 45 7e 76 c6 99 ff a0 5a 46 52 ca a1 be d0 07 67 46 a2 d9 42 9d ad 0d 55 1c af 3e 98 98 38 6e ee 17 55 53 f0 c1 47 51 35 4d 2f 4c 16 3d 34 7b 35 b3 a1 70 7b bf af bb 51 56 4d d2 d9 b1 0c 1a a9 44 36 37 9d cc 24 32 b9 d9 85 4e 9d 19 ac 54 4e 0d c5 73 86 a5 52 77 07 fe 9f ec 3b d0 55 d3 77 37 6e f6 5f 24 97 a6 f2 99 f1 5b a1 28 57 d6 de 50 bd 31 58 81 26 29 c4 be 81 70 ea d8 a5 71 43 8c 8c 7f 73 64 71 d8 67 06 51 cd 37 b9 30 Data Ascii: {tX3B8Ryn^$Q@pYswfgdX(M%N)8&#r.jYyd?E~vZFRgFBU>8nUSGQ5M/L=4{5p{QVMD67$2NTNsRw;Uw7n_$[(WP1X&)pqCsdqgQ70

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49829	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:41 UTC	353	OUT	GET /favicon.ico HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:41 UTC	732	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:41 GMT Content-Type: image/x-icon Content-Length: 4286 Connection: close last-modified: Sat, 20 Apr 2024 04:34:24 GMT etag: "662345d0-10be" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6DbyGH0Pk3qkDjXHxyRO%2BjXu67G0KAtKdqNTZG3xXP7wU8lS%2Fxcc%2BPbEcwRZ5fOrc6CZ5nlqrDQ3wM8Yl5kbLPfVmj45DpY33903%2FmMXtuIwcAGtHJZVbCFfQkrxSwhU8roafe4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29cdb5c1e43d9-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:41 UTC	637	IN	Data Raw: 00 00 01 00 01 00 20 20 00 00 01 00 20 00 a8 10 00 00 16 00 00 00 28 00 00 00 20 00 00 00 40 00 00 00 01 00 20 00 00 00 00 00 00 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d5 aa 2b 06 d4 9e 2b 47 d3 9a 27 95 d3 9c 28 bf d2 9b 29 d9 d2 9a 28 f3 d3 9b 29 f3 d1 9b 28 d9 d2 9b 28 bf d3 9a 27 95 d4 9a 28 47 d5 aa 2b 06 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 d5 9f 2b 18 d3 9c 29 96 d3 9c 28 f1 d2 9b 28 ff d2 9b 28 ff d2 9b 28 ff d2 9b 28 ff d2 9b 28 ff d2 Data Ascii: ( @ ++G'()()(('(G++)((((((
2024-07-04 22:39:41 UTC	1369	IN	Data Raw: ff d5 9d 2a ff d4 9c 29 ff d4 9c 29 ff d4 9d 29 ff d4 9c 29 ff d4 9d 29 ff d4 9d 29 ff d5 9d 29 ff d4 9d 29 ff d5 9d 29 ff d5 9d 2a e3 d7 9f 2d 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 df 9f 2b 18 d7 9e 2b e3 d5 9d 2a ff d5 9d 2a ff d6 9e 2a ff d5 9d 2a ff d6 9e 2a ff d6 9e 2a ff d5 9d 2a ff d6 9e 2a ff d5 9d 2a ff d5 9d 2a ff d5 9d 2a ff d5 9d 2a ff d5 9d 2a ff d5 9d 2a ff d6 9e 2a ff d5 9d 2a ff d6 9e 2a ff d6 9e 2a ff d5 9d 2a ff d6 9e 2a ff d5 9d 2a ff d5 9d 2a ff d7 9e 2b e3 df 9f 2b 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 db b6 49 07 d7 9f 2a c7 d6 9e 2b ff d6 9e 2a ff d6 9e 2a ff d6 9e 2a ff d6 9e 2a ff d6 9e 2a ff d6 9e 2a ff d7 9e 2b ff d6 9e 2a ff d7 9e 2b ff d7 9e 2b ff d7 9f Data Ascii: )))))))))--++*********************++I+*****+++
2024-07-04 22:39:41 UTC	1369	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fb f7 ff ed ce 90 ff de a5 32 ff de a4 30 ff ea c7 7f ff fe fe fd ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f0 d7 a4 ff de a4 2f ff de a4 30 ff de a4 30 ff de a4 2f ff de a4 30 ff de a4 2f ff de a4 2f ff de a4 2f f2 de a5 30 f3 de a4 30 ff de a4 30 ff df a5 30 ff de a4 30 ff df a6 33 ff eb c8 81 ff f9 ef db ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f8 ed d7 ff e4 b6 58 ff df a5 30 ff e9 c2 75 ff fe fd fb ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 e6 c6 ff de a4 30 ff de a4 2f ff de a4 2f ff de a4 30 ff de a4 2f ff de a4 30 ff de a4 30 ff e0 a6 30 f3 df a6 30 d9 e0 a5 31 ff e0 a5 31 ff df a5 30 ff e0 a5 31 ff df a5 30 Data Ascii: 20/00/0///000003X0u0//0/000011010
2024-07-04 22:39:41 UTC	911	IN	Data Raw: aa 36 c7 ff b6 49 07 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ea aa 35 18 e7 ac 37 e3 e6 aa 35 ff e6 aa 35 ff e7 ab 35 ff e6 aa 35 ff e7 ab 35 ff e7 ab 35 ff e7 ab 36 ff e7 ab 35 ff e7 ab 36 ff e7 ab 36 ff e6 aa 35 ff e7 ab 36 ff e6 aa 35 ff e6 aa 35 ff e7 ab 35 ff e6 aa 35 ff e7 ab 35 ff e7 ab 35 ff e6 aa 35 ff e7 ab 35 ff e6 aa 35 ff e6 aa 35 ff e7 ac 36 e3 ea aa 35 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e9 ac 37 2e e7 ac 37 e3 e7 ab 36 ff e8 ab 36 ff e7 ab 36 ff e8 ab 36 ff e8 ab 36 ff e7 ab 35 ff e8 ab 36 ff e7 ab 35 ff e7 ab 35 ff e7 ab 36 ff e7 ab 35 ff e7 ab 36 ff e7 ab 36 ff e8 ac 36 ff e7 ab 36 ff e8 ac 36 ff e8 ac 36 ff e7 ab 36 ff e8 ac 36 ff e7 ab 36 ff e7 ac 37 e3 e8 b0 39 2d Data Ascii: 6I575555556566565555555555657.76666656556566666666679-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49837	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:48 UTC	645	OUT	GET /blog HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:49 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:49 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close link: <https://www.telegramkv.com/wp-json/>; rel="https://api.w.org/" link: <https://www.telegramkv.com/wp-json/wp/v2/pages/305>; rel="alternate"; type="application/json" link: <https://www.telegramkv.com/?p=305>; rel=shortlink vary: Accept-Encoding, Cookie strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d6unyB3R%2BNibfCeHOlDIoVX%2F8r9dNB1yua7dov3jljZ6F05OPfQ9vM9072FAZqRlKNSbyWDsluknkWvq%2Bz4MFLf15cuQRsvszCSey%2FBqyxtdN8%2FMc41XZF2Jz8hiwHMpvrygLK8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d067ee918f6-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:49 UTC	480	IN	Data Raw: 37 63 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 5f 43 4e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 67 74 68 65 6d 65 2f 73 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a Data Ascii: 7c38<!DOCTYPE html><html lang="zh_CN"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css">
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: e8 a1 a8 20 2d 20 54 65 6c 65 67 72 61 6d e4 b8 ad e6 96 87 e5 ae 98 e7 bd 91 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 50 72 65 6d 69 75 6d 20 70 6c 75 67 69 6e 20 76 32 30 2e 34 20 28 59 6f 61 73 74 20 53 45 4f 20 76 32 30 2e 34 29 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e 63 6f Data Ascii: - Telegram</title> <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO Premium plugin v20.4 (Yoast SEO v20.4) - https://yoast.co
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 62 6c 6f 67 23 62 72 65 61 64 63 72 75 6d 62 22 2c 22 69 74 65 6d 4c 69 73 74 45 6c 65 6d 65 6e 74 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 e9 a6 96 e9 a1 b5 22 2c 22 69 74 65 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 6e 61 6d 65 22 3a 22 e6 96 b0 e9 97 bb e5 88 97 e8 a1 a8 22 7d 5d 7d 2c 7b 22 40 74 79 70 65 22 3a 22 57 65 62 53 69 74 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 Data Ascii: d":"https://www.telegramkv.com/blog#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"","item":"https://www.telegramkv.com/"},{"@type":"ListItem","position":2,"name":""}]},{"@type":"WebSite","@id":"https://www.teleg
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 2c 72 3d 28 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2c 65 2e 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 29 3b 72 65 74 75 72 6e 20 74 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 5b 74 5d 7d 29 7d 66 75 6e Data Ascii: rray(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[t]})}fun
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e Data Ascii: ar n=function(){try{var e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if("undefin
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: 2e 65 6d 6f 6a 69 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 20 30 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 30 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 70 61 64 64 69 6e Data Ascii: .emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 0.07em !important;vertical-align: -0.1em !important;background: none !important;paddin
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 23 39 62 35 31 65 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 36 2c 31 34 37 2c 32 32 37 2c 31 29 20 30 25 2c 72 67 62 28 31 35 35 2c 38 31 2c 32 32 34 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 31 32 32 2c Data Ascii: --preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,rgb(122,
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 30 32 2c 32 34 38 2c 31 32 38 29 20 30 25 2c 72 67 62 28 31 31 33 2c 32 30 36 2c 31 32 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 2c 33 2c 31 32 39 29 20 30 25 2c 72 67 62 28 34 30 2c 31 31 36 2c 32 35 32 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 3a 20 31 33 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 6d 3a 20 32 30 70 78 3b Data Ascii: t--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--preset--font-size--medium: 20px;
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 Data Ascii: t-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--white) !
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f Data Ascii: -color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--preset--colo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49836	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:49 UTC	617	OUT	GET /wp-content/plugins/easy-table-of-contents/assets/css/screen.min.css?ver=2.0.58 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.telegramkv.com/blog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:49 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:49 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sat, 25 Nov 2023 16:16:16 GMT vary: Accept-Encoding etag: W/"65621dd0-162c" expires: Fri, 05 Jul 2024 10:39:49 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KbNExv3bn4448HH76FCdJth2mREiegYe%2Fm9zb2L4tAOyBZfuyNCzk89I%2FVUA43ws2BvtMAkJlq3vEUWyL40fLKrTpVP1YCLia%2B5T%2BEgLyxXrm%2BeTY7g2sd5p4967oQ1tSCiq9AA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d0da9f343c3-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:49 UTC	590	IN	Data Raw: 31 36 32 63 0d 0a 23 65 7a 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 39 66 39 66 39 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 61 61 61 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 30 35 29 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 65 6d 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 61 75 74 6f 7d 64 69 76 2e 65 7a 2d 74 6f 63 2d 77 69 64 67 65 Data Ascii: 162c#ez-toc-container{background:#f9f9f9;border:1px solid #aaa;border-radius:4px;-webkit-box-shadow:0 1px 1px rgba(0,0,0,.05);box-shadow:0 1px 1px rgba(0,0,0,.05);display:table;margin-bottom:1em;padding:10px;position:relative;width:auto}div.ez-toc-widge
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: 6e 67 3a 30 7d 64 69 76 2e 65 7a 2d 74 6f 63 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 75 6c 2e 65 7a 2d 74 6f 63 2d 6c 69 73 74 7b 70 61 64 64 69 6e 67 3a 31 30 70 78 7d 23 65 7a 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 75 6c 20 75 6c 2c 2e 65 7a 2d 74 6f 63 20 64 69 76 2e 65 7a 2d 74 6f 63 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 2e 35 65 6d 7d 23 65 7a 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 69 2c 23 65 7a 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 75 6c 7b 70 61 64 64 69 6e 67 3a 30 7d 23 65 7a 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 69 2c 23 65 7a 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 75 6c 2c 23 65 7a 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: ng:0}div.ez-toc-widget-container ul.ez-toc-list{padding:10px}#ez-toc-container ul ul,.ez-toc div.ez-toc-widget-container ul ul{margin-left:1.5em}#ez-toc-container li,#ez-toc-container ul{padding:0}#ez-toc-container li,#ez-toc-container ul,#ez-toc-containe
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: 7a 2d 74 6f 63 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 75 6c 2e 65 7a 2d 74 6f 63 2d 6c 69 73 74 20 6c 69 3a 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 20 27 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 30 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 30 70 78 3b 7a 2d 69 6e 64 65 78 3a 2d 31 7d 2e 65 7a 2d 74 6f 63 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 75 6c 2e 65 7a 2d 74 6f 63 2d 6c 69 73 74 20 6c 69 2e 61 63 74 69 76 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 64 65 64 65 64 7d 2e 65 7a 2d 74 6f 63 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 69 2e 61 63 74 69 76 65 3e 61 7b 66 6f 6e 74 2d 77 65 69 67 Data Ascii: z-toc-widget-container ul.ez-toc-list li::before{content:' ';position:absolute;left:0;right:0;height:30px;line-height:30px;z-index:-1}.ez-toc-widget-container ul.ez-toc-list li.active{background-color:#ededed}.ez-toc-widget-container li.active>a{font-weig
2024-07-04 22:39:49 UTC	1369	IN	Data Raw: 65 30 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 23 66 66 66 20 30 2c 23 65 30 65 30 65 30 20 31 30 30 25 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 63 63 63 7d 2e 65 7a 2d 74 6f 63 2d 62 74 6e 2d 64 65 66 61 75 6c 74 2e 61 63 74 69 76 65 2c 2e 65 7a 2d 74 6f 63 2d 62 74 6e 2d 64 65 66 61 75 6c 74 3a 61 63 74 69 76 65 2c 2e 65 7a 2d 74 6f 63 2d 62 74 6e 2d 64 65 66 61 75 6c 74 3a 66 6f 63 75 73 2c 2e 65 7a 2d 74 6f 63 2d 62 74 6e 2d 64 65 66 61 75 6c 74 3a 68 6f 76 65 72 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 62 Data Ascii: e0 100%);background-image:linear-gradient(to bottom,#fff 0,#e0e0e0 100%);background-repeat:repeat-x;border-color:#ccc}.ez-toc-btn-default.active,.ez-toc-btn-default:active,.ez-toc-btn-default:focus,.ez-toc-btn-default:hover{color:#333;background-color:#eb
2024-07-04 22:39:49 UTC	987	IN	Data Raw: 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 63 68 65 63 6b 65 64 2b 6e 61 76 2c 23 65 7a 2d 74 6f 63 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 20 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 63 68 65 63 6b 65 64 2b 6e 61 76 7b 6f 70 61 63 69 74 79 3a 30 3b 6d 61 78 2d 68 65 69 67 68 74 3a 30 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 65 7a 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 6c 61 62 65 6c 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 69 6e 69 74 69 61 6c 7d 23 65 7a 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 65 7a 2d 74 6f 63 2d 74 6f 67 67 6c 65 20 6c 61 62 65 6c 2c 2e 65 7a 2d 74 6f 63 2d 63 73 73 Data Ascii: ype=checkbox]:checked+nav,#ez-toc-widget-container input[type=checkbox]:checked+nav{opacity:0;max-height:0;border:none;display:none}#ez-toc-container label{position:relative;cursor:pointer;display:initial}#ez-toc-container .ez-toc-toggle label,.ez-toc-css
2024-07-04 22:39:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49838	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:50 UTC	624	OUT	GET /wp-content/themes/tgtheme/img/zixun.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/blog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:50 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:50 GMT Content-Type: image/png Content-Length: 5185 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-1441" expires: Fri, 02 Aug 2024 22:39:45 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 86405 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pVG5%2FYc1rG6o0ahCci%2BCz3M71IB4NHSRmKuz6f5wu26RzsY9ASdq%2BNC43zqJZEPItXPtSYzGnv8aSg8ddgMaNWvPbjQR1p4B3kiqO8ATDcHzXcaPT14ny1zk%2B78KCL2zmSvtb4M%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d11eb1c4261-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:50 UTC	594	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dc 00 00 00 3e 08 06 00 00 00 40 d6 75 08 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR>@utEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: 31 45 45 38 32 30 42 45 41 35 39 44 41 35 41 31 33 44 37 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 33 42 32 34 45 37 36 34 46 43 38 31 31 45 45 38 32 30 42 45 41 35 39 44 41 35 41 31 33 44 37 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 33 42 32 34 45 37 33 34 46 43 38 31 31 45 45 38 32 30 42 45 41 35 39 44 41 35 41 31 33 44 37 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 33 42 32 34 45 37 34 34 46 43 38 31 31 45 45 38 32 30 42 45 41 35 39 44 41 35 41 31 33 44 37 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f Data Ascii: 1EE820BEA59DA5A13D7" xmpMM:DocumentID="xmp.did:03B24E764FC811EE820BEA59DA5A13D7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:03B24E734FC811EE820BEA59DA5A13D7" stRef:documentID="xmp.did:03B24E744FC811EE820BEA59DA5A13D7"/> </rdf:Description> </rdf:RDF> </
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: fb de 60 39 b6 e3 fa 52 ea 53 77 fe a7 fa e6 4c d6 79 fd 2f 59 20 e5 b1 d6 a1 c3 6b 9f 1e b8 eb a1 57 14 eb 42 4b af bd 9c 9d 7f ea c1 e6 14 66 df 1d d9 ed c7 9e 6d 79 7e fe af bf bf 79 e9 99 63 cd cf 5e ff e9 73 db 1f fb 5d cb b3 97 4f 3e d5 b2 f7 58 a6 1c 96 69 83 48 66 e8 9d fe 87 4e dc df 77 cb 17 0f ea 3c 9b 3c 78 ef e0 d6 07 7e d4 22 cb 07 d3 cf 0d 96 5f 68 fe 18 eb ea ab f8 c7 ee b9 17 7f 9c 4b 6c fd 58 89 ea ed f1 28 c2 85 40 d4 c8 ee b3 cd 17 2b f5 2b 64 40 46 7f f5 93 85 51 c6 58 50 a5 19 70 ab 82 2a af bd bc 9f ff 2c b1 f7 40 b1 1d 73 13 60 a4 ae bd 69 b6 ff b6 bb cf d8 e0 e7 2e 7d 98 26 3f eb ef fe 77 57 75 ea d7 b7 53 bd 9d 42 47 dc 42 b7 ed 7b 74 b5 6b 1d 52 f9 cd c2 ae fa 3f fe 78 33 ff 79 fa c6 cf 85 0a b8 ea a5 77 33 17 7f fa c0 7d 04 14 Data Ascii: `9RSwLy/Y kWBKfmy~yc^s]O>XiHfNw<<x~"_hKlX(@++d@FQXPp*,@s`i.}&?wWuSBGB{tkR?x3yw3}
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: bd 08 48 69 a4 0a ba 6f 36 48 c6 3f e6 45 f4 00 bc fc ce ad b5 76 9a f2 55 05 cf f4 2a 74 11 a7 fa 73 7d be 9f 12 bc 07 45 37 02 b6 9e a0 eb 15 a6 94 78 23 ce f1 91 84 4d 89 04 e9 52 a5 8d 91 8d cc b7 59 f0 6b 92 a6 2d e2 35 2c 72 35 4a 5a 60 80 5e a4 be 24 cb f9 a9 82 b7 4a 72 f6 c6 bc 24 8d e1 f9 50 79 e3 74 9f 52 a8 7d 94 26 73 07 48 fb 8d 1d 03 6f 3b 1a 54 16 64 28 aa e8 dc ab 6a 0a 12 9d 49 74 da a3 13 75 a9 ee 92 92 ba 9c d4 68 4d fb bb f3 e9 b7 36 d2 77 9a 32 a0 a4 ae b7 c5 42 13 21 2a f4 0b 9f d0 cd 86 b4 86 27 0c a4 48 0e 3c fd 02 1e 65 52 8c 03 f2 37 c0 80 df 2d d3 a8 98 10 d4 77 97 25 53 67 98 ac 80 a7 79 16 e0 c0 fc 9e 42 16 19 f9 6d 46 38 55 6a 59 51 35 10 7c e8 c4 56 a4 ae 0a f8 24 35 00 a7 9a bf 87 02 1a 09 f8 bb 1a f5 5b 9f 60 9e 45 0c 34 Data Ascii: Hio6H?EvUts}E7x#MRYk-5,r5JZ`^$Jr$PytR}&sHo;Td(jItuhM6w2B!'H<eR7-w%SgyBmF8UjYQ5\|V$5[`E4
2024-07-04 22:39:50 UTC	484	IN	Data Raw: bb 94 3a 35 92 03 bc 97 10 e8 c8 35 5c 93 0d 27 52 07 f4 12 13 38 05 c7 c0 39 f3 11 d2 a6 1e 1a 17 95 b9 4e 26 bf 8f b1 38 82 af e7 b8 3e 0d 48 75 79 d9 e4 da 90 4a 19 3c af 38 f7 7f c5 99 44 37 76 ed 90 c7 ac 09 1c 53 cc 20 ca 89 ae b7 d9 4e 29 a5 fa 63 ba 78 d0 35 3b c8 16 fc ac c9 56 e7 95 97 23 66 70 24 24 6a d9 43 32 5b eb 0b 60 d0 d5 05 76 d5 f8 b3 af 94 52 90 07 cb de b5 96 7a d0 94 43 9a 27 6b 46 37 9d 74 52 a7 fd 6d 02 f4 76 a5 94 7e d3 b6 8e a7 94 1a 75 33 7f 63 5f 56 b3 ea 1c f5 90 ef bf 49 6d 45 f1 15 21 ed 7d 21 a9 a7 df 1a 4e 08 38 81 f0 b6 15 53 97 d4 55 71 0d 67 91 10 35 4b 20 f9 e9 67 75 c9 1a 12 1a a0 73 51 87 6b 38 cd 3d ec 74 d3 c4 db 6f 47 03 70 8e 0f e0 22 1f f2 c6 98 86 8b 94 48 9d 26 db 97 a4 c9 06 31 45 2b 42 66 d7 80 ac de 39 24 Data Ascii: :55\'R89N&8>HuyJ<8D7vS N)cx5;V#fp$$jC2[`vRzC'kF7tRmv~u3c_VImE!}!N8SUqg5K gusQk8=toGp"H&1E+Bf9$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49839	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:50 UTC	671	OUT	GET /wp-content/uploads/2024/05/3.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/blog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=73143-73143 If-Range: "66547d39-1b77e"
2024-07-04 22:39:50 UTC	805	IN	HTTP/1.1 206 Partial Content Date: Thu, 04 Jul 2024 22:39:50 GMT Content-Type: image/jpeg Content-Length: 1 Connection: close last-modified: Mon, 27 May 2024 12:31:53 GMT etag: "66547d39-1b77e" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609592 Content-Range: bytes 73143-73143/112510 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RYtjt93Zwt6WLv7it1174tDl71geQEweyhDrias6rVKkVOAnxBR2l0yGAB%2FSp4o05lxbtJ0Jdwor7ulIFJhQQ%2F8IMb12iRmMXVy3x2PSsuZCXDn%2F8id806VmiOTWS1xVotyJiu0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d122f230f41-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:50 UTC	1	IN	Data Raw: f7 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49840	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:50 UTC	672	OUT	GET /wp-content/uploads/2024/05/3.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/blog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=73143-112509 If-Range: "66547d39-1b77e"
2024-07-04 22:39:50 UTC	812	IN	HTTP/1.1 206 Partial Content Date: Thu, 04 Jul 2024 22:39:50 GMT Content-Type: image/jpeg Content-Length: 39367 Connection: close last-modified: Mon, 27 May 2024 12:31:53 GMT etag: "66547d39-1b77e" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609592 Content-Range: bytes 73143-112509/112510 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zw9zpz61qXhtdpfTiXcT4jwOhU3mTjzoo7%2FkLhTPgQmyqHK60nCQ2KaN%2Bdiz6cmQQ%2BA4xtPWUKx96txd7pVv6xCXG9bvHumRT1jX6Kh5OHoVHxs5VJRseKYgxgC%2FPEepCdrwMiM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d14ccdf7d1c-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:50 UTC	557	IN	Data Raw: f7 87 9e 3f 87 c4 d7 9d b4 65 2d df fc 64 3c 0f 09 83 0e a6 86 96 9a 31 1c 51 30 31 8c 6f 77 17 13 da 6e 81 28 de e2 49 27 52 52 a0 84 b8 d8 70 e6 7b 17 92 9c dc e4 e5 26 db 6f 2d bf 16 6c 24 2a 96 02 f3 dc 39 ad 2b d2 e7 7a 83 0d a4 fa 5f 4b 25 ab eb 1a 43 cb 0f 85 4f 05 db 9d c7 b1 ce 06 c1 67 1b f0 de 6d 3e 01 44 e7 92 d7 d6 48 0b 69 69 af e1 48 fd 3c 27 58 1b 30 66 e3 dc bc f7 da 4c 6a 7a da 89 aa aa 64 32 cf 3b 8b de e2 74 bf 00 d6 8e 4d 16 16 f2 2f a0 f4 2f 4a bb fa ca ea b2 fc d4 1f 09 fe 9b f2 f9 2f 13 52 ea be c5 85 dd 95 df b7 ce b7 d7 42 5a 6a 27 e3 0f 75 41 fd d7 1c 25 d4 2d 77 8a 5d e1 09 1c 3b 5e 1b db c9 68 c8 e9 24 73 1f 20 8d c6 28 cb 5b 24 80 12 c6 39 fe 28 71 ed 2a 5e cd 63 53 51 54 d3 d5 d3 bb 25 45 33 c4 8c 3a 58 91 70 5a 74 3e 09 1a Data Ascii: ?e-d<1Q01own(I'RRp{&o-l$9+z_K%COgm>DHiiH<'X0fLjzd2;tM//J/RBZj'uA%-w];^h$s ([$9(q^cSQT%E3:XpZt>
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: e3 2f 9a 3c 3e 06 ce f8 1a d7 c8 1f 34 50 80 1c 48 1a ca e1 7e 05 6f 0e 9f 7f c3 30 af c4 cb f0 b5 17 40 31 fb b7 14 fc 4c 3f 19 eb 07 fb 49 77 fe ce fe 50 f7 7d 6e 1f 87 bb f4 b1 db 24 fa 98 fa dd 9e 07 3d ed 76 ce d4 61 d5 53 51 d5 b0 47 53 06 5e b1 8d 7b 24 03 3b 1a f1 e1 b0 90 74 70 e6 b2 6d de ee 93 17 c6 21 7c f4 14 cc 9a 16 38 c6 e7 3a a2 18 88 78 be 96 95 e3 b1 4d e9 35 26 6d a2 c5 8f 1f 6c 88 7a 21 63 6d e4 d1 74 af 41 38 ff 00 79 66 3f 75 55 2e bf 82 e7 05 6d 6f a8 ee ac f4 6a 57 90 db eb 27 b3 39 5e ef bc b2 f8 c8 a7 46 32 a8 d3 ec 8e 2f c7 f0 a9 69 2a 27 a6 9d a1 93 d3 bc c5 2b 43 9a e0 1e 38 80 e6 12 1d e6 2b 3e d8 3d c9 63 78 94 10 56 52 52 47 25 2c a4 39 b2 3a aa 9e 32 43 5c 41 39 5f 20 23 50 a9 77 dd f6 73 1a f7 e4 df 3a ed 6e 89 3f 6b d8 Data Ascii: /<>4PH~o0@1L?IwP}n$=vaSQGS^{$;tpm!\|8:xM5&mlz!cmtA8yf?uU.mojW'9^F2/i*'+C8+>=cxVRRG%,9:2C\A9_ #Pws:n?k
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: fe ea 2a 86 db 34 67 86 87 29 1e b5 c0 b8 8d 1c 90 4b 24 32 b0 c7 34 2f 74 72 30 f1 6b da 75 1f b7 22 bd f7 4b ea f4 7a 8f 4d 95 ad ce 1c d4 71 25 e2 d7 84 97 97 f3 39 f7 14 9d 0a 9f 23 d1 6d a3 c0 61 c5 7e 97 62 34 ae 6b dc c7 c1 30 7b 78 4b 0e 76 38 b4 ea 35 00 15 a8 fa 7f c9 fb 8b 07 68 fe 57 29 3d f6 a7 77 cc a9 3a 10 6f 0a 5e b2 4c 1a 50 e9 21 b1 9a 9a 40 1c 7a 92 73 99 23 79 0d 39 5a 4e a0 93 da ac 7e 88 03 fd a7 07 6f fc 69 8f fe d1 1f a5 7c f7 48 d1 25 a6 f5 1c 2d df 38 9e 53 f3 58 78 37 2a dc 3a 94 16 7c 11 cb bb 1a db d7 50 0e da 9a 71 e9 91 ab d0 1d f6 bf 2d 15 30 fe 7b 47 a1 81 70 2e ef 99 9b 12 c3 07 6d 65 37 ca b5 77 9f 48 37 5a 9a 8c 7f c5 77 aa 3b ae af a5 c9 fe 7a 92 ff 00 91 fe 28 9d 15 66 a2 f9 98 16 c2 cb 7a da 5f c6 0f 80 aa 0e 9f fe Data Ascii: 4g)K$24/tr0ku"KzMq%9#ma~b4k0{xKv85hW)=w:o^LP!@zs#y9ZN~oi\|H%-8SXx7:\|Pq-0{Gp.me7wH7Zw;z(fz_
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: 8a da cc a3 2a c9 2d a9 a5 8f 89 bd 6d 69 ea 9f 06 9b 75 09 04 f1 51 df 01 59 b4 98 76 a7 4f 52 87 26 16 eb 9d 17 93 3a 46 28 1a 42 2c ee 57 b3 61 86 e7 45 1a 5c 35 14 98 33 9c 5a 87 38 b8 e2 b0 0d a7 c1 49 b9 03 ca 2c b6 8b 55 6e 2b 87 07 02 40 f2 ae 89 cb 39 e7 1c c2 0d c9 02 c7 9a aa a6 a1 76 a3 5b 2d cf 8b 60 41 d7 d2 de 65 8b 57 e0 45 97 b3 54 83 07 92 8b b7 92 ec 2e 87 db 65 43 2e 17 f4 96 59 1b 0d 53 3a d6 86 12 5a 6a 22 98 b8 92 c7 7d d8 b9 16 ba e5 4a d8 0b 49 d1 57 c7 54 e8 de d7 b1 c5 8f 61 0e 6b 9a 6c e6 b8 70 20 f2 2a 53 6b 95 dc 1b 97 7f 7b 80 aa c2 dd 2d 55 10 75 5e 1c 4b 9e f1 6b cf 4d 7d 4e 71 7b bd b7 71 d6 d7 5a 36 37 96 90 e0 4b 5c 08 2d 20 d8 82 35 b8 37 d0 f9 17 5d 74 6a df c4 b5 b2 c5 84 e2 51 ba a6 59 7d ae 0a a6 b3 36 66 d9 c4 b6 Data Ascii: -miuQYvOR&:F(B,WaE\53Z8I,Un+@9v[-`AeWET.eC.YS:Zj"}JIWTaklp Sk{-Uu^KkM}Nq{qZ67K\- 57]tjQY}6f
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: db 6d 2e 3b 9d 05 ae c2 9d bc 25 28 37 2c 24 41 e9 29 b2 34 14 3b 37 56 28 e8 e2 a7 68 30 d8 c6 c1 9b eb 8d d7 31 d4 f9 d7 0d bb 87 ed de bb e7 a5 3f da c5 4f fc bf ca 35 70 33 b8 7e dd eb ea de 8d ea 4e a6 9f 59 cd b6 f7 be 5b cf 81 d9 af 25 2d af 18 ca 47 a3 38 68 be cd d2 eb ff 00 64 83 f4 2d 69 4f 49 a8 00 12 4e 80 00 6e 7c 83 9a db bb 0b 87 fb 23 03 c3 e1 cd 90 3e 96 00 5d 6b d8 01 7e 0a 16 d0 63 78 2e cf c5 d6 d4 cf 1c 6f 1a 0c c7 ac 9e 43 cb 23 05 c8 26 f6 5f 14 b8 a1 3a d7 73 85 34 e4 dc e5 84 96 5b e5 9d 48 b4 a3 cf 91 59 b2 db 05 24 b6 7d 47 b4 c5 c7 25 86 77 0f 31 d3 92 a1 e9 29 bc 9c 2a 8b 0e a9 c3 1d 27 b2 2a a7 84 c2 ca 68 8e 73 1d b2 d9 d2 b8 5c 32 c4 df 52 16 99 df 0f 49 ba ca dc f0 61 8d 34 14 a6 e0 cc 48 35 32 0d 05 c6 66 81 18 d3 85 89 Data Ascii: m.;%(7,$A)4;7V(h01?O5p3~NY[%-G8hd-iOINn\|#>]k~cx.oC#&_:s4[HY$}G%w1)'hs\2RIa4H52f
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: 06 49 06 42 c8 1b a6 ad 6d b5 d7 8a da fb 6b f6 8d ff 00 23 07 ad e0 af 8a 5b ea 35 2f f5 68 5c 55 fa 52 ab 17 f2 5b 96 11 d3 95 3d 94 b0 bc 8e 17 6a ef fe 89 d4 ed 93 66 68 23 7b 43 99 23 66 6b da 75 0e 69 91 e0 83 e6 5e 7f b4 f0 5e 82 74 45 3f ec de 1d e4 97 e5 1e be b1 e9 3d b5 61 4d af d7 5f e5 39 f6 5f 49 9c b3 d2 5f 75 4f c1 2b 5d 24 4d 2e c3 6a de e7 c0 fb 69 0b 8e 52 e8 1d a9 3e 31 d0 ad 71 b2 5b 45 53 87 54 c5 57 49 29 8a 78 88 20 8e 0e 1a 87 31 e0 f1 69 04 8b 2f 4a 36 db 66 69 71 6a 39 a8 ea a3 0f 8e 51 6d 7c 66 38 6a d7 b4 f2 22 cb cf 4d ee 6e f2 ab 03 ac 7d 34 ed 2e 89 c4 ba 9a a2 d6 6c f1 69 63 cc 07 0b 80 45 d3 a3 3a 96 8e a9 6f ec 37 98 73 4b 1c fe 9a ed f7 f9 8b 8a 2e 9c b7 47 b1 dc 7b 8c de 95 2e 3f 48 1c 08 8e b6 20 1b 55 4c 4f 84 c3 a8 Data Ascii: IBmk#[5/h\UR[=jfh#{C#fkui^^tE?=aM_9_I_uO+]$M.jiR>1q[ESTWI)x 1i/J6fiqj9Qm\|f8j"Mn}4.licE:o7sK.G{.?H ULO
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: 00 b5 f1 ef ba bf 95 5d ce b0 fe cd db 7f e5 ff 00 95 94 b7 fa e6 6e 67 73 45 3c 76 82 a2 dc db 29 fe c7 f9 20 ee 69 55 47 f7 3c df 81 27 c4 2b e3 30 5e fa 7f 14 74 33 85 83 ca c8 78 37 cd f0 05 e8 47 47 8a 57 4b b2 b8 6c 4d 36 74 94 b9 5a 4f 00 73 12 bc f6 8b 80 f2 0f 81 ab a4 46 f8 31 3c 0b 06 d9 f8 69 20 81 d0 55 52 39 ed 9a 50 f7 39 af 63 c0 20 06 9b 1f 1b d4 be f1 d7 5a 6d 5b fb 6b 7b 7a 38 dd 29 70 9b c7 e8 9c bb 6a 8a 32 6d 9b 23 a7 75 4b 06 0f 4b 19 23 ac 75 54 65 a2 fa 90 c1 e1 58 73 e2 17 2e 6e 30 1f a7 b8 28 b5 ef 59 10 23 91 16 75 c1 ee 50 f7 85 b7 b8 86 31 2b 25 af a8 33 18 ef d5 46 1a d6 47 18 36 be 56 b7 b6 c3 53 aa cc fa 26 ec f3 aa f1 ea 49 32 de 1a 10 fa 99 9f 6d 19 66 38 47 73 da 5d a2 cf 67 a5 cb 44 e9 ea b4 ab b5 bb 6c db c7 9c 96 12 Data Ascii: ]ngsE<v) iUG<'+0^t3x7GGWKlM6tZOsF1<i UR9P9c Zm[k{z8)pj2m#uKK#uTeXs.n0(Y#uP1+%3FG6VS&I2mf8Gs]gDl
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: e2 e0 5a 05 27 12 08 1e 31 ed f2 2d 3f bd ec 60 56 62 f8 a5 4b 7c 49 6a 1d 92 ff 00 72 c6 b5 80 7a 5a 57 68 74 91 da aa 5c 0f 0a 9f a8 8e 38 6b ab 5a 69 e9 84 6d 0c 79 0e 2d 0f 76 83 46 86 b8 ae 0c a5 a6 7c d2 32 36 dd f2 cc e0 c6 f3 2e 7b cf f9 fa d7 dd ba 4a b4 b5 1b aa fa bc e3 ea e3 28 a8 a4 f9 fa 2b 2d 9e 5a ba db 15 4c ee 3e 86 54 1d 56 ce 07 d8 fe e9 9a a2 6e 1c 7c 22 cd 3f 24 ae 25 c7 28 e5 eb ea bd a6 4f ae cf fe ed df 76 ee e5 d5 d5 7b f0 a3 d9 b6 61 78 3c 10 0a a1 48 c6 37 14 7b 1d 6e a9 ce 68 73 9b 15 9a 43 a4 cc f2 79 f0 ed 5d 0b b2 18 e5 16 23 4d 15 5d 23 a3 9a 09 46 66 b8 01 71 c6 ed 70 e2 1d a1 d1 78 fa 7a d5 ee 8d 71 5a fa 54 73 0b 96 f6 b7 c2 c2 6f 0f ed ef 8f 23 63 d5 c6 a2 51 cf d1 2a f7 20 08 c1 70 a0 41 04 53 45 70 45 88 d0 1d 47 2e Data Ascii: Z'1-?`VbK\|IjrzZWht\8kZimy-vF\|26.{J(+-ZL>TVn\|"?$%(Ov{ax<H7{nhsCy]#M]#FfqpxzqZTso#cQ* pASEpEG.
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: 35 54 2e 82 a2 23 67 31 dc c7 27 34 fb a6 90 41 ba ee 9c 13 0d c2 76 27 0b 2f 91 c1 d3 bc 5e 47 80 4d 45 5c b7 b6 56 0d 6c 06 6f 25 92 36 8b 00 c1 b6 d3 0e 6c d0 bd ad a9 63 6d 1c a0 1f 64 52 c8 4f 89 2b 6e 2e d3 97 c9 65 cb 8f a4 f8 fb 7b 8e df fc 3e 71 9f d2 5e 72 f9 7c 0b fb 17 bb f1 38 b7 77 3b 73 5b 83 d4 b6 a6 8e 5c 8e b8 eb 63 3f 5a 9d ba f8 32 37 5d 3c 23 aa ed 0d 99 de dd 16 3b 83 62 39 0f 53 5a ca 2a 8e be 91 c7 c2 61 ea 5f 72 dd 3c 26 78 25 71 76 f1 76 26 b3 07 aa 7d 2d 64 45 ae 6d cc 72 8d 63 99 80 0f 6c 8c 8e 5a f0 e2 17 41 f4 79 dd 69 a5 c2 31 3c 5e a5 85 b5 15 34 55 4d a5 8d dc 62 84 47 26 67 e8 7c 67 5f d0 16 f7 59 db e9 75 ed e9 df 45 a5 39 4a 3b 1c 7f 4f 2f b3 f8 7f 89 5b 79 4e 2d c7 c0 e5 56 1b 06 fe dd 8b 20 c2 b6 d3 11 a6 8d b0 d3 d7 Data Ascii: 5T.#g1'4Av'/^GME\Vlo%6lcmdRO+n.e{>q^r\|8w;s[\c?Z27]<#;b9SZ*a_r<&x%qvv&}-dEmrclZAyi1<^4UMbG&g\|g_YuE9J;O/[yN-V
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: 67 b6 85 84 86 37 8e 93 bc 3b c3 3c 34 e0 b7 46 03 83 e0 f8 04 22 2a 48 19 1b c0 17 11 f8 53 48 47 02 f9 09 27 9f 33 cd 50 6d 16 d6 cf 53 e0 82 61 8b 93 1a 75 23 f9 c5 72 fa 87 d2 25 cd ea 74 ad 7f 37 07 e3 fa 4f f9 7d 85 e9 5a a8 f2 f9 35 d7 4d 4d dd c6 28 a9 31 0a 48 5a c1 42 0c 33 b6 36 80 d1 4e f7 45 95 d6 6f 26 9b dc f6 05 c9 58 7d 64 90 49 1c d0 bc c7 34 2e 12 47 20 e2 d7 b4 dd a7 5f 20 5e 90 ec e3 e1 c4 a8 26 a2 a8 1d 60 74 6e 86 46 bb 5c d1 bc 10 0f 9b f4 2e 06 de f6 c2 cf 82 e2 13 52 4a 0f 57 72 fa 69 6d e0 cb 09 3a 38 6b c4 17 00 57 a5 f4 75 ae c2 e6 de 5a 7d 67 99 2c b8 e7 9c c5 f7 5f 13 05 dd 2c 3d e8 ee 7d d6 ed 4d 3e d1 e1 30 cb 98 09 b2 86 54 30 6a e8 67 6d c1 b8 d2 c0 da fe 75 87 74 ca da 56 d0 e0 62 89 8f b4 d5 ae 8e 16 0b d9 c2 28 dc c7 Data Ascii: g7;<4F"*HSHG'3PmSau#r%t7O}Z5MM(1HZB36NEo&X}dI4.G _ ^&`tnF\.RJWrim:8kWuZ}g,_,=}M>0T0jgmutVb(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49842	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:50 UTC	608	OUT	GET /wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min.js?ver=2.0.58 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.telegramkv.com/blog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:50 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:50 GMT Content-Type: application/javascript Content-Length: 729 Connection: close last-modified: Sat, 25 Nov 2023 16:16:16 GMT etag: "65621dd0-2d9" expires: Fri, 05 Jul 2024 10:39:50 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=zaDYxhm1O1iTIs83ZVmQ3%2BqVAE4iW6bvVDh2W4XbDHXInscZQhyFkvR%2FHWwy4zfq2NMXL1fPQHu0X8J4%2FeduXLUS4xQpAe2gidTGGmWxcP9bzCp17U0VeRUNlov7mqMZEd06h20%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d14cb684307-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:50 UTC	591	IN	Data Raw: 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 65 7a 2d 74 6f 63 2d 6c 69 6e 6b 22 29 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 74 3d 74 2e 72 65 70 6c 61 63 65 57 69 74 68 28 74 2e 63 6c 6f 6e 65 4e 6f 64 65 28 21 30 29 29 7d 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 65 7a 2d 74 6f 63 2d 73 65 63 74 69 6f 6e 22 29 2e 66 6f 72 45 61 63 68 28 74 3d 3e 7b 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 65 7a 2d 74 6f 63 2d 64 61 74 61 2d 69 64 22 2c 22 23 22 2b 64 65 63 6f 64 65 55 52 49 28 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 29 7d 29 2c 6a 51 75 65 Data Ascii: jQuery(document).ready(function(){document.querySelectorAll(".ez-toc-link").forEach(t=>{t=t.replaceWith(t.cloneNode(!0))}),document.querySelectorAll(".ez-toc-section").forEach(t=>{t.setAttribute("ez-toc-data-id","#"+decodeURI(t.getAttribute("id")))}),jQue
2024-07-04 22:39:50 UTC	138	IN	Data Raw: 49 28 74 29 2b 27 22 5d 27 29 2e 6c 65 6e 67 74 68 3e 30 26 26 28 6f 3d 6a 51 75 65 72 79 28 27 5b 65 7a 2d 74 6f 63 2d 64 61 74 61 2d 69 64 3d 22 27 2b 64 65 63 6f 64 65 55 52 49 28 74 29 2b 27 22 5d 27 29 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2d 6f 29 2c 6a 51 75 65 72 79 28 22 68 74 6d 6c 2c 20 62 6f 64 79 22 29 2e 61 6e 69 6d 61 74 65 28 7b 73 63 72 6f 6c 6c 54 6f 70 3a 6f 7d 2c 35 30 30 29 7d 29 7d 29 3b Data Ascii: I(t)+'"]').length>0&&(o=jQuery('[ez-toc-data-id="'+decodeURI(t)+'"]').offset().top-o),jQuery("html, body").animate({scrollTop:o},500)})});

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49841	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:50 UTC	610	OUT	GET /wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min.js?ver=2.2.1 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.telegramkv.com/blog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:50 UTC	794	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sat, 25 Nov 2023 16:16:16 GMT vary: Accept-Encoding etag: W/"65621dd0-9ee" expires: Fri, 05 Jul 2024 10:39:50 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PIU0BqWxwYxR5%2BkovTrlQBAM%2FlhNjAFt%2FVZeyjS8bblHFZaIV3wX8wS0BfRt%2BfiFLJqx6y1Xb803iyfedkCzXpzKopiNUqPSktMgdkzcVtiySt6UVOKeb%2FPnh%2BHx9d2XsCnWdD8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d14cb800fab-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:50 UTC	575	IN	Data Raw: 39 65 65 0d 0a 2f 2a 21 0d 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 43 6f 6f 6b 69 65 20 76 32 2e 32 2e 31 0d 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6a 73 2d 63 6f 6f 6b 69 65 2f 6a 73 2d 63 6f 6f 6b 69 65 0d 0a 20 2a 0d 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 36 2c 20 32 30 31 35 20 4b 6c 61 75 73 20 48 61 72 74 6c 20 26 20 46 61 67 6e 65 72 20 42 72 61 63 6b 0d 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0d 0a 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 66 61 63 74 6f 72 79 29 7b 76 61 72 20 72 65 67 69 73 74 65 72 65 64 49 6e 4d 6f 64 75 6c 65 4c 6f 61 64 65 72 3b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 9ee/! JavaScript Cookie v2.2.1 * https://github.com/js-cookie/js-cookie * * Copyright 2006, 2015 Klaus Hartl & Fagner Brack * Released under the MIT license */!function(factory){var registeredInModuleLoader;if("function"==typeof define&
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: 29 7b 66 6f 72 28 76 61 72 20 69 3d 30 2c 72 65 73 75 6c 74 3d 7b 7d 3b 69 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 69 2b 2b 29 7b 76 61 72 20 61 74 74 72 69 62 75 74 65 73 3d 61 72 67 75 6d 65 6e 74 73 5b 69 5d 3b 66 6f 72 28 76 61 72 20 6b 65 79 20 69 6e 20 61 74 74 72 69 62 75 74 65 73 29 72 65 73 75 6c 74 5b 6b 65 79 5d 3d 61 74 74 72 69 62 75 74 65 73 5b 6b 65 79 5d 7d 72 65 74 75 72 6e 20 72 65 73 75 6c 74 7d 66 75 6e 63 74 69 6f 6e 20 64 65 63 6f 64 65 28 73 29 7b 72 65 74 75 72 6e 20 73 2e 72 65 70 6c 61 63 65 28 2f 28 25 5b 30 2d 39 41 2d 5a 5d 7b 32 7d 29 2b 2f 67 2c 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 29 7d 66 75 6e 63 74 69 6f 6e 20 69 6e 69 74 28 63 6f 6e 76 65 72 74 65 72 29 7b 66 75 6e 63 74 69 6f 6e 20 61 70 Data Ascii: ){for(var i=0,result={};i<arguments.length;i++){var attributes=arguments[i];for(var key in attributes)result[key]=attributes[key]}return result}function decode(s){return s.replace(/(%[0-9A-Z]{2})+/g,decodeURIComponent)}function init(converter){function ap
2024-07-04 22:39:50 UTC	605	IN	Data Raw: 2b 2b 29 7b 76 61 72 20 70 61 72 74 73 3d 63 6f 6f 6b 69 65 73 5b 69 5d 2e 73 70 6c 69 74 28 22 3d 22 29 2c 63 6f 6f 6b 69 65 3d 70 61 72 74 73 2e 73 6c 69 63 65 28 31 29 2e 6a 6f 69 6e 28 22 3d 22 29 3b 6a 73 6f 6e 7c 7c 27 22 27 21 3d 3d 63 6f 6f 6b 69 65 2e 63 68 61 72 41 74 28 30 29 7c 7c 28 63 6f 6f 6b 69 65 3d 63 6f 6f 6b 69 65 2e 73 6c 69 63 65 28 31 2c 2d 31 29 29 3b 74 72 79 7b 76 61 72 20 6e 61 6d 65 3d 64 65 63 6f 64 65 28 70 61 72 74 73 5b 30 5d 29 3b 69 66 28 63 6f 6f 6b 69 65 3d 28 63 6f 6e 76 65 72 74 65 72 2e 72 65 61 64 7c 7c 63 6f 6e 76 65 72 74 65 72 29 28 63 6f 6f 6b 69 65 2c 6e 61 6d 65 29 7c 7c 64 65 63 6f 64 65 28 63 6f 6f 6b 69 65 29 2c 6a 73 6f 6e 29 74 72 79 7b 63 6f 6f 6b 69 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 63 6f 6f 6b 69 Data Ascii: ++){var parts=cookies[i].split("="),cookie=parts.slice(1).join("=");json\|\|'"'!==cookie.charAt(0)\|\|(cookie=cookie.slice(1,-1));try{var name=decode(parts[0]);if(cookie=(converter.read\|\|converter)(cookie,name)\|\|decode(cookie),json)try{cookie=JSON.parse(cooki
2024-07-04 22:39:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49843	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:50 UTC	619	OUT	GET /wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min.js?ver=1.9.2 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.telegramkv.com/blog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:50 UTC	794	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sat, 25 Nov 2023 16:16:16 GMT vary: Accept-Encoding etag: W/"65621dd0-b5b" expires: Fri, 05 Jul 2024 10:39:50 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9pc2LJky8p4RcS03v8xcg%2F4XSUsinBdAz6klBeSyCCK%2FEGsS5Wqo7FfcltX0zDrQ4PD0N%2BFtNyBRe7m7cFoEBt7sKi8z%2BO9dUIOUuL8wQ9e1OBKnc1No%2F73jt6xdRKjtUq%2B2cw0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d1518944398-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:50 UTC	575	IN	Data Raw: 62 35 62 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 3b 61 3d 74 68 69 73 2e 6a 51 75 65 72 79 7c 7c 77 69 6e 64 6f 77 2e 6a 51 75 65 72 79 3b 62 3d 61 28 77 69 6e 64 6f 77 29 3b 61 2e 66 6e 2e 73 74 69 63 6b 5f 69 6e 5f 70 61 72 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 64 29 7b 76 61 72 20 70 2c 6d 2c 6f 2c 6e 2c 6a 2c 68 2c 6b 2c 66 2c 6c 2c 65 2c 63 2c 67 3b 69 66 28 64 3d 3d 6e 75 6c 6c 29 7b 64 3d 7b 7d 3b 7d 67 3d 64 2e 73 74 69 63 6b 79 5f 63 6c 61 73 73 2c 68 3d 64 2e 69 6e 6e 65 72 5f 73 63 72 6f 6c 6c 69 6e 67 2c 63 3d 64 2e 72 65 63 61 6c 63 5f 65 76 65 72 79 2c 65 3d 64 2e 70 61 72 65 6e 74 2c 6c 3d 64 2e 6f 66 66 73 65 74 5f 74 6f 70 2c 66 3d 64 2e 73 70 61 63 65 72 2c 6f 3d 64 2e 62 6f 74 74 6f 6d 69 6e 67 3b 0d 0a 69 66 28 Data Ascii: b5b(function(){var a,b;a=this.jQuery\|\|window.jQuery;b=a(window);a.fn.stick_in_parent=function(d){var p,m,o,n,j,h,k,f,l,e,c,g;if(d==null){d={};}g=d.sticky_class,h=d.inner_scrolling,c=d.recalc_every,e=d.parent,l=d.offset_top,f=d.spacer,o=d.bottoming;if(
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: 64 20 73 74 69 63 6b 20 70 61 72 65 6e 74 22 3b 0d 0a 7d 72 3d 66 61 6c 73 65 3b 44 3d 66 61 6c 73 65 3b 76 3d 66 21 3d 6e 75 6c 6c 3f 66 26 26 74 2e 63 6c 6f 73 65 73 74 28 66 29 3a 61 28 22 3c 64 69 76 20 2f 3e 22 29 3b 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 4a 2c 4c 2c 4b 3b 69 66 28 7a 29 7b 72 65 74 75 72 6e 3b 7d 49 3d 70 2e 68 65 69 67 68 74 28 29 3b 4a 3d 70 61 72 73 65 49 6e 74 28 77 2e 63 73 73 28 22 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 22 29 2c 31 30 29 3b 4c 3d 70 61 72 73 65 49 6e 74 28 77 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 74 6f 70 22 29 2c 31 30 29 3b 0d 0a 47 3d 70 61 72 73 65 49 6e 74 28 77 2e 63 73 73 28 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 22 29 2c 31 30 29 3b 71 3d 77 2e 6f 66 66 73 65 74 28 29 2e Data Ascii: d stick parent";}r=false;D=false;v=f!=null?f&&t.closest(f):a("<div />");u=function(){var J,L,K;if(z){return;}I=p.height();J=parseInt(w.css("border-top-width"),10);L=parseInt(w.css("padding-top"),10);G=parseInt(w.css("padding-bottom"),10);q=w.offset().
2024-07-04 22:39:50 UTC	970	IN	Data Raw: 64 74 68 28 29 2b 22 70 78 22 3a 74 2e 77 69 64 74 68 28 29 2b 22 70 78 22 3b 74 2e 63 73 73 28 4c 29 2e 61 64 64 43 6c 61 73 73 28 67 29 3b 69 66 28 66 3d 3d 6e 75 6c 6c 29 7b 74 2e 61 66 74 65 72 28 76 29 3b 69 66 28 79 3d 3d 3d 22 6c 65 66 74 22 7c 7c 79 3d 3d 3d 22 72 69 67 68 74 22 29 7b 76 2e 61 70 70 65 6e 64 28 74 29 3b 0d 0a 7d 7d 74 2e 74 72 69 67 67 65 72 28 22 73 74 69 63 6b 79 5f 6b 69 74 3a 73 74 69 63 6b 22 29 3b 7d 7d 69 66 28 72 26 26 6f 29 7b 69 66 28 4a 3d 3d 6e 75 6c 6c 29 7b 4a 3d 4b 2b 43 2b 73 3e 69 2b 71 3b 7d 69 66 28 21 44 26 26 4a 29 7b 44 3d 74 72 75 65 3b 69 66 28 77 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 3d 3d 3d 22 73 74 61 74 69 63 22 29 7b 77 2e 63 73 73 28 7b 70 6f 73 69 74 69 6f 6e 3a 22 72 65 6c 61 74 69 76 65 Data Ascii: dth()+"px":t.width()+"px";t.css(L).addClass(g);if(f==null){t.after(v);if(y==="left"\|\|y==="right"){v.append(t);}}t.trigger("sticky_kit:stick");}}if(r&&o){if(J==null){J=K+C+s>i+q;}if(!D&&J){D=true;if(w.css("position")==="static"){w.css({position:"relative
2024-07-04 22:39:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49844	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:50 UTC	611	OUT	GET /wp-content/plugins/easy-table-of-contents/assets/js/front.min.js?ver=2.0.58-1700928976 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.telegramkv.com/blog Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:50 UTC	792	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:50 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sat, 25 Nov 2023 16:16:16 GMT vary: Accept-Encoding etag: W/"65621dd0-dce" expires: Fri, 05 Jul 2024 10:39:50 GMT Cache-Control: max-age=43200 strict-transport-security: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=2tacfcVr3M4SWIaEVNj3aRm%2FF3bstofprqmA2p%2B7Z%2Bvki6XfvZM1aAhdkMSJHpSsZPz%2FzBWL6Og6rYaTwqUWXYWhjf2N5eZls01QXT4ToHs%2FFTKqAfqjW2RmZid7tAsazPRPAXQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d168e3241c6-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:50 UTC	577	IN	Data Raw: 64 63 65 0d 0a 6a 51 75 65 72 79 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 7a 54 4f 43 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 29 7b 69 66 28 30 21 3d 3d 65 28 22 2e 65 7a 2d 74 6f 63 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 2e 65 7a 2d 74 6f 63 2d 61 66 66 69 78 22 29 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 74 3d 33 30 3b 76 6f 69 64 20 30 21 3d 3d 65 7a 54 4f 43 2e 73 63 72 6f 6c 6c 5f 6f 66 66 73 65 74 26 26 28 74 3d 70 61 72 73 65 49 6e 74 28 65 7a 54 4f 43 2e 73 63 72 6f 6c 6c 5f 6f 66 66 73 65 74 29 29 2c 65 28 65 7a 54 4f 43 2e 61 66 66 69 78 53 65 6c 65 63 74 6f 72 29 2e 73 74 69 63 6b 5f 69 6e 5f 70 61 72 65 6e 74 28 7b 69 6e 6e 65 72 5f 73 63 72 6f 6c 6c 69 6e 67 3a Data Ascii: dcejQuery((function(e){if("undefined"!=typeof ezTOC){function t(){if(0!==e(".ez-toc-widget-container.ez-toc-affix").length){var t=30;void 0!==ezTOC.scroll_offset&&(t=parseInt(ezTOC.scroll_offset)),e(ezTOC.affixSelector).stick_in_parent({inner_scrolling:
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: 79 5f 64 65 66 61 75 6c 74 3b 65 2e 65 61 63 68 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 69 29 7b 76 61 72 20 6e 3d 65 28 74 68 69 73 29 3b 65 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 22 65 7a 2d 74 6f 63 2d 6c 6f 61 64 65 64 22 29 3b 76 61 72 20 63 3d 65 28 6e 29 2e 70 61 72 65 6e 74 73 28 22 23 65 7a 2d 74 6f 63 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 65 7a 2d 74 6f 63 2d 77 69 64 67 65 74 2d 63 6f 6e 74 61 69 6e 65 72 2c 23 65 7a 2d 74 6f 63 2d 77 69 64 67 65 74 2d 73 74 69 63 6b 79 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2e 66 69 6e 64 28 22 75 6c 2e 65 7a 2d 74 6f 63 2d 6c 69 73 74 2c 75 6c 2e 65 7a 2d 74 6f 63 2d 77 69 64 67 65 74 2d 73 74 69 63 6b 79 2d 6c 69 73 74 22 29 3b 65 28 63 29 2e 68 61 73 43 6c 61 73 73 28 22 65 7a 74 6f 63 2d 74 6f 67 67 6c 65 Data Ascii: y_default;e.each(i,(function(t,i){var n=e(this);e(n).addClass("ez-toc-loaded");var c=e(n).parents("#ez-toc-container,#ez-toc-widget-container,#ez-toc-widget-sticky-container").find("ul.ez-toc-list,ul.ez-toc-widget-sticky-list");e(c).hasClass("eztoc-toggle
2024-07-04 22:39:50 UTC	1369	IN	Data Raw: 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 7d 29 29 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 35 3b 76 6f 69 64 20 30 21 3d 3d 65 7a 54 4f 43 2e 73 6d 6f 6f 74 68 5f 73 63 72 6f 6c 6c 26 26 31 3d 3d 3d 70 61 72 73 65 49 6e 74 28 65 7a 54 4f 43 2e 73 6d 6f 6f 74 68 5f 73 63 72 6f 6c 6c 29 26 26 28 74 3d 76 6f 69 64 20 30 21 3d 3d 65 7a 54 4f 43 2e 73 63 72 6f 6c 6c 5f 6f 66 66 73 65 74 3f 70 61 72 73 65 49 6e 74 28 65 7a 54 4f 43 2e 73 63 72 6f 6c 6c 5f 6f 66 66 73 65 74 29 3a 33 30 29 3b 76 61 72 20 69 3d 65 28 22 23 77 70 61 64 6d 69 6e 62 61 72 22 29 3b 69 2e 6c 65 6e 67 74 68 26 26 28 74 2b 3d 69 2e 68 65 69 67 68 74 28 29 29 3b 72 65 74 75 72 6e 20 74 7d 28 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 28 29 7b 76 61 72 20 74 3d 66 75 6e 63 74 69 Data Ascii: e,t){return e})),a=function(){var t=5;void 0!==ezTOC.smooth_scroll&&1===parseInt(ezTOC.smooth_scroll)&&(t=void 0!==ezTOC.scroll_offset?parseInt(ezTOC.scroll_offset):30);var i=e("#wpadminbar");i.length&&(t+=i.height());return t}();function l(){var t=functi
2024-07-04 22:39:50 UTC	226	IN	Data Raw: 2d 6c 69 6e 6b 73 2d 64 69 73 61 62 6c 65 72 22 29 2e 61 74 74 72 28 22 73 74 79 6c 65 22 2c 22 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 22 29 7d 29 29 2c 65 28 22 23 65 7a 2d 74 6f 63 2d 6d 6f 72 65 2d 6c 69 6e 6b 73 2d 64 69 73 61 62 6c 65 72 22 29 2e 63 6c 69 63 6b 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 65 28 22 2e 65 7a 2d 74 6f 63 2d 6d 6f 72 65 2d 6c 69 6e 6b 22 29 2e 68 69 64 65 28 29 2c 65 28 22 23 65 7a 2d 74 6f 63 2d 6d 6f 72 65 2d 6c 69 6e 6b 73 2d 65 6e 61 62 6c 65 72 22 29 2e 73 68 6f 77 28 29 2c 65 28 22 23 65 7a 2d 74 6f 63 2d 6d 6f 72 65 2d 6c 69 6e 6b 73 2d 64 69 73 61 62 6c 65 72 22 29 2e 68 69 64 65 28 29 7d 29 29 7d 29 29 3b 0d 0a Data Ascii: -links-disabler").attr("style","display:inline-block")})),e("#ez-toc-more-links-disabler").click((function(){e(".ez-toc-more-link").hide(),e("#ez-toc-more-links-enabler").show(),e("#ez-toc-more-links-disabler").hide()}))}));
2024-07-04 22:39:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49846	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:52 UTC	381	OUT	GET /wp-content/themes/tgtheme/img/zixun.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:52 UTC	773	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:52 GMT Content-Type: image/png Content-Length: 5185 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-1441" expires: Fri, 02 Aug 2024 22:39:45 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 86407 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ViGpLK5096KAiME4uvwRia5BnDKKCNBJze1WS%2FM8r6HaW51rLtvwWavAA%2FRgfgpq6TbHeglpZPDhHVt2btKpmWetvT%2FjXrTKP60JAB81OsGemII7gu9wqkWrLuJsMucHa0vCrIU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d1f2972c44f-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:52 UTC	596	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 dc 00 00 00 3e 08 06 00 00 00 40 d6 75 08 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR>@utEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: 45 38 32 30 42 45 41 35 39 44 41 35 41 31 33 44 37 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 33 42 32 34 45 37 36 34 46 43 38 31 31 45 45 38 32 30 42 45 41 35 39 44 41 35 41 31 33 44 37 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 33 42 32 34 45 37 33 34 46 43 38 31 31 45 45 38 32 30 42 45 41 35 39 44 41 35 41 31 33 44 37 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 33 42 32 34 45 37 34 34 46 43 38 31 31 45 45 38 32 30 42 45 41 35 39 44 41 35 41 31 33 44 37 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a Data Ascii: E820BEA59DA5A13D7" xmpMM:DocumentID="xmp.did:03B24E764FC811EE820BEA59DA5A13D7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:03B24E734FC811EE820BEA59DA5A13D7" stRef:documentID="xmp.did:03B24E744FC811EE820BEA59DA5A13D7"/> </rdf:Description> </rdf:RDF> </x:
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: 60 39 b6 e3 fa 52 ea 53 77 fe a7 fa e6 4c d6 79 fd 2f 59 20 e5 b1 d6 a1 c3 6b 9f 1e b8 eb a1 57 14 eb 42 4b af bd 9c 9d 7f ea c1 e6 14 66 df 1d d9 ed c7 9e 6d 79 7e fe af bf bf 79 e9 99 63 cd cf 5e ff e9 73 db 1f fb 5d cb b3 97 4f 3e d5 b2 f7 58 a6 1c 96 69 83 48 66 e8 9d fe 87 4e dc df 77 cb 17 0f ea 3c 9b 3c 78 ef e0 d6 07 7e d4 22 cb 07 d3 cf 0d 96 5f 68 fe 18 eb ea ab f8 c7 ee b9 17 7f 9c 4b 6c fd 58 89 ea ed f1 28 c2 85 40 d4 c8 ee b3 cd 17 2b f5 2b 64 40 46 7f f5 93 85 51 c6 58 50 a5 19 70 ab 82 2a af bd bc 9f ff 2c b1 f7 40 b1 1d 73 13 60 a4 ae bd 69 b6 ff b6 bb cf d8 e0 e7 2e 7d 98 26 3f eb ef fe 77 57 75 ea d7 b7 53 bd 9d 42 47 dc 42 b7 ed 7b 74 b5 6b 1d 52 f9 cd c2 ae fa 3f fe 78 33 ff 79 fa c6 cf 85 0a b8 ea a5 77 33 17 7f fa c0 7d 04 14 2b 6f Data Ascii: `9RSwLy/Y kWBKfmy~yc^s]O>XiHfNw<<x~"_hKlX(@++d@FQXPp*,@s`i.}&?wWuSBGB{tkR?x3yw3}+o
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: 48 69 a4 0a ba 6f 36 48 c6 3f e6 45 f4 00 bc fc ce ad b5 76 9a f2 55 05 cf f4 2a 74 11 a7 fa 73 7d be 9f 12 bc 07 45 37 02 b6 9e a0 eb 15 a6 94 78 23 ce f1 91 84 4d 89 04 e9 52 a5 8d 91 8d cc b7 59 f0 6b 92 a6 2d e2 35 2c 72 35 4a 5a 60 80 5e a4 be 24 cb f9 a9 82 b7 4a 72 f6 c6 bc 24 8d e1 f9 50 79 e3 74 9f 52 a8 7d 94 26 73 07 48 fb 8d 1d 03 6f 3b 1a 54 16 64 28 aa e8 dc ab 6a 0a 12 9d 49 74 da a3 13 75 a9 ee 92 92 ba 9c d4 68 4d fb bb f3 e9 b7 36 d2 77 9a 32 a0 a4 ae b7 c5 42 13 21 2a f4 0b 9f d0 cd 86 b4 86 27 0c a4 48 0e 3c fd 02 1e 65 52 8c 03 f2 37 c0 80 df 2d d3 a8 98 10 d4 77 97 25 53 67 98 ac 80 a7 79 16 e0 c0 fc 9e 42 16 19 f9 6d 46 38 55 6a 59 51 35 10 7c e8 c4 56 a4 ae 0a f8 24 35 00 a7 9a bf 87 02 1a 09 f8 bb 1a f5 5b 9f 60 9e 45 0c 34 f0 16 Data Ascii: Hio6H?EvUts}E7x#MRYk-5,r5JZ`^$Jr$PytR}&sHo;Td(jItuhM6w2B!'H<eR7-w%SgyBmF8UjYQ5\|V$5[`E4
2024-07-04 22:39:52 UTC	482	IN	Data Raw: 3a 35 92 03 bc 97 10 e8 c8 35 5c 93 0d 27 52 07 f4 12 13 38 05 c7 c0 39 f3 11 d2 a6 1e 1a 17 95 b9 4e 26 bf 8f b1 38 82 af e7 b8 3e 0d 48 75 79 d9 e4 da 90 4a 19 3c af 38 f7 7f c5 99 44 37 76 ed 90 c7 ac 09 1c 53 cc 20 ca 89 ae b7 d9 4e 29 a5 fa 63 ba 78 d0 35 3b c8 16 fc ac c9 56 e7 95 97 23 66 70 24 24 6a d9 43 32 5b eb 0b 60 d0 d5 05 76 d5 f8 b3 af 94 52 90 07 cb de b5 96 7a d0 94 43 9a 27 6b 46 37 9d 74 52 a7 fd 6d 02 f4 76 a5 94 7e d3 b6 8e a7 94 1a 75 33 7f 63 5f 56 b3 ea 1c f5 90 ef bf 49 6d 45 f1 15 21 ed 7d 21 a9 a7 df 1a 4e 08 38 81 f0 b6 15 53 97 d4 55 71 0d 67 91 10 35 4b 20 f9 e9 67 75 c9 1a 12 1a a0 73 51 87 6b 38 cd 3d ec 74 d3 c4 db 6f 47 03 70 8e 0f e0 22 1f f2 c6 98 86 8b 94 48 9d 26 db 97 a4 c9 06 31 45 2b 42 66 d7 80 ac de 39 24 de 0b Data Ascii: :55\'R89N&8>HuyJ<8D7vS N)cx5;V#fp$$jC2[`vRzC'kF7tRmv~u3c_VImE!}!N8SUqg5K gusQk8=toGp"H&1E+Bf9$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49845	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:52 UTC	452	OUT	GET /wp-content/uploads/2024/05/image-20-1-1-1024x516-1.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=277672-277672 If-Range: "66407ecc-50db5"
2024-07-04 22:39:52 UTC	800	IN	HTTP/1.1 206 Partial Content Date: Thu, 04 Jul 2024 22:39:52 GMT Content-Type: image/png Content-Length: 1 Connection: close last-modified: Sun, 12 May 2024 08:33:16 GMT etag: "66407ecc-50db5" expires: Wed, 24 Jul 2024 13:04:13 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 898539 Content-Range: bytes 277672-277672/331189 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nPkW55UlwrDfZ1QlQ05E3ESmRNLp4oj9djshvMgXwchP0MjCRKg7vjL9wqzX4snS5B2lIsmIsJm3ozdAHysA6EQQZz0mBNHA6njZnrDL45tsr7i9gsFvGdpOuPfKeYdJocWFKCA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d1f3f204241-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:52 UTC	1	IN	Data Raw: 72 Data Ascii: r

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49847	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:52 UTC	374	OUT	GET /wp-content/uploads/2024/05/3.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:52 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:52 GMT Content-Type: image/jpeg Content-Length: 112510 Connection: close last-modified: Mon, 27 May 2024 12:31:53 GMT etag: "66547d39-1b77e" expires: Sat, 27 Jul 2024 21:19:58 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 609594 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9AngbgaUB4NkLxiKlbt%2BO0xMtUwwkkbn5pksoacZ9NXDGhyMIMWKPJvamrF36a1Z2ANZcfuv2W8biDG0QyQJoaVX8zkRu%2BI35OPcA2uLrH7%2BP7yLEa1IAeKT2sh7po1R9M0cQJI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d1f9e8f42c1-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:52 UTC	591	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 05 03 04 0a 0a 0a 08 0a 0a 08 0a 08 08 08 0a 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 08 0a 10 0d 08 08 0e 09 08 08 0d 15 0d 0e 11 11 13 13 13 08 0d 16 18 16 12 18 10 12 13 12 01 05 05 05 08 07 08 0f 09 09 0f 12 0f 0f 0f 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 12 15 12 12 12 12 15 12 12 15 12 12 12 15 12 15 12 12 15 12 12 12 15 12 15 12 ff c0 00 11 08 02 d0 05 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 06 03 01 00 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 ff c4 00 61 10 00 01 03 02 03 04 04 06 08 0f 0c 07 08 03 01 01 01 00 02 03 04 11 05 12 21 06 07 31 41 08 13 51 61 22 32 71 81 91 a1 14 23 42 74 b1 b2 b3 Data Ascii: JFIF"a!1AQa"2q#Bt
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: 7a 48 28 48 ea 53 39 a4 02 96 de 6a 00 bb a1 74 94 0a 80 1b 93 72 20 e7 24 b8 a1 50 93 65 2c a2 b8 40 15 91 14 77 4d 48 f5 39 c1 21 92 9b 2e 49 7b 93 2e 72 c6 d8 c0 ff 00 58 93 9d 47 0e 46 15 46 07 43 d1 a6 c2 58 70 52 4a 41 a1 64 db a5 01 35 25 60 08 4e 49 0f 72 6f 30 50 26 c4 02 67 d9 c3 f6 28 41 6c 1c 8d 57 c3 38 2a 63 24 40 3a 12 50 ba 08 04 a0 82 0a 09 10 e2 82 0f 41 bc d4 f8 10 10 48 25 2c 24 39 55 10 84 94 02 05 06 a3 24 43 92 4a 53 92 4a a8 12 89 c1 19 44 e4 03 68 91 a4 85 52 5b 19 99 57 bf 9a b0 99 57 4a 78 a0 4c 48 2a 5c 2e 50 83 94 a8 0a 17 89 3e 22 9d 6a 62 37 29 0d 08 6c 45 92 29 4e aa da 8c ea a9 e9 78 ab 6a 33 aa a4 bb 19 11 73 0a 97 1a 85 01 53 63 58 8c a9 8a b2 2c a9 5c 38 9b 79 74 f8 54 0a bc 6a 9a 2b 99 2a 23 65 be e9 df 32 60 b6 49 4e Data Ascii: zH(HS9jtr $Pe,@wMH9!.I{.rXGFFCXpRJAd5%`NIro0P&g(AlW8c$@:PAH%,$9U$CJSJDhR[WWJxLH\.P>"jb7)lE)Nxj3sScX,\8ytTj+*#e2`IN
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: 36 f4 65 58 86 33 d2 56 b5 c0 f5 2d 6c 63 b0 5b f4 b5 73 d3 9e 7b 50 ba ae d2 72 6c bc 77 7c f8 a5 47 8d 54 e6 b4 f2 04 73 f2 2c 4f 11 da ea b9 7c 6a 87 ba fd a7 f4 85 8f a0 98 19 25 49 5c f7 78 cf 2e f2 92 98 2f 3e 5f 2a 42 0a d8 19 25 61 74 13 54 c8 22 a7 89 f3 cc ed 5b 1c 4d 73 de 40 e3 60 b6 4e cd 74 7e da 3a b2 dc 98 54 90 b0 ff 00 bc a9 92 9e 26 8f e8 99 73 7a 96 d5 fa 1e 1d 49 ad c6 33 30 3a a0 41 4c e8 de 46 ad 66 79 5a ec b7 f1 4f 05 da c4 fe de b4 c1 07 0e e0 3d 0e f1 49 32 9a ac 4e 96 96 e7 56 c7 1b e7 78 1d e4 10 3d 6b 63 60 1d 0e 70 c8 ec 6a f1 0a 9a c2 38 88 87 b1 c3 bb b4 75 c2 e9 bf 32 3b 29 c0 34 ad 2f 45 cd 99 68 00 e1 f2 3f f0 ea 65 cc 7c e1 c1 45 c5 ba 2a ec dc ad 21 94 d3 d2 bb 93 e2 a9 93 4e fb 3c 9b ad ea 92 42 90 71 5e f1 ba 23 d6 Data Ascii: 6eX3V-lc[s{Prlw\|GTs,O\|j%I\x./>_B%atT"[Ms@`Nt~:T&szI30:ALFfyZO=I2NVx=kc`pj8u2;)4/Eh?e\|E!N<Bq^#
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: 8a e3 ac 4b 6e 6b 66 2e cf 52 f7 66 ed 37 54 13 e2 72 bf c6 90 bb ca 7f 4f 10 a0 b4 68 1d 7b 88 ef 53 0c 8a fe df 9c 8f b8 6b 88 3e 90 b1 1c 53 7f 54 b1 df aa a7 32 13 cd f2 16 8e ed 03 57 34 b9 e4 f1 37 f3 df f4 26 c8 44 64 f5 68 dd 98 c6 fe ea 9d f5 98 a3 8b b2 c0 12 3f a4 e0 56 21 8b 6f 5f 12 9b 35 ea 9c db fd cd 9b f1 40 58 12 48 52 59 41 22 e2 b7 1f a9 90 92 e9 de eb ea 6e 7f 4a ae 9a ad ee d4 9d 7c bf 3a 66 e8 04 2c 92 0c bc 9e 25 0c da 21 64 56 40 02 8a c8 c3 12 b2 21 22 1a 52 91 90 89 40 02 30 c4 57 4b 6b 8e 8a 40 d9 08 93 8e 08 8e 9c 45 bc b6 f9 d4 01 17 42 ea 45 15 1c b2 9c b1 44 f9 9d c0 36 28 dd 21 bf 61 c9 7b 2d 83 b1 3b 90 c7 71 27 34 43 86 cb 14 6e b5 ea 2a 72 c3 13 41 e2 7c 32 09 2a 41 b0 fa 03 47 21 c6 ea 9c 2e 62 6d 23 c4 bc f5 71 70 8f Data Ascii: Knkf.Rf7TrOh{Sk>ST2W47&Ddh?V!o_5@XHRYA"nJ\|:f,%!dV@!"R@0WKk@EBED6(!a{-;q'4CnrA\|2AG!.bm#qp
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: 38 30 36 f6 2b 3a 1c 34 34 f0 42 1b 31 ba 4c 22 de e7 fc 95 8b 30 bf e6 ac 9a 3a 10 a4 0a 30 99 2b 83 19 8b 0c b7 b9 53 20 c3 fb 95 f0 a6 08 db 4a 14 0c 15 b0 51 a9 51 d2 0e c5 2c 44 12 80 b2 12 31 ec 60 94 c8 00 4f 5d 04 02 03 51 a0 82 00 04 48 c2 24 01 5d 24 a0 e4 5e af 83 ca 50 09 92 40 dd 49 b0 ed 5a a3 7a 5b da 8a 8f 34 34 ce 0f a8 e7 cf 2d ad dc a9 b7 e5 bc d3 11 75 35 33 f5 6d da 5c 0d b5 b0 26 da 6b aa e7 2a 9a a7 b9 ce 7b dc 5c f7 12 e2 4f 69 58 e4 f2 6d d3 a1 c6 59 7d b4 fb 63 57 56 e7 19 a6 2f b9 d1 b7 b3 40 ee 1c d6 39 35 41 77 6f 7d ff 00 42 4d 3d 3b e5 78 64 71 ba 49 1e 43 58 c6 02 e7 39 c7 80 68 e6 57 52 ee 6b a2 54 d5 0c 8a ab 19 a8 34 d1 48 1a e1 43 00 06 67 37 c2 39 66 98 3b c0 f7 3e 2a ac 4b ed 47 2a 34 f2 be bd 9a 05 93 6c ee c0 62 d5 Data Ascii: 806+:44B1L"0:0+S JQQ,D1`O]QH$]$^P@IZz[44-u53m\&k{\OiXmY}cWV/@95Awo}BM=;xdqICX9hWRkT4HCg79f;>KG*4lb
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: 86 34 5b 85 de 6e 7c f6 59 3c 0d b0 b0 e0 2c 07 90 68 b1 8c 1d ae 7c 97 3e e4 97 1b 6a 2f c0 7a b5 59 2b 5c b4 ae f8 c4 51 e8 74 2c cd ce b3 f1 7c 64 72 e8 5d 26 e8 d7 3f 0c f5 0a 66 9b da 18 bc 65 89 d4 42 4e 9c 16 7d 8c c3 c5 51 0a 45 bd 9c 1c f9 47 2c c7 69 f0 b2 eb e8 84 bb 3c 35 b8 fd bd 2b 2f a3 a7 0d e4 a6 7b 07 32 c5 25 bb b9 b3 4e 5b 57 06 33 82 e0 cd 6e 96 59 45 05 08 16 d1 49 a0 a0 b1 56 ad 84 37 bd 4d 38 a8 94 a8 f7 72 47 8a 3d 2d d8 95 91 2d ee 09 ae b5 64 c9 8f 03 d1 46 a6 46 14 48 de 9d 6c 8a ac 91 ec a9 60 a6 1c f4 82 fe 2a 9b 49 24 99 6c 9b 7c aa 39 71 45 75 72 a9 8e 3a 42 9b 7c 89 12 14 c3 8a 9c 92 3c 65 46 1e a3 82 9f 63 54 00 9c 8c 25 65 4a 6b 54 12 36 8e c9 d0 d4 08 4c 81 8c a8 59 3b 64 92 85 5b 08 27 02 42 58 50 03 29 8a a6 dc 27 d1 Data Ascii: 4[n\|Y<,h\|>j/zY+\Qt,\|dr]&?feBN}QEG,i<5+/{2%N[W3nYEIV7M8rG=--dFFHl`*I$l\|9qEur:B\|<eFcT%eJkT6LY;d['BXP)'
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: 03 6f 6d d2 72 27 42 4a ab 45 b2 23 22 2b 04 e2 4d 93 20 4d 91 12 81 e2 51 15 42 42 29 b7 25 b9 21 c8 02 44 51 a2 2a c0 08 89 40 a2 2a 00 44 a0 82 0a 00 94 10 41 00 10 41 25 00 10 48 4b 08 02 77 3f 32 e6 1e 95 12 7e ef 88 13 fe eb d0 0e 55 d3 af e6 b9 a7 a5 8d 2d aa e9 a4 b7 8f 13 bd 45 a9 2e c6 7a 1f 48 d2 91 78 ce ef 49 a6 9b ab 96 39 0e a2 39 23 7d b8 78 8f 0e bf a9 2a 67 5b 26 9d d7 4c cc 38 e9 7e 7e 6f fe d6 08 76 37 2a 77 3d 67 d9 ca c6 cd 4b 49 2b 3c 49 60 85 e2 c6 e2 ce 8d 84 58 f6 59 58 dd 69 7e 86 db 52 6b f6 7e 95 af 76 69 a8 1d 25 1c 9a dc e5 8d ef 10 9b f7 c6 1a b7 40 59 0a 01 04 11 12 80 17 42 e8 91 14 01 a0 4a 42 08 02 ba 17 44 82 00 ee 85 d1 20 80 17 42 e8 90 40 1d d0 ba 24 10 00 a0 82 08 00 82 08 20 02 08 20 80 08 20 82 00 20 82 08 00 82 Data Ascii: omr'BJE#"+M MQBB)%!DQ@DAA%HKw?2~U-E.zHxI99#}xg[&L8~~ov7w=gKI+<I`XYXi~Rk~vi%@YBJBD B@$
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: b8 6b 73 f8 c9 c8 00 77 87 03 9a e0 47 0c ae b9 21 76 b6 cd d7 0a 8a 78 65 06 f9 98 dc de 5b 59 61 a9 12 d1 25 bd 32 53 f2 0e 29 87 ac 66 5c 08 73 93 39 d3 85 a9 3d 5a 82 30 0c e9 a9 13 99 11 16 20 19 05 28 38 f6 a5 75 69 42 34 2e 37 7b a4 90 a4 75 68 75 68 51 b2 3e 54 bc 8a 4b 63 4a 10 a0 c9 14 32 e8 fa a5 2c 44 8f aa 42 d9 21 75 49 5d 4a 9a d8 52 9b 12 15 21 18 12 84 4a 69 89 1b 63 42 c8 86 d8 12 db 07 7a 9a d6 77 25 86 04 2a c8 ad 8f c8 96 c6 f9 14 8c a1 0c a1 06 e4 82 0c 46 e6 a5 d9 04 c1 57 2c b2 33 da 99 73 54 c7 b5 32 e6 a1 28 83 2c 6a 3b 9a a7 ca d5 12 46 f1 50 c9 44 29 54 77 a9 53 0d 14 47 15 06 65 c8 96 b9 38 c7 28 ae 7d 90 64 aa d1 31 4d 16 71 b9 2c b2 ea 0c 53 a9 8c 92 eb 32 79 31 84 62 44 f8 d3 b7 46 a7 05 48 bd 42 3e a1 4a 0d ef 47 91 09 21 Data Ascii: kswG!vxe[Ya%2S)f\s9=Z0 (8uiB4.7{uhuhQ>TKcJ2,DB!uI]JR!JicBzw%*FW,3sT2(,j;FPD)TwSGe8(}d1Mq,S2y1bDFHB>JG!
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: 32 a1 56 46 e5 22 37 2c c9 e4 c4 f8 2c a3 95 3a d9 02 af 63 d2 c3 fb d5 8a 4a a2 5d f0 8b 22 f4 03 95 7b 24 ef 4a 32 a6 19 10 a9 19 f6 69 93 8b 91 5d 40 74 e5 06 d4 f7 a1 94 9f 64 05 94 3e bc f6 a7 1b 52 10 12 08 45 95 21 b3 25 09 10 80 ec 88 84 a0 e4 64 85 38 03 25 a8 db 1a 74 04 e3 53 04 31 b6 c4 a4 c4 c4 23 09 e6 ab a2 8c 5b 18 a4 30 26 d9 c9 3c 0a bb 30 31 c0 34 08 04 41 c8 5d 40 c0 68 8a 17 41 09 48 08 20 82 9c 96 68 08 20 82 64 80 20 82 0a 49 da 25 04 10 41 b4 08 20 95 64 1b 44 a0 8e c8 59 06 d2 8d 36 f1 c5 2c 94 97 2c c6 b1 12 6a 60 54 29 28 87 3f 81 5a 94 97 04 24 ac 65 08 fd 82 7a 3a 40 14 e0 c4 32 a0 18 64 09 7d 5a 74 22 2a 33 c0 11 95 0b 25 a2 50 04 d9 0b 25 20 a4 08 46 8c a2 25 00 10 45 74 2e 84 06 88 a1 74 0a 86 30 10 40 a3 01 24 95 05 80 88 Data Ascii: 2VF"7,,:cJ]"{$J2i]@td>RE!%d8%tS1#[0&<014A]@hAH h d I%A dDY6,,j`T)(?Z$ez:@2d}Zt"*3%P% F%Et.t0@$
2024-07-04 22:39:52 UTC	1369	IN	Data Raw: be 57 5b c9 94 ff 00 92 6a 59 2c b4 35 18 28 61 ae 32 7a 8e 94 ad 52 6a 4a 6f 38 1e 7c e9 bf 64 28 92 4a 13 3d 68 5c 7d c7 ba 8a 2c c4 e8 fa fe f5 5c 24 46 d9 02 b2 65 b6 96 c2 74 b1 52 aa 3a ce f4 b1 27 7a 9d c5 59 73 1d 4a 79 b5 2a 8d b2 db 9a 70 4f de a3 70 c1 78 da 9e f4 eb 6a 42 a2 6c c9 62 a4 f6 ab a6 30 64 0c a8 09 e6 4e 16 3e ca 94 fb 2a 93 25 1a 32 08 e7 4f 75 fd cb 1f 6d 67 7a 75 b5 7d ea ea 45 5c 0b d1 37 72 58 97 b9 51 b6 b1 3e da b5 6d c4 6d 45 b7 59 dc 8c 48 aa c5 52 5b 6a 54 6e 0a 25 98 72 30 54 21 52 95 ec 85 28 8c 12 f3 23 51 84 e9 7d 77 05 24 0f 20 9b 6c a1 2f 30 56 01 20 8a e8 5d 00 a0 8d 26 e9 40 a8 19 02 08 04 a0 a0 93 1e 72 24 44 a0 4a d8 35 44 b9 04 10 40 04 10 08 15 0c 05 74 33 22 25 15 d4 01 45 c9 37 44 4a 2b a9 02 ae 85 d2 6e 85 Data Ascii: W[jY,5(a2zRjJo8\|d(J=h\},\$FetR:'zYsJypOpxjBlb0dN>%2Oumgzu}E\7rXQ>mmEYHR[jTn%r0T!R(#Q}w$ l/0V ]&@r$DJ5D@t3"%E7DJ+n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49848	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:52 UTC	452	OUT	GET /wp-content/uploads/2024/05/image-20-1-1-1024x516-1.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=277672-331188 If-Range: "66407ecc-50db5"
2024-07-04 22:39:53 UTC	810	IN	HTTP/1.1 206 Partial Content Date: Thu, 04 Jul 2024 22:39:52 GMT Content-Type: image/png Content-Length: 53517 Connection: close last-modified: Sun, 12 May 2024 08:33:16 GMT etag: "66407ecc-50db5" expires: Wed, 24 Jul 2024 13:04:13 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 898539 Content-Range: bytes 277672-331188/331189 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FPFLYCNdxj3%2FSAFHJyVG1gHV3x6Pm2n9TbqsoAbKjNfritKo6s85nC2hVo7kI6xz0hZtWsQHybUNEes3fJP1A6h%2Fs6TR0QKIdS7xjCGJ1dTq%2FVZnMo4rkoGxvhOrBL9c200TWxE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d23ed374397-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:53 UTC	559	IN	Data Raw: 72 8e ad 2b a6 ee 95 52 94 20 73 8c 98 8d 09 83 5c 26 c9 eb 4d 17 43 ac 30 0a 32 c8 1d 74 90 c2 32 74 96 24 c3 42 9d e6 eb cf 94 a0 4e 9e 66 46 8c c1 2b d4 a9 e4 74 09 c5 68 3a 05 b4 33 f8 ac f2 33 24 14 06 fa 02 3b 08 d8 84 b6 1d 13 88 44 31 da 34 23 04 41 0e 30 e7 7f f2 b2 cf 79 92 75 bb c2 50 af 36 27 88 f2 f0 c3 e7 10 9b 80 1e 41 65 82 59 29 07 58 65 63 a0 78 bb 8b 02 39 08 45 2f 36 65 97 3f 5c 14 d4 7e bd f7 25 f5 bc 74 60 88 95 1b d8 da 92 da 19 98 52 55 82 99 0e f2 20 c3 c2 73 2c 47 58 79 1a 8b a1 12 50 31 27 9e cc 7f 79 fd 26 dc b9 63 6c 3c 14 3b 03 bd 78 36 a5 ac 81 6e 4e e5 f5 59 e6 61 9e 57 8f 3c 72 92 dc 68 ca 1e 9d 04 a6 f3 c4 8d 6b 53 ce 1d 99 d0 a5 22 2c f4 fd f2 bc c9 fc 06 d9 5a 18 d7 ca 43 27 36 90 a0 9e ab 1b 03 29 15 3e 9f dc 3b 45 79 Data Ascii: r+R s\&MC02t2t$BNfF+th:33$;D14#A0yuP6'AeY)Xecx9E/6e?\~%t`RU s,GXyP1'y&cl<;x6nNYaW<rhkS",ZC'6)>;Ey
2024-07-04 22:39:53 UTC	1369	IN	Data Raw: 3a c6 ab 57 12 ff ea 0b df e0 ca 4d 23 d5 13 24 79 4d ed 88 13 c8 94 e0 7f 87 2d 92 a7 00 50 d1 d7 5e fe 49 49 8b 04 2f d6 a3 29 50 21 9c 3f 57 f3 73 9f 3d c1 f1 8d 96 2a cc 48 b8 91 25 c1 32 5a 5d 0e 9e 15 e6 96 8d b8 7e 3d f1 dc 0b 97 b9 74 a3 25 54 23 68 04 4b f3 4e 11 cd 3e 42 84 79 56 60 0a 30 72 bf e4 20 73 75 8f 4d 5b ca fa 50 2c c0 8f 5f bb c9 4b 2f df e2 e7 3e 78 c2 eb c6 1b 60 01 0d 7d de 79 af 68 17 4f a6 a1 62 44 23 1b 4b 6e 18 c4 e0 86 f1 b9 b3 27 f9 d8 33 4f f0 e3 3f 7e d5 3d 77 07 e9 8f 85 35 54 1a e2 65 8e a4 f3 ea 80 fb 0b e6 c4 0c 48 28 b1 0f 69 dc a5 4f 8a f1 b5 18 5a 5a 82 1a 23 1e db 01 2a 09 cd a9 08 5d c9 a3 42 9e d4 85 4d 43 0a 11 d3 e8 7c 1d 9a a3 16 42 8e 9e d0 08 36 02 8d 1e a1 8a d0 70 83 38 1e fb ef 6d 0b 29 20 b2 e1 9e ec 62 Data Ascii: :WM#$yM-P^II/)P!?Ws=H%2Z]~=t%T#hKN>ByV`0r suM[P,_K/>x`}yhObD#Kn'3O?~=w5TeH(iOZZ#]BMC\|B6p8m) b
2024-07-04 22:39:53 UTC	1369	IN	Data Raw: 5a cb a9 93 70 75 ab b4 3c 20 5a 33 9b 25 de bc 71 8f 96 33 ce fb d1 f1 7a 0c d7 48 99 9b cb 63 a5 c0 9c 63 47 6a 4e 9d a8 b8 7c 47 49 a9 45 98 20 12 51 4b 19 68 56 2a 6b 39 32 a9 39 79 62 0d 5b 60 50 1f ea 60 4b a4 5c 5d a8 af 60 54 4c 65 8d 0b 57 21 75 5e bb 80 d1 38 f9 62 ee c3 c2 a3 50 98 6a fa fb 0e 9f b3 bc 6f b2 74 4d bb f9 de b5 b3 1b ae 32 d3 f7 93 f2 56 bc 95 65 7f 5b 7e 9e 0e ba a1 5f 94 3d cf 65 5e 73 9d ee 20 dd b6 6b 6f 0b 74 cf 6f 60 8b c5 db 16 cd b8 1e 98 f1 6d 7f f5 95 dd 9d 56 a2 39 20 2e 57 5f 12 72 a9 3f 7c be e5 75 ee 4f 18 a6 86 ac f2 30 df df 8d 34 b0 05 07 80 95 18 5d a4 96 0d 08 e7 52 a2 0a 15 9a 94 48 8d 01 4d 52 62 5d d3 b4 39 ea 8d 88 e4 08 c8 10 a1 4d 89 71 dc 69 fe c0 76 e0 62 67 7d a8 df 62 96 39 a0 f2 e7 5d 62 fc 41 f4 29 Data Ascii: Zpu< Z3%q3zHccGjN\|GIE QKhV*k929yb[`P`K\]`TLeW!u^8bPjotM2Ve[~_=e^s koto`mV9 .W_r?\|uO04]RHMRb]9Mqivbg}b9]bA)
2024-07-04 22:39:53 UTC	1369	IN	Data Raw: 5e 85 c4 7a 30 1e 7f e2 29 3e fd d1 9a 40 0b 71 18 9d b4 1f f1 fe 97 7c 9e 78 9a 49 9f c0 a5 d6 eb 18 c3 f6 f5 eb 6d 70 80 76 3f bb 8d 21 3f a2 53 20 d8 c1 d8 1b 34 65 f7 be 95 03 94 e4 5c 35 f2 22 7f e9 80 a3 bc c7 d3 0e 9a 46 71 9f 8d 86 c0 be 52 00 b6 8d e6 3e 3e 7b d0 e6 cd 2e b2 db a8 1d 92 e6 ed 25 fd f9 67 83 85 32 3c 8c cb 66 79 1f 36 a1 7c 78 f6 8a 73 7f 00 95 8f fd d0 66 db 67 ef b4 08 ee 55 74 f5 de 8d bb e1 fa 91 2a d7 7e 95 0a 33 e3 c2 1b 73 fe bf 2f fd 90 4f 3e f3 f3 8c 27 ce 50 de df 69 95 81 b7 ce 80 32 0b 28 35 49 d7 f9 f1 ab 53 be f8 87 17 68 d5 91 f9 20 43 2c 7a 79 d1 0f 14 9a f2 af e2 99 5d 28 13 f3 00 c4 04 53 68 ad a5 96 40 a0 e5 ec 43 1b 7c fe 73 e7 89 d5 26 4e 74 e8 5e 64 cf 2a 2c 1e 66 59 50 70 bb e3 4f 70 8e 80 16 0f eb 17 23 a9 Data Ascii: ^z0)>@q\|xImpv?!?S 4e\5"FqR>>{.%g2<fy6\|xsfgUt~3s/O>'Pi2(5ISh C,zy](Sh@C\|s&Nt^d,fYPpOp#
2024-07-04 22:39:53 UTC	1369	IN	Data Raw: ea 78 f4 fc 99 6c e0 95 b5 3e 1c 27 e8 b9 10 8a e1 ef 65 5e bd 12 09 5c 7c fd 1a a6 79 ff 60 b8 68 ca fd 96 f7 e0 9f 24 37 cd fd 96 a1 89 fe e0 f4 94 9f 7e 39 ec e7 f3 41 c4 ba 68 82 7e df cb 0c 4e e6 85 18 4d 0a 99 67 8e bc 2b 80 81 2c a6 ab 0c e1 89 dd ae 2d 9f ac 7b 5d eb 77 c2 40 54 cd 69 28 43 a2 55 6f 9f 50 b8 a5 5a df c2 f1 0a 42 39 99 f3 3d 61 71 3c de 93 5e de c5 24 80 0f 5e 0e 12 42 72 ff 16 e0 81 02 58 f6 75 5f 0f f3 6d 73 63 7b 45 6f 71 17 ca a1 c6 64 02 a1 fb 2a 43 65 64 a8 a8 15 7f 90 e7 79 36 94 70 cb 62 5c 85 2e 5f 0e 81 44 64 aa 81 2b b7 12 ff c7 6f ff 39 cf fe d7 1f 5f bd 29 25 e7 c7 04 d1 58 32 5f 51 89 5c bc a8 7c e1 0f ee d2 1a b4 52 21 a5 6e b8 38 93 f3 f6 f1 19 84 68 ee f2 9c 07 25 21 54 10 22 29 6d a2 a6 8c 63 e4 ef fc ca d3 1c 5f Data Ascii: xl>'e^\\|y`h$7~9Ah~NMg+,-{]w@Ti(CUoPZB9=aq<^$^BrXu_msc{Eoqd*Cedy6pb\._Dd+o9_)%X2_Q\\|R!n8h%!T")mc_
2024-07-04 22:39:53 UTC	1369	IN	Data Raw: 91 fe cb bd 19 28 35 8d 41 1a 8e 65 60 ce fc 2a 19 ec ec 4e b9 7a 7d 9b 8b 6b 4b 18 3b 48 f7 bc 3e 07 9d cc 97 2c 29 a2 35 6a ea 91 27 b6 c7 78 bc cc b3 97 4e 53 87 c4 24 e5 32 5b e6 b5 5c 76 f6 26 dc d9 d8 23 5d d6 b2 a3 99 37 a3 ec eb 58 f9 c4 5a 96 46 70 e1 4c cd f2 18 76 f6 24 47 8e f5 c2 a2 00 95 c0 8b cf 9f c3 6c db 73 c0 8b e5 d5 fc 2c ec f8 65 b1 76 65 be ea 51 00 46 32 e1 dd ef df ca 66 05 cf d3 36 cc cb 6e 52 ee 1f f6 af f4 b1 44 2b 3c 4d 0a dd 41 72 8f f5 b2 cd 07 74 04 ba cf dc 77 a0 df 8b be 77 f4 f3 f4 7d 27 03 49 8e d3 12 92 a0 39 c2 54 2d c7 d8 64 f0 df c2 db c4 32 78 22 0b 52 73 80 c5 b2 f1 11 62 00 ba 7d 3e bc 0f 7a f3 b9 e3 1b e5 58 c3 6c 7a 75 19 d5 3a 61 bd cd 86 d6 c8 c3 ef e5 45 fc a0 c7 e4 f8 80 9e 66 b2 1f 56 03 c0 21 c2 d9 61 a5 Data Ascii: (5Ae`*Nz}kK;H>,)5j'xNS$2[\v&#]7XZFpLv$Gls,eveQF2f6nRD+<MArtww}'I9T-d2x"Rsb}>zXlzu:aEfV!a
2024-07-04 22:39:53 UTC	1369	IN	Data Raw: 32 9f 05 b4 6e 31 42 d7 f0 a1 db 75 f6 c3 21 fe 9c e4 e7 95 df e5 5a 5a e8 45 7a 5c 64 0b fe 96 99 6b 1a bc 4a 87 af e1 90 d9 5f ca 4a 33 9e ca 03 5e 7b 5a c4 bd ca 33 fb 18 af 7e 80 e3 2b 54 2a 90 1a fc 4c 51 7f 46 80 58 e4 48 06 46 00 2a 48 f1 70 23 fc 01 54 f8 85 aa b2 bd d7 f2 de ad 3d 5a 1b 11 2c 74 91 39 65 0f 4a 91 9c 51 1c 0c 2f 7b f3 25 a7 cd a4 3d 56 96 94 8b e7 c7 bc 7b a3 45 c4 f1 0c 92 05 ee 6c ee 72 eb de 1e 89 53 8e 82 2e 6d 29 4c 40 6f 21 19 28 d7 5d c5 07 8f 71 51 9d 72 7a cd 58 5f 1b 21 37 3c df 9f 0e 84 37 61 66 ac af c1 e9 35 75 5c 8e e1 79 29 69 a0 5f 49 bf 24 73 99 5c e7 df 15 6d 5b 71 f5 9a 61 8c 80 82 bd 52 b0 48 04 4a d4 41 67 92 39 b9 6a b4 0d c1 8f 7d f3 0c 14 90 c1 aa b3 a3 f3 86 a7 89 1e 39 87 38 04 71 7e f1 e7 f3 bc 63 96 6f Data Ascii: 2n1Bu!ZZEz\dkJ_J3^{Z3~+TLQFXHFHp#T=Z,t9eJQ/{%=V{ElrS.m)L@o!(]qQrzX_!7<7af5u\y)i_I$s\m[qaRHJAg9j}98q~co
2024-07-04 22:39:53 UTC	1369	IN	Data Raw: 86 55 89 54 45 52 98 92 ea 5d 52 bd 43 aa 26 58 b5 8b 85 1d 4c 27 03 c5 ab 78 45 bd f2 81 a3 2a 0b 9a 04 35 19 e4 f7 bb b2 95 93 2f f1 fa cb 9a 41 90 1e fc a7 18 0f 93 36 b4 61 8f 36 4c 88 1a f3 fa f5 30 49 33 af 58 50 f2 d0 1d fb e3 51 f1 b6 45 e2 d3 49 ca b1 2e 8a ab ff a8 e0 06 90 82 29 93 1a 88 2d 96 ab 51 98 29 a4 0a a5 26 c8 98 a0 63 02 23 94 9a 8a 3a 6b f3 ea 9e 71 53 4c 02 d1 94 a4 4a 34 37 34 8a 0a 55 35 ce 69 5d 78 7a 95 b4 a0 7b a0 bb 20 53 8e 1a fe 0f be dd bc 64 97 30 99 c2 95 eb 4a 9b c6 be c6 66 90 f0 87 cf 2e 5a 66 c2 53 9c 4a d4 4c e2 d4 72 c5 a5 0b a7 09 62 a4 d4 e2 e5 50 2b 76 a6 15 b7 ee 26 da 18 30 ab 41 6a 52 1a 16 6a 1b ee d1 e1 3a ca 67 bb 4d 38 bb 5e b3 7e 7a a5 33 3c f4 f3 60 54 2a 3c fb cc 98 c0 6e 4e 55 91 b9 e7 0c 15 fa fe ff Data Ascii: UTER]RC&XL'xE5/A6a6L0I3XPQEI.)-Q)&c#:kqSLJ474U5i]xz{ Sd0Jf.ZfSJLrbP+v&0AjRj:gM8^~z3<`T<nNU
2024-07-04 22:39:53 UTC	1369	IN	Data Raw: d7 90 80 d7 87 97 6e f9 f7 4a 49 31 48 78 65 8e ce 43 3a 44 33 cf 1e 7f 07 57 cc c6 01 69 f2 3d 74 1e 59 cf d3 ce 7d 1c 18 da f6 f5 4d e6 af 29 62 95 bf ab 45 44 23 49 94 50 c2 a6 51 2f 9d 24 6d 6e c7 71 3d fa 30 ee e3 d0 c9 16 4e bc 77 05 ed dd a9 80 31 a6 9c d7 5f ae a9 0a 90 88 69 97 44 ec a7 48 84 a0 ea f8 0f 96 a8 b5 37 eb 91 8c 20 c6 f2 12 ac 2c 0b 6b a7 46 8c c7 67 58 3b 35 a2 0e 2b ac ad 9f e3 4f bf f2 4d 6e 6c 4c 73 89 cc bc 06 73 5e ab cf db f1 80 73 55 14 33 3f d3 b6 76 76 b9 73 77 9b 17 56 7b 83 ae 37 97 c1 29 3b 3e 5d 78 54 93 d7 99 8b 44 cb e3 8a 8b e7 56 19 55 30 6d 73 32 8a 45 24 46 ee dc db 64 7b bb e1 dc e9 1a b3 c6 d7 19 72 b8 d3 59 0c 4b 2d 22 53 96 6a e3 cc 5a c5 28 40 13 13 69 50 9e d2 52 e2 d2 c5 33 d4 da 66 1e 5c 46 b6 cc 57 72 43 Data Ascii: nJI1HxeC:D3Wi=tY}M)bED#IPQ/$mnq=0Nw1_iDH7 ,kFgX;5+OMnlLss^sU3?vvswV{7);>]xTDVU0ms2E$Fd{rYK-"SjZ(@iPR3f\FWrC
2024-07-04 22:39:53 UTC	1369	IN	Data Raw: 15 e8 90 72 a5 7f 86 2b 1c 19 f9 df b4 33 0c 88 1a 10 5d 00 89 13 7e f2 53 1f a5 d6 37 99 44 30 d2 00 05 3f 78 df 0b 40 a3 95 d0 7f 05 a2 03 ed 25 b2 31 4b f1 da c5 5e 96 ad 4a 50 c5 40 95 4a 44 40 8e 01 90 52 b5 e1 28 34 45 6d ea fc 24 05 0a 68 5c 3f cd 1e 81 80 55 39 ea a1 28 f5 0e 36 28 69 ec c2 4a 67 a8 18 a8 22 22 19 73 c2 fb 97 c4 c3 2e 67 37 f5 a2 3d d3 5f 13 14 52 0d 49 09 71 cf 8d 09 e6 21 de 1e ce 59 a2 14 52 df 6e 97 0e 70 74 9a b5 d1 ca 13 93 8f 16 47 79 fa 18 0c 4f 8b 72 65 a8 e8 09 09 a5 f1 d4 13 04 15 f7 46 a7 64 24 4b ac 2e 2b e7 d6 e1 fc 99 31 17 ce 9d e6 c2 f9 35 ce ae 9f e2 d2 b9 55 ce 9e 55 d6 57 1b d6 57 13 eb a7 2b d6 d7 2a d6 56 94 e5 25 65 34 aa b0 e8 c5 45 34 b4 c0 26 31 5e e3 de 2e 8c 98 32 93 f0 61 81 44 4d 62 0c 34 e8 01 e7 cb Data Ascii: r+3]~S7D0?x@%1K^JP@JD@R(4Em$h\?U9(6(iJg""s.g7=_RIq!YRnptGyOreFd$K.+15UUWW+*V%e4E4&1^.2aDMb4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49850	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:54 UTC	645	OUT	GET /apps HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:55 UTC	889	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:55 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close link: <https://www.telegramkv.com/wp-json/>; rel="https://api.w.org/" link: <https://www.telegramkv.com/wp-json/wp/v2/pages/303>; rel="alternate"; type="application/json" link: <https://www.telegramkv.com/?p=303>; rel=shortlink vary: Accept-Encoding, Cookie strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hQLL0wkA9FuYia8f8tJwMjoCatyWA6Re8%2FJjyN7vQNia2sEqfYYCRRohIr%2B526srcD03ZovCO40XxIghLup73UeL5XhxgiBPURbyjRR8ah%2F%2F0BkEjmE7Emb2vm12t%2BKzXc4lE5E%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d2ee82217d9-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:55 UTC	480	IN	Data Raw: 37 63 33 38 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 5f 43 4e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 67 74 68 65 6d 65 2f 73 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a Data Ascii: 7c38<!DOCTYPE html><html lang="zh_CN"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css">
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: b8 8b e8 bd bd 20 2d 20 54 65 6c 65 67 72 61 6d e4 b8 ad e6 96 87 e5 ae 98 e7 bd 91 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 50 72 65 6d 69 75 6d 20 70 6c 75 67 69 6e 20 76 32 30 2e 34 20 28 59 6f 61 73 74 20 53 45 4f 20 76 32 30 2e 34 29 20 2d 20 68 74 74 70 73 3a 2f 2f 79 6f 61 73 74 2e Data Ascii: - Telegram</title> <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO Premium plugin v20.4 (Yoast SEO v20.4) - https://yoast.
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 61 70 70 73 23 62 72 65 61 64 63 72 75 6d 62 22 2c 22 69 74 65 6d 4c 69 73 74 45 6c 65 6d 65 6e 74 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 e9 a6 96 e9 a1 b5 22 2c 22 69 74 65 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 6e 61 6d 65 22 3a 22 54 65 6c 65 67 72 61 6d e4 b8 8b e8 bd bd 22 7d 5d 7d 2c 7b 22 40 74 79 70 65 22 3a 22 57 65 62 53 69 74 65 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 Data Ascii: t","@id":"https://www.telegramkv.com/apps#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"","item":"https://www.telegramkv.com/"},{"@type":"ListItem","position":2,"name":"Telegram"}]},{"@type":"WebSite","@id":"https://w
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 2c 72 3d 28 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2c 65 2e 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 29 3b 72 65 74 75 72 6e 20 74 2e 65 76 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 5b Data Ascii: Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(function(e,t){return e===r[
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 28 29 3b 69 66 28 21 6e 29 7b 69 66 28 Data Ascii: ion(t){var n=function(){try{var e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}return null}();if(!n){if(
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 6c 65 79 2c 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 20 30 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 30 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a Data Ascii: ley, img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 0.07em !important;vertical-align: -0.1em !important;background: none !important;
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 33 65 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 23 39 62 35 31 65 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 36 2c 31 34 37 2c 32 32 37 2c 31 29 20 30 25 2c 72 67 62 28 31 35 35 2c 38 31 2c 32 32 34 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c Data Ascii: 3e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan: linear-gradient(135deg,
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 30 32 2c 32 34 38 2c 31 32 38 29 20 30 25 2c 72 67 62 28 31 31 33 2c 32 30 36 2c 31 32 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 2c 33 2c 31 32 39 29 20 30 25 2c 72 67 62 28 34 30 2c 31 31 36 2c 32 35 32 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 3a 20 31 33 70 78 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 6d 65 64 69 75 Data Ascii: -gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--preset--font-size--mediu
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d Data Ascii: lock-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: var(--wp--preset--color--
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 Data Ascii: ckground-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{background-color: var(--wp--pres

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49849	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:55 UTC	627	OUT	GET /wp-content/themes/tgtheme/img/yingyong.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/apps Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:55 UTC	786	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:55 GMT Content-Type: image/png Content-Length: 8893 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-22bd" expires: Thu, 01 Aug 2024 22:39:42 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172813 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BciZG2C%2BRM%2F53IU%2B4VFYdz%2BQ3m%2FaZQHqhLCuuwy7LYWLCFEVAu%2FS1%2Fp3jNXKmCxSiQ6sNWxtsDqmRst9aTlKgl5VNdyOINV1SrtPHgua1NKWJcKH%2FN55U7wFGfZB3cjUL9KDHnY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d353b161a44-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:55 UTC	583	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 b0 00 00 00 3d 08 06 00 00 00 55 f5 5a 99 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR=UZtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 42 46 30 35 43 33 34 46 42 36 31 31 45 45 38 31 30 36 45 43 38 34 39 39 41 39 43 35 34 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 41 42 46 30 35 43 34 34 46 42 36 31 31 45 45 38 31 30 36 45 43 38 34 39 39 41 39 43 35 34 39 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 41 42 46 30 35 43 31 34 46 42 36 31 31 45 45 38 31 30 36 45 43 38 34 39 39 41 39 43 35 34 39 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 41 42 46 30 35 43 32 34 46 42 36 31 31 45 45 38 31 30 36 45 43 38 34 39 39 41 39 43 35 34 39 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f Data Ascii: BF05C34FB611EE8106EC8499A9C549" xmpMM:DocumentID="xmp.did:0ABF05C44FB611EE8106EC8499A9C549"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0ABF05C14FB611EE8106EC8499A9C549" stRef:documentID="xmp.did:0ABF05C24FB611EE8106EC8499A9C549"/> </rdf:Description> </
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 45 80 06 14 09 a1 32 81 0d fc 7b 18 21 ff 49 d3 2b 20 02 0c 11 58 de 85 11 51 f2 79 cf ae 12 41 ee 4d 3f 17 37 c6 cf 74 5c 42 91 16 20 22 5e 8e 20 ae 10 d9 1d d3 31 f9 63 51 61 b0 bd ed e1 0d 94 bc 53 59 60 52 13 71 b5 b2 7f 1d f4 10 fb be 65 45 1c 8b 45 20 10 08 04 22 b0 79 23 81 65 01 d1 99 cc 6b f4 95 d5 7b 97 80 40 54 14 e4 94 91 b6 4f 86 48 21 8f 60 0d 40 0a 46 d2 88 67 20 55 61 58 56 be e0 e4 84 4c 09 ec 4a 07 23 7a a3 86 ed 7b d0 7a fb 4a 66 1f 3b 38 e5 0e 20 93 aa 0a 22 77 88 ec 82 40 20 10 56 30 81 95 8d 22 e5 65 b3 45 82 fa 8a 36 c6 8c 0b ca 8b b3 1b 7b 73 d2 db ab 18 69 1b 89 28 7b 54 81 78 cb 44 5f 7d 82 89 45 de 86 ad 78 9b 7b 78 c4 73 58 41 3e 8f 8c 54 35 1d ed 45 c8 16 c3 1c 1b 87 bc d3 dd 21 1f aa 70 6c 52 74 93 db 90 aa af 13 08 04 02 a1 Data Ascii: E2{!I+ XQyAM?7t\B "^ 1cQaSY`RqeEE "y#ek{@TOH!`@Fg UaXVLJ#z{zJf;8 "w@ V0"eE6{si({TxD_}Ex{xsXA>T5E!plRt
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 32 e0 64 86 3d bc 65 7f d8 d4 e8 bd 76 aa 9c 0b 1c 81 9d 56 63 6e ed 2e bf 6c 96 62 c0 8b be 46 45 78 07 11 d2 19 86 cc 49 03 fe 09 16 50 57 38 13 d9 f6 5e db 10 52 2d 75 dd b2 8e 93 35 08 04 02 61 a5 83 72 60 b3 24 b1 57 7d 6a df aa f1 af fd 01 ef 33 58 ba 5e fd 1f 77 dd d2 fe eb bf bf f7 f8 fb 7e 2b 17 4b d5 90 4a 50 7a f1 91 32 a4 0d f0 48 de c0 c4 0f ca f0 9d f0 67 a2 25 fe 13 d7 7c b6 22 db be 81 e5 cd 6a 5c a2 dc f3 7f 8f 6c 99 3b eb fc c7 92 b6 71 e1 9d 97 3d 57 fa e5 78 64 4a c4 f1 cb 6e 68 e5 ab 63 81 c0 0d b3 4d 77 40 dc c6 4d 9c 85 cb ae 12 06 f9 e1 d3 0d 80 40 6f b7 96 37 55 0d 70 48 62 14 81 96 22 b0 70 bc 9a 57 0e ef 96 36 d8 4c 05 44 dd bf 7c 63 4d 04 c9 f5 21 7b 79 01 36 d9 db 19 b1 91 8d 6e e2 22 10 08 44 60 09 29 10 d8 0b ae ac 76 be 3e Data Ascii: 2d=evVcn.lbFExIPW8^R-u5ar`$W}j3X^w~+KJPz2Hg%\|"j\l;q=WxdJnhcMw@M@o7UpHb"pW6LD\|cM!{y6n"D`)v>
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: b4 55 79 4c d3 65 0b 69 8c 01 9a f5 ea eb b2 d7 6a 5c 91 f7 39 82 e3 c9 3e c5 ef fa f0 1b cc 37 dc ff 32 66 ab 8b 07 6e dd 74 78 a9 bf b4 6d 99 3a 82 8c f5 9c 8f 8e 51 0a 41 ca f0 1e 46 11 48 14 23 68 fd ec 25 ea 90 ba fc ef c1 6f d8 c3 d4 81 42 48 6e 77 02 59 51 57 c4 76 19 50 65 67 4c 5d 94 5a d1 ee 9c 9e b5 f7 18 10 1b de d8 14 19 25 74 db 3b 8f 69 28 b7 ea 91 cc df 98 bb f8 fa cb ea 6b de f5 8c 5b ea b3 e0 c5 23 9d 4e 67 ff 03 40 fc 3a 0e bd f4 7e a7 d4 6f c3 f7 9c 55 9e eb 15 da 82 24 3c 59 b4 d1 eb 84 fd 3a 80 ec 25 22 1d 0f 3b dc 62 a3 ab b8 76 e1 38 23 af 89 7c c9 29 f5 3d 22 f5 c5 b6 76 ab b6 ee dd df f3 fe 35 00 83 a5 f7 ea 5c a1 6e 91 45 bf 15 46 91 f5 c3 a6 74 6d 5a be e9 f1 12 fa f9 b5 8c 5c f6 0b c8 6b b0 ad fd 2c 50 d1 6c b6 90 a6 5e fb 43 Data Ascii: UyLeij\9>72fntxm:QAFH#h%oBHnwYQWvPegL]Z%t;i(k[#Ng@:~oU$<Y:%";bv8#\|)="v5\nEFtmZ\k,Pl^C
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: 74 a5 ea cf ca ae 23 bf 69 97 6c 5f 3b a7 7d 35 e6 fc 61 99 36 eb 58 92 3c 8f 1a e7 bd 4e c5 4e 2a 28 ab 4d e7 f3 26 5f 32 23 2f 65 3f 6a 15 5f 8a 6a 4f 0d f9 4d 47 ca 76 6d 22 1a d5 32 ba ce f0 59 2a cb 92 f0 f3 59 49 1f 9f 93 ed 13 0c db 82 a9 be 51 55 46 6f 20 78 13 7c cd 46 9d 9e c4 fa c9 a3 48 ff d6 b9 e1 fe 97 4b 31 ea 19 7c f9 a7 4b c4 ea 1b 88 c0 9a 1b 74 81 1c f5 20 32 21 62 b4 90 03 72 b4 98 b0 dd 1d 9c df cd b1 d9 14 4f 76 31 61 7b ea 1c 47 82 48 42 47 c4 b3 28 58 6f 2f 2b f9 af 79 13 93 16 f2 25 bd f2 32 f0 a3 56 f1 a5 a8 7a cd 09 06 9c 3c 0c ca 49 d0 6a ba 4e fb 59 2a cb 62 7d 74 57 ca 7e 6e da 16 32 27 b0 6c 6c ec 44 c6 52 a9 fd 23 81 e8 36 af 4c 55 02 cb 23 c2 dd 6c 22 a1 dc e6 42 1e 95 be 42 e4 75 62 51 44 95 8d 1d 86 eb 9f b4 cd 25 ce 6f Data Ascii: t#il_;}5a6X<NN(M&_2#/e?j_jOMGvm"2YYIQUFo x\|FHK1\|Kt 2!brOv1a{GHBG(Xo/+y%2Vz<IjNY*b}tW~n2'llDR#6LU#l"BBubQD%o
2024-07-04 22:39:55 UTC	1369	IN	Data Raw: b3 f0 a3 b8 f5 cf b3 2f 25 b5 97 c5 88 3b e0 b9 fa f2 7e 73 52 b6 00 16 31 2c 19 f4 bd f6 14 fb 2d 37 6d 5d 6b 94 af 73 5c 95 b5 bb 54 09 6c 0c bf ab 23 5c 29 ca 16 4c f5 8d b2 32 b0 7a db 9a cb 75 14 9e bf 1b ea 23 ea 70 13 17 27 18 05 63 79 5b e0 a8 af 5c a6 10 b8 49 ee c1 b5 cc 2f 7b c6 ad 1f b6 b3 10 35 1c 5e 67 cf f2 74 8a 09 ea 2f 33 70 94 58 d4 c8 55 70 7e 87 53 7f 47 81 68 fa 72 a2 06 5d b4 43 63 86 ef 60 9d 0a 4b 1f 08 3b 5c dd 90 6d 5b 26 9f 51 0b fb 52 16 7e b4 12 7d 29 c9 69 17 8b 12 3b 96 75 d9 b5 49 5f 2c b4 b8 ae 93 c8 37 9d 42 a0 ec e7 1a 08 6c 1a b6 60 ca 57 54 64 e8 f4 29 2c 25 c1 49 68 4b 8b 4c 97 e1 e7 0d a4 76 56 54 46 da 9b b8 74 ca cd b3 3c c7 4a 3f 02 e5 22 03 fa 2c 1b 5c 6d e6 84 6d 1c a3 04 43 89 3c 17 8e c9 e0 ee 18 8d 38 c3 8d Data Ascii: /%;~sR1,-7m]ks\Tl#\)L2zu#p'cy[\I/{5^gt/3pXUp~SGhr]Cc`K;\m[&QR~})i;uI_,7Bl`WTd),%IhKLvVTFt<J?",\mmC<8
2024-07-04 22:39:55 UTC	96	IN	Data Raw: cb 8f e3 bb b1 eb aa c1 cf f3 60 0b a6 ec 3c 33 bd aa e8 0b c8 6a f8 15 33 28 90 38 85 80 a0 2f 4a 23 1b 91 51 89 32 26 aa 93 6a 5d 9a a1 2c d3 7a 23 90 1f b5 9a 2f b5 b2 bd 91 ae b3 f3 f3 56 f5 f1 3c e9 35 af e3 e8 ff 0b 30 00 03 e8 05 c0 0c 8d 69 49 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: `<3j3(8/J#Q2&j],z#/V<50iIIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49851	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	625	OUT	GET /wp-content/themes/tgtheme/img/wangye.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/apps Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:56 UTC	771	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/png Content-Length: 1516 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-5ec" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=K4ndQaEo%2BT1flD1D5QkPWq440WFYomzk4YLTlNwI2w5sglUrE7jvR0x9d1HpUsPLLaERUmaNeeqc4KmyoIgBX2JRzHQ5OY1WppD7x%2FXccieclhTBHDwPrR2kEG1jQP6PUf2FmkE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d38ba404370-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:56 UTC	598	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRw=tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:56 UTC	918	IN	Data Raw: 44 32 30 41 31 33 36 37 30 34 43 37 41 30 34 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 37 30 44 34 32 45 43 34 46 42 36 31 31 45 45 38 44 32 30 41 31 33 36 37 30 34 43 37 41 30 34 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 37 30 44 34 32 45 39 34 46 42 36 31 31 45 45 38 44 32 30 41 31 33 36 37 30 34 43 37 41 30 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 37 30 44 34 32 45 41 34 46 42 36 31 31 45 45 38 44 32 30 41 31 33 36 37 30 34 43 37 41 30 34 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d Data Ascii: D20A136704C7A04" xmpMM:DocumentID="xmp.did:270D42EC4FB611EE8D20A136704C7A04"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:270D42E94FB611EE8D20A136704C7A04" stRef:documentID="xmp.did:270D42EA4FB611EE8D20A136704C7A04"/> </rdf:Description> </rdf:RDF> </x:xm

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49855	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	627	OUT	GET /wp-content/themes/tgtheme/img/wangye_a.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/apps Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:56 UTC	769	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/png Content-Length: 1508 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-5e4" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uxesyYP3f64Go3BiFcknS9BeCzTU1PETwW3VwPrBCKlVki2NlxIqWYfuWzPmYehx8CBvyKm64ZvgnoSDJ718SwC7NFhqemdVWd68bXmRP5v4OhO5HFOpf0%2FYC6qtlvdKt4oDBsU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d38bf031a17-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:56 UTC	600	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRw=tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:56 UTC	908	IN	Data Raw: 45 45 41 36 41 44 41 42 30 41 31 45 44 46 44 33 35 33 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 35 42 36 44 38 38 42 35 33 39 30 31 31 45 45 41 36 41 44 41 42 30 41 31 45 44 46 44 33 35 33 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 35 42 36 44 38 38 38 35 33 39 30 31 31 45 45 41 36 41 44 41 42 30 41 31 45 44 46 44 33 35 33 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 35 42 36 44 38 38 39 35 33 39 30 31 31 45 45 41 36 41 44 41 42 30 41 31 45 44 46 44 33 35 33 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 Data Ascii: EEA6ADAB0A1EDFD353" xmpMM:DocumentID="xmp.did:45B6D88B539011EEA6ADAB0A1EDFD353"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:45B6D888539011EEA6ADAB0A1EDFD353" stRef:documentID="xmp.did:45B6D889539011EEA6ADAB0A1EDFD353"/> </rdf:Description> </rdf:RDF> </x

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49854	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	627	OUT	GET /wp-content/themes/tgtheme/img/yingyong.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/apps Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:56 UTC	776	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/jpeg Content-Length: 14519 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-38b7" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Sy1AKjflo7nNWhAnWfGAS9NoinBwzgJPiiA%2BeVxGJbhDz4QTTowyLZVPBeDzZii0Nh62h55RxTQOBQnmpOARTKRU%2FIyChDWsinGqF0V1LB%2B4iZC9cyC9pt4hT9qkmQZNyRVxJis%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d38b84f238a-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:56 UTC	593	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifIIDucky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xm
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 37 45 44 34 39 37 44 34 46 42 35 31 31 45 45 38 32 31 46 46 35 36 42 41 30 41 30 44 43 31 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 37 45 44 34 39 37 41 34 46 42 35 31 31 45 45 38 32 31 46 46 35 36 42 41 30 41 30 44 43 31 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 37 45 44 34 39 37 42 34 46 42 35 31 31 45 45 38 32 31 46 46 35 36 42 41 30 41 30 44 43 31 45 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b 65 Data Ascii: " xmpMM:DocumentID="xmp.did:F7ED497D4FB511EE821FF56BA0A0DC1E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F7ED497A4FB511EE821FF56BA0A0DC1E" stRef:documentID="xmp.did:F7ED497B4FB511EE821FF56BA0A0DC1E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacke
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 62 71 bb bd 55 5d ca 7f f7 7c e7 38 e7 31 8b 5c 78 fd 7f 0c f5 7f 77 77 6d b6 ef 74 db 83 9e ae aa aa 99 aa a9 c6 a9 df 99 7c 5c da 6d 3a cf 4c bd 38 8d 14 95 86 95 96 a1 a5 65 a8 55 25 a8 55 65 a8 69 59 6a 15 59 6a 1a 52 5b 85 56 5a 85 56 5a 86 99 f2 3a 8e 6b 23 7e 2e d8 ab 0f 2a 89 e6 d5 1c 12 ec ed b7 37 c3 6e f5 65 c5 9b 05 72 46 96 77 1a 56 ab 97 d4 72 fd 2d bf 16 b8 dc b9 6e 77 e9 97 d8 6d 37 75 cd 5d 63 8f 86 1f 3b b8 db db 15 b4 96 eb b4 eb 80 00 00 29 76 f5 9b 54 ed 5d ae 9a 29 e1 aa 62 3b ec da f5 af 19 d1 aa d2 6d c2 35 45 9c d6 5a fe 3d 0d da 6e 61 bf b3 31 3d e6 69 96 b7 f5 66 25 6d 8e d5 e3 1a 32 39 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 f3 b5 7d 4b ab 5b e8 ed cf f3 Data Ascii: bqU]\|81\xwwmt\|\m:L8eU%UeiYjYjR[VZVZ:k#~.*7nerFwVr-nwm7u]c;)vT])b;m5EZ=na1=if%m29}K[
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: e6 57 cb 1b 9f b1 e6 e6 e4 f8 ed ea fe 19 7d 1e cb f9 96 e7 1f 46 58 8c 91 e6 97 6f a2 f6 bb 46 d5 a2 29 b3 77 a3 bf 3f d0 b9 e2 d5 f1 77 25 e2 ee 36 19 31 71 8d 63 ad f6 fc bb 9f ed b7 7d 15 b6 97 f6 67 8f f7 7d a7 49 ed 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 06 20 62 08 c4 0c 40 c4 0c 40 c4 0c 40 c4 0c 40 c4 0c 41 4b d7 69 b5 6a bb 95 4f 8b 44 4c cb 8b 3e 58 c7 49 bc f0 88 6a b5 ef 4e 8e 42 f5 ea ee dd ae ed 73 8d 55 ce 32 fc c3 3e 59 c9 79 bd b8 da 5e e5 6b 15 8d 21 5c 5c 4d 2b 32 b0 aa cc b5 0a ac cb 50 d2 b3 2d 42 a9 32 dc 2a b3 2d 43 4a cc b5 0a ac cb 50 d2 93 2d 42 ab 32 d4 2a b3 2d 34 ac cb 50 aa cc b4 aa 4c cb 70 d2 b3 2d 42 ba 3e c4 e7 26 8c dd ec ac cf 8b 76 9d ba 63 f8 a9 dc ef 4b d9 e4 f9 74 b4 d7 ad e5 73 6c 5a d6 2d d4 ec b1 7d Data Ascii: W}FXoF)w?w%61qc}g}Ib b@@@@AKijODL>XIjNBsU2>Yy^k!\\M+2P-B2-CJP-B2-4PLp-B>&vcKtslZ-}
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: be 44 f2 48 18 5d f2 27 92 40 c2 ef 91 3c 92 06 17 7c 89 e4 90 30 bb e4 4f 24 81 85 df 22 79 24 0c 2e f9 13 c9 20 61 77 c8 9e 49 03 0b be 44 f2 48 18 5d f2 27 92 41 8b 35 56 62 8c bd ca a8 b7 55 55 c5 33 b3 4d 34 cc cc cf c1 0e be ef 24 d3 15 a6 b1 33 6d 3a 34 e9 6f 1c 44 da 35 72 fd 4b 51 df 9c ad ec 7f e9 d7 f2 3f 3c f9 2c fe c5 fd db 76 3d 8f 8b 4e b8 f3 9d 47 50 fb 2d ef ab af e4 3e 47 3f e9 df dd b7 62 fc 5a f5 c7 9c 9c 8e a3 f6 5b df 57 5f c8 7c 8e 7f d3 bf bb 6e c3 e2 d7 ae 3c ea ce 47 51 fb 2d ef ab af e4 6a 36 39 fd 8b fb b6 ec 5f 8b 4e b8 f3 ab 39 1d 4b ec 97 be ae bf 91 a8 d9 67 f6 2f ee cf 62 fc 6a 75 c7 9d 59 c8 6a 5f 64 bf f5 75 fc 8b 1b 2c de c5 fd d9 ec 5f 8d 4e b8 f3 ab 39 0d 4f ec 97 fe aa bf 91 a8 d9 66 f6 2f ee cf 62 fc 6a 75 c7 9e 15 Data Ascii: DH]'@<\|0O$"y$. awIDH]'A5VbUU3M4$3m:4oD5rKQ?<,v=NGP->G?bZ[W_\|n<GQ-j69_N9Kg/bjuYj_du,_N9Of/bju
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: ee c8 8b 64 27 c6 bb e6 f8 49 21 b8 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 99 f9 8a be 2e f8 35 ed ca a3 3d 28 ab c0 2d 00 00 00 00 02 24 11 20 c5 5a 8d 6b a2 2f a7 73 ae f9 be 12 48 6e a2 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 31 66 be 62 af 8b bf 0b 03 5e d8 8c f4 ef 22 b2 40 2d 00 00 00 00 02 24 11 20 c5 5a a3 5a ea 8b e9 bc eb be 6f 85 24 86 ea 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 16 6b e6 2a f8 bb f0 b0 35 ad 88 d8 a4 56 48 41 68 00 00 00 00 11 20 89 06 2a d5 1a d7 41 6d 37 9d 77 cd Data Ascii: d'I!.5=(-$ Zk/sHn1fb^"@-$ ZZo$(k5VHAh Am7w
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 04 48 22 41 8a b5 46 b5 d0 5b 4d e7 5d f3 7c 24 90 de 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 de f4 3f 42 ea 7f 41 f8 8b 6d 53 8b d6 e4 7f bb a7 97 f2 cb c1 21 d8 7e 8b 54 ac 39 20 69 c9 08 6a 16 15 96 a1 a7 a0 fb 97 d4 aa b3 ae 66 f2 13 3f cb cd 59 db 88 fe 3b 53 b9 fb 2a 97 16 e2 bd 1a be 5f f9 56 0e f6 1a df c3 59 fe af 65 74 df 02 00 08 90 44 83 15 6a 8d 6b a0 b6 9b ce bb e6 f8 49 21 bc 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e5 7d e8 7e 85 d4 fe 83 f1 16 da a7 17 ad c8 ff 00 77 4f 2f e5 97 82 43 b0 fd 16 16 6a 1c b0 86 9b 84 35 0d 42 b2 d4 2b a5 f7 6d 98 aa cf 6d 34 ec 27 Data Ascii: H"AF[M]\|$Er?BAmS!~T9 ijf?Y;S*_VYetDjkI!}~wO/Cj5B+mm4'
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 94 f7 a7 fa 0f 53 fa 0f c4 5b 72 62 f5 9e bf 22 fd dd 3c bf 96 5e 03 0e d3 f4 7a a5 a8 72 42 d4 51 5d ca e9 b7 6e 99 aa ba e6 29 a2 98 dd 99 99 dc 88 86 9a 99 88 8d 67 83 df bd df f6 4e 8e cf e8 f4 c5 da 63 af e6 62 2b cd 55 dd 8e 0a 3c d7 47 2d fb d2 fc cf 9d 73 29 dd 65 e8 f5 2b c3 b5 d4 38 de 38 00 00 02 24 11 20 c5 5a a3 5a e8 2d a6 f3 ae f9 be 12 48 6f 22 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 4f 7a 7f a0 f5 3f a0 fc 45 b7 26 2f 59 eb f2 2f dd d3 fe 5f 96 5e 01 0e db f4 7a ad dc 6a 1c b0 f4 ff 00 75 1d 89 e9 2b a3 b4 1a 85 13 b1 47 fb 0b 55 46 fc fa d9 ff 00 e2 e0 cd 93 c1 0f 91 fe 47 cd b4 Data Ascii: S[rb"<^zrBQ]n)gNcb+U<G-s)e+88$ ZZ-Ho"9Oz?E&/Y/_^zju+GUFG
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 59 af 98 ab e2 ef c2 c0 d6 b4 23 62 8d e1 59 21 05 a0 00 00 00 00 44 82 24 18 ab 54 6b 5d 05 b4 de 75 df 37 c2 49 0d e4 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 2c d7 cc 55 f1 77 e1 60 6b 5a 11 b1 46 f0 ac 90 82 d0 00 00 00 00 22 41 12 0c 55 aa 35 ae 82 da 6f 3a ef 9b e1 24 86 f2 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 16 6b e6 2a f8 bb f0 b0 35 ad 08 d8 a3 78 56 48 41 68 00 00 00 00 11 20 89 06 2a d5 1a d7 41 7d 37 9d 77 cd f0 92 43 75 14 00 00 00 00 00 Data Ascii: Y#bY!D$Tk]u7IP,Uw`kZF"AU5o:$(k5xVHAh A}7wCu
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 65 7d 5d de 4a 7d 23 40 f6 f6 57 d5 dd e4 a7 d2 34 0f 6f 65 7d 5d de 4a 7d 23 40 f6 f6 57 d5 dd e4 a7 d2 34 0f 6f 65 7d 5d de 4a 7d 23 40 f6 f6 57 d5 dd e4 a7 d2 34 0f 6f 65 7d 5d de 4a 7d 23 41 3e dd ca fa bb bc 94 fa 46 82 63 5b cb 4f f4 ee 72 53 e9 1a 0c 94 ea b6 2a de a2 be 48 f9 4d 05 ab cd 5b bb 44 d3 4c 55 13 38 6f e1 c3 f0 9a 05 b8 11 9a 91 57 84 12 00 00 00 00 00 80 52 a8 06 3a e9 54 6b dc b7 8a 8d 7a ec c0 31 4e 5e 0d 45 7a b9 a8 8e af f0 9a 8d 0d 73 4a b9 9b d2 ef 5b b3 8f 59 a3 0b b9 7c 37 7f 99 6e 76 a9 e5 c3 06 a9 6d 25 d9 d9 e5 8a 64 89 9f 57 84 f8 a5 9f 4e bb 6b 3d 91 b1 9b b5 cc bd 44 55 f0 4f 76 3e 29 dc 2d 1a 4e 8e 3c f8 a7 1d e6 93 e0 6c 75 68 e3 67 57 11 d5 a3 8c d4 3a b4 71 9a 87 56 8e 33 50 ea d1 c6 6a 1d 5a 38 cd 43 ab 47 19 a8 75 Data Ascii: e}]J}#@W4oe}]J}#@W4oe}]J}#@W4oe}]J}#A>Fc[OrS*HM[DLU8oWR:Tkz1N^EzsJ[Y\|7nvm%dWNk=DUOv>)-N<luhgW:qV3PjZ8CGu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49853	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	624	OUT	GET /wp-content/themes/tgtheme/img/code1.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/apps Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:56 UTC	782	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/png Content-Length: 9343 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-247f" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PyADXjMYHYB4k1aUykRBs632QcuE%2B%2F5vhlCEevPZZVMF%2FpJlv5cSR5eNzz8N6xKEXBNN321J7tg%2F8RqzdpN87cK2%2FE7l%2FuWiKHqzDUCkrkuFluuMC8JxUu8fR%2BwdbybxJoSXAM4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d38bb42c457-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:56 UTC	587	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b8 00 00 00 b8 08 02 00 00 00 df 51 b1 90 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRQtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 32 34 34 46 42 41 31 31 45 45 42 43 38 30 38 34 43 44 34 36 34 44 32 45 42 42 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 44 34 41 43 34 32 35 34 46 42 41 31 31 45 45 42 43 38 30 38 34 43 44 34 36 34 44 32 45 42 42 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 44 34 41 43 34 32 32 34 46 42 41 31 31 45 45 42 43 38 30 38 34 43 44 34 36 34 44 32 45 42 42 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 44 34 41 43 34 32 33 34 46 42 41 31 31 45 45 42 43 38 30 38 34 43 44 34 36 34 44 32 45 42 42 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a Data Ascii: 244FBA11EEBC8084CD464D2EBB" xmpMM:DocumentID="xmp.did:8D4AC4254FBA11EEBC8084CD464D2EBB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8D4AC4224FBA11EEBC8084CD464D2EBB" stRef:documentID="xmp.did:8D4AC4234FBA11EEBC8084CD464D2EBB"/> </rdf:Description> </rdf:
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 91 7c d5 be 7d 7b bf d3 f7 fa f5 eb 5c ac 9b 9a 9a 14 25 9f 28 b2 42 1e ea eb eb e5 07 60 c0 ea 49 4e 4e 3e 77 ee 9c 4a 14 fe e0 c1 83 ad 98 0c d8 b4 ab 56 ad 3a 7f fe 3c 55 7e f0 e0 c1 b4 b4 34 8a 81 ae 5e bd 7a f8 f0 61 f6 18 28 36 36 36 31 31 51 7b 7a e7 72 b9 d0 e6 d1 a3 47 55 c6 16 19 19 39 6a d4 28 ac 31 2d c7 63 c0 49 49 49 8a 58 f7 eb d7 6f e8 d0 a1 2a 51 f8 3d 7b f6 54 0d bc e5 46 e1 a3 69 e2 95 f2 0d c8 b7 6c b3 c7 8f 1f 57 8c c2 c7 dc c7 c5 c5 b1 2d a4 a6 a6 62 d9 51 c3 28 2c 2c e4 76 37 6b d6 2c 20 48 55 36 94 7d 6f e4 c8 91 68 81 4b 34 8a 6e 18 15 5b 53 27 0a 7f e5 ca 95 dc e9 60 b1 63 69 ae 0f ec 30 44 51 f8 6e 43 f2 dc 67 71 62 b5 c2 18 15 15 75 fa f4 69 aa 3c 22 22 c2 ed a6 11 64 4b 3c f2 83 55 3c 7d c3 57 eb 46 e3 12 cd 94 fb 63 68 59 84 Data Ascii: \|}{\%(B`INN>wJV:<U~4^za(66611Q{zrGU9j(1-cIIIXo*Q={TFilW-bQ(,,v7k, HU6}ohK4n[S'`ci0DQnCgqbui<""dK<U<}WFchY
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 1f 1a 2b ea 53 a9 f7 51 a2 93 cd 80 6d 41 44 37 72 cd d8 ea a5 8b 01 5f b9 72 85 1f 85 bf 62 c5 0a 19 76 23 2f 02 ca 77 3c 79 f2 64 2a 07 3c 18 22 3e 3e 9e ed 2b 2e 2e 6e d5 aa 55 20 04 f5 e4 41 7e 7e 3e 79 5a 4e 5b 39 3a 3a 7a d3 a6 4d f8 57 5b 18 16 16 b6 74 e9 d2 9a 9a 1a ed f4 83 1b b6 6d db 36 64 c8 10 ed cc 91 1f ef bd f7 1e 1b 5c fd d8 63 8f 8d 1d 3b 56 bb 9e 30 e0 c8 c8 48 f9 3c e9 5f 7f fd 35 9a d5 6e 6a e4 e1 86 27 9e 78 e2 d6 5b 6f d5 86 40 00 29 ee 8b 09 18 ed df ff fe 77 6d 52 6b fc 8b 69 03 7d 72 73 73 2d 65 14 cf 02 46 2f f7 dd 77 df f0 e1 c3 e9 ee 54 0c 74 fc 8b 69 e3 76 f9 d6 5b 6f 29 9e 6b 8f 1f 3f 9e 6d b6 4b 97 2e 67 ce 9c 91 6c e1 85 17 5e e0 8e 4d fe 91 3f 51 f2 84 01 03 06 c8 53 1f 0c 24 13 e7 a0 03 fd fa f5 b3 53 31 78 f7 dd 77 f5 Data Ascii: +SQmAD7r_rbv#/w<yd*<">>+..nU A~~>yZN[9::zMW[tm6d\c;V0H<_5nj'x[o@)wmRki}rss-eF/wTtiv[o)k?mK.gl^M?QS$S1xw
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 91 1b 58 1f d2 f2 fa 16 54 57 cf f8 48 bf e5 e5 e5 5b b6 6c d1 5a 7a 60 9d fd fb f7 f7 e8 d1 43 c6 c0 46 65 98 a6 c0 45 92 b8 68 b9 a2 a2 c2 93 fa 80 60 01 be 1c 3d 7a 34 75 ed 03 43 fa ec b3 cf 3c e9 f0 48 7d 60 f7 cd 37 df a8 eb a7 6c 2a 43 11 76 0d 0d 0d b0 01 d9 d4 a3 19 19 19 ec 7b 90 54 35 f2 bf c0 f7 c0 81 03 14 03 34 36 36 c2 fe 8f 8d 8d a5 d8 85 b3 f5 54 56 56 c2 12 66 8f d9 26 4f 9e bc 61 c3 06 af c7 6f e8 18 38 8c 1a 35 6a c5 8a 15 92 04 5a b3 66 4d 5a 5a 9a 87 ab 48 1c 09 cc e3 cc cc 4c 96 a5 f6 ee dd 0b 6a 7a 5d 7c c0 f6 c5 17 5f fc db df fe 26 39 06 18 b7 e0 4b aa 10 14 3f 72 e4 08 35 79 b0 6e 60 dc 16 15 15 99 2e bd c6 8c 19 03 6e 93 91 61 c0 2e 27 27 87 7b 8f ff f3 cf 3f f7 7a 1a 4f 78 05 35 27 4d 9a c4 fe 75 d9 b2 65 d3 a6 4d a3 9c 31 6e Data Ascii: XTWH[lZz`CFeEh`=z4uC<H}`7l*Cv{T5466TVVf&Oao85jZfMZZHLjz]\|_&9K?r5yn`.na.''{?zOx5'MueM1n
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 1d 5c b8 70 c1 a2 ee 44 ab 93 bb bc 2c ca 1f 23 ea ce 3a d5 47 94 5b 90 a5 bc 4b bb e9 ea 4b 2d 43 f9 e9 7c db 35 a9 85 ab d8 9d 0d 96 45 ab 04 76 21 29 3d 3e 19 84 36 05 86 ad 1e 15 b5 37 18 b5 1f 40 40 29 a3 ae 40 1c 77 10 ec 07 97 96 6b 88 a8 80 f9 c7 3d e8 21 85 94 38 11 e9 de 5c 65 c2 68 68 7e 88 41 ef a1 7f c1 a2 2c 7b a6 e8 4f 75 75 75 8a ed 70 b6 1e 18 d6 f3 7e 3f af a9 b9 89 5a d0 6c fe 6e 40 62 62 e2 a3 8f 3e ca 2c ff 90 94 94 14 b6 72 7a 7a 3a a7 b2 40 7e 8c 1c 39 d2 4e fa de 76 db 6d 19 19 19 5a 8d 1e 26 74 51 51 d1 b6 6d db 24 5b 00 7d 28 1b 10 b4 86 81 bd 61 c3 06 56 31 67 bb 33 b6 be 5d ae 2f bf fc f2 ab af be 12 89 5e 2a ee 69 e2 84 89 fd fb f7 a7 c6 76 e2 c4 89 ed db b7 1b 10 e9 a6 a7 bd b3 0e 4c 49 f6 c7 85 79 f3 e6 b1 dd 89 e8 98 97 97 Data Ascii: \pD,#:G[KK-C\|5Ev!)=>67@@)@wk=!8\ehh~A,{Ouuup~?Zln@bb>,rzz:@~9NvmZ&tQQm$[}(aV1g3]/^*ivLIy
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: f7 a2 40 8b c5 8b 17 2f 5d ba 94 aa 7c fb ed b7 ef db b7 4f 14 a9 44 f9 e0 17 2c 58 b0 67 cf 1e 49 ec 16 2e 5c 38 6e dc 38 af 0a 13 5a 2e 2e 2e 9e 3a 75 aa 7c 60 83 99 8c e2 10 8d 52 9f 99 06 0c 18 30 7c f8 70 aa 70 c7 8e 1d dc ca 43 5a 80 2a bc e9 a6 9b e4 cf 8a af b5 00 eb 3e 48 4b 4b 93 6c 81 7a ae 53 1f 92 92 92 58 ec b8 10 13 13 63 51 7e 5e 97 df 39 c0 eb a1 06 11 39 fa 75 a8 35 44 2a 8b 3c b0 5c 86 50 bf 83 68 e8 74 c6 50 50 98 bc 84 b0 2e 99 8f 3f 25 8a cf 57 61 cd 65 56 f5 fb 38 f2 82 d0 ac ee 44 87 af 92 9c ea 83 de e9 b2 d9 91 c0 36 a8 3f 62 a3 29 ea 8d 72 95 a1 53 7b 43 d8 71 75 2f c5 ee 44 5f 19 d5 f3 7c 60 53 b7 5f ec 1d d3 5b b6 33 b0 de 8f a2 57 74 cc eb 15 65 99 38 26 df 25 8a 75 84 a6 52 2a c8 8f 41 a4 76 70 1b 11 3e 3d c3 53 f7 d4 33 86 Data Ascii: @/]\|OD,XgI.\8n8Z...:u\|`R0\|ppCZ>HKKlzSXcQ~^99u5D<\PhtPP.?%WaeV8D6?b)rS{Cqu/D_\|`S_[3Wte8&%uR*Avp>=S3
2024-07-04 22:39:56 UTC	542	IN	Data Raw: 86 f5 e0 f5 10 51 89 51 08 c2 98 39 6c 25 c4 a2 01 d3 60 f5 43 c0 50 8f 06 81 93 c0 16 a8 43 84 04 a4 08 4a 20 63 c8 ac 7b ac 24 b2 ef 90 1d cd 93 b5 17 40 38 06 3c 14 1f 1f ff b3 9f fd ac 75 98 91 fa d1 05 81 6b 54 73 b6 1e f0 44 4d 4d 0d 26 0f 3f b0 dc c1 0a e0 00 b2 fa 31 bb 98 72 82 2a 04 06 ca 3d ca 47 48 cb 1b 34 f8 01 b1 81 0f c1 0d f8 04 7b 0d 3e 41 a1 c7 09 4d b4 1f 52 93 e8 c5 68 e7 a3 8f 3e e2 3e 66 d5 ba 81 12 2d 66 31 10 57 8d 53 6f 9c c3 28 50 41 48 d2 70 e2 00 20 de 08 4c a7 c7 66 23 89 e4 31 f7 e4 c8 e3 27 8a 6a 68 28 8c 23 fc 2f 3e 01 1b a1 82 f6 43 62 cd 12 45 18 95 c9 46 86 0a dc c7 d4 02 0e 88 ca 2f a9 91 dc d8 ca 35 77 41 4c 74 f2 42 f0 63 6d 53 07 c5 ea 21 92 7c 65 36 3b 3b 1b 7a 83 64 18 29 ab f3 cb 3c b7 ad f5 13 a8 c7 ab fe e6 37 Data Ascii: QQ9l%`CPCJ c{$@8<ukTsDMM&?1r*=GH4{>AMRh>>f-f1WSo(PAHp Lf#1'jh(#/>CbEF/5wALtBcmS!\|e6;;zd)<7

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49852	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	628	OUT	GET /wp-content/themes/tgtheme/img/yuandaima.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/apps Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:56 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/png Content-Length: 5568 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-15c0" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N1y2UB1QXSWG7IyrHVUNa%2BWWjd6xuETQOIwtNcri5UCElgEUebQql%2FgswuUiSLz4SWkOYR1ndAwtZHRwKi9H0U%2BDkUbvRUB6jyy6G0IkhipEdN1rVjjZtC5wTIP442bPV8YrMGM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d38db109e04-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:56 UTC	595	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 05 00 00 00 42 08 06 00 00 00 5e bc c3 f1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRB^tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 45 45 38 41 32 32 45 43 38 41 32 37 43 44 46 37 32 42 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 46 44 44 35 33 42 34 46 42 45 31 31 45 45 38 41 32 32 45 43 38 41 32 37 43 44 46 37 32 42 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 32 46 44 44 35 33 38 34 46 42 45 31 31 45 45 38 41 32 32 45 43 38 41 32 37 43 44 46 37 32 42 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 46 44 44 35 33 39 34 46 42 45 31 31 45 45 38 41 32 32 45 43 38 41 32 37 43 44 46 37 32 42 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 Data Ascii: EE8A22EC8A27CDF72B" xmpMM:DocumentID="xmp.did:12FDD53B4FBE11EE8A22EC8A27CDF72B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12FDD5384FBE11EE8A22EC8A27CDF72B" stRef:documentID="xmp.did:12FDD5394FBE11EE8A22EC8A27CDF72B"/> </rdf:Description> </rdf:RDF> </x
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 63 18 c0 a1 c4 5e cd ea b4 77 1f c0 c9 51 19 fa c0 51 5e 73 65 9e f2 1a 77 09 74 ce 3e 8c 3a cb 71 a0 70 a5 03 03 38 4d 2b ad 34 05 02 04 a0 6f fb 35 41 a1 c8 00 85 58 2b bd 21 96 60 5a 5c 28 11 21 6e 4b 72 e5 cb 14 61 ec 7b 0d d4 57 94 a4 ef 26 04 d8 92 0f 1f 07 0a 8e 29 ac 48 c1 87 96 80 ce 8f 33 8e 3b ab 26 b8 b4 77 1f 28 27 1e c4 e1 84 ae 03 b3 f2 14 59 d8 26 50 dd 7a c5 8f 58 17 5a 90 2d 38 71 a0 60 4c 42 3a 9c c3 bb 11 f0 c2 91 7c 8c 6d 33 d3 4c 61 c4 e0 59 89 a2 60 ec 71 da 18 d7 05 05 d1 8b 6a 44 2f 1e 46 73 c4 3a c1 e9 98 82 0b 1f 8c 4a 1f c5 0c c6 08 a3 6b ca e9 46 00 24 93 af 5a c7 e0 c2 72 9c fe 98 f5 e5 bd e6 9d 13 70 ef 55 70 a0 60 5d 44 67 f7 af 24 03 2c 70 98 42 5c 39 88 3f 4e 5c f8 b0 f2 64 d3 8f df 61 5e df 72 68 28 cb 01 85 82 00 14 8a Data Ascii: c^wQQ^sewt>:qp8M+4o5AX+!`Z\(!nKra{W&)H3;&w('Y&PzXZ-8q`LB:\|m3LaY`qjD/Fs:JkF$ZrpUp`]Dg$,pB\9?N\da^rh(
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 3a a4 d8 b3 77 ee 99 20 57 d9 a5 ec 35 e3 70 f0 e8 fc ce 87 0a 61 d8 d1 f9 fa f3 42 47 81 fb e8 dc c2 c2 b6 9d 53 70 2e 22 89 9d 07 96 fc e7 fe 6f 1c 5d 37 b1 a1 44 ee 86 d0 02 00 49 f7 dd 96 84 67 44 a4 01 01 b1 1d f2 24 a9 13 be f8 a2 47 4f 3f 8a 82 cf c5 1f 60 fd 56 cf 13 4c bf d9 37 7f f3 67 a6 e8 a3 bc b0 f5 08 3b 11 e0 3c 51 39 8a 4d 3f 7d 6c 94 05 06 4b eb 6f 98 d6 35 dc cc a5 63 ce 5f a7 af c7 59 8d 79 f5 77 bf f5 d2 0e 12 1c 80 96 cf 7d fc fe 97 59 c7 9b 6d 49 cf a5 e3 e1 91 b9 0e d0 eb fc b6 4f 9e 88 00 ab 03 ee d9 07 02 14 78 3f 6c 3c 52 84 78 b9 0d ec 1d 7f b3 e4 22 30 5a 60 bc 1f 7c ad 6f 49 b5 71 d4 c6 ea 30 44 66 84 32 b5 b0 7e 54 f7 9c 42 9d d0 d7 8d 2c 66 8b ea 99 91 b8 bf ee ff e8 d3 c1 f8 f9 03 f0 01 d6 6d 02 1d b1 24 1c 9b 47 7c eb 86 Data Ascii: :w W5paBGSp."o]7DIgD$GO?`VL7g;<Q9M?}lKo5c_Yyw}YmIOx?l<Rx"0Z`\|oIq0Df2~TB,fm$G\|
2024-07-04 22:39:56 UTC	866	IN	Data Raw: 28 48 6a 0e 53 0c 1a 58 c6 ab 96 68 1f 9d de 8e e9 10 50 1e d6 19 6e 9d c9 60 ed 35 cb 96 d5 6d 2b 10 4c bc ea 39 73 08 17 64 f6 e0 ad 3f 6f a0 39 0e dd be d8 1e 9f 69 3b f4 14 ec d0 f3 ec 6e 91 d7 6c cc 61 9a 13 1f 42 c5 65 e4 ec 3e 66 0d 51 6f 68 82 87 58 d2 8c 6c ae 49 2a ea 0b 94 d0 92 e1 83 44 8e 21 83 99 42 10 e1 a8 35 c9 24 93 8d f0 21 b0 fc 64 5e 12 e3 6b 96 1d 9a 0a 1f da 14 ed 5c 7a 0e 45 cf 3e f0 92 47 f5 6d 2f 64 bc 4b 18 1c da 22 3a 5e 61 20 96 a9 c9 e6 25 a4 6c c4 a3 4c 34 17 38 6f c0 d1 5f 78 96 dd e7 e8 0f ae 43 72 77 41 62 f5 4e 8a ca 27 1d 52 d8 1e 5f 33 ed d0 94 fe 74 6d 5f f9 f0 52 a4 80 33 60 9a bb 20 a0 27 3e 36 fe 28 1a e3 51 e5 54 fa 1a 49 db b0 e3 da a0 6b 35 c5 f2 01 43 7f 15 8e de da 63 50 7a 4f f3 60 99 2d aa 6b 2a 64 31 35 be Data Ascii: (HjSXhPn`5m+L9sd?o9i;nlaBe>fQohXlID!B5$!d^k\zE>Gm/dK":^a %lL48o_xCrwAbN'R_3tm_R3` '>6(QTIk5CcPzO`-kd15

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49856	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	622	OUT	GET /wp-content/themes/tgtheme/img/fei.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/apps Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:56 UTC	770	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/png Content-Length: 6465 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-1941" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=R2xR3lpRiE7LhaM5g903cKhp9L8t6gtmcwZkEE%2B4wnqLfa8vZyMDBfOWgycgJm7PikDnojx2ilC44xB6dP2D5PlWIzQlRGa37kLw3sjoyIqZP8WFNouc5PyUE0hZ47D481AfGr0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d393f2342eb-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:56 UTC	599	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e2 00 00 00 43 08 06 00 00 00 40 de 06 5c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRC@\tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 32 36 44 43 39 44 33 36 38 31 44 30 34 45 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 45 37 41 45 38 33 44 34 46 43 34 31 31 45 45 42 38 32 36 44 43 39 44 33 36 38 31 44 30 34 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 45 37 41 45 38 33 41 34 46 43 34 31 31 45 45 42 38 32 36 44 43 39 44 33 36 38 31 44 30 34 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 45 37 41 45 38 33 42 34 46 43 34 31 31 45 45 42 38 32 36 44 43 39 44 33 36 38 31 44 30 34 45 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 Data Ascii: 26DC9D3681D04E" xmpMM:DocumentID="xmp.did:CE7AE83D4FC411EEB826DC9D3681D04E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CE7AE83A4FC411EEB826DC9D3681D04E" stRef:documentID="xmp.did:CE7AE83B4FC411EEB826DC9D3681D04E"/> </rdf:Description> </rdf:RDF> </x:xmp
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: f9 71 4d 4b cf 95 90 74 87 a8 e1 64 a0 b6 a9 38 08 0b 80 a3 34 cf 96 68 de 8f 8e 4b a2 60 ea 54 9d 22 04 8c d7 7b 62 44 8c 40 44 0d 1f 11 94 4c 6a ba 25 88 8a 7b 00 49 52 c3 dc 2c 10 b1 0c 41 75 04 84 2f 42 b4 d1 32 23 28 d1 db 94 28 59 d1 f7 33 9f 2f e8 2c ba 71 c6 52 fd 4f 02 19 8e f7 a3 63 89 28 f8 04 92 30 46 c4 08 0b 20 13 49 6a 67 67 c8 9b b5 2a 0e 88 00 7b bc 17 0a 94 90 81 cb 57 56 f2 de 39 dc 4c 72 ef 1b a6 e9 69 1a fc 72 a2 a9 b9 61 e4 cc 48 88 47 58 5d 89 b4 74 cc 69 eb d3 92 e5 86 9b fe 62 38 a2 d5 2f 71 be da 82 b5 f2 79 41 9d 18 05 23 11 23 10 95 c2 ac 41 14 6b 6c 70 65 23 69 ba eb 9a ed 68 6f 72 08 68 b1 40 d8 45 99 5a b9 f4 34 94 be 95 49 4b b7 80 a8 3c c8 cd 5a 0a d1 30 af cf 69 24 29 dc c9 0f 5c 7d aa 7b ce ba a9 33 2e d8 7b 93 bb cc c9 Data Ascii: qMKtd84hK`T"{bD@DLj%{IR,Au/B2#((Y3/,qROc(0F Ijgg*{WV9LriraHGX]tib8/qyA##Aklpe#ihorh@EZ4IK<Z0i$)\}{3.{
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 6a e0 f5 9a 11 5d 39 79 5a 60 fc 6d dc 4f ad 42 c4 95 3a 76 c3 ce 73 b7 39 c4 ba 64 51 27 60 74 8d 40 22 46 20 a2 00 3d 13 7c e3 89 af 8f 18 2a 9a 8e a6 24 2c b3 93 7b 70 f7 43 ca d1 06 7d a6 28 1a 66 86 ba a7 69 a8 7d 92 09 4d b1 2e 3a 34 fe b2 b2 2e 01 57 47 c6 4e c6 f4 92 91 76 8e 5c 57 25 e4 50 89 88 69 59 4c 3b 8f 11 70 8d 18 e1 0c 21 8f 2f 5d 7b f4 b3 ff 98 b8 fe 4e 6f e6 d5 57 76 d6 5c 07 c7 1e 5a bd fc f9 6f 75 45 91 f0 1d 44 7c e4 c1 b7 26 ff f3 b7 87 45 65 28 b1 6f 3e f0 c9 bf d3 ff ab 6c 78 63 29 c5 36 7b c9 fb 5c 92 bb 92 52 f5 7d c8 0e c9 e4 4c ee 55 7c 43 dd 2f 5a aa bb 0f bc 43 79 27 ea 4e 0a d7 74 56 15 b4 2f d9 ad 75 32 24 5b e6 f8 ad 30 47 a8 5f 45 e7 04 81 44 8c d8 a5 a0 e4 78 74 73 6d 26 db b3 6f 5d 75 67 f8 4e 79 c7 bb c9 e9 d5 8b 0a Data Ascii: j]9yZ`mOB:vs9dQ'`t@"F =\|*$,{pC}(fi}M.:4.WGNv\W%PiYL;p!/]{NoWv\ZouED\|&Ee(o>lxc)6{\R}LU\|C/ZCy'NtV/u2$[0G_EDxtsm&o]ugNy
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 49 95 f1 26 d3 70 63 06 a7 1d d3 2c e5 a3 dd 99 39 6f a7 38 99 e8 6d 2b 03 8d 81 b8 05 90 7a 43 d2 70 db 26 ce cc f5 a4 62 3a ac 15 ca 0e ff 6f 3b e5 c6 1b 53 b2 32 4e 72 e4 d9 cc 4d c6 41 c1 9b 4d 15 d3 75 b6 1d 2b 1d 4c 72 f4 53 94 91 47 58 93 06 63 a2 6c cc d6 00 c2 1a 58 ea df 1a 30 8f 06 8e e7 08 e4 60 c8 cc 0f 2d c2 30 18 0b 19 30 16 4c c6 bb a9 f3 ae e2 d0 a6 02 db 3d c2 31 16 6c 77 fe d3 50 b1 b7 74 0d 3f e7 f0 ca f2 15 d7 91 8c 69 8d 78 58 7e 0d f8 fb 5e 85 ba 78 68 00 65 75 09 64 1b a8 af 61 41 3f b1 a6 a6 a1 a5 0c 9a 76 b3 4d 44 26 32 f2 d6 cb 06 9c 14 d5 c8 d9 42 32 81 6a 01 f4 af 83 18 65 9c 54 88 74 63 ac bf 4a f3 c3 e7 58 70 35 07 64 eb 08 69 bb bd f0 55 74 c7 97 68 ea 80 0c 0e 9a c6 29 86 f7 74 d0 ec e1 6c 76 80 d2 52 89 e4 df 33 c3 ce 94 Data Ascii: I&pc,9o8m+zCp&b:o;S2NrMAMu+LrSGXclX0`-00L=1lwPt?ixX~^xheudaA?vMD&2B2jeTtcJXp5diUth)tlvR3
2024-07-04 22:39:56 UTC	390	IN	Data Raw: 2d 63 2d 90 8c 55 aa bf ea f3 c3 85 6e 42 d4 11 c2 76 7b e1 ab 7a 6e f0 40 64 5c 63 03 e2 0e cf 42 44 c2 89 dc 5b 54 94 05 2b 69 a7 54 3d b9 75 1c b0 43 8b 13 45 42 de ac 64 23 c6 38 bd 06 71 a8 43 d1 67 38 66 6a 80 71 19 1a 18 91 07 2e d5 26 36 2e a1 3e 91 f5 5e 33 c1 78 08 4e c4 8e 65 cc 02 c9 38 96 44 ec 7a 7e e4 fa ca e7 78 8f 82 88 03 d9 6e 2f 7c 35 91 17 b2 a4 13 6a 9c ef 33 81 c2 9c a4 8d 24 da 69 a5 0e c0 6b d5 3d ea 31 4e a9 e9 7c 0a 4e 76 0f 81 4b 9d d5 2c e9 23 53 a8 3f 53 94 75 e4 59 8a e9 c9 68 64 8c 78 0c 27 0e fb 28 a6 f9 11 62 2c b8 ea 43 9d 94 af 6f db ed 85 af ea 00 f3 6b 2b d6 e0 2d 23 36 d7 16 64 bc 15 2b db ef 69 3d 96 d6 44 2b 05 2a b3 2d 1d 46 62 e8 b3 0a 76 c3 6e 90 b1 8a 7a 0e 31 3f 62 3d 03 ec c2 f6 c4 60 bb ad f1 d5 7f bf f6 91 Data Ascii: -c-UnBv{zn@d\cBD[T+iT=uCEBd#8qCg8fjq.&6.>^3xNe8Dz~xn/\|5j3$ik=1N\|NvK,#S?SuYhdx'(b,Cok+-#6d+i=D+*-Fbvnz1?b=`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49857	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	384	OUT	GET /wp-content/themes/tgtheme/img/yingyong.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:56 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/png Content-Length: 8893 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-22bd" expires: Thu, 01 Aug 2024 22:39:42 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172814 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hEoYJ4%2FmlHifr3Mn%2BYGlO%2FzEZ88Q6llUX5ziZikw8LtK4I6hiAK1A20nBGmjcIK5LfHMyplZQiPIm7ohg01NcEfbIkKydvfecsFfuCzltj8IETP%2FM1cTjdOv%2BYKDzWJf54c3HTE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d3999fbc34e-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:56 UTC	591	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 b0 00 00 00 3d 08 06 00 00 00 55 f5 5a 99 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR=UZtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 42 36 31 31 45 45 38 31 30 36 45 43 38 34 39 39 41 39 43 35 34 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 41 42 46 30 35 43 34 34 46 42 36 31 31 45 45 38 31 30 36 45 43 38 34 39 39 41 39 43 35 34 39 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 30 41 42 46 30 35 43 31 34 46 42 36 31 31 45 45 38 31 30 36 45 43 38 34 39 39 41 39 43 35 34 39 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 30 41 42 46 30 35 43 32 34 46 42 36 31 31 45 45 38 31 30 36 45 43 38 34 39 39 41 39 43 35 34 39 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e Data Ascii: B611EE8106EC8499A9C549" xmpMM:DocumentID="xmp.did:0ABF05C44FB611EE8106EC8499A9C549"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:0ABF05C14FB611EE8106EC8499A9C549" stRef:documentID="xmp.did:0ABF05C24FB611EE8106EC8499A9C549"/> </rdf:Description> </rdf:RDF>
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 0d fc 7b 18 21 ff 49 d3 2b 20 02 0c 11 58 de 85 11 51 f2 79 cf ae 12 41 ee 4d 3f 17 37 c6 cf 74 5c 42 91 16 20 22 5e 8e 20 ae 10 d9 1d d3 31 f9 63 51 61 b0 bd ed e1 0d 94 bc 53 59 60 52 13 71 b5 b2 7f 1d f4 10 fb be 65 45 1c 8b 45 20 10 08 04 22 b0 79 23 81 65 01 d1 99 cc 6b f4 95 d5 7b 97 80 40 54 14 e4 94 91 b6 4f 86 48 21 8f 60 0d 40 0a 46 d2 88 67 20 55 61 58 56 be e0 e4 84 4c 09 ec 4a 07 23 7a a3 86 ed 7b d0 7a fb 4a 66 1f 3b 38 e5 0e 20 93 aa 0a 22 77 88 ec 82 40 20 10 56 30 81 95 8d 22 e5 65 b3 45 82 fa 8a 36 c6 8c 0b ca 8b b3 1b 7b 73 d2 db ab 18 69 1b 89 28 7b 54 81 78 cb 44 5f 7d 82 89 45 de 86 ad 78 9b 7b 78 c4 73 58 41 3e 8f 8c 54 35 1d ed 45 c8 16 c3 1c 1b 87 bc d3 dd 21 1f aa 70 6c 52 74 93 db 90 aa af 13 08 04 02 a1 89 08 6c 0b 41 14 8d c9 Data Ascii: {!I+ XQyAM?7t\B "^ 1cQaSY`RqeEE "y#ek{@TOH!`@Fg UaXVLJ#z{zJf;8 "w@ V0"eE6{si({TxD_}Ex{xsXA>T5E!plRtlA
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: d8 d4 e8 bd 76 aa 9c 0b 1c 81 9d 56 63 6e ed 2e bf 6c 96 62 c0 8b be 46 45 78 07 11 d2 19 86 cc 49 03 fe 09 16 50 57 38 13 d9 f6 5e db 10 52 2d 75 dd b2 8e 93 35 08 04 02 61 a5 83 72 60 b3 24 b1 57 7d 6a df aa f1 af fd 01 ef 33 58 ba 5e fd 1f 77 dd d2 fe eb bf bf f7 f8 fb 7e 2b 17 4b d5 90 4a 50 7a f1 91 32 a4 0d f0 48 de c0 c4 0f ca f0 9d f0 67 a2 25 fe 13 d7 7c b6 22 db be 81 e5 cd 6a 5c a2 dc f3 7f 8f 6c 99 3b eb fc c7 92 b6 71 e1 9d 97 3d 57 fa e5 78 64 4a c4 f1 cb 6e 68 e5 ab 63 81 c0 0d b3 4d 77 40 dc c6 4d 9c 85 cb ae 12 06 f9 e1 d3 0d 80 40 6f b7 96 37 55 0d 70 48 62 14 81 96 22 b0 70 bc 9a 57 0e ef 96 36 d8 4c 05 44 dd bf 7c 63 4d 04 c9 f5 21 7b 79 01 36 d9 db 19 b1 91 8d 6e e2 22 10 08 44 60 09 29 10 d8 0b ae ac 76 be 3e f4 18 46 98 96 f2 2f 1f Data Ascii: vVcn.lbFExIPW8^R-u5ar`$W}j3X^w~+KJPz2Hg%\|"j\l;q=WxdJnhcMw@M@o7UpHb"pW6LD\|cM!{y6n"D`)v>F/
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 8c 01 9a f5 ea eb b2 d7 6a 5c 91 f7 39 82 e3 c9 3e c5 ef fa f0 1b cc 37 dc ff 32 66 ab 8b 07 6e dd 74 78 a9 bf b4 6d 99 3a 82 8c f5 9c 8f 8e 51 0a 41 ca f0 1e 46 11 48 14 23 68 fd ec 25 ea 90 ba fc ef c1 6f d8 c3 d4 81 42 48 6e 77 02 59 51 57 c4 76 19 50 65 67 4c 5d 94 5a d1 ee 9c 9e b5 f7 18 10 1b de d8 14 19 25 74 db 3b 8f 69 28 b7 ea 91 cc df 98 bb f8 fa cb ea 6b de f5 8c 5b ea b3 e0 c5 23 9d 4e 67 ff 03 40 fc 3a 0e bd f4 7e a7 d4 6f c3 f7 9c 55 9e eb 15 da 82 24 3c 59 b4 d1 eb 84 fd 3a 80 ec 25 22 1d 0f 3b dc 62 a3 ab b8 76 e1 38 23 af 89 7c c9 29 f5 3d 22 f5 c5 b6 76 ab b6 ee dd df f3 fe 35 00 83 a5 f7 ea 5c a1 6e 91 45 bf 15 46 91 f5 c3 a6 74 6d 5a be e9 f1 12 fa f9 b5 8c 5c f6 0b c8 6b b0 ad fd 2c 50 d1 6c b6 90 a6 5e fb 43 1c a4 20 e0 08 c0 57 36 Data Ascii: j\9>72fntxm:QAFH#h%oBHnwYQWvPegL]Z%t;i(k[#Ng@:~oU$<Y:%";bv8#\|)="v5\nEFtmZ\k,Pl^C W6
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 69 97 6c 5f 3b a7 7d 35 e6 fc 61 99 36 eb 58 92 3c 8f 1a e7 bd 4e c5 4e 2a 28 ab 4d e7 f3 26 5f 32 23 2f 65 3f 6a 15 5f 8a 6a 4f 0d f9 4d 47 ca 76 6d 22 1a d5 32 ba ce f0 59 2a cb 92 f0 f3 59 49 1f 9f 93 ed 13 0c db 82 a9 be 51 55 46 6f 20 78 13 7c cd 46 9d 9e c4 fa c9 a3 48 ff d6 b9 e1 fe 97 4b 31 ea 19 7c f9 a7 4b c4 ea 1b 88 c0 9a 1b 74 81 1c f5 20 32 21 62 b4 90 03 72 b4 98 b0 dd 1d 9c df cd b1 d9 14 4f 76 31 61 7b ea 1c 47 82 48 42 47 c4 b3 28 58 6f 2f 2b f9 af 79 13 93 16 f2 25 bd f2 32 f0 a3 56 f1 a5 a8 7a cd 09 06 9c 3c 0c ca 49 d0 6a ba 4e fb 59 2a cb 62 7d 74 57 ca 7e 6e da 16 32 27 b0 6c 6c ec 44 c6 52 a9 fd 23 81 e8 36 af 4c 55 02 cb 23 c2 dd 6c 22 a1 dc e6 42 1e 95 be 42 e4 75 62 51 44 95 8d 1d 86 eb 9f b4 cd 25 ce 6f 17 05 9d 66 87 86 68 cc Data Ascii: il_;}5a6X<NN(M&_2#/e?j_jOMGvm"2YYIQUFo x\|FHK1\|Kt 2!brOv1a{GHBG(Xo/+y%2Vz<IjNY*b}tW~n2'llDR#6LU#l"BBubQD%ofh
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 25 b5 97 c5 88 3b e0 b9 fa f2 7e 73 52 b6 00 16 31 2c 19 f4 bd f6 14 fb 2d 37 6d 5d 6b 94 af 73 5c 95 b5 bb 54 09 6c 0c bf ab 23 5c 29 ca 16 4c f5 8d b2 32 b0 7a db 9a cb 75 14 9e bf 1b ea 23 ea 70 13 17 27 18 05 63 79 5b e0 a8 af 5c a6 10 b8 49 ee c1 b5 cc 2f 7b c6 ad 1f b6 b3 10 35 1c 5e 67 cf f2 74 8a 09 ea 2f 33 70 94 58 d4 c8 55 70 7e 87 53 7f 47 81 68 fa 72 a2 06 5d b4 43 63 86 ef 60 9d 0a 4b 1f 08 3b 5c dd 90 6d 5b 26 9f 51 0b fb 52 16 7e b4 12 7d 29 c9 69 17 8b 12 3b 96 75 d9 b5 49 5f 2c b4 b8 ae 93 c8 37 9d 42 a0 ec e7 1a 08 6c 1a b6 60 ca 57 54 64 e8 f4 29 2c 25 c1 49 68 4b 8b 4c 97 e1 e7 0d a4 76 56 54 46 da 9b b8 74 ca cd b3 3c c7 4a 3f 02 e5 22 03 fa 2c 1b 5c 6d e6 84 6d 1c a3 04 43 89 3c 17 8e c9 e0 ee 18 8d 38 c3 8d 57 37 3b 62 09 46 a6 8d Data Ascii: %;~sR1,-7m]ks\Tl#\)L2zu#p'cy[\I/{5^gt/3pXUp~SGhr]Cc`K;\m[&QR~})i;uI_,7Bl`WTd),%IhKLvVTFt<J?",\mmC<8W7;bF
2024-07-04 22:39:56 UTC	88	IN	Data Raw: cf f3 60 0b a6 ec 3c 33 bd aa e8 0b c8 6a f8 15 33 28 90 38 85 80 a0 2f 4a 23 1b 91 51 89 32 26 aa 93 6a 5d 9a a1 2c d3 7a 23 90 1f b5 9a 2f b5 b2 bd 91 ae b3 f3 f3 56 f5 f1 3c e9 35 af e3 e8 ff 0b 30 00 03 e8 05 c0 0c 8d 69 49 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: `<3j3(8/J#Q2&j],z#/V<50iIIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49858	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	626	OUT	GET /wp-content/themes/tgtheme/img/loudong.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/apps Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:57 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/png Content-Length: 8437 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-20f5" expires: Thu, 01 Aug 2024 22:39:45 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172811 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0NOrSUDR1ptwvUSoKpk1phSwWoVrx1oFUhq%2FTSK02z5ucTWfe5LYZ7rwjmPctVYvDyGeHCgbgoRvQ1s%2ByaacP%2BttjHVmAj118Om3dfpYCaoAIKJDcGxiZqm%2BK1NR%2BCr05cLss88%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d3ced4532fa-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:57 UTC	591	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c1 00 00 00 42 08 06 00 00 00 2f e8 6d 2a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRB/m*tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 43 37 31 31 45 45 41 37 45 32 44 38 44 46 32 36 45 44 38 35 45 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 46 42 34 45 34 42 39 34 46 43 37 31 31 45 45 41 37 45 32 44 38 44 46 32 36 45 44 38 35 45 39 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 46 42 34 45 34 42 36 34 46 43 37 31 31 45 45 41 37 45 32 44 38 44 46 32 36 45 44 38 35 45 39 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 46 42 34 45 34 42 37 34 46 43 37 31 31 45 45 41 37 45 32 44 38 44 46 32 36 45 44 38 35 45 39 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e Data Ascii: C711EEA7E2D8DF26ED85E9" xmpMM:DocumentID="xmp.did:1FB4E4B94FC711EEA7E2D8DF26ED85E9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1FB4E4B64FC711EEA7E2D8DF26ED85E9" stRef:documentID="xmp.did:1FB4E4B74FC711EEA7E2D8DF26ED85E9"/> </rdf:Description> </rdf:RDF>
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 93 39 31 ab 72 82 01 e1 18 a1 54 0f a3 42 97 01 dd 38 ee b3 a5 49 51 e2 0b 00 60 8d e8 df 18 7a 85 b9 7a 03 71 80 8f 02 42 1e c9 60 ec 0a cf 82 02 c0 39 f4 22 3d 79 f2 e4 41 d0 93 25 10 c2 6d 31 27 08 e5 3a 82 4a 38 b7 3d 26 dc 37 83 a4 10 2a f4 37 14 18 de 1f 8a 89 25 d6 6f 9e d0 5d c7 c6 25 af a4 31 76 38 13 39 23 31 02 44 00 1c 8d 11 22 5e 3b 27 c8 da 11 e7 bf 28 67 08 b5 eb 83 fd 29 79 29 f6 54 34 f2 77 87 76 20 10 12 20 31 1b 14 e0 ce 4a 0c f1 a9 bc 9c c3 19 78 a5 b2 be 01 00 a5 b2 7f ca dd 23 6a 02 80 79 7a c3 35 2f 41 9e 3c 79 4f f0 7a 00 c2 fd b8 21 3f ce 29 d7 b9 22 dc d6 cf 1d 90 07 af 48 f4 ce 20 24 3a a1 ba 42 2b c6 de 94 cd 4d 33 b2 3d 3a f8 7e 12 fb 66 94 f3 8e 9e e5 38 7e 74 57 a8 01 f0 19 bd b1 22 e5 0b c6 6b 12 70 8e e5 c9 b1 be be 4b d5 Data Ascii: 91rTB8IQ`zzqB`9"=yA%m1':J8=&7*7%o]%1v89#1D"^;'(g)y)T4wv 1Jx#jyz5/A<yOz!?)"H $:B+M3=:~f8~tW"kpK
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 85 75 b3 4e 11 5c 3a 6b 72 f4 62 2a b8 76 56 6e a2 88 3c c4 c8 86 74 4f d0 e6 26 24 c5 91 89 b5 4c d7 e8 cd f2 18 a1 99 26 00 78 c2 af 6c 0f 82 9e 1c 52 69 65 a1 77 9d 92 ec df 3a d7 7d e5 62 35 02 b5 35 4f 70 c7 ae 33 bd 02 08 02 5d fe d0 27 67 d9 67 62 eb c9 6f de 0f 75 81 12 65 20 48 b6 75 e1 d3 fb a7 fa 7f e1 be 53 00 92 97 ef fd dd a9 f2 d2 7c af d1 a2 7a e7 67 37 53 df 2f dd f6 91 5c 43 52 67 7f fb 2f bf 61 53 1e 3c b3 2d df 7d ea e1 52 fd 4a 55 57 16 00 e9 bd 5f fe e3 49 e0 6f 6c 61 24 f8 d6 ac 5d 05 2b 6a 8e 1b 3b ee 5c 6b ab bc bc d0 d6 c7 56 75 e3 e2 2a 08 be f6 62 bb 57 be f3 c3 71 fa 39 83 20 38 57 60 e5 3e a2 e8 7b 9a 74 90 00 40 c8 0c f5 77 88 7a 10 f4 e4 92 44 6f 00 bc ab 4d a7 bf bf 47 2c b7 78 cb 5d 6f f5 be f6 9f bb 65 f5 bc 73 ff 1f 9c Data Ascii: uN\:krbvVn<tO&$L&xlRiew:}b55Op3]'ggboue HuS\|zg7S/\CRg/aS<-}RJUW_Iola$]+j;\kVubWq9 8W`>{t@wzDoMG,x]oes
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 04 42 08 e9 82 11 a4 cb 2a 85 b6 54 49 53 05 06 c2 59 7c 5f 64 04 6c b3 ba ab 01 03 bb fd 42 28 eb 43 9d d7 19 f9 70 68 87 7a 81 ab ca 71 d7 27 66 41 49 03 10 de f8 2f 7f f5 50 a9 be d8 2b 66 fd 25 a1 e6 a6 1d 4a 8f 41 f4 46 c0 7b a8 5c f8 e9 4d 7c 92 85 2a 53 35 36 08 32 25 5e d1 ec 4d 42 98 51 3c b3 07 60 dc f7 d2 3f 8f 90 59 98 4c f1 c3 5e aa e9 de a5 8c e0 79 f8 40 d8 16 f6 6b 55 fb 8e 14 28 03 af 00 00 01 0c f9 ef 2f de fb 3b 2f ec 40 23 03 00 0a c2 bb 9b 08 f0 83 0c de 68 dc fc 9e 25 18 4a ef 8c 7c e1 f9 d5 36 08 00 8d 12 77 f8 e7 3b 95 e0 45 ce 78 cd 9f 09 c0 e9 c6 3a 83 de df 9c 01 a0 7a f2 20 e8 29 2d 82 17 77 ee fc fa eb a5 ad 27 bf 79 02 ce ee c1 99 b2 08 5c 20 8c 06 40 08 7b 76 71 00 47 76 88 5c 92 1d b8 a6 70 45 4f f2 9a f7 f0 c5 e3 70 3e ad Data Ascii: BTISY\|_dlB(Cphzq'fAI/P+f%JAF{\M\|S562%^MBQ<`?YL^y@kU(/;/@#h%J\|6w;Ex:z )-w'y\ @{vqGv\pEOp>
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 93 90 eb 32 ce b1 2e 14 5a 11 e5 43 36 76 6b 10 c4 06 a8 f2 75 49 e8 29 4d 25 13 4a dc 60 d2 aa 70 7d f6 27 ed 85 1b 83 d7 b2 b1 2f 5a 7a b2 4b 12 50 a9 10 a0 92 f5 fc ca ca 2f 4b fa bc 29 65 f0 72 55 97 29 cf 7b 24 5e ce 95 1c 95 6b 2b 65 83 d8 e6 99 3c 64 20 0f 9d 93 36 1f 4d bc ab 90 0b 4d 2e 19 46 02 6c 23 32 cb 31 c0 95 ea e7 8a 0e 04 c5 45 ac da 47 a9 e0 ef e2 33 4b 1a 21 a1 9e b1 61 50 4b e8 5f cb 80 01 7c 9b 0b 41 fe 14 12 7d d3 f1 5a 1c 47 4b c1 eb 8a 02 20 8c 09 01 76 45 d2 df 8a 42 09 8a f3 1c 57 00 74 cf 87 12 c5 bb 40 f4 b7 ac c8 54 14 eb d2 cd 87 69 1d a1 6d 3d c8 f3 2b 12 5e 54 85 f5 dd 4a c9 0b 8c b3 46 03 89 bc c9 e6 30 8e 22 2e 49 d6 57 43 23 33 69 c8 00 a5 84 ab 92 75 b4 90 81 2e 69 19 ea 6d 8a 8f d1 bf 1b 06 a1 d0 0a 17 39 8c 9e 6f 72 Data Ascii: 2.ZC6vkuI)M%J`p}'/ZzKP/K)erU){$^k+e<d 6MM.Fl#21EG3K!aPK_\|A}ZGK vEBWt@Tim=+^TJF0".IWC#3iu.im9or
2024-07-04 22:39:57 UTC	1001	IN	Data Raw: a8 94 e1 d0 8c e7 d7 9a 8f a8 9c 1b 92 f0 4c a9 88 e1 50 83 d0 52 9a 2f cc 25 c7 02 ca 55 f2 69 58 02 b2 92 57 b0 9e 30 5c 27 bb 4b b5 12 23 d4 9a a6 0c e4 a5 73 d2 e4 23 ef bd b9 7c 75 58 57 c2 b1 37 25 63 29 11 73 45 1d 51 31 ba 36 cd e8 b6 0b ac 9c 3a dc d8 92 4c 3c 75 78 dd 96 b4 37 72 70 fd a2 6e 53 e8 b2 5c 8c 36 87 b7 6d 17 b9 d1 41 61 05 af 5b 22 af b1 5c 53 32 76 ab 64 1c ac b7 14 d0 87 c8 9b 8a f9 6d 25 04 12 db c3 f2 a6 37 cc 34 02 fa 00 78 57 60 77 e5 97 ae ef 26 37 1a b9 58 2f 59 9c 3f 33 e5 6d 92 31 a9 f8 dd 90 f0 b4 24 bb f8 40 22 03 ad 98 32 10 28 64 a0 a5 90 4f be cd ae 04 eb df 44 06 4c 2e a8 68 48 fa 57 56 5c 20 21 7a c2 b2 35 21 bb 29 49 76 01 45 29 89 fc 63 08 b6 45 b4 55 26 fa d0 34 6c 23 2c 07 e6 d7 1d a9 84 45 27 9c 4d 6a 92 4d 2c Data Ascii: LPR/%UiXW0\'K#s#\|uXW7%c)sEQ16:L<ux7rpnS\6mAa["\S2vdm%74xW`w&7X/Y?3m1$@"2(dODL.hHWV\ !z5!)IvE)cEU&4l#,E'MjM,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49859	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	384	OUT	GET /wp-content/themes/tgtheme/img/wangye_a.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:56 UTC	773	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/png Content-Length: 1508 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-5e4" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=fceZrmSxRcfIIrYDmIL9aPg1bUNRj6PNJv6NpGqXNqVKXpzGsSUI%2Bxk0VWozgmoZvUrTMEc%2FtTlT1vnhVq1F7FIVNJRgkMflCx2rmRPIR3epQjLhC9hOQ%2FpusVydEVjnvraQwCY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d3cdb814228-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:56 UTC	596	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 26 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 Data Ascii: PNGIHDRw=tEXtSoftwareAdobe ImageReadyqe<&iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22
2024-07-04 22:39:56 UTC	912	IN	Data Raw: 39 30 31 31 45 45 41 36 41 44 41 42 30 41 31 45 44 46 44 33 35 33 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 35 42 36 44 38 38 42 35 33 39 30 31 31 45 45 41 36 41 44 41 42 30 41 31 45 44 46 44 33 35 33 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 35 42 36 44 38 38 38 35 33 39 30 31 31 45 45 41 36 41 44 41 42 30 41 31 45 44 46 44 33 35 33 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 35 42 36 44 38 38 39 35 33 39 30 31 31 45 45 41 36 41 44 41 42 30 41 31 45 44 46 44 33 35 33 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e Data Ascii: 9011EEA6ADAB0A1EDFD353" xmpMM:DocumentID="xmp.did:45B6D88B539011EEA6ADAB0A1EDFD353"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:45B6D888539011EEA6ADAB0A1EDFD353" stRef:documentID="xmp.did:45B6D889539011EEA6ADAB0A1EDFD353"/> </rdf:Description> </rdf:RDF>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49860	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	384	OUT	GET /wp-content/themes/tgtheme/img/yingyong.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:56 UTC	782	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/jpeg Content-Length: 14519 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-38b7" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hqC4HGGeyOX8uKH3yIYzLtS4OXMzEU6%2ByL8SiGe5jIWh9S%2BRQPj%2BlUsak1EHY98nIGf7csswMmCeEh7GhWyQEt6hqHJ7tUPq%2Fj%2FK8jwstvpAml1FQM7y47wZN3K%2F1jrQ9ughYXc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d3cdaa942e3-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:56 UTC	587	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifIIDucky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xm
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 41 30 44 43 31 45 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 37 45 44 34 39 37 44 34 46 42 35 31 31 45 45 38 32 31 46 46 35 36 42 41 30 41 30 44 43 31 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 37 45 44 34 39 37 41 34 46 42 35 31 31 45 45 38 32 31 46 46 35 36 42 41 30 41 30 44 43 31 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 37 45 44 34 39 37 42 34 46 42 35 31 31 45 45 38 32 31 46 46 35 36 42 41 30 41 30 44 43 31 45 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f Data Ascii: A0DC1E" xmpMM:DocumentID="xmp.did:F7ED497D4FB511EE821FF56BA0A0DC1E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:F7ED497A4FB511EE821FF56BA0A0DC1E" stRef:documentID="xmp.did:F7ED497B4FB511EE821FF56BA0A0DC1E"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: ea ba b4 59 89 b1 62 71 bb bd 55 5d ca 7f f7 7c e7 38 e7 31 8b 5c 78 fd 7f 0c f5 7f 77 77 6d b6 ef 74 db 83 9e ae aa aa 99 aa a9 c6 a9 df 99 7c 5c da 6d 3a cf 4c bd 38 8d 14 95 86 95 96 a1 a5 65 a8 55 25 a8 55 65 a8 69 59 6a 15 59 6a 1a 52 5b 85 56 5a 85 56 5a 86 99 f2 3a 8e 6b 23 7e 2e d8 ab 0f 2a 89 e6 d5 1c 12 ec ed b7 37 c3 6e f5 65 c5 9b 05 72 46 96 77 1a 56 ab 97 d4 72 fd 2d bf 16 b8 dc b9 6e 77 e9 97 d8 6d 37 75 cd 5d 63 8f 86 1f 3b b8 db db 15 b4 96 eb b4 eb 80 00 00 29 76 f5 9b 54 ed 5d ae 9a 29 e1 aa 62 3b ec da f5 af 19 d1 aa d2 6d c2 35 45 9c d6 5a fe 3d 0d da 6e 61 bf b3 31 3d e6 69 96 b7 f5 66 25 6d 8e d5 e3 1a 32 39 18 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 f3 b5 7d 4b Data Ascii: YbqU]\|81\xwwmt\|\m:L8eU%UeiYjYjR[VZVZ:k#~.*7nerFwVr-nwm7u]c;)vT])b;m5EZ=na1=if%m29}K
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: a2 8c dd b8 dc 99 e6 57 cb 1b 9f b1 e6 e6 e4 f8 ed ea fe 19 7d 1e cb f9 96 e7 1f 46 58 8c 91 e6 97 6f a2 f6 bb 46 d5 a2 29 b3 77 a3 bf 3f d0 b9 e2 d5 f1 77 25 e2 ee 36 19 31 71 8d 63 ad f6 fc bb 9f ed b7 7d 15 b6 97 f6 67 8f f7 7d a7 49 ed 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 62 06 20 62 08 c4 0c 40 c4 0c 40 c4 0c 40 c4 0c 40 c4 0c 41 4b d7 69 b5 6a bb 95 4f 8b 44 4c cb 8b 3e 58 c7 49 bc f0 88 6a b5 ef 4e 8e 42 f5 ea ee dd ae ed 73 8d 55 ce 32 fc c3 3e 59 c9 79 bd b8 da 5e e5 6b 15 8d 21 5c 5c 4d 2b 32 b0 aa cc b5 0a ac cb 50 d2 b3 2d 42 a9 32 dc 2a b3 2d 43 4a cc b5 0a ac cb 50 d2 93 2d 42 ab 32 d4 2a b3 2d 34 ac cb 50 aa cc b4 aa 4c cb 70 d2 b3 2d 42 ba 3e c4 e7 26 8c dd ec ac cf 8b 76 9d ba 63 f8 a9 dc ef 4b d9 e4 f9 74 b4 d7 ad e5 73 6c 5a Data Ascii: W}FXoF)w?w%61qc}g}Ib b@@@@AKijODL>XIjNBsU2>Yy^k!\\M+2P-B2-CJP-B2-4PLp-B>&vcKtslZ
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: b9 e4 4f 20 23 0b be 44 f2 48 18 5d f2 27 92 40 c2 ef 91 3c 92 06 17 7c 89 e4 90 30 bb e4 4f 24 81 85 df 22 79 24 0c 2e f9 13 c9 20 61 77 c8 9e 49 03 0b be 44 f2 48 18 5d f2 27 92 41 8b 35 56 62 8c bd ca a8 b7 55 55 c5 33 b3 4d 34 cc cc cf c1 0e be ef 24 d3 15 a6 b1 33 6d 3a 34 e9 6f 1c 44 da 35 72 fd 4b 51 df 9c ad ec 7f e9 d7 f2 3f 3c f9 2c fe c5 fd db 76 3d 8f 8b 4e b8 f3 9d 47 50 fb 2d ef ab af e4 3e 47 3f e9 df dd b7 62 fc 5a f5 c7 9c 9c 8e a3 f6 5b df 57 5f c8 7c 8e 7f d3 bf bb 6e c3 e2 d7 ae 3c ea ce 47 51 fb 2d ef ab af e4 6a 36 39 fd 8b fb b6 ec 5f 8b 4e b8 f3 ab 39 1d 4b ec 97 be ae bf 91 a8 d9 67 f6 2f ee cf 62 fc 6a 75 c7 9d 59 c8 6a 5f 64 bf f5 75 fc 8b 1b 2c de c5 fd d9 ec 5f 8d 4e b8 f3 ab 39 0d 4f ec 97 fe aa bf 91 a8 d9 66 f6 2f ee cf 62 Data Ascii: O #DH]'@<\|0O$"y$. awIDH]'A5VbUU3M4$3m:4oD5rKQ?<,v=NGP->G?bZ[W_\|n<GQ-j69_N9Kg/bjuYj_du,_N9Of/b
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 20 ac 83 1d 6a 35 ee c8 8b 64 27 c6 bb e6 f8 49 21 b8 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 c7 99 f9 8a be 2e f8 35 ed ca a3 3d 28 ab c0 2d 00 00 00 00 02 24 11 20 c5 5a 8d 6b a2 2f a7 73 ae f9 be 12 48 6e a2 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 31 66 be 62 af 8b bf 0b 03 5e d8 8c f4 ef 22 b2 40 2d 00 00 00 00 02 24 11 20 c5 5a a3 5a ea 8b e9 bc eb be 6f 85 24 86 ea 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 16 6b e6 2a f8 bb f0 b0 35 ad 88 d8 a4 56 48 41 68 00 00 00 00 11 20 89 06 2a d5 1a d7 Data Ascii: j5d'I!.5=(-$ Zk/sHn1fb^"@-$ ZZo$(k5VHAh
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: f6 bb 17 13 c1 00 04 48 22 41 8a b5 46 b5 d0 5b 4d e7 5d f3 7c 24 90 de 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 72 de f4 3f 42 ea 7f 41 f8 8b 6d 53 8b d6 e4 7f bb a7 97 f2 cb c1 21 d8 7e 8b 54 ac 39 20 69 c9 08 6a 16 15 96 a1 a7 a0 fb 97 d4 aa b3 ae 66 f2 13 3f cb cd 59 db 88 fe 3b 53 b9 fb 2a 97 16 e2 bd 1a be 5f f9 56 0e f6 1a df c3 59 fe af 65 74 df 02 00 08 90 44 83 15 6a 8d 6b a0 b6 9b ce bb e6 f8 49 21 bc 8a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 e5 7d e8 7e 85 d4 fe 83 f1 16 da a7 17 ad c8 ff 00 77 4f 2f e5 97 82 43 b0 fd 16 16 6a 1c b0 86 9b 84 35 0d 42 b2 d4 2b a5 f7 6d 98 Data Ascii: H"AF[M]\|$Er?BAmS!~T9 ijf?Y;S*_VYetDjkI!}~wO/Cj5B+m
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 94 f7 a7 fa 0f 53 fa 0f c4 5b 72 62 f5 9e bf 22 fd dd 3c bf 96 5e 03 0e d3 f4 7a a5 a8 72 42 d4 51 5d ca e9 b7 6e 99 aa ba e6 29 a2 98 dd 99 99 dc 88 86 9a 99 88 8d 67 83 df bd df f6 4e 8e cf e8 f4 c5 da 63 af e6 62 2b cd 55 dd 8e 0a 3c d7 47 2d fb d2 fc cf 9d 73 29 dd 65 e8 f5 2b c3 b5 d4 38 de 38 00 00 02 24 11 20 c5 5a a3 5a e8 2d a6 f3 ae f9 be 12 48 6f 22 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 39 4f 7a 7f a0 f5 3f a0 fc 45 b7 26 2f 59 eb f2 2f dd d3 fe 5f 96 5e 01 0e db f4 7a ad dc 6a 1c b0 f4 ff 00 75 1d 89 e9 2b a3 b4 1a 85 13 b1 47 fb 0b 55 46 fc fa d9 ff 00 e2 e0 cd 93 c1 Data Ascii: S[rb"<^zrBQ]n)gNcb+U<G-s)e+88$ ZZ-Ho"9Oz?E&/Y/_^zju+GUF
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: be 6f 84 92 1b c8 a0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 0c 59 af 98 ab e2 ef c2 c0 d6 b4 23 62 8d e1 59 21 05 a0 00 00 00 00 44 82 24 18 ab 54 6b 5d 05 b4 de 75 df 37 c2 49 0d e4 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 06 2c d7 cc 55 f1 77 e1 60 6b 5a 11 b1 46 f0 ac 90 82 d0 00 00 00 00 22 41 12 0c 55 aa 35 ae 82 da 6f 3a ef 9b e1 24 86 f2 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 03 16 6b e6 2a f8 bb f0 b0 35 ad 08 d8 a3 78 56 48 41 68 00 00 00 00 11 20 89 06 2a d5 1a d7 41 7d 37 9d 77 cd f0 92 43 75 Data Ascii: oY#bY!D$Tk]u7IP,Uw`kZF"AU5o:$(k5xVHAh A}7wCu
2024-07-04 22:39:56 UTC	1369	IN	Data Raw: e4 a7 d2 34 0f 6f 65 7d 5d de 4a 7d 23 40 f6 f6 57 d5 dd e4 a7 d2 34 0f 6f 65 7d 5d de 4a 7d 23 40 f6 f6 57 d5 dd e4 a7 d2 34 0f 6f 65 7d 5d de 4a 7d 23 40 f6 f6 57 d5 dd e4 a7 d2 34 0f 6f 65 7d 5d de 4a 7d 23 41 3e dd ca fa bb bc 94 fa 46 82 63 5b cb 4f f4 ee 72 53 e9 1a 0c 94 ea b6 2a de a2 be 48 f9 4d 05 ab cd 5b bb 44 d3 4c 55 13 38 6f e1 c3 f0 9a 05 b8 11 9a 91 57 84 12 00 00 00 00 00 80 52 a8 06 3a e9 54 6b dc b7 8a 8d 7a ec c0 31 4e 5e 0d 45 7a b9 a8 8e af f0 9a 8d 0d 73 4a b9 9b d2 ef 5b b3 8f 59 a3 0b b9 7c 37 7f 99 6e 76 a9 e5 c3 06 a9 6d 25 d9 d9 e5 8a 64 89 9f 57 84 f8 a5 9f 4e bb 6b 3d 91 b1 9b b5 cc bd 44 55 f0 4f 76 3e 29 dc 2d 1a 4e 8e 3c f8 a7 1d e6 93 e0 6c 75 68 e3 67 57 11 d5 a3 8c d4 3a b4 71 9a 87 56 8e 33 50 ea d1 c6 6a 1d 5a 38 cd Data Ascii: 4oe}]J}#@W4oe}]J}#@W4oe}]J}#@W4oe}]J}#A>Fc[OrS*HM[DLU8oWR:Tkz1N^EzsJ[Y\|7nvm%dWNk=DUOv>)-N<luhgW:qV3PjZ8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49861	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	382	OUT	GET /wp-content/themes/tgtheme/img/wangye.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:56 UTC	775	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/png Content-Length: 1516 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-5ec" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WcmpN5Itoy2W97tEVv7pbWPRHYbmqoU%2B0%2BeKwCvi304ovYQ0gluys1EDAhXsSDcfWIW48H86gPvWpdcXq1NyY77AyNuhAGDVGEGKAsAg%2BUT06%2BmHwHohCPHfFjPmviEbVjNP6R8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d3cdf747c99-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:56 UTC	594	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 18 00 00 00 18 08 06 00 00 00 e0 77 3d f8 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRw=tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:56 UTC	922	IN	Data Raw: 31 45 45 38 44 32 30 41 31 33 36 37 30 34 43 37 41 30 34 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 37 30 44 34 32 45 43 34 46 42 36 31 31 45 45 38 44 32 30 41 31 33 36 37 30 34 43 37 41 30 34 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 32 37 30 44 34 32 45 39 34 46 42 36 31 31 45 45 38 44 32 30 41 31 33 36 37 30 34 43 37 41 30 34 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 32 37 30 44 34 32 45 41 34 46 42 36 31 31 45 45 38 44 32 30 41 31 33 36 37 30 34 43 37 41 30 34 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f Data Ascii: 1EE8D20A136704C7A04" xmpMM:DocumentID="xmp.did:270D42EC4FB611EE8D20A136704C7A04"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:270D42E94FB611EE8D20A136704C7A04" stRef:documentID="xmp.did:270D42EA4FB611EE8D20A136704C7A04"/> </rdf:Description> </rdf:RDF> </

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49862	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	381	OUT	GET /wp-content/themes/tgtheme/img/code1.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:57 UTC	784	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/png Content-Length: 9343 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-247f" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=q02iYC6QtrIMNi7%2F9%2Bv6BdafZ8%2BGGndIknTNRGK5%2B7326PgvgLRfoDYJXyttbNsv1skelyBn51YxAHEJ83%2FgyDp6%2BTFmuCaNc6DgWvAxCQrspE2KGXSB%2F7QWsn%2BG2vpYPyC2Ekw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d3cffea0f5b-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:57 UTC	585	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 b8 00 00 00 b8 08 02 00 00 00 df 51 b1 90 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRQtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 43 34 32 34 34 46 42 41 31 31 45 45 42 43 38 30 38 34 43 44 34 36 34 44 32 45 42 42 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 44 34 41 43 34 32 35 34 46 42 41 31 31 45 45 42 43 38 30 38 34 43 44 34 36 34 44 32 45 42 42 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 38 44 34 41 43 34 32 32 34 46 42 41 31 31 45 45 42 43 38 30 38 34 43 44 34 36 34 44 32 45 42 42 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 38 44 34 41 43 34 32 33 34 46 42 41 31 31 45 45 42 43 38 30 38 34 43 44 34 36 34 44 32 45 42 42 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 Data Ascii: C4244FBA11EEBC8084CD464D2EBB" xmpMM:DocumentID="xmp.did:8D4AC4254FBA11EEBC8084CD464D2EBB"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:8D4AC4224FBA11EEBC8084CD464D2EBB" stRef:documentID="xmp.did:8D4AC4234FBA11EEBC8084CD464D2EBB"/> </rdf:Description> </rd
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 6f cb 91 7c d5 be 7d 7b bf d3 f7 fa f5 eb 5c ac 9b 9a 9a 14 25 9f 28 b2 42 1e ea eb eb e5 07 60 c0 ea 49 4e 4e 3e 77 ee 9c 4a 14 fe e0 c1 83 ad 98 0c d8 b4 ab 56 ad 3a 7f fe 3c 55 7e f0 e0 c1 b4 b4 34 8a 81 ae 5e bd 7a f8 f0 61 f6 18 28 36 36 36 31 31 51 7b 7a e7 72 b9 d0 e6 d1 a3 47 55 c6 16 19 19 39 6a d4 28 ac 31 2d c7 63 c0 49 49 49 8a 58 f7 eb d7 6f e8 d0 a1 2a 51 f8 3d 7b f6 54 0d bc e5 46 e1 a3 69 e2 95 f2 0d c8 b7 6c b3 c7 8f 1f 57 8c c2 c7 dc c7 c5 c5 b1 2d a4 a6 a6 62 d9 51 c3 28 2c 2c e4 76 37 6b d6 2c 20 48 55 36 94 7d 6f e4 c8 91 68 81 4b 34 8a 6e 18 15 5b 53 27 0a 7f e5 ca 95 dc e9 60 b1 63 69 ae 0f ec 30 44 51 f8 6e 43 f2 dc 67 71 62 b5 c2 18 15 15 75 fa f4 69 aa 3c 22 22 c2 ed a6 11 64 4b 3c f2 83 55 3c 7d c3 57 eb 46 e3 12 cd 94 fb 63 68 Data Ascii: o\|}{\%(B`INN>wJV:<U~4^za(66611Q{zrGU9j(1-cIIIXo*Q={TFilW-bQ(,,v7k, HU6}ohK4n[S'`ci0DQnCgqbui<""dK<U<}WFch
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 74 df 1f 1a 2b ea 53 a9 f7 51 a2 93 cd 80 6d 41 44 37 72 cd d8 ea a5 8b 01 5f b9 72 85 1f 85 bf 62 c5 0a 19 76 23 2f 02 ca 77 3c 79 f2 64 2a 07 3c 18 22 3e 3e 9e ed 2b 2e 2e 6e d5 aa 55 20 04 f5 e4 41 7e 7e 3e 79 5a 4e 5b 39 3a 3a 7a d3 a6 4d f8 57 5b 18 16 16 b6 74 e9 d2 9a 9a 1a ed f4 83 1b b6 6d db 36 64 c8 10 ed cc 91 1f ef bd f7 1e 1b 5c fd d8 63 8f 8d 1d 3b 56 bb 9e 30 e0 c8 c8 48 f9 3c e9 5f 7f fd 35 9a d5 6e 6a e4 e1 86 27 9e 78 e2 d6 5b 6f d5 86 40 00 29 ee 8b 09 18 ed df ff fe 77 6d 52 6b fc 8b 69 03 7d 72 73 73 2d 65 14 cf 02 46 2f f7 dd 77 df f0 e1 c3 e9 ee 54 0c 74 fc 8b 69 e3 76 f9 d6 5b 6f 29 9e 6b 8f 1f 3f 9e 6d b6 4b 97 2e 67 ce 9c 91 6c e1 85 17 5e e0 8e 4d fe 91 3f 51 f2 84 01 03 06 c8 53 1f 0c 24 13 e7 a0 03 fd fa f5 b3 53 31 78 f7 dd Data Ascii: t+SQmAD7r_rbv#/w<yd*<">>+..nU A~~>yZN[9::zMW[tm6d\c;V0H<_5nj'x[o@)wmRki}rss-eF/wTtiv[o)k?mK.gl^M?QS$S1x
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 65 d0 91 1b 58 1f d2 f2 fa 16 54 57 cf f8 48 bf e5 e5 e5 5b b6 6c d1 5a 7a 60 9d fd fb f7 f7 e8 d1 43 c6 c0 46 65 98 a6 c0 45 92 b8 68 b9 a2 a2 c2 93 fa 80 60 01 be 1c 3d 7a 34 75 ed 03 43 fa ec b3 cf 3c e9 f0 48 7d 60 f7 cd 37 df a8 eb a7 6c 2a 43 11 76 0d 0d 0d b0 01 d9 d4 a3 19 19 19 ec 7b 90 54 35 f2 bf c0 f7 c0 81 03 14 03 34 36 36 c2 fe 8f 8d 8d a5 d8 85 b3 f5 54 56 56 c2 12 66 8f d9 26 4f 9e bc 61 c3 06 af c7 6f e8 18 38 8c 1a 35 6a c5 8a 15 92 04 5a b3 66 4d 5a 5a 9a 87 ab 48 1c 09 cc e3 cc cc 4c 96 a5 f6 ee dd 0b 6a 7a 5d 7c c0 f6 c5 17 5f fc db df fe 26 39 06 18 b7 e0 4b aa 10 14 3f 72 e4 08 35 79 b0 6e 60 dc 16 15 15 99 2e bd c6 8c 19 03 6e 93 91 61 c0 2e 27 27 87 7b 8f ff f3 cf 3f f7 7a 1a 4f 78 05 35 27 4d 9a c4 fe 75 d9 b2 65 d3 a6 4d a3 9c Data Ascii: eXTWH[lZz`CFeEh`=z4uC<H}`7l*Cv{T5466TVVf&Oao85jZfMZZHLjz]\|_&9K?r5yn`.na.''{?zOx5'MueM
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 61 af 1d 5c b8 70 c1 a2 ee 44 ab 93 bb bc 2c ca 1f 23 ea ce 3a d5 47 94 5b 90 a5 bc 4b bb e9 ea 4b 2d 43 f9 e9 7c db 35 a9 85 ab d8 9d 0d 96 45 ab 04 76 21 29 3d 3e 19 84 36 05 86 ad 1e 15 b5 37 18 b5 1f 40 40 29 a3 ae 40 1c 77 10 ec 07 97 96 6b 88 a8 80 f9 c7 3d e8 21 85 94 38 11 e9 de 5c 65 c2 68 68 7e 88 41 ef a1 7f c1 a2 2c 7b a6 e8 4f 75 75 75 8a ed 70 b6 1e 18 d6 f3 7e 3f af a9 b9 89 5a d0 6c fe 6e 40 62 62 e2 a3 8f 3e ca 2c ff 90 94 94 14 b6 72 7a 7a 3a a7 b2 40 7e 8c 1c 39 d2 4e fa de 76 db 6d 19 19 19 5a 8d 1e 26 74 51 51 d1 b6 6d db 24 5b 00 7d 28 1b 10 b4 86 81 bd 61 c3 06 56 31 67 bb 33 b6 be 5d ae 2f bf fc f2 ab af be 12 89 5e 2a ee 69 e2 84 89 fd fb f7 a7 c6 76 e2 c4 89 ed db b7 1b 10 e9 a6 a7 bd b3 0e 4c 49 f6 c7 85 79 f3 e6 b1 dd 89 e8 98 Data Ascii: a\pD,#:G[KK-C\|5Ev!)=>67@@)@wk=!8\ehh~A,{Ouuup~?Zln@bb>,rzz:@~9NvmZ&tQQm$[}(aV1g3]/^*ivLIy
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 0a 35 f7 a2 40 8b c5 8b 17 2f 5d ba 94 aa 7c fb ed b7 ef db b7 4f 14 a9 44 f9 e0 17 2c 58 b0 67 cf 1e 49 ec 16 2e 5c 38 6e dc 38 af 0a 13 5a 2e 2e 2e 9e 3a 75 aa 7c 60 83 99 8c e2 10 8d 52 9f 99 06 0c 18 30 7c f8 70 aa 70 c7 8e 1d dc ca 43 5a 80 2a bc e9 a6 9b e4 cf 8a af b5 00 eb 3e 48 4b 4b 93 6c 81 7a ae 53 1f 92 92 92 58 ec b8 10 13 13 63 51 7e 5e 97 df 39 c0 eb a1 06 11 39 fa 75 a8 35 44 2a 8b 3c b0 5c 86 50 bf 83 68 e8 74 c6 50 50 98 bc 84 b0 2e 99 8f 3f 25 8a cf 57 61 cd 65 56 f5 fb 38 f2 82 d0 ac ee 44 87 af 92 9c ea 83 de e9 b2 d9 91 c0 36 a8 3f 62 a3 29 ea 8d 72 95 a1 53 7b 43 d8 71 75 2f c5 ee 44 5f 19 d5 f3 7c 60 53 b7 5f ec 1d d3 5b b6 33 b0 de 8f a2 57 74 cc eb 15 65 99 38 26 df 25 8a 75 84 a6 52 2a c8 8f 41 a4 76 70 1b 11 3e 3d c3 53 f7 d4 Data Ascii: 5@/]\|OD,XgI.\8n8Z...:u\|`R0\|ppCZ>HKKlzSXcQ~^99u5D<\PhtPP.?%WaeV8D6?b)rS{Cqu/D_\|`S_[3Wte8&%uR*Avp>=S
2024-07-04 22:39:57 UTC	544	IN	Data Raw: 93 c6 86 f5 e0 f5 10 51 89 51 08 c2 98 39 6c 25 c4 a2 01 d3 60 f5 43 c0 50 8f 06 81 93 c0 16 a8 43 84 04 a4 08 4a 20 63 c8 ac 7b ac 24 b2 ef 90 1d cd 93 b5 17 40 38 06 3c 14 1f 1f ff b3 9f fd ac 75 98 91 fa d1 05 81 6b 54 73 b6 1e f0 44 4d 4d 0d 26 0f 3f b0 dc c1 0a e0 00 b2 fa 31 bb 98 72 82 2a 04 06 ca 3d ca 47 48 cb 1b 34 f8 01 b1 81 0f c1 0d f8 04 7b 0d 3e 41 a1 c7 09 4d b4 1f 52 93 e8 c5 68 e7 a3 8f 3e e2 3e 66 d5 ba 81 12 2d 66 31 10 57 8d 53 6f 9c c3 28 50 41 48 d2 70 e2 00 20 de 08 4c a7 c7 66 23 89 e4 31 f7 e4 c8 e3 27 8a 6a 68 28 8c 23 fc 2f 3e 01 1b a1 82 f6 43 62 cd 12 45 18 95 c9 46 86 0a dc c7 d4 02 0e 88 ca 2f a9 91 dc d8 ca 35 77 41 4c 74 f2 42 f0 63 6d 53 07 c5 ea 21 92 7c 65 36 3b 3b 1b 7a 83 64 18 29 ab f3 cb 3c b7 ad f5 13 a8 c7 ab fe Data Ascii: QQ9l%`CPCJ c{$@8<ukTsDMM&?1r*=GH4{>AMRh>>f-f1WSo(PAHp Lf#1'jh(#/>CbEF/5wALtBcmS!\|e6;;zd)<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49863	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	385	OUT	GET /wp-content/themes/tgtheme/img/yuandaima.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:57 UTC	782	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:56 GMT Content-Type: image/png Content-Length: 5568 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-15c0" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O6onoaZL9Y%2BTk4CByjmGCxRzLjJPR6Pome9Fsl6vFMtaXKR7YjrJG2NhWKXY%2B1TQIo85tXS9851lnMIfvITzFioZv%2BksvphEo4XYl%2Bg74sxYZfvQpcMg64%2FQCL3enClnUaIE%2F%2F8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d3d0bce8c3c-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:57 UTC	587	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 05 00 00 00 42 08 06 00 00 00 5e bc c3 f1 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRB^tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 33 41 34 46 42 45 31 31 45 45 38 41 32 32 45 43 38 41 32 37 43 44 46 37 32 42 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 46 44 44 35 33 42 34 46 42 45 31 31 45 45 38 41 32 32 45 43 38 41 32 37 43 44 46 37 32 42 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 32 46 44 44 35 33 38 34 46 42 45 31 31 45 45 38 41 32 32 45 43 38 41 32 37 43 44 46 37 32 42 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 32 46 44 44 35 33 39 34 46 42 45 31 31 45 45 38 41 32 32 45 43 38 41 32 37 43 44 46 37 32 42 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a Data Ascii: 3A4FBE11EE8A22EC8A27CDF72B" xmpMM:DocumentID="xmp.did:12FDD53B4FBE11EE8A22EC8A27CDF72B"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:12FDD5384FBE11EE8A22EC8A27CDF72B" stRef:documentID="xmp.did:12FDD5394FBE11EE8A22EC8A27CDF72B"/> </rdf:Description> </rdf:
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 79 de 9c 45 3b 50 30 99 63 18 c0 a1 c4 5e cd ea b4 77 1f c0 c9 51 19 fa c0 51 5e 73 65 9e f2 1a 77 09 74 ce 3e 8c 3a cb 71 a0 70 a5 03 03 38 4d 2b ad 34 05 02 04 a0 6f fb 35 41 a1 c8 00 85 58 2b bd 21 96 60 5a 5c 28 11 21 6e 4b 72 e5 cb 14 61 ec 7b 0d d4 57 94 a4 ef 26 04 d8 92 0f 1f 07 0a 8e 29 ac 48 c1 87 96 80 ce 8f 33 8e 3b ab 26 b8 b4 77 1f 28 27 1e c4 e1 84 ae 03 b3 f2 14 59 d8 26 50 dd 7a c5 8f 58 17 5a 90 2d 38 71 a0 60 4c 42 3a 9c c3 bb 11 f0 c2 91 7c 8c 6d 33 d3 4c 61 c4 e0 59 89 a2 60 ec 71 da 18 d7 05 05 d1 8b 6a 44 2f 1e 46 73 c4 3a c1 e9 98 82 0b 1f 8c 4a 1f c5 0c c6 08 a3 6b ca e9 46 00 24 93 af 5a c7 e0 c2 72 9c fe 98 f5 e5 bd e6 9d 13 70 ef 55 70 a0 60 5d 44 67 f7 af 24 03 2c 70 98 42 5c 39 88 3f 4e 5c f8 b0 f2 64 d3 8f df 61 5e df 72 68 Data Ascii: yE;P0c^wQQ^sewt>:qp8M+4o5AX+!`Z\(!nKra{W&)H3;&w('Y&PzXZ-8q`LB:\|m3LaY`qjD/Fs:JkF$ZrpUp`]Dg$,pB\9?N\da^rh
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: b9 92 83 f3 f7 5c bd 6d 3a a4 d8 b3 77 ee 99 20 57 d9 a5 ec 35 e3 70 f0 e8 fc ce 87 0a 61 d8 d1 f9 fa f3 42 47 81 fb e8 dc c2 c2 b6 9d 53 70 2e 22 89 9d 07 96 fc e7 fe 6f 1c 5d 37 b1 a1 44 ee 86 d0 02 00 49 f7 dd 96 84 67 44 a4 01 01 b1 1d f2 24 a9 13 be f8 a2 47 4f 3f 8a 82 cf c5 1f 60 fd 56 cf 13 4c bf d9 37 7f f3 67 a6 e8 a3 bc b0 f5 08 3b 11 e0 3c 51 39 8a 4d 3f 7d 6c 94 05 06 4b eb 6f 98 d6 35 dc cc a5 63 ce 5f a7 af c7 59 8d 79 f5 77 bf f5 d2 0e 12 1c 80 96 cf 7d fc fe 97 59 c7 9b 6d 49 cf a5 e3 e1 91 b9 0e d0 eb fc b6 4f 9e 88 00 ab 03 ee d9 07 02 14 78 3f 6c 3c 52 84 78 b9 0d ec 1d 7f b3 e4 22 30 5a 60 bc 1f 7c ad 6f 49 b5 71 d4 c6 ea 30 44 66 84 32 b5 b0 7e 54 f7 9c 42 9d d0 d7 8d 2c 66 8b ea 99 91 b8 bf ee ff e8 d3 c1 f8 f9 03 f0 01 d6 6d 02 1d Data Ascii: \m:w W5paBGSp."o]7DIgD$GO?`VL7g;<Q9M?}lKo5c_Yyw}YmIOx?l<Rx"0Z`\|oIq0Df2~TB,fm
2024-07-04 22:39:57 UTC	874	IN	Data Raw: 82 ea ca 5f f3 cc bc cc 28 48 6a 0e 53 0c 1a 58 c6 ab 96 68 1f 9d de 8e e9 10 50 1e d6 19 6e 9d c9 60 ed 35 cb 96 d5 6d 2b 10 4c bc ea 39 73 08 17 64 f6 e0 ad 3f 6f a0 39 0e dd be d8 1e 9f 69 3b f4 14 ec d0 f3 ec 6e 91 d7 6c cc 61 9a 13 1f 42 c5 65 e4 ec 3e 66 0d 51 6f 68 82 87 58 d2 8c 6c ae 49 2a ea 0b 94 d0 92 e1 83 44 8e 21 83 99 42 10 e1 a8 35 c9 24 93 8d f0 21 b0 fc 64 5e 12 e3 6b 96 1d 9a 0a 1f da 14 ed 5c 7a 0e 45 cf 3e f0 92 47 f5 6d 2f 64 bc 4b 18 1c da 22 3a 5e 61 20 96 a9 c9 e6 25 a4 6c c4 a3 4c 34 17 38 6f c0 d1 5f 78 96 dd e7 e8 0f ae 43 72 77 41 62 f5 4e 8a ca 27 1d 52 d8 1e 5f 33 ed d0 94 fe 74 6d 5f f9 f0 52 a4 80 33 60 9a bb 20 a0 27 3e 36 fe 28 1a e3 51 e5 54 fa 1a 49 db b0 e3 da a0 6b 35 c5 f2 01 43 7f 15 8e de da 63 50 7a 4f f3 60 99 Data Ascii: _(HjSXhPn`5m+L9sd?o9i;nlaBe>fQohXlI*D!B5$!d^k\zE>Gm/dK":^a %lL48o_xCrwAbN'R_3tm_R3` '>6(QTIk5CcPzO`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49864	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:56 UTC	379	OUT	GET /wp-content/themes/tgtheme/img/fei.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:57 UTC	776	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:57 GMT Content-Type: image/png Content-Length: 6465 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-1941" expires: Thu, 01 Aug 2024 22:39:44 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172813 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LOGiI82PBD23LOyxl4tanEmWEpIFlEFRbvpIP%2FqdGv5K9iXQEvg7q03ZYi%2FDHbTr2n543FaKb16yUxayZzk8o8OcUA%2FaCeqiLboieO0VeWwCpUtfFOUOoh%2BicndAQaMWigSqTDA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d3d99120f4a-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:57 UTC	593	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 e2 00 00 00 43 08 06 00 00 00 40 de 06 5c 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRC@\tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 31 31 45 45 42 38 32 36 44 43 39 44 33 36 38 31 44 30 34 45 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 45 37 41 45 38 33 44 34 46 43 34 31 31 45 45 42 38 32 36 44 43 39 44 33 36 38 31 44 30 34 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 43 45 37 41 45 38 33 41 34 46 43 34 31 31 45 45 42 38 32 36 44 43 39 44 33 36 38 31 44 30 34 45 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 43 45 37 41 45 38 33 42 34 46 43 34 31 31 45 45 42 38 32 36 44 43 39 44 33 36 38 31 44 30 34 45 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c Data Ascii: 11EEB826DC9D3681D04E" xmpMM:DocumentID="xmp.did:CE7AE83D4FC411EEB826DC9D3681D04E"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:CE7AE83A4FC411EEB826DC9D3681D04E" stRef:documentID="xmp.did:CE7AE83B4FC411EEB826DC9D3681D04E"/> </rdf:Description> </rdf:RDF> <
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 5e 7a 7a 96 f3 02 f9 71 4d 4b cf 95 90 74 87 a8 e1 64 a0 b6 a9 38 08 0b 80 a3 34 cf 96 68 de 8f 8e 4b a2 60 ea 54 9d 22 04 8c d7 7b 62 44 8c 40 44 0d 1f 11 94 4c 6a ba 25 88 8a 7b 00 49 52 c3 dc 2c 10 b1 0c 41 75 04 84 2f 42 b4 d1 32 23 28 d1 db 94 28 59 d1 f7 33 9f 2f e8 2c ba 71 c6 52 fd 4f 02 19 8e f7 a3 63 89 28 f8 04 92 30 46 c4 08 0b 20 13 49 6a 67 67 c8 9b b5 2a 0e 88 00 7b bc 17 0a 94 90 81 cb 57 56 f2 de 39 dc 4c 72 ef 1b a6 e9 69 1a fc 72 a2 a9 b9 61 e4 cc 48 88 47 58 5d 89 b4 74 cc 69 eb d3 92 e5 86 9b fe 62 38 a2 d5 2f 71 be da 82 b5 f2 79 41 9d 18 05 23 11 23 10 95 c2 ac 41 14 6b 6c 70 65 23 69 ba eb 9a ed 68 6f 72 08 68 b1 40 d8 45 99 5a b9 f4 34 94 be 95 49 4b b7 80 a8 3c c8 cd 5a 0a d1 30 af cf 69 24 29 dc c9 0f 5c 7d aa 7b ce ba a9 33 2e Data Ascii: ^zzqMKtd84hK`T"{bD@DLj%{IR,Au/B2#((Y3/,qROc(0F Ijgg*{WV9LriraHGX]tib8/qyA##Aklpe#ihorh@EZ4IK<Z0i$)\}{3.
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: b8 f6 99 6f 94 45 6a e0 f5 9a 11 5d 39 79 5a 60 fc 6d dc 4f ad 42 c4 95 3a 76 c3 ce 73 b7 39 c4 ba 64 51 27 60 74 8d 40 22 46 20 a2 00 3d 13 7c e3 89 af 8f 18 2a 9a 8e a6 24 2c b3 93 7b 70 f7 43 ca d1 06 7d a6 28 1a 66 86 ba a7 69 a8 7d 92 09 4d b1 2e 3a 34 fe b2 b2 2e 01 57 47 c6 4e c6 f4 92 91 76 8e 5c 57 25 e4 50 89 88 69 59 4c 3b 8f 11 70 8d 18 e1 0c 21 8f 2f 5d 7b f4 b3 ff 98 b8 fe 4e 6f e6 d5 57 76 d6 5c 07 c7 1e 5a bd fc f9 6f 75 45 91 f0 1d 44 7c e4 c1 b7 26 ff f3 b7 87 45 65 28 b1 6f 3e f0 c9 bf d3 ff ab 6c 78 63 29 c5 36 7b c9 fb 5c 92 bb 92 52 f5 7d c8 0e c9 e4 4c ee 55 7c 43 dd 2f 5a aa bb 0f bc 43 79 27 ea 4e 0a d7 74 56 15 b4 2f d9 ad 75 32 24 5b e6 f8 ad 30 47 a8 5f 45 e7 04 81 44 8c d8 a5 a0 e4 78 74 73 6d 26 db b3 6f 5d 75 67 f8 4e 79 c7 Data Ascii: oEj]9yZ`mOB:vs9dQ'`t@"F =\|*$,{pC}(fi}M.:4.WGNv\W%PiYL;p!/]{NoWv\ZouED\|&Ee(o>lxc)6{\R}LU\|C/ZCy'NtV/u2$[0G_EDxtsm&o]ugNy
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 4c 3a 91 42 d3 92 49 95 f1 26 d3 70 63 06 a7 1d d3 2c e5 a3 dd 99 39 6f a7 38 99 e8 6d 2b 03 8d 81 b8 05 90 7a 43 d2 70 db 26 ce cc f5 a4 62 3a ac 15 ca 0e ff 6f 3b e5 c6 1b 53 b2 32 4e 72 e4 d9 cc 4d c6 41 c1 9b 4d 15 d3 75 b6 1d 2b 1d 4c 72 f4 53 94 91 47 58 93 06 63 a2 6c cc d6 00 c2 1a 58 ea df 1a 30 8f 06 8e e7 08 e4 60 c8 cc 0f 2d c2 30 18 0b 19 30 16 4c c6 bb a9 f3 ae e2 d0 a6 02 db 3d c2 31 16 6c 77 fe d3 50 b1 b7 74 0d 3f e7 f0 ca f2 15 d7 91 8c 69 8d 78 58 7e 0d f8 fb 5e 85 ba 78 68 00 65 75 09 64 1b a8 af 61 41 3f b1 a6 a6 a1 a5 0c 9a 76 b3 4d 44 26 32 f2 d6 cb 06 9c 14 d5 c8 d9 42 32 81 6a 01 f4 af 83 18 65 9c 54 88 74 63 ac bf 4a f3 c3 e7 58 70 35 07 64 eb 08 69 bb bd f0 55 74 c7 97 68 ea 80 0c 0e 9a c6 29 86 f7 74 d0 ec e1 6c 76 80 d2 52 89 Data Ascii: L:BI&pc,9o8m+zCp&b:o;S2NrMAMu+LrSGXclX0`-00L=1lwPt?ixX~^xheudaA?vMD&2B2jeTtcJXp5diUth)tlvR
2024-07-04 22:39:57 UTC	396	IN	Data Raw: 79 45 ab 6b 22 b6 2d 63 2d 90 8c 55 aa bf ea f3 c3 85 6e 42 d4 11 c2 76 7b e1 ab 7a 6e f0 40 64 5c 63 03 e2 0e cf 42 44 c2 89 dc 5b 54 94 05 2b 69 a7 54 3d b9 75 1c b0 43 8b 13 45 42 de ac 64 23 c6 38 bd 06 71 a8 43 d1 67 38 66 6a 80 71 19 1a 18 91 07 2e d5 26 36 2e a1 3e 91 f5 5e 33 c1 78 08 4e c4 8e 65 cc 02 c9 38 96 44 ec 7a 7e e4 fa ca e7 78 8f 82 88 03 d9 6e 2f 7c 35 91 17 b2 a4 13 6a 9c ef 33 81 c2 9c a4 8d 24 da 69 a5 0e c0 6b d5 3d ea 31 4e a9 e9 7c 0a 4e 76 0f 81 4b 9d d5 2c e9 23 53 a8 3f 53 94 75 e4 59 8a e9 c9 68 64 8c 78 0c 27 0e fb 28 a6 f9 11 62 2c b8 ea 43 9d 94 af 6f db ed 85 af ea 00 f3 6b 2b d6 e0 2d 23 36 d7 16 64 bc 15 2b db ef 69 3d 96 d6 44 2b 05 2a b3 2d 1d 46 62 e8 b3 0a 76 c3 6e 90 b1 8a 7a 0e 31 3f 62 3d 03 ec c2 f6 c4 60 bb ad Data Ascii: yEk"-c-UnBv{zn@d\cBD[T+iT=uCEBd#8qCg8fjq.&6.>^3xNe8Dz~xn/\|5j3$ik=1N\|NvK,#S?SuYhdx'(b,Cok+-#6d+i=D+*-Fbvnz1?b=`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49865	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:57 UTC	383	OUT	GET /wp-content/themes/tgtheme/img/loudong.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:39:57 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:39:57 GMT Content-Type: image/png Content-Length: 8437 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-20f5" expires: Thu, 01 Aug 2024 22:39:45 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172812 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=C5XWFAAHD4PNivanCgkMGbmSwG8Adk73LD%2BUtQfIYN5nIXYkeI7vPO7mGcRB0rqzsLzfijPVFb%2FUqabLduqm2vfgOQQPARDROeR8fySaCRLbBu0eI%2Fg7Y27bHRmNZzkUYHo27cg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d41185c0f80-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:57 UTC	595	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 c1 00 00 00 42 08 06 00 00 00 2f e8 6d 2a 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRB/m*tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 45 45 41 37 45 32 44 38 44 46 32 36 45 44 38 35 45 39 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 46 42 34 45 34 42 39 34 46 43 37 31 31 45 45 41 37 45 32 44 38 44 46 32 36 45 44 38 35 45 39 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 31 46 42 34 45 34 42 36 34 46 43 37 31 31 45 45 41 37 45 32 44 38 44 46 32 36 45 44 38 35 45 39 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 31 46 42 34 45 34 42 37 34 46 43 37 31 31 45 45 41 37 45 32 44 38 44 46 32 36 45 44 38 35 45 39 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 Data Ascii: EEA7E2D8DF26ED85E9" xmpMM:DocumentID="xmp.did:1FB4E4B94FC711EEA7E2D8DF26ED85E9"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:1FB4E4B64FC711EEA7E2D8DF26ED85E9" stRef:documentID="xmp.did:1FB4E4B74FC711EEA7E2D8DF26ED85E9"/> </rdf:Description> </rdf:RDF> </x
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 72 82 01 e1 18 a1 54 0f a3 42 97 01 dd 38 ee b3 a5 49 51 e2 0b 00 60 8d e8 df 18 7a 85 b9 7a 03 71 80 8f 02 42 1e c9 60 ec 0a cf 82 02 c0 39 f4 22 3d 79 f2 e4 41 d0 93 25 10 c2 6d 31 27 08 e5 3a 82 4a 38 b7 3d 26 dc 37 83 a4 10 2a f4 37 14 18 de 1f 8a 89 25 d6 6f 9e d0 5d c7 c6 25 af a4 31 76 38 13 39 23 31 02 44 00 1c 8d 11 22 5e 3b 27 c8 da 11 e7 bf 28 67 08 b5 eb 83 fd 29 79 29 f6 54 34 f2 77 87 76 20 10 12 20 31 1b 14 e0 ce 4a 0c f1 a9 bc 9c c3 19 78 a5 b2 be 01 00 a5 b2 7f ca dd 23 6a 02 80 79 7a c3 35 2f 41 9e 3c 79 4f f0 7a 00 c2 fd b8 21 3f ce 29 d7 b9 22 dc d6 cf 1d 90 07 af 48 f4 ce 20 24 3a a1 ba 42 2b c6 de 94 cd 4d 33 b2 3d 3a f8 7e 12 fb 66 94 f3 8e 9e e5 38 7e 74 57 a8 01 f0 19 bd b1 22 e5 0b c6 6b 12 70 8e e5 c9 b1 be be 4b d5 29 1e 45 80 Data Ascii: rTB8IQ`zzqB`9"=yA%m1':J8=&7*7%o]%1v89#1D"^;'(g)y)T4wv 1Jx#jyz5/A<yOz!?)"H $:B+M3=:~f8~tW"kpK)E
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 11 5c 3a 6b 72 f4 62 2a b8 76 56 6e a2 88 3c c4 c8 86 74 4f d0 e6 26 24 c5 91 89 b5 4c d7 e8 cd f2 18 a1 99 26 00 78 c2 af 6c 0f 82 9e 1c 52 69 65 a1 77 9d 92 ec df 3a d7 7d e5 62 35 02 b5 35 4f 70 c7 ae 33 bd 02 08 02 5d fe d0 27 67 d9 67 62 eb c9 6f de 0f 75 81 12 65 20 48 b6 75 e1 d3 fb a7 fa 7f e1 be 53 00 92 97 ef fd dd a9 f2 d2 7c af d1 a2 7a e7 67 37 53 df 2f dd f6 91 5c 43 52 67 7f fb 2f bf 61 53 1e 3c b3 2d df 7d ea e1 52 fd 4a 55 57 16 00 e9 bd 5f fe e3 49 e0 6f 6c 61 24 f8 d6 ac 5d 05 2b 6a 8e 1b 3b ee 5c 6b ab bc bc d0 d6 c7 56 75 e3 e2 2a 08 be f6 62 bb 57 be f3 c3 71 fa 39 83 20 38 57 60 e5 3e a2 e8 7b 9a 74 90 00 40 c8 0c f5 77 88 7a 10 f4 e4 92 44 6f 00 bc ab 4d a7 bf bf 47 2c b7 78 cb 5d 6f f5 be f6 9f bb 65 f5 bc 73 ff 1f 9c d4 b5 05 40 Data Ascii: \:krbvVn<tO&$L&xlRiew:}b55Op3]'ggboue HuS\|zg7S/\CRg/aS<-}RJUW_Iola$]+j;\kVubWq9 8W`>{t@wzDoMG,x]oes@
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: 82 11 a4 cb 2a 85 b6 54 49 53 05 06 c2 59 7c 5f 64 04 6c b3 ba ab 01 03 bb fd 42 28 eb 43 9d d7 19 f9 70 68 87 7a 81 ab ca 71 d7 27 66 41 49 03 10 de f8 2f 7f f5 50 a9 be d8 2b 66 fd 25 a1 e6 a6 1d 4a 8f 41 f4 46 c0 7b a8 5c f8 e9 4d 7c 92 85 2a 53 35 36 08 32 25 5e d1 ec 4d 42 98 51 3c b3 07 60 dc f7 d2 3f 8f 90 59 98 4c f1 c3 5e aa e9 de a5 8c e0 79 f8 40 d8 16 f6 6b 55 fb 8e 14 28 03 af 00 00 01 0c f9 ef 2f de fb 3b 2f ec 40 23 03 00 0a c2 bb 9b 08 f0 83 0c de 68 dc fc 9e 25 18 4a ef 8c 7c e1 f9 d5 36 08 00 8d 12 77 f8 e7 3b 95 e0 45 ce 78 cd 9f 09 c0 e9 c6 3a 83 de df 9c 01 a0 7a f2 20 e8 29 2d 82 17 77 ee fc fa eb a5 ad 27 bf 79 02 ce ee c1 99 b2 08 5c 20 8c 06 40 08 7b 76 71 00 47 76 88 5c 92 1d b8 a6 70 45 4f f2 9a f7 f0 c5 e3 70 3e ad e7 ad d3 83 Data Ascii: TISY\|_dlB(Cphzq'fAI/P+f%JAF{\M\|S562%^MBQ<`?YL^y@kU(/;/@#h%J\|6w;Ex:z )-w'y\ @{vqGv\pEOp>
2024-07-04 22:39:57 UTC	1369	IN	Data Raw: ce b1 2e 14 5a 11 e5 43 36 76 6b 10 c4 06 a8 f2 75 49 e8 29 4d 25 13 4a dc 60 d2 aa 70 7d f6 27 ed 85 1b 83 d7 b2 b1 2f 5a 7a b2 4b 12 50 a9 10 a0 92 f5 fc ca ca 2f 4b fa bc 29 65 f0 72 55 97 29 cf 7b 24 5e ce 95 1c 95 6b 2b 65 83 d8 e6 99 3c 64 20 0f 9d 93 36 1f 4d bc ab 90 0b 4d 2e 19 46 02 6c 23 32 cb 31 c0 95 ea e7 8a 0e 04 c5 45 ac da 47 a9 e0 ef e2 33 4b 1a 21 a1 9e b1 61 50 4b e8 5f cb 80 01 7c 9b 0b 41 fe 14 12 7d d3 f1 5a 1c 47 4b c1 eb 8a 02 20 8c 09 01 76 45 d2 df 8a 42 09 8a f3 1c 57 00 74 cf 87 12 c5 bb 40 f4 b7 ac c8 54 14 eb d2 cd 87 69 1d a1 6d 3d c8 f3 2b 12 5e 54 85 f5 dd 4a c9 0b 8c b3 46 03 89 bc c9 e6 30 8e 22 2e 49 d6 57 43 23 33 69 c8 00 a5 84 ab 92 75 b4 90 81 2e 69 19 ea 6d 8a 8f d1 bf 1b 06 a1 d0 0a 17 39 8c 9e 6f 72 67 42 57 28 Data Ascii: .ZC6vkuI)M%J`p}'/ZzKP/K)erU){$^k+e<d 6MM.Fl#21EG3K!aPK_\|A}ZGK vEBWt@Tim=+^TJF0".IWC#3iu.im9orgBW(
2024-07-04 22:39:57 UTC	997	IN	Data Raw: 8c e7 d7 9a 8f a8 9c 1b 92 f0 4c a9 88 e1 50 83 d0 52 9a 2f cc 25 c7 02 ca 55 f2 69 58 02 b2 92 57 b0 9e 30 5c 27 bb 4b b5 12 23 d4 9a a6 0c e4 a5 73 d2 e4 23 ef bd b9 7c 75 58 57 c2 b1 37 25 63 29 11 73 45 1d 51 31 ba 36 cd e8 b6 0b ac 9c 3a dc d8 92 4c 3c 75 78 dd 96 b4 37 72 70 fd a2 6e 53 e8 b2 5c 8c 36 87 b7 6d 17 b9 d1 41 61 05 af 5b 22 af b1 5c 53 32 76 ab 64 1c ac b7 14 d0 87 c8 9b 8a f9 6d 25 04 12 db c3 f2 a6 37 cc 34 02 fa 00 78 57 60 77 e5 97 ae ef 26 37 1a b9 58 2f 59 9c 3f 33 e5 6d 92 31 a9 f8 dd 90 f0 b4 24 bb f8 40 22 03 ad 98 32 10 28 64 a0 a5 90 4f be cd ae 04 eb df 44 06 4c 2e a8 68 48 fa 57 56 5c 20 21 7a c2 b2 35 21 bb 29 49 76 01 45 29 89 fc 63 08 b6 45 b4 55 26 fa d0 34 6c 23 2c 07 e6 d7 1d a9 84 45 27 9c 4d 6a 92 4d 2c 25 2c 13 06 Data Ascii: LPR/%UiXW0\'K#s#\|uXW7%c)sEQ16:L<ux7rpnS\6mAa["\S2vdm%74xW`w&7X/Y?3m1$@"2(dODL.hHWV\ !z5!)IvE)cEU&4l#,E'MjM,%,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49867	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:58 UTC	691	OUT	GET / HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-Modified-Since: Thu, 04 Jul 2024 22:20:37 GMT
2024-07-04 22:39:58 UTC	641	IN	HTTP/1.1 304 Not Modified Date: Thu, 04 Jul 2024 22:39:58 GMT Connection: close vary: Accept-Encoding, Cookie Cache-Control: max-age=3, must-revalidate strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=y6P98cGhke%2BuBDiF90kFukbpmfL1c5qWaoR3taVnsh%2FYARwuuRImZi0aixwwwGmLeY%2Bz8MUej8Wcf9pX81CY7MVEzlQlvPWIBmjzTw1rBoG3pE9z%2BAk004z4pDkAyjk8XSpG52A%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d461d337c96-EWR alt-svc: h3=":443"; ma=86400

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49868	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:39:59 UTC	686	OUT	GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=184137-184137 If-Range: "66346867-33649"
2024-07-04 22:39:59 UTC	806	IN	HTTP/1.1 206 Partial Content Date: Thu, 04 Jul 2024 22:39:59 GMT Content-Type: image/png Content-Length: 1 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-33649" expires: Thu, 01 Aug 2024 11:35:07 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 212692 Content-Range: bytes 184137-184137/210505 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TSkt3Su92wC0nuMDCCrz2AU2%2Fuy6hwt5WYAcCTzKwFDXMmw1IbpOG8hpDhkcZt2jbxpJ1vPyb6Susj6lF%2BmVC8aqp7eeYfDK18MEIhbDrL%2BQT9Th4tJcgKeTsGHtrkz2S7LKCgo%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d4bc9e18c2f-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:39:59 UTC	1	IN	Data Raw: 6c Data Ascii: l

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49869	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:00 UTC	686	OUT	GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=184137-210504 If-Range: "66346867-33649"
2024-07-04 22:40:00 UTC	816	IN	HTTP/1.1 206 Partial Content Date: Thu, 04 Jul 2024 22:40:00 GMT Content-Type: image/png Content-Length: 26368 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-33649" expires: Thu, 01 Aug 2024 11:35:07 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 212693 Content-Range: bytes 184137-210504/210505 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=OFlv5gylTloxFbhwJCawo4Wr89K2lY41%2FQ9Qh47M%2F2uQ35%2BLsBxiYNf3Cj5siAV3IAlCqD8%2FcAtPkq6AfQ65af%2FbkOQUMihRKhasYsySoeFUptHnszi4sNoma%2Fg4oPfH45f0Ex4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d52bc4e330c-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:00 UTC	553	IN	Data Raw: 6c a2 2f 90 55 cf 47 47 47 39 7c f8 30 23 23 23 94 cb 65 4e 9c 38 41 2e 97 a3 50 28 10 04 01 d5 6a 95 6d db b6 71 f0 e0 c1 4b e6 10 74 6b 05 9a cd 26 2b 2b 2b 99 2e 60 79 79 99 95 95 95 2c 60 8f e3 98 62 b1 48 bb dd 66 65 65 85 8d 8d 8d 4b d6 2f 97 cb 31 30 30 c0 cc cc 0c 00 13 13 13 74 3a 1d d6 d7 d7 59 5b 5b 43 6b 4d 2e 97 23 8a 22 ea f5 3a ab ab ab c4 71 9c bd 1f 40 a7 d3 c9 12 a4 ee 41 69 e9 fb 83 d3 0c f4 f5 f5 31 3a 3a ca dc dc 1c e7 ce 9d cb 1e bb 2a 44 92 a6 5a 83 12 8a d8 c2 9b 73 6b bc 34 bd 46 5b f5 a1 f2 55 84 94 60 9c e5 ae 31 06 b4 45 49 85 14 06 63 34 da 78 58 ab 10 4a 62 88 e9 b4 d7 89 c2 3a 56 37 10 32 c6 a8 3c 1a 0f 11 87 78 56 63 b4 21 16 39 a2 42 3f e7 eb 31 af 9e ba 48 64 93 60 df da 74 4c 18 f6 2d 34 cb ae 42 4f 7a f2 5c ee 65 dc 43 Data Ascii: l/UGGG9\|0###eN8A.P(jmqKtk&+++.`yy,`bHfeeK/100t:Y[[CkM.#":q@Ai1::*DZsk4F[U`1EIc4xXJb:V72<xVc!9B?1Hd`tL-4BOz\eC
2024-07-04 22:40:00 UTC	1369	IN	Data Raw: 3f 75 df 47 b8 75 e0 56 3c eb 25 2b 68 5d a0 25 44 32 75 59 e2 09 4b 7f 7f 3f d6 18 be fc e5 2f 53 2a 95 d8 b9 73 27 41 10 30 3e 3e 9e 89 5b 07 06 06 90 52 d2 df df 4f a7 d3 a1 58 2c d2 df df 8f 10 82 81 81 81 cc 36 74 6c 6c 8c a1 a1 21 aa d5 2a 8f 3e fa 28 cd 66 93 81 81 01 36 36 36 78 fa e9 a7 f9 c4 27 3e 91 f1 e3 f3 f9 7c 46 6b 49 2b f0 e9 94 df 94 92 b3 7d fb 76 4e 9e 3c c9 f9 f3 e7 f1 7d 9f b1 b1 31 6a b5 1a 23 23 23 8c 8f 8f 93 cb e5 d8 b9 73 27 53 53 53 d4 eb 75 26 26 26 c8 e7 f3 b4 db ed 4b 8e 55 df f7 19 19 19 61 6a 6a 8a a3 47 8f d2 68 34 38 71 e2 04 40 a6 35 58 5f 5f 67 7c 7c 9c 30 0c 79 fd f5 d7 e9 74 3a 8c 8e 8e 92 cf e7 b3 e5 0c 0d 0d 31 34 34 44 a1 50 c8 28 3d 27 4f 9e 04 60 fb f6 ed ec dd bb 97 53 a7 4e 31 35 35 45 14 45 d4 6a 35 f2 f9 7c Data Ascii: ?uGuV<%+h]%D2uYK?/Ss'A0>>[ROX,6tll!>(f666x'>\|FkI+}vN<}1j###s'SSSu&&&KUajjGh48q@5X__g\|\|0yt:144DP(='O`SN155EEj5\|
2024-07-04 22:40:00 UTC	1369	IN	Data Raw: 80 c1 75 00 ba 97 dd ed 83 5f 2c 16 b3 20 fd f2 c7 dd fa 7b 0c 0c 0c 5c f2 78 b7 60 b6 9b ca d4 d7 d7 97 fd bd bf bf ff 8a cb 0c 82 e0 92 75 4b d7 63 7d 7d 9d 46 a3 91 e9 03 d2 ed 71 f9 72 ae f4 fa 14 be ef 5f 71 1b 5e 8e 94 56 f5 4e e0 98 36 02 6d 3b cc af 45 cc 6d 94 f1 fc 06 81 5e c1 7a 3e 6d 5f 20 a3 98 bc 36 60 25 b1 b4 48 cf 03 9b 27 94 8a 4e d0 87 69 af 32 2e a7 38 38 16 b0 3b df cf be 66 87 db 26 0a 04 f3 15 be fa ba 45 eb 16 91 a7 c1 40 ae 9d c3 e0 11 7a 3e 71 1e a2 a8 ce 89 b9 75 8e 6e af 50 f6 3d 8c 90 ee 5c 30 c9 35 26 e9 90 a5 03 f2 5c ed c5 60 85 c6 24 86 01 3d f4 70 33 a1 97 00 f4 d0 c3 75 e1 52 3e b5 e3 b6 3b da 8f 20 31 95 4b f9 b8 02 4c 37 af d4 26 93 67 ae b5 dc 2b 60 ab 36 9a dd 93 51 6f 04 5b 9f 80 79 29 f3 fe 1d bf 3a e3 b6 df c8 3b Data Ascii: u_, {\x`uKc}}Fqr_q^VN6m;Em^z>m_ 6`%H'Ni2.88;f&E@z>qunP=\05&\`$=p3uR>; 1KL7&g+`6Qo[y):;
2024-07-04 22:40:00 UTC	1369	IN	Data Raw: 37 3a d1 37 2b d5 de e8 9a 6f 8d 82 23 85 4b 6c b6 86 2d be de 6c 2d 01 d2 42 21 b1 e4 6c 0e 23 04 da c5 06 84 52 22 8d 8f 1f bb 24 c9 5a 0f 8b a5 e5 5b 62 61 89 94 2b 41 07 d6 59 1c 46 d2 c7 0a 68 ca 08 90 28 a3 50 5a e0 19 27 d7 0d 65 08 c2 12 8b 00 ac 20 b6 26 09 68 2e e5 fc 88 cb ba 32 69 d8 9f 92 92 36 57 dd 25 2a 42 18 04 31 69 26 e9 fe 97 6e 78 91 00 8d 06 0b 46 3a e7 1c a9 34 4a 59 42 65 88 3c 88 a5 cd de 63 73 2e 84 9b b6 eb 62 20 9b 4c b0 4e 92 a5 24 09 70 e9 93 c0 53 0a 2d 04 91 35 a8 24 30 93 7e 40 b1 56 23 37 30 48 9a 5e 38 c1 b7 a4 6f c7 6e b4 8e f0 7d 81 17 28 ac f5 dd ba 6a 91 05 56 c6 68 47 39 12 16 6b c0 93 4e 40 ef b6 80 5b 1f 44 2a ac b7 19 7d aa 87 2b 23 0d fa 81 4b 28 7f 3f 14 f4 1f dc 31 ae 89 50 04 08 51 c0 17 1b f8 84 18 51 70 8e Data Ascii: 7:7+o#Kl-l-B!l#R"$Z[ba+AYFh(PZ'e &h.2i6W%B1i&nxF:4JYBe<cs.b LN$pS-5$0~@V#70H^8on}(jVhG9kN@[D}+#K(?1PQQp
2024-07-04 22:40:00 UTC	1369	IN	Data Raw: 9b 73 33 24 5b 34 b0 bd a9 70 23 6e 5e 69 e0 af b5 7e 97 93 00 97 18 7a 48 8c b5 04 be a5 52 8a a9 7a eb c4 46 61 f0 f0 54 80 27 2d 9d 28 82 9c 42 78 1e c2 48 4a 7d 83 e4 ca 92 d5 18 de 9c 59 e0 ab 8f 9f 64 3e da 83 97 2f 27 7a 17 8b c6 60 63 e3 02 75 29 90 32 b1 ed 14 16 ab 24 36 12 c8 b8 43 45 2c 33 51 dd 81 f2 fd 24 f9 96 58 13 27 09 b8 5b cf f4 38 74 ff d2 63 d0 b2 95 61 8c 3d f4 f0 c3 8a 5e 02 d0 43 0f d7 40 c2 44 46 08 50 c2 b9 fe 6b 19 12 cb 10 2b 9d c3 84 e3 99 c3 87 fa 2c db 8a a0 8b 69 cb f8 da 63 c0 d2 40 70 33 e4 73 bf 9b 84 12 b2 95 e6 b3 0b 1a 52 2a c0 15 96 93 0e c1 ba da e3 57 a5 27 5d ef e3 dd cf b9 1c 3f 88 a0 44 01 57 f6 3c 77 97 bf ab 5f 02 45 d7 f3 ae f4 09 5c ad fb 4a 9f 4e bd e5 2f 6f 8f ab fb ae 6f 52 76 ba f1 76 81 b1 3b 82 8c 51 Data Ascii: s3$[4p#n^i~zHRzFaT'-(BxHJ}Yd>/'z`cu)2$6CE,3Q$X'[8tca=^C@DFPk+,ic@p3sR*W']?DW<w_E\JN/ooRvv;Q
2024-07-04 22:40:00 UTC	1369	IN	Data Raw: 1c 91 17 75 8c 84 16 1e 16 9f 5c a7 82 50 3e 1a 8d 90 21 4a 6a 27 2b b7 31 1e 79 a4 18 a2 11 b7 88 54 84 30 16 d9 32 94 9b 4d ee 3e a0 f9 b9 bd 55 fa 83 3c 4a 1b a4 36 a0 2c 02 9d b4 c5 9c 50 ff 52 08 b0 9b f3 5e de 5e 77 d3 43 0f 3f 9a e8 25 00 3d f4 70 9d f8 7e 50 70 95 52 48 21 d0 3a a2 de 69 11 85 11 be ef 51 2c 16 51 72 eb 41 4f 4a 09 b9 d1 c7 37 9f 77 65 2a 52 46 39 f9 21 1c 3e d4 c3 5b dd 7d 84 dd d4 00 74 8f 27 48 c3 1c d1 5d 8e 4f 1e 4f c3 23 2d 04 75 01 cb 61 93 e9 d9 05 a6 e6 57 39 b3 d2 60 6d a5 41 1c 6b e7 bb 6e db f8 c2 d2 97 0b 18 1a 18 a2 36 38 c6 68 7f 91 9d b5 0a 23 85 12 45 e5 a1 8d 49 74 2e 49 27 ac 57 61 bd f9 61 2d 9e 56 20 0b 58 a1 51 48 d0 11 b5 8a e4 81 f7 ec a4 ed 2d f1 c4 d9 25 1a a6 84 56 01 56 0b f2 32 8f 90 92 50 5b 14 3e 56 Data Ascii: u\P>!Jj'+1yT02M>U<J6,PR^^wC?%=p~PpRH!:iQ,QrAOJ7we*RF9!>[}t'H]OO#-uaW9`mAkn68h#EIt.I'Waa-V XQH-%VV2P[>V
2024-07-04 22:40:00 UTC	1369	IN	Data Raw: d7 be c6 83 0f 3e c8 fe fd fb b3 d7 7f f3 9b df 64 fb f6 ed 1c 3b 76 0c cf f3 e8 74 3a bc f6 da 6b 2c 2c 2c 70 f7 dd 77 53 ad 56 b3 e5 dc c8 40 af 9b 01 46 40 ec 81 40 a3 68 6f 06 d5 06 d0 3e 79 e0 96 00 b6 1f ce 71 6b b5 c2 33 67 2c c7 97 3c 16 9a 6e c8 97 c9 05 b4 94 71 6e b3 78 6e 12 b5 b0 18 d3 26 c2 22 4d cc a0 86 63 13 01 f7 1e 8a 78 ef ee 02 95 a2 4c 47 52 bb 60 df 0a 37 5f 22 51 9e 6b 99 8a e2 05 d6 76 17 53 8c 3b 67 30 c9 97 ed 5d 81 7a b8 29 d1 4b 00 7a e8 e1 7a 71 03 6e 84 59 35 1e 41 6c 34 4a 4a 74 1c 73 ee dc 0c 33 33 33 dc f9 13 77 b2 6d db 36 8c 31 68 63 92 2a bb 20 c8 05 dc 7a f8 56 a4 52 9c 3a 7d 9a 4a a5 c2 ae 9d 3b dd 32 b1 48 2b ba 2c 46 13 51 25 96 38 d6 9c 3e 75 8a 66 ab c5 dd 77 dd c9 60 ff 20 d6 42 bd d9 e4 f8 ab 27 c8 e7 03 06 06 Data Ascii: >d;vt:k,,,pwSV@F@@ho>yqk3g,<nqnxn&"McxLGR`7_"QkvS;g0]z)KzzqnY5Al4JJts333wm61hc* zVR:}J;2H+,FQ%8>ufw` B'
2024-07-04 22:40:00 UTC	1369	IN	Data Raw: a2 92 00 c6 18 83 d6 31 16 08 3b 21 5a c7 48 21 c9 e5 02 c6 c6 c6 58 5a 5a a2 5e af 93 1b 1c cc e8 19 36 e5 e0 a7 3f 63 91 52 50 a9 54 b0 d6 b2 b2 bc 42 63 b8 8e 90 1e 6b 6b 6b 54 2a 15 8a c5 12 c6 5a 4e 9f 99 66 65 65 85 a1 a1 7e 96 97 57 01 cb c0 c0 00 27 4f be 49 a5 52 22 08 72 cc cd 2e d2 57 ed e3 ec d9 69 d6 d7 d7 19 ae 0d b1 b6 5e 67 6d bd 81 54 3e ab ab eb 54 2a 65 a2 28 62 6a ea 2c be 1f d0 e9 84 4c 4f 4f 33 38 d8 4f 1c 47 9c 3b 37 83 ef fb 68 6d 38 7d 7a 8a 6a d5 3d ff f4 e9 69 40 52 ab 0d 66 42 e4 1e 7e f0 10 02 3c e9 26 fd 5a ad 11 52 22 a4 d3 87 ac 6e d4 69 44 11 41 39 a0 28 63 d6 3d 77 8c d9 4e 0b 95 2f 52 d6 21 e6 f9 57 f8 de bf 7f 93 fa a9 37 18 1f 1e 60 f4 f0 6e e6 56 97 99 eb 5c a4 14 14 88 2f bc c4 d2 0b 39 fa fa 7e 96 fc 40 15 23 0c d2 Data Ascii: 1;!ZH!XZZ^6?cRPTBckkkTZNfee~W'OIR"r.Wi^gmT>Te(bj,LOO38OG;7hm8}zj=i@RfB~<&ZR"niDA9(c=wN/R!W7`nV\/9~@#
2024-07-04 22:40:00 UTC	1369	IN	Data Raw: a2 62 8c 76 c2 3a 21 51 ca a7 50 28 b1 6b d7 6e fa fa aa c9 ba bf f3 fd d1 c3 75 20 d9 ae 46 b8 af f4 90 35 9b 0f 39 08 81 c1 62 8d c1 93 1e 61 1c b3 b4 b2 ca e2 da 12 0d 11 d2 46 12 cb 12 2a 84 9c 11 78 f5 36 eb a7 4e f0 bd ff ef 1f 91 6f be c6 2f 3c 78 8c 8f 7d e4 c3 6c df b3 9b d2 e0 10 ef f1 6e e7 bd c7 8e f0 dd a7 9f e4 b5 67 ff 9d 0b 67 d7 58 3f f9 2a f6 c8 21 8a b5 7e 42 24 7e be 44 de 2b 62 ac 62 61 71 8d b1 6a 05 5f 49 ac 89 01 81 55 06 89 73 cc 39 f1 da 09 9e 7d f6 59 0a 85 02 17 2f 5e c4 f7 7d be f5 ad 6f b1 63 c7 8e cc bd 27 8e 63 c2 30 a4 54 2a 11 86 21 8d 46 03 ad 35 cd 66 93 42 a1 80 10 82 5a ad c6 47 3f fa 51 06 06 06 32 61 6e bb dd 46 08 c1 47 3e f2 11 3e f8 c1 0f f2 e2 8b 2f f2 cf ff fc cf 4c 4e 4e 02 8e e3 bf be be 8e 49 66 17 c4 71 4c Data Ascii: bv:!QP(knu F59baFx6No/<x}lnggX?!~B$~D+bbaqj_IUs9}Y/^}oc'c0T*!F5fBZG?Q2anFG>>/LNNIfqL
2024-07-04 22:40:00 UTC	1369	IN	Data Raw: c7 e4 c4 31 be 53 59 e4 c9 ef 1e 67 f5 f4 29 8e dc 75 94 20 ef d1 34 4d 8a d2 27 57 f0 89 4c 9b 46 bb 45 a9 12 00 1e 42 28 24 89 52 53 c2 bd 0f be 9f 23 ef 3d c2 d1 a3 47 c9 e7 f3 7c fc e3 1f e7 d8 b1 63 34 9b 4d 82 20 60 7c 7c 9c 5b 6f bd 15 a5 14 fb f6 ed e3 f7 7f ff f7 79 ee b9 e7 18 1c 1c e4 a3 1f fd 28 4a 29 06 07 07 79 f2 c9 27 19 1c 1c 64 f7 ee dd 99 cd e7 e4 e4 e4 ff df de 9b 3f c9 95 65 f7 7d 9f 73 ef 7d 2f b7 da 51 85 a5 80 2a 00 0d f4 82 9e 06 a6 a7 97 59 d8 33 62 f4 88 94 3c 1e 2a 48 07 2d 85 43 8e b0 a5 a0 22 fc 8b 43 bf f0 5f 98 df 6c 05 4d 8b 8e 10 15 96 6d 49 b4 28 45 d8 0c 92 1a 59 0c 8b a6 a6 a7 a7 d9 13 9c e9 51 73 ba 9b d3 fb 82 06 d0 68 a0 50 28 14 b2 b2 32 df 72 af 7f b8 ef 65 be ca ca 2a 14 50 58 aa 30 f7 13 91 55 b9 bc 7c 5b de cc Data Ascii: 1SYg)u 4M'WLFEB($RS#=G\|c4M `\|\|[oy(J)y'd?e}s}/QY3b<H-C"C_lMmI(EYQshP(2re*PX0U\|[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49870	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:01 UTC	391	OUT	GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:02 UTC	785	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:02 GMT Content-Type: image/png Content-Length: 210505 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-33649" expires: Thu, 01 Aug 2024 11:35:07 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 212695 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=SXbb%2FGu4lLVwWEjJhlhr9zVQA%2BJBHisvZ%2B7%2F%2FACzsMt0STqqzqjA4GpIvYhfXm6%2BEiWx26mOGIddfPxaQ062XI1einj2YDZdHUYdOTwljlhZkdapohbd3T56x9Z5B71jWDC%2BBKA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d5cfc3a1784-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:02 UTC	584	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 00 00 00 02 00 08 06 00 00 00 35 f6 0b 3a 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd 7b 90 64 d7 5d e7 f9 39 e7 9e 7b f3 59 59 59 cf ae ea 87 5a 8f 6e b5 ba 25 59 92 6d 2c 21 5b 33 c2 96 90 31 f6 1a 83 c1 60 bc 0b c4 10 8b 63 82 60 86 88 65 07 83 83 08 c0 1b cb 10 0e 33 1b 6b 22 bc 1b 03 bb 2c 31 66 d9 c1 58 8c 0d 36 8b 63 90 2d 63 ec b5 65 a9 f5 ee a7 fa dd f5 ae ca 77 e6 bd f7 9c b3 7f dc 7b b3 b2 aa ab fa 6d f5 eb 7c 22 b2 32 f3 66 de 9b 37 4f 9e ac fc fe ce ef 05 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 70 38 1c 0e 87 c3 e1 Data Ascii: PNGIHDR5:pHYs+ IDATx{d]9{YYYZn%Ym,![31`c`e3k",1fX6c-cew{m\|"2f7Op8p8p8p8p8p8p8p8
2024-07-04 22:40:02 UTC	1369	IN	Data Raw: 70 38 1c 8e ab 8f fb cf ea 70 5c 25 06 e2 fb 07 85 7d 26 f6 8b e9 75 39 bd 5d 24 31 06 32 af c0 7a 6f 01 e7 b9 cf c0 fd ab c1 f5 20 32 dd 39 5c f8 f5 af f5 f9 c1 e5 9d c3 e0 aa fe a0 f0 5f 7f 69 a7 97 f5 46 41 ec 8c 00 87 c3 e1 b8 ba a8 0b 3f c5 e1 70 9c 8f 75 ab fe fd d5 7e 6b 6d 51 60 cb 16 ca 60 2b 42 88 0a c8 4a 1c c7 e5 6e b7 5b 0e c3 b0 50 af 37 83 7a a3 ae 96 96 96 d4 ca f2 8a ac d5 1a 74 7b 3d d9 ee 76 64 18 86 b2 d3 69 11 c7 b1 d4 5a cb 38 8e 11 42 48 8b c5 18 8b 10 48 6b 2d d8 f3 9d dd 05 6c 04 21 c0 da eb 41 58 c2 f5 21 70 c1 9d c7 9a d7 b7 18 ac b0 88 81 f5 22 0b 60 2d 16 50 4a e1 2b 85 90 02 29 25 4a 29 82 20 47 a1 90 37 f9 7c 9e 52 b1 44 75 a8 62 c6 aa 23 f1 d4 d4 54 5c 28 15 ba f9 5c ae 93 cf e7 bb f9 7c be 29 a5 68 63 6d 13 68 22 c4 ca c0 Data Ascii: p8p\%}&u9]$12zo 29\_iFA?pu~kmQ``+BJn[P7zt{=vdiZ8BHHk-l!AX!p"`-PJ+)%J) G7\|RDub#T\(\\|)hcmh"
2024-07-04 22:40:02 UTC	1369	IN	Data Raw: 22 49 3d 15 20 3c 41 6c 14 da 4a 04 36 a9 c4 22 64 e2 1c 10 26 31 06 ce ab 7b 04 86 08 84 e6 56 76 f6 5d c9 3b b7 57 7a 80 eb 80 2b 7f 0f b6 9f 4c 9e 19 a7 83 2e 85 cc 58 cd 1e cf 2c 85 e4 af 41 22 f1 44 80 15 16 83 06 84 14 16 b4 b6 c6 18 4c 6c 42 15 46 b1 ac 37 db aa d1 ee ca 7a a3 15 34 9b 4d d5 68 b6 54 ab d5 96 f7 ee db a7 ee dd 7b 4f 50 2a 15 95 01 84 10 52 60 a5 b5 49 38 10 2e 39 d8 e1 70 38 2e 19 67 00 38 1c 17 49 1a f3 9f 89 ff 00 4b 99 24 de 7f 6a 65 a5 b6 f5 b9 ef 3d bf e3 b5 03 af dd b6 b0 b0 30 79 fc c4 c9 d1 63 27 4e 54 17 6a f5 72 6c 4c 3e 8e 23 65 ac 91 71 a8 95 d6 9a 74 91 94 58 6b 80 24 79 32 0d b3 b0 de 40 b8 45 9a bf 2b 84 00 9b 09 2c d2 db e9 ea fe 05 a3 80 9c 30 ba 22 6e f0 e1 13 5c 0d 2f 46 16 7a 96 dd 1c 1c 14 8b 4c 27 a6 94 62 e0 Data Ascii: "I= <AlJ6"d&1{Vv];Wz+L.X,A"DLlBF7z4MhT{OP*R`I8.9p8.g8IK$je=0yc'NTjrlL>#eqtXk$y2@E+,0"n\/FzL'b
2024-07-04 22:40:02 UTC	1369	IN	Data Raw: c2 66 a1 3f b5 5a 6d fc 95 57 5f 19 9f 9f 9f 1f 3f 7e e2 f8 e8 dc dc 5c b5 db eb 15 3b bd 5e 5e 6b 2d a5 e7 c9 48 c7 68 6d 89 c3 2e 3a 0c 79 eb 43 0f f2 2b bf f2 df f3 c1 1f 7f 1f 43 a5 22 c6 80 d1 69 f0 82 00 30 58 9b 34 fd ea f7 02 e8 af 61 4a 2e d7 00 b8 95 c3 ff 33 ce 19 82 f5 1b 2e 20 8e 6f 8a 10 aa 2b 9c 07 e7 d5 ff 69 af 04 b1 be 2a 6d 3a 87 ad b0 69 a9 50 40 0a c4 40 3f 8b a7 de fd 38 fb f6 ec e1 af fe fa 6f f8 b3 3f fb 73 8e 1e 3d c2 f0 c8 28 58 43 14 59 29 a4 24 0c 43 25 a5 90 c6 78 f2 d4 a9 d3 a6 94 cf 9b 42 3e 08 5f 7d f5 d5 ee 63 8f 3d b6 ec 79 aa 69 ad 6d 5a 6c 5b 20 da 90 75 0e 76 46 80 c3 e1 70 6c 86 33 00 1c 8e cd 49 43 7f 6c 00 a2 08 94 e3 38 1e 3d 73 e6 cc f8 89 93 27 b7 cc cf cf 8d 9f 39 75 ba da a8 37 ca a1 31 f9 5e d8 53 b1 b5 32 69 Data Ascii: f?ZmW_?~\;^^k-Hhm.:yC+C"i0X4aJ.3. o+i*m:iP@@?8o?s=(XCY)$C%xB>_}c=yimZl[ uvFpl3ICl8=s'9u71^S2i
2024-07-04 22:40:02 UTC	1369	IN	Data Raw: 6d 54 14 47 d2 18 23 b5 d1 68 13 03 96 f7 3c f1 04 3f f2 ee 7f 89 90 e9 2a aa b5 6b 44 7d 26 d2 07 3b ac 66 db a3 28 a2 5e af 13 c7 31 d6 1a e6 e7 17 38 70 e0 20 f5 7a 33 f5 02 24 2b fc 51 14 f2 fa eb 07 38 7d fa 2c c6 18 96 96 96 38 78 f0 10 87 0f 1f e1 f4 e9 33 84 61 78 0d 86 ed fa 22 d6 9a ef 7c 7f 3f ff db ff fe 1f 39 7c f8 08 43 43 43 0c 95 4a e4 82 80 44 57 7a 08 04 cf 7f ff 39 3e f3 1f fe 17 4e 9e 99 49 cb cf 67 a1 30 f6 82 dd 96 af 17 32 71 bf 3e 04 08 e8 cf b7 13 27 4e b0 b8 b8 98 bc ef f4 f9 d9 7c 8b a2 08 80 7a a3 c1 a1 43 87 58 5c 5c 44 4a 49 b7 db e5 f0 e1 c3 9c 3e 7d 06 80 4e a7 cb ec ec 1c cd 66 2b 49 77 91 82 d4 c9 90 8c 99 d6 1c 3d 72 94 bf f9 d2 97 f9 de f3 2f 10 c5 31 52 78 fd d0 22 6b 93 31 15 e9 7e 83 06 84 b1 96 91 ea 08 4f 3d f1 04 Data Ascii: mTG#h<?*kD}&;f(^18p z3$+Q8},8x3ax"\|?9\|CCCJDWz9>NIg02q>'N\|zCX\\DJI>}Nf+Iw=r/1Rx"k1~O=
2024-07-04 22:40:02 UTC	1369	IN	Data Raw: 40 0e c7 b9 64 f1 ff 0a 44 00 e4 db ed 76 a1 d1 68 14 bb 61 2f 1f c6 51 10 eb 58 09 84 34 e9 2a ab 00 8c d1 6c dd be 95 db 77 6e c7 f7 3d 8c 5e 4d 24 1d 64 23 2f c0 9a 44 cc 14 63 2c 4a f9 2c 2d 2d 71 f4 e8 1b 6c dd 3a cd f8 f8 28 30 da 4f f6 7d e5 95 a3 e4 72 39 6e bb ed 36 3c cf 63 66 66 96 38 d6 8c 8c 8c f4 73 0e 6e 65 82 20 47 a1 58 62 66 76 1e e9 29 7c df 4f 64 bd 31 28 e5 61 8c 4e 3a b2 61 f0 3c 8f 89 c9 49 94 1f a4 fd 14 2c 62 4d 91 cb eb 97 8d 42 7e 00 8e 1d 3b 46 bd 5e a7 d7 eb 51 a9 54 30 03 a1 42 52 4a b4 d6 49 c9 d9 d4 30 d0 69 f2 ef e0 71 ad b5 fd 9c 01 b0 8c 8f 8f 31 3c 5c a1 d3 e9 d0 68 34 38 71 fc 04 53 d3 53 0c 0f 57 e8 1b 4d 24 22 5f f6 7b d8 ad f6 bc b0 24 15 ab 3c 2f 4b 60 4f c6 58 a6 c7 b7 d6 60 8c c0 f7 14 fb f6 de 43 b9 5c 62 a5 1b Data Ascii: @dDvha/QX4*lwn=^M$d#/Dc,J,--ql:(0O}r9n6<cff8sne GXbfv)\|Od1(aN:a<I,bMB~;F^QT0BRJI0iq1<\h48qSSWM$"_{$</K`OX`C\b
2024-07-04 22:40:02 UTC	1369	IN	Data Raw: 98 50 6b bc 01 af 8d b5 59 cc fc f5 3f 96 99 11 e9 fb 3e 3b 76 ec 00 ce ed 10 bc 3e 51 d8 5a 4b a9 54 a2 54 2a f5 b7 4f 4e 4e f6 93 7c e3 38 a6 5c 2e 73 cf 3d f7 ac 39 1e 24 f3 76 7a 7a 6a 4d 4e 8b ef 2b a6 a6 b6 ac 29 3f 9b ec 63 d3 30 25 81 52 1b f7 9f b4 fd bf a2 df a5 38 08 02 26 27 b6 e0 21 88 31 fd ee d8 32 79 53 52 1b 23 23 1d ab 38 8e 54 a7 dd c9 bc 76 f2 06 49 dd 70 38 1c 8e 6b 86 33 00 1c 8e 0b 60 52 21 84 35 18 2c 56 80 f4 04 c6 5a 99 e5 37 da 34 19 b8 32 54 06 52 31 63 2f 1c 3d b2 be 33 70 bf 3e fd c0 b6 c1 50 a1 cd ca 87 66 64 a5 1f b3 84 ce d5 e4 cd 5b 13 01 44 c6 52 2e 97 79 ff 53 3f ca 43 0f 3c c0 8b fb 5f a4 d1 a8 23 84 64 db d6 ad ec dd 7b 0f 63 23 55 90 02 9d d6 b9 37 18 c0 5b 93 c0 7a bd 32 f8 79 0f 7a 93 60 ad 01 90 25 fb 0e ee 07 ab Data Ascii: PkY?>;v>QZKTT*ONN\|8\.s=9$vzzjMN+)?c0%R8&'!12ySR##8TvIp8k3`R!5,VZ742TR1c/=3p>Pfd[DR.yS?C<_#d{c#U7[z2yz`%
2024-07-04 22:40:02 UTC	1369	IN	Data Raw: e8 d2 1c 07 66 4f 70 ea d5 19 96 4f 34 39 bb 74 9c d3 73 27 89 0f 9d a2 bc d0 c0 4e 55 18 bf 73 07 f7 ed d9 ce db 1e bc 8b bd fb 7e 98 e1 b1 ad f8 9e 42 9a 02 42 4a ac d0 08 eb 81 2e a1 04 48 99 78 47 8c 02 61 2d 18 bb 66 85 78 a3 1c 86 ec 36 ac 1a 05 59 8d f8 6c db e0 3e d9 b6 f5 b1 e7 1b 79 19 32 83 41 ca f5 86 c0 ad cd 8d 33 02 a9 ff c9 4a a4 95 49 b3 30 52 2f 8d 95 12 84 b2 58 05 76 c0 00 10 83 c6 40 8c 0b 77 85 6b 60 04 5d 83 46 6c 1b be 47 f7 7d 77 38 ce c5 19 00 0e c7 a5 33 98 9d bb 26 96 e1 7a 5b 39 b6 d6 43 18 d2 f3 b4 d8 38 c2 53 1e a1 d1 ec 7f e5 30 7f fa 5f 9f e6 f5 d3 87 10 67 0d c5 56 91 7a 34 c3 d9 85 13 ec a8 49 aa 75 38 dd 6c 32 d7 e8 10 ae 9c 26 67 67 f1 d4 30 3b 77 05 4c 4d 8d e2 ab 00 ac c1 0a 0d c6 43 d8 24 01 da 23 f1 32 64 99 05 92 Data Ascii: fOpO49ts'NUs~BBJ.HxGa-fx6Yl>y2A3JI0R/Xv@wk`]FlG}w83&z[9C8S0_gVz4Iu8l2&gg0;wLMC$#2d
2024-07-04 22:40:02 UTC	1369	IN	Data Raw: ed eb af bf 4e a3 d1 e0 83 1f fc 20 a5 52 89 e5 e5 65 7e ee e7 7e 8e f1 f1 71 5e 7d f5 55 be f4 a5 2f 51 2c 16 09 82 80 cf 7c e6 33 3c f9 e4 93 68 ad 79 fa e9 a7 d9 b3 67 0f 5f fc e2 17 f9 e2 17 bf c8 4f fd d4 4f f1 cc 33 cf d0 68 34 f8 d0 87 3e d4 6f 7c 26 a5 a4 50 28 d0 6c 36 f9 fc e7 3f cf 97 bf fc 65 9e 78 e2 09 be f1 8d 6f 70 f6 ec 59 3e f9 c9 4f b2 73 e7 ce 35 63 0b b7 4e b7 e4 0d 67 63 96 5b bb 5e d0 db 01 43 36 bb ee 1b 4b f4 8f 94 54 60 4a 9a ab 65 55 9b b4 36 d8 b4 1f 81 c5 62 4d d6 03 e0 f2 ce db 53 1e ad 56 93 5c 21 4f 9e 24 84 2b f9 bc 3d 82 c0 97 be f2 94 10 22 1f c5 71 b9 d3 ed 8e d6 6a f5 d8 f3 64 de 42 55 08 d1 05 11 0a b1 26 24 e4 52 d1 97 b1 cf f5 2c e6 df 2c a1 7e d5 f7 11 03 37 b2 90 4b 29 84 c9 be ff 52 4a 23 92 fb d9 6a ff 46 a2 bf Data Ascii: N Re~~q^}U/Q,\|3<hyg_OO3h4>o\|&P(l6?exopY>Os5cNgc[^C6KT`JeU6bMSV\!O$+="qjdBU&$R,,~7K)RJ#jF
2024-07-04 22:40:02 UTC	1369	IN	Data Raw: cf ff fc cf d9 b1 63 07 63 63 63 74 3a 1d 6e bf fd 76 7c df a7 d3 e9 50 2c 16 d9 bf 7f 3f 7f f5 57 7f c5 53 4f 3d c5 c9 93 27 f9 a7 7f fa 27 de ff fe f7 f3 e0 83 0f f2 cc 33 cf b0 77 ef 5e 16 17 17 d9 b2 65 0b c3 c3 c3 d4 6a 35 ba dd 2e a5 52 89 a5 a5 25 46 46 46 78 e8 a1 87 f8 e6 37 bf c9 f6 ed db 29 14 0a 58 6b fb 09 c6 83 63 7a eb 94 00 b5 c8 2c 40 6b a0 5b b0 b5 36 a9 a7 9f 19 92 32 69 9e 6b ac a5 d9 68 b0 b0 b8 c0 f7 be ff 7d 9e df ff 32 67 ce cc d0 ed 74 e8 f6 7a b4 db ed f4 76 97 6e b7 87 8e 63 e2 38 09 03 d2 5a 27 1d a3 a5 44 0a 81 b1 06 6b c0 9e 67 95 7f 7d c2 f1 46 8f eb b4 58 4b df 00 90 89 01 e0 4b 0f e5 7b 2a 50 8a 20 f0 55 ce f7 03 df 0f 8a be 52 46 29 65 84 27 4d d2 ed f9 92 12 bd 7f d0 95 61 6e c6 2a 3c 57 f8 5a e7 71 11 91 78 89 3c 40 c8 Data Ascii: cccct:nv\|P,?WSO=''3w^ej5.R%FFFx7)Xkcz,@k[62ikh}2gtzvnc8Z'Dkg}FXKK{P URF)e'Man<WZqx<@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49874	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:04 UTC	644	OUT	GET /pc/ HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:05 UTC	744	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 04 Jul 2024 22:40:05 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close location: https://www.telegramkv.com/pc vary: Accept-Encoding, Cookie x-redirect-by: WordPress strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0yfk%2BBAuwmS%2BNcSbPaUtp%2FN9uJ0K144r0kPbXVuGZ0Jio%2BVwkrAC%2B7aYt7VnPwH7QVrPGbpqRSrFzqlkb9C0rNeMp%2FWOqOeF7VbqYOdGSpJDR4Ce6WhivzfePv%2B72dApzfbjRns%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d6f1d1843a1-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49875	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:05 UTC	643	OUT	GET /pc HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:06 UTC	891	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:06 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close link: <https://www.telegramkv.com/wp-json/>; rel="https://api.w.org/" link: <https://www.telegramkv.com/wp-json/wp/v2/pages/299>; rel="alternate"; type="application/json" link: <https://www.telegramkv.com/?p=299>; rel=shortlink vary: Accept-Encoding, Cookie strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KX3OryNggSzquEImXOwmSVdqCZr%2FEUxicT5HS%2BXSToGG%2BOV8Zw06J9a0szyM9B6lGPgECs2iXVAALKfj8u09vDXPFIXh48rUF0sJqVn9A9M28XzADf9LqQ7sl%2FBdCrSZWj%2B%2BpdI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d746e9a42bc-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:06 UTC	478	IN	Data Raw: 37 63 33 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 5f 43 4e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 67 74 68 65 6d 65 2f 73 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a Data Ascii: 7c36<!DOCTYPE html><html lang="zh_CN"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css">
2024-07-04 22:40:06 UTC	1369	IN	Data Raw: 6d e4 b8 ad e6 96 87 e6 a1 8c e9 9d a2 e7 89 88 20 2d 20 54 65 6c 65 67 72 61 6d e4 b8 ad e6 96 87 e5 ae 98 e7 bd 91 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 50 72 65 6d 69 75 6d 20 70 6c 75 67 69 6e 20 76 32 30 2e 34 20 28 59 6f 61 73 74 20 53 45 4f 20 76 32 30 2e 34 29 20 2d 20 68 74 74 Data Ascii: m - Telegram</title> <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO Premium plugin v20.4 (Yoast SEO v20.4) - htt
2024-07-04 22:40:06 UTC	1369	IN	Data Raw: 65 22 3a 22 42 72 65 61 64 63 72 75 6d 62 4c 69 73 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 70 63 23 62 72 65 61 64 63 72 75 6d 62 22 2c 22 69 74 65 6d 4c 69 73 74 45 6c 65 6d 65 6e 74 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 e9 a6 96 e9 a1 b5 22 2c 22 69 74 65 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c 22 6e 61 6d 65 22 3a 22 54 65 6c 65 67 72 61 6d e4 b8 ad e6 96 87 e6 a1 8c e9 9d a2 e7 89 88 22 7d 5d 7d 2c 7b 22 40 74 79 70 65 22 3a 22 57 Data Ascii: e":"BreadcrumbList","@id":"https://www.telegramkv.com/pc#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"","item":"https://www.telegramkv.com/"},{"@type":"ListItem","position":2,"name":"Telegram"}]},{"@type":"W
2024-07-04 22:40:06 UTC	1369	IN	Data Raw: 69 6c 6c 54 65 78 74 28 74 2c 30 2c 30 29 3b 76 61 72 20 74 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 2c 72 3d 28 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2c 65 2e 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 29 3b 72 65 74 75 72 6e 20 74 2e 65 76 65 72 79 28 66 75 6e Data Ascii: illText(t,0,0);var t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data));return t.every(fun
2024-07-04 22:40:06 UTC	1369	IN	Data Raw: 21 30 7d 29 7d 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 29 72 65 74 75 72 6e 20 65 2e 73 75 70 70 6f 72 74 54 65 73 74 73 7d 63 61 74 63 68 28 65 29 7b 7d 72 Data Ascii: !0})}),new Promise(function(t){var n=function(){try{var e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==typeof e.supportTests)return e.supportTests}catch(e){}r
2024-07-04 22:40:06 UTC	1369	IN	Data Raw: 27 74 65 78 74 2f 63 73 73 27 3e 0a 0a 09 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 20 30 2e 30 37 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 2d 30 2e 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 61 63 6b 67 Data Ascii: 'text/css'>img.wp-smiley, img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 0.07em !important;vertical-align: -0.1em !important;backg
2024-07-04 22:40:06 UTC	1369	IN	Data Raw: 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 3a 20 23 30 36 39 33 65 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 23 39 62 35 31 65 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 36 2c 31 34 37 2c 32 32 37 2c 31 29 20 30 25 2c 72 67 62 28 31 35 35 2c 38 31 2c 32 32 34 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 2d 74 6f 2d 76 69 76 69 64 2d 67 72 65 65 6e 2d 63 79 61 6e 3a Data Ascii: r--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--preset--gradient--light-green-cyan-to-vivid-green-cyan:
2024-07-04 22:40:06 UTC	1369	IN	Data Raw: 31 38 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 30 32 2c 32 34 38 2c 31 32 38 29 20 30 25 2c 72 67 62 28 31 31 33 2c 32 30 36 2c 31 32 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 2c 33 2c 31 32 39 29 20 30 25 2c 72 67 62 28 34 30 2c 31 31 36 2c 32 35 32 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 66 6f 6e 74 2d 73 69 7a 65 2d 2d 73 6d 61 6c 6c 3a 20 31 33 70 78 3b 2d 2d 77 70 2d 2d Data Ascii: 181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,252) 100%);--wp--preset--font-size--small: 13px;--wp--
2024-07-04 22:40:06 UTC	1369	IN	Data Raw: 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 77 68 69 74 65 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 Data Ascii: ap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cyan-bluish-gray) !important;}.has-white-color{color: v
2024-07-04 22:40:06 UTC	1369	IN	Data Raw: 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 Data Ascii: rtant;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;}.has-luminous-vivid-orange-background-color{backgrou

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49876	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:10 UTC	649	OUT	GET /android/ HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:10 UTC	739	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 04 Jul 2024 22:40:10 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close location: https://www.telegramkv.com/android vary: Accept-Encoding, Cookie x-redirect-by: WordPress strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rdpYaWWgM0B8xxqpvfL9mbDK6EGtVR%2FKxaH%2B0KrvkG8kQpYta7ZLuj6fIG095F3ADdX0mWsbo1WkxzMYFukNFdCVUDZRoABDOUccXjMJHHKFR3dIVF5dLMPune8ZIMcoeTr9jiI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d8fb8ca4352-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	49877	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:11 UTC	648	OUT	GET /android HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:11 UTC	885	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:11 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close link: <https://www.telegramkv.com/wp-json/>; rel="https://api.w.org/" link: <https://www.telegramkv.com/wp-json/wp/v2/pages/297>; rel="alternate"; type="application/json" link: <https://www.telegramkv.com/?p=297>; rel=shortlink vary: Accept-Encoding, Cookie strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=oRzFk5deH1toqdZfL9zwEvkcaeGfzJBWv%2FolwBhAc5FsClx5COZMS9NVP94rDRygN4ptJzkSxV%2B12VribNw%2Bm8QWPoOuQKMD0PI3KrGpKTcIZcCN89sQ6r7DgaexElKhD8RXSdg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29d957ed7426b-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:11 UTC	484	IN	Data Raw: 37 63 33 63 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 5f 43 4e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 67 74 68 65 6d 65 2f 73 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a Data Ascii: 7c3c<!DOCTYPE html><html lang="zh_CN"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css">
2024-07-04 22:40:11 UTC	1369	IN	Data Raw: 87 e5 ae 89 e5 8d 93 e7 89 88 e4 b8 8b e8 bd bd 20 2d 20 54 65 6c 65 67 72 61 6d e4 b8 ad e6 96 87 e5 ae 98 e7 bd 91 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 20 74 68 65 20 59 6f 61 73 74 20 53 45 4f 20 50 72 65 6d 69 75 6d 20 70 6c 75 67 69 6e 20 76 32 30 2e 34 20 28 59 6f 61 73 74 20 53 45 4f 20 76 32 30 2e 34 29 20 2d 20 68 74 74 Data Ascii: - Telegram</title> <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with the Yoast SEO Premium plugin v20.4 (Yoast SEO v20.4) - htt
2024-07-04 22:40:11 UTC	1369	IN	Data Raw: 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 61 6e 64 72 6f 69 64 22 5d 7d 5d 7d 2c 7b 22 40 74 79 70 65 22 3a 22 42 72 65 61 64 63 72 75 6d 62 4c 69 73 74 22 2c 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 61 6e 64 72 6f 69 64 23 62 72 65 61 64 63 72 75 6d 62 22 2c 22 69 74 65 6d 4c 69 73 74 45 6c 65 6d 65 6e 74 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 31 2c 22 6e 61 6d 65 22 3a 22 e9 a6 96 e9 a1 b5 22 2c 22 69 74 65 6d 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 22 7d 2c 7b 22 40 74 79 70 65 22 3a 22 4c 69 73 74 49 74 65 6d 22 2c 22 70 6f 73 69 74 69 6f 6e 22 3a 32 2c Data Ascii: s://www.telegramkv.com/android"]}]},{"@type":"BreadcrumbList","@id":"https://www.telegramkv.com/android#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"","item":"https://www.telegramkv.com/"},{"@type":"ListItem","position":2,
2024-07-04 22:40:11 UTC	1369	IN	Data Raw: 29 7b 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2c 65 2e 66 69 6c 6c 54 65 78 74 28 74 2c 30 2c 30 29 3b 76 61 72 20 74 3d 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2e 64 61 74 61 29 2c 72 3d 28 65 2e 63 6c 65 61 72 52 65 63 74 28 30 2c 30 2c 65 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 65 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 2c 65 2e 66 69 6c 6c 54 65 78 74 28 6e 2c 30 2c 30 29 2c 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 65 2e 67 65 74 49 6d 61 67 65 44 61 74 61 28 30 2c 30 2c 65 2e 63 61 Data Ascii: ){e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(t,0,0);var t=new Uint32Array(e.getImageData(0,0,e.canvas.width,e.canvas.height).data),r=(e.clearRect(0,0,e.canvas.width,e.canvas.height),e.fillText(n,0,0),new Uint32Array(e.getImageData(0,0,e.ca
2024-07-04 22:40:11 UTC	1369	IN	Data Raw: 69 6f 6e 28 65 29 7b 69 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 65 2c 7b 6f 6e 63 65 3a 21 30 7d 29 7d 29 2c 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 65 3d 4a 53 4f 4e 2e 70 61 72 73 65 28 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 67 65 74 49 74 65 6d 28 6f 29 29 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 65 2e 74 69 6d 65 73 74 61 6d 70 26 26 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 3c 65 2e 74 69 6d 65 73 74 61 6d 70 2b 36 30 34 38 30 30 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 Data Ascii: ion(e){i.addEventListener("DOMContentLoaded",e,{once:!0})}),new Promise(function(t){var n=function(){try{var e=JSON.parse(sessionStorage.getItem(o));if("object"==typeof e&&"number"==typeof e.timestamp&&(new Date).valueOf()<e.timestamp+604800&&"object"==ty
2024-07-04 22:40:11 UTC	1369	IN	Data Raw: 2f 73 63 72 69 70 74 3e 0a 3c 73 74 79 6c 65 20 69 64 3d 27 77 70 2d 65 6d 6f 6a 69 2d 73 74 79 6c 65 73 2d 69 6e 6c 69 6e 65 2d 63 73 73 27 20 74 79 70 65 3d 27 74 65 78 74 2f 63 73 73 27 3e 0a 0a 09 69 6d 67 2e 77 70 2d 73 6d 69 6c 65 79 2c 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 09 09 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 62 6f 78 2d 73 68 61 64 6f 77 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 68 65 69 67 68 74 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 77 69 64 74 68 3a 20 31 65 6d 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 09 09 6d 61 72 67 69 6e 3a 20 30 20 30 2e 30 37 65 6d 20 21 69 6d Data Ascii: /script><style id='wp-emoji-styles-inline-css' type='text/css'>img.wp-smiley, img.emoji {display: inline !important;border: none !important;box-shadow: none !important;height: 1em !important;width: 1em !important;margin: 0 0.07em !im
2024-07-04 22:40:11 UTC	1369	IN	Data Raw: 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 63 79 61 6e 2d 62 6c 75 65 3a 20 23 38 65 64 31 66 63 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 3a 20 23 30 36 39 33 65 33 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 23 39 62 35 31 65 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 76 69 76 69 64 2d 63 79 61 6e 2d 62 6c 75 65 2d 74 6f 2d 76 69 76 69 64 2d 70 75 72 70 6c 65 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 61 28 36 2c 31 34 37 2c 32 32 37 2c 31 29 20 30 25 2c 72 67 62 28 31 35 35 2c 38 31 2c 32 32 34 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 Data Ascii: et--color--pale-cyan-blue: #8ed1fc;--wp--preset--color--vivid-cyan-blue: #0693e3;--wp--preset--color--vivid-purple: #9b51e0;--wp--preset--gradient--vivid-cyan-blue-to-vivid-purple: linear-gradient(135deg,rgba(6,147,227,1) 0%,rgb(155,81,224) 100%);--wp--pr
2024-07-04 22:40:11 UTC	1369	IN	Data Raw: 2c 72 67 62 28 32 35 35 2c 32 34 35 2c 32 30 33 29 20 30 25 2c 72 67 62 28 31 38 32 2c 32 32 37 2c 32 31 32 29 20 35 30 25 2c 72 67 62 28 35 31 2c 31 36 37 2c 31 38 31 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 65 6c 65 63 74 72 69 63 2d 67 72 61 73 73 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 30 32 2c 32 34 38 2c 31 32 38 29 20 30 25 2c 72 67 62 28 31 31 33 2c 32 30 36 2c 31 32 36 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6d 69 64 6e 69 67 68 74 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 2c 33 2c 31 32 39 29 20 30 25 2c 72 67 62 28 34 30 2c 31 31 36 2c 32 Data Ascii: ,rgb(255,245,203) 0%,rgb(182,227,212) 50%,rgb(51,167,181) 100%);--wp--preset--gradient--electric-grass: linear-gradient(135deg,rgb(202,248,128) 0%,rgb(113,206,126) 100%);--wp--preset--gradient--midnight: linear-gradient(135deg,rgb(2,3,129) 0%,rgb(40,116,2
2024-07-04 22:40:11 UTC	1369	IN	Data Raw: 32 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 65 78 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 74 65 6d 70 6c 61 74 65 2e 69 73 2d 6c 61 79 6f 75 74 2d 67 72 69 64 29 7b 67 61 70 3a 20 31 2e 32 35 65 6d 3b 7d 2e 68 61 73 2d 62 6c 61 63 6b 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 62 6c 61 63 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 63 79 61 6e 2d 62 6c 75 69 73 68 2d 67 72 61 79 2d 63 6f 6c 6f 72 7b 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 63 79 Data Ascii: 2em;}:where(.wp-block-post-template.is-layout-flex){gap: 1.25em;}:where(.wp-block-post-template.is-layout-grid){gap: 1.25em;}.has-black-color{color: var(--wp--preset--color--black) !important;}.has-cyan-bluish-gray-color{color: var(--wp--preset--color--cy
2024-07-04 22:40:11 UTC	1369	IN	Data Raw: 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 77 68 69 74 65 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 70 61 6c 65 2d 70 69 6e 6b 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 2e 68 61 73 2d 76 69 76 69 64 2d 72 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 29 20 21 69 6d 70 6f 72 74 61 6e 74 3b Data Ascii: ckground-color: var(--wp--preset--color--white) !important;}.has-pale-pink-background-color{background-color: var(--wp--preset--color--pale-pink) !important;}.has-vivid-red-background-color{background-color: var(--wp--preset--color--vivid-red) !important;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	49878	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:13 UTC	625	OUT	GET /wp-content/themes/tgtheme/img/how.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/android Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:14 UTC	778	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:13 GMT Content-Type: image/png Content-Length: 7338 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-1caa" expires: Thu, 01 Aug 2024 22:40:04 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172809 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h3GPL1NuzUOojAZb442w3g%2BAzS53xRCLSim3%2Fv%2Bb0xkmp71VyykIa23xuocikv5m3YQzq5M52huvX4%2FEsdNDpMWpZylk0yKWGz%2FulHHVGYm9uLOaMTCb6QpOr2vDcXkj6qEO4lI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29da249dc0f89-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:14 UTC	591	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7b 00 00 00 42 08 06 00 00 00 b6 3c 76 da 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR{B<vtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: 41 39 31 31 45 45 41 45 43 38 46 39 42 34 35 45 38 32 42 42 41 37 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 37 38 42 30 46 38 45 34 46 41 39 31 31 45 45 41 45 43 38 46 39 42 34 35 45 38 32 42 42 41 37 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 37 38 42 30 46 38 42 34 46 41 39 31 31 45 45 41 45 43 38 46 39 42 34 35 45 38 32 42 42 41 37 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 37 38 42 30 46 38 43 34 46 41 39 31 31 45 45 41 45 43 38 46 39 42 34 35 45 38 32 42 42 41 37 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e Data Ascii: A911EEAEC8F9B45E82BBA7" xmpMM:DocumentID="xmp.did:978B0F8E4FA911EEAEC8F9B45E82BBA7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:978B0F8B4FA911EEAEC8F9B45E82BBA7" stRef:documentID="xmp.did:978B0F8C4FA911EEAEC8F9B45E82BBA7"/> </rdf:Description> </rdf:RDF>
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: ce 82 42 29 ec 06 20 93 85 42 a6 68 a2 ce 0a 38 44 13 2b 5f 95 2f 70 9d 34 3f 91 d2 9a 80 42 9c 58 7b 59 9c 7d 3b cb 73 7f 9c 18 01 46 28 d3 05 8e 6c 2b 5b 60 17 64 fb 74 48 04 f0 1b c8 b3 36 a8 9c 58 e9 23 11 44 73 b3 b3 b3 ed 5a ad 86 62 a4 28 f4 b2 1a b3 11 53 55 0c 09 40 0e a2 4c 48 da f0 de 14 f2 6b 49 f2 03 37 7d 27 29 de b9 47 4e d2 17 99 97 5c c8 fd 2a 6c e1 b7 2c 03 6a 1b 60 af 48 cf 06 0e 55 d8 b8 ec c6 48 bf 2e 19 e3 65 2d b0 67 ab d3 15 8d 46 ac 24 9c 55 d7 95 55 6f a8 ac 55 49 67 4e db 3e f8 0c e9 3f 18 c8 10 2d 03 e7 71 4c bb bd 09 1b 4f 98 1e 96 71 87 b0 78 3a c1 ca 3c a5 a0 45 74 d3 a9 22 f5 ee 68 18 49 65 46 81 25 65 03 ba c8 84 82 a6 2f 89 20 52 82 fd b0 c6 8c d1 15 74 7c 39 4b cb 5e 01 90 79 2b 20 b4 d9 31 4b c9 4d 25 dc 09 c8 4b 70 08 Data Ascii: B) Bh8D+_/p4?BX{Y};sF(l+[`dtH6X#DsZb(SU@LHkI7}')GN\*l,j`HUH.e-gF$UUoUIgN>?-qLOqx:<Et"hIeF%e/ Rt\|9K^y+ 1KM%Kp
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: b0 45 f4 ce 01 33 36 b2 c5 2f 1c bf ed 63 67 29 a0 cc 90 eb 6f 39 8b 3e 39 3a 36 ef fd c1 97 dc 46 2a 4c b6 ee 98 a7 13 e1 71 6f fc c9 19 ef 6b 8f cd 90 8f 7f ee b8 d6 73 00 96 18 d0 c3 a4 76 d7 83 2d 48 3b 49 d1 fc f6 e1 bd fe a1 87 9a fe 0f 1f bf 4f 0a f4 b7 7d e2 a4 f7 8d a9 67 a3 f9 05 f9 f3 02 e0 ff 1f ff 7c a7 02 e8 61 12 6f 93 b1 6d 57 9c 72 14 ce ba 9f 56 78 a0 47 42 ef 93 a7 e2 c0 a2 8d 79 5e 4e 12 3a 87 48 e8 9c b2 01 85 d3 35 9c c4 5a 19 d0 44 3a e5 69 c7 89 c2 1b 96 81 15 19 dd 82 0f cc c5 cb 9b fd d6 54 83 5a 7d 89 c1 67 dd 0b 4c 9e f4 22 77 7e ab ed bf fa 83 aa 86 05 2c 96 cf 7e fd 28 a4 15 17 e0 c9 7b 6f dd 24 05 77 5e 6e b8 f5 8c a8 2e 01 68 ff ec 05 3d b7 18 3c 95 df f9 e4 49 6f df 57 8a 6e 18 54 0c cf 64 19 37 88 0c 33 4d 5b f7 fd bd 56 Data Ascii: E36/cg)o9>9:6F*Lqoksv-H;IO}g\|aomWrVxGBy^N:H5ZD:iTZ}gL"w~,~({o$w^n.h=<IoWnTd73M[V
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: 01 17 44 f6 bc f1 4a 75 cd 64 f9 fb 5f 38 6e ba f8 09 de 83 cf c7 fe 47 cb 1c 73 41 75 b5 9c 40 fb 9d 3d b5 0b a8 22 1b 9b c2 9c 38 71 12 17 ec 43 c0 a7 00 0f e0 01 d1 1b da 16 e7 80 8a b7 fb f7 e6 fc 9f bd a0 47 b1 68 58 e0 01 60 fe fc 47 7b c9 c2 95 2d ab 20 b9 6b f7 d9 54 e3 cc e9 e4 e3 c1 04 04 11 3f af fd a8 4a ce ff cf ae b8 21 8e 41 c4 0e f5 d2 02 8f c3 76 b4 0c d0 7e d0 0e 8e ba 71 e2 24 3f cc ab 3d ff 76 2e 19 bf 73 61 f9 46 fa 51 e2 bf bf 79 e7 f0 19 83 34 c6 e8 c7 0e c1 4f bf a1 e9 2c c4 28 d3 d6 d0 56 27 fd 47 49 f4 e8 75 11 3e 69 da 97 35 d2 da ce d2 e1 65 89 3e 7f 5e e3 79 38 1b 08 5b ff 78 97 a6 d1 8b 99 ff 79 fa ec 92 85 36 4e 22 2b b4 0c e7 c2 7f 66 ef be 05 77 1e 9f 9e d3 ea 93 73 0f 54 2e a7 a5 ab b4 0c 42 5d a5 79 9e 31 b9 1f fa 9e 3e Data Ascii: DJud_8nGsAu@="8qCGhX`G{- kT?J!Av~q$?=v.saFQy4O,(V'GIu>i5e>^y8[xy6N"+fwsT.B]y1>
2024-07-04 22:40:14 UTC	1271	IN	Data Raw: 78 71 fb c5 56 fd 9d 65 6f e0 02 a5 b9 71 c3 a6 db b5 62 90 de 32 72 5f 49 30 f9 f2 f7 2c 4b d2 28 71 93 87 47 c4 51 2d 8b 39 f4 65 1e ae f0 0a 49 c7 b5 b6 c1 d9 47 e9 a6 cb 44 1c a1 35 9a 24 6f 46 77 2c 10 8d 28 20 38 5e c2 12 97 6f a5 ad 23 9b e0 54 51 64 cb 48 7e 23 19 eb 9a a3 71 2c b8 ff 36 2e 91 78 c8 bd 49 36 7f e8 e6 bd 8c dc 5b 42 dc d8 e8 b5 2c 49 23 ea 0d 88 28 a0 e0 f9 94 37 16 c5 a6 71 72 ee 93 34 eb 28 75 ef 19 28 8b fa 73 13 9b b0 93 d4 e7 8a 44 df f8 34 80 3e da 96 60 b7 b1 6f b1 bd 31 dd 15 59 fa 2b 1a 63 c9 d1 38 1b c4 b2 2f d4 cc ce a2 4a 7a 44 12 91 83 58 e5 2b a1 b2 b3 cf 15 85 75 2f b2 ea 97 72 ec c7 3c ac a3 34 ac ad 9e 61 9a 3a f7 5f 46 7e df 94 a4 3e a0 27 ec a0 b5 45 83 b1 b2 39 26 9f 6f a5 ad 99 ee 97 74 3c 52 36 0e 96 11 cf c8 Data Ascii: xqVeoqb2r_I0,K(qGQ-9eIGD5$oFw,( 8^o#TQdH~#q,6.xI6[B,I#(7qr4(u(sD4>`o1Y+c8/JzDX+u/r<4a:_F~>'E9&ot<R6

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	49879	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:13 UTC	628	OUT	GET /wp-content/themes/tgtheme/img/shipin.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/android Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:14 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:14 GMT Content-Type: image/jpeg Content-Length: 28049 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-6d91" expires: Fri, 02 Aug 2024 22:40:05 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 86409 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2FlzIg%2F6SNllaJdcKssVITxpsEdWUn08Y0tjbhpNAbD2vG0lWeVjdmJIR0yZsUa3b4aS72gmMtIVEducXG1WoKZIAn7woX4DbTEFHRwHm%2BSiuN0NCqLIwVN%2BkDdOWBBbLLV5UrcM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29da8acfb7c93-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:14 UTC	592	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifIIDucky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xm
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 34 44 44 41 46 30 39 34 46 41 30 31 31 45 45 41 45 43 37 43 34 31 37 33 35 46 43 39 31 35 36 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 34 44 44 41 46 30 36 34 46 41 30 31 31 45 45 41 45 43 37 43 34 31 37 33 35 46 43 39 31 35 36 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 34 44 44 41 46 30 37 34 46 41 30 31 31 45 45 41 45 43 37 43 34 31 37 33 35 46 43 39 31 35 36 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b Data Ascii: 6" xmpMM:DocumentID="xmp.did:74DDAF094FA011EEAEC7C41735FC9156"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:74DDAF064FA011EEAEC7C41735FC9156" stRef:documentID="xmp.did:74DDAF074FA011EEAEC7C41735FC9156"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpack
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: 05 08 51 60 04 01 00 b0 02 09 42 0a 09 14 02 85 81 42 48 a0 91 42 70 14 1c 05 0b 02 82 05 04 0a 08 14 10 28 20 81 00 20 09 00 20 04 00 82 d0 72 b2 04 01 60 04 16 82 05 04 0a 08 14 10 28 20 50 40 a1 38 0a 0e 02 80 50 a2 80 50 0a 16 05 08 50 00 00 0b 00 20 04 01 40 90 02 00 a4 40 00 00 10 02 02 59 05 52 00 40 08 02 c0 12 00 b0 02 00 90 05 80 10 02 00 40 12 08 00 00 00 2a a4 00 80 21 28 20 82 01 20 00 54 00 06 48 a8 00 00 19 0a c1 06 80 a5 1a 08 01 50 a1 60 a8 01 a0 00 b5 80 59 ca c2 2c 00 92 d0 0a 16 0a 10 02 00 40 14 00 12 00 a0 00 11 00 05 54 80 10 02 00 a0 48 01 00 40 00 00 00 02 c0 10 01 28 05 00 a1 60 50 40 a1 05 01 40 94 02 80 50 14 00 00 00 05 80 20 00 2c 00 80 10 02 00 40 14 01 10 00 02 00 40 08 01 05 16 00 40 08 01 00 20 00 12 00 a0 02 50 55 58 01 Data Ascii: Q`BBHBp( r`( P@8PPP @@YR@@*!( THP`Y,@TH@(`P@@P ,@@@ PUX
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: 48 0a 80 d1 50 40 69 20 8b 00 12 32 15 11 16 00 b2 64 8a 05 40 00 01 60 0d 40 44 80 35 00 20 0a 00 00 10 0a 00 08 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 10 6b 16 2c b9 6e a9 8a 8e f7 7f aa 94 89 98 85 c7 19 cb b7 57 37 a0 e8 ed cf 51 17 ce 96 0c 7d e9 fb c6 b6 ce 5e 38 f6 6e eb e0 67 94 75 e8 ec 5a 1e 94 da b4 a9 3b d1 ea 2e b8 f3 5f c7 d4 69 e7 ca cb 2f 67 43 57 0b 5e 3d fa b9 0d 5e df a4 d4 69 ad 83 26 2a ba 34 f9 78 29 5e 99 3c f1 cf 28 9b b7 be 5a b0 cb 1a a7 99 e7 c6 b1 67 c9 8b b5 52 ce a9 fa 11 d9 89 b7 ce 67 15 34 c1 58 80 00 00 00 00 00 00 00 20 04 00 80 2c 00 80 24 00 80 10 02 00 40 00 00 00 00 00 00 00 00 00 64 09 00 00 90 15 00 30 20 10 2a 18 80 19 65 54 31 11 81 96 82 8c 0c b2 28 01 01 52 Data Ascii: HP@i 2d@`@D5 k,nW7Q}^8nguZ;._i/gCW^=^i&4x)^<(ZgRg4X ,$@d0 eT1(R
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: 40 04 00 2c 14 40 00 00 00 02 11 40 00 40 00 00 01 20 0c b4 04 80 00 46 06 58 50 08 62 ac 95 50 c4 46 06 5a 0a a0 61 91 46 05 45 46 80 20 8d 20 2a 32 15 11 16 00 a6 48 a8 0a 90 45 02 81 40 a9 01 40 00 00 02 00 a0 20 21 00 20 0a 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 48 1c de d5 d2 3b 9e bb 97 25 ff 00 b3 e0 6a 6b 7b ae d9 35 b6 72 b1 c7 b3 77 47 07 3c fb f4 76 9d bb a4 36 9d 24 5e f4 fb c6 4e fe 7e 35 fa 0d 0d 9c bc b2 f6 75 35 70 75 e3 d6 7a b9 bc 78 e9 8e bc 98 ea a9 45 d9 54 b8 23 5e fd 5b 71 11 1d 22 29 60 8b 24 14 20 04 01 f2 cd a8 c5 87 b5 cd bf 64 b1 16 96 e3 f3 ea 72 e5 6e 78 2f 03 38 86 13 2c 61 c5 7c 97 e5 a2 f3 7e 05 b1 ca 69 f4 d4 c3 58 4a 6c fb 6c 79 4e 4c e2 1f 58 22 9c a1 69 61 02 95 42 72 fb 17 16 11 e4 fb be a1 ea Data Ascii: @,@@@ FXPbPFZaFEF *2HE@@ ! PH;%jk{5rwG<v6$^N~5u5puzxET#^[q")`$ drnx/8,a\|~iXJllyNLX"iaBr
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: 60 29 00 58 60 20 0b 00 79 6f 5a ea be 3f 51 67 aa 73 4c 4a b5 ab f4 c7 13 b3 c3 c6 b5 c3 e6 fc 86 77 b6 5c 29 b4 d2 00 15 28 08 84 14 2d 05 40 09 20 50 00 00 00 00 00 09 20 50 00 00 05 a0 85 01 50 00 00 10 04 00 00 09 00 00 84 50 00 19 02 30 20 11 81 96 14 02 33 15 65 81 00 8c 52 b2 c8 20 54 64 50 0d 95 88 80 a8 c8 52 23 48 0a 82 5a 99 0a 82 34 00 0a 05 03 40 00 04 20 a2 81 40 00 00 05 00 00 0a 00 a0 00 00 4b 01 60 2c 05 80 b0 28 00 80 50 00 41 24 04 81 00 92 04 6d 90 61 d8 2b e7 6b 12 d6 9f 3b 5c c5 94 43 e3 7b 32 32 87 ca d6 22 c3 e7 66 46 50 cb 44 56 5a 03 f4 ed ba bb 68 f7 1d 3e a9 7f 55 74 fe 97 06 39 45 c4 c3 3c 32 f8 cc 4b d8 28 eb 7a 56 f5 72 ae 93 93 9c ee 5b f0 65 e3 92 c6 70 f3 99 ea 62 c9 93 1d d5 f1 da 2d dc d7 79 26 20 8e 8e 4f 45 d6 5b 4d Data Ascii: `)X` yoZ?QgsLJw\)(-@ P PPP0 3eR TdPR#HZ4@ @K`,(PA$ma+k;\C{22"fFPDVZh>Ut9E<2K(zVr[epb-y& OE[M
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: 32 0b 18 54 92 0c 30 a8 da 03 2c 0c d8 2b 16 46 2a c9 25 58 68 8c 9f 36 82 b0 d1 19 23 44 19 e0 07 2b d3 3d 29 bf 75 36 e2 b6 fd 9b 4a f5 39 e3 9a ee 55 69 8e 9d 9c f7 bb f6 6a bf 39 e7 b3 64 61 17 2f 5d 5a b2 ce 6a 1e 92 bf fa d1 d5 9f 75 77 7b 9e 85 6a 62 56 24 f3 72 f6 7e df 24 ff 00 f8 9a df dd c7 dd bb fe 6e 75 de 3f fa ff 00 e1 d0 fa a3 e5 d7 57 f4 c5 a7 75 db ef 4d 3b 6d 57 57 8b f7 b8 5c 7f 3e 93 cb e5 68 67 be 1b b1 cb b4 b5 36 71 f3 c3 bc 3a e7 2f 67 a7 b3 d4 7b 53 c4 82 25 90 0b 6d 22 d0 fb 63 a9 93 19 7e bc 49 77 cf d2 67 0f 29 7e 8a f0 32 61 6d a2 a2 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 d8 0b 01 68 42 c9 0a 80 00 80 49 00 00 82 48 11 b0 ac b0 00 46 06 58 56 40 33 14 46 c3 24 90 32 ca a1 88 cb 0a cb 22 80 7e a5 1e 64 Data Ascii: 2T0,+F*%Xh6#D+=)u6J9Uij9da/]Zjuw{jbV$r~$nu?WuM;mWW\>hg6q:/g{S%m"c~Iwg)~2amhBIHFXV@3F$2"~d
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: 4c 95 f2 f0 ef 3d 34 ed 9c 32 b8 78 f2 34 46 dc 7e 32 fe 58 d6 ed b9 34 7a cc fa 3c e9 57 3e 9b 25 b0 e5 ac a6 95 e9 6e 56 a5 7a 4e fe 39 44 c5 c3 e4 b2 8a 99 89 fa 3f 3f c0 7d cc ce d8 30 e9 75 da 85 c0 cc 95 2d 42 84 b2 c2 80 00 00 00 00 22 85 84 89 00 00 00 00 00 00 00 00 00 00 06 40 00 00 40 02 06 40 19 00 00 08 c8 12 15 99 00 04 02 30 33 21 51 b0 32 c0 18 aa 36 06 58 b5 42 08 c2 a4 81 1b 22 bf 62 22 09 95 5b 4c 25 aa 2a 34 99 29 15 14 7e 8d 16 96 da bd 4d 30 56 dc b6 bf eb 3e 26 39 65 f1 8b 67 86 13 94 d4 3b 02 e8 5d 63 ff 00 aa af f4 59 ab fd dc 7d 1b df e6 e5 fb 95 f4 0e b2 cb 8e a6 93 e3 ca c7 f7 a3 d0 ff 00 37 2f dc c2 f9 79 af 7f f5 74 fe 89 97 f7 b1 f4 3f cc cb f7 3f 2e ab a1 b7 cc 2a 71 25 a8 f2 69 7d 66 78 72 f0 97 8e cf 1d b3 1e ce 17 51 a5 Data Ascii: L=42x4F~2X4z<W>%nVzN9D??}0u-B"@@@03!Q26XB"b"[L%4)~M0V>&9eg;]cY}7/yt??.q%i}fxrQ
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: 27 b2 80 00 04 4e 66 38 c7 6c 0a 48 98 92 78 c3 e0 fc 05 2d 92 84 13 d3 ba 73 22 d4 97 04 af d0 c8 1e 7c 3c 05 4a 5c 27 35 7c 45 4a dc 1c ca 26 78 03 dc e3 13 12 bb 9a e2 4a 2c e2 41 25 78 a2 c4 2f ca 12 57 8a 2d 49 70 27 3f f8 a2 51 61 0b 42 aa 70 f1 5e 91 45 c3 32 bc 50 a9 2e 09 5f 49 02 dc 3b 54 79 8a 56 66 54 ae c2 0c be 0a 59 54 ed ec ec f1 08 cb 6b c7 b0 29 26 2a cb 00 45 65 81 96 15 08 a8 c0 fd a8 88 22 ab 48 31 69 14 54 11 a0 39 0d 87 f1 6c 1e 67 96 ef b2 5e fc 6f c9 0f 4b a9 c6 7d 1b aa 75 d7 6e 9b bb 8f 74 af e5 3a 1c 2f ab 95 e4 a6 7a 3a b6 3c b9 71 db 9a 97 b5 5f 8c b7 fc a6 f4 e3 0e 54 65 31 f5 72 fb 67 54 6e 9a 3c b5 e7 c8 f3 61 ec b6 3b 78 7a 0f 1d 9c 6c 32 8f 46 d6 9e 6e 78 4f 5e af 41 db b5 f8 35 fa 5c 7a 9c 0e 69 75 27 27 3d 73 8c d4 bb Data Ascii: 'Nf8lHx-s"\|<J\'5\|EJ&xJ,A%x/W-Ip'?QaBp^E2P._I;TyVfTYTk)&*Ee"H1iT9lg^oK}unt:/z:<q_Te1rgTn<a;xzl2FnxO^A5\ziu''=s
2024-07-04 22:40:14 UTC	1369	IN	Data Raw: f7 8b fd 2c 7c 31 f4 3f 97 3f 57 ac 6c 6d bd ab 4c db 96 e8 a5 bf 13 87 ba 3f 5c d3 ea b8 d3 33 84 4c be 5d 4a dd 76 7d 45 aa f9 6c ab c1 a2 f1 e2 27 3e af 3e 5c ff 00 fc e5 e5 b5 d7 eb a3 8e a2 f3 e6 ce df f1 e3 e8 f9 9f e5 cf d5 2d ae d6 35 cb 7c f7 69 f7 48 f8 63 e8 4e dc ba dc b9 ce 9e e9 0d 46 e6 96 7d 4c e1 d2 3e c7 fa d6 f2 35 b7 f2 a3 0e 91 dd b9 c4 f1 f3 b7 f5 65 d2 1d cb 4b d2 5d 3f a7 aa e5 d1 d2 d6 5f af 64 db 67 3f 2e 4e c9 ef 2e ce 1c 2d 58 fd 1f 6c fd 37 b1 66 af 2e 4d 16 26 97 63 8f f8 98 c6 fd 91 da 59 cf 17 5c f7 c6 1d 63 7f f9 7b 86 d8 ed a8 da db a6 5a fb 5f 01 f1 4d 78 23 73 4f 3a 6e b2 73 79 3e 32 2a f0 97 44 c9 8e f8 b2 5b 1e 4a ba de ae 2d 57 da 99 d3 89 b8 b7 16 62 a6 a5 fb 36 0f c6 74 bf 6d 7d 68 f3 df f6 4b db 8d f9 21 ed 0b b1 Data Ascii: ,\|1??WlmL?\3L]Jv}El'>>\-5\|iHcNF}L>5eK]?_dg?.N.-Xl7f.M&cY\c{Z_Mx#sO:nsy>2*D[J-Wb6tm}hK!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	49880	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:14 UTC	447	OUT	GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=175669-175669 If-Range: "66346867-33649"
2024-07-04 22:40:14 UTC	806	IN	HTTP/1.1 206 Partial Content Date: Thu, 04 Jul 2024 22:40:14 GMT Content-Type: image/png Content-Length: 1 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-33649" expires: Thu, 01 Aug 2024 11:35:07 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 212707 Content-Range: bytes 175669-175669/210505 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Y%2BeXdHWNN46gVYMttkj6ll0wCVEZG6EphUca0WMcEzW9iygvnA375F2bRq8OmzbULmBehGnsdfOezPH0yN2l%2BubXIR6BpY2a8qD8gNHtoBWUHtmSDe%2Fu1bDXEwqUjlo5em4mNTM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29dab6f9d19c7-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:14 UTC	1	IN	Data Raw: 71 Data Ascii: q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	49881	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:15 UTC	379	OUT	GET /wp-content/themes/tgtheme/img/how.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:15 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:15 GMT Content-Type: image/png Content-Length: 7338 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-1caa" expires: Thu, 01 Aug 2024 22:40:04 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172811 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mthE7888vO8AJE8Ri8Fhbr122IUR9%2FQ9olCfS9cCxvZzhKCvp4aYlOAawlrVUesWSGb%2FfSrby7tt27b3r2pfVu95vooPRIRlwkDsjeUlsRbtSEQSAa4LAlifTxFIzVNotYDt%2FPE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29daecf7fc425-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:15 UTC	595	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 7b 00 00 00 42 08 06 00 00 00 b6 3c 76 da 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDR{B<vtEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 45 45 41 45 43 38 46 39 42 34 35 45 38 32 42 42 41 37 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 37 38 42 30 46 38 45 34 46 41 39 31 31 45 45 41 45 43 38 46 39 42 34 35 45 38 32 42 42 41 37 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 39 37 38 42 30 46 38 42 34 46 41 39 31 31 45 45 41 45 43 38 46 39 42 34 35 45 38 32 42 42 41 37 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 39 37 38 42 30 46 38 43 34 46 41 39 31 31 45 45 41 45 43 38 46 39 42 34 35 45 38 32 42 42 41 37 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 Data Ascii: EEAEC8F9B45E82BBA7" xmpMM:DocumentID="xmp.did:978B0F8E4FA911EEAEC8F9B45E82BBA7"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:978B0F8B4FA911EEAEC8F9B45E82BBA7" stRef:documentID="xmp.did:978B0F8C4FA911EEAEC8F9B45E82BBA7"/> </rdf:Description> </rdf:RDF> </x
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: ec 06 20 93 85 42 a6 68 a2 ce 0a 38 44 13 2b 5f 95 2f 70 9d 34 3f 91 d2 9a 80 42 9c 58 7b 59 9c 7d 3b cb 73 7f 9c 18 01 46 28 d3 05 8e 6c 2b 5b 60 17 64 fb 74 48 04 f0 1b c8 b3 36 a8 9c 58 e9 23 11 44 73 b3 b3 b3 ed 5a ad 86 62 a4 28 f4 b2 1a b3 11 53 55 0c 09 40 0e a2 4c 48 da f0 de 14 f2 6b 49 f2 03 37 7d 27 29 de b9 47 4e d2 17 99 97 5c c8 fd 2a 6c e1 b7 2c 03 6a 1b 60 af 48 cf 06 0e 55 d8 b8 ec c6 48 bf 2e 19 e3 65 2d b0 67 ab d3 15 8d 46 ac 24 9c 55 d7 95 55 6f a8 ac 55 49 67 4e db 3e f8 0c e9 3f 18 c8 10 2d 03 e7 71 4c bb bd 09 1b 4f 98 1e 96 71 87 b0 78 3a c1 ca 3c a5 a0 45 74 d3 a9 22 f5 ee 68 18 49 65 46 81 25 65 03 ba c8 84 82 a6 2f 89 20 52 82 fd b0 c6 8c d1 15 74 7c 39 4b cb 5e 01 90 79 2b 20 b4 d9 31 4b c9 4d 25 dc 09 c8 4b 70 08 18 a3 72 40 Data Ascii: Bh8D+_/p4?BX{Y};sF(l+[`dtH6X#DsZb(SU@LHkI7}')GN\*l,j`HUH.e-gF$UUoUIgN>?-qLOqx:<Et"hIeF%e/ Rt\|9K^y+ 1KM%Kpr@
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 01 33 36 b2 c5 2f 1c bf ed 63 67 29 a0 cc 90 eb 6f 39 8b 3e 39 3a 36 ef fd c1 97 dc 46 2a 4c b6 ee 98 a7 13 e1 71 6f fc c9 19 ef 6b 8f cd 90 8f 7f ee b8 d6 73 00 96 18 d0 c3 a4 76 d7 83 2d 48 3b 49 d1 fc f6 e1 bd fe a1 87 9a fe 0f 1f bf 4f 0a f4 b7 7d e2 a4 f7 8d a9 67 a3 f9 05 f9 f3 02 e0 ff 1f ff 7c a7 02 e8 61 12 6f 93 b1 6d 57 9c 72 14 ce ba 9f 56 78 a0 47 42 ef 93 a7 e2 c0 a2 8d 79 5e 4e 12 3a 87 48 e8 9c b2 01 85 d3 35 9c c4 5a 19 d0 44 3a e5 69 c7 89 c2 1b 96 81 15 19 dd 82 0f cc c5 cb 9b fd d6 54 83 5a 7d 89 c1 67 dd 0b 4c 9e f4 22 77 7e ab ed bf fa 83 aa 86 05 2c 96 cf 7e fd 28 a4 15 17 e0 c9 7b 6f dd 24 05 77 5e 6e b8 f5 8c a8 2e 01 68 ff ec 05 3d b7 18 3c 95 df f9 e4 49 6f df 57 8a 6e 18 54 0c cf 64 19 37 88 0c 33 4d 5b f7 fd bd 56 ca 0c 6f a3 Data Ascii: 36/cg)o9>9:6F*Lqoksv-H;IO}g\|aomWrVxGBy^N:H5ZD:iTZ}gL"w~,~({o$w^n.h=<IoWnTd73M[Vo
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: bc f1 4a 75 cd 64 f9 fb 5f 38 6e ba f8 09 de 83 cf c7 fe 47 cb 1c 73 41 75 b5 9c 40 fb 9d 3d b5 0b a8 22 1b 9b c2 9c 38 71 12 17 ec 43 c0 a7 00 0f e0 01 d1 1b da 16 e7 80 8a b7 fb f7 e6 fc 9f bd a0 47 b1 68 58 e0 01 60 fe fc 47 7b c9 c2 95 2d ab 20 b9 6b f7 d9 54 e3 cc e9 e4 e3 c1 04 04 11 3f af fd a8 4a ce ff cf ae b8 21 8e 41 c4 0e f5 d2 02 8f c3 76 b4 0c d0 7e d0 0e 8e ba 71 e2 24 3f cc ab 3d ff 76 2e 19 bf 73 61 f9 46 fa 51 e2 bf bf 79 e7 f0 19 83 34 c6 e8 c7 0e c1 4f bf a1 e9 2c c4 28 d3 d6 d0 56 27 fd 47 49 f4 e8 75 11 3e 69 da 97 35 d2 da ce d2 e1 65 89 3e 7f 5e e3 79 38 1b 08 5b ff 78 97 a6 d1 8b 99 ff 79 fa ec 92 85 36 4e 22 2b b4 0c e7 c2 7f 66 ef be 05 77 1e 9f 9e d3 ea 93 73 0f 54 2e a7 a5 ab b4 0c 42 5d a5 79 9e 31 b9 1f fa 9e 3e 73 de 20 5f Data Ascii: Jud_8nGsAu@="8qCGhX`G{- kT?J!Av~q$?=v.saFQy4O,(V'GIu>i5e>^y8[xy6N"+fwsT.B]y1>s _
2024-07-04 22:40:15 UTC	1267	IN	Data Raw: 56 fd 9d 65 6f e0 02 a5 b9 71 c3 a6 db b5 62 90 de 32 72 5f 49 30 f9 f2 f7 2c 4b d2 28 71 93 87 47 c4 51 2d 8b 39 f4 65 1e ae f0 0a 49 c7 b5 b6 c1 d9 47 e9 a6 cb 44 1c a1 35 9a 24 6f 46 77 2c 10 8d 28 20 38 5e c2 12 97 6f a5 ad 23 9b e0 54 51 64 cb 48 7e 23 19 eb 9a a3 71 2c b8 ff 36 2e 91 78 c8 bd 49 36 7f e8 e6 bd 8c dc 5b 42 dc d8 e8 b5 2c 49 23 ea 0d 88 28 a0 e0 f9 94 37 16 c5 a6 71 72 ee 93 34 eb 28 75 ef 19 28 8b fa 73 13 9b b0 93 d4 e7 8a 44 df f8 34 80 3e da 96 60 b7 b1 6f b1 bd 31 dd 15 59 fa 2b 1a 63 c9 d1 38 1b c4 b2 2f d4 cc ce a2 4a 7a 44 12 91 83 58 e5 2b a1 b2 b3 cf 15 85 75 2f b2 ea 97 72 ec c7 3c ac a3 34 ac ad 9e 61 9a 3a f7 5f 46 7e df 94 a4 3e a0 27 ec a0 b5 45 83 b1 b2 39 26 9f 6f a5 ad 99 ee 97 74 3c 52 36 0e 96 11 cf c8 8b 51 de 9e Data Ascii: Veoqb2r_I0,K(qGQ-9eIGD5$oFw,( 8^o#TQdH~#q,6.xI6[B,I#(7qr4(u(sD4>`o1Y+c8/JzDX+u/r<4a:_F~>'E9&ot<R6Q

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	49882	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:15 UTC	447	OUT	GET /wp-content/themes/tgtheme/img/android-768x512.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Range: bytes=175669-210504 If-Range: "66346867-33649"
2024-07-04 22:40:15 UTC	806	IN	HTTP/1.1 206 Partial Content Date: Thu, 04 Jul 2024 22:40:15 GMT Content-Type: image/png Content-Length: 34836 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-33649" expires: Thu, 01 Aug 2024 11:35:07 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 212708 Content-Range: bytes 175669-210504/210505 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=889ULtJE8CSgrRTwx7ph0BQB9%2BQLL2Ch7N9uu6PVESee7DU7D9TTsfaBL1G11dGkH85InwDykxxU3nSYHsdW30rvbZOYgGiKxhdeE7WvECVLJIbjZOC4GhtpmsYgMOar9T52kDk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29db18d884207-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:15 UTC	563	IN	Data Raw: 71 9d 41 55 47 db 98 00 e7 3d f6 5a 7c e9 55 57 cc 5f 91 62 48 95 45 21 b4 71 44 4e 88 da 96 a8 65 69 60 88 54 8a 51 06 1d 18 e2 28 42 1b e3 4b 68 66 ce 37 d9 12 41 24 cb fd 96 1a 8c 27 54 ca 79 6b 36 35 82 43 50 0e 42 d1 f9 f5 28 7a 1d 08 99 51 64 38 12 97 62 c5 61 b3 0c 6b 53 ac 4d c8 c8 68 88 a1 91 0a d6 65 44 a1 a0 c9 50 22 64 d5 88 53 55 78 70 fe 38 8f 2e 4e d2 bc f1 0d bc f1 d7 7e 83 ea 25 af 63 b1 6d 68 2d 36 08 c8 08 02 8d 55 ce f7 0e b0 06 e7 94 27 25 85 ed e3 f2 4b a8 35 a2 0c 4b ae cd b1 c6 29 1a b6 49 1c 87 b4 74 8b b4 ee 58 dc 3c c1 6d bf 7a 0b 6f fa e5 ff 95 a9 4c f3 b5 af 7f 95 4b 2e 59 cf c6 eb 6e 63 4b da 60 df fe d3 1c 58 3a 4a cf 96 98 fe 8d 63 d4 87 6b 3c fb bd 47 99 9b 6b 73 fd 8d b7 f0 ae d1 41 3e fb 57 7f ca d4 da 01 6c 73 06 95 69 Data Ascii: qAUG=Z\|UW_bHE!qDNei`TQ(BKhf7A$'Tyk65CPB(zQd8bakSMheDP"dSUxp8.N~%cmh-6U'%K5K)ItX<mzoLK.YncK`X:Jck<GksA>Wlsi
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 44 91 54 99 7b d1 57 ea db 97 bd f1 5a dc 39 4c f6 b3 1f 40 42 e7 e9 74 ee c3 75 8b ca cf 89 a2 db ea f9 8e 93 6b 71 57 1c 23 37 f5 d5 4a ea d1 6d e0 ab 3c df 00 ba 12 57 cf 9a d8 05 69 c6 f2 78 e7 fb 8e da e1 74 13 e5 a0 82 c6 5a 8d a8 0a 82 a0 25 c1 b9 8c 33 12 52 df 70 29 eb 7f f1 57 49 6b 30 f9 c5 bf e3 3b 2f 7e 9f 85 a8 8f d7 d5 37 d0 67 46 89 b4 46 29 eb 4b 3d a2 b1 79 d5 10 2b 0a ab 0c ce 28 30 0a a5 85 d4 a5 b4 93 16 71 92 d2 d6 01 26 00 23 8a 20 51 44 ed c0 57 ff 09 0c 5a 69 8c 15 22 65 3a 7d 18 c4 d9 0e 97 33 e2 93 6a 33 e5 b0 da cb 88 b0 96 34 f5 12 21 94 af c3 9f 38 a1 69 53 9a 92 90 48 46 22 29 ce 65 38 2d 10 81 b5 0a e7 8c 2f 8a 28 0d 94 4a 88 02 c3 f1 c6 0c 0f ce cd f0 b4 2c d2 77 f3 f5 bc ee 97 df 8f bb fc f5 9c c9 34 69 a6 d0 26 24 c0 22 Data Ascii: DT{WZ9L@BtukqW#7Jm<WixtZ%3Rp)WIk0;/~7gFF)K=y+(0q&# QDWZi"e:}3j34!8iSHF")e8-/(J,w4i&$"
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 12 18 a5 04 8b 26 d3 06 a7 03 44 09 4e 32 d0 82 51 e2 ab f9 e4 dd 9f 33 fc 39 0b 5c 0a 0a ac 12 5f bd a6 e3 58 f7 f5 fa 4d e6 4d 1d 31 fe 6c 58 03 56 d3 d9 50 1b df 39 56 59 4f 03 b4 29 c8 82 46 94 2f b5 59 25 a3 6d 17 38 b5 38 c5 e3 8d 53 3c 53 c9 a8 be f5 5a 6e fb 9f 3f c8 f0 8e ab 68 46 03 2c 50 21 69 5b 7a 4c 4c 5f 66 69 64 82 36 01 e8 f6 72 83 2d f1 c9 c0 dd a1 29 29 f2 3d 72 d2 31 df 5e 64 b6 35 47 ac 2d 49 5b 88 05 d2 53 d3 cc 1c 6f d1 da 36 47 7d d3 00 bf fa 5b bf cc 6f 47 bf 43 28 75 be f5 dd 7f 62 b2 75 90 91 68 1b e6 64 c6 96 cd 1b 79 fc c0 97 b9 fb eb 67 f8 e9 2b 7f 91 b7 dc fc 26 7a 82 04 13 b5 38 33 77 8c e9 99 69 46 d6 ae f3 b2 28 bb 40 92 d5 99 6d 43 8a 06 97 20 4a 3c 11 43 d0 58 44 14 71 1c b3 69 d3 a6 8e 6c a3 68 da 35 31 31 d1 59 3f c3 Data Ascii: &DN2Q39\_XMM1lXVP9VYO)F/Y%m88S<SZn?hF,P!i[zLL_fid6r-))=r1^d5G-I[So6G}[oGC(ubuhdyg+&z83wiF(@mC J<CXDqilh511Y?
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 66 7a 8e a9 45 c3 42 1a 43 10 30 b7 30 4f bb d9 a4 52 0d 19 1b ef a3 16 a6 8c f6 44 6c df 30 c1 58 6f 95 aa 8e 3d c1 70 16 6d 8c 97 12 75 39 f8 bb cf 73 e7 be aa d4 2b ba bf 96 28 f1 e3 8c 92 00 94 28 71 11 78 a5 7e a2 e2 81 f7 4a 23 01 d2 d1 67 fc 60 28 e6 70 be 38 42 77 b2 b2 ea b4 3e ce 2b 10 bd 04 19 b8 50 2e c0 ea b1 fd f8 17 37 67 3f 03 4b 28 19 91 35 a8 34 c6 a9 5e da aa 8a 28 47 84 c5 49 93 b9 28 21 50 d0 9b 68 34 0e cc 0c 99 d2 24 ba 42 66 03 18 da 4e ef 0d 5b b9 64 eb 0d 9c be f6 0d 1c 7b fc 61 9e 7d fc 09 dc 8b c7 d8 64 4f b1 59 0f b2 26 ee 63 28 ee a1 5f 85 04 a9 26 c8 14 a1 ad 74 3c 94 4e 7c d5 1c 05 04 18 42 2b de db a8 20 51 82 c5 4b f7 c3 0c 22 eb b7 6b 05 b9 67 3d 6f f5 eb 54 2e 5c 10 4f 01 94 f2 91 04 a7 15 f4 84 2c b8 8c bd ed 33 4c 26 Data Ascii: fzEBC00ORDl0Xo=pmu9s+((qx~J#g`(p8Bw>+P.7g?K(54^(GI(!Ph4$BfN[d{a}dOY&c(_&t<N\|B+ QK"kg=oT.\O,3L&
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 68 94 6a 93 85 de 40 36 4a 13 66 2d b4 28 bf fe 94 cf 3b 98 ad 06 b4 c3 0a 41 16 a0 f3 ba a4 22 be 31 19 4a e3 74 88 0d 34 88 27 2e a6 68 0e 66 34 83 f1 10 a3 e9 10 99 2c 32 d3 3e cd 6c 2b 65 f4 75 b7 b0 ed d2 ab f8 da 17 ef 26 8c 2a bc e9 6d 6f f3 73 11 c5 a9 e3 c7 f8 d2 97 be c4 70 7f c0 ed 3f 77 27 69 3b 42 65 a7 49 5c 46 a5 6f 98 43 cf 3e cb 57 be fa 25 ae bf ea 7a ae dd 74 2d 13 eb 86 99 f9 fe bf a0 66 7b 39 bc a1 97 cd c9 1a c6 82 ed 18 ea 40 e8 57 9e 53 3e 7c 12 42 a3 d1 e0 f0 8b 87 99 3a 35 45 b3 d9 64 78 78 98 cb 2f bf 9c 5a ad 76 96 37 bf fb f5 4b 79 dd 57 bf b7 da 80 b5 d6 d2 6c 8d 62 a0 9f 00 00 20 00 49 44 41 54 36 3b d5 84 8a f1 57 1b f7 05 21 e9 36 ee bb b7 e9 8e 1e 74 e7 18 ac 8e 18 74 ef bb e2 df 4f be df fc fc 7c e7 bb 47 51 84 88 b0 b4 Data Ascii: hj@6Jf-(;A"1Jt4'.hf4,2>l+eu&*mosp?w'i;BeI\FoC>W%zt-f{9@WS>\|B:5Edxx/Zv7KyWlb IDAT6;W!6ttO\|GQ
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 0e b9 7a 86 e8 b9 67 19 9c 9e 61 44 15 f0 45 15 63 34 a1 bf c4 d9 b0 c1 94 5f 62 e2 e7 3e 86 bf 63 17 2a 5f a0 d2 57 65 70 60 08 bf 5c c6 2b 96 f0 cb 25 bc 62 11 3f 9f 07 cf 23 b2 10 6a 4d 4b 77 b0 61 88 88 2d 7e 57 0b 27 09 df 13 3e b3 13 36 1a ac 9b 29 21 0c 56 98 44 6b e0 e2 19 2d 2c b1 d4 68 b1 b9 55 8c 48 7b 3b 5d 41 8d 05 84 24 10 a0 05 8c 54 46 18 ad 0e b3 b2 7c 8e 68 25 26 c0 a3 da 5f c6 0b 3c ee b8 fb 2e 2a 83 35 5a cd 0d b4 b0 78 d2 52 18 ea e3 81 87 7e 06 8c a1 be be 42 08 f8 41 91 8e 86 8d 95 15 6a 63 e3 7c e2 13 1f a7 e4 95 68 ac af 33 32 36 c1 40 6d 07 e7 1a 96 e1 7a 9e 7d 13 e3 d4 46 ab 08 69 11 c6 38 ef 96 24 b9 c6 c2 f2 f2 2a 9d 76 87 0f 7d fc 43 dc 72 cb 2d 78 9e c7 f2 f2 32 0f 3f fc 30 e7 ce 9d a3 56 ab b1 7f ff 7e 9e 7f fe 79 86 87 87 Data Ascii: zgaDEc4_b>c_Wep`\+%b?#jMKwa-~W'>6)!VDk-,hUH{;]A$TF\|h%&_<.5ZxR~BAjc\|h326@mz}Fi8$*v}Cr-x2?0V~y
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: a8 eb 24 4a 4e b6 94 c6 d8 eb 03 f4 70 73 a1 97 00 f4 d0 c3 75 c0 24 74 84 4d f7 0a 17 e4 27 0e f1 08 52 9e 68 f7 17 20 b6 3a e4 67 6b c9 84 4d 45 6f 37 08 91 b4 ea 6f 7c 01 5b 4f 86 6e b4 01 9f 56 f3 8c 48 dd 47 dc cc 51 61 0d 46 58 42 a5 9d bd a7 95 80 47 ac 14 5a 56 a8 1e 3a cc d8 a7 3e c5 f3 ff e7 97 98 7d e3 0d 7e 72 60 9e 62 2e cf 8a bf 4e 18 fb 18 df 62 f3 6e 92 6e 7c a1 ce a1 b8 c2 a4 a8 21 74 81 e9 d5 15 ce ac b4 f1 f6 1d e1 f0 af fd 2e 0c 1d 20 ea 34 d0 d6 d2 0a 63 5a c4 d8 ec b8 71 73 00 fc 44 eb 20 b1 60 04 d2 71 12 c0 5a ac 8d 11 c9 14 61 95 78 19 5a b1 59 9f 74 5f ae 62 69 ad 93 a0 38 38 ed 46 9a 7b 5d 1a bf 88 4b f7 4b 42 97 32 26 06 4f e1 4b c5 9e da 1e 36 86 e7 f8 f7 66 0e 2f f6 dd ac 02 63 68 b5 3b 78 05 68 77 62 3a 0d 4d 50 28 3a c2 5b Data Ascii: $JNpsu$tM'Rh :gkMEo7o\|[OnVHGQaFXBGZV:>}~r`b.Nbnn\|!t. 4cZqsD `qZaxZYt_bi88F{]KKB2&OK6f/ch;xhwb:MP(:[
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 16 70 a3 55 0a 8b 40 0a 8d 11 8e dc a2 51 48 ab 50 a9 66 43 6b b4 b0 08 09 81 92 88 d0 20 95 c4 88 3c ab 5e 9e dc 03 1f 62 db 81 83 bc f1 da d3 ac ce ce 33 31 b8 8b 83 47 ee 42 da 3e d4 b2 c6 ab ee 23 ff 73 9f e0 1b ff f4 2f 3c 52 5f 65 55 af 71 e0 43 77 b1 e7 57 ff 13 8b 7b 0f a3 a2 16 25 14 b1 d5 d8 58 a3 84 02 52 d7 15 bb f9 c1 a4 44 63 b1 d6 55 83 9d a6 59 22 7c 09 56 a0 70 93 4f ad 4d 28 3f 09 c5 47 65 f4 ac 24 60 96 8e af 6c a5 40 27 c3 cb d2 c3 4f 18 b2 22 a6 c8 b6 4f f2 bf 30 ee 31 a9 9c 22 d2 48 ac 92 0c 55 76 f3 e1 f7 fd 0c 5f 7d f5 ff e5 db 4f 3d 45 ae 5c e5 fe b1 71 3c 6d 90 ed 90 85 d3 53 34 f7 1d a0 64 05 ad 76 44 39 c8 61 ad a1 d9 a8 23 04 3c 70 e7 4f d0 89 3a f8 71 44 1c 5a 9a ad 08 eb c7 cc 2f af 11 c9 0a 3f 75 df 47 b8 75 e0 56 3c eb 25 Data Ascii: pU@QHPfCk <^b31GB>#s/<R_eUqCwW{%XRDcUY"\|VpOM(?Ge$`l@'O"O01"HUv_}O=E\q<mS4dvD9a#<pO:qDZ/?uGuV<%
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 41 d1 b4 60 ad a0 a8 8a 89 cd 60 4c dd b6 68 16 5d 80 1a 9a 0e c5 a0 4c ee f0 51 10 96 7a ce 27 d4 20 16 35 25 ab d0 04 34 2d 08 59 47 08 37 04 49 a4 f4 7b 12 31 72 d7 67 4c 53 93 4d b6 4f 12 9c 9b b4 07 e4 22 7e 81 40 26 c2 44 61 04 32 89 98 ad b6 20 2d 9e 04 90 04 5a 10 47 8e 26 9d 0e 20 43 88 8c fe 9f 56 3a 8d 4b 8f 5c d2 2a 36 6d 6c b5 85 20 57 e6 7d 1f fa 59 f6 ee 3f ca da f2 32 eb ed 26 ed 38 a4 90 f3 d9 b5 7d 02 1b c5 78 51 44 18 b6 f9 fb ff fb ff 62 65 79 89 ff fc bf ff 67 4a e5 02 ad 4e db e9 2f 64 8e 95 e5 55 36 ea 0d f6 dd 3a c9 dd f7 dd c7 50 ad 86 5f 28 63 b5 c5 7a a0 85 41 aa 84 9d 91 04 5b 2a 39 70 3d cf a7 38 3c cc f0 f0 f0 15 f7 71 1a 80 a6 dd 80 cb d1 ed 50 93 56 b5 83 20 e0 c0 81 03 57 7c 5e 3a ec 2a 0d 80 c1 75 00 ba 97 dd ed 83 5f 2c Data Ascii: A``Lh]LQz' 5%4-YG7I{1rgLSMO"~@&Da2 -ZG& CV:K\6ml W}Y?2&8}xQDbeygJN/dU6:P_(czA[9p=8<qPV W\|^:*u_,
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 18 25 3c 57 49 55 c9 a4 ea 84 63 ff d6 6d f8 56 d6 b3 15 9b bb 5b 08 89 94 10 26 ae 38 81 52 48 df a3 34 30 40 a9 52 a6 5c 2a b3 ba b4 48 9c 0c a8 1a 1a 1b 05 29 99 9d bf 08 75 c5 f8 c4 18 13 3b c6 09 72 83 48 d9 ef 66 17 68 27 b6 b4 58 94 e7 64 cc da ba 81 4c 69 37 22 4d 88 b2 b5 da 82 84 e6 c7 09 97 4f f6 bd d2 54 e0 77 0b 69 10 2d 01 a3 0d 51 18 22 4c e4 92 12 a9 30 a4 13 77 5d f2 ec 2a f3 12 df 13 74 da 6b 14 3d c3 ed 07 c7 78 e8 7d 23 d4 02 4d 64 24 17 d7 3b bc 7c 72 8e b5 76 1f 7e a1 88 b0 a1 3b ef d2 93 ca a6 c3 bd 0c 32 a1 c5 d5 9b 6d e2 28 06 9c 49 c3 a5 b3 33 ba 3a 62 97 b4 5e b7 38 0b a5 87 1e 7e 48 d1 4b 00 7a e8 e1 9a e8 0a f6 93 4a 7f 5a d5 f7 94 c0 6a 83 b4 1a cf 46 04 56 13 08 8b b4 11 da 1a da aa e2 ba 03 37 3a d1 37 2b d5 de e8 9a 6f 8d Data Ascii: %<WIUcmV[&8RH40@R\H)u;rHfh'XdLi7"MOTwi-Q"L0w]tk=x}#Md$;\|rv~;2m(I3:b^8~HKzJZjFV7:7+o

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	49883	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:15 UTC	382	OUT	GET /wp-content/themes/tgtheme/img/shipin.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:15 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:15 GMT Content-Type: image/jpeg Content-Length: 28049 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-6d91" expires: Fri, 02 Aug 2024 22:40:05 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 86410 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ifynPAhJ9XivHCq07%2Fh%2FBM1x2NdHKiuW8MfmmX1Lxt7Z9SU5gDweTrgl8YzZtbmTelrEDVscXvMUXD0cTIx3ubgEjsDWmJdc%2FT8TLsCMPsfQQ%2Bma95RxR6Mr4zRX16bWHUMWuQ4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29db23ffd424d-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:15 UTC	592	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2a 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifIIDucky<http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39 "> <rdf:RDF xm
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 36 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 34 44 44 41 46 30 39 34 46 41 30 31 31 45 45 41 45 43 37 43 34 31 37 33 35 46 43 39 31 35 36 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 37 34 44 44 41 46 30 36 34 46 41 30 31 31 45 45 41 45 43 37 43 34 31 37 33 35 46 43 39 31 35 36 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 37 34 44 44 41 46 30 37 34 46 41 30 31 31 45 45 41 45 43 37 43 34 31 37 33 35 46 43 39 31 35 36 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 20 3c 3f 78 70 61 63 6b Data Ascii: 6" xmpMM:DocumentID="xmp.did:74DDAF094FA011EEAEC7C41735FC9156"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:74DDAF064FA011EEAEC7C41735FC9156" stRef:documentID="xmp.did:74DDAF074FA011EEAEC7C41735FC9156"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpack
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 05 08 51 60 04 01 00 b0 02 09 42 0a 09 14 02 85 81 42 48 a0 91 42 70 14 1c 05 0b 02 82 05 04 0a 08 14 10 28 20 81 00 20 09 00 20 04 00 82 d0 72 b2 04 01 60 04 16 82 05 04 0a 08 14 10 28 20 50 40 a1 38 0a 0e 02 80 50 a2 80 50 0a 16 05 08 50 00 00 0b 00 20 04 01 40 90 02 00 a4 40 00 00 10 02 02 59 05 52 00 40 08 02 c0 12 00 b0 02 00 90 05 80 10 02 00 40 12 08 00 00 00 2a a4 00 80 21 28 20 82 01 20 00 54 00 06 48 a8 00 00 19 0a c1 06 80 a5 1a 08 01 50 a1 60 a8 01 a0 00 b5 80 59 ca c2 2c 00 92 d0 0a 16 0a 10 02 00 40 14 00 12 00 a0 00 11 00 05 54 80 10 02 00 a0 48 01 00 40 00 00 00 02 c0 10 01 28 05 00 a1 60 50 40 a1 05 01 40 94 02 80 50 14 00 00 00 05 80 20 00 2c 00 80 10 02 00 40 14 01 10 00 02 00 40 08 01 05 16 00 40 08 01 00 20 00 12 00 a0 02 50 55 58 01 Data Ascii: Q`BBHBp( r`( P@8PPP @@YR@@*!( THP`Y,@TH@(`P@@P ,@@@ PUX
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 48 0a 80 d1 50 40 69 20 8b 00 12 32 15 11 16 00 b2 64 8a 05 40 00 01 60 0d 40 44 80 35 00 20 0a 00 00 10 0a 00 08 00 0a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f8 10 6b 16 2c b9 6e a9 8a 8e f7 7f aa 94 89 98 85 c7 19 cb b7 57 37 a0 e8 ed cf 51 17 ce 96 0c 7d e9 fb c6 b6 ce 5e 38 f6 6e eb e0 67 94 75 e8 ec 5a 1e 94 da b4 a9 3b d1 ea 2e b8 f3 5f c7 d4 69 e7 ca cb 2f 67 43 57 0b 5e 3d fa b9 0d 5e df a4 d4 69 ad 83 26 2a ba 34 f9 78 29 5e 99 3c f1 cf 28 9b b7 be 5a b0 cb 1a a7 99 e7 c6 b1 67 c9 8b b5 52 ce a9 fa 11 d9 89 b7 ce 67 15 34 c1 58 80 00 00 00 00 00 00 00 20 04 00 80 2c 00 80 24 00 80 10 02 00 40 00 00 00 00 00 00 00 00 00 64 09 00 00 90 15 00 30 20 10 2a 18 80 19 65 54 31 11 81 96 82 8c 0c b2 28 01 01 52 Data Ascii: HP@i 2d@`@D5 k,nW7Q}^8nguZ;._i/gCW^=^i&4x)^<(ZgRg4X ,$@d0 eT1(R
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 40 04 00 2c 14 40 00 00 00 02 11 40 00 40 00 00 01 20 0c b4 04 80 00 46 06 58 50 08 62 ac 95 50 c4 46 06 5a 0a a0 61 91 46 05 45 46 80 20 8d 20 2a 32 15 11 16 00 a6 48 a8 0a 90 45 02 81 40 a9 01 40 00 00 02 00 a0 20 21 00 20 0a 50 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 48 1c de d5 d2 3b 9e bb 97 25 ff 00 b3 e0 6a 6b 7b ae d9 35 b6 72 b1 c7 b3 77 47 07 3c fb f4 76 9d bb a4 36 9d 24 5e f4 fb c6 4e fe 7e 35 fa 0d 0d 9c bc b2 f6 75 35 70 75 e3 d6 7a b9 bc 78 e9 8e bc 98 ea a9 45 d9 54 b8 23 5e fd 5b 71 11 1d 22 29 60 8b 24 14 20 04 01 f2 cd a8 c5 87 b5 cd bf 64 b1 16 96 e3 f3 ea 72 e5 6e 78 2f 03 38 86 13 2c 61 c5 7c 97 e5 a2 f3 7e 05 b1 ca 69 f4 d4 c3 58 4a 6c fb 6c 79 4e 4c e2 1f 58 22 9c a1 69 61 02 95 42 72 fb 17 16 11 e4 fb be a1 ea Data Ascii: @,@@@ FXPbPFZaFEF *2HE@@ ! PH;%jk{5rwG<v6$^N~5u5puzxET#^[q")`$ drnx/8,a\|~iXJllyNLX"iaBr
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 60 29 00 58 60 20 0b 00 79 6f 5a ea be 3f 51 67 aa 73 4c 4a b5 ab f4 c7 13 b3 c3 c6 b5 c3 e6 fc 86 77 b6 5c 29 b4 d2 00 15 28 08 84 14 2d 05 40 09 20 50 00 00 00 00 00 09 20 50 00 00 05 a0 85 01 50 00 00 10 04 00 00 09 00 00 84 50 00 19 02 30 20 11 81 96 14 02 33 15 65 81 00 8c 52 b2 c8 20 54 64 50 0d 95 88 80 a8 c8 52 23 48 0a 82 5a 99 0a 82 34 00 0a 05 03 40 00 04 20 a2 81 40 00 00 05 00 00 0a 00 a0 00 00 4b 01 60 2c 05 80 b0 28 00 80 50 00 41 24 04 81 00 92 04 6d 90 61 d8 2b e7 6b 12 d6 9f 3b 5c c5 94 43 e3 7b 32 32 87 ca d6 22 c3 e7 66 46 50 cb 44 56 5a 03 f4 ed ba bb 68 f7 1d 3e a9 7f 55 74 fe 97 06 39 45 c4 c3 3c 32 f8 cc 4b d8 28 eb 7a 56 f5 72 ae 93 93 9c ee 5b f0 65 e3 92 c6 70 f3 99 ea 62 c9 93 1d d5 f1 da 2d dc d7 79 26 20 8e 8e 4f 45 d6 5b 4d Data Ascii: `)X` yoZ?QgsLJw\)(-@ P PPP0 3eR TdPR#HZ4@ @K`,(PA$ma+k;\C{22"fFPDVZh>Ut9E<2K(zVr[epb-y& OE[M
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 32 0b 18 54 92 0c 30 a8 da 03 2c 0c d8 2b 16 46 2a c9 25 58 68 8c 9f 36 82 b0 d1 19 23 44 19 e0 07 2b d3 3d 29 bf 75 36 e2 b6 fd 9b 4a f5 39 e3 9a ee 55 69 8e 9d 9c f7 bb f6 6a bf 39 e7 b3 64 61 17 2f 5d 5a b2 ce 6a 1e 92 bf fa d1 d5 9f 75 77 7b 9e 85 6a 62 56 24 f3 72 f6 7e df 24 ff 00 f8 9a df dd c7 dd bb fe 6e 75 de 3f fa ff 00 e1 d0 fa a3 e5 d7 57 f4 c5 a7 75 db ef 4d 3b 6d 57 57 8b f7 b8 5c 7f 3e 93 cb e5 68 67 be 1b b1 cb b4 b5 36 71 f3 c3 bc 3a e7 2f 67 a7 b3 d4 7b 53 c4 82 25 90 0b 6d 22 d0 fb 63 a9 93 19 7e bc 49 77 cf d2 67 0f 29 7e 8a f0 32 61 6d a2 a2 80 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 02 d8 0b 01 68 42 c9 0a 80 00 80 49 00 00 82 48 11 b0 ac b0 00 46 06 58 56 40 33 14 46 c3 24 90 32 ca a1 88 cb 0a cb 22 80 7e a5 1e 64 Data Ascii: 2T0,+F*%Xh6#D+=)u6J9Uij9da/]Zjuw{jbV$r~$nu?WuM;mWW\>hg6q:/g{S%m"c~Iwg)~2amhBIHFXV@3F$2"~d
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 4c 95 f2 f0 ef 3d 34 ed 9c 32 b8 78 f2 34 46 dc 7e 32 fe 58 d6 ed b9 34 7a cc fa 3c e9 57 3e 9b 25 b0 e5 ac a6 95 e9 6e 56 a5 7a 4e fe 39 44 c5 c3 e4 b2 8a 99 89 fa 3f 3f c0 7d cc ce d8 30 e9 75 da 85 c0 cc 95 2d 42 84 b2 c2 80 00 00 00 00 22 85 84 89 00 00 00 00 00 00 00 00 00 00 06 40 00 00 40 02 06 40 19 00 00 08 c8 12 15 99 00 04 02 30 33 21 51 b0 32 c0 18 aa 36 06 58 b5 42 08 c2 a4 81 1b 22 bf 62 22 09 95 5b 4c 25 aa 2a 34 99 29 15 14 7e 8d 16 96 da bd 4d 30 56 dc b6 bf eb 3e 26 39 65 f1 8b 67 86 13 94 d4 3b 02 e8 5d 63 ff 00 aa af f4 59 ab fd dc 7d 1b df e6 e5 fb 95 f4 0e b2 cb 8e a6 93 e3 ca c7 f7 a3 d0 ff 00 37 2f dc c2 f9 79 af 7f f5 74 fe 89 97 f7 b1 f4 3f cc cb f7 3f 2e ab a1 b7 cc 2a 71 25 a8 f2 69 7d 66 78 72 f0 97 8e cf 1d b3 1e ce 17 51 a5 Data Ascii: L=42x4F~2X4z<W>%nVzN9D??}0u-B"@@@03!Q26XB"b"[L%4)~M0V>&9eg;]cY}7/yt??.q%i}fxrQ
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: 27 b2 80 00 04 4e 66 38 c7 6c 0a 48 98 92 78 c3 e0 fc 05 2d 92 84 13 d3 ba 73 22 d4 97 04 af d0 c8 1e 7c 3c 05 4a 5c 27 35 7c 45 4a dc 1c ca 26 78 03 dc e3 13 12 bb 9a e2 4a 2c e2 41 25 78 a2 c4 2f ca 12 57 8a 2d 49 70 27 3f f8 a2 51 61 0b 42 aa 70 f1 5e 91 45 c3 32 bc 50 a9 2e 09 5f 49 02 dc 3b 54 79 8a 56 66 54 ae c2 0c be 0a 59 54 ed ec ec f1 08 cb 6b c7 b0 29 26 2a cb 00 45 65 81 96 15 08 a8 c0 fd a8 88 22 ab 48 31 69 14 54 11 a0 39 0d 87 f1 6c 1e 67 96 ef b2 5e fc 6f c9 0f 4b a9 c6 7d 1b aa 75 d7 6e 9b bb 8f 74 af e5 3a 1c 2f ab 95 e4 a6 7a 3a b6 3c b9 71 db 9a 97 b5 5f 8c b7 fc a6 f4 e3 0e 54 65 31 f5 72 fb 67 54 6e 9a 3c b5 e7 c8 f3 61 ec b6 3b 78 7a 0f 1d 9c 6c 32 8f 46 d6 9e 6e 78 4f 5e af 41 db b5 f8 35 fa 5c 7a 9c 0e 69 75 27 27 3d 73 8c d4 bb Data Ascii: 'Nf8lHx-s"\|<J\'5\|EJ&xJ,A%x/W-Ip'?QaBp^E2P._I;TyVfTYTk)&*Ee"H1iT9lg^oK}unt:/z:<q_Te1rgTn<a;xzl2FnxO^A5\ziu''=s
2024-07-04 22:40:15 UTC	1369	IN	Data Raw: f7 8b fd 2c 7c 31 f4 3f 97 3f 57 ac 6c 6d bd ab 4c db 96 e8 a5 bf 13 87 ba 3f 5c d3 ea b8 d3 33 84 4c be 5d 4a dd 76 7d 45 aa f9 6c ab c1 a2 f1 e2 27 3e af 3e 5c ff 00 fc e5 e5 b5 d7 eb a3 8e a2 f3 e6 ce df f1 e3 e8 f9 9f e5 cf d5 2d ae d6 35 cb 7c f7 69 f7 48 f8 63 e8 4e dc ba dc b9 ce 9e e9 0d 46 e6 96 7d 4c e1 d2 3e c7 fa d6 f2 35 b7 f2 a3 0e 91 dd b9 c4 f1 f3 b7 f5 65 d2 1d cb 4b d2 5d 3f a7 aa e5 d1 d2 d6 5f af 64 db 67 3f 2e 4e c9 ef 2e ce 1c 2d 58 fd 1f 6c fd 37 b1 66 af 2e 4d 16 26 97 63 8f f8 98 c6 fd 91 da 59 cf 17 5c f7 c6 1d 63 7f f9 7b 86 d8 ed a8 da db a6 5a fb 5f 01 f1 4d 78 23 73 4f 3a 6e b2 73 79 3e 32 2a f0 97 44 c9 8e f8 b2 5b 1e 4a ba de ae 2d 57 da 99 d3 89 b8 b7 16 62 a6 a5 fb 36 0f c6 74 bf 6d 7d 68 f3 df f6 4b db 8d f9 21 ed 0b b1 Data Ascii: ,\|1??WlmL?\3L]Jv}El'>>\-5\|iHcNF}L>5eK]?_dg?.N.-Xl7f.M&cY\c{Z_Mx#sO:nsy>2*D[J-Wb6tm}hK!

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	49927	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:26 UTC	644	OUT	GET /752 HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:27 UTC	938	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-pingback: https://www.telegramkv.com/xmlrpc.php link: <https://www.telegramkv.com/wp-json/>; rel="https://api.w.org/" link: <https://www.telegramkv.com/wp-json/wp/v2/posts/752>; rel="alternate"; type="application/json" link: <https://www.telegramkv.com/?p=752>; rel=shortlink vary: Accept-Encoding, Cookie strict-transport-security: max-age=31536000 CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d38JXBPWv3UjzDL%2FamFRpSk6XqTePqb7961DKYj9qXWKn4jxF1T%2BVRFFMvGCUd62mPaWp9Nd1ga9Lmpkujg7CLGNHKc5L0A25qVK15QpwX8iLMs%2Fg5FNL%2BkCV7dIOJ5txNCsQWs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29df6a9527d26-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:27 UTC	431	IN	Data Raw: 37 63 30 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 5f 43 4e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 74 68 65 6d 65 73 2f 74 67 74 68 65 6d 65 2f 73 63 73 73 2f 73 74 79 6c 65 2e 63 73 73 22 3e 0a Data Ascii: 7c06<!DOCTYPE html><html lang="zh_CN"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="stylesheet" href="https://www.telegramkv.com/wp-content/themes/tgtheme/scss/style.css">
2024-07-04 22:40:27 UTC	1369	IN	Data Raw: 6d 65 73 2f 74 67 74 68 65 6d 65 2f 73 63 73 73 2f 6d 65 64 69 61 2e 63 73 73 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d e6 80 8e e4 b9 88 e8 ae be e7 bd ae e8 bf 91 e6 9c 9f e4 b8 8a e7 ba bf ef bc 9f 20 2d 20 54 65 6c 65 67 72 61 6d e4 b8 ad e6 96 87 e5 ae 98 e7 bd 91 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 27 72 6f 62 6f 74 73 27 20 63 6f 6e 74 65 6e 74 3d 27 69 6e 64 65 78 2c 20 66 6f 6c 6c 6f 77 2c 20 6d 61 78 2d 69 6d 61 67 65 2d 70 72 65 76 69 65 77 3a 6c 61 72 67 65 2c 20 6d 61 78 2d 73 6e 69 70 70 65 74 3a 2d 31 2c 20 6d 61 78 2d 76 69 64 65 6f 2d 70 72 65 76 69 65 77 3a 2d 31 27 20 2f 3e 0a 0a 09 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 69 73 20 6f 70 74 69 6d 69 7a 65 64 20 77 69 74 68 Data Ascii: mes/tgtheme/scss/media.css"> <title>Telegram - Telegram</title> <meta name='robots' content='index, follow, max-image-preview:large, max-snippet:-1, max-video-preview:-1' />... This site is optimized with
2024-07-04 22:40:27 UTC	1369	IN	Data Raw: 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 37 35 32 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 54 65 6c 65 67 72 61 6d e4 b8 ad e6 96 87 e5 ae 98 e7 bd 91 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 72 74 69 63 6c 65 3a 70 75 62 6c 69 73 68 65 64 5f 74 69 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 32 30 32 34 2d 30 37 2d 30 32 54 30 34 3a 35 37 3a 31 36 2b 30 30 3a 30 30 22 20 2f 3e 0a 09 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 72 74 69 63 6c 65 3a 6d 6f 64 69 66 69 65 64 5f 74 69 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 32 30 32 34 2d 30 36 2d 30 32 54 30 35 3a 30 33 3a 33 30 2b Data Ascii: tent="https://www.telegramkv.com/752" /><meta property="og:site_name" content="Telegram" /><meta property="article:published_time" content="2024-07-02T04:57:16+00:00" /><meta property="article:modified_time" content="2024-06-02T05:03:30+
2024-07-04 22:40:27 UTC	1369	IN	Data Raw: 30 32 32 2e 6a 70 65 67 22 2c 22 64 61 74 65 50 75 62 6c 69 73 68 65 64 22 3a 22 32 30 32 34 2d 30 37 2d 30 32 54 30 34 3a 35 37 3a 31 36 2b 30 30 3a 30 30 22 2c 22 64 61 74 65 4d 6f 64 69 66 69 65 64 22 3a 22 32 30 32 34 2d 30 36 2d 30 32 54 30 35 3a 30 33 3a 33 30 2b 30 30 3a 30 30 22 2c 22 61 75 74 68 6f 72 22 3a 7b 22 40 69 64 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 23 2f 73 63 68 65 6d 61 2f 70 65 72 73 6f 6e 2f 37 35 38 64 36 34 33 61 30 32 31 66 30 61 38 65 32 32 66 35 33 63 37 64 66 64 65 32 39 37 33 39 22 7d 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 e5 9c a8 54 65 6c 65 67 72 61 6d e4 b8 ad e8 ae be e7 bd ae e8 bf 91 e6 9c 9f e4 b8 8a e7 ba bf ef bc 8c e9 a6 96 e5 85 88 e6 89 93 e5 bc 80 e5 Data Ascii: 022.jpeg","datePublished":"2024-07-02T04:57:16+00:00","dateModified":"2024-06-02T05:03:30+00:00","author":{"@id":"https://www.telegramkv.com/#/schema/person/758d643a021f0a8e22f53c7dfde29739"},"description":"Telegram
2024-07-04 22:40:27 UTC	1369	IN	Data Raw: e4 b8 ad e6 96 87 e5 ae 98 e7 bd 91 22 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 3a 22 e5 85 a8 e9 9d a2 e7 9a 84 e7 94 a8 e6 88 b7 e6 94 af e6 8c 81 ef bc 8c e8 a7 a3 e5 86 b3 e6 82 a8 e7 9a 84 e6 89 80 e6 9c 89 e9 80 9a e8 ae af e9 9c 80 e6 b1 82 22 2c 22 70 6f 74 65 6e 74 69 61 6c 41 63 74 69 6f 6e 22 3a 5b 7b 22 40 74 79 70 65 22 3a 22 53 65 61 72 63 68 41 63 74 69 6f 6e 22 2c 22 74 61 72 67 65 74 22 3a 7b 22 40 74 79 70 65 22 3a 22 45 6e 74 72 79 50 6f 69 6e 74 22 2c 22 75 72 6c 54 65 6d 70 6c 61 74 65 22 3a 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 2f 3f 73 3d 7b 73 65 61 72 63 68 5f 74 65 72 6d 5f 73 74 72 69 6e 67 7d 22 7d 2c 22 71 75 65 72 79 2d 69 6e 70 75 74 22 3a 22 72 65 71 75 69 72 65 64 20 6e 61 6d 65 Data Ascii: ","description":"","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://www.telegramkv.com/?s={search_term_string}"},"query-input":"required name
2024-07-04 22:40:27 UTC	1369	IN	Data Raw: 70 73 3a 5c 2f 5c 2f 77 77 77 2e 74 65 6c 65 67 72 61 6d 6b 76 2e 63 6f 6d 5c 2f 77 70 2d 69 6e 63 6c 75 64 65 73 5c 2f 6a 73 5c 2f 77 70 2d 65 6d 6f 6a 69 2d 72 65 6c 65 61 73 65 2e 6d 69 6e 2e 6a 73 3f 76 65 72 3d 36 2e 35 2e 35 22 7d 7d 3b 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 69 2c 6e 29 7b 76 61 72 20 6f 2c 73 2c 65 3b 66 75 6e 63 74 69 6f 6e 20 63 28 65 29 7b 74 72 79 7b 76 61 72 20 74 3d 7b 73 75 70 70 6f 72 74 54 65 73 74 73 3a 65 2c 74 69 6d 65 73 74 61 6d 70 3a 28 6e 65 77 20 44 61 74 65 29 2e 76 61 6c 75 65 4f 66 28 29 7d 3b 73 65 73 73 69 6f 6e 53 74 6f 72 61 67 65 2e 73 65 74 49 74 65 6d 28 6f 2c 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 74 Data Ascii: ps:\/\/www.telegramkv.com\/wp-includes\/js\/wp-emoji-release.min.js?ver=6.5.5"}};/! This file is auto-generated /!function(i,n){var o,s,e;function c(e){try{var t={supportTests:e,timestamp:(new Date).valueOf()};sessionStorage.setItem(o,JSON.stringify(t
2024-07-04 22:40:27 UTC	1369	IN	Data Raw: 7b 7d 29 3b 72 65 74 75 72 6e 20 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6f 5b 65 5d 3d 74 28 61 2c 65 2c 6e 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 74 28 65 29 7b 76 61 72 20 74 3d 69 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 63 72 69 70 74 22 29 3b 74 2e 73 72 63 3d 65 2c 74 2e 64 65 66 65 72 3d 21 30 2c 69 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 29 7d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 50 72 6f 6d 69 73 65 26 26 28 6f 3d 22 77 70 45 6d 6f 6a 69 53 65 74 74 69 6e 67 73 53 75 70 70 6f 72 74 73 22 2c 73 3d 5b 22 66 6c 61 67 22 2c 22 65 6d 6f 6a 69 22 5d 2c 6e 2e 73 75 70 70 6f 72 74 73 3d 7b 65 76 65 72 79 74 68 69 6e 67 3a 21 30 2c 65 76 65 72 79 74 68 69 6e 67 45 78 63 65 Data Ascii: {});return e.forEach(function(e){o[e]=t(a,e,n)}),o}function t(e){var t=i.createElement("script");t.src=e,t.defer=!0,i.head.appendChild(t)}"undefined"!=typeof Promise&&(o="wpEmojiSettingsSupports",s=["flag","emoji"],n.supports={everything:!0,everythingExce
2024-07-04 22:40:27 UTC	1369	IN	Data Raw: 79 43 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 44 4f 4d 52 65 61 64 79 3d 21 30 7d 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3b 6e 2e 73 75 70 70 6f 72 74 73 2e 65 76 65 72 79 74 68 69 6e 67 7c 7c 28 6e 2e 72 65 61 64 79 43 61 6c 6c 62 61 63 6b 28 29 2c 28 65 3d 6e 2e 73 6f 75 72 63 65 7c 7c 7b 7d 29 2e 63 6f 6e 63 61 74 65 6d 6f 6a 69 3f 74 28 65 2e 63 6f 6e 63 61 74 65 6d 6f 6a 69 29 3a 65 2e 77 70 65 6d 6f 6a 69 26 26 65 2e 74 77 65 6d 6f 6a 69 26 26 28 74 28 65 2e 74 77 65 6d 6f 6a 69 29 2c 74 28 65 2e 77 70 65 6d 6f 6a 69 29 29 29 7d 29 29 7d 28 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 2c 77 69 6e 64 6f 77 2e Data Ascii: yCallback=function(){n.DOMReady=!0}}).then(function(){return e}).then(function(){var e;n.supports.everything\|\|(n.readyCallback(),(e=n.source\|\|{}).concatemoji?t(e.concatemoji):e.wpemoji&&e.twemoji&&(t(e.twemoji),t(e.wpemoji)))}))}((window,document),window.
2024-07-04 22:40:27 UTC	1369	IN	Data Raw: 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 70 61 6c 65 2d 70 69 6e 6b 3a 20 23 66 37 38 64 61 37 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d 72 65 64 3a 20 23 63 66 32 65 32 65 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 6f 72 61 6e 67 65 3a 20 23 66 66 36 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 76 69 76 69 64 2d 61 6d 62 65 72 3a 20 23 66 63 62 39 30 30 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 6c 69 67 68 74 2d 67 72 65 65 6e 2d 63 79 61 6e 3a 20 23 37 62 64 63 62 35 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 63 6f 6c 6f 72 2d 2d 76 69 76 69 64 2d Data Ascii: wp--preset--color--pale-pink: #f78da7;--wp--preset--color--vivid-red: #cf2e2e;--wp--preset--color--luminous-vivid-orange: #ff6900;--wp--preset--color--luminous-vivid-amber: #fcb900;--wp--preset--color--light-green-cyan: #7bdcb5;--wp--preset--color--vivid-
2024-07-04 22:40:27 UTC	1369	IN	Data Raw: 69 65 6e 74 2d 2d 62 6c 75 73 68 2d 62 6f 72 64 65 61 75 78 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 34 2c 32 30 35 2c 31 36 35 29 20 30 25 2c 72 67 62 28 32 35 34 2c 34 35 2c 34 35 29 20 35 30 25 2c 72 67 62 28 31 30 37 2c 30 2c 36 32 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 6c 75 6d 69 6e 6f 75 73 2d 64 75 73 6b 3a 20 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 33 35 64 65 67 2c 72 67 62 28 32 35 35 2c 32 30 33 2c 31 31 32 29 20 30 25 2c 72 67 62 28 31 39 39 2c 38 31 2c 31 39 32 29 20 35 30 25 2c 72 67 62 28 36 35 2c 38 38 2c 32 30 38 29 20 31 30 30 25 29 3b 2d 2d 77 70 2d 2d 70 72 65 73 65 74 2d 2d 67 72 61 64 69 65 6e 74 2d 2d 70 61 6c 65 Data Ascii: ient--blush-bordeaux: linear-gradient(135deg,rgb(254,205,165) 0%,rgb(254,45,45) 50%,rgb(107,0,62) 100%);--wp--preset--gradient--luminous-dusk: linear-gradient(135deg,rgb(255,203,112) 0%,rgb(199,81,192) 50%,rgb(65,88,208) 100%);--wp--preset--gradient--pale

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	49926	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:27 UTC	630	OUT	GET /wp-content/uploads/2024/05/12022-1024x558.jpeg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/752 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:28 UTC	780	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:27 GMT Content-Type: image/jpeg Content-Length: 46879 Connection: close last-modified: Mon, 27 May 2024 11:49:27 GMT etag: "66547347-b71f" expires: Thu, 01 Aug 2024 22:40:25 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172802 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sukJuzeMzyvu67BIME5vtRA4Ncoxi%2BkpH%2FS8CdZyN7cFBcGurh7zihZVTj7gqGjUxlBtJKlA1%2BIzJBNymR8Rk3py1GxIElw6O5%2Bkza%2BhlhKa2dtnAehaXlFEJsWoU5tAPRa9pxM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29dfecc7b183d-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:28 UTC	589	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 2e 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$."
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 6a 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fa 52 8a 28 a0 02 8a c6 f1 27 8b f4 7f 08 c1 15 c6 b3 75 f6 68 64 dd 87 2b 91 90 01 c7 d7 9e 07 7a 5f 0c f8 b7 45 f1 8d 81 be d1 2f 92 ea 15 3b 5c 00 55 e3 6f 46 53 c8 3f 5a 00 d8 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 Data Ascii: jstuvwxyz?R('uhd+z_E/;\UoFS?Z(((((((((((((((((((((((((
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 8a 00 28 eb c5 14 50 07 95 da fc 0b 8f 44 ba b9 bf d1 35 eb 98 ee ee 0b 6e fb 4c 28 54 2b 13 90 36 80 47 5a d8 f0 c7 c3 06 d1 b5 a4 d6 6f 35 76 9a e4 3b 3b c5 04 09 1c 72 1c 60 6f 38 dc c0 67 20 64 00 79 ae f2 8a cf d9 47 9b 9b a9 d4 f1 b5 9d 15 87 6f dd f4 5f 9e e1 f9 7e 14 51 45 68 72 86 05 1e f4 51 40 07 4a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 Data Ascii: (PD5nL(T+6GZo5v;;r`o8g dyGo_~QEhrQ@J((((((((((((((((((((((((((((((((((((((
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: fd 8f 33 17 9a d1 c3 56 8d 19 a7 77 db cd d8 f7 1a 28 a2 bc 93 d3 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 2b c4 bc 71 f1 0f c4 da 47 8b 35 2b 0b 2d 4d a1 b7 86 50 a8 82 34 20 0d a0 f7 1e f5 87 ff 00 0b 57 c6 0a c0 9d 59 8e 0e 70 62 4c 1f 63 c5 7d 35 1e 15 c5 55 a7 1a 91 94 6c d2 7b be bf 23 e7 ea f1 1e 1e 9c dc 25 17 a3 b7 4f f3 3e 89 a2 bc d2 eb e2 55 f2 7c 38 4d 66 64 86 db 53 b9 94 c1 6e 10 64 36 3a c9 83 f4 3c 57 29 69 f1 13 e2 06 a9 06 6c 63 79 d5 7e 56 9a 0b 20 70 7d ce 30 0d 73 50 e1 ec 4d 45 29 37 18 a8 b6 b5 7d 57 c8 de b6 79 87 a6 e2 92 6d b5 7d 17 73 dd aa 39 6e 21 80 aa cd 34 71 96 3b 54 3b 81 b8 fa 0c d7 cf 70 78 9f c7 1e 26 d4 06 9d 6f Data Ascii: 3Vw(((((((((((((+qG5+-MP4 WYpbLc}5Ul{#%O>U\|8MfdSnd6:<W)ilcy~V p}0sPME)7}Wym}s9n!4q;T;px&o
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 46 92 da 70 4a 33 29 52 70 48 3c 1f 70 6b cc 7e 2d 78 b7 5c d0 3c 47 6f 6d a6 6a 53 da c2 f6 8b 21 48 f1 82 c5 dc 67 a7 b0 af 3b 03 97 55 c5 e2 3e ac bd d9 6b bf 91 dd 8c c7 d3 c3 51 55 de b1 76 db cc f5 ba 2b c0 ac bc 41 f1 2b 52 b6 5b 9b 39 f5 8b 88 1f 3b 64 8e 2c a9 c1 c7 5c 55 4d 43 c6 de 3b d2 a6 10 5f ea 7a 8d ac a5 77 04 95 42 9c 7a e0 8a f6 23 c2 d5 a5 2e 45 56 0d f6 bb ff 00 23 cc 7c 45 4a 31 e6 74 e5 6f 43 e8 8a 2b cd f5 8f 12 6a d0 7c 26 b2 d6 23 be 95 2f e4 f2 f7 5c 0c 6e 39 62 0f 6f 6a e0 b4 df 18 78 ff 00 58 67 4d 3b 50 d4 ee da 30 0b 88 54 31 51 ef 81 5c d8 6e 1e ad 5e 13 9a 9c 52 8b 71 77 bf 4f 91 be 23 3b a5 46 51 87 23 6e 49 3d 3c cf a1 68 af 00 bf f1 27 c4 8d 2a dc dc 5f 5c ea f6 d0 82 17 cc 96 30 a3 27 a0 c9 15 d5 7c 21 f1 56 b7 e2 0d Data Ascii: FpJ3)RpH<pk~-x\<GomjS!Hg;U>kQUv+A+R[9;d,\UMC;_zwBz#.EV#\|EJ1toC+j\|&#/\n9bojxXgM;P0T1Q\n^RqwO#;FQ#nI=<h'*_\0'\|!V
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: c7 d1 b0 dc c3 72 bb e0 9a 29 97 a6 63 60 c3 3f 51 52 8e 6b cb 3e 0d e9 37 da 76 8d ad dd ad ab 25 e4 8c b1 c3 1c ea 50 31 55 24 67 be 32 d5 c0 6b 7e 28 f1 57 8a 6f 64 b4 bb 9a e9 dc 31 43 67 6e a4 2a 90 70 46 d5 eb 8f 7c d7 1d 2e 1f 75 b1 35 28 d3 a8 b9 61 6b b7 e6 bb 7f c1 3a aa 67 7e cf 0f 0a b3 a6 f9 a5 d1 7f 9f fc 03 e8 96 d4 ac 52 4f 2d af 6d 56 4c e3 69 99 73 f9 66 ac 8e 46 47 20 f4 22 be 60 bd f0 77 88 74 fb 53 79 77 a2 df 43 00 19 32 34 47 00 7b fa 56 9f 81 fc 7b 7f e1 3b f8 91 e6 92 5d 35 98 09 ad d8 e4 00 7f 89 7d 08 eb ef 5d 95 b8 56 f4 9c f0 d5 54 da e9 ff 00 05 36 72 d2 e2 36 aa 28 62 29 b8 a7 d7 fa 47 d1 94 bb 49 e8 29 aa cb 22 2b a3 06 56 19 07 d4 7a d7 83 7c 66 91 d7 c6 ce 03 b0 1f 66 8b a3 11 eb 5e 1e 55 96 fd 7e bf b1 e6 e5 d2 fb 5f f5 Data Ascii: r)c`?QRk>7v%P1U$g2k~(Wod1Cgn*pF\|.u5(ak:g~RO-mVLisfFG "`wtSywC24G{V{;]5}]VT6r6(b)GI)"+Vz\|ff^U~_
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: c2 3f 18 48 b7 3e 69 84 23 da ed dc f9 c6 01 e9 d6 bb 71 15 30 94 eb 55 55 1b 6d a5 cc 92 6d 25 df 45 a7 de 72 d0 a7 89 9d 2a 6e 16 49 37 6d 52 bf de f5 3d c6 c2 e6 0b db 1b 7b 9b 53 9b 79 63 57 88 ed db f2 91 91 c7 6e 2a 7a ab a5 58 0d 2f 4d b5 b0 57 2e 2d a2 58 83 91 82 d8 18 cd 5a af cb a7 cb cc f9 76 3f 44 85 f9 57 36 e1 5e 31 f1 e7 fe 42 da 4f fd 7b bf fe 85 5e cf 5e 33 f1 e3 fe 42 fa 4f fd 7b bf fe 85 5e ef 0c 7f c8 c2 1e 8f f2 67 8d c4 3f ee 52 f9 7e 66 e7 c0 af f9 17 75 0f fa fb ff 00 d9 16 bd 2a be 54 b3 d5 f5 2d 3e 32 96 57 d7 76 e8 c7 2c b0 cc c8 09 fa 03 56 3f e1 26 d7 bf e8 2f a9 ff 00 e0 54 9f e3 5e fe 61 c3 15 31 58 89 d7 55 12 e6 e9 63 c5 c1 71 0c 30 d4 23 45 c1 bb 79 9f 51 d1 5f 2f c3 e2 5d 78 ca 80 eb 1a 96 0b 0e b7 2f cf eb 5f 4e c4 4f Data Ascii: ?H>i#q0UUmm%ErnI7mR={SycWnzX/MW.-XZv?DW6^1BO{^^3BO{^g?R~fu*T->2Wv,V?&/T^a1XUcq0#EyQ_/]x/_NO
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 27 50 97 e0 e5 85 84 76 37 2d 76 9e 56 e8 04 67 78 f9 cf 6e b5 c1 68 50 78 df c3 4f 2c 9a 56 9b aa 5b 3c c0 2b 91 68 4e e0 3a 75 53 5e 7e 5d 38 cb 0d 5e 09 c5 b7 39 69 2d 9e ab 73 bb 1f 09 2c 45 29 35 24 94 23 ac 77 ea 4f e2 9b 9f 1f cd a5 32 f8 8d 6f 85 86 f5 cf 9d 1a 2a ee fe 1e 40 15 b7 f0 27 fe 46 0d 4f fe bd 07 fe 86 b5 81 e2 5d 6b c6 fa 86 98 60 d7 d2 f9 6c 4b a9 26 6b 6d 8b b8 74 e7 68 ad ff 00 81 1f f2 1f d4 ff 00 eb d0 7f e8 6b 5a 63 62 e3 95 55 4d 45 7f 83 6d d7 e2 65 84 92 79 8d 36 9c 9f f8 b7 3d aa 8a 28 af cd 4f d0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 Data Ascii: 'Pv7-vVgxnhPxO,V[<+hN:uS^~]8^9i-s,E)5$#wO2o*@'FO]k`lK&kmthkZcbUMEmey6=(O(((((((((((((((((((
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: b8 67 ba bc 90 97 9a 53 92 07 52 4f e1 da bc 6c 9b 27 58 aa 73 af 5a 7c b4 e3 bd ba db 5f c0 f5 73 5c d1 e1 ea 46 8d 28 f3 4d ed e5 7d 0f 55 d4 be 37 e8 40 3c 56 da 65 ed da 30 2a 4c 81 51 58 7e 66 bc 5e 76 8e 49 e4 68 d3 64 6c c4 aa 9e 70 09 e9 5e fb a4 7c 21 f0 be 9e 88 2e 6d e4 d4 25 fe 29 27 73 82 7f dd 18 15 e1 3a bc 49 0e ad 7b 14 4a 16 34 b8 75 55 1d 00 0c 71 5f 51 c3 b5 30 3c f5 21 82 4f 4b 5d be bb db fa b2 3e 7b 3c 86 33 96 12 c5 35 ad ec 97 4d 8f a4 bc 17 3c 97 3e 12 d2 25 90 e5 da d2 3c 9f c2 bc 77 e3 47 fc 8e ef ff 00 5e b1 7f 5a f5 ef 01 ff 00 c8 99 a3 7f d7 aa 7f 2a f2 1f 8d 1f f2 3b bf fd 7a c5 fd 6b c4 e1 f5 6c d6 a2 5f de fc cf 5b 3a 77 cb 69 b7 fd df c8 e9 be 06 69 16 52 58 5f 6a 8f 02 3d e2 4e 21 49 18 64 a2 ed 07 8f 4e bd 6b a4 f8 bb Data Ascii: gSROl'XsZ\|_s\F(M}U7@<Ve0LQX~f^vIhdlp^\|!.m%)'s:I{J4uUq_Q0<!OK]>{<35M<>%<wG^Z;zkl_[:wiiRX_j=N!IdNk
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 00 f4 2a f7 f8 67 fe 46 10 f4 7f 93 3c 4e 21 ff 00 71 97 cb f3 36 be 06 c3 14 9e 1f bf 2f 14 6e 45 de 32 ca 0f f0 2f ad 7a 4f d9 ad ff 00 e7 de 1f fb f6 bf e1 5e 73 f0 2b fe 45 dd 43 fe be ff 00 f6 45 af 4a ac 33 d9 35 8f ab af 5f d1 1b 64 d1 5f 52 a7 e9 fa 91 1b 5b 73 ff 00 2e f0 ff 00 df b1 fe 15 2f 4a 28 af 21 bb ee 7a 89 24 7c ff 00 e2 dd 1f c5 da 86 bb a8 da 8b 7d 6a f6 d1 6e 5c c6 a4 3b c7 8c 92 08 07 8e f5 c9 cb 6f 7f a7 dd bd 8c 8b 35 b5 c2 b0 47 88 92 a4 37 b8 f5 af 56 f8 9d f1 03 5a f0 df 89 d2 cf 4a ba 44 85 2d 95 de 37 8c 30 2c 49 3d fd b1 5c 07 89 e4 9e 6f 19 4b 2d ce d1 71 24 b1 3c bb 47 01 ca a1 3f a9 af d4 72 8c 45 79 d3 87 b4 84 54 5c 6e ad be 96 df ef 3f 3a cc e8 d2 85 49 72 49 b9 29 59 df 6e bb 10 5e e9 5a cf 82 f5 bb 51 73 0b 41 7b 19 Data Ascii: *gF<N!q6/nE2/zO^s+ECEJ35_d_R[s./J(!z$\|}jn\;o5G7VZJD-70,I=\oK-q$<G?rEyT\n?:IrI)Yn^ZQsA{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	49935	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:28 UTC	641	OUT	GET /wp-content/uploads/2024/05/canales-telegram-1024x536.webp HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/752 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:29 UTC	731	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:28 GMT Content-Type: image/webp Content-Length: 18362 Connection: close last-modified: Tue, 14 May 2024 08:37:23 GMT etag: "664322c3-47ba" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7p1uDh%2FNPbOWbHBffpGn4detATQ8fnR1IIjInJtsKEGbPgy4%2FsS5%2B0BIZmIng%2BykW6JJuRIecozQwVYEjwiLMKk26yUgzHcT1IheC4TVt2xEv9WQ9I6pNGrw7sv9sHjP0c2rOjU%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e044b535e78-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:29 UTC	638	IN	Data Raw: 52 49 46 46 b2 47 00 00 57 45 42 50 56 50 38 20 a6 47 00 00 50 cd 01 9d 01 2a 00 04 18 02 3e 49 24 90 45 a4 23 22 11 9a 24 7c 40 04 84 b3 b7 70 af 9f 55 6b 17 1f 67 f3 98 2f da 7c 38 89 0f fd ee e5 f2 71 f0 3f 30 7f c5 7b fc dd 3f cf ff 7c fd 67 d1 63 69 f9 e0 f9 b7 ee 9f f6 7f cd 7e 58 fc 49 f6 29 fa 6f fe d7 b9 1f ea ef fd 0f f3 7f 90 7d e7 3f 74 7d 5a 7e cf fe ed 7b ae fe 5d fc 05 f4 42 fe 9d fe cb af 1f d1 df cd cf ff 2f b5 4f ee bf a4 67 ff fd 67 3e d7 fa a6 f2 47 f2 df df 7f 20 3d 5d fc 8b eb ff d4 7f 7f f4 60 d1 df 66 1a 90 7c bf f0 27 ef bf c3 fa 59 e2 8f ca 6f f6 bd 42 ff 2e fe a3 ff 07 82 74 03 7d 87 ff af e8 e1 f4 9e 78 7d 95 f3 4f ff 87 fd cf cf 63 c7 6e 80 ff a5 3d 18 3e bb f4 fd fb 07 fb 7f 48 b0 7a a9 31 a5 4f 6c c0 24 98 d2 a7 b6 60 12 4c Data Ascii: RIFFGWEBPVP8 GP*>I$E#"$\|@pUkg/\|8q?0{?\|gci~XI)o}?t}Z~{]B/Ogg>G =]`f\|'YoB.t}x}Ocn=>Hz1Ol$`L
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 18 d8 36 22 f3 7d 5a 68 19 74 af b0 f6 c9 ac 7a 79 0f 67 f4 8b 56 d8 c1 d2 a5 2d ca 35 3f 7e a0 e0 52 dc f2 52 7f 68 38 7b 66 04 49 35 f9 d8 15 da 4e c9 6b 66 01 24 c7 95 f6 eb b5 e4 0e ea ff a0 a8 18 30 ff a0 1c 43 19 aa 9f 8b b0 3e 82 9e d9 17 46 bb b2 34 3f 44 e9 fd 43 d3 7f 8a 34 7a 77 ba 7e 4a 1b 02 dd 07 a2 ba 89 f1 67 80 66 54 f6 cc 02 49 26 3f 63 42 90 01 66 83 68 dc 18 32 7e 38 79 fd ec b9 40 e2 c9 ff 82 49 8d 20 15 80 d1 88 7d 52 be 8c 3d 34 66 2d 21 0b 84 d6 c1 67 cf a4 d9 2e f1 5e 81 e8 89 83 e9 23 52 a6 cc ff b2 ad 52 63 4a 9e da 8d 26 b1 34 ec 72 42 f2 16 3b d2 29 e7 b6 90 5c d1 8d 4a 9e d9 80 40 47 14 11 d0 71 fa a8 0a d3 e4 42 db c0 e4 24 73 6a b1 e2 8e 0f 68 92 23 9b 99 2e 0f e1 da d5 1d 6e 53 9c d3 9e be d2 86 ca f3 e8 ed 33 00 92 63 48 Data Ascii: 6"}ZhtzygV-5?~RRh8{fI5Nkf$0C>F4?DC4zw~JgfTI&?cBfh2~8y@I }R=4f-!g.^#RRcJ&4rB;)\J@GqB$sjh#.nS3cH
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: c6 00 a3 fa 9b 04 0e d3 6c 80 c6 5b 3a 77 de 43 20 15 0c d7 f4 e0 37 a1 7e f5 21 f2 67 79 66 fd 3f 00 79 fa 62 9b aa 99 9d 81 3a 17 8c 06 83 f7 00 a5 e6 1f 07 e6 b1 c7 6a ee 1b a6 be 46 b3 ec 2f ff c8 df 15 39 a3 ad 5f f1 60 a8 02 6c c0 33 05 7c e7 3c 0b 0e f8 74 9d 26 71 4b ed 04 75 ab 0e fd 01 95 3d b3 00 92 49 63 a4 d4 a2 ce 78 80 f4 ff 13 70 fe 46 b7 1b d1 46 71 ef ce 8b 3c 72 8d 90 81 dd f7 7e 38 54 44 e5 01 bf 64 e8 59 ec 3a 7c 5e 0d 33 e7 8c c0 12 07 0a 9b df 77 cf c7 70 6f 74 67 f8 bf f5 b1 cd 28 bc 92 86 e3 c0 71 5c 46 12 54 51 74 c7 81 8d a8 77 dc 73 68 50 f9 9d be 25 f8 88 c2 e1 e0 f2 f4 33 fc c7 8f bf 32 2d 79 2d 46 c1 ad b3 ff 3e 3f d7 e9 2f d3 2b 65 2c fb 46 f4 0b 0b 06 cb 6f 7c c9 e0 5c ec 45 37 b4 6b 96 53 20 22 a9 0b 4a 9e d9 78 aa 11 6b Data Ascii: l[:wC 7~!gyf?yb:jF/9_`l3\|<t&qKu=IcxpFFq<r~8TDdY:\|^3wpotg(q\FTQtwshP%32-y-F>?/+e,Fo\|\E7kS "Jxk
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: a9 f8 76 8f 24 24 3e 41 85 12 fb 71 19 f5 a3 63 86 52 87 3d 15 ce 1a 36 46 35 d5 43 97 9e 95 1a 73 41 1e c3 11 94 95 30 a0 e1 ed a0 cb 52 22 62 4e 0d 48 89 89 38 35 22 26 22 cd d9 66 5c 4f e9 ef 27 d5 cd c3 7c c3 1d 15 12 3d 75 41 51 4e d8 23 6f c5 a3 ef c3 0e 0b 89 33 aa aa 02 c9 62 5e 3b 3e 93 83 b8 44 fb 73 8b dd 38 f0 d1 d0 2d ee 97 23 a5 9c fc 4c a0 c0 53 a1 4e 86 8a 24 45 f2 29 00 c7 b0 bf c4 cf 71 64 c4 f6 cc 02 49 8d 2a 7b 66 01 24 c6 95 3d b3 53 c6 84 5c 9d f4 43 af 92 50 2c fa 48 d3 b7 dc 36 54 37 1b f0 cb dd e2 23 e6 a0 35 92 46 d3 44 3f e0 73 e9 d8 bf 86 38 c8 86 c8 00 6f fb 78 4c da ba 6f 75 13 d8 18 0c 39 e1 cf 31 54 7d cb 91 dc 53 fe 33 e8 03 8f a8 03 c2 fe 48 f4 31 01 62 b2 13 0c 3b 3e e6 21 43 7d 76 be 2c fa 79 9c 0d e7 54 f6 cc 02 49 8d Data Ascii: v$$>AqcR=6F5CsA0R"bNH85"&"f\O'\|=uAQN#o3b^;>Ds8-#LSN$E)qdI*{f$=S\CP,H6T7#5FD?s8oxLou91T}S3H1b;>!C}v,yTI
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 15 3b 7b 41 8a 6d 6d 9d a0 7e 5c 52 c1 9b 4f 4b 1a fe c2 37 d6 fe 44 1b 3a 07 29 c9 87 00 5b 62 ed 9f 6f 4e 3a a0 6d ba 86 5f ed c0 30 c9 d9 b0 e5 b2 61 71 d2 d8 da c9 ec 0f 7a 52 ff 8d 50 5a 23 a3 40 2e 1e c8 78 55 f0 45 3a 42 de 96 49 44 0b f1 e1 6b 19 5d aa 71 5f 3e 25 61 0f 60 46 f0 d5 f8 1e 44 43 15 e0 b5 64 0e ea ec fc 25 bf f2 44 27 c8 37 37 40 26 0c 72 b8 a4 af f3 5c ec 76 d1 12 6d e0 ac 02 9c 3b b7 aa 9a d0 5a 8c ff 28 f3 21 0e 62 50 c7 5c f6 7b f6 73 f1 ab 13 7a 8e 73 7d 6f 29 4a b2 80 0f 3e 20 ff 20 19 e2 05 d0 37 e9 0f 42 50 bb 06 04 c6 a0 09 ce bd 1c 1a 7a c6 6f 75 91 6e 76 59 86 5e 7e 69 77 c5 07 1e 8d 19 ad ef 0c 95 1e 0b 4d 0e 80 69 93 18 43 9d 73 d5 2f fb 93 8f 6f da 9c 96 29 cf 87 41 6b c8 e7 52 d3 3b 73 a7 48 df 28 1d 89 fb 45 56 61 da Data Ascii: ;{Amm~\ROK7D:)[boN:m_0aqzRPZ#@.xUE:BIDk]q_>%a`FDCd%D'77@&r\vm;Z(!bP\{szs}o)J> 7BPzounvY^~iwMiCs/o)AkR;sH(EVa
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 68 19 5c f4 a1 d3 b9 23 3b 8f c1 0c 9b a0 00 1c 7f bf 1a 0b cd 49 f9 85 9a 0d e6 7e 46 48 c0 ee 03 cf 5c 5a 0b b3 00 2c 5e 33 21 39 b5 27 21 c6 c2 df 42 76 b6 c7 3f e4 54 dd 53 86 4c e0 00 2b 21 39 4c 5b ba 71 72 eb 53 09 80 72 b9 5b ac 2d c7 5c 0a 56 38 c6 f9 2b 5c 0a 33 1d 98 17 6d 34 54 e4 ba 9d 30 95 78 45 3e dd 94 a6 e5 eb 1c 46 c8 c1 47 51 37 af 74 ca 67 64 e7 21 10 aa a5 a9 94 5f 48 69 76 05 a7 60 00 18 59 9b 18 67 34 bb b4 76 3e 6e 71 de 0e e8 1c 6e de 81 63 82 1b 92 a8 e6 df e1 72 ca 3c e6 93 a3 02 5a 74 ce ec 5f a4 40 10 d2 4a 9c fd eb 3c 04 cf f3 89 62 0a 82 a9 1b c8 76 8f f1 36 61 40 41 0d 81 cb 43 6e 16 88 80 52 b6 ea 10 2f 65 04 48 90 7a 5a 7e 74 07 50 1d 2e 0e 8e d7 a6 58 f2 1b 27 13 a9 72 01 11 de 16 4b 00 96 41 82 c7 41 df 5c 54 fb cc 7e Data Ascii: h\#;I~FH\Z,^3!9'!Bv?TSL+!9L[qrSr[-\V8+\3m4T0xE>FGQ7tgd!_Hiv`Yg4v>nqncr<Zt_@J<bv6a@ACnR/eHzZ~tP.X'rKAA\T~
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 2e 14 ec 42 24 5a fe ee cd 6c bf fd 3c 18 5b 46 80 b6 aa f3 2e cb dd be 7d 42 43 b2 a7 d0 a2 c1 7c b5 5c 01 d9 cc 33 8a 6b 0b 30 62 fc ad 3e a8 17 0b 7b 21 10 0c 9e 8e df df ea 04 d0 8e 8a 25 3b ec 1d c4 59 d9 d0 87 69 e6 f0 cb 6c 83 27 fc d5 b6 0a 6b 3d b4 2f db 58 02 98 a1 f2 56 a2 d6 f1 64 47 05 d8 f1 ce 4a 6e 79 c0 80 4e 1d 80 43 ba 51 76 27 b5 81 9d 6e 37 32 94 a4 e0 af ec 90 b1 9a 4a 80 28 df 74 7f 7f 86 da e5 50 2a ee a6 25 6a 3f 15 f8 43 29 44 cc 20 6c bb 24 d1 31 0a 7f 22 01 8a cc 75 1a b3 33 e4 d3 fd f7 32 32 e5 84 18 8f f0 1b f1 42 1b 7a 60 2c 80 42 00 c7 60 6f f1 79 96 f8 bf ce 9a 6b ba 4e 74 13 f7 93 3d 18 b0 37 c5 70 f3 89 91 46 c5 0f f2 33 d4 26 f6 49 a5 2a ed e6 72 37 7a 00 f4 0a 4b 4f 6a e2 4a 64 65 80 58 09 08 47 05 e2 96 bb 27 87 c3 b7 Data Ascii: .B$Zl<[F.}BC\|\3k0b>{!%;Yil'k=/XVdGJnyNCQv'n72J(tP%j?C)D l$1"u322Bz`,B`oykNt=7pF3&Ir7zKOjJdeXG'
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 93 bb ac 31 9e d5 37 42 a8 14 04 fc f4 ec eb 4e 96 6a a0 05 cd ff 49 06 e0 df 3d 95 1f bf b0 9e 7c 9c b9 ec 39 1e 9b 05 a0 00 d8 15 27 05 62 d5 ac 9a 1b 8f d4 77 7e 32 de 4b 9b 1b 94 00 1b 6b 2e 06 3a 82 9d 31 ca 99 ef 34 ff 6c 49 8f 01 05 0e 26 d4 14 ce 3a 1f 7f ac a2 02 9e ad ea 79 df 1d fb ef df bc e5 a7 34 1e b9 2c 81 92 26 6c 11 1c fa 2b dd 74 9c 59 2f fb b9 82 41 c1 3f 38 3e c1 23 9d 58 36 fc a5 6f 4f 0a f1 90 fd a9 16 84 85 f2 cd f9 08 02 fb 18 a4 2a 07 ac 8d 8b 26 10 5b 1c ab b5 24 8d 01 ae d7 ad 8f 16 61 5a 4b 1d 19 35 eb 04 e6 23 78 7c f3 87 f9 d0 38 88 fc 69 3c 49 8c ca 79 cf e2 5b a0 18 05 ec 18 9f cd 97 7e e1 02 cc c5 8e 26 b0 07 89 5e f7 e9 c2 44 42 65 ce ae ea b0 e5 94 f7 d9 b9 8b fd 93 d6 20 52 4e 22 3c 4b a1 a7 9c 9f 7a a7 6f 4e 11 21 f8 Data Ascii: 17BNjI=\|9'bw~2Kk.:14lI&:y4,&l+tY/A?8>#X6oO*&[$aZK5#x\|8i<Iy[~&^DBe RN"<KzoN!
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: cc 2d 64 99 37 23 9f b2 bf 75 32 22 c1 de 25 1a 94 b1 50 72 be 6c 3d 5c da 9e 95 75 ff 05 e0 ab 00 ab 2a 36 fb 9f cc d7 18 86 3d d6 4f 57 f1 a0 df 28 70 e2 f2 ea 1f 1a 32 27 4f 72 39 fd 98 f6 ce be 4d 8f 64 4b b6 7c 5a 72 23 3f 3d d2 5d d0 8d 99 81 3d 6b 65 f4 8b df d4 14 42 d6 fd 78 55 4a 21 25 8c 0c 02 47 49 f2 aa 3b 1a 29 84 58 ed b4 d7 61 37 32 3d 8c 80 cf 05 54 5b d3 17 ed 85 db ac 73 1b 20 33 eb 42 48 b8 e6 6a 0c 80 5c ad 32 35 c6 f9 02 95 ff 36 3f df 99 0c f6 a2 89 6e 1d d3 ba 62 7d 72 57 3f 87 7a 29 2e 69 c4 77 a3 05 81 6c e3 88 90 e8 77 ab 0f d0 1e 34 49 75 37 9f ab c7 81 18 2a 90 34 25 27 da 53 48 9c f5 2d c7 ae 15 e9 4d 79 2a a6 ef a3 45 84 3d 55 7e 23 05 99 54 e1 8d f8 f4 fa d3 1f c6 94 7a 37 c3 4c 0e 72 80 64 ef 9a 9c a9 f1 01 96 0d 7b 75 ec Data Ascii: -d7#u2"%Prl=\u6=OW(p2'Or9MdK\|Zr#?=]=keBxUJ!%GI;)Xa72=T[s 3BHj\256?nb}rW?z).iwlw4Iu74%'SH-My*E=U~#Tz7Lrd{u
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 12 eb 50 97 ed 18 06 65 9a 61 4a ac 6b 15 7f d5 41 34 f6 cd 9e 2c 46 a0 08 db 01 c4 41 d2 69 a8 68 aa a8 17 a7 77 57 09 b3 66 15 fc 51 11 17 30 b5 7d 31 c4 3a fd ba 61 7d 27 4b de 28 af 61 b7 f1 a0 18 22 5b 88 6e 33 08 97 d7 77 f0 ad 16 fa 29 f2 b3 87 1b af e1 1f 09 7a 23 da 3d df cf 7c 95 c7 92 fa b8 85 68 5f 81 8d 14 82 00 bd c8 aa 3e 17 ea 62 73 9f 3d 1d 03 fa 11 ed 3c a0 0a ba 01 80 00 18 4e 16 be 25 28 bc 15 d1 de a0 86 b5 52 44 c1 d9 b3 c8 86 43 f7 8a fa 22 2e 8a 86 b2 95 80 32 72 0b af f7 4e 58 36 88 5a 34 93 67 a6 79 71 00 aa a0 91 6a 11 0f 1b 79 14 98 28 b0 ec e6 d1 19 ea a4 42 02 88 d8 b8 cf 7b 44 c2 71 ce b5 fd 45 80 60 53 17 2c 75 9e 18 d1 a2 52 ce c6 2b 58 87 f3 dd e7 02 f8 c7 7c b3 e1 20 cf 08 43 15 e1 d6 a1 37 47 b3 69 5f 27 70 6a d0 fc a6 Data Ascii: PeaJkA4,FAihwWfQ0}1:a}'K(a"[n3w)z#=\|h_>bs=<N%(RDC".2rNX6Z4gyqjy(B{DqE`S,uR+X\| C7Gi_'pj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	49932	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:28 UTC	659	OUT	GET /wp-content/uploads/2024/05/maxresdefault-2024-05-14T065012.987-1024x576.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/752 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:28 UTC	779	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:28 GMT Content-Type: image/jpeg Content-Length: 68960 Connection: close last-modified: Tue, 14 May 2024 08:34:12 GMT etag: "66432204-10d60" expires: Thu, 01 Aug 2024 22:40:26 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172802 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7rn%2FHUIH15cTvfxo6bT6Dn2DEizwYSmmGAFPR9%2FfhEGaEROE6tC1qMhg11YQB7Jl2dpLHTSDFF78k6eh%2BHnhmIt34n3ZoPEOCFiCQS8%2Fy2UFejGvKZFLW3eX6yBsLBYdpqDwWxk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e044f067cf4-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:28 UTC	590	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 40 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$@"
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 73 74 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 e3 31 45 2d 2e 2b f4 63 f2 cb 8d a0 d3 b0 28 22 81 0d a5 1d 28 c5 2e 29 80 9d 69 31 4e c5 14 08 29 e9 d2 99 8a 72 9c 52 68 07 81 8a 5a 29 40 cd 49 48 3b 50 bd 69 c0 0a 36 f3 40 05 1c d3 80 a5 db 40 0d 14 b8 a5 c5 2e da 00 40 2a 45 14 d5 1c d4 aa 2a 58 c8 a4 5e 0d 57 6a be e9 95 35 51 d3 07 14 e2 c9 91 08 eb 4e 5e b4 63 06 9c 3a d5 99 dc 7a d2 f5 a5 02 9d 8e 2a 59 44 4c 29 9d 2a 56 5a 66 05 52 25 8e 5a b1 10 cd 40 ab cd 5a 88 71 49 8e 24 ca 30 2a 39 fa 66 a6 51 4c b8 5f 90 8a ce Data Ascii: stuvwxyz?1E-.+c("(.)i1N)rRhZ)@IH;Pi6@@.@EX^Wj5QN^c:zYDL)VZfR%Z@ZqI$0*9fQL_
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: a2 81 4b 48 96 27 7a 70 e9 49 4a 29 5c 57 17 14 b8 a0 52 d2 24 50 29 cb 48 05 3d 56 a5 b1 a5 70 db 91 4a a9 cd 38 29 a7 28 c1 e7 81 53 73 45 02 3c 60 d4 d1 ae 68 31 64 f0 73 53 c5 1e 14 52 94 8d a9 d3 77 23 48 e9 cd 1f 43 d7 1d a9 ee e9 16 dd c7 0c dd 00 ea 7f 0a a5 a9 ea d6 da 7c 2c f7 2e 62 03 ee a9 fb cc 7b d7 3d 5a f0 a6 b9 a6 ec 8e ba 38 49 d5 7c 90 57 64 d3 98 e2 8d b3 b5 57 07 93 c6 df 6a e7 b5 bd 6a 7b 65 19 4f 2b 71 e0 bf de 3c ff 00 77 b7 e3 58 5a bf 8b 25 bd 3b 2d 81 8a 30 72 1b 39 c9 f5 ac 09 1e e2 59 4b 3c ca 4b 1c e3 27 26 be 7f 17 9c b7 78 d2 5a 77 3e bb 2f e1 ab 35 52 bb f9 1b df 6a bb d4 5d ca 4a 62 2e 30 cd bb 73 37 f8 53 1e 5f b1 11 1b bb 4c 48 f9 b7 12 73 55 ad 60 9e 38 c3 6d 24 76 e7 15 2d ad 83 b2 49 72 ec 02 71 8e 2b e7 aa 56 9c e5 Data Ascii: KH'zpIJ)\WR$P)H=VpJ8)(SsE<`h1dsSRw#HC\|,.b{=Z8I\|WdWjj{eO+q<wXZ%;-0r9YK<K'&xZw>/5Rj]Jb.0s7S_LHsU`8m$v-Irq+V
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: bc d9 fa 26 0f 01 4b 0d 0e 58 21 d1 db 28 e1 89 6f 51 c9 1f 95 4e 2c a2 64 1f 2c 7b 49 cf ca 48 c7 e0 7f c6 a3 b6 6f 30 fe ea 37 23 38 e3 18 15 78 db ce 08 db 19 65 3d fa 1a e3 72 3d 05 12 bd b4 71 b4 ea 82 2d e3 b8 1c 1a b9 7d 18 89 44 60 95 c1 cb 2a f4 00 f4 c5 36 0b 49 23 6d e0 64 81 91 8f 4e f5 34 9b 95 bc c0 39 3c fc de d5 09 8e c6 2c b6 ef 92 e9 cb a7 54 ce 72 3d bf c3 a5 2c 13 ac 91 24 8b 86 03 8d ca 39 07 fa 54 b2 c3 22 4e 64 0c 70 72 c1 bd 2a bd c4 32 c5 27 db 2d 97 69 3c 4b 16 38 6a bb 8a c3 2e 22 dc d9 c6 77 9c e0 0f 94 9e e4 7a 1a 5f 32 48 e1 db 2f ef 22 1c 6f 1f 79 3f c4 53 cc c9 2c 25 a3 63 b1 ba 83 d5 5b fc 68 69 80 6c 1c 12 40 dd 8e 8d ef 4b 50 1b 14 66 d1 d3 cb 6f dd b7 28 7b 67 d3 35 30 c4 8d ba 2c 2b 2f 25 3d 3f fa d5 5c b0 b7 52 41 0d Data Ascii: &KX!(oQN,d,{IHo07#8xe=r=q-}D`6I#mdN49<,Tr=,$9T"Ndpr2'-i<K8j."wz_2H/"oy?S,%c[hil@KPfo({g50,+/%=?\RA
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: c9 3e d5 e5 4f 11 7d 8f 6a 34 2d b9 ce 5b 78 7a d1 4a 8f 29 38 c0 c0 18 a7 dc f8 62 13 9f 29 19 49 ae ad 74 e4 41 f2 b7 e1 52 0b 02 c3 9c 7e 35 8f b5 6c d5 41 1e 78 fa 13 46 5b 19 c9 fb c0 0e bf 4a 6c 3e 14 17 71 15 90 11 bb b9 e8 2b d0 9f 4f 5c 72 a0 7d 05 30 db 95 ce 02 b1 34 fd a0 b9 11 e4 92 69 8d 67 7b fd 9f 77 f2 e7 95 73 fc ff 00 0a ab 75 60 f0 3c 91 48 aa b2 46 db 5c 0e fe f5 e8 1e 2f d0 64 d4 6c 84 d6 a8 af 75 6b f3 c6 9d df d5 7f 1a e5 16 e6 1b fb 58 6e d4 34 99 1e 5b 2f 42 7d 3f 1f ea 2a 94 fa 89 c2 c7 17 2d a9 b7 97 74 4b 82 dc ed 23 ad 52 95 8b 20 c0 e4 72 9e a7 d5 7f 4a ea 75 ab 03 69 28 60 43 c4 70 77 0e e3 b1 ae 77 55 b5 fb 34 80 ff 00 cb 19 bb 8e 40 6e f5 bc 25 73 09 c6 c5 58 2f 83 8c 11 ea 36 e3 fa 7f 3f c2 a0 57 11 b9 81 86 e8 8f 29 cf Data Ascii: >O}j4-[xzJ)8b)ItAR~5lAxF[Jl>q+O\r}04ig{wsu`<HF\/dlukXn4[/B}?*-tK#R rJui(`CpwwU4@n%sX/6?W)
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: a1 00 48 d1 42 e0 0e 95 c8 7c 2c d0 52 c7 48 17 5e 5e e9 ae 39 ce 3e ea 8e 83 f9 d7 a5 c1 68 d2 0f 99 f0 71 d1 7b 57 c5 e2 27 cc ec 8f d0 68 41 45 5f a8 f8 ad 93 8e dc 7a d4 c4 41 08 c9 19 6f 41 de a4 4b 38 47 cb 82 d9 f5 26 a4 5b 28 4f 58 14 91 dc 2d 60 91 bb 63 36 42 ad cb 75 e8 7d 2a cc 50 c6 df 75 80 a8 d6 da dc 36 3e ce a8 3e 98 cd 4b e4 5a 01 f2 af fe 3d 4f 94 97 22 39 6d 73 9f 98 fb f3 54 a5 b6 19 c6 f3 c7 be 6a fc 96 d6 a7 00 af 5e a7 75 41 25 95 ba 9e 08 1e f9 aa e5 17 31 4d ad 54 8c 8d dc 57 9c f8 a7 47 ff 00 84 7b 59 4d 42 38 ff 00 d0 6f 9b 12 ae 3e 58 e5 eb 9f 60 79 fd 6b d2 da de 11 c8 5d df 9d 50 d6 74 6b 5d 63 4e 9e ca 55 da b2 ae d0 47 3b 4f 63 42 1b d4 f3 f9 6c a0 bd b4 30 91 b8 73 b1 8f 5c ff 00 74 ff 00 9f 5a e3 2e 6d 1a 44 96 c2 46 63 Data Ascii: HB\|,RH^^9>hq{W'hAE_zAoAK8G&[(OX-`c6Bu}*Pu6>>KZ=O"9msTj^uA%1MTWG{YMB8o>X`yk]Ptk]cNUG;OcBl0s\tZ.mDFc
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 51 d6 90 0a 70 1c d4 8d 0f 07 91 56 22 19 02 a2 44 06 ad 44 b5 94 e4 75 d1 86 a3 d1 78 a9 55 68 44 1e 95 22 8e 6b 9a 52 b9 e8 c2 23 94 53 c7 02 95 54 1a 59 7e 44 26 b2 72 3a 63 1d 0e 73 c6 57 86 db 4b 91 41 c0 38 ff 00 be 9b 38 fc 80 35 e4 9a 5d b9 d4 ef d4 c6 48 7b 87 10 c5 ec 3d 6b b9 f8 97 7e 56 38 ad d4 e0 95 69 1b d8 9e 3f 90 ac 5f 87 f6 7f 6a f1 8d 95 a2 0f 96 de 16 98 fb 1f f2 6b e6 33 4a bc d5 1f 91 f7 19 1d 0e 4a 29 f7 3d bf 44 b2 4d 3e c2 2b 58 63 fd da 28 50 3d 2b 6e 18 e4 18 3c 0a ab 12 05 40 57 e5 5e 95 6a 36 da 72 7f 2f 4a f9 c6 ee cf a8 4a c8 b2 a1 fa e7 f2 a9 94 be 06 08 fe b5 59 5f 3f 2f 7f ad 4c 80 af b9 aa 8a 13 65 94 67 07 3b 41 a7 93 ff 00 4c bb 7a 55 7f 37 61 19 1f 41 53 09 d4 8c e7 ad 5d ac 45 c7 6e 61 ff 00 2c 9a a3 91 c9 39 31 11 Data Ascii: QpV"DDuxUhD"kR#STY~D&r:csWKA885]H{=k~V8i?_jk3JJ)=DM>+Xc(P=+n<@W^j6r/JJY_?/Leg;ALzU7aAS]Ena,91
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: f7 64 d1 f2 f5 95 b1 55 00 82 18 70 41 e3 15 2d c9 18 af a4 ee b4 db 3b f5 d9 77 6d 0c cb e8 e8 0d 73 5a 9f c2 ef 0f ea 40 ed 86 4b 56 ec 61 7e 9f 81 c8 ae a8 67 10 6f df 56 38 ea 64 35 22 ad 09 5c f0 a8 63 dc c0 56 c4 10 f9 71 e7 da bb 5b af 83 97 56 87 76 9f 7e 97 0b fd d9 97 6b 7e 63 23 f9 56 16 af a0 6a 5a 3c 78 ba b3 96 35 ee f8 ca fe 62 ba d6 32 95 5d 21 23 81 e0 2b 51 d6 71 39 f7 5d cd 4e 8a 0c 9e 95 28 8c 31 e3 06 ae 5b db f0 09 15 bc a7 64 60 a1 76 57 68 8a a8 f5 a4 28 00 c9 eb 56 da 2c 9c d3 1a 2c f0 05 67 cc 5b 81 48 c5 bb 24 f4 15 4e e0 f2 40 ad 2b 91 e5 2e da ca 98 f5 35 b4 35 30 a9 64 54 95 82 02 7d 2b 26 e2 5f 31 aa c5 ed c6 5b 0b 54 80 35 db 08 d8 f3 ea 4a fa 20 03 26 91 8e 38 a5 27 68 a8 db 2c 78 ad 0e 76 c4 c6 e3 c5 59 82 1c d3 ad ed cb Data Ascii: dUpA-;wmsZ@KVa~goV8d5"\cVq[Vv~k~c#VjZ<x5b2]!#+Qq9]N(1[d`vWh(V,,g[H$N@+.550dT}+&_1[T5J &8'h,xvY
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 9a 6a cc 58 99 a2 8c 51 4c 06 91 48 46 29 d4 87 14 c6 8c 21 83 46 29 16 97 bd 07 ba 28 3e b4 a0 0e b4 dc 52 83 da 90 58 46 4d dd 3a d4 47 20 e2 ac 81 bf 91 48 d1 ee 14 5c 4d 10 ad 4a 8d b6 a2 c1 43 8a 70 34 c4 8d 38 25 0c 00 38 a7 4b 00 90 64 56 7c 52 ec e7 b5 69 5b 4e 1c 62 b2 7a 1b 45 df 42 a7 96 51 aa cc 2f 91 8a 9e 6b 7d cb 91 55 95 0c 47 1e b4 af 70 e5 71 65 f8 98 1e 3f 84 d4 73 db 90 72 06 45 10 36 40 53 c9 ed 57 93 12 8d 87 ad 66 dd 99 b5 ae 8c 69 61 cd 53 96 32 a4 d6 dc d6 e5 58 82 2a 8c f6 f5 ac 66 73 ce 99 9d 5a ba 7c fb f1 93 c8 ac e3 1e d6 20 d5 fd 07 4c d4 35 6b f8 ed 34 eb 59 2e 27 61 c2 20 ce 07 a9 f4 15 55 1a 51 6e 44 d2 8c 9c ac 91 d5 e9 33 83 85 26 ba 1d 3b 42 be d5 a4 d9 65 6e f2 fa b0 e1 57 ea 6b a6 f0 8f c2 58 ec 55 2e 35 b9 96 69 4f Data Ascii: jXQLHF)!F)(>RXFM:G H\MJCp48%8KdV\|Ri[NbzEBQ/k}UGpqe?srE6@SWfiaS2X*fsZ\| L5k4Y.'a UQnD3&;BenWkXU.5iO
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: e4 6b ca d1 ba 3f 42 a1 1b c9 23 bc 40 b1 80 aa 00 c1 e6 ac 0b 84 e7 04 02 39 18 ac 0b fd 66 3b 04 dc c7 03 a1 f6 ae 7a 7f 19 c6 ae 42 9c b0 ea 17 9a f3 d4 5b 3d 16 e2 8e de e2 de d6 f4 81 3a ab f1 8e 9d a9 96 1e 1e b5 d3 ef 85 d5 b1 da 71 8c 66 b8 88 7c 6a 88 ea 64 de aa dc 82 c3 02 ba bd 33 5e 4b b4 ce ee 7b 8a d2 d2 48 8b 45 9d dd b5 d7 dd f9 bb 62 ad 83 bf a6 31 5c ed 8d ca b8 07 71 fa 56 dd bb 6e 4d c0 83 8e d4 e3 37 d4 99 44 9a 69 d6 34 38 ea 6b 9d d4 e2 5b d6 1e 60 04 56 bd e1 3f fe ba c6 bb b9 11 f0 29 39 eb 61 a8 90 79 76 f6 d1 84 45 0a 05 30 df 21 62 33 9f 6a a1 73 39 6e 4b 10 bd eb 99 d4 7c 44 21 95 a1 81 4c b2 0e a1 7b 7d 4d 2d 5e c5 24 91 db 1b d4 27 08 54 fa d4 02 ed 1d 59 19 ba 8e 33 d2 bc fc f8 87 55 45 8c ac 4a 16 43 84 01 8f 27 f2 a7 c5 Data Ascii: k?B#@9f;zB[=:qf\|jd3^K{HEb1\qVnM7Di48k[`V?)9ayvE0!b3js9nK\|D!L{}M-^$'TY3UEJC'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	49938	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:28 UTC	637	OUT	GET /wp-content/uploads/2024/05/0723-tituli-1-1024x601.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/752 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:28 UTC	781	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:28 GMT Content-Type: image/png Content-Length: 430486 Connection: close last-modified: Sun, 12 May 2024 01:53:08 GMT etag: "66402104-69196" expires: Thu, 01 Aug 2024 22:40:26 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172802 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9tEPk0%2Fx0lmtmLjFMBvrbMuEOxOQ%2FRk3eF3WA2VTrT8IBzdSy%2BaOXm4lnzRJ5LzDEBIplYW1VWquhdnzixv7m0%2F8xeXri8mGCl%2Bqp432FJiMqvo9paQh4r8ooITffdHs76BwNiw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e044b0e4398-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:28 UTC	588	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 00 00 00 02 59 08 06 00 00 00 37 4c 47 86 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 20 00 49 44 41 54 78 9c ec bd e9 97 24 57 75 e8 fb 3b 31 66 66 0d 3d 77 ab 25 21 01 32 20 06 cb 8c 96 6d 84 0d 46 be c6 80 2d 06 31 d8 80 40 d8 5e be e6 5e 1b fb 7a ad f7 f9 fe 19 7e 9f ee bb 77 bd 77 6d b0 f1 35 06 6c 04 88 d1 c8 42 62 10 1a d0 d0 52 4b ad 9e 5b dd 55 d5 5d 53 0e 11 e7 bc 0f 27 22 32 32 2b ab 2a 87 88 8c 13 59 f1 d3 4a 55 75 56 66 c4 89 33 ec b3 f7 3e fb ec 23 f8 d6 d3 8a 8a 8a 01 08 05 62 e8 4f ab e8 55 91 17 4a c1 28 2d 92 0f 32 db cb 29 40 15 fd 4c 3b 11 0f 82 d9 eb db 4a 29 2c 65 f5 bd 9b 71 fb 0e 5d 16 d8 bd 6f 17 23 63 c4 90 b7 54 aa 04 7d 24 e7 32 66 57 07 ba ad f5 Data Ascii: PNGIHDRY7LGpHYs+ IDATx$Wu;1ff=w%!2 mF-1@^^z~wwm5lBbRK[U]S'"22+*YJUuVf3>#bOUJ(-2)@L;J),eq]o#cT}$2fW
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 47 39 ca 99 6e 6f 99 8a 04 28 23 51 44 97 18 56 e5 9a d4 b4 1e 55 4e 8f 37 b6 14 02 85 35 13 52 51 89 ee 6b fa c4 ab 92 56 e4 8c e9 6f 0f 91 5a 91 49 47 08 e4 41 ff 56 84 f8 95 ad b9 20 2a 27 c0 44 14 db 5f 2b 26 67 fc 86 53 19 8d 9c ca 01 50 51 51 51 38 7a 92 8d 94 a0 a2 0b b3 2b e6 97 70 57 84 d8 41 71 98 81 e7 2b 90 d2 84 17 96 a1 8c 3d 64 b7 de 5c 8a f6 01 a6 e7 70 9c f4 3e 65 a9 cf 8a c9 c8 b6 9d 2b 27 c0 e4 54 51 38 93 61 72 db ee 44 16 8e 9f ca 01 50 91 31 e6 af d2 95 9d b2 0a ac 5d 89 c2 7c 95 e9 cf 37 23 6e 77 c5 76 ca 57 16 51 1e 15 65 20 2f 59 92 87 13 24 ce 07 90 55 24 40 21 8e 9a 91 6f 37 4d 07 80 1a db 27 a4 65 c9 ec c8 8b a2 c5 7b ec 10 37 2f 31 6a f6 f3 82 88 f2 92 98 ee 38 35 b9 6c 33 a2 92 14 86 c9 6d 3b 88 ac ca 5b 39 00 2a 32 a6 32 1e Data Ascii: G9no(#QDVUN75RQkVoZIGAV 'D_+&gSPQQQ8z+pWAq+=d\p>e+'TQ8arDP1]\|7#nwvWQe /Y$U$@!o7M'e{7/1j85l3m;[922
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: b8 7b c4 ba c2 ac 90 ce eb 5a 34 d9 f6 d1 74 bb 66 7d 4a 40 36 e5 4c ea dc 60 d9 59 16 7a f2 13 a7 de af 02 2a 4b 8c 18 6f 2b 5c e5 00 a8 28 98 4a a0 4f 8c 50 20 a6 95 19 7a 12 2a 71 63 32 fd d3 47 71 fa 40 19 fa f2 ec 52 be 48 9a 7e b9 52 2e 4d 76 b2 e8 25 c5 68 0e 80 f4 8a ef 68 f5 34 7c 90 50 6f 59 e4 10 f7 29 57 7f 33 83 6e 9f c9 a2 ee 06 45 03 64 41 0e 79 80 0c ef 2b a6 97 2f 46 41 a5 7e cf 10 e3 34 65 a5 91 57 8c 45 f6 5b 01 aa 68 80 b1 51 65 aa bb f4 fe d3 fe 57 3f db 3f 53 cf 4a bf 50 25 ea 42 26 17 32 ab 43 d5 26 25 bd df 78 98 cf 4e 07 13 56 fe a6 41 39 42 44 07 0c 78 11 f7 e0 0c e2 d3 4a a2 c4 eb 3d 50 db bc bf e5 0f 83 ea 65 9c e7 1c e5 3b 26 e5 a3 99 25 ba fd 3f 3b 27 00 74 9d 00 93 1e 1b 38 cc fc 3e c2 d5 52 c5 a8 a2 fc b2 a3 27 f6 a3 1a a6 Data Ascii: {Z4tf}J@6L`YzKo+\(JOP zqc2Gq@RH~R.Mv%hh4\|PoY)W3nEdAy+/FA~4eWE[hQeW??SJP%B&2C&%xNVA9BDxJ=Pe;&%?;'t8>R'
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 6c 99 cb 5e 01 4e 5f cf 74 a3 c9 3c 27 40 5e 47 02 f6 de a3 f7 fa 66 38 01 d4 36 bf 57 64 47 95 20 70 30 f9 38 02 d2 36 cd 90 63 3a d1 e7 77 fe 6c e5 00 a8 c8 14 33 04 82 71 b3 71 49 d8 23 f5 26 cc 57 28 4d 40 87 50 cb 28 88 3a 0f a3 61 d7 12 4c f1 5e 15 c3 a2 c0 c0 6d 00 c9 b7 33 2b 87 49 e8 2c e7 f1 2b 4d d6 67 b4 c3 ac d6 e1 de a3 88 76 34 44 66 1b 3e bf cf 94 fe 91 7a 94 ca 19 9e 17 23 6c 89 4d 7d 64 b7 6e 56 39 00 2a 32 c7 0c 27 00 98 b8 b2 6a 3a 33 35 31 ed 80 19 fd 33 45 bc 41 d6 34 92 21 54 c0 ea ba 10 63 e8 71 45 38 2a ba 94 39 e4 7c 14 04 65 92 15 93 ec 51 de 4a 51 c7 02 8a 6e c6 bd 49 af 46 f6 12 50 5f 6f f7 ba 99 dd 39 d9 c4 71 9f 7f 14 c0 20 e2 f1 56 6c 90 b8 10 c2 d8 9e 56 96 ed 2d c3 90 e4 f6 30 b0 ff ef 49 a2 86 d0 db 38 77 ee 67 95 03 a0 Data Ascii: l^N_t<'@^Gf86WdG p086c:wl3qqI#&W(M@P(:aL^m3+I,+Mgv4Df>z#lM}dnV92'j:3513EA4!TcqE89\|eQJQnIFP_o9q VlV-0I8wg
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 16 63 cb 48 b3 c7 d1 5e 21 6e be ed c4 aa 8e 29 ca e2 3e e5 d7 01 b7 3b 36 2d 5b e2 9b 98 96 93 60 3a e3 b5 9a 3e 2a f6 2e 5a da 4e cd 01 10 0b e5 d8 90 4f 0b e8 6c bd 23 aa 52 0e 67 14 25 8a 08 db 1a 34 49 f6 a1 14 42 4a 9c 6b 4b 34 2e 9f c3 79 fe 04 fe 99 e7 50 2f 5d 40 5c 5d 22 5c bd 4a a8 c0 ad d7 70 6d 07 b1 b8 1f eb 75 6f 64 fd e6 d7 d0 39 7c 9c ce 91 e3 b4 fd 3a 4a 94 32 20 67 e6 88 93 34 a9 48 48 4e a7 cf 0d 38 95 42 45 3f 0d ce 4d 90 9c be 68 66 f1 2a 66 84 c9 8c ba ad 32 3c 49 c4 a6 b2 89 f8 31 c2 e8 14 62 cc 28 89 98 f4 77 f3 d0 9f 76 be fe 08 27 b9 6e 61 4b 78 f7 00 3d b3 fc 64 e5 22 e9 c7 34 07 d9 10 3a d7 b8 57 8e fa 85 c0 ac be 61 84 fc 28 88 78 1b c0 76 29 a6 2a 4b 2e 5b 44 6a 61 c9 e9 ff 43 d6 9d 70 3b e3 3e ef b0 ad ca 09 30 7b a4 53 bd Data Ascii: cH^!n)>;6-[`:>.ZNOl#Rg%4IBJkK4.yP/]@\]"\Jpmuod9\|:J2 g4HHN8BE?Mhff2<I1b(wv'naKx=d"4:Wa(xv)*K.[DjaCp;>0{S
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 1b b8 8f 3c 80 fb cf ff 93 8d a7 9e 48 f6 ee 8b 78 ab 79 f7 c7 40 63 3f fe 99 56 0a e3 a1 da 15 f4 fa 6f 61 18 22 44 48 73 f9 25 fc ef dd c7 d1 85 05 ae fc e6 ef b3 36 7f c0 d8 63 02 63 07 88 39 13 56 96 d3 79 46 79 04 f6 00 fd 47 f9 4c 7b a5 3b 36 fe 8d e9 86 03 a8 56 ff 4d c0 22 8f 7d d9 83 98 ba 23 40 a5 b6 9b 09 40 a5 73 a1 c0 78 72 ac 08 63 6d 96 06 49 f6 cf d2 95 23 fd 6d 3b 7e 3b 09 61 4f 27 1f 40 c5 50 54 4e 80 9d 91 03 ba b9 28 c9 d6 00 53 da 76 cf 3b 00 84 d0 42 53 db 60 c5 37 48 45 7e 8c 13 ee 65 5d 5d c2 7b f0 5b d8 df fa 3f 74 9e 7d 0a 61 d9 20 65 b2 d2 2f 00 0b d1 33 a0 fb 07 f6 a0 33 8a fb 13 67 c6 b9 02 95 02 25 25 42 49 da 97 2f b3 79 ff bf 72 c0 9f 23 bc fd 4e 36 e7 f7 1b 9a 18 b0 eb e0 28 5e a8 f5 d7 cf 24 b1 e9 22 59 15 8c c3 83 15 2a Data Ascii: <Hxy@c?Voa"DHs%6cc9VyFyGL{;6VM"}#@@sxrcmI#m;~;aO'@PTN(Sv;BS`7HE~e]]{[?t}a e/33g%%BI/yr#N6(^$"Y*
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: bf a9 c8 37 3c 8e 11 3d 6d 07 e9 4e db 01 cc 72 d6 16 4d b5 b0 38 bb 14 d1 b6 95 03 60 28 b6 f3 6c a7 43 4c a1 eb d5 14 b9 86 10 56 64 84 0c a8 9f 3f c5 e2 03 df 20 f8 c6 97 d9 b8 72 05 19 86 89 21 2e b0 ba 47 9a a5 92 fc e5 61 fc 6b fa af 19 25 a6 54 02 89 40 86 01 b6 e3 b0 71 e6 0c f3 df f8 32 fb 6b 75 e4 1b df 41 6b 6e 61 c0 77 2b f2 62 cb 1e cb d8 71 53 d4 2a 77 12 05 60 b0 cc 31 40 8f d3 13 6c ff aa 18 14 5e b0 3e 66 61 bf a7 18 14 2e 57 d1 c3 2c b4 b3 1e 3b e9 55 ed 6c e6 a1 69 6c c9 4e d7 7b b9 db 20 5b f6 aa 91 59 96 f1 58 96 72 56 98 4f e5 00 c8 94 78 6f b8 0e 19 af 06 a8 a9 28 ec 76 9b b9 17 9e a2 f1 83 7f a3 fd c3 6f d0 5c 5a 41 29 b0 ac 28 dc 5f e9 cf 29 c5 94 8c 7f 7d bf 38 02 20 76 3c c4 4e 00 0b 81 54 20 65 88 50 b0 fe c2 49 16 ee ff 2a fb Data Ascii: 7<=mNrM8`(lCLVd? r!.Gak%T@q2kuAknaw+bqSw`1@l^>fa.W,;UlilN{ [YXrVOxo(vo\ZA)(_)}8 v<NT ePI
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 2c 8b 57 be f2 16 ee bd f7 33 7c e0 03 1f e0 d8 b1 63 38 4e 77 28 08 21 f0 7d 9f 5f bb fd 76 d6 d7 d6 b8 78 e9 22 8f 3e f2 73 82 20 48 3e 33 35 47 80 10 49 fb a7 ef 65 21 50 42 21 a5 42 28 08 95 60 ed e2 59 f6 dd ff 35 0e 35 16 78 e9 57 7e 93 d0 f1 f2 2d db 90 98 d9 87 f3 50 70 14 4a 28 bd 53 55 c5 d7 2e 60 ba 31 79 af b2 d0 87 86 59 06 85 e0 99 10 6a 3f a8 c9 8a 2e 53 96 24 b2 ab 84 cf 24 85 c4 52 d3 89 ec 99 6e 5f 4c f6 94 65 44 f6 f2 4e 8d b8 7f 3d 4b f2 69 8b 69 38 01 fa e7 b6 78 5f 9a 80 24 42 6d f7 f9 af 7b 6c 6a d1 63 b6 b8 32 18 96 45 a7 22 03 64 14 05 60 aa 8a 34 4d f6 58 04 00 14 17 44 36 3e dd 6d 03 dd 57 d9 9e 61 9a 08 a5 a8 35 d7 38 f0 e4 4f d8 fc ee d7 b8 76 f6 2c 61 a8 10 c2 a2 e6 fb dc 7e fb ed 7c fe f3 7f c5 07 3f f8 21 8e 1c 39 8c 65 0d Data Ascii: ,W3\|c8Nw(!}_vx">s H>35GIe!PB!B(`Y55xW~-PpJ(SU.`1yYj?.S$$Rn_LeDN=Kii8x_$Bm{ljc2E"d`4MXD6>mWa58Ov,a~\|?!9e
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: ec 51 22 89 4f 1e 1b 44 57 76 ee 91 91 36 d3 13 eb ce 0f 57 39 00 f6 00 42 a8 c8 40 4c af 30 4f 6b 70 eb 2c f5 87 9a d7 38 be 74 96 1b 2e 3c c7 c1 73 27 58 58 be c8 fc e6 2a 0b 16 cc 1d 38 8c f2 ae e3 e4 be eb 39 db d8 bf eb 78 8c 4b 6e 0b 98 7f fe 49 bc ef 7c 85 e0 91 1f 71 ed d2 05 82 cd 26 48 89 6b 3b bc f9 cd 6f e6 9e 4f 7f 9a df fd dd ff c4 b1 63 c7 b0 ac 6e 24 c4 a8 c6 ba 10 02 db b6 b9 ed b6 db f8 c3 3f fa 43 96 97 97 f9 d1 83 0f d2 e9 74 7a 3e 93 a5 13 20 79 da be 74 a5 e9 eb cb c4 09 a0 9f c9 12 a0 c2 10 e1 58 84 61 87 cd b3 a7 f0 7f f8 4d 1a f3 8b ac be f9 1d c8 b9 79 12 6f 41 61 a8 9e 55 08 23 e7 ce ac 11 e8 76 94 7b 64 52 dd 05 13 32 ef 97 8d 38 54 7b 16 6a ad 9c 2a 66 14 8d 95 8a 01 c8 f3 c0 8d f4 5c 55 d1 45 d1 1d 0b 45 31 3b 6d 53 ce 91 58 Data Ascii: Q"ODWv6W9B@L0Okp,8t.<s'XX89xKnI\|q&Hk;oOcn$?Ctz> ytXaMyoAaU#v{dR28T{jf\UEE1;mSX
2024-07-04 22:40:28 UTC	1369	IN	Data Raw: 88 63 a1 b7 9e 78 51 39 00 86 a1 3c b2 6c d4 52 96 e3 a9 26 61 f6 9e b0 4a 02 58 b1 85 54 06 d8 a1 42 5d a3 95 68 74 36 ff 5a d0 c2 6e 6e e2 b7 36 d8 bf 7c 81 57 9d 3b c1 c1 93 8f e3 9d 3b c5 da da 1a 61 bb 8d ea b4 10 41 88 6d 83 ef da cc d7 3d 0e 1f 58 e0 f0 e1 03 ec 3b 7c 98 c6 e2 7e fc c6 3c 4e 7d 0e 1c 9b 7d 12 ae 0b 37 f9 79 df 08 14 9d 36 de b9 53 2c de f7 45 3a 3f 7b 88 cd f3 e7 08 c3 10 81 a2 56 af 71 eb ad b7 f2 67 7f f6 9f 79 cf 7b de c3 91 23 47 ba df eb 0b c5 9f 78 6f 7e ba 4c d1 b5 6f b8 e1 06 ee b9 e7 1e 96 2e 5f e1 5f ff f5 5f 93 93 01 26 4e 06 18 6f 84 88 c2 1c 25 fd fb fe bb f4 3f 63 ec 08 40 e9 e4 8f 4a 01 96 fe 5e f3 a5 cb 34 1e fa 1e 0b 0b fb b8 f6 ab bf 4d 10 9f 0c 50 f8 e9 00 45 26 03 8c 9f 7d 9a 05 98 a6 8a 50 c4 f3 95 1f a3 43 39 Data Ascii: cxQ9<lR&aJXTB]ht6Znn6\|W;;aAm=X;\|~<N}}7y6S,E:?{Vqgy{#Gxo~Lo.___&No%?c@J^4MPE&}PC9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	49936	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:28 UTC	621	OUT	GET /wp-content/themes/tgtheme/img/hot.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/752 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:28 UTC	783	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:28 GMT Content-Type: image/png Content-Length: 1346 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-542" expires: Mon, 29 Jul 2024 09:27:36 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 479572 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aZ7IbMJgBch8%2BtjXBx7WH6ly32sRP4K%2ByoVMtUXspsUdPoG%2B%2ByV62aSAL9G6E%2B%2BWU240%2FCoOCqMUoqN4cbS1IhoToArJEH%2FFYtGLQukwCP7WD3nnqxnR8z1jgMONgcTbOu5kXAw%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e0448897d00-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:28 UTC	586	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 00 1a 08 06 00 00 00 b3 76 ac 40 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRv@tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:40:28 UTC	760	IN	Data Raw: 35 33 43 34 46 44 38 31 31 45 45 39 35 39 30 38 31 36 31 41 38 44 37 42 43 43 43 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 41 39 30 45 35 33 44 34 46 44 38 31 31 45 45 39 35 39 30 38 31 36 31 41 38 44 37 42 43 43 43 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 41 39 30 45 35 33 41 34 46 44 38 31 31 45 45 39 35 39 30 38 31 36 31 41 38 44 37 42 43 43 43 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 41 39 30 45 35 33 42 34 46 44 38 31 31 45 45 39 35 39 30 38 31 36 31 41 38 44 37 42 43 43 43 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 Data Ascii: 53C4FD811EE95908161A8D7BCCC" xmpMM:DocumentID="xmp.did:4A90E53D4FD811EE95908161A8D7BCCC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4A90E53A4FD811EE95908161A8D7BCCC" stRef:documentID="xmp.did:4A90E53B4FD811EE95908161A8D7BCCC"/> </rdf:Description> </rdf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	49937	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:28 UTC	736	OUT	GET /wp-content/plugins/kk-star-ratings/src/core/public/svg/inactive.svg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:29 UTC	728	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:28 GMT Content-Type: image/svg+xml Content-Length: 238 Connection: close last-modified: Sun, 24 Dec 2023 07:55:12 GMT etag: "6587e3e0-ee" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=yipAoR7AGwC4wg%2BNkLLxJxtgswryUf0lpiZAbhNj5eLZQ%2FOZL1kCGH8sUYOh17Nnck3IalCnfPPhVwBU6V5btx8eV4zKBc1JAr7Ax9vVNEXwhZBAexWRUj%2FOjBPrBBUXdkELGoc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e044eaf8c84-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:29 UTC	238	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 73 74 72 6f 6b 65 3d 22 23 37 37 37 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 2e 35 22 20 64 3d 22 4d 31 32 20 2e 35 38 37 6c 33 2e 36 36 38 20 37 2e 35 36 38 4c 32 34 20 39 2e 33 30 36 6c 2d 36 2e 30 36 34 20 35 2e 38 32 38 20 31 2e 34 38 20 38 2e 32 37 39 4c 31 32 20 31 39 2e 34 34 36 6c 2d 37 2e 34 31 37 20 33 2e 39 36 37 20 31 2e 34 38 31 2d 38 2e 32 37 39 4c 30 20 39 2e 33 30 36 6c 38 2e 33 33 32 2d 31 2e 31 35 31 7a 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"> <path fill="#fff" stroke="#777" stroke-width=".5" d="M12 .587l3.668 7.568L24 9.306l-6.064 5.828 1.48 8.279L12 19.446l-7.417 3.967 1.481-8.279L0 9.306l8.332-1.151z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	49934	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:28 UTC	734	OUT	GET /wp-content/plugins/kk-star-ratings/src/core/public/svg/active.svg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.telegramkv.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.6 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:29 UTC	736	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:28 GMT Content-Type: image/svg+xml Content-Length: 246 Connection: close last-modified: Sun, 24 Dec 2023 07:55:12 GMT etag: "6587e3e0-f6" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ReUxL1Q3eu%2F%2ByP5n9DKnwWDAd3TiTmEQcvBE2Qpqovq8VqKeiYmUasWHKw%2Fzer9iSVyy%2B9sIqQFqLtNkjsfiXVyDJ%2BOteiHU5k6Mul%2BFXe5KqEWlfudvsQZmCccwFPzP7yDU%2BEg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e044a330c92-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:29 UTC	246	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6f 72 61 6e 67 65 22 20 73 74 72 6f 6b 65 3d 22 64 61 72 6b 6f 72 61 6e 67 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 2e 35 22 20 64 3d 22 4d 31 32 20 2e 35 38 37 6c 33 2e 36 36 38 20 37 2e 35 36 38 4c 32 34 20 39 2e 33 30 36 6c 2d 36 2e 30 36 34 20 35 2e 38 32 38 20 31 2e 34 38 20 38 2e 32 37 39 4c 31 32 20 31 39 2e 34 34 36 6c 2d 37 2e 34 31 37 20 33 2e 39 36 37 20 31 2e 34 38 31 2d 38 2e 32 37 39 4c 30 20 39 2e 33 30 36 6c 38 2e 33 33 32 2d 31 2e 31 35 31 7a 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"> <path fill="orange" stroke="darkorange" stroke-width=".5" d="M12 .587l3.668 7.568L24 9.306l-6.064 5.828 1.48 8.279L12 19.446l-7.417 3.967 1.481-8.279L0 9.306l8.332-1.151z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	49933	216.58.206.78	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:28 UTC	809	OUT	GET /embed/qVZVO3NgeAk?feature=oembed HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://www.telegramkv.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:29 UTC	2141	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 04 Jul 2024 22:40:29 GMT Strict-Transport-Security: max-age=31536000 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Cross-Origin-Resource-Policy: cross-origin P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=zR4LuK50jpk; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=PrPVsjSEvmU; Domain=.youtube.com; Expires=Tue, 31-Dec-2024 22:40:29 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXQ%3D%3D; Domain=.youtube.com; Expires=Tue, 31-Dec-2024 22:40:29 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-07-04 22:40:29 UTC	2141	IN	Data Raw: 38 30 30 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 42 4e 79 74 33 56 58 64 55 34 37 30 6c 35 38 51 2d 37 39 69 6d 51 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 8000<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="BNyt3VXdU470l58Q-79imQ">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2024-07-04 22:40:29 UTC	2141	IN	Data Raw: 46 2c 55 2b 46 46 46 44 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 43 52 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 34 36 30 2d 30 35 32 46 2c 55 2b 31 43 38 30 2d 31 43 38 38 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d Data Ascii: F,U+FFFD;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)format('woff2');unicode-range:U+0460-052F,U+1C80-1C88,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-
2024-07-04 22:40:29 UTC	2141	IN	Data Raw: 46 47 77 61 77 22 3e 3c 73 74 79 6c 65 20 6e 6f 6e 63 65 3d 22 49 39 32 6b 62 61 58 59 52 59 31 37 4e 59 45 35 31 46 47 77 61 77 22 3e 68 74 6d 6c 20 7b 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 7d 62 6f 64 79 20 7b 66 6f 6e 74 3a 20 31 32 70 78 20 52 6f 62 6f 74 6f 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 68 65 69 67 68 74 3a 20 31 30 30 25 3b 20 77 69 64 74 68 3a 20 31 30 30 25 3b 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 3b 7d 23 70 6c 61 79 65 72 20 7b 77 69 64 74 68 3a 20 31 Data Ascii: FGwaw"><style nonce="I92kbaXYRY17NYE51FGwaw">html {overflow: hidden;}body {font: 12px Roboto, Arial, sans-serif; background-color: #000; color: #fff; height: 100%; width: 100%; overflow: hidden; position: absolute; margin: 0; padding: 0;}#player {width: 1
2024-07-04 22:40:29 UTC	2141	IN	Data Raw: 74 79 53 74 61 74 65 29 3d 3d 22 70 72 65 72 65 6e 64 65 72 22 3b 76 61 72 20 76 4e 61 6d 65 3d 21 64 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 26 26 64 2e 77 65 62 6b 69 74 56 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 22 77 65 62 6b 69 74 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3a 22 76 69 73 69 62 69 6c 69 74 79 63 68 61 6e 67 65 22 3b 69 66 28 69 73 50 72 65 72 65 6e 64 65 72 29 7b 76 61 72 20 73 74 61 72 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 79 74 63 73 69 2e 73 65 74 53 74 61 72 74 28 29 3b 64 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 29 7d 3b 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 76 4e 61 6d 65 2c 73 74 61 72 74 54 69 63 6b 2c 66 61 Data Ascii: tyState)=="prerender";var vName=!d.visibilityState&&d.webkitVisibilityState?"webkitvisibilitychange":"visibilitychange";if(isPrerender){var startTick=function(){ytcsi.setStart();d.removeEventListener(vName,startTick)};d.addEventListener(vName,startTick,fa
2024-07-04 22:40:29 UTC	2141	IN	Data Raw: 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 65 70 6f 72 74 5f 6f 6e 5f 65 72 72 6f 72 73 63 72 65 65 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 62 5f 72 70 5f 69 6e 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 63 74 69 76 65 5f 76 69 65 77 5f 64 69 73 70 6c 61 79 5f 61 64 5f 72 65 6e 64 65 72 65 72 5f 77 65 62 5f 68 6f 6d 65 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 64 5f 63 6f 6e 74 65 78 74 5f 69 6e 5f 76 73 73 5f 70 69 6e 67 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 61 73 79 6e 63 5f 61 62 5f 65 6e 66 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6f 77 5f 69 6e 66 6f 5f 63 73 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 64 6f 63 6b 65 64 5f 63 68 61 74 5f 6d 65 73 73 61 67 65 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 Data Ascii: ue,"enable_ab_report_on_errorscreen":true,"enable_ab_rp_int":true,"enable_active_view_display_ad_renderer_web_home":true,"enable_ad_context_in_vss_pings":true,"enable_async_ab_enf":true,"enable_cow_info_csi":true,"enable_docked_chat_messages":true,"enable
2024-07-04 22:40:29 UTC	2141	IN	Data Raw: 64 5f 69 76 61 72 5f 6f 6e 5f 70 61 63 66 22 3a 74 72 75 65 2c 22 68 74 6d 6c 35 5f 6c 6f 67 5f 74 72 69 67 67 65 72 5f 65 76 65 6e 74 73 5f 77 69 74 68 5f 64 65 62 75 67 5f 64 61 74 61 22 3a 74 72 75 65 2c 22 69 6c 5f 61 74 74 61 63 68 5f 63 61 63 68 65 5f 6c 69 6d 69 74 22 3a 74 72 75 65 2c 22 69 6c 5f 75 73 65 5f 76 69 65 77 5f 6d 6f 64 65 6c 5f 6c 6f 67 67 69 6e 67 5f 63 6f 6e 74 65 78 74 22 3a 74 72 75 65 2c 22 69 73 5f 62 72 6f 77 73 65 72 5f 73 75 70 70 6f 72 74 5f 66 6f 72 5f 77 65 62 63 61 6d 5f 73 74 72 65 61 6d 69 6e 67 22 3a 74 72 75 65 2c 22 6a 73 6f 6e 5f 63 6f 6e 64 65 6e 73 65 64 5f 72 65 73 70 6f 6e 73 65 22 3a 74 72 75 65 2c 22 6b 65 76 5f 61 64 62 5f 70 67 22 3a 74 72 75 65 2c 22 6b 65 76 6c 61 72 5f 64 72 6f 70 64 6f 77 6e 5f 66 69 78 Data Ascii: d_ivar_on_pacf":true,"html5_log_trigger_events_with_debug_data":true,"il_attach_cache_limit":true,"il_use_view_model_logging_context":true,"is_browser_support_for_webcam_streaming":true,"json_condensed_response":true,"kev_adb_pg":true,"kevlar_dropdown_fix
2024-07-04 22:40:29 UTC	2141	IN	Data Raw: 70 6c 61 79 65 72 5f 61 62 75 73 65 5f 62 67 5f 6c 69 62 72 61 72 79 22 3a 74 72 75 65 2c 22 75 73 65 5f 72 65 71 75 65 73 74 5f 74 69 6d 65 5f 6d 73 5f 68 65 61 64 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 73 65 73 73 69 6f 6e 5f 62 61 73 65 64 5f 73 61 6d 70 6c 69 6e 67 22 3a 74 72 75 65 2c 22 75 73 65 5f 74 73 5f 76 69 73 69 62 69 6c 69 74 79 6c 6f 67 67 65 72 22 3a 74 72 75 65 2c 22 75 73 65 5f 77 61 74 63 68 5f 66 72 61 67 6d 65 6e 74 73 32 22 3a 74 72 75 65 2c 22 76 73 73 5f 66 69 6e 61 6c 5f 70 69 6e 67 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 76 73 73 5f 70 6c 61 79 62 61 63 6b 5f 75 73 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 77 61 72 6d 5f 6c 6f 61 64 5f 6e 61 76 5f 73 74 61 72 74 5f 77 Data Ascii: player_abuse_bg_library":true,"use_request_time_ms_header":true,"use_session_based_sampling":true,"use_ts_visibilitylogger":true,"use_watch_fragments2":true,"vss_final_ping_send_and_write":true,"vss_playback_use_send_and_write":true,"warm_load_nav_start_w
2024-07-04 22:40:29 UTC	2141	IN	Data Raw: 75 6e 64 5f 68 65 61 72 74 62 65 61 74 5f 69 6e 74 65 72 76 61 6c 5f 6d 73 22 3a 32 38 30 30 30 2c 22 77 65 62 5f 67 65 6c 5f 64 65 62 6f 75 6e 63 65 5f 6d 73 22 3a 31 30 30 30 30 2c 22 77 65 62 5f 6c 6f 67 67 69 6e 67 5f 6d 61 78 5f 62 61 74 63 68 22 3a 31 30 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 64 75 72 61 74 69 6f 6e 5f 6d 73 22 3a 30 2c 22 77 65 62 5f 73 6d 6f 6f 74 68 6e 65 73 73 5f 74 65 73 74 5f 6d 65 74 68 6f 64 22 3a 30 2c 22 77 69 6c 5f 69 63 6f 6e 5f 6d 61 78 5f 63 6f 6e 63 75 72 72 65 6e 74 5f 66 65 74 63 68 65 73 22 3a 39 39 39 39 2c 22 79 74 69 64 62 5f 72 65 6d 61 6b 65 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 79 74 69 64 62 5f 72 65 6f 70 65 6e 5f 64 62 5f 72 65 74 72 69 65 73 22 3a 33 2c 22 57 65 62 Data Ascii: und_heartbeat_interval_ms":28000,"web_gel_debounce_ms":10000,"web_logging_max_batch":100,"web_smoothness_test_duration_ms":0,"web_smoothness_test_method":0,"wil_icon_max_concurrent_fetches":9999,"ytidb_remake_db_retries":3,"ytidb_reopen_db_retries":3,"Web
2024-07-04 22:40:29 UTC	2141	IN	Data Raw: 4b 50 34 73 41 55 51 67 71 4c 5f 45 68 43 73 2d 37 41 46 45 49 33 61 73 41 55 51 34 39 47 77 42 52 43 54 37 37 41 46 45 4c 2d 34 5f 78 49 71 48 45 4e 42 54 56 4e 45 65 46 56 4e 4c 56 70 78 4c 55 52 4a 54 33 6f 35 51 58 5a 74 63 47 64 4a 5a 45 4a 33 50 54 30 25 33 44 22 7d 2c 22 62 72 6f 77 73 65 72 4e 61 6d 65 22 3a 22 43 68 72 6f 6d 65 22 2c 22 62 72 6f 77 73 65 72 56 65 72 73 69 6f 6e 22 3a 22 31 31 37 2e 30 2e 30 2e 30 22 2c 22 61 63 63 65 70 74 48 65 61 64 65 72 22 3a 22 74 65 78 74 2f 68 74 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 68 74 6d 6c 2b 78 6d 6c 2c 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 6d 6c 3b 71 5c 75 30 30 33 64 30 2e 39 2c 69 6d 61 67 65 2f 61 76 69 66 2c 69 6d 61 67 65 2f 77 65 62 70 2c 69 6d 61 67 65 2f 61 70 6e 67 2c 2a 2f 2a Data Ascii: KP4sAUQgqL_EhCs-7AFEI3asAUQ49GwBRCT77AFEL-4_xIqHENBTVNEeFVNLVpxLURJT3o5QXZtcGdJZEJ3PT0%3D"},"browserName":"Chrome","browserVersion":"117.0.0.0","acceptHeader":"text/html,application/xhtml+xml,application/xml;q\u003d0.9,image/avif,image/webp,image/apng,/
2024-07-04 22:40:29 UTC	2141	IN	Data Raw: 76 65 79 5f 71 75 65 73 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 65 6c 5f 68 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 62 5f 64 65 74 5f 67 65 6e 5f 72 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 63 74 69 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 63 65 6e 74 65 72 5f 61 6c 69 67 6e 5f 64 65 73 63 72 69 70 74 69 6f 6e 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 64 5f 70 6f 64 5f 64 69 73 61 62 6c 65 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 70 65 72 73 69 73 74 5f 61 64 73 5f 71 75 61 6c 69 74 79 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 64 72 6d 5f 6f 76 65 72 72 69 64 65 5c 75 30 30 33 64 74 72 75 65 5c 75 30 30 32 36 61 6c 6c 6f 77 5f 6c 69 76 65 5f 61 75 74 6f 70 6c 61 79 5c Data Ascii: vey_question\u003dtrue\u0026ab_det_el_h\u003dtrue\u0026ab_det_gen_re\u003dtrue\u0026action_companion_center_align_description\u003dtrue\u0026ad_pod_disable_companion_persist_ads_quality\u003dtrue\u0026allow_drm_override\u003dtrue\u0026allow_live_autoplay\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	49939	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:29 UTC	388	OUT	GET /wp-content/uploads/2024/05/12022-1024x558.jpeg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:29 UTC	774	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:29 GMT Content-Type: image/jpeg Content-Length: 46879 Connection: close last-modified: Mon, 27 May 2024 11:49:27 GMT etag: "66547347-b71f" expires: Thu, 01 Aug 2024 22:40:25 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172804 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pajE36D5xfGkB8UJUkiwFEQfKVMU7GySlRWwDHhj9pOjNCn3RmUYSkLecOM%2BAUwIXamjz5Y3D4OkLdYJxddx9rKBXPHvXL%2BaC6DZCSzgUpVppUfRpeqBX19RheJJpqG7KiCQnSs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e080d28190e-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:29 UTC	595	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 2e 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$."
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 fa 52 8a 28 a0 02 8a c6 f1 27 8b f4 7f 08 c1 15 c6 b3 75 f6 68 64 dd 87 2b 91 90 01 c7 d7 9e 07 7a 5f 0c f8 b7 45 f1 8d 81 be d1 2f 92 ea 15 3b 5c 00 55 e3 6f 46 53 c8 3f 5a 00 d8 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a Data Ascii: xyz?R('uhd+z_E/;\UoFS?Z((((((((((((((((((((((((((
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 50 07 95 da fc 0b 8f 44 ba b9 bf d1 35 eb 98 ee ee 0b 6e fb 4c 28 54 2b 13 90 36 80 47 5a d8 f0 c7 c3 06 d1 b5 a4 d6 6f 35 76 9a e4 3b 3b c5 04 09 1c 72 1c 60 6f 38 dc c0 67 20 64 00 79 ae f2 8a cf d9 47 9b 9b a9 d4 f1 b5 9d 15 87 6f dd f4 5f 9e e1 f9 7e 14 51 45 68 72 86 05 1e f4 51 40 07 4a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 Data Ascii: PD5nL(T+6GZo5v;;r`o8g dyGo_~QEhrQ@J((((((((((((((((((((((((((((((((((((((((
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: c3 56 8d 19 a7 77 db cd d8 f7 1a 28 a2 bc 93 d3 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 2b c4 bc 71 f1 0f c4 da 47 8b 35 2b 0b 2d 4d a1 b7 86 50 a8 82 34 20 0d a0 f7 1e f5 87 ff 00 0b 57 c6 0a c0 9d 59 8e 0e 70 62 4c 1f 63 c5 7d 35 1e 15 c5 55 a7 1a 91 94 6c d2 7b be bf 23 e7 ea f1 1e 1e 9c dc 25 17 a3 b7 4f f3 3e 89 a2 bc d2 eb e2 55 f2 7c 38 4d 66 64 86 db 53 b9 94 c1 6e 10 64 36 3a c9 83 f4 3c 57 29 69 f1 13 e2 06 a9 06 6c 63 79 d5 7e 56 9a 0b 20 70 7d ce 30 0d 73 50 e1 ec 4d 45 29 37 18 a8 b6 b5 7d 57 c8 de b6 79 87 a6 e2 92 6d b5 7d 17 73 dd aa 39 6e 21 80 aa cd 34 71 96 3b 54 3b 81 b8 fa 0c d7 cf 70 78 9f c7 1e 26 d4 06 9d 6f ab df 4b 70 f9 02 Data Ascii: Vw(((((((((((((+qG5+-MP4 WYpbLc}5Ul{#%O>U\|8MfdSnd6:<W)ilcy~V p}0sPME)7}Wym}s9n!4q;T;px&oKp
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 29 52 70 48 3c 1f 70 6b cc 7e 2d 78 b7 5c d0 3c 47 6f 6d a6 6a 53 da c2 f6 8b 21 48 f1 82 c5 dc 67 a7 b0 af 3b 03 97 55 c5 e2 3e ac bd d9 6b bf 91 dd 8c c7 d3 c3 51 55 de b1 76 db cc f5 ba 2b c0 ac bc 41 f1 2b 52 b6 5b 9b 39 f5 8b 88 1f 3b 64 8e 2c a9 c1 c7 5c 55 4d 43 c6 de 3b d2 a6 10 5f ea 7a 8d ac a5 77 04 95 42 9c 7a e0 8a f6 23 c2 d5 a5 2e 45 56 0d f6 bb ff 00 23 cc 7c 45 4a 31 e6 74 e5 6f 43 e8 8a 2b cd f5 8f 12 6a d0 7c 26 b2 d6 23 be 95 2f e4 f2 f7 5c 0c 6e 39 62 0f 6f 6a e0 b4 df 18 78 ff 00 58 67 4d 3b 50 d4 ee da 30 0b 88 54 31 51 ef 81 5c d8 6e 1e ad 5e 13 9a 9c 52 8b 71 77 bf 4f 91 be 23 3b a5 46 51 87 23 6e 49 3d 3c cf a1 68 af 00 bf f1 27 c4 8d 2a dc dc 5f 5c ea f6 d0 82 17 cc 96 30 a3 27 a0 c9 15 d5 7c 21 f1 56 b7 e2 0d 66 fe 1d 53 51 9a Data Ascii: )RpH<pk~-x\<GomjS!Hg;U>kQUv+A+R[9;d,\UMC;_zwBz#.EV#\|EJ1toC+j\|&#/\n9bojxXgM;P0T1Q\n^RqwO#;FQ#nI=<h'*_\0'\|!VfSQ
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: bb e0 9a 29 97 a6 63 60 c3 3f 51 52 8e 6b cb 3e 0d e9 37 da 76 8d ad dd ad ab 25 e4 8c b1 c3 1c ea 50 31 55 24 67 be 32 d5 c0 6b 7e 28 f1 57 8a 6f 64 b4 bb 9a e9 dc 31 43 67 6e a4 2a 90 70 46 d5 eb 8f 7c d7 1d 2e 1f 75 b1 35 28 d3 a8 b9 61 6b b7 e6 bb 7f c1 3a aa 67 7e cf 0f 0a b3 a6 f9 a5 d1 7f 9f fc 03 e8 96 d4 ac 52 4f 2d af 6d 56 4c e3 69 99 73 f9 66 ac 8e 46 47 20 f4 22 be 60 bd f0 77 88 74 fb 53 79 77 a2 df 43 00 19 32 34 47 00 7b fa 56 9f 81 fc 7b 7f e1 3b f8 91 e6 92 5d 35 98 09 ad d8 e4 00 7f 89 7d 08 eb ef 5d 95 b8 56 f4 9c f0 d5 54 da e9 ff 00 05 36 72 d2 e2 36 aa 28 62 29 b8 a7 d7 fa 47 d1 94 bb 49 e8 29 aa cb 22 2b a3 06 56 19 07 d4 7a d7 83 7c 66 91 d7 c6 ce 03 b0 1f 66 8b a3 11 eb 5e 1e 55 96 fd 7e bf b1 e6 e5 d2 fb 5f f5 47 b1 99 63 fe a7 Data Ascii: )c`?QRk>7v%P1U$g2k~(Wod1Cgn*pF\|.u5(ak:g~RO-mVLisfFG "`wtSywC24G{V{;]5}]VT6r6(b)GI)"+Vz\|ff^U~_Gc
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 69 84 23 da ed dc f9 c6 01 e9 d6 bb 71 15 30 94 eb 55 55 1b 6d a5 cc 92 6d 25 df 45 a7 de 72 d0 a7 89 9d 2a 6e 16 49 37 6d 52 bf de f5 3d c6 c2 e6 0b db 1b 7b 9b 53 9b 79 63 57 88 ed db f2 91 91 c7 6e 2a 7a ab a5 58 0d 2f 4d b5 b0 57 2e 2d a2 58 83 91 82 d8 18 cd 5a af cb a7 cb cc f9 76 3f 44 85 f9 57 36 e1 5e 31 f1 e7 fe 42 da 4f fd 7b bf fe 85 5e cf 5e 33 f1 e3 fe 42 fa 4f fd 7b bf fe 85 5e ef 0c 7f c8 c2 1e 8f f2 67 8d c4 3f ee 52 f9 7e 66 e7 c0 af f9 17 75 0f fa fb ff 00 d9 16 bd 2a be 54 b3 d5 f5 2d 3e 32 96 57 d7 76 e8 c7 2c b0 cc c8 09 fa 03 56 3f e1 26 d7 bf e8 2f a9 ff 00 e0 54 9f e3 5e fe 61 c3 15 31 58 89 d7 55 12 e6 e9 63 c5 c1 71 0c 30 d4 23 45 c1 bb 79 9f 51 d1 5f 2f c3 e2 5d 78 ca 80 eb 1a 96 0b 0e b7 2f cf eb 5f 4e c4 4f 92 84 f5 da 0e 6b Data Ascii: i#q0UUmm%ErnI7mR={SycWnzX/MW.-XZv?DW6^1BO{^^3BO{^g?R~fu*T->2Wv,V?&/T^a1XUcq0#EyQ_/]x/_NOk
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 84 76 37 2d 76 9e 56 e8 04 67 78 f9 cf 6e b5 c1 68 50 78 df c3 4f 2c 9a 56 9b aa 5b 3c c0 2b 91 68 4e e0 3a 75 53 5e 7e 5d 38 cb 0d 5e 09 c5 b7 39 69 2d 9e ab 73 bb 1f 09 2c 45 29 35 24 94 23 ac 77 ea 4f e2 9b 9f 1f cd a5 32 f8 8d 6f 85 86 f5 cf 9d 1a 2a ee fe 1e 40 15 b7 f0 27 fe 46 0d 4f fe bd 07 fe 86 b5 81 e2 5d 6b c6 fa 86 98 60 d7 d2 f9 6c 4b a9 26 6b 6d 8b b8 74 e7 68 ad ff 00 81 1f f2 1f d4 ff 00 eb d0 7f e8 6b 5a 63 62 e3 95 55 4d 45 7f 83 6d d7 e2 65 84 92 79 8d 36 9c 9f f8 b7 3d aa 8a 28 af cd 4f d0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 Data Ascii: v7-vVgxnhPxO,V[<+hN:uS^~]8^9i-s,E)5$#wO2o*@'FO]k`lK&kmthkZcbUMEmey6=(O(((((((((((((((((((((
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: 9a 53 92 07 52 4f e1 da bc 6c 9b 27 58 aa 73 af 5a 7c b4 e3 bd ba db 5f c0 f5 73 5c d1 e1 ea 46 8d 28 f3 4d ed e5 7d 0f 55 d4 be 37 e8 40 3c 56 da 65 ed da 30 2a 4c 81 51 58 7e 66 bc 5e 76 8e 49 e4 68 d3 64 6c c4 aa 9e 70 09 e9 5e fb a4 7c 21 f0 be 9e 88 2e 6d e4 d4 25 fe 29 27 73 82 7f dd 18 15 e1 3a bc 49 0e ad 7b 14 4a 16 34 b8 75 55 1d 00 0c 71 5f 51 c3 b5 30 3c f5 21 82 4f 4b 5d be bb db fa b2 3e 7b 3c 86 33 96 12 c5 35 ad ec 97 4d 8f a4 bc 17 3c 97 3e 12 d2 25 90 e5 da d2 3c 9f c2 bc 77 e3 47 fc 8e ef ff 00 5e b1 7f 5a f5 ef 01 ff 00 c8 99 a3 7f d7 aa 7f 2a f2 1f 8d 1f f2 3b bf fd 7a c5 fd 6b c4 e1 f5 6c d6 a2 5f de fc cf 5b 3a 77 cb 69 b7 fd df c8 e9 be 06 69 16 52 58 5f 6a 8f 02 3d e2 4e 21 49 18 64 a2 ed 07 8f 4e bd 6b a4 f8 bb 69 15 d7 81 6f 65 Data Ascii: SROl'XsZ\|_s\F(M}U7@<Ve0LQX~f^vIhdlp^\|!.m%)'s:I{J4uUq_Q0<!OK]>{<35M<>%<wG^Z;zkl_[:wiiRX_j=N!IdNkioe
2024-07-04 22:40:29 UTC	1369	IN	Data Raw: fe 46 10 f4 7f 93 3c 4e 21 ff 00 71 97 cb f3 36 be 06 c3 14 9e 1f bf 2f 14 6e 45 de 32 ca 0f f0 2f ad 7a 4f d9 ad ff 00 e7 de 1f fb f6 bf e1 5e 73 f0 2b fe 45 dd 43 fe be ff 00 f6 45 af 4a ac 33 d9 35 8f ab af 5f d1 1b 64 d1 5f 52 a7 e9 fa 91 1b 5b 73 ff 00 2e f0 ff 00 df b1 fe 15 2f 4a 28 af 21 bb ee 7a 89 24 7c ff 00 e2 dd 1f c5 da 86 bb a8 da 8b 7d 6a f6 d1 6e 5c c6 a4 3b c7 8c 92 08 07 8e f5 c9 cb 6f 7f a7 dd bd 8c 8b 35 b5 c2 b0 47 88 92 a4 37 b8 f5 af 56 f8 9d f1 03 5a f0 df 89 d2 cf 4a ba 44 85 2d 95 de 37 8c 30 2c 49 3d fd b1 5c 07 89 e4 9e 6f 19 4b 2d ce d1 71 24 b1 3c bb 47 01 ca a1 3f a9 af d4 72 8c 45 79 d3 87 b4 84 54 5c 6e ad be 96 df ef 3f 3a cc e8 d2 85 49 72 49 b9 29 59 df 6e bb 10 5e e9 5a cf 82 f5 bb 51 73 0b 41 7b 19 5b 88 82 9d d9 19 Data Ascii: F<N!q6/nE2/zO^s+ECEJ35_d_R[s./J(!z$\|}jn\;o5G7VZJD-70,I=\oK-q$<G?rEyT\n?:IrI)Yn^ZQsA{[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	49940	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:30 UTC	379	OUT	GET /wp-content/themes/tgtheme/img/hot.png HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:30 UTC	773	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:30 GMT Content-Type: image/png Content-Length: 1346 Connection: close last-modified: Fri, 03 May 2024 04:30:31 GMT etag: "66346867-542" expires: Mon, 29 Jul 2024 09:27:36 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 479574 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jgj8XV3s2ar9lwHgfcT488ZDLt7rWytY0L48SnVWv%2FpHONn5I3zLqmC4YPe%2Bc0ZJSeTczvAuw1DPQuBGIUmDxiU2bkCfO6YpWeM9dFzXIBx%2BROAZlv6igVYLWbBAktsGGOA0zNM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e102c9c32d0-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:30 UTC	596	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 16 00 00 00 1a 08 06 00 00 00 b3 76 ac 40 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 21 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 32 20 37 39 2e 31 36 30 39 32 34 2c 20 32 30 31 37 2f 30 37 2f 31 33 2d 30 31 3a 30 36 3a 33 39 20 20 Data Ascii: PNGIHDRv@tEXtSoftwareAdobe ImageReadyqe<!iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c142 79.160924, 2017/07/13-01:06:39
2024-07-04 22:40:30 UTC	750	IN	Data Raw: 45 39 35 39 30 38 31 36 31 41 38 44 37 42 43 43 43 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 41 39 30 45 35 33 44 34 46 44 38 31 31 45 45 39 35 39 30 38 31 36 31 41 38 44 37 42 43 43 43 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 65 66 3a 69 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 34 41 39 30 45 35 33 41 34 46 44 38 31 31 45 45 39 35 39 30 38 31 36 31 41 38 44 37 42 43 43 43 22 20 73 74 52 65 66 3a 64 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 34 41 39 30 45 35 33 42 34 46 44 38 31 31 45 45 39 35 39 30 38 31 36 31 41 38 44 37 42 43 43 43 22 2f 3e 20 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 20 3c 2f 72 64 66 3a 52 44 46 3e 20 3c 2f 78 3a Data Ascii: E95908161A8D7BCCC" xmpMM:DocumentID="xmp.did:4A90E53D4FD811EE95908161A8D7BCCC"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:4A90E53A4FD811EE95908161A8D7BCCC" stRef:documentID="xmp.did:4A90E53B4FD811EE95908161A8D7BCCC"/> </rdf:Description> </rdf:RDF> </x:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	49946	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:30 UTC	407	OUT	GET /wp-content/plugins/kk-star-ratings/src/core/public/svg/active.svg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:30 UTC	728	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:30 GMT Content-Type: image/svg+xml Content-Length: 246 Connection: close last-modified: Sun, 24 Dec 2023 07:55:12 GMT etag: "6587e3e0-f6" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=rkjUv6geIJBRl4ZNCFm0JN8sPaGSUld66M8A433i6F8%2FKn4HcDsME2mSBBZTHNwP1zENLGaYWhoG6y3lJsyjav9kCdsIUOfR2uoT2A38oCDP26EEDg5OLo%2F%2FQHuAyvcWRf8NmqE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e100bdd41a9-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:30 UTC	246	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 6f 72 61 6e 67 65 22 20 73 74 72 6f 6b 65 3d 22 64 61 72 6b 6f 72 61 6e 67 65 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 2e 35 22 20 64 3d 22 4d 31 32 20 2e 35 38 37 6c 33 2e 36 36 38 20 37 2e 35 36 38 4c 32 34 20 39 2e 33 30 36 6c 2d 36 2e 30 36 34 20 35 2e 38 32 38 20 31 2e 34 38 20 38 2e 32 37 39 4c 31 32 20 31 39 2e 34 34 36 6c 2d 37 2e 34 31 37 20 33 2e 39 36 37 20 31 2e 34 38 31 2d 38 2e 32 37 39 4c 30 20 39 2e 33 30 36 6c 38 2e 33 33 32 2d 31 2e 31 35 31 7a 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"> <path fill="orange" stroke="darkorange" stroke-width=".5" d="M12 .587l3.668 7.568L24 9.306l-6.064 5.828 1.48 8.279L12 19.446l-7.417 3.967 1.481-8.279L0 9.306l8.332-1.151z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	49943	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:30 UTC	409	OUT	GET /wp-content/plugins/kk-star-ratings/src/core/public/svg/inactive.svg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:30 UTC	730	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:30 GMT Content-Type: image/svg+xml Content-Length: 238 Connection: close last-modified: Sun, 24 Dec 2023 07:55:12 GMT etag: "6587e3e0-ee" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O4BzDiz8UDzSPNyBm5Jkzonq8P%2Fik6TU2JPZnUqAy2bzhx0mCmIXEhQHEkoRxDjqk%2FHSkLIeHlhtojN%2Bt1gMe1n%2FuAH0hJnlmz2z37g8hFSOaAHvAWYO2hd0srC0JqopMX38cMs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e102d7c4255-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:30 UTC	238	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 3e 0a 20 20 20 20 3c 70 61 74 68 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 73 74 72 6f 6b 65 3d 22 23 37 37 37 22 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 2e 35 22 20 64 3d 22 4d 31 32 20 2e 35 38 37 6c 33 2e 36 36 38 20 37 2e 35 36 38 4c 32 34 20 39 2e 33 30 36 6c 2d 36 2e 30 36 34 20 35 2e 38 32 38 20 31 2e 34 38 20 38 2e 32 37 39 4c 31 32 20 31 39 2e 34 34 36 6c 2d 37 2e 34 31 37 20 33 2e 39 36 37 20 31 2e 34 38 31 2d 38 2e 32 37 39 4c 30 20 39 2e 33 30 36 6c 38 2e 33 33 32 2d 31 2e 31 35 31 7a 22 2f 3e 0a 3c 2f 73 76 67 3e 0a Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 24 24"> <path fill="#fff" stroke="#777" stroke-width=".5" d="M12 .587l3.668 7.568L24 9.306l-6.064 5.828 1.48 8.279L12 19.446l-7.417 3.967 1.481-8.279L0 9.306l8.332-1.151z"/></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	49947	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:30 UTC	417	OUT	GET /wp-content/uploads/2024/05/maxresdefault-2024-05-14T065012.987-1024x576.jpg HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:30 UTC	777	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:30 GMT Content-Type: image/jpeg Content-Length: 68960 Connection: close last-modified: Tue, 14 May 2024 08:34:12 GMT etag: "66432204-10d60" expires: Thu, 01 Aug 2024 22:40:26 GMT Cache-Control: max-age=2592000 strict-transport-security: max-age=31536000 CF-Cache-Status: HIT Age: 172804 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=glCEUhlWvqgMrtB0eF%2Fh5QbXpofd42mMhkDFtrUEUMhfcB2358F0AQCV08VrDvZqGNkSkdAidSIiFeayothNcb2PeUgkzq65Cly2RtyB6arWiP9WV%2FWsGZjD%2F7Iuld4mdAhVqCc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e1009a27279-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:30 UTC	592	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff fe 00 3b 43 52 45 41 54 4f 52 3a 20 67 64 2d 6a 70 65 67 20 76 31 2e 30 20 28 75 73 69 6e 67 20 49 4a 47 20 4a 50 45 47 20 76 36 32 29 2c 20 71 75 61 6c 69 74 79 20 3d 20 38 32 0a ff db 00 43 00 06 04 04 05 04 04 06 05 05 05 06 06 06 07 09 0e 09 09 08 08 09 12 0d 0d 0a 0e 15 12 16 16 15 12 14 14 17 1a 21 1c 17 18 1f 19 14 14 1d 27 1d 1f 22 23 25 25 25 16 1c 29 2c 28 24 2b 21 24 25 24 ff db 00 43 01 06 06 06 09 08 09 11 09 09 11 24 18 14 18 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 24 ff c0 00 11 08 02 40 04 00 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 Data Ascii: JFIF``;CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82C!'"#%%%),($+!$%$C$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$@"
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: 75 76 77 78 79 7a 82 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e2 e3 e4 e5 e6 e7 e8 e9 ea f2 f3 f4 f5 f6 f7 f8 f9 fa ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 e3 31 45 2d 2e 2b f4 63 f2 cb 8d a0 d3 b0 28 22 81 0d a5 1d 28 c5 2e 29 80 9d 69 31 4e c5 14 08 29 e9 d2 99 8a 72 9c 52 68 07 81 8a 5a 29 40 cd 49 48 3b 50 bd 69 c0 0a 36 f3 40 05 1c d3 80 a5 db 40 0d 14 b8 a5 c5 2e da 00 40 2a 45 14 d5 1c d4 aa 2a 58 c8 a4 5e 0d 57 6a be e9 95 35 51 d3 07 14 e2 c9 91 08 eb 4e 5e b4 63 06 9c 3a d5 99 dc 7a d2 f5 a5 02 9d 8e 2a 59 44 4c 29 9d 2a 56 5a 66 05 52 25 8e 5a b1 10 cd 40 ab cd 5a 88 71 49 8e 24 ca 30 2a 39 fa 66 a6 51 4c b8 5f 90 8a ce fa 96 Data Ascii: uvwxyz?1E-.+c("(.)i1N)rRhZ)@IH;Pi6@@.@EX^Wj5QN^c:zYDL)VZfR%Z@ZqI$0*9fQL_
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: 4b 48 96 27 7a 70 e9 49 4a 29 5c 57 17 14 b8 a0 52 d2 24 50 29 cb 48 05 3d 56 a5 b1 a5 70 db 91 4a a9 cd 38 29 a7 28 c1 e7 81 53 73 45 02 3c 60 d4 d1 ae 68 31 64 f0 73 53 c5 1e 14 52 94 8d a9 d3 77 23 48 e9 cd 1f 43 d7 1d a9 ee e9 16 dd c7 0c dd 00 ea 7f 0a a5 a9 ea d6 da 7c 2c f7 2e 62 03 ee a9 fb cc 7b d7 3d 5a f0 a6 b9 a6 ec 8e ba 38 49 d5 7c 90 57 64 d3 98 e2 8d b3 b5 57 07 93 c6 df 6a e7 b5 bd 6a 7b 65 19 4f 2b 71 e0 bf de 3c ff 00 77 b7 e3 58 5a bf 8b 25 bd 3b 2d 81 8a 30 72 1b 39 c9 f5 ac 09 1e e2 59 4b 3c ca 4b 1c e3 27 26 be 7f 17 9c b7 78 d2 5a 77 3e bb 2f e1 ab 35 52 bb f9 1b df 6a bb d4 5d ca 4a 62 2e 30 cd bb 73 37 f8 53 1e 5f b1 11 1b bb 4c 48 f9 b7 12 73 55 ad 60 9e 38 c3 6d 24 76 e7 15 2d ad 83 b2 49 72 ec 02 71 8e 2b e7 aa 56 9c e5 79 33 Data Ascii: KH'zpIJ)\WR$P)H=VpJ8)(SsE<`h1dsSRw#HC\|,.b{=Z8I\|WdWjj{eO+q<wXZ%;-0r9YK<K'&xZw>/5Rj]Jb.0s7S_LHsU`8m$v-Irq+Vy3
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: fa 26 0f 01 4b 0d 0e 58 21 d1 db 28 e1 89 6f 51 c9 1f 95 4e 2c a2 64 1f 2c 7b 49 cf ca 48 c7 e0 7f c6 a3 b6 6f 30 fe ea 37 23 38 e3 18 15 78 db ce 08 db 19 65 3d fa 1a e3 72 3d 05 12 bd b4 71 b4 ea 82 2d e3 b8 1c 1a b9 7d 18 89 44 60 95 c1 cb 2a f4 00 f4 c5 36 0b 49 23 6d e0 64 81 91 8f 4e f5 34 9b 95 bc c0 39 3c fc de d5 09 8e c6 2c b6 ef 92 e9 cb a7 54 ce 72 3d bf c3 a5 2c 13 ac 91 24 8b 86 03 8d ca 39 07 fa 54 b2 c3 22 4e 64 0c 70 72 c1 bd 2a bd c4 32 c5 27 db 2d 97 69 3c 4b 16 38 6a bb 8a c3 2e 22 dc d9 c6 77 9c e0 0f 94 9e e4 7a 1a 5f 32 48 e1 db 2f ef 22 1c 6f 1f 79 3f c4 53 cc c9 2c 25 a3 63 b1 ba 83 d5 5b fc 68 69 80 6c 1c 12 40 dd 8e 8d ef 4b 50 1b 14 66 d1 d3 cb 6f dd b7 28 7b 67 d3 35 30 c4 8d ba 2c 2b 2f 25 3d 3f fa d5 5c b0 b7 52 41 0d 6e 7e Data Ascii: &KX!(oQN,d,{IHo07#8xe=r=q-}D`6I#mdN49<,Tr=,$9T"Ndpr2'-i<K8j."wz_2H/"oy?S,%c[hil@KPfo({g50,+/%=?\RAn~
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: d5 e5 4f 11 7d 8f 6a 34 2d b9 ce 5b 78 7a d1 4a 8f 29 38 c0 c0 18 a7 dc f8 62 13 9f 29 19 49 ae ad 74 e4 41 f2 b7 e1 52 0b 02 c3 9c 7e 35 8f b5 6c d5 41 1e 78 fa 13 46 5b 19 c9 fb c0 0e bf 4a 6c 3e 14 17 71 15 90 11 bb b9 e8 2b d0 9f 4f 5c 72 a0 7d 05 30 db 95 ce 02 b1 34 fd a0 b9 11 e4 92 69 8d 67 7b fd 9f 77 f2 e7 95 73 fc ff 00 0a ab 75 60 f0 3c 91 48 aa b2 46 db 5c 0e fe f5 e8 1e 2f d0 64 d4 6c 84 d6 a8 af 75 6b f3 c6 9d df d5 7f 1a e5 16 e6 1b fb 58 6e d4 34 99 1e 5b 2f 42 7d 3f 1f ea 2a 94 fa 89 c2 c7 17 2d a9 b7 97 74 4b 82 dc ed 23 ad 52 95 8b 20 c0 e4 72 9e a7 d5 7f 4a ea 75 ab 03 69 28 60 43 c4 70 77 0e e3 b1 ae 77 55 b5 fb 34 80 ff 00 cb 19 bb 8e 40 6e f5 bc 25 73 09 c6 c5 58 2f 83 8c 11 ea 36 e3 fa 7f 3f c2 a0 57 11 b9 81 86 e8 8f 29 cf e9 fe Data Ascii: O}j4-[xzJ)8b)ItAR~5lAxF[Jl>q+O\r}04ig{wsu`<HF\/dlukXn4[/B}?*-tK#R rJui(`CpwwU4@n%sX/6?W)
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: 48 d1 42 e0 0e 95 c8 7c 2c d0 52 c7 48 17 5e 5e e9 ae 39 ce 3e ea 8e 83 f9 d7 a5 c1 68 d2 0f 99 f0 71 d1 7b 57 c5 e2 27 cc ec 8f d0 68 41 45 5f a8 f8 ad 93 8e dc 7a d4 c4 41 08 c9 19 6f 41 de a4 4b 38 47 cb 82 d9 f5 26 a4 5b 28 4f 58 14 91 dc 2d 60 91 bb 63 36 42 ad cb 75 e8 7d 2a cc 50 c6 df 75 80 a8 d6 da dc 36 3e ce a8 3e 98 cd 4b e4 5a 01 f2 af fe 3d 4f 94 97 22 39 6d 73 9f 98 fb f3 54 a5 b6 19 c6 f3 c7 be 6a fc 96 d6 a7 00 af 5e a7 75 41 25 95 ba 9e 08 1e f9 aa e5 17 31 4d ad 54 8c 8d dc 57 9c f8 a7 47 ff 00 84 7b 59 4d 42 38 ff 00 d0 6f 9b 12 ae 3e 58 e5 eb 9f 60 79 fd 6b d2 da de 11 c8 5d df 9d 50 d6 74 6b 5d 63 4e 9e ca 55 da b2 ae d0 47 3b 4f 63 42 1b d4 f3 f9 6c a0 bd b4 30 91 b8 73 b1 8f 5c ff 00 74 ff 00 9f 5a e3 2e 6d 1a 44 96 c2 46 63 b7 25 Data Ascii: HB\|,RH^^9>hq{W'hAE_zAoAK8G&[(OX-`c6Bu}*Pu6>>KZ=O"9msTj^uA%1MTWG{YMB8o>X`yk]Ptk]cNUG;OcBl0s\tZ.mDFc%
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: 90 0a 70 1c d4 8d 0f 07 91 56 22 19 02 a2 44 06 ad 44 b5 94 e4 75 d1 86 a3 d1 78 a9 55 68 44 1e 95 22 8e 6b 9a 52 b9 e8 c2 23 94 53 c7 02 95 54 1a 59 7e 44 26 b2 72 3a 63 1d 0e 73 c6 57 86 db 4b 91 41 c0 38 ff 00 be 9b 38 fc 80 35 e4 9a 5d b9 d4 ef d4 c6 48 7b 87 10 c5 ec 3d 6b b9 f8 97 7e 56 38 ad d4 e0 95 69 1b d8 9e 3f 90 ac 5f 87 f6 7f 6a f1 8d 95 a2 0f 96 de 16 98 fb 1f f2 6b e6 33 4a bc d5 1f 91 f7 19 1d 0e 4a 29 f7 3d bf 44 b2 4d 3e c2 2b 58 63 fd da 28 50 3d 2b 6e 18 e4 18 3c 0a ab 12 05 40 57 e5 5e 95 6a 36 da 72 7f 2f 4a f9 c6 ee cf a8 4a c8 b2 a1 fa e7 f2 a9 94 be 06 08 fe b5 59 5f 3f 2f 7f ad 4c 80 af b9 aa 8a 13 65 94 67 07 3b 41 a7 93 ff 00 4c bb 7a 55 7f 37 61 19 1f 41 53 09 d4 8c e7 ad 5d ac 45 c7 6e 61 ff 00 2c 9a a3 91 c9 39 31 11 f8 d2 Data Ascii: pV"DDuxUhD"kR#STY~D&r:csWKA885]H{=k~V8i?_jk3JJ)=DM>+Xc(P=+n<@W^j6r/JJY_?/Leg;ALzU7aAS]Ena,91
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: d1 f2 f5 95 b1 55 00 82 18 70 41 e3 15 2d c9 18 af a4 ee b4 db 3b f5 d9 77 6d 0c cb e8 e8 0d 73 5a 9f c2 ef 0f ea 40 ed 86 4b 56 ec 61 7e 9f 81 c8 ae a8 67 10 6f df 56 38 ea 64 35 22 ad 09 5c f0 a8 63 dc c0 56 c4 10 f9 71 e7 da bb 5b af 83 97 56 87 76 9f 7e 97 0b fd d9 97 6b 7e 63 23 f9 56 16 af a0 6a 5a 3c 78 ba b3 96 35 ee f8 ca fe 62 ba d6 32 95 5d 21 23 81 e0 2b 51 d6 71 39 f7 5d cd 4e 8a 0c 9e 95 28 8c 31 e3 06 ae 5b db f0 09 15 bc a7 64 60 a1 76 57 68 8a a8 f5 a4 28 00 c9 eb 56 da 2c 9c d3 1a 2c f0 05 67 cc 5b 81 48 c5 bb 24 f4 15 4e e0 f2 40 ad 2b 91 e5 2e da ca 98 f5 35 b4 35 30 a9 64 54 95 82 02 7d 2b 26 e2 5f 31 aa c5 ed c6 5b 0b 54 80 35 db 08 d8 f3 ea 4a fa 20 03 26 91 8e 38 a5 27 68 a8 db 2c 78 ad 0e 76 c4 c6 e3 c5 59 82 1c d3 ad ed cb 73 8a Data Ascii: UpA-;wmsZ@KVa~goV8d5"\cVq[Vv~k~c#VjZ<x5b2]!#+Qq9]N(1[d`vWh(V,,g[H$N@+.550dT}+&_1[T5J &8'h,xvYs
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: cc 58 99 a2 8c 51 4c 06 91 48 46 29 d4 87 14 c6 8c 21 83 46 29 16 97 bd 07 ba 28 3e b4 a0 0e b4 dc 52 83 da 90 58 46 4d dd 3a d4 47 20 e2 ac 81 bf 91 48 d1 ee 14 5c 4d 10 ad 4a 8d b6 a2 c1 43 8a 70 34 c4 8d 38 25 0c 00 38 a7 4b 00 90 64 56 7c 52 ec e7 b5 69 5b 4e 1c 62 b2 7a 1b 45 df 42 a7 96 51 aa cc 2f 91 8a 9e 6b 7d cb 91 55 95 0c 47 1e b4 af 70 e5 71 65 f8 98 1e 3f 84 d4 73 db 90 72 06 45 10 36 40 53 c9 ed 57 93 12 8d 87 ad 66 dd 99 b5 ae 8c 69 61 cd 53 96 32 a4 d6 dc d6 e5 58 82 2a 8c f6 f5 ac 66 73 ce 99 9d 5a ba 7c fb f1 93 c8 ac e3 1e d6 20 d5 fd 07 4c d4 35 6b f8 ed 34 eb 59 2e 27 61 c2 20 ce 07 a9 f4 15 55 1a 51 6e 44 d2 8c 9c ac 91 d5 e9 33 83 85 26 ba 1d 3b 42 be d5 a4 d9 65 6e f2 fa b0 e1 57 ea 6b a6 f0 8f c2 58 ec 55 2e 35 b9 96 69 4f 22 de Data Ascii: XQLHF)!F)(>RXFM:G H\MJCp48%8KdV\|Ri[NbzEBQ/k}UGpqe?srE6@SWfiaS2X*fsZ\| L5k4Y.'a UQnD3&;BenWkXU.5iO"
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: ca d1 ba 3f 42 a1 1b c9 23 bc 40 b1 80 aa 00 c1 e6 ac 0b 84 e7 04 02 39 18 ac 0b fd 66 3b 04 dc c7 03 a1 f6 ae 7a 7f 19 c6 ae 42 9c b0 ea 17 9a f3 d4 5b 3d 16 e2 8e de e2 de d6 f4 81 3a ab f1 8e 9d a9 96 1e 1e b5 d3 ef 85 d5 b1 da 71 8c 66 b8 88 7c 6a 88 ea 64 de aa dc 82 c3 02 ba bd 33 5e 4b b4 ce ee 7b 8a d2 d2 48 8b 45 9d dd b5 d7 dd f9 bb 62 ad 83 bf a6 31 5c ed 8d ca b8 07 71 fa 56 dd bb 6e 4d c0 83 8e d4 e3 37 d4 99 44 9a 69 d6 34 38 ea 6b 9d d4 e2 5b d6 1e 60 04 56 bd e1 3f fe ba c6 bb b9 11 f0 29 39 eb 61 a8 90 79 76 f6 d1 84 45 0a 05 30 df 21 62 33 9f 6a a1 73 39 6e 4b 10 bd eb 99 d4 7c 44 21 95 a1 81 4c b2 0e a1 7b 7d 4d 2d 5e c5 24 91 db 1b d4 27 08 54 fa d4 02 ed 1d 59 19 ba 8e 33 d2 bc fc f8 87 55 45 8c ac 4a 16 43 84 01 8f 27 f2 a7 c5 e2 9b Data Ascii: ?B#@9f;zB[=:qf\|jd3^K{HEb1\qVnM7Di48k[`V?)9ayvE0!b3js9nK\|D!L{}M-^$'TY3UEJC'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	49942	188.114.97.3	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:30 UTC	399	OUT	GET /wp-content/uploads/2024/05/canales-telegram-1024x536.webp HTTP/1.1 Host: www.telegramkv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-07-04 22:40:30 UTC	729	IN	HTTP/1.1 200 OK Date: Thu, 04 Jul 2024 22:40:30 GMT Content-Type: image/webp Content-Length: 18362 Connection: close last-modified: Tue, 14 May 2024 08:37:23 GMT etag: "664322c3-47ba" strict-transport-security: max-age=31536000 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 2 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FlstVHXaj53iKUhDoM1ul%2Bf9FVrrxXFgSdS1XLw8xx339ojoCmkxJpJi9WqV4YwYk5wk%2F1iPww2F8%2FD1CipDeBaWI8FMe0JWjPbDkKQIKpQYaqQcV74AGhbs1Ba0XKuTyLfscHg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 89e29e100fbe43a3-EWR alt-svc: h3=":443"; ma=86400
2024-07-04 22:40:30 UTC	640	IN	Data Raw: 52 49 46 46 b2 47 00 00 57 45 42 50 56 50 38 20 a6 47 00 00 50 cd 01 9d 01 2a 00 04 18 02 3e 49 24 90 45 a4 23 22 11 9a 24 7c 40 04 84 b3 b7 70 af 9f 55 6b 17 1f 67 f3 98 2f da 7c 38 89 0f fd ee e5 f2 71 f0 3f 30 7f c5 7b fc dd 3f cf ff 7c fd 67 d1 63 69 f9 e0 f9 b7 ee 9f f6 7f cd 7e 58 fc 49 f6 29 fa 6f fe d7 b9 1f ea ef fd 0f f3 7f 90 7d e7 3f 74 7d 5a 7e cf fe ed 7b ae fe 5d fc 05 f4 42 fe 9d fe cb af 1f d1 df cd cf ff 2f b5 4f ee bf a4 67 ff fd 67 3e d7 fa a6 f2 47 f2 df df 7f 20 3d 5d fc 8b eb ff d4 7f 7f f4 60 d1 df 66 1a 90 7c bf f0 27 ef bf c3 fa 59 e2 8f ca 6f f6 bd 42 ff 2e fe a3 ff 07 82 74 03 7d 87 ff af e8 e1 f4 9e 78 7d 95 f3 4f ff 87 fd cf cf 63 c7 6e 80 ff a5 3d 18 3e bb f4 fd fb 07 fb 7f 48 b0 7a a9 31 a5 4f 6c c0 24 98 d2 a7 b6 60 12 4c Data Ascii: RIFFGWEBPVP8 GP*>I$E#"$\|@pUkg/\|8q?0{?\|gci~XI)o}?t}Z~{]B/Ogg>G =]`f\|'YoB.t}x}Ocn=>Hz1Ol$`L
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: 36 22 f3 7d 5a 68 19 74 af b0 f6 c9 ac 7a 79 0f 67 f4 8b 56 d8 c1 d2 a5 2d ca 35 3f 7e a0 e0 52 dc f2 52 7f 68 38 7b 66 04 49 35 f9 d8 15 da 4e c9 6b 66 01 24 c7 95 f6 eb b5 e4 0e ea ff a0 a8 18 30 ff a0 1c 43 19 aa 9f 8b b0 3e 82 9e d9 17 46 bb b2 34 3f 44 e9 fd 43 d3 7f 8a 34 7a 77 ba 7e 4a 1b 02 dd 07 a2 ba 89 f1 67 80 66 54 f6 cc 02 49 26 3f 63 42 90 01 66 83 68 dc 18 32 7e 38 79 fd ec b9 40 e2 c9 ff 82 49 8d 20 15 80 d1 88 7d 52 be 8c 3d 34 66 2d 21 0b 84 d6 c1 67 cf a4 d9 2e f1 5e 81 e8 89 83 e9 23 52 a6 cc ff b2 ad 52 63 4a 9e da 8d 26 b1 34 ec 72 42 f2 16 3b d2 29 e7 b6 90 5c d1 8d 4a 9e d9 80 40 47 14 11 d0 71 fa a8 0a d3 e4 42 db c0 e4 24 73 6a b1 e2 8e 0f 68 92 23 9b 99 2e 0f e1 da d5 1d 6e 53 9c d3 9e be d2 86 ca f3 e8 ed 33 00 92 63 48 90 f2 Data Ascii: 6"}ZhtzygV-5?~RRh8{fI5Nkf$0C>F4?DC4zw~JgfTI&?cBfh2~8y@I }R=4f-!g.^#RRcJ&4rB;)\J@GqB$sjh#.nS3cH
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: a3 fa 9b 04 0e d3 6c 80 c6 5b 3a 77 de 43 20 15 0c d7 f4 e0 37 a1 7e f5 21 f2 67 79 66 fd 3f 00 79 fa 62 9b aa 99 9d 81 3a 17 8c 06 83 f7 00 a5 e6 1f 07 e6 b1 c7 6a ee 1b a6 be 46 b3 ec 2f ff c8 df 15 39 a3 ad 5f f1 60 a8 02 6c c0 33 05 7c e7 3c 0b 0e f8 74 9d 26 71 4b ed 04 75 ab 0e fd 01 95 3d b3 00 92 49 63 a4 d4 a2 ce 78 80 f4 ff 13 70 fe 46 b7 1b d1 46 71 ef ce 8b 3c 72 8d 90 81 dd f7 7e 38 54 44 e5 01 bf 64 e8 59 ec 3a 7c 5e 0d 33 e7 8c c0 12 07 0a 9b df 77 cf c7 70 6f 74 67 f8 bf f5 b1 cd 28 bc 92 86 e3 c0 71 5c 46 12 54 51 74 c7 81 8d a8 77 dc 73 68 50 f9 9d be 25 f8 88 c2 e1 e0 f2 f4 33 fc c7 8f bf 32 2d 79 2d 46 c1 ad b3 ff 3e 3f d7 e9 2f d3 2b 65 2c fb 46 f4 0b 0b 06 cb 6f 7c c9 e0 5c ec 45 37 b4 6b 96 53 20 22 a9 0b 4a 9e d9 78 aa 11 6b 59 40 Data Ascii: l[:wC 7~!gyf?yb:jF/9_`l3\|<t&qKu=IcxpFFq<r~8TDdY:\|^3wpotg(q\FTQtwshP%32-y-F>?/+e,Fo\|\E7kS "JxkY@
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: 76 8f 24 24 3e 41 85 12 fb 71 19 f5 a3 63 86 52 87 3d 15 ce 1a 36 46 35 d5 43 97 9e 95 1a 73 41 1e c3 11 94 95 30 a0 e1 ed a0 cb 52 22 62 4e 0d 48 89 89 38 35 22 26 22 cd d9 66 5c 4f e9 ef 27 d5 cd c3 7c c3 1d 15 12 3d 75 41 51 4e d8 23 6f c5 a3 ef c3 0e 0b 89 33 aa aa 02 c9 62 5e 3b 3e 93 83 b8 44 fb 73 8b dd 38 f0 d1 d0 2d ee 97 23 a5 9c fc 4c a0 c0 53 a1 4e 86 8a 24 45 f2 29 00 c7 b0 bf c4 cf 71 64 c4 f6 cc 02 49 8d 2a 7b 66 01 24 c6 95 3d b3 53 c6 84 5c 9d f4 43 af 92 50 2c fa 48 d3 b7 dc 36 54 37 1b f0 cb dd e2 23 e6 a0 35 92 46 d3 44 3f e0 73 e9 d8 bf 86 38 c8 86 c8 00 6f fb 78 4c da ba 6f 75 13 d8 18 0c 39 e1 cf 31 54 7d cb 91 dc 53 fe 33 e8 03 8f a8 03 c2 fe 48 f4 31 01 62 b2 13 0c 3b 3e e6 21 43 7d 76 be 2c fa 79 9c 0d e7 54 f6 cc 02 49 8d 2a 7b Data Ascii: v$$>AqcR=6F5CsA0R"bNH85"&"f\O'\|=uAQN#o3b^;>Ds8-#LSN$E)qdI{f$=S\CP,H6T7#5FD?s8oxLou91T}S3H1b;>!C}v,yTI{
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: 7b 41 8a 6d 6d 9d a0 7e 5c 52 c1 9b 4f 4b 1a fe c2 37 d6 fe 44 1b 3a 07 29 c9 87 00 5b 62 ed 9f 6f 4e 3a a0 6d ba 86 5f ed c0 30 c9 d9 b0 e5 b2 61 71 d2 d8 da c9 ec 0f 7a 52 ff 8d 50 5a 23 a3 40 2e 1e c8 78 55 f0 45 3a 42 de 96 49 44 0b f1 e1 6b 19 5d aa 71 5f 3e 25 61 0f 60 46 f0 d5 f8 1e 44 43 15 e0 b5 64 0e ea ec fc 25 bf f2 44 27 c8 37 37 40 26 0c 72 b8 a4 af f3 5c ec 76 d1 12 6d e0 ac 02 9c 3b b7 aa 9a d0 5a 8c ff 28 f3 21 0e 62 50 c7 5c f6 7b f6 73 f1 ab 13 7a 8e 73 7d 6f 29 4a b2 80 0f 3e 20 ff 20 19 e2 05 d0 37 e9 0f 42 50 bb 06 04 c6 a0 09 ce bd 1c 1a 7a c6 6f 75 91 6e 76 59 86 5e 7e 69 77 c5 07 1e 8d 19 ad ef 0c 95 1e 0b 4d 0e 80 69 93 18 43 9d 73 d5 2f fb 93 8f 6f da 9c 96 29 cf 87 41 6b c8 e7 52 d3 3b 73 a7 48 df 28 1d 89 fb 45 56 61 da 5f cd Data Ascii: {Amm~\ROK7D:)[boN:m_0aqzRPZ#@.xUE:BIDk]q_>%a`FDCd%D'77@&r\vm;Z(!bP\{szs}o)J> 7BPzounvY^~iwMiCs/o)AkR;sH(EVa_
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: 5c f4 a1 d3 b9 23 3b 8f c1 0c 9b a0 00 1c 7f bf 1a 0b cd 49 f9 85 9a 0d e6 7e 46 48 c0 ee 03 cf 5c 5a 0b b3 00 2c 5e 33 21 39 b5 27 21 c6 c2 df 42 76 b6 c7 3f e4 54 dd 53 86 4c e0 00 2b 21 39 4c 5b ba 71 72 eb 53 09 80 72 b9 5b ac 2d c7 5c 0a 56 38 c6 f9 2b 5c 0a 33 1d 98 17 6d 34 54 e4 ba 9d 30 95 78 45 3e dd 94 a6 e5 eb 1c 46 c8 c1 47 51 37 af 74 ca 67 64 e7 21 10 aa a5 a9 94 5f 48 69 76 05 a7 60 00 18 59 9b 18 67 34 bb b4 76 3e 6e 71 de 0e e8 1c 6e de 81 63 82 1b 92 a8 e6 df e1 72 ca 3c e6 93 a3 02 5a 74 ce ec 5f a4 40 10 d2 4a 9c fd eb 3c 04 cf f3 89 62 0a 82 a9 1b c8 76 8f f1 36 61 40 41 0d 81 cb 43 6e 16 88 80 52 b6 ea 10 2f 65 04 48 90 7a 5a 7e 74 07 50 1d 2e 0e 8e d7 a6 58 f2 1b 27 13 a9 72 01 11 de 16 4b 00 96 41 82 c7 41 df 5c 54 fb cc 7e da 8e Data Ascii: \#;I~FH\Z,^3!9'!Bv?TSL+!9L[qrSr[-\V8+\3m4T0xE>FGQ7tgd!_Hiv`Yg4v>nqncr<Zt_@J<bv6a@ACnR/eHzZ~tP.X'rKAA\T~
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: ec 42 24 5a fe ee cd 6c bf fd 3c 18 5b 46 80 b6 aa f3 2e cb dd be 7d 42 43 b2 a7 d0 a2 c1 7c b5 5c 01 d9 cc 33 8a 6b 0b 30 62 fc ad 3e a8 17 0b 7b 21 10 0c 9e 8e df df ea 04 d0 8e 8a 25 3b ec 1d c4 59 d9 d0 87 69 e6 f0 cb 6c 83 27 fc d5 b6 0a 6b 3d b4 2f db 58 02 98 a1 f2 56 a2 d6 f1 64 47 05 d8 f1 ce 4a 6e 79 c0 80 4e 1d 80 43 ba 51 76 27 b5 81 9d 6e 37 32 94 a4 e0 af ec 90 b1 9a 4a 80 28 df 74 7f 7f 86 da e5 50 2a ee a6 25 6a 3f 15 f8 43 29 44 cc 20 6c bb 24 d1 31 0a 7f 22 01 8a cc 75 1a b3 33 e4 d3 fd f7 32 32 e5 84 18 8f f0 1b f1 42 1b 7a 60 2c 80 42 00 c7 60 6f f1 79 96 f8 bf ce 9a 6b ba 4e 74 13 f7 93 3d 18 b0 37 c5 70 f3 89 91 46 c5 0f f2 33 d4 26 f6 49 a5 2a ed e6 72 37 7a 00 f4 0a 4b 4f 6a e2 4a 64 65 80 58 09 08 47 05 e2 96 bb 27 87 c3 b7 c4 53 Data Ascii: B$Zl<[F.}BC\|\3k0b>{!%;Yil'k=/XVdGJnyNCQv'n72J(tP%j?C)D l$1"u322Bz`,B`oykNt=7pF3&Ir7zKOjJdeXG'S
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: ac 31 9e d5 37 42 a8 14 04 fc f4 ec eb 4e 96 6a a0 05 cd ff 49 06 e0 df 3d 95 1f bf b0 9e 7c 9c b9 ec 39 1e 9b 05 a0 00 d8 15 27 05 62 d5 ac 9a 1b 8f d4 77 7e 32 de 4b 9b 1b 94 00 1b 6b 2e 06 3a 82 9d 31 ca 99 ef 34 ff 6c 49 8f 01 05 0e 26 d4 14 ce 3a 1f 7f ac a2 02 9e ad ea 79 df 1d fb ef df bc e5 a7 34 1e b9 2c 81 92 26 6c 11 1c fa 2b dd 74 9c 59 2f fb b9 82 41 c1 3f 38 3e c1 23 9d 58 36 fc a5 6f 4f 0a f1 90 fd a9 16 84 85 f2 cd f9 08 02 fb 18 a4 2a 07 ac 8d 8b 26 10 5b 1c ab b5 24 8d 01 ae d7 ad 8f 16 61 5a 4b 1d 19 35 eb 04 e6 23 78 7c f3 87 f9 d0 38 88 fc 69 3c 49 8c ca 79 cf e2 5b a0 18 05 ec 18 9f cd 97 7e e1 02 cc c5 8e 26 b0 07 89 5e f7 e9 c2 44 42 65 ce ae ea b0 e5 94 f7 d9 b9 8b fd 93 d6 20 52 4e 22 3c 4b a1 a7 9c 9f 7a a7 6f 4e 11 21 f8 5d 4a Data Ascii: 17BNjI=\|9'bw~2Kk.:14lI&:y4,&l+tY/A?8>#X6oO*&[$aZK5#x\|8i<Iy[~&^DBe RN"<KzoN!]J
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: 64 99 37 23 9f b2 bf 75 32 22 c1 de 25 1a 94 b1 50 72 be 6c 3d 5c da 9e 95 75 ff 05 e0 ab 00 ab 2a 36 fb 9f cc d7 18 86 3d d6 4f 57 f1 a0 df 28 70 e2 f2 ea 1f 1a 32 27 4f 72 39 fd 98 f6 ce be 4d 8f 64 4b b6 7c 5a 72 23 3f 3d d2 5d d0 8d 99 81 3d 6b 65 f4 8b df d4 14 42 d6 fd 78 55 4a 21 25 8c 0c 02 47 49 f2 aa 3b 1a 29 84 58 ed b4 d7 61 37 32 3d 8c 80 cf 05 54 5b d3 17 ed 85 db ac 73 1b 20 33 eb 42 48 b8 e6 6a 0c 80 5c ad 32 35 c6 f9 02 95 ff 36 3f df 99 0c f6 a2 89 6e 1d d3 ba 62 7d 72 57 3f 87 7a 29 2e 69 c4 77 a3 05 81 6c e3 88 90 e8 77 ab 0f d0 1e 34 49 75 37 9f ab c7 81 18 2a 90 34 25 27 da 53 48 9c f5 2d c7 ae 15 e9 4d 79 2a a6 ef a3 45 84 3d 55 7e 23 05 99 54 e1 8d f8 f4 fa d3 1f c6 94 7a 37 c3 4c 0e 72 80 64 ef 9a 9c a9 f1 01 96 0d 7b 75 ec a8 25 Data Ascii: d7#u2"%Prl=\u6=OW(p2'Or9MdK\|Zr#?=]=keBxUJ!%GI;)Xa72=T[s 3BHj\256?nb}rW?z).iwlw4Iu74%'SH-My*E=U~#Tz7Lrd{u%
2024-07-04 22:40:30 UTC	1369	IN	Data Raw: 50 97 ed 18 06 65 9a 61 4a ac 6b 15 7f d5 41 34 f6 cd 9e 2c 46 a0 08 db 01 c4 41 d2 69 a8 68 aa a8 17 a7 77 57 09 b3 66 15 fc 51 11 17 30 b5 7d 31 c4 3a fd ba 61 7d 27 4b de 28 af 61 b7 f1 a0 18 22 5b 88 6e 33 08 97 d7 77 f0 ad 16 fa 29 f2 b3 87 1b af e1 1f 09 7a 23 da 3d df cf 7c 95 c7 92 fa b8 85 68 5f 81 8d 14 82 00 bd c8 aa 3e 17 ea 62 73 9f 3d 1d 03 fa 11 ed 3c a0 0a ba 01 80 00 18 4e 16 be 25 28 bc 15 d1 de a0 86 b5 52 44 c1 d9 b3 c8 86 43 f7 8a fa 22 2e 8a 86 b2 95 80 32 72 0b af f7 4e 58 36 88 5a 34 93 67 a6 79 71 00 aa a0 91 6a 11 0f 1b 79 14 98 28 b0 ec e6 d1 19 ea a4 42 02 88 d8 b8 cf 7b 44 c2 71 ce b5 fd 45 80 60 53 17 2c 75 9e 18 d1 a2 52 ce c6 2b 58 87 f3 dd e7 02 f8 c7 7c b3 e1 20 cf 08 43 15 e1 d6 a1 37 47 b3 69 5f 27 70 6a d0 fc a6 08 a7 Data Ascii: PeaJkA4,FAihwWfQ0}1:a}'K(a"[n3w)z#=\|h_>bs=<N%(RDC".2rNX6Z4gyqjy(B{DqE`S,uR+X\| C7Gi_'pj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	49941	216.58.206.78	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:30 UTC	794	OUT	GET /s/player/5352eb4f/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.youtube.com/embed/qVZVO3NgeAk?feature=oembed Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=zR4LuK50jpk; VISITOR_INFO1_LIVE=PrPVsjSEvmU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXQ%3D%3D
2024-07-04 22:40:30 UTC	680	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 380684 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 04 Jul 2024 20:03:35 GMT Expires: Fri, 04 Jul 2025 20:03:35 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 04:25:50 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 9415 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 22:40:30 UTC	710	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 65 6e 64 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 79 74 70 2d 62 69 67 2d 6d Data Ascii: -ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-m
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2d 66 75 6c 6c 73 63 72 65 65 6e Data Ascii: tainer{display:none}.html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-media-controls-fullscreen
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 32 34 70 78 3b 72 69 67 68 74 3a 32 34 70 78 7d 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 68 74 6d 6c 35 2d 65 6e 64 73 63 72 65 65 6e 29 2c 2e 79 74 70 2d 61 75 74 6f 68 69 64 65 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 3a 6e 6f 74 28 2e 79 74 70 2d 75 70 Data Ascii: ext){top:89px}.ytp-player-content.ytp-iv-player-content{left:12px;right:12px}.ytp-big-mode .ytp-player-content.ytp-iv-player-content{left:24px;right:24px}.ytp-autohide .ytp-player-content:not(.html5-endscreen),.ytp-autohide .ytp-player-content:not(.ytp-up
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 65 72 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 64 69 73 61 62 6c 65 64 5d 7b 6f 70 61 63 69 74 79 3a 2e 35 7d 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 6e 6f 74 28 5b 61 72 69 61 2d 68 69 64 64 65 6e 3d 74 72 75 65 5d 29 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 79 74 70 2d 70 72 6f 62 61 62 6c 79 2d 6b 65 79 62 6f 61 72 64 2d 66 6f 63 75 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 32 70 78 20 72 67 62 61 28 32 37 2c 31 32 37 2c 32 30 34 2c 2e 38 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 69 6e 73 65 74 20 30 20 30 20 30 20 32 Data Ascii: er .ytp-button[disabled]{opacity:.5}.ytp-button:not([aria-disabled=true]):not([disabled]):not([aria-hidden=true]){cursor:pointer}.ytp-probably-keyboard-focus .ytp-button:focus{-webkit-box-shadow:inset 0 0 0 2px rgba(27,127,204,.8);box-shadow:inset 0 0 0 2
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 7b 6f 70 61 63 69 74 79 3a 2e 39 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 33 36 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 Data Ascii: x}.ytp-chrome-top .ytp-button,.ytp-small-mode .ytp-chrome-controls .ytp-button,.ytp-small-mode .ytp-replay-button{opacity:.9;display:inline-block;width:36px;-webkit-transition:opacity .1s cubic-bezier(.4,0,1,1);transition:opacity .1s cubic-bezier(.4,0,1,1
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 62 75 74 74 6f 6e 3a 6e 6f 74 28 2e 79 74 70 2d 79 6f 75 74 75 62 65 2d 62 75 74 74 6f 6e 29 20 73 76 67 7b 77 69 64 74 68 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 36 70 78 3b 68 65 69 67 68 74 3a 34 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 39 70 78 3b 68 65 69 67 68 74 3a 36 33 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e Data Ascii: button:not(.ytp-youtube-button) svg{width:40px;padding-left:4px}.ytp-chrome-top .ytp-button{padding-top:6px;height:42px;vertical-align:top}.ytp-big-mode .ytp-chrome-top .ytp-button{padding-top:9px;height:63px}.ytp-chrome-controls .ytp-button{height:100%}.
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 30 3b 68 65 69 67 68 74 3a 33 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 6c 65 66 74 3a 32 34 70 78 3b 62 6f 74 74 6f 6d 3a 39 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 30 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 2c 77 69 64 74 68 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e Data Ascii: trols .ytp-button[aria-pressed]:after{content:"";display:block;position:absolute;width:0;height:3px;border-radius:3px;left:24px;bottom:9px;background-color:#f00;-webkit-transition:left .1s cubic-bezier(.4,0,1,1),width .1s cubic-bezier(.4,0,1,1);transition
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 2c 2e 79 74 70 2d 65 6d 62 65 64 2d 6d 6f 62 69 6c 65 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 3a 61 66 74 65 72 7b 6c 65 66 74 3a 31 35 70 78 7d 2e 79 74 70 2d 63 6f 6c 6f 72 2d 77 68 69 74 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 5d 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 79 74 Data Ascii: .ytp-chrome-controls .ytp-button[aria-pressed=true]:after,.ytp-embed-mobile.ytp-small-mode .ytp-chrome-controls .ytp-button[aria-pressed=true]:after{left:15px}.ytp-color-white .ytp-chrome-controls .ytp-button[aria-pressed]:after{background-color:#ddd}.yt
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 65 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 31 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3a 31 3b 66 6c 65 78 3a 31 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 3a 6e 6f 74 28 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 29 20 2e 79 74 70 2d 72 69 67 68 74 2d 63 6f 6e 74 72 6f 6c 73 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 79 74 70 2d 72 69 67 68 74 2d 63 6f 6e 74 72 6f 6c 73 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 79 74 70 2d 65 78 70 2d 62 6f 74 74 6f 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 6c 65 78 62 6f 78 20 2e 79 74 70 2d 76 Data Ascii: ex;display:flex;-webkit-box-flex:1;-webkit-flex:1;flex:1;white-space:nowrap;overflow:hidden;text-overflow:ellipsis}:not(.ytp-exp-bottom-control-flexbox) .ytp-right-controls{float:right}.ytp-right-controls{height:100%}.ytp-exp-bottom-control-flexbox .ytp-v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	49949	216.58.206.78	443	6024	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-07-04 22:40:30 UTC	809	OUT	GET /s/player/5352eb4f/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQi5ys0BCIrTzQEY9snNARjrjaUX Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.youtube.com/embed/qVZVO3NgeAk?feature=oembed Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: YSC=zR4LuK50jpk; VISITOR_INFO1_LIVE=PrPVsjSEvmU; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXQ%3D%3D
2024-07-04 22:40:30 UTC	687	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 333108 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 04 Jul 2024 22:15:19 GMT Expires: Fri, 04 Jul 2025 22:15:19 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 02 Jul 2024 04:25:50 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 1511 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-07-04 22:40:30 UTC	703	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 70 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var p;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 77 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 68 3d 66 3b 62 61 28 74 68 69 73 2c 22 64 65 Data Ascii: c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}}w("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.h=f;ba(this,"de
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 65 6f 66 20 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 31 3b 63 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 63 2b 2b 29 7b 76 61 72 20 64 3d 61 72 67 75 6d 65 6e 74 73 5b 63 5d 3b 69 66 28 64 29 66 6f 72 28 76 61 72 20 65 20 69 6e 20 64 29 6d 61 28 64 2c 65 29 26 26 28 61 5b 65 5d 3d 64 5b 65 5d 29 7d 72 65 74 75 72 6e 20 61 7d 3b 0a 77 28 22 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 6f 61 7d 29 3b 0a 76 61 72 20 70 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 Data Ascii: eof Object.assign=="function"?Object.assign:function(a,b){for(var c=1;c<arguments.length;c++){var d=arguments[c];if(d)for(var e in d)ma(d,e)&&(a[e]=d[e])}return a};w("Object.assign",function(a){return a\|\|oa});var pa=typeof Object.create=="function"?Obje
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 20 79 61 28 61 29 7b 69 66 28 61 2e 41 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 41 3d 21 30 7d 0a 78 61 2e 70 72 6f 74 6f 74 79 70 65 2e 48 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 7a 61 28 61 2c 62 29 7b 61 2e 6a 3d 7b 65 78 63 65 70 74 69 6f 6e 3a 62 2c 64 64 3a 21 30 7d 3b 61 2e 68 3d 61 2e 6c 7c 7c 61 2e 76 7d 0a 78 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 6a 3d 7b 72 65 74 75 72 6e 3a 61 7d 3b 74 68 69 73 2e 68 3d 74 68 69 73 2e 76 7d 3b 0a 78 61 2e 70 72 6f 74 6f 74 79 70 65 2e 79 69 65 Data Ascii: nction ya(a){if(a.A)throw new TypeError("Generator is already running");a.A=!0}xa.prototype.H=function(a){this.i=a};function za(a,b){a.j={exception:b,dd:!0};a.h=a.l\|\|a.v}xa.prototype.return=function(a){this.j={return:a};this.h=this.v};xa.prototype.yie
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 79 61 28 61 2e 68 29 3b 61 2e 68 2e 6d 3f 62 3d 46 61 28 61 2c 61 2e 68 2e 6d 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 48 29 3a 28 7a 61 28 61 2e 68 2c 62 29 2c 62 3d 47 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 45 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 49 61 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 6e 65 78 74 28 64 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 64 29 7b 72 65 74 75 72 6e 20 61 2e 74 68 72 6f 77 28 Data Ascii: ow=function(b){ya(a.h);a.h.m?b=Fa(a,a.h.m["throw"],b,a.h.H):(za(a.h,b),b=Ga(a));return b};this.return=function(b){return Ea(a,b)};this[Symbol.iterator]=function(){return this}}function Ia(a){function b(d){return a.next(d)}function c(d){return a.throw(
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 64 61 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 76 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 76 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 69 61 28 67 29 3b Data Ascii: (){function g(l){return function(m){k\|\|(k=!0,l.call(h,m))}}var h=this,k=!1;return{resolve:g(this.da),reject:g(this.v)}};b.prototype.da=function(g){if(g===this)this.v(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.ia(g);
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 6c 28 29 3b 67 2e 59 62 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 78 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 6c 28 29 3b 74 72 79 7b 67 2e 63 61 6c 6c 28 68 2c 6b 2e 72 65 73 6f 6c 76 65 2c 6b 2e 72 65 6a 65 63 74 29 7d 63 61 74 63 68 28 6c 29 7b 6b 2e 72 65 6a 65 63 74 28 6c 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 74 68 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 72 2c 74 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 72 3d 3d 22 66 75 6e 63 74 69 6f Data Ascii: var f=new c;b.prototype.ia=function(g){var h=this.l();g.Yb(h.resolve,h.reject)};b.prototype.xa=function(g,h){var k=this.l();try{g.call(h,k.resolve,k.reject)}catch(l){k.reject(l)}};b.prototype.then=function(g,h){function k(r,t){return typeof r=="functio
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 6d 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 62 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 69 66 28 6d 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 6d 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 6d 29 26 26 65 28 6d 29 3b 72 65 74 75 72 6e 20 6c 28 6d 29 7d 29 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 Data Ascii: l==="object"&&k!==null\|\|l==="function"}function e(k){if(!ma(k,g)){var l=new c;ba(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(m){if(m instanceof c)return m;Object.isExtensible(m)&&e(m);return l(m)})}if(function(){if(!a\|\|!Object
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 66 28 6b 21 3d 3d 6b 26 26 6e 2e 6b 65 79 21 3d 3d 6e 2e 6b 65 79 7c 7c 6b 3d 3d 3d 6e 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 65 6e 74 72 79 3a 6e 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 65 6e 74 72 79 3a 76 6f 69 64 20 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 78 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 0a 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 Data Ascii: f(k!==k&&n.key!==n.key\|\|k===n.key)return{id:l,list:m,index:h,entry:n}}return{id:l,list:m,index:-1,entry:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=x(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!
2024-07-04 22:40:30 UTC	1390	IN	Data Raw: 65 74 75 72 6e 28 68 3d 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 29 26 26 68 2e 76 61 6c 75 65 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 6b 65 79 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e Data Ascii: eturn(h=d(this,h).entry)&&h.value};e.prototype.entries=function(){return c(this,function(h){return[h.key,h.value]})};e.prototype.keys=function(){return c(this,function(h){return h.key})};e.prototype.values=function(){return c(this,function(h){return h.

Target ID:	0
Start time:	18:39:21
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:39:23
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:39:25
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.telegramkv.com/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Target ID:	8
Start time:	18:40:35
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6808 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	false
Has administrator privileges:	false
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	9
Start time:	18:40:35
Start date:	04/07/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6376 --field-trial-handle=2184,i,17200100386419637082,6920206264759207876,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject malicious code into process via Extra Window Memory (EWM) in order to evade process-based defenses as well as possibly elevate privileges. EWM injection is a method of executing arbitrary code in the address space of a separate live process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	Process: OS API Execution
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.telegramkv.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Software Vulnerabilities

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Chrome Cache Entry: 155

Chrome Cache Entry: 156

Chrome Cache Entry: 157

Chrome Cache Entry: 158

Chrome Cache Entry: 159

Chrome Cache Entry: 160

Chrome Cache Entry: 161

Chrome Cache Entry: 162

Chrome Cache Entry: 163

Chrome Cache Entry: 164

Chrome Cache Entry: 165

Chrome Cache Entry: 166

Chrome Cache Entry: 167

Windows Analysis Report
http://www.telegramkv.com/