Edit tour

Windows Analysis Report
http://xn--r1a.website/s/ogorodru

Overview

General Information

Sample URL:	http://xn--r1a.website/s/ogorodru
Analysis ID:	1514812
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Connects to several IPs in different countries

Detected non-DNS traffic on DNS port

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1880 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1720,i,7126892294250420465,11752881237129370253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://xn--r1a.website/s/ogorodru" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /adfoxhb HTTP/1.1Host: ssp.hybrid.aiConnection: keep-aliveContent-Length: 368sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: text/plainAccept: */*Origin: http://xn--r1a.websiteSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: http://xn--r1a.website/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.14.1Date: Fri, 20 Sep 2024 22:49:21 GMTContent-Type: text/htmlContent-Length: 571Connection: close

Source: chromecache_200.2.dr, chromecache_330.2.dr	String found in binary or memory: http://ads.alfasense.net/adserver/www/delivery/asyncspc.php
Source: chromecache_255.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_255.2.dr	String found in binary or memory: http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6)
Source: chromecache_190.2.dr, chromecache_240.2.dr	String found in binary or memory: http://my.opera.com/emoller/blog/2011/12/20/requestanimationframe-for-smart-er-animating
Source: chromecache_190.2.dr, chromecache_240.2.dr	String found in binary or memory: http://paulirish.com/2011/requestanimationframe-for-smart-animating/
Source: chromecache_200.2.dr, chromecache_330.2.dr	String found in binary or memory: https://ads.alfasense.net/adserver/www/delivery/asyncspc.php
Source: chromecache_244.2.dr, chromecache_306.2.dr	String found in binary or memory: https://ctx.weborama.com/api/profile
Source: chromecache_244.2.dr, chromecache_306.2.dr	String found in binary or memory: https://dx.frontend.weborama.com/collect
Source: chromecache_244.2.dr, chromecache_306.2.dr	String found in binary or memory: https://dx.frontend.weborama.com/videos
Source: chromecache_255.2.dr	String found in binary or memory: https://gist.github.com/92d2ac1b31978642b6b6
Source: chromecache_255.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_209.2.dr	String found in binary or memory: https://oauth.telegram.org
Source: chromecache_209.2.dr	String found in binary or memory: https://oauth.tg.dev
Source: chromecache_321.2.dr	String found in binary or memory: https://osx.telegram.org/updates/site/artboard.png)
Source: chromecache_321.2.dr	String found in binary or memory: https://osx.telegram.org/updates/site/artboard_2x.png);
Source: chromecache_218.2.dr, chromecache_248.2.dr, chromecache_326.2.dr, chromecache_209.2.dr	String found in binary or memory: https://post.tg.dev
Source: chromecache_218.2.dr, chromecache_248.2.dr, chromecache_326.2.dr, chromecache_209.2.dr	String found in binary or memory: https://t.me
Source: chromecache_218.2.dr, chromecache_248.2.dr, chromecache_326.2.dr, chromecache_209.2.dr	String found in binary or memory: https://telegram-js.azureedge.net
Source: chromecache_218.2.dr, chromecache_248.2.dr, chromecache_326.2.dr, chromecache_209.2.dr	String found in binary or memory: https://telegram.org
Source: chromecache_218.2.dr, chromecache_248.2.dr, chromecache_326.2.dr, chromecache_209.2.dr	String found in binary or memory: https://tg.dev

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65002 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65083 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65014 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 65095 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65117 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65060 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65025 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65128 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 65036 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65061 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65094 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65049 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65129 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65106 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64984 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65024 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65072 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 65013 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 64995 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65073
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65074
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65071
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65072
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65077
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65078
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65076
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 65096 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65070
Source: unknown	Network traffic detected: HTTP traffic on port 65050 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65073 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65035 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65104 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65069
Source: unknown	Network traffic detected: HTTP traffic on port 65012 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65127 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64994 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65084
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65085
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65082
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65083
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65088
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 65085 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65089
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65086
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65087
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 65001 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65080
Source: unknown	Network traffic detected: HTTP traffic on port 65138 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65081
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65084 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65079
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65095
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65096
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65093
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65094
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65099
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65097
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65098
Source: unknown	Network traffic detected: HTTP traffic on port 65023 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65091
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65092
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65000 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65090
Source: unknown	Network traffic detected: HTTP traffic on port 65116 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 65062 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65034 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65105 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65040 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65086 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65063 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65114 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65137 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64998 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64990
Source: unknown	Network traffic detected: HTTP traffic on port 65022 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64986 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64989
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64988
Source: unknown	Network traffic detected: HTTP traffic on port 65074 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65011 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64985
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64984
Source: unknown	Network traffic detected: HTTP traffic on port 65103 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64986
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64999
Source: unknown	Network traffic detected: HTTP traffic on port 65052 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64992
Source: unknown	Network traffic detected: HTTP traffic on port 65010 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64991
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64994
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64993
Source: unknown	Network traffic detected: HTTP traffic on port 65033 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64996
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64995
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64998
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 64997
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 65041 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 65097 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65115 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65126 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65009 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65021 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64985 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65064 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65113 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65053 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65099 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65032 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64997 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65124 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65042 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65065 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65098 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65102 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64996 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65087 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65020 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65076 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65136 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64989 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65019 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65134 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65077 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65111 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65054 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65031 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64990 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65089 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65043 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65008 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65088 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65007 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65135 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65123 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65066 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65112 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65030 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65055 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65044 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65121 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65018 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65091 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65078 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65110 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65029 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65017 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65090 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65079 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65056 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65045 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65006 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65133 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64988 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64999 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65122 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65030
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65033
Source: unknown	Network traffic detected: HTTP traffic on port 65092 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65034
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65031
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65032
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65028 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65005 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65026
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65027
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65024
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65025
Source: unknown	Network traffic detected: HTTP traffic on port 65108 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65028
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65029
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65040
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65041
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65044
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65045
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65042
Source: unknown	Network traffic detected: HTTP traffic on port 65039 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65043
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65131 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65080 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65057 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65037
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65038
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65035
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65036
Source: unknown	Network traffic detected: HTTP traffic on port 64993 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65120 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65039
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65052
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65050
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65055
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65056
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65053
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65054
Source: unknown	Network traffic detected: HTTP traffic on port 65046 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65132 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65081 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65048
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65049
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65046
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65047
Source: unknown	Network traffic detected: HTTP traffic on port 64992 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65062
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65063
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65060
Source: unknown	Network traffic detected: HTTP traffic on port 65016 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65061
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65066
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65064
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65065
Source: unknown	Network traffic detected: HTTP traffic on port 65058 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65027 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65059
Source: unknown	Network traffic detected: HTTP traffic on port 65069 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65057
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65058
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65109 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 64991 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65015 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65110
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65111
Source: unknown	Network traffic detected: HTTP traffic on port 65038 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65130 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65118 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65109
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 65047 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65103
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65104
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65102
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65107
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65108
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65105
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65106
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65000
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65121
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65001
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65122
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65120
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 65004 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65114
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 65070 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65115
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65112
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 65113
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49768 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@28/232@202/72

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1720,i,7126892294250420465,11752881237129370253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://xn--r1a.website/s/ogorodru"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1720,i,7126892294250420465,11752881237129370253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://xn--r1a.website/s/ogorodru	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://cdn.alfasense.net/lib/prebid.js	0%	Avira URL Cloud	safe
https://ads.betweendigital.com/match?bidder_id=4098&external_user_id=NGRkZDA3N2FiZTI0ZmI4ZA	0%	Avira URL Cloud	safe
https://osx.telegram.org/updates/site/artboard.png)	0%	Avira URL Cloud	safe
https://v.alfasrv.com/stats/2x2.png?s=129242&a=fallback&k1=1&k2=1&e=i&t=p&c=0	0%	Avira URL Cloud	safe
https://cs.alfasense.com/p?ssp=up&id=1a499899-1e99-4cfb-8b72-6faaa7f572f3	0%	Avira URL Cloud	safe
https://cdn4.cdn-telegram.org/file/ELzs1UgArxHStzcD91QUa9uaL2ddyRSFVOb32HZ5Q7SZLZI9SN8-CvHqkdeSTXz-1FJOHYLyaLzDpUXHrn-3RXYO_4I8oBD9yzwbCHmFeXODLfgUkIjYaugi2NfHyyx86_OZkKL2-vj668ki5vH1mtUCpu871TMMon8057k3jLN1Ba5qNzugM2DrntzGDSlJ045JcFoOh8aLOX3xkDOc0zE2t5O1lQOe8IC-8rtsvjePL8Yyh3HfF-P4WjILj0PfQgv1i7-JHb-jW_hkPmRAB42Uq2-m9whBNQYgypUynBNyLqkApbiUN7qdshWXE3jjbrm5i1asFn_Nd1GtMbAZpA.jpg	0%	Avira URL Cloud	safe
http://ads.alfasense.net/adserver/www/delivery/asyncjs.php	0%	Avira URL Cloud	safe
https://cs.alfasense.com/p?ssp=kd&uid=OBoQhsBgeRgmqPkpWuU5	0%	Avira URL Cloud	safe
https://s.uuidksinc.net/match/1215/?remote_uid=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://a.utraff.com/sync?ssp=3368	0%	Avira URL Cloud	safe
http://getbootstrap.com)	0%	Avira URL Cloud	safe
http://ads.alfasense.net/adserver/www/delivery/asyncspc.php?zones=8&prefix=revive-0-&xcampaigns=%3A%3Abetween%3A%3Agetintent%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3Adefault-stub%3A%3Akimberlite%3A%3A&xsite=13097&xsitename=xn--r1a.website&loc=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru	0%	Avira URL Cloud	safe
https://sync.bumlam.com/?src=asense&s_data=CAIQARja97e3BmIkNTMyMmY5MGMtNjhlZS00ZDMzLWJjNmYtNjE0MGNlZjFmODc4ogEQhcaPWneiEe-G4AAlkMBkfA**	0%	Avira URL Cloud	safe
https://sync.gonet-ads.com/match/videohead?id=159a8e1d-408b-4725-b19f-a152c6da5aea&chk=1	0%	Avira URL Cloud	safe
https://alfasense-sync.rutarget.ru/sync?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://t.me/v/?views=eyJjIjotMTA2ODMyMjQ2MSwicCI6MTQwNDYsInQiOjE3MjY4NzI1OTQsImgiOiIyOTM2YjBiNTEyNjQ3M2ZiYjkifQ	0%	Avira URL Cloud	safe
https://cdn4.cdn-telegram.org/file/MSpszLg7U46su23KMCgH8A98mn1j0p2-6wBkxrguTs8yEhVA-oaBykeBGHnbmDgMIfkKoJwjFD22bkLCfzLXC_nZkOpn_IvNZWrn4lKleup8F9gallYy7JfpvqYPTDBOfKk_NhPPOXvBte8UjBr8p6BNiekhw_wgidfU07LtxhQxhg-yfs8gODhc8KhI3B2tedOpJt4s3gCKcD8iwg0mvt8ypGShZW-IqnTMdSM6viCBG3d1niNKp-WAIbJqf_Nqt8CF3bJxTZyy07G2fU3oAZBZC0t3aiIqapI8FAZf_TqIt9ENGUPFJdG1adRWyp65Tdcs7sWd9lUAw3udNMgwxA.jpg	0%	Avira URL Cloud	safe
https://sync.programmatica.com/match/Alfasense?id=5322f90c-68ee-4d33-bc6f-6140cef1f878&chk=1	0%	Avira URL Cloud	safe
https://sync.opendsp.ru/match/alfasense?id=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://cs.alfasense.com/p?ssp=sp&uid=0200007FDAFBED662016D5010203BC90	0%	Avira URL Cloud	safe
http://ads.alfasense.net/adserver/www/delivery/asyncspc.php	0%	Avira URL Cloud	safe
https://px.adhigh.net/rtb/direct_banner?bid_id=400476d86e2e03&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB	0%	Avira URL Cloud	safe
https://cdn4.cdn-telegram.org/file/MRaZr89OCD5Qq9z9INWqGZsk0QSCS36uQSIbQJrq-YdzjVbiaMkbpeXSl1tcB8ZOu5KUs8WzGcfEXddbIVY78z_o8V0IxYibiI4BQsVCubSLMz_lP7idln0bE9i4LU0cr-irveRblfIb2UsB_mN-LI087zClUs3TsB41pQ-pQjAuG9DOmSM9WJDISYjfHg-P2VQOWNeOzARqN_JEa9FzI3lf0xVBuRxjgqwm2ZSf-JgZE5vXLDKKYw2nq41qEvh3ltHN9c_9kF9mUtaVqBhU01z7Ipud_44CPBNBH4BMYOWsZzxLMtqUmCN_GfmitAifPzbWiYtNo8envAOO5HmUUg.jpg	0%	Avira URL Cloud	safe
https://ads.digitalcaramel.com/js/xn--r1a.website.js?ts=1726872521522	0%	Avira URL Cloud	safe
https://v.alfasrv.com/stats/2x2.png?s=129242&e=r&t=p	0%	Avira URL Cloud	safe
https://match.ohmy.bid/cm?ssp=alfas&skip=5322f90c-68ee-4d33-bc6f-6140cef1f878&redirect_url=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dob%26id%3D%7Buid%7D	0%	Avira URL Cloud	safe
https://sape-sync.rutarget.ru/sync	0%	Avira URL Cloud	safe
https://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2	0%	Avira URL Cloud	safe
https://ctx.weborama.com/api/profile	0%	Avira URL Cloud	safe
https://cdn.alfasense.net/lib/alfadart.lib.min.js	0%	Avira URL Cloud	safe
https://px.adhigh.net/rtb/direct_banner?bid_id=22915062ea146a6&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB	0%	Avira URL Cloud	safe
https://s.alfasrv.com/events/1x1.png?s=129242&a=fallback&k1=1&k2=1&e=i&t=p&c=0	0%	Avira URL Cloud	safe
https://sync.bumlam.com/?src=asense&uid=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://px.adhigh.net/rtb/direct_banner?bid_id=4e4e00bb31f5f6&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1	0%	Avira URL Cloud	safe
https://sync.upravel.com/alfadart/sync?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://acint.net/rmatch?dp=14&euid=3B03420AD8FBED6625018A1D02213E86&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14	0%	Avira URL Cloud	safe
https://matchid.adfox.yandex.ru/getcookie	0%	Avira URL Cloud	safe
https://ads.betweendigital.com/adjson?t=prebid	0%	Avira URL Cloud	safe
https://yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2	0%	Avira URL Cloud	safe
https://oauth.telegram.org	0%	Avira URL Cloud	safe
https://cdn.alfasense.net/ext/weboctxrun.js	0%	Avira URL Cloud	safe
https://match.new-programmatic.com/userbind?src=alfasense&id=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://github.com/twbs/bootstrap/blob/master/LICENSE)	0%	Avira URL Cloud	safe
https://t.me/ogorodru/14046?embed=1&mode=tme&single=1	0%	Avira URL Cloud	safe
https://px.adhigh.net/p/cm/sape?u=0200007FDAFBED662016D5010203BC90	0%	Avira URL Cloud	safe
https://ssp.otm-r.com/adjson?tz=240&w=970&h=90&domain=xn--r1a.website&l=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru&s=38014&cur=RUB&bidid=27eb92cbf416fc&transactionid=&auctionid=&bidfloor=0	0%	Avira URL Cloud	safe
http://telegram.org/img/favicon.ico	0%	Avira URL Cloud	safe
https://sync.adspend.space/alfasense?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://yastatic.net/partner-code-bundles/1117086/40014e7ae9852a9faa7b.js	0%	Avira URL Cloud	safe
https://exchange.buzzoola.com/cookiesync/redirect?skip2=5322f90c-68ee-4d33-bc6f-6140cef1f878&redirect_url=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dbz%26uid%3D%24%7BUUID%7D	0%	Avira URL Cloud	safe
https://a.utraff.com/sync?ssp=716&skipme=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://telegram.org/css/bootstrap.min.css?3	0%	Avira URL Cloud	safe
http://telegram.org/img/emoji/40/F09F8CB8.png	0%	Avira URL Cloud	safe
https://osx.telegram.org/updates/site/artboard_2x.png);	0%	Avira URL Cloud	safe
https://gist.github.com/92d2ac1b31978642b6b6	0%	Avira URL Cloud	safe
http://telegram.org/img/emoji/40/F09F988A.png	0%	Avira URL Cloud	safe
https://www.acint.net/rmatch?r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D$%7BUSER_ID%7D&dp=185&tc=1&euid=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://oauth.tg.dev	0%	Avira URL Cloud	safe
https://cdn.alfasense.net/js/ad_13097.js	0%	Avira URL Cloud	safe
https://cs.alfasense.com/pixeljs	0%	Avira URL Cloud	safe
https://kimberlite.io/rtb/sync/segmento?u=JcwMBctHpuCG	0%	Avira URL Cloud	safe
https://telegram.org/img/tgme/pattern.svg?1	0%	Avira URL Cloud	safe
https://cstatic.weborama.com/bigsea/contextual/v1/weboctx.min.js	0%	Avira URL Cloud	safe
https://sync.opendsp.ru/match/alfasense?id=5322f90c-68ee-4d33-bc6f-6140cef1f878&chk=1	0%	Avira URL Cloud	safe
https://ssp.hybrid.ai/auction/prebid	0%	Avira URL Cloud	safe
http://telegram.org/img/emoji/40/F09F8CBA.png	0%	Avira URL Cloud	safe
https://cdn4.cdn-telegram.org/file/cgF49kKyIze3mCwToG0WWiz2_xQnBNuWR_rlBEEue-BbbFKp-D16ZJxo1gXjON9HRn26_5OxvuQ0WFHhgFELWpAcxOvTxjA1zbE0-2qIM4vxV7olCGiWbKtJ-RUiihXZS4WaX5t6YPs0IXwAkKLIQmwcg6JS9eLoznoFv1yiJD-T55rZblWRR7qJjs7l6ao5Ed-Mxx2FKa2UkrV0NmIno4sICuU56SIoF7acrMzRXeHiDhMUbYcalAGL80oBQDK_3kxaSwVb103nBTxKDGitTID0G1Qdu4-ny0bZooQZhTZroc1RNXyBBQ_G7l6RhN7iTi03qQqIooeMOPvON8UAMw.jpg	0%	Avira URL Cloud	safe
https://cs.alfasense.com/p?ssp=a2&uid=1df50709-a9fb-4e05-86f5-02be4cab6108	0%	Avira URL Cloud	safe
https://sync.upravel.com/alfadart/sync?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878&session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3huLS1yMWEud2Vic2l0ZS8iXX19	0%	Avira URL Cloud	safe
https://cs.alfasense.com/p?ssp=st&id=Zu372NYn4og	0%	Avira URL Cloud	safe
https://cs.alfasense.com/p?ssp=ot&id=NjZlZGZiZTEwMTIxZTQwNw%3D%3D	0%	Avira URL Cloud	safe
https://cdn4.cdn-telegram.org/file/vJ1qeXNLCjuVDEIRhU0Uc51fVywA0h7ZJSrOuLx4ENx93PE6tFR-ImbH6R6TH2Hq6nolVRWos6mpdVpSPGzX6p8Q0j_0ODtSqtNpysuhrykAfSdDnQ8DgGgskor3Fu8WtaJQxQri8j-hK-g2OOleHoS4KD1B0YhItDZRP0_vlqps17Ld32FQSc-vJxYs9CL8o_6Sc2cXvhUbtn_7wmvnKnWc3Ob9fJcHtXZftEkAVq7aPN2oFh3v2moUXctch7gw9VdyvDNMhGhuxQS8ZIXFjLAIuzgQpvq6SlitGvbib6Rw1hWW_W2ZTDtWGJjMPaOwDaNsLxFvXuGHDGd4VBasvQ.jpg	0%	Avira URL Cloud	safe
http://ads.alfasense.net/adserver/www/images/93e6032137695635299ea12513020a22.jpg	0%	Avira URL Cloud	safe
http://telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2	0%	Avira URL Cloud	safe
https://acint.net/cmatch/?dp=14&pi=1647232&skip_it=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://ads.betweendigital.com/sspmatch	0%	Avira URL Cloud	safe
https://cdn4.cdn-telegram.org/file/BDoevstmwc-LH-sbj-OyBhlAr9f_8REM5GylyjUbzp0C14JNGE0luefvosada74HY1heslHYjIFTJqYowqHZW2U0Ud55ISGdzPYMuUbsvK0U7jqDYY-QLs3IPVb2zbi0EMPrw82DmDiXtGfIl_nXcDU-a02mI72VHUBwEsB8wPyHqiKczgkPdhtL1n1sOO-1c3RWSQMS52k5nV_uHDjd1h8NFSl9LNRD-BGQdwhHx5IRdErI4RlKKXdjeDtsd-MzL846KS9mGB6U7PDlMoKR93EFw9CuEkhZl3NsVJvFI6ObKpJ6EdDOS9ZZBfCfFHU7de_YfmsbShE42TJI1yJqEA.jpg	0%	Avira URL Cloud	safe
https://yandex.ru/clck/click	0%	Avira URL Cloud	safe
https://const.uno/id.json?p=5	0%	Avira URL Cloud	safe
https://cdn4.cdn-telegram.org/file/uiPk3Z5ix6sgFrblrDtl45mDlgniH66ntxVBMte3HxcZ5SpLdIuud7S2vkgnyF343Sqy2_YNmNvuobjq3MZ9txmE1ATrRYNkCYRnlds8uTp-FeBCf_HLUp3uq2uV23I_spdjzyXYn0xlbO5jIidI1gArQadXXtB2wcvV615k9n07gC9_YNwmJZYJ4m8eMIIrvLWpuiNpzwACEK8K0f1g3H1oX3bRf3Z5WfRb4wySb4QeL6uWQOKkxZp4v0rp4eGJpR31QJqi7QIqZ9iCuxc7An3-U9t84qkxi1hDBOAHUxbfLtO8DezjrktvyMUA0M4A5BoSjekXVL9IW9pRRAkpZQ.jpg	0%	Avira URL Cloud	safe
https://dmp.sbermarketing.ru/?dmpkit_cid=9064fc6c-76fe-4a6d-aea6-92ef3f343257&dmpkit_evid=8vhicaia6d0gnvnhrxxom892oalkpb77&user_prg=NWFmOTc5NmUyOTU5MmY5Nw	0%	Avira URL Cloud	safe
https://mc.acint.net/rmatch?dp=17&euid=ujPJCLnjOrl.AikABlGSEZ_GxQ&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D17	0%	Avira URL Cloud	safe
https://cm.a.mts.ru/cm/tech?flowId=c128a652-29c1-46c5-aece-22212bde700f&measurement_id=MTS_DSP_web&dsp_uid=2d186298-c967-43b7-9ce5-9f669932114c&redirect_return_url=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9503528%26dest%3Dhttps%253A%252F%252Fvma.mts.ru%252Fem%253Fnext%253D59%2526em%253D2%2526ssp%253Daidata%2526id%253D%2524UID	0%	Avira URL Cloud	safe
https://1a499899-1e99-4cfb-8b72-6faaa7f572f3.sync.upravel.com/alfadart/sync?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878&ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3huLS1yMWEud2Vic2l0ZS8iLCJodHRwOi8veG4tLXIxYS53ZWJzaXRlLyJdfX0	0%	Avira URL Cloud	safe
https://rtb.dynotech.io/als/sync/?user_id=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
http://telegram.org/img/tgme/pattern.svg?1	0%	Avira URL Cloud	safe
https://yastatic.net/partner-code-bundles/1117086/ee55314d29f5e472edba.js	0%	Avira URL Cloud	safe
https://ev.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=8918732&bn=8918732&skip=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://www.acint.net/rmatch?dp=185&euid=5322f90c-68ee-4d33-bc6f-6140cef1f878&r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D%24%7BUSER_ID%7D	0%	Avira URL Cloud	safe
https://yastatic.net/safeframe-bundles/0.83/host.js	0%	Avira URL Cloud	safe
https://ads.betweendigital.com/adjson?t=adfox	0%	Avira URL Cloud	safe
https://yandex.ru/ads/system/context.js	0%	Avira URL Cloud	safe
https://ssp.otm-r.com/adjson?tz=240&w=970&h=90&domain=xn--r1a.website&l=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru&s=38014&cur=RUB&bidid=2001579a0ee1035&transactionid=&auctionid=&bidfloor=0	0%	Avira URL Cloud	safe
https://kimberlite.io/rtb/sync/mts?u=2d186298-c967-43b7-9ce5-9f669932114c	0%	Avira URL Cloud	safe
https://ssp.al-adtech.com/api/sync/alfadart?skipme=5322f90c-68ee-4d33-bc6f-6140cef1f878	0%	Avira URL Cloud	safe
https://telegram.org/css/telegram.css?240	0%	Avira URL Cloud	safe
http://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2	0%	Avira URL Cloud	safe
https://yastatic.net/partner-code-bundles/1117086/f7c4024c86a402702d20.js	0%	Avira URL Cloud	safe
https://px.adhigh.net/rtb/direct_banner?bid_id=4e4e00bb31f5f6&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
ads.digitalcaramel.com	135.181.113.151	true	false	unknown
telegram.org	149.154.167.99	true	false	unknown
s.suprion.ru	213.248.44.211	true	false	unknown
rtb.segmel.io	194.67.71.75	true	false	unknown
cs1755.wpc.deltacdn.net	192.229.202.216	true	false	unknown
ads.alfasense.net	136.144.31.29	true	false	unknown
sync.gonet-ads.com	23.109.14.90	true	false	unknown
x01.aidata.io	89.108.119.28	true	false	unknown
a.adiam.tech	188.114.97.3	true	false	unknown
a.videohead.tech	188.114.97.3	true	false	unknown
sync.programmatica.com	85.198.116.135	true	false	unknown
balance.segmento.ru	45.9.24.193	true	false	unknown
2348964281726872543783.cm.a.mts.ru	185.65.149.228	true	false	unknown
www.google.com	142.250.185.68	true	false	unknown
cs.alfasense.com	23.111.100.20	true	false	unknown
p-vip.al-adtech.com	45.139.25.125	true	false	unknown
oauth.tg.dev	149.154.167.99	true	false	unknown
tttttt.me	188.114.97.3	true	false	unknown
matchid-production.adfox.yandex.ru	93.158.134.118	true	false	unknown
s.alfasrv.com	130.193.42.23	true	false	unknown
acint.net	142.132.138.214	true	false	unknown
cs.agency2.ru	23.105.255.196	true	false	unknown
r.mail.ru	95.163.41.56	true	false	unknown
ads.adfox.ru	77.88.21.179	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
a.utraff.com	104.26.6.189	true	false	unknown
avatars.mds.yandex.net	87.250.247.183	true	false	unknown
cl-541e19d9.mf.cdnmgf.megafon.ru	5.101.37.37	true	false	unknown
sync.adspend.space	172.67.69.82	true	false	unknown
rtb.dynotech.io	91.206.15.115	true	false	unknown
xn--r1a.website	95.216.186.40	true	false	unknown
ad.adriver.ru	195.209.109.15	true	false	unknown
v.alfasrv.com	84.201.179.252	true	false	unknown
www.acint.net	142.132.138.212	true	false	unknown
ssp.hybrid.ai	37.230.131.17	true	false	unknown
sync.opendsp.ru	81.163.20.122	true	false	unknown
cm.a.mts.ru	185.65.149.228	true	false	unknown
mc.yandex.ru	77.88.21.119	true	false	unknown
match.qtarget.tech	95.163.92.180	true	false	unknown
kimberlite.io	217.199.220.44	true	false	unknown
user-data-eu.bidswitch.net	35.214.136.108	true	false	unknown
pb.adriver.ru	195.209.109.24	true	false	unknown
dx.frontend.weborama.com	34.111.205.194	true	false	unknown
match.ohmy.bid	167.235.14.51	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
sm.rtb.mts.ru	217.66.147.39	true	false	unknown
ssp-rtb.sape.ru	193.3.184.222	true	false	unknown
const.uno	95.163.84.7	true	false	unknown
sync.bumlam.com	31.172.81.146	true	false	unknown
cdn4.cdn-telegram.org	34.111.35.152	true	false	unknown
sync.rambler.ru	87.242.127.163	true	false	unknown
yastatic.net	178.154.131.217	true	false	unknown
ssp.ads.betweendigital.com	188.42.34.65	true	false	unknown
yandex.ru	77.88.55.88	true	false	unknown
ssp.bidvol.com	65.109.23.99	true	false	unknown
s.uuidksinc.net	31.220.27.135	true	false	unknown
dmp.sbermarketing.ru	37.18.110.198	true	false	unknown
t.me	149.154.167.99	true	false	unknown
ev.adriver.ru	195.209.109.27	true	false	unknown
pbs.alfasense.com	23.111.112.116	true	false	unknown
vma.mts.ru	217.66.147.39	true	false	unknown
match.new-programmatic.com	217.65.2.150	true	false	unknown
ad-ru.p.otm-r.com	194.55.244.177	true	false	unknown
sync.upravel.com	unknown	unknown	false	unknown
mc.acint.net	unknown	unknown	false	unknown
1a499899-1e99-4cfb-8b72-6faaa7f572f3.sync.upravel.com	unknown	unknown	false	unknown
ad.mail.ru	unknown	unknown	false	unknown
ssp.otm-r.com	unknown	unknown	false	unknown
alfasense-sync.rutarget.ru	unknown	unknown	false	unknown
px.adhigh.net	unknown	unknown	false	unknown
exchange.buzzoola.com	unknown	unknown	false	unknown
solta-sync.rutarget.ru	unknown	unknown	false	unknown
sape-sync.rutarget.ru	unknown	unknown	false	unknown
matchid.adfox.yandex.ru	unknown	unknown	false	unknown
cdn.alfasense.net	unknown	unknown	false	unknown
sync.dmp.otm-r.com	unknown	unknown	false	unknown
ads.betweendigital.com	unknown	unknown	false	unknown
x.bidswitch.net	unknown	unknown	false	unknown
yhb.p.otm-r.com	unknown	unknown	false	unknown
cstatic.weborama.com	unknown	unknown	false	unknown
ssp.al-adtech.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://v.alfasrv.com/stats/2x2.png?s=129242&a=fallback&k1=1&k2=1&e=i&t=p&c=0	false	Avira URL Cloud: safe	unknown
https://cdn4.cdn-telegram.org/file/ELzs1UgArxHStzcD91QUa9uaL2ddyRSFVOb32HZ5Q7SZLZI9SN8-CvHqkdeSTXz-1FJOHYLyaLzDpUXHrn-3RXYO_4I8oBD9yzwbCHmFeXODLfgUkIjYaugi2NfHyyx86_OZkKL2-vj668ki5vH1mtUCpu871TMMon8057k3jLN1Ba5qNzugM2DrntzGDSlJ045JcFoOh8aLOX3xkDOc0zE2t5O1lQOe8IC-8rtsvjePL8Yyh3HfF-P4WjILj0PfQgv1i7-JHb-jW_hkPmRAB42Uq2-m9whBNQYgypUynBNyLqkApbiUN7qdshWXE3jjbrm5i1asFn_Nd1GtMbAZpA.jpg	false	Avira URL Cloud: safe	unknown
https://s.uuidksinc.net/match/1215/?remote_uid=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://a.utraff.com/sync?ssp=3368	false	Avira URL Cloud: safe	unknown
https://cdn.alfasense.net/lib/prebid.js	false	Avira URL Cloud: safe	unknown
https://ads.betweendigital.com/match?bidder_id=4098&external_user_id=NGRkZDA3N2FiZTI0ZmI4ZA	false	Avira URL Cloud: safe	unknown
https://cs.alfasense.com/p?ssp=up&id=1a499899-1e99-4cfb-8b72-6faaa7f572f3	false	Avira URL Cloud: safe	unknown
http://ads.alfasense.net/adserver/www/delivery/asyncjs.php	false	Avira URL Cloud: safe	unknown
https://cs.alfasense.com/p?ssp=kd&uid=OBoQhsBgeRgmqPkpWuU5	false	Avira URL Cloud: safe	unknown
http://ads.alfasense.net/adserver/www/delivery/asyncspc.php?zones=8&prefix=revive-0-&xcampaigns=%3A%3Abetween%3A%3Agetintent%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3Adefault-stub%3A%3Akimberlite%3A%3A&xsite=13097&xsitename=xn--r1a.website&loc=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru	false	Avira URL Cloud: safe	unknown
https://alfasense-sync.rutarget.ru/sync?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://sync.gonet-ads.com/match/videohead?id=159a8e1d-408b-4725-b19f-a152c6da5aea&chk=1	false	Avira URL Cloud: safe	unknown
https://sync.bumlam.com/?src=asense&s_data=CAIQARja97e3BmIkNTMyMmY5MGMtNjhlZS00ZDMzLWJjNmYtNjE0MGNlZjFmODc4ogEQhcaPWneiEe-G4AAlkMBkfA**	false	Avira URL Cloud: safe	unknown
https://sync.opendsp.ru/match/alfasense?id=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://sync.programmatica.com/match/Alfasense?id=5322f90c-68ee-4d33-bc6f-6140cef1f878&chk=1	false	Avira URL Cloud: safe	unknown
https://t.me/v/?views=eyJjIjotMTA2ODMyMjQ2MSwicCI6MTQwNDYsInQiOjE3MjY4NzI1OTQsImgiOiIyOTM2YjBiNTEyNjQ3M2ZiYjkifQ	false	Avira URL Cloud: safe	unknown
https://cs.alfasense.com/p?ssp=sp&uid=0200007FDAFBED662016D5010203BC90	false	Avira URL Cloud: safe	unknown
https://cdn4.cdn-telegram.org/file/MSpszLg7U46su23KMCgH8A98mn1j0p2-6wBkxrguTs8yEhVA-oaBykeBGHnbmDgMIfkKoJwjFD22bkLCfzLXC_nZkOpn_IvNZWrn4lKleup8F9gallYy7JfpvqYPTDBOfKk_NhPPOXvBte8UjBr8p6BNiekhw_wgidfU07LtxhQxhg-yfs8gODhc8KhI3B2tedOpJt4s3gCKcD8iwg0mvt8ypGShZW-IqnTMdSM6viCBG3d1niNKp-WAIbJqf_Nqt8CF3bJxTZyy07G2fU3oAZBZC0t3aiIqapI8FAZf_TqIt9ENGUPFJdG1adRWyp65Tdcs7sWd9lUAw3udNMgwxA.jpg	false	Avira URL Cloud: safe	unknown
https://match.ohmy.bid/cm?ssp=alfas&skip=5322f90c-68ee-4d33-bc6f-6140cef1f878&redirect_url=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dob%26id%3D%7Buid%7D	false	Avira URL Cloud: safe	unknown
https://ads.digitalcaramel.com/js/xn--r1a.website.js?ts=1726872521522	false	Avira URL Cloud: safe	unknown
https://v.alfasrv.com/stats/2x2.png?s=129242&e=r&t=p	false	Avira URL Cloud: safe	unknown
https://px.adhigh.net/rtb/direct_banner?bid_id=400476d86e2e03&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB	false	Avira URL Cloud: safe	unknown
https://sape-sync.rutarget.ru/sync	false	Avira URL Cloud: safe	unknown
https://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2	false	Avira URL Cloud: safe	unknown
https://cdn4.cdn-telegram.org/file/MRaZr89OCD5Qq9z9INWqGZsk0QSCS36uQSIbQJrq-YdzjVbiaMkbpeXSl1tcB8ZOu5KUs8WzGcfEXddbIVY78z_o8V0IxYibiI4BQsVCubSLMz_lP7idln0bE9i4LU0cr-irveRblfIb2UsB_mN-LI087zClUs3TsB41pQ-pQjAuG9DOmSM9WJDISYjfHg-P2VQOWNeOzARqN_JEa9FzI3lf0xVBuRxjgqwm2ZSf-JgZE5vXLDKKYw2nq41qEvh3ltHN9c_9kF9mUtaVqBhU01z7Ipud_44CPBNBH4BMYOWsZzxLMtqUmCN_GfmitAifPzbWiYtNo8envAOO5HmUUg.jpg	false	Avira URL Cloud: safe	unknown
https://cdn.alfasense.net/lib/alfadart.lib.min.js	false	Avira URL Cloud: safe	unknown
https://px.adhigh.net/rtb/direct_banner?bid_id=4e4e00bb31f5f6&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1	false	Avira URL Cloud: safe	unknown
https://s.alfasrv.com/events/1x1.png?s=129242&a=fallback&k1=1&k2=1&e=i&t=p&c=0	false	Avira URL Cloud: safe	unknown
https://sync.bumlam.com/?src=asense&uid=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://acint.net/rmatch?dp=14&euid=3B03420AD8FBED6625018A1D02213E86&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14	false	Avira URL Cloud: safe	unknown
https://sync.upravel.com/alfadart/sync?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://px.adhigh.net/rtb/direct_banner?bid_id=22915062ea146a6&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB	false	Avira URL Cloud: safe	unknown
https://matchid.adfox.yandex.ru/getcookie	false	Avira URL Cloud: safe	unknown
https://ads.betweendigital.com/adjson?t=prebid	false	Avira URL Cloud: safe	unknown
https://yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2	false	Avira URL Cloud: safe	unknown
https://cdn.alfasense.net/ext/weboctxrun.js	false	Avira URL Cloud: safe	unknown
https://px.adhigh.net/p/cm/sape?u=0200007FDAFBED662016D5010203BC90	false	Avira URL Cloud: safe	unknown
https://match.new-programmatic.com/userbind?src=alfasense&id=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://t.me/ogorodru/14046?embed=1&mode=tme&single=1	false	Avira URL Cloud: safe	unknown
https://ssp.otm-r.com/adjson?tz=240&w=970&h=90&domain=xn--r1a.website&l=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru&s=38014&cur=RUB&bidid=27eb92cbf416fc&transactionid=&auctionid=&bidfloor=0	false	Avira URL Cloud: safe	unknown
http://telegram.org/img/favicon.ico	false	Avira URL Cloud: safe	unknown
https://sync.adspend.space/alfasense?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://exchange.buzzoola.com/cookiesync/redirect?skip2=5322f90c-68ee-4d33-bc6f-6140cef1f878&redirect_url=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dbz%26uid%3D%24%7BUUID%7D	false	Avira URL Cloud: safe	unknown
https://yastatic.net/partner-code-bundles/1117086/40014e7ae9852a9faa7b.js	false	Avira URL Cloud: safe	unknown
https://a.utraff.com/sync?ssp=716&skipme=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
http://telegram.org/img/emoji/40/F09F988A.png	false	Avira URL Cloud: safe	unknown
https://telegram.org/css/bootstrap.min.css?3	false	Avira URL Cloud: safe	unknown
http://telegram.org/img/emoji/40/F09F8CB8.png	false	Avira URL Cloud: safe	unknown
https://www.acint.net/rmatch?r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D$%7BUSER_ID%7D&dp=185&tc=1&euid=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://cdn.alfasense.net/js/ad_13097.js	false	Avira URL Cloud: safe	unknown
https://cs.alfasense.com/pixeljs	false	Avira URL Cloud: safe	unknown
https://tttttt.me/ogorodru/14044?single	false		unknown
https://telegram.org/img/tgme/pattern.svg?1	false	Avira URL Cloud: safe	unknown
http://telegram.org/img/emoji/40/F09F8CBA.png	false	Avira URL Cloud: safe	unknown
https://kimberlite.io/rtb/sync/segmento?u=JcwMBctHpuCG	false	Avira URL Cloud: safe	unknown
https://cdn4.cdn-telegram.org/file/cgF49kKyIze3mCwToG0WWiz2_xQnBNuWR_rlBEEue-BbbFKp-D16ZJxo1gXjON9HRn26_5OxvuQ0WFHhgFELWpAcxOvTxjA1zbE0-2qIM4vxV7olCGiWbKtJ-RUiihXZS4WaX5t6YPs0IXwAkKLIQmwcg6JS9eLoznoFv1yiJD-T55rZblWRR7qJjs7l6ao5Ed-Mxx2FKa2UkrV0NmIno4sICuU56SIoF7acrMzRXeHiDhMUbYcalAGL80oBQDK_3kxaSwVb103nBTxKDGitTID0G1Qdu4-ny0bZooQZhTZroc1RNXyBBQ_G7l6RhN7iTi03qQqIooeMOPvON8UAMw.jpg	false	Avira URL Cloud: safe	unknown
https://cstatic.weborama.com/bigsea/contextual/v1/weboctx.min.js	false	Avira URL Cloud: safe	unknown
https://sync.opendsp.ru/match/alfasense?id=5322f90c-68ee-4d33-bc6f-6140cef1f878&chk=1	false	Avira URL Cloud: safe	unknown
https://ssp.hybrid.ai/auction/prebid	false	Avira URL Cloud: safe	unknown
https://sync.upravel.com/alfadart/sync?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878&session_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3huLS1yMWEud2Vic2l0ZS8iXX19	false	Avira URL Cloud: safe	unknown
https://cs.alfasense.com/p?ssp=st&id=Zu372NYn4og	false	Avira URL Cloud: safe	unknown
https://cs.alfasense.com/p?ssp=a2&uid=1df50709-a9fb-4e05-86f5-02be4cab6108	false	Avira URL Cloud: safe	unknown
https://cs.alfasense.com/p?ssp=ot&id=NjZlZGZiZTEwMTIxZTQwNw%3D%3D	false	Avira URL Cloud: safe	unknown
https://cdn4.cdn-telegram.org/file/vJ1qeXNLCjuVDEIRhU0Uc51fVywA0h7ZJSrOuLx4ENx93PE6tFR-ImbH6R6TH2Hq6nolVRWos6mpdVpSPGzX6p8Q0j_0ODtSqtNpysuhrykAfSdDnQ8DgGgskor3Fu8WtaJQxQri8j-hK-g2OOleHoS4KD1B0YhItDZRP0_vlqps17Ld32FQSc-vJxYs9CL8o_6Sc2cXvhUbtn_7wmvnKnWc3Ob9fJcHtXZftEkAVq7aPN2oFh3v2moUXctch7gw9VdyvDNMhGhuxQS8ZIXFjLAIuzgQpvq6SlitGvbib6Rw1hWW_W2ZTDtWGJjMPaOwDaNsLxFvXuGHDGd4VBasvQ.jpg	false	Avira URL Cloud: safe	unknown
http://ads.alfasense.net/adserver/www/images/93e6032137695635299ea12513020a22.jpg	false	Avira URL Cloud: safe	unknown
http://telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2	false	Avira URL Cloud: safe	unknown
https://acint.net/cmatch/?dp=14&pi=1647232&skip_it=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://cdn4.cdn-telegram.org/file/BDoevstmwc-LH-sbj-OyBhlAr9f_8REM5GylyjUbzp0C14JNGE0luefvosada74HY1heslHYjIFTJqYowqHZW2U0Ud55ISGdzPYMuUbsvK0U7jqDYY-QLs3IPVb2zbi0EMPrw82DmDiXtGfIl_nXcDU-a02mI72VHUBwEsB8wPyHqiKczgkPdhtL1n1sOO-1c3RWSQMS52k5nV_uHDjd1h8NFSl9LNRD-BGQdwhHx5IRdErI4RlKKXdjeDtsd-MzL846KS9mGB6U7PDlMoKR93EFw9CuEkhZl3NsVJvFI6ObKpJ6EdDOS9ZZBfCfFHU7de_YfmsbShE42TJI1yJqEA.jpg	false	Avira URL Cloud: safe	unknown
https://yandex.ru/clck/click	false	Avira URL Cloud: safe	unknown
https://ads.betweendigital.com/sspmatch	false	Avira URL Cloud: safe	unknown
https://const.uno/id.json?p=5	false	Avira URL Cloud: safe	unknown
https://cdn4.cdn-telegram.org/file/uiPk3Z5ix6sgFrblrDtl45mDlgniH66ntxVBMte3HxcZ5SpLdIuud7S2vkgnyF343Sqy2_YNmNvuobjq3MZ9txmE1ATrRYNkCYRnlds8uTp-FeBCf_HLUp3uq2uV23I_spdjzyXYn0xlbO5jIidI1gArQadXXtB2wcvV615k9n07gC9_YNwmJZYJ4m8eMIIrvLWpuiNpzwACEK8K0f1g3H1oX3bRf3Z5WfRb4wySb4QeL6uWQOKkxZp4v0rp4eGJpR31QJqi7QIqZ9iCuxc7An3-U9t84qkxi1hDBOAHUxbfLtO8DezjrktvyMUA0M4A5BoSjekXVL9IW9pRRAkpZQ.jpg	false	Avira URL Cloud: safe	unknown
https://mc.acint.net/rmatch?dp=17&euid=ujPJCLnjOrl.AikABlGSEZ_GxQ&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D17	false	Avira URL Cloud: safe	unknown
https://dmp.sbermarketing.ru/?dmpkit_cid=9064fc6c-76fe-4a6d-aea6-92ef3f343257&dmpkit_evid=8vhicaia6d0gnvnhrxxom892oalkpb77&user_prg=NWFmOTc5NmUyOTU5MmY5Nw	false	Avira URL Cloud: safe	unknown
https://rtb.dynotech.io/als/sync/?user_id=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://1a499899-1e99-4cfb-8b72-6faaa7f572f3.sync.upravel.com/alfadart/sync?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878&ud_tpt=eyJoZWFkZXJzIjp7InJlZmVyZXIiOlsiaHR0cDovL3huLS1yMWEud2Vic2l0ZS8iLCJodHRwOi8veG4tLXIxYS53ZWJzaXRlLyJdfX0	false	Avira URL Cloud: safe	unknown
https://cm.a.mts.ru/cm/tech?flowId=c128a652-29c1-46c5-aece-22212bde700f&measurement_id=MTS_DSP_web&dsp_uid=2d186298-c967-43b7-9ce5-9f669932114c&redirect_return_url=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9503528%26dest%3Dhttps%253A%252F%252Fvma.mts.ru%252Fem%253Fnext%253D59%2526em%253D2%2526ssp%253Daidata%2526id%253D%2524UID	false	Avira URL Cloud: safe	unknown
http://telegram.org/img/tgme/pattern.svg?1	false	Avira URL Cloud: safe	unknown
https://ev.adriver.ru/cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=8918732&bn=8918732&skip=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://yastatic.net/partner-code-bundles/1117086/ee55314d29f5e472edba.js	false	Avira URL Cloud: safe	unknown
https://ads.betweendigital.com/adjson?t=adfox	false	Avira URL Cloud: safe	unknown
https://yandex.ru/ads/system/context.js	false	Avira URL Cloud: safe	unknown
https://yastatic.net/safeframe-bundles/0.83/host.js	false	Avira URL Cloud: safe	unknown
https://www.acint.net/rmatch?dp=185&euid=5322f90c-68ee-4d33-bc6f-6140cef1f878&r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D%24%7BUSER_ID%7D	false	Avira URL Cloud: safe	unknown
https://ssp.al-adtech.com/api/sync/alfadart?skipme=5322f90c-68ee-4d33-bc6f-6140cef1f878	false	Avira URL Cloud: safe	unknown
https://ssp.otm-r.com/adjson?tz=240&w=970&h=90&domain=xn--r1a.website&l=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru&s=38014&cur=RUB&bidid=2001579a0ee1035&transactionid=&auctionid=&bidfloor=0	false	Avira URL Cloud: safe	unknown
https://kimberlite.io/rtb/sync/mts?u=2d186298-c967-43b7-9ce5-9f669932114c	false	Avira URL Cloud: safe	unknown
https://telegram.org/css/telegram.css?240	false	Avira URL Cloud: safe	unknown
https://px.adhigh.net/rtb/direct_banner?bid_id=4e4e00bb31f5f6&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB	false	Avira URL Cloud: safe	unknown
https://yastatic.net/partner-code-bundles/1117086/f7c4024c86a402702d20.js	false	Avira URL Cloud: safe	unknown
http://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://osx.telegram.org/updates/site/artboard.png)	chromecache_321.2.dr	false	Avira URL Cloud: safe	unknown
http://getbootstrap.com)	chromecache_255.2.dr	false	Avira URL Cloud: safe	unknown
http://ads.alfasense.net/adserver/www/delivery/asyncspc.php	chromecache_200.2.dr, chromecache_330.2.dr	false	Avira URL Cloud: safe	unknown
https://ctx.weborama.com/api/profile	chromecache_244.2.dr, chromecache_306.2.dr	false	Avira URL Cloud: safe	unknown
https://oauth.telegram.org	chromecache_209.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_255.2.dr	false	Avira URL Cloud: safe	unknown
https://osx.telegram.org/updates/site/artboard_2x.png);	chromecache_321.2.dr	false	Avira URL Cloud: safe	unknown
https://gist.github.com/92d2ac1b31978642b6b6	chromecache_255.2.dr	false	Avira URL Cloud: safe	unknown
https://oauth.tg.dev	chromecache_209.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
193.3.184.140	unknown	Denmark	2107	ARNES-NETAcademicandResearchNetworkofSloveniaSI	false
45.139.25.125	p-vip.al-adtech.com	Russian Federation	47203	KTKRU-ASRU	false
217.199.220.44	kimberlite.io	Russian Federation	31430	TEL-NET-ASRU	false
193.232.150.148	unknown	Russian Federation	48061	UMA-TECH-ASRU	false
142.132.138.212	www.acint.net	Canada	22686	UNIVERSITYOFWINNIPEG-ASNCA	false
194.67.71.75	rtb.segmel.io	Russian Federation	197695	AS-REGRU	false
192.229.202.216	cs1755.wpc.deltacdn.net	United States	15133	EDGECASTUS	false
93.158.134.118	matchid-production.adfox.yandex.ru	Russian Federation	13238	YANDEXRU	false
34.111.205.194	dx.frontend.weborama.com	United States	15169	GOOGLEUS	false
31.220.27.135	s.uuidksinc.net	Netherlands	39572	ADVANCEDHOSTERS-ASNL	false
213.248.44.211	s.suprion.ru	Russian Federation	12695	DINET-ASRU	false
193.3.184.222	ssp-rtb.sape.ru	Denmark	2107	ARNES-NETAcademicandResearchNetworkofSloveniaSI	false
195.201.194.16	unknown	Germany	24940	HETZNER-ASDE	false
135.181.113.151	ads.digitalcaramel.com	Germany	24940	HETZNER-ASDE	false
194.55.244.177	ad-ru.p.otm-r.com	unknown	34959	KVIKTEL_LLCRU	false
195.209.109.13	unknown	Russian Federation	52007	ADRIVER-ASRU	false
23.105.255.196	cs.agency2.ru	Russian Federation	7979	SERVERS-COMUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
95.163.41.56	r.mail.ru	Russian Federation	21051	NIVAL-ASRU	false
188.42.34.65	ssp.ads.betweendigital.com	Luxembourg	7979	SERVERS-COMUS	false
195.209.109.15	ad.adriver.ru	Russian Federation	52007	ADRIVER-ASRU	false
95.163.84.7	const.uno	Russian Federation	12695	DINET-ASRU	false
23.111.100.20	cs.alfasense.com	Russian Federation	7979	SERVERS-COMUS	false
142.132.138.214	acint.net	Canada	22686	UNIVERSITYOFWINNIPEG-ASNCA	false
87.250.247.183	avatars.mds.yandex.net	Russian Federation	13238	YANDEXRU	false
138.201.65.75	unknown	Germany	24940	HETZNER-ASDE	false
23.109.14.90	sync.gonet-ads.com	Netherlands	7979	SERVERS-COMUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	a.adiam.tech	European Union	13335	CLOUDFLARENETUS	false
167.235.9.235	unknown	United States	3525	ALBERTSONSUS	false
172.67.69.82	sync.adspend.space	United States	13335	CLOUDFLARENETUS	false
195.201.193.156	unknown	Germany	24940	HETZNER-ASDE	false
84.201.179.252	v.alfasrv.com	Russian Federation	200350	YANDEXCLOUDRU	false
217.66.147.39	sm.rtb.mts.ru	Russian Federation	29209	SPBMTS-ASMalayaMonetnayaStreet2-ARU	false
77.88.21.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
95.163.92.180	match.qtarget.tech	Russian Federation	12695	DINET-ASRU	false
77.88.55.88	yandex.ru	Russian Federation	13238	YANDEXRU	false
91.206.15.115	rtb.dynotech.io	Russian Federation	49505	SELECTELRU	false
45.9.24.193	balance.segmento.ru	Russian Federation	210053	R5IT-ASRU	false
217.65.2.150	match.new-programmatic.com	Russian Federation	3175	CITYTELECOM-MSKRU	false
167.235.14.51	match.ohmy.bid	United States	3525	ALBERTSONSUS	false
195.209.109.24	pb.adriver.ru	Russian Federation	52007	ADRIVER-ASRU	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
95.216.186.40	xn--r1a.website	Germany	24940	HETZNER-ASDE	false
34.111.35.152	cdn4.cdn-telegram.org	United States	15169	GOOGLEUS	false
5.255.255.77	unknown	Russian Federation	13238	YANDEXRU	false
195.209.109.27	ev.adriver.ru	Russian Federation	52007	ADRIVER-ASRU	false
167.235.7.148	unknown	United States	3525	ALBERTSONSUS	false
87.242.127.163	sync.rambler.ru	Russian Federation	25532	MASTERHOST-ASMoscowRussiaRU	false
178.154.131.217	yastatic.net	Russian Federation	13238	YANDEXRU	false
149.154.167.99	telegram.org	United Kingdom	62041	TELEGRAMRU	false
178.154.131.215	unknown	Russian Federation	13238	YANDEXRU	false
81.163.20.122	sync.opendsp.ru	Russian Federation	58303	IR-RASANAPISHTAZIR	false
138.201.65.66	unknown	Germany	24940	HETZNER-ASDE	false
31.172.81.146	sync.bumlam.com	Germany	44066	DE-FIRSTCOLOwwwfirst-colonetDE	false
188.42.196.115	unknown	Luxembourg	7979	SERVERS-COMUS	false
104.26.6.189	a.utraff.com	United States	13335	CLOUDFLARENETUS	false
37.230.131.17	ssp.hybrid.ai	Netherlands	9009	M247GB	false
89.108.119.28	x01.aidata.io	Russian Federation	43146	AGAVA3RU	false
136.144.31.29	ads.alfasense.net	Netherlands	52000	MIRHOSTINGRU	false
5.101.37.37	cl-541e19d9.mf.cdnmgf.megafon.ru	Russian Federation	49614	VIARTCOMRU	false
195.201.108.196	unknown	Germany	24940	HETZNER-ASDE	false
23.111.112.116	pbs.alfasense.com	Russian Federation	7979	SERVERS-COMUS	false
185.65.149.228	2348964281726872543783.cm.a.mts.ru	Russian Federation	197068	QRATORRU	false
85.198.116.135	sync.programmatica.com	Russian Federation	43901	UNITLINE-SAM-ASRU	false
77.88.21.179	ads.adfox.ru	Russian Federation	13238	YANDEXRU	false
130.193.42.23	s.alfasrv.com	Russian Federation	200350	YANDEXCLOUDRU	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
37.18.110.198	dmp.sbermarketing.ru	Netherlands	204291	FAVORITBK-ASRU	false
65.109.23.99	ssp.bidvol.com	United States	11022	ALABANZA-BALTUS	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1514812
Start date and time:	2024-09-21 00:47:41 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 34s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://xn--r1a.website/s/ogorodru
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@28/232@202/72
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://tttttt.me/ogorodru/14045?single Browse: https://tttttt.me/ogorodru/14044?single Browse: https://tttttt.me/ogorodru/14046?single

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.185.142, 74.125.206.84, 34.104.35.123, 142.250.185.234, 142.250.185.106, 142.250.185.74, 216.58.212.170, 172.217.16.138, 142.250.186.138, 142.250.185.170, 172.217.16.202, 142.250.186.42, 216.58.206.74, 142.250.184.234, 142.250.185.202, 142.250.186.74, 172.217.18.10, 142.250.185.138, 142.250.186.106, 4.245.163.56, 199.232.214.172, 192.229.221.95, 13.95.31.18, 20.242.39.171, 172.217.16.131, 142.250.184.202, 216.58.206.42, 142.250.181.234, 142.250.186.170
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size exceeded maximum capacity and may have missing network information.
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://xn--r1a.website/s/ogorodru

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 444x800, components 3
Category:	downloaded
Size (bytes):	69659
Entropy (8bit):	7.971061016132954
Encrypted:	false
SSDEEP:	1536:nl5AQMi1TQmmVfZcWpqMeor58oIL54CU6Q4nENIk:nlommVfmWCoaoa5pUfzIk
MD5:	63D591DBF18DFEB17A8D6F3B1C0F1F76
SHA1:	C3694AD05FAA94560999B7D779A6C5E91F94D0D5
SHA-256:	63378EF5CA54A8131965CD4A38491B1A36170C26117908CD0DDB68572C0DCDAC
SHA-512:	82699181F9ABD85E31157DAE0A43D1928B51171DF8A8621BAD537211C387CC12FEBD199B858471E45E93AD16BA40279BF929EAC6AEF5756B9633895BDE8C588E
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/BDoevstmwc-LH-sbj-OyBhlAr9f_8REM5GylyjUbzp0C14JNGE0luefvosada74HY1heslHYjIFTJqYowqHZW2U0Ud55ISGdzPYMuUbsvK0U7jqDYY-QLs3IPVb2zbi0EMPrw82DmDiXtGfIl_nXcDU-a02mI72VHUBwEsB8wPyHqiKczgkPdhtL1n1sOO-1c3RWSQMS52k5nV_uHDjd1h8NFSl9LNRD-BGQdwhHx5IRdErI4RlKKXdjeDtsd-MzL846KS9mGB6U7PDlMoKR93EFw9CuEkhZl3NsVJvFI6ObKpJ6EdDOS9ZZBfCfFHU7de_YfmsbShE42TJI1yJqEA.jpg
Preview:	......JFIF.....`.`......ICC_PROFILE............@..mntrRGB XYZ ............acsp.......................................-Qt..................................................rXYZ........gXYZ........bXYZ........wtpt...,....cprt...@....rTRC...L... gTRC...L... bTRC...L... desc...l..._XYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ .......O........text....N/A.para..........ff......Y.......[desc........sRGB..................................................................................C....................................................................C....................................................................... ....".........................................F.........................!.1A.Q."aq.2..#B....R..3b.$r....Cs...%S.'...................................8........................!1A.."Qaq..2.......#B...3R..Cb............?.......\|W....)A.'.R.`.I..8.L.\|1.....4...q...r.!h.q.I.4T$...2.8..g...#Q..}6...d`.V0.X..84.%.U..n8..[X.C...;p.D<.....z.4mL\!=.<..Qu..P.n

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65491)
Category:	downloaded
Size (bytes):	378731
Entropy (8bit):	5.561044916963352
Encrypted:	false
SSDEEP:	6144:gr4wGQU9wWBsbDMg5j+l4PL1UQBJkFUrELpiHCn7ote:1QQwWBsbDMgYl4PLPJkyrXCn7ote
MD5:	625345054E734F0CF5447A48C7B48F1E
SHA1:	E47DCBC49879D418AC70C4D6E2468C40E79CE68C
SHA-256:	0A61C98966BDEDB9F21A830546AA2D45B777CAB2189C09BF5984C67B7681FD90
SHA-512:	5227C66E7754C68076A2F52FB2A69219FF2BC608E69FE2EF9EB4396D141415B2DA500D9AD160749C5AFE33779FB0B7B59FB8BF038AE6389568E8897EE1CEB621
Malicious:	false
Reputation:	low
URL:	https://yandex.ru/ads/system/context.js
Preview:	/! v:1117086 b:default c:loaders/context /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let n=this;return function(...r){return n.apply(e,[...t,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)t=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");t=n[o++]}for(;o<r;o+

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 95786
Category:	dropped
Size (bytes):	38821
Entropy (8bit):	7.9936327548040405
Encrypted:	true
SSDEEP:	768:Vs6/ylcuG2zZH7UI7ALc52y4WOp93K7Joq66jrSSta250oY46:hgjbUdc5DPOp9a7JoifHtvxYp
MD5:	3C4830249A62BF3FE080174BB652B8EC
SHA1:	D8A994242FC3D4E185AD3E0955D405FC35953B5F
SHA-256:	C9093D1CE4C714D679817FAD24BD15C78492E466965129056A74A656C081D17F
SHA-512:	ED4CEAD3F531A61443B682CBC301F05C94E3803B31E614491F01982A1932694D30F867471B6E4CAA47393B4A494B3FC59FD9AD27A35DF80BB67990F430510CBE
Malicious:	false
Reputation:	low
Preview:	...........iw#...}.....F.M.$.m..XR.e..du.7.ya(.$............%{.s..j j..12.\|.d.../................g..d.=.8..bq;.....<..j>8....<Z,.Og.A1_.{O.....v>P.z/.7.j..E1X..\|...X......Yqp......b.^.].p.......U1_.....h..5..~Y...,.o.......bY..Q.....X....N.C...'..k..e..]..h.q....c/F.y1..q.....LWY.!..Mo.7.;.l...V....j...z.l....j....+..F.$.....h.x.^N...Io.......u.\...Uh..........u4.S.tmkq...?w.W._....w..w............V.O....a.s>....m<.O......_.....7.O.r~ut.\..Z...AKk.1....v.^,[W....\.j.....q.^\|.\..+.....z.Y].....,....~.k......5.s....buz.V.2..uopY.R..g$W.r\X.Z.0.z#...p.7......}.]...v.n..}V...........YK.v.}v.N..6...:].].."<..A,.s3.#U.^...Xr...Q..z...h9.M.R...r.,@...~L.Y.W...P..){.*.)OV,...^.....\|o.sp.........t..n..U..aY....m6V]...#>...F....b#....ug.,.xjM;..;._.epCb1..aVd#6}/Ld...'..[?>.....?9......Y...t\|pP....&..f..=......h.." .qc...A'.Z..)....N.........nG....I..P..{..^......J......@.;8.Z.~......v.te....F...?..n..../{.vO+....-.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 660x400, components 3
Category:	downloaded
Size (bytes):	61826
Entropy (8bit):	7.986133221558616
Encrypted:	false
SSDEEP:	1536:UoC/wYkuzcHbSCmw0hRYFo/UZQRbHT5UEY82:E4J7SC4iFo/6QJHNd2
MD5:	B0C09929B6DC300626304E9627907031
SHA1:	98106AD6F68F394F8E6968D8DEC047D80BD503FA
SHA-256:	97AF16A5F23407BC2EA3DBE0E7C792CEC9EA32812969C1A016C893AF80C80984
SHA-512:	B07A60BD23FA86175C60409F0021AC37354D45F91C6DA96880BEB97F882BE571AF43F9126AB415360D0B14F0E3A9772B3084C80665A482173BA7BF57D6DDDAAB
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/rkk8WbtOH5kDN2Bvh89DE_-q7p6ydKIypCA8qrMoOqnzWuwss2N-4z7JZG8Isbr6ditAmqyfNXwvxeK_2KrdtV6D3-ex5jk64o7V6OPM94oIlbQGJ7hvbexd-6T-UWP_dZI9laui89-InBxC8i1BOjgwXy9o-5877cfMOYnFuqWMSrcLEmuUnE-TUnbvwybZDVJFUsjpvdmaWH7v4hkhcVImSq8bKofyeoaPhl9gH5O28uw9fFlcuMNxWsFOV4ulnqwIQ4coLZR2jr13R24M23Qp1EOW699OASic2AiATScyldwQ1RogzDMI-mCJVh2Rm3qGwbrQFNHwHIqvVaUqgQ.jpg
Preview:	......JFIF.....H.H.....C....................................................................C............................................................................".................................................................................F.L.Ra(.......lGz.@...2....s.H.ha....B.O5...^....qa...+)..U..Ya.E.gv.0.x..'i.g.kvV.1lp......E.0W..iHd...q.._l....b..Z.}`.....t..]2....m.">.H.#....csg.=..7s...8.T..U..,...Z.U)(......@.A...XF..:..LL.W........j.^c.T!i.$..4W..vC.....LLp..,C.Ep......B..!....uM.$X.q7..[...;F..-.u.sf.........S>..B.f...M.d.....V/r.x.....Ky^....-x>...2yQ...v..5.)..n..^....E.../....\|......_.W....^0.%FK.X\.D.....X9.'.>~..fW7^X....u.k.%H..,R....9Y......q.....K..W3.......U.O....H/.tL._.3........J.2j.......:.J.^..R..3..]...y{O%.H".r..Ik/<.op:.Vb.....<...-u...D."..B...>.[....hi...f.,a.....MSc......h.s.'$,Su(H 9...\|4.....D..X..._....WqUC1.9"..Jf['.^-%...V.[KT5...w.8d[..Z...}...{...\|Z..^...s4..i...<..p...f.\|XQm.&j..c.)..s............y.3.

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 213
Category:	downloaded
Size (bytes):	180
Entropy (8bit):	6.839719329744917
Encrypted:	false
SSDEEP:	3:FttNrOC9hk9e1z/MFEIAVxq+PMkfbENvI8yNoTdiUT8LZuUFw4X8ZUOZhW2/:Xt5b9hl1z/2ZwxdYvTdiUT8LZnX8ZBZh
MD5:	8FD2DD68F844338EAC3E273072CF2B03
SHA1:	5BC8557B11984FE761383970B51DE93787D26CD1
SHA-256:	B118E4F5F656DB5136F6E730774E6FFA94C6BB67C8B295D7C06AE23FB874FEC5
SHA-512:	BDFE113E2E472CEC963406E33DA5B30CDA799F4FF71B036F85CE236E102503D62875D6C0FB03A6CC48315B99E753540B1150A4FB0BABE40EF5EE4EC25A134418
Malicious:	false
Reputation:	low
URL:	https://cdn.alfasense.net/ext/weboctxrun.js
Preview:	..........U....0..w.w.QA..k....P.t.I........woD.....'57.8...........]..)..>.g..0X}.c..f(..bx....N........V<..hl...Q$.=c...X.9l.m....S.)..E..!.Z1...f{?D\|........_4......

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 24604
Category:	downloaded
Size (bytes):	6836
Entropy (8bit):	7.96933213272448
Encrypted:	false
SSDEEP:	192:NbRvKxAa4C5Xh6gn3hTuK63+fKWbw83+0dL:tREyC5Xfn3hCea8TL
MD5:	CE18DE2DA20FB114D3E06280ED171D65
SHA1:	3040C5B24E9FA153BD89C9A8BCDCBCE52E1E77D4
SHA-256:	D0A6DC039FF98D8D004FA92E34B140AD7062444CAF370DBF012CC9DF2C2EBC06
SHA-512:	C113C097317B47ECDC7FE1086CE50A88F7C63E746EA44B6E45E4446AA288045D7C6AFACD0EF2E002503843DFF8A027BFAB9D227CD625D07E6E186AD0A992CC3D
Malicious:	false
Reputation:	low
URL:	http://telegram.org/js/tgsticker.js?31
Preview:	...........\ms.G...(.q;#K.....c..Q,..Y`..Z..iImf...=....o..=...L..S...o...U...\|Zw]U..n\|.^N..^...x...n....j......^uE.3.9-.m....p.......k.yt.@Q....\|Y`._T.Y}1....r.=.>.{...&\|]-...p?.]9..&....k%.......Fn....w.y\|.{.....d..p.c7".W4.2>9XU....uX.j^\..q.../.L...Y.....1._....Wo.>y..5..,5.OH...N.^...i]..N..r.{^...{H)A.6nz^N.../Vu......^..Y..J.-...r.a..iY....n&..f..W.i........O..1...5.(....{.<.W/....y.,.O=.....+...n;X.xk...,.nz>...mB..}t..r..?.........v..%....vQ..'...d[..u.%...:u..rU..Myr...d~..>\|.F5....F...O.%lu.U.=.h...~...[....L.$.q.;.......4Mq9.O.~.s...w.......O~.........'.....:.P<.V.b....}.<OK..6.48R....'...M.4...~./"^.&R...Bu....w.A..K..X.....m...Xf...E:7}.......8+.P....f.N<W..q....g.<.7brG...],....v..w...[.3.9.U....U..Y..}Y_.m.....c.O<]....4.+.5N..^...}.LuZ7n.Za#~.{..fl`.[..s.....~.=.W+.X..)..z...v'..r.8.~}^.....,J0..=Yve..xi..wf......T2^"V..)>.z>.D..(........8V...T..a..D.Y.w.1..........1Ol.0..V.P...w..}..U.7..

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3713)
Category:	dropped
Size (bytes):	93974
Entropy (8bit):	4.749254675540498
Encrypted:	false
SSDEEP:	768:x3+62J1xNNt3p1SG6CwPHG+AIieDPxsyk7W9vwCiPZZeRrZ+rgbQafIw8JBgHAta:Fj2jNt3Qsyk7glZ+ksv7e6a
MD5:	17BE6A8D79E8322F782C74F998273A3B
SHA1:	0C79815AEF6A4ED6BCC5AE6A4D5DD459211B2717
SHA-256:	9DB6A684C4B8C87CED6CA91ED34A348464A41DF4D3F74C007CAE6D87E68A1E88
SHA-512:	E02FEF9BEF104A7D99471BA7DF5882EB4EA1C2447B8F3BA3A53F063E3E180EC8C7C90E5ED529390806413F750267AC95BD469C4A1C329AABD8806E356B10E59C
Malicious:	false
Reputation:	low
Preview:	// http://paulirish.com/2011/requestanimationframe-for-smart-animating/.// http://my.opera.com/emoller/blog/2011/12/20/requestanimationframe-for-smart-er-animating..// requestAnimationFrame polyfill by Erik M.ller. fixes from Paul Irish and Tino Zijdel..// MIT license..(function() {. var lastTime = 0;. var vendors = ['ms', 'moz', 'webkit', 'o'];. for(var x = 0; x < vendors.length && !window.requestAnimationFrame; ++x) {. window.requestAnimationFrame = window[vendors[x]+'RequestAnimationFrame'];. window.cancelAnimationFrame = window[vendors[x]+'CancelAnimationFrame']. \|\| window[vendors[x]+'CancelRequestAnimationFrame'];. }.. if (!window.requestAnimationFrame). window.requestAnimationFrame = function(callback, element) {. var currTime = new Date().getTime();. var timeToCall = Math.max(0, 16 - (currTime - lastTime));. var id = window.setTimeout(function() { callback(currTime + timeToCal

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3910
Entropy (8bit):	7.929337285068634
Encrypted:	false
SSDEEP:	96:aR3RGKzFoyiB5LVazBc6rZoRlqAJAiGefj08Dz38:aypyuR8c4Zo5GefzDg
MD5:	D6DBCED201D49058479E81B662B38AAF
SHA1:	17497EEF3EEED85DC3DBE93160D088E73A7BA6AC
SHA-256:	D2501E01168A81E8AF702F1283845CDC11C25B1EBFD18EA3F959913EDB90C1A4
SHA-512:	338337016ABAB3690BA54C2D832CAE5B674843BD879838266069F933CF6620A8ACEF06405F956D75B7E56E12D2220262CDED8BF166621DEDF449F93D7A91A36D
Malicious:	false
Reputation:	low
URL:	http://telegram.org/img/emoji/40/F09F8CBA.png
Preview:	.PNG........IHDR...(...(........m....IDATx...........Ec.{.8.`...m.m.m.k;.&.af.{Z.......f._O.a.W.t.....q.....\|...mnk..(.?N\|....W$...N.V<.....GI.,..!V<...............J.s.p;}i.`..XR..-@y...]...d..s..{8...9....x.u.q ...../.......s[.....!.S.a..>...4Bk.....ksvw.............N.Q ...4.E.p. ..0{...N......;K.\.P..)..r ..B.t.L..]\...8..<...QB..".7)e..B..4K...".r...$.&.:.....MM.R......_...H....m.v.......\O...V.....d .W..2APAi.e<....>..c....x..Cjn#....S.(.?.....}.9..m.E.......yv..P).I...x.^]/.........!.D..QA.s`. V.L....".........n..T.....".....1..W"..l...>....o]H...-.08q<..A!.1...pA..<....c..u..I.....:I..};......p..e.{.....q?..y.r..W0..L.......y..-6.?........U..TP..>8..l...0.<Ch.KRdu.k.....Y....?.u...^...........f5f......2.....p...s.....1...=.:A`4..p..'@Z...D..By.~...8!..CS.b..........].....V........7T6..f..h/`...X....>/`hv?6.D.]M...l(..J..X.py.X..Q...M.......R.Q....f..^t...r..7...........x.P..G..V.i.G.#..<.....N....u..k..tl<.#....<K ...6.!"O!+P...UP

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HKALn:qAL
MD5:	C6CB4F21C7DCEB18C48B802BDE96868D
SHA1:	D44E74B07ED4E8267728C2BCDD16599E9110D05B
SHA-256:	B77A3071A80FC28A1E314D251064103CF265866101F7CDCCCF00B77C80484BD5
SHA-512:	8C65A0458DD4A8B93AEEA70A0CA67DB43B6E1C0DAAB17B7091449335532F3F5489E5B8A1617B42B99EE95B66CD8EF3E572F537121C9960743E100FE560F4C0F0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlotAG93LSqhBIFDT0fUzw=?alt=proto
Preview:	CgkKBw09H1M8GgA=

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 6632, version 1.0
Category:	downloaded
Size (bytes):	6632
Entropy (8bit):	7.96177262271962
Encrypted:	false
SSDEEP:	192:hFIvcu1wS0rkOCD1fiKG6eb2py09jIkpFN8dE:7Vu32kOyRG6DywI0nb
MD5:	B44D0DD122F9146504D444F290252D88
SHA1:	41F0F056110DD4213C98E7DD529CD726754408FE
SHA-256:	3E70E149A35F394BB78EF7842DE11A06359FED7828F30331594A28D196C54012
SHA-512:	3FCDC52B3069E1037D4B12FBD752EAFA9401F0331AA55EBC7C4C7477AF4576228356EDA226B7C28DF7E13B1EA30553E3E339AAD0FEBC183D43F0AC3D29BFF511
Malicious:	false
Reputation:	low
URL:	http://telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fABc4AMP6lbBP.woff2
Preview:	wOF2..............4 .............................j..z.6.`.......\.C.....6.$.... .... ..+.n,<l.....'........N.@n.."AF.X5.;.Fk....L...co.H.G..KW.!lq._'7.g#$.m..1..&.?.@..`.`.....v..N=....[...6j...g.b....cTld~:GZ.A.X.....N{..d.m..R.......~.o.o...@..`.p..t.CD.wD%....fA4..5t...h.nP.Sk^.......-.h...M..2I.O.A:.{...v7T...t.M.QT&._...Q....y.7W..xJ<B.>_ajL.......B..f1[.....2[V..2S..v..,.......HmOXU[...a/!..V\C...}..Y....\.y......X.-.0 ......Q...C..3..F.!......B....d..[..`q...?...A......;....[.....j...^..S..f.....W4...Z.@..2@....@..r.......t'....w.$..v.._....T2E.R......".#~..0.......A...I.I.....%.4...`.7...1...j..rr..%.......HR,...6..\.>.gaHg.9.b..{.Z.._%.u....D.....K_..1...52...m..Y....'.[(3....>.....V5...R".=s.Q....}....t.:...j.M..'.d..z.q..\.....;....>.$k...ySLK..,.....v...Puv.z>....jl9y....Z...sG..{..~..p....t.x.-.mn........Z.......il.z...XK.!..o..\..F.g/,.l...\.<\|...B.".b...R...(LE.TGj.x.O....(]}#c.3...........c.K.G.O:..H.L&.W._T:&..g.

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45623)
Category:	dropped
Size (bytes):	45670
Entropy (8bit):	5.463654508169904
Encrypted:	false
SSDEEP:	768:LkvrycUTFFtSbULuZwVKzvwtJ83boWP7FKfxGS:IvrycUTPL3VbJtosfL
MD5:	C371DEEE9EFCCFEA4089EF7B0FDED83D
SHA1:	49B37C54212766E619B015D39FE89456733105A8
SHA-256:	BDBF668275AC03AC4CC3E5258DD60DC63D9D9BDF8EFCFF00FF3D497A419BC436
SHA-512:	37BE0A9285D708125F00B47695401F3EFAD9F62C2CA1F06766E0D73B89703B0C4943AE85CE51C59ED7FAEDF2992978D2544F2C54249258CA152114C7BB35E892
Malicious:	false
Reputation:	low
Preview:	/! v:1117086 b:default c:floorAdController /.try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(t,...e){let n=this;return function(...o){return n.apply(t,[...e,...o])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(t){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof t)throw new TypeError(t+" is not a function");var e,n=Object(this),o=n.length>>>0,r=0;if(arguments.length>=2)e=arguments[1];else{for(;r<o&&!(r in n);)r++;if(r>=o)throw new TypeError("Reduce of empty array with no initial value");e=n[r++]}for(;r<o;

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 95786
Category:	downloaded
Size (bytes):	38821
Entropy (8bit):	7.9936327548040405
Encrypted:	true
SSDEEP:	768:Vs6/ylcuG2zZH7UI7ALc52y4WOp93K7Joq66jrSSta250oY46:hgjbUdc5DPOp9a7JoifHtvxYp
MD5:	3C4830249A62BF3FE080174BB652B8EC
SHA1:	D8A994242FC3D4E185AD3E0955D405FC35953B5F
SHA-256:	C9093D1CE4C714D679817FAD24BD15C78492E466965129056A74A656C081D17F
SHA-512:	ED4CEAD3F531A61443B682CBC301F05C94E3803B31E614491F01982A1932694D30F867471B6E4CAA47393B4A494B3FC59FD9AD27A35DF80BB67990F430510CBE
Malicious:	false
Reputation:	low
URL:	http://telegram.org/js/jquery.min.js
Preview:	...........iw#...}.....F.M.$.m..XR.e..du.7.ya(.$............%{.s..j j..12.\|.d.../................g..d.=.8..bq;.....<..j>8....<Z,.Og.A1_.{O.....v>P.z/.7.j..E1X..\|...X......Yqp......b.^.].p.......U1_.....h..5..~Y...,.o.......bY..Q.....X....N.C...'..k..e..]..h.q....c/F.y1..q.....LWY.!..Mo.7.;.l...V....j...z.l....j....+..F.$.....h.x.^N...Io.......u.\...Uh..........u4.S.tmkq...?w.W._....w..w............V.O....a.s>....m<.O......_.....7.O.r~ut.\..Z...AKk.1....v.^,[W....\.j.....q.^\|.\..+.....z.Y].....,....~.k......5.s....buz.V.2..uopY.R..g$W.r\X.Z.0.z#...p.7......}.]...v.n..}V...........YK.v.}v.N..6...:].].."<..A,.s3.#U.^...Xr...Q..z...h9.M.R...r.,@...~L.Y.W...P..){.*.)OV,...^.....\|o.sp.........t..n..U..aY....m6V]...#>...F....b#....ug.,.xjM;..;._.epCb1..aVd#6}/Ld...'..[?>.....?9......Y...t\|pP....&..f..=......h.." .qc...A'.Z..)....N.........nG....I..P..{..^......J......@.;8.Z.~......v.te....F...?..n..../{.vO+....-.

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 660x400, components 3
Category:	dropped
Size (bytes):	61826
Entropy (8bit):	7.986133221558616
Encrypted:	false
SSDEEP:	1536:UoC/wYkuzcHbSCmw0hRYFo/UZQRbHT5UEY82:E4J7SC4iFo/6QJHNd2
MD5:	B0C09929B6DC300626304E9627907031
SHA1:	98106AD6F68F394F8E6968D8DEC047D80BD503FA
SHA-256:	97AF16A5F23407BC2EA3DBE0E7C792CEC9EA32812969C1A016C893AF80C80984
SHA-512:	B07A60BD23FA86175C60409F0021AC37354D45F91C6DA96880BEB97F882BE571AF43F9126AB415360D0B14F0E3A9772B3084C80665A482173BA7BF57D6DDDAAB
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C............................................................................".................................................................................F.L.Ra(.......lGz.@...2....s.H.ha....B.O5...^....qa...+)..U..Ya.E.gv.0.x..'i.g.kvV.1lp......E.0W..iHd...q.._l....b..Z.}`.....t..]2....m.">.H.#....csg.=..7s...8.T..U..,...Z.U)(......@.A...XF..:..LL.W........j.^c.T!i.$..4W..vC.....LLp..,C.Ep......B..!....uM.$X.q7..[...;F..-.u.sf.........S>..B.f...M.d.....V/r.x.....Ky^....-x>...2yQ...v..5.)..n..^....E.../....\|......_.W....^0.%FK.X\.D.....X9.'.>~..fW7^X....u.k.%H..,R....9Y......q.....K..W3.......U.O....H/.tL._.3........J.2j.......:.J.^..R..3..]...y{O%.H".r..Ik/<.op:.Vb.....<...-u...D."..B...>.[....hi...f.,a.....MSc......h.s.'$,Su(H 9...\|4.....D..X..._....WqUC1.9"..Jf['.^-%...V.[KT5...w.8d[..Z...}...{...\|Z..^...s4..i...<..p...f.\|XQm.&j..c.)..s............y.3.

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11028, version 1.0
Category:	downloaded
Size (bytes):	11028
Entropy (8bit):	7.982077315529319
Encrypted:	false
SSDEEP:	192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+
MD5:	1F6D3CF6D38F25D83D95F5A800B8CAC3
SHA1:	279F300CA2CBBDF9F5036EF2F438607FBF377DAA
SHA-256:	796DE064B8D80EBA7CCACB8BA67D77FDBCDF4B385C844645D452C24537B3108F
SHA-512:	716305F4D2582683B64C61B5E2390983579EA0FB33C936DD3EA8362872176625FBCB6F5AD18D2ABF85DA82D14C33A9640DFC5749922CB2FC079DDF37864F361F
Malicious:	false
Reputation:	low
URL:	https://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
Preview:	wOF2......+.......T(............................d..d..^.`.. ....\.r.....6.$.... ..t. ..EEF....(j....._'pr.X..C.....%I..=..#7fC....y./...z../.d\H...wN.........=.....!GF...uNG`Nd.".....~..a..`.)..R.!5jTH....i@.7TT,0iI;...kv..+.bR.%.3.....;I^..T.T.........4..tZ3.d..J.D5.w...ve...6...HI'%E..E{..G.l........]WY..M........Q.w<.....lu..A.p.v...e.NQ...'i...y...,.FK...=.r......{..].+.K...I.e...?.t...R...R...p....4T+.....!1....A.1...JE.....d./......,.......?..%.p.p..6..!..@..H........)....A3.1? .(`.....D..X.30..gl.b... v..;...u...1.9.......?@..(..@........x.g.L........g..jt..f.........x.....9vB..FM.;U.IS..wf.....O~.RP.,4.x..J./.j.......9h/.....6.....z.f..._..b..........z......r. .C.>j..@D.. :G.2.\|..z.^.[...7.....v9_=.$..G1..=c.dhz..Q,oP....*..[...f.b\.Z.aa....n.u...T..!'[..NC{.o.g.N..Y.F..a}...X..x2...q.X......P.{.n+..'G.o.b.N..6[;5..q..&.r...}k}.O.JVL).y.>..#..[.j.b.OV...[!...<.+.k.}..P..x...y...Q.....A.=.C....y.B+....2}\...f3...U.Sd?l.^7._}].G@..9R.

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 83398
Category:	downloaded
Size (bytes):	20865
Entropy (8bit):	7.988973790042439
Encrypted:	false
SSDEEP:	384:eQ1jD98bdMGFsu7hDpmq94BNVN/xOrN6wmXCb6nLEvpfV8olS7PepzhjM2VcT2vd:JjD9gMGFsO6q94DX/GNXmXV80WpNjFc2
MD5:	9B3D940B2D583CF3242F8658B7C9207D
SHA1:	9F3B198C286DF98B65B9EA31BA8CBC8B43DD1E95
SHA-256:	0A3468A56300BBFAA2B55997A24D6AF70BB9B2D70B4685F2600D4044F9B31894
SHA-512:	52D4F933FA1EEC3B623D9FAF6A10DF45A71FA617CF8A1D151CB6C7423537010DF3244BC38A68803BF0EB327210470D9F9D494BBB97E98530CFCDEABBEB5B39D0
Malicious:	false
Reputation:	low
URL:	http://telegram.org/css/widget-frame.css?67
Preview:	...........mo.I....W..h.....7...i..3...w.{8@.HJ.4%.(J........f.......e2++32222"22..n..O~~3.,...n...Y..O6...d9...._.\n....t._}.O....WY......a...-..:o...<./....I.....n._-..\|..._......uy\|y}.}Z.jU].W..M..b.~bp_-..cz.\|...x......d.[.v..e..W....z.......C..2_^....n.\o;.v......%......>h..a.X.W...,o..CT...l....I.><]..<.6o.Y....................u..d......,..~Q..^}....).,..Y!.l......D..D.w...f...:......\|..a.!.mw...M....u.u......R.,..E...m...UI.Tm..fE..y3.fM..U..d...I9.b..z+.Ti.6..r..V.4..2..........H.,..V]...~.,....7..I..,I.I.Y.e].. ..r.U^...l.,.gY..u!/.@:.2aPE.4E;....J.&.$k....-.r.T.W.l...RSC.t..t.....M...tV.iUH!.N.4.j.`...WZ...B..I[7..YU.Y..gm...@].UF.e.T2...M.%.Y..@...LV.GV. y...S.U&ISK.U..U-o.....z.4I+8e...h..A..y..,..".!s.&./.E..V.Y].E%..I.FfE].h...i.l`...KPO&.+.oy&t...dP`.i....d.s..-...1'.03.:o.b:..`..[..d.R.6...E..<I.6.f" ..[.u..,.7.H[. ..[.dyR)...Z...E..H}...x......SA.P..M.:...`Ue..6I.. j>U..\|.D.Q+M.....z/r.P.Ok&H&o..

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 27441
Category:	downloaded
Size (bytes):	6351
Entropy (8bit):	7.973183476156078
Encrypted:	false
SSDEEP:	96:dhJOBgtIi8oQNOs2epQsOE56cJcfbBKzHACpsMwvFfzJzUVy2pg4gElafL3EctSA:Ggei8Z5FefbJCpRIfzqS/L3Ej6fJ/3Em
MD5:	BC9D4A87ADE324E04AA6477372FA613B
SHA1:	536F2BC94F84C9BB9AC0C2FB7A147E1B440FAEA8
SHA-256:	375E20CDA77088D227E1C65AD41354A744F90C15D00C45E21C1C959B7A57203A
SHA-512:	ED5430CA72566F6B6587EEF764398C6C852055A10967AEE076B59E2D1F93CA346A35C99B228C8BE7E8C755C2E9D3C63976D53EE70DFA0B70C4FD126C6F90657B
Malicious:	false
Reputation:	low
URL:	http://telegram.org/css/telegram-web.css?37
Preview:	...........=k..Hr..+.,....eQ.Y3Z ..n....\. .$P.5bL..I.m..O=.A6)....v...lVW...{W..S..M......<.6.,.j....U....oo.4Oq},.".h.1.l...".._.q4=..]./F...g.MZ}.Z.........}F..h.x.q.^g..G..9C\..!..~.D..^.5..........\|3.>$.jU...0x... .~...S.m.Q..Jo'..]d..=.S..s...}..]$.F....v....\|A....gqQ>..$...{X...MI.:..[.A:e.o."..w..w~......(._g2..E..Q.:...5.$1I..@.Q...e.,_..H....c.~ZD..@b..F.KZ....b....&/..h..f..].m.ED..G..K.iv.(..op..C>.A=.MV..3Ho..D..8?l..E..4.DWE....:.)k.A2].eqj....y~..1m`...:m..s.."....l..^....1]...n<......T..o..........~~.....-.0..Y....u.....F...DZ...2)q.b.s=4"i{..K...7.>.?^.^...b..FXU.D...6i~Po`d....I6..k,.<@....).E..C..x.q..+..K7Y..P...N.!..y...#....... ......j.,.;9q+..,..8=..xs._4..8..p'.&.N.^....m9&2...].)_`. ..r..?r.....,..7Uy..y.....s..;.2...j.....'L...a...[4.Q.M..\..K..F.`8._....H..3......A_....EEw..d..../s........J25.~]......I.S.P....N# ..^...:_....]..d...*=.......:...0...%.vi.\|N.S&>.c;...`G....^...A.5.,.:.h..5.PG..T......,el...../W

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4451), with no line terminators
Category:	downloaded
Size (bytes):	4451
Entropy (8bit):	5.257774690776116
Encrypted:	false
SSDEEP:	96:7ZqMhha0gB+BBOo1XqDJWuWfvVSiVmzIPziHCZ5Y7DNAP:7fgBAOo1IJXZhzI7ii7
MD5:	6A351E7A844E42F2970773E705EDDF36
SHA1:	66CC3E2474CF7085D0BFD5112003B0B9F0F87DBF
SHA-256:	D3D5D8E3AAEEC086AE00AD814B3ADAE7E41462E42A308A09DBCE39AAA11572E3
SHA-512:	0C922C36AC8C1E92A703BCDBCA70C441CED10019AC15620431528A10DC80420B2F992EF5D9769D0EEEEE0D06D87E4CA2AD4D853F3497DC54C5FE79B398B4022F
Malicious:	false
Reputation:	low
URL:	http://ads.alfasense.net/adserver/www/delivery/asyncjs.php
Preview:	(function(d,c){var a="1079f85a6f7f7d83640b17a26d3394d5";c.reviveAsync=c.reviveAsync\|\|{};(function(e){if(typeof e.CustomEvent==="function"){return false}function g(i,j){j=j\|\|{bubbles:false,cancelable:false,detail:undefined};var h=document.createEvent("CustomEvent");h.initCustomEvent(i,j.bubbles,j.cancelable,j.detail);return h}g.prototype=e.Event.prototype;e.CustomEvent=g})(c);try{if(!c.reviveAsync.hasOwnProperty(a)){var f=c.reviveAsync[a]={id:Object.keys(c.reviveAsync).length,name:"revive",seq:0,main:function(){var e=function(){var g=false;try{if(!g){g=true;d.removeEventListener("DOMContentLoaded",e,false);c.removeEventListener("load",e,false);f.addEventListener("start",f.start);f.addEventListener("refresh",f.refresh);f.dispatchEvent("start",{start:true})}}catch(h){console.log(h)}};f.dispatchEvent("init");if(d.readyState==="complete"){setTimeout(e)}else{d.addEventListener("DOMContentLoaded",e,false);c.addEventListener("load",e,false)}},start:function(g){if(g.detail&&g.detail.hasOwnPrope

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 444x800, components 3
Category:	downloaded
Size (bytes):	117731
Entropy (8bit):	7.969653569918836
Encrypted:	false
SSDEEP:	3072:QRPxFI3a6cmeh8j/WAxGANlZw3xExJ7nlTvp3B:QS3SmZ1xPLwBEDjlT7
MD5:	A9BF01AB31DAD0EF5643BB6FB27E8E41
SHA1:	94B6013B53E423A7FB28DC206546DDF50C22D86E
SHA-256:	DFF5BBBAD93F3701A6F1AB8745D07BA19A1B22DF739F2FBFF2EC87878794721D
SHA-512:	56DF5A9088B995DC8AB01EBA928BF5977F23A469F01AB9263E2002CF588196525CF3A437EA6662EBEF584C43AF437120DCE7DFD09C0A6AF4C5248AEA4DCBB450
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/TTkkD8vhw02tx6_lfOH_DCMJAewkY3MM9tiBVlKvkpzhsmMyB-J7bK0oKXpRQAccMp4OsJZMDFmm77EQ8GXduS6izr7JT1sss2JT2zIYl3jTiqOmnwx6SSAW_sNUDqovktr6YzgXP5gad40Yl5ZDNcelYrbftB8jlkqU6fDclHTdBlT8ExxMNtKw1g0UgGpSAe5GFmS8qZgjDz83K9GeJaNmzqAYCvxMdvGKo5_ZiDVfwBW4QAsJ_hKx5Kj4ABcDlMYEX4OdhB4Ym9BKT2MWrwZZtxDk0EJJSX4aUmOFMGae7G3ZIuSvgOaKT7JW9bQO_NQCTsVAxXSflL8MYYmy7Q.jpg
Preview:	......JFIF.....`.`......ICC_PROFILE............@..mntrRGB XYZ ............acsp.......................................-Qt..................................................rXYZ........gXYZ........bXYZ........wtpt...,....cprt...@....rTRC...L... gTRC...L... bTRC...L... desc...l..._XYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ .......O........text....N/A.para..........ff......Y.......[desc........sRGB..................................................................................C....................................................................C....................................................................... ....".........................................O.........................!.1..AQ"aq..2...#B..R.3br....$..%C....4.Ss.Dc..&'....................................6........................!1.A."Qa2q..........#B.3.R$b............?...<c^..u..k.cCD[..:..$S..J.}q..e.I.j."...r;..L.........?(.....8.a.=u..v.._}J......._]b>,.5.1.+.k.Y8#$..^5..'^.O:..^.....5..8:..$.

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6166
Entropy (8bit):	5.4227704706263475
Encrypted:	false
SSDEEP:	192:KR6tGVFJ3qFl5p3AkmztIZa+XqtRcalH9:wTY7t8t
MD5:	C706681409217A14A24C7E2DEB8CF423
SHA1:	08B443FE5BC6A223A9DE08FB56282365B1D13857
SHA-256:	84B97B3FA8847B64C6D3833561E4B3146530577171E85AD226578A087DB70974
SHA-512:	2520A5417426CEA58972529B3776713958FF259CC8467EBAFBE291BD040E27195054C4133F4A9518D78DA38DDF4F7CDAC64DA0813DA33BBE707AD13AF5BAA7C1
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/font-roboto.css?1
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2') format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2') format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu7mxKKTU1Kvnz.woff2') format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu4WxKKTU1Kvnz.woff2') format('woff2');. un

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3631), with no line terminators
Category:	downloaded
Size (bytes):	3631
Entropy (8bit):	5.249163634838678
Encrypted:	false
SSDEEP:	96:SbR50KQ4Bbx8b2SHCS30QlgbpHTWMuHr1:SbR5c4Bt8b2SHCQlgJWMMr1
MD5:	A2DA639E8DB24CAAC82A2DB856E8BAE8
SHA1:	B4FEC067EAC58BAACE79726AB5852BFE818010C5
SHA-256:	CDBB15D2212B2E0BB14E6F0390D32DEB9F87AE5A61842471397A7CC60468E91C
SHA-512:	2FD1E7A758EF0A16BABEF8C9F3A410025461D5AAC305A1145486A0DD5AE223D6961BBF96FAE96E73EA48E06AEF33D98F1FF0EBC2FB93741F6379BF1F00E77168
Malicious:	false
Reputation:	low
URL:	https://ads.digitalcaramel.com/js/xn--r1a.website.js?ts=1726872521522
Preview:	function _0x14f3(){var _0x5bbe63=['betweenDigital','1272248','57:xn--r1a.website_floorad_desk','897708','adfox_172129970796491701','66_970x90_alfadart','1366078','1536143','1672699','87801jMMbMf','1272247','2468261','669f63fc4d506e6010891d8d','57:xn--r1a.website_floorad_mob_300x250','49-Yn9Zs','4780071','1682038','46326','66330','1366076','1366074','sape','4780072','1682036','6464860vGxaRP','17550BtvRfA','alfasense','solta','mytarget','771760rdZIQp','66331','hybrid','bidvol','24340','1086BpZjUo','320988xJHRVF','144QRWsWM','477680EjUoIg','getintent','otm','49-Xe2Ma','1366072','123186hpusxS','1366075','adriver','18TgptHv','1671199','adfox_172129965439531701'];_0x14f3=function(){return _0x5bbe63;};return _0x14f3();}var _0xa62b7b=_0x1d65;function _0x1d65(_0x5a3127,_0xc8bcb5){var _0x14f34c=_0x14f3();return _0x1d65=function(_0x1d65a7,_0x15ed1f){_0x1d65a7=_0x1d65a7-0x149;var _0x418660=_0x14f34c[_0x1d65a7];return _0x418660;},_0x1d65(_0x5a3127,_0xc8bcb5);}(function(_0x2c0faa,_0x4b8fb2){var _0x9

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3631), with no line terminators
Category:	dropped
Size (bytes):	3631
Entropy (8bit):	5.249163634838678
Encrypted:	false
SSDEEP:	96:SbR50KQ4Bbx8b2SHCS30QlgbpHTWMuHr1:SbR5c4Bt8b2SHCQlgJWMMr1
MD5:	A2DA639E8DB24CAAC82A2DB856E8BAE8
SHA1:	B4FEC067EAC58BAACE79726AB5852BFE818010C5
SHA-256:	CDBB15D2212B2E0BB14E6F0390D32DEB9F87AE5A61842471397A7CC60468E91C
SHA-512:	2FD1E7A758EF0A16BABEF8C9F3A410025461D5AAC305A1145486A0DD5AE223D6961BBF96FAE96E73EA48E06AEF33D98F1FF0EBC2FB93741F6379BF1F00E77168
Malicious:	false
Reputation:	low
Preview:	function _0x14f3(){var _0x5bbe63=['betweenDigital','1272248','57:xn--r1a.website_floorad_desk','897708','adfox_172129970796491701','66_970x90_alfadart','1366078','1536143','1672699','87801jMMbMf','1272247','2468261','669f63fc4d506e6010891d8d','57:xn--r1a.website_floorad_mob_300x250','49-Yn9Zs','4780071','1682038','46326','66330','1366076','1366074','sape','4780072','1682036','6464860vGxaRP','17550BtvRfA','alfasense','solta','mytarget','771760rdZIQp','66331','hybrid','bidvol','24340','1086BpZjUo','320988xJHRVF','144QRWsWM','477680EjUoIg','getintent','otm','49-Xe2Ma','1366072','123186hpusxS','1366075','adriver','18TgptHv','1671199','adfox_172129965439531701'];_0x14f3=function(){return _0x5bbe63;};return _0x14f3();}var _0xa62b7b=_0x1d65;function _0x1d65(_0x5a3127,_0xc8bcb5){var _0x14f34c=_0x14f3();return _0x1d65=function(_0x1d65a7,_0x15ed1f){_0x1d65a7=_0x1d65a7-0x149;var _0x418660=_0x14f34c[_0x1d65a7];return _0x418660;},_0x1d65(_0x5a3127,_0xc8bcb5);}(function(_0x2c0faa,_0x4b8fb2){var _0x9

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9175)
Category:	downloaded
Size (bytes):	9208
Entropy (8bit):	5.302373177497931
Encrypted:	false
SSDEEP:	192:mwSNinD7umI+xbmiwv8Y5gUT0tWGOpjsZYPe/W6UGcMrH:mwSNiDdxaiwReUT0t1ONjPe/W6UGcML
MD5:	BFBEDE26D7BD8AE58F10AEA5819767FD
SHA1:	DF9FC0D644ED6BB9FD1742932D528E824AFFF3C4
SHA-256:	83A9106414A1011B7E3C735EB5CAD51844680F29924C389125357B399ACDFFA9
SHA-512:	60C2128B42BC51C9C06FD82D006A9CDD5F769175F3E9D55868749690ACC27359C65D7F52A0F7F93838ABD0B4A9A5E431BB0D7CE99587790B6CE42FDCEA4AC0B8
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/1117086/17fb885b38886c06b632.js
Preview:	/! v:1117086 b:default c:927 /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const r=e.toString();return/\[native code\]/.test(r)\|\|/\/\* source code not available \*\//.test(r)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...r){let t=this;return function(...n){return t.apply(e,[...r,...n])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var r,t=Object(this),n=t.length>>>0,o=0;if(arguments.length>=2)r=arguments[1];else{for(;o<n&&!(o in t);)o++;if(o>=n)throw new TypeError("Reduce of empty array with no initial value");r=t[o++]}for(;o<n;o++)o in t&&(r

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
URL:	https://dmp.sbermarketing.ru/?dmpkit_cid=9064fc6c-76fe-4a6d-aea6-92ef3f343257&dmpkit_evid=8vhicaia6d0gnvnhrxxom892oalkpb77&user_prg=NWFmOTc5NmUyOTU5MmY5Nw
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65496)
Category:	dropped
Size (bytes):	634944
Entropy (8bit):	5.449937341147356
Encrypted:	false
SSDEEP:	6144:QgihScLXC2ntBuYKABDQOL9cXAGQSKvSV3u8+8BDeBz1nzBHNrROoK41DX:LwbjC2ntBuChQO1GQSKvSV3j0NrHbBX
MD5:	1F70BBE29BD47349BD5B7E133B211097
SHA1:	A7FF6FFDA92BC19310B84583AE75242FB7B98BB2
SHA-256:	FD662D6162284EBB0539B9D1458F857DCB291673D43445172DC0EDFB93092B2F
SHA-512:	6D72048F0639C450C8572DDC0D048462AC0DFBABCE952ACEEA2FECF3CA0A7E837BD9938E8A1FB17BE4FE33E2EB3CE8CC3A6C62F1351D8A4BBA324E5E13D888BE
Malicious:	false
Reputation:	low
Preview:	/! v:1117086 b:default c:advmanager /.try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(t,...e){let n=this;return function(...o){return n.apply(t,[...e,...o])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(t){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof t)throw new TypeError(t+" is not a function");var e,n=Object(this),o=n.length>>>0,i=0;if(arguments.length>=2)e=arguments[1];else{for(;i<o&&!(i in n);)i++;if(i>=o)throw new TypeError("Reduce of empty array with no initial value");e=n[i++]}for(;i<o;i++)i i

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33703), with no line terminators
Category:	downloaded
Size (bytes):	33703
Entropy (8bit):	5.203466046638291
Encrypted:	false
SSDEEP:	768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad
MD5:	2435549EAC66915D7464EE7B9EFCE038
SHA1:	E390598FB192583622A8EA079D5C96DFFDB34FB5
SHA-256:	34806EF573086241DD1A596A860B0295B51C24F1C37EAB36EB9D0665683ABB55
SHA-512:	42A25F058316E5E947BA3149B56C81FD0E82F21D4B8109EF4FC529509D54235A0C0D7DD6212E381129B46CA72D81C4AE9E58CFAE87557587727BF290FA1F3F09
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/safeframe-bundles/0.83/host.js
Preview:	!function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="https://yastatic.net/safeframe-bundles/",o(o.s=62)}([function(e,t,o){"use strict";t.__esModule=!0,t.c

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (423)
Category:	downloaded
Size (bytes):	20469
Entropy (8bit):	4.794354724706397
Encrypted:	false
SSDEEP:	384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb
MD5:	1FF8B98C72268DE58837846F2056C65A
SHA1:	E77FCC14F1EFD17D319C9F82627E5789333B9DBE
SHA-256:	0F6CDD09B3BBEBF50C4E1679AFF6F021F5E183A4BA2DEA3A0801394599FF6AFD
SHA-512:	1A680A7E87F16520DA934F4034CDC601EBEF9C306C7F5E3EA165588F044142CADCF5EB06CEFEDC8EA7768FF63830586A2776351C7B9429F1E33B639ADCA5F1ED
Malicious:	false
Reputation:	low
URL:	https://oauth.tg.dev/js/telegram-widget.js?22
Preview:	(function(window) {. (function(window){. window.__parseFunction = function(__func, __attrs) {. __attrs = __attrs \|\| [];. __func = '(function(' + __attrs.join(',') + '){' + __func + '})';. return window.execScript ? window.execScript(__func) : eval(__func);. }. }(window));. (function(window){.. function addEvent(el, event, handler) {. var events = event.split(/\s+/);. for (var i = 0; i < events.length; i++) {. if (el.addEventListener) {. el.addEventListener(events[i], handler);. } else {. el.attachEvent('on' + events[i], handler);. }. }. }. function removeEvent(el, event, handler) {. var events = event.split(/\s+/);. for (var i = 0; i < events.length; i++) {. if (el.removeEventListener) {. el.removeEventListener(events[i], handler);. } else {. el.detachEvent('on' + events[i], handler);. }. }. }. function getCssProperty(el, prop) {. if (window.getComputedStyle) {. return windo

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (33703), with no line terminators
Category:	dropped
Size (bytes):	33703
Entropy (8bit):	5.203466046638291
Encrypted:	false
SSDEEP:	768:uKbdR7ii7FI+06HhV69ztBLEankCqH1UKW35V8tFOzbZ51QtD8JFtEDv/eKzS6Ei:TR3gKCzF5UEad
MD5:	2435549EAC66915D7464EE7B9EFCE038
SHA1:	E390598FB192583622A8EA079D5C96DFFDB34FB5
SHA-256:	34806EF573086241DD1A596A860B0295B51C24F1C37EAB36EB9D0665683ABB55
SHA-512:	42A25F058316E5E947BA3149B56C81FD0E82F21D4B8109EF4FC529509D54235A0C0D7DD6212E381129B46CA72D81C4AE9E58CFAE87557587727BF290FA1F3F09
Malicious:	false
Reputation:	low
Preview:	!function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=function(e){"undefined"!=typeof Symbol&&Symbol.toStringTag&&Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}),Object.defineProperty(e,"__esModule",{value:!0})},o.t=function(e,t){if(1&t&&(e=o(e)),8&t)return e;if(4&t&&"object"==typeof e&&e&&e.__esModule)return e;var n=Object.create(null);if(o.r(n),Object.defineProperty(n,"default",{enumerable:!0,value:e}),2&t&&"string"!=typeof e)for(var r in e)o.d(n,r,function(t){return e[t]}.bind(null,r));return n},o.n=function(e){var t=e&&e.__esModule?function(){return e.default}:function(){return e};return o.d(t,"a",t),t},o.o=function(e,t){return Object.prototype.hasOwnProperty.call(e,t)},o.p="https://yastatic.net/safeframe-bundles/",o(o.s=62)}([function(e,t,o){"use strict";t.__esModule=!0,t.c

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65491)
Category:	dropped
Size (bytes):	378731
Entropy (8bit):	5.5610446523096035
Encrypted:	false
SSDEEP:	6144:gr4wGQU9wWBsbDMg5j+l4PL1UQBJkFUrnLpiHCn7ote:1QQwWBsbDMgYl4PLPJkyrGCn7ote
MD5:	913ECDD1BDE12408444C822EF79D713A
SHA1:	36121064652B8EDD51871DA77161CCA681DDBBFE
SHA-256:	DEB41BC4595C207AD20B90022B8EBA337DF2418138DE932D73496C122512B981
SHA-512:	A752F17CB0AA23413AAACAE4BB449124722BDE2708929DCB8F4FFAAC9655E48C2D7DF4CFD75B8A051AD6F76BFDC51221789CF466DADE2B83C69DF8380177F85B
Malicious:	false
Reputation:	low
Preview:	/! v:1117086 b:default c:loaders/context /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let n=this;return function(...r){return n.apply(e,[...t,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)t=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");t=n[o++]}for(;o<r;o+

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2452
Entropy (8bit):	7.900360085670837
Encrypted:	false
SSDEEP:	48:1hKCEWfEsen90FzQlK0BlTMyj0P6KuG9MXMLroOQ+pc97r+D6y43EkXwuzPcC50W:1UCNfEx2ZQlKExMyj0P6Kuj8LbiH+DbA
MD5:	AD7A70861682A913A21FB719251EA4C5
SHA1:	221135D8EB3C6F94E1F890146A13C1EC80B70EB4
SHA-256:	58E33E04ED187BDF5C1FAE0FE8ED8D3EC9B5EBB79E60519BEB77A0349B2E09F5
SHA-512:	F6679AC0996AC88C046E3D46FAEF13C8C636B51330D992D8C351B386B855ED1A02BFC6FBFECF12E34BCDF038061DC689767566439572E7CAFD2436C973E00DA9
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m...[IDATx^.{.]U..{.s..3s.v..-...)..F.......-).VS.1..1.h..1...G...MLH.0.?~...Phy.J).b[..-..}...{....3d..$`.&k..{...9..=w.?...3v.g=[.....)`..6.8.i.G.....=.ss.[..v...6.(....Vb.............../{.....6t..m...hSI..........hl...b...O....a...77wc...........@#.B.+....T[t>....=.Q..f..D..TR.^.hh^..O.D..6..w.Z...D..'...d/=.....'w..1....=...s...k.}.............T9g...h#.....4o.....\|!.K;Hdc.....2LdxL.h.D..PmN..2..........v.D+.%z}..+n.%-....Sr..z..M%<....I../.A...c..?.G..1...F...8..=z,.N...L...[v%...znf.=.......0.uDo.&..h.?.6?.....yB.^.i.x.+T]p.m.h.I.......^L..:Q...@.....h......8.......Y...~..F..z..}...].V.].E........%R.C....y..........Yw....n...rq..W...../.)...54...i.#Y@......@...~.....%.o........<....XvK.<...2..f.......7>...7-.....9..\..3.vl..Ve..5.b0.6 .....1:.oz...[.`....v.e.. .Z..9..A9......v.a=.(...;.....^..d7.~...h~..._....n5.)...pv...0.#.4.Q.=..y......=.O.....u-..AR.'A....Aa..j+Y....I......Ni..U..`. ....$`Y.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 2979
Category:	dropped
Size (bytes):	1521
Entropy (8bit):	7.869533935472937
Encrypted:	false
SSDEEP:	24:XNYO+fGvuqeErDHqlaxe5mCucAX+QYP5vwK19cnQmbQ8rCog4IY7TVhs7NOookQ1:XNt+BerfxymCrK+TNwKOSlGVhawooDfJ
MD5:	9E8C00568FA549AEBB47100255D258AD
SHA1:	1F544022455F8B176CF0936E77D2D2A2E15F75A7
SHA-256:	4C115EF36E48C9AC331CDF8DEDC8956E0C28BB7079B909AAF0555F1B6DAA5179
SHA-512:	082F9458EEEC9FC83E0C7FC81FD898DA11545B9D2D465AC25B0EDBD763D07A375BF49BB1D234C44AD2C1EE41F916C34B286A45ADEA7B189CFAD9500A34E7A5FF
Malicious:	false
Reputation:	low
Preview:	..........}V.s.8..+-w..0..$.(.4M.i......l....0...~....z3...~+...2...2M.r.r1XdQ1.d.x.M....7....P..v4."Y..F.......b...'.A....z=.@.;.H8At...E.D...Y......X..3..o..I......q..:.8..........Y............bM.%k4:...M..T.M...-..neM.z"G.`.5.R.....BO.....&Zj.Z7+k...9.......u.[]`t..w.wK-!..s&..H.N>.,><../..p..N.sN.K..u..IoA.X....v..B...y\|d..-...FcI.s..b...F<w..?....l.Np.B`.kJ.?z.Q..=H'8.4....(.c.p)^.!O..a.I.`u.p./X.k9g........e...V.s.,J..o.B.K....3..G.>..%Q...\.B..P...d..}......<...gpr.9..3.2v......n..Z$f.%h.,..1.......M...Y^..9...@.e.m.t....2....h2.....9....r....9.m....J..@...+...>._....b.......^._.b\N7...6v.~..{..5o..)...An..`..\.By.......j.....F...b..M.W....,.U...\|...a...Eqxg....:.o..q.WZ.4.tp...Z..Nn.S..MV....h1VYa'r~.......~w...t'$...}..>......Bi.wI....p......H..Jd.4.J. Q&z..=.............&oblq....?...:....n..-.u.6wO.{.........c..=.S.9.KC....q.....=.x...#\|..M.7..."\|..-........M.6A..4@.&p...%.f'}.VPI.d.].....+.M_3~..f.jW..;.E..r.....

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 98729
Category:	downloaded
Size (bytes):	32429
Entropy (8bit):	7.991423943211359
Encrypted:	true
SSDEEP:	768:OjR2Q+l3VzMDRfQbkJozAp+gp7JaKhDMeFN:O4Q+cDRf3JcAp+gpPDZN
MD5:	7C14E75C73DB2AE867EC1AC86995C0DC
SHA1:	BFFF488DF704DE2DE81F8DC4FFB2C9D3C9654475
SHA-256:	E9DA869F941934F5FE6CE7555856D9CFB61F3EE346B456BE7760596ABE1E69F0
SHA-512:	B25A55B49249B48594B514B0CEF68EB68C4562567BC6B5BB05F29A253F3D87F0E5EF8ECD3B6DBBBECE10444CCB7B19D3023B0E3271547D08FBBA34461871BB89
Malicious:	false
Reputation:	low
URL:	http://telegram.org/js/jquery-ui.min.js
Preview:	...........kw....}~..9Q....R....b9.<.:..c)q.2.-.h.mC...J...~.g_... )'s..g...]...v.?......,..w.................._...u...?=.9.l.F..?.'K^V....R.Y.......V.r.s].\|..o..\|...5q...};}..uYW.....z.?..\K...iC.s.f&.......u..\|.c.zu..O7.j.3].wV..r.A-7....f...v..f...;.}.j...?.S..r9c..fp...x..xQ..v..Y.,......D..Oz...i...6}.... k.[.).eQ...O.;.bUL.....W....r.Y}..P..O.?8Z.....7].S.d....(\|....{T)V..p.zE9<_.g.....^.4r:[....M.W.{{.%A............7898-..._.......`....~....\....p.)..pH...f..^......?.....L..yUs!..]Gx}]..../...L.u......_/..j.)...}UWh........~........._.KKG.{k..j>/...f8......4Z-.....i.(.o7.6........O..)..>S......c..-.+~)?>.\|GW.....~...OG.Z<~..w_...._.'O.}......,.<.........?.=...^=.at..x...W/....K...wOG..X\|...W.G.R......j.....~1z..x..o.?....A..7...e....=,^}....,...>.0......W......C.0'.b...@.w..+n.....z...._U..&..)6..w......>.R.TD.J..=..C.tD.....;w....&..GKE2.[aY......n#e.K.J..7.z...?.>{g..w.3..1T....92l....\?Y...a.]_....Sq..@...G.*D7...;...;..

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24511)
Category:	downloaded
Size (bytes):	24545
Entropy (8bit):	5.213080305450937
Encrypted:	false
SSDEEP:	384:gwdSDBKfFsDpxaPLQtjrdTEt3VE/dAyxml4qgpG0gX3DBNq+e:hUcKQLQtjEYdAyxm+Kn1Nq+e
MD5:	AFDD155AC8EEC69AA189C7CEEB9E6910
SHA1:	92E3FCD5F86308956B83C0BF9747205BF2C2F930
SHA-256:	8B604C8C0973824E01AB81AB5AD0A38568A6ABC41CE4A41A185CB2A182CE3E9E
SHA-512:	256A16D106009D919B5F42B9A3DE1EAC5F98215364E6B10B4FC555882F84A59DA9BC94BBF3CEE965534ED1F42B3792B59C9504BF16EDD08EF550F9656131101D
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/1117086/8191d15d1fd1e4c04fa3.js
Preview:	/! v:1117086 b:default c:9537 /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const n=e.toString();return/\[native code\]/.test(n)\|\|/\/\* source code not available \*\//.test(n)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...n){let t=this;return function(...r){return t.apply(e,[...n,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var n,t=Object(this),r=t.length>>>0,o=0;if(arguments.length>=2)n=arguments[1];else{for(;o<r&&!(o in t);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");n=t[o++]}for(;o<r;o++)o in t&&(

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 444x800, components 3
Category:	dropped
Size (bytes):	89166
Entropy (8bit):	7.967004581167021
Encrypted:	false
SSDEEP:	1536:KkceqFPxFSjWQ9VO6OzpoTlUhTHIksL/JEAA4GAxHcIGglL54WwwbA:QRPxFI3a6cmeh8j/WAxGANlZw9
MD5:	FCE4793DE5FB7678946168EF30471926
SHA1:	8AA4B84FB52DE901A08A0EE8EA5036A129AEE816
SHA-256:	95C929BC6B7B7BB7D59A24B2404B08EBCD619FBBBF6A2F58FC9BA3DA22B2CD1D
SHA-512:	DE6DEFE9E9A8928BA507A6E12EF490CA3FE732B725413FE22EEC68E1925CA7F36002D8F80CB28A201885F296E63830084AC0B9AD671A33F94A8B5A0597B96260
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......ICC_PROFILE............@..mntrRGB XYZ ............acsp.......................................-Qt..................................................rXYZ........gXYZ........bXYZ........wtpt...,....cprt...@....rTRC...L... gTRC...L... bTRC...L... desc...l..._XYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ .......O........text....N/A.para..........ff......Y.......[desc........sRGB..................................................................................C....................................................................C....................................................................... ....".........................................O.........................!.1..AQ"aq..2...#B..R.3br....$..%C....4.Ss.Dc..&'....................................6........................!1.A."Qa2q..........#B.3.R$b............?...<c^..u..k.cCD[..:..$S..J.}q..e.I.j."...r;..L.........?(.....8.a.=u..v.._}J......._]b>,.5.1.+.k.Y8#$..^5..'^.O:..^.....5..8:..$.

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 6460, version 1.0
Category:	downloaded
Size (bytes):	6460
Entropy (8bit):	7.967122559934462
Encrypted:	false
SSDEEP:	192:3U5ZGOjmVC7408/bU8UAstH+/HJ4nV72XGuFZJXsGdnund:3OI6mX08/biuc23FZlsGYnd
MD5:	491A7A9678C3CFD4F86C092C68480F23
SHA1:	32E18AE407D782ADFD54C78C6259C7BE52DB6BF3
SHA-256:	41B5C3B25F4258190937DEB900FA57A6DB6D450CE7DD2AF2259AF760119A1C41
SHA-512:	BF89C2CECB09F56B6EC271AEDE7DD0BAE6C0B9C88ABA6A59E0E0C3F50C5F22E25178E766754D1C495866E76C00C8B413612B3516C75AD731ECB4F38B79D15E01
Malicious:	false
Reputation:	low
URL:	http://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2
Preview:	wOF2.......<......1..............................j..V.6.`.......P.v.....6.$.... ..t. ..)..0c... ...b0........A]..G.bQ.....D..m.pLY.T\|{.^.g..'...#4.I.._k......>.D..b....tT.eV.Q....v.`.9.... (......`R...e...Q....0.60...{b..y.@..pA.B@......R.oW{...\....5.."....$. ....\|.l..f..p....F..n.jl[.e0'K..Qb....,[...s..v7..B.%.vT.._...o....!... Ta..C...).i..j.U6.OQ.Q..H.[D...t1.....\|!...ut""r.O....^..e}..5..E....f..IC(P.P...I.B......C.A..p....."P.D.\..........d.E..k.9....h......r...cA.rd_b,.!x..$...U . @.....c...../O..[.....;.xb<.s..._.0...?.A..1D."~$(.L.....2.U.&q!.Q...,....ITe.g.s..D6q..N......>......8..#R..b?.S\|.1.E`...W...1....5M.y..}...u...XM.....+..[..p.X.,.Fn.{..3.+........X..q)..{1{..s...{.'..s".....MM..+.C...OJ4pT.b..V:.62ry .7.Q..A..3..t.K....N?.H\|%..l..Jm....W.6....c..-...].._b<.K.y.:..q..r...@#.z....R,..!v..YI\|)..]...G..Q(M.....j.'...I.....&O..{)R.B..u.4i.C..}.LX.b.l....w.\|...(H.P."E..'^.D.R..)..Rv6A....S...^.j.~..[b.8..5.q...l.u..7..`.;r..A}.

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (423)
Category:	downloaded
Size (bytes):	20469
Entropy (8bit):	4.794354724706397
Encrypted:	false
SSDEEP:	384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb
MD5:	1FF8B98C72268DE58837846F2056C65A
SHA1:	E77FCC14F1EFD17D319C9F82627E5789333B9DBE
SHA-256:	0F6CDD09B3BBEBF50C4E1679AFF6F021F5E183A4BA2DEA3A0801394599FF6AFD
SHA-512:	1A680A7E87F16520DA934F4034CDC601EBEF9C306C7F5E3EA165588F044142CADCF5EB06CEFEDC8EA7768FF63830586A2776351C7B9429F1E33B639ADCA5F1ED
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/telegram-widget.js?22
Preview:	(function(window) {. (function(window){. window.__parseFunction = function(__func, __attrs) {. __attrs = __attrs \|\| [];. __func = '(function(' + __attrs.join(',') + '){' + __func + '})';. return window.execScript ? window.execScript(__func) : eval(__func);. }. }(window));. (function(window){.. function addEvent(el, event, handler) {. var events = event.split(/\s+/);. for (var i = 0; i < events.length; i++) {. if (el.addEventListener) {. el.addEventListener(events[i], handler);. } else {. el.attachEvent('on' + events[i], handler);. }. }. }. function removeEvent(el, event, handler) {. var events = event.split(/\s+/);. for (var i = 0; i < events.length; i++) {. if (el.removeEventListener) {. el.removeEventListener(events[i], handler);. } else {. el.detachEvent('on' + events[i], handler);. }. }. }. function getCssProperty(el, prop) {. if (window.getComputedStyle) {. return windo

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	87
Entropy (8bit):	4.748689583018182
Encrypted:	false
SSDEEP:	3:YGXZZHdWSW3l6dU1RHJHGXcEXDzFZSjyEDg49:YGJ5dW52U1mXcElsjyEn
MD5:	60DB5388D0D5F9E41C8B37F136D16F10
SHA1:	87FA89A2CDB29342F06C1E37AA48FF4E743BD0CC
SHA-256:	60A9B918DC45D4635932C844E3FE2D57C5A1742893C8EC2742994A92DDBDADE6
SHA-512:	1349385E8CA764E921EC640EBDAC750FA367FDCA2C836B6B98DECB91E1D54119BA88D38B8E538E491CD3330D0F435F467FFA4DD44078CDBE18A36B00C0D863CF
Malicious:	false
Reputation:	low
Preview:	{"cryptouid":"8378168552460581464","cryptouid_sign":"27b1efdb97bf55526af8fc0e31d35229"}

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x420, components 3
Category:	downloaded
Size (bytes):	92510
Entropy (8bit):	7.961959919655575
Encrypted:	false
SSDEEP:	1536:hpD0XlLN3uHpa3chQbijjiCkGlOfltOHVZVU/zpse3nbdnL+pDtkeoRu0xkebXL2:hpD/JqGjO0w+ZV8Oe3bp6pxkeoZkebb2
MD5:	EA0E3D38DC5EC9EC29B91BA1D9E323B9
SHA1:	9DEACE0D7C00F14EB866CDA45A5BA814F565BE95
SHA-256:	E6CC99E5C30C744F25BC89098B8F587BFDBB9B24CC173B9C008C6F432FFDB1E7
SHA-512:	7BF4F5256453267F4F9047B12422BDD89791B51FB5B9CAB418C4C8F736AAF98278F57819602914C8E1C453915751B4B9A34A90076CC0DD6720958A19F4299BC8
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/JitwEocrGUIsjF7lIVjj81yr99dSOamCXttyW3h-_YJH6F1KYV6qX3iEpHS1nPcEz03nUgOqM9XNa9FbMUsIldglc_Qd9dDVe-Eh9K4cJMOY0AQB78C7CvcLX1boV-UWvh7bEYn87eEeCJM74wYIecz1VUC0dvUSsobArVa0tGYZWpy6eQLxELg5heZS6J_caSMAPmS2xCwwdiCblU0NbmbXanM9fi1RYPQOksZVCklr1QcQz-YHEHNnN8xA7JwcZjCbsWxPZenPnNKQCr5Om6muF5s6PeHKRz7rFNa_Y9N0a6V2-o9ap0ve1s0WFFa_W2TKh266_aX8cFNo1ovPNA.jpg
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65478)
Category:	downloaded
Size (bytes):	136929
Entropy (8bit):	5.501795427060616
Encrypted:	false
SSDEEP:	3072:QP1nTJbDhy8c/Sfnd24HvnwcIiMozmXKfmEX324utDjZcGPWnzIxJjQ1nncfIc7X:gGUI+mb4SzJjAnnUuI
MD5:	F9D980E639B51AAB70140317C1441692
SHA1:	372DA0A00B6A3817A270EF5B9A8270B8C18FFCAD
SHA-256:	F2FF8B356ED6FE69F64B04D06F014A48A33E78B542C9304D6EBA59625C437344
SHA-512:	7EDFC2B5955D0B0AA6640ECD6A8E7DA3552B33FC021A0EEDB4279065E7693C7BF94822A95DDE877DFF906C79FC0D5E7C203C434E21F705583CFD2E047CD47169
Malicious:	false
Reputation:	low
URL:	https://yandex.ru/ads/system/header-bidding.js
Preview:	/! v:1117086 b:default c:loaders/adfox/header-bidding /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let n=this;return function(...r){return n.apply(e,[...t,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)t=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");t=n[o++

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 231706
Category:	downloaded
Size (bytes):	82312
Entropy (8bit):	7.99708781517771
Encrypted:	true
SSDEEP:	1536:kAXTJvOGTDbA80pK0Mdq3wUAVa6BGS8EE/c0Psh6lufc4Ap7QgqHM7zxFX3xzOEm:kAXdJDn3QRoag8pcM6fdAOgq4xNu
MD5:	14E39BE019DA848A73DA7658165674CB
SHA1:	E016473C4189A8CC3DBFF754A48B3E42D68AF25A
SHA-256:	39595A1806156CFCADF3CC4E20C5C3F3EEC721386A0551790A15F025BA9402BD
SHA-512:	828A383DE549871AA80EC960A7E371EF47DA96D01EBB9628D1484CEED9EB698AEC5109B3DE0B24FF8000610A2C2D633616C9FD28D380656FECBAA930CFFED029
Malicious:	false
Reputation:	low
URL:	http://telegram.org/img/tgme/pattern.svg?1
Preview:	...........].$.u..._.;{........A.6..a@..0.....S.n..S#....}..=..5dwT..H"e........='"#....~{w...o......p.zq...._.z..W/~...v/...~........._....._\.._.....tw...\|u1n.W....?..?^...}........7W....:_.K.....z..........o....h...oN..^\...W/~.../...>@...W/~..._\|.......?L.o.~...Z.>..v....z...]8.....+.~.b..w/..../>........7~..............^~.........~}...}......?p......8\|..-7\|.......\|..l.............p.....V..o...x......o........_.x..W.~../..#.{y..._.../..W.......\|{......o._...\.!...:....x..v..z.H..1.....s.t....?..vmx..;.J..... ..[...K..'.......&l!...cZ..7...~..7..w_.p......v..r....x..\]......p..dw{....V....._..v.....zsX_....z...r....0^O~...r...Z..7../>..0...W..........\..M..&.Zs.G.........\|...v......M[.\..dp.~.\.-...f^.c......2.\|.f..t..36...-..^.4,7....W._.a.t......9\.+x..F.= .X.u.;C...E...q..;.k...R..fGtk.....%....(...oV\|A......g]CB..+.8q.b.\oB....x.....?....5R.d(..][....]J.%\|.A.-.hF-..3....(..A.M..n..-..z{K.9U.[B.^.^\...h.....-..z...(...`8a.

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3524
Entropy (8bit):	7.924817574061051
Encrypted:	false
SSDEEP:	96:0MEKXiCfyEsd3x4upVfV5c9wAGC8AznDu:0MVDyph4upVfVVAGC8ADu
MD5:	178785013466E4CC609425F3D6D506F5
SHA1:	76CFF05613CAA87BA61D0D2604536C3689178425
SHA-256:	A9753E18A87CDB5FD1632E3A8BDD811AA5946809021815C102B2601CD37FFFE8
SHA-512:	0D420FDFD301254C02980233EEA95D78AFD16E10DD8CCF7FD59444E714EC017D4DD7905440988DE93A28471FE30732411E556F4967280115C751562D1210189A
Malicious:	false
Reputation:	low
URL:	http://telegram.org/img/emoji/40/F09F8CBC.png
Preview:	.PNG........IHDR...(...(........m....IDATx.....\......E.v.2.....m.m.m..z7.$.v_.\|[.Sy.....A...........`.Ce....../7.*.`...v~....>.X......:1Mwuf..zs.=....!.(.R!...'..U<.x+GH....G...wj....g.....!..!".1d=&..~.....)G@.'.q.j.+\1j.#...l ..r.1B..(...}\..t/p.G@g.Y......C..n.%.l:.\|..&....m.....j.F.3....t@X.......p.B.ZK..'.A.)..\...{.KS...Y.k..BU.4F............1.5>O...@......&7..v...;./..5...L.....x/.K\.-u.K.y..{g..Oo.].....#..D.{i..rn....BiW..i....y0.t.?..S.ef...Q'7....{.......N.G+.r.....n..9.@..~.7Vs..uB......j.h..U.. j.,.<..Y..T.<+.1.....OQ2...f..V.....{F..x.t.X..t.l%....b..kg..O..s.!...f.v.S............J..D..\|..S.NX~J:...Ty].Ba1...M...!....(...+.....D.A.....+O.p.M........`2...6Z...-...k.qE.P1BG....!.).z._zp...;.....M&..#.......8...e.!.i6w.A/......E..-D."le...W..a..X.+G.....2TH......q&D.&...z7I}.Q.R..).....7.B.1x....].!4.>v..T.D.........M.r.}q&......^..W1.@.#U.....C.T..1..).k.....G...).,.#0..(.1.bH9..5...xp.......d......3....E.Ov..rTc.M......![.e..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24511)
Category:	dropped
Size (bytes):	24545
Entropy (8bit):	5.213080305450937
Encrypted:	false
SSDEEP:	384:gwdSDBKfFsDpxaPLQtjrdTEt3VE/dAyxml4qgpG0gX3DBNq+e:hUcKQLQtjEYdAyxm+Kn1Nq+e
MD5:	AFDD155AC8EEC69AA189C7CEEB9E6910
SHA1:	92E3FCD5F86308956B83C0BF9747205BF2C2F930
SHA-256:	8B604C8C0973824E01AB81AB5AD0A38568A6ABC41CE4A41A185CB2A182CE3E9E
SHA-512:	256A16D106009D919B5F42B9A3DE1EAC5F98215364E6B10B4FC555882F84A59DA9BC94BBF3CEE965534ED1F42B3792B59C9504BF16EDD08EF550F9656131101D
Malicious:	false
Reputation:	low
Preview:	/! v:1117086 b:default c:9537 /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const n=e.toString();return/\[native code\]/.test(n)\|\|/\/\* source code not available \*\//.test(n)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...n){let t=this;return function(...r){return t.apply(e,[...n,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var n,t=Object(this),r=t.length>>>0,o=0;if(arguments.length>=2)n=arguments[1];else{for(;o<r&&!(o in t);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");n=t[o++]}for(;o<r;o++)o in t&&(

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11028, version 1.0
Category:	downloaded
Size (bytes):	11028
Entropy (8bit):	7.982077315529319
Encrypted:	false
SSDEEP:	192:4oijUxKA0B3BxJPeLrh00JWNhi5A5HWdZ6SfroKthzwbMcYfQKvwpFVX2T+:Nx4bexHAE6STltlwbMcovaET+
MD5:	1F6D3CF6D38F25D83D95F5A800B8CAC3
SHA1:	279F300CA2CBBDF9F5036EF2F438607FBF377DAA
SHA-256:	796DE064B8D80EBA7CCACB8BA67D77FDBCDF4B385C844645D452C24537B3108F
SHA-512:	716305F4D2582683B64C61B5E2390983579EA0FB33C936DD3EA8362872176625FBCB6F5AD18D2ABF85DA82D14C33A9640DFC5749922CB2FC079DDF37864F361F
Malicious:	false
Reputation:	low
URL:	http://telegram.org/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2
Preview:	wOF2......+.......T(............................d..d..^.`.. ....\.r.....6.$.... ..t. ..EEF....(j....._'pr.X..C.....%I..=..#7fC....y./...z../.d\H...wN.........=.....!GF...uNG`Nd.".....~..a..`.)..R.!5jTH....i@.7TT,0iI;...kv..+.bR.%.3.....;I^..T.T.........4..tZ3.d..J.D5.w...ve...6...HI'%E..E{..G.l........]WY..M........Q.w<.....lu..A.p.v...e.NQ...'i...y...,.FK...=.r......{..].+.K...I.e...?.t...R...R...p....4T+.....!1....A.1...JE.....d./......,.......?..%.p.p..6..!..@..H........)....A3.1? .(`.....D..X.30..gl.b... v..;...u...1.9.......?@..(..@........x.g.L........g..jt..f.........x.....9vB..FM.;U.IS..wf.....O~.RP.,4.x..J./.j.......9h/.....6.....z.f..._..b..........z......r. .C.>j..@D.. :G.2.\|..z.^.[...7.....v9_=.$..G1..=c.dhz..Q,oP....*..[...f.b\.Z.aa....n.u...T..!'[..NC{.o.g.N..Y.F..a}...X..x2...q.X......P.{.n+..'G.o.b.N..6[;5..q..&.r...}k}.O.JVL).y.>..#..[.j.b.OV...[!...<.+.k.}..P..x...y...Q.....A.=.C....y.B+....2}\...f3...U.Sd?l.^7._}].G@..9R.

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x427, components 3
Category:	dropped
Size (bytes):	46811
Entropy (8bit):	7.978452484491139
Encrypted:	false
SSDEEP:	768:MUoHcpCSl8DMZksnR1+iiFBvTmVegBsKa5a6xZFCwCDzM2WeQXprO8NCLLJCkaRQ:vuFSl8wZksnr+iiFIYgynxZFwDINeQXo
MD5:	F038581F63719379854EB0BA1FB38AD5
SHA1:	E60DB6A6E33A981F883F336A2D4410B0FD114D4E
SHA-256:	33E7A7096F6741DFFAF521B4F67A983CB381338AC4BA9E254B3928F1CA9B86C1
SHA-512:	2C74D9119FF300EBF199BC50D9EFFBFB52D421483FFF4BAF5546FC47B8E6075B9BCC2D7B9B722324717D06AFA2CFEAED50EDB5BCD31FF347267328D680E8637C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C............................................................................"................................................................................<.x.. ....cx...z....Z.V......g.I.Dkl.Z..'..C{a....$.F.p<.r.+K....b..6r."..j].....%9......%8.....C.D...{.d.....:...0.z..6.(.Pg.+y..R.{V.;.'.....k^.#~.......mr... -.@.q.\.+F..0.....^/c...a..!Xd;{.........@..\j....\3m..p}NXO.m....{..nYU.............a./......\w.i.}IG/...#....U.cy.Po`...8.]w..._L..9.f3......s.......t.'.@&...!.d.ljL.D..cd..&j.............r......~..7%]1.H..ag....Wr.9........o..6.A.......Gjs.h.BV........_...(..y...m._.\|..Kz&........ck.WS..A.h...j..}:R.J".oT.q.ZV...X.....%..A..m...p5.;4.......%'=T..i3E.....\....[p..Q ..5rt8.....@....Y.;:.>._...39Q=?2..W...w_<.d:S.vu....G.e....1N.nyi.anC.:....T8.Zw.-g..m.^(gQ.y....h....#(E.0.Z...[x[1Q...p...w....e.RI D.Ff.i...*.....0.S....O.....~...c!.\.....

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11072, version 1.0
Category:	downloaded
Size (bytes):	11072
Entropy (8bit):	7.98233812008993
Encrypted:	false
SSDEEP:	192:X+O5i60QYQyX4xOc50jR0ujO1W4qEaeFw1CsfCIRsiFDK5mvuGDP3dJGkWNZuQST:uLyYQ5Oc50+91W45FwRBseDT3fGklt1
MD5:	E7DF3D0942815909ADD8F9D0C40D00D9
SHA1:	CF5032EEA3399A58870E8A05E629B006A8C7C3C7
SHA-256:	BCE2F309470952B7AFFA62FF4D91B454334C68CEFA541429B502904D20696875
SHA-512:	3632A44EE28AEC0CF67EF7D3780A18DB1AA84837817A3EA69A5F892D656A94B9FAEFC0314E2C38599410802F875DF73581558EE9511CED7F717FEDA29336CFA0
Malicious:	false
Reputation:	low
URL:	http://telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2
Preview:	wOF2......+@......T4............................d.....^.`.. .... .8.....6.$.... .... ..EE.r.8.6..z..z4.E......1..C..(0..(3.....ORrru+j.Ghy.#.....6h_..b{t...3p......z..:Jn.>X...jVV....z..-..F.R1.G....Q9FKK.T8...,....R.G:...af.......].8l:`.4..I..y..!....R.. .......m.1.0....@..V...>.u..)w.[.E..1.....v.n7......)..N.?.J..W6.t.F['0.9..^.=....A..A..#.jvv...'..JO....2H..Qf .w...#.p....q.8s.8D...a...>.3..%\|d5..5.r.......Bm.s\.>=....../.gz..D...$H.{\..kk.B...BM.^..'^`.-!../...'.[Bau...'.p....!.%B.. R.B.....e.w.........D8....0.oh`.......S..{^.S...............@.2..h..O.R......z...].....gp..z..c..I=.O...G..../.kC..5.{.5.G..I..~.7.$07.N......hk8..g@..V.^K.......S..$d....%.tf.....a..>Ei.8}Y...>...%.1..R2.^..Q....F.q..V.tY.`......f...o.5.. ...v..(..U......w`k...<i..@,.............:R}.W..O...6.@\|......X..-e&y,.dS.......z...8...;...v.......8.9.s..>..#.....I..!.K..g..../...Lk..`..j......x.3tNzr..G..j"..d.OH./B./.M14...A)M.....M$xd.m........B..h..X.

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9175)
Category:	dropped
Size (bytes):	9208
Entropy (8bit):	5.302373177497931
Encrypted:	false
SSDEEP:	192:mwSNinD7umI+xbmiwv8Y5gUT0tWGOpjsZYPe/W6UGcMrH:mwSNiDdxaiwReUT0t1ONjPe/W6UGcML
MD5:	BFBEDE26D7BD8AE58F10AEA5819767FD
SHA1:	DF9FC0D644ED6BB9FD1742932D528E824AFFF3C4
SHA-256:	83A9106414A1011B7E3C735EB5CAD51844680F29924C389125357B399ACDFFA9
SHA-512:	60C2128B42BC51C9C06FD82D006A9CDD5F769175F3E9D55868749690ACC27359C65D7F52A0F7F93838ABD0B4A9A5E431BB0D7CE99587790B6CE42FDCEA4AC0B8
Malicious:	false
Reputation:	low
Preview:	/! v:1117086 b:default c:927 /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const r=e.toString();return/\[native code\]/.test(r)\|\|/\/\* source code not available \*\//.test(r)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...r){let t=this;return function(...n){return t.apply(e,[...r,...n])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var r,t=Object(this),n=t.length>>>0,o=0;if(arguments.length>=2)r=arguments[1];else{for(;o<n&&!(o in t);)o++;if(o>=n)throw new TypeError("Reduce of empty array with no initial value");r=t[o++]}for(;o<n;o++)o in t&&(r

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 93974
Category:	dropped
Size (bytes):	25784
Entropy (8bit):	7.991613244245382
Encrypted:	true
SSDEEP:	384:ONKFSRlciUM9LOvVT9idFe+BTvCJfvkyYZH+i2lbKTun49vn8S7A4xaK4jut14:Os+OiUM9qvQBckVQ9X+hA44A4
MD5:	AD8274C9E206DBE7A5D67EE8133976BF
SHA1:	49BFA94431FC7EDD170EBF8E4F4AD5887EB1AA9B
SHA-256:	DAD2768D56535F7BD25C1BCFACA202B9B8373F53E5CB8A36EBDB82BB2FD406A3
SHA-512:	A83077CF2EDBEC5A017A15A0C4E38BD31F04F2CED88CE20E8A7E91AFD20BB339909154658F4AD376641AA72C3A5520A03C306554A670EECB28152794F5A0A2EA
Malicious:	false
Reputation:	low
Preview:	............Z.G....WQ.......l..2..0...,-.l...i..J..bu7B..m}7...~..<.A.g...^kDWUddd.22......[...Q1-fg..r.~ocss}...E>..&.x0/...t0..N...l<.......g.....W.......h.O.F.....7b...gD.H.1R.').y9.:)F.....o.'.....z.I...e'.r.=C.}.,.L..a1)..^..`~......\|2.?..{r19fS.+..g..{;.f..l~X...l...6...../_v..j........M1..J....1.....u..F..t~...-]..x.kl....wF..[..Z..KW..w..v..8S........8..`..w. ;..C....(T\|..../N..B~.xn`....`4:...Y..Q>.'..l..x\|1.:U...w.y.].............r....'..Yo<x..X.6......l..K1......b.hkf...w..W.d.V=O..@[..H.=.1....\|~1.d.0.....&..I...M.B.U.........]r......M..b.^....\|.....y[..2......>_..3.,...F...........Y.....x.. F;....Q9...P.w..bu.:]........p....z5.N....'++.....R1\.<P.^..O.[V.......+.Vg..<.0..WV......6>\|.`...[.\;Y..b...6.`% .46....%.../'.V....y.r.N.#...q>,`0....Tz........>.u..p...5.\...$.........<.2m$.7q.x....\|.....;w...+.O.^....0?....\|:.......mk.!b.\k..&"....o......g.....VVb. i.\|...b.......t..\|.Y.u.%...LM*.Y...(.Fel...hp..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x534, components 3
Category:	downloaded
Size (bytes):	153534
Entropy (8bit):	7.973046330311968
Encrypted:	false
SSDEEP:	3072:hbcgbMNyl1cv5AyHcPc1Vs7eAMm2p+cyejB79Y8DIgIc/QoF5LnD46DIhxTUvFj:hbjE2GRcP0At+yeN9RTQorLs6DIhxTcj
MD5:	9307596C749355572542DD87E85BA8F6
SHA1:	957070A8A89EE9FD78679FDE2D2DE4FC68DBDA73
SHA-256:	1A50F99951635657A3726080C1E40E3FC9073A8CE07D6CF31A05AEFA4F9FF3AA
SHA-512:	BF5C7721758EBA869ECA2A102B9CF64E373089865107D5658DEFB1FDE5E2155DBB2FE55AF08D065F0E95E4CB02017FCD03470B88A4F30991B2F4A6EA5E0CFD67
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/MRaZr89OCD5Qq9z9INWqGZsk0QSCS36uQSIbQJrq-YdzjVbiaMkbpeXSl1tcB8ZOu5KUs8WzGcfEXddbIVY78z_o8V0IxYibiI4BQsVCubSLMz_lP7idln0bE9i4LU0cr-irveRblfIb2UsB_mN-LI087zClUs3TsB41pQ-pQjAuG9DOmSM9WJDISYjfHg-P2VQOWNeOzARqN_JEa9FzI3lf0xVBuRxjgqwm2ZSf-JgZE5vXLDKKYw2nq41qEvh3ltHN9c_9kF9mUtaVqBhU01z7Ipud_44CPBNBH4BMYOWsZzxLMtqUmCN_GfmitAifPzbWiYtNo8envAOO5HmUUg.jpg
Preview:	......JFIF.....H.H.....C....................................................................C......................................................................... ..".........................................K..........................!.1."AQ.aq..2...#B..R.$3br....C.%4S..&Dc..5...................................<........................!.1AQ."aq....#2.....B...$3Rbr..%C.............?..NO[..W.q^e,..-..\V.+.`..}h.,4.o]T.9.Q..Wb..........O.G.oI...K..F.P......../...pS.S.g.. .aQ.P<.+..y.....GYF..2].....6?J...R.....#b.A.Q..).j.>u..[.-..o."J$....1.d.........Iz.T .SN.%.).._.F..J_..q.....T20pF....m..S..,.U.Z.l......H....G.....m.K....eF_....P...>XD..q.jF...GCPEwb...o....4.]...AV.T.6...9.'IoW).y.....8.G.8.?.).^E.2..lZ;.r)..(.L...)`...#...g..X.t. ......Ntk+V.q.Y...{....Y'C...\...Fx...b..#.>..tB-W.6.(....,..0...P..tg..'$.G..e.}..*.{.b.HX..S....V..Zj...$.L....9.i.\|.#.JU...5....v.%..,...M.J..$`...1...E..;.......QCd..B.'..8.w..........Sv.%.o..r...mC.Jr>...

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44546)
Category:	dropped
Size (bytes):	44580
Entropy (8bit):	5.45383431026039
Encrypted:	false
SSDEEP:	768:rj4PvgNTAOEFbbZOUVjZlHn9ogBQzS6tqib/V/li4rsWQfEgyVj4VcUku8Tur7//:Q6XZVhMgHYkVO4A
MD5:	344F097E4203CAE3E76254B37374D36C
SHA1:	02B7A0F5C0F5A5E746CA838DAF5411439285567C
SHA-256:	47E94124F0E54E81F2A2B6269FCFE4199FB028C82EA18A56CF02ED7DEECB01C0
SHA-512:	1EAD061C9C61C9D60218F0520C89C6C7194BFC371FE4164AF5C9146439B70CF984FBCE2BD7076FBC7A4C3861BAF981C97808E8DBBC562B7AB351C739C3B86C7A
Malicious:	false
Reputation:	low
Preview:	/! v:1117086 b:default c:6660 /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let n=this;return function(...r){return n.apply(e,[...t,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)t=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");t=n[o++]}for(;o<r;o++)o in n&&(

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	7097
Entropy (8bit):	7.926067806981815
Encrypted:	false
SSDEEP:	192:UDvtp8f6Fd6HupInZlsuwYk8yxMz9Wcw8nvsLfkj7d:UDvkC30MN/7wvsTIp
MD5:	AE42CD9F08B92CF10C19DAE52E820429
SHA1:	4B61D17A4BDDDD5BD6AE355E5CCF2F9F3D4A980F
SHA-256:	D4522FF5AEFBF28B5CD65072883D088E76E448D56ADE461ED3C77350EB9433CD
SHA-512:	975B22BF7D96297A1D921F7BFD7E5B3B0ACA32D94B6BCBD29A6ECAC7F10B9B463B436DD5DCA1240A868A37946FB45EF42531F1828C73F14A860A4662386FF9F8
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/FmiN1jd6kyJcAeWZgqW4F1M6SO2Eq2RyWTZW_blsnSEOdaGcnsZyCyUn7iIiSZTDSWAItP34AXMi8zvOoqM-IcdUp3TUVCz0MhcVRIWT4BXCt3eTxwYPub8hQGapqCMCUQQ656ysDa7TxKg2_iJgkXF8jnWEsubIs0Q7ol6Ma4rq1Tj21ueeiPUmscCaomkBd2JrnI_qU6CxtVAC7Dn7w-z6QsmN4TePjVK8NNkb7liOQWKnbxGEfgDyDriRvwLWSnaFj8kfRICBMhevGgqVyW0k0KWygDnfKeiWFwAmnmNtvGOtou8h7HZNKTgQEuX-Z2IvurSOcnyALF6aJtSGUg.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"..........................................H............................!.1AQa."R..2Bq...#39br.....t.4.8Cuv.........................................=.........................!1.AQa.2q......"....B..#3Rb..SU...............?....+M..\|)JR..)HB..!.R..)JR..)HB..!.R..)JR..)HB.....J..x."C..i..T..{.....!H..&.>.T..81.l....l.q.N.......#.HS......\|j.V..L....../.os..Z....Zv.f.lg.......v[.H?(........V.f....v..".&...#p....kO...u.h[j.X ........(n ...c..p.p.)HB..!.Vv;wV).R..!JR..)JB>.8.g.cA...s$:.c..y..!)BG.$..]..\5cz/....E..oF.g._!M..S..d.......P..@....._.l.'....6..HJ..2..L...K...8......\|.l}q.....q.e..u.......f.t.[fYs......Q.pu>N.H{..h.}.yX\s*! .."5.....&.d.K.K.,,......BYe%%I.Z.7.N.kF.....W.?>6;w....v.2...C.....P.....R.q{[dr.E.k.b9...R3.'$.V..}....BaZ.....I..G..`......J.v..;..#p.:.`..\|0B..+R......\|".ko.-...

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 6166
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	7.701291372245517
Encrypted:	false
SSDEEP:	12:XOG9cwCZy1g1haY5rxccYyKNkS9Q4A0W4jd6bmsKdsnXU0AfoG:XO2cwCZy1shJ6ceNkS9BA0W4gbAd2kZ9
MD5:	C85C4C993F7C21F4356F74EDCEA79D89
SHA1:	3D342626602CA1B1F40D941E095D9D47D5956DC3
SHA-256:	556ED4F6FE878A3E5C5E1073AC10B977A3CCB6C169053298BA40FC30F4B794AE
SHA-512:	8D02A1A469EC0A5330EE75836B6BD7A09694B33DD3DB68AF79A0DAEA0F76B1E70D3265FFEC085F2BF6AA49111DDF82024662A8A6387BE9EAE85C61FFCA8F5636
Malicious:	false
Reputation:	low
URL:	http://telegram.org/css/font-roboto.css?1
Preview:	...........Ms.@.......%H2...0...4..3q...C.q....^..v;...fHra..]..H+.:5..:/.\|afO.qj.>...1.."3~...U..M..UuS5..\|..ivE61.^..a.1.Ww....s...H...cz/f7.bbl..dxvf..l,u.5K>...{..)..b...l.u......c.\.......9..Z..-.Eu..uZ......v.....,0.......-.i.&M..#pm0..".)6....~..?....YwE4.. .}e..H......P.P.Bt[ .:..8h....I`.../......^......y..:.d.4..l(...0.1..V#..F.. _..B.......$,B..0...... ..P.M^..\|..&(...).#..X.X.L..d...Q&"0.8e...8cH..q.....G.i.C.I...={.GV....@Q.....htT4R.2.0...x.8..Q.8..U(.SE....D.7.LM...P..:b=i..9m.O5..A.t..._E....et....K.../......S.v...J..s4.....:{......F..}..N.w]..%7.........f..OOCp=/^uC...+j.4R.uC....7...}...N.o.!....5......f....

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	dropped
Size (bytes):	157593
Entropy (8bit):	7.963707607979531
Encrypted:	false
SSDEEP:	3072:hT4vlvbSpXZrZlfg7kBGijK2eTI/5HVl+PZ65XbAW09L2eI3z3pGHgEnq2c/1MNQ:5GTYA2jec/5iELAVL213bpGHDq2ctIA
MD5:	6A09B09192A0F535B837FDD2E3FB1951
SHA1:	027DD67045B6F2C6761FDCC9A057798F6D1B51B7
SHA-256:	AEC62689EEAA8B3E892B3411E59485D74B4E1E7AFABEEA32E2817B3C947EC2B0
SHA-512:	6D9466C7FC2B1DC690A7164D11C78E3572DA57E9C7BB7577EDF541601A2D6486826F33641AC9CEC6FC8BEEEF9C1E5BB7E07908CCEF5DE518E9CB758F530C4010
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	downloaded
Size (bytes):	150870
Entropy (8bit):	7.96308432149556
Encrypted:	false
SSDEEP:	3072:hrb4EqF8a7dP8LGjEYHznAz7xrr++lEXMsQML1:Rb0X98LGjm1dNs5p
MD5:	42EBA095FDFE5B40A98432260936ADC3
SHA1:	C320B6B619F83A01314125214619EAEACEFEB1F9
SHA-256:	B87D908934C97D378A532E936DF39F80BA8EA319D811426351507FBD67306972
SHA-512:	B91D03096938430B1C58FB6E19A72E7F94DDEF13D94CF649A6D8EF8C913135CD7C5778772CFE21603D0B7EDC6682AA3E0FF836DDB84C418E1101380A6C984006
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/ELzs1UgArxHStzcD91QUa9uaL2ddyRSFVOb32HZ5Q7SZLZI9SN8-CvHqkdeSTXz-1FJOHYLyaLzDpUXHrn-3RXYO_4I8oBD9yzwbCHmFeXODLfgUkIjYaugi2NfHyyx86_OZkKL2-vj668ki5vH1mtUCpu871TMMon8057k3jLN1Ba5qNzugM2DrntzGDSlJ045JcFoOh8aLOX3xkDOc0zE2t5O1lQOe8IC-8rtsvjePL8Yyh3HfF-P4WjILj0PfQgv1i7-JHb-jW_hkPmRAB42Uq2-m9whBNQYgypUynBNyLqkApbiUN7qdshWXE3jjbrm5i1asFn_Nd1GtMbAZpA.jpg
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	downloaded
Size (bytes):	195183
Entropy (8bit):	7.965602222254113
Encrypted:	false
SSDEEP:	3072:htveBwkjEBO7Ky9IfKCkqmTnCjZc5svOOEffl7knN+xaRyX2Vt0:lUmZy+P5cnULvO1k+xaw2g
MD5:	8089D4608FE6E23C094499ABD369063E
SHA1:	AD6941B528E2A43BECA3EE538C2081563FBDE866
SHA-256:	F97482FB0619957F485B36371A87AAF2134D5C655CC3B74FC565A857FC4FAA44
SHA-512:	D0A6E2503DB00AF9339FC604277C918B0D56457F4206D76386A4310F1B8CC55347CAF31FF2D7A082E72D63498A0AF3BA7D93E4814E3573BF6F81E6F23179583C
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/MSpszLg7U46su23KMCgH8A98mn1j0p2-6wBkxrguTs8yEhVA-oaBykeBGHnbmDgMIfkKoJwjFD22bkLCfzLXC_nZkOpn_IvNZWrn4lKleup8F9gallYy7JfpvqYPTDBOfKk_NhPPOXvBte8UjBr8p6BNiekhw_wgidfU07LtxhQxhg-yfs8gODhc8KhI3B2tedOpJt4s3gCKcD8iwg0mvt8ypGShZW-IqnTMdSM6viCBG3d1niNKp-WAIbJqf_Nqt8CF3bJxTZyy07G2fU3oAZBZC0t3aiIqapI8FAZf_TqIt9ENGUPFJdG1adRWyp65Tdcs7sWd9lUAw3udNMgwxA.jpg
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	807
Entropy (8bit):	0.2929836665455332
Encrypted:	false
SSDEEP:	3:CUI/lylAxBFzen:0he
MD5:	18B3E43ABAD26BDAC6F4CEA944777B62
SHA1:	5848CD0ACA8D9FC92D8449B13F829CC1F6CD310A
SHA-256:	3CA19E57C9A2465AE4DF271316BA4D29E7FF7F113A2A2C5297780C0B7A0AC09D
SHA-512:	1615D2831EE2B7A6FDA558521CC36AA0974262869F162635B6321644E23B278808B1760979CE30EC4B2BBC41AF487E1E434370B5905D7846E0904C4550D7B4BA
Malicious:	false
Reputation:	low
URL:	https://s.suprion.ru/p?source=alfasense&id=5322f90c-68ee-4d33-bc6f-6140cef1f878
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,................;

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (45623)
Category:	downloaded
Size (bytes):	45670
Entropy (8bit):	5.463654508169904
Encrypted:	false
SSDEEP:	768:LkvrycUTFFtSbULuZwVKzvwtJ83boWP7FKfxGS:IvrycUTPL3VbJtosfL
MD5:	C371DEEE9EFCCFEA4089EF7B0FDED83D
SHA1:	49B37C54212766E619B015D39FE89456733105A8
SHA-256:	BDBF668275AC03AC4CC3E5258DD60DC63D9D9BDF8EFCFF00FF3D497A419BC436
SHA-512:	37BE0A9285D708125F00B47695401F3EFAD9F62C2CA1F06766E0D73B89703B0C4943AE85CE51C59ED7FAEDF2992978D2544F2C54249258CA152114C7BB35E892
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/1117086/ee55314d29f5e472edba.js
Preview:	/! v:1117086 b:default c:floorAdController /.try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(t,...e){let n=this;return function(...o){return n.apply(t,[...e,...o])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(t){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof t)throw new TypeError(t+" is not a function");var e,n=Object(this),o=n.length>>>0,r=0;if(arguments.length>=2)e=arguments[1];else{for(;r<o&&!(r in n);)r++;if(r>=o)throw new TypeError("Reduce of empty array with no initial value");e=n[r++]}for(;r<o;

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	231706
Entropy (8bit):	4.593328315871064
Encrypted:	false
SSDEEP:	1536:XVU9J794HJ4E7mwNUiRPt5jmU7LxmMS2S1J7g8tEqcqMWKB5v:Xew7ePc
MD5:	D0C22C6A97023D85BA6E644A41C44A5D
SHA1:	4284EFB616C182DA4450C123174CE0E81A322845
SHA-256:	118ADD53487C02AAF5B5AB9F69380FA06717DEB10492E14AAA487E3C62806AD4
SHA-512:	DA96462F4F999BB65509D32E4D5D2E1FD74555CE78D43E5F80FC350155BCE59250337CD1796B17D2132F39429B5E3FD95D05101EE9F9B29BCE2BB7B44B6E4EB8
Malicious:	false
Reputation:	low
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1440 2960" style="enable-background:new 0 0 1440 2960;" xml:space="preserve">.<style type="text/css">...st0{fill:none;stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st1{fill:none;stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10.0001;}...st2{fill:none;stroke:#000000;stroke-width:2.9998;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:9.9995;}...st3{stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st4{fill:none;stroke:#000000;stroke-width:2.9999;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:9.9998;}...st5{fill:none;stroke:#000000;stroke-width:3.0001

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3713)
Category:	downloaded
Size (bytes):	93974
Entropy (8bit):	4.749254675540498
Encrypted:	false
SSDEEP:	768:x3+62J1xNNt3p1SG6CwPHG+AIieDPxsyk7W9vwCiPZZeRrZ+rgbQafIw8JBgHAta:Fj2jNt3Qsyk7glZ+ksv7e6a
MD5:	17BE6A8D79E8322F782C74F998273A3B
SHA1:	0C79815AEF6A4ED6BCC5AE6A4D5DD459211B2717
SHA-256:	9DB6A684C4B8C87CED6CA91ED34A348464A41DF4D3F74C007CAE6D87E68A1E88
SHA-512:	E02FEF9BEF104A7D99471BA7DF5882EB4EA1C2447B8F3BA3A53F063E3E180EC8C7C90E5ED529390806413F750267AC95BD469C4A1C329AABD8806E356B10E59C
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/widget-frame.js?62
Preview:	// http://paulirish.com/2011/requestanimationframe-for-smart-animating/.// http://my.opera.com/emoller/blog/2011/12/20/requestanimationframe-for-smart-er-animating..// requestAnimationFrame polyfill by Erik M.ller. fixes from Paul Irish and Tino Zijdel..// MIT license..(function() {. var lastTime = 0;. var vendors = ['ms', 'moz', 'webkit', 'o'];. for(var x = 0; x < vendors.length && !window.requestAnimationFrame; ++x) {. window.requestAnimationFrame = window[vendors[x]+'RequestAnimationFrame'];. window.cancelAnimationFrame = window[vendors[x]+'CancelAnimationFrame']. \|\| window[vendors[x]+'CancelRequestAnimationFrame'];. }.. if (!window.requestAnimationFrame). window.requestAnimationFrame = function(callback, element) {. var currTime = new Date().getTime();. var timeToCall = Math.max(0, 16 - (currTime - lastTime));. var id = window.setTimeout(function() { callback(currTime + timeToCal

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 11040, version 1.0
Category:	downloaded
Size (bytes):	11040
Entropy (8bit):	7.982229448383992
Encrypted:	false
SSDEEP:	192:4Q49xPa2JiaMac+2d26KTpwgLfdRVH8Hfyj+lGSdVtxejHgwPvuD14CBt/F8bxt:4QcNc+2w6eJcIoGSdVtxoHgU+1B8bxt
MD5:	5E22A46C04D947A36EA0CAD07AFCC9E1
SHA1:	6091D981C2A4EE975C7F6B56186EE698040BB804
SHA-256:	0F53E8B0A717CA4CE313EEC62B90D41DB62C2F4946259A65C93BF8E84C5B0C44
SHA-512:	3E2DCB20C7416160573EA7C7A17BF7250132C5203161B03AEAA3CF065E3CE609DA6D1B317D3739AAD7FC0C092C44CD0C4EA5657A63BFA530C66F9B0ECB9DAF15
Malicious:	false
Reputation:	low
URL:	https://telegram.org/fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2
Preview:	wOF2......+ ......T.............................d.....^.`.. .... .!.....6.$.... ..~. ..E...l..a.[).r1J.(.....u.7...(U.r....=....2....h.F..j..P.).0...]~."Jk5$<...L..S...9s...Qs...y...;....-...~.....RJ0.......$j......1F.H....Pb.M(....(.m ..Y.....,..e.q.H.U.iW.D6'..6L..c.).#h...I...O^.T.m%...@....L..q.5`T=.Z.....mt...i.....:..T..P...!....Nnn^.[Q.......Q..^(.....0{xe.Lw..:..s..#................@{.........==.=I...>2`L..I..7!d.:H(. r..q....3.."......fMS.4...R.~..l...h8...r.(+.....<.is.p..:..A...$,.q>~.a.]..!.L~{.W...5...u~.......P..p..'D.8..).i. 88..!..h...........`.q......in.....p&............' ....;H...........v...:.4..S.T>...3m..j.g..i..#{N.......}un_..g/....8.(]..W..4<.G._."i..x...6.5....r50..j.)...NW...v...@Z.z.bj).k.........*....o..\..a.G.e..).[..[.q^...N).6}h.>u..2..,..G.i.....h.J.m^..N..o'.+..k..g.ro......z............Y=1.M..g.F.=...<P[..U..n@A....X....b.;.FZ{..3'...@d....X...8po.M.....-Y..0.T..:.E.W.8;DI...}........^...[.[.i..+QF..o....

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	87
Entropy (8bit):	4.748689583018182
Encrypted:	false
SSDEEP:	3:YGXZZHdWSW3l6dU1RHJHGXcEXDzFZSjyEDg49:YGJ5dW52U1mXcElsjyEn
MD5:	60DB5388D0D5F9E41C8B37F136D16F10
SHA1:	87FA89A2CDB29342F06C1E37AA48FF4E743BD0CC
SHA-256:	60A9B918DC45D4635932C844E3FE2D57C5A1742893C8EC2742994A92DDBDADE6
SHA-512:	1349385E8CA764E921EC640EBDAC750FA367FDCA2C836B6B98DECB91E1D54119BA88D38B8E538E491CD3330D0F435F467FFA4DD44078CDBE18A36B00C0D863CF
Malicious:	false
Reputation:	low
URL:	https://matchid.adfox.yandex.ru/getcookie
Preview:	{"cryptouid":"8378168552460581464","cryptouid_sign":"27b1efdb97bf55526af8fc0e31d35229"}

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1653)
Category:	downloaded
Size (bytes):	81540
Entropy (8bit):	5.317231575305513
Encrypted:	false
SSDEEP:	768:H2MwWGYLMcFu9/+riW3gdL3Pbes07Wlj/Szl05JfFDMSnWWek7ZaWhzeFVuSTWYW:XMcc3PMqj/S505JflMSnAk7Zu/q
MD5:	6140B1DF4AE44402E582C7958844070A
SHA1:	5EC33B4A43A28C337574B185AF29AE481E9BD426
SHA-256:	D297495FEB9107B782485EFE5C5F908306CDEED2E03E8510554DB224423EE56B
SHA-512:	57C95379F63E8630A66CABD55C91AEF52381ECF856A1C6BB529C30AFF02B3D1BB918AEEBFEFCE2B52B49AA83BF417F3E0F0363A76B054C73EF6FA27E06D010D8
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/widget-frame.css?67
Preview:	:root {. color-scheme: light dark;.}.body {. --text-color: #212121;. --second-color: #738ca7;. --accent-color: #2481cc;. --accent-line-color: #4ca3e2;. --accent-btn-color: #2481cc;. --accent-btn-bghover: #e6f1f7;. --accent-btn-bgactive: #d4e6f1;. --bubble-bgcolor: #fff;. --bubble-border-color: #d7e3ec;. --voice-progress-bgcolor: #d3dbe4;. --radio-bghover: rgba(0, 0, 0, 0.05);. --popup-bgcolor: #fff;. --radio-item-color: #2392e7;.. --bubble-logo-icon-svg: url('data:image/svg+xml,%3Csvg%20height%3D%2220%22%20viewBox%3D%220%200%2024%2020%22%20width%3D%2224%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cpath%20d%3D%22m488.649875%2044.6098697c6.442438-2.8224615%2010.738405-4.6832009%2012.887902-5.5822181%206.137252-2.5668769%207.41252-3.0127709%208.243723-3.0276516.182815-.0030813.591576.0424775.856354.2585203.223574.1824224.285088.428849.314524.6018054.029436.1729565.066092.5669556.036954.874815-.33258%203.5138587-1.771648%2012.041067-2.503764%2015.9766489-.309

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3535)
Category:	downloaded
Size (bytes):	3536
Entropy (8bit):	5.144683478018665
Encrypted:	false
SSDEEP:	48:s/ALS3HDsqOiat5QJE1OwADKXKiKrth2hwimHA21kjQWk00GpshbMVAkYawfTU6b:sYgjst5aE+h2ZmdmUnGRZYbfTB347Bq
MD5:	B5D1ED0C33ECCE6CF91F759FC3CF6D68
SHA1:	2EF3F4AD7E9D800ECD0D4C16EA5C7A1647824AEA
SHA-256:	FD44C81E8612365E2C140CC1C544F783196829B486F52DE2E3013AC3FECCA570
SHA-512:	8D1D3F3FC95A1398AF44FD8F98418ACC7803E73C83CBC38582B2A108A5224634F212101E78D9C0C328C399D5A22E505824F508EEB13C321EFD12CDC2FFF31CB1
Malicious:	false
Reputation:	low
URL:	https://cstatic.weborama.com/bigsea/contextual/v1/weboctx.min.js
Preview:	function WeboCtx(){function p(o,t,e){return null!=o&&o.hasOwnProperty(t)?o[t]:e}function f(o,t){return(t=Array.prototype.slice.call(t)).unshift(o),t}function a(o,t,e){(xhr=new XMLHttpRequest).open("GET",o,!0),xhr.onreadystatechange=function(){this.readyState==xhr.DONE&&e("url collect api done with status",this.status)},xhr.ontimeout=function(){e("timeout url collect api: ",t)},xhr.onerror=function(){e("error url collect api: ",t)},xhr.send(null)}this.loaded=!0,this.version="20230320",this.push=function(){for(var o=0;o<arguments.length;o++)try{"function"==typeof arguments[o]&&arguments[o].bind(this)()}catch(o){console.log("[weboCtx/push] exception",o)}},this.collectVideoURL=function(o){var t,e,n,c,i,l;o?(t=p(o,"debug",!1),e=function(){t&&console.log.apply(console,f("[weboCtx/collectVideoURL]",arguments))},o.clientID?(n="https://dx.frontend.weborama.com/videos",l=encodeURIComponent(o.clientID),c=encodeURIComponent(o.videoID),i=p(o,"targetURL",document.URL),l=n+"?ctx=1&client_id="+l+"&vid

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
URL:	https://sync.bumlam.com/?src=asense&s_data=CAIQARja97e3BmIkNTMyMmY5MGMtNjhlZS00ZDMzLWJjNmYtNjE0MGNlZjFmODc4ogEQhcaPWneiEe-G4AAlkMBkfA**
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	231706
Entropy (8bit):	4.593328315871064
Encrypted:	false
SSDEEP:	1536:XVU9J794HJ4E7mwNUiRPt5jmU7LxmMS2S1J7g8tEqcqMWKB5v:Xew7ePc
MD5:	D0C22C6A97023D85BA6E644A41C44A5D
SHA1:	4284EFB616C182DA4450C123174CE0E81A322845
SHA-256:	118ADD53487C02AAF5B5AB9F69380FA06717DEB10492E14AAA487E3C62806AD4
SHA-512:	DA96462F4F999BB65509D32E4D5D2E1FD74555CE78D43E5F80FC350155BCE59250337CD1796B17D2132F39429B5E3FD95D05101EE9F9B29BCE2BB7B44B6E4EB8
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/tgme/pattern.svg?1
Preview:	<?xml version="1.0" encoding="utf-8"?>. Generator: Adobe Illustrator 27.0.1, SVG Export Plug-In . SVG Version: 6.00 Build 0) -->.<svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px".. viewBox="0 0 1440 2960" style="enable-background:new 0 0 1440 2960;" xml:space="preserve">.<style type="text/css">...st0{fill:none;stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st1{fill:none;stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10.0001;}...st2{fill:none;stroke:#000000;stroke-width:2.9998;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:9.9995;}...st3{stroke:#000000;stroke-width:3;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:10;}...st4{fill:none;stroke:#000000;stroke-width:2.9999;stroke-linecap:round;stroke-linejoin:round;stroke-miterlimit:9.9998;}...st5{fill:none;stroke:#000000;stroke-width:3.0001

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 160x160, components 3
Category:	downloaded
Size (bytes):	7097
Entropy (8bit):	7.926067806981815
Encrypted:	false
SSDEEP:	192:UDvtp8f6Fd6HupInZlsuwYk8yxMz9Wcw8nvsLfkj7d:UDvkC30MN/7wvsTIp
MD5:	AE42CD9F08B92CF10C19DAE52E820429
SHA1:	4B61D17A4BDDDD5BD6AE355E5CCF2F9F3D4A980F
SHA-256:	D4522FF5AEFBF28B5CD65072883D088E76E448D56ADE461ED3C77350EB9433CD
SHA-512:	975B22BF7D96297A1D921F7BFD7E5B3B0ACA32D94B6BCBD29A6ECAC7F10B9B463B436DD5DCA1240A868A37946FB45EF42531F1828C73F14A860A4662386FF9F8
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/FmiN1jd6kyJcAeWZgqW4F1M6SO2Eq2RyWTZW_blsnSEOdaGcnsZyCyUn7iIiSZTDSWAItP34AXMi8zvOoqM-IcdUp3TUVCz0MhcVRIWT4BXCt3eTxwYPub8hQGapqCMCUQQ656ysDa7TxKg2_iJgkXF8jnWEsubIs0Q7ol6Ma4rq1Tj21ueeiPUmscCaomkBd2JrnI_qU6CxtVAC7Dn7w-z6QsmN4TePjVK8NNkb7liOQWKnbxGEfgDyDriRvwLWSnaFj8kfRICBMhevGgqVyW0k0KWygDnfKeiWFwAmnmNtvGOtou8h7HZNKTgQEuX-Z2IvurSOcnyALF6aJtSGUg.jpg
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"..........................................H............................!.1AQa."R..2Bq...#39br.....t.4.8Cuv.........................................=.........................!1.AQa.2q......"....B..#3Rb..SU...............?....+M..\|)JR..)HB..!.R..)JR..)HB..!.R..)JR..)HB.....J..x."C..i..T..{.....!H..&.>.T..81.l....l.q.N.......#.HS......\|j.V..L....../.os..Z....Zv.f.lg.......v[.H?(........V.f....v..".&...#p....kO...u.h[j.X ........(n ...c..p.p.)HB..!.Vv;wV).R..!JR..)JB>.8.g.cA...s$:.c..y..!)BG.$..]..\5cz/....E..oF.g._!M..S..d.......P..@....._.l.'....6..HJ..2..L...K...8......\|.l}q.....q.e..u.......f.t.[fYs......Q.pu>N.H{..h.}.yX\s*! .."5.....&.d.K.K.,,......BYe%%I.Z.7.N.kF.....W.?>6;w....v.2...C.....P.....R.q{[dr.E.k.b9...R3.'$.V..}....BaZ.....I..G..`......J.v..;..#p.:.`..\|0B..+R......\|".ko.-...

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (423)
Category:	dropped
Size (bytes):	20469
Entropy (8bit):	4.794354724706397
Encrypted:	false
SSDEEP:	384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb
MD5:	1FF8B98C72268DE58837846F2056C65A
SHA1:	E77FCC14F1EFD17D319C9F82627E5789333B9DBE
SHA-256:	0F6CDD09B3BBEBF50C4E1679AFF6F021F5E183A4BA2DEA3A0801394599FF6AFD
SHA-512:	1A680A7E87F16520DA934F4034CDC601EBEF9C306C7F5E3EA165588F044142CADCF5EB06CEFEDC8EA7768FF63830586A2776351C7B9429F1E33B639ADCA5F1ED
Malicious:	false
Reputation:	low
Preview:	(function(window) {. (function(window){. window.__parseFunction = function(__func, __attrs) {. __attrs = __attrs \|\| [];. __func = '(function(' + __attrs.join(',') + '){' + __func + '})';. return window.execScript ? window.execScript(__func) : eval(__func);. }. }(window));. (function(window){.. function addEvent(el, event, handler) {. var events = event.split(/\s+/);. for (var i = 0; i < events.length; i++) {. if (el.addEventListener) {. el.addEventListener(events[i], handler);. } else {. el.attachEvent('on' + events[i], handler);. }. }. }. function removeEvent(el, event, handler) {. var events = event.split(/\s+/);. for (var i = 0; i < events.length; i++) {. if (el.removeEventListener) {. el.removeEventListener(events[i], handler);. } else {. el.detachEvent('on' + events[i], handler);. }. }. }. function getCssProperty(el, prop) {. if (window.getComputedStyle) {. return windo

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 299x299, segment length 16, baseline, precision 8, 800x533, components 3
Category:	dropped
Size (bytes):	84856
Entropy (8bit):	7.963573997986504
Encrypted:	false
SSDEEP:	1536:+pc6OtwllmWZ2njY6ZKr6j6/F7ArsAGIQvNt2CxHVwuc/c7VHkshf9O:+HOtwvmWZohTwpArsAZQvz2CxxVEe9O
MD5:	7D866FBA6E4EE5A2E8A6E3FA25D4BA9E
SHA1:	0890A5FB5FD3E4420A08F9592FE28ECC06494FCC
SHA-256:	DD2F45355CB54D8DB611D3FB1C5D6420A6178E0D93083180FC61519080EF45BD
SHA-512:	88D11ACE417D730F075EFFC69825DB990621BBFA2FB37C3F29DBEB3A8C23B412E4422011C719A267D1D48C29311FE5016A8AE8493F504711E26627744C054FB5
Malicious:	false
Reputation:	low
Preview:	......JFIF.....+.+.....C....................................................................C......................................................................... ..".........................................E..........................!1A..Qa."q.2...#B....Rb...$3r..%...&C.4S..................................<.......................!..1AQ.aq.."...2.....#B..R.$3.4Cbr.............?...B...E..P.I$(P.I$(P.....Q...W.]4\.QK..6.ZSw.Np..c....5+...U.+'.....Y.X.e;p.P2+...Y#..5.O7RJ..q#..1 ..w.F.I&.@...;.(...T.i....G. .(..p...Z..F."..t.WwPY+\.....9....J...RMV....C\....=k........ .=i..L.[.H5..S...B.i.O..J..\n..V.5..V8...4=.Fcq!K2....f....#...>GvDcoT...S.&.....n.5.7. .-.Y..3K.....c4........#bO..q~..QH?....ie..{..Y..au.........Ik.....(}j....}p..Rm.......ym....Q.f.e. .RU..a..O.c.l\|.....;.[.q...y...\..t.z.h..k.WNB..hu....t..B.$......=.$.SAG#.x..B.T..#....v.R.Z.9.;T2.+P.\|.(..xZ.H.D..6.2J....;T....Y../:......{^() .;k5....p.zt.d....E.br$...M..}.j.. .....+.#.....3+Q^.\|.

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2979), with no line terminators
Category:	dropped
Size (bytes):	2979
Entropy (8bit):	5.648534994584625
Encrypted:	false
SSDEEP:	48:UQEHvIUHtDAYabRP46xcOfRRlUOS3+/fmsghxLU7Suj5OQRSLfctS/6uMMWjfYA1:vaLJByxvS3o6U7PRPM0j
MD5:	2B89D34702716A8AD2CC3977718F53A3
SHA1:	04406EBD6A9E2CE79DBAC5E5048CFE1384E4574A
SHA-256:	2031E418EE10AF8110729B3F327B968462FC0A9D8D1DA095387BB472CCD0DEE6
SHA-512:	E6FBDA1E7D1E24C0DB5A724E4CD30C883CEB5D35DE1CC6AB8851C9B19E202024752E7E42AECC21002F9F9684EA98775F1EBE0EE8DA9BD7562DAC2FE171464242
Malicious:	false
Reputation:	low
Preview:	var TWallpaper=function(){function x(a){for(var b=[].concat(G);0<a;)b.push(b.shift()),a--;a=[];for(var c=0;c<b.length;c+=2)a.push(b[c]);return a}function B(a,b){b%=90;var c=x(a%p);if(b){var d=x(++a%p);return[{x:c[0].x+(d[0].x-c[0].x)/90b,y:c[0].y+(d[0].y-c[0].y)/90b},{x:c[1].x+(d[1].x-c[1].x)/90b,y:c[1].y+(d[1].y-c[1].y)/90b},{x:c[2].x+(d[2].x-c[2].x)/90b,y:c[2].y+(d[2].y-c[2].y)/90b},{x:c[3].x+(d[3].x-c[3].x)/90b,y:c[3].y+(d[3].y-c[3].y)/90b}]}return c}function H(a){for(l+=a;90<=l;)l-=90,g++,g>=p&&(g-=p);for(;0>l;)l+=90,g--,0>g&&(g+=p)}function I(a){C+=a.deltaY;D\|\|(requestAnimationFrame(P),D=!0)}function P(){var a=C/50;C%=50;if(a=0<a?Math.floor(a):Math.ceil(a))H(a),a=B(g,l),y(z(a));D=!1}function Q(){if(0<A.length){var a=A.shift();y(a)}else clearInterval(E)}function z(a){for(var b=f._hctx.createImageData(50,50),c=b.data,d=0,q=0;50>q;q++)for(var h=q/50-.5,F=hh,v=0;50>v;v++){var m=v/50-.5,e=.35Math.sqrt(mm+F);e=ee*6.4;var r=Math.sin(e),w=Math.cos(e);e=Math.max(0,Math.min(1,.5

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 98729
Category:	dropped
Size (bytes):	32429
Entropy (8bit):	7.991423943211359
Encrypted:	true
SSDEEP:	768:OjR2Q+l3VzMDRfQbkJozAp+gp7JaKhDMeFN:O4Q+cDRf3JcAp+gpPDZN
MD5:	7C14E75C73DB2AE867EC1AC86995C0DC
SHA1:	BFFF488DF704DE2DE81F8DC4FFB2C9D3C9654475
SHA-256:	E9DA869F941934F5FE6CE7555856D9CFB61F3EE346B456BE7760596ABE1E69F0
SHA-512:	B25A55B49249B48594B514B0CEF68EB68C4562567BC6B5BB05F29A253F3D87F0E5EF8ECD3B6DBBBECE10444CCB7B19D3023B0E3271547D08FBBA34461871BB89
Malicious:	false
Reputation:	low
Preview:	...........kw....}~..9Q....R....b9.<.:..c)q.2.-.h.mC...J...~.g_... )'s..g...]...v.?......,..w.................._...u...?=.9.l.F..?.'K^V....R.Y.......V.r.s].\|..o..\|...5q...};}..uYW.....z.?..\K...iC.s.f&.......u..\|.c.zu..O7.j.3].wV..r.A-7....f...v..f...;.}.j...?.S..r9c..fp...x..xQ..v..Y.,......D..Oz...i...6}.... k.[.).eQ...O.;.bUL.....W....r.Y}..P..O.?8Z.....7].S.d....(\|....{T)V..p.zE9<_.g.....^.4r:[....M.W.{{.%A............7898-..._.......`....~....\....p.)..pH...f..^......?.....L..yUs!..]Gx}]..../...L.u......_/..j.)...}UWh........~........._.KKG.{k..j>/...f8......4Z-.....i.(.o7.6........O..)..>S......c..-.+~)?>.\|GW.....~...OG.Z<~..w_...._.'O.}......,.<.........?.=...^=.at..x...W/....K...wOG..X\|...W.G.R......j.....~1z..x..o.?....A..7...e....=,^}....,...>.0......W......C.0'.b...@.w..+n.....z...._U..&..)6..w......>.R.TD.J..=..C.tD.....;w....&..GKE2.[aY......n#e.K.J..7.z...?.>{g..w.3..1T....92l....\?Y...a.]_....Sq..@...G.*D7...;...;..

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 299x299, segment length 16, baseline, precision 8, 800x533, components 3
Category:	downloaded
Size (bytes):	84856
Entropy (8bit):	7.963573997986504
Encrypted:	false
SSDEEP:	1536:+pc6OtwllmWZ2njY6ZKr6j6/F7ArsAGIQvNt2CxHVwuc/c7VHkshf9O:+HOtwvmWZohTwpArsAZQvz2CxxVEe9O
MD5:	7D866FBA6E4EE5A2E8A6E3FA25D4BA9E
SHA1:	0890A5FB5FD3E4420A08F9592FE28ECC06494FCC
SHA-256:	DD2F45355CB54D8DB611D3FB1C5D6420A6178E0D93083180FC61519080EF45BD
SHA-512:	88D11ACE417D730F075EFFC69825DB990621BBFA2FB37C3F29DBEB3A8C23B412E4422011C719A267D1D48C29311FE5016A8AE8493F504711E26627744C054FB5
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/uiPk3Z5ix6sgFrblrDtl45mDlgniH66ntxVBMte3HxcZ5SpLdIuud7S2vkgnyF343Sqy2_YNmNvuobjq3MZ9txmE1ATrRYNkCYRnlds8uTp-FeBCf_HLUp3uq2uV23I_spdjzyXYn0xlbO5jIidI1gArQadXXtB2wcvV615k9n07gC9_YNwmJZYJ4m8eMIIrvLWpuiNpzwACEK8K0f1g3H1oX3bRf3Z5WfRb4wySb4QeL6uWQOKkxZp4v0rp4eGJpR31QJqi7QIqZ9iCuxc7An3-U9t84qkxi1hDBOAHUxbfLtO8DezjrktvyMUA0M4A5BoSjekXVL9IW9pRRAkpZQ.jpg
Preview:	......JFIF.....+.+.....C....................................................................C......................................................................... ..".........................................E..........................!1A..Qa."q.2...#B....Rb...$3r..%...&C.4S..................................<.......................!..1AQ.aq.."...2.....#B..R.$3.4Cbr.............?...B...E..P.I$(P.I$(P.....Q...W.]4\.QK..6.ZSw.Np..c....5+...U.+'.....Y.X.e;p.P2+...Y#..5.O7RJ..q#..1 ..w.F.I&.@...;.(...T.i....G. .(..p...Z..F."..t.WwPY+\.....9....J...RMV....C\....=k........ .=i..L.[.H5..S...B.i.O..J..\n..V.5..V8...4=.Fcq!K2....f....#...>GvDcoT...S.&.....n.5.7. .-.Y..3K.....c4........#bO..q~..QH?....ie..{..Y..au.........Ik.....(}j....}p..Rm.......ym....Q.f.e. .RU..a..O.c.l\|.....;.[.q...y...\..t.z.h..k.WNB..hu....t..B.$......=.$.SAG#.x..B.T..#....v.R.Z.9.;T2.+P.\|.(..xZ.H.D..6.2J....;T....Y../:......{^() .;k5....p.zt.d....E.br$...M..}.j.. .....+.#.....3+Q^.\|.

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 444x800, components 3
Category:	dropped
Size (bytes):	175961
Entropy (8bit):	7.963905179486677
Encrypted:	false
SSDEEP:	3072:zM7f+5Cc41Z4Ga/qHlzukbpTeYvlb3l4DPc+76ZkZJruZ/OvFw9aUU2:oK53sNAapukbA03l4T5Q/asaP2
MD5:	567E1776A7A448199FDE9ECC8D228110
SHA1:	317376CD1A00552FC83F97FC1B7446DAFF03440C
SHA-256:	C693721C4113B2BEC5EFA50E9C94AC74639363A2E1B603F83BB42980DF7043B0
SHA-512:	95C19BF0617A836C11CD8FB0C43169F44E1A992D0D362C20BAACECCC01808DDD7071DCCD1C11049C649C8E66560A372F6DB11A8621BD367CAA152F9F53F1378D
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......ICC_PROFILE............@..mntrRGB XYZ ............acsp.......................................-Qt..................................................rXYZ........gXYZ........bXYZ........wtpt...,....cprt...@....rTRC...L... gTRC...L... bTRC...L... desc...l..._XYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ .......O........text....N/A.para..........ff......Y.......[desc........sRGB..................................................................................C....................................................................C....................................................................... ....".........................................I.........................!.1.."AQ.a.2q.#B....R.3b...$r....%4C.S5Dcs.....................................<......................!.1..AQ."aq......2......#B.3R.$r.b..............?....F...R.#z.d.[.3.2.....z)[....i....W.C.Q...a..(.y=.R.....m..MvF..UH.gBNpG.Lq.\|..Q...m.C..........v.F..ps..[.........6.K.....

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	dropped
Size (bytes):	212621
Entropy (8bit):	7.983194418274764
Encrypted:	false
SSDEEP:	3072:JgfImJ0S/rMjwQanatFI3KF+Uv132t7NFCOJbeiTEwoJy69xLD9wAXujr35+icpF:JEJlI0tacKPv132t7X6iTEwoJe3kpLEM
MD5:	506A34482837CA463FF8D1525D3D80BB
SHA1:	4AC0D1C5AE41778C771B7DEB314FD79678CFDD69
SHA-256:	00C1BF4444E3265D257101A6D41E5EF6DA800B3B44E9F929882340DE5C2CF2D0
SHA-512:	E627416A47B0CB6726DE7311297D9E446204E6BA9B4602DE0E785798D4727B153D203B4E8E8774B4EECB490ED7E91C20876CBC7CB325E101E320F75547ED8F81
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C....................................................................... . ..".........................................[..........................!1A.."Q.aq.#2....B.3R....$br....%4C...Scst...5..&6UV.....DT....................................A........................!1A.Qa."q.......2.#BR..3r.$45Sb..C...............?..HV...t...\|.(..Dy..=..O..dt.WT.......sn...T..E..'....I..b(Y![..c.8.,L.B.-<1. \.-.)..S.?.o\|9......H......b.skE.....~....Q;S.n.n...+Y......-...7.M..m.G..$......:T.JB..].......&.z(....4.KW&..a..c1.ZVj........%........\+.1......_j_..=...2....2..`C...t.....r9....2Oo.<OS..... "F.1..3.;q..2F.%`U..C.5.....p.p...$..i..^....Zl.i).z...=+.....O....SP.j\.......(Q...; R...1.....I._..Q..P.!......d..Gg.e2G.U....u....i(...U...E....h.,H..Ls.rJ..........1.-.ao...8[9ot..}y)9.W.QGP....t.....43m.-:....>.{..9..F.3"..2..xgEK..........[........$. .f=.......";...<.....N..shb..

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42164)
Category:	downloaded
Size (bytes):	42523
Entropy (8bit):	5.082709528800747
Encrypted:	false
SSDEEP:	384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH
MD5:	C2656E265EF58A9CC9F4B70B15DA5FB9
SHA1:	85C5EBDB89D4574D72688C2650D4B84B9B09770A
SHA-256:	F1D083FFAA644C708F11DB29707AA57C19246E6D32643B03FEE3F82C17B224B3
SHA-512:	6417AADEBEEF4EE35381BFC7034148D57FD061D84DE9974D798468C6426C24A6BD1C9913CF517ACCF3E349FA06CBDD546D2883EA8391C595285FE0C6127E26E8
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/bootstrap.min.css?3
Preview:	/!. Bootstrap v3.2.0 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /../!. * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6). * Config saved to config.json and https://gist.github.com/92d2ac1b31978642b6b6. //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{fo

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	downloaded
Size (bytes):	152506
Entropy (8bit):	7.9645490981566285
Encrypted:	false
SSDEEP:	3072:h5o4qsjz7f3Qxx8pXkiQkwT3s5z+0N42kcEREgVBPuFwk:n9zT3eGpnQk63s5C0N42JEfPuF/
MD5:	A77326D48089ED08DE86A3AF4783CD4E
SHA1:	57FA71BFA68796585169B49B88FDC44471ACA30F
SHA-256:	0A73FA4732A174B0D5A06C63268BFDDA2B099C4C576960BCF8AA598384A8D1C1
SHA-512:	D94AB651B74C5A3407B370B588A24E5EDCFDD2400C1F2728DBB511CFA6D0C033D554FE8F7FDEA306E7ABD1A413BB0F34CB6A1DBD58D433EA0337A117272F4A86
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/oEMIEzb1yTVBpW6MCUIUeeC2t40SZSMsbVRJJjyKs9mRAbrW--7Ue4_Iy0eBbvSSVVgELurmU-qaGFOiQ0xeEH7ltY329lR7ZMlNTABIskg4fS4M776FzjOm8YQ04V5PpLyo-CQ8nHlJX89Wfm1QVx11GmkY_Ad4rcDaVpCQzNsS-ekKPYDT2fTzWQEeW3CrPjYyxQIeSmLtqGrHHC1v6bQatqQywbR_L1XBI8Er-l7eY-TxX83PtrKirkybMrEckzy4qbQueRWGTXQFwknveFmdzqSFguOPtnexomnO6sH5mxBl33ouBAAOzyU6hHNkkcbpoKbkHVycq-fpqjLgCQ.jpg
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	downloaded
Size (bytes):	157593
Entropy (8bit):	7.963707607979531
Encrypted:	false
SSDEEP:	3072:hT4vlvbSpXZrZlfg7kBGijK2eTI/5HVl+PZ65XbAW09L2eI3z3pGHgEnq2c/1MNQ:5GTYA2jec/5iELAVL213bpGHDq2ctIA
MD5:	6A09B09192A0F535B837FDD2E3FB1951
SHA1:	027DD67045B6F2C6761FDCC9A057798F6D1B51B7
SHA-256:	AEC62689EEAA8B3E892B3411E59485D74B4E1E7AFABEEA32E2817B3C947EC2B0
SHA-512:	6D9466C7FC2B1DC690A7164D11C78E3572DA57E9C7BB7577EDF541601A2D6486826F33641AC9CEC6FC8BEEEF9C1E5BB7E07908CCEF5DE518E9CB758F530C4010
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/PRwF4HU2mz8_cqvTXNsa-Kd7jb5s5SrzZiFiOQ3g51eziuzlaGps_s9nO7xGuuagpHrfRXLlHMg5UOeNtTVCbEg-9_HuJStxzLyka7v1AY_XcXJRRoFuO9luY7Lb6KNL9m6aqlxvKnZVq28apWcBebnGFw5mlxhpFxFTR9ftopmrxZaw-xUj7RyzwsXF7ha3GPJcrE7ZHbpPll23Bh3e7TEwqIrEWOQ4CVszx4S6PZXa3x7jXL39680brmWiBdMyJy-Uo_WlsTHaUwr5o16C4qVpoM7GewqNWT1OQIDsftojAVmD_amBa7y9mNOCHNjsk2FcO4zZFJoo87-1vpbkxA.jpg
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 721
Category:	downloaded
Size (bytes):	337
Entropy (8bit):	7.371943803579972
Encrypted:	false
SSDEEP:	6:Xt9T88vDESPQGM9yEwJFMnq4ff9ZjM1Y9v0mns1VUqGFOhOW9H88aGE1iwH5RlnV:XTT3DEAMgFmq439qa0mnCUchOEHtAi0V
MD5:	7E1B04453570B65E9B8E33A785FCE5EF
SHA1:	7C96ED4DD855F2A4BF7D08EC60F0821CDCFCF609
SHA-256:	C471FAADD89ED31D3F8DD33FC19311A9827DD5C6FADCE78CB58C29D1F471A684
SHA-512:	81D6BC1625B9F94D216D618ECC90C13FEB888BC184491A4EEA93C61E2E563A4AB0B4D7B1077F68390B03B66A5D87AFFCB62CC6D5DE129797E22F41A53E243A10
Malicious:	false
Reputation:	low
URL:	https://cdn.alfasense.net/lib_test/config.js
Preview:	...........R.J.0..?.;........:.~..>..H.F.44.l}wsu*.....;>...w.3...}....B..N..t......#a...........3:u..+.'.-a..By..g...`.fl....O..].8...j.P..,.-..U..^W..v.K.E%...<]......J#<C.}M[.V.....'......IH.....t\|......1L....AFaf..t.Z;G^.rH..._F`.!..G!T..iY.o..&...:..C.K...G.0F.7c.2..u2../..\|H...g.B..#.q..?\..\|wq .......BY......

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 93974
Category:	downloaded
Size (bytes):	25784
Entropy (8bit):	7.991613244245382
Encrypted:	true
SSDEEP:	384:ONKFSRlciUM9LOvVT9idFe+BTvCJfvkyYZH+i2lbKTun49vn8S7A4xaK4jut14:Os+OiUM9qvQBckVQ9X+hA44A4
MD5:	AD8274C9E206DBE7A5D67EE8133976BF
SHA1:	49BFA94431FC7EDD170EBF8E4F4AD5887EB1AA9B
SHA-256:	DAD2768D56535F7BD25C1BCFACA202B9B8373F53E5CB8A36EBDB82BB2FD406A3
SHA-512:	A83077CF2EDBEC5A017A15A0C4E38BD31F04F2CED88CE20E8A7E91AFD20BB339909154658F4AD376641AA72C3A5520A03C306554A670EECB28152794F5A0A2EA
Malicious:	false
Reputation:	low
URL:	http://telegram.org/js/widget-frame.js?62
Preview:	............Z.G....WQ.......l..2..0...,-.l...i..J..bu7B..m}7...~..<.A.g...^kDWUddd.22......[...Q1-fg..r.~ocss}...E>..&.x0/...t0..N...l<.......g.....W.......h.O.F.....7b...gD.H.1R.').y9.:)F.....o.'.....z.I...e'.r.=C.}.,.L..a1)..^..`~......\|2.?..{r19fS.+..g..{;.f..l~X...l...6...../_v..j........M1..J....1.....u..F..t~...-]..x.kl....wF..[..Z..KW..w..v..8S........8..`..w. ;..C....(T\|..../N..B~.xn`....`4:...Y..Q>.'..l..x\|1.:U...w.y.].............r....'..Yo<x..X.6......l..K1......b.hkf...w..W.d.V=O..@[..H.=.1....\|~1.d.0.....&..I...M.B.U.........]r......M..b.^....\|.....y[..2......>_..3.,...F...........Y.....x.. F;....Q9...P.w..bu.:]........p....z5.N....'++.....R1\.<P.^..O.[V.......+.Vg..<.0..WV......6>\|.`...[.\;Y..b...6.`% .46....%.../'.V....y.r.N.#...q>,`0....Tz........>.u..p...5.\...$.........<.2m$.7q.x....\|.....;w...+.O.^....0?....\|:.......mk.!b.\k..&"....o......g.....VVb. i.\|...b.......t..\|.Y.u.%...LM*.Y...(.Fel...hp..

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29844)
Category:	downloaded
Size (bytes):	29886
Entropy (8bit):	5.567760925455524
Encrypted:	false
SSDEEP:	768:DkllCaGOpFZDSnhldzngSPntDNqa/J8OYL3:0pGvqV
MD5:	59E2C5670B6452A790B613190896347D
SHA1:	896BC135E1C46C8B05772C3FE90BC426596C26F9
SHA-256:	1C60A5B3B875578CF4D67CF92B40DA30650383C72691D1502F57D57CEA3E4171
SHA-512:	2389AD2A057112E4EFF4AD878784713B92A2B2F08001B8B34EDFA2FF6BB80D1C50955E57A22FA0BA9581DD0E882C9A730EF015B86A6A93A09671888E9FB6E88F
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/1117086/f7c4024c86a402702d20.js
Preview:	/! v:1117086 b:default c:errorCounter /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let n=this;return function(...r){return n.apply(e,[...t,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)t=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");t=n[o++]}for(;o<r;o++)o

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 160x160, components 3
Category:	dropped
Size (bytes):	7097
Entropy (8bit):	7.926067806981815
Encrypted:	false
SSDEEP:	192:UDvtp8f6Fd6HupInZlsuwYk8yxMz9Wcw8nvsLfkj7d:UDvkC30MN/7wvsTIp
MD5:	AE42CD9F08B92CF10C19DAE52E820429
SHA1:	4B61D17A4BDDDD5BD6AE355E5CCF2F9F3D4A980F
SHA-256:	D4522FF5AEFBF28B5CD65072883D088E76E448D56ADE461ED3C77350EB9433CD
SHA-512:	975B22BF7D96297A1D921F7BFD7E5B3B0ACA32D94B6BCBD29A6ECAC7F10B9B463B436DD5DCA1240A868A37946FB45EF42531F1828C73F14A860A4662386FF9F8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`.....C....................................................................C............................................................................"..........................................H............................!.1AQa."R..2Bq...#39br.....t.4.8Cuv.........................................=.........................!1.AQa.2q......"....B..#3Rb..SU...............?....+M..\|)JR..)HB..!.R..)JR..)HB..!.R..)JR..)HB.....J..x."C..i..T..{.....!H..&.>.T..81.l....l.q.N.......#.HS......\|j.V..L....../.os..Z....Zv.f.lg.......v[.H?(........V.f....v..".&...#p....kO...u.h[j.X ........(n ...c..p.p.)HB..!.Vv;wV).R..!JR..)JB>.8.g.cA...s$:.c..y..!)BG.$..]..\5cz/....E..oF.g._!M..S..d.......P..@....._.l.'....6..HJ..2..L...K...8......\|.l}q.....q.e..u.......f.t.[fYs......Q.pu>N.H{..h.}.yX\s*! .."5.....&.d.K.K.,,......BYe%%I.Z.7.N.kF.....W.?>6;w....v.2...C.....P.....R.q{[dr.E.k.b9...R3.'$.V..}....BaZ.....I..G..`......J.v..;..#p.:.`..\|0B..+R......\|".ko.-...

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 444x800, components 3
Category:	downloaded
Size (bytes):	66278
Entropy (8bit):	7.970478200451531
Encrypted:	false
SSDEEP:	1536:H1K1zzdjNYSkBA+/loJuQwVeNuOT6BuCf2ipRr2K72xu9UpYupol:k1zwBhqEQwGuOG1uTnbu
MD5:	9A58E1D5DEA0FA95E2CD7575760F49EA
SHA1:	62E2AD62F2052811921E176F4713D5DCD07AC9FA
SHA-256:	0EC09C6F26A936FD6A5AACFD6BA2931BDEC15639B048A24A96675F94A41DC974
SHA-512:	D75B25C385DCA2EF971A1BDBA7C3613826A4B487DC18457326FB4BC1A7D1E5385BE403B542B9E4E6A165DDEEE353CB30BAAC7A4F6FE06BC013315614E370F55E
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/J5IrM8TywMmqx4ZfsUIWmzOHXcIjMdle0j0Zye8AO8h7bW7lhRtHf3rwMLDqu1isIJ0dw4EPOjBNlHAyHkNkqgqqjh8bR4nUqiAq6P_Ej9AZoBXBJeew5Cc4vlPcPkF_wYV80A7hegzAshbhSvXqCnDH5V6aOOf7JlRhjqTNYlbVwc86WiQGXK-PYmGGLWbETscY3DjcM5yPhiNFExJeNB4Vmje0RXBoV0ZTy6_9TRw07Sxw2e1uNLWxPedOdw1hodtMeSZKBpnDOCWgw8at3icavvKT6l06C2LJfPQsvc5AA8D84CylCQg4KJNRiSPyY75fex2yWcr7nk-SqIErpQ.jpg
Preview:	......JFIF.....`.`......ICC_PROFILE............@..mntrRGB XYZ ............acsp.......................................-Qt..................................................rXYZ........gXYZ........bXYZ........wtpt...,....cprt...@....rTRC...L... gTRC...L... bTRC...L... desc...l..._XYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ .......O........text....N/A.para..........ff......Y.......[desc........sRGB..................................................................................C....................................................................C....................................................................... ....".........................................F.........................!.1A.Q."aq.2..#B....R.3b....$r.CS...%c4s...................................1......................!..1.."AQ2aq.#....$B...R.............?...t.......l.k..E...!.*.z.....".#...(.oL..F.I.k.[xT...W.2.w..9....5......'..w.z....i..-....._.H.c...L+..cmv.2..Z...u..ZK...._..W\.$H.T.NA.4....i.

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2979), with no line terminators
Category:	downloaded
Size (bytes):	2979
Entropy (8bit):	5.648534994584625
Encrypted:	false
SSDEEP:	48:UQEHvIUHtDAYabRP46xcOfRRlUOS3+/fmsghxLU7Suj5OQRSLfctS/6uMMWjfYA1:vaLJByxvS3o6U7PRPM0j
MD5:	2B89D34702716A8AD2CC3977718F53A3
SHA1:	04406EBD6A9E2CE79DBAC5E5048CFE1384E4574A
SHA-256:	2031E418EE10AF8110729B3F327B968462FC0A9D8D1DA095387BB472CCD0DEE6
SHA-512:	E6FBDA1E7D1E24C0DB5A724E4CD30C883CEB5D35DE1CC6AB8851C9B19E202024752E7E42AECC21002F9F9684EA98775F1EBE0EE8DA9BD7562DAC2FE171464242
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/tgwallpaper.min.js?3
Preview:	var TWallpaper=function(){function x(a){for(var b=[].concat(G);0<a;)b.push(b.shift()),a--;a=[];for(var c=0;c<b.length;c+=2)a.push(b[c]);return a}function B(a,b){b%=90;var c=x(a%p);if(b){var d=x(++a%p);return[{x:c[0].x+(d[0].x-c[0].x)/90b,y:c[0].y+(d[0].y-c[0].y)/90b},{x:c[1].x+(d[1].x-c[1].x)/90b,y:c[1].y+(d[1].y-c[1].y)/90b},{x:c[2].x+(d[2].x-c[2].x)/90b,y:c[2].y+(d[2].y-c[2].y)/90b},{x:c[3].x+(d[3].x-c[3].x)/90b,y:c[3].y+(d[3].y-c[3].y)/90b}]}return c}function H(a){for(l+=a;90<=l;)l-=90,g++,g>=p&&(g-=p);for(;0>l;)l+=90,g--,0>g&&(g+=p)}function I(a){C+=a.deltaY;D\|\|(requestAnimationFrame(P),D=!0)}function P(){var a=C/50;C%=50;if(a=0<a?Math.floor(a):Math.ceil(a))H(a),a=B(g,l),y(z(a));D=!1}function Q(){if(0<A.length){var a=A.shift();y(a)}else clearInterval(E)}function z(a){for(var b=f._hctx.createImageData(50,50),c=b.data,d=0,q=0;50>q;q++)for(var h=q/50-.5,F=hh,v=0;50>v;v++){var m=v/50-.5,e=.35Math.sqrt(mm+F);e=ee*6.4;var r=Math.sin(e),w=Math.cos(e);e=Math.max(0,Math.min(1,.5

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 231706
Category:	dropped
Size (bytes):	82312
Entropy (8bit):	7.99708781517771
Encrypted:	true
SSDEEP:	1536:kAXTJvOGTDbA80pK0Mdq3wUAVa6BGS8EE/c0Psh6lufc4Ap7QgqHM7zxFX3xzOEm:kAXdJDn3QRoag8pcM6fdAOgq4xNu
MD5:	14E39BE019DA848A73DA7658165674CB
SHA1:	E016473C4189A8CC3DBFF754A48B3E42D68AF25A
SHA-256:	39595A1806156CFCADF3CC4E20C5C3F3EEC721386A0551790A15F025BA9402BD
SHA-512:	828A383DE549871AA80EC960A7E371EF47DA96D01EBB9628D1484CEED9EB698AEC5109B3DE0B24FF8000610A2C2D633616C9FD28D380656FECBAA930CFFED029
Malicious:	false
Reputation:	low
Preview:	...........].$.u..._.;{........A.6..a@..0.....S.n..S#....}..=..5dwT..H"e........='"#....~{w...o......p.zq...._.z..W/~...v/...~........._....._\.._.....tw...\|u1n.W....?..?^...}........7W....:_.K.....z..........o....h...oN..^\...W/~.../...>@...W/~..._\|.......?L.o.~...Z.>..v....z...]8.....+.~.b..w/..../>........7~..............^~.........~}...}......?p......8\|..-7\|.......\|..l.............p.....V..o...x......o........_.x..W.~../..#.{y..._.../..W.......\|{......o._...\.!...:....x..v..z.H..1.....s.t....?..vmx..;.J..... ..[...K..'.......&l!...cZ..7...~..7..w_.p......v..r....x..\]......p..dw{....V....._..v.....zsX_....z...r....0^O~...r...Z..7../>..0...W..........\..M..&.Zs.G.........\|...v......M[.\..dp.~.\.-...f^.c......2.\|.f..t..36...-..^.4,7....W._.a.t......9\.+x..F.= .X.u.;C...E...q..;.k...R..fGtk.....%....(...oV\|A......g]CB..+.8q.b.\oB....x.....?....5R.d(..][....]J.%\|.A.-.hF-..3....(..A.M..n..-..z{K.9U.[B.^.^\...h.....-..z...(...`8a.

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26004, version 1.0
Category:	downloaded
Size (bytes):	26004
Entropy (8bit):	7.993186940356352
Encrypted:	true
SSDEEP:	768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs
MD5:	7F0CDAF91230F9789CA4162AEDFF612E
SHA1:	965DE571AA794DAB64076C3CC64DC8894B843F23
SHA-256:	033696B7F1AC04D1DCC102BE84550E146236CEFFC25A6CABC12AA51A6EE410B9
SHA-512:	444460846FA2BFDDD7990C792C6FD8389C564B5C967B5CC10FB3717117C5424FA33F23F8C4CFFEFAD176016A79BE5557920908CC82F7942700A0FAC71EEFDE36
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2
Preview:	wOF2......e........L..e .............................z...?HVAR.7?MVAR3.`?STAT...(/<.....,..g....0....6.$..0. ..Y. .....%.&3.Ye.Bo...(a..6.!l...A....:6d4.....L..h..".e..i..&.,...5.WW..v.N..v....U...6I.>]N...'i[....{.e.IG......~f].>.c....{...rh...u"..M!..r.@..O.sC.U&.=...y..=..PUU5..%].%...p...CN...?..>.!..6.R..A..0..!~........l..H..R....E.YX....&.bu.....5.D. ...X..(]`)m)m.....bL4.Y./.t..z.z..Z.\r...._./..~?..9.G...vd.)@.`.B......c...u....?mOz.O...a.....zN.....'.B..=/.B...d.6.~.dC..t..t.;.2...%...../..j....r.....pu~jk..o:...J.d.l05...J...@2.....}/L...8..l.x....,[2...(.GP]..#(..@6.j..<l@....9...4.l.,K.l%n....<.:....z.+.w.mR.@.n..s.~...b..k.......r.s.@.*k.m.+R....i...Sn.......%.OZ...eR\,]..&.Q..i.(@.....v&......8$\>.t.......B.(`W.~C......S.o..).A.b<.ag.....R.^.jOm..L_.....@X$T....Sv.b9.d'...R.......c).9Q~S.._.i ....H.....ZW...b3..,.jv.,...Ot....{)..4........1..Q............B..UH-.!...2....I0.#.i..)Y.5F.a.Fk....s..i.7..;....v....3Bb..Ox"....O?y..SI#..

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	44
Entropy (8bit):	2.988903791268261
Encrypted:	false
SSDEEP:	3:CUkwltxlHht:Pt
MD5:	F9D60352C70A2BA15616D1C9421F3844
SHA1:	E9ABC8BEA7721A4B6A50295850D13C515006A95C
SHA-256:	82CB517A8F80C91DFCEC543C6D140DEB3BAAF463EA9E77655475096EBA7BC7D9
SHA-512:	C236B22BCD48790FF970B8BC566061EAE734E0D34C1A68CD8D6160415303E0B0B51FE5780FAFE7349CF71CB10089C9F322495267EEE019CC63F879727263DF4B
Malicious:	false
Reputation:	low
URL:	https://match.ohmy.bid/cm?ssp=alfas&skip=5322f90c-68ee-4d33-bc6f-6140cef1f878&redirect_url=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dob%26id%3D%7Buid%7D
Preview:	GIF89a.............!.......,...........D..;.

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 213
Category:	dropped
Size (bytes):	180
Entropy (8bit):	6.839719329744917
Encrypted:	false
SSDEEP:	3:FttNrOC9hk9e1z/MFEIAVxq+PMkfbENvI8yNoTdiUT8LZuUFw4X8ZUOZhW2/:Xt5b9hl1z/2ZwxdYvTdiUT8LZnX8ZBZh
MD5:	8FD2DD68F844338EAC3E273072CF2B03
SHA1:	5BC8557B11984FE761383970B51DE93787D26CD1
SHA-256:	B118E4F5F656DB5136F6E730774E6FFA94C6BB67C8B295D7C06AE23FB874FEC5
SHA-512:	BDFE113E2E472CEC963406E33DA5B30CDA799F4FF71B036F85CE236E102503D62875D6C0FB03A6CC48315B99E753540B1150A4FB0BABE40EF5EE4EC25A134418
Malicious:	false
Reputation:	low
Preview:	..........U....0..w.w.QA..k....P.t.I........woD.....'57.8...........]..)..>.g..0X}.c..f(..bx....N........V<..hl...Q$.=c...X.9l.m....S.)..E..!.Z1...f{?D\|........_4......

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2988
Entropy (8bit):	7.90270040258558
Encrypted:	false
SSDEEP:	48:bTMakSAaMEyQYGQWMEfN9u927FCdeB1q2Fzo0dgeWFKxZsK90:bT/kS3yqQWZN9u07UgBz0UfWFK90
MD5:	141F35B5634F53E04B4AABD52F725514
SHA1:	9789779440E965798B36DF72A5F4A948C1442A95
SHA-256:	96F3CC90FB14B484F6E48F1F9C18DB64075E5049BE4751CAD53A5544A7702683
SHA-512:	08C38ED957F3400BE44A332629BD635DBCF6A04D37D60509945E9EA8FBA3CCA19A85A6FD50663A8BF40407C1355BA1D2E15B2A1341DF6A48C6F1ED2002E3D975
Malicious:	false
Reputation:	low
URL:	http://telegram.org/img/emoji/40/F09F988A.png
Preview:	.PNG........IHDR...(...(........m...sIDATx^.{.\.y...{...]{.^...b......i.G.(J.i.Vi..IUDh.H..9m.......4IC..@....M.m.#..dJ!1...e....s.......iG.i).)...3.....9W.^~......g.....Y.t+d...!..JmNO.......%xh.W.3......RuG...R.S.., ..i...z.qd&.?Ti...n..7U...l....w...h.}.P...:.....!.D...$..3.DS.c..?.h.....=.......~.c...z.w...k...}.....n...(..>.....}..Ga.'p.i....-..7.n.._.=.....s.....r...n6...WB.. 7.Yp.......p..!...(T..F..#G...=._.....s.~.......w....W........1d..R....@........E.2.}.N}.~.C.c..#...........\|..._vQ...............e...z..G{I.............z...........5..z..g_>.....A.~.....q-..y9.......s.(.Y...<s+.Q1qh..z..8..........^?u1g...!t..o..Pg...tm.6N.+.4..L.........=....=........&...{...l.........?..b.W.l...Y0.1`$to......>.mc.....W...5..%..5...\ .....^.....h.....h..k.Z.^.m....V.g....q.........3...8......t.CX..4..]=' .@F.J...B...@.(.6.@A.@..:.....E.l...x.P..'....\....U....Cg..kx....C..c.~.o..8t.C..$d"p...a....C\|..y.Gp.Y...k...*d....

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x420, components 3
Category:	downloaded
Size (bytes):	77753
Entropy (8bit):	7.9555350437307935
Encrypted:	false
SSDEEP:	1536:htHdz0D9Ya7XkZQQ7Aj+fsPGVLPEQV9rqsqFnmERum2DQHoH:htHdzYKy0ZsbWLPTt6bRu3MIH
MD5:	4CFCAEE5AD32094861376CD1C50E6334
SHA1:	91FB1CF1CB8104D034D6670E07131C385F5A0A98
SHA-256:	555896C75F09A49381D53FA55F31436737B8346AE9B382A9B27FB22575E57F82
SHA-512:	517C8F7A84C7A7AC7F753C774B4B12ABA12128CD710502444225DD9943F76C3C4A4CBB17DF570A02F6B606D311803C506092F41677706F72ED25ACAF58280C1A
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/Ukozu20epRcRaVDvklUZ6TM2vj0mDF9eamysHAG6rX5w1yPDYfRyqAed3aJtDHE3scAVu0L9KuCcjwJJYjccsUwnjs1cCUTMvez85fCszOr7fBJEMunpA4Zae8WtFx_YCwGjD1nqHmEU1r1rfnuy6emFkIunTPy2Aq7k6FvkwRY8fydKLa6ClZhgfYLzbvZg-uw5v4qJvet_Mvy0OlMTTnhFXb1rtY2SLGwSM33GeoXd2z7Odq1TyNss3ivw41kMnpqncccJely9kKPyUCjvqYda0-kApF2v0xve_USsU6Iz7LapXzATCI_1H-Q4yh2zFvD_7qyNz72-Uh9kw7O0ag.jpg
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 36346
Category:	downloaded
Size (bytes):	10407
Entropy (8bit):	7.980990825317211
Encrypted:	false
SSDEEP:	192:swavvwln4yIQpBHgj1ftNU9diNp2/8CbTrl50hvn8WuWa4lT851q6KztwVr:sTv4/7bgRPCWp2/ffrshv8VWa4lT8/qe
MD5:	84169ED6B45A5C127F34141E7AAC4001
SHA1:	1D297E1EC8299342DCA35F173CA758449005F850
SHA-256:	BBE5E49F45F77011B9F6012BEB2625E3231C0DB2C3F378D161EC0912D1B891A6
SHA-512:	5B28AD6BDE3AF83749389066DBF9D0862099D3AD20F6A81E5FF6B4D8DC8C56E5A471318E42FDDD6A968160494B8B6374EE6CD844D706AEF874FE49E400E856F7
Malicious:	false
Reputation:	low
URL:	https://cdn.alfasense.net/lib/alfadart.lib.min.js
Preview:	...........}.r.H..P..LX D.....l...[X.v.x..H.h....u)J.3.g.n......g.z....L q...W.....JD".y..\2.6Y..<L...v..Ar......4...~..=..%c.r..$.c.&.T..._^........<I..L._..._..".<..h..e..$..'.n.L..\^9....,..gYx.w[.8Kq..4...I .k[...1...4...`ss..<.L.pc.oF..8.Y.)s...,g..Q..1....4.G..X...Fe....uq..$.....x.r..c....8.m..s.Q3F...0v..(I...R.Qx...z.c..?.<.......1.ZV..;....s.9.\|<........E.].C"..h..b.s.-Ma=..Q^n.wB'vR'r.'q2g\...U.G...p..=...1v.y.eH.*.$IN".D.C.^.H....L.s$._..aI........+.Q.4.jF.)....../............."&:..k/.o.o..U.b....F.......e.(91..j__W..j.H.].oKs..<..[V.v..d1.q.q..,.)..A.H...?....a.iv....#.PT.<..Z..K>...AW...w....w}G,....%t.)..Q......;.r.......A.y..\|..=?.]....5.g..NU7g...sw".S..\|...n\^.R....\|4.lkpw.,.\|?~...f..t.7.n.R]ds..?>..tbd.T..R........c.\|{...w.p .].+UKq)./I.u.H....us/.%..-......]..z.....-.G..[.@%... /J...#..O...}/.4.<..ga6....\|12:...V...O.. .gXI..;.....Y!..4./..Z.PWV.cl/.B.../vA.cld.D.O.=...Q4...%S...J....w/T.l<.&O....~...4q

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	dropped
Size (bytes):	152506
Entropy (8bit):	7.9645490981566285
Encrypted:	false
SSDEEP:	3072:h5o4qsjz7f3Qxx8pXkiQkwT3s5z+0N42kcEREgVBPuFwk:n9zT3eGpnQk63s5C0N42JEfPuF/
MD5:	A77326D48089ED08DE86A3AF4783CD4E
SHA1:	57FA71BFA68796585169B49B88FDC44471ACA30F
SHA-256:	0A73FA4732A174B0D5A06C63268BFDDA2B099C4C576960BCF8AA598384A8D1C1
SHA-512:	D94AB651B74C5A3407B370B588A24E5EDCFDD2400C1F2728DBB511CFA6D0C033D554FE8F7FDEA306E7ABD1A413BB0F34CB6A1DBD58D433EA0337A117272F4A86
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 226068
Category:	downloaded
Size (bytes):	85288
Entropy (8bit):	7.997415189479408
Encrypted:	true
SSDEEP:	1536:a6VR5CWOxkPhT4nhHLJzrxQmq3s5LWPHgNKeM6xnfT+JBFUSjZ9sl5K/IHj8HTme:pR5CWLPehHLJn5+oGG1fyJ4+I5KQYH+I
MD5:	B54B53DCA35795738BD8BB216488E314
SHA1:	8540C36C7659EE4E6760C17FE855CC6EAA3862B0
SHA-256:	4D5ACAA23143FF44E1394AD95C5D8AAD6649FD478CB1D16FD40F68E9F59902D4
SHA-512:	50BD8B0F40ADF63381694E00392B8DB387180A6C053D4D36465D8119A4284A3F7084F82A010CCEB1DA1006A0449CF402F1308BC8301D06D3FB14C87638599380
Malicious:	false
Reputation:	low
URL:	https://cdn.alfasense.net/lib/prebid.js
Preview:	...........kw.W...~}......Pl 7.......&.$......-.%E..c......[.T.......#.UU.f..s...^.L..A..nV....p..v.;..f....~.v....{k..?.....b....I...j....A.....iV;....\|T.u....y>..ov...E>-...,^N...$/...O..\|4+.\|?8?....tw1...........6;.N.~.>..............j..d.=MS....<.R..W.68i\|.....-...._....]q.5..?.w.y.9.^^U.`.....i..........h6.....Q.3v....jCz.uk...6>....7?..k.awv..j.....,....36.v.8.;...y.zy......).h...w..6....,.5N...\|0.5.W.v.pq..FY....o.....y.j..7...U?=i^M..b:............'....}n.7....Z3.....kfc~....f..o..6.E......}.p..z.l4.^.>^.g.i.=.o.....Q.J....`..;..b:..Q.-`O.u....;....{....6..l..n..h......i>.......S.u..t]v...;....su.n..........k.....;.G..d1;..i:.pQ.t....m.~..n..f;o.KKo.R.....5.....9..N....M'.Z...b6..k.............IX...........Z...d:..Y#..&...vf.v&.t...s...).9j.u/25........O..%3{9...q......o\|1.N.&...R.t.Z.\|..].....{5........%..w>B.F.a.Ym4....4.q.j....;...5V...6..C...Y..'....a.X..`...{..l.l..p@.6.F....1nf.k.z.l.......?..*n.

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	44
Entropy (8bit):	2.988903791268261
Encrypted:	false
SSDEEP:	3:CUkwltxlHht:Pt
MD5:	F9D60352C70A2BA15616D1C9421F3844
SHA1:	E9ABC8BEA7721A4B6A50295850D13C515006A95C
SHA-256:	82CB517A8F80C91DFCEC543C6D140DEB3BAAF463EA9E77655475096EBA7BC7D9
SHA-512:	C236B22BCD48790FF970B8BC566061EAE734E0D34C1A68CD8D6160415303E0B0B51FE5780FAFE7349CF71CB10089C9F322495267EEE019CC63F879727263DF4B
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;.

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	9
Entropy (8bit):	2.2810361125534233
Encrypted:	false
SSDEEP:	3:YMm:YMm
MD5:	7142DF90FDED5D00DF2C0BA662F9B662
SHA1:	A6847802842E7C15D61B44AAE555380A7E2F891E
SHA-256:	72D427B7264997760074A94DCC1C9E54AE2C33B05276BFB3CFCD0F5D2D8BBA3A
SHA-512:	784EFB907BCA0FF2469B88A609E908845B316D7B3DDCEDA423FFB9C2B18F3C94535E05A6D25763636778B337524203B634D6D820C773C331319B8D26998EA6DD
Malicious:	false
Reputation:	low
URL:	https://const.uno/id.json?p=5
Preview:	{"id":""}

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 444x800, components 3
Category:	dropped
Size (bytes):	69659
Entropy (8bit):	7.971061016132954
Encrypted:	false
SSDEEP:	1536:nl5AQMi1TQmmVfZcWpqMeor58oIL54CU6Q4nENIk:nlommVfmWCoaoa5pUfzIk
MD5:	63D591DBF18DFEB17A8D6F3B1C0F1F76
SHA1:	C3694AD05FAA94560999B7D779A6C5E91F94D0D5
SHA-256:	63378EF5CA54A8131965CD4A38491B1A36170C26117908CD0DDB68572C0DCDAC
SHA-512:	82699181F9ABD85E31157DAE0A43D1928B51171DF8A8621BAD537211C387CC12FEBD199B858471E45E93AD16BA40279BF929EAC6AEF5756B9633895BDE8C588E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......ICC_PROFILE............@..mntrRGB XYZ ............acsp.......................................-Qt..................................................rXYZ........gXYZ........bXYZ........wtpt...,....cprt...@....rTRC...L... gTRC...L... bTRC...L... desc...l..._XYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ .......O........text....N/A.para..........ff......Y.......[desc........sRGB..................................................................................C....................................................................C....................................................................... ....".........................................F.........................!.1A.Q."aq.2..#B....R..3b.$r....Cs...%S.'...................................8........................!1A.."Qaq..2.......#B...3R..Cb............?.......\|W....)A.'.R.`.I..8.L.\|1.....4...q...r.!h.q.I.4T$...2.8..g...#Q..}6...d`.V0.X..84.%.U..n8..[X.C...;p.D<.....z.4mL\!=.<..Qu..P.n

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65496)
Category:	downloaded
Size (bytes):	634944
Entropy (8bit):	5.449937341147356
Encrypted:	false
SSDEEP:	6144:QgihScLXC2ntBuYKABDQOL9cXAGQSKvSV3u8+8BDeBz1nzBHNrROoK41DX:LwbjC2ntBuChQO1GQSKvSV3j0NrHbBX
MD5:	1F70BBE29BD47349BD5B7E133B211097
SHA1:	A7FF6FFDA92BC19310B84583AE75242FB7B98BB2
SHA-256:	FD662D6162284EBB0539B9D1458F857DCB291673D43445172DC0EDFB93092B2F
SHA-512:	6D72048F0639C450C8572DDC0D048462AC0DFBABCE952ACEEA2FECF3CA0A7E837BD9938E8A1FB17BE4FE33E2EB3CE8CC3A6C62F1351D8A4BBA324E5E13D888BE
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/1117086/28ced93adc464997b048.js
Preview:	/! v:1117086 b:default c:advmanager /.try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(t,...e){let n=this;return function(...o){return n.apply(t,[...e,...o])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(t){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof t)throw new TypeError(t+" is not a function");var e,n=Object(this),o=n.length>>>0,i=0;if(arguments.length>=2)e=arguments[1];else{for(;i<o&&!(i in n);)i++;if(i>=o)throw new TypeError("Reduce of empty array with no initial value");e=n[i++]}for(;i<o;i++)i i

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2988
Entropy (8bit):	7.90270040258558
Encrypted:	false
SSDEEP:	48:bTMakSAaMEyQYGQWMEfN9u927FCdeB1q2Fzo0dgeWFKxZsK90:bT/kS3yqQWZN9u07UgBz0UfWFK90
MD5:	141F35B5634F53E04B4AABD52F725514
SHA1:	9789779440E965798B36DF72A5F4A948C1442A95
SHA-256:	96F3CC90FB14B484F6E48F1F9C18DB64075E5049BE4751CAD53A5544A7702683
SHA-512:	08C38ED957F3400BE44A332629BD635DBCF6A04D37D60509945E9EA8FBA3CCA19A85A6FD50663A8BF40407C1355BA1D2E15B2A1341DF6A48C6F1ED2002E3D975
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m...sIDATx^.{.\.y...{...]{.^...b......i.G.(J.i.Vi..IUDh.H..9m.......4IC..@....M.m.#..dJ!1...e....s.......iG.i).)...3.....9W.^~......g.....Y.t+d...!..JmNO.......%xh.W.3......RuG...R.S.., ..i...z.qd&.?Ti...n..7U...l....w...h.}.P...:.....!.D...$..3.DS.c..?.h.....=.......~.c...z.w...k...}.....n...(..>.....}..Ga.'p.i....-..7.n.._.=.....s.....r...n6...WB.. 7.Yp.......p..!...(T..F..#G...=._.....s.~.......w....W........1d..R....@........E.2.}.N}.~.C.c..#...........\|..._vQ...............e...z..G{I.............z...........5..z..g_>.....A.~.....q-..y9.......s.(.Y...<s+.Q1qh..z..8..........^?u1g...!t..o..Pg...tm.6N.+.4..L.........=....=........&...{...l.........?..b.W.l...Y0.1`$to......>.mc.....W...5..%..5...\ .....^.....h.....h..k.Z.^.m....V.g....q.........3...8......t.CX..4..]=' .@F.J...B...@.(.6.@A.@..:.....E.l...x.P..'....\....U....Cg..kx....C..c.~.o..8t.C..$d"p...a....C\|..y.Gp.Y...k...*d....

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2452
Entropy (8bit):	7.900360085670837
Encrypted:	false
SSDEEP:	48:1hKCEWfEsen90FzQlK0BlTMyj0P6KuG9MXMLroOQ+pc97r+D6y43EkXwuzPcC50W:1UCNfEx2ZQlKExMyj0P6Kuj8LbiH+DbA
MD5:	AD7A70861682A913A21FB719251EA4C5
SHA1:	221135D8EB3C6F94E1F890146A13C1EC80B70EB4
SHA-256:	58E33E04ED187BDF5C1FAE0FE8ED8D3EC9B5EBB79E60519BEB77A0349B2E09F5
SHA-512:	F6679AC0996AC88C046E3D46FAEF13C8C636B51330D992D8C351B386B855ED1A02BFC6FBFECF12E34BCDF038061DC689767566439572E7CAFD2436C973E00DA9
Malicious:	false
Reputation:	low
URL:	http://telegram.org/img/emoji/40/E29DA4.png
Preview:	.PNG........IHDR...(...(........m...[IDATx^.{.]U..{.s..3s.v..-...)..F.......-).VS.1..1.h..1...G...MLH.0.?~...Phy.J).b[..-..}...{....3d..$`.&k..{...9..=w.?...3v.g=[.....)`..6.8.i.G.....=.ss.[..v...6.(....Vb.............../{.....6t..m...hSI..........hl...b...O....a...77wc...........@#.B.+....T[t>....=.Q..f..D..TR.^.hh^..O.D..6..w.Z...D..'...d/=.....'w..1....=...s...k.}.............T9g...h#.....4o.....\|!.K;Hdc.....2LdxL.h.D..PmN..2..........v.D+.%z}..+n.%-....Sr..z..M%<....I../.A...c..?.G..1...F...8..=z,.N...L...[v%...znf.=.......0.uDo.&..h.?.6?.....yB.^.i.x.+T]p.m.h.I.......^L..:Q...@.....h......8.......Y...~..F..z..}...].V.].E........%R.C....y..........Yw....n...rq..W...../.)...54...i.#Y@......@...~.....%.o........<....XvK.<...2..f.......7>...7-.....9..\..3.vl..Ve..5.b0.6 .....1:.oz...[.`....v.e.. .Z..9..A9......v.a=.(...;.....^..d7.~...h~..._....n5.)...pv...0.#.4.Q.=..y......=.O.....u-..AR.'A....Aa..j+Y....I......Ni..U..`. ....$`Y.

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2903
Entropy (8bit):	7.919365872096062
Encrypted:	false
SSDEEP:	48:X4/SD8YoyiQQGHsOSUWkuIWuqxWeY5dtuFT0bsHU5xyMolsCpvFIac+VTNjH8:X4/hYQGHTUKWWeY53uR05OG69HZVH8
MD5:	924CBB555685F12C693704F88699BC0A
SHA1:	DBD0F33B10B7F4C45904B01C23B504126D68DF86
SHA-256:	9528C7223E0173019B168E75A2FBAB1558B5E133C1D8D115AE94B4467A58863C
SHA-512:	4FDBC63743ABB69E0CE82B44438A75A81E68B8C02B0F3AA4A84C70AB7B98310DDD6383399242EF1CE8ED81BBA30EBE37DCDC3030F952D606135FE60895C492A5
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....IDATx^...].}........c.1k.c;..o.$..1.1..LS6..N)..%m.Q...R.......II.P.R.......(..,.M.1..xJ...{w;..;..(j.E(T.w.O......;.].u....0\.{By.?.......r..~w...V..@...9N..C.....fD..t.......5....t.y.-..l...x.g.k.,.QJa..yO......P8'......V.C]......{.{x.s.m..}..P6..d.#s.A..5...ZB......;!.qi...hc.D.Vy..~..x.....'.W.h.q3f.X........d.#.'..z...c..!K..4#.A.<..dEN.06..7..G.s/=2...........q..9.'w.}"...'....I....(IZ........c..}.I<Qd.:.o......~4..K.......x....z..y....f. .J..Xk.A.s9I.F.1L#.Q....<.')...^..E...........n.G.....Y..d......Q...>G.Bph.(....U.R.j.....Z[.hmi........M...lo.....-...rk.I.G...W..Zb..?n._...\|...g..uw...5...Y..\|\...B(7.......O.G...9. k..F......2..!}....uZ_.....{..-...3.t...P..Dq.8...Ai.l.R.....<.I...........7.m....E..o,...}......W..y.;..i......MtLs..&C^..4..,.....6.....%..S{f....q....~.....^.5.W.z{..._y../.[....?.}..7~g.%_.....{.\\|.#..Z.....9..../...o^..c...,X.g.\....'/...~{....~.+&....{I..?..;......

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	842
Entropy (8bit):	7.6603315156717
Encrypted:	false
SSDEEP:	12:6v/7fkTcSeG0JnQtTUpe/5vL4ZwyULhZjkd1iSET0JRRQzWWyV/VlGJfIG7/:UkTTKEADfmhZjYUZzW1V94PT
MD5:	06684F2D2281A6F921E7BD18F8AE8212
SHA1:	D889F4C89B65554BB40E59865AA72E41616D0ECA
SHA-256:	34200EB84EDF8F51BFE49702B84A580D4EEA38E4CCDEBCE7CEA2DEC555B1EDA0
SHA-512:	9A52D03DFF316BB3537022574DC0978D728C37DBBDF0CDF0BF94EB9356AA44C4D1D6BC98588A16092DE4564F8D6B2F4E630741A99A5E9770B24119CDB34F185E
Malicious:	false
Reputation:	low
URL:	http://telegram.org/img/emoji/40/F09F94B8.png
Preview:	.PNG........IHDR...(...(........m....IDATx.b.#...`.....0C...fQ.>.........m...m.Z{.m.fc...S.g.nR..u..\ .VG...&.tP......1.4......7..w..g..n.s..p...{e=8.o...1.o.P..O.$..,.3..7z...&J.7.........`,...Q.y.7.C.o..J.7....u/.g\|...J.)0..8.o......EJ......I.....0..V.7z...?.]..mJS...k.30.=....].C/w6..../..H.;...p.y..{..w..nW.......Y......).Ww)\}o.1.&`.....vE....2.Y...\.a......Z.}...^.-q..f0......ps.d...g....0..........b&...e0...*\..\....N...i.......lv..........A....&..M8Xc.....b&....v..C.9!r......i.}e.w..?{G.f....n..Y.%..H....5.V......"..)]9..."[..8..F..u..3.....%.9vB.+d..])@.g.,fj.@{...B.(d....@...`.-.)\. #.2Y!s..D..VtM...3lI.....C.I...E...vM..-.)..!..2K...(..=..p.M......Z.'@a...^.i..}.h.LU....[...Qo.8.B&+H..9M.;......2B!..(C.,...%...).. ..2A.R...-.)..!.V....7Z@.<.w.H.@......w...V..........]..........IEND.B`.

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (44546)
Category:	downloaded
Size (bytes):	44580
Entropy (8bit):	5.45383431026039
Encrypted:	false
SSDEEP:	768:rj4PvgNTAOEFbbZOUVjZlHn9ogBQzS6tqib/V/li4rsWQfEgyVj4VcUku8Tur7//:Q6XZVhMgHYkVO4A
MD5:	344F097E4203CAE3E76254B37374D36C
SHA1:	02B7A0F5C0F5A5E746CA838DAF5411439285567C
SHA-256:	47E94124F0E54E81F2A2B6269FCFE4199FB028C82EA18A56CF02ED7DEECB01C0
SHA-512:	1EAD061C9C61C9D60218F0520C89C6C7194BFC371FE4164AF5C9146439B70CF984FBCE2BD7076FBC7A4C3861BAF981C97808E8DBBC562B7AB351C739C3B86C7A
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/1117086/77b050485636874c5aed.js
Preview:	/! v:1117086 b:default c:6660 /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let n=this;return function(...r){return n.apply(e,[...t,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)t=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");t=n[o++]}for(;o<r;o++)o in n&&(

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 12181
Category:	dropped
Size (bytes):	1718
Entropy (8bit):	7.872606266626748
Encrypted:	false
SSDEEP:	48:XIsIU1Ez06WdyvMgl9Q0O+eIgpolJHVkTyp:Y5z2iBQ0O+NlFV
MD5:	0FC042BD558044D6F8A7E74E8DA3BBF4
SHA1:	926D60CC73043E0677222499B83B0497EC6BA57E
SHA-256:	AAE9222A62EC0A116EE6C53ACCB8A0E2A69D37116CE184213C51A09C7DB93106
SHA-512:	50F325A52A90C6930FD47514F9541ED653BCDD385EC383889A59BCB931E08BE4149CBD2F8A2D061AD40E046B7D1FF2BB3A43E92CC33F406EC575F84AD4C3920F
Malicious:	false
Reputation:	low
Preview:	...........Zmo.8..._!...../I....[.a.....>4C..r...YN.....-.v...-0`..D.(R.H.1.0g...CYDH..Ct{..'"..1.F.x...8.hE..(#.3.I..M.#.yxr.=8..l.\|.j.=).D..4".'6)IB..,H.&.B.`...)2r...2......^c..,....>GG.).m;Sg8.......L).M.?......T.....Y....''l......}I/U)r.tQ0....e........p.3.D..aF..).8..[...gd...k..<...R..\v...Kh.r..5....m.......a.)=U....Y..tl.L..=7....D.......$..r..m.-...?v.i.X.0.....+........[...7e..s'..759...4{TJ.h.../..,...\T...Z.1P.....M...d..4.b....e...."..]....].ZF...pP}.....kp.O...}.........K.[T..8.mx.9...l...9...n.B.\..S.S.2.}..g.U{C..Z...].z.....-.i.i ...../..\.I(.g}...h..]. .n+.h.[).9.[....O..R.h.'V.:.l....('g.c....g..n)......,.!.<.6.g..\|.#hp..op.-....!.2.D.K._.JbLY..}./........\..$......1Z.1.-..t.hp+.#.(......2./..&U..Ll"R..r#.8...C>D8.....Z}..G .$.9+...i...k..GWx..6..8....{..`.$M...A...$.0.q......BTJ..".$E.....EXT.....G~.3.2.`.......K.....L.]h0..lk<.'#\|...q0q.....c.8p..0......q...Y....S...<.@.X..<.. .3..PK.y....J'...r....U.-G.

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	dropped
Size (bytes):	150870
Entropy (8bit):	7.96308432149556
Encrypted:	false
SSDEEP:	3072:hrb4EqF8a7dP8LGjEYHznAz7xrr++lEXMsQML1:Rb0X98LGjm1dNs5p
MD5:	42EBA095FDFE5B40A98432260936ADC3
SHA1:	C320B6B619F83A01314125214619EAEACEFEB1F9
SHA-256:	B87D908934C97D378A532E936DF39F80BA8EA319D811426351507FBD67306972
SHA-512:	B91D03096938430B1C58FB6E19A72E7F94DDEF13D94CF649A6D8EF8C913135CD7C5778772CFE21603D0B7EDC6682AA3E0FF836DDB84C418E1101380A6C984006
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	dropped
Size (bytes):	138122
Entropy (8bit):	7.9614906965334615
Encrypted:	false
SSDEEP:	3072:hTC8unHzEMZc5yxwJwUMU/XKM6iSNCCAgkHYVJAVYrS7cYK:5VunHQgc5yxM/GoCAO3rSq
MD5:	0AE8FDB32F9A69DB2EEDC88E1BE18585
SHA1:	F6FCAD8E1A7ECD95D392A105F32C954A8065200B
SHA-256:	448A15FCA9B71C8A07E9E9AAE53BD64CC3350D0FE75AE50C7919879ACD287940
SHA-512:	1F344BDF272D534E5E99EB48118F3B23EDA76FFEAFC2151A875EEC840ADFD50F45FECA015CBDE5EA22D7E407339081AC6AC2A7111E43124D7A9A00DA4D823FA9
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3524
Entropy (8bit):	7.924817574061051
Encrypted:	false
SSDEEP:	96:0MEKXiCfyEsd3x4upVfV5c9wAGC8AznDu:0MVDyph4upVfVVAGC8ADu
MD5:	178785013466E4CC609425F3D6D506F5
SHA1:	76CFF05613CAA87BA61D0D2604536C3689178425
SHA-256:	A9753E18A87CDB5FD1632E3A8BDD811AA5946809021815C102B2601CD37FFFE8
SHA-512:	0D420FDFD301254C02980233EEA95D78AFD16E10DD8CCF7FD59444E714EC017D4DD7905440988DE93A28471FE30732411E556F4967280115C751562D1210189A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....IDATx.....\......E.v.2.....m.m.m..z7.$.v_.\|[.Sy.....A...........`.Ce....../7.*.`...v~....>.X......:1Mwuf..zs.=....!.(.R!...'..U<.x+GH....G...wj....g.....!..!".1d=&..~.....)G@.'.q.j.+\1j.#...l ..r.1B..(...}\..t/p.G@g.Y......C..n.%.l:.\|..&....m.....j.F.3....t@X.......p.B.ZK..'.A.)..\...{.KS...Y.k..BU.4F............1.5>O...@......&7..v...;./..5...L.....x/.K\.-u.K.y..{g..Oo.].....#..D.{i..rn....BiW..i....y0.t.?..S.ef...Q'7....{.......N.G+.r.....n..9.@..~.7Vs..uB......j.h..U.. j.,.<..Y..T.<+.1.....OQ2...f..V.....{F..x.t.X..t.l%....b..kg..O..s.!...f.v.S............J..D..\|..S.NX~J:...Ty].Ba1...M...!....(...+.....D.A.....+O.p.M........`2...6Z...-...k.qE.P1BG....!.).z._zp...;.....M&..#.......8...e.!.i6w.A/......E..-D."le...W..a..X.+G.....2TH......q&D.&...z7I}.Q.R..).....7.B.1x....].!4.>v..T.D.........M.r.}q&......^..W1.@.#U.....C.T..1..).k.....G...).,.#0..(.1.bH9..5...xp.......d......3....E.Ov..rTc.M......![.e..

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	35
Entropy (8bit):	2.9889227488523016
Encrypted:	false
SSDEEP:	3:CUdrllHh/:HJ/
MD5:	28D6814F309EA289F847C69CF91194C6
SHA1:	0F4E929DD5BB2564F7AB9C76338E04E292A42ACE
SHA-256:	8337212354871836E6763A41E615916C89BAC5B3F1F0ADF60BA43C7C806E1015
SHA-512:	1D68B92E8D822FE82DC7563EDD7B37F3418A02A89F1A9F0454CCA664C2FC2565235E0D85540FF9BE0B20175BE3F5B7B4EAE1175067465D5CCA13486AAB4C582C
Malicious:	false
Reputation:	low
Preview:	GIF89a.............,...........D..;

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	807
Entropy (8bit):	0.2929836665455332
Encrypted:	false
SSDEEP:	3:CUI/lylAxBFzen:0he
MD5:	18B3E43ABAD26BDAC6F4CEA944777B62
SHA1:	5848CD0ACA8D9FC92D8449B13F829CC1F6CD310A
SHA-256:	3CA19E57C9A2465AE4DF271316BA4D29E7FF7F113A2A2C5297780C0B7A0AC09D
SHA-512:	1615D2831EE2B7A6FDA558521CC36AA0974262869F162635B6321644E23B278808B1760979CE30EC4B2BBC41AF487E1E434370B5905D7846E0904C4550D7B4BA
Malicious:	false
Reputation:	low
Preview:	GIF89a.......................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................!.......,................;

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	downloaded
Size (bytes):	138122
Entropy (8bit):	7.9614906965334615
Encrypted:	false
SSDEEP:	3072:hTC8unHzEMZc5yxwJwUMU/XKM6iSNCCAgkHYVJAVYrS7cYK:5VunHQgc5yxM/GoCAO3rSq
MD5:	0AE8FDB32F9A69DB2EEDC88E1BE18585
SHA1:	F6FCAD8E1A7ECD95D392A105F32C954A8065200B
SHA-256:	448A15FCA9B71C8A07E9E9AAE53BD64CC3350D0FE75AE50C7919879ACD287940
SHA-512:	1F344BDF272D534E5E99EB48118F3B23EDA76FFEAFC2151A875EEC840ADFD50F45FECA015CBDE5EA22D7E407339081AC6AC2A7111E43124D7A9A00DA4D823FA9
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/UFNhm7mbEFhB4QrlFgeburrHC3qsTU_P4QzBqpQl7FLGcglXyHwWnn38h1ag9ExV45hNk6v_-VbYoQ2dWzNlG-3HYnELtf553wjaYxDUy2T-b3mxSNS1VcUcsBF0KBR0wC7tzEoFaaFc2-PVjgMhDGUWoBZ1wf0AdPaK-ioNRsa6Hz67S3ThrSQdwaBG2LGo-xHuFMnqvj1nlD-9cNYR9P2pbjuMAxNgIcMtrxJtqgo_YYaI2R_CE0NkOZ9bFw1h-bl__7xhxn0d5NS7SSNjaV91vsGff9xShp_k-qFgfLp7-_9fbSGyA0tWrLMwZK-rdRTLJ_BB2vDmw2YDk2quZg.jpg
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 12181
Category:	downloaded
Size (bytes):	1718
Entropy (8bit):	7.872606266626748
Encrypted:	false
SSDEEP:	48:XIsIU1Ez06WdyvMgl9Q0O+eIgpolJHVkTyp:Y5z2iBQ0O+NlFV
MD5:	0FC042BD558044D6F8A7E74E8DA3BBF4
SHA1:	926D60CC73043E0677222499B83B0497EC6BA57E
SHA-256:	AAE9222A62EC0A116EE6C53ACCB8A0E2A69D37116CE184213C51A09C7DB93106
SHA-512:	50F325A52A90C6930FD47514F9541ED653BCDD385EC383889A59BCB931E08BE4149CBD2F8A2D061AD40E046B7D1FF2BB3A43E92CC33F406EC575F84AD4C3920F
Malicious:	false
Reputation:	low
URL:	https://cdn.alfasense.net/js/ad_13097.js
Preview:	...........Zmo.8..._!...../I....[.a.....>4C..r...YN.....-.v...-0`..D.(R.H.1.0g...CYDH..Ct{..'"..1.F.x...8.hE..(#.3.I..M.#.yxr.=8..l.\|.j.=).D..4".'6)IB..,H.&.B.`...)2r...2......^c..,....>GG.).m;Sg8.......L).M.?......T.....Y....''l......}I/U)r.tQ0....e........p.3.D..aF..).8..[...gd...k..<...R..\v...Kh.r..5....m.......a.)=U....Y..tl.L..=7....D.......$..r..m.-...?v.i.X.0.....+........[...7e..s'..759...4{TJ.h.../..,...\T...Z.1P.....M...d..4.b....e...."..]....].ZF...pP}.....kp.O...}.........K.[T..8.mx.9...l...9...n.B.\..S.S.2.}..g.U{C..Z...].z.....-.i.i ...../..\.I(.g}...h..]. .n+.h.[).9.[....O..R.h.'V.:.l....('g.c....g..n)......,.!.<.6.g..\|.#hp..op.-....!.2.D.K._.JbLY..}./........\..$......1Z.1.-..t.hp+.#.(......2./..&U..Ll"R..r#.8...C>D8.....Z}..G .$.9+...i...k..GWx..6..8....{..`.$M...A...$.0.q......BTJ..".$E.....EXT.....G~.3.2.`.......K.....L.]h0..lk<.'#\|...q0q.....c.8p..0......q...Y....S...<.@.X..<.. .3..PK.y....J'...r....U.-G.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3656
Entropy (8bit):	7.945724834172328
Encrypted:	false
SSDEEP:	48:GyZVsZS//xAL0LQZ7Lax9crt2OpKVjqnh0yXO2BxZBwobnE3vVcmwdCitjmy3S:G5yJcCx1yXfZi33vV+FS
MD5:	E07E0D94542EC9EF9B505B75133DA2E2
SHA1:	4E5585C24A125ABC2414A838C8F77885BCA43323
SHA-256:	B18DAA088CF163C33ADA0F212F9E85899DBD5A04D504D4A2829C2306CA3DD243
SHA-512:	7DCCB6795A35AE81DF8F54D78DB15227DF4F41FC352DD6AFE5807878853D48C93923AF0D97268E05B0FF0446D1B1D338297BEB34692D8AE2DF40745120314D32
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....IDATx^..i..U.......^...t.....,..........X(85...LM.bb.(ZX...S....)..7....FBH.,d.t:.....].`...L.....u..w..,.s.sl........';..._}.....Y.^;r..w.;f^-.....g...?....xf.==..W..?..Z4.T....~..gu.kd..>.... .S.N~k..o....._....}.;>...#..r...4.T.<.B.t..6.....]....m7s..r.v...n.M._.m@..K..X@...H.......6....l...k...w..F........t.t..Q.A.~.A.j...G B.c...z7gh:g`...I.^.....P.....@... t.C.c.\|.\.,s..-.[?....?......C.g/.35b.1....0T0. .9g..2.....A...l.._.a.[O?{...r..W..l........+>.r....P.}4U><...."!m.t.4@...@....SS.[..<4...\|z.._<8{..?........#..d..c....^s.Y}..%m......B.E..hm..O}.M.x.u.5....s.~..(TQ..t....m..6..Sb....R.]K.\.Yk.Y...`....VO.[.M.._}.=.y......Yz.u.1.6.v...m.7......a.Ku..L.l.....~..9....x..X..Z.J.1=.u"...\|."R.dS.t@3d.#PT:am...}....{g..l.......@&..,..2...B..A=..A.e.\h..bX~.E8.....\.5.0.U._h..U...@w..68:.....<.[.\.v.E.......nL.b.......A'.]'...O.A.D.BD.#s....pJ...3....V..+.a...n.$en.C.#w..rS.4. .iUJ.y.....U.@.@..5...

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 2979
Category:	downloaded
Size (bytes):	1521
Entropy (8bit):	7.869533935472937
Encrypted:	false
SSDEEP:	24:XNYO+fGvuqeErDHqlaxe5mCucAX+QYP5vwK19cnQmbQ8rCog4IY7TVhs7NOookQ1:XNt+BerfxymCrK+TNwKOSlGVhawooDfJ
MD5:	9E8C00568FA549AEBB47100255D258AD
SHA1:	1F544022455F8B176CF0936E77D2D2A2E15F75A7
SHA-256:	4C115EF36E48C9AC331CDF8DEDC8956E0C28BB7079B909AAF0555F1B6DAA5179
SHA-512:	082F9458EEEC9FC83E0C7FC81FD898DA11545B9D2D465AC25B0EDBD763D07A375BF49BB1D234C44AD2C1EE41F916C34B286A45ADEA7B189CFAD9500A34E7A5FF
Malicious:	false
Reputation:	low
URL:	http://telegram.org/js/tgwallpaper.min.js?3
Preview:	..........}V.s.8..+-w..0..$.(.4M.i......l....0...~....z3...~+...2...2M.r.r1XdQ1.d.x.M....7....P..v4."Y..F.......b...'.A....z=.@.;.H8At...E.D...Y......X..3..o..I......q..:.8..........Y............bM.%k4:...M..T.M...-..neM.z"G.`.5.R.....BO.....&Zj.Z7+k...9.......u.[]`t..w.wK-!..s&..H.N>.,><../..p..N.sN.K..u..IoA.X....v..B...y\|d..-...FcI.s..b...F<w..?....l.Np.B`.kJ.?z.Q..=H'8.4....(.c.p)^.!O..a.I.`u.p./X.k9g........e...V.s.,J..o.B.K....3..G.>..%Q...\.B..P...d..}......<...gpr.9..3.2v......n..Z$f.%h.,..1.......M...Y^..9...@.e.m.t....2....h2.....9....r....9.m....J..@...+...>._....b.......^._.b\N7...6v.~..{..5o..)...An..`..\.By.......j.....F...b..M.W....,.U...\|...a...Eqxg....:.o..q.WZ.4.tp...Z..Nn.S..MV....h1VYa'r~.......~w...t'$...}..>......Bi.wI....p......H..Jd.4.J. Q&z..=.............&oblq....?...:....n..-.u.6wO.{.........c..=.S.9.KC....q.....=.x...#\|..M.7..."\|..-........M.6A..4@.&p...%.f'}.VPI.d.].....+.M_3~..f.jW..;.E..r.....

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.875
Encrypted:	false
SSDEEP:	3:HttOLn:WL
MD5:	8317734CA18C5AAE651254229663D0DA
SHA1:	2B414306D796F079E921F87FF21AC09432A7BA39
SHA-256:	4D7941B39CC110F5ED9157F2D26C5A03C8AEF3274360DC17C0E4052A3A222605
SHA-512:	5EFDD25B2FCB98667912B9FA31B349C2E6C9A1822907E87853D0250EB657ADB12449CE233C3954781CE845847BE7A6CA8973B6F1B8D581D6F37253481F664A55
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISEAlbsNPVJZyHSRIFDewgdIs=?alt=proto
Preview:	CgkKBw3sIHSLGgA=

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 970x90, components 3
Category:	dropped
Size (bytes):	7670
Entropy (8bit):	7.2733595074051225
Encrypted:	false
SSDEEP:	192:3WHUPd+R6XFYDRu0TFRDkl/Ydl/ohiY09M0z:+UPdLf0xpmgTghibtz
MD5:	93E6032137695635299EA12513020A22
SHA1:	E43E9222C40653B13CDB132307004CB6305A28CA
SHA-256:	C6CE19626B346128489E909BC7104E3BB42A2B6F3F8FA84C7F1D727301ACEB33
SHA-512:	AFCE2E17FCD5D7B5FE30FEDD8B71C94475DBCB645727797436630C2C675CF3F9167ED515723881908F2B20B666741F33180E13F9785B1EA298D28BBC5A83A65F
Malicious:	false
Reputation:	low
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................Z....".........................................5....................................WX..$5...!1IQ....................................5...............................!".#13A..$%BWXq.................?..@.................................................................................

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3910
Entropy (8bit):	7.929337285068634
Encrypted:	false
SSDEEP:	96:aR3RGKzFoyiB5LVazBc6rZoRlqAJAiGefj08Dz38:aypyuR8c4Zo5GefzDg
MD5:	D6DBCED201D49058479E81B662B38AAF
SHA1:	17497EEF3EEED85DC3DBE93160D088E73A7BA6AC
SHA-256:	D2501E01168A81E8AF702F1283845CDC11C25B1EBFD18EA3F959913EDB90C1A4
SHA-512:	338337016ABAB3690BA54C2D832CAE5B674843BD879838266069F933CF6620A8ACEF06405F956D75B7E56E12D2220262CDED8BF166621DEDF449F93D7A91A36D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....IDATx...........Ec.{.8.`...m.m.m.k;.&.af.{Z.......f._O.a.W.t.....q.....\|...mnk..(.?N\|....W$...N.V<.....GI.,..!V<...............J.s.p;}i.`..XR..-@y...]...d..s..{8...9....x.u.q ...../.......s[.....!.S.a..>...4Bk.....ksvw.............N.Q ...4.E.p. ..0{...N......;K.\.P..)..r ..B.t.L..]\...8..<...QB..".7)e..B..4K...".r...$.&.:.....MM.R......_...H....m.v.......\O...V.....d .W..2APAi.e<....>..c....x..Cjn#....S.(.?.....}.9..m.E.......yv..P).I...x.^]/.........!.D..QA.s`. V.L....".........n..T.....".....1..W"..l...>....o]H...-.08q<..A!.1...pA..<....c..u..I.....:I..};......p..e.{.....q?..y.r..W0..L.......y..-6.?........U..TP..>8..l...0.<Ch.KRdu.k.....Y....?.u...^...........f5f......2.....p...s.....1...=.:A`4..p..'@Z...D..By.~...8!..CS.b..........].....V........7T6..f..h/`...X....>/`hv?6.D.]M...l(..J..X.py.X..Q...M.......R.Q....f..^t...r..7...........x.P..G..V.i.G.#..<.....N....u..k..tl<.#....<K ...6.!"O!+P...UP

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x420, components 3
Category:	dropped
Size (bytes):	92510
Entropy (8bit):	7.961959919655575
Encrypted:	false
SSDEEP:	1536:hpD0XlLN3uHpa3chQbijjiCkGlOfltOHVZVU/zpse3nbdnL+pDtkeoRu0xkebXL2:hpD/JqGjO0w+ZV8Oe3bp6pxkeoZkebb2
MD5:	EA0E3D38DC5EC9EC29B91BA1D9E323B9
SHA1:	9DEACE0D7C00F14EB866CDA45A5BA814F565BE95
SHA-256:	E6CC99E5C30C744F25BC89098B8F587BFDBB9B24CC173B9C008C6F432FFDB1E7
SHA-512:	7BF4F5256453267F4F9047B12422BDD89791B51FB5B9CAB418C4C8F736AAF98278F57819602914C8E1C453915751B4B9A34A90076CC0DD6720958A19F4299BC8
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	4.980767694952946
Encrypted:	false
SSDEEP:	96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR
MD5:	5791D664309E275F4569D2F993C44782
SHA1:	A68F363153614A09F10AE2892C134B9C4B001D4B
SHA-256:	4FF54BC38C267DC3A8C95F6ED4590336BAAEC70433EF15D027DDCA608C391E78
SHA-512:	93502A68F14FD4F87E0AA2CAD92A5657A8587E6ACB1C108CCD8CEB5E52776E77DF867962C51E1290316BB78027DA636F38C065294871B4400FBBC4DEDF622EE1
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................".."6."o."..".."..".."..".."..".."..".."o."6.#......................................................................................................................#..#(."s."..".."..".."..".."..".."..".."..".."..".."..".."s.#(.#..................................................................................................#..#-.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#-.#......................................................................................#..#}.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#}.#..............................................................................#:.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65493)
Category:	downloaded
Size (bytes):	124891
Entropy (8bit):	5.356707077634889
Encrypted:	false
SSDEEP:	1536:W06yQEoHO07c+j91Wty0vMLZdl21T15jSxGv2juDJc24Ma3Ox:P6ye5ytETl21TXjeZjEc2hbx
MD5:	AE97B143D2893673C378D297CC02D1FE
SHA1:	06B9CB4A79D6F46774772FFCA18568278784A3FC
SHA-256:	93A84D38193949F601290E272C4C2D380C3034CBC9F4D89CFAC7EE019C44B468
SHA-512:	AA30E25BCCA6EE853DC15B39D0E0BD42911346D962EC69A58EEB42A3D02CD93CE92E688554BF40B80958DB66382F199CA8EA52FFFE307841E15768562EEC496A
Malicious:	false
Reputation:	low
URL:	https://yastatic.net/partner-code-bundles/1117086/40014e7ae9852a9faa7b.js
Preview:	/! v:1117086 b:default c:adfox_banners /.try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(t,...e){let n=this;return function(...r){return n.apply(t,[...e,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(t){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof t)throw new TypeError(t+" is not a function");var e,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)e=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");e=n[o++]}for(;o<r;o++)

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 24604
Category:	dropped
Size (bytes):	6836
Entropy (8bit):	7.96933213272448
Encrypted:	false
SSDEEP:	192:NbRvKxAa4C5Xh6gn3hTuK63+fKWbw83+0dL:tREyC5Xfn3hCea8TL
MD5:	CE18DE2DA20FB114D3E06280ED171D65
SHA1:	3040C5B24E9FA153BD89C9A8BCDCBCE52E1E77D4
SHA-256:	D0A6DC039FF98D8D004FA92E34B140AD7062444CAF370DBF012CC9DF2C2EBC06
SHA-512:	C113C097317B47ECDC7FE1086CE50A88F7C63E746EA44B6E45E4446AA288045D7C6AFACD0EF2E002503843DFF8A027BFAB9D227CD625D07E6E186AD0A992CC3D
Malicious:	false
Reputation:	low
Preview:	...........\ms.G...(.q;#K.....c..Q,..Y`..Z..iImf...=....o..=...L..S...o...U...\|Zw]U..n\|.^N..^...x...n....j......^uE.3.9-.m....p.......k.yt.@Q....\|Y`._T.Y}1....r.=.>.{...&\|]-...p?.]9..&....k%.......Fn....w.y\|.{.....d..p.c7".W4.2>9XU....uX.j^\..q.../.L...Y.....1._....Wo.>y..5..,5.OH...N.^...i]..N..r.{^...{H)A.6nz^N.../Vu......^..Y..J.-...r.a..iY....n&..f..W.i........O..1...5.(....{.<.W/....y.,.O=.....+...n;X.xk...,.nz>...mB..}t..r..?.........v..%....vQ..'...d[..u.%...:u..rU..Myr...d~..>\|.F5....F...O.%lu.U.=.h...~...[....L.$.q.;.......4Mq9.O.~.s...w.......O~.........'.....:.P<.V.b....}.<OK..6.48R....'...M.4...~./"^.&R...Bu....w.A..K..X.....m...Xf...E:7}.......8+.P....f.N<W..q....g.<.7brG...],....v..w...[.3.9.U....U..Y..}Y_.m.....c.O<]....4.+.5N..^...}.LuZ7n.Za#~.{..fl`.[..s.....~.=.W+.X..)..z...v'..r.8.~}^.....,J0..=Yve..xi..wf......T2^"V..)>.z>.D..(........8V...T..a..D.Y.w.1..........1Ol.0..V.P...w..}..U.7..

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 11875
Category:	downloaded
Size (bytes):	3799
Entropy (8bit):	7.940223929892783
Encrypted:	false
SSDEEP:	96:woB7VvWoBNgZtNjk6HWF8QGAbTt2I1pJRBOm:z7ZWoi7yF8Q5Xt2I1pJvOm
MD5:	8D0BCC5D9518D694284A9E4CE9477366
SHA1:	212FBD6AEB68D419A4A5E6FD4BE663C589F1BBBC
SHA-256:	76500F0BBFFC2C64A5068159060EA8CC1E00B45BFDBBD4B48AF0FB6AED8D3128
SHA-512:	0EEC293A5675BC9E721BA149780F4C52DA129EAE915EA0068953C3E57C60D5616D8175CEACD7E6F7C83438055464ECB4D6A67F5F6AF9BFB8A8185BBC8837F909
Malicious:	false
Reputation:	low
URL:	http://telegram.org/js/telegram-web.js?14
Preview:	...........Z.s.F......ej..".p?....t.:M......x.{....'...4..}>...l.B.f@.}....'..u5.J....7I..-..1.&.N...+.I.n.TI.,..2_...V...5.Y.z..>M..O....X....UW.)L.T."?.Rt.`F...#....>7..i.t..\|...B..o.U..D..e~.XG...G..5.$....".w+.?.!..&.@..K...l.....W`.O..q.l.VW]. x&.{.7...1..@.8.t<...Ui.\|....j.ll..?Lq..O `..id.O.h_...a.....Q.E..{..K.....q2.g.K......q.5k....TC.].....%$..:^.O.7:...n$01..&..f4.V.t..O..]b .w&x.s%..6.d.,!.!....cv.Q9...,.f....d`.pD......G...Ji".......X..d-.\..qb=...s....YY....YI...)#..:..?.......@/..A...}.$tbhz..kcc....H{#.`.....6O.~....O,.p.T.T.....`c..b..B..,!%...$.."-y6......!^..X'....I(.....O!....K.z.o..S}^.....e.........."..,..Q.D.[....2..@.D.?..2..KK..Fg...?H...5l.D.s.1:=.K.s.T[.....}7l....v...ZV....)6..L..(A.0[...Z..dt..(Jk.....s....;....#.w..gB.4....N.g.):..B$.]..8..in..7......z....lYT/.O..9.)j.-.P.{Ra3T........uwS..k.H..{^\!.h1.f.../K....+z.C..\|v..plt......g.G....E.*...Vued.5..4.....T...E9Oq...\|...B...Y...%.C.......

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 444x800, components 3
Category:	downloaded
Size (bytes):	175961
Entropy (8bit):	7.963905179486677
Encrypted:	false
SSDEEP:	3072:zM7f+5Cc41Z4Ga/qHlzukbpTeYvlb3l4DPc+76ZkZJruZ/OvFw9aUU2:oK53sNAapukbA03l4T5Q/asaP2
MD5:	567E1776A7A448199FDE9ECC8D228110
SHA1:	317376CD1A00552FC83F97FC1B7446DAFF03440C
SHA-256:	C693721C4113B2BEC5EFA50E9C94AC74639363A2E1B603F83BB42980DF7043B0
SHA-512:	95C19BF0617A836C11CD8FB0C43169F44E1A992D0D362C20BAACECCC01808DDD7071DCCD1C11049C649C8E66560A372F6DB11A8621BD367CAA152F9F53F1378D
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/mXNwO8DVSXSRafJGfW3LoeUmuU7fidfGqSIAOB8lQIWxs_fxBvKHG0GSvd55EDulEM7uLm8GNgtQG3Wlwc8F2i-Z3d1LlZ4ymAUsAMGc6EYEL8dhxVM3aWiifE5vTAupsOw_VDcNkrzbe3dlIJ2Q7OPwK8nO0ht-SBE_F9i58duZcVAzbCmXRvBqz2-PN6RZaEIy3iFnnzTILo40fVObac7AyFeYjc1G1Hv6LtBLAFiUrGDE-geNNOWqpCIVaGwrQTf2Nbrn5eRUTk8C_k6r88VkZjxHOEAKXEBdkkF2XtsElsfAfvOemPQ7gBDKXPx72NEce3eyKrUOcjvnlQORkg.jpg
Preview:	......JFIF.....`.`......ICC_PROFILE............@..mntrRGB XYZ ............acsp.......................................-Qt..................................................rXYZ........gXYZ........bXYZ........wtpt...,....cprt...@....rTRC...L... gTRC...L... bTRC...L... desc...l..._XYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ .......O........text....N/A.para..........ff......Y.......[desc........sRGB..................................................................................C....................................................................C....................................................................... ....".........................................I.........................!.1.."AQ.a.2q.#B....R.3b...$r....%4C.S5Dcs.....................................<......................!.1..AQ."aq......2......#B.3R.$r.b..............?....F...R.#z.d.[.3.2.....z)[....i....W.C.Q...a..(.y=.R.....m..MvF..UH.gBNpG.Lq.\|..Q...m.C..........v.F..ps..[.........6.K.....

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	842
Entropy (8bit):	7.6603315156717
Encrypted:	false
SSDEEP:	12:6v/7fkTcSeG0JnQtTUpe/5vL4ZwyULhZjkd1iSET0JRRQzWWyV/VlGJfIG7/:UkTTKEADfmhZjYUZzW1V94PT
MD5:	06684F2D2281A6F921E7BD18F8AE8212
SHA1:	D889F4C89B65554BB40E59865AA72E41616D0ECA
SHA-256:	34200EB84EDF8F51BFE49702B84A580D4EEA38E4CCDEBCE7CEA2DEC555B1EDA0
SHA-512:	9A52D03DFF316BB3537022574DC0978D728C37DBBDF0CDF0BF94EB9356AA44C4D1D6BC98588A16092DE4564F8D6B2F4E630741A99A5E9770B24119CDB34F185E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...(...(........m....IDATx.b.#...`.....0C...fQ.>.........m...m.Z{.m.fc...S.g.nR..u..\ .VG...&.tP......1.4......7..w..g..n.s..p...{e=8.o...1.o.P..O.$..,.3..7z...&J.7.........`,...Q.y.7.C.o..J.7....u/.g\|...J.)0..8.o......EJ......I.....0..V.7z...?.]..mJS...k.30.=....].C/w6..../..H.;...p.y..{..w..nW.......Y......).Ww)\}o.1.&`.....vE....2.Y...\.a......Z.}...^.-q..f0......ps.d...g....0..........b&...e0...*\..\....N...i.......lv..........A....&..M8Xc.....b&....v..C.9!r......i.}e.w..?{G.f....n..Y.%..H....5.V......"..)]9..."[..8..F..u..3.....%.9vB.+d..])@.g.,fj.@{...B.(d....@...`.-.)\. #.2Y!s..D..VtM...3lI.....C.I...E...vM..-.)..!..2K...(..=..p.M......Z.'@a...^.i..}.h.LU....[...Qo.8.B&+H..9M.;......2B!..(C.,...%...).. ..2A.R...-.)..!.V....7Z@.<.w.H.@......w...V..........]..........IEND.B`.

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7200), with no line terminators
Category:	downloaded
Size (bytes):	7200
Entropy (8bit):	5.186277289889665
Encrypted:	false
SSDEEP:	192:E+G+i+n+j+C+xA+EMUS+Q+pJ+u+s+B+t4+5+O+YA1Hk+2+xAVE+t+1C+V+E+G+1a:E+G+i+n+j+C+xA+EMUS+Q+pJ+u+s+B+G
MD5:	919ED097B74C579E04CF15CB7FC184B7
SHA1:	59EEFEF8879D9C4B526B2CE1663DB4EC6EFD7815
SHA-256:	54E25EC7B99752617A86B2685A3F3FB360EB90EA6D567A5B6DA85305FAF89480
SHA-512:	761CEFBC197870618869A434EC1F31BC3FA9F610C7D34AF2D9725B36C8DC92746AF6AE050E1BE726240B54AD3001C5ACD1B04B8FA1C44F97988CB7A2102A1FC3
Malicious:	false
Reputation:	low
URL:	https://cs.alfasense.com/pixeljs
Preview:	(function(d){ var b=d.body; if(b){var i=d.createElement('img');i.src='https://acint.net/cmatch/?dp=14&pi=1647232&skip_it=5322f90c-68ee-4d33-bc6f-6140cef1f878';i.width=1;i.height=1;var s=i.style;s.left='-9999px';s.top='-9999px';s.position='absolute';i.alt='';b.appendChild(i);var i=d.createElement('img');i.src='https://ssp.bidvol.com/usersync?dspcsid=135&redirect=1&id=5322f90c-68ee-4d33-bc6f-6140cef1f878';i.width=1;i.height=1;var s=i.style;s.left='-9999px';s.top='-9999px';s.position='absolute';i.alt='';b.appendChild(i);var i=d.createElement('img');i.src='https://a.videohead.tech/sync?ssp=42&uid=5322f90c-68ee-4d33-bc6f-6140cef1f878';i.width=1;i.height=1;var s=i.style;s.left='-9999px';s.top='-9999px';s.position='absolute';i.alt='';b.appendChild(i);var i=d.createElement('img');i.src='https://acint.net/cmatch/?dp=14&pi=1647232&skip_it=5322f90c-68ee-4d33-bc6f-6140cef1f878';i.width=1;i.height=1;var s=i.style;s.left='-9999px';s.top='-9999px';s.position='absolute';i.alt='';b.appendChild(i);var i

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	dropped
Size (bytes):	106189
Entropy (8bit):	7.9536472743274755
Encrypted:	false
SSDEEP:	3072:htMqi9SJRs+GvBND8IuMX2ereadxtXwAAHwDsN:W9gGvzQJMX2CxtXwpwDe
MD5:	4679C42B1BF6E942FB3EFF2356E0C36D
SHA1:	FD95E62A2DF3B8262A2A3E8E88B5276AC5E8D01D
SHA-256:	D7D23DC267C275114A1358B12FD8D07C52E62330CBA47CFEDD250B6B9F40A76A
SHA-512:	9262ADA43C4661BB531FC687A220B796DB5C6F3C8A5BE165196034966EA67CCCEED36E3022DB8F688A74418552DF5B144D13E77B99A645A7CCC530A9218FEC82
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	dropped
Size (bytes):	195183
Entropy (8bit):	7.965602222254113
Encrypted:	false
SSDEEP:	3072:htveBwkjEBO7Ky9IfKCkqmTnCjZc5svOOEffl7knN+xaRyX2Vt0:lUmZy+P5cnULvO1k+xaw2g
MD5:	8089D4608FE6E23C094499ABD369063E
SHA1:	AD6941B528E2A43BECA3EE538C2081563FBDE866
SHA-256:	F97482FB0619957F485B36371A87AAF2134D5C655CC3B74FC565A857FC4FAA44
SHA-512:	D0A6E2503DB00AF9339FC604277C918B0D56457F4206D76386A4310F1B8CC55347CAF31FF2D7A082E72D63498A0AF3BA7D93E4814E3573BF6F81E6F23179583C
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3535)
Category:	dropped
Size (bytes):	3536
Entropy (8bit):	5.144683478018665
Encrypted:	false
SSDEEP:	48:s/ALS3HDsqOiat5QJE1OwADKXKiKrth2hwimHA21kjQWk00GpshbMVAkYawfTU6b:sYgjst5aE+h2ZmdmUnGRZYbfTB347Bq
MD5:	B5D1ED0C33ECCE6CF91F759FC3CF6D68
SHA1:	2EF3F4AD7E9D800ECD0D4C16EA5C7A1647824AEA
SHA-256:	FD44C81E8612365E2C140CC1C544F783196829B486F52DE2E3013AC3FECCA570
SHA-512:	8D1D3F3FC95A1398AF44FD8F98418ACC7803E73C83CBC38582B2A108A5224634F212101E78D9C0C328C399D5A22E505824F508EEB13C321EFD12CDC2FFF31CB1
Malicious:	false
Reputation:	low
Preview:	function WeboCtx(){function p(o,t,e){return null!=o&&o.hasOwnProperty(t)?o[t]:e}function f(o,t){return(t=Array.prototype.slice.call(t)).unshift(o),t}function a(o,t,e){(xhr=new XMLHttpRequest).open("GET",o,!0),xhr.onreadystatechange=function(){this.readyState==xhr.DONE&&e("url collect api done with status",this.status)},xhr.ontimeout=function(){e("timeout url collect api: ",t)},xhr.onerror=function(){e("error url collect api: ",t)},xhr.send(null)}this.loaded=!0,this.version="20230320",this.push=function(){for(var o=0;o<arguments.length;o++)try{"function"==typeof arguments[o]&&arguments[o].bind(this)()}catch(o){console.log("[weboCtx/push] exception",o)}},this.collectVideoURL=function(o){var t,e,n,c,i,l;o?(t=p(o,"debug",!1),e=function(){t&&console.log.apply(console,f("[weboCtx/collectVideoURL]",arguments))},o.clientID?(n="https://dx.frontend.weborama.com/videos",l=encodeURIComponent(o.clientID),c=encodeURIComponent(o.videoID),i=p(o,"targetURL",document.URL),l=n+"?ctx=1&client_id="+l+"&vid

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 721
Category:	dropped
Size (bytes):	337
Entropy (8bit):	7.371943803579972
Encrypted:	false
SSDEEP:	6:Xt9T88vDESPQGM9yEwJFMnq4ff9ZjM1Y9v0mns1VUqGFOhOW9H88aGE1iwH5RlnV:XTT3DEAMgFmq439qa0mnCUchOEHtAi0V
MD5:	7E1B04453570B65E9B8E33A785FCE5EF
SHA1:	7C96ED4DD855F2A4BF7D08EC60F0821CDCFCF609
SHA-256:	C471FAADD89ED31D3F8DD33FC19311A9827DD5C6FADCE78CB58C29D1F471A684
SHA-512:	81D6BC1625B9F94D216D618ECC90C13FEB888BC184491A4EEA93C61E2E563A4AB0B4D7B1077F68390B03B66A5D87AFFCB62CC6D5DE129797E22F41A53E243A10
Malicious:	false
Reputation:	low
Preview:	...........R.J.0..?.;........:.~..>..H.F.44.l}wsu*.....;>...w.3...}....B..N..t......#a...........3:u..+.'.-a..By..g...`.fl....O..].8...j.P..,.-..U..^W..v.K.E%...<]......J#<C.}M[.V.....'......IH.....t\|......1L....AFaf..t.Z;G^.rH..._F`.!..G!T..iY.o..&...:..C.K...G.0F.7c.2..u2../..\|H...g.B..#.q..?\..\|wq .......BY......

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 970x90, components 3
Category:	downloaded
Size (bytes):	7670
Entropy (8bit):	7.2733595074051225
Encrypted:	false
SSDEEP:	192:3WHUPd+R6XFYDRu0TFRDkl/Ydl/ohiY09M0z:+UPdLf0xpmgTghibtz
MD5:	93E6032137695635299EA12513020A22
SHA1:	E43E9222C40653B13CDB132307004CB6305A28CA
SHA-256:	C6CE19626B346128489E909BC7104E3BB42A2B6F3F8FA84C7F1D727301ACEB33
SHA-512:	AFCE2E17FCD5D7B5FE30FEDD8B71C94475DBCB645727797436630C2C675CF3F9167ED515723881908F2B20B666741F33180E13F9785B1EA298D28BBC5A83A65F
Malicious:	false
Reputation:	low
URL:	http://ads.alfasense.net/adserver/www/images/93e6032137695635299ea12513020a22.jpg
Preview:	......JFIF.............(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................Z....".........................................5....................................WX..$5...!1IQ....................................5...............................!".#13A..$%BWXq.................?..@.................................................................................

Chrome Cache Entry: 309

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	2.7374910194847146
Encrypted:	false
SSDEEP:	3:CU9yltxlHh/:m/
MD5:	DF3E567D6F16D040326C7A0EA29A4F41
SHA1:	EA7DF583983133B62712B5E73BFFBCD45CC53736
SHA-256:	548F2D6F4D0D820C6C5FFBEFFCBD7F0E73193E2932EEFE542ACCC84762DEEC87
SHA-512:	B2CA25A3311DC42942E046EB1A27038B71D689925B7D6B3EBB4D7CD2C7B9A0C7DE3D10175790AC060DC3F8ACF3C1708C336626BE06879097F4D0ECAA7F567041
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 310

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 640x427, components 3
Category:	downloaded
Size (bytes):	46811
Entropy (8bit):	7.978452484491139
Encrypted:	false
SSDEEP:	768:MUoHcpCSl8DMZksnR1+iiFBvTmVegBsKa5a6xZFCwCDzM2WeQXprO8NCLLJCkaRQ:vuFSl8wZksnr+iiFIYgynxZFwDINeQXo
MD5:	F038581F63719379854EB0BA1FB38AD5
SHA1:	E60DB6A6E33A981F883F336A2D4410B0FD114D4E
SHA-256:	33E7A7096F6741DFFAF521B4F67A983CB381338AC4BA9E254B3928F1CA9B86C1
SHA-512:	2C74D9119FF300EBF199BC50D9EFFBFB52D421483FFF4BAF5546FC47B8E6075B9BCC2D7B9B722324717D06AFA2CFEAED50EDB5BCD31FF347267328D680E8637C
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/uPQ5ind25iS73kme6wYzUIw_tJvT7exWmnuWZYHK1cp_1YCh0rRaPOrArn3HBpQ1pWFcVrbWmFnV4J3My4Fk-2aXdWP5T20Q8zVMUDDALJUelJBFFCfTc1syEChrXoLCqk8YxngD5JNjYRTvD9tcmIhIAlOJ_xBnEU_OLhUaz86mnvJws3L602OOtsJENHuXjjI46SQWNter7T4FgELHcCGaPiXzMFkZJDqRx4xBMSkDmLJn19G39GH_gQFci9BN6OwP5jazsqGnFdRrIXTrwmYFU-DbhCGS-ruojPASHQyw5CUrV8lJ-wv6xo5lfHaZCwo6XG5R8ih8Heb_xNU_bA.jpg
Preview:	......JFIF.....H.H.....C....................................................................C............................................................................"................................................................................<.x.. ....cx...z....Z.V......g.I.Dkl.Z..'..C{a....$.F.p<.r.+K....b..6r."..j].....%9......%8.....C.D...{.d.....:...0.z..6.(.Pg.+y..R.{V.;.'.....k^.#~.......mr... -.@.q.\.+F..0.....^/c...a..!Xd;{.........@..\j....\3m..p}NXO.m....{..nYU.............a./......\w.i.}IG/...#....U.cy.Po`...8.]w..._L..9.f3......s.......t.'.@&...!.d.ljL.D..cd..&j.............r......~..7%]1.H..ag....Wr.9........o..6.A.......Gjs.h.BV........_...(..y...m._.\|..Kz&........ck.WS..A.h...j..}:R.J".oT.q.ZV...X.....%..A..m...p5.;4.......%'=T..i3E.....\....[p..Q ..5rt8.....@....Y.;:.>._...39Q=?2..W...w_<.d:S.vu....G.e....1N.nyi.anC.:....T8.Zw.-g..m.^(gQ.y....h....#(E.0.Z...[x[1Q...p...w....e.RI D.Ff.i...*.....0.S....O.....~...c!.\.....

Chrome Cache Entry: 311

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 582x584, components 3
Category:	dropped
Size (bytes):	49227
Entropy (8bit):	7.971128486963796
Encrypted:	false
SSDEEP:	1536:dXHVQV/ZnXgPGHth4VnaEWPQDwnp+OVjywKf7aUbJ:VmZzD4RDcp+O4wKfN
MD5:	953E7D49FEE9190E5F82D543AECE65ED
SHA1:	D9154D34874FF78FF1058BE7C7745A7BD616FD2B
SHA-256:	575DF2B75594D8060467727EFFB25B9A6E8387C23C2CBBCF539F3B4DFDE1003A
SHA-512:	24EC900551B73774ED2B39009C1716D53D66CC5A32AB78F2DBD40A1A2B11C1D9096E07BEFCCD7E6F78C4047FE9963614EBDD4CAE77B513508D273DA0430861A7
Malicious:	false
Reputation:	low
Preview:	......JFIF..............ICC_PROFILE............@..mntrRGB XYZ ............acsp.......................................-Qt..................................................rXYZ........gXYZ........bXYZ........wtpt...,....cprt...@....rTRC...L... gTRC...L... bTRC...L... desc...l..._XYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ .......O........text....N/A.para..........ff......Y.......[desc........sRGB..................................................................................C....................................................................C.......................................................................H.F..".................................................................................s....W(&.h.^...tIh....V..c..eg..6...h.ZR..h.4a8niQ..G mE.>=..8....p+\..L&...H.Yn(.2.9Bq.H..0..8<.P...R.&.....Dx)G.u.C$R.t.x...u...e.o.."..`.4... .h..:?..j....s..Ox^....9.w4.=.....4i.....s..#...9.jH.k...z..d<B...."JG@..@"..+.D..B.pY..<...]U.(s4pu.[^..4n..j0F....

Chrome Cache Entry: 312

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 11875
Category:	dropped
Size (bytes):	3799
Entropy (8bit):	7.940223929892783
Encrypted:	false
SSDEEP:	96:woB7VvWoBNgZtNjk6HWF8QGAbTt2I1pJRBOm:z7ZWoi7yF8Q5Xt2I1pJvOm
MD5:	8D0BCC5D9518D694284A9E4CE9477366
SHA1:	212FBD6AEB68D419A4A5E6FD4BE663C589F1BBBC
SHA-256:	76500F0BBFFC2C64A5068159060EA8CC1E00B45BFDBBD4B48AF0FB6AED8D3128
SHA-512:	0EEC293A5675BC9E721BA149780F4C52DA129EAE915EA0068953C3E57C60D5616D8175CEACD7E6F7C83438055464ECB4D6A67F5F6AF9BFB8A8185BBC8837F909
Malicious:	false
Reputation:	low
Preview:	...........Z.s.F......ej..".p?....t.:M......x.{....'...4..}>...l.B.f@.}....'..u5.J....7I..-..1.&.N...+.I.n.TI.,..2_...V...5.Y.z..>M..O....X....UW.)L.T."?.Rt.`F...#....>7..i.t..\|...B..o.U..D..e~.XG...G..5.$....".w+.?.!..&.@..K...l.....W`.O..q.l.VW]. x&.{.7...1..@.8.t<...Ui.\|....j.ll..?Lq..O `..id.O.h_...a.....Q.E..{..K.....q2.g.K......q.5k....TC.].....%$..:^.O.7:...n$01..&..f4.V.t..O..]b .w&x.s%..6.d.,!.!....cv.Q9...,.f....d`.pD......G...Ji".......X..d-.\..qb=...s....YY....YI...)#..:..?.......@/..A...}.$tbhz..kcc....H{#.`.....6O.~....O,.p.T.T.....`c..b..B..,!%...$.."-y6......!^..X'....I(.....O!....K.z.o..S}^.....e.........."..,..Q.D.[....2..@.D.?..2..KK..Fg...?H...5l.D.s.1:=.K.s.T[.....}7l....v...ZV....)6..L..(A.0[...Z..dt..(Jk.....s....;....#.w..gB.4....N.g.):..B$.]..8..in..7......z....lYT/.O..9.)j.-.P.{Ra3T........uwS..k.H..{^\!.h1.f.../K....+z.C..\|v..plt......g.G....E.*...Vued.5..4.....T...E9Oq...\|...B...Y...%.C.......

Chrome Cache Entry: 313

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x420, components 3
Category:	dropped
Size (bytes):	77753
Entropy (8bit):	7.9555350437307935
Encrypted:	false
SSDEEP:	1536:htHdz0D9Ya7XkZQQ7Aj+fsPGVLPEQV9rqsqFnmERum2DQHoH:htHdzYKy0ZsbWLPTt6bRu3MIH
MD5:	4CFCAEE5AD32094861376CD1C50E6334
SHA1:	91FB1CF1CB8104D034D6670E07131C385F5A0A98
SHA-256:	555896C75F09A49381D53FA55F31436737B8346AE9B382A9B27FB22575E57F82
SHA-512:	517C8F7A84C7A7AC7F753C774B4B12ABA12128CD710502444225DD9943F76C3C4A4CBB17DF570A02F6B606D311803C506092F41677706F72ED25ACAF58280C1A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 314

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (7200), with no line terminators
Category:	dropped
Size (bytes):	7200
Entropy (8bit):	5.186277289889665
Encrypted:	false
SSDEEP:	192:GJ+u+j+C+xA+EMUS+Q+s+B+t4+k+2+5+O+YA1Ht+xAVE+E+1C+V+i+G+1+G+i+nz:GJ+u+j+C+xA+EMUS+Q+s+B+G+k+2+5+x
MD5:	96FD0B9EAE22FE861C56BC5F28D1319B
SHA1:	45E17BC73471584504C106DEFDFD7E6CE4C5379F
SHA-256:	3C045945D513C5FFA639D7BA926C43C57E972DCEF795662673C64894E754C480
SHA-512:	673BBDE3BC6AB86568CB4D3D1B3434892F3BC5E7A367EEF2343EB7F91B512BC0BC4CC6125D1AC2938F9E3D1BF5225FA10C4F2C4127D9EEE57B4F1108140982A8
Malicious:	false
Reputation:	low
Preview:	(function(d){ var b=d.body; if(b){var i=d.createElement('img');i.src='https://ssp.al-adtech.com/api/sync/alfadart?skipme=5322f90c-68ee-4d33-bc6f-6140cef1f878';i.width=1;i.height=1;var s=i.style;s.left='-9999px';s.top='-9999px';s.position='absolute';i.alt='';b.appendChild(i);var i=d.createElement('img');i.src='https://sync.adspend.space/alfasense?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878';i.width=1;i.height=1;var s=i.style;s.left='-9999px';s.top='-9999px';s.position='absolute';i.alt='';b.appendChild(i);var i=d.createElement('img');i.src=' https://s.suprion.ru/p?source=alfasense&id=5322f90c-68ee-4d33-bc6f-6140cef1f878';i.width=1;i.height=1;var s=i.style;s.left='-9999px';s.top='-9999px';s.position='absolute';i.alt='';b.appendChild(i);var i=d.createElement('img');i.src='https://sync.bumlam.com/?src=asense&uid=5322f90c-68ee-4d33-bc6f-6140cef1f878';i.width=1;i.height=1;var s=i.style;s.left='-9999px';s.top='-9999px';s.position='absolute';i.alt='';b.appendChild(i);var i=d.createElement('img');i

Chrome Cache Entry: 315

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	4.980767694952946
Encrypted:	false
SSDEEP:	96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR
MD5:	5791D664309E275F4569D2F993C44782
SHA1:	A68F363153614A09F10AE2892C134B9C4B001D4B
SHA-256:	4FF54BC38C267DC3A8C95F6ED4590336BAAEC70433EF15D027DDCA608C391E78
SHA-512:	93502A68F14FD4F87E0AA2CAD92A5657A8587E6ACB1C108CCD8CEB5E52776E77DF867962C51E1290316BB78027DA636F38C065294871B4400FBBC4DEDF622EE1
Malicious:	false
Reputation:	low
URL:	http://telegram.org/img/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................".."6."o."..".."..".."..".."..".."..".."o."6.#......................................................................................................................#..#(."s."..".."..".."..".."..".."..".."..".."..".."..".."s.#(.#..................................................................................................#..#-.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#-.#......................................................................................#..#}.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#}.#..............................................................................#:.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..

Chrome Cache Entry: 316

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3656
Entropy (8bit):	7.945724834172328
Encrypted:	false
SSDEEP:	48:GyZVsZS//xAL0LQZ7Lax9crt2OpKVjqnh0yXO2BxZBwobnE3vVcmwdCitjmy3S:G5yJcCx1yXfZi33vV+FS
MD5:	E07E0D94542EC9EF9B505B75133DA2E2
SHA1:	4E5585C24A125ABC2414A838C8F77885BCA43323
SHA-256:	B18DAA088CF163C33ADA0F212F9E85899DBD5A04D504D4A2829C2306CA3DD243
SHA-512:	7DCCB6795A35AE81DF8F54D78DB15227DF4F41FC352DD6AFE5807878853D48C93923AF0D97268E05B0FF0446D1B1D338297BEB34692D8AE2DF40745120314D32
Malicious:	false
Reputation:	low
URL:	http://telegram.org/img/emoji/40/F09F8CB8.png
Preview:	.PNG........IHDR...(...(........m....IDATx^..i..U.......^...t.....,..........X(85...LM.bb.(ZX...S....)..7....FBH.,d.t:.....].`...L.....u..w..,.s.sl........';..._}.....Y.^;r..w.;f^-.....g...?....xf.==..W..?..Z4.T....~..gu.kd..>.... .S.N~k..o....._....}.;>...#..r...4.T.<.B.t..6.....]....m7s..r.v...n.M._.m@..K..X@...H.......6....l...k...w..F........t.t..Q.A.~.A.j...G B.c...z7gh:g`...I.^.....P.....@... t.C.c.\|.\.,s..-.[?....?......C.g/.35b.1....0T0. .9g..2.....A...l.._.a.[O?{...r..W..l........+>.r....P.}4U><...."!m.t.4@...@....SS.[..<4...\|z.._<8{..?........#..d..c....^s.Y}..%m......B.E..hm..O}.M.x.u.5....s.~..(TQ..t....m..6..Sb....R.]K.\.Yk.Y...`....VO.[.M.._}.=.y......Yz.u.1.6.v...m.7......a.Ku..L.l.....~..9....x..X..Z.J.1=.u"...\|."R.dS.t@3d.#PT:am...}....{g..l.......@&..,..2...B..A=..A.e.\h..bX~.E8.....\.5.0.U._h..U...@w..68:.....<.[.\.v.E.......nL.b.......A'.]'...O.A.D.BD.#s....pJ...3....V..+.a...n.$en.C.#w..rS.4. .iUJ.y.....U.@.@..5...

Chrome Cache Entry: 317

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (29844)
Category:	dropped
Size (bytes):	29886
Entropy (8bit):	5.567760925455524
Encrypted:	false
SSDEEP:	768:DkllCaGOpFZDSnhldzngSPntDNqa/J8OYL3:0pGvqV
MD5:	59E2C5670B6452A790B613190896347D
SHA1:	896BC135E1C46C8B05772C3FE90BC426596C26F9
SHA-256:	1C60A5B3B875578CF4D67CF92B40DA30650383C72691D1502F57D57CEA3E4171
SHA-512:	2389AD2A057112E4EFF4AD878784713B92A2B2F08001B8B34EDFA2FF6BB80D1C50955E57A22FA0BA9581DD0E882C9A730EF015B86A6A93A09671888E9FB6E88F
Malicious:	false
Reputation:	low
Preview:	/! v:1117086 b:default c:errorCounter /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let n=this;return function(...r){return n.apply(e,[...t,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)t=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");t=n[o++]}for(;o<r;o++)o

Chrome Cache Entry: 318

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	downloaded
Size (bytes):	212621
Entropy (8bit):	7.983194418274764
Encrypted:	false
SSDEEP:	3072:JgfImJ0S/rMjwQanatFI3KF+Uv132t7NFCOJbeiTEwoJy69xLD9wAXujr35+icpF:JEJlI0tacKPv132t7X6iTEwoJe3kpLEM
MD5:	506A34482837CA463FF8D1525D3D80BB
SHA1:	4AC0D1C5AE41778C771B7DEB314FD79678CFDD69
SHA-256:	00C1BF4444E3265D257101A6D41E5EF6DA800B3B44E9F929882340DE5C2CF2D0
SHA-512:	E627416A47B0CB6726DE7311297D9E446204E6BA9B4602DE0E785798D4727B153D203B4E8E8774B4EECB490ED7E91C20876CBC7CB325E101E320F75547ED8F81
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/cgF49kKyIze3mCwToG0WWiz2_xQnBNuWR_rlBEEue-BbbFKp-D16ZJxo1gXjON9HRn26_5OxvuQ0WFHhgFELWpAcxOvTxjA1zbE0-2qIM4vxV7olCGiWbKtJ-RUiihXZS4WaX5t6YPs0IXwAkKLIQmwcg6JS9eLoznoFv1yiJD-T55rZblWRR7qJjs7l6ao5Ed-Mxx2FKa2UkrV0NmIno4sICuU56SIoF7acrMzRXeHiDhMUbYcalAGL80oBQDK_3kxaSwVb103nBTxKDGitTID0G1Qdu4-ny0bZooQZhTZroc1RNXyBBQ_G7l6RhN7iTi03qQqIooeMOPvON8UAMw.jpg
Preview:	......JFIF.....H.H.....C....................................................................C....................................................................... . ..".........................................[..........................!1A.."Q.aq.#2....B.3R....$br....%4C...Scst...5..&6UV.....DT....................................A........................!1A.Qa."q.......2.#BR..3r.$45Sb..C...............?..HV...t...\|.(..Dy..=..O..dt.WT.......sn...T..E..'....I..b(Y![..c.8.,L.B.-<1. \.-.)..S.?.o\|9......H......b.skE.....~....Q;S.n.n...+Y......-...7.M..m.G..$......:T.JB..].......&.z(....4.KW&..a..c1.ZVj........%........\+.1......_j_..=...2....2..`C...t.....r9....2Oo.<OS..... "F.1..3.;q..2F.%`U..C.5.....p.p...$..i..^....Zl.i).z...=+.....O....SP.j\.......(Q...; R...1.....I._..Q..P.!......d..Gg.e2G.U....u....i(...U...E....h.,H..Ls.rJ..........1.-.ao...8[9ot..}y)9.W.QGP....t.....43m.-:....>.{..9..F.3"..2..xgEK..........[........$. .f=.......";...<.....N..shb..

Chrome Cache Entry: 319

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 444x800, components 3
Category:	downloaded
Size (bytes):	66278
Entropy (8bit):	7.970478200451531
Encrypted:	false
SSDEEP:	1536:H1K1zzdjNYSkBA+/loJuQwVeNuOT6BuCf2ipRr2K72xu9UpYupol:k1zwBhqEQwGuOG1uTnbu
MD5:	9A58E1D5DEA0FA95E2CD7575760F49EA
SHA1:	62E2AD62F2052811921E176F4713D5DCD07AC9FA
SHA-256:	0EC09C6F26A936FD6A5AACFD6BA2931BDEC15639B048A24A96675F94A41DC974
SHA-512:	D75B25C385DCA2EF971A1BDBA7C3613826A4B487DC18457326FB4BC1A7D1E5385BE403B542B9E4E6A165DDEEE353CB30BAAC7A4F6FE06BC013315614E370F55E
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/J5IrM8TywMmqx4ZfsUIWmzOHXcIjMdle0j0Zye8AO8h7bW7lhRtHf3rwMLDqu1isIJ0dw4EPOjBNlHAyHkNkqgqqjh8bR4nUqiAq6P_Ej9AZoBXBJeew5Cc4vlPcPkF_wYV80A7hegzAshbhSvXqCnDH5V6aOOf7JlRhjqTNYlbVwc86WiQGXK-PYmGGLWbETscY3DjcM5yPhiNFExJeNB4Vmje0RXBoV0ZTy6_9TRw07Sxw2e1uNLWxPedOdw1hodtMeSZKBpnDOCWgw8at3icavvKT6l06C2LJfPQsvc5AA8D84CylCQg4KJNRiSPyY75fex2yWcr7nk-SqIErpQ.jpg
Preview:	......JFIF.....`.`......ICC_PROFILE............@..mntrRGB XYZ ............acsp.......................................-Qt..................................................rXYZ........gXYZ........bXYZ........wtpt...,....cprt...@....rTRC...L... gTRC...L... bTRC...L... desc...l..._XYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ .......O........text....N/A.para..........ff......Y.......[desc........sRGB..................................................................................C....................................................................C....................................................................... ....".........................................F.........................!.1A.Q."aq.2..#B....R.3b....$r.CS...%c4s...................................1......................!..1.."AQ2aq.#....$B...R.............?...t.......l.k..E...!.*.z.....".#...(.oL..F.I.k.[xT...W.2.w..9....5......'..w.z....i..-....._.H.c...L+..cmv.2..Z...u..ZK...._..W\.$H.T.NA.4....i.

Chrome Cache Entry: 320

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65493)
Category:	dropped
Size (bytes):	124891
Entropy (8bit):	5.356707077634889
Encrypted:	false
SSDEEP:	1536:W06yQEoHO07c+j91Wty0vMLZdl21T15jSxGv2juDJc24Ma3Ox:P6ye5ytETl21TXjeZjEc2hbx
MD5:	AE97B143D2893673C378D297CC02D1FE
SHA1:	06B9CB4A79D6F46774772FFCA18568278784A3FC
SHA-256:	93A84D38193949F601290E272C4C2D380C3034CBC9F4D89CFAC7EE019C44B468
SHA-512:	AA30E25BCCA6EE853DC15B39D0E0BD42911346D962EC69A58EEB42A3D02CD93CE92E688554BF40B80958DB66382F199CA8EA52FFFE307841E15768562EEC496A
Malicious:	false
Reputation:	low
Preview:	/! v:1117086 b:default c:adfox_banners /.try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(t,...e){let n=this;return function(...r){return n.apply(t,[...e,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(t){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof t)throw new TypeError(t+" is not a function");var e,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)e=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");e=n[o++]}for(;o<r;o++)

Chrome Cache Entry: 321

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1267)
Category:	downloaded
Size (bytes):	115173
Entropy (8bit):	5.153238490930799
Encrypted:	false
SSDEEP:	1536:xylcfDxYzbJ3iw93BC2LXdm791WoDYzghw4uJuhwNpfewltog69FjxWDpfxV685u:xylc7xYzwwysXkC0YzPvL5u
MD5:	AC847F644CF61A35E802B48B4C8537AC
SHA1:	637F9D85F21897E1B4854EDDA5D6B0D46864825D
SHA-256:	83B8F4380FD44F4F399DB9BE9B3DFFEC7957BD250FD26855EB4975F26DF93946
SHA-512:	B788FF0D8D5C348ED52ECDC8C5ED292CA6D39645D836DFD2803D08F321C64591501F7A74AB7AA1B1D5D870C467F0F1DEB5AB5A491FFC022E4B24A8A4C7B2D812
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/telegram.css?240
Preview:	body {. font: 12px/18px "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, Verdana, sans-serif;. /-webkit-font-smoothing: antialiased;/.}.html.native_fonts body {. font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";.}.html.lang_rtl {. direction: rtl;.}..body,.html.theme_dark body.bg_light {. --text-color: #000;. --second-text-color: #7d7f81;. --accent-btn-color: #2481cc;. --accent-color-hover: #1a8ad5;. --body-bg: #fff;. --box-bg: #fff;. --box-bg-blured: rgba(255, 255, 255, .84);. --tme-logo-color: #363b40;. --accent-link-color: #2481cc;.. --icon-verified: url('data:image/svg+xml,%3Csvg%20fill%3D%22none%22%20height%3D%2226%22%20viewBox%3D%220%200%2026%2026%22%20width%3D%2226%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cpath%20d%3D%22m6%206h12v12h-12z%22%20fill%3D%22%23fff%22%2F%3E%3Cpath%20clip-rule%3D%22evenodd%22%20d%3D%22m14.38%201.51%201.82%

Chrome Cache Entry: 322

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	9
Entropy (8bit):	2.2810361125534233
Encrypted:	false
SSDEEP:	3:YMm:YMm
MD5:	7142DF90FDED5D00DF2C0BA662F9B662
SHA1:	A6847802842E7C15D61B44AAE555380A7E2F891E
SHA-256:	72D427B7264997760074A94DCC1C9E54AE2C33B05276BFB3CFCD0F5D2D8BBA3A
SHA-512:	784EFB907BCA0FF2469B88A609E908845B316D7B3DDCEDA423FFB9C2B18F3C94535E05A6D25763636778B337524203B634D6D820C773C331319B8D26998EA6DD
Malicious:	false
Reputation:	low
Preview:	{"id":""}

Chrome Cache Entry: 323

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65478)
Category:	dropped
Size (bytes):	136929
Entropy (8bit):	5.501798581677309
Encrypted:	false
SSDEEP:	3072:QP1nTJbDhy8c/Sfnd24HvnwcIiMozmXKfmEX324utDjZcGPWnzIxJjQ1nncfIc7l:gGUI+mb4SzJjAnnUoI
MD5:	AA6E49BB7D794C4BE856220D7D3A7524
SHA1:	CFC225DBF75BD36E40A21C6ED54C32E1EA2263D1
SHA-256:	ED3535B1209C7C2D364DE32B874CBC32631C97BF7AEA343FB2E9E6C6742A05D2
SHA-512:	764C41F9904B6587D7110A6569C27048545ECC06B9530D7C34192A15101D25FD81A046A3EA729B4A1DD859C1732AECE2EDB503E00FCEEF3008567FE44FB7510E
Malicious:	false
Reputation:	low
Preview:	/! v:1117086 b:default c:loaders/adfox/header-bidding /.try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prototype.bind:Function.prototype.__pbind=function(e,...t){let n=this;return function(...r){return n.apply(e,[...t,...r])}},cnc(Array.prototype.reduce)?Object.defineProperty&&Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:Array.prototype.reduce}):Object.defineProperty(Array.prototype,"__preduce",{enumerable:!1,iterable:!1,value:function(e){if(null==this)throw new TypeError("Array.prototype.reduce called on null or undefined");if("function"!=typeof e)throw new TypeError(e+" is not a function");var t,n=Object(this),r=n.length>>>0,o=0;if(arguments.length>=2)t=arguments[1];else{for(;o<r&&!(o in n);)o++;if(o>=r)throw new TypeError("Reduce of empty array with no initial value");t=n[o++

Chrome Cache Entry: 324

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 40 x 40, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2903
Entropy (8bit):	7.919365872096062
Encrypted:	false
SSDEEP:	48:X4/SD8YoyiQQGHsOSUWkuIWuqxWeY5dtuFT0bsHU5xyMolsCpvFIac+VTNjH8:X4/hYQGHTUKWWeY53uR05OG69HZVH8
MD5:	924CBB555685F12C693704F88699BC0A
SHA1:	DBD0F33B10B7F4C45904B01C23B504126D68DF86
SHA-256:	9528C7223E0173019B168E75A2FBAB1558B5E133C1D8D115AE94B4467A58863C
SHA-512:	4FDBC63743ABB69E0CE82B44438A75A81E68B8C02B0F3AA4A84C70AB7B98310DDD6383399242EF1CE8ED81BBA30EBE37DCDC3030F952D606135FE60895C492A5
Malicious:	false
Reputation:	low
URL:	http://telegram.org/img/emoji/40/F09F8D92.png
Preview:	.PNG........IHDR...(...(........m....IDATx^...].}........c.1k.c;..o.$..1.1..LS6..N)..%m.Q...R.......II.P.R.......(..,.M.1..xJ...{w;..;..(j.E(T.w.O......;.].u....0\.{By.?.......r..~w...V..@...9N..C.....fD..t.......5....t.y.-..l...x.g.k.,.QJa..yO......P8'......V.C]......{.{x.s.m..}..P6..d.#s.A..5...ZB......;!.qi...hc.D.Vy..~..x.....'.W.h.q3f.X........d.#.'..z...c..!K..4#.A.<..dEN.06..7..G.s/=2...........q..9.'w.}"...'....I....(IZ........c..}.I<Qd.:.o......~4..K.......x....z..y....f. .J..Xk.A.s9I.F.1L#.Q....<.')...^..E...........n.G.....Y..d......Q...>G.Bph.(....U.R.j.....Z[.hmi........M...lo.....-...rk.I.G...W..Zb..?n._...\|...g..uw...5...Y..\|\...B(7.......O.G...9. k..F......2..!}....uZ_.....{..-...3.t...P..Dq.8...Ai.l.R.....<.I...........7.m....E..o,...}......W..y.;..i......MtLs..&C^..4..,.....6.....%..S{f....q....~.....^.5.W.z{..._y../.[....?.}..7~g.%_.....{.\\|.#..Z.....9..../...o^..c...,X.g.\....'/...~{....~.+&....{I..?..;......

Chrome Cache Entry: 325

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, baseline, precision 8, 444x800, components 3
Category:	dropped
Size (bytes):	66278
Entropy (8bit):	7.970478200451531
Encrypted:	false
SSDEEP:	1536:H1K1zzdjNYSkBA+/loJuQwVeNuOT6BuCf2ipRr2K72xu9UpYupol:k1zwBhqEQwGuOG1uTnbu
MD5:	9A58E1D5DEA0FA95E2CD7575760F49EA
SHA1:	62E2AD62F2052811921E176F4713D5DCD07AC9FA
SHA-256:	0EC09C6F26A936FD6A5AACFD6BA2931BDEC15639B048A24A96675F94A41DC974
SHA-512:	D75B25C385DCA2EF971A1BDBA7C3613826A4B487DC18457326FB4BC1A7D1E5385BE403B542B9E4E6A165DDEEE353CB30BAAC7A4F6FE06BC013315614E370F55E
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`......ICC_PROFILE............@..mntrRGB XYZ ............acsp.......................................-Qt..................................................rXYZ........gXYZ........bXYZ........wtpt...,....cprt...@....rTRC...L... gTRC...L... bTRC...L... desc...l..._XYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ .......O........text....N/A.para..........ff......Y.......[desc........sRGB..................................................................................C....................................................................C....................................................................... ....".........................................F.........................!.1A.Q."aq.2..#B....R.3b....$r.CS...%c4s...................................1......................!..1.."AQ2aq.#....$B...R.............?...t.......l.k..E...!.*.z.....".#...(.oL..F.I.k.[xT...W.2.w..9....5......'..w.z....i..-....._.H.c...L+..cmv.2..Z...u..ZK...._..W\.$H.T.NA.4....i.

Chrome Cache Entry: 326

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (423)
Category:	dropped
Size (bytes):	20469
Entropy (8bit):	4.794354724706397
Encrypted:	false
SSDEEP:	384:+vLsc8o/o9o7IFdWDoCzh3o4t6/7c8cBoYgNqPb:YLfwu7SU0CF3gLcHPb
MD5:	1FF8B98C72268DE58837846F2056C65A
SHA1:	E77FCC14F1EFD17D319C9F82627E5789333B9DBE
SHA-256:	0F6CDD09B3BBEBF50C4E1679AFF6F021F5E183A4BA2DEA3A0801394599FF6AFD
SHA-512:	1A680A7E87F16520DA934F4034CDC601EBEF9C306C7F5E3EA165588F044142CADCF5EB06CEFEDC8EA7768FF63830586A2776351C7B9429F1E33B639ADCA5F1ED
Malicious:	false
Reputation:	low
Preview:	(function(window) {. (function(window){. window.__parseFunction = function(__func, __attrs) {. __attrs = __attrs \|\| [];. __func = '(function(' + __attrs.join(',') + '){' + __func + '})';. return window.execScript ? window.execScript(__func) : eval(__func);. }. }(window));. (function(window){.. function addEvent(el, event, handler) {. var events = event.split(/\s+/);. for (var i = 0; i < events.length; i++) {. if (el.addEventListener) {. el.addEventListener(events[i], handler);. } else {. el.attachEvent('on' + events[i], handler);. }. }. }. function removeEvent(el, event, handler) {. var events = event.split(/\s+/);. for (var i = 0; i < events.length; i++) {. if (el.removeEventListener) {. el.removeEventListener(events[i], handler);. } else {. el.detachEvent('on' + events[i], handler);. }. }. }. function getCssProperty(el, prop) {. if (window.getComputedStyle) {. return windo

Chrome Cache Entry: 327

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x800, components 3
Category:	downloaded
Size (bytes):	106189
Entropy (8bit):	7.9536472743274755
Encrypted:	false
SSDEEP:	3072:htMqi9SJRs+GvBND8IuMX2ereadxtXwAAHwDsN:W9gGvzQJMX2CxtXwpwDe
MD5:	4679C42B1BF6E942FB3EFF2356E0C36D
SHA1:	FD95E62A2DF3B8262A2A3E8E88B5276AC5E8D01D
SHA-256:	D7D23DC267C275114A1358B12FD8D07C52E62330CBA47CFEDD250B6B9F40A76A
SHA-512:	9262ADA43C4661BB531FC687A220B796DB5C6F3C8A5BE165196034966EA67CCCEED36E3022DB8F688A74418552DF5B144D13E77B99A645A7CCC530A9218FEC82
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/QK60TZJk0YMhme0DiIpkWeQhvy1qOXmF5dbvK-dRuAYBD-85HXLtrMXsPu4HmKh3drLvuHgWdZomPfsZCRxMB-j4Aie0-3hgh8wn1ht25lAK6xDmygEyaA7eqXQs9tXPc5bxVoSG3hPZVJ9u4rdP3PR1TexQuZVjdFpnYQk5HSQnEO5lY0kVO64nK4OwqB4kUS9kFIB-NoxwdLUX1_7AuL2o0A7UwKrVsJaMbQOmOPvaUjda0-c6GFEvKsGNUQXtHLVXfi3w9oOzo1zBxsD03RbNSNoQibtmrtoDtS8kcE6gH2P5epI3UPHrpW91LMasc6HKOih3Ya3OpoNG8DZEtQ.jpg
Preview:	......JFIF.....H.H.....XICC_PROFILE......HLino....mntrRGB XYZ .........1..acspMSFT....IEC sRGB.......................-HP ................................................cprt...P...3desc.......lwtpt........bkpt........rXYZ........gXYZ...,....bXYZ...@....dmnd...T...pdmdd........vued...L....view.......$lumi........meas.......$tech...0....rTRC...<....gTRC...<....bTRC...<....text....Copyright (c) 1998 Hewlett-Packard Company..desc........sRGB IEC61966-2.1............sRGB IEC61966-2.1..................................................XYZ .......Q........XYZ ................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........desc........IEC http://www.iec.ch............IEC http://www.iec.ch..............................................desc........IEC 61966-2.1 Default RGB colour space - sRGB............IEC 61966-2.1 Default RGB colour space - sRGB......................desc.......,Reference Viewing Condition in IEC61966-2.1...........,Reference Viewing Condition in IEC61966-2.1........

Chrome Cache Entry: 328

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 800x534, components 3
Category:	dropped
Size (bytes):	153534
Entropy (8bit):	7.973046330311968
Encrypted:	false
SSDEEP:	3072:hbcgbMNyl1cv5AyHcPc1Vs7eAMm2p+cyejB79Y8DIgIc/QoF5LnD46DIhxTUvFj:hbjE2GRcP0At+yeN9RTQorLs6DIhxTcj
MD5:	9307596C749355572542DD87E85BA8F6
SHA1:	957070A8A89EE9FD78679FDE2D2DE4FC68DBDA73
SHA-256:	1A50F99951635657A3726080C1E40E3FC9073A8CE07D6CF31A05AEFA4F9FF3AA
SHA-512:	BF5C7721758EBA869ECA2A102B9CF64E373089865107D5658DEFB1FDE5E2155DBB2FE55AF08D065F0E95E4CB02017FCD03470B88A4F30991B2F4A6EA5E0CFD67
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....C....................................................................C......................................................................... ..".........................................K..........................!.1."AQ.aq..2...#B..R.$3br....C.%4S..&Dc..5...................................<........................!.1AQ."aq....#2.....B...$3Rbr..%C.............?..NO[..W.q^e,..-..\V.+.`..}h.,4.o]T.9.Q..Wb..........O.G.oI...K..F.P......../...pS.S.g.. .aQ.P<.+..y.....GYF..2].....6?J...R.....#b.A.Q..).j.>u..[.-..o."J$....1.d.........Iz.T .SN.%.).._.F..J_..q.....T20pF....m..S..,.U.Z.l......H....G.....m.K....eF_....P...>XD..q.jF...GCPEwb...o....4.]...AV.T.6...9.'IoW).y.....8.G.8.?.).^E.2..lZ;.r)..(.L...)`...#...g..X.t. ......Ntk+V.q.Y...{....Y'C...\...Fx...b..#.>..tB-W.6.(....,..0...P..tg..'$.G..e.}..*.{.b.HX..S....V..Zj...$.L....9.i.\|.#.JU...5....v.%..,...M.J..$`...1...E..;.......QCd..B.'..8.w..........Sv.%.o..r...mC.Jr>...

Chrome Cache Entry: 329

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 144x144, segment length 16, progressive, precision 8, 582x584, components 3
Category:	downloaded
Size (bytes):	49227
Entropy (8bit):	7.971128486963796
Encrypted:	false
SSDEEP:	1536:dXHVQV/ZnXgPGHth4VnaEWPQDwnp+OVjywKf7aUbJ:VmZzD4RDcp+O4wKfN
MD5:	953E7D49FEE9190E5F82D543AECE65ED
SHA1:	D9154D34874FF78FF1058BE7C7745A7BD616FD2B
SHA-256:	575DF2B75594D8060467727EFFB25B9A6E8387C23C2CBBCF539F3B4DFDE1003A
SHA-512:	24EC900551B73774ED2B39009C1716D53D66CC5A32AB78F2DBD40A1A2B11C1D9096E07BEFCCD7E6F78C4047FE9963614EBDD4CAE77B513508D273DA0430861A7
Malicious:	false
Reputation:	low
URL:	https://cdn4.cdn-telegram.org/file/vJ1qeXNLCjuVDEIRhU0Uc51fVywA0h7ZJSrOuLx4ENx93PE6tFR-ImbH6R6TH2Hq6nolVRWos6mpdVpSPGzX6p8Q0j_0ODtSqtNpysuhrykAfSdDnQ8DgGgskor3Fu8WtaJQxQri8j-hK-g2OOleHoS4KD1B0YhItDZRP0_vlqps17Ld32FQSc-vJxYs9CL8o_6Sc2cXvhUbtn_7wmvnKnWc3Ob9fJcHtXZftEkAVq7aPN2oFh3v2moUXctch7gw9VdyvDNMhGhuxQS8ZIXFjLAIuzgQpvq6SlitGvbib6Rw1hWW_W2ZTDtWGJjMPaOwDaNsLxFvXuGHDGd4VBasvQ.jpg
Preview:	......JFIF..............ICC_PROFILE............@..mntrRGB XYZ ............acsp.......................................-Qt..................................................rXYZ........gXYZ........bXYZ........wtpt...,....cprt...@....rTRC...L... gTRC...L... bTRC...L... desc...l..._XYZ ......o...8.....XYZ ......b.........XYZ ......$.........XYZ .......O........text....N/A.para..........ff......Y.......[desc........sRGB..................................................................................C....................................................................C.......................................................................H.F..".................................................................................s....W(&.h.^...tIh....V..c..eg..6...h.ZR..h.4a8niQ..G mE.>=..8....p+\..L&...H.Yn(.2.9Bq.H..0..8<.P...R.&.....Dx)G.u.C$R.t.x...u...e.o.."..`.4... .h..:?..j....s..Ox^....9.w4.=.....4i.....s..#...9.jH.k...z..d<B...."JG@..@"..+.D..B.pY..<...]U.(s4pu.[^..4n..j0F....

Chrome Cache Entry: 330

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (4451), with no line terminators
Category:	dropped
Size (bytes):	4451
Entropy (8bit):	5.257774690776116
Encrypted:	false
SSDEEP:	96:7ZqMhha0gB+BBOo1XqDJWuWfvVSiVmzIPziHCZ5Y7DNAP:7fgBAOo1IJXZhzI7ii7
MD5:	6A351E7A844E42F2970773E705EDDF36
SHA1:	66CC3E2474CF7085D0BFD5112003B0B9F0F87DBF
SHA-256:	D3D5D8E3AAEEC086AE00AD814B3ADAE7E41462E42A308A09DBCE39AAA11572E3
SHA-512:	0C922C36AC8C1E92A703BCDBCA70C441CED10019AC15620431528A10DC80420B2F992EF5D9769D0EEEEE0D06D87E4CA2AD4D853F3497DC54C5FE79B398B4022F
Malicious:	false
Reputation:	low
Preview:	(function(d,c){var a="1079f85a6f7f7d83640b17a26d3394d5";c.reviveAsync=c.reviveAsync\|\|{};(function(e){if(typeof e.CustomEvent==="function"){return false}function g(i,j){j=j\|\|{bubbles:false,cancelable:false,detail:undefined};var h=document.createEvent("CustomEvent");h.initCustomEvent(i,j.bubbles,j.cancelable,j.detail);return h}g.prototype=e.Event.prototype;e.CustomEvent=g})(c);try{if(!c.reviveAsync.hasOwnProperty(a)){var f=c.reviveAsync[a]={id:Object.keys(c.reviveAsync).length,name:"revive",seq:0,main:function(){var e=function(){var g=false;try{if(!g){g=true;d.removeEventListener("DOMContentLoaded",e,false);c.removeEventListener("load",e,false);f.addEventListener("start",f.start);f.addEventListener("refresh",f.refresh);f.dispatchEvent("start",{start:true})}}catch(h){console.log(h)}};f.dispatchEvent("init");if(d.readyState==="complete"){setTimeout(e)}else{d.addEventListener("DOMContentLoaded",e,false);c.addEventListener("load",e,false)}},start:function(g){if(g.detail&&g.detail.hasOwnPrope

Chrome Cache Entry: 331

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	6166
Entropy (8bit):	5.4227704706263475
Encrypted:	false
SSDEEP:	192:KR6tGVFJ3qFl5p3AkmztIZa+XqtRcalH9:wTY7t8t
MD5:	C706681409217A14A24C7E2DEB8CF423
SHA1:	08B443FE5BC6A223A9DE08FB56282365B1D13857
SHA-256:	84B97B3FA8847B64C6D3833561E4B3146530577171E85AD226578A087DB70974
SHA-512:	2520A5417426CEA58972529B3776713958FF259CC8467EBAFBE291BD040E27195054C4133F4A9518D78DA38DDF4F7CDAC64DA0813DA33BBE707AD13AF5BAA7C1
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/font-roboto.css?1
Preview:	/* cyrillic-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu72xKKTU1Kvnz.woff2') format('woff2');. unicode-range: U+0460-052F, U+1C80-1C88, U+20B4, U+2DE0-2DFF, U+A640-A69F, U+FE2E-FE2F;.}./ cyrillic /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2') format('woff2');. unicode-range: U+0301, U+0400-045F, U+0490-0491, U+04B0-04B1, U+2116;.}./ greek-ext /.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu7mxKKTU1Kvnz.woff2') format('woff2');. unicode-range: U+1F00-1FFF;.}./ greek */.@font-face {. font-family: 'Roboto';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url('../fonts/Roboto/KFOmCnqEu92Fr1Mu4WxKKTU1Kvnz.woff2') format('woff2');. un

Chrome Cache Entry: 332

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 36346
Category:	dropped
Size (bytes):	10407
Entropy (8bit):	7.980990825317211
Encrypted:	false
SSDEEP:	192:swavvwln4yIQpBHgj1ftNU9diNp2/8CbTrl50hvn8WuWa4lT851q6KztwVr:sTv4/7bgRPCWp2/ffrshv8VWa4lT8/qe
MD5:	84169ED6B45A5C127F34141E7AAC4001
SHA1:	1D297E1EC8299342DCA35F173CA758449005F850
SHA-256:	BBE5E49F45F77011B9F6012BEB2625E3231C0DB2C3F378D161EC0912D1B891A6
SHA-512:	5B28AD6BDE3AF83749389066DBF9D0862099D3AD20F6A81E5FF6B4D8DC8C56E5A471318E42FDDD6A968160494B8B6374EE6CD844D706AEF874FE49E400E856F7
Malicious:	false
Reputation:	low
Preview:	...........}.r.H..P..LX D.....l...[X.v.x..H.h....u)J.3.g.n......g.z....L q...W.....JD".y..\2.6Y..<L...v..Ar......4...~..=..%c.r..$.c.&.T..._^........<I..L._..._..".<..h..e..$..'.n.L..\^9....,..gYx.w[.8Kq..4...I .k[...1...4...`ss..<.L.pc.oF..8.Y.)s...,g..Q..1....4.G..X...Fe....uq..$.....x.r..c....8.m..s.Q3F...0v..(I...R.Qx...z.c..?.<.......1.ZV..;....s.9.\|<........E.].C"..h..b.s.-Ma=..Q^n.wB'vR'r.'q2g\...U.G...p..=...1v.y.eH.*.$IN".D.C.^.H....L.s$._..aI........+.Q.4.jF.)....../............."&:..k/.o.o..U.b....F.......e.(91..j__W..j.H.].oKs..<..[V.v..d1.q.q..,.)..A.H...?....a.iv....#.PT.<..Z..K>...AW...w....w}G,....%t.)..Q......;.r.......A.y..\|..=?.]....5.g..NU7g...sw".S..\|...n\^.R....\|4.lkpw.,.\|?~...f..t.7.n.R]ds..?>..tbd.T..R........c.\|{...w.p .].+UKq)./I.u.H....us/.%..-......]..z.....-.G..[.@%... /J...#..O...}/.4.<..ga6....\|12:...V...O.. .gXI..;.....Y!..4./..Z.PWV.cl/.B.../vA.cld.D.O.=...Q4...%S...J....w/T.l<.&O....~...4q

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 21, 2024 00:48:41.029171944 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.029638052 CEST	49736	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.034125090 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.034219027 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.034356117 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.034471035 CEST	80	49736	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.034547091 CEST	49736	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.039175987 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865761995 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865797043 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865824938 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865844965 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865863085 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.865864992 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865883112 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865901947 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865904093 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.865920067 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.865921974 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865940094 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865957975 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865961075 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.865978956 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.865993023 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.870842934 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.870862961 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.870883942 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.870907068 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.870942116 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.871098995 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.871118069 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.871135950 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:41.871162891 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.907124996 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:41.907336950 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:41.907505035 CEST	49741	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:41.911967993 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:41.912039042 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:41.912086964 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:41.912156105 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:41.912169933 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:41.912436962 CEST	80	49741	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:41.912502050 CEST	49741	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:41.921485901 CEST	49741	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:41.921521902 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:41.921612978 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:41.926317930 CEST	80	49741	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:41.926393986 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:41.926445007 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.508896112 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.508929014 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.508950949 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.508971930 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.508985043 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.508991957 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.509011984 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.509021044 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.509032965 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.509048939 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.513226986 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.513403893 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.513422966 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.513447046 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.513448954 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.513467073 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.513485909 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.513487101 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.513504028 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.513521910 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.513525009 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.513542891 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.513559103 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.513565063 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.513602972 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.518387079 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.521034956 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.525795937 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.527836084 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:42.527880907 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:42.527935028 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:42.528393984 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:42.528414965 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:42.546677113 CEST	80	49741	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.567909002 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.586652994 CEST	49741	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.590806961 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.590826035 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.590869904 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.599819899 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.599896908 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.599915981 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.599941969 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.599972963 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.599992990 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.600013971 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.600018978 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.600038052 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.600052118 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.646792889 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.692028999 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.692071915 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.692089081 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.692118883 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.692117929 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.692137957 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.692153931 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.692157030 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.692177057 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.692198992 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.692790985 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.692837954 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.692886114 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.692936897 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.692974091 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.693149090 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.693177938 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.693197012 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.693213940 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.693214893 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.693236113 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.693253040 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.693964005 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.693993092 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.694006920 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.696983099 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.697002888 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.697032928 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.738754988 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.778978109 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779011965 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779032946 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779053926 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779056072 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.779073954 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779114962 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.779155970 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779175043 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779194117 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779196024 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.779237986 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.779298067 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779318094 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779337883 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779352903 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.779357910 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779376030 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779417038 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.779417992 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.779457092 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.780132055 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.780195951 CEST	80	49739	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:42.780232906 CEST	49739	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:42.990185022 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.034045935 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.169898987 CEST	49744	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.170475006 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.170681000 CEST	49746	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.172358990 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.172379971 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.172723055 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.172979116 CEST	49741	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.173916101 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.173989058 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.174978018 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.175334930 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.175477982 CEST	80	49746	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.175503016 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.175508022 CEST	49744	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.175532103 CEST	49746	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.177568913 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.177824974 CEST	80	49741	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.258009911 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:43.258084059 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:43.258241892 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:43.259236097 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:43.259282112 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:43.259424925 CEST	49744	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.259485960 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.259612083 CEST	49746	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.264365911 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.264401913 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.264481068 CEST	80	49746	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.267040014 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.267108917 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.267312050 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.324213028 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.324246883 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.324311018 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.324841976 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.324851036 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.324966908 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.325305939 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.325351954 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.325412035 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.326236010 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.326276064 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.326541901 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.326550961 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.326675892 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.326683044 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.327013016 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.327039003 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.353548050 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.353605032 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.353636026 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.353688002 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.353712082 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.353722095 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.353758097 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.353780985 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.353792906 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.353810072 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.354521990 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.354554892 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.354588032 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.354604006 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.354619980 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.354635000 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.359062910 CEST	80	49741	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.359097958 CEST	80	49741	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.359169006 CEST	49741	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.398415089 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.431402922 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.431471109 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.431505919 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.431539059 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.431540012 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.431572914 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.431605101 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.431613922 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.431639910 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.431679010 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.431688070 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.431724072 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.432288885 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.432342052 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.432393074 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.432426929 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.432444096 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.432460070 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.432473898 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.432977915 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.433029890 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.433080912 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.433080912 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.433115959 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.433130026 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.433151960 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.433787107 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.433789968 CEST	80	49740	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.475333929 CEST	49740	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.783099890 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.783369064 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.783381939 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.784323931 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.784372091 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.784434080 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.785008907 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.785295963 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.785331964 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.785552979 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.785562992 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.786572933 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.786593914 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.786621094 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.786637068 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.786652088 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.786669016 CEST	49744	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.786669016 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.786688089 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.786705017 CEST	49744	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.786715984 CEST	49744	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.786998034 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.787020922 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.787056923 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.787091017 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.791136980 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.793255091 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.793268919 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.794328928 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.794394970 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.804064989 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.804101944 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.804136992 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.804184914 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.804400921 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.804435015 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.804455042 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.804471016 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.804516077 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.804527998 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.804563046 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.804591894 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.804613113 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.804627895 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.804708958 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.805924892 CEST	80	49746	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.805958033 CEST	80	49746	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.805993080 CEST	80	49746	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.806025028 CEST	49746	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.806029081 CEST	80	49746	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.806071997 CEST	49746	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.809041977 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.809076071 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.809178114 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.833897114 CEST	49744	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.846550941 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:43.846591949 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:43.846654892 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:43.849874020 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:43.849899054 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:43.883510113 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.883523941 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.883593082 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.895114899 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.895184994 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.895195961 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.895206928 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.895217896 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.895230055 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.895239115 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.895241976 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.895256042 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.895286083 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.895315886 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.895842075 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.895853043 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.895864010 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:43.895899057 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.947397947 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:43.987008095 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.987152100 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.987219095 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.987219095 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.987312078 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.987406969 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.987546921 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.987571955 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.987590075 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.987618923 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.987647057 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.987694025 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.987704992 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.987742901 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.987749100 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.987931967 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.987957001 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:43.988008976 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:43.988034964 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.011435032 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.033148050 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.033210039 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.035393000 CEST	49755	443	192.168.2.4	142.250.185.68
Sep 21, 2024 00:48:44.035408974 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.035455942 CEST	443	49755	142.250.185.68	192.168.2.4
Sep 21, 2024 00:48:44.035624027 CEST	49755	443	192.168.2.4	142.250.185.68
Sep 21, 2024 00:48:44.035949945 CEST	49755	443	192.168.2.4	142.250.185.68
Sep 21, 2024 00:48:44.035969019 CEST	443	49755	142.250.185.68	192.168.2.4
Sep 21, 2024 00:48:44.037194967 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.037285089 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.037306070 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.037368059 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.038202047 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.038234949 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.038234949 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.038618088 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.038640976 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.038672924 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.041595936 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.041783094 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.042033911 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.042062044 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.084363937 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.084393978 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.084703922 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.084820986 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.084970951 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085030079 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.085047960 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085097075 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.085103035 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085220098 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085269928 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.085275888 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085378885 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085463047 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085489988 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.085498095 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085544109 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.085550070 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085640907 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085683107 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085740089 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085748911 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.085768938 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085802078 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085808039 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.085813046 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085846901 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.085854053 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.085917950 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.086110115 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.089204073 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.089267969 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.089283943 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.089291096 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.089348078 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.155416965 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:44.160204887 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:44.171047926 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.171231985 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.171303034 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.171319962 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.171369076 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.171498060 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.171562910 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.171586990 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.171672106 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.171730042 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.171747923 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.171802998 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.171819925 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.171922922 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.172008038 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.172066927 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.172080994 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.172141075 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.172152042 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.172262907 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.172333002 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.172343969 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.172851086 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.172908068 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.172919989 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.173012018 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.173063040 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.173074961 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.173161983 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.173214912 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.173226118 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.173310041 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.173666000 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.173676968 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.173902988 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.173988104 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.174000978 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.174015045 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.174076080 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.174089909 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.219809055 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.257917881 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.258109093 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.258191109 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.258194923 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.258230925 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.258378029 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.258419037 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.258444071 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.258529902 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.258588076 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.258611917 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.258635044 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.258692980 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.258769035 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.258822918 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.258855104 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.258989096 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.259053946 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.281074047 CEST	49756	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.282768011 CEST	49757	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.283845901 CEST	49758	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.285929918 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.286011934 CEST	49756	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.286794901 CEST	49759	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.287038088 CEST	49756	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.287574053 CEST	80	49757	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.287626982 CEST	49757	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.287686110 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.287771940 CEST	49757	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.288621902 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.288705111 CEST	49758	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.289406061 CEST	49758	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.290389061 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.290481091 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.290554047 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.291358948 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.291409016 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.291587114 CEST	80	49759	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.291654110 CEST	49759	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.291765928 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.292146921 CEST	49759	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.292464972 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.292592049 CEST	80	49757	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.294133902 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.296922922 CEST	80	49759	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.303869963 CEST	49750	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.303934097 CEST	443	49750	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.334510088 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.334616899 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.334695101 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.334717035 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.334795952 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.334841967 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.334851027 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.334963083 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.335007906 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.335015059 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.335150003 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.335216045 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.335222960 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.335436106 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.335500002 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.335546970 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.335553885 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.335850000 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.337794065 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.337925911 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.337992907 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.338035107 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.338156939 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.338226080 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.338241100 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.338324070 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.338391066 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.338406086 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.338471889 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.338669062 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.338682890 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.338834047 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.338917971 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.338943005 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.338958025 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.339087963 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.339143991 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.339426041 CEST	49748	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.339454889 CEST	443	49748	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.342160940 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.342292070 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.342427015 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.342516899 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.342515945 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.342550993 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.342703104 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.342751980 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.342761993 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.342804909 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.342811108 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.342931032 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.342978954 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.342988014 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.343103886 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.343185902 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.343236923 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.343244076 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.344257116 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.344263077 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.381293058 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.381321907 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.396969080 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.396976948 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.397030115 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.397042036 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.421169996 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.421255112 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.421288013 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.421444893 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.421515942 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.421529055 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.421655893 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.421744108 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.421753883 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.421894073 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.421984911 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.422036886 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.422049046 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.422101974 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.422225952 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.422369957 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.422426939 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.422437906 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.423747063 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.423829079 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.423862934 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.423893929 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.424050093 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.424052954 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.424073935 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.424228907 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.424282074 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.424329042 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.424422979 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.424460888 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.424473047 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.424489021 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.424546003 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.424551010 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.424566031 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.424606085 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.424634933 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.424700022 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.424715042 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.428553104 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.428589106 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.428617954 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.428666115 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.428699017 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.428716898 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.428891897 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.428934097 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.428941965 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.428982019 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.429006100 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.429028034 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.429033995 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.429203033 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.429642916 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.429728031 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.429775953 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.429786921 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.433515072 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.433553934 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.433592081 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.433612108 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.433661938 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.442924023 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.451667070 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.451771975 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.451801062 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.451922894 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.451975107 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.451986074 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.452203989 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.452255011 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.452265024 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.452431917 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.452699900 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.452728033 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.452758074 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.452871084 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.452883005 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.453236103 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.453293085 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.453310966 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.453464985 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.453579903 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.453632116 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.453643084 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.454015017 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.458343029 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.458426952 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.458439112 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.458508015 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.458576918 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.458595991 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.458709955 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.458817005 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.458832979 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.458848953 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.458952904 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.459012032 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.459027052 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.459081888 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.459187984 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.459413052 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.459470034 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.459486008 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.466202021 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.466243029 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.466267109 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.466279984 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.466310978 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.466330051 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.466810942 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.466831923 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.466854095 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.466866970 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.466949940 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.466958046 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.466980934 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.467031956 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.467159033 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.467170954 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.467183113 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.467220068 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.467237949 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.467273951 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.467324018 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.467328072 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.467338085 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.467395067 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.467509031 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.467580080 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.467591047 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.467602968 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.467627048 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.467660904 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.467817068 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.467865944 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.467890978 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.467905045 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.467919111 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.467987061 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.468060970 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.468156099 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.468167067 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.468183994 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.468214989 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.468242884 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.472671032 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.472748041 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.472769976 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.472804070 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.472847939 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.482841969 CEST	80	49735	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:44.492103100 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.492139101 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.507950068 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.508140087 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.508238077 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.508302927 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.508320093 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.508367062 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.508405924 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.508578062 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.508627892 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.508637905 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.508774996 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.508882999 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.508909941 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.508920908 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.509145021 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.509200096 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.509211063 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.509258986 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.509367943 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.509517908 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.509572983 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.509582996 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.509722948 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.509788036 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.509798050 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.509805918 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.509970903 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.509975910 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510040045 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.510047913 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510046005 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.510049105 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510088921 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510144949 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.510154009 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510173082 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510250092 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510307074 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.510313034 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.510315895 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510324001 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510560989 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510613918 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.510622025 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510706902 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510787964 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510833979 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.510843039 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.510898113 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.510905981 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.511431932 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.511483908 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.511492968 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.511579990 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.511635065 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.511645079 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.511723995 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.511802912 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.511857986 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.511868000 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.511910915 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.511918068 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.515547037 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.515743971 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.515826941 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.515841961 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.515866041 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.515923977 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.515940905 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.516078949 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.516156912 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.516158104 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.516177893 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.516225100 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.516252041 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.516648054 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.516694069 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.516710043 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.516784906 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.516834974 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.516841888 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.517146111 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.517194033 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.522028923 CEST	49735	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:44.523900032 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:44.523999929 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:44.538640976 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.544783115 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.544796944 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.544809103 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.544821978 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.544843912 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.544897079 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.545049906 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.545062065 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.545072079 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.545099974 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.545134068 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.545145988 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.545157909 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.545203924 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.546039104 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.546057940 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.546070099 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.546139956 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.546555996 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.546567917 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.546577930 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.546588898 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.546602011 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.546610117 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.546621084 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.546626091 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.546669006 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.547522068 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.547535896 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.547580004 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.554586887 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.554804087 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.557540894 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.557593107 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.560235023 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.560260057 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.560297012 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.560302019 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.560358047 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.560374975 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.560429096 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.569211006 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.569386959 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.569485903 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.569508076 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.569678068 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.569731951 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.569744110 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.569875002 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.569988966 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.570044041 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.570055008 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.570189953 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.570250988 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.570260048 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.570310116 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.570358992 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.570514917 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.570565939 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.570575953 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.570734024 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.570785046 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.570795059 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.570946932 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.571036100 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.571086884 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.571096897 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.571230888 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.571284056 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.571294069 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.571342945 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.571427107 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.571594954 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.571647882 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.571656942 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.582897902 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.582998037 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583034992 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583076000 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583091974 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.583138943 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583175898 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.583213091 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583265066 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583317995 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583318949 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.583333015 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583380938 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583437920 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583446026 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.583446026 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.583468914 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583508968 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583549976 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583565950 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.583584070 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583611965 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.583655119 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583956003 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.583960056 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.583975077 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.583985090 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.583992004 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.584028959 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.584048986 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.584059954 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.584075928 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.584127903 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.584140062 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.584156990 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.584198952 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.584239960 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.584254026 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.584268093 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.584311962 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.584320068 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.584374905 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.584408998 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.594669104 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.594762087 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.594788074 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.594917059 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.594981909 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.594993114 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595145941 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595217943 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.595227957 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595370054 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595490932 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595534086 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.595566034 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595629930 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.595686913 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595788956 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595822096 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595880985 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595904112 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.595902920 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.595933914 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595935106 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.595956087 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596010923 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.596034050 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.596041918 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596189022 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596282959 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596334934 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.596338987 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596390963 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.596395969 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596462011 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596503973 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596549034 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.596553087 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596601009 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596638918 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596647978 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.596659899 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596682072 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.596740007 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596786022 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.596790075 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596833944 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596868992 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596880913 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.596890926 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.596972942 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.597016096 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.597021103 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.597245932 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.597280979 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.597285032 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.597352982 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.597400904 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.597412109 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.597418070 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.597451925 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.597506046 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.597628117 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.597632885 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.612603903 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.612622023 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.612651110 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.612682104 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.612706900 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.612721920 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.622193098 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.622220039 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.622235060 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.622246981 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.622287989 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.622340918 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.622462034 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.622473955 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.622484922 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.622543097 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.622558117 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.622569084 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.622612953 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.623058081 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.623069048 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.623080015 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.623104095 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.623130083 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.623133898 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.623147964 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.623163939 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.623177052 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.623203993 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.623244047 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.623632908 CEST	49743	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.623672962 CEST	443	49743	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.623967886 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.623979092 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.623990059 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.624011993 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.624028921 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.624039888 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.624041080 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.624053001 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.624068975 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.624083996 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.624819040 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.624897957 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.631840944 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.635364056 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635381937 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635405064 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635472059 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635473013 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.635494947 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635507107 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635516882 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635523081 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635541916 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.635572910 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.635581017 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635593891 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635605097 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635617971 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.635653973 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.635687113 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.636434078 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.636445045 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.636455059 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.636476040 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.636511087 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.636540890 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.641016960 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:44.641035080 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:44.642003059 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:44.648381948 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.648411989 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.648432016 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.648466110 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.648533106 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.648566961 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.655989885 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.656196117 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.656286001 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.656305075 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.656450033 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.656507015 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.656517029 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.656656981 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.656745911 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.656807899 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.656817913 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.657061100 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.657073021 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.657183886 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.657233000 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.665781975 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.665983915 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.666006088 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.666105032 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.668355942 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.669501066 CEST	49751	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.669590950 CEST	443	49751	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.674379110 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.674398899 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.674443007 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.675602913 CEST	49749	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.675612926 CEST	443	49755	142.250.185.68	192.168.2.4
Sep 21, 2024 00:48:44.675630093 CEST	443	49749	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.677175999 CEST	49755	443	192.168.2.4	142.250.185.68
Sep 21, 2024 00:48:44.677198887 CEST	443	49755	142.250.185.68	192.168.2.4
Sep 21, 2024 00:48:44.678864002 CEST	443	49755	142.250.185.68	192.168.2.4
Sep 21, 2024 00:48:44.678956032 CEST	49755	443	192.168.2.4	142.250.185.68
Sep 21, 2024 00:48:44.688182116 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:44.689389944 CEST	49755	443	192.168.2.4	142.250.185.68
Sep 21, 2024 00:48:44.689599991 CEST	443	49755	142.250.185.68	192.168.2.4
Sep 21, 2024 00:48:44.715289116 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.715300083 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.715332031 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.715368986 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.715403080 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.715432882 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.715480089 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.715576887 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.736443996 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.736454964 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.736527920 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.736546993 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.738358021 CEST	49755	443	192.168.2.4	142.250.185.68
Sep 21, 2024 00:48:44.738385916 CEST	443	49755	142.250.185.68	192.168.2.4
Sep 21, 2024 00:48:44.757659912 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.757682085 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.757786036 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.757786036 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.757808924 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.776832104 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.777957916 CEST	49755	443	192.168.2.4	142.250.185.68
Sep 21, 2024 00:48:44.781318903 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.781341076 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.781862974 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.782319069 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.782413960 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.782485962 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.785516977 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.785543919 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.785619974 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.785634995 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.785667896 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.805866003 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.805888891 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.805959940 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.805975914 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.824280024 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.824317932 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.824356079 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.824385881 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.824403048 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.824431896 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.827399015 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.831445932 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.840226889 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.840245962 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.840322018 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.840336084 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.840410948 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.852201939 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.852221966 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.852268934 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.852281094 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.852309942 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.855493069 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.855643034 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.855655909 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.865627050 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.865791082 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.865807056 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.865858078 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.875060081 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.875083923 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.875149012 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.875212908 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.875242949 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.883234024 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.883295059 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.883333921 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.883377075 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.883404970 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.883414984 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.883425951 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.883708954 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.883723974 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.883738041 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.883773088 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.883774042 CEST	49758	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.883778095 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.883786917 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.883797884 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.883806944 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.883811951 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.883825064 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.883831024 CEST	49758	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.883840084 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.883855104 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.883867979 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.883873940 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.883877993 CEST	49758	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.883881092 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.883888006 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.883893967 CEST	49758	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.883936882 CEST	49758	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.884325027 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.884362936 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.884386063 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.884393930 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.884435892 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.888034105 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.888781071 CEST	80	49758	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.889065981 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.889163971 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.889184952 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.889513016 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.889578104 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.890726089 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890816927 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890827894 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890841007 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890851974 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890863895 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890865088 CEST	49756	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.890877008 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890897036 CEST	49756	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.890916109 CEST	49756	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.890919924 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890942097 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890958071 CEST	80	49756	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890958071 CEST	49756	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.890971899 CEST	80	49759	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890985012 CEST	80	49759	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.890996933 CEST	80	49759	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.891000032 CEST	49756	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.891010046 CEST	80	49759	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.891017914 CEST	49759	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.891026020 CEST	80	49759	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.891041994 CEST	80	49759	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.891053915 CEST	49759	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.891078949 CEST	49759	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.891541004 CEST	80	49757	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.891552925 CEST	80	49757	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.891565084 CEST	80	49757	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.891587973 CEST	80	49757	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.891598940 CEST	80	49757	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.891602039 CEST	49757	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.891612053 CEST	80	49757	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.891627073 CEST	80	49757	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:44.891635895 CEST	49757	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.891649961 CEST	49757	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.929846048 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.929888964 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.929965973 CEST	49758	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.934231043 CEST	49757	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:44.971191883 CEST	49747	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:44.971232891 CEST	443	49747	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:44.973819971 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.973912001 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.973992109 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.974004030 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.974026918 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.974057913 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.974144936 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.974224091 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.974278927 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.974294901 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.974355936 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.974369049 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.974783897 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.974843979 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.974857092 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.974936962 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.975013971 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.975016117 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.975042105 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.975116968 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.975131035 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.975239992 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.975298882 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.975312948 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.975771904 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.975852013 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.975864887 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.975970030 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.976082087 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.976185083 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.976197958 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.976212978 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.976281881 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.976315975 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.976372957 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.976598024 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.976649046 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.976684093 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.976736069 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:44.976751089 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:44.976808071 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.039038897 CEST	49762	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:45.039098024 CEST	443	49762	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:45.039221048 CEST	49762	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:45.039433956 CEST	49762	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:45.039458036 CEST	443	49762	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:45.064462900 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064551115 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064594984 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064630032 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064650059 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.064685106 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064703941 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.064727068 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064764023 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064799070 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064806938 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.064816952 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064843893 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.064863920 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064908981 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.064913034 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064929962 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.064971924 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.064980984 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065403938 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065440893 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065475941 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065490007 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.065500975 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065522909 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.065541983 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065583944 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.065584898 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065598965 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065644026 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.065650940 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065687895 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065727949 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065737963 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.065746069 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.065933943 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.066329002 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.066409111 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.066445112 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.066483021 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.066490889 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.066498995 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.066529036 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.066551924 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.066586971 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.066596031 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.066602945 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.066652060 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.066698074 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.066704988 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.066745996 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.067250967 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.067322016 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.067358017 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.067404985 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.067414045 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.067452908 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.067464113 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.067471027 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.067522049 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.067527056 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.067534924 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.067585945 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.067593098 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.068124056 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.068157911 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.068242073 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.068249941 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.068327904 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.109136105 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155076027 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155123949 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155158997 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155172110 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.155209064 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155230045 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.155255079 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155288935 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155303955 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.155314922 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155350924 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155354023 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.155369043 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155416965 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.155425072 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155468941 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155505896 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155538082 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155548096 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.155555964 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155581951 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.155714035 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155749083 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155766964 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.155772924 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155828953 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155842066 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.155848980 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155886889 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.155905962 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.155913115 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.156035900 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.156044960 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.156199932 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.156234980 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.156240940 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.156251907 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.156285048 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.156330109 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.156338930 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.156384945 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.156390905 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.156429052 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.156474113 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.267966032 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:45.268012047 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:45.268407106 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:45.269074917 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:45.269087076 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:45.272435904 CEST	49760	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.272464991 CEST	443	49760	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.279318094 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:45.279361010 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:45.279498100 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:45.280024052 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:45.280039072 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:45.287004948 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.287019968 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.287091017 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.287790060 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.287808895 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.288382053 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:45.293191910 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:45.293415070 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.293426991 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.293533087 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.293958902 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.293973923 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.405610085 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:45.451400995 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:45.461750984 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:45.461766958 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:45.461796999 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:45.461808920 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:45.461844921 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:45.461885929 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:45.465089083 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.465186119 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.465267897 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.465558052 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.465579033 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.596076012 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:45.596170902 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:45.596226931 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:45.596445084 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:45.596467018 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:45.596482038 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:45.596487999 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:45.643294096 CEST	49768	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:45.643352032 CEST	443	49768	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:45.643424988 CEST	49768	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:45.644560099 CEST	49768	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:45.644573927 CEST	443	49768	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:45.745760918 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.746098042 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.746124983 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.746611118 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.748008013 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.748081923 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.748404026 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.755091906 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.755542040 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.755568027 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.756521940 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.757108927 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.757236004 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.757468939 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.791395903 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.799395084 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.847704887 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.847769976 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.847817898 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.847820997 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.847836018 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.847876072 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.847882986 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.847946882 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.847990036 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.847995996 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.848056078 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.848095894 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.848097086 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.848110914 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.848151922 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.848160028 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.852418900 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.852461100 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.852715969 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.852724075 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.852768898 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.933192968 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.933738947 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.933840036 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.933887959 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.933902025 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.933936119 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.933983088 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.933985949 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.934006929 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.934068918 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.934076071 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.934129000 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.934171915 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.934180021 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.934186935 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.934237957 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.934722900 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.934806108 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.934856892 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.934861898 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.934869051 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.934914112 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.934920073 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.934976101 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.935020924 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.935029030 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.935739040 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.935790062 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.935822964 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.935830116 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.935878038 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.935879946 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.935892105 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.935947895 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.935954094 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.936716080 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.936764956 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.936774015 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.936780930 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.936826944 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.936834097 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:45.955601931 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:45.978789091 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:45.980899096 CEST	443	49762	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:45.994071960 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.009130001 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.015324116 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.020044088 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020145893 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020195961 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020245075 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020292044 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020328045 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.020328045 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.020343065 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020374060 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020386934 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.020468950 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020508051 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.020523071 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020572901 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020612955 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.020618916 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020673990 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020714045 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.020723104 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020777941 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020818949 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.020823002 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020836115 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020874977 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.020891905 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.020968914 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021006107 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.021012068 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021054983 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021102905 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.021104097 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021116018 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021156073 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.021172047 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021250963 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021291018 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.021296978 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021342039 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021380901 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.021388054 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021456957 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021502018 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.021507978 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021564007 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.021608114 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.063985109 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.096127033 CEST	49762	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:46.105581999 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.105659008 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.105704069 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.105711937 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.105753899 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.105797052 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.105802059 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.105818033 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.105869055 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.105876923 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.106188059 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.106257915 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.106265068 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.106400013 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.106456041 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.106462955 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.106482983 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.106522083 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.106899977 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.149992943 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.150038958 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.200583935 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.317950964 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318135977 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318190098 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.318224907 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318309069 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318358898 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.318367958 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318460941 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318500042 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.318506002 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318604946 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318653107 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.318660021 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318749905 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318794966 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.318804026 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318898916 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.318959951 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.318965912 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319050074 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319096088 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.319103003 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319201946 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319245100 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.319251060 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319355965 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319400072 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.319406986 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319525957 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319571972 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.319578886 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319669962 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319713116 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.319719076 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319832087 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.319875002 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.319880962 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.322871923 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.322941065 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.322958946 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.323038101 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.323088884 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.323096991 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.323179007 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.323223114 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.323235035 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.323751926 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.323810101 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.323818922 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.324067116 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.324119091 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.327110052 CEST	443	49768	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:46.327219963 CEST	49768	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:46.527013063 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.529413939 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.529450893 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.529879093 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.529901028 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:46.530052900 CEST	49762	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:46.530066967 CEST	443	49762	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:46.531084061 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.531117916 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.531131029 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.531138897 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.531188965 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.532471895 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.532629013 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.532644033 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.533781052 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:46.533802032 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.533819914 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:46.533853054 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.533926010 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.533932924 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.534048080 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.534436941 CEST	443	49762	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:46.534481049 CEST	443	49762	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:46.534502029 CEST	49762	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:46.536734104 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.543119907 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.543271065 CEST	49762	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:46.543320894 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:46.543375015 CEST	443	49762	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:46.543453932 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.543464899 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:46.543606997 CEST	49762	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:46.543616056 CEST	443	49762	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:46.545654058 CEST	49768	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:46.545713902 CEST	443	49768	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:46.546111107 CEST	443	49768	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:46.579452038 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.592798948 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.596235037 CEST	49768	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:46.604818106 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.604818106 CEST	49762	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:46.634902954 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.635004044 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.635059118 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.635083914 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.635207891 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.635255098 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.635262012 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.635364056 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.635406017 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.635411978 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.635562897 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.635610104 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.635613918 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.635742903 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.635788918 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.635793924 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.639152050 CEST	49768	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:46.639226913 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.639277935 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.639282942 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.679449081 CEST	443	49768	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:46.703958988 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.703979969 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723102093 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723170042 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.723190069 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723294973 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723345041 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.723365068 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723469019 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723520994 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.723534107 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723622084 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723671913 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.723685026 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723777056 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723826885 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.723839045 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723929882 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.723984957 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.723998070 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.724909067 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.724965096 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.724977970 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.725070000 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.725131989 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.725143909 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.725279093 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.725336075 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.725347996 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.725431919 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.725485086 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.725496054 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.726095915 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.726154089 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.726160049 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.726188898 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.726242065 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.726274014 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.726461887 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.726543903 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.726577044 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.726591110 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.726643085 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.734707117 CEST	49766	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.734730005 CEST	443	49766	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.745174885 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:46.745213032 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:46.745294094 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.745305061 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:46.745353937 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.745990038 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:46.746109962 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:46.746185064 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.762299061 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.762391090 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.762470961 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.763257980 CEST	49765	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.763268948 CEST	443	49765	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.767554998 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.767574072 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.780070066 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.780096054 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.780167103 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.780307055 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.780316114 CEST	443	49764	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:46.780327082 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.780359030 CEST	49764	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:46.786407948 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.786425114 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.795608997 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.804651022 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.804673910 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.804769039 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.804769039 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.804799080 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.811630011 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.811821938 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.811881065 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.811911106 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812016010 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812067032 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.812073946 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812165022 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812213898 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.812221050 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812309027 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812356949 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.812362909 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812453985 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812503099 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.812510014 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812602997 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812647104 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.812653065 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812733889 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812783957 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.812789917 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812866926 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.812932014 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.812938929 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813019037 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813066959 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.813072920 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813163042 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813214064 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.813220024 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813327074 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813373089 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.813380003 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813478947 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813528061 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.813535929 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813622952 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813673019 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.813679934 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813765049 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813812971 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.813832998 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813894033 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.813939095 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.813945055 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.814346075 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.814392090 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.814399004 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.814488888 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.814534903 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.814541101 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.814634085 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.814682961 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.814688921 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.814774990 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.814822912 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.814830065 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.814913034 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.814975977 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.814981937 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.815294027 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.815340996 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.815347910 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.815462112 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.815530062 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.815546036 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.815596104 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.815692902 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.815710068 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.824347973 CEST	443	49768	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:46.824536085 CEST	443	49768	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:46.824605942 CEST	49768	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:46.852828979 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.852929115 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.853020906 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.868551970 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.868587971 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.875839949 CEST	49772	443	192.168.2.4	188.42.34.65
Sep 21, 2024 00:48:46.875909090 CEST	443	49772	188.42.34.65	192.168.2.4
Sep 21, 2024 00:48:46.875989914 CEST	49772	443	192.168.2.4	188.42.34.65
Sep 21, 2024 00:48:46.900351048 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.900424957 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.900456905 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.900589943 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.900649071 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.900662899 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.900744915 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.900799036 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.900810957 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.900896072 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.900952101 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.900963068 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901067019 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901122093 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.901137114 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901216030 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901282072 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.901293039 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901397943 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901451111 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.901462078 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901542902 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901597977 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.901609898 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901695013 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901745081 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.901757002 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901858091 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.901911020 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.901921988 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902025938 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902076006 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.902087927 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902179003 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902226925 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.902237892 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902318954 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902362108 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.902369976 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.902381897 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902471066 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902520895 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.902533054 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902615070 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902662039 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.902673006 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902762890 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902810097 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.902822018 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902939081 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.902990103 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.903001070 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903084993 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903136015 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.903146982 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903230906 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903285980 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.903296947 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903377056 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903450012 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.903461933 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903557062 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903609991 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.903620958 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903702021 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903750896 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.903763056 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903857946 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.903909922 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.903920889 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904007912 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904061079 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.904072046 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904154062 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904206038 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.904221058 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904300928 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904376030 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.904382944 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904413939 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904462099 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.904495001 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904643059 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904694080 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.904706955 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904916048 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:46.904975891 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.931241035 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.931263924 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.931335926 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.931593895 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.931595087 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.931621075 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.941042900 CEST	49773	443	192.168.2.4	194.55.244.177
Sep 21, 2024 00:48:46.941083908 CEST	443	49773	194.55.244.177	192.168.2.4
Sep 21, 2024 00:48:46.941159964 CEST	49773	443	192.168.2.4	194.55.244.177
Sep 21, 2024 00:48:46.941881895 CEST	443	49762	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:46.941998005 CEST	443	49762	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:46.942059994 CEST	49762	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:46.946896076 CEST	49774	443	192.168.2.4	193.232.150.148
Sep 21, 2024 00:48:46.946933985 CEST	443	49774	193.232.150.148	192.168.2.4
Sep 21, 2024 00:48:46.946993113 CEST	49774	443	192.168.2.4	193.232.150.148
Sep 21, 2024 00:48:46.954775095 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.954794884 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.954876900 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.954878092 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.954889059 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.954909086 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.954941988 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.956548929 CEST	49772	443	192.168.2.4	188.42.34.65
Sep 21, 2024 00:48:46.956593037 CEST	443	49772	188.42.34.65	192.168.2.4
Sep 21, 2024 00:48:46.968091011 CEST	49775	443	192.168.2.4	95.163.41.56
Sep 21, 2024 00:48:46.968133926 CEST	443	49775	95.163.41.56	192.168.2.4
Sep 21, 2024 00:48:46.968206882 CEST	49775	443	192.168.2.4	95.163.41.56
Sep 21, 2024 00:48:46.972986937 CEST	49776	443	192.168.2.4	65.109.23.99
Sep 21, 2024 00:48:46.973074913 CEST	443	49776	65.109.23.99	192.168.2.4
Sep 21, 2024 00:48:46.973109007 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:46.973150015 CEST	49776	443	192.168.2.4	65.109.23.99
Sep 21, 2024 00:48:46.978734016 CEST	49777	443	192.168.2.4	193.3.184.222
Sep 21, 2024 00:48:46.978773117 CEST	443	49777	193.3.184.222	192.168.2.4
Sep 21, 2024 00:48:46.978831053 CEST	49777	443	192.168.2.4	193.3.184.222
Sep 21, 2024 00:48:46.980493069 CEST	49773	443	192.168.2.4	194.55.244.177
Sep 21, 2024 00:48:46.980509996 CEST	443	49773	194.55.244.177	192.168.2.4
Sep 21, 2024 00:48:46.982398033 CEST	49774	443	192.168.2.4	193.232.150.148
Sep 21, 2024 00:48:46.982433081 CEST	443	49774	193.232.150.148	192.168.2.4
Sep 21, 2024 00:48:46.983546972 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.983568907 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.983619928 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.983638048 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.983665943 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:46.983680964 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.983680964 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:46.984097004 CEST	49778	443	192.168.2.4	167.235.7.148
Sep 21, 2024 00:48:46.984146118 CEST	443	49778	167.235.7.148	192.168.2.4
Sep 21, 2024 00:48:46.984211922 CEST	49778	443	192.168.2.4	167.235.7.148
Sep 21, 2024 00:48:46.985536098 CEST	49779	443	192.168.2.4	37.230.131.17
Sep 21, 2024 00:48:46.985557079 CEST	443	49779	37.230.131.17	192.168.2.4
Sep 21, 2024 00:48:46.985609055 CEST	49779	443	192.168.2.4	37.230.131.17
Sep 21, 2024 00:48:46.987327099 CEST	49780	443	192.168.2.4	195.209.109.24
Sep 21, 2024 00:48:46.987344980 CEST	443	49780	195.209.109.24	192.168.2.4
Sep 21, 2024 00:48:46.987435102 CEST	49780	443	192.168.2.4	195.209.109.24
Sep 21, 2024 00:48:46.988708973 CEST	49775	443	192.168.2.4	95.163.41.56
Sep 21, 2024 00:48:46.988722086 CEST	443	49775	95.163.41.56	192.168.2.4
Sep 21, 2024 00:48:46.989403963 CEST	49776	443	192.168.2.4	65.109.23.99
Sep 21, 2024 00:48:46.989434958 CEST	443	49776	65.109.23.99	192.168.2.4
Sep 21, 2024 00:48:46.990567923 CEST	49781	443	192.168.2.4	217.199.220.44
Sep 21, 2024 00:48:46.990598917 CEST	443	49781	217.199.220.44	192.168.2.4
Sep 21, 2024 00:48:46.990659952 CEST	49781	443	192.168.2.4	217.199.220.44
Sep 21, 2024 00:48:46.991883993 CEST	49777	443	192.168.2.4	193.3.184.222
Sep 21, 2024 00:48:46.991910934 CEST	443	49777	193.3.184.222	192.168.2.4
Sep 21, 2024 00:48:46.993330956 CEST	49782	443	192.168.2.4	23.111.112.116
Sep 21, 2024 00:48:46.993340969 CEST	443	49782	23.111.112.116	192.168.2.4
Sep 21, 2024 00:48:46.993422985 CEST	49782	443	192.168.2.4	23.111.112.116
Sep 21, 2024 00:48:46.994676113 CEST	49778	443	192.168.2.4	167.235.7.148
Sep 21, 2024 00:48:46.994708061 CEST	443	49778	167.235.7.148	192.168.2.4
Sep 21, 2024 00:48:46.996289015 CEST	49779	443	192.168.2.4	37.230.131.17
Sep 21, 2024 00:48:46.996304035 CEST	443	49779	37.230.131.17	192.168.2.4
Sep 21, 2024 00:48:46.999099016 CEST	49780	443	192.168.2.4	195.209.109.24
Sep 21, 2024 00:48:46.999125957 CEST	443	49780	195.209.109.24	192.168.2.4
Sep 21, 2024 00:48:46.999527931 CEST	49781	443	192.168.2.4	217.199.220.44
Sep 21, 2024 00:48:46.999541998 CEST	443	49781	217.199.220.44	192.168.2.4
Sep 21, 2024 00:48:46.999845028 CEST	49782	443	192.168.2.4	23.111.112.116
Sep 21, 2024 00:48:46.999857903 CEST	443	49782	23.111.112.116	192.168.2.4
Sep 21, 2024 00:48:47.001507998 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.001616955 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.001627922 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.001858950 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.003839970 CEST	49768	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:47.003864050 CEST	443	49768	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:47.003882885 CEST	49768	443	192.168.2.4	184.28.90.27
Sep 21, 2024 00:48:47.003890038 CEST	443	49768	184.28.90.27	192.168.2.4
Sep 21, 2024 00:48:47.010740995 CEST	49767	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.010772943 CEST	443	49767	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.018959999 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.018979073 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.019059896 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.019059896 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.019081116 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.025767088 CEST	49762	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:47.025788069 CEST	443	49762	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:47.044990063 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.045010090 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.045075893 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.045075893 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.045089006 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.071540117 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.072149038 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.072159052 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.072251081 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.096391916 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.096402884 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.096465111 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.096481085 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.096481085 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.096537113 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.096544027 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.106987953 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.107516050 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.108817101 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.111788988 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.111850977 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.112329960 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.112396002 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.112549067 CEST	49786	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.112818003 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.113059998 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.113616943 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.113683939 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.114046097 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.117108107 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.117391109 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.117456913 CEST	49786	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.117599010 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.117795944 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.118227005 CEST	49786	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.118845940 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.121781111 CEST	49788	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.121951103 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.122005939 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.122172117 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.123024940 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.125308990 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.125322104 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.125389099 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.125401020 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.125612020 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.126557112 CEST	80	49788	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.126612902 CEST	49788	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.126934052 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.127059937 CEST	49788	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.131805897 CEST	80	49788	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.133373976 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.133414984 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.133495092 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.133779049 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.133800030 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.133856058 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.135767937 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.135808945 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.136020899 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.136065006 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.140554905 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.140607119 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.140702963 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.141052008 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.141076088 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.143568039 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.143606901 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.143666029 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.144074917 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.144097090 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.146202087 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.146214008 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.146327972 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.146331072 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.146331072 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.146363974 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.146370888 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.146441936 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.147082090 CEST	49794	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:47.147922993 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.147937059 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.151886940 CEST	80	49794	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:47.151959896 CEST	49794	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:47.152096033 CEST	49794	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:47.156821012 CEST	80	49794	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:47.159413099 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.159450054 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.159537077 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.159917116 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.159982920 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.160012960 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.160273075 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.160298109 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.162854910 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:47.162898064 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:47.162957907 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:47.163400888 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:47.163419008 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:47.181128025 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.181139946 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.181178093 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.181204081 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.181221008 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.181236982 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.197597980 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.197607040 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.197663069 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.197664022 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.197709084 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.197711945 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.197734118 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.206753016 CEST	49797	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:47.206798077 CEST	443	49797	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:47.206871033 CEST	49797	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:47.207240105 CEST	49797	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:47.207266092 CEST	443	49797	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:47.216983080 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.216995001 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.217119932 CEST	49798	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:47.217149019 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.217159986 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.217171907 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:47.217253923 CEST	49798	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:47.217588902 CEST	49798	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:47.217618942 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:47.226660013 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.226671934 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.226720095 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.226739883 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.226748943 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.226779938 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.226779938 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.239736080 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.239748001 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.240945101 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.240967035 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.245753050 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.249494076 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.249501944 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.249552965 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.249561071 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.249675989 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.289391041 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.304436922 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.315769911 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.315826893 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.317306042 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.318449974 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.318660021 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.318712950 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.363409996 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.444176912 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.474282026 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474298000 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474348068 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.474355936 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474391937 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.474416971 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.474427938 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474441051 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474451065 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474481106 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.474487066 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474509954 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.474548101 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474589109 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474595070 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.474610090 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474651098 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.474654913 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474670887 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474705935 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.474713087 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.474728107 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.475630045 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.475686073 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.475692987 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.478652000 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.479366064 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.479420900 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.479427099 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.479469061 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.479471922 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.479480982 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.479511023 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.480237007 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.480302095 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.480308056 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.481894016 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.481971025 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.481971979 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.481978893 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.482777119 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.482842922 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.482848883 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.484446049 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.484503984 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.484512091 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.485419989 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.485482931 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.485488892 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.485949993 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.486041069 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.486095905 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.486156940 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.486444950 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.486505985 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.486511946 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.486834049 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.487607002 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.487663984 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.487664938 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.487670898 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.487735987 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.488460064 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.488517046 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.488521099 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.488522053 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.488624096 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.489021063 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.489070892 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.489075899 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.489085913 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.489135981 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.489140987 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.489418030 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.489480019 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.489512920 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.489530087 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.489535093 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.489581108 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.489660025 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.489901066 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.489919901 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.490442038 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.490499973 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.490504980 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.491071939 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.491137028 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.491142988 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.491435051 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.491487026 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.491492033 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.492197037 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.492249966 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.492254972 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.493891001 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.493942976 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.493948936 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.494080067 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.494129896 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.494136095 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.494255066 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.494304895 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.494309902 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.494389057 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.494438887 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.494445086 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.494931936 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.494976997 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.494982958 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.495188951 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.495242119 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.495245934 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.495255947 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.495309114 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.495313883 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.495887995 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.495940924 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.495948076 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.496294975 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.496355057 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.496360064 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.496378899 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.496426105 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.496429920 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.496438980 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.496476889 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.496481895 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.496557951 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.496599913 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.522787094 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.534950018 CEST	49763	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:47.534967899 CEST	443	49763	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:47.535434961 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.572854042 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.572982073 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.573059082 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.573136091 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.573214054 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.573215008 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.573215008 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.573288918 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.573348045 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.573365927 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.573458910 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.573514938 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.573529959 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.573648930 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.573745012 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.573764086 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.573777914 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.573832989 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.577513933 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.586721897 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.586760044 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.586793900 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.586788893 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.586867094 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.586899042 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.586935043 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.586985111 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.587001085 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.587409019 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.587444067 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.587465048 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.587481976 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.587537050 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.587549925 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.590656042 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.590787888 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.590852022 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.590886116 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.591015100 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.591074944 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.591089010 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.591233969 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.591319084 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.591331005 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.591458082 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.591500044 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.591511011 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.591521978 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.591538906 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.591553926 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.591568947 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.591623068 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.591660023 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.591717005 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.591727018 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.595046043 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.595156908 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.595210075 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.595221996 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.603373051 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.606636047 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.611159086 CEST	443	49779	37.230.131.17	192.168.2.4
Sep 21, 2024 00:48:47.619829893 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.624926090 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.627674103 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.661459923 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.661540985 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.661580086 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.661668062 CEST	443	49778	167.235.7.148	192.168.2.4
Sep 21, 2024 00:48:47.661681890 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.661748886 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.661768913 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.661863089 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.661921978 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.661941051 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.662031889 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.662085056 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.662098885 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.662534952 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.662606001 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.662619114 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.662708044 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.662763119 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.662775993 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.663316011 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.663377047 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.663407087 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.663500071 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.663552999 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.663564920 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.663652897 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.663722038 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.663736105 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.664244890 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.664303064 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.664315939 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.664414883 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.664467096 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.664479971 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.665132046 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.665185928 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.665199041 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.665282965 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.665339947 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.665354967 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.673295975 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.673365116 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.673422098 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.673429966 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.673499107 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.673566103 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.673583984 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.673698902 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.673732042 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.673751116 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.673768044 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.673825979 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.674245119 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.674307108 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.674340963 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.674361944 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.674377918 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.674429893 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.674431086 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.674444914 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.674499989 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.675184965 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.675261021 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.675297022 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.675313950 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.675327063 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.675376892 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.675389051 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.676160097 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.676208019 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.676249027 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.676249981 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.676260948 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.676300049 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.677058935 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.677093983 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.677134037 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.677149057 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.677220106 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.678231001 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.680727005 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.680788040 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.680887938 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.680905104 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.680993080 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.680994987 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681009054 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681052923 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681063890 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.681078911 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681102991 CEST	49779	443	192.168.2.4	37.230.131.17
Sep 21, 2024 00:48:47.681128025 CEST	443	49779	37.230.131.17	192.168.2.4
Sep 21, 2024 00:48:47.681153059 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.681159973 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681202888 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.681221962 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681231976 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681262016 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681273937 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.681282043 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681324005 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.681329012 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681499004 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.681508064 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681612968 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.681627989 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681879997 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681916952 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681930065 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.681935072 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.681972980 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.681988001 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.682043076 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.682085037 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.682090998 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.682296991 CEST	443	49779	37.230.131.17	192.168.2.4
Sep 21, 2024 00:48:47.682311058 CEST	443	49779	37.230.131.17	192.168.2.4
Sep 21, 2024 00:48:47.682358980 CEST	49779	443	192.168.2.4	37.230.131.17
Sep 21, 2024 00:48:47.682634115 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.682648897 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.682718992 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.682781935 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.682833910 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.682837963 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.682885885 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.682918072 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.682929039 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.682935953 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.682980061 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.683629036 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.683693886 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.683737040 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.683742046 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.683782101 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.683819056 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.683825016 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.683922052 CEST	49778	443	192.168.2.4	167.235.7.148
Sep 21, 2024 00:48:47.683936119 CEST	443	49778	167.235.7.148	192.168.2.4
Sep 21, 2024 00:48:47.684495926 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.684530020 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.684540987 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.684560061 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.684596062 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.684608936 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.684736013 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.684767962 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.684808969 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.684859991 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.684895992 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.684917927 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.684926987 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.684953928 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.684983015 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.685097933 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.685163021 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.685403109 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.685431004 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.685437918 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.685473919 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.685475111 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.685478926 CEST	443	49778	167.235.7.148	192.168.2.4
Sep 21, 2024 00:48:47.685530901 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.685558081 CEST	49778	443	192.168.2.4	167.235.7.148
Sep 21, 2024 00:48:47.686041117 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.686238050 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.686494112 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.686677933 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.686822891 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.687015057 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.687350988 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.687556028 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.687939882 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.688128948 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.688663006 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.688671112 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.688874960 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.688891888 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.688961029 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.688978910 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.689028978 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.689048052 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.689090967 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.689105034 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.689352036 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.689364910 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.689965010 CEST	49799	443	192.168.2.4	77.88.21.119
Sep 21, 2024 00:48:47.689997911 CEST	443	49799	77.88.21.119	192.168.2.4
Sep 21, 2024 00:48:47.690083981 CEST	49799	443	192.168.2.4	77.88.21.119
Sep 21, 2024 00:48:47.690462112 CEST	49800	443	192.168.2.4	87.250.247.183
Sep 21, 2024 00:48:47.690501928 CEST	443	49800	87.250.247.183	192.168.2.4
Sep 21, 2024 00:48:47.690608025 CEST	49800	443	192.168.2.4	87.250.247.183
Sep 21, 2024 00:48:47.690723896 CEST	49799	443	192.168.2.4	77.88.21.119
Sep 21, 2024 00:48:47.690746069 CEST	443	49799	77.88.21.119	192.168.2.4
Sep 21, 2024 00:48:47.690817118 CEST	49800	443	192.168.2.4	87.250.247.183
Sep 21, 2024 00:48:47.690828085 CEST	443	49800	87.250.247.183	192.168.2.4
Sep 21, 2024 00:48:47.691941023 CEST	49801	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:47.691968918 CEST	443	49801	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:47.692027092 CEST	49801	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:47.692222118 CEST	49801	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:47.692230940 CEST	443	49801	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:47.698252916 CEST	49779	443	192.168.2.4	37.230.131.17
Sep 21, 2024 00:48:47.698335886 CEST	443	49779	37.230.131.17	192.168.2.4
Sep 21, 2024 00:48:47.699075937 CEST	49779	443	192.168.2.4	37.230.131.17
Sep 21, 2024 00:48:47.699085951 CEST	443	49779	37.230.131.17	192.168.2.4
Sep 21, 2024 00:48:47.699733019 CEST	49778	443	192.168.2.4	167.235.7.148
Sep 21, 2024 00:48:47.699904919 CEST	443	49778	167.235.7.148	192.168.2.4
Sep 21, 2024 00:48:47.700339079 CEST	49778	443	192.168.2.4	167.235.7.148
Sep 21, 2024 00:48:47.700368881 CEST	443	49778	167.235.7.148	192.168.2.4
Sep 21, 2024 00:48:47.702996016 CEST	49802	443	192.168.2.4	77.88.21.179
Sep 21, 2024 00:48:47.703049898 CEST	443	49802	77.88.21.179	192.168.2.4
Sep 21, 2024 00:48:47.703119993 CEST	49802	443	192.168.2.4	77.88.21.179
Sep 21, 2024 00:48:47.703558922 CEST	49802	443	192.168.2.4	77.88.21.179
Sep 21, 2024 00:48:47.703587055 CEST	443	49802	77.88.21.179	192.168.2.4
Sep 21, 2024 00:48:47.708964109 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.708976030 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709058046 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.709075928 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709086895 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709099054 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709134102 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.709152937 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709167957 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709177971 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709191084 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709208012 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.709219933 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709233999 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.709269047 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.709852934 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709863901 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709875107 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709894896 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709907055 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709909916 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.709918022 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709929943 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709945917 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.709964037 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.709975004 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.709986925 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.710005045 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.710021019 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.710043907 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.713977098 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.713989019 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.714041948 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.714797974 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.714809895 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.714854956 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.718636990 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.718647957 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.718663931 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.718683004 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.718693972 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.718704939 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.718712091 CEST	49786	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.718718052 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.718745947 CEST	49786	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.718774080 CEST	49786	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.726232052 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.726244926 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.726294994 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.727418900 CEST	80	49788	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.727428913 CEST	80	49788	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.727438927 CEST	80	49788	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.727452040 CEST	80	49788	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.727463007 CEST	80	49788	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.727499962 CEST	49788	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.727540970 CEST	49788	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.752240896 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.752330065 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.752370119 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.752399921 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.752450943 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.752496004 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.752657890 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.752712011 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.752743959 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.752847910 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.752907038 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.752923965 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753014088 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753067970 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.753082037 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753174067 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753230095 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.753242970 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753335953 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753390074 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.753402948 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753489971 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753544092 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.753556967 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753653049 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753707886 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.753721952 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753815889 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753869057 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.753881931 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.753973007 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754029036 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.754041910 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754132032 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754183054 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.754196882 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754333019 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754383087 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.754396915 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754503012 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754555941 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.754571915 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754658937 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754710913 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.754724979 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754816055 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754867077 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.754880905 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.754976034 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.755036116 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.755049944 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.755162954 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.755213976 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.755227089 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.755338907 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.755403042 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.755418062 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.755526066 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.755580902 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.755593061 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.755687952 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.755739927 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.755753994 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.755856991 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.755908966 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.755922079 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.756012917 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.756083012 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.756095886 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.756834030 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.756886959 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.756901979 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760340929 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760407925 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760423899 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.760452032 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760504007 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760525942 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.760540962 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760591984 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.760597944 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760611057 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760658026 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.760673046 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760874987 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760910988 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760926008 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.760940075 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.760988951 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.761091948 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761173010 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761224031 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.761230946 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761244059 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761302948 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.761307001 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761320114 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761368990 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.761636019 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761725903 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761776924 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761786938 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.761806965 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761861086 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761861086 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.761874914 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.761934996 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.761949062 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762017965 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762068987 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.762082100 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762393951 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762439013 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762445927 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.762459993 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762511015 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762511969 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.762525082 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762583971 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.762589931 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762603998 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762656927 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.762670040 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762736082 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762773991 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762787104 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.762801886 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.762851000 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.763271093 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.763361931 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.763411999 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.763417959 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.763431072 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.763478041 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.763489962 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.763540983 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.763583899 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.763595104 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.763607025 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.763647079 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.763654947 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.763669014 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.763720989 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.766038895 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.766072989 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.766091108 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.766103029 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.766119003 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.766132116 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.766134977 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.766149998 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.766163111 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.766185999 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.766185999 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.766225100 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.766938925 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.766952038 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.767011881 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.770970106 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.770982027 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.771042109 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.772157907 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.772217035 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.772233009 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.772355080 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.772409916 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.772422075 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.772569895 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.772618055 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.772628069 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.772748947 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.772797108 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.772806883 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.772942066 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.772994995 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.773005009 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.773121119 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.773175955 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.773185968 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.773330927 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.773384094 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.773392916 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.773509026 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.773562908 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.773571968 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.773685932 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.773735046 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.773751020 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.774171114 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.774224043 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.774235010 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.774350882 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.774395943 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.774405956 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.774553061 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.774612904 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.774626017 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.775091887 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.775155067 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.775166988 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.775302887 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.775357008 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.775367975 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.775496006 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.775568008 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.775578976 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.776137114 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.776196957 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.776207924 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.776328087 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.776381969 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.776391983 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.776506901 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.776560068 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.776571035 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.776834965 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.776890039 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.776900053 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.777044058 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.777098894 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.777110100 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.777225018 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.777280092 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.777290106 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.777755976 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.777812958 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.777823925 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.777935982 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.777988911 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.778000116 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.781205893 CEST	443	49780	195.209.109.24	192.168.2.4
Sep 21, 2024 00:48:47.786380053 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786389112 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786406994 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786415100 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.786423922 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786425114 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.786451101 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786464930 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786530018 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.786597013 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786597967 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.786598921 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.786598921 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.786674976 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786679983 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786717892 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.786756992 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.786768913 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786771059 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786832094 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.786832094 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786848068 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.786988974 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.787012100 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.787053108 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.787067890 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.787178040 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.787220955 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.787230968 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.787271023 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.787379026 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.787431002 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.787482977 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.788511038 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.788582087 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.788592100 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.788665056 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.788712025 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.788733006 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.788826942 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.788883924 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.788892031 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.788985968 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.789035082 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.789042950 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.789197922 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.789366007 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.789372921 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.789969921 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790079117 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.790096998 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790179968 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790246964 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.790256023 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790323973 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790334940 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790375948 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.790384054 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790405989 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790438890 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.790477991 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790504932 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790539026 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.790548086 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790569067 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.790587902 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790680885 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790735960 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.790741920 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790750027 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790817022 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.790889025 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.790904999 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.792759895 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.792814970 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.792824030 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.794323921 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.794385910 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.794393063 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.794473886 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.794549942 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.794554949 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.794579029 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.794631958 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.794789076 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.794846058 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.794861078 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.794981956 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.795047045 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.795062065 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.795790911 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.795802116 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.795851946 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.795933962 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.795947075 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.795958042 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.795969009 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.795980930 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.795988083 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.796041012 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.796535015 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796545982 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796591043 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.796658039 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796669960 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796680927 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796713114 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.796736002 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796747923 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796776056 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.796782017 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796793938 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796804905 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796817064 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796828985 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.796833992 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.796857119 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.796889067 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.797482967 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.797493935 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.797504902 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.797529936 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.797532082 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.797544003 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.797548056 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.797595024 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.797630072 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.797650099 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.797661066 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.797672033 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.797683954 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.797698021 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.797729969 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.798291922 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.798311949 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.798324108 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.798336983 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.798350096 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.798367977 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.798403025 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.798429012 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.798456907 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.798470974 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.798479080 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.798515081 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.799079895 CEST	80	49785	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.799134970 CEST	49785	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.802772999 CEST	49779	443	192.168.2.4	37.230.131.17
Sep 21, 2024 00:48:47.802777052 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.802872896 CEST	49778	443	192.168.2.4	167.235.7.148
Sep 21, 2024 00:48:47.802880049 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.816450119 CEST	49780	443	192.168.2.4	195.209.109.24
Sep 21, 2024 00:48:47.816462994 CEST	443	49780	195.209.109.24	192.168.2.4
Sep 21, 2024 00:48:47.819076061 CEST	443	49772	188.42.34.65	192.168.2.4
Sep 21, 2024 00:48:47.819580078 CEST	49772	443	192.168.2.4	188.42.34.65
Sep 21, 2024 00:48:47.819639921 CEST	443	49772	188.42.34.65	192.168.2.4
Sep 21, 2024 00:48:47.820465088 CEST	443	49780	195.209.109.24	192.168.2.4
Sep 21, 2024 00:48:47.820568085 CEST	49780	443	192.168.2.4	195.209.109.24
Sep 21, 2024 00:48:47.821213007 CEST	443	49772	188.42.34.65	192.168.2.4
Sep 21, 2024 00:48:47.821458101 CEST	49772	443	192.168.2.4	188.42.34.65
Sep 21, 2024 00:48:47.823517084 CEST	49780	443	192.168.2.4	195.209.109.24
Sep 21, 2024 00:48:47.823815107 CEST	443	49780	195.209.109.24	192.168.2.4
Sep 21, 2024 00:48:47.824264050 CEST	49772	443	192.168.2.4	188.42.34.65
Sep 21, 2024 00:48:47.824371099 CEST	443	49772	188.42.34.65	192.168.2.4
Sep 21, 2024 00:48:47.824474096 CEST	49780	443	192.168.2.4	195.209.109.24
Sep 21, 2024 00:48:47.824485064 CEST	443	49780	195.209.109.24	192.168.2.4
Sep 21, 2024 00:48:47.824775934 CEST	49772	443	192.168.2.4	188.42.34.65
Sep 21, 2024 00:48:47.824810028 CEST	443	49772	188.42.34.65	192.168.2.4
Sep 21, 2024 00:48:47.829605103 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:47.829643011 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:47.829793930 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:47.830235004 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:47.830250025 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:47.837821960 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.837886095 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.838094950 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.839056015 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.841584921 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.842984915 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.843194962 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.843261957 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.843278885 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.843364000 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.843477964 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.843492031 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.843578100 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.843580961 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.843643904 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.843650103 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:47.843657970 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.843712091 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.843749046 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.843801975 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.843816996 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.843909979 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.843964100 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.843976974 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844070911 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844126940 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.844141006 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844233036 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844291925 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.844305038 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844396114 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844496012 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844548941 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.844563961 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844645023 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.844654083 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844683886 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844774961 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.844789028 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844911098 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.844970942 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.844983101 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.845083952 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.845180988 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.845237970 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.845256090 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.845443010 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.845455885 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.845487118 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.845540047 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.846992970 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.847183943 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847258091 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847300053 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847311020 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.847321987 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847359896 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847408056 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.847417116 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847455025 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847491980 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847505093 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.847512007 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847544909 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.847620010 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847657919 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847704887 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.847712994 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847748041 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847755909 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.847763062 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847810984 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.847817898 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.847914934 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.848149061 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.853400946 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.857340097 CEST	49791	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.857363939 CEST	443	49791	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.857713938 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.857758999 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.857975960 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.861268997 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.861289024 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.861901999 CEST	49786	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:47.864728928 CEST	49771	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.864743948 CEST	443	49771	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.865536928 CEST	49769	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.865550041 CEST	443	49769	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.991303921 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.991338015 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.991367102 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.991367102 CEST	49780	443	192.168.2.4	195.209.109.24
Sep 21, 2024 00:48:47.991375923 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:47.991381884 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:47.991383076 CEST	49772	443	192.168.2.4	188.42.34.65
Sep 21, 2024 00:48:47.991462946 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.068737984 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.068759918 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.068770885 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.068783045 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.068794966 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.068805933 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.068821907 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.068830013 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.068850040 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.068862915 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.068870068 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.068877935 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.068888903 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.068890095 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.068923950 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.069190025 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069358110 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069391012 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.069402933 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.069423914 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.069448948 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069464922 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.069525957 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069582939 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.069591999 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069678068 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069725990 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.069735050 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069814920 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069844007 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069897890 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.069905996 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069911003 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069942951 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.069951057 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.069983006 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070039988 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070041895 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070044041 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070050001 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070095062 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070136070 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070147038 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070183039 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070213079 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070233107 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070242882 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070321083 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070323944 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070374966 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070377111 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070382118 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070385933 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070425034 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070432901 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070435047 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070460081 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070471048 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070478916 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070491076 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070502996 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070523977 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070533037 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070544004 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070602894 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070602894 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070605040 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070611954 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070611000 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070628881 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070631981 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070632935 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070656061 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070661068 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070676088 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070691109 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070693016 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070694923 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070694923 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070698023 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070705891 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070719957 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070720911 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070725918 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070730925 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070749044 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070749998 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070776939 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070797920 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070799112 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070802927 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070804119 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070811987 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070823908 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070835114 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070837021 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070873022 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070878983 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070884943 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.070904016 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070972919 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070967913 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.070988894 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071018934 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071029902 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071044922 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071046114 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071054935 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071063995 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071069956 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071077108 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071088076 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071088076 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071094990 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071115017 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071136951 CEST	80	49787	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.071145058 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071152925 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071158886 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071170092 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071172953 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071182966 CEST	49787	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.071191072 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071208954 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071214914 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071216106 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071229935 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071237087 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071243048 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071273088 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071279049 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071279049 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071301937 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071301937 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071302891 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071310043 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071321964 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071329117 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071348906 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071356058 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071361065 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071378946 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071412086 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071420908 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071475029 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071494102 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071527958 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071542025 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071547985 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071549892 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071549892 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071582079 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071588039 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071594954 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071631908 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071636915 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071647882 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071660995 CEST	80	49784	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.071669102 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071681023 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071687937 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071706057 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071707010 CEST	49784	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.071736097 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071743011 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071754932 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071757078 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071788073 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071795940 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071810007 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071816921 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071820021 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071840048 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071860075 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071896076 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071913004 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071914911 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.071921110 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071928024 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.071965933 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072005987 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072011948 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072015047 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072017908 CEST	80	49794	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:48.072019100 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072026968 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072058916 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072062969 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072071075 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072087049 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072087049 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072092056 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072097063 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072097063 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072119951 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072122097 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072122097 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072146893 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072160959 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072171926 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072174072 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072204113 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072237015 CEST	443	49778	167.235.7.148	192.168.2.4
Sep 21, 2024 00:48:48.072241068 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072261095 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072271109 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.072289944 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.072289944 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072316885 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072319984 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072340965 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072355986 CEST	443	49778	167.235.7.148	192.168.2.4
Sep 21, 2024 00:48:48.072384119 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072447062 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072452068 CEST	49778	443	192.168.2.4	167.235.7.148
Sep 21, 2024 00:48:48.072458029 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072470903 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072490931 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072499037 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072523117 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072530031 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072535992 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072561026 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072576046 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072581053 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072602987 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072649956 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072649002 CEST	443	49779	37.230.131.17	192.168.2.4
Sep 21, 2024 00:48:48.072652102 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072685003 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072715044 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072715998 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072746038 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072805882 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072819948 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072845936 CEST	443	49779	37.230.131.17	192.168.2.4
Sep 21, 2024 00:48:48.072871923 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072904110 CEST	49779	443	192.168.2.4	37.230.131.17
Sep 21, 2024 00:48:48.072923899 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.072933912 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.072957993 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.073014021 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.073026896 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.073091030 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.073147058 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.073149920 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.073170900 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.073220015 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.073234081 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.073437929 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:48.074107885 CEST	49798	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:48.074177027 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:48.074259043 CEST	49779	443	192.168.2.4	37.230.131.17
Sep 21, 2024 00:48:48.074280024 CEST	443	49779	37.230.131.17	192.168.2.4
Sep 21, 2024 00:48:48.074670076 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.074733019 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.074740887 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.074798107 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.074867010 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.074918985 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.074928045 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.074938059 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.074953079 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.074985027 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.074994087 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075031996 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075036049 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075063944 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075088978 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:48.075090885 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075100899 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075109959 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075167894 CEST	49798	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:48.075237036 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075367928 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.075409889 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075429916 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075491905 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075499058 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075548887 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075557947 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075656891 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075711012 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075712919 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075726986 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075735092 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075742006 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075768948 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075772047 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075786114 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075789928 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075789928 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075802088 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075803041 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075822115 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075829029 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075843096 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075845957 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075897932 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075911045 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075925112 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075946093 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.075961113 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.075989962 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076035976 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076040983 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076050043 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076050043 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076072931 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076086044 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076106071 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076122046 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076147079 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076147079 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076150894 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076164961 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076169968 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076179981 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076196909 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076256037 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076260090 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076304913 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076308966 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076317072 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076318026 CEST	443	49775	95.163.41.56	192.168.2.4
Sep 21, 2024 00:48:48.076329947 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076350927 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076364994 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076370001 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076378107 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076421976 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076433897 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076450109 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076495886 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076514006 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076515913 CEST	49798	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:48.076524019 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076570988 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:48.076615095 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076636076 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076690912 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076699018 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076711893 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076738119 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076744080 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076769114 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076778889 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076783895 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076836109 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.076889038 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076946974 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076967001 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.076967955 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.076986074 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.076992035 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077007055 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077014923 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077027082 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077064991 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077066898 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077076912 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077100992 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077137947 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077151060 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077151060 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077213049 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077214003 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077228069 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077275038 CEST	49775	443	192.168.2.4	95.163.41.56
Sep 21, 2024 00:48:48.077281952 CEST	443	49775	95.163.41.56	192.168.2.4
Sep 21, 2024 00:48:48.077290058 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077342033 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077354908 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077454090 CEST	49798	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:48.077459097 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:48.077466011 CEST	443	49776	65.109.23.99	192.168.2.4
Sep 21, 2024 00:48:48.077537060 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077609062 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077662945 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077678919 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077713013 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077716112 CEST	49776	443	192.168.2.4	65.109.23.99
Sep 21, 2024 00:48:48.077725887 CEST	443	49776	65.109.23.99	192.168.2.4
Sep 21, 2024 00:48:48.077744961 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077748060 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077771902 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077811003 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077816963 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077827930 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077842951 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077857971 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077876091 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077884912 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077898026 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.077925920 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.077938080 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078002930 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078104019 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.078118086 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078223944 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.078254938 CEST	443	49775	95.163.41.56	192.168.2.4
Sep 21, 2024 00:48:48.078299999 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078310013 CEST	49775	443	192.168.2.4	95.163.41.56
Sep 21, 2024 00:48:48.078363895 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.078385115 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078511000 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078546047 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.078566074 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078577042 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.078591108 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078593016 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078603029 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.078612089 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.078623056 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078643084 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.078655958 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.078660965 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078681946 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.078692913 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078718901 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078717947 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.078732967 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.078790903 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.079165936 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079196930 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.079221010 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.079231977 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079282045 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.079312086 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079325914 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.079344034 CEST	443	49776	65.109.23.99	192.168.2.4
Sep 21, 2024 00:48:48.079366922 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079374075 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.079380989 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079401016 CEST	49776	443	192.168.2.4	65.109.23.99
Sep 21, 2024 00:48:48.079423904 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079540014 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.079551935 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079570055 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079603910 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079613924 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.079627037 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079663038 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079684019 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.079695940 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.079742908 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.079777002 CEST	443	49781	217.199.220.44	192.168.2.4
Sep 21, 2024 00:48:48.080060959 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.080130100 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.080132008 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.080153942 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.080209970 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.080225945 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.080338001 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.080357075 CEST	49781	443	192.168.2.4	217.199.220.44
Sep 21, 2024 00:48:48.080368042 CEST	443	49781	217.199.220.44	192.168.2.4
Sep 21, 2024 00:48:48.080421925 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.080456018 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.080490112 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.080507994 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.080522060 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.080571890 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.080965042 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081027985 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.081039906 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081062078 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081187010 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.081198931 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081202030 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081258059 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.081270933 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081271887 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081327915 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.081332922 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081341028 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081373930 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081387997 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.081399918 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081480980 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.081813097 CEST	443	49781	217.199.220.44	192.168.2.4
Sep 21, 2024 00:48:48.081929922 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.081940889 CEST	49781	443	192.168.2.4	217.199.220.44
Sep 21, 2024 00:48:48.081984997 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.081998110 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082037926 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082077980 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082230091 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082246065 CEST	443	49774	193.232.150.148	192.168.2.4
Sep 21, 2024 00:48:48.082273960 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.082287073 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082408905 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082454920 CEST	49774	443	192.168.2.4	193.232.150.148
Sep 21, 2024 00:48:48.082468987 CEST	443	49774	193.232.150.148	192.168.2.4
Sep 21, 2024 00:48:48.082480907 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082485914 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.082485914 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.082499027 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082520008 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082568884 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.082581043 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082655907 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082698107 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.082710028 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082842112 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082912922 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082922935 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.082940102 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.082988024 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.083010912 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.083158970 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.083209038 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.083223104 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.083307028 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.083340883 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.083374977 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.083421946 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.083436966 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.083473921 CEST	443	49773	194.55.244.177	192.168.2.4
Sep 21, 2024 00:48:48.083486080 CEST	443	49777	193.3.184.222	192.168.2.4
Sep 21, 2024 00:48:48.083487988 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.083489895 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.083501101 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.083537102 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.083559036 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.083606958 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.083620071 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.083684921 CEST	49777	443	192.168.2.4	193.3.184.222
Sep 21, 2024 00:48:48.083703995 CEST	443	49777	193.3.184.222	192.168.2.4
Sep 21, 2024 00:48:48.083780050 CEST	49773	443	192.168.2.4	194.55.244.177
Sep 21, 2024 00:48:48.083796978 CEST	443	49773	194.55.244.177	192.168.2.4
Sep 21, 2024 00:48:48.083950996 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084012985 CEST	443	49774	193.232.150.148	192.168.2.4
Sep 21, 2024 00:48:48.084067106 CEST	49774	443	192.168.2.4	193.232.150.148
Sep 21, 2024 00:48:48.084207058 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084242105 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.084255934 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084280014 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.084290981 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084364891 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084419012 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.084431887 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084501028 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084568024 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.084575891 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084599018 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084650040 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.084770918 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084805965 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084840059 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084844112 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.084856987 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084897995 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084904909 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.084918976 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.084944963 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.085072041 CEST	49770	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.085086107 CEST	443	49770	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085130930 CEST	443	49777	193.3.184.222	192.168.2.4
Sep 21, 2024 00:48:48.085175037 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085194111 CEST	49777	443	192.168.2.4	193.3.184.222
Sep 21, 2024 00:48:48.085320950 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085413933 CEST	443	49773	194.55.244.177	192.168.2.4
Sep 21, 2024 00:48:48.085433006 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085477114 CEST	49773	443	192.168.2.4	194.55.244.177
Sep 21, 2024 00:48:48.085478067 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.085491896 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085536957 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.085587978 CEST	49793	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.085616112 CEST	443	49793	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085639954 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085679054 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085696936 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.085705042 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085711956 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085762978 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.085776091 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085833073 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.085906982 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.085920095 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.086101055 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.086133003 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.086158037 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.086190939 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.086210966 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.086266994 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.086302042 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.086318970 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.086333036 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.086376905 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.086388111 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.086400032 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.086452007 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.087157965 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.087203026 CEST	49792	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.087233067 CEST	443	49792	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.087243080 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.087291002 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.087306023 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.087320089 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.087455988 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.087466955 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.087471962 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.087485075 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.087548018 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.087981939 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.088061094 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.088112116 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.088135958 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.088150024 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.088205099 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.088210106 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.088231087 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.088298082 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.088309050 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.088543892 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.088558912 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.088640928 CEST	443	49782	23.111.112.116	192.168.2.4
Sep 21, 2024 00:48:48.088810921 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.088818073 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.088928938 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.088978052 CEST	49782	443	192.168.2.4	23.111.112.116
Sep 21, 2024 00:48:48.088985920 CEST	443	49782	23.111.112.116	192.168.2.4
Sep 21, 2024 00:48:48.088998079 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.089004040 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.089020014 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.089075089 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.089087009 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.089190960 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.089284897 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.089890003 CEST	443	49782	23.111.112.116	192.168.2.4
Sep 21, 2024 00:48:48.089948893 CEST	49782	443	192.168.2.4	23.111.112.116
Sep 21, 2024 00:48:48.092410088 CEST	49790	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.092436075 CEST	443	49790	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.092664957 CEST	49789	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.092677116 CEST	443	49789	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.094278097 CEST	443	49780	195.209.109.24	192.168.2.4
Sep 21, 2024 00:48:48.094465971 CEST	443	49780	195.209.109.24	192.168.2.4
Sep 21, 2024 00:48:48.094552994 CEST	49780	443	192.168.2.4	195.209.109.24
Sep 21, 2024 00:48:48.094578028 CEST	443	49780	195.209.109.24	192.168.2.4
Sep 21, 2024 00:48:48.094599962 CEST	49780	443	192.168.2.4	195.209.109.24
Sep 21, 2024 00:48:48.094625950 CEST	49780	443	192.168.2.4	195.209.109.24
Sep 21, 2024 00:48:48.102242947 CEST	443	49772	188.42.34.65	192.168.2.4
Sep 21, 2024 00:48:48.102334023 CEST	443	49772	188.42.34.65	192.168.2.4
Sep 21, 2024 00:48:48.102394104 CEST	49772	443	192.168.2.4	188.42.34.65
Sep 21, 2024 00:48:48.102912903 CEST	49772	443	192.168.2.4	188.42.34.65
Sep 21, 2024 00:48:48.102926970 CEST	443	49772	188.42.34.65	192.168.2.4
Sep 21, 2024 00:48:48.119421959 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.129318953 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.129401922 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.129419088 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.129518986 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.129569054 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.129581928 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.129657984 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.129740953 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.129793882 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.129808903 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.130074978 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.130343914 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.130511045 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.130588055 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.130644083 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.130657911 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.130812883 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.130830050 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.154484987 CEST	80	49794	95.216.186.40	192.168.2.4
Sep 21, 2024 00:48:48.154551983 CEST	49794	80	192.168.2.4	95.216.186.40
Sep 21, 2024 00:48:48.157423019 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.157497883 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.157521963 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.157612085 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.157669067 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.157681942 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.157769918 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.157833099 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.157845974 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.157933950 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.157994986 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.158009052 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.158431053 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.158499002 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.158559084 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.158572912 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.158704996 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.158716917 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.171644926 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.171724081 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.171737909 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.218153954 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.218247890 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.218269110 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.218358040 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.218431950 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.218441963 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.218472004 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.218524933 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.218544960 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.218549967 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.218561888 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.218718052 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.218775988 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.218789101 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.218877077 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.218969107 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.218990088 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.219003916 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.219187975 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.219506025 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.219707012 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.219707012 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.219734907 CEST	443	49795	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.219794989 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.219830990 CEST	49795	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.236109018 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.236120939 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.236128092 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.236138105 CEST	80	49786	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.236221075 CEST	49786	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.240787029 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.240799904 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.240811110 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.240823030 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.240835905 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.240844965 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.240847111 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.240859032 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.240873098 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.240883112 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.240921021 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.241166115 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.241178989 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.241189003 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.241242886 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.287414074 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:48.287471056 CEST	49798	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:48.305310011 CEST	443	49797	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:48.317914009 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.317926884 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.317936897 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.317991972 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.318068027 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.330759048 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.330770016 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.330812931 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.330866098 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.330878019 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.330890894 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.330904961 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.330945969 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.331572056 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.331583977 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.331594944 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.331633091 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.331760883 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.331808090 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.332081079 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.332093954 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.332113028 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.332123995 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.332134008 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.332139969 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.332165003 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.332882881 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.332906008 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.332917929 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.332923889 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.332930088 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.332942963 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.332972050 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.332998991 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.333821058 CEST	49797	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:48.333842039 CEST	443	49797	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:48.338538885 CEST	443	49797	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:48.338620901 CEST	49797	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:48.338985920 CEST	49797	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:48.339132071 CEST	49797	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:48.339143038 CEST	443	49797	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:48.339173079 CEST	443	49797	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:48.395627975 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.395643950 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.395654917 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.395693064 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.406227112 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.406807899 CEST	49797	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:48.406836987 CEST	443	49797	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:48.408644915 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.408658028 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.408669949 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.408689976 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.408701897 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.408708096 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.408713102 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.408731937 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.408768892 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.420522928 CEST	443	49799	77.88.21.119	192.168.2.4
Sep 21, 2024 00:48:48.420753956 CEST	49799	443	192.168.2.4	77.88.21.119
Sep 21, 2024 00:48:48.420782089 CEST	443	49799	77.88.21.119	192.168.2.4
Sep 21, 2024 00:48:48.421344995 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.421355963 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.421400070 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.421461105 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.421472073 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.421483040 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.421503067 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.421514034 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.421515942 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.421535015 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.421550035 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.421560049 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.421565056 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.421597958 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.421942949 CEST	443	49799	77.88.21.119	192.168.2.4
Sep 21, 2024 00:48:48.422012091 CEST	49799	443	192.168.2.4	77.88.21.119
Sep 21, 2024 00:48:48.422281027 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.422313929 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.422322989 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.422324896 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.422337055 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.422399044 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.422755957 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.422766924 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.422779083 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.422801971 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.422815084 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.422823906 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.422837019 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.422859907 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.422873974 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.424947023 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.424957991 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.424978018 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.424989939 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.425000906 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.425012112 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.425017118 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.425023079 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.425040960 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.425050020 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.425052881 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.425064087 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.425077915 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.425082922 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.425088882 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.425100088 CEST	80	49783	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.425103903 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.425117016 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.425144911 CEST	49783	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.425538063 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:48.425556898 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:48.425609112 CEST	49798	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:48.425611019 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:48.425661087 CEST	49798	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:48.429406881 CEST	443	49801	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.429649115 CEST	49801	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.429661036 CEST	443	49801	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.431143045 CEST	443	49801	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.431204081 CEST	49801	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.445892096 CEST	49778	443	192.168.2.4	167.235.7.148
Sep 21, 2024 00:48:48.445929050 CEST	443	49778	167.235.7.148	192.168.2.4
Sep 21, 2024 00:48:48.450140953 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.450510025 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.450526953 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.451380968 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.451436996 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.452033997 CEST	443	49802	77.88.21.179	192.168.2.4
Sep 21, 2024 00:48:48.453063011 CEST	49802	443	192.168.2.4	77.88.21.179
Sep 21, 2024 00:48:48.453095913 CEST	443	49802	77.88.21.179	192.168.2.4
Sep 21, 2024 00:48:48.453982115 CEST	443	49802	77.88.21.179	192.168.2.4
Sep 21, 2024 00:48:48.454040051 CEST	49802	443	192.168.2.4	77.88.21.179
Sep 21, 2024 00:48:48.459664106 CEST	49775	443	192.168.2.4	95.163.41.56
Sep 21, 2024 00:48:48.459743977 CEST	443	49775	95.163.41.56	192.168.2.4
Sep 21, 2024 00:48:48.468775988 CEST	49776	443	192.168.2.4	65.109.23.99
Sep 21, 2024 00:48:48.469048977 CEST	443	49776	65.109.23.99	192.168.2.4
Sep 21, 2024 00:48:48.469480038 CEST	49781	443	192.168.2.4	217.199.220.44
Sep 21, 2024 00:48:48.469621897 CEST	443	49781	217.199.220.44	192.168.2.4
Sep 21, 2024 00:48:48.469785929 CEST	49774	443	192.168.2.4	193.232.150.148
Sep 21, 2024 00:48:48.470007896 CEST	443	49774	193.232.150.148	192.168.2.4
Sep 21, 2024 00:48:48.470247984 CEST	49777	443	192.168.2.4	193.3.184.222
Sep 21, 2024 00:48:48.470525026 CEST	443	49777	193.3.184.222	192.168.2.4
Sep 21, 2024 00:48:48.471015930 CEST	49773	443	192.168.2.4	194.55.244.177
Sep 21, 2024 00:48:48.471467018 CEST	49782	443	192.168.2.4	23.111.112.116
Sep 21, 2024 00:48:48.471488953 CEST	443	49773	194.55.244.177	192.168.2.4
Sep 21, 2024 00:48:48.471795082 CEST	443	49782	23.111.112.116	192.168.2.4
Sep 21, 2024 00:48:48.472048998 CEST	49799	443	192.168.2.4	77.88.21.119
Sep 21, 2024 00:48:48.472177982 CEST	443	49799	77.88.21.119	192.168.2.4
Sep 21, 2024 00:48:48.472582102 CEST	49801	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.472771883 CEST	443	49801	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.472779989 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.472857952 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.473397970 CEST	49802	443	192.168.2.4	77.88.21.179
Sep 21, 2024 00:48:48.473465919 CEST	443	49802	77.88.21.179	192.168.2.4
Sep 21, 2024 00:48:48.474519014 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.474529028 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.496359110 CEST	49809	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.496387959 CEST	443	49809	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.496450901 CEST	49809	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.496938944 CEST	49809	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.496954918 CEST	443	49809	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.498197079 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.498265028 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.498316050 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.498332977 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.498450041 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.507189035 CEST	49810	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.507199049 CEST	443	49810	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.507263899 CEST	49810	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.507535934 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.507548094 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.507606030 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.507978916 CEST	49810	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.507986069 CEST	443	49810	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.508758068 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.509056091 CEST	49746	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.509360075 CEST	49744	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.513545036 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.513835907 CEST	80	49746	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.514105082 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.514589071 CEST	443	49800	87.250.247.183	192.168.2.4
Sep 21, 2024 00:48:48.526858091 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.526866913 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.526921988 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.526968002 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.530931950 CEST	49800	443	192.168.2.4	87.250.247.183
Sep 21, 2024 00:48:48.530962944 CEST	443	49800	87.250.247.183	192.168.2.4
Sep 21, 2024 00:48:48.534744978 CEST	443	49800	87.250.247.183	192.168.2.4
Sep 21, 2024 00:48:48.534832001 CEST	49800	443	192.168.2.4	87.250.247.183
Sep 21, 2024 00:48:48.535649061 CEST	49811	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:48.535710096 CEST	443	49811	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:48.535783052 CEST	49811	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:48.536598921 CEST	49811	443	192.168.2.4	77.88.55.88
Sep 21, 2024 00:48:48.536612988 CEST	443	49811	77.88.55.88	192.168.2.4
Sep 21, 2024 00:48:48.539572954 CEST	49800	443	192.168.2.4	87.250.247.183
Sep 21, 2024 00:48:48.539761066 CEST	443	49800	87.250.247.183	192.168.2.4
Sep 21, 2024 00:48:48.546255112 CEST	49798	443	192.168.2.4	135.181.113.151
Sep 21, 2024 00:48:48.546271086 CEST	443	49798	135.181.113.151	192.168.2.4
Sep 21, 2024 00:48:48.550719976 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.551040888 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.551054955 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.552175999 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.554439068 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.554609060 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.555095911 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.581563950 CEST	49812	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.581614017 CEST	443	49812	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.581695080 CEST	49812	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.581942081 CEST	49812	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.581958055 CEST	443	49812	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.592307091 CEST	49813	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.592370987 CEST	443	49813	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.592436075 CEST	49813	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.592837095 CEST	49813	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.592864037 CEST	443	49813	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.595403910 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.596890926 CEST	49814	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.596914053 CEST	443	49814	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.597013950 CEST	49814	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.597171068 CEST	49814	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.597196102 CEST	443	49814	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.600156069 CEST	49781	443	192.168.2.4	217.199.220.44
Sep 21, 2024 00:48:48.600159883 CEST	49797	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:48.600164890 CEST	49776	443	192.168.2.4	65.109.23.99
Sep 21, 2024 00:48:48.600167990 CEST	443	49781	217.199.220.44	192.168.2.4
Sep 21, 2024 00:48:48.600178957 CEST	49775	443	192.168.2.4	95.163.41.56
Sep 21, 2024 00:48:48.600179911 CEST	49801	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.600188017 CEST	443	49776	65.109.23.99	192.168.2.4
Sep 21, 2024 00:48:48.600188971 CEST	49773	443	192.168.2.4	194.55.244.177
Sep 21, 2024 00:48:48.600191116 CEST	49782	443	192.168.2.4	23.111.112.116
Sep 21, 2024 00:48:48.600191116 CEST	49799	443	192.168.2.4	77.88.21.119
Sep 21, 2024 00:48:48.600192070 CEST	49777	443	192.168.2.4	193.3.184.222
Sep 21, 2024 00:48:48.600193977 CEST	443	49775	95.163.41.56	192.168.2.4
Sep 21, 2024 00:48:48.600194931 CEST	49774	443	192.168.2.4	193.232.150.148
Sep 21, 2024 00:48:48.600194931 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.600197077 CEST	49802	443	192.168.2.4	77.88.21.179
Sep 21, 2024 00:48:48.600207090 CEST	443	49773	194.55.244.177	192.168.2.4
Sep 21, 2024 00:48:48.600208044 CEST	443	49782	23.111.112.116	192.168.2.4
Sep 21, 2024 00:48:48.600213051 CEST	443	49774	193.232.150.148	192.168.2.4
Sep 21, 2024 00:48:48.600214005 CEST	443	49777	193.3.184.222	192.168.2.4
Sep 21, 2024 00:48:48.600217104 CEST	443	49799	77.88.21.119	192.168.2.4
Sep 21, 2024 00:48:48.600219965 CEST	49800	443	192.168.2.4	87.250.247.183
Sep 21, 2024 00:48:48.600224018 CEST	443	49801	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.600224972 CEST	443	49800	87.250.247.183	192.168.2.4
Sep 21, 2024 00:48:48.600251913 CEST	443	49802	77.88.21.179	192.168.2.4
Sep 21, 2024 00:48:48.606381893 CEST	443	49797	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:48.606642962 CEST	443	49797	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:48.606741905 CEST	49797	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:48.613396883 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.621232033 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.635693073 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.635706902 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.635862112 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.640388012 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.640400887 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.640444994 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.640491009 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.655814886 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.655946016 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.656009912 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.656018019 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.656102896 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.656219959 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.656290054 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.656296968 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.656338930 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.656421900 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.656569958 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.657378912 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.657465935 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.657466888 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.657497883 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.657532930 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.657654047 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.657702923 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.657708883 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.659707069 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.659718037 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.659780025 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.679116011 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.679126024 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.679215908 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.688661098 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.688668966 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.688741922 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.689464092 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.689480066 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.689491987 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.689505100 CEST	80	49744	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.689565897 CEST	49744	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.689667940 CEST	49744	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.691255093 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.691267967 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.691277981 CEST	80	49745	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.691704988 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.694000959 CEST	80	49746	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.694017887 CEST	80	49746	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.694037914 CEST	80	49746	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.694050074 CEST	80	49746	149.154.167.99	192.168.2.4
Sep 21, 2024 00:48:48.694081068 CEST	49746	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.694099903 CEST	49746	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.697869062 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.697880983 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.698020935 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.698029041 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.699326992 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.699623108 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.699634075 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.699698925 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.700921059 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.700990915 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.701366901 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.701514006 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.701520920 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.701565981 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.701849937 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.702816010 CEST	49775	443	192.168.2.4	95.163.41.56
Sep 21, 2024 00:48:48.702841997 CEST	49774	443	192.168.2.4	193.232.150.148
Sep 21, 2024 00:48:48.702852011 CEST	49777	443	192.168.2.4	193.3.184.222
Sep 21, 2024 00:48:48.702862978 CEST	49802	443	192.168.2.4	77.88.21.179
Sep 21, 2024 00:48:48.707267046 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.707274914 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.707336903 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.710747957 CEST	49797	443	192.168.2.4	93.158.134.118
Sep 21, 2024 00:48:48.710784912 CEST	443	49797	93.158.134.118	192.168.2.4
Sep 21, 2024 00:48:48.725263119 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.725269079 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.725316048 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.742664099 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.742674112 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.742732048 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.745908976 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.746007919 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.746052980 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.746061087 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.746100903 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.746105909 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.746364117 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.746448040 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.746495008 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.746500969 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.746551991 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.746614933 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.746768951 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.746818066 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.746824026 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.746925116 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.746979952 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.746984959 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.747081995 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.747132063 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.747137070 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.747411966 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.747646093 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.747699022 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.747704029 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.747796059 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.747864008 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.747869015 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.747946024 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.748034000 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.748080969 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.748086929 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.748121023 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.748620033 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.748769999 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.748836994 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.748842001 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.748913050 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.748990059 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.748996019 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.751451969 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.751508951 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.762821913 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.762860060 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.762866974 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.762892962 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.762911081 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.762919903 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.762923956 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.762945890 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.762955904 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.762972116 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.762996912 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.777508020 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.777565002 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.777570963 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.789181948 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.789290905 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.789293051 CEST	49781	443	192.168.2.4	217.199.220.44
Sep 21, 2024 00:48:48.789302111 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.789305925 CEST	49782	443	192.168.2.4	23.111.112.116
Sep 21, 2024 00:48:48.789314985 CEST	49776	443	192.168.2.4	65.109.23.99
Sep 21, 2024 00:48:48.789335966 CEST	49801	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.789336920 CEST	49799	443	192.168.2.4	77.88.21.119
Sep 21, 2024 00:48:48.789340973 CEST	49773	443	192.168.2.4	194.55.244.177
Sep 21, 2024 00:48:48.789340973 CEST	49800	443	192.168.2.4	87.250.247.183
Sep 21, 2024 00:48:48.792287111 CEST	49815	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.792324066 CEST	443	49815	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.792470932 CEST	49815	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.792689085 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.792737961 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.792743921 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.792758942 CEST	49815	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.792773962 CEST	443	49815	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.792792082 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.799937963 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.800020933 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.802731037 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.802774906 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.802781105 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.802834988 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.802886009 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.802891016 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.802949905 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.802980900 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.803035021 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.803040981 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.803225994 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.803287029 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.803352118 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.803395987 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.803401947 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.803455114 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.803492069 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.803498030 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.803855896 CEST	49745	80	192.168.2.4	149.154.167.99
Sep 21, 2024 00:48:48.814172983 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.814224005 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.828305960 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.828418016 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.833600998 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.833611965 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.833645105 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.833678007 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.833712101 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.833744049 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.835532904 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.835588932 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.836488008 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.836555958 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.836563110 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.836659908 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.836704969 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.836710930 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.836810112 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.836867094 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.836872101 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837004900 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837059021 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.837064981 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837177038 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837294102 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837338924 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.837344885 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837388039 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.837393045 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837513924 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837558031 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.837563992 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837686062 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837781906 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837831020 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.837836981 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.837891102 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.837897062 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.838016033 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.838068962 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.838074923 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.838213921 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.838263988 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.838269949 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.838388920 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.838439941 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.838447094 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.838535070 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.838582993 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.838587999 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.838682890 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.838732004 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.838737965 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.839029074 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.839081049 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.840831041 CEST	49803	443	192.168.2.4	178.154.131.217
Sep 21, 2024 00:48:48.840852976 CEST	443	49803	178.154.131.217	192.168.2.4
Sep 21, 2024 00:48:48.849618912 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.849689007 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.863809109 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.863876104 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.870465040 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.870552063 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.879436970 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.879508018 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.879522085 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.881839037 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.891376019 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.891465902 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.893174887 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.893229961 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.893249035 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.893258095 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.893317938 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.893352985 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.893366098 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.893378019 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.893393993 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.893543005 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.893582106 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.893611908 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.893625975 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.893631935 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.893651009 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.894354105 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.894388914 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.894443989 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.894450903 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.894506931 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.894536018 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.894547939 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.894556046 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.894578934 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.895206928 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.895252943 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.895288944 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.895301104 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.895308018 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.895349026 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.895354033 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.895401955 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.896064043 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.896116972 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.896158934 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.896179914 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.896184921 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.896858931 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.896909952 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.896915913 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.896956921 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.897130013 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.897177935 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.902765036 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.913477898 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.913542032 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.913548946 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.927686930 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.927772999 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.927779913 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.937618971 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.937685013 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.937693119 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.950751066 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.950819969 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.950829029 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.960602999 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.960684061 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.960691929 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.963650942 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.963752031 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:48.963809013 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:48.965853930 CEST	443	49809	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.968549967 CEST	443	49810	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.983659029 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.983748913 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.983793974 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.983833075 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.983853102 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.983867884 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.983887911 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:48.984036922 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:48.985883951 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.010242939 CEST	49809	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.010330915 CEST	49810	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.015610933 CEST	49810	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.015620947 CEST	443	49810	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.015767097 CEST	49809	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.015770912 CEST	443	49809	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.017122030 CEST	443	49810	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.017189980 CEST	443	49809	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.017745018 CEST	49810	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.017934084 CEST	443	49810	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.018110991 CEST	49809	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.018301010 CEST	443	49809	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.018695116 CEST	49810	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.018695116 CEST	49809	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.020250082 CEST	49816	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.020286083 CEST	443	49816	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.020369053 CEST	49816	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.020626068 CEST	49816	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.020637989 CEST	443	49816	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.023844004 CEST	49817	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.023905993 CEST	443	49817	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.023992062 CEST	49817	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.024425983 CEST	49817	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.024442911 CEST	443	49817	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.030595064 CEST	49818	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.030631065 CEST	443	49818	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.030941963 CEST	49804	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.030956030 CEST	443	49804	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.030975103 CEST	49818	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.032371044 CEST	49818	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.032398939 CEST	443	49818	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.033373117 CEST	49806	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.033400059 CEST	443	49806	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.056420088 CEST	443	49813	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.056802034 CEST	49813	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.056853056 CEST	443	49813	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.057368040 CEST	443	49813	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.057424068 CEST	443	49814	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.058458090 CEST	49813	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.058578014 CEST	443	49813	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.058617115 CEST	49813	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.058832884 CEST	49814	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.058847904 CEST	443	49814	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.058991909 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.059125900 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.059174061 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.059195042 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.059297085 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.059345961 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.059355021 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.059422970 CEST	443	49810	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.060065985 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.060126066 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.060137033 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.060225010 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.060291052 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.060301065 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.060374975 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.060444117 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.060452938 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.062422037 CEST	443	49814	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.062496901 CEST	49814	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.063107014 CEST	49814	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.063230038 CEST	49814	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.063240051 CEST	443	49814	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.063270092 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.063280106 CEST	443	49814	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.063318968 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.063332081 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.063401937 CEST	443	49809	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.099693060 CEST	49796	443	192.168.2.4	5.255.255.77
Sep 21, 2024 00:48:49.099734068 CEST	443	49796	5.255.255.77	192.168.2.4
Sep 21, 2024 00:48:49.103406906 CEST	443	49813	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.108505011 CEST	49813	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.108505011 CEST	49814	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.108534098 CEST	443	49814	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.151360035 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.151417971 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.151429892 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.151446104 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.151494980 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.151515007 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.151572943 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.151616096 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.151639938 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.151649952 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.151710033 CEST	49805	443	192.168.2.4	34.111.35.152
Sep 21, 2024 00:48:49.151710033 CEST	443	49805	34.111.35.152	192.168.2.4
Sep 21, 2024 00:48:49.151724100 CEST	443	49805	34.111.35.152	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 21, 2024 00:48:41.009799004 CEST	192.168.2.4	1.1.1.1	0x922	Standard query (0)	xn--r1a.website	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:41.010189056 CEST	192.168.2.4	1.1.1.1	0xbe0e	Standard query (0)	xn--r1a.website	65	IN (0x0001)	false
Sep 21, 2024 00:48:41.894876957 CEST	192.168.2.4	1.1.1.1	0xfbc	Standard query (0)	telegram.org	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:41.895031929 CEST	192.168.2.4	1.1.1.1	0x7b95	Standard query (0)	telegram.org	65	IN (0x0001)	false
Sep 21, 2024 00:48:42.519150019 CEST	192.168.2.4	1.1.1.1	0xbdcf	Standard query (0)	cdn4.cdn-telegram.org	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:42.519840002 CEST	192.168.2.4	1.1.1.1	0x996e	Standard query (0)	cdn4.cdn-telegram.org	65	IN (0x0001)	false
Sep 21, 2024 00:48:43.171294928 CEST	192.168.2.4	1.1.1.1	0xf48a	Standard query (0)	yandex.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:43.171430111 CEST	192.168.2.4	1.1.1.1	0x9a53	Standard query (0)	yandex.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:43.339571953 CEST	192.168.2.4	1.1.1.1	0x8a11	Standard query (0)	tttttt.me	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:43.339941025 CEST	192.168.2.4	1.1.1.1	0xbc89	Standard query (0)	tttttt.me	65	IN (0x0001)	false
Sep 21, 2024 00:48:43.990931988 CEST	192.168.2.4	1.1.1.1	0xfb34	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:43.992485046 CEST	192.168.2.4	1.1.1.1	0x4fa6	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:44.995623112 CEST	192.168.2.4	1.1.1.1	0x51b6	Standard query (0)	matchid.adfox.yandex.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:44.996262074 CEST	192.168.2.4	1.1.1.1	0x91ec	Standard query (0)	matchid.adfox.yandex.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:45.270891905 CEST	192.168.2.4	1.1.1.1	0x5037	Standard query (0)	ads.digitalcaramel.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:45.271085978 CEST	192.168.2.4	1.1.1.1	0xf790	Standard query (0)	ads.digitalcaramel.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:46.858130932 CEST	192.168.2.4	1.1.1.1	0xd655	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.858727932 CEST	192.168.2.4	1.1.1.1	0xd41e	Standard query (0)	ads.betweendigital.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:46.861112118 CEST	192.168.2.4	1.1.1.1	0x60ed	Standard query (0)	yhb.p.otm-r.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.861706018 CEST	192.168.2.4	1.1.1.1	0xf13f	Standard query (0)	yhb.p.otm-r.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:46.865180969 CEST	192.168.2.4	1.1.1.1	0x41b3	Standard query (0)	px.adhigh.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.866262913 CEST	192.168.2.4	1.1.1.1	0xb6fb	Standard query (0)	px.adhigh.net	65	IN (0x0001)	false
Sep 21, 2024 00:48:46.871016979 CEST	192.168.2.4	1.1.1.1	0x82ac	Standard query (0)	ad.mail.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.871535063 CEST	192.168.2.4	1.1.1.1	0xb3a2	Standard query (0)	ad.mail.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:46.877943993 CEST	192.168.2.4	1.1.1.1	0x6efb	Standard query (0)	ssp.bidvol.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.878592968 CEST	192.168.2.4	1.1.1.1	0x42ec	Standard query (0)	ssp.bidvol.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:46.885286093 CEST	192.168.2.4	1.1.1.1	0x48e3	Standard query (0)	ssp-rtb.sape.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.885880947 CEST	192.168.2.4	1.1.1.1	0x6f9b	Standard query (0)	ssp-rtb.sape.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:46.944216013 CEST	192.168.2.4	1.1.1.1	0xa928	Standard query (0)	exchange.buzzoola.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.944360018 CEST	192.168.2.4	1.1.1.1	0x19c5	Standard query (0)	exchange.buzzoola.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:46.949035883 CEST	192.168.2.4	1.1.1.1	0x44be	Standard query (0)	ssp.hybrid.ai	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.951864958 CEST	192.168.2.4	1.1.1.1	0xb177	Standard query (0)	ssp.hybrid.ai	65	IN (0x0001)	false
Sep 21, 2024 00:48:46.953259945 CEST	192.168.2.4	1.1.1.1	0x8aac	Standard query (0)	pb.adriver.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.953859091 CEST	192.168.2.4	1.1.1.1	0x84d6	Standard query (0)	pb.adriver.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:46.958986998 CEST	192.168.2.4	1.1.1.1	0xd00f	Standard query (0)	kimberlite.io	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.966989994 CEST	192.168.2.4	1.1.1.1	0xad67	Standard query (0)	kimberlite.io	65	IN (0x0001)	false
Sep 21, 2024 00:48:46.970611095 CEST	192.168.2.4	1.1.1.1	0x37f1	Standard query (0)	pbs.alfasense.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.972017050 CEST	192.168.2.4	1.1.1.1	0x6990	Standard query (0)	pbs.alfasense.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:47.098437071 CEST	192.168.2.4	1.1.1.1	0x8a5e	Standard query (0)	telegram.org	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.098968983 CEST	192.168.2.4	1.1.1.1	0xf9b7	Standard query (0)	telegram.org	65	IN (0x0001)	false
Sep 21, 2024 00:48:47.125104904 CEST	192.168.2.4	1.1.1.1	0xb1dd	Standard query (0)	cdn4.cdn-telegram.org	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.125612974 CEST	192.168.2.4	1.1.1.1	0x9dc0	Standard query (0)	cdn4.cdn-telegram.org	65	IN (0x0001)	false
Sep 21, 2024 00:48:47.136848927 CEST	192.168.2.4	1.1.1.1	0x5fbb	Standard query (0)	xn--r1a.website	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.137283087 CEST	192.168.2.4	1.1.1.1	0xc7c3	Standard query (0)	xn--r1a.website	65	IN (0x0001)	false
Sep 21, 2024 00:48:47.154694080 CEST	192.168.2.4	1.1.1.1	0xdd6a	Standard query (0)	yandex.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.155361891 CEST	192.168.2.4	1.1.1.1	0xf4f	Standard query (0)	yandex.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:47.191153049 CEST	192.168.2.4	1.1.1.1	0x3e5d	Standard query (0)	ads.digitalcaramel.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.191601992 CEST	192.168.2.4	1.1.1.1	0xae94	Standard query (0)	ads.digitalcaramel.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:47.198019981 CEST	192.168.2.4	1.1.1.1	0xddf4	Standard query (0)	matchid.adfox.yandex.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.198287010 CEST	192.168.2.4	1.1.1.1	0xe81c	Standard query (0)	matchid.adfox.yandex.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:47.556885958 CEST	192.168.2.4	1.1.1.1	0xe89d	Standard query (0)	yastatic.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.557216883 CEST	192.168.2.4	1.1.1.1	0xb747	Standard query (0)	yastatic.net	65	IN (0x0001)	false
Sep 21, 2024 00:48:47.558099031 CEST	192.168.2.4	1.1.1.1	0xcf1e	Standard query (0)	avatars.mds.yandex.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.558617115 CEST	192.168.2.4	1.1.1.1	0xb665	Standard query (0)	avatars.mds.yandex.net	65	IN (0x0001)	false
Sep 21, 2024 00:48:47.559222937 CEST	192.168.2.4	1.1.1.1	0xc04f	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.559653997 CEST	192.168.2.4	1.1.1.1	0x39fa	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:47.694124937 CEST	192.168.2.4	1.1.1.1	0xaa77	Standard query (0)	ads.adfox.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.694344044 CEST	192.168.2.4	1.1.1.1	0x4198	Standard query (0)	ads.adfox.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:50.794557095 CEST	192.168.2.4	1.1.1.1	0xf2bc	Standard query (0)	yastatic.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:50.794776917 CEST	192.168.2.4	1.1.1.1	0x66a7	Standard query (0)	yastatic.net	65	IN (0x0001)	false
Sep 21, 2024 00:48:52.300386906 CEST	192.168.2.4	1.1.1.1	0x7a2c	Standard query (0)	cdn.alfasense.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:52.300563097 CEST	192.168.2.4	1.1.1.1	0x60e3	Standard query (0)	cdn.alfasense.net	65	IN (0x0001)	false
Sep 21, 2024 00:48:53.713361979 CEST	192.168.2.4	1.1.1.1	0x3d20	Standard query (0)	cdn.alfasense.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:53.713504076 CEST	192.168.2.4	1.1.1.1	0x311e	Standard query (0)	cdn.alfasense.net	65	IN (0x0001)	false
Sep 21, 2024 00:48:54.735884905 CEST	192.168.2.4	1.1.1.1	0x53e1	Standard query (0)	cs.alfasense.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:54.736051083 CEST	192.168.2.4	1.1.1.1	0xfffe	Standard query (0)	cs.alfasense.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:54.736368895 CEST	192.168.2.4	1.1.1.1	0x3ed7	Standard query (0)	cstatic.weborama.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:54.736490965 CEST	192.168.2.4	1.1.1.1	0xc641	Standard query (0)	cstatic.weborama.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:56.355576992 CEST	192.168.2.4	1.1.1.1	0x5c76	Standard query (0)	ad.adriver.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.355782986 CEST	192.168.2.4	1.1.1.1	0xda56	Standard query (0)	ad.adriver.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:56.356822014 CEST	192.168.2.4	1.1.1.1	0x48d4	Standard query (0)	const.uno	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.357748985 CEST	192.168.2.4	1.1.1.1	0x3811	Standard query (0)	const.uno	65	IN (0x0001)	false
Sep 21, 2024 00:48:56.359905005 CEST	192.168.2.4	1.1.1.1	0x5209	Standard query (0)	v.alfasrv.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.360335112 CEST	192.168.2.4	1.1.1.1	0xa809	Standard query (0)	v.alfasrv.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:56.361246109 CEST	192.168.2.4	1.1.1.1	0xa19a	Standard query (0)	dx.frontend.weborama.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.361728907 CEST	192.168.2.4	1.1.1.1	0xabac	Standard query (0)	dx.frontend.weborama.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:56.660367012 CEST	192.168.2.4	1.1.1.1	0x96db	Standard query (0)	ssp.otm-r.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.660836935 CEST	192.168.2.4	1.1.1.1	0x3b6b	Standard query (0)	ssp.otm-r.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:56.720676899 CEST	192.168.2.4	1.1.1.1	0xd386	Standard query (0)	cstatic.weborama.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.721018076 CEST	192.168.2.4	1.1.1.1	0x5606	Standard query (0)	cstatic.weborama.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:56.722801924 CEST	192.168.2.4	1.1.1.1	0xe4e5	Standard query (0)	cs.alfasense.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.723047972 CEST	192.168.2.4	1.1.1.1	0xad3f	Standard query (0)	cs.alfasense.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:57.386967897 CEST	192.168.2.4	1.1.1.1	0x71d7	Standard query (0)	ad.adriver.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.387159109 CEST	192.168.2.4	1.1.1.1	0x5cd2	Standard query (0)	ad.adriver.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:57.593131065 CEST	192.168.2.4	1.1.1.1	0xf0ff	Standard query (0)	v.alfasrv.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.593302011 CEST	192.168.2.4	1.1.1.1	0x4427	Standard query (0)	v.alfasrv.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:57.593858004 CEST	192.168.2.4	1.1.1.1	0xcdff	Standard query (0)	const.uno	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.593990088 CEST	192.168.2.4	1.1.1.1	0x4e65	Standard query (0)	const.uno	65	IN (0x0001)	false
Sep 21, 2024 00:48:57.619822979 CEST	192.168.2.4	1.1.1.1	0x5cb4	Standard query (0)	s.alfasrv.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.619991064 CEST	192.168.2.4	1.1.1.1	0x882e	Standard query (0)	s.alfasrv.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:57.620739937 CEST	192.168.2.4	1.1.1.1	0x816b	Standard query (0)	acint.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.620938063 CEST	192.168.2.4	1.1.1.1	0xbdcf	Standard query (0)	acint.net	65	IN (0x0001)	false
Sep 21, 2024 00:48:57.636575937 CEST	192.168.2.4	1.1.1.1	0x90a1	Standard query (0)	a.videohead.tech	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.636714935 CEST	192.168.2.4	1.1.1.1	0x2a09	Standard query (0)	a.videohead.tech	65	IN (0x0001)	false
Sep 21, 2024 00:48:57.637159109 CEST	192.168.2.4	1.1.1.1	0xc15e	Standard query (0)	s.suprion.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.637299061 CEST	192.168.2.4	1.1.1.1	0xf0da	Standard query (0)	s.suprion.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:57.637656927 CEST	192.168.2.4	1.1.1.1	0x1f0c	Standard query (0)	sync.bumlam.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.637789965 CEST	192.168.2.4	1.1.1.1	0x2ee9	Standard query (0)	sync.bumlam.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:57.638221979 CEST	192.168.2.4	1.1.1.1	0x5b93	Standard query (0)	sync.rambler.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.638411999 CEST	192.168.2.4	1.1.1.1	0x7f38	Standard query (0)	sync.rambler.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:57.638809919 CEST	192.168.2.4	1.1.1.1	0xe73c	Standard query (0)	www.acint.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.638925076 CEST	192.168.2.4	1.1.1.1	0x4216	Standard query (0)	www.acint.net	65	IN (0x0001)	false
Sep 21, 2024 00:48:58.913208961 CEST	192.168.2.4	1.1.1.1	0xc863	Standard query (0)	cs.agency2.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:58.913388014 CEST	192.168.2.4	1.1.1.1	0x69da	Standard query (0)	cs.agency2.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:59.011415005 CEST	192.168.2.4	1.1.1.1	0x8ff1	Standard query (0)	ssp.al-adtech.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.011588097 CEST	192.168.2.4	1.1.1.1	0x3beb	Standard query (0)	ssp.al-adtech.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:59.013665915 CEST	192.168.2.4	1.1.1.1	0xf4b0	Standard query (0)	sync.adspend.space	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.013943911 CEST	192.168.2.4	1.1.1.1	0x3db1	Standard query (0)	sync.adspend.space	65	IN (0x0001)	false
Sep 21, 2024 00:48:59.147279024 CEST	192.168.2.4	1.1.1.1	0x861	Standard query (0)	s.alfasrv.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.147527933 CEST	192.168.2.4	1.1.1.1	0x1257	Standard query (0)	s.alfasrv.com	65	IN (0x0001)	false
Sep 21, 2024 00:48:59.149167061 CEST	192.168.2.4	1.1.1.1	0xd75a	Standard query (0)	sync.rambler.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.149391890 CEST	192.168.2.4	1.1.1.1	0x63f6	Standard query (0)	sync.rambler.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:59.152268887 CEST	192.168.2.4	1.1.1.1	0xcf72	Standard query (0)	s.suprion.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.152407885 CEST	192.168.2.4	1.1.1.1	0x582b	Standard query (0)	s.suprion.ru	65	IN (0x0001)	false
Sep 21, 2024 00:48:59.656200886 CEST	192.168.2.4	1.1.1.1	0x5e9	Standard query (0)	sync.bumlam.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.656492949 CEST	192.168.2.4	1.1.1.1	0x13a9	Standard query (0)	sync.bumlam.com	65	IN (0x0001)	false
Sep 21, 2024 00:49:00.050960064 CEST	192.168.2.4	1.1.1.1	0xd8cd	Standard query (0)	a.adiam.tech	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.052329063 CEST	192.168.2.4	1.1.1.1	0x11c7	Standard query (0)	a.adiam.tech	65	IN (0x0001)	false
Sep 21, 2024 00:49:00.490612984 CEST	192.168.2.4	1.1.1.1	0x33f0	Standard query (0)	x01.aidata.io	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.490739107 CEST	192.168.2.4	1.1.1.1	0xf578	Standard query (0)	x01.aidata.io	65	IN (0x0001)	false
Sep 21, 2024 00:49:00.563636065 CEST	192.168.2.4	1.1.1.1	0x3583	Standard query (0)	alfasense-sync.rutarget.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.563904047 CEST	192.168.2.4	1.1.1.1	0x93ac	Standard query (0)	alfasense-sync.rutarget.ru	65	IN (0x0001)	false
Sep 21, 2024 00:49:00.794091940 CEST	192.168.2.4	1.1.1.1	0x2dad	Standard query (0)	mc.acint.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.794209003 CEST	192.168.2.4	1.1.1.1	0x8253	Standard query (0)	mc.acint.net	65	IN (0x0001)	false
Sep 21, 2024 00:49:00.904794931 CEST	192.168.2.4	1.1.1.1	0xf657	Standard query (0)	sm.rtb.mts.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.904932022 CEST	192.168.2.4	1.1.1.1	0x9afd	Standard query (0)	sm.rtb.mts.ru	65	IN (0x0001)	false
Sep 21, 2024 00:49:01.353035927 CEST	192.168.2.4	1.1.1.1	0xb9e0	Standard query (0)	a.utraff.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.353327036 CEST	192.168.2.4	1.1.1.1	0xf51c	Standard query (0)	a.utraff.com	65	IN (0x0001)	false
Sep 21, 2024 00:49:01.392610073 CEST	192.168.2.4	1.1.1.1	0x2090	Standard query (0)	ev.adriver.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.393059015 CEST	192.168.2.4	1.1.1.1	0x542d	Standard query (0)	ev.adriver.ru	65	IN (0x0001)	false
Sep 21, 2024 00:49:01.867459059 CEST	192.168.2.4	1.1.1.1	0x986c	Standard query (0)	match.ohmy.bid	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.867626905 CEST	192.168.2.4	1.1.1.1	0x9602	Standard query (0)	match.ohmy.bid	65	IN (0x0001)	false
Sep 21, 2024 00:49:02.132419109 CEST	192.168.2.4	1.1.1.1	0xa394	Standard query (0)	vma.mts.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.132819891 CEST	192.168.2.4	1.1.1.1	0x685a	Standard query (0)	vma.mts.ru	65	IN (0x0001)	false
Sep 21, 2024 00:49:02.137789965 CEST	192.168.2.4	1.1.1.1	0x8f51	Standard query (0)	rtb.segmel.io	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.138155937 CEST	192.168.2.4	1.1.1.1	0x464a	Standard query (0)	rtb.segmel.io	65	IN (0x0001)	false
Sep 21, 2024 00:49:02.178440094 CEST	192.168.2.4	1.1.1.1	0x6e1b	Standard query (0)	tttttt.me	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.178572893 CEST	192.168.2.4	1.1.1.1	0xf027	Standard query (0)	tttttt.me	65	IN (0x0001)	false
Sep 21, 2024 00:49:02.923676968 CEST	192.168.2.4	1.1.1.1	0x5447	Standard query (0)	sync.opendsp.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.923810005 CEST	192.168.2.4	1.1.1.1	0x3a53	Standard query (0)	sync.opendsp.ru	65	IN (0x0001)	false
Sep 21, 2024 00:49:02.926502943 CEST	192.168.2.4	1.1.1.1	0x9a7	Standard query (0)	match.ohmy.bid	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.926654100 CEST	192.168.2.4	1.1.1.1	0x25e5	Standard query (0)	match.ohmy.bid	65	IN (0x0001)	false
Sep 21, 2024 00:49:03.023029089 CEST	192.168.2.4	1.1.1.1	0xce60	Standard query (0)	s.uuidksinc.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.023495913 CEST	192.168.2.4	1.1.1.1	0xf7ec	Standard query (0)	s.uuidksinc.net	65	IN (0x0001)	false
Sep 21, 2024 00:49:03.175895929 CEST	192.168.2.4	1.1.1.1	0x2a94	Standard query (0)	cm.a.mts.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.176109076 CEST	192.168.2.4	1.1.1.1	0x8c52	Standard query (0)	cm.a.mts.ru	65	IN (0x0001)	false
Sep 21, 2024 00:49:03.255531073 CEST	192.168.2.4	1.1.1.1	0x62a6	Standard query (0)	match.new-programmatic.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.255831003 CEST	192.168.2.4	1.1.1.1	0xace8	Standard query (0)	match.new-programmatic.com	65	IN (0x0001)	false
Sep 21, 2024 00:49:03.607976913 CEST	192.168.2.4	1.1.1.1	0xee90	Standard query (0)	rtb.dynotech.io	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.608163118 CEST	192.168.2.4	1.1.1.1	0x7a68	Standard query (0)	rtb.dynotech.io	65	IN (0x0001)	false
Sep 21, 2024 00:49:03.906121016 CEST	192.168.2.4	1.1.1.1	0xb774	Standard query (0)	2348964281726872543783.cm.a.mts.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.906409025 CEST	192.168.2.4	1.1.1.1	0xa457	Standard query (0)	2348964281726872543783.cm.a.mts.ru	65	IN (0x0001)	false
Sep 21, 2024 00:49:04.993149996 CEST	192.168.2.4	1.1.1.1	0xa56f	Standard query (0)	sync.dmp.otm-r.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:04.996305943 CEST	192.168.2.4	1.1.1.1	0xd613	Standard query (0)	sync.dmp.otm-r.com	65	IN (0x0001)	false
Sep 21, 2024 00:49:05.009735107 CEST	192.168.2.4	1.1.1.1	0x4396	Standard query (0)	sync.programmatica.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.010236025 CEST	192.168.2.4	1.1.1.1	0x831c	Standard query (0)	sync.programmatica.com	65	IN (0x0001)	false
Sep 21, 2024 00:49:05.718784094 CEST	192.168.2.4	1.1.1.1	0x67bf	Standard query (0)	telegram.org	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.719084024 CEST	192.168.2.4	1.1.1.1	0x9106	Standard query (0)	telegram.org	65	IN (0x0001)	false
Sep 21, 2024 00:49:05.814697027 CEST	192.168.2.4	1.1.1.1	0xa71e	Standard query (0)	sape-sync.rutarget.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.815110922 CEST	192.168.2.4	1.1.1.1	0xdb32	Standard query (0)	sape-sync.rutarget.ru	65	IN (0x0001)	false
Sep 21, 2024 00:49:05.871541023 CEST	192.168.2.4	1.1.1.1	0xc62e	Standard query (0)	match.qtarget.tech	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.872152090 CEST	192.168.2.4	1.1.1.1	0xcfae	Standard query (0)	match.qtarget.tech	65	IN (0x0001)	false
Sep 21, 2024 00:49:06.172708988 CEST	192.168.2.4	1.1.1.1	0xef9d	Standard query (0)	sync.upravel.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:06.173342943 CEST	192.168.2.4	1.1.1.1	0xcf13	Standard query (0)	sync.upravel.com	65	IN (0x0001)	false
Sep 21, 2024 00:49:06.620522976 CEST	192.168.2.4	1.1.1.1	0xe187	Standard query (0)	telegram.org	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:06.620857954 CEST	192.168.2.4	1.1.1.1	0x6e13	Standard query (0)	telegram.org	65	IN (0x0001)	false
Sep 21, 2024 00:49:08.124876976 CEST	192.168.2.4	1.1.1.1	0x354c	Standard query (0)	ads.alfasense.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:08.125602961 CEST	192.168.2.4	1.1.1.1	0xfa2f	Standard query (0)	ads.alfasense.net	65	IN (0x0001)	false
Sep 21, 2024 00:49:08.268285990 CEST	192.168.2.4	1.1.1.1	0x4d0c	Standard query (0)	dmp.sbermarketing.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:08.268691063 CEST	192.168.2.4	1.1.1.1	0x6bd6	Standard query (0)	dmp.sbermarketing.ru	65	IN (0x0001)	false
Sep 21, 2024 00:49:08.408729076 CEST	192.168.2.4	1.1.1.1	0xa207	Standard query (0)	sync.gonet-ads.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:08.409115076 CEST	192.168.2.4	1.1.1.1	0x5510	Standard query (0)	sync.gonet-ads.com	65	IN (0x0001)	false
Sep 21, 2024 00:49:10.859169006 CEST	192.168.2.4	1.1.1.1	0x803f	Standard query (0)	solta-sync.rutarget.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.859446049 CEST	192.168.2.4	1.1.1.1	0x5fbb	Standard query (0)	solta-sync.rutarget.ru	65	IN (0x0001)	false
Sep 21, 2024 00:49:10.863418102 CEST	192.168.2.4	1.1.1.1	0xbf86	Standard query (0)	1a499899-1e99-4cfb-8b72-6faaa7f572f3.sync.upravel.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.863790035 CEST	192.168.2.4	1.1.1.1	0x1713	Standard query (0)	1a499899-1e99-4cfb-8b72-6faaa7f572f3.sync.upravel.com	65	IN (0x0001)	false
Sep 21, 2024 00:49:10.898597956 CEST	192.168.2.4	1.1.1.1	0xd6bf	Standard query (0)	www.acint.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.898597956 CEST	192.168.2.4	1.1.1.1	0xa636	Standard query (0)	www.acint.net	65	IN (0x0001)	false
Sep 21, 2024 00:49:11.110979080 CEST	192.168.2.4	1.1.1.1	0x38ca	Standard query (0)	ads.alfasense.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:11.111301899 CEST	192.168.2.4	1.1.1.1	0xf409	Standard query (0)	ads.alfasense.net	65	IN (0x0001)	false
Sep 21, 2024 00:49:11.114784956 CEST	192.168.2.4	1.1.1.1	0x88ef	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:11.115433931 CEST	192.168.2.4	1.1.1.1	0x446e	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Sep 21, 2024 00:49:11.129396915 CEST	192.168.2.4	1.1.1.1	0x4c9e	Standard query (0)	dmp.sbermarketing.ru	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:11.129396915 CEST	192.168.2.4	1.1.1.1	0x72ac	Standard query (0)	dmp.sbermarketing.ru	65	IN (0x0001)	false
Sep 21, 2024 00:49:12.818418980 CEST	192.168.2.4	1.1.1.1	0xe605	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:12.818969011 CEST	192.168.2.4	1.1.1.1	0x10b8	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Sep 21, 2024 00:49:13.706389904 CEST	192.168.2.4	1.1.1.1	0xa332	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:13.706569910 CEST	192.168.2.4	1.1.1.1	0xe524	Standard query (0)	ads.betweendigital.com	65	IN (0x0001)	false
Sep 21, 2024 00:49:20.733154058 CEST	192.168.2.4	1.1.1.1	0xe166	Standard query (0)	ssp.otm-r.com	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:20.736579895 CEST	192.168.2.4	1.1.1.1	0xab65	Standard query (0)	ssp.otm-r.com	65	IN (0x0001)	false
Sep 21, 2024 00:49:53.076643944 CEST	192.168.2.4	1.1.1.1	0x97c3	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:53.076994896 CEST	192.168.2.4	1.1.1.1	0x9832	Standard query (0)	t.me	65	IN (0x0001)	false
Sep 21, 2024 00:49:54.711735010 CEST	192.168.2.4	1.1.1.1	0xe1e4	Standard query (0)	telegram.org	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:54.712270021 CEST	192.168.2.4	1.1.1.1	0x642e	Standard query (0)	telegram.org	65	IN (0x0001)	false
Sep 21, 2024 00:49:54.714282990 CEST	192.168.2.4	1.1.1.1	0x84a0	Standard query (0)	cdn4.cdn-telegram.org	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:54.714540005 CEST	192.168.2.4	1.1.1.1	0xdaf9	Standard query (0)	cdn4.cdn-telegram.org	65	IN (0x0001)	false
Sep 21, 2024 00:49:54.715838909 CEST	192.168.2.4	1.1.1.1	0x18be	Standard query (0)	oauth.tg.dev	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:54.716284037 CEST	192.168.2.4	1.1.1.1	0x6e58	Standard query (0)	oauth.tg.dev	65	IN (0x0001)	false
Sep 21, 2024 00:49:59.154608011 CEST	192.168.2.4	1.1.1.1	0x1ba9	Standard query (0)	oauth.tg.dev	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:59.154961109 CEST	192.168.2.4	1.1.1.1	0x3005	Standard query (0)	oauth.tg.dev	65	IN (0x0001)	false
Sep 21, 2024 00:49:59.226350069 CEST	192.168.2.4	1.1.1.1	0xdd0f	Standard query (0)	t.me	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:59.226672888 CEST	192.168.2.4	1.1.1.1	0x6c8f	Standard query (0)	t.me	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 21, 2024 00:48:41.020117998 CEST	1.1.1.1	192.168.2.4	0x922	No error (0)	xn--r1a.website		95.216.186.40	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:41.902725935 CEST	1.1.1.1	192.168.2.4	0xfbc	No error (0)	telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:42.526755095 CEST	1.1.1.1	192.168.2.4	0xbdcf	No error (0)	cdn4.cdn-telegram.org		34.111.35.152	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:43.177886009 CEST	1.1.1.1	192.168.2.4	0xf48a	No error (0)	yandex.ru		77.88.55.88	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:43.177886009 CEST	1.1.1.1	192.168.2.4	0xf48a	No error (0)	yandex.ru		77.88.44.55	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:43.177886009 CEST	1.1.1.1	192.168.2.4	0xf48a	No error (0)	yandex.ru		5.255.255.77	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:43.348427057 CEST	1.1.1.1	192.168.2.4	0xbc89	No error (0)	tttttt.me			65	IN (0x0001)	false
Sep 21, 2024 00:48:43.348592043 CEST	1.1.1.1	192.168.2.4	0x8a11	No error (0)	tttttt.me		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:43.348592043 CEST	1.1.1.1	192.168.2.4	0x8a11	No error (0)	tttttt.me		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:43.997575045 CEST	1.1.1.1	192.168.2.4	0xfb34	No error (0)	www.google.com		142.250.185.68	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:43.998975992 CEST	1.1.1.1	192.168.2.4	0x4fa6	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 21, 2024 00:48:45.004148960 CEST	1.1.1.1	192.168.2.4	0x51b6	No error (0)	matchid.adfox.yandex.ru	matchid-production.adfox.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:45.004148960 CEST	1.1.1.1	192.168.2.4	0x51b6	No error (0)	matchid-production.adfox.yandex.ru		93.158.134.118	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:45.004163980 CEST	1.1.1.1	192.168.2.4	0x91ec	No error (0)	matchid.adfox.yandex.ru	matchid-production.adfox.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:45.277818918 CEST	1.1.1.1	192.168.2.4	0x5037	No error (0)	ads.digitalcaramel.com		135.181.113.151	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.864713907 CEST	1.1.1.1	192.168.2.4	0xd655	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:46.864713907 CEST	1.1.1.1	192.168.2.4	0xd655	No error (0)	ssp.ads.betweendigital.com		188.42.34.65	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.864713907 CEST	1.1.1.1	192.168.2.4	0xd655	No error (0)	ssp.ads.betweendigital.com		188.42.189.197	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.864713907 CEST	1.1.1.1	192.168.2.4	0xd655	No error (0)	ssp.ads.betweendigital.com		188.42.191.196	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.864713907 CEST	1.1.1.1	192.168.2.4	0xd655	No error (0)	ssp.ads.betweendigital.com		188.42.189.231	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.864713907 CEST	1.1.1.1	192.168.2.4	0xd655	No error (0)	ssp.ads.betweendigital.com		188.42.196.115	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.864713907 CEST	1.1.1.1	192.168.2.4	0xd655	No error (0)	ssp.ads.betweendigital.com		188.42.34.64	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.865479946 CEST	1.1.1.1	192.168.2.4	0xd41e	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:46.867816925 CEST	1.1.1.1	192.168.2.4	0x60ed	No error (0)	yhb.p.otm-r.com	ad-ru.p.otm-r.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:46.867816925 CEST	1.1.1.1	192.168.2.4	0x60ed	No error (0)	ad-ru.p.otm-r.com		194.55.244.177	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.867816925 CEST	1.1.1.1	192.168.2.4	0x60ed	No error (0)	ad-ru.p.otm-r.com		194.55.244.183	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.867816925 CEST	1.1.1.1	192.168.2.4	0x60ed	No error (0)	ad-ru.p.otm-r.com		194.55.244.180	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.867816925 CEST	1.1.1.1	192.168.2.4	0x60ed	No error (0)	ad-ru.p.otm-r.com		194.55.244.181	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.867816925 CEST	1.1.1.1	192.168.2.4	0x60ed	No error (0)	ad-ru.p.otm-r.com		194.55.244.186	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.867816925 CEST	1.1.1.1	192.168.2.4	0x60ed	No error (0)	ad-ru.p.otm-r.com		194.55.244.182	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.867816925 CEST	1.1.1.1	192.168.2.4	0x60ed	No error (0)	ad-ru.p.otm-r.com		194.55.244.178	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.867816925 CEST	1.1.1.1	192.168.2.4	0x60ed	No error (0)	ad-ru.p.otm-r.com		194.55.244.185	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.867816925 CEST	1.1.1.1	192.168.2.4	0x60ed	No error (0)	ad-ru.p.otm-r.com		194.55.244.184	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.867816925 CEST	1.1.1.1	192.168.2.4	0x60ed	No error (0)	ad-ru.p.otm-r.com		194.55.244.179	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.868958950 CEST	1.1.1.1	192.168.2.4	0xf13f	No error (0)	yhb.p.otm-r.com	ad-ru.p.otm-r.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:46.877906084 CEST	1.1.1.1	192.168.2.4	0x82ac	No error (0)	ad.mail.ru	r.mail.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:46.877906084 CEST	1.1.1.1	192.168.2.4	0x82ac	No error (0)	r.mail.ru		95.163.41.56	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.878851891 CEST	1.1.1.1	192.168.2.4	0xb3a2	No error (0)	ad.mail.ru	r.mail.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:46.886086941 CEST	1.1.1.1	192.168.2.4	0x6efb	No error (0)	ssp.bidvol.com		65.109.23.99	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.886086941 CEST	1.1.1.1	192.168.2.4	0x6efb	No error (0)	ssp.bidvol.com		65.109.111.89	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.886086941 CEST	1.1.1.1	192.168.2.4	0x6efb	No error (0)	ssp.bidvol.com		65.109.65.188	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.886086941 CEST	1.1.1.1	192.168.2.4	0x6efb	No error (0)	ssp.bidvol.com		65.109.65.187	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.222	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.213	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.223	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.24	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.210	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.212	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.211	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.218	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.217	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.224	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.216	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.25	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.219	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.215	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.892437935 CEST	1.1.1.1	192.168.2.4	0x48e3	No error (0)	ssp-rtb.sape.ru		193.3.184.214	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.955555916 CEST	1.1.1.1	192.168.2.4	0x44be	No error (0)	ssp.hybrid.ai		37.230.131.17	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.960647106 CEST	1.1.1.1	192.168.2.4	0x8aac	No error (0)	pb.adriver.ru		195.209.109.24	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.965507030 CEST	1.1.1.1	192.168.2.4	0xd00f	No error (0)	kimberlite.io		217.199.220.44	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.965507030 CEST	1.1.1.1	192.168.2.4	0xd00f	No error (0)	kimberlite.io		217.199.220.43	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.977355957 CEST	1.1.1.1	192.168.2.4	0x37f1	No error (0)	pbs.alfasense.com		23.111.112.116	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.977355957 CEST	1.1.1.1	192.168.2.4	0x37f1	No error (0)	pbs.alfasense.com		23.111.119.116	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:46.977355957 CEST	1.1.1.1	192.168.2.4	0x37f1	No error (0)	pbs.alfasense.com		23.111.112.124	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.105113029 CEST	1.1.1.1	192.168.2.4	0x8a5e	No error (0)	telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.131649971 CEST	1.1.1.1	192.168.2.4	0xb1dd	No error (0)	cdn4.cdn-telegram.org		34.111.35.152	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.144162893 CEST	1.1.1.1	192.168.2.4	0x5fbb	No error (0)	xn--r1a.website		95.216.186.40	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.161205053 CEST	1.1.1.1	192.168.2.4	0xdd6a	No error (0)	yandex.ru		5.255.255.77	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.161205053 CEST	1.1.1.1	192.168.2.4	0xdd6a	No error (0)	yandex.ru		77.88.55.88	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.161205053 CEST	1.1.1.1	192.168.2.4	0xdd6a	No error (0)	yandex.ru		77.88.44.55	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.205403090 CEST	1.1.1.1	192.168.2.4	0xddf4	No error (0)	matchid.adfox.yandex.ru	matchid-production.adfox.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:47.205403090 CEST	1.1.1.1	192.168.2.4	0xddf4	No error (0)	matchid-production.adfox.yandex.ru		93.158.134.118	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.206060886 CEST	1.1.1.1	192.168.2.4	0xe81c	No error (0)	matchid.adfox.yandex.ru	matchid-production.adfox.yandex.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:47.210386038 CEST	1.1.1.1	192.168.2.4	0x3e5d	No error (0)	ads.digitalcaramel.com		135.181.113.151	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.563873053 CEST	1.1.1.1	192.168.2.4	0xe89d	No error (0)	yastatic.net		178.154.131.217	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.563873053 CEST	1.1.1.1	192.168.2.4	0xe89d	No error (0)	yastatic.net		178.154.131.215	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.565099001 CEST	1.1.1.1	192.168.2.4	0xcf1e	No error (0)	avatars.mds.yandex.net		87.250.247.183	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.565099001 CEST	1.1.1.1	192.168.2.4	0xcf1e	No error (0)	avatars.mds.yandex.net		87.250.247.181	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.565099001 CEST	1.1.1.1	192.168.2.4	0xcf1e	No error (0)	avatars.mds.yandex.net		87.250.247.182	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.566257954 CEST	1.1.1.1	192.168.2.4	0xc04f	No error (0)	mc.yandex.ru		77.88.21.119	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.566257954 CEST	1.1.1.1	192.168.2.4	0xc04f	No error (0)	mc.yandex.ru		87.250.251.119	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.566257954 CEST	1.1.1.1	192.168.2.4	0xc04f	No error (0)	mc.yandex.ru		93.158.134.119	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.566257954 CEST	1.1.1.1	192.168.2.4	0xc04f	No error (0)	mc.yandex.ru		87.250.250.119	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:47.701195955 CEST	1.1.1.1	192.168.2.4	0xaa77	No error (0)	ads.adfox.ru		77.88.21.179	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:50.801544905 CEST	1.1.1.1	192.168.2.4	0xf2bc	No error (0)	yastatic.net		178.154.131.215	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:50.801544905 CEST	1.1.1.1	192.168.2.4	0xf2bc	No error (0)	yastatic.net		178.154.131.217	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:52.307421923 CEST	1.1.1.1	192.168.2.4	0x60e3	No error (0)	cdn.alfasense.net	cl-541e19d9.mf.cdnmgf.megafon.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:52.307488918 CEST	1.1.1.1	192.168.2.4	0x7a2c	No error (0)	cdn.alfasense.net	cl-541e19d9.mf.cdnmgf.megafon.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:52.307488918 CEST	1.1.1.1	192.168.2.4	0x7a2c	No error (0)	cl-541e19d9.mf.cdnmgf.megafon.ru		5.101.37.37	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:52.510286093 CEST	1.1.1.1	192.168.2.4	0x98e5	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:52.510286093 CEST	1.1.1.1	192.168.2.4	0x98e5	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:53.720558882 CEST	1.1.1.1	192.168.2.4	0x311e	No error (0)	cdn.alfasense.net	cl-541e19d9.mf.cdnmgf.megafon.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:53.720911980 CEST	1.1.1.1	192.168.2.4	0x3d20	No error (0)	cdn.alfasense.net	cl-541e19d9.mf.cdnmgf.megafon.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:53.720911980 CEST	1.1.1.1	192.168.2.4	0x3d20	No error (0)	cl-541e19d9.mf.cdnmgf.megafon.ru		5.101.37.37	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:54.496303082 CEST	1.1.1.1	192.168.2.4	0x4dbd	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:54.496303082 CEST	1.1.1.1	192.168.2.4	0x4dbd	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:54.744061947 CEST	1.1.1.1	192.168.2.4	0x53e1	No error (0)	cs.alfasense.com		23.111.100.20	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:54.744508982 CEST	1.1.1.1	192.168.2.4	0x3ed7	No error (0)	cstatic.weborama.com	cs1755.wpc.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:54.744508982 CEST	1.1.1.1	192.168.2.4	0x3ed7	No error (0)	cs1755.wpc.deltacdn.net		192.229.202.216	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:54.744838953 CEST	1.1.1.1	192.168.2.4	0xc641	No error (0)	cstatic.weborama.com	cs1755.wpc.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:56.362941980 CEST	1.1.1.1	192.168.2.4	0x5c76	No error (0)	ad.adriver.ru		195.209.109.15	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.362941980 CEST	1.1.1.1	192.168.2.4	0x5c76	No error (0)	ad.adriver.ru		195.209.109.14	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.362941980 CEST	1.1.1.1	192.168.2.4	0x5c76	No error (0)	ad.adriver.ru		195.209.109.17	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.362941980 CEST	1.1.1.1	192.168.2.4	0x5c76	No error (0)	ad.adriver.ru		195.209.109.13	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.362941980 CEST	1.1.1.1	192.168.2.4	0x5c76	No error (0)	ad.adriver.ru		195.209.109.11	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.362941980 CEST	1.1.1.1	192.168.2.4	0x5c76	No error (0)	ad.adriver.ru		195.209.109.10	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.362941980 CEST	1.1.1.1	192.168.2.4	0x5c76	No error (0)	ad.adriver.ru		195.209.109.12	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.362941980 CEST	1.1.1.1	192.168.2.4	0x5c76	No error (0)	ad.adriver.ru		195.209.109.16	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.363470078 CEST	1.1.1.1	192.168.2.4	0x48d4	No error (0)	const.uno		95.163.84.7	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.388876915 CEST	1.1.1.1	192.168.2.4	0xa19a	No error (0)	dx.frontend.weborama.com		34.111.205.194	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.405466080 CEST	1.1.1.1	192.168.2.4	0x5209	No error (0)	v.alfasrv.com		84.201.179.252	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.668586969 CEST	1.1.1.1	192.168.2.4	0x3b6b	No error (0)	ssp.otm-r.com	pub-eu.p.otm-r.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:56.668586969 CEST	1.1.1.1	192.168.2.4	0x3b6b	No error (0)	pub-eu.p.otm-r.com	ad-eu.p.otm-r.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:56.727669001 CEST	1.1.1.1	192.168.2.4	0xd386	No error (0)	cstatic.weborama.com	cs1755.wpc.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:56.727669001 CEST	1.1.1.1	192.168.2.4	0xd386	No error (0)	cs1755.wpc.deltacdn.net		192.229.202.216	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:56.730349064 CEST	1.1.1.1	192.168.2.4	0x5606	No error (0)	cstatic.weborama.com	cs1755.wpc.deltacdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:56.730384111 CEST	1.1.1.1	192.168.2.4	0xe4e5	No error (0)	cs.alfasense.com		23.111.100.20	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.396548986 CEST	1.1.1.1	192.168.2.4	0x71d7	No error (0)	ad.adriver.ru		195.209.109.13	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.396548986 CEST	1.1.1.1	192.168.2.4	0x71d7	No error (0)	ad.adriver.ru		195.209.109.11	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.396548986 CEST	1.1.1.1	192.168.2.4	0x71d7	No error (0)	ad.adriver.ru		195.209.109.14	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.396548986 CEST	1.1.1.1	192.168.2.4	0x71d7	No error (0)	ad.adriver.ru		195.209.109.10	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.396548986 CEST	1.1.1.1	192.168.2.4	0x71d7	No error (0)	ad.adriver.ru		195.209.109.15	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.396548986 CEST	1.1.1.1	192.168.2.4	0x71d7	No error (0)	ad.adriver.ru		195.209.109.12	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.396548986 CEST	1.1.1.1	192.168.2.4	0x71d7	No error (0)	ad.adriver.ru		195.209.109.16	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.396548986 CEST	1.1.1.1	192.168.2.4	0x71d7	No error (0)	ad.adriver.ru		195.209.109.17	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.600414991 CEST	1.1.1.1	192.168.2.4	0xcdff	No error (0)	const.uno		95.163.84.7	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.600963116 CEST	1.1.1.1	192.168.2.4	0xf0ff	No error (0)	v.alfasrv.com		84.201.179.252	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.626904964 CEST	1.1.1.1	192.168.2.4	0x5cb4	No error (0)	s.alfasrv.com		130.193.42.23	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		142.132.138.214	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		193.3.184.131	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		193.3.184.135	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		193.3.184.140	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		193.3.184.16	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		193.3.184.137	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		193.3.184.7	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		142.132.138.213	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		142.132.138.212	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		193.3.184.130	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		193.3.184.139	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.627819061 CEST	1.1.1.1	192.168.2.4	0x816b	No error (0)	acint.net		142.132.138.215	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.644184113 CEST	1.1.1.1	192.168.2.4	0x2a09	No error (0)	a.videohead.tech			65	IN (0x0001)	false
Sep 21, 2024 00:48:57.644258976 CEST	1.1.1.1	192.168.2.4	0x90a1	No error (0)	a.videohead.tech		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.644258976 CEST	1.1.1.1	192.168.2.4	0x90a1	No error (0)	a.videohead.tech		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.644932032 CEST	1.1.1.1	192.168.2.4	0xc15e	No error (0)	s.suprion.ru		213.248.44.211	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.645207882 CEST	1.1.1.1	192.168.2.4	0x1f0c	No error (0)	sync.bumlam.com		31.172.81.146	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.645207882 CEST	1.1.1.1	192.168.2.4	0x1f0c	No error (0)	sync.bumlam.com		31.172.81.145	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.645207882 CEST	1.1.1.1	192.168.2.4	0x1f0c	No error (0)	sync.bumlam.com		31.172.81.147	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.645674944 CEST	1.1.1.1	192.168.2.4	0x5b93	No error (0)	sync.rambler.ru		87.242.127.163	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		142.132.138.212	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		142.132.138.213	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		142.132.138.214	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		193.3.184.140	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		142.132.138.215	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		193.3.184.130	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		193.3.184.16	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		193.3.184.131	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		193.3.184.135	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		193.3.184.7	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		193.3.184.139	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:57.646224976 CEST	1.1.1.1	192.168.2.4	0xe73c	No error (0)	www.acint.net		193.3.184.137	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:58.920520067 CEST	1.1.1.1	192.168.2.4	0xc863	No error (0)	cs.agency2.ru		23.105.255.196	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:58.920520067 CEST	1.1.1.1	192.168.2.4	0xc863	No error (0)	cs.agency2.ru		23.111.107.44	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.018865108 CEST	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	ssp.al-adtech.com	p-vip.al-adtech.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:59.018865108 CEST	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	p-vip.al-adtech.com		45.139.25.125	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.018865108 CEST	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	p-vip.al-adtech.com		45.139.25.120	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.018865108 CEST	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	p-vip.al-adtech.com		45.139.25.118	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.018865108 CEST	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	p-vip.al-adtech.com		45.139.25.123	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.018865108 CEST	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	p-vip.al-adtech.com		45.139.25.121	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.018865108 CEST	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	p-vip.al-adtech.com		45.139.25.122	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.018865108 CEST	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	p-vip.al-adtech.com		45.139.25.119	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.018865108 CEST	1.1.1.1	192.168.2.4	0x8ff1	No error (0)	p-vip.al-adtech.com		45.139.25.124	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.018919945 CEST	1.1.1.1	192.168.2.4	0x3beb	No error (0)	ssp.al-adtech.com	p-vip.al-adtech.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:48:59.020720005 CEST	1.1.1.1	192.168.2.4	0x3db1	No error (0)	sync.adspend.space			65	IN (0x0001)	false
Sep 21, 2024 00:48:59.022854090 CEST	1.1.1.1	192.168.2.4	0xf4b0	No error (0)	sync.adspend.space		172.67.69.82	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.022854090 CEST	1.1.1.1	192.168.2.4	0xf4b0	No error (0)	sync.adspend.space		104.26.15.28	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.022854090 CEST	1.1.1.1	192.168.2.4	0xf4b0	No error (0)	sync.adspend.space		104.26.14.28	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.154237986 CEST	1.1.1.1	192.168.2.4	0x861	No error (0)	s.alfasrv.com		130.193.42.23	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.155853987 CEST	1.1.1.1	192.168.2.4	0xd75a	No error (0)	sync.rambler.ru		87.242.127.163	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.159260988 CEST	1.1.1.1	192.168.2.4	0xcf72	No error (0)	s.suprion.ru		213.248.44.211	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.663280964 CEST	1.1.1.1	192.168.2.4	0x5e9	No error (0)	sync.bumlam.com		31.172.81.146	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.663280964 CEST	1.1.1.1	192.168.2.4	0x5e9	No error (0)	sync.bumlam.com		31.172.81.147	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:48:59.663280964 CEST	1.1.1.1	192.168.2.4	0x5e9	No error (0)	sync.bumlam.com		31.172.81.145	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.058552027 CEST	1.1.1.1	192.168.2.4	0xd8cd	No error (0)	a.adiam.tech		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.058552027 CEST	1.1.1.1	192.168.2.4	0xd8cd	No error (0)	a.adiam.tech		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.059703112 CEST	1.1.1.1	192.168.2.4	0x11c7	No error (0)	a.adiam.tech			65	IN (0x0001)	false
Sep 21, 2024 00:49:00.497833014 CEST	1.1.1.1	192.168.2.4	0x33f0	No error (0)	x01.aidata.io		89.108.119.28	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.497833014 CEST	1.1.1.1	192.168.2.4	0x33f0	No error (0)	x01.aidata.io		89.108.120.68	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.497833014 CEST	1.1.1.1	192.168.2.4	0x33f0	No error (0)	x01.aidata.io		89.108.119.43	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.497833014 CEST	1.1.1.1	192.168.2.4	0x33f0	No error (0)	x01.aidata.io		89.108.120.76	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.571026087 CEST	1.1.1.1	192.168.2.4	0x93ac	No error (0)	alfasense-sync.rutarget.ru	sync.rutarget.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:00.571026087 CEST	1.1.1.1	192.168.2.4	0x93ac	No error (0)	sync.rutarget.ru	balance.segmento.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	alfasense-sync.rutarget.ru	sync.rutarget.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	sync.rutarget.ru	balance.segmento.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		45.9.24.193	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		45.9.26.83	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		45.9.27.120	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		46.243.142.48	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		46.243.142.239	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		46.243.143.249	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		46.243.172.93	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		87.242.93.112	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		178.170.195.115	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		178.170.196.9	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		178.170.196.176	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		178.170.196.247	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		188.72.107.156	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		188.72.107.194	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		188.72.107.205	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.574057102 CEST	1.1.1.1	192.168.2.4	0x3583	No error (0)	balance.segmento.ru		188.72.107.228	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.801743984 CEST	1.1.1.1	192.168.2.4	0x8253	No error (0)	mc.acint.net	acint.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	mc.acint.net	acint.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		193.3.184.140	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		142.132.138.214	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		142.132.138.215	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		193.3.184.139	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		193.3.184.7	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		142.132.138.212	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		193.3.184.16	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		193.3.184.130	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		142.132.138.213	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		193.3.184.137	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		193.3.184.131	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.802148104 CEST	1.1.1.1	192.168.2.4	0x2dad	No error (0)	acint.net		193.3.184.135	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.911422968 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	sm.rtb.mts.ru		217.66.147.39	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.911422968 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	sm.rtb.mts.ru		217.66.147.38	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.911422968 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	sm.rtb.mts.ru		217.66.147.41	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.911422968 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	sm.rtb.mts.ru		217.66.147.33	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.911422968 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	sm.rtb.mts.ru		217.66.147.40	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.911422968 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	sm.rtb.mts.ru		217.66.147.35	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.911422968 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	sm.rtb.mts.ru		217.66.147.37	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.911422968 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	sm.rtb.mts.ru		217.66.147.42	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.911422968 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	sm.rtb.mts.ru		217.66.147.36	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:00.911422968 CEST	1.1.1.1	192.168.2.4	0xf657	No error (0)	sm.rtb.mts.ru		217.66.147.34	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.362349033 CEST	1.1.1.1	192.168.2.4	0xb9e0	No error (0)	a.utraff.com		104.26.6.189	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.362349033 CEST	1.1.1.1	192.168.2.4	0xb9e0	No error (0)	a.utraff.com		104.26.7.189	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.362349033 CEST	1.1.1.1	192.168.2.4	0xb9e0	No error (0)	a.utraff.com		172.67.74.180	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.362365007 CEST	1.1.1.1	192.168.2.4	0xf51c	No error (0)	a.utraff.com			65	IN (0x0001)	false
Sep 21, 2024 00:49:01.399305105 CEST	1.1.1.1	192.168.2.4	0x2090	No error (0)	ev.adriver.ru		195.209.109.27	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.399305105 CEST	1.1.1.1	192.168.2.4	0x2090	No error (0)	ev.adriver.ru		195.209.109.28	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.399305105 CEST	1.1.1.1	192.168.2.4	0x2090	No error (0)	ev.adriver.ru		195.209.109.26	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.399305105 CEST	1.1.1.1	192.168.2.4	0x2090	No error (0)	ev.adriver.ru		195.209.109.30	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.399305105 CEST	1.1.1.1	192.168.2.4	0x2090	No error (0)	ev.adriver.ru		195.209.109.29	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.874970913 CEST	1.1.1.1	192.168.2.4	0x986c	No error (0)	match.ohmy.bid		167.235.14.51	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.874970913 CEST	1.1.1.1	192.168.2.4	0x986c	No error (0)	match.ohmy.bid		167.235.9.235	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.874970913 CEST	1.1.1.1	192.168.2.4	0x986c	No error (0)	match.ohmy.bid		167.235.10.91	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:01.874970913 CEST	1.1.1.1	192.168.2.4	0x986c	No error (0)	match.ohmy.bid		167.235.10.90	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.138926983 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	vma.mts.ru		217.66.147.39	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.138926983 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	vma.mts.ru		217.66.147.42	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.138926983 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	vma.mts.ru		217.66.147.33	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.138926983 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	vma.mts.ru		217.66.147.36	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.138926983 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	vma.mts.ru		217.66.147.35	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.138926983 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	vma.mts.ru		217.66.147.41	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.138926983 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	vma.mts.ru		217.66.147.40	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.138926983 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	vma.mts.ru		217.66.147.34	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.138926983 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	vma.mts.ru		217.66.147.37	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.138926983 CEST	1.1.1.1	192.168.2.4	0xa394	No error (0)	vma.mts.ru		217.66.147.38	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.144716024 CEST	1.1.1.1	192.168.2.4	0x8f51	No error (0)	rtb.segmel.io		194.67.71.75	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.187938929 CEST	1.1.1.1	192.168.2.4	0xf027	No error (0)	tttttt.me			65	IN (0x0001)	false
Sep 21, 2024 00:49:02.193182945 CEST	1.1.1.1	192.168.2.4	0x6e1b	No error (0)	tttttt.me		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.193182945 CEST	1.1.1.1	192.168.2.4	0x6e1b	No error (0)	tttttt.me		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.932132006 CEST	1.1.1.1	192.168.2.4	0x5447	No error (0)	sync.opendsp.ru		81.163.20.122	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.932132006 CEST	1.1.1.1	192.168.2.4	0x5447	No error (0)	sync.opendsp.ru		185.175.47.157	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.970976114 CEST	1.1.1.1	192.168.2.4	0x9a7	No error (0)	match.ohmy.bid		167.235.9.235	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.970976114 CEST	1.1.1.1	192.168.2.4	0x9a7	No error (0)	match.ohmy.bid		167.235.14.51	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.970976114 CEST	1.1.1.1	192.168.2.4	0x9a7	No error (0)	match.ohmy.bid		167.235.10.90	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:02.970976114 CEST	1.1.1.1	192.168.2.4	0x9a7	No error (0)	match.ohmy.bid		167.235.10.91	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.029558897 CEST	1.1.1.1	192.168.2.4	0xce60	No error (0)	s.uuidksinc.net		31.220.27.135	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.029558897 CEST	1.1.1.1	192.168.2.4	0xce60	No error (0)	s.uuidksinc.net		31.220.27.134	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.029558897 CEST	1.1.1.1	192.168.2.4	0xce60	No error (0)	s.uuidksinc.net		185.98.54.153	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.029558897 CEST	1.1.1.1	192.168.2.4	0xce60	No error (0)	s.uuidksinc.net		31.220.27.155	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.182893991 CEST	1.1.1.1	192.168.2.4	0x2a94	No error (0)	cm.a.mts.ru		185.65.149.228	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.263452053 CEST	1.1.1.1	192.168.2.4	0x62a6	No error (0)	match.new-programmatic.com		217.65.2.150	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.615295887 CEST	1.1.1.1	192.168.2.4	0xee90	No error (0)	rtb.dynotech.io		91.206.15.115	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:03.973082066 CEST	1.1.1.1	192.168.2.4	0xb774	No error (0)	2348964281726872543783.cm.a.mts.ru		185.65.149.228	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.003444910 CEST	1.1.1.1	192.168.2.4	0xd613	No error (0)	sync.dmp.otm-r.com	ad-eu.p.otm-r.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:05.017457008 CEST	1.1.1.1	192.168.2.4	0x4396	No error (0)	sync.programmatica.com		85.198.116.135	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.017457008 CEST	1.1.1.1	192.168.2.4	0x4396	No error (0)	sync.programmatica.com		85.198.116.123	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.725435972 CEST	1.1.1.1	192.168.2.4	0x67bf	No error (0)	telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	sape-sync.rutarget.ru	sync.rutarget.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	sync.rutarget.ru	balance.segmento.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		45.9.24.193	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		45.9.26.83	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		45.9.27.120	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		188.72.107.205	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		46.243.142.239	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		46.243.143.249	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		46.243.172.93	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		46.243.142.48	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		178.170.195.115	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		178.170.196.9	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		178.170.196.176	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		178.170.196.247	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		188.72.107.156	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		188.72.107.194	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		87.242.93.112	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.822513103 CEST	1.1.1.1	192.168.2.4	0xa71e	No error (0)	balance.segmento.ru		188.72.107.228	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:05.824860096 CEST	1.1.1.1	192.168.2.4	0xdb32	No error (0)	sape-sync.rutarget.ru	sync.rutarget.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:05.824860096 CEST	1.1.1.1	192.168.2.4	0xdb32	No error (0)	sync.rutarget.ru	balance.segmento.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:05.878335953 CEST	1.1.1.1	192.168.2.4	0xc62e	No error (0)	match.qtarget.tech		95.163.92.180	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:06.627038956 CEST	1.1.1.1	192.168.2.4	0xe187	No error (0)	telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:08.275662899 CEST	1.1.1.1	192.168.2.4	0x4d0c	No error (0)	dmp.sbermarketing.ru		37.18.110.198	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:08.280580044 CEST	1.1.1.1	192.168.2.4	0x354c	No error (0)	ads.alfasense.net		136.144.31.29	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:08.415633917 CEST	1.1.1.1	192.168.2.4	0xa207	No error (0)	sync.gonet-ads.com		23.109.14.90	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:08.415633917 CEST	1.1.1.1	192.168.2.4	0xa207	No error (0)	sync.gonet-ads.com		23.109.14.96	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	solta-sync.rutarget.ru	sync.rutarget.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	sync.rutarget.ru	balance.segmento.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		45.9.24.193	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		45.9.26.83	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		178.170.196.9	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		87.242.93.112	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		188.72.107.228	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		46.243.143.249	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		46.243.172.93	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		46.243.142.239	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		178.170.195.115	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		178.170.196.176	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		188.72.107.205	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		178.170.196.247	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		188.72.107.156	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		188.72.107.194	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		45.9.27.120	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866226912 CEST	1.1.1.1	192.168.2.4	0x803f	No error (0)	balance.segmento.ru		46.243.142.48	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866426945 CEST	1.1.1.1	192.168.2.4	0x5fbb	No error (0)	solta-sync.rutarget.ru	sync.rutarget.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:10.866426945 CEST	1.1.1.1	192.168.2.4	0x5fbb	No error (0)	sync.rutarget.ru	balance.segmento.ru		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		142.132.138.212	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		142.132.138.213	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		142.132.138.214	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		142.132.138.215	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		193.3.184.7	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		193.3.184.16	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		193.3.184.130	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		193.3.184.139	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		193.3.184.135	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		193.3.184.137	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		193.3.184.140	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:10.906027079 CEST	1.1.1.1	192.168.2.4	0xd6bf	No error (0)	www.acint.net		193.3.184.131	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:11.121454954 CEST	1.1.1.1	192.168.2.4	0x88ef	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:11.121454954 CEST	1.1.1.1	192.168.2.4	0x88ef	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:11.123420000 CEST	1.1.1.1	192.168.2.4	0x446e	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:11.136651039 CEST	1.1.1.1	192.168.2.4	0x4c9e	No error (0)	dmp.sbermarketing.ru		37.18.110.198	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:11.166688919 CEST	1.1.1.1	192.168.2.4	0x38ca	No error (0)	ads.alfasense.net		136.144.31.29	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:12.825155973 CEST	1.1.1.1	192.168.2.4	0xe605	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:12.825155973 CEST	1.1.1.1	192.168.2.4	0xe605	No error (0)	user-data-eu.bidswitch.net		35.214.136.108	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:12.827459097 CEST	1.1.1.1	192.168.2.4	0x10b8	No error (0)	x.bidswitch.net	user-data-eu.bidswitch.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:13.713073015 CEST	1.1.1.1	192.168.2.4	0xa332	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:13.713073015 CEST	1.1.1.1	192.168.2.4	0xa332	No error (0)	ssp.ads.betweendigital.com		188.42.196.115	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:13.713073015 CEST	1.1.1.1	192.168.2.4	0xa332	No error (0)	ssp.ads.betweendigital.com		188.42.189.197	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:13.713073015 CEST	1.1.1.1	192.168.2.4	0xa332	No error (0)	ssp.ads.betweendigital.com		188.42.34.65	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:13.713073015 CEST	1.1.1.1	192.168.2.4	0xa332	No error (0)	ssp.ads.betweendigital.com		188.42.189.231	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:13.713073015 CEST	1.1.1.1	192.168.2.4	0xa332	No error (0)	ssp.ads.betweendigital.com		188.42.191.196	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:13.713073015 CEST	1.1.1.1	192.168.2.4	0xa332	No error (0)	ssp.ads.betweendigital.com		188.42.34.64	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:13.713090897 CEST	1.1.1.1	192.168.2.4	0xe524	No error (0)	ads.betweendigital.com	ssp.ads.betweendigital.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:20.743546963 CEST	1.1.1.1	192.168.2.4	0xab65	No error (0)	ssp.otm-r.com	pub-eu.p.otm-r.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:20.743546963 CEST	1.1.1.1	192.168.2.4	0xab65	No error (0)	pub-eu.p.otm-r.com	ad-eu.p.otm-r.com		CNAME (Canonical name)	IN (0x0001)	false
Sep 21, 2024 00:49:53.083123922 CEST	1.1.1.1	192.168.2.4	0x97c3	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:54.811095953 CEST	1.1.1.1	192.168.2.4	0xe1e4	No error (0)	telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:54.811146021 CEST	1.1.1.1	192.168.2.4	0x84a0	No error (0)	cdn4.cdn-telegram.org		34.111.35.152	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:54.811808109 CEST	1.1.1.1	192.168.2.4	0x18be	No error (0)	oauth.tg.dev		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:59.161855936 CEST	1.1.1.1	192.168.2.4	0x1ba9	No error (0)	oauth.tg.dev		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 21, 2024 00:49:59.232970953 CEST	1.1.1.1	192.168.2.4	0xdd0f	No error (0)	t.me		149.154.167.99	A (IP address)	IN (0x0001)	false

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	95.216.186.40	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:41.034356117 CEST	440	OUT	GET /s/ogorodru HTTP/1.1 Host: xn--r1a.website Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:41.865761995 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=35768000 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 34 63 32 37 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed bd 69 97 1b c7 95 20 fa dd bf 02 c3 3e 36 a5 d7 95 55 b9 2f 94 48 35 f6 7d df 31 33 07 27 01 24 80 04 90 48 20 33 b1 7a 7c 8e 16 db b2 47 6a ab 5f b7 e7 74 9f ee 71 fb b9 fb 6d 1f 69 8a 94 28 4a a2 ff 02 ea 2f f4 1f 78 f3 13 5e dc 88 04 0a a8 42 2d 34 8b 26 69 c3 0b 0b 99 19 eb dd e2 c6 8d b8 f7 be ff 9f 02 69 7f a1 9a 09 7a ba 8e 31 78 f0 83 f7 c9 1f 8f e7 fd ae a6 b6 e0 07 fa 69 68 8e ea 69 76 55 cb d6 9c fb 77 26 4e 9b 92 ef b8 9f 1c dd 19 68 0f 56 ff ba fa 72 f5 fc f4 c3 d5 f3 d5 e3 63 6b e2 f9 8f 0f ff c1 53 d0 06 5a c7 52 8d f7 4f 48 99 ad a6 86 aa a1 dd bf 33 d5 b5 d9 c8 b4 9c 3b 9e a6 39 74 b4 21 6a 7a a6 b7 9c ee fd 96 36 d5 9b 1a 85 1f 8e 3c fa 50 77 74 75 40 d9 4d 75 a0 dd 67 8e e9 23 8f 81 de 19 13 63 e7 95 3a 3f ff 6a 62 6b 16 7e 56 1b e8 d5 d0 bc e3 39 b9 38 88 b6 69 19 aa 43 b5 34 47 6b 3a ba 39 dc 1a 8c 83 26 30 ea 9a c3 3d 75 bb 8e 33 a2 b4 f1 44 9f de bf 53 a1 8a 5e ca 6f 1a 23 d5 d1 51 47 77 70 b1 b3 56 a2 c1 fb 5a ab a3 ed ed 3c [TRUNCATED] Data Ascii: 4c27i >6U/H5}13'$H 3z\|Gj_tqmi(J/x^B-4&iiz1xihivUw&NhVrckSZROH3;9t!jz6<Pwtu@Mug#c:?jbk~V98iC4Gk:9&0=u3DS^o#QGwpVZ<i69/V$Q6h,]krHe4Ycva4lU84=tCo{''?FP%@iuNh:'$TtoOXL,iLir]x0nR):^j[bXjiT>AY-9i3e\|N4F']UB$WI(>`'KOFyBe-W~,k(tXjO@2f*t:VY[CIe$:SKo&}Jv2TRgxe^/-+QYLC}ZyYrQcqo"[w:61X_MKtoO?_}z^yVz9V=5qfccZf~?Xj9j<7G'z<F{KW\;\'GxTh<OV_?AVON?FQd_@~-tFBW
Sep 21, 2024 00:48:41.865797043 CEST	1236	IN	Data Raw: ae d0 8b 87 e8 05 85 24 4f db fc 9b cd 3c 10 28 2f c0 d2 99 e9 8e a3 59 7f 04 6b ad 6b 1e f8 eb cd e6 af 35 9e 80 c9 b6 d0 f4 37 5b 0c 76 a1 8e 3a b8 a7 9b f6 3d 75 34 aa db 8e 69 69 75 7d 5b b4 8b b2 c8 f3 8a 4c 4b 7b 7a db aa 79 09 43 7b 92 9a Data Ascii: $O<(/Ykk57[v:=u4iiu}[LK{zyC{mkf]^}b"'KTe>Oz?MF"cz+suK[p!kM=1Zl-\|??B0>{,mpw<]KksbI34j49fwu5QFP`
Sep 21, 2024 00:48:41.865824938 CEST	1236	IN	Data Raw: 0e b6 5f f7 4c b4 1b d9 7d 8f e8 82 c6 ff b9 48 17 c2 9d 2d 94 8b 1e 86 1f c8 94 6c d0 1e 39 21 7a c4 4d f1 96 8a e4 91 65 a9 88 64 e8 23 86 39 e6 18 7e e7 1b 02 3f 36 88 0a c7 a2 20 dd 39 d9 6a 92 dd 6e 73 40 a1 1f 7b 1b 3d e6 24 e6 88 a1 8f 15 Data Ascii: _L}H-l9!zMed#9~?6 9jns@{=$oX5+2{sCiW<yI5-3w$_EsnVQ,G1~^N}vc@bfC5y$!cYv!Ej.5sp}&iz?'[run
Sep 21, 2024 00:48:41.865844965 CEST	1236	IN	Data Raw: ca c3 1f 2b 2c 0b 0f 2c 2d a1 07 8e c5 c3 a3 69 84 2f 84 3c 49 3a 92 8f 25 1a 4d 03 4a a3 df 82 e0 01 8c d1 f0 9e 46 03 45 45 79 09 21 18 c1 82 94 61 d0 03 87 e6 8d 76 22 8c 88 7e 33 32 eb d9 a6 82 da 1e 33 48 c0 25 ca cd fd 9f 9d 05 7f b3 55 c0 Data Ascii: +,,-i/<I:%MJFEEy!av"~323H%Uew4qBJ]Us<Vwx!juW6DNZEkv3;2Gx#tI%/]VlH>iW\0"^X]/pD;?X@hCQU.<
Sep 21, 2024 00:48:41.865864992 CEST	1236	IN	Data Raw: 78 19 0c 6e 9c a2 00 42 44 b4 29 43 03 12 10 db c0 de 08 8e 71 f0 f4 64 09 21 04 ee 25 f8 e1 62 87 88 e6 27 a0 86 d0 6f 0e b5 04 56 3f cc 35 80 01 30 47 22 d8 31 68 53 8b 70 23 a1 6d ec b1 20 91 91 92 61 df 18 25 dc db 86 12 11 ed 0a 31 52 dc 1f Data Ascii: xnBD)Cqd!%b'oV?50G"1hSp#m a%1Ra/hp57"bL9cL9 ~31+d8vdAOUVQtEp=.n(tY}khK4M}H
Sep 21, 2024 00:48:41.865883112 CEST	1120	IN	Data Raw: 99 c5 e5 61 9a ee 3a 54 de 17 ac 87 14 5d 90 5b 93 5a b3 e4 5d 36 fc 46 25 37 f5 8d 97 2c 95 49 89 b9 9a 1a 8c 2e 38 3d 34 1c 2e 0b d1 84 c9 d3 ed 52 1a c1 42 f2 2e 42 5a b5 d7 64 c2 4c 64 2a 26 1c 5f c2 1b d2 8b 56 38 10 a4 3a 5a 2a 95 2e 8f 47 Data Ascii: a:T][Z]6F%7,I.8=4.RB.BZdLd&_V8:Z.GhIlPrB_%~7x%k!id/d65N[btC/pp^ia?h{)2&D\Xxv1Z6H%[&{rWjA7D5K&
Sep 21, 2024 00:48:41.865901947 CEST	1236	IN	Data Raw: 1d 26 95 b6 ce e4 aa 99 6c ba 6f d7 4a fe fe c0 62 b2 cd ec 92 aa 46 82 91 d4 30 25 cf bd 52 6c d6 ac f5 fc 0d bb 3c cf d4 b4 61 66 98 8a 67 fd 96 90 36 44 63 12 12 6c 31 a3 45 e2 b9 a5 64 85 52 6a bd aa a4 68 55 2c b1 94 a9 a8 23 7a aa 31 36 5d Data Ascii: &loJbF0%Rl<afg6Dcl1EdRjhU,#z16]z-(LfR(3{4?Xc5gSzzs16:6m~;p>JH(8@owga>hOV~+8~\|
Sep 21, 2024 00:48:41.865921974 CEST	1236	IN	Data Raw: a3 27 c2 b9 d4 23 72 9c f3 1d fe 03 07 93 bf 44 ea e5 2f d1 32 09 91 7b 3f 3a fd e2 95 20 04 6f 62 24 fe cd c0 08 f3 da d4 11 02 72 00 fe 06 23 af 46 35 e1 d0 ae 50 66 c5 37 04 de af 4f cc 7c e4 ee 8d 5c b9 0e a1 c4 bf 3f fd f8 95 80 fc 06 7a 0a Data Ascii: '#rD/2{?: ob$r#F5Pf7O\|\?z@]\|;Ew}+Yx;N 'l}a.sO<a_q$(,Tg^t.eLO'l6hpvpv8y(9]Xu(K$W$8)8{u
Sep 21, 2024 00:48:41.865940094 CEST	1236	IN	Data Raw: f5 22 81 ec 0c 6f 2f 06 ac 7c 16 03 16 7e de 90 c7 ae 8a 01 bb af 9b b3 b4 02 97 87 80 7d dd 7c c6 b2 10 04 f7 3c a7 89 57 72 da c5 88 cb 2f c5 69 66 30 19 0d 2e 1b cc a2 50 f2 8d ca 22 da 35 46 8b 9a e6 67 1d 9e ce d7 f2 49 bb 51 ca c5 62 bd 45 Data Ascii: "o/\|~}\|<Wr/if0.P"5FgIQbEVa)Jj\|=5_cJ`bbEjCi=K`D8UU9D[/j;\|;'%I-{iCfi$dFI02Ud6li0a_{[?LyJ3@mlP+s~+.78lE"~f63.f\=T\|Q9hQ
Sep 21, 2024 00:48:41.865957975 CEST	1236	IN	Data Raw: 4c 3a 1b 0d d8 68 04 3d 6f c9 08 d4 55 c3 a7 4a 0b c5 48 a5 fd 91 54 cf ee b3 a1 66 9a 5f d6 42 31 d3 94 25 8a 99 8e 1a fd 97 db ac dd 62 4e aa 3f 0d af 6d a5 c8 b9 9c d9 48 cf 17 3e e0 3f d7 9b a0 de bc 33 74 f6 ed 75 7a 10 e8 3b 57 9e a1 f3 f7 Data Ascii: L:h=oUJHTf_B1%bN?mH>?3tuz;W83tg\|.;=WzGI#K-;\|*Sp~~8?op(x8??"oJVeeGxhAyVeVM#x_Dgg3LC_jR/h
Sep 21, 2024 00:48:41.865978956 CEST	1236	IN	Data Raw: 88 80 70 49 20 0f 20 ef af 01 d4 84 88 ff 1d b2 50 6e 15 81 d9 ac 0b 21 cc c1 bc b6 a2 71 e0 20 be 20 9a 30 7b e0 79 3d dd 88 3c 00 06 02 f6 3f 11 e9 b0 e6 fc 5f b8 54 8c 49 1c e2 8d 10 39 79 c6 a6 98 c5 00 35 40 c6 4f 56 df 80 3c 38 86 a4 c2 90 Data Ascii: pI Pn!q 0{y=<?_TI9y5@OV<8{m0n!TS4$~jGb6ri*]KO.pRSw^dGT]@18l-A0n&7\&`=YHL\|YewG0;5a:16
Sep 21, 2024 00:48:44.155416965 CEST	561	OUT	POST /v/ HTTP/1.1 Host: xn--r1a.website Connection: keep-alive Content-Length: 96 Accept: / X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: http://xn--r1a.website Referer: http://xn--r1a.website/s/ogorodru Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 76 69 65 77 73 3d 65 79 4a 6a 49 6a 6f 74 4d 54 41 32 4f 44 4d 79 4d 6a 51 32 4d 53 77 69 63 43 49 36 4d 54 51 77 4e 6a 51 73 49 6e 51 69 4f 6a 45 33 4d 6a 59 34 4e 7a 45 77 4d 7a 51 73 49 6d 67 69 4f 69 4a 6d 4f 44 6b 33 4e 6a 51 33 59 54 49 79 4e 7a 46 68 4e 6d 45 7a 59 54 55 69 66 51 Data Ascii: views=eyJjIjotMTA2ODMyMjQ2MSwicCI6MTQwNjQsInQiOjE3MjY4NzEwMzQsImgiOiJmODk3NjQ3YTIyNzFhNmEzYTUifQ
Sep 21, 2024 00:48:44.482841969 CEST	492	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:44 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: stel_ssid=cf5d599673341d6376_10721185783239533168; expires=Sat, 21 Sep 2024 22:48:44 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=35768000 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 2b 29 2a 4d 05 00 8d 4c fc fd 04 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 18+)*ML0
Sep 21, 2024 00:48:54.155778885 CEST	561	OUT	POST /v/ HTTP/1.1 Host: xn--r1a.website Connection: keep-alive Content-Length: 96 Accept: / X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 Origin: http://xn--r1a.website Referer: http://xn--r1a.website/s/ogorodru Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Data Raw: 76 69 65 77 73 3d 65 79 4a 6a 49 6a 6f 74 4d 54 41 32 4f 44 4d 79 4d 6a 51 32 4d 53 77 69 63 43 49 36 4d 54 51 77 4e 6a 55 73 49 6e 51 69 4f 6a 45 33 4d 6a 59 34 4e 7a 45 77 4d 7a 51 73 49 6d 67 69 4f 69 49 78 5a 44 46 6a 59 7a 41 34 59 6d 46 6b 4f 57 49 30 4e 44 63 33 4e 47 4d 69 66 51 Data Ascii: views=eyJjIjotMTA2ODMyMjQ2MSwicCI6MTQwNjUsInQiOjE3MjY4NzEwMzQsImgiOiIxZDFjYzA4YmFkOWI0NDc3NGMifQ
Sep 21, 2024 00:48:54.491898060 CEST	492	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:54 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: stel_ssid=c921ed9c55e4c4a925_15387734277489215620; expires=Sat, 21 Sep 2024 22:48:54 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=35768000 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 2b 29 2a 4d 05 00 8d 4c fc fd 04 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 18+)*ML0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:41.921485901 CEST	335	OUT	GET /css/font-roboto.css?1 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:42.546677113 CEST	998	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:42 GMT Content-Type: text/css Last-Modified: Thu, 20 Oct 2022 11:05:33 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"63512b7d-1816" Expires: Tue, 24 Sep 2024 22:48:42 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 32 39 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 96 4d 73 9b 40 0c 86 ef fe 15 dc 9c a6 25 48 32 1f c6 b9 14 30 f4 e0 c9 34 cd d4 93 33 71 b0 c3 14 43 8a 71 12 b7 d3 ff 5e ed 2e 76 3b bd 99 d9 66 48 72 61 e7 dd 5d 16 f4 48 2b c9 3a 35 16 bb 3a 2f 8a 7c 61 66 4f 8d 71 6a 0d 3e 2e ab b2 31 97 e9 22 33 7e 0e 0c a3 55 eb bc d8 4d 8c e1 55 75 53 35 d5 f0 7c bf b0 69 76 45 36 31 ca aa 5e a7 c5 61 f6 31 cb 57 77 cd c4 b0 01 0e 73 b7 f9 e6 be 48 f9 8c cd 63 7a 2f 66 37 f5 62 62 6c eb e2 64 78 76 66 89 af 6c 2c 75 ba 35 4b 3e af a3 f2 7b bc f5 29 a9 f1 62 eb d1 d3 6c f6 75 8e b3 87 f2 c7 d9 63 b5 5c d2 f0 1d ff 17 7f b2 39 19 b6 5a 9c b8 2d f3 45 75 9b 99 75 5a ae f8 a7 e6 ef c1 76 c1 04 87 92 0f 2c 30 1a 83 c9 8f b1 10 04 a1 2d c7 69 0c 26 4d 13 b9 23 70 6d 30 03 d7 97 22 89 29 36 f9 91 9c 0f 7e 0d ac 3f 98 fa 89 c8 59 77 45 34 02 14 20 80 7d 65 82 ed 48 db c1 f6 85 f0 db 95 50 88 50 0a 42 74 5b 20 ab 3a cb be f5 38 68 ba 12 c1 84 49 60 92 ec 1d 2f ed ec a7 d7 ed eb ce 5e f7 d8 a7 a3 83 8d 0f 79 d6 94 e9 3a [TRUNCATED] Data Ascii: 29aMs@%H2043qCq^.v;fHra]H+:5:/\|afOqj>.1"3~UMUuS5\|ivE61^a1WwsHcz/f7bbldxvfl,u5K>{)bluc\9Z-EuuZv,0-i&M#pm0")6~?YwE4 }eHPPBt[ :8hI`/^y:d4l(01V#F _B$,B0 PM^\|&()#XXLdQ&"08e8cHq.GiCI={GV@QhtT4R20x8Q8U(SED7LMP:b=i9mO5At._EetK/SvJs4:{F}Nw]%7fOOCp=/^uC+j4RuC7}No!5f0
Sep 21, 2024 00:48:43.172979116 CEST	322	OUT	GET /js/tgwallpaper.min.js?3 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:43.359062910 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:43 GMT Content-Type: application/javascript Last-Modified: Thu, 03 Mar 2022 19:57:25 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"62211da5-ba3" Expires: Tue, 24 Sep 2024 22:48:43 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 35 66 31 0d 0a 1f 8b 08 00 00 00 00 00 04 03 7d 56 0b 73 da 38 10 fe 2b 2d 77 ed c8 b6 30 b6 c1 24 e0 28 9d 34 4d da b4 69 fa 98 9b b9 b9 e1 b8 8e 6c 0b cc c4 18 30 e6 d5 84 ff 7e df ca e6 91 f6 7a 33 a0 d5 ee 7e 2b c9 d2 be 96 32 7f f6 c7 9f 32 4d a7 72 aa 72 31 58 64 51 31 9a 64 cc 78 d8 4d 9f ad 99 04 37 c9 d9 12 d8 50 f4 fa 76 34 c9 22 59 b0 b7 46 e0 9c c9 c0 08 ed e9 62 9e b0 d0 9e 27 a3 41 c1 0c 83 cb 7a 3d 90 40 06 3b b3 48 38 41 74 16 da a9 ca 86 45 12 44 96 f0 0c 59 99 f5 a2 be 11 e4 aa 58 e4 d9 33 b9 dd 6f fb 9a 49 1e 1a 0f e1 0b d1 71 02 da 3a 12 38 c9 8b a9 11 8c 06 0c 0a 12 c5 10 59 96 16 96 0b f4 1e d6 dd a8 e7 f4 ed b5 c5 62 4d eb 25 6b 34 3a 8e 19 f2 4d a9 dd 54 da 4d a9 dd 94 da 2d d7 d6 6e 65 4d 14 7a 22 47 d6 60 b5 35 d1 52 fb d4 da ab ac 89 42 4f e4 c8 1a ac b6 26 5a 6a 9f 5a 37 2b 6b a2 d0 13 39 b2 06 ab ad 89 96 da 9d 75 7f 5b 5d 60 74 b8 c0 77 bb 77 4b 2d 21 83 8e 73 26 d2 c0 48 eb b8 4e 3e b4 2c 3e 3c 17 d3 97 2f d9 b0 2e 70 a5 f4 4e 81 73 4e 00 4b 03 ea 75 ee 9c 0f 49 6f 41 [TRUNCATED] Data Ascii: 5f1}Vs8+-w0$(4Mil0~z3~+22Mrr1XdQ1dxM7Pv4"YFb'Az=@;H8AtEDYX3oIq:8YbM%k4:MTM-neMz"G`5RBO&ZjZ7+k9u[]`twwK-!s&HN>,></.pNsNKuIoAXvBy\|d-FcIsbF<w?lNpB`kJ?zQ=H'84(cp)^!OaI`up/Xk9geVs,JoBK3G>%Q\BPd}<gpr932vnZ$f%h,1MY^9@emt2h29r9mJ@+>_b^_b\N76v~{5o)An`\ByjFbMW,U\|aEqxg:oq.WZ4tpZNnSMVh1VYa'r~~wt'$}>BiwIpHJd4J Q&z=&oblq?:n-u6wO{c=S9K
Sep 21, 2024 00:48:43.359097958 CEST	630	IN	Data Raw: 43 8b 86 13 ee 81 71 81 c7 d0 a6 a1 c3 3d 0f 78 0c d8 db 23 7c 93 f0 4d c2 37 09 0f da 22 7c 8b f0 2d c2 fb 84 f7 09 ef 13 be 4d f8 36 41 10 14 34 40 d1 26 70 9b cc db 25 04 66 27 7d fe 56 50 49 80 64 d3 b5 5d 9d e0 81 c3 dc 2b e7 4d 5f 33 7e c9 Data Ascii: Cq=x#\|M7"\|-M6A4@&p%f'}VPId]+M_3~fjW;ErUkSJ{.(]Q#7"UqQ(\(I:5xG!r\|VV$XWWQ"X"d}w7FZTWyw*Bd!cW
Sep 21, 2024 00:49:28.414602995 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49740	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:41.921521902 CEST	337	OUT	GET /css/widget-frame.css?67 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:42.513226986 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:42 GMT Content-Type: text/css Last-Modified: Tue, 02 Apr 2024 16:47:47 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"660c36b3-145c6" Expires: Tue, 24 Sep 2024 22:48:42 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 35 31 38 31 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 9d 6d 6f 1b 49 92 a0 bf fb 57 f0 b6 d1 68 f7 ac c9 a9 f7 17 37 b0 d8 99 de 69 ec 02 33 f7 e1 06 77 b7 7b 38 40 a0 48 4a e2 34 25 ea 28 4a b6 bb d1 f7 db ef 89 c8 97 ca 2a 66 91 94 ac 1e cc ec d9 96 65 32 2b 2b 33 32 32 32 32 22 32 32 e2 fd 6e bb dd 4f 7e 7e 33 99 2c b6 9b ed 6e fa b0 b8 59 dd ae de 4f 36 eb eb 9b fd 64 39 df fd f8 dd 9b 5f de 5c 6e 97 9f b4 d2 74 ba 5f 7d dc 4f b5 ee fb c9 57 59 2a 7f bf e3 ed e9 f4 61 b5 d8 de 2d fd a3 3a 6f 16 f3 da 3c 9a 2f 16 ab bb e0 ad a2 49 17 8b de a3 cd fa 6e e5 5f 2d 16 f3 7c 95 f5 9e 5f ee ef fc e3 ec f0 75 79 7c 79 7d b3 7d 5a ed 80 6a 55 5d a5 57 fd ae 4d 85 f9 62 bf 7e 62 70 5f 2d 0b a9 63 7a b8 7c bc bc dc ac 78 dd 0d ea ea ea aa ff 64 bb 5b ae 76 be fb 65 bd ca 57 16 fa a7 ed 7a b1 9a de ef b6 d7 bb d5 c3 43 d0 c6 32 5f 5e ae 0a d3 cc 6e be 5c 6f 3b f0 76 d7 97 f3 b7 c9 bb 89 fd 99 25 e5 b7 a6 de fd f6 fe f1 3e 68 c3 c3 61 1a 58 ef 57 b7 1e 88 2c 6f b3 15 43 54 cc db 11 6c b6 d7 db e9 9a 49 98 3e 3c [TRUNCATED] Data Ascii: 5181moIWh7i3w{8@HJ4%(Jfe2++32222"22nO~~3,nYO6d9_\nt_}OWYa-:o</In_-\|_uy\|y}}ZjU]WMb~bp_-cz\|xd[veWzC2_^n\o;v%>haXW,oCTlI><]<6oYud,~Q^}),Y!lDDwf:\|a!mwMuuR,EmUITmfEy3fMU*dI9bz+Ti6rV42H,V]~,7I,IIYe] rU^l,gYu!/@:2aPE4E;J&$k-rTWlRSCttMtViUH!N4j`WZBI[7YUYgm@]UFeT2M%Y@LVGV ySU&ISKUU-oz4I+8ehAy,"!s&/EVY]E%IFfE]hil`KPO&+oy&tdP`ids-1'03:ob:`[dR6E<I6f" [u,7H[
Sep 21, 2024 00:48:42.513403893 CEST	1236	IN	Data Raw: 88 20 d5 ef 99 90 5b 9e 64 79 52 29 8e d3 a4 ad 5a 0a a1 0d 45 9b c2 48 7d a6 01 a0 78 9b 16 a1 97 86 96 53 41 2e 50 17 d9 ac 4d ca 3a 03 a1 19 60 55 65 db cc 9a 36 49 eb 14 20 6a 3e 55 02 8c 7c 15 44 d3 51 2b 4d 15 05 88 af 0b 7a 2f 72 e6 50 1a Data Ascii: [dyR)ZEH}xSA.PM:`Ue6I j>U\|DQ+Mz/rPOk&H&*oA924RA$6ci"IEQi.4ETt2')Y_gyVtYviw<~uL!ig0rXZaw;1Mz8
Sep 21, 2024 00:48:42.513422966 CEST	1236	IN	Data Raw: 30 5d d4 99 68 01 a8 44 15 7a 17 3d 34 68 07 fc a5 0c c5 a3 66 c0 b2 03 a2 38 e5 a8 0f 2a b7 58 d2 62 5c 8e de 16 32 14 37 32 37 37 b2 5f bb e1 79 aa 0a 86 e7 86 02 60 6e 78 7e 28 7e 74 21 91 05 c3 92 7d db d2 56 37 40 b6 f9 44 06 23 bb b5 1b a0 Data Ascii: 0]hDz=4hf8Xb\27277_y`nx~(~t!}V7@D#G7n!y4Pv0hjJ50R=OMNmf^,0IBXR[GcXefKc_-7MokU@BNBf.,P"u%\.HA~A,k;e^?h
Sep 21, 2024 00:48:42.513448954 CEST	672	IN	Data Raw: 72 d8 8a 4a 9c d3 ec a6 40 b7 b5 cf 04 8b fc 93 27 ae 9a fd 9a 3d 15 37 d3 0a bb ba 92 0a 66 41 a4 01 59 b4 a2 a6 c9 09 8e 30 27 34 db 06 76 cf 31 0f 16 5f 58 3b 8d 6a 29 a7 53 39 7c 8c a5 0b 73 c6 b8 25 ca b6 58 35 b0 67 42 c3 42 4c c6 4e 85 49 Data Ascii: rJ@'=7fAY0'4v1_X;j)S9\|s%X5gBBLNICK9_1-VQrY9"-$6uo7vDbMQ=DahOi)]m~*n9'r>#,<v}7x9p\|/uJ]?my
Sep 21, 2024 00:48:42.513467073 CEST	1236	IN	Data Raw: cb e1 c1 be 38 4f 96 ab ba 0f 6a de bd 58 16 8b cb aa e9 f5 58 d8 17 cb 7c b5 5c f6 67 a2 e8 5e cc 9a 45 7b d9 c7 7c 69 5f ac b3 65 79 d5 c7 67 19 bc 38 6f 57 de 77 d0 0c a4 b2 2f ae 92 79 76 95 f7 80 a9 ba 17 97 90 d4 8a 66 15 e9 ea 6c 28 f4 b2 Data Ascii: 8OjXX\|\g^E{\|i_eyg8oWw/yvfl(He7o&rvn+K}z!$$\)?7BM\|-~^BW8zUsSai.;_~Bi~g(N+f)yz7][W\|1OWvG
Sep 21, 2024 00:48:42.513485909 CEST	1236	IN	Data Raw: 41 88 1b 4f 17 21 ca a6 1d 4e 01 7e 52 26 5f 0f 30 e5 9e 4f 59 1e 2c aa c5 5b aa 4c fe 51 56 32 4c 2b 3a 54 4f 99 9b d5 5e 46 20 53 ab 5b 4c 9a 59 7c 46 87 c6 66 b6 bf a6 b2 9a 08 75 55 b1 51 dc ad 6f a7 cb 47 2e 71 e3 f7 f4 20 90 99 b2 f7 13 bb Data Ascii: AO!N~R&_0OY,[LQV2L+:TO^F S[LY\|FfuUQoG.q NVz{p`/MsP/QPAZIR#=\Xl:0^pnpQA3^X< Or{[F{3K3=)8y*4Ot]"f!<
Sep 21, 2024 00:48:42.513504028 CEST	1236	IN	Data Raw: 7b 17 f7 37 9c 14 41 bf c7 2b 98 3d e0 54 25 65 f6 83 b6 08 4c b8 be d3 71 46 bb 1a 3e 96 8e fa d3 30 1c e1 90 4e d5 e2 ef 49 34 d7 73 ab 6e 7b 70 df 5f 05 2f 07 c0 ca 8e 1b 17 10 94 ec dd 79 dc 74 7e 8f 6b e6 f4 e1 d3 c3 7e 75 fb ee f7 ac aa 1f Data Ascii: {7A+=T%eLqF>0NI4sn{p_/yt~k~u4_Y ?ow<dv]wIk%drvMa?^n7zcNHP6w^x9Lq6)wz8%Zr_!>HG9~VgrI*
Sep 21, 2024 00:48:42.513525009 CEST	1236	IN	Data Raw: 64 96 3d 78 97 47 25 d8 31 b3 dc c8 ae da 9b 90 9e 18 21 44 e2 e9 46 2d 33 02 f1 a4 0d 37 7a 7b 4a aa 92 11 98 3d dc 48 e7 27 b0 1d ec 4f 51 ae d5 5f 27 6e 75 c5 51 d3 1b 4a 3f 5e 26 a8 1b 61 6f 6a e2 ee 16 8a e7 1c 5e 60 ed 56 69 78 68 aa ce c4 Data Ascii: d=xG%1!DF-37z{J=H'OQ_'nuQJ?^&aoj^`Vixh]v;H5BYv^8_Avwb@D:Dmy#`7=N}Xo4&Ec+}iZ!usFSw7ww8pY+
Sep 21, 2024 00:48:42.513542891 CEST	1236	IN	Data Raw: 8b b7 65 7a 66 2d 07 e0 ce c2 28 9a a0 a3 03 47 26 a1 2a d8 5a d7 02 29 73 f5 90 89 2c 3d 7c 58 ef 6f 2e 56 04 73 59 10 b8 23 c6 54 42 60 c1 e1 b3 ea c7 5b e4 f6 4e 80 80 57 6e 53 e9 2a 18 3e 29 5e 8c 10 ff 0a c3 3f 31 1c df b5 c3 b2 ef 3b 38 36 Data Ascii: ezf-(G&Z)s,=\|Xo.VsY#TB`[NWnS>)^?1;86r?Ns&A*e<gHuhYFz~(v!PhjVK%H^SDSFFqKm;o#C+@Q{C;bRS`u=:<F8F
Sep 21, 2024 00:48:42.513565063 CEST	1236	IN	Data Raw: 3a 53 c4 bc df 6d 89 18 fd f0 10 33 2b 85 32 8b 15 ea 11 3c 02 11 eb a8 9c d4 3f d7 55 33 b6 27 8e b1 60 04 83 49 39 97 80 0e 07 11 ce 79 cc 46 4c 26 ad 73 a6 dd 35 ac 13 6f f2 08 76 0e 5a 61 5e 41 c2 22 1b b1 cc 16 8a 8b 2c c9 15 39 c9 91 c4 8a Data Ascii: :Sm3+2<?U3'`I9yFL&s5ovZa^A",9"{Ed3 v$V.-mGnO%N Y!%Yu@)3Z5u;{<yg="$LC2g0yQMUW3(V%P+v
Sep 21, 2024 00:48:42.518387079 CEST	604	IN	Data Raw: 87 11 ee db 63 7f 12 73 5a 88 12 2b 76 f4 50 92 9e 65 07 fc f5 87 2f 06 3d 0b df af bf 77 91 0b 4d af 5b 1c db 98 dc bc a8 5b cd af 1a 4e 60 64 5d f5 80 74 fb 46 74 d6 fb 35 ed be 71 6e cd 17 ef 1b ae 57 25 b3 9e d4 e7 dc 40 02 8f 8c b3 9c f7 ec Data Ascii: csZ+vPe/=wM[[N`d]tFt5qnW%@uSX]Hb#{`eX8YP6`Pp+54Eu{:\|}DI66[h/'Y,11KDR"<Dzs+3Hc [,dCjGD
Sep 21, 2024 00:48:43.172723055 CEST	318	OUT	GET /js/jquery-ui.min.js HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:43.353548050 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:43 GMT Content-Type: application/javascript Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"5a05e7c6-181a9" Expires: Tue, 24 Sep 2024 22:48:43 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 37 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 cc bd 6b 77 1b c7 95 2e fc 7d 7e 05 85 39 51 00 b1 09 92 52 9c 99 01 0d 62 39 92 3c f2 3a b6 a5 63 29 71 fc 32 1c 2d 08 68 8a 6d 43 00 07 0d 4a d6 90 9a df 7e 9e 67 5f ea d2 dd 20 29 27 73 d6 1b 67 89 e8 ba d7 ae 5d bb f6 ad 76 ed 3f b8 b7 f3 f3 ff b9 2c d7 1f 77 fe fc cd ce de ce fb c3 e1 e1 e1 f0 0f f8 f5 f0 e0 f0 5f f6 0e fe 75 ef d1 c1 3f 3d d8 39 df 6c 2e 46 fb fb 3f ff 27 4b 5e 56 c3 d9 ea 1d 52 bf 59 ce 16 97 f3 b2 1e ed cc 56 eb 72 f8 73 5d ec 7c a8 e6 6f cb 8d fc 7c b7 ba ac 35 71 be 9e be 7d 3b 7d b3 d0 af 75 59 57 ff 15 be ea d5 7a 13 3f 16 d5 bc 5c 4b ed f2 ec ac 9c 69 43 fa 73 af 66 26 f2 d0 f1 e3 d5 c5 c7 75 f5 f6 7c e3 63 ff 7a 75 b9 9c 4f 37 d5 6a b9 33 5d ce 77 56 9b f3 72 8d 41 2d 37 eb ea cd e5 66 b5 ae 8f 76 be ad 66 e5 b2 2e e7 3b df 7d f3 6a e7 c1 fe 3f fd 53 ff ec 72 39 63 95 fe 66 70 d5 f3 8f de 78 bc f9 78 51 ae ce 76 e6 e5 59 b5 2c ef df d7 bf c3 e9 bb f9 44 7f f6 4f 7a 0a 88 de 69 b1 19 8c 36 7d 05 e0 e0 d3 20 6b d2 5b dc 29 [TRUNCATED] Data Ascii: 7000kw.}~9QRb9<:c)q2-hmCJ~g_ )'sg]v?,w_u?=9l.F?'K^VRYVrs]\|o\|5q};}uYWz?\KiCsf&u\|czuO7j3]wVrA-7fvf.;}j?Sr9cfpxxQvY,DOzi6} k[)eQO;bUL.WrY}PO?8Z7]Sd(\|{T)VpzE9<_g^4r:[MW{{%A7898-_`~\p)pHf^?LyUs!]Gx}]/Lu_/j)}UWh~_KKG{kj>/f84Z-i(o76.O)>Sc-+~)?>\|GW~OGZ<~w__'O},<?=^=atxW/KwOGX\|WGRj~1zxo?A7e=,^},>0WC0'b@w+nz_U&)6w>RTDJ=CtD;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49739	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:41.921612978 CEST	337	OUT	GET /css/telegram-web.css?37 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:42.508896112 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:42 GMT Content-Type: text/css Last-Modified: Thu, 05 Jan 2023 17:52:04 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"63b70e44-6b31" Expires: Tue, 24 Sep 2024 22:48:42 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 31 38 63 66 0d 0a 1f 8b 08 00 00 00 00 00 04 03 d5 3d 6b 8f db 48 72 df fd 2b 18 2c 06 1e df 0e 65 51 1a 59 33 5a 20 b9 e4 6e f7 d3 1e 10 5c 10 20 f9 24 50 12 35 62 4c 89 0a 49 cd 8c 6d ec 7f 4f 3d fb 41 36 29 c9 f6 e6 ee 76 bd b6 87 6c 56 57 d7 bb aa ab 7b 57 e5 e6 53 f4 e5 4d 14 ad d2 f5 c7 a7 aa 3c 1d 36 f1 ba 2c ca 6a 11 fd 90 cd b2 55 b6 fd e9 cd 6f 6f de 34 4f 71 7d 2c f3 22 ab 68 f0 31 dd 6c f2 c3 d3 22 9a 1c 5f a3 71 34 3d be e2 a8 5d b3 2f 46 cd 2e db 67 cb 4d 5a 7d 8c 5a 1f c5 f1 ea c9 c0 9e ce a7 d9 7d 46 b0 f1 b3 68 a5 78 c4 71 ba 5e 67 87 86 47 c6 bb f2 39 43 5c 92 f4 21 dd cc 7e 02 44 e3 b8 c9 5e e5 35 bc 18 8f c7 fc b4 ce d6 a5 83 fc 7c 33 df 3e 24 fc 6a 55 be c2 dc 30 78 bb 85 e5 20 08 7e 12 af 8a 53 95 6d 16 51 f5 b4 4a 6f 27 b3 d9 5d 64 7f 1b 3d dc bf 53 c8 d5 73 be ce 10 7d ef 83 f1 5d 24 bf 46 13 19 ba cb 9f 76 05 fc d7 d0 7c 41 b0 0a b5 d9 67 71 51 3e 95 96 24 1f a6 ab 7b 58 0c 90 bb 4d 49 87 3a de e2 5b eb 41 3a 65 f8 6f ff 22 a7 f7 77 91 fe 77 7e 85 96 1a f4 b7 f1 28 e9 5f 67 [TRUNCATED] Data Ascii: 18cf=kHr+,eQY3Z n\ $P5bLImO=A6)vlVW{WSM<6,jUoo4Oq},"h1l"_q4=]/F.gMZ}Z}Fhxq^gG9C\!~D^5\|3>$jU0x ~SmQJo']d=Ss}]$Fv\|AgqQ>${XMI:[A:eo"ww~(_g2EQ:5$1I@Qe,_Hc~ZD@bFKZb&/hf]mEDGKiv(op.C>A=MV3HoD8?lE4DWE:)kA2]eqjy~1m`:ms"l^1]n<To~~-0YuFDZ2)qbs=4"i{K7>?^^bFXUD6i~Po`dI6k,<@)ECxq+.K7YPN!y# j,;9q+,8=xs_48p'&N^m9&2])_` r?r.,7Uyys;2j'La[4QM\KF`8_H3A_EEwd/sJ25~]ISPN# ^:_
Sep 21, 2024 00:48:42.508929014 CEST	1236	IN	Data Raw: cb 5d be d9 64 07 92 f7 2a 3d a8 13 03 8f 17 8d 92 3a ca d2 9a f4 30 bc a2 fe 25 8c 76 69 bd 7c 4e 8b 53 26 3e d3 63 3b 13 d1 ae d2 60 47 ce cd c5 8e fe 5e 10 0a 8d 41 0f 35 08 2c 04 3a db b1 68 91 ef 35 d9 50 47 d1 fa 54 d5 18 84 0a f6 83 2c 65 Data Ascii: ]d*=:0%vi\|NS&>c;`G^A5,:h5PGT,el/W?49HdBtJ~^n#Va7%H3@BTq{}{x{:"Qd`\|vZ!1zDci[:/L->DlFH&
Sep 21, 2024 00:48:42.508950949 CEST	448	IN	Data Raw: ea 20 48 cc 43 ab 71 68 bc d8 44 31 25 13 e0 15 74 35 68 9d 20 c5 c4 67 a9 27 1b 47 b1 3c d1 08 46 ab 8a cf 3b 28 2b a2 c3 20 aa f7 8b a6 26 75 ea 88 e2 7a 5d 95 e0 a0 70 f3 b2 29 4f 6b 30 a4 b0 01 21 b1 6e 0c a9 bb ee 14 70 6c e3 a2 6b 53 10 86 Data Ascii: HCqhD1%t5h g'G<F;(+ &uz]p)Ok0!nplkSB,?U?"pwHwX0q=VkBJ\rq_r P]Aq?mzi+4qWe_E!\|yMP*HeQ!9Si$GWFnC3?z,{TXK}{Z(
Sep 21, 2024 00:48:42.508971930 CEST	1236	IN	Data Raw: 6c cc 08 52 0c b3 52 53 bf 71 69 2e ab f1 96 a8 cc 0f 19 45 5a 76 a7 6e d2 72 15 10 15 a0 cb b3 be 0d dd 23 26 71 f8 d4 a5 81 26 ce 36 3c 54 1f 2c 3d 48 ab e6 c0 25 72 8a 32 da 34 f7 ca 33 4e b9 a4 15 f8 0c 11 91 eb 67 e7 49 79 79 9d 4d b9 e1 f1 Data Ascii: lRRSqi.EZvnr#&q&6<T,=H%r243NgIyyM62,W%;.h.2sa^{O3 q\|12Qn<#b#f1aRuDT?$mYjI8B^pj[776=FL909]t[\&CQUA/)!p
Sep 21, 2024 00:48:42.508991957 CEST	1236	IN	Data Raw: 2e f0 95 cb 3f b3 1c 33 b5 99 46 e7 76 76 64 e8 af 78 d4 e3 bf 6f 63 ec 6d e0 3c f2 8c a4 3a 75 03 db 51 e5 f6 6f d9 6d 3c e7 7c 8d 6b ac fb 85 b3 65 5e a4 b9 50 c2 c3 09 87 9c 6a f8 b5 a8 8a 76 08 7a 25 c2 f4 70 01 4a a9 c1 2a 8b e9 56 1a 8f e6 Data Ascii: .?3Fvvdxocm<:uQom<\|ke^Pjvz%pJ*V1JTPhrx{F4A7p0qY.\SN%`V?Y"4s]FhMmq"q{L.,e6!FqeEbgSm\lX&?f
Sep 21, 2024 00:48:42.509011984 CEST	1236	IN	Data Raw: ba 39 dd 45 93 9a 14 d8 ab 30 f8 5d 97 cc 59 75 20 ae f7 d1 29 f0 22 a0 c3 13 c8 96 6c cb 1a 64 da bd b5 ad 03 13 28 d2 18 32 d8 c8 d1 39 a1 8a 7b 95 f6 85 1b 52 b6 9d 1b b1 d7 b4 69 9b 90 63 32 13 ed f0 d7 36 9a 64 fb 4e 65 56 57 f2 bf 27 08 fe Data Ascii: 9E0]Yu )"ld(29{Ric26dNeVW'Hfx_^;\TbErgBJa#4\YE1EmA+hk!\6>L=a8vp.n7n\|&WJ\|(({<"'Q`SK>+Q
Sep 21, 2024 00:48:42.509032965 CEST	56	IN	Data Raw: 80 1e 61 68 2c fe 36 a9 6b ad 0a fe 4f 50 e8 72 6e df fe 25 81 2d bb 3b fc 2d fa 35 79 b8 4b 1e 70 5b 0a a7 fa ed cd ff 01 f4 90 8d 4c 31 6b 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: ah,6kOPrn%-;-5yKp[L1k0
Sep 21, 2024 00:48:42.521034956 CEST	315	OUT	GET /js/jquery.min.js HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:42.692028999 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:42 GMT Content-Type: application/javascript Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"5a05e7c6-1762a" Expires: Tue, 24 Sep 2024 22:48:42 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 39 37 61 35 0d 0a 1f 8b 08 00 00 00 00 00 04 03 dc bd 69 77 23 c7 b1 ae fb 7d ff 0a 12 d6 a6 80 46 91 4d b6 24 9f 6d b0 8b 58 52 ab 65 c9 d6 64 75 db 92 37 08 79 61 28 0c 24 08 90 00 d8 83 08 fa b7 9f e7 8d 1c 2a 0b 04 25 7b 9f 73 d7 bd eb 6a 20 6a c8 ca 31 32 e6 88 7c fa 64 7f ef e2 2f b7 c5 f2 fd de 9b 93 a3 13 fe db db ec d5 07 8d bd 67 c7 c7 9f 64 fc 3d f9 38 bc ff 62 71 3b 1f f6 d6 d3 c5 3c db fb 6a 3e 38 a2 e0 c5 8d be 3c 5a 2c c7 4f 67 d3 41 31 5f 15 7b 4f 9e fe c7 fe e8 76 3e 50 b9 7a 2f eb 37 ee 6a 8b fe 45 31 58 d7 f2 7c fd fe ba 58 8c f6 ae 16 c3 db 59 71 70 f0 c8 8b a3 e2 dd f5 62 b9 5e b5 5d b9 70 9b f7 8e 86 8b c1 ed 55 31 5f b7 fb d4 bc 7f dc 68 95 0d 35 ee a6 a3 fa 7e 59 a4 b1 9e 2c 17 6f f7 e6 c5 db bd 97 cb e5 62 59 af f9 51 2e 8b 9b db e9 b2 58 ed f5 f6 de 4e e7 43 ca bc 9d ae 27 dc 85 ca 6b 8d d3 65 b1 be 5d ce f7 68 a5 71 df b2 bf f5 1a 63 2f 46 d3 79 31 ac ed 87 71 b8 ef db ee a7 b5 9e 4c 57 59 d9 21 8d fc 4d 6f b9 37 c8 3b dd 6c 98 0f 8e 56 9a a1 ac e0 6a b0 98 0f 7a eb 6c c4 [TRUNCATED] Data Ascii: 97a5iw#}FM$mXRedu7ya($%{sj j12\|d/gd=8bq;<j>8<Z,OgA1_{Ov>Pz/7jE1X\|XYqpb^]pU1_h5~Y,obYQ.XNC'ke]hqc/Fy1qLWY!Mo7;lVjzlj+F$hx^NIou\.Uhu4Stmkq?wW_wwVOas>m<O_7Or~ut\ZAKk1v^,[W\jq^\|\+zY],~k5sbuzV2uopYRg$Wr\XZ0z#p7}]vn}VYKv}vN6:]]"<A,s3#U^XrQzh9MRr,@~LYWP){*)OV,^\|osptnUaYm6V]#>Fb#ug,xjM;;_epCb1aVd#6}/Ld'[?>?9Yt\|pP&f=h" qcA'
Sep 21, 2024 00:48:42.692071915 CEST	224	IN	Data Raw: 5a cf f3 29 f5 8d 1d e0 4e 0e 0f 1b a7 d3 b3 c9 e9 84 8a c0 ad 6e 47 d5 8b b2 7f 9d 49 b7 d1 50 bf 86 7b d3 f9 5e d1 e8 e5 e3 ce b0 cb 4a 15 fa 19 ef e7 f9 40 dd 3b 38 d0 8f 5a fd 7e d6 9b ce dd e6 80 c2 d0 b0 76 d5 74 65 1b 9d 07 8d 46 bb de e7 Data Ascii: Z)NnGIP{^J@;8Z~vteF?n/{vO+-}Itw{cExP\tEhyRQkgozRE`ZMW?qVpo!I6_,QaZ!V,C
Sep 21, 2024 00:48:42.692089081 CEST	1236	IN	Data Raw: f6 37 cc e2 66 13 4a 53 c6 a3 93 5a 4f 88 f4 c1 d7 3f 1a f1 db d1 e0 9e c7 9d 07 07 bd 1c 9a eb a8 9b da fb 96 6d bf 9c 0e 76 7c b2 9f ae 14 df 1d 5e f7 96 ab e2 8b d9 a2 07 d9 69 b0 29 f5 f9 cb ab eb f5 7b b7 fa 95 2a 6c af 1b 7c f7 05 47 bd 86 Data Ascii: 7fJSZO?mv\|^i){l\|G70/dw\|mblzGx9w#ceK{ _8jZ#y~PVtGrOGAoA7l2ShuYvYE$*L=L\4@/
Sep 21, 2024 00:48:42.692118883 CEST	1236	IN	Data Raw: 73 75 3b 5b 4f af 67 c5 06 7d cb 7c 03 21 1e 2e e6 b3 f7 5c 98 ea 88 b6 06 bc 18 d6 b2 6f f2 5a e7 fc fc dd b3 e3 f3 f3 f5 f9 f9 f2 fc 7c 7e 7e 3e ea d6 b2 6f f3 5a bd dd 3a e7 9f 23 94 2b e7 6f 0f bb 9b ce cf 14 3c 3e 3e e4 6f ef b8 db 68 d6 b2 Data Ascii: su;[Og}\|!.\oZ\|~~>oZ:#+o<>>oho#R{[jo;7zm*yvy?i>M666s<?~vnjiIcsDtC.HvH^F~;/1jO27
Sep 21, 2024 00:48:42.692137957 CEST	1236	IN	Data Raw: 5b ea 65 68 57 8b 37 45 75 20 0d b6 ab af 78 8a 7a 2a e8 77 7f c8 6a 1f 9c 88 1a d9 de 2d 37 b4 78 6b c3 94 3d c9 9e 71 9f f7 eb 03 6d f1 28 40 8b 19 ae 0f 9a 92 62 ce 24 82 c1 a4 7e 6d 96 ad 83 83 21 bd 5d 17 7b fd 4e ef 68 35 99 8e d6 f5 06 22 Data Ascii: [ehW7Eu xz*wj-7xk=qm(@b$~m!]{Nh5" }MN!e.:yl{jGH^N`,go'C-dt1]B\HdwaM)i\|(JgEg.\|ZRRJOVmL%cp].W2n6TC

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49744	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:43.259424925 CEST	317	OUT	GET /js/tgsticker.js?31 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:43.786572933 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:43 GMT Content-Type: application/javascript Last-Modified: Wed, 29 Mar 2023 11:31:32 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"64242194-601c" Expires: Tue, 24 Sep 2024 22:48:43 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 31 61 62 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 cd 5c 6d 73 14 47 92 fe ce af 28 d9 71 3b 23 4b 8c 84 cf eb bb 00 63 87 8c 51 2c b1 80 59 60 97 0f 5a 05 d1 9a 69 49 6d 66 a6 c7 dd 3d 08 1d e8 bf df 93 6f f5 d6 3d 92 f0 ae ef 4c d8 d0 53 95 95 95 6f 95 99 95 55 dd ef 8b c6 bd 7c 5a 77 5d 55 ba 87 6e 7c ba 5e 4e bb aa 5e ba f1 b6 fb 78 c7 b9 f7 e8 6e e6 d6 fd f1 6a d7 15 ab ea c9 b2 ea 5e 75 45 d3 95 33 8c 39 2d e6 6d e9 db e3 a6 0a 70 8f 8a f9 fc a4 98 be 6b 01 79 74 fc 40 51 ce ca f7 d5 b4 7c 59 60 2a b4 5f 54 cb 59 7d 31 91 c6 17 d5 87 72 2e 3d 9f 3e b9 7b 0f ee e8 90 96 26 7c 5d 2d 88 cc 9d f1 b2 bc 70 3f 15 5d 39 de de 26 9c 9e ec d9 6b 25 dc b9 a6 ec d6 cd d2 8d 8e 46 6e c7 8d c7 c9 18 77 d7 79 7c db 7b ee de fe fe fe 64 7f 1b 70 a3 63 37 22 84 57 34 ad 32 3e 39 58 55 98 f4 e3 15 75 58 db 6a 5e 5c 96 0d 71 f5 f3 c9 2f e5 b4 9b 4c 9b 92 e8 59 ae e7 f3 ed 07 31 e4 9b 9f 5f fe f5 f1 cb 57 6f 9f 3e 79 f6 e4 35 e0 bf f1 2c 35 e5 af 4f 48 82 fb 04 4e 92 5e 14 d5 f2 69 5d af 0e 4e d1 ca 72 cd 7b 5e 93 [TRUNCATED] Data Ascii: 1ab4\msG(q;#KcQ,Y`ZiImf=o=LSoU\|Zw]Un\|^N^xnj^uE39-mpkyt@Q\|Y`_TY}1r.=>{&\|]-p?]9&k%Fnwy\|{dpc7"W42>9XUuXj^\q/LY1_Wo>y5,5OHN^i]Nr{^{H)A6nz^N/Vu^YJ-raiYn&fWiO15({<W/y,O=+.n;Xxk,nz>mB}tr?v%vQ'd[u%:urUMyrd~>\|F5FO%luU=h~[L$q;4Mq9O~swO~':P<Vb*}<OK648R'M4~/"^&RBuwAKXmXfE:7}8+PfN<Wqg<7brG],vw[39UUY}Y_mcO<]4+5N^}LuZ7nZa#~{fl`.[s~=W+X)zv'r8~}^.,J
Sep 21, 2024 00:48:43.786593914 CEST	224	IN	Data Raw: 30 91 c2 3d 59 76 65 f3 be 98 c7 78 69 85 90 77 66 d7 2e 8f 9e c0 dd 54 32 2a 5e 22 56 19 d1 91 29 3e e7 7a 3e 1f 44 07 fa 28 f8 09 8e f0 a4 8b 89 db f7 f6 38 56 81 85 82 54 be 95 61 83 da 44 06 59 fb 77 a4 31 f7 83 bb f7 ad bb ef fe bc cf 31 4f Data Ascii: 0=Yvexiwf.T2*^"V)>z>D(8VTaDYw11Ol0VPw}U70c0 Ft8XV\I=cf\;K`UbS/.Ua6:h4iMAzLsd%+l>z@"^N !RH
Sep 21, 2024 00:48:43.786621094 CEST	1236	IN	Data Raw: 9e 82 0c bc eb a6 66 e7 4e 90 79 bd 33 fb 15 78 f9 9b 66 cf f5 06 3f 6c 88 60 a9 d1 cc 81 24 1b 02 f3 82 ed 4d 8b e5 b4 9c 6f 30 af 83 53 bf e8 6c 14 8c 8a 46 cd cb a2 a1 6c 35 b6 ab d7 75 0f da 9b 53 c2 13 11 be a5 64 06 ba 64 51 67 6b 81 04 60 Data Ascii: fNy3xf?l`$Mo0SlFl5uSddQgk`Sf= tQ6/}A#s0h$HXYC0Fyd3ktl$D'l%c%=dn&wbfdV1/v;kjJ"hzu\'M^G{{pEaMn
Sep 21, 2024 00:48:43.786637068 CEST	1236	IN	Data Raw: 19 a9 2b 02 02 da 17 50 f2 04 29 19 b7 5b 86 ad 01 f8 54 c7 45 7c 46 8b 4c 5d 43 d2 b9 e5 e5 10 fc ca 06 00 f6 c4 bd 22 5b 5e ba a5 84 44 d8 97 64 aa 6a 9f 2c ed b0 03 f6 12 4d 17 da 45 f1 c2 43 0a 0f 7d f8 0a 2d 25 6a 49 f1 26 88 51 33 6c 64 c9 Data Ascii: +P)[TE\|FL]C"[^Ddj,MEC}-%jI&Q3ld4Z=%`dNx%'n+)^x%TlS4{x</Y 6M!pmWXQI!0'xPPE<l#IlU2@=Ni&=
Sep 21, 2024 00:48:43.786652088 CEST	1236	IN	Data Raw: 52 93 53 6f 1e c3 89 44 68 49 e6 39 9d 41 a5 45 5d 82 f4 52 f6 c5 e6 6c 93 e5 01 06 76 54 41 ca 09 aa 5b ed 6b 3d 5e 16 07 05 3c ec 9e 79 ee 5e f9 c4 b6 8e 06 99 48 2d 99 79 68 d3 98 12 69 0e 52 b3 af c4 77 e5 52 fa c3 ca fd 7a 15 3d 8d 6a e5 31 Data Ascii: RSoDhI9AE]RlvTA[k=^<y^H-yhiRwRz=j19W^Y)6{&rHLjrvsb?T>B/wZ<0'V8%YMYG$j<%&NORZ\|!"87yh+27[^7b#]l L`^u8Xz7':l5
Sep 21, 2024 00:48:43.786669016 CEST	1236	IN	Data Raw: cd 56 34 c6 bc 22 b9 84 88 f2 6c 5b 7e ed 8b 75 36 2c a0 a2 49 22 8a 95 3b f2 77 51 d0 92 8c 29 22 25 b5 b9 a3 fd 63 d1 7f 26 70 63 44 92 5a bc bc ae ef 79 a6 9a d6 95 81 a3 3a cd 24 59 40 7e 51 fb b2 73 44 e5 4d 13 f6 dc 8b ae a6 45 d5 26 b7 75 Data Ascii: V4"l[~u6,I";wQ)"%c&pcDZy:$Y@~QsDME&uYjTQG*7Tn7)BCnD"1DB7rd[+S!L8}oD%ZyGBLf5r6'L?0#w=GB;\|'.dT(kMM=NY9!`u(4BL~gHB
Sep 21, 2024 00:48:43.786688089 CEST	779	IN	Data Raw: f0 15 33 eb 27 d3 6b f0 56 0e 99 ea 6b 1c 94 b2 85 8f 47 59 e6 13 4e e4 ae 13 40 48 5b e2 64 5b 16 32 d9 7d 44 1e a8 f6 54 a1 78 45 42 97 b5 83 56 5a 16 f2 71 47 ac 56 3d be 6d f1 15 96 12 07 3e a8 9d f8 71 bb e0 42 06 12 93 fa f9 d7 89 7f c9 c2 Data Ascii: 3'kVkGYN@H[d[2}DTxEBVZqGV=m>qBGED$@hUD?dbbnEmS9'5m@:)RI DIss="Hf&('T%()R][J8L\kA)G9b
Sep 21, 2024 00:48:48.509360075 CEST	385	OUT	GET /img/emoji/40/F09F8CBA.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:48.689464092 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:48 GMT Content-Type: image/png Content-Length: 3910 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-f46" Expires: Tue, 24 Sep 2024 22:48:48 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 0f 0d 49 44 41 54 78 01 ad d6 03 90 9c d9 e2 b0 f1 e7 e8 45 63 ba 7b ac 38 ab 60 bd b5 d6 b5 6d db b6 6d db b6 6d 1b 6b 3b c9 26 9b 61 66 a6 7b 5a af cf f9 e6 2a 95 ad ef 66 ef 5f 4f d5 61 e9 57 a7 74 04 ff 8b 2e db 71 b7 07 95 85 da 7c b3 8d 2e 6d 6e 6b fc 02 28 f8 3f 4e 7c ed 81 0f e4 bf d3 b1 57 24 d5 d4 cb 4e 94 56 3c c6 08 f9 98 1c 47 49 f9 2c 92 fc 21 56 3c 09 b8 f6 ff 14 f8 db 13 ef ce 7f aa 1a b9 0d 4a ca 73 b5 70 3b 7d 69 1e 60 84 db 58 52 86 ae 2d 40 79 94 84 a6 5d a4 cc d9 64 ff bc 73 e7 00 7b 38 a4 1d be 39 a7 9d b9 c7 78 88 75 1a 71 20 90 fa b7 c2 e8 2f 03 ed ff 08 bc f1 d4 87 73 5b f5 bb ab 8f aa 21 de 53 d7 61 c3 fa 3e 05 16 a5 34 42 6b 90 1a d0 08 a0 6b 73 76 77 0f b0 e4 d2 ef 01 f7 06 00 d8 a9 fc 97 a4 4e bc 51 20 a4 04 8c 34 a4 45 06 70 b9 20 b9 1b 30 7b 9b c0 eb 4e b8 17 87 ab 9b e7 3b 4b ce 5c dc 50 81 f1 8c 87 29 0f 82 72 20 01 01 42 18 74 05 4c b9 8f 5d 5c e4 a6 b6 e3 da 38 [TRUNCATED] Data Ascii: PNGIHDR((mIDATxEc{8`mmmk;&af{Zf_OaWt.q\|.mnk(?N\|W$NV<GI,!V<Jsp;}i`XR-@y]ds{89xuq /s[!Sa>4BkksvwNQ 4Ep 0{N;K\P)r BtL]\8<QB"7)eB4K"r$&:MMR_Hmv\OVd W2APAie<>cxCjn#S(?}9mEyvP)Ix^]/!DQAs` VL"nT"1W"l>o]H-.08q<A!1pA<cuI:I};.pe{q?yrW0Ly-6?UTP>8l0<ChKRdukY?u^f5f.2ps1=:A`4p'@ZDBy~8!CSb]V7T6fh/`X>/`hv?6D]Ml(JXpyXQ
Sep 21, 2024 00:48:48.689480066 CEST	1236	IN	Data Raw: 4d c0 81 a3 80 dc a2 a4 a2 52 ae 51 ca e3 f1 c4 66 cf 00 5e 74 10 b8 c1 72 ab 2e 37 fe d9 05 f2 f1 d5 1b fa a7 18 11 78 9d 50 d5 1b 47 d6 08 56 97 69 ce 47 d8 b1 23 a9 ef 3c 92 95 9b f7 a0 4e f9 2e fb 2e 75 b4 f6 6b 8e 18 74 6c 3c c1 23 dc e7 93 Data Ascii: MRQf^tr.7xPGViG#<N..uktl<#<K 6!"O!+PUP8l1OHG9$l;q_!Dl;z]}}\\.(!zKeWq5jAXJ>"TB@.&Efqu[/.Vhw6x/
Sep 21, 2024 00:48:48.689491987 CEST	1236	IN	Data Raw: 6c 9a 92 47 bd b0 57 24 e7 34 a3 95 cf ea 3f c6 e5 e8 e2 62 f1 71 a7 aa c9 df 57 53 57 2f 77 14 a1 83 92 93 18 e5 23 4a 1a a1 7d 9c 67 b1 49 4a 61 21 97 86 4c a6 48 2d a9 19 89 77 f0 55 7d 8e d4 55 ce 0b 86 d9 a8 0b ca b2 a0 e5 2c fb b2 08 67 24 Data Ascii: lGW$4?bqWSW/w#J}gIJa!LH-wU}U,g$LDp%6EAm[Yx+swkY&F&: @jUOv][Yxi~pCg*G[3&UU.!PXHF\|`OZdwS?4Ri9^`(2
Sep 21, 2024 00:48:48.689505100 CEST	544	IN	Data Raw: 35 54 8f 76 d4 46 e4 96 bd f9 ca a7 96 47 f2 f6 64 a8 9e 3b d4 a8 50 9a 0c 51 4a 93 16 3d 06 67 67 98 99 69 52 4c 8c 12 aa 20 90 5d bb f3 56 c0 eb f4 96 a9 b2 27 77 36 db 2d 3c bf 60 74 68 98 2c 83 28 5b a5 1b 75 e8 98 98 4b c6 63 8e df e5 11 27 Data Ascii: 5TvFGd;PQJ=ggiRL ]V'w6-<`th,([uKc'mKMmRD{9nI?sp3^Y>tvqa\|bdJv#fY?=ou4A0::B'~?'3ZNIM=Nas}-V,9Ejn;Lu?b?zN%0
Sep 21, 2024 00:48:49.653824091 CEST	385	OUT	GET /img/emoji/40/F09F8CB8.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:49.826164007 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/png Content-Length: 3656 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-e48" Expires: Tue, 24 Sep 2024 22:48:49 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 0e 0f 49 44 41 54 78 5e b5 98 69 90 9d 55 99 c7 7f ef ba dc b5 fb de 5e d2 dd a4 b3 74 96 09 09 09 a0 2c 02 8e 80 d6 88 0e 83 a2 c6 ca a8 e5 58 28 38 35 16 0a 05 4c 4d d4 62 62 a9 28 5a 58 8a e3 02 53 08 8a ce 00 29 0b 05 37 c0 b0 19 cc 46 42 48 e8 2c 64 e9 74 3a e9 ee db b7 ef be bc f7 5d cf 60 9f 0f cc 4c 97 16 19 c7 a7 ea a9 ba 75 b7 f7 77 9e f3 2c ff 73 f8 73 6c ef 0f 1f bf b6 f1 cc f1 27 3b bb 8a 07 5f 7d fc e9 db 00 1e 59 bf 5e 3b 72 ff f3 77 b9 3b 66 5e 2d ef 1e fb d5 d1 67 9e b9 8a 3f c3 14 ce dc 78 66 d3 3d 3d ab 86 57 df db 3f b8 f4 5a 34 1b 54 0d 12 06 07 7e ff f8 67 75 ad 6b 64 c5 ea 8b 3e 8e 10 90 b0 20 ab 53 f6 4e 7e 6b cb 9d 1b 6f f9 e0 e6 cd d1 5f 1c f0 9f af b9 2e 7d eb 3b 3e fa 9b de 85 23 97 90 72 00 15 00 34 0d 54 03 3c 1f 42 1f 74 0d d2 36 98 2a a8 82 89 f1 5d df 1c be f6 6d 37 73 86 a6 72 86 76 d5 e2 f3 6e eb 4d f6 5f 82 6d 40 c6 02 4b 03 80 58 40 c7 03 d7 87 48 80 aa 80 05 [TRUNCATED] Data Ascii: PNGIHDR((mIDATx^iU^t,X(85LMbb(ZXS)7FBH,dt:]`Luw,ssl';_}Y^;rw;f^-g?xf==W?Z4T~gukd> SN~ko_.};>#r4T<Bt6]m7srvnM_m@KX@H6lkwFttQA~AjG Bcz7gh:g`I^P@ tCc\|\,s-[??Cg/35b10T0 9g2Al_a[O?{rWl+>rP}4U><"!mt4@@SS[<4\|z_<8{?#dc^sY}%mBEhmO}Mxu5s~(TQtm6SbR]K\YkY`VO[M_}=yYzu16vm7aKuLl~9xX.ZJ1=u"\|"RdSt@3d#PT:am}{gl@&,2BA=.Ae\hbX~E8\50U_hU@w68:<[\v
Sep 21, 2024 00:48:49.826176882 CEST	1236	IN	Data Raw: f5 45 97 cf cb c1 b1 e2 f8 6e 4c 1b 62 15 ea 1d a8 b4 a1 e9 41 27 02 5d 27 0c e0 f8 4f 7f 41 d8 9d 44 89 42 44 bb 23 73 b0 d9 81 86 8c 70 4a b3 09 cb 33 c4 d5 1a a2 56 97 d1 2b 95 61 a6 08 a9 6e c8 24 65 6e 12 43 a7 23 77 a6 da 84 72 53 2e 34 8c Data Ascii: EnLbA']'OADBD#spJ3V+an$enC#wrS.4 iUJyU@@5Mc-NL\_Vh"z-h2i(_ZPi@3U4e1iO#e{o~kkjLP;Z,5HwTJV*EUAoupf

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49745	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:43.259485960 CEST	320	OUT	GET /js/widget-frame.js?62 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:43.804064989 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:43 GMT Content-Type: application/javascript Last-Modified: Thu, 20 Apr 2023 18:46:51 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"6441889b-16f16" Expires: Tue, 24 Sep 2024 22:48:43 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 36 34 62 38 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 bd eb 5a 1c 47 b2 2e fc df 57 51 b0 f6 a8 1b 0b 1a 90 6c cf 0c 32 f6 83 30 b6 98 91 2c 2d 81 6c cf 92 b5 fb 69 e8 02 4a ea ee 62 75 37 42 0c d2 6d 7d 37 f0 dd d8 7e df 88 8c 3c d4 a1 41 b2 67 b6 f7 de 5e 6b 44 57 55 64 64 64 9c 32 32 f2 b4 be 9e 9d cd e7 e7 5b eb eb e7 83 8b 51 31 2d 66 67 bd e3 72 bc 7e 6f 63 73 73 7d 9a ff f7 45 3e 9b 0f 26 c5 78 30 2f ca c9 c9 74 30 ce d7 4e ca e9 da 6c 3c 98 ce d7 dc 87 c9 e9 fa 67 eb 1e cf f8 aa 57 9e e7 d3 81 a0 c9 c7 e5 68 94 4f d7 8f 46 e5 a9 e2 dc bc 87 bf 37 62 ce a7 01 f9 67 44 ee 48 d9 31 52 be 27 29 d9 79 39 ba 3a 29 46 a3 ec e8 2a db 9b 16 6f b2 27 ff ff ff c7 fa 7a d9 49 f1 2e 9f 65 27 d3 72 9c 3d 43 c3 b2 7d b6 2c 1b 4c 86 d9 61 31 29 b3 ff 2a 5e 0f f3 91 60 7e b2 7f 98 8d 8a e3 7c 32 cb 3f fb ac 7b 72 31 39 66 53 bb 2b d9 f5 67 19 fe 7b 3b 98 66 a3 c1 6c 7e 58 a0 be ed 6c e3 81 7f fb 36 9f 0c cb e9 0c 2f 5f 76 c6 b3 ce 6a d6 19 97 ff e4 9f cb fc e8 4d 31 e7 af b2 f3 4a e1 c1 b3 2e 31 bd 13 14 f8 f3 [TRUNCATED] Data Ascii: 64b8ZG.WQl20,-liJbu7Bm}7~<Ag^kDWUddd22[Q1-fgr~ocss}E>&x0/t0Nl<gWhOF7bgDH1R')y9:)Fo'zI.e'r=C},La1)^`~\|2?{r19fS+g{;fl~Xl6/_vjM1J.1uFt~-]xklwF[ZKWwv8S8`w ;C(T\|/NB~xn``4:YQ>'lx\|1:Uwy]r'Yo<xX6lK1bhkfwWdV=O@[H=1\|~1d0.&IMBU]rMb^\|y[2>_3,FYx F;Q9Pwbu:]pz5N'++R1\<P^O[V+Vg<0WV6>\|`[\;Yb6`% 46%/'VyrN#q>,`0Tz.>up5\$<2m$7qx\|;w+O^
Sep 21, 2024 00:48:43.804101944 CEST	1236	IN	Data Raw: 30 3f 81 2e 90 ae 7c 3a bf 12 bc d7 b0 e9 ad f9 2a 8c 6d 6b f8 21 62 c0 5c 6b 05 b2 26 22 8d d9 10 91 6f cb b0 98 9d 0f e6 c7 67 d2 a0 2e bd 86 fe 2a 56 56 62 c4 20 69 15 7c 04 11 e3 62 96 a3 13 98 95 a3 b7 74 2e f3 b3 7c 12 59 fa 75 de bb 25 c6 Data Ascii: 0?.\|:mk!b\k&"og.VVb i\|bt.\|Yu%LM*Y(FelhpJWS19^XltZ<~Zpx'8HO\|A;~~cD{U\^m/m]wT_{O_monl\|^\A-bGKz{
Sep 21, 2024 00:48:43.804136992 CEST	1236	IN	Data Raw: c7 17 84 ba 73 c7 7d 5a 3b 29 e6 cb 40 65 1f 7a 67 88 dc e0 4c ae 46 f9 9d 3b 4b c8 64 1d 9f 3d e1 40 a4 bb dc 5d 53 c3 d5 41 e0 1a 9b cd 81 9f 1b 1a ae 2c af 60 ac 0e e8 7c b6 7a b6 bd 7c 74 82 e8 67 ad 98 6f 35 b4 09 9a b5 18 60 0b ea 32 99 2f Data Ascii: s}Z;)@ezgLF;Kd=@]SA,`\|z\|tgo5`2/6A06'!{ rN0W$;WWz0=\|ZK7/0pJYJ&:#\|MwA]o}2jX4\OdQ]V\?)anMP4Y
Sep 21, 2024 00:48:43.804400921 CEST	672	IN	Data Raw: 50 8c ac f3 b6 98 15 08 8a 23 b5 20 d0 92 2c 1c f8 79 30 fb 49 3f 5b 7b 28 bc ca 27 90 37 9f 5e e4 26 27 c4 63 1a 43 f9 78 a4 9c 38 24 8c 7b 5a 3f 86 99 58 93 74 ac 24 b4 80 ee b5 50 bd e5 69 ee 97 27 27 1d ed 17 ac 81 ea 1c eb ad 3c 61 e0 16 b5 Data Ascii: P# ,y0I?[{('7^&'cCx8${Z?Xt$Pi''<a"\|/[{OtL`~%Pg0w0[::<]WNvGDGMsX+yfU$TxV+_:KXX)rN&t+TFMTf
Sep 21, 2024 00:48:43.804435015 CEST	1236	IN	Data Raw: 20 f3 1d bf 91 86 2e 1e 7e b1 90 e5 88 c6 c3 a8 fd be ca 01 56 2c be cd f7 aa 8b d6 9a bf f7 8e 46 17 53 d3 45 d5 20 2a 00 55 b1 d3 7b 3d 5b d3 8a 8e ca 77 b0 5b 5f 69 60 b0 37 74 fb 06 da 8f c1 e5 37 8b cd 7c b4 3f 79 08 2e 62 f2 0c 2b 99 10 40 Data Ascii: .~V,FSE *U{=[w[_i`7t7\|?y.b+@0cB%eqBNyBrbUK&83q)7T#X@o{Hj.IdG1Mk2F40#PK:.Wl@,`JGT2CD8vWT#\|0K 5c~'`x
Sep 21, 2024 00:48:43.804471016 CEST	1236	IN	Data Raw: 8e b7 37 90 a2 cc 72 b4 38 96 9a 3a 79 3d 34 e6 88 58 5a 68 8d 64 68 22 f3 63 46 43 98 4a d1 ab 2f b3 88 92 aa 44 87 8a ed aa 50 35 e5 16 47 42 fc 66 9a 98 6c 50 95 02 ec 54 e5 47 4f 67 b9 d7 7f 9d dd 5d 77 64 37 79 0a 2d d4 dc c3 d2 7f c9 b8 d8 Data Ascii: 7r8:y=4XZhdh"cFCJ/DP5GBflPTGOg]wd7y-Qnt\)E\59X\|`:R8D+LDbeDZ+;`8Pqnw`)<X(w%*;U1kuYed,(?y/b\RP
Sep 21, 2024 00:48:43.804527998 CEST	1236	IN	Data Raw: cd 10 a0 ef 8d 63 fa 3f 06 bd 3a 94 45 00 b0 98 e4 79 79 7a 3a 72 cb 7c 24 48 04 9b c1 73 95 fc bf 85 cf c7 ec 5b 94 4c 33 56 f6 26 20 a2 2f 9f 6c 0b 15 5e c8 3a 72 c4 da d8 cd c4 8d 8b 58 d8 fb 2d e1 30 f3 11 96 e5 50 6c 12 39 18 32 87 e8 5b 4d Data Ascii: c?:Eyyz:r\|$Hs[L3V& /l^:rX-0Pl92[MUI{S([\|cT+c7PYNPJjlM"zi]=4rd,c~)KXF/[mwMWKC!bh\|}P<6_X
Sep 21, 2024 00:48:43.804563046 CEST	104	IN	Data Raw: 29 64 52 30 8c d8 38 20 89 41 0e fd f4 9a f6 41 21 b4 d0 67 9a bf 4d 74 c5 fb 81 6b 38 8c 14 18 a7 76 5e e9 1e 2e ed be 3d 26 db 76 14 ba 3d fe 32 ed 22 83 2e 10 d0 a0 d5 1b 38 49 e2 9a bb c9 5e 4c 70 e0 d4 19 f6 4a ff 33 1f 3a 39 b1 88 db 51 bb Data Ascii: )dR08 AA!gMtk8v^.=&v=2".8I^LpJ3:9QohH+Q[eJOO
Sep 21, 2024 00:48:43.804591894 CEST	1236	IN	Data Raw: 71 cf d8 b8 53 0e fb 97 83 c2 cf 5f b1 00 d3 84 3a e5 84 33 ca bb 9d 00 04 43 aa 17 0c 55 72 23 fd 22 75 53 dc 60 e8 cd 4a e7 74 4c 4b 88 a6 71 f6 b2 17 48 81 22 d2 9c 12 b8 58 fd 59 32 b0 20 18 10 d5 22 3c e1 20 0f 76 1c da 28 8f 2b e9 e8 88 88 Data Ascii: qS_:3CUr#"uS`JtLKqH"XY2 "< v(+:"lPY@K]Y`}GU2Rb/6+')jH^JRZSlz@n:Ni)&[9lk>-jvU]'96:V7V<0A<{sW">
Sep 21, 2024 00:48:43.804627895 CEST	1236	IN	Data Raw: 8e db 7e 46 d1 72 2f 7e e7 fa be e4 bb 2e 53 53 65 33 f5 49 54 49 d3 68 d7 ce 43 c2 4f 6c 51 85 14 07 6e cb d0 ed 6a 3c 5b 12 eb 05 f1 e9 d2 5e e8 d2 c0 ad ec cc 5e 48 11 40 c8 5f 41 a7 8e 57 b4 44 f1 2d 18 16 36 d2 d6 79 fc 74 e7 3b cb 6b a8 f6 Data Ascii: ~Fr/~.SSe3ITIhCOlQnj<[^^H@_AWD-6yt;k%84nNY85TybzaSaKJ5*63:"]4{uVi\|45uP@"ExG7!FI^_R<hx-?SKeFm
Sep 21, 2024 00:48:43.809041977 CEST	1236	IN	Data Raw: a2 46 3e c2 3d 08 33 cb ed b0 85 8f 70 1c c0 26 96 15 10 a8 b3 41 1a 1e 05 f6 f0 7c 31 cf bc 62 82 b1 43 52 96 47 09 b0 2c c1 b4 6c a1 65 9d ce 3d 62 c3 b6 88 53 de 37 b5 eb 3b 77 9d 70 d7 ee 15 36 2e da 33 50 4b 6c c1 b5 3d d3 00 a5 f5 54 81 dc Data Ascii: F>=3p&A\|1bCRG,le=bS7;wp6.3PKl=TMh-UAs}aDAWZuE%EBRgOu,sSq=kEV-//ZC3@+2h{224*aTe>;8?/qHZ
Sep 21, 2024 00:48:44.287686110 CEST	402	OUT	GET /img/tgme/pattern.svg?1 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://telegram.org/css/telegram-web.css?37 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:44.466958046 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:44 GMT Content-Type: image/svg+xml Last-Modified: Thu, 05 Jan 2023 17:52:04 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"63b70e44-3891a" Expires: Tue, 24 Sep 2024 22:48:44 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 37 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ec 9d 5d 8f 24 c7 75 a6 af a9 5f d1 3b 7b b3 06 ba 9b 95 99 95 f5 41 93 36 d6 8d 85 61 40 02 16 30 e0 db 05 dd 1a 53 b3 6e cd 10 53 23 89 94 b1 ff 7d 9f e7 3d 91 d5 35 64 77 54 f7 cc 48 22 65 93 98 ce ac aa cc 88 13 e7 f3 3d 27 22 23 bf fc fb ef 7e 7b 77 f1 fb 97 6f 0f af de bc fe ea c5 70 bd 7a 71 f1 f2 f5 ed 9b 5f bf 7a fd cd 57 2f 7e f7 ee df ae 76 2f fe fe ef 7e f1 e5 7f bb ba ba f8 c7 97 af 5f be fd fa dd 9b b7 5f 5c fc cf 5f bf f9 d7 97 17 ff 74 77 f7 bb c3 bb 7c 75 31 6e af 57 d7 c3 e5 c5 3f ff cb 3f 5e fc af ef be 7d f3 f6 dd c5 ff be fb dd 37 57 ff f4 fa e2 3a 5f fe 4b f5 f1 c5 c5 e6 7a b5 ba f8 87 df bd ba fb f5 c5 ea 6f 2e 2e ae ae 68 fe f0 fb 6f 4e 89 18 5e 5c bc fa f5 57 2f 7e f9 f5 f7 2f df fe 1f 3e 40 e3 eb c3 57 2f 7e f3 ee dd b7 5f 7c fe f9 1f fe f0 87 eb 3f 4c d7 6f de 7e f3 f9 b8 5a ad 3e e7 e6 76 c9 17 df dd bd 7a fd ef 0f 5d 38 ec f7 fb cf f3 2b 97 7e f5 62 f5 ed 77 2f 2e be af e3 2f 3e bb f8 fd ab 97 7f f8 87 37 7e 7f b1 ba 18 d6 [TRUNCATED] Data Ascii: 7000]$u_;{A6a@0SnS#}=5dwTH"e='"#~{wopzq_zW/~v/~__\_tw\|u1nW??^}7W:_Kzo..hoN^\W/~/>@W/~_\|?Lo~Z>vz]8+~bw/./>7~^~~}}?p8\|-7\|\|lpVoxo_xW~/#{y_/W\|{o_\!:xvzH1st?vmx;J [K'&l!cZ7~7w_pvrx\]pdw{V_vzsX_zr0^O~rZ7/>0W\M&ZsG.\|vM[.\dp~\-f^c2\|ft36-^4,7W_at9\+x.F= Xu;CEq;kRfGtk.%(oV
Sep 21, 2024 00:48:45.288382053 CEST	385	OUT	GET /img/emoji/40/F09F8D92.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:45.461750984 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:45 GMT Content-Type: image/png Content-Length: 2903 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-b57" Expires: Tue, 24 Sep 2024 22:48:45 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 0b 1e 49 44 41 54 78 5e e5 98 09 8c 5d d5 7d 87 bf b3 dc fb 96 d9 c7 63 9b 31 6b 8c 63 3b 18 17 6f c5 24 8e 97 31 8b 31 c4 a1 10 4c 53 36 93 02 4e 29 a4 14 25 6d 15 51 c1 10 94 52 91 ad aa 0a aa 9a b4 49 49 d2 50 12 52 08 9b 0c 11 18 1c 15 28 2e 18 2c b0 4d 8c 31 ce c0 78 4a ec d9 de 7b 77 3b e7 fc 3b 8c ad 28 6a c7 ae 45 28 54 ea 77 df 4f ba ba ba d2 fd f4 3b e7 5d fd 75 f9 bf 8e e2 30 5c d1 7b 42 79 a0 3f 9d de dc 19 cd 08 ae 72 e2 e0 7e 77 ac 8d 2a 9d 56 d9 ce 40 88 c4 14 39 4e bd e9 43 fa ba 8b e5 e7 66 44 bf b2 74 fa ae 9d bd bd 84 ff 35 c1 b5 bd c7 74 ea ac 79 85 2d b5 ac 6c aa 94 17 78 e7 67 d6 6b e9 a4 2c cf 51 4a 61 95 c6 79 4f 9a a5 b8 dc 03 1a 50 38 27 f8 10 06 94 b0 c5 56 f4 43 5d 15 ff c0 dd 7f b5 7b f7 7b 2a 78 d5 ad 73 ae 6d 9b dc 7d d5 e8 50 36 0f f1 64 b9 23 73 05 41 02 91 35 18 05 b5 5a 42 9a e5 84 10 88 94 c5 3b 21 cb 8a 71 69 01 8c b2 68 63 89 44 ed 56 79 f8 ee 7e 1f ee 78 f6 [TRUNCATED] Data Ascii: PNGIHDR((mIDATx^]}c1kc;o$11LS6N)%mQRIIPR(.,M1xJ{w;;(jE(TwO;]u0\{By?r~wV@9NCfDt5ty-lxgk,QJayOP8'VC]{{xsm}P6d#sA5ZB;!qihcDVy~x'Whq3fXd.#'zc!K4#A<dEN067Gs/=2q9'w}"'I(IZc}I<Qd:o~4Kxzyf JXkAs9IF1L#Q<')^EnGYdQ>GBph(URjZ[hmiMlo-rkIGWZb?n_\|guw5Y\|\B(7OG9 kF2!}uZ_.{-3tPDq8AilR<I7mEo,}Wy;iMtLs&C^4,6%S{fq~^5Wz{_y/
Sep 21, 2024 00:48:48.508758068 CEST	383	OUT	GET /img/emoji/40/E29DA4.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:48.691255093 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:48 GMT Content-Type: image/png Content-Length: 2452 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-994" Expires: Tue, 24 Sep 2024 22:48:48 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 09 5b 49 44 41 54 78 5e dd 97 7b 8c 5d 55 f5 c7 bf 7b 9f 73 ef dc b9 33 73 87 76 da 02 2d 0d 96 97 29 89 a4 46 b4 c8 d3 da 00 02 82 2d 29 94 56 53 c4 a8 31 e5 0f 31 81 68 08 89 31 fa 87 c6 47 a2 01 14 4d 4c 48 a3 30 d0 a2 3f 7e 01 fb a4 50 68 79 15 4a 29 d0 62 5b 13 0a 2d 9d f7 7d df f3 da 7b b9 ba ce b9 b3 33 64 0a 1d 24 60 fc 26 6b d6 d9 7b f6 ec f3 39 df bd d6 3d 77 f0 3f a1 a7 81 33 76 00 67 3d 5b c0 a7 f0 1f ea 29 60 de b1 bd 36 f3 9e 38 01 69 1c 47 cf cc c0 ec cd 3d b8 73 73 0e 5b ac c6 76 f2 f0 b2 02 36 ec 28 a1 ff a9 12 56 62 0a da 0a f8 1b 0b f8 e6 16 1f eb 14 b0 c9 00 2f 7b c0 b6 8d 0a 1b 36 74 e2 f6 6d dd 98 89 a9 68 53 49 ff ec 09 8d e0 15 80 0e 9d a4 68 6c e1 b9 d4 ba fa 62 0a 16 9f 4f b5 f9 a7 d2 61 9e db d9 83 37 37 77 63 f9 07 ee d5 e3 dd b2 bd 88 b7 0e 14 40 23 e7 9c 42 8d 2b 2e a0 d6 92 c5 54 5b 74 3e 0d cc ed a1 bd 00 3d a9 51 dd c8 66 e0 83 44 80 da 54 52 1b 5e 04 68 68 5e 1f [TRUNCATED] Data Ascii: PNGIHDR((m[IDATx^{]U{s3sv-)F-)VS11h1GMLH0?~PhyJ)b[-}{3d$`&k{9=w?3vg=[)`68iG=ss[v6(Vb/{6tmhSIhlbOa77wc@#B+.T[t>=QfDTR^hh^OD6wZD'd/='w1=sk}T9gh#4o\|!K;Hdc2LdxLhDPmN2vD+%z}+n%-SrzM%<I/Ac?G1F8=z,NL[v%znf=0uDo&h?6?yB^ix+T]pmhI^L*:Q@h8Y~Fz}]V]E%RCyYwnrqW/)54i#Y@@~%o<XvK<2f7>7-9\3vlVe5b06 1:oz.[`ve Z9A9va=(;^d7
Sep 21, 2024 00:48:49.730509043 CEST	385	OUT	GET /img/emoji/40/F09F94B8.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:49.903831959 CEST	1183	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/png Content-Length: 842 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-34a" Expires: Tue, 24 Sep 2024 22:48:49 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 03 11 49 44 41 54 78 01 62 a0 23 18 05 a3 60 14 dc 2a e3 2e 05 30 43 0e b0 92 66 51 10 3e 8d b5 ed 0d d7 0a d6 1b ad 6d db f6 b3 6d db 5a 7b c7 b6 6d db 66 63 d8 af ff 9a 53 e3 67 b5 6e 52 c9 c9 bd 75 aa be 5c 2a 20 e1 56 47 9f 11 b4 26 fe 74 50 9c 03 0c ce 1a b4 31 fd 34 d8 fb bf 01 fb 80 37 c1 99 77 01 02 67 0e da 94 6e 81 73 e0 0b 70 af a8 87 7b 65 3d 38 f3 8e 6f fe 85 8b 31 07 6f ce 50 b8 fe 4f c2 bd 24 0f c6 92 2c 8a 33 ef c0 37 7a fc 02 b7 26 4a c2 37 a5 9b e1 ec fb 10 dc f3 12 60 2c 88 06 e6 87 51 9c 79 c7 37 d0 43 af 6f 7f 2e 4a a2 37 a7 9b e0 ec 75 2f 1a 67 7c 0b cc fa 4a f5 29 30 fb 88 38 f3 8e 6f f4 d0 cb 1d df c0 45 4a 14 0b 1d ff dc 81 c6 49 ef c0 98 f2 06 30 f5 95 56 c5 37 7a 9c ea dd ac 3f c9 5d af c3 6d 4a 53 b8 df af 87 6b f4 33 30 c6 3d 01 8c 7f b4 5d d1 43 2f 77 36 eb ee ea 08 2f fd e4 9a 48 89 3b 0c f7 f3 b5 70 0d 79 00 c6 88 7b 81 91 77 a9 ee 6e 57 f4 d0 cb 1d ee 12 92 59 9e [TRUNCATED] Data Ascii: PNGIHDR((mIDATxb#`.0CfQ>mmZ{mfcSgnRu\ VG&tP147wgnsp{e=8o1oPO$,37z&J7`,Qy7Co.J7u/g\|J)08oEJI0V7z?]mJSk30=]C/w6/H;py{wnWY)Ww)\}o1&`vE2Y\aZ}^-qf0psdg0b&e0*\\NilvA&M8Xcb&.vC9!ri}ew?{GfnY%H5V")]9"[8Fu3%9vB+d])@g,fj@{B(d@`-)\ #2Y!sDVtM.3lICIEvM-)!2K(=pMZ'@a^i}hLU[Qo8B&+H9M;2B!(C,%) 2AR-)!V7Z@<wH@wV]IENDB`
Sep 21, 2024 00:48:54.674097061 CEST	375	OUT	GET /img/favicon.ico HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:54.848628998 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:54 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT Connection: keep-alive ETag: "62616083-3aee" Expires: Fri, 27 Sep 2024 22:48:54 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 9e 22 0d d9 9e 22 36 d9 9e 22 6f d9 9e 22 a4 d9 9e 22 cd d9 9e 22 e7 d9 9e 22 f7 d9 9e 22 fe d9 9e 22 fe d9 9e 22 f7 d9 9e 22 e7 d9 9e 22 cd d9 9e 22 a4 d9 9e 22 6f d9 9e 22 36 da 9e 23 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: 00 %6 % h6(0` $""6"o"""""""""""o"6###("s"""""""""""""""""s#(###-#######################-###}#########################}##:#####

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49746	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:43.259612083 CEST	320	OUT	GET /js/telegram-web.js?14 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:43.805924892 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:43 GMT Content-Type: application/javascript Last-Modified: Fri, 18 Mar 2022 10:32:52 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"62345fd4-2e63" Expires: Tue, 24 Sep 2024 22:48:43 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 65 64 37 0d 0a 1f 8b 08 00 00 00 00 00 04 03 a5 5a ff 73 d3 46 16 ff bd 7f 85 c2 65 6a b9 c4 22 c0 70 3f 04 92 0e b4 74 ee 3a 4d cb 1d 19 98 0e c3 78 14 7b 1d 0b 14 c9 27 c9 09 b9 34 ff fb 7d 3e fb f6 ed ae 6c 99 42 0f 66 40 da 7d fb be 7f db 27 a7 8b 75 35 eb 8a ba 4a f7 c7 c9 ed 37 49 b2 9f 2d aa ac 31 f3 26 bf 4e 8e 13 bf 2b 9b 49 d2 98 6e dd 54 49 b7 2c da ec 32 5f a5 01 e0 56 16 eb c5 a2 35 dd 59 bd 7a 1a c3 3e 4d ee c6 4f 81 fd 8e ff 58 12 ed ac a9 cb f2 9f 55 57 bf 29 4c 8f 54 bd 22 3f ad 52 74 af 60 46 9f fe f8 23 b9 bd 03 9e 3e 37 8b a2 69 bb 74 9c 99 7c b6 8c d8 b2 42 11 f6 2a 6f 92 55 dd 16 44 1e 90 65 7e 09 58 47 f9 ba ab 47 07 16 35 8f 24 c9 2a 9f cf 8b ea 22 86 77 2b 00 3f 8c 21 e7 eb 26 df 40 ed 97 08 4b c1 f9 87 6c ec 17 9d b9 94 57 60 de 4f a9 cd 71 8c 6c 7f 56 57 5d 00 20 78 26 0a 7b 95 37 a6 82 98 31 b4 ec 40 e5 38 01 74 3c eb a0 b1 d6 07 55 69 09 7c dc 17 c0 89 6a d1 6c 6c 91 fe 3f 4c 71 b1 04 4f 20 60 d9 a9 d7 9d 69 64 b1 4f a2 68 5f d4 f3 1b 61 1e 0e 94 97 ad 51 d9 8b 45 92 0a [TRUNCATED] Data Ascii: ed7ZsFej"p?t:Mx{'4}>lBf@}'u5J7I-1&N+InTI,2_V5Yz>MOXUW)LT"?Rt`F#>7it\|BoUDe~XGG5$"w+?!&@KlW`OqlVW] x&{71@8t<Ui\|jll?LqO `idOh_aQE{Kq2gKq5kTC]%$:^O7:n$01&f4VtO]b w&xs%6d,!!cvQ9,fd`pDGJi"Xd-\qb=sYYYI)#:?@/A}$tbhzkccH{#`6O~O,pTT`cbB,!%$"-y6!^X'I(O!KzoS}^e",QD[2@D?2KKFg?H5lDs1:=KsT[}7lvZV)6L(A0[Zdt(Jks;#wgB4Ng):B$]8in7zlYT/O9)j-P{Ra3TuwSkH{^
Sep 21, 2024 00:48:43.805958033 CEST	1236	IN	Data Raw: 5c 21 d1 68 31 cf 66 8d 81 b4 2f 4b c3 d2 9e 8e b0 2b 7a c2 43 d6 f2 7c 76 ae c4 70 6c 74 98 d8 bf d9 93 d5 a7 e4 bc cc 67 1f 47 c4 1b 80 e7 45 bb 2a f3 1b 82 56 75 65 64 d7 35 0e c0 34 bf c9 f2 d5 ca 54 f3 1f 96 45 39 4f 71 ce 1a 85 7c 81 cc b4 Data Ascii: \!h1f/K+zC\|vpltgGE*Vued54TE9Oq\|BY%CN8O-aat.7wun0?]q5RVX>jxn<y1?`=wNns^ft~2>l(p[2^^bv\ymVH{xmWhH
Sep 21, 2024 00:48:43.805993080 CEST	1236	IN	Data Raw: 17 4d 54 fa 6e 6d 2f 3a 19 56 de fe b9 c1 5d 86 9d a1 cb 24 ae 80 b4 d3 4b 2c b3 e7 cf 27 02 f2 3e f8 e3 7e be c0 b0 c4 4e 90 a5 f8 0c 1c b2 20 d1 19 f2 7c bd 94 d1 33 89 89 b7 84 11 ad 64 58 e9 4d 84 61 5c 8b 2d 5b 0a e9 57 83 3f 32 d2 9c 04 59 Data Ascii: MTnm/:V]$K,'>~N \|3dXMa\-[W?2Yin*bk\@Q6,!kO]>0tLT19):Bwi3)kV}w#Ey' ;Q7=Vf25MA]tYD=~BsSM]dM~g/
Sep 21, 2024 00:48:43.806029081 CEST	437	IN	Data Raw: 1e 02 fc 59 7a 6c 31 0b 24 30 92 a2 4d 68 7d 62 fb b2 e9 b2 5b 6a e9 f6 c8 b9 fe c1 dd c0 50 8a db ae c6 77 41 cd 87 a9 43 d0 3f e3 90 2e f0 85 73 a8 87 c0 e9 5d 73 63 51 c1 f0 f4 58 f6 42 03 c5 77 e5 5f 0a b0 a6 4a 81 a4 a6 5c 22 a5 a6 a8 c9 6c Data Ascii: Yzl1$0Mh}b[jPwAC?.s]scQXBw_J\"lQ*1)ZG~DLdj{]H#qwV/L=\0l3x,XsR-x=7Bf9ZhtrtfO"EN{aGUiDr"%:
Sep 21, 2024 00:48:48.509056091 CEST	385	OUT	GET /img/emoji/40/F09F988A.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:48.694000959 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:48 GMT Content-Type: image/png Content-Length: 2988 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-bac" Expires: Tue, 24 Sep 2024 22:48:48 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 0b 73 49 44 41 54 78 5e cd 98 7b 8c 5c d5 79 c0 7f e7 9c 7b e7 bd bb b3 eb 5d 7b d7 5e af df 89 cd 62 13 9a 14 12 9e b6 69 9a 47 f3 28 4a a0 69 ab 56 69 ab b4 49 55 44 68 a8 48 d5 12 39 6d f2 87 1b a5 10 ab 88 a2 34 49 43 90 92 40 13 12 14 9e 4d 8a 6d cc 23 84 18 64 4a 21 31 eb 07 eb 65 9f b3 bb b3 73 ef cc dc b9 e7 d1 f5 1e 69 47 80 69 29 14 29 9f f4 d3 bd 33 9a f3 9d df f9 be 39 57 f7 5e 7e 95 c3 81 14 bc c1 b8 67 df fb b2 bd a9 59 89 74 2b 64 c6 95 00 9c 21 16 8e 4a 6d 4e 4f ed da b3 bf c9 1b 88 d7 25 78 68 ef bb 57 97 33 d1 a5 e5 d2 fc c5 c5 52 75 47 ae d0 18 52 05 53 96 8a 2c 20 ac a1 69 ea b2 9a c4 b9 d1 7a d4 71 64 26 2e 3f 54 69 15 0f ec ba 6e ff a9 37 55 f0 d1 bd 97 6c eb cf 8d 7f bc 77 c5 d4 e5 a5 be 68 0b 7d 1d 50 1e 82 e2 3a c8 f6 83 ec 00 21 c0 44 d0 9a 82 e8 24 cc bf 00 33 f3 44 53 b9 63 d3 95 d5 3f 98 68 f4 ff eb 05 9f 3d f8 f4 ff ab e0 0f f7 7e a8 63 9b 1a b9 7a b0 77 e4 cf f3 6b [TRUNCATED] Data Ascii: PNGIHDR((msIDATx^{\y{]{^biG(JiViIUDhH9m4IC@Mm#dJ!1esiGi))39W^~gYt+d!JmNO%xhW3RuGRS, izqd&.?Tin7Ulwh}P:!D$3DSc?h=~czwk}n(>}Ga'pi-7n_=srn6WB 7Ypp!(TF#G=_s~wW1dR@E2}N}~Cc#\|_vQezG{Iz5zg_>A~q-y9s(Y<s+Q1qhz8^?u1g!toPgtm6N+4L==&{l?bWlY01`$to>mcW5%5\ ^hhkZ^mVgq38tCX4]=' @FJB@(6@
Sep 21, 2024 00:48:48.694017887 CEST	224	IN	Data Raw: 41 d3 40 aa c1 3a bc a0 85 d4 fa 45 f7 6c a1 d8 f5 78 d7 50 f4 c2 27 81 ab f0 81 5c be 18 7f f1 b2 55 1b 0b 93 bf 43 67 16 f2 bd a0 6b 78 e2 f6 b9 aa 43 b3 c2 63 df 7e 94 6f fc d5 8f 38 74 db 43 d8 c6 24 64 22 70 d5 97 92 a9 61 ea 93 1c f8 e6 43 Data Ascii: A@:ElxP'\UCgkxCc~o8tC$d"paC\|yGpYk*dLvvd!Zzttqu G?/pOYo<=3_G'3PXAW1oB[T (iB
Sep 21, 2024 00:48:48.694037914 CEST	1236	IN	Data Raw: e9 12 3e 89 6a 32 f3 dc 04 0f df 7d 82 75 ab 25 e7 9f 97 65 f3 3a c5 e3 f7 1e 67 f4 c9 53 be ba 3a f2 a8 3a a7 9e 1a e5 89 fb 4e b2 65 bd 5a fa ed d0 1a c9 63 f7 9d a0 f2 cb 49 50 cd 76 de 34 c6 9f 37 20 c8 a2 b2 82 bc ae ec 7c 89 e0 3d 57 bd 2f Data Ascii: >j2}u%e:gS::NeZcIPv47 \|=W/s\F:4bkGP3rdlU4f)d<I)^3Khqih}qgqaH[\|,_1FbX8Ms"qdojGu2zLi4vg-.\V
Sep 21, 2024 00:48:48.694050074 CEST	634	IN	Data Raw: cc e6 f5 05 72 41 0b 16 16 40 27 38 a3 49 53 b7 54 b9 46 5d 13 cd b7 a8 8e 27 04 c5 ae bd 3b be 50 f9 ec ff f8 4c f2 f6 6d 53 37 1e 79 2a ff de a8 a2 df a5 02 89 10 02 9c c0 39 08 02 83 b2 75 48 5a 74 e7 73 9c b7 bd c8 db cf 5a c3 42 dd b1 10 a5 Data Ascii: rA@'8ISTF]';PLmS7y*9uHZtsZB$U@qZXYpahDh&sn_x;SY\^%RB($Xh6rMC#N[4#1~@mP!k'pz2%oKxH[L4%9:
Sep 21, 2024 00:48:49.654700994 CEST	385	OUT	GET /img/emoji/40/F09F8CBC.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:49.829871893 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/png Content-Length: 3524 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-dc4" Expires: Tue, 24 Sep 2024 22:48:49 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 0d 8b 49 44 41 54 78 01 a5 d7 03 90 5c d9 c2 c0 f1 ff c1 45 df 76 0f 32 13 ad 8d ef d9 b6 6d db b6 6d db b6 6d db d6 7a 37 c9 24 e3 9e 76 5f 1d 7c 5b 8f 53 79 8b aa bc df c5 41 e9 18 82 ff d1 df de 7f bd 13 c2 60 df 43 65 ac 9a 14 f6 c7 2e 2f 37 85 2a ae 60 0d 0b d6 76 7e f9 e7 e6 15 3e 05 58 8e 90 f8 d4 a7 ee ca 91 3a 31 4d 77 75 66 cf fd 7a 73 97 3d 83 b0 82 b5 21 ae 28 11 52 21 84 c4 0c 27 ac 9e 55 3c 06 78 2b 47 48 9f dc fb 0d 47 aa 08 ab 77 6a 1d a5 cf 08 67 8e c1 8b 1a 04 21 82 12 21 22 d0 31 64 3d 26 9b bf 7e e0 ca be a5 f7 01 29 47 40 8f 27 17 71 a4 6a 9d 2b 5c 31 6a cd 23 e3 19 bc 6c 20 b4 02 72 10 31 42 84 a8 28 a6 ba b3 7d 5c f6 d7 74 2f 70 0e 47 40 67 93 59 2e cb c2 09 a7 df 43 bb f3 6e 1f 25 ad 6c 3a e9 7c 02 f8 26 ff 80 88 fa 6d 1d c5 88 b0 82 0f 6a e0 46 e0 33 84 aa 01 02 74 40 58 8d 12 1b 88 b9 7f 15 70 e7 42 f3 b4 5a 4b dc 1f 27 db 93 41 f0 29 e0 db 5c 06 bd b0 7b 81 4b 53 da f0 [TRUNCATED] Data Ascii: PNGIHDR((mIDATx\Ev2mmmz7$v_\|[SyA`Ce./7*`v~>X:1Mwufzs=!(R!'U<x+GHGwjg!!"1d=&~)G@'qj+\1j#l r1B(}\t/pG@gY.Cn%l:\|&mjF3t@XpBZK'A)\{KSYkBU4F15>O@&7v;/5Lx/K\-uKy{gOo]#D{irnBiWiy0t?SefQ'7{NG+rn9@~7VsuBjhU j,<YT<+1OQ2fV{FxtXtl%bkgOs!fvSJD\|SNX~J:Ty]Ba1M!(+DA+OpM`26Z-kqEP1BG!)z_zp;M&#8e!i6wA/E-D"leWaX+G2THq&D&z7I}QR)7B1x]!4>vTDMr}q&^W
Sep 21, 2024 00:48:49.829924107 CEST	1236	IN	Data Raw: 31 ae 40 92 23 55 03 1f ed a2 98 ae a0 43 8f 54 1d b0 31 81 0a 29 fa 6b e4 d5 90 80 04 8c 47 14 e0 cb 29 b6 2c c8 ba 23 30 16 1f 28 bc 31 f8 62 48 39 da 8f 14 35 d4 cc 02 78 70 b6 c4 fa 9c cd cd c9 64 ec f7 bc 8f c3 e8 8b 33 d9 ae de a2 7f ce 45 Data Ascii: 1@#UCT1)kG),#0(1bH95xpd3EOvrTcM![e!D12eJH=Fn.ZXzSVp^vNbX;hr9p}NyuDO1{D*R$Hd@[(kE//8Zm.nxQ%m
Sep 21, 2024 00:48:49.829933882 CEST	1236	IN	Data Raw: b6 72 ee da 9a ad df 6d 76 8f 3e b6 31 ab 6a 42 29 95 67 62 80 31 8b 8d aa 5b 8c 2b 21 ad 85 98 76 5b a0 e2 80 5f 7f 77 93 bf bc ff 10 f5 a1 25 ae 09 4a 27 90 0a 02 05 12 30 ee 1f bf fe 18 6a d7 69 73 f5 fb ee 66 b6 59 65 3c b4 6c ad 6d d1 5d 9a Data Ascii: rmv>1jB)gb1[+!v[_w%J'0jisfYe<lm]L4r9I7;4Fx-;l'N$Rv'+pZTO!jA:4e<WG/ < x0y6W"WG=pv+*[ue ^~&gOr\|
Sep 21, 2024 00:48:49.829945087 CEST	158	IN	Data Raw: 46 90 1f e3 32 88 f7 3e a0 ce 91 8a 67 16 3f 7b da 29 d9 9d ea 3b 9a c8 38 c4 da 0c 21 23 a2 a8 85 60 4a 39 59 e3 82 df 6f 7d 01 b8 23 db fc ea 67 b4 a5 1a 18 60 c4 e5 10 af bc 1d 47 4c 2f 5e e1 56 27 b5 0f 7d 69 76 ce ab b0 1a 52 18 4f 99 7b 42 Data Ascii: F2>g?{);8!#`J9Yo}#g`GL/^V'}ivRO{BP.>~D@w6ijL((?88B[R,%IENDB`
Sep 21, 2024 00:49:34.912246943 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49756	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:44.287038088 CEST	394	OUT	GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1 Host: telegram.org Connection: keep-alive Origin: http://xn--r1a.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://telegram.org/css/font-roboto.css?1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:44.890726089 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:44 GMT Content-Type: application/octet-stream Content-Length: 11028 Last-Modified: Thu, 20 Oct 2022 11:05:33 GMT Connection: keep-alive ETag: "63512b7d-2b14" Expires: Tue, 24 Sep 2024 22:48:44 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 32 00 01 00 00 00 00 2b 14 00 0e 00 00 00 00 54 28 00 00 2a bc 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 64 1b 99 64 1c 85 5e 06 60 00 83 20 11 0c 0a f1 5c da 72 0b 84 0a 00 01 36 02 24 03 88 10 04 20 05 82 74 07 20 1b c1 45 45 46 ee ca e0 ad f0 28 6a d6 de d4 13 fc 5f 27 70 72 fd 58 0f a2 43 b4 08 19 8d c6 25 49 14 ae 3d c8 15 23 37 66 43 f4 ea c8 c7 79 d3 2f f4 d4 d0 7a 8f 97 2f c7 64 5c 48 b9 9a d5 77 4e fa 11 92 cc 12 d4 fb c7 7f 3d 07 17 1f dc 0d 21 47 46 08 a1 f2 75 4e 47 60 4e 64 80 22 f2 cd 01 cd ed 7e c5 88 1a 61 14 a0 60 12 29 95 12 52 d2 21 35 6a 54 48 8e c1 80 91 69 40 cb a0 37 54 2a 54 2c 30 69 49 3b fd ef f7 6b 76 fe be 2b b6 62 52 a1 25 a6 33 84 0a c5 e3 c5 3b 49 5e ee 0b 54 a1 54 d0 9a 95 b1 a8 b7 0d 0e f0 f5 34 00 8e 74 5a 33 b2 64 98 d1 4a 0f 44 35 b7 77 d5 03 ad 76 65 fb ee 12 36 e8 80 05 d3 48 49 27 25 45 f3 04 45 7b df 7f 47 a5 6c 07 fe f9 fe e7 b4 e0 92 08 5d 57 59 a3 bb 4d 7f 18 91 f0 a8 f6 fc 9c 9a 51 04 77 3c 0a fb ff af b3 6c 75 87 [TRUNCATED] Data Ascii: wOF2+T(dd^` \r6$ t EEF(j_'prXC%I=#7fCy/z/d\HwN=!GFuNG`Nd"~a`)R!5jTHi@7TT,0iI;kv+bR%3;I^TT4tZ3dJD5wve6HI'%EE{Gl]WYMQw<luApveNQ'iy,FK=r{]+KIe?tRRp4T+!1A1JEd/,?%pp6!@H)A31? (`DX30glb v;u19?@(@xgLgjtfx9vBFM;UISwfO~RP,4xJ/j9h/6zf_bz.r C>j@D :G2\|z^[7v9_=$G1=cdhzQ,oP*[fb\ZaanuT!'[NC{ogNYFa}Xx2qXP{n+'GobN6[;5q
Sep 21, 2024 00:48:44.890816927 CEST	1236	IN	Data Raw: 19 26 e7 8d 72 fc e3 c8 7d 6b 7d d4 4f 11 4a 56 4c 29 d3 79 c1 3e cf 03 23 fb 8a 5b 8b 6a cb b6 62 0b 4f 56 e5 8a c7 9f b9 5b 21 86 14 ff 3c be 2b 8b 6b f6 7d 9b bc 50 b5 f0 78 93 0c 05 79 a1 e1 13 51 f8 1a db 9e d2 1c 41 09 3d 0b 43 09 ab 81 d8 Data Ascii: &r}k}OJVL)y>#[jbOV[!<+k}PxyQA=CyB+2}\f3USd?l^7._}]G@9R\|88u'"I,9(RB:3sK68pU2*7ai3fv]s-xlm[G\|OP0SAFA"'v'6$~"~
Sep 21, 2024 00:48:44.890827894 CEST	1236	IN	Data Raw: 11 7c b4 a1 08 a8 e1 08 12 81 31 21 41 1e 05 9f 17 7f bd fa 4e 0f eb 9d 73 c3 ab b8 ff 3c b3 4d 34 40 39 d1 ac f5 9b 6b 94 cd 21 90 79 a3 1b 39 f2 60 41 bf ad cb 82 58 47 cd a8 6f b8 b8 01 fc 5c 4a ba ac 6a 13 38 18 eb 16 c3 fe df 66 fa a0 09 f2 Data Ascii: \|1!ANs<M4@9k!y9`AXGo\Jj8fBmN'4hWbIc"4ain{rLeq],XhBDdt"?RBkw)maqB{R"A8GPAw{>fH%
Sep 21, 2024 00:48:44.890841007 CEST	1236	IN	Data Raw: 7f 32 41 28 67 f0 45 25 e4 a0 a2 72 1f 59 52 63 4a 78 46 39 b7 1a d1 2e df fd 59 ca dd 2e 2d 73 2b aa da 89 9c 32 42 6e 46 e8 60 1b 95 52 70 9d ec 9e ab 3b 75 56 a8 d2 49 f2 2b 53 ce 5b e6 51 46 68 3e 74 00 14 c2 b5 ca b9 89 1e e7 34 a2 65 bb 51 Data Ascii: 2A(gE%rYRcJxF9.Y.-s+2BnF`Rp;uVI+S[QFh>t4eQ4wve.,A$bwb=hY7vk9V6Uy23]V4RIURk1];q[*k8-.JbzeRWz%n#UNHmpx)=)}cqu
Sep 21, 2024 00:48:44.890851974 CEST	1236	IN	Data Raw: 32 5f df 1d c8 49 bf 46 8a 4a 88 0d ba 98 16 2d e5 d1 12 69 5e ed df 3c 7b b7 8f 30 54 34 c4 e0 79 b8 35 c9 a0 e6 17 93 53 8b 13 00 57 54 96 da d0 9c 9a 7e b5 85 a2 9f d6 d0 90 9c d2 dc 40 cd c4 99 da 7a 19 e9 db b8 5b 1b 9a 5a 7b 17 59 7b 5b 1c Data Ascii: 2_IFJ-i^<{0T4y5SWT~@z[Z{Y{[Lmh56R=f?=l<<~\|:N/_xp-~`St;:):{?HZ>c`&MZkp/'r1GLfV!
Sep 21, 2024 00:48:44.890863895 CEST	1236	IN	Data Raw: ed 7d f2 bd 1d d5 14 b1 2b e2 5b e0 57 d5 55 1d 96 a5 8d c0 7e 01 fa a1 f1 ab d7 fc a7 28 7c 96 d7 f3 d0 46 65 e1 a1 f9 32 82 db d9 c1 da b8 f5 e2 f3 1e 1e 23 56 b7 a9 f8 17 1f 9f 21 30 2f 68 7e 4c 53 67 69 a4 b7 b1 36 15 28 22 77 fd 1e e6 6b b1 Data Ascii: }+[WU~(\|Fe2#V!0/h~LSgi6("wku54n!{}Q_~?<`B_%es}o\|r2GR)2yGHgkn#xz$\elc7cJL\qZSa\|F\YauUX`
Sep 21, 2024 00:48:44.890877008 CEST	1236	IN	Data Raw: 53 77 41 a2 c8 e3 9f 45 3f 8b 9e 10 45 dc 05 1f c3 5b 2e ee b1 d3 93 07 e4 d6 bc 38 17 45 74 39 4a f8 5c 7c cf 0b 7b 9d 08 dc 7b 4c 62 16 94 4a 62 4a 1d 29 a2 96 fb 8c cb e5 52 21 2a 90 2e dd b5 71 63 ea f3 7c fe fc a7 fb 48 df f5 d5 2e 19 51 d2 Data Ascii: SwAE?E[.8Et9J\\|{{LbJbJ)R!*.qc\|H.Q}/7PZY[@5c]{{}mQ]s<{g4~fa>4$ThxKRjL9bM0?Qlhl4m.U3BbG(U<Y^T9,A
Sep 21, 2024 00:48:44.890919924 CEST	1236	IN	Data Raw: 05 37 f9 b4 7c 40 88 b3 85 9c a1 eb 8d 02 9b cc 0b f6 59 73 56 2e 3e fe 76 cf 45 c1 74 95 1f 9b d1 ad 69 bd e6 9c d3 38 d8 56 5a bd de be b4 62 1d 10 18 eb eb 47 0d bc d0 4f a0 7d ec 19 0c eb b0 90 b6 50 37 6d b7 f1 7b b8 0d bb 61 4f 71 1d ed b7 Data Ascii: 7\|@YsV.>vEti8VZbGO}P7m{aOq)16xP-MraE-<Yr?OhI++<RRk_dKe_1a,)lmml*GvRJ$~(t~cfO{-B
Sep 21, 2024 00:48:44.890942097 CEST	1236	IN	Data Raw: a2 ad 1e 1e 88 d2 59 7a 95 01 3f 75 90 2e 95 ce b9 f6 01 18 ff 6b a6 39 b9 ea e2 af 66 78 95 4e 30 5b 1a 3a a0 bf 6c c9 51 59 68 c0 dd 6a 80 77 2b 18 f0 77 ac 76 a0 8c 40 07 e5 76 6f ae 9b 5b 2c dd 76 da 2e db 6d 7b 52 bd d7 e0 ec ff 07 66 ff 41 Data Ascii: Yz?u.k9fxN0[:lQYhjw+wv@vo[,v.m{RfA3D].Pk5g"?i2Klz9ywh\Ewukt#9_H ,B7<a}0JNBF,k\|f',\|m=5"BJ
Sep 21, 2024 00:48:44.890958071 CEST	263	IN	Data Raw: dd 19 0b 07 b3 56 c4 49 8d 8f a6 20 08 e7 2a 55 e8 be dc ad 5d e0 a2 37 1c 49 4a 36 f1 90 b8 96 55 10 f7 88 77 a3 88 5d d6 af 9c ac 52 e2 cb 7b b5 83 9c f3 86 23 f9 a1 10 df 08 68 fd d2 ba a6 39 f1 5e 9f ee 02 65 ad 41 9a 87 d7 9d 91 01 01 d1 80 Data Ascii: VI U]7IJ6Uw]R{#h9^eAF,`(PAEhHcp<?\t.?A5;!1$?p!)iS-h)C"LM/$aNFn{62)O HF?gLwQ4QLB[1ds"
Sep 21, 2024 00:49:29.916203976 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49757	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:44.287771940 CEST	400	OUT	GET /fonts/Roboto/KFOlCnqEu92Fr1MmEU9fABc4AMP6lbBP.woff2 HTTP/1.1 Host: telegram.org Connection: keep-alive Origin: http://xn--r1a.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://telegram.org/css/font-roboto.css?1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:44.891541004 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:44 GMT Content-Type: application/octet-stream Content-Length: 6632 Last-Modified: Thu, 20 Oct 2022 11:05:33 GMT Connection: keep-alive ETag: "63512b7d-19e8" Expires: Tue, 24 Sep 2024 22:48:44 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 32 00 01 00 00 00 00 19 e8 00 0e 00 00 00 00 34 20 00 00 19 93 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6a 1b 9a 7a 1c 36 06 60 00 82 04 11 0c 0a bc 5c ae 43 0b 82 10 00 01 36 02 24 03 84 1c 04 20 05 83 00 07 20 1b 02 2b 13 6e 2c 3c 6c 1c 00 db f8 1c 27 8a 92 bd 18 c8 fe eb 04 4e 87 40 6e 99 f3 22 41 46 a8 58 35 9a 3b 8b 46 6b 85 ad a0 c0 4c b5 ab ea b5 8f 63 6f e0 b7 be 48 13 47 dc c0 4b 57 bf 21 6c 71 0c 5f 27 37 c3 67 23 24 99 6d 09 c4 31 f2 d2 26 ed 3f 8f 40 cd 19 60 cf 60 0c a0 9f 94 13 76 c6 cd 4e 3d f4 07 9a db bf 5b b2 11 c2 36 6a c6 a8 16 1b 67 03 62 d3 e6 88 1c d5 63 54 6c 64 7e 3a 47 5a 85 41 a9 58 89 9f 11 06 c6 4e 7b e0 e5 b4 94 64 d9 a7 6d 92 9d 52 1a cf 04 c0 00 f2 bd 1b 7e b3 6f 89 6f 9e c5 13 40 c2 03 60 02 70 a3 d7 86 74 cb 43 44 a6 77 44 25 06 1c c1 be 66 41 34 09 a2 35 74 db ba cc c5 68 db 9e 6e 50 10 53 6b 5e fe d7 ae fe cf 9a 8b db 10 2d 85 68 95 d7 a1 e2 4d d4 e3 32 49 c5 4f fe 41 3a f7 7b e7 de dc aa 76 37 54 1a 85 de 74 e0 4d 01 51 [TRUNCATED] Data Ascii: wOF24 jz6`\C6$ +n,<l'N@n"AFX5;FkLcoHGKW!lq_'7g#$m1&?@``vN=[6jgbcTld~:GZAXN{dmR~oo@`ptCDwD%fA45thnPSk^-hM2IOA:{v7TtMQT&_Qy7WxJ<B>_ajLBf1[2[V2Sv,HmOXU[a/!V\C}Y\yX-0 Q.C3F!Bd[`q?A;[j^SfW4Z@2@@rt'w$v_T2ER"#~0AII%4`71jrr%HR,6\>gaHg9b{Z_%uDK_152mY'[(3>V5R"=sQ}t:jM'dzq\;>$kySLK,vPuvz>jl9yZsG{~ptx-mn
Sep 21, 2024 00:48:44.891552925 CEST	1236	IN	Data Raw: 98 88 a8 5a a0 9a 86 8b 05 8a 8a 69 6c e5 b6 7a b2 d8 f6 58 4b b4 21 ba 95 6f 9d 03 5c 2e fc 46 d6 a3 67 2f 2c ac 6c ec 1c 9c 5c dc 3c 7c fc 02 82 42 c2 22 a2 62 e2 12 92 52 d2 f2 10 28 4c 45 15 54 47 6a eb 78 eb 9d 4f be f8 ea bb 1f 28 5d 7d 23 Data Ascii: ZilzXK!o\.Fg/,l\<\|B"bR(LETGjxO(]}#c3cKGO:HL&W_T:&g`cYIV*D.D>D1D)D9' PL,K`U;;rxp1OQB9CzPN1ic_XX
Sep 21, 2024 00:48:44.891565084 CEST	448	IN	Data Raw: ad 32 d8 38 68 7e 3b 6c 31 67 e8 ec 26 a7 70 80 fc 7b bf a0 c4 bf 79 82 95 d9 5e 1c 56 be 8c 27 56 c8 52 80 67 cc be 94 54 45 82 c0 fe 39 dd 0b 1e 05 4b 2a e9 3d 97 00 de 73 11 1e be 78 04 77 e0 1e 47 48 c5 bd 4f 78 ab 7c 04 c0 b7 b8 8c c0 1e 18 Data Ascii: 28h~;l1g&p{y^V'VRgTE9K=sxwGHOx\|^<9R8HN/RWmx<GOSFOBl5RWE}:'uxO`3"GV pJKXb=E;86`X.ZVlWiWq)B
Sep 21, 2024 00:48:44.891587973 CEST	1236	IN	Data Raw: 2b d1 15 e3 c3 37 17 7e 2f 16 c3 41 f5 c9 44 18 5b c4 23 f0 c6 bc f0 88 f6 cb 2c 25 b5 5d 79 df 15 53 9a 72 da 82 1e 54 5d ea 05 a3 ad 93 58 b7 fa e2 79 c3 1c 66 a3 a7 7a 0a 09 a8 e5 c0 b2 c6 5c a7 f9 4b b4 ba 70 06 77 a9 16 b3 d2 e1 16 cd 6a b5 Data Ascii: +7~/AD[#,%]ySrT]Xyfz\Kpwj]W=xz&ZNZnyoD[wM-BJA>MZ15MA_+T\|90o=7c2#rrBrY~(y'UjvzhM3F9f<<`5
Sep 21, 2024 00:48:44.891598940 CEST	1236	IN	Data Raw: 4f 3e 07 cf 35 f7 f8 9a fd dc 60 ab 3d 74 bc 35 fb c3 f9 e1 6b 9f 2e ff 87 5a 78 39 1c b3 f6 38 b0 d3 c4 71 c7 ea 9d 0d c7 2c a3 8e 17 7e 1d 1c e1 dd 75 0e 6b 75 fd 88 3b 1a e9 e0 ee e2 be 1f e0 d1 a4 bb cc 41 da 51 0d a9 27 21 8f 43 64 6c 97 3b Data Ascii: O>5`=t5k.Zx98q,~uku;AQ'!Cdl;@tk7M_/wp0[9(l"f3333mtiF!evh.RMO=uBa4Un.>(8.fiU,2#K@\|L~^QoDe
Sep 21, 2024 00:48:44.891612053 CEST	1236	IN	Data Raw: 3b f3 d5 1d a2 96 51 ab de 7b 18 89 ff cd 82 b7 0f 87 dd f4 35 3c 7c 93 b4 e1 e5 46 d7 43 0d 7e 6d be 86 a4 51 65 3d ef a0 2b 20 e1 c1 44 b9 2d 5c 94 5b 44 c5 bc da 63 04 d3 a8 8f a3 bc f7 eb 77 0f 6f 1d 46 0f 73 bc 5d fd dd dc 15 a4 50 50 2c 66 Data Ascii: ;Q{5<\|FC~mQe=+ D-\[DcwoFs]PP,frmf1&(nb>[b7~3''<$M2QpJ5r%joYQdCr%[crt6;\HO~ky_K{0623Z/pdrf
Sep 21, 2024 00:48:44.891627073 CEST	362	IN	Data Raw: 8d df 2a 8b 08 f9 65 cd 6f da ab cb 9f 54 32 0e 2b f3 e4 f5 53 78 f9 83 f6 e0 58 93 0a 8e 64 39 7e 06 ca cb 0a aa 03 0b 96 79 29 05 fd 3b f5 7a c0 3e 1f e0 f5 d9 9c 47 2e fe f8 28 be 14 31 46 50 86 de 7c bd ed 6c 46 aa 82 0c a6 9d 21 eb 85 d4 db Data Ascii: eoT2+SxXd9~y);z>G.(1FP\|lF!)k0d,0_:TA:}2JhU>+6^Uk{!#V+:MU6.ji8P!K+cqH)9-.>Z$++uW,FV
Sep 21, 2024 00:49:29.919559002 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:44.289406061 CEST	398	OUT	GET /fonts/Roboto/KFOlCnqEu92Fr1MmEU9fBBc4AMP6lQ.woff2 HTTP/1.1 Host: telegram.org Connection: keep-alive Origin: http://xn--r1a.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://telegram.org/css/font-roboto.css?1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:44.883708954 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:44 GMT Content-Type: application/octet-stream Content-Length: 11072 Last-Modified: Thu, 20 Oct 2022 11:05:33 GMT Connection: keep-alive ETag: "63512b7d-2b40" Expires: Tue, 24 Sep 2024 22:48:44 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 32 00 01 00 00 00 00 2b 40 00 0e 00 00 00 00 54 34 00 00 2a ea 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 64 1b 9a 1e 1c 85 5e 06 60 00 83 20 11 0c 0a f1 20 da 38 0b 84 0a 00 01 36 02 24 03 88 10 04 20 05 83 00 07 20 1b cd 45 45 07 72 c6 38 00 36 86 86 7a 14 e5 7a 34 1e 45 e9 a0 ac 09 fe af 13 b8 31 04 f3 43 eb a2 c2 28 30 14 e2 28 33 8b d6 89 88 13 11 4f 52 72 72 75 2b 6a c4 47 68 79 e3 a9 23 08 c5 cf f4 dc 36 68 5f 02 c4 9e 62 7b 74 bf f3 ea 33 70 9c 8f 9a cb c3 f7 7a cf ff 3a 4a 6e 1e 3e 58 c2 e6 f4 80 6a 56 56 f6 0f fc dc 7a 7f 05 2d 15 06 46 9e 52 31 04 47 8e c8 9c 94 b8 51 39 46 4b 4b b4 54 38 10 14 9b 2c f3 14 0b 90 52 e9 81 91 47 3a ad 1d 81 61 66 d7 8a 1f a8 02 a4 a2 c4 5d c9 94 38 6c 3a 60 c1 34 92 d3 49 97 a2 79 c0 a2 21 a8 af fa ff 52 96 8e 20 c1 9f 00 f8 87 bc bd 6d cb 31 b2 30 e1 00 b8 bb 40 02 fb 56 9a 13 f0 3e 17 75 92 08 29 77 2e 5b 0f 45 eb cb 31 0d b8 b4 ce ee 76 be 6e 37 f9 9f 14 d4 8c 02 d6 bb 29 cd c2 4e 01 3f 04 4a 10 00 57 36 cb 74 fb [TRUNCATED] Data Ascii: wOF2+@T4d^` 86$ EEr86zz4E1C(0(3ORrru+jGhy#6h_b{t3pz:Jn>XjVVz-FR1GQ9FKKT8,RG:af]8l:`4Iy!R m10@V>u)w.[E1vn7)N?JW6tF['09^=AA#jvv'JO2HQf w#pq8s8Da>3%\|d55rBms\>=/gzD$H{\kkBBM^'^`.-!/.'[Bau'p!%B RBewD80oh`S{^S@2hORz]gpzcI=OG/kC5{5GI~7$07Nhk8g@V^KS$d%tfa>Ei8}Y>%1R2^QFqVtY`fo5 v(Uw`k<i@,:R}WO6@\|X-e&y,dSz8;v
Sep 21, 2024 00:48:44.883723974 CEST	224	IN	Data Raw: c0 d4 f1 15 98 1b 38 e6 39 a9 73 f3 d5 3e fe 05 23 b7 b0 ae 19 c2 a3 49 9f ec 21 05 4b b5 1e 67 fd 9c f2 b7 bb b5 2f e2 d9 c1 4c 6b 13 e6 b9 60 0c 8e 6a d4 be 03 fa 94 9d c4 78 d9 33 74 4e 7a 72 d5 8b d1 9b 47 81 f7 6a 22 a9 b5 64 c6 4f 48 8e 2f Data Ascii: 89s>#I!Kg/Lk`jx3tNzrGj"dOH/B/M14A)MM$xdmBhXXyD.Koue\|s':0puiguI2dOUc)3cBEJ0h0i^xl56m
Sep 21, 2024 00:48:44.883773088 CEST	1236	IN	Data Raw: 63 d7 37 df fd f0 d3 2f 08 c5 18 84 81 c7 47 d9 29 2a 04 bc 23 00 c1 1b cc 24 71 8d 9b 78 f2 a6 9d 0c 02 f1 90 a4 88 8f 56 bc 47 8c 2f 74 0c 74 41 1f cc c1 d2 d9 2a 56 d8 c6 67 76 b1 c6 d1 58 e6 c4 8a 05 65 ac c2 a5 c1 08 86 60 18 46 60 14 c6 a4 Data Ascii: c7/G)#$qxVG/ttAVgvXe`F`a`JZ>PlpcrSw0#LfY01*'OTh08Q.,r8sG<6)exs,A5:.%`YJ
Sep 21, 2024 00:48:44.883786917 CEST	1236	IN	Data Raw: d3 ae d7 88 59 ab b6 87 54 32 33 dc 6f 56 31 21 b1 83 47 2c 2d a6 74 6f a5 f8 1a 4b 8e 46 3f fe e8 03 0a 88 3f 20 ec c2 8f 97 fe 1f fd bf fb ff ae cf b3 e6 53 d3 47 24 61 3e 56 8c 48 61 46 e6 bd 38 12 ff f0 ed c3 b9 ef f3 90 16 ed 10 1b f7 aa dc Data Ascii: YT23oV1!G,-toKF?? SG$a>VHaF8;,T<a'H7z*{[#/4!PL:@]#FCK@D,(fB54=a(igL)aDvm]l`
Sep 21, 2024 00:48:44.883811951 CEST	1236	IN	Data Raw: ed 30 12 f6 21 38 c3 35 ed 86 ad 35 46 db 1a f6 87 55 26 de 9e 3b 66 ef 38 5c 90 c9 36 8d 04 02 21 ab cd b3 48 a0 93 fe 52 b1 af 0c e7 bd 8b 40 36 7f 19 00 97 9c b4 2c 35 a9 85 93 64 92 13 1b f7 c9 8d 11 0b eb a9 70 98 53 de 41 cf 3d 19 6b 17 5d Data Ascii: 0!855FU&;f8\6!HR@6,5dpSA=k]UFQAJo;'o!PXs)XXTYv\GtV5eH5X~/N%*4a`kIwYSG ?CFgDUQ&MLs')#B4t F]< W^jyAcU\|b
Sep 21, 2024 00:48:44.883825064 CEST	1236	IN	Data Raw: 52 b2 34 51 27 9a 3b 03 57 77 a2 30 ad 12 73 17 62 8d 57 23 2b b6 b4 93 d4 24 32 33 48 ed b7 99 44 c0 52 a2 79 ae 38 52 82 96 a4 b6 ad 13 51 06 26 97 de 87 97 7d 33 a3 11 24 68 05 57 db df 4a 0b 0a 14 8e 66 a6 7e 91 48 8e 55 d9 52 8e a5 31 cd 00 Data Ascii: R4Q';Ww0sbW#+$23HDRy8RQ&}3$hWJf~HUR1\|2-N3r-r#,txGGuw)Xb9h=\|99^IWOSM_kQy?no$?+l}BIN>B=2AAk<fY
Sep 21, 2024 00:48:44.883840084 CEST	1236	IN	Data Raw: 9a f2 9a 25 45 a4 e8 37 1a fc e6 5e 78 99 9b 31 18 2d ab ed c4 71 40 e5 17 26 2e 2b 2e 88 42 8d 4d 44 d8 40 f1 49 a8 0b cd db d9 d7 9b 30 1c 35 46 3f fc 71 b9 68 23 30 79 3a e6 77 f0 b5 b8 a4 a8 14 5f 67 93 3c 92 b9 c7 54 9c 73 7d d0 6d 81 97 5b Data Ascii: %E7^x1-q@&.+.BMD@I05F?qh#0y:w_g<Ts}m[?Q5T*1KK'A}j'Y7&Og'`Rr[:/L)w;]Cpb_yE?:~V>yj)8lvza0}t3
Sep 21, 2024 00:48:44.883855104 CEST	1236	IN	Data Raw: 14 14 89 7a 6a ea 44 3d 45 05 a2 9e ba 1a 51 0f 8c da 6c 43 bd b1 c6 4b e8 e4 c1 c9 1c d1 cf a3 9f 6f 1f 9d 38 fc f6 e0 8b 89 23 b7 8f 2e 8c ce 97 8b f6 fc 8f 2e 5d c2 39 53 c8 f6 2b 07 14 80 48 8f 69 85 df 96 b8 9b c9 97 2c 7a 60 4c 78 dc cc e7 Data Ascii: zjD=EQlCKo8#..]9S+Hi,z`Lx\=zig{}\|l}wF@crExyt\bF-th6+7#+3$wT1Z?!ojoC5pX}.H(lllw1nH]]:}#=64mCy5
Sep 21, 2024 00:48:44.883867979 CEST	1236	IN	Data Raw: a1 20 26 a3 21 20 30 65 a4 0d 34 82 b5 f7 9e ef 7d ed d0 d4 d5 0f d6 d5 d3 d4 90 32 cf d0 c7 d4 dc c6 83 69 68 93 f1 4a ba ba 25 ae 8b 9f 1b 22 59 1f d5 be 96 e3 39 33 50 44 e8 a1 33 1c 6d 0f 11 73 17 8e d3 53 05 bb 72 65 97 5c cf b9 2c 2b b5 ad Data Ascii: &! 0e4}2ihJ%"Y93PD3msSre\,+bWr8mS%4y-wwT8BZ<'!;3 xys&\|k67kAc9#y]}u4S9$j=5-b{Q$![z[RQ;IwCzzi(
Sep 21, 2024 00:48:44.883888006 CEST	1236	IN	Data Raw: dc a2 12 a1 8b 4a 8d 1d 85 91 40 c4 55 a6 46 10 ad 03 34 b5 01 2c 71 03 44 3b 1a b6 b8 0c ce de 0a 56 20 9d dc 29 65 59 24 6b 10 c3 26 2a a2 ae bf 1a 88 ba 06 41 a4 23 1a d6 b9 78 49 87 93 f4 c1 9a e7 fd f0 51 e6 89 84 3c e6 78 14 04 37 82 6e e6 Data Ascii: J@UF4,qD;V )eY$k&A#xIQ<x7ne\|4-KC$5"7E[bmSG5 nr!8RD ^A!QTn=>'~RZK+I#Dz})i_[B$ri~
Sep 21, 2024 00:48:44.888781071 CEST	83	IN	Data Raw: 33 6c 16 7c 29 fe 3d cc bb c9 fa b9 de c0 4a 0a be ea cb 03 9c 80 f8 1c 19 05 65 5f cd 0a a6 c3 5e 40 2a 26 07 e1 25 12 09 b5 c4 5d 83 32 73 5f b5 f5 14 0f 0c f6 66 7e 62 ee 03 0f f0 cc ae e2 64 a0 ab a1 65 64 5e f8 05 17 31 c9 9f 3c e7 d5 d7 a3 Data Ascii: 3l\|)=Je_^@*&%]2s_f~bded^1<

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49759	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:44.292146921 CEST	396	OUT	GET /fonts/Roboto/KFOmCnqEu92Fr1Mu5mxKKTU1Kvnz.woff2 HTTP/1.1 Host: telegram.org Connection: keep-alive Origin: http://xn--r1a.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://telegram.org/css/font-roboto.css?1 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:44.890971899 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:44 GMT Content-Type: application/octet-stream Content-Length: 6460 Last-Modified: Thu, 20 Oct 2022 11:05:33 GMT Connection: keep-alive ETag: "63512b7d-193c" Expires: Tue, 24 Sep 2024 22:48:44 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 77 4f 46 32 00 01 00 00 00 00 19 3c 00 0e 00 00 00 00 31 e4 00 00 18 e5 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 6a 1b 96 56 1c 36 06 60 00 82 04 11 0c 0a bc 50 ae 76 0b 82 10 00 01 36 02 24 03 84 1c 04 20 05 82 74 07 20 1b 05 29 13 ee 30 63 1c 00 db 20 0f 8a a2 62 30 18 fc 97 09 dc 18 82 b7 41 5d 8c 08 47 c1 62 51 a2 2a 15 aa 87 d0 44 05 ac 6d c7 70 4c 59 b8 54 7c 7b c7 5e f4 67 86 95 27 80 89 a5 23 34 f6 49 2e 0f 5f 6b e5 eb 99 ee 99 dd 00 91 3e 19 44 9b 8a 62 b4 0c e5 09 74 54 84 65 56 2e 51 07 ff 80 e6 76 bf 60 1b 39 06 ad 02 82 20 28 95 a3 ca a2 aa 0d 9c 60 52 a5 d0 1b 65 0e c4 f8 51 c3 06 94 2a a3 30 92 36 30 e0 9f f8 7b 62 e7 ef 9b 79 bb 40 a9 16 70 41 92 42 40 b4 d7 ff 9a a6 bb 52 ff 6f 57 7b 85 a7 00 5c 01 ca 04 10 35 d7 aa b4 22 e9 13 c9 c7 24 1f 20 e1 01 b0 13 7c cd 87 6c e7 e8 66 fc bd 70 c0 0b a8 e7 a6 46 1a e6 b2 6e fc 6a 6c 5b b1 65 30 27 4b fb 11 51 62 8a fe ff eb 2c 5b dd f9 e3 73 c6 bb 95 76 37 04 0a 42 d1 25 1d 76 54 d5 fa 5f b2 a5 a7 6f 19 07 f4 [TRUNCATED] Data Ascii: wOF2<1jV6`Pv6$ t )0c b0A]GbQDmpLYT\|{^g'#4I._k>DbtTeV.Qv`9 (`ReQ060{by@pAB@RoW{\5"$ \|lfpFnjl[e0'KQb,[sv7B%vT_o! TaC)ijU6OQQH[D.t1\|!ut""rO^e}5EfIC(PPIB.CAp"PD\dEk9hrcArd_b,!x$U @c/O[;xb<s_0?A1D"~$(L2U&q!Q,ITegsD6qN>8#Rb?S\|1E`W15My}uXM+[pX,Fn{3+.Xq){1{s{'s"MM+COJ4pTbV:62ry 7QA3t*KN?H\|%lJmW6c-]_b<Ky:qr@#zR,!vYI\|)]GQ(Mj'
Sep 21, 2024 00:48:44.890985012 CEST	1236	IN	Data Raw: 18 d9 49 c6 2e b2 e4 ec 26 4f c1 1e 7b 29 52 a2 42 95 1a 75 1a 34 69 d1 a6 43 97 1e 2a 7d 06 4c 58 b2 62 ed 80 83 6c d8 b2 e3 c4 99 1b 77 de 7c f9 09 10 28 48 b0 50 11 22 45 89 11 27 5e 82 44 c9 52 a4 c9 90 29 db 09 52 76 36 41 b6 09 0a ad 53 ea Data Ascii: I.&O{)RBu4iC}LXblw\|(HP"E'^DR)Rv6AS^j~[b85qlu7`;rA}%)Ld:V)j6`g}dZ8P_M<?{R;>H((r?VH2Y<AvJLi_N)*X8<Qn/q6N
Sep 21, 2024 00:48:44.890996933 CEST	1236	IN	Data Raw: a0 e7 8c 23 c7 88 e2 a1 08 cb 30 b9 91 43 0c c7 b8 d0 d3 ec 20 68 20 39 80 24 1a 2c 7e 8b 2d d1 ee df f0 b9 f2 aa 10 25 ee 5e 49 f5 4e da cb 8d be 0d 3a af 75 ea 56 72 de 88 74 62 9f 2c 56 2e 2b dc 51 d3 9f a2 e9 44 3c 2d 7d 0b aa 22 56 72 cc 05 Data Ascii: #0C h 9$,~-%^IN:uVrtb,V.+QD<-}"Vr/K0b=uoo[@PKXM)I\|}R6KkF.HSvffd%\pM(FiO&nd&/uS~.rt7Xay"f33F\|s`qLk
Sep 21, 2024 00:48:44.891010046 CEST	1236	IN	Data Raw: f3 56 7a 33 3c 3e f3 7c 31 44 27 4c e7 ed ec f3 c7 e3 af 61 07 63 a1 1e 91 7d 09 f2 5b 24 87 ec dc eb 0d 8f bb ce b5 03 eb 53 97 4b 40 52 62 42 50 6e 90 35 cb 21 b1 e2 9e 5b 6a f7 24 0b 4b 5f 2d 97 75 23 af e7 b9 55 7b 48 5b bf 28 76 7e e8 96 14 Data Ascii: Vz3<>\|1D'Lac}[$SK@RbBPn5![j$K_-u#U{H[(v~HJ7f}Vp\|9Svn(ICM%S%bxfEG`6CF&fNX-mNxLsWJg;i7?_+?LBNL?7x,m
Sep 21, 2024 00:48:44.891026020 CEST	1236	IN	Data Raw: 62 db f4 7d 4f e9 12 4e 75 03 f7 0f 34 93 1a d7 1a 59 d4 2b 40 ab 30 b6 8d 3a c7 2b 42 be 86 d2 cf 4d a3 46 6b 46 28 4c a9 ac fc b2 e1 44 c8 66 60 d4 31 43 9b 41 67 68 ca d3 9f 69 2a 3e a4 57 c2 fd c7 d8 28 fb a8 68 ff 2b 5f 4e 9a f2 67 50 5a a3 Data Ascii: b}ONu4Y+@0:+BMFkF(LDf`1CAghi>W(h+_NgPZJrXror[LqO+5#"zE&5=8TTHRC',k(#j%0RYBeKtl`-?PQNvetdeEeML,jcQ\q\|
Sep 21, 2024 00:48:44.891041994 CEST	638	IN	Data Raw: 53 72 3e 67 5b 3e 13 6b 54 83 fd 53 79 c3 2b 3e 9a 46 de d7 3f 4b d4 16 fe 1e ac 99 99 4a 01 d4 9f 60 e9 fa f6 ad 0b da 58 57 be f2 a3 6e d4 ce 07 e9 60 b9 17 dd a0 5a 3d f7 ef ff 1e 4c 1e 96 7d e7 b2 f2 c5 ae ad cc 61 62 66 08 cb b6 ed 8a 61 e2 Data Ascii: Sr>g[>kTSy+>F?KJ`XWn`Z=L}abfaGj!\{~Y*"6'&v.@n`? 38y?2o_-i]_JnM$ily@+wSyV?xy#pw!/gSt\|t{6Xm
Sep 21, 2024 00:49:29.914601088 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49784	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:47.112818003 CEST	281	OUT	GET /js/jquery.min.js HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:47.708964109 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:47 GMT Content-Type: application/javascript Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"5a05e7c6-1762a" Expires: Tue, 24 Sep 2024 22:48:47 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 39 37 61 35 0d 0a 1f 8b 08 00 00 00 00 00 04 03 dc bd 69 77 23 c7 b1 ae fb 7d ff 0a 12 d6 a6 80 46 91 4d b6 24 9f 6d b0 8b 58 52 ab 65 c9 d6 64 75 db 92 37 08 79 61 28 0c 24 08 90 00 d8 83 08 fa b7 9f e7 8d 1c 2a 0b 04 25 7b 9f 73 d7 bd eb 6a 20 6a c8 ca 31 32 e6 88 7c fa 64 7f ef e2 2f b7 c5 f2 fd de 9b 93 a3 13 fe db db ec d5 07 8d bd 67 c7 c7 9f 64 fc 3d f9 38 bc ff 62 71 3b 1f f6 d6 d3 c5 3c db fb 6a 3e 38 a2 e0 c5 8d be 3c 5a 2c c7 4f 67 d3 41 31 5f 15 7b 4f 9e fe c7 fe e8 76 3e 50 b9 7a 2f eb 37 ee 6a 8b fe 45 31 58 d7 f2 7c fd fe ba 58 8c f6 ae 16 c3 db 59 71 70 f0 c8 8b a3 e2 dd f5 62 b9 5e b5 5d b9 70 9b f7 8e 86 8b c1 ed 55 31 5f b7 fb d4 bc 7f dc 68 95 0d 35 ee a6 a3 fa 7e 59 a4 b1 9e 2c 17 6f f7 e6 c5 db bd 97 cb e5 62 59 af f9 51 2e 8b 9b db e9 b2 58 ed f5 f6 de 4e e7 43 ca bc 9d ae 27 dc 85 ca 6b 8d d3 65 b1 be 5d ce f7 68 a5 71 df b2 bf f5 1a 63 2f 46 d3 79 31 ac ed 87 71 b8 ef db ee a7 b5 9e 4c 57 59 d9 21 8d fc 4d 6f b9 37 c8 3b dd 6c 98 0f 8e 56 9a a1 ac e0 6a b0 98 0f 7a eb 6c c4 [TRUNCATED] Data Ascii: 97a5iw#}FM$mXRedu7ya($%{sj j12\|d/gd=8bq;<j>8<Z,OgA1_{Ov>Pz/7jE1X\|XYqpb^]pU1_h5~Y,obYQ.XNC'ke]hqc/Fy1qLWY!Mo7;lVjzlj+F$hx^NIou\.Uhu4Stmkq?wW_wwVOas>m<O_7Or~ut\ZAKk1v^,[W\jq^\|\+zY],~k5sbuzV2uopYRg$Wr\XZ0z#p7}]vn}VYKv}vN6:]]"<A,s3#U^XrQzh9MRr,@~LYWP){*)OV,^\|osptnUaYm6V]#>Fb#ug,xjM;;_epCb1aVd#6}/Ld'[?>?9Yt\|pP&f=h" qcA'
Sep 21, 2024 00:48:47.708976030 CEST	224	IN	Data Raw: 5a cf f3 29 f5 8d 1d e0 4e 0e 0f 1b a7 d3 b3 c9 e9 84 8a c0 ad 6e 47 d5 8b b2 7f 9d 49 b7 d1 50 bf 86 7b d3 f9 5e d1 e8 e5 e3 ce b0 cb 4a 15 fa 19 ef e7 f9 40 dd 3b 38 d0 8f 5a fd 7e d6 9b ce dd e6 80 c2 d0 b0 76 d5 74 65 1b 9d 07 8d 46 bb de e7 Data Ascii: Z)NnGIP{^J@;8Z~vteF?n/{vO+-}Itw{cExP\tEhyRQkgozRE`ZMW?qVpo!I6_,QaZ!V,C
Sep 21, 2024 00:48:47.709075928 CEST	1236	IN	Data Raw: f6 37 cc e2 66 13 4a 53 c6 a3 93 5a 4f 88 f4 c1 d7 3f 1a f1 db d1 e0 9e c7 9d 07 07 bd 1c 9a eb a8 9b da fb 96 6d bf 9c 0e 76 7c b2 9f ae 14 df 1d 5e f7 96 ab e2 8b d9 a2 07 d9 69 b0 29 f5 f9 cb ab eb f5 7b b7 fa 95 2a 6c af 1b 7c f7 05 47 bd 86 Data Ascii: 7fJSZO?mv\|^i){l\|G70/dw\|mblzGx9w#ceK{ _8jZ#y~PVtGrOGAoA7l2ShuYvYE$*L=L\4@/
Sep 21, 2024 00:48:47.709086895 CEST	1236	IN	Data Raw: 73 75 3b 5b 4f af 67 c5 06 7d cb 7c 03 21 1e 2e e6 b3 f7 5c 98 ea 88 b6 06 bc 18 d6 b2 6f f2 5a e7 fc fc dd b3 e3 f3 f3 f5 f9 f9 f2 fc 7c 7e 7e 3e ea d6 b2 6f f3 5a bd dd 3a e7 9f 23 94 2b e7 6f 0f bb 9b ce cf 14 3c 3e 3e e4 6f ef b8 db 68 d6 b2 Data Ascii: su;[Og}\|!.\oZ\|~~>oZ:#+o<>>oho#R{[jo;7zm*yvy?i>M666s<?~vnjiIcsDtC.HvH^F~;/1jO27
Sep 21, 2024 00:48:47.709099054 CEST	1236	IN	Data Raw: 5b ea 65 68 57 8b 37 45 75 20 0d b6 ab af 78 8a 7a 2a e8 77 7f c8 6a 1f 9c 88 1a d9 de 2d 37 b4 78 6b c3 94 3d c9 9e 71 9f f7 eb 03 6d f1 28 40 8b 19 ae 0f 9a 92 62 ce 24 82 c1 a4 7e 6d 96 ad 83 83 21 bd 5d 17 7b fd 4e ef 68 35 99 8e d6 f5 06 22 Data Ascii: [ehW7Eu xz*wj-7xk=qm(@b$~m!]{Nh5" }MN!e.:yl{jGH^N`,go'C-dt1]B\HdwaM)i\|(JgEg.\|ZRRJOVmL%cp].W2n6TC
Sep 21, 2024 00:48:47.709152937 CEST	1236	IN	Data Raw: a1 69 59 bd b8 5a fc b2 e3 e9 62 c7 b3 ab d5 d6 43 c1 f9 d6 8a 0d 8e 18 09 aa fd 39 3e 84 c5 d0 ca e7 2b a7 47 c2 6f c3 e4 9f ac bc ef ac f6 05 aa 36 b6 a5 07 d2 fd 1c ed b7 f8 86 9b fc c6 93 f3 83 83 44 6b 7b e3 85 51 04 99 06 7b 72 b9 ab cc 32 Data Ascii: iYZbC9>+Go6Dk{Q{r2-3=J&0/VSmF>s*6_jl!U6(X-%H[TF}J%4HPOPhMK\avvK<Oj@}o~FtRUCb?[Ai'Hb{2[e$p_N;fiB
Sep 21, 2024 00:48:47.709167957 CEST	1236	IN	Data Raw: 37 57 7c 20 01 b7 8f f9 6a a0 b8 2f 77 13 83 a6 ea 48 81 51 cf 7c d8 6f 1c 06 9d b3 ca a9 21 ea 3d 2e e7 b0 af 11 d3 98 0f c9 62 7d c0 9d c9 6a 7d 04 07 2b 80 96 36 a8 75 27 37 8c 07 03 64 5f 56 a1 a1 8a eb fd 88 bd 2e a2 e4 62 03 fc 01 fe 95 3a Data Ascii: 7W\| j/wHQ\|o!=.b}j}+6u'7d_V.b:=b*;VVG=G=N$9G`aV9:PyA%nZ3:wiz7A[Ud);0m{q02sIR^@oTR4kA[JA+oKG-P'"
Sep 21, 2024 00:48:47.709177971 CEST	552	IN	Data Raw: 29 5e e1 f9 ef 4b 6e c1 ed 7a d5 ec fa 50 a9 da bf 8c 54 e4 c8 5a 67 cb 12 09 4e c8 01 c2 c7 0e 90 f9 6f bf 59 23 ef 42 69 73 ec d9 55 f8 ef 3b 0a 3b c7 9f 4a e9 7f 7f 99 12 f7 a1 00 6e c9 23 92 1b 08 3f 3d 6c e3 c1 8a 3f 06 1a f0 54 aa c1 78 2c Data Ascii: )^KnzPTZgNoY#BisU;;Jn#?=l?Tx,glmBoUo8a=nHC XXFf5He^( 0D,m#C<O~Yu!Vb<R/r5yw-%(^}t
Sep 21, 2024 00:48:47.709191084 CEST	1236	IN	Data Raw: b5 18 aa 36 6c a2 63 ea 77 9d ca 3d 6c a2 e1 7d ac 69 69 7c 5f 64 be e1 3d d0 8c 22 42 c0 2f a4 ea 51 c8 90 18 f3 77 a5 f5 a9 ef 84 c7 52 ee 96 54 1d 65 5b f8 1a f8 f1 20 c6 95 0c 0d 6c 60 e0 97 f0 f7 b5 2f b6 04 73 42 d1 05 9d 16 71 28 f9 68 64 Data Ascii: 6lcw=l}ii\|_d="B/QwRTe[ l`/sBq(hd;uqjTtWU*N0S:mn3lk8{QWhTvU=K3H-'~ @R'vWzW:,+xlx&bCP fPsq#.AbP%
Sep 21, 2024 00:48:47.709219933 CEST	1236	IN	Data Raw: 94 ac 1e 4b a8 1d 12 f1 b7 34 f9 1e bd 09 96 fb 79 e9 a8 4f 06 2b 8f b3 d4 78 10 10 bc a1 5c ee 45 c8 1c bc c9 f6 a3 ef 5e 71 ca 7e d9 d6 cb 99 6a d1 a1 8c 8b 20 88 38 96 3a d0 a6 fb 69 fe 13 2e 11 65 fc b7 d7 70 34 10 a0 c2 50 3d 91 9d b2 ae ea Data Ascii: K4yO+x\E^q~j 8:i.ep4P=F;<d_q8tI!,#(D_SaDZ]\|#L]`0%>E^p}aS`sU#ls%BOz #MsCt6/KwpKm'\|JV?#a!'PY'f
Sep 21, 2024 00:48:47.713977098 CEST	1236	IN	Data Raw: 7a 07 f7 4e 96 e5 b6 ff b5 9d 81 6e a5 55 8f ce f3 c1 96 bb 20 ae c1 b5 1e 50 02 fb 24 5c ba ee 87 d1 88 4d b5 71 29 79 61 4c 40 0a 3e 52 7f d9 bd a7 9f 26 f6 20 ed 1b 84 ff ab fa 7b b7 01 3f 73 3b ce d9 75 57 1b b9 af 41 95 ff 3a 5f 4f 67 1b 32 Data Ascii: zNnU P$\Mq)yaL@>R& {?s;uWA:_Og24Ow7Pe+]3YDxB,u\K\1EBWK`)\|dB[$@T~Qq_XLr&(DdvWI[_F39P2[HZ04ZJ=g-p'
Sep 21, 2024 00:48:49.245793104 CEST	290	OUT	GET /img/emoji/40/F09F8CBA.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:49.415095091 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/png Content-Length: 3910 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-f46" Expires: Tue, 24 Sep 2024 22:48:49 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 0f 0d 49 44 41 54 78 01 ad d6 03 90 9c d9 e2 b0 f1 e7 e8 45 63 ba 7b ac 38 ab 60 bd b5 d6 b5 6d db b6 6d db b6 6d 1b 6b 3b c9 26 9b 61 66 a6 7b 5a af cf f9 e6 2a 95 ad ef 66 ef 5f 4f d5 61 e9 57 a7 74 04 ff 8b 2e db 71 b7 07 95 85 da 7c b3 8d 2e 6d 6e 6b fc 02 28 f8 3f 4e 7c ed 81 0f e4 bf d3 b1 57 24 d5 d4 cb 4e 94 56 3c c6 08 f9 98 1c 47 49 f9 2c 92 fc 21 56 3c 09 b8 f6 ff 14 f8 db 13 ef ce 7f aa 1a b9 0d 4a ca 73 b5 70 3b 7d 69 1e 60 84 db 58 52 86 ae 2d 40 79 94 84 a6 5d a4 cc d9 64 ff bc 73 e7 00 7b 38 a4 1d be 39 a7 9d b9 c7 78 88 75 1a 71 20 90 fa b7 c2 e8 2f 03 ed ff 08 bc f1 d4 87 73 5b f5 bb ab 8f aa 21 de 53 d7 61 c3 fa 3e 05 16 a5 34 42 6b 90 1a d0 08 a0 6b 73 76 77 0f b0 e4 d2 ef 01 f7 06 00 d8 a9 fc 97 a4 4e bc 51 20 a4 04 8c 34 a4 45 06 70 b9 20 b9 1b 30 7b 9b c0 eb 4e b8 17 87 ab 9b e7 3b 4b ce 5c dc 50 81 f1 8c 87 29 0f 82 72 20 01 01 42 18 74 05 4c b9 8f 5d 5c e4 a6 b6 e3 da 38 [TRUNCATED] Data Ascii: PNGIHDR((mIDATxEc{8`mmmk;&af{Zf_OaWt.q\|.mnk(?N\|W$NV<GI,!V<Jsp;}i`XR-@y]ds{89xuq /s[!Sa>4BkksvwNQ 4Ep 0{N;K\P)r BtL]\8<QB"7)eB4K"r$&:MMR_Hmv\OVd W2APAie<>cxCjn#S(?}9mEyvP)Ix^]/!DQAs` VL"nT"1W"l>o]H-.08q<A!1pA<cuI:I};.pe{q?yrW0Ly-6?UTP>8l0<ChKRdukY?u^f5f.2ps1=:A`4p'@ZDBy~8!CSb]V7T6fh/`X>/`hv?6D]Ml(JXpyXQ
Sep 21, 2024 00:48:49.840683937 CEST	290	OUT	GET /img/emoji/40/F09F8CB8.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:50.009892941 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/png Content-Length: 3656 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-e48" Expires: Tue, 24 Sep 2024 22:48:49 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 0e 0f 49 44 41 54 78 5e b5 98 69 90 9d 55 99 c7 7f ef ba dc b5 fb de 5e d2 dd a4 b3 74 96 09 09 09 a0 2c 02 8e 80 d6 88 0e 83 a2 c6 ca a8 e5 58 28 38 35 16 0a 05 4c 4d d4 62 62 a9 28 5a 58 8a e3 02 53 08 8a ce 00 29 0b 05 37 c0 b0 19 cc 46 42 48 e8 2c 64 e9 74 3a e9 ee db b7 ef be bc f7 5d cf 60 9f 0f cc 4c 97 16 19 c7 a7 ea a9 ba 75 b7 f7 77 9e f3 2c ff 73 f8 73 6c ef 0f 1f bf b6 f1 cc f1 27 3b bb 8a 07 5f 7d fc e9 db 00 1e 59 bf 5e 3b 72 ff f3 77 b9 3b 66 5e 2d ef 1e fb d5 d1 67 9e b9 8a 3f c3 14 ce dc 78 66 d3 3d 3d ab 86 57 df db 3f b8 f4 5a 34 1b 54 0d 12 06 07 7e ff f8 67 75 ad 6b 64 c5 ea 8b 3e 8e 10 90 b0 20 ab 53 f6 4e 7e 6b cb 9d 1b 6f f9 e0 e6 cd d1 5f 1c f0 9f af b9 2e 7d eb 3b 3e fa 9b de 85 23 97 90 72 00 15 00 34 0d 54 03 3c 1f 42 1f 74 0d d2 36 98 2a a8 82 89 f1 5d df 1c be f6 6d 37 73 86 a6 72 86 76 d5 e2 f3 6e eb 4d f6 5f 82 6d 40 c6 02 4b 03 80 58 40 c7 03 d7 87 48 80 aa 80 05 [TRUNCATED] Data Ascii: PNGIHDR((mIDATx^iU^t,X(85LMbb(ZXS)7FBH,dt:]`Luw,ssl';_}Y^;rw;f^-g?xf==W?Z4T~gukd> SN~ko_.};>#r4T<Bt6]m7srvnM_m@KX@H6lkwFttQA~AjG Bcz7gh:g`I^P@ tCc\|\,s-[??Cg/35b10T0 9g2Al_a[O?{rWl+>rP}4U><"!mt4@@SS[<4\|z_<8{?#dc^sY}%mBEhmO}Mxu5s~(TQtm6SbR]K\YkY`VO[M_}=yYzu16vm7aKuLl~9xX.ZJ1=u"\|"RdSt@3d#PT:am}{gl@&,2BA=.Ae\hbX~E8\50U_hU@w68:<[\v

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49783	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:47.113059998 CEST	288	OUT	GET /js/tgwallpaper.min.js?3 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:47.726232052 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:47 GMT Content-Type: application/javascript Last-Modified: Thu, 03 Mar 2022 19:57:25 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"62211da5-ba3" Expires: Tue, 24 Sep 2024 22:48:47 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 35 66 31 0d 0a 1f 8b 08 00 00 00 00 00 04 03 7d 56 0b 73 da 38 10 fe 2b 2d 77 ed c8 b6 30 b6 c1 24 e0 28 9d 34 4d da b4 69 fa 98 9b b9 b9 e1 b8 8e 6c 0b cc c4 18 30 e6 d5 84 ff 7e df ca e6 91 f6 7a 33 a0 d5 ee 7e 2b c9 d2 be 96 32 7f f6 c7 9f 32 4d a7 72 aa 72 31 58 64 51 31 9a 64 cc 78 d8 4d 9f ad 99 04 37 c9 d9 12 d8 50 f4 fa 76 34 c9 22 59 b0 b7 46 e0 9c c9 c0 08 ed e9 62 9e b0 d0 9e 27 a3 41 c1 0c 83 cb 7a 3d 90 40 06 3b b3 48 38 41 74 16 da a9 ca 86 45 12 44 96 f0 0c 59 99 f5 a2 be 11 e4 aa 58 e4 d9 33 b9 dd 6f fb 9a 49 1e 1a 0f e1 0b d1 71 02 da 3a 12 38 c9 8b a9 11 8c 06 0c 0a 12 c5 10 59 96 16 96 0b f4 1e d6 dd a8 e7 f4 ed b5 c5 62 4d eb 25 6b 34 3a 8e 19 f2 4d a9 dd 54 da 4d a9 dd 94 da 2d d7 d6 6e 65 4d 14 7a 22 47 d6 60 b5 35 d1 52 fb d4 da ab ac 89 42 4f e4 c8 1a ac b6 26 5a 6a 9f 5a 37 2b 6b a2 d0 13 39 b2 06 ab ad 89 96 da 9d 75 7f 5b 5d 60 74 b8 c0 77 bb 77 4b 2d 21 83 8e 73 26 d2 c0 48 eb b8 4e 3e b4 2c 3e 3c 17 d3 97 2f d9 b0 2e 70 a5 f4 4e 81 73 4e 00 4b 03 ea 75 ee 9c 0f 49 6f 41 [TRUNCATED] Data Ascii: 5f1}Vs8+-w0$(4Mil0~z3~+22Mrr1XdQ1dxM7Pv4"YFb'Az=@;H8AtEDYX3oIq:8YbM%k4:MTM-neMz"G`5RBO&ZjZ7+k9u[]`twwK-!s&HN>,></.pNsNKuIoAXvBy\|d-FcIsbF<w?lNpB`kJ?zQ=H'84(cp)^!OaI`up/Xk9geVs,JoBK3G>%Q\BPd}<gpr932vnZ$f%h,1MY^9@emt2h29r9mJ@+>_b^_b\N76v~{5o)An`\ByjFbMW,U\|aEqxg:oq.WZ4tpZNnSMVh1VYa'r~~wt'$}>BiwIpHJd4J Q&z=&oblq?:n-u6wO{c=S9K
Sep 21, 2024 00:48:47.726244926 CEST	630	IN	Data Raw: 43 8b 86 13 ee 81 71 81 c7 d0 a6 a1 c3 3d 0f 78 0c d8 db 23 7c 93 f0 4d c2 37 09 0f da 22 7c 8b f0 2d c2 fb 84 f7 09 ef 13 be 4d f8 36 41 10 14 34 40 d1 26 70 9b cc db 25 04 66 27 7d fe 56 50 49 80 64 d3 b5 5d 9d e0 81 c3 dc 2b e7 4d 5f 33 7e c9 Data Ascii: Cq=x#\|M7"\|-M6A4@&p%f'}VPId]+M_3~fjW;ErUkSJ{.(]Q#7"UqQ(\(I:5xG!r\|VV$XWWQ"X"d}w7FZTWyw*Bd!cW
Sep 21, 2024 00:48:47.846992970 CEST	287	OUT	GET /img/tgme/pattern.svg?1 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:48.240787029 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:48 GMT Content-Type: image/svg+xml Last-Modified: Thu, 05 Jan 2023 17:52:04 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"63b70e44-3891a" Expires: Tue, 24 Sep 2024 22:48:48 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 37 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ec 9d 5d 8f 24 c7 75 a6 af a9 5f d1 3b 7b b3 06 ba 9b 95 99 95 f5 41 93 36 d6 8d 85 61 40 02 16 30 e0 db 05 dd 1a 53 b3 6e cd 10 53 23 89 94 b1 ff 7d 9f e7 3d 91 d5 35 64 77 54 f7 cc 48 22 65 93 98 ce ac aa cc 88 13 e7 f3 3d 27 22 23 bf fc fb ef 7e 7b 77 f1 fb 97 6f 0f af de bc fe ea c5 70 bd 7a 71 f1 f2 f5 ed 9b 5f bf 7a fd cd 57 2f 7e f7 ee df ae 76 2f fe fe ef 7e f1 e5 7f bb ba ba f8 c7 97 af 5f be fd fa dd 9b b7 5f 5c fc cf 5f bf f9 d7 97 17 ff 74 77 f7 bb c3 bb 7c 75 31 6e af 57 d7 c3 e5 c5 3f ff cb 3f 5e fc af ef be 7d f3 f6 dd c5 ff be fb dd 37 57 ff f4 fa e2 3a 5f fe 4b f5 f1 c5 c5 e6 7a b5 ba f8 87 df bd ba fb f5 c5 ea 6f 2e 2e ae ae 68 fe f0 fb 6f 4e 89 18 5e 5c bc fa f5 57 2f 7e f9 f5 f7 2f df fe 1f 3e 40 e3 eb c3 57 2f 7e f3 ee dd b7 5f 7c fe f9 1f fe f0 87 eb 3f 4c d7 6f de 7e f3 f9 b8 5a ad 3e e7 e6 76 c9 17 df dd bd 7a fd ef 0f 5d 38 ec f7 fb cf f3 2b 97 7e f5 62 f5 ed 77 2f 2e be af e3 2f 3e bb f8 fd ab 97 7f f8 87 37 7e 7f b1 ba 18 d6 [TRUNCATED] Data Ascii: 7000]$u_;{A6a@0SnS#}=5dwTH"e='"#~{wopzq_zW/~v/~__\_tw\|u1nW??^}7W:_Kzo..hoN^\W/~/>@W/~_\|?Lo~Z>vz]8+~bw/./>7~^~~}}?p8\|-7\|\|lpVoxo_xW~/#{y_/W\|{o_\!:xvzH1st?vmx;J [K'&l!cZ7~7w_pvrx\]pdw{V_vzsX_zr0^O~rZ7/>0W\M&ZsG.\|vM[.\dp~\-f^c2\|ft36-^4,7W_at9\+x.F= Xu;CEq;kRfGtk.%(oV
Sep 21, 2024 00:48:48.240799904 CEST	1236	IN	Data Raw: 7c 41 87 1b d8 9b 9f f7 8a 67 5d 43 42 06 bb 2b e4 38 71 0d 62 db 5c 6f 42 8d 03 81 06 78 86 b8 af b8 9c 3f 08 07 f1 fb 35 52 bc 64 28 fc ce 5d 5b 7f 1b ae b7 5d 4a 11 25 7c dc 41 da 2d e3 9f 68 46 2d 1c 90 33 fc 0d 17 d6 28 00 dd 41 a3 4d 0e f0 Data Ascii: \|Ag]CB+8qb\oBx?5Rd(][]J%\|A-hF-3(AMn-z{K9U[B^^\h-z(`8aJnTY*"1 JX#y&"vSl\N1\sJr~v~eW0QN~F^O!\EOn
Sep 21, 2024 00:48:48.240811110 CEST	448	IN	Data Raw: 41 ea 61 ab 6b 82 f1 06 d7 44 e0 22 32 47 3f cf a6 20 b4 2d 28 98 08 d6 b8 75 3f 10 50 8c c9 7e 38 f6 da 83 ed 70 56 c8 3f ad 09 c3 7f d9 14 64 98 40 c1 c8 98 d8 2d f9 6b 7c 27 5f 38 ac 7b 0a fb 23 59 19 e1 c6 dd cf 2f fd 68 43 1f b7 d6 4e e2 ee Data Ascii: AakD"2G? -(u?P~8pV?d@-k\|'_8{#Y/hCN~hEK?15h(D@.Dd GE)0.QkG2/LXq0@2>}*25?i2u3ad))$e#D1a\3]0P
Sep 21, 2024 00:48:48.240823030 CEST	1236	IN	Data Raw: 27 73 4e ca 2e 82 16 b3 5c ae 58 a7 74 25 47 28 74 d2 51 aa bf 72 16 df d1 ab cc 0f 2b 89 dc 3a 11 02 0a 50 cc e6 f8 b6 cf 89 9e d7 54 97 af 61 8c d9 80 2c b5 46 68 a6 7b a0 3e 24 b4 c6 72 ac 49 8c c4 54 eb e9 56 a5 a5 29 22 92 8f d6 d2 5a 25 88 Data Ascii: 'sN.\Xt%G(tQr+:PTa,Fh{>$rITV)"Z%82fi3bROF$ t`'+$EG?q@2r6au`]Vs<W 0+G":.PW,@<Z3w+O' `ztfMw0.w/
Sep 21, 2024 00:48:48.240835905 CEST	1236	IN	Data Raw: 1d dd d2 6b 04 1c 78 a2 83 8b fb 40 54 6b 72 38 6c 64 59 da 74 ab 39 a8 12 5e 80 8b 33 11 82 9a 18 48 5c 56 39 7e 34 5c 05 6d 9e ac eb ce 57 a0 74 4a b4 eb f8 06 93 0e 75 85 10 88 c0 1c 32 92 cb 3c 5c 34 c0 a0 f8 94 55 4d 03 e0 bc ad 6a da 83 c0 Data Ascii: kx@Tkr8ldYt9^3H\V9~4\mWtJu2<\4UMj'ztA\"0T$PYeNAW/ns?UW# AwV6S5fC p=i39!b>Ik<HlS]m.krDgNppgu$jPDCss
Sep 21, 2024 00:48:48.240847111 CEST	1236	IN	Data Raw: 03 18 ce 9b 15 be 59 8e 16 94 11 8b 91 1a 05 5d c6 0d e0 0c 14 1d 6b ca 24 21 3d 56 4a ae 59 8c 09 23 56 10 e6 0a 1b ba 7d 06 8a 4a 28 5f 1d 2a 4e 1d 0a 2d ab d5 54 cd 1c af 8e d4 f3 b8 50 80 26 be 27 79 a2 ce 89 1f b6 b7 a9 4e 68 ab 14 3f a0 58 Data Ascii: Y]k$!=VJY#V}J(_*N-TP&'yNh?X[35%y7$Eq.W$ht/T ?rGPk%Fk8!&\|<#daFViGXXPj?8D=u9Kj%#XN7oD1h&,'](Jr]pEi+"}Z
Sep 21, 2024 00:48:48.240859032 CEST	1236	IN	Data Raw: b2 14 90 8a c4 d5 7d 45 02 cd 43 05 99 b6 5a 0a 12 ae c6 43 27 f0 69 bd d6 c9 64 e2 0b b3 08 25 b8 c2 49 bb aa 49 5c dd d7 24 ac 24 5b 92 a8 62 88 16 c4 dc d4 b9 92 84 65 60 24 34 ad 59 d8 1d 5c 71 75 ac 48 c8 cc 56 91 88 e3 32 33 5f 2a 11 c7 93 Data Ascii: }ECZC'id%II\$$[be`$4Y\quHV23_*FZb&Q5R%z) Xq~ EB+K\!\UX@RZZ# 2Am?[Dm!@Haa"Ag3Aic=2cD\|arkj@KhN
Sep 21, 2024 00:48:48.240873098 CEST	1236	IN	Data Raw: 6f 87 90 3d 38 46 a8 89 a3 dd b5 e7 e6 92 d0 f0 65 3b f6 6e 26 69 22 72 94 82 61 e9 0c c2 65 39 f8 df fa db b9 35 cb b8 ec 18 cc 87 9f e6 8f 28 88 85 24 2e 5e d2 85 23 f0 ee ed e2 7b 6f e7 da ac f8 a2 09 fc 34 37 ea a6 85 da 7d f6 63 63 a8 c7 84 Data Ascii: o=8Fe;n&i"rae95($.^#{o47}cc2kE%`17xwK,U$2At.o_j5Q`Muxii{FL+zTn;oWgHSH[p}9BiK
Sep 21, 2024 00:48:48.241166115 CEST	1236	IN	Data Raw: 09 0d bd 42 53 71 2b f6 9b 0a 3e 1e 26 02 21 1c c3 2f 35 05 4b 29 28 a4 5d 43 be d5 1d 13 55 2d 40 c4 06 ef ee 7b ec 13 a6 6f da ed 99 ca 47 c9 68 1d 3b 11 2c 88 34 60 24 41 8f 26 29 74 d1 78 a2 9f 01 0c 3b 23 a7 d5 c0 80 8d 2a bc f6 21 ac b3 7a Data Ascii: BSq+>&!/5K)(]CU-@{oGh;,4`$A&)tx;#!zxAD)<(Lw=0cBEIY+t,Rd 5nj%gWwELN"ixLYJn8-V];D5Wh7?n5:7F$:
Sep 21, 2024 00:48:48.241178989 CEST	1236	IN	Data Raw: c6 0c 69 a0 92 4c 32 a4 68 1b ba 97 b3 8e 1d 17 be 1c 37 84 14 81 8f 1a 4e 78 62 bc e6 29 1a 13 2a 42 dd 1e 92 65 6e 3b b2 0f 8b c2 67 d8 f0 3e 3f 67 3e 89 9f 73 d4 fd 9a 36 6a 42 c6 f6 2a d4 c1 18 be b7 f6 e3 4e 1a 5a 30 ea da 8d f2 94 d5 f5 6e Data Ascii: iL2h7Nxb)Ben;g>?g>s6jBNZ0nXGvu:RH!R7A'WWaUZ\ 7[@Qpi"fp\|N0P5tJ5ri^\ &1k~If=+xjUB$UlLl1Dl4KD
Sep 21, 2024 00:48:49.230099916 CEST	288	OUT	GET /img/emoji/40/E29DA4.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:49.406145096 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/png Content-Length: 2452 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-994" Expires: Tue, 24 Sep 2024 22:48:49 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 09 5b 49 44 41 54 78 5e dd 97 7b 8c 5d 55 f5 c7 bf 7b 9f 73 ef dc b9 33 73 87 76 da 02 2d 0d 96 97 29 89 a4 46 b4 c8 d3 da 00 02 82 2d 29 94 56 53 c4 a8 31 e5 0f 31 81 68 08 89 31 fa 87 c6 47 a2 01 14 4d 4c 48 a3 30 d0 a2 3f 7e 01 fb a4 50 68 79 15 4a 29 d0 62 5b 13 0a 2d 9d f7 7d df f3 da 7b b9 ba ce b9 b3 33 64 0a 1d 24 60 fc 26 6b d6 d9 7b f6 ec f3 39 df bd d6 3d 77 f0 3f a1 a7 81 33 76 00 67 3d 5b c0 a7 f0 1f ea 29 60 de b1 bd 36 f3 9e 38 01 69 1c 47 cf cc c0 ec cd 3d b8 73 73 0e 5b ac c6 76 f2 f0 b2 02 36 ec 28 a1 ff a9 12 56 62 0a da 0a f8 1b 0b f8 e6 16 1f eb 14 b0 c9 00 2f 7b c0 b6 8d 0a 1b 36 74 e2 f6 6d dd 98 89 a9 68 53 49 ff ec 09 8d e0 15 80 0e 9d a4 68 6c e1 b9 d4 ba fa 62 0a 16 9f 4f b5 f9 a7 d2 61 9e db d9 83 37 37 77 63 f9 07 ee d5 e3 dd b2 bd 88 b7 0e 14 40 23 e7 9c 42 8d 2b 2e a0 d6 92 c5 54 5b 74 3e 0d cc ed a1 bd 00 3d a9 51 dd c8 66 e0 83 44 80 da 54 52 1b 5e 04 68 68 5e 1f [TRUNCATED] Data Ascii: PNGIHDR((m[IDATx^{]U{s3sv-)F-)VS11h1GMLH0?~PhyJ)b[-}{3d$`&k{9=w?3vg=[)`68iG=ss[v6(Vb/{6tmhSIhlbOa77wc@#B+.T[t>=QfDTR^hh^OD6wZD'd/='w1=sk}T9gh#4o\|!K;Hdc2LdxLhDPmN2vD+%z}+n%-SrzM%<I/Ac?G1F8=z,NL[v%znf=0uDo&h?6?yB^ix+T]pmhI^L*:Q@h8Y~Fz}]V]E%RCyYwnrqW/)54i#Y@@~%o<XvK<2f7>7-9\3vlVe5b06 1:oz.[`ve Z9A9va=(;^d7
Sep 21, 2024 00:48:49.841941118 CEST	290	OUT	GET /img/emoji/40/F09F8CBC.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:50.021964073 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/png Content-Length: 3524 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-dc4" Expires: Tue, 24 Sep 2024 22:48:49 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 0d 8b 49 44 41 54 78 01 a5 d7 03 90 5c d9 c2 c0 f1 ff c1 45 df 76 0f 32 13 ad 8d ef d9 b6 6d db b6 6d db b6 6d db d6 7a 37 c9 24 e3 9e 76 5f 1d 7c 5b 8f 53 79 8b aa bc df c5 41 e9 18 82 ff d1 df de 7f bd 13 c2 60 df 43 65 ac 9a 14 f6 c7 2e 2f 37 85 2a ae 60 0d 0b d6 76 7e f9 e7 e6 15 3e 05 58 8e 90 f8 d4 a7 ee ca 91 3a 31 4d 77 75 66 cf fd 7a 73 97 3d 83 b0 82 b5 21 ae 28 11 52 21 84 c4 0c 27 ac 9e 55 3c 06 78 2b 47 48 9f dc fb 0d 47 aa 08 ab 77 6a 1d a5 cf 08 67 8e c1 8b 1a 04 21 82 12 21 22 d0 31 64 3d 26 9b bf 7e e0 ca be a5 f7 01 29 47 40 8f 27 17 71 a4 6a 9d 2b 5c 31 6a cd 23 e3 19 bc 6c 20 b4 02 72 10 31 42 84 a8 28 a6 ba b3 7d 5c f6 d7 74 2f 70 0e 47 40 67 93 59 2e cb c2 09 a7 df 43 bb f3 6e 1f 25 ad 6c 3a e9 7c 02 f8 26 ff 80 88 fa 6d 1d c5 88 b0 82 0f 6a e0 46 e0 33 84 aa 01 02 74 40 58 8d 12 1b 88 b9 7f 15 70 e7 42 f3 b4 5a 4b dc 1f 27 db 93 41 f0 29 e0 db 5c 06 bd b0 7b 81 4b 53 da f0 [TRUNCATED] Data Ascii: PNGIHDR((mIDATx\Ev2mmmz7$v_\|[SyA`Ce./7*`v~>X:1Mwufzs=!(R!'U<x+GHGwjg!!"1d=&~)G@'qj+\1j#l r1B(}\t/pG@gY.Cn%l:\|&mjF3t@XpBZK'A)\{KSYkBU4F15>O@&7v;/5Lx/K\-uKy{gOo]#D{irnBiWiy0t?SefQ'7{NG+rn9@~7VsuBjhU j,<YT<+1OQ2fV{FxtXtl%bkgOs!fvSJD\|SNX~J:Ty]Ba1M!(+DA+OpM`26Z-kqEP1BG!)z_zp;M&#8e!i6wA/E-D"leWaX+G2THq&D&z7I}QR)7B1x]!4>vTDMr}q&^W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49785	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:47.114046097 CEST	284	OUT	GET /js/jquery-ui.min.js HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:47.709852934 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:47 GMT Content-Type: application/javascript Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"5a05e7c6-181a9" Expires: Tue, 24 Sep 2024 22:48:47 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 37 30 30 30 0d 0a 1f 8b 08 00 00 00 00 00 04 03 cc bd 6b 77 1b c7 95 2e fc 7d 7e 05 85 39 51 00 b1 09 92 52 9c 99 01 0d 62 39 92 3c f2 3a b6 a5 63 29 71 fc 32 1c 2d 08 68 8a 6d 43 00 07 0d 4a d6 90 9a df 7e 9e 67 5f ea d2 dd 20 29 27 73 d6 1b 67 89 e8 ba d7 ae 5d bb f6 ad 76 ed 3f b8 b7 f3 f3 ff b9 2c d7 1f 77 fe fc cd ce de ce fb c3 e1 e1 e1 f0 0f f8 f5 f0 e0 f0 5f f6 0e fe 75 ef d1 c1 3f 3d d8 39 df 6c 2e 46 fb fb 3f ff 27 4b 5e 56 c3 d9 ea 1d 52 bf 59 ce 16 97 f3 b2 1e ed cc 56 eb 72 f8 73 5d ec 7c a8 e6 6f cb 8d fc 7c b7 ba ac 35 71 be 9e be 7d 3b 7d b3 d0 af 75 59 57 ff 15 be ea d5 7a 13 3f 16 d5 bc 5c 4b ed f2 ec ac 9c 69 43 fa 73 af 66 26 f2 d0 f1 e3 d5 c5 c7 75 f5 f6 7c e3 63 ff 7a 75 b9 9c 4f 37 d5 6a b9 33 5d ce 77 56 9b f3 72 8d 41 2d 37 eb ea cd e5 66 b5 ae 8f 76 be ad 66 e5 b2 2e e7 3b df 7d f3 6a e7 c1 fe 3f fd 53 ff ec 72 39 63 95 fe 66 70 d5 f3 8f de 78 bc f9 78 51 ae ce 76 e6 e5 59 b5 2c ef df d7 bf c3 e9 bb f9 44 7f f6 4f 7a 0a 88 de 69 b1 19 8c 36 7d 05 e0 e0 d3 20 6b d2 5b dc 29 [TRUNCATED] Data Ascii: 7000kw.}~9QRb9<:c)q2-hmCJ~g_ )'sg]v?,w_u?=9l.F?'K^VRYVrs]\|o\|5q};}uYWz?\KiCsf&u\|czuO7j3]wVrA-7fvf.;}j?Sr9cfpxxQvY,DOzi6} k[)eQO;bUL.WrY}PO?8Z7]Sd(\|{T)VpzE9<_g^4r:[MW{{%A7898-_`~\p)pHf^?LyUs!]Gx}]/Lu_/j)}UWh~_KKG{kj>/f84Z-i(o76.O)>Sc-+~)?>\|GW~OGZ<~w__'O},<?=^=atxW/KwOGX\|WGRj~1zxo?A7e=,^},>0WC0'b@w+nz_U&)6w>RTDJ=CtD;
Sep 21, 2024 00:48:47.709863901 CEST	224	IN	Data Raw: 77 c6 2e cb e6 98 26 f7 0e 47 4b 45 32 cb 5b 61 59 ce 16 ab 0f bd c1 6e 23 65 0f 4b db 4a fb b5 37 e0 7a 97 ff d9 3f f0 3e 7b 67 d5 af e5 bc 77 0f 33 c4 ee 31 54 98 ac b0 8f 39 32 6c 87 e1 ea c3 b2 5c 3f 59 cd 2e df 61 d7 5d 5f cf ed d7 e0 53 71 Data Ascii: w.&GKE2[aYn#eKJ7z?>{gw31T92l\?Y.a]_Sq@G*D7;;r:;OU:eWz;X0?wt+l\|?w}ZSCmf0P,7ml@6&iqqT{6C
Sep 21, 2024 00:48:47.709875107 CEST	1236	IN	Data Raw: b6 da af 0a d0 85 4f 83 08 d1 b2 a8 48 2e 75 7e a1 18 48 e8 c9 a3 53 2c c1 19 56 43 08 4d ac 11 1a 05 a9 ad 8a 7b 55 fd fd f4 7b 6c e2 29 a7 56 15 3d 9c 2f d5 72 5e 12 15 50 1f 5f 6f 48 a7 b2 ea c4 cd 1a 94 a0 5d 05 9b 40 db 0b 38 db 5f 82 a4 1d Data Ascii: OH.u~HS,VCM{U{l)V=/r^P_oH]@8_Jnpj9zP\_ND`@yk8+$Xjo-W_/VSl]NV]`p}}P`~Z6@4(pln~[-.@EINB*29}[m0t
Sep 21, 2024 00:48:47.709894896 CEST	1236	IN	Data Raw: ca 85 20 b5 42 8e 56 f9 b5 78 2d 7b 47 b8 77 91 6e 01 c2 7a 50 bc 9e 9d 57 8b f9 63 20 dd 66 7d 39 a3 8a 64 74 72 8a e3 78 3d 66 db 55 b1 76 9c 04 c0 74 65 82 6c f9 29 66 0a 10 c9 95 d6 91 b2 8a b2 c3 49 db b0 aa bf 76 35 4b 3d 98 f4 17 00 51 04 Data Ascii: BVx-{GwnzPWc f}9dtrx=fUvtel)fIv5K=QaaA\|swAXP3#Br\t//?+#"ReQXaUcm(UYWLOyjumrT~diAR}1B~jT HV0CjM
Sep 21, 2024 00:48:47.709907055 CEST	1236	IN	Data Raw: 5e 79 ef f0 78 25 b2 ea f2 04 62 f4 e9 29 4e 75 f9 2b d2 19 f4 10 fa c5 49 92 41 bf 58 5d a0 e3 c3 1b a6 ab 07 39 0a 2c d1 d5 84 5b 73 c4 5f 47 fc 67 5c 7d 2a 17 75 79 85 c6 ee d4 84 20 8e d1 89 d0 5a 23 f1 48 66 5d b9 96 44 72 5f 43 63 e7 74 84 Data Ascii: ^yx%b)Nu+IAX]9,[s_Gg\}uy Z#Hf]Dr_Cct\|,Vrr1U;RMs4W}1Mf66B{MO#`E#LNM3XazoV+j>zX(ZXTkGTSgjdwN)
Sep 21, 2024 00:48:47.709918022 CEST	1236	IN	Data Raw: 15 a4 6b ad 7c 79 71 73 d5 3f 5f f8 18 78 22 87 c5 8c 93 c3 19 08 19 e9 1e a8 48 a3 43 82 c4 ce 61 a9 f6 52 01 65 53 d1 a6 fe 7c 11 0f eb d0 b6 2c 21 84 55 f2 77 6a b2 81 64 49 21 0c cb 7e 5e cd ce c1 ea b6 08 96 f4 6d 5b 03 9b 92 3b 83 ea 47 a5 Data Ascii: k\|yqs?_x"HCaReS\|,!UwjdI!~^m[;GjwZ0jzvTuQx0b2FLpw}]tdYq%:6nc=MtJ$):$bnx[J}tc7W9tDrT.
Sep 21, 2024 00:48:47.709929943 CEST	236	IN	Data Raw: 28 bd 59 cd 3f d2 49 a9 91 13 e4 d4 5c 83 09 c2 06 2c c9 da 80 1e 05 b8 0d b2 a4 0e b7 b8 4a 15 f8 fa c6 b9 9e 8f de 48 6e b6 4d 74 2f 18 e6 aa ef c0 33 21 e1 11 79 e5 33 d7 8e 07 4a 90 10 17 63 a6 66 70 16 2d b5 09 2a 4f 70 ee d2 ef 99 54 95 47 Data Ascii: (Y?I\,JHnMt/3!y3Jcfp-*OpTG\|nbeF}-}.0%Laj-$i$T+B9+f@`_:[o-cs}N}\'gz.'E1.0F)\23
Sep 21, 2024 00:48:47.709975004 CEST	1236	IN	Data Raw: ce fa c9 b2 7e 82 32 cd d9 29 67 08 a6 f3 9f 2f eb 8d 8e ec eb f5 ea 9d e1 5a 2c 68 5d f1 60 86 eb b2 f3 69 0e f2 e8 52 23 ac 0a ef 51 90 6c 1e 3a 69 a5 bb 39 36 86 28 ea 74 77 2a 0a dd 05 1f ef 91 41 5d 5d fc a9 3c c7 ad 9e d5 25 30 b4 81 a0 90 Data Ascii: ~2)g/Z,h]`iR#Ql:i96(tw*A]]<%0V$,Wwt+^\|lI\0wld@%\|]#4#>".@=Ik}P,po]yYP6n&MbgdAu;(Vi+eRe"=P'dxJk
Sep 21, 2024 00:48:47.709986925 CEST	1236	IN	Data Raw: 13 7b 2b 42 67 b7 5f 4e 0e f4 08 49 1b b5 75 b6 15 24 95 c0 cd 13 fe d9 bb a1 61 e6 df b5 65 42 58 3d e2 32 cd 50 0a 50 01 a0 d1 12 13 29 73 1c 70 80 c9 ac b4 20 9b 0d 43 10 22 79 6b 15 cc 31 d6 10 2a 36 ba b5 ce 0f 42 2f 1d c5 0a a5 31 b7 57 53 Data Ascii: {+Bg_NIu$aeBX=2PP)sp C"yk1*6B/1WS]B(ckEw9Mv+jyI;e2>8FlQu})\|"4@\/J[yRdp+M6>?k2U#tMvw; YFnV+:J[fe7np
Sep 21, 2024 00:48:47.710005045 CEST	1236	IN	Data Raw: de c5 0b a5 11 49 6d 1e 41 60 bf a1 e5 4b 0d 81 36 b9 6c 94 18 24 34 fd 16 76 72 84 5b af 36 b1 14 49 74 f2 57 ba 84 a9 1e a6 f0 2e 35 d1 bf 8a 70 ae 98 bf 4e 83 14 5b 6a a1 27 78 5e 17 53 ff a4 3e da 70 cc 32 a8 c2 74 86 f0 ac 00 9e bc e6 80 38 Data Ascii: ImA`K6l$4vr[6ItW.5pN[j'x^S>p2t8`rjJQqYtq-*(c;7I!+v- 3`b75O:(w%D7N#k0#[(YUjmHMwK9.U8'<m5)%q^Dd_R0?Kz
Sep 21, 2024 00:48:47.714797974 CEST	1236	IN	Data Raw: d6 f7 10 43 29 f7 b4 cf 4b 30 24 05 39 48 25 3c 35 5e 12 90 f7 c0 6e 3e 6a 79 71 b9 4d 73 33 55 43 a0 41 54 2a a0 f8 53 95 28 4c af 80 ed 87 b4 d4 78 8f e1 bf 04 a3 b9 7c 8b b0 7f 92 47 3e 9f 3e fa 23 89 1e 90 de 69 1d f4 10 cb 8a 65 ba 55 10 e1 Data Ascii: C)K0$9H%<5^n>jyqMs3UCAT*S(Lx\|G>>#ieU;EmNk`UTj"L4nIBklZc,Eq3`$^P\2i`R0UY97uk$pDxsh7`\j'S+Heh%

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49786	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:47.118227005 CEST	283	OUT	GET /js/tgsticker.js?31 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:47.718636990 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:47 GMT Content-Type: application/javascript Last-Modified: Wed, 29 Mar 2023 11:31:32 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"64242194-601c" Expires: Tue, 24 Sep 2024 22:48:47 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 31 61 62 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 cd 5c 6d 73 14 47 92 fe ce af 28 d9 71 3b 23 4b 8c 84 cf eb bb 00 63 87 8c 51 2c b1 80 59 60 97 0f 5a 05 d1 9a 69 49 6d 66 a6 c7 dd 3d 08 1d e8 bf df 93 6f f5 d6 3d 92 f0 ae ef 4c d8 d0 53 95 95 95 6f 95 99 95 55 dd ef 8b c6 bd 7c 5a 77 5d 55 ba 87 6e 7c ba 5e 4e bb aa 5e ba f1 b6 fb 78 c7 b9 f7 e8 6e e6 d6 fd f1 6a d7 15 ab ea c9 b2 ea 5e 75 45 d3 95 33 8c 39 2d e6 6d e9 db e3 a6 0a 70 8f 8a f9 fc a4 98 be 6b 01 79 74 fc 40 51 ce ca f7 d5 b4 7c 59 60 2a b4 5f 54 cb 59 7d 31 91 c6 17 d5 87 72 2e 3d 9f 3e b9 7b 0f ee e8 90 96 26 7c 5d 2d 88 cc 9d f1 b2 bc 70 3f 15 5d 39 de de 26 9c 9e ec d9 6b 25 dc b9 a6 ec d6 cd d2 8d 8e 46 6e c7 8d c7 c9 18 77 d7 79 7c db 7b ee de fe fe fe 64 7f 1b 70 a3 63 37 22 84 57 34 ad 32 3e 39 58 55 98 f4 e3 15 75 58 db 6a 5e 5c 96 0d 71 f5 f3 c9 2f e5 b4 9b 4c 9b 92 e8 59 ae e7 f3 ed 07 31 e4 9b 9f 5f fe f5 f1 cb 57 6f 9f 3e 79 f6 e4 35 e0 bf f1 2c 35 e5 af 4f 48 82 fb 04 4e 92 5e 14 d5 f2 69 5d af 0e 4e d1 ca 72 cd 7b 5e 93 [TRUNCATED] Data Ascii: 1ab4\msG(q;#KcQ,Y`ZiImf=o=LSoU\|Zw]Un\|^N^xnj^uE39-mpkyt@Q\|Y`_TY}1r.=>{&\|]-p?]9&k%Fnwy\|{dpc7"W42>9XUuXj^\q/LY1_Wo>y5,5OHN^i]Nr{^{H)A6nz^N/Vu^YJ-raiYn&fWiO15({<W/y,O=+.n;Xxk,nz>mB}tr?v%vQ'd[u%:urUMyrd~>\|F5FO%luU=h~[L$q;4Mq9O~swO~':P<Vb*}<OK648R'M4~/"^&RBuwAKXmXfE:7}8+PfN<Wqg<7brG],vw[39UUY}Y_mcO<]4+5N^}LuZ7nZa#~{fl`.[s~=W+X)zv'r8~}^.,J
Sep 21, 2024 00:48:47.718647957 CEST	1236	IN	Data Raw: 30 91 c2 3d 59 76 65 f3 be 98 c7 78 69 85 90 77 66 d7 2e 8f 9e c0 dd 54 32 2a 5e 22 56 19 d1 91 29 3e e7 7a 3e 1f 44 07 fa 28 f8 09 8e f0 a4 8b 89 db f7 f6 38 56 81 85 82 54 be 95 61 83 da 44 06 59 fb 77 a4 31 f7 83 bb f7 ad bb ef fe bc cf 31 4f Data Ascii: 0=Yvexiwf.T2*^"V)>z>D(8VTaDYw11Ol0VPw}U70c0 Ft8XV\I=cf\;K`UbS/.Ua6:h4iMAzLsd%+l>z@"^N !RHfNy3xf
Sep 21, 2024 00:48:47.718663931 CEST	1236	IN	Data Raw: 61 dd 1c 56 4d 2b f6 b0 01 ae ed ea d5 cf cb 5b 82 3d 45 1d 95 8d 6b 03 32 de 69 10 ff 0c 44 71 4b 77 c0 5e 98 1d 76 0b 12 cf 32 8e b0 b1 d5 a2 8f 94 f5 7c 11 c8 17 02 26 6c 9e a1 56 a3 16 97 6b 3b 32 24 24 b3 c5 ec 10 f5 50 6c 4a 0b 8a 14 6d 34 Data Ascii: aVM+[=Ek2iDqKw^v2\|&lVk;2$$PlJm4Zlgge=\|_ &dC:fXv2p&4"i=X'"BDI<d5/1t:}"uPvA"Sl^S>rQOujyjl+P)[T
Sep 21, 2024 00:48:47.718683004 CEST	672	IN	Data Raw: 5d 54 92 6a 9f d5 0d dd 22 0c 6b 24 c9 4a c4 e9 47 7a 18 bc 50 e0 91 47 80 a0 26 fa 15 6c 2e f7 5b 52 98 93 85 ad fe 97 57 0b 9e c1 eb e7 79 2e 16 b4 27 46 eb 10 0f c3 4e 5e ca 84 ba 75 1b 8f 04 c0 82 42 36 ce 8a 14 41 c8 5c 16 12 46 72 58 2b 55 Data Ascii: ]Tj"k$JGzPG&l.[RWy.'FN^uB6A\FrX+U`iQ,!y:O:#Ilrag[[PG>yrgeb2}8sV~i1\K1cQ-J`\`znPRSoDhI9AE]
Sep 21, 2024 00:48:47.718693972 CEST	1236	IN	Data Raw: 37 d2 f0 7c bd 90 49 e0 00 09 83 7f 35 0b ad c9 6b 5b a4 58 8b 63 ee df fa aa 97 c7 ca d7 2c c6 e4 a9 cb 86 ea 7d fd 2b 14 ba 25 eb ce 2b 5c 8f 22 31 b2 88 76 76 f4 59 8c 4f 7a 15 0b d8 30 84 51 af 62 46 a7 3e 25 7d b2 2d e4 4e 79 8c 7a f1 a2 d7 Data Ascii: 7\|I5k[Xc,}+%+\"1vvYOz0QbF>%}-Nyz")qc&bRNtVD+jeg]M7lKzW@{fQz.KXV.As]:\NWPIp_9~Eo[sDz`~oRGBUFf~=HQ8
Sep 21, 2024 00:48:47.718704939 CEST	1236	IN	Data Raw: e9 0e 31 9c 56 60 0e 39 95 98 d2 67 2d f8 85 38 fb 52 c9 f6 03 24 7a 74 d3 d2 4b 44 37 06 03 33 30 c9 81 86 f0 e6 b4 14 79 e2 29 aa d6 cd aa d3 53 7c d7 62 49 af 4f 5f 37 c7 06 7d 65 e4 bf 78 f5 19 64 2b ca 9b e8 05 ce db d1 29 8e 33 b2 5a 4d 0f Data Ascii: 1V`9g-8R$ztKD730y)S\|bIO_7}exd+)3ZMW ;\M`/hit!D@$Uzv^-W}EI%<[FOgqE)}%h&ljo2q=@uytS/i?>m4<@)
Sep 21, 2024 00:48:47.718718052 CEST	331	IN	Data Raw: 05 ad 88 2b 7d 65 1d ef 69 49 65 71 93 15 d0 5b 55 c3 73 d2 1d ee 9b 38 1b 98 59 ee 22 b1 79 9a 85 e0 7d b1 e3 1b 09 e1 da fd 30 25 8f a8 ac af c6 11 58 04 ac 18 bf 09 84 bf 6d 05 3e ef 90 3f 12 eb 79 b4 c6 85 e4 c5 63 72 56 f4 02 9e 7e 8a 97 71 Data Ascii: +}eiIeq[Us8Y"y}0%Xm>?ycrV~q]T<B>(1E[9\>g($S8N$<Y<_&:h}}Xr_%u6bxO\| a0&"qOWQG!0\|9l%gIH72
Sep 21, 2024 00:48:47.861901999 CEST	290	OUT	GET /img/emoji/40/F09F8D92.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:48.236109018 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:48 GMT Content-Type: image/png Content-Length: 2903 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-b57" Expires: Tue, 24 Sep 2024 22:48:48 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 0b 1e 49 44 41 54 78 5e e5 98 09 8c 5d d5 7d 87 bf b3 dc fb 96 d9 c7 63 9b 31 6b 8c 63 3b 18 17 6f c5 24 8e 97 31 8b 31 c4 a1 10 4c 53 36 93 02 4e 29 a4 14 25 6d 15 51 c1 10 94 52 91 ad aa 0a aa 9a b4 49 49 d2 50 12 52 08 9b 0c 11 18 1c 15 28 2e 18 2c b0 4d 8c 31 ce c0 78 4a ec d9 de 7b 77 3b e7 fc 3b 8c ad 28 6a c7 ae 45 28 54 ea 77 df 4f ba ba ba d2 fd f4 3b e7 5d fd 75 f9 bf 8e e2 30 5c d1 7b 42 79 a0 3f 9d de dc 19 cd 08 ae 72 e2 e0 7e 77 ac 8d 2a 9d 56 d9 ce 40 88 c4 14 39 4e bd e9 43 fa ba 8b e5 e7 66 44 bf b2 74 fa ae 9d bd bd 84 ff 35 c1 b5 bd c7 74 ea ac 79 85 2d b5 ac 6c aa 94 17 78 e7 67 d6 6b e9 a4 2c cf 51 4a 61 95 c6 79 4f 9a a5 b8 dc 03 1a 50 38 27 f8 10 06 94 b0 c5 56 f4 43 5d 15 ff c0 dd 7f b5 7b f7 7b 2a 78 d5 ad 73 ae 6d 9b dc 7d d5 e8 50 36 0f f1 64 b9 23 73 05 41 02 91 35 18 05 b5 5a 42 9a e5 84 10 88 94 c5 3b 21 cb 8a 71 69 01 8c b2 68 63 89 44 ed 56 79 f8 ee 7e 1f ee 78 f6 [TRUNCATED] Data Ascii: PNGIHDR((mIDATx^]}c1kc;o$11LS6N)%mQRIIPR(.,M1xJ{w;;(jE(TwO;]u0\{By?r~wV@9NCfDt5ty-lxgk,QJayOP8'VC]{{xsm}P6d#sA5ZB;!qihcDVy~x'Whq3fXd.#'zc!K4#A<dEN067Gs/=2q9'w}"'I(IZc}I<Qd:o~4Kxzyf JXkAs9IF1L#Q<')^EnGYdQ>GBph(URjZ[hmiMlo-rkIGWZb?n_\|guw5Y\|\B(7OG9 kF2!}uZ_.{-3tPDq8AilR<I7mEo,}Wy;iMtLs&C^4,6%S{fq~^5Wz{_y/
Sep 21, 2024 00:48:48.236120939 CEST	224	IN	Data Raw: cd 5b 7f c9 f5 d3 93 3f be 7d f1 fd 37 7e 67 f5 25 5f ba f7 c2 ab fe ec 7b e7 5c 7c dd 23 a7 ac 5a 7f cf dc b9 d7 dc 39 b7 83 f7 83 2f ff cd fc 6f 5e fa 85 63 bf c2 04 2c 58 c9 67 d6 5c dc b1 fd 9c 8b 27 2f e3 83 e2 ce bb 7e 7b f9 0d b7 cd 7e e6 Data Ascii: [?}7~g%_{\\|#Z9/o^c,Xg\'/~{~+&{I?;}?}Gur.n^,ti7yv[]%7]^q'."W
Sep 21, 2024 00:48:48.236128092 CEST	1236	IN	Data Raw: 95 fe 80 09 b8 7f c9 92 96 87 e7 2f 9d bc e1 b7 ce 6a e2 bd e4 eb 77 cf b9 ee b3 37 9f 30 b0 f4 d2 6a 37 87 61 f1 6a 5a cf bc b4 e3 67 67 fc ee 24 f9 f0 e9 d1 67 d7 2f 5c 18 6d 3a 75 d5 29 1b 4e 59 7e c3 c3 0b 96 df f3 d0 a9 2b 9f 7f 70 51 cf 8e Data Ascii: /jw70j7ajZgg$g/\m:u)NY~+pQx=w=<0h="ZyWrga_H=Y"0X*\/)Ye? =2!#d72Eu}I>--\t}tM4pf
Sep 21, 2024 00:48:48.236138105 CEST	549	IN	Data Raw: 93 8a c7 a6 0d c4 0b 84 80 0b 9e 62 2c 0e 21 00 41 41 a1 a0 81 27 13 88 30 ff d6 a8 ba a7 26 14 04 08 da fc 44 e1 3e 57 38 af 14 20 46 e3 c5 23 e2 51 45 40 7b 85 42 a3 10 08 82 0a 01 1b 20 12 41 44 50 07 83 52 0c 5b cd a0 77 68 2f 78 01 25 82 17 Data Ascii: b,!AA'0&D>W8 F#QE@{B ADPR[wh/x%!^)YXZW/zSGZ6]O,[%x/(@A$B1cIc&e++5`ms<s^a5)W,!\AB@b(D/<tN
Sep 21, 2024 00:48:49.231895924 CEST	290	OUT	GET /img/emoji/40/F09F988A.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:49.402399063 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/png Content-Length: 2988 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-bac" Expires: Tue, 24 Sep 2024 22:48:49 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 0b 73 49 44 41 54 78 5e cd 98 7b 8c 5c d5 79 c0 7f e7 9c 7b e7 bd bb b3 eb 5d 7b d7 5e af df 89 cd 62 13 9a 14 12 9e b6 69 9a 47 f3 28 4a a0 69 ab 56 69 ab b4 49 55 44 68 a8 48 d5 12 39 6d f2 87 1b a5 10 ab 88 a2 34 49 43 90 92 40 13 12 14 9e 4d 8a 6d cc 23 84 18 64 4a 21 31 eb 07 eb 65 9f b3 bb b3 73 ef cc dc b9 e7 d1 f5 1e 69 47 80 69 29 14 29 9f f4 d3 bd 33 9a f3 9d df f9 be 39 57 f7 5e 7e 95 c3 81 14 bc c1 b8 67 df fb b2 bd a9 59 89 74 2b 64 c6 95 00 9c 21 16 8e 4a 6d 4e 4f ed da b3 bf c9 1b 88 d7 25 78 68 ef bb 57 97 33 d1 a5 e5 d2 fc c5 c5 52 75 47 ae d0 18 52 05 53 96 8a 2c 20 ac a1 69 ea b2 9a c4 b9 d1 7a d4 71 64 26 2e 3f 54 69 15 0f ec ba 6e ff a9 37 55 f0 d1 bd 97 6c eb cf 8d 7f bc 77 c5 d4 e5 a5 be 68 0b 7d 1d 50 1e 82 e2 3a c8 f6 83 ec 00 21 c0 44 d0 9a 82 e8 24 cc bf 00 33 f3 44 53 b9 63 d3 95 d5 3f 98 68 f4 ff eb 05 9f 3d f8 f4 ff ab e0 0f f7 7e a8 63 9b 1a b9 7a b0 77 e4 cf f3 6b [TRUNCATED] Data Ascii: PNGIHDR((msIDATx^{\y{]{^biG(JiViIUDhH9m4IC@Mm#dJ!1esiGi))39W^~gYt+d!JmNO%xhW3RuGRS, izqd&.?Tin7Ulwh}P:!D$3DSc?h=~czwk}n(>}Ga'pi-7n_=srn6WB 7Ypp!(TF#G=_s~wW1dR@E2}N}~Cc#\|_vQezG{Iz5zg_>A~q-y9s(Y<s+Q1qhz8^?u1g!toPgtm6N+4L==&{l?bWlY01`$to>mcW5%5\ ^hhkZ^mVgq38tCX4]=' @FJB@(6@
Sep 21, 2024 00:48:49.402574062 CEST	224	IN	Data Raw: 41 d3 40 aa c1 3a bc a0 85 d4 fa 45 f7 6c a1 d8 f5 78 d7 50 f4 c2 27 81 ab f0 81 5c be 18 7f f1 b2 55 1b 0b 93 bf 43 67 16 f2 bd a0 6b 78 e2 f6 b9 aa 43 b3 c2 63 df 7e 94 6f fc d5 8f 38 74 db 43 d8 c6 24 64 22 70 d5 97 92 a9 61 ea 93 1c f8 e6 43 Data Ascii: A@:ElxP'\UCgkxCc~o8tC$d"paC\|yGpYk*dLvvd!Zzttqu G?/pOYo<=3_G'3PXAW1oB[T (iB
Sep 21, 2024 00:48:49.915607929 CEST	290	OUT	GET /img/emoji/40/F09F94B8.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:50.095091105 CEST	1183	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:50 GMT Content-Type: image/png Content-Length: 842 Last-Modified: Fri, 01 Nov 2019 00:04:50 GMT Connection: keep-alive ETag: "5dbb76a2-34a" Expires: Tue, 24 Sep 2024 22:48:50 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 28 00 00 00 28 08 06 00 00 00 8c fe b8 6d 00 00 03 11 49 44 41 54 78 01 62 a0 23 18 05 a3 60 14 dc 2a e3 2e 05 30 43 0e b0 92 66 51 10 3e 8d b5 ed 0d d7 0a d6 1b ad 6d db f6 b3 6d db 5a 7b c7 b6 6d db 66 63 d8 af ff 9a 53 e3 67 b5 6e 52 c9 c9 bd 75 aa be 5c 2a 20 e1 56 47 9f 11 b4 26 fe 74 50 9c 03 0c ce 1a b4 31 fd 34 d8 fb bf 01 fb 80 37 c1 99 77 01 02 67 0e da 94 6e 81 73 e0 0b 70 af a8 87 7b 65 3d 38 f3 8e 6f fe 85 8b 31 07 6f ce 50 b8 fe 4f c2 bd 24 0f c6 92 2c 8a 33 ef c0 37 7a fc 02 b7 26 4a c2 37 a5 9b e1 ec fb 10 dc f3 12 60 2c 88 06 e6 87 51 9c 79 c7 37 d0 43 af 6f 7f 2e 4a a2 37 a7 9b e0 ec 75 2f 1a 67 7c 0b cc fa 4a f5 29 30 fb 88 38 f3 8e 6f f4 d0 cb 1d df c0 45 4a 14 0b 1d ff dc 81 c6 49 ef c0 98 f2 06 30 f5 95 56 c5 37 7a 9c ea dd ac 3f c9 5d af c3 6d 4a 53 b8 df af 87 6b f4 33 30 c6 3d 01 8c 7f b4 5d d1 43 2f 77 36 eb ee ea 08 2f fd e4 9a 48 89 3b 0c f7 f3 b5 70 0d 79 00 c6 88 7b 81 91 77 a9 ee 6e 57 f4 d0 cb 1d ee 12 92 59 9e [TRUNCATED] Data Ascii: PNGIHDR((mIDATxb#`.0CfQ>mmZ{mfcSgnRu\ VG&tP147wgnsp{e=8o1oPO$,37z&J7`,Qy7Co.J7u/g\|J)08oEJI0V7z?]mJSk30=]C/w6/H;py{wnWY)Ww)\}o1&`vE2Y\aZ}^-qf0psdg0b&e0*\\NilvA&M8Xcb&.vC9!ri}ew?{GfnY%H5V")]9"[8Fu3%9vB+d])@g,fj@{B(d@`-)\ #2Y!sDVtM.3lICIEvM-)!2K(=pMZ'@a^i}hLU[Qo8B&+H9M;2B!(C,%) 2AR-)!V7Z@<wH@wV]IENDB`
Sep 21, 2024 00:48:54.933191061 CEST	280	OUT	GET /img/favicon.ico HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:55.105099916 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:55 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT Connection: keep-alive ETag: "62616083-3aee" Expires: Fri, 27 Sep 2024 22:48:55 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 9e 22 0d d9 9e 22 36 d9 9e 22 6f d9 9e 22 a4 d9 9e 22 cd d9 9e 22 e7 d9 9e 22 f7 d9 9e 22 fe d9 9e 22 fe d9 9e 22 f7 d9 9e 22 e7 d9 9e 22 cd d9 9e 22 a4 d9 9e 22 6f d9 9e 22 36 da 9e 23 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: 00 %6 % h6(0` $""6"o"""""""""""o"6###("s"""""""""""""""""s#(###-#######################-###}#########################}##:#####

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49787	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:47.122172117 CEST	286	OUT	GET /js/widget-frame.js?62 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:47.766038895 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:47 GMT Content-Type: application/javascript Last-Modified: Thu, 20 Apr 2023 18:46:51 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"6441889b-16f16" Expires: Tue, 24 Sep 2024 22:48:47 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 36 34 62 38 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 bd eb 5a 1c 47 b2 2e fc df 57 51 b0 f6 a8 1b 0b 1a 90 6c cf 0c 32 f6 83 30 b6 98 91 2c 2d 81 6c cf 92 b5 fb 69 e8 02 4a ea ee 62 75 37 42 0c d2 6d 7d 37 f0 dd d8 7e df 88 8c 3c d4 a1 41 b2 67 b6 f7 de 5e 6b 44 57 55 64 64 64 9c 32 32 f2 b4 be 9e 9d cd e7 e7 5b eb eb e7 83 8b 51 31 2d 66 67 bd e3 72 bc 7e 6f 63 73 73 7d 9a ff f7 45 3e 9b 0f 26 c5 78 30 2f ca c9 c9 74 30 ce d7 4e ca e9 da 6c 3c 98 ce d7 dc 87 c9 e9 fa 67 eb 1e cf f8 aa 57 9e e7 d3 81 a0 c9 c7 e5 68 94 4f d7 8f 46 e5 a9 e2 dc bc 87 bf 37 62 ce a7 01 f9 67 44 ee 48 d9 31 52 be 27 29 d9 79 39 ba 3a 29 46 a3 ec e8 2a db 9b 16 6f b2 27 ff ff ff c7 fa 7a d9 49 f1 2e 9f 65 27 d3 72 9c 3d 43 c3 b2 7d b6 2c 1b 4c 86 d9 61 31 29 b3 ff 2a 5e 0f f3 91 60 7e b2 7f 98 8d 8a e3 7c 32 cb 3f fb ac 7b 72 31 39 66 53 bb 2b d9 f5 67 19 fe 7b 3b 98 66 a3 c1 6c 7e 58 a0 be ed 6c e3 81 7f fb 36 9f 0c cb e9 0c 2f 5f 76 c6 b3 ce 6a d6 19 97 ff e4 9f cb fc e8 4d 31 e7 af b2 f3 4a e1 c1 b3 2e 31 bd 13 14 f8 f3 [TRUNCATED] Data Ascii: 64b8ZG.WQl20,-liJbu7Bm}7~<Ag^kDWUddd22[Q1-fgr~ocss}E>&x0/t0Nl<gWhOF7bgDH1R')y9:)Fo'zI.e'r=C},La1)^`~\|2?{r19fS+g{;fl~Xl6/_vjM1J.1uFt~-]xklwF[ZKWwv8S8`w ;C(T\|/NB~xn``4:YQ>'lx\|1:Uwy]r'Yo<xX6lK1bhkfwWdV=O@[H=1\|~1d0.&IMBU]rMb^\|y[2>_3,FYx F;Q9Pwbu:]pz5N'++R1\<P^O[V+Vg<0WV6>\|`[\;Yb6`% 46%/'VyrN#q>,`0Tz.>up5\$<2m$7qx\|;w+O^
Sep 21, 2024 00:48:47.766072989 CEST	1236	IN	Data Raw: 30 3f 81 2e 90 ae 7c 3a bf 12 bc d7 b0 e9 ad f9 2a 8c 6d 6b f8 21 62 c0 5c 6b 05 b2 26 22 8d d9 10 91 6f cb b0 98 9d 0f e6 c7 67 d2 a0 2e bd 86 fe 2a 56 56 62 c4 20 69 15 7c 04 11 e3 62 96 a3 13 98 95 a3 b7 74 2e f3 b3 7c 12 59 fa 75 de bb 25 c6 Data Ascii: 0?.\|:mk!b\k&"og.VVb i\|bt.\|Yu%LM*Y(FelhpJWS19^XltZ<~Zpx'8HO\|A;~~cD{U\^m/m]wT_{O_monl\|^\A-bGKz{
Sep 21, 2024 00:48:47.766091108 CEST	448	IN	Data Raw: c7 17 84 ba 73 c7 7d 5a 3b 29 e6 cb 40 65 1f 7a 67 88 dc e0 4c ae 46 f9 9d 3b 4b c8 64 1d 9f 3d e1 40 a4 bb dc 5d 53 c3 d5 41 e0 1a 9b cd 81 9f 1b 1a ae 2c af 60 ac 0e e8 7c b6 7a b6 bd 7c 74 82 e8 67 ad 98 6f 35 b4 09 9a b5 18 60 0b ea 32 99 2f Data Ascii: s}Z;)@ezgLF;Kd=@]SA,`\|z\|tgo5`2/6A06'!{ rN0W$;WWz0=\|ZK7/0pJYJ&:#\|MwA]o}2jX4\OdQ]V\?)anMP4Y
Sep 21, 2024 00:48:47.766103029 CEST	1236	IN	Data Raw: f0 f9 fe 0f 8f f8 5a 0a 7c f7 f4 67 80 7f b1 f1 19 25 cf 1a 0f 7f 2e 86 8c c8 b4 d2 12 b1 16 9c e3 56 76 2d 89 b8 62 f6 3d 3c d7 0c 71 a1 2a 15 4b 59 2f 0f 4f 28 09 6e 97 85 76 ed ea ba 4c e6 f9 80 23 ec 6c 69 3b 63 9a 87 26 a2 1f f8 26 01 01 23 Data Ascii: Z\|g%.Vv-b=<q*KY/O(nvL#li;c&&#?$87TTfZgyqzc)oii?&Zx]tj{(D&9i4Lu@\|Z\|bHN,TBVJ"~wrgk
Sep 21, 2024 00:48:47.766119003 CEST	1236	IN	Data Raw: 0c 6d 1e 39 d1 a9 b8 fb ef f2 13 ac 06 9b 87 ee 81 5f 8d 5d c7 a3 12 5d a2 f3 0a fc 60 ad 4b 64 2b 3d f5 79 3e 89 a4 72 4e 21 f7 f3 51 6d 70 66 98 29 20 43 6c c0 60 ee 69 be d9 b5 47 57 ad 08 d6 bf f3 01 85 8b 41 ed 83 b6 4d c9 ab 0d e7 18 9d 58 Data Ascii: m9_]]`Kd+=y>rN!Qmpf) Cl`iGWAMXG["+/lNTe&igMR1TX#2J:o&-A)1@,J}y~1;sKL{GJYQy:;gpO3CAghXK"O0 .~
Sep 21, 2024 00:48:47.766132116 CEST	1236	IN	Data Raw: 75 34 ed 88 28 4d 69 15 9d 85 07 f7 63 bf b8 94 b1 38 10 6a 1a 1b 37 d7 fc 10 90 d8 b8 45 23 2a 74 07 11 83 bd 0c 5d d9 91 1f 35 9b 5c b4 3a 2f cf 8f c3 eb a2 70 8b cc 38 72 4a 2b d0 5c 9e 69 7b 36 43 3f b6 23 33 3a da 85 95 13 51 03 d5 ed 0a 32 Data Ascii: u4(Mic8j7E#*t]5\:/p8rJ+\i{6C?#3:Q2vD?2W?=>~z1#Z% B/Be{3Uy/Fg"3[sv~{,jAN?x#ImDK71KF$=;7r8:y=4XZ
Sep 21, 2024 00:48:47.766149998 CEST	1236	IN	Data Raw: a3 79 5c 75 97 7c 68 40 ee 52 f7 0e ea cc 6d 95 60 fd 08 60 21 43 fe 67 3a c5 b1 a5 fd 76 13 00 e2 53 74 18 43 48 b5 1b 31 67 f5 d3 d7 82 a2 ca 7e df b4 94 f9 46 9e ff dc c4 e8 1a 50 95 a9 35 80 3a ff 6a 20 ed ac f2 b4 b4 33 4a d9 e4 00 b1 b1 1f Data Ascii: y\u\|h@Rm``!Cg:vStCH1g~FP5:j 3JFi\Tj,F7^]7b>L8h[n"U.5+"#Yqeg5t@2v\xebwA[9C#&_noN-I:Nc?:Eyy
Sep 21, 2024 00:48:47.766163111 CEST	328	IN	Data Raw: 1f 3e c8 b0 87 0e 5b 27 e7 db 2f 0e bf 5f fb 4b 4a 55 1d ff 2f 6b ae 42 9c 1d f3 73 31 3f 63 1d a9 0a 29 06 d2 ee 25 aa 2a 10 1c 82 f1 be b9 09 bf ac 3d a6 2b 5b 73 21 05 6a f0 88 54 93 8d 65 c8 18 e2 64 0f 20 b7 31 a9 9f 43 66 ed 44 de a7 52 e2 Data Ascii: >['/_KJU/kBs1?c)%*=+[s!jTed 1CfDR@WR~YH>~B{+nxVqn4OT{VB8vVPti=7\|e93.\7X.{_.z+h`=;)dR08 AA!
Sep 21, 2024 00:48:47.766938925 CEST	1236	IN	Data Raw: 71 cf d8 b8 53 0e fb 97 83 c2 cf 5f b1 00 d3 84 3a e5 84 33 ca bb 9d 00 04 43 aa 17 0c 55 72 23 fd 22 75 53 dc 60 e8 cd 4a e7 74 4c 4b 88 a6 71 f6 b2 17 48 81 22 d2 9c 12 b8 58 fd 59 32 b0 20 18 10 d5 22 3c e1 20 0f 76 1c da 28 8f 2b e9 e8 88 88 Data Ascii: qS_:3CUr#"uS`JtLKqH"XY2 "< v(+:"lPY@K]Y`}GU2Rb/6+')jH^JRZSlz@n:Ni)&[9lk>-jvU]'96:V7V<0A<{sW">
Sep 21, 2024 00:48:47.766952038 CEST	1236	IN	Data Raw: 8e db 7e 46 d1 72 2f 7e e7 fa be e4 bb 2e 53 53 65 33 f5 49 54 49 d3 68 d7 ce 43 c2 4f 6c 51 85 14 07 6e cb d0 ed 6a 3c 5b 12 eb 05 f1 e9 d2 5e e8 d2 c0 ad ec cc 5e 48 11 40 c8 5f 41 a7 8e 57 b4 44 f1 2d 18 16 36 d2 d6 79 fc 74 e7 3b cb 6b a8 f6 Data Ascii: ~Fr/~.SSe3ITIhCOlQnj<[^^H@_AWD-6yt;k%84nNY85TybzaSaKJ5*63:"]4{uVi\|45uP@"ExG7!FI^_R<hx-?SKeFm
Sep 21, 2024 00:48:47.770970106 CEST	1236	IN	Data Raw: a2 46 3e c2 3d 08 33 cb ed b0 85 8f 70 1c c0 26 96 15 10 a8 b3 41 1a 1e 05 f6 f0 7c 31 cf bc 62 82 b1 43 52 96 47 09 b0 2c c1 b4 6c a1 65 9d ce 3d 62 c3 b6 88 53 de 37 b5 eb 3b 77 9d 70 d7 ee 15 36 2e da 33 50 4b 6c c1 b5 3d d3 00 a5 f5 54 81 dc Data Ascii: F>=3p&A\|1bCRG,le=bS7;wp6.3PKl=TMh-UAs}aDAWZuE%EBRgOu,sSq=kEV-//ZC3@+2h{224*aTe>;8?/qHZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49788	149.154.167.99	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:47.127059937 CEST	286	OUT	GET /js/telegram-web.js?14 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:47.727418900 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:47 GMT Content-Type: application/javascript Last-Modified: Fri, 18 Mar 2022 10:32:52 GMT Transfer-Encoding: chunked Connection: keep-alive ETag: W/"62345fd4-2e63" Expires: Tue, 24 Sep 2024 22:48:47 GMT Cache-Control: max-age=345600 Content-Encoding: gzip Data Raw: 65 64 37 0d 0a 1f 8b 08 00 00 00 00 00 04 03 a5 5a ff 73 d3 46 16 ff bd 7f 85 c2 65 6a b9 c4 22 c0 70 3f 04 92 0e b4 74 ee 3a 4d cb 1d 19 98 0e c3 78 14 7b 1d 0b 14 c9 27 c9 09 b9 34 ff fb 7d 3e fb f6 ed ae 6c 99 42 0f 66 40 da 7d fb be 7f db 27 a7 8b 75 35 eb 8a ba 4a f7 c7 c9 ed 37 49 b2 9f 2d aa ac 31 f3 26 bf 4e 8e 13 bf 2b 9b 49 d2 98 6e dd 54 49 b7 2c da ec 32 5f a5 01 e0 56 16 eb c5 a2 35 dd 59 bd 7a 1a c3 3e 4d ee c6 4f 81 fd 8e ff 58 12 ed ac a9 cb f2 9f 55 57 bf 29 4c 8f 54 bd 22 3f ad 52 74 af 60 46 9f fe f8 23 b9 bd 03 9e 3e 37 8b a2 69 bb 74 9c 99 7c b6 8c d8 b2 42 11 f6 2a 6f 92 55 dd 16 44 1e 90 65 7e 09 58 47 f9 ba ab 47 07 16 35 8f 24 c9 2a 9f cf 8b ea 22 86 77 2b 00 3f 8c 21 e7 eb 26 df 40 ed 97 08 4b c1 f9 87 6c ec 17 9d b9 94 57 60 de 4f a9 cd 71 8c 6c 7f 56 57 5d 00 20 78 26 0a 7b 95 37 a6 82 98 31 b4 ec 40 e5 38 01 74 3c eb a0 b1 d6 07 55 69 09 7c dc 17 c0 89 6a d1 6c 6c 91 fe 3f 4c 71 b1 04 4f 20 60 d9 a9 d7 9d 69 64 b1 4f a2 68 5f d4 f3 1b 61 1e 0e 94 97 ad 51 d9 8b 45 92 0a [TRUNCATED] Data Ascii: ed7ZsFej"p?t:Mx{'4}>lBf@}'u5J7I-1&N+InTI,2_V5Yz>MOXUW)LT"?Rt`F#>7it\|BoUDe~XGG5$"w+?!&@KlW`OqlVW] x&{71@8t<Ui\|jll?LqO `idOh_aQE{Kq2gKq5kTC]%$:^O7:n$01&f4VtO]b w&xs%6d,!!cvQ9,fd`pDGJi"Xd-\qb=sYYYI)#:?@/A}$tbhzkccH{#`6O~O,pTT`cbB,!%$"-y6!^X'I(O!KzoS}^e",QD[2@D?2KKFg?H5lDs1:=KsT[}7lvZV)6L(A0[Zdt(Jks;#wgB4Ng):B$]8in7zlYT/O9)j-P{Ra3TuwSkH{^
Sep 21, 2024 00:48:47.727428913 CEST	224	IN	Data Raw: 5c 21 d1 68 31 cf 66 8d 81 b4 2f 4b c3 d2 9e 8e b0 2b 7a c2 43 d6 f2 7c 76 ae c4 70 6c 74 98 d8 bf d9 93 d5 a7 e4 bc cc 67 1f 47 c4 1b 80 e7 45 bb 2a f3 1b 82 56 75 65 64 d7 35 0e c0 34 bf c9 f2 d5 ca 54 f3 1f 96 45 39 4f 71 ce 1a 85 7c 81 cc b4 Data Ascii: \!h1f/K+zC\|vpltgGE*Vued54TE9Oq\|BY%CN8O-aat.7wun0?]q5RVX>jxn<y1?`=wNns^ft~2>l(p[2^^bv\y
Sep 21, 2024 00:48:47.727438927 CEST	1236	IN	Data Raw: 6d 56 c8 08 e7 48 7b 78 f9 6d d6 d5 ee f1 57 68 48 97 7f 34 33 79 7e ff 4e 99 3a 45 89 5a a6 e3 f7 2a cd ef 11 c3 3f a1 f4 fd 6e f2 26 b5 4c d3 eb 54 56 8a 13 76 59 0a 15 5f 58 d5 f8 74 06 39 45 cd 1e e1 ef fd e4 03 69 31 0e b6 77 08 03 f6 f1 df Data Ascii: mVH{xmWhH43y~N:EZ*?n&LTVvY_Xt9Ei1w}USL<HVx6ebxkm,m`".}GLY<Y]hmq^U.7)zNrUx(1f=lO,sS!PyUAlT<.D7LK3Y#
Sep 21, 2024 00:48:47.727452040 CEST	1236	IN	Data Raw: b7 f6 93 94 b3 82 5d c7 98 64 4d d7 7e 67 ef aa f1 ce 2f 68 15 7e 81 a1 b0 e9 be e7 7c 26 a6 0e 92 7d f1 41 2b 82 73 47 d7 11 f8 40 c3 7d 65 7e 13 2a 48 70 0c 77 36 8a 44 64 bf b6 f8 2f b3 99 15 01 85 69 f6 d1 dd dd d8 14 85 2a 35 bc ad ee 1f a9 Data Ascii: ]dM~g/h~\|&}A+sG@}e~Hpw6Dd/i5i\\|Dp*e%JnkDq]3ah4Cq6BxZM@A%)>OM".XB#sw~8\/h1sM}Rpk"
Sep 21, 2024 00:48:47.727463007 CEST	213	IN	Data Raw: 69 44 72 80 a9 96 1f c0 22 90 cd b1 c9 8d d6 25 91 3a 86 1c f2 54 f6 10 db 03 28 7c d5 88 d1 6c 7c a4 08 3e 8e ce c8 76 fb b6 88 c7 a4 58 a1 ff 5f d3 06 e4 6a 5d 67 ec af b4 ec 41 12 61 72 97 3e 5e c9 62 09 bf d2 10 b1 a8 43 5a d5 01 18 35 a5 29 Data Ascii: iDr"%:T(\|l\|>vX_j]gAar>^bCZ5)B ~4{/D`:>r'9VwuZ{eWw6Rp*d{B"U&e7u{-E=c6~f)NGc.0
Sep 21, 2024 00:49:32.904012918 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49794	95.216.186.40	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:48:47.152096033 CEST	270	OUT	GET /v/ HTTP/1.1 Host: xn--r1a.website Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:48.072017908 CEST	492	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:47 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: stel_ssid=263cf9d1025afb36f3_12406985488317080175; expires=Sat, 21 Sep 2024 22:48:47 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=35768000 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 2b 29 2a 4d 05 00 8d 4c fc fd 04 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 18+)*ML0
Sep 21, 2024 00:48:48.154484987 CEST	492	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:47 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: stel_ssid=263cf9d1025afb36f3_12406985488317080175; expires=Sat, 21 Sep 2024 22:48:47 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=35768000 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 2b 29 2a 4d 05 00 8d 4c fc fd 04 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 18+)*ML0
Sep 21, 2024 00:48:54.495553970 CEST	270	OUT	GET /v/ HTTP/1.1 Host: xn--r1a.website Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:48:54.822726011 CEST	491	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:54 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: keep-alive Set-Cookie: stel_ssid=fea255f2957c74380e_5978415367437964807; expires=Sat, 21 Sep 2024 22:48:54 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store Strict-Transport-Security: max-age=35768000 Access-Control-Allow-Origin: * Content-Encoding: gzip Data Raw: 31 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 2b 29 2a 4d 05 00 8d 4c fc fd 04 00 00 00 0d 0a 30 0d 0a 0d 0a Data Ascii: 18+)*ML0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	65051	136.144.31.29	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:49:08.292289972 CEST	337	OUT	GET /adserver/www/delivery/asyncjs.php HTTP/1.1 Host: ads.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:49:08.981106997 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:49:08 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=20 ETag: 1079f85a6f7f7d83640b17a26d3394d5 Expire: Fri, 20 Sep 2024 23:49:08 GMT Cache-Control: private, max-age=3600 P3P: CP="CUR ADM OUR NOR STA NID" Content-Security-Policy: frame-ancestors 'self';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Set-Cookie: SRVGROUP=common; path=/; HttpOnly Data Raw: 31 31 36 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 64 2c 63 29 7b 76 61 72 20 61 3d 22 31 30 37 39 66 38 35 61 36 66 37 66 37 64 38 33 36 34 30 62 31 37 61 32 36 64 33 33 39 34 64 35 22 3b 63 2e 72 65 76 69 76 65 41 73 79 6e 63 3d 63 2e 72 65 76 69 76 65 41 73 79 6e 63 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 79 70 65 6f 66 20 65 2e 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 66 75 6e 63 74 69 6f 6e 20 67 28 69 2c 6a 29 7b 6a 3d 6a 7c 7c 7b 62 75 62 62 6c 65 73 3a 66 61 6c 73 65 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 66 61 6c 73 65 2c 64 65 74 61 69 6c 3a 75 6e 64 65 66 69 6e 65 64 7d 3b 76 61 72 20 68 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 3b 68 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 69 2c 6a 2e 62 75 62 62 6c 65 73 2c 6a 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 6a 2e 64 65 74 61 69 6c 29 3b 72 65 74 75 72 6e 20 68 7d 67 2e 70 72 6f [TRUNCATED] Data Ascii: 1163(function(d,c){var a="1079f85a6f7f7d83640b17a26d3394d5";c.reviveAsync=c.reviveAsync\|\|{};(function(e){if(typeof e.CustomEvent==="function"){return false}function g(i,j){j=j\|\|{bubbles:false,cancelable:false,detail:undefined};var h=document.createEvent("CustomEvent");h.initCustomEvent(i,j.bubbles,j.cancelable,j.detail);return h}g.prototype=e.Event.prototype;e.CustomEvent=g})(c);try{if(!c.
Sep 21, 2024 00:49:08.981123924 CEST	224	IN	Data Raw: 72 65 76 69 76 65 41 73 79 6e 63 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 29 7b 76 61 72 20 66 3d 63 2e 72 65 76 69 76 65 41 73 79 6e 63 5b 61 5d 3d 7b 69 64 3a 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 2e 72 65 76 69 76 65 41 73 79 6e Data Ascii: reviveAsync.hasOwnProperty(a)){var f=c.reviveAsync[a]={id:Object.keys(c.reviveAsync).length,name:"revive",seq:0,main:function(){var e=function(){var g=false;try{if(!g){g=true;d.removeEventListener("DOMContentLoaded",e,false)
Sep 21, 2024 00:49:08.981138945 CEST	1236	IN	Data Raw: 3b 63 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 65 2c 66 61 6c 73 65 29 3b 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 74 61 72 74 22 2c 66 2e 73 74 61 72 74 29 3b 66 2e 61 64 64 45 76 Data Ascii: ;c.removeEventListener("load",e,false);f.addEventListener("start",f.start);f.addEventListener("refresh",f.refresh);f.dispatchEvent("start",{start:true})}}catch(h){console.log(h)}};f.dispatchEvent("init");if(d.readyState==="complete"){setTimeou
Sep 21, 2024 00:49:08.981167078 CEST	1236	IN	Data Raw: 74 2f 61 64 73 65 72 76 65 72 2f 77 77 77 2f 64 65 6c 69 76 65 72 79 2f 61 73 79 6e 63 73 70 63 2e 70 68 70 22 3b 67 2e 7a 6f 6e 65 73 3d 67 2e 7a 6f 6e 65 73 2e 6a 6f 69 6e 28 22 7c 22 29 3b 67 2e 6c 6f 63 3d 64 2e 6c 6f 63 61 74 69 6f 6e 2e 68 Data Ascii: t/adserver/www/delivery/asyncspc.php";g.zones=g.zones.join("\|");g.loc=d.location.href;if(d.referrer){g.referer=d.referrer}f.ajax(e,g)}},detect:function(){var e=d.querySelectorAll("ins["+f.getDataAttr("id")+"='"+a+"']");var l={zones:[],prefix:f
Sep 21, 2024 00:49:08.981180906 CEST	1236	IN	Data Raw: 69 6e 3a 20 30 3b 70 61 64 64 69 6e 67 3a 20 30 3b 22 3e 27 3b 68 2b 3d 65 3b 68 2b 3d 22 3c 62 6f 64 79 3e 22 3b 68 2b 3d 22 3c 2f 68 74 6d 6c 3e 22 3b 69 66 28 22 73 72 63 64 6f 63 22 20 69 6e 20 67 26 26 22 31 22 3d 3d 3d 67 2e 70 61 72 65 6e Data Ascii: in: 0;padding: 0;">';h+=e;h+="<body>";h+="</html>";if("srcdoc" in g&&"1"===g.parentElement.getAttribute(this.getDataAttr("srcdoc"))){g.srcdoc=h}else{var i=g.contentWindow.document\|\|g.contentDocument;i.open();i.write(h);i.close()}},spc:function
Sep 21, 2024 00:49:08.981195927 CEST	138	IN	Data Raw: 65 6e 74 28 6e 65 77 20 43 75 73 74 6f 6d 45 76 65 6e 74 28 74 68 69 73 2e 67 65 74 45 76 65 6e 74 4e 61 6d 65 28 65 29 2c 7b 64 65 74 61 69 6c 3a 67 7c 7c 7b 7d 7d 29 29 7d 7d 3b 66 2e 6d 61 69 6e 28 29 7d 7d 63 61 74 63 68 28 62 29 7b 69 66 28 Data Ascii: ent(new CustomEvent(this.getEventName(e),{detail:g\|\|{}}))}};f.main()}}catch(b){if(console.log){console.log(b)}}})(document,window);0
Sep 21, 2024 00:49:09.112824917 CEST	607	OUT	GET /adserver/www/delivery/asyncspc.php?zones=8&prefix=revive-0-&xcampaigns=%3A%3Abetween%3A%3Agetintent%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3Adefault-stub%3A%3Akimberlite%3A%3A&xsite=13097&xsitename=xn--r1a.website&loc=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru HTTP/1.1 Host: ads.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Origin: http://xn--r1a.website Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:49:09.348114967 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:49:09 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=20 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 P3P: CP="CUR ADM OUR NOR STA NID" Set-Cookie: OAID=01000111010001000101000001010010; expires=Sat, 20-Sep-2025 22:49:09 GMT; Max-Age=31536000; path=/; SameSite=none Access-Control-Allow-Origin: http://xn--r1a.website Access-Control-Allow-Credentials: true Content-Security-Policy: frame-ancestors 'self';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Set-Cookie: SRVGROUP=common; path=/; HttpOnly Data Raw: 34 62 30 0d 0a 7b 22 72 65 76 69 76 65 2d 30 2d 30 22 3a 7b 22 68 74 6d 6c 22 3a 22 3c 61 20 68 72 65 66 3d 27 68 74 74 70 3a 5c 2f 5c 2f 61 64 73 2e 61 6c 66 61 73 65 6e 73 65 2e 6e 65 74 5c 2f 61 64 73 65 72 76 65 72 5c 2f 77 77 77 5c 2f 64 65 6c 69 76 65 72 79 5c 2f 63 6c 2e 70 68 70 3f 62 61 6e 6e 65 72 69 64 3d 31 30 34 26 61 6d 70 3b 7a 6f 6e 65 69 64 3d 38 26 61 6d 70 3b 73 69 67 3d 35 66 31 37 63 37 64 32 38 34 33 30 62 62 33 38 33 39 39 34 38 31 30 61 30 36 62 33 33 62 32 35 35 34 35 64 30 37 62 39 30 33 62 34 35 36 64 36 33 37 32 32 37 30 35 61 39 31 37 30 32 30 34 32 26 61 6d 70 3b 64 65 73 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 Data Ascii: 4b0{"revive-0-0":{"html":"<a href='http:\/\/ads.alfasense.net\/adserver\/www\/delivery\/cl.php?bannerid=104&zoneid=8&sig=5f17c7d28430bb383994810a06b33b25545d07b903b456d63722705a91702042&dest=https%3A%2F%2
Sep 21, 2024 00:49:09.348155975 CEST	224	IN	Data Raw: 46 79 61 6e 64 65 78 2e 72 75 25 32 46 73 65 61 72 63 68 25 32 46 25 33 46 74 65 78 74 25 33 44 61 6c 66 61 62 61 6e 6b 26 61 6d 70 3b 7a 6f 6e 65 73 3d 38 26 61 6d 70 3b 78 63 61 6d 70 61 69 67 6e 73 3d 25 33 41 25 33 41 62 65 74 77 65 65 6e 25 Data Ascii: Fyandex.ru%2Fsearch%2F%3Ftext%3Dalfabank&zones=8&xcampaigns=%3A%3Abetween%3A%3Agetintent%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3Adefault-stub%3A%3Akimberlite%3A%3A&xsite=13097&xsitename=xn--r1a.web
Sep 21, 2024 00:49:09.477108955 CEST	770	IN	Data Raw: 73 69 74 65 27 20 74 61 72 67 65 74 3d 27 5f 62 6c 61 6e 6b 27 20 72 65 6c 3d 27 6e 6f 6f 70 65 6e 65 72 20 6e 6f 66 6f 6c 6c 6f 77 27 3e 3c 69 6d 67 20 73 72 63 3d 27 68 74 74 70 3a 5c 2f 5c 2f 61 64 73 2e 61 6c 66 61 73 65 6e 73 65 2e 6e 65 74 Data Ascii: site' target='_blank' rel='noopener nofollow'><img src='http:\/\/ads.alfasense.net\/adserver\/www\/images\/93e6032137695635299ea12513020a22.jpg' width='970' height='90' alt='' title='' border='0' \/><\/a><div id='beacon_5956ea5e46' style='posi
Sep 21, 2024 00:49:13.704503059 CEST	421	OUT	GET /adserver/www/images/93e6032137695635299ea12513020a22.jpg HTTP/1.1 Host: ads.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:49:13.917108059 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:49:13 GMT Content-Type: image/jpeg Content-Length: 7670 Connection: keep-alive Keep-Alive: timeout=20 Last-Modified: Tue, 18 Jul 2023 14:37:17 GMT ETag: "64b6a39d-1df6" Content-Security-Policy: frame-ancestors 'self';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Accept-Ranges: bytes Set-Cookie: SRVGROUP=common; path=/; HttpOnly Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 74 70 74 00 00 01 c8 00 00 00 14 63 70 72 74 00 00 01 dc 00 00 00 3c 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 58 00 00 00 1c 00 73 00 52 00 47 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: JFIF(ICC_PROFILE0mntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(wtptcprt<mlucenUSXsRGBXYZ o8XYZ bXYZ $paraffY
Sep 21, 2024 00:49:13.917144060 CEST	224	IN	Data Raw: 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 Data Ascii: [XYZ -mlucenUS Google Inc. 2016CC
Sep 21, 2024 00:49:13.917179108 CEST	1236	IN	Data Raw: 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 5a 03 ca 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 03 00 02 03 01 00 00 00 00 00 00 00 00 00 00 08 09 0a 06 07 01 04 05 0b ff c4 00 35 10 00 02 02 02 02 01 02 05 01 06 04 07 00 00 00 00 00 05 04 Data Ascii: Z"5WX$5!1IQ5!"#13A$%BWXq?@
Sep 21, 2024 00:49:13.917213917 CEST	1236	IN	Data Raw: af 77 0e 5e 57 66 c1 03 c4 78 79 a9 1b 62 7d 8a dc 9b c4 89 dc a7 c8 c8 c5 ee 2b 9c 1d 8f e2 77 c3 05 7c 68 89 39 56 b0 e3 f3 2e 47 99 79 78 79 dd fe a0 9e 96 db 57 ab 77 ae b0 2a dc ab 91 55 1c 6a ac 9a ee 8f 0a 56 9a de 12 91 d3 25 22 4f 82 3e Data Ascii: w^Wfxyb}+w\|h9V.GyxyWwUjV%"O>g/9Q^:"H\|h\|a}p/C\|f2K?sbVAIZaD{.=40[/C;K5-"62YuVF1%t6}k>ggx.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	65067	136.144.31.29	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:49:11.178694963 CEST	303	OUT	GET /adserver/www/delivery/asyncjs.php HTTP/1.1 Host: ads.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:49:11.878699064 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:49:11 GMT Content-Type: text/javascript;charset=UTF-8 Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=20 ETag: 1079f85a6f7f7d83640b17a26d3394d5 Expire: Fri, 20 Sep 2024 23:49:11 GMT Cache-Control: private, max-age=3600 P3P: CP="CUR ADM OUR NOR STA NID" Content-Security-Policy: frame-ancestors 'self';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Set-Cookie: SRVGROUP=common; path=/; HttpOnly Data Raw: 31 31 36 33 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 64 2c 63 29 7b 76 61 72 20 61 3d 22 31 30 37 39 66 38 35 61 36 66 37 66 37 64 38 33 36 34 30 62 31 37 61 32 36 64 33 33 39 34 64 35 22 3b 63 2e 72 65 76 69 76 65 41 73 79 6e 63 3d 63 2e 72 65 76 69 76 65 41 73 79 6e 63 7c 7c 7b 7d 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 74 79 70 65 6f 66 20 65 2e 43 75 73 74 6f 6d 45 76 65 6e 74 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 7b 72 65 74 75 72 6e 20 66 61 6c 73 65 7d 66 75 6e 63 74 69 6f 6e 20 67 28 69 2c 6a 29 7b 6a 3d 6a 7c 7c 7b 62 75 62 62 6c 65 73 3a 66 61 6c 73 65 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 66 61 6c 73 65 2c 64 65 74 61 69 6c 3a 75 6e 64 65 66 69 6e 65 64 7d 3b 76 61 72 20 68 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 76 65 6e 74 28 22 43 75 73 74 6f 6d 45 76 65 6e 74 22 29 3b 68 2e 69 6e 69 74 43 75 73 74 6f 6d 45 76 65 6e 74 28 69 2c 6a 2e 62 75 62 62 6c 65 73 2c 6a 2e 63 61 6e 63 65 6c 61 62 6c 65 2c 6a 2e 64 65 74 61 69 6c 29 3b 72 65 74 75 72 6e 20 68 7d 67 2e 70 72 6f [TRUNCATED] Data Ascii: 1163(function(d,c){var a="1079f85a6f7f7d83640b17a26d3394d5";c.reviveAsync=c.reviveAsync\|\|{};(function(e){if(typeof e.CustomEvent==="function"){return false}function g(i,j){j=j\|\|{bubbles:false,cancelable:false,detail:undefined};var h=document.createEvent("CustomEvent");h.initCustomEvent(i,j.bubbles,j.cancelable,j.detail);return h}g.prototype=e.Event.prototype;e.CustomEvent=g})(c);try{if(!c.
Sep 21, 2024 00:49:11.878772974 CEST	1236	IN	Data Raw: 72 65 76 69 76 65 41 73 79 6e 63 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 61 29 29 7b 76 61 72 20 66 3d 63 2e 72 65 76 69 76 65 41 73 79 6e 63 5b 61 5d 3d 7b 69 64 3a 4f 62 6a 65 63 74 2e 6b 65 79 73 28 63 2e 72 65 76 69 76 65 41 73 79 6e Data Ascii: reviveAsync.hasOwnProperty(a)){var f=c.reviveAsync[a]={id:Object.keys(c.reviveAsync).length,name:"revive",seq:0,main:function(){var e=function(){var g=false;try{if(!g){g=true;d.removeEventListener("DOMContentLoaded",e,false);c.removeEventListe
Sep 21, 2024 00:49:11.878808975 CEST	1236	IN	Data Raw: 73 65 7b 76 61 72 20 67 3d 66 2e 65 6e 63 6f 64 65 28 6d 5b 68 5d 2c 6c 29 3b 66 6f 72 28 69 20 69 6e 20 67 29 7b 65 2e 70 75 73 68 28 67 5b 69 5d 29 7d 7d 7d 7d 72 65 74 75 72 6e 20 65 7d 2c 61 70 70 6c 79 3a 66 75 6e 63 74 69 6f 6e 28 67 29 7b Data Ascii: se{var g=f.encode(m[h],l);for(i in g){e.push(g[i])}}}}return e},apply:function(g){if(g.zones.length){var e="http:"===d.location.protocol?"http://ads.alfasense.net/adserver/www/delivery/asyncspc.php":"https://ads.alfasense.net/adserver/www/deli
Sep 21, 2024 00:49:11.878843069 CEST	1236	IN	Data Raw: 65 69 67 68 74 3e 30 3f 68 2e 68 65 69 67 68 74 3a 30 3b 67 2e 62 6f 72 64 65 72 3d 30 3b 67 2e 6f 76 65 72 66 6c 6f 77 3d 22 68 69 64 64 65 6e 22 3b 72 65 74 75 72 6e 20 65 7d 2c 6c 6f 61 64 46 72 61 6d 65 3a 66 75 6e 63 74 69 6f 6e 28 67 2c 65 Data Ascii: eight>0?h.height:0;g.border=0;g.overflow="hidden";return e},loadFrame:function(g,e){var h="<!DOCTYPE html>";h+="<html>";h+='<head><base target="_top"><meta charset="UTF-8"></head>';h+='<body border="0" margin="0" style="margin: 0;padding: 0;">
Sep 21, 2024 00:49:11.878875971 CEST	362	IN	Data Raw: 74 68 69 73 2e 6e 61 6d 65 2b 22 2d 22 2b 61 2b 22 2d 22 2b 65 7d 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 67 29 7b 64 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 68 69 73 2e 67 65 74 45 Data Ascii: this.name+"-"+a+"-"+e},addEventListener:function(e,g){d.addEventListener(this.getEventName(e),g)},removeEventListener:function(e,g){d.removeEventListener(this.getEventName(e),g,true)},dispatchEvent:function(e,g){d.dispatchEvent(new CustomEvent
Sep 21, 2024 00:49:56.884838104 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	65068	136.144.31.29	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:49:11.178899050 CEST	541	OUT	GET /adserver/www/delivery/asyncspc.php?zones=8&prefix=revive-0-&xcampaigns=%3A%3Abetween%3A%3Agetintent%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3Adefault-stub%3A%3Akimberlite%3A%3A&xsite=13097&xsitename=xn--r1a.website&loc=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru HTTP/1.1 Host: ads.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:49:11.886890888 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:49:11 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=20 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Access-Control-Allow-Origin: * P3P: CP="CUR ADM OUR NOR STA NID" Set-Cookie: OAID=01000111010001000101000001010010; expires=Sat, 20-Sep-2025 22:49:11 GMT; Max-Age=31536000; path=/; SameSite=none Content-Security-Policy: frame-ancestors 'self';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Set-Cookie: SRVGROUP=common; path=/; HttpOnly Data Raw: 34 62 30 0d 0a 7b 22 72 65 76 69 76 65 2d 30 2d 30 22 3a 7b 22 68 74 6d 6c 22 3a 22 3c 61 20 68 72 65 66 3d 27 68 74 74 70 3a 5c 2f 5c 2f 61 64 73 2e 61 6c 66 61 73 65 6e 73 65 2e 6e 65 74 5c 2f 61 64 73 65 72 76 65 72 5c 2f 77 77 77 5c 2f 64 65 6c 69 76 65 72 79 5c 2f 63 6c 2e 70 68 70 3f 62 61 6e 6e 65 72 69 64 3d 31 30 34 26 61 6d 70 3b 7a 6f 6e 65 69 64 3d 38 26 61 6d 70 3b 73 69 67 3d 35 66 31 37 63 37 64 32 38 34 33 30 62 62 33 38 33 39 39 34 38 31 30 61 30 36 62 33 33 62 32 35 35 34 35 64 30 37 62 39 30 33 62 34 35 36 64 36 33 37 32 32 37 30 35 61 39 31 37 30 32 30 34 32 26 61 6d 70 3b 64 65 73 74 3d 68 74 74 70 73 25 33 41 25 32 46 25 32 46 79 61 6e 64 65 78 2e 72 75 25 32 46 73 65 61 72 63 68 25 32 46 25 33 46 74 65 78 74 25 33 44 61 6c 66 61 62 61 6e 6b 26 61 6d 70 3b 7a 6f 6e 65 73 3d 38 26 61 6d 70 3b 78 63 61 6d Data Ascii: 4b0{"revive-0-0":{"html":"<a href='http:\/\/ads.alfasense.net\/adserver\/www\/delivery\/cl.php?bannerid=104&zoneid=8&sig=5f17c7d28430bb383994810a06b33b25545d07b903b456d63722705a91702042&dest=https%3A%2F%2Fyandex.ru%2Fsearch%2F%3Ftext%3Dalfabank&zones=8&xcam
Sep 21, 2024 00:49:11.886953115 CEST	928	IN	Data Raw: 70 61 69 67 6e 73 3d 25 33 41 25 33 41 62 65 74 77 65 65 6e 25 33 41 25 33 41 67 65 74 69 6e 74 65 6e 74 25 33 41 25 33 41 76 6f 78 25 33 41 25 33 41 6f 74 6d 25 33 41 25 33 41 61 6c 66 61 73 65 6e 73 65 25 33 41 25 33 41 72 74 62 73 61 70 65 25 Data Ascii: paigns=%3A%3Abetween%3A%3Agetintent%3A%3Avox%3A%3Aotm%3A%3Aalfasense%3A%3Artbsape%3A%3Adefault-stub%3A%3Akimberlite%3A%3A&xsite=13097&xsitename=xn--r1a.website' target='_blank' rel='noopener nofollow'><img src='http:\/\/ads.alfasense.n
Sep 21, 2024 00:49:11.974076986 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 21, 2024 00:49:12.263561964 CEST	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0
Sep 21, 2024 00:49:13.988672972 CEST	351	OUT	GET /adserver/www/images/93e6032137695635299ea12513020a22.jpg HTTP/1.1 Host: ads.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: SRVGROUP=common
Sep 21, 2024 00:49:14.367691994 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:49:14 GMT Content-Type: image/jpeg Content-Length: 7670 Connection: keep-alive Keep-Alive: timeout=20 Last-Modified: Tue, 18 Jul 2023 14:37:17 GMT ETag: "64b6a39d-1df6" Content-Security-Policy: frame-ancestors 'self';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Accept-Ranges: bytes Set-Cookie: SRVGROUP=common; path=/; HttpOnly Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 74 70 74 00 00 01 c8 00 00 00 14 63 70 72 74 00 00 01 dc 00 00 00 3c 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 58 00 00 00 1c 00 73 00 52 00 47 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: JFIF(ICC_PROFILE0mntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(wtptcprt<mlucenUSXsRGBXYZ o8XYZ bXYZ $paraffY
Sep 21, 2024 00:49:14.367726088 CEST	224	IN	Data Raw: 13 d0 00 00 0a 5b 00 00 00 00 00 00 00 00 58 59 5a 20 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 20 00 00 00 1c 00 47 00 6f 00 6f 00 67 00 6c 00 65 00 20 00 49 00 6e 00 63 Data Ascii: [XYZ -mlucenUS Google Inc. 2016CC
Sep 21, 2024 00:49:14.367809057 CEST	1236	IN	Data Raw: 01 01 01 01 01 01 01 01 ff c0 00 11 08 00 5a 03 ca 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 01 00 03 00 02 03 01 00 00 00 00 00 00 00 00 00 00 08 09 0a 06 07 01 04 05 0b ff c4 00 35 10 00 02 02 02 02 01 02 05 01 06 04 07 00 00 00 00 00 05 04 Data Ascii: Z"5WX$5!1IQ5!"#13A$%BWXq?@
Sep 21, 2024 00:49:14.367854118 CEST	1236	IN	Data Raw: af 77 0e 5e 57 66 c1 03 c4 78 79 a9 1b 62 7d 8a dc 9b c4 89 dc a7 c8 c8 c5 ee 2b 9c 1d 8f e2 77 c3 05 7c 68 89 39 56 b0 e3 f3 2e 47 99 79 78 79 dd fe a0 9e 96 db 57 ab 77 ae b0 2a dc ab 91 55 1c 6a ac 9a ee 8f 0a 56 9a de 12 91 d3 25 22 4f 82 3e Data Ascii: w^Wfxyb}+w\|h9V.GyxyWwUjV%"O>g/9Q^:"H\|h\|a}p/C\|f2K?sbVAIZaD{.=40[/C;K5-"62YuVF1%t6}k>ggx.
Sep 21, 2024 00:49:14.367892981 CEST	1236	IN	Data Raw: c1 32 04 f8 79 f3 45 99 17 36 29 11 f2 e4 c5 93 87 3f 34 95 eb 13 b0 ae 35 3b f7 45 6a 6a 37 8e c8 d1 74 4d 97 b4 ed 75 6d ad 64 d7 db 2d a6 b2 f1 c2 97 2d d6 a4 5a d1 b3 a7 11 66 c6 4f c7 15 71 3b 97 73 e2 4f b2 46 9e a9 3f cd 97 2a 44 7e 51 72 Data Ascii: 2yE6)?45;Ejj7tMumd--ZfOq;sOF?D~QrKGA5G,qvjQ&mc]e9\|4wV>Y.jNsDsYy]BY'iw\|tw~wgX+UZQA5+2&^QgV5r
Sep 21, 2024 00:49:14.367918968 CEST	1236	IN	Data Raw: 53 e7 ad a8 af 29 d5 6d 85 ae 9d 3d 67 86 75 be 3c 29 3c e6 23 6f 1e c6 c9 4d 66 a4 9f 13 c8 57 4a d5 86 5a fc 48 a0 e5 c5 1a b1 2e b1 9e 54 de 4d b3 ce c5 83 79 a7 02 b6 6a ad 63 7d 7d 4d b4 de 75 e5 26 e5 64 d7 4c 33 36 a0 3c b5 55 d2 d8 1a 52 Data Ascii: S)m=gu<)<#oMfWJZH.TMyjc}}Mu&dL36<URG9K^ophI*O^w[3bS5e1{dW5=b"OW?/]y/\|MgJ\|}i9[r# :\|v'_ud=8\
Sep 21, 2024 00:49:14.367944002 CEST	1236	IN	Data Raw: 22 db 69 2b a8 f3 d1 66 6f af f3 73 d8 b9 30 4d bb 5f b8 5d 23 66 d7 b5 e9 36 09 ce a7 42 8b 9d 9e d0 60 45 f6 30 61 42 f8 fe 6f b3 89 1a 2f cd f8 7e 0f 99 ed f0 f0 c5 f1 fc 1f 17 3f 83 e3 f8 3e 2f 87 e2 e5 f0 fe bf a7 c5 e7 f4 fd 7c fb 64 bd 1f Data Ascii: "i+fos0M_]#f6B`E0aBo/~?>/\|d7B[=$l+Y6dQy%j-i#5p!IR<M%}EMddv93*GKrV;!>]5Z?WluJOWj+
Sep 21, 2024 00:49:14.367968082 CEST	552	IN	Data Raw: 00 00 00 00 00 00 00 00 00 53 f7 aa ef a8 16 e5 e8 af e0 4f c4 95 9d 65 62 fc a5 f9 4b ee 0f c8 c9 ad 4d fd 9f d9 1f 8e be 95 f4 6f b6 6e 75 0f 6f ee 3e ef 65 f5 0f 7b f5 0f 9b f2 20 fb 6f 69 f2 a4 7b 9a 7e fd e0 4e e4 ff 00 0d 3a cb fd 1b b4 ff Data Ascii: SOebKMonuo>e{ oi{~N:6V6?mK4XVG};KYO>guo=7nq{4ldX"lnj48*9y$83WkKTM_{;Mj
Sep 21, 2024 00:49:14.556838989 CEST	557	OUT	GET /adserver/www/delivery/lg.php?bannerid=104&campaignid=15&zoneid=8&loc=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru&cb=5956ea5e46&zones=8&xcampaigns=::between::getintent::vox::otm::alfasense::rtbsape::default-stub::kimberlite::&xsite=13097&xsitename=xn--r1a.website HTTP/1.1 Host: ads.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9 Cookie: SRVGROUP=common
Sep 21, 2024 00:49:14.780618906 CEST	1004	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:49:14 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=20 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Access-Control-Allow-Origin: * P3P: CP="CUR ADM OUR NOR STA NID" Set-Cookie: OAID=01000111010001000101000001010010; expires=Sat, 20-Sep-2025 22:49:14 GMT; Max-Age=31536000; path=/; SameSite=none Content-Security-Policy: frame-ancestors 'self';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Set-Cookie: SRVGROUP=common; path=/; HttpOnly Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	65075	136.144.31.29	80	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 21, 2024 00:49:13.849852085 CEST	627	OUT	GET /adserver/www/delivery/lg.php?bannerid=104&campaignid=15&zoneid=8&loc=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru&cb=5956ea5e46&zones=8&xcampaigns=::between::getintent::vox::otm::alfasense::rtbsape::default-stub::kimberlite::&xsite=13097&xsitename=xn--r1a.website HTTP/1.1 Host: ads.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 21, 2024 00:49:14.552793026 CEST	1004	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:49:14 GMT Content-Type: image/gif Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=20 Pragma: no-cache Cache-Control: no-cache, no-store, must-revalidate Expires: 0 Access-Control-Allow-Origin: * P3P: CP="CUR ADM OUR NOR STA NID" Set-Cookie: OAID=01000111010001000101000001010010; expires=Sat, 20-Sep-2025 22:49:14 GMT; Max-Age=31536000; path=/; SameSite=none Content-Security-Policy: frame-ancestors 'self';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Set-Cookie: SRVGROUP=common; path=/; HttpOnly Data Raw: 32 62 0d 0a 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 00 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 0d 0a 30 0d 0a 0d 0a Data Ascii: 2bGIF89a!,D;0
Sep 21, 2024 00:49:59.591744900 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49743	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:43 UTC	930	OUT	GET /file/BDoevstmwc-LH-sbj-OyBhlAr9f_8REM5GylyjUbzp0C14JNGE0luefvosada74HY1heslHYjIFTJqYowqHZW2U0Ud55ISGdzPYMuUbsvK0U7jqDYY-QLs3IPVb2zbi0EMPrw82DmDiXtGfIl_nXcDU-a02mI72VHUBwEsB8wPyHqiKczgkPdhtL1n1sOO-1c3RWSQMS52k5nV_uHDjd1h8NFSl9LNRD-BGQdwhHx5IRdErI4RlKKXdjeDtsd-MzL846KS9mGB6U7PDlMoKR93EFw9CuEkhZl3NsVJvFI6ObKpJ6EdDOS9ZZBfCfFHU7de_YfmsbShE42TJI1yJqEA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:44 UTC	675	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:44 GMT Content-Type: image/jpeg Content-Length: 69659 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "dd7a2e944a3b56783d67be812bee82502c1844e5" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:44 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e2 01 db 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 cb 00 00 00 00 02 40 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 51 74 05 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 72 58 59 5a 00 00 00 f0 00 00 00 14 67 58 59 5a 00 00 01 04 00 00 00 14 62 58 59 5a 00 00 01 18 00 00 00 14 77 74 70 74 00 00 01 2c 00 00 00 14 63 70 72 74 00 00 01 40 00 00 00 0c 72 54 52 43 00 00 01 4c 00 00 00 20 67 54 52 43 00 00 01 4c 00 00 00 20 62 Data Ascii: JFIF``ICC_PROFILE@mntrRGB XYZ acsp-QtrXYZgXYZbXYZwtpt,cprt@rTRCL gTRCL b
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 06 31 41 13 51 07 22 61 71 14 32 81 91 23 42 a1 b1 08 15 52 c1 16 33 62 d1 24 72 82 a2 e1 f0 43 73 92 f1 17 25 53 c2 27 83 b2 ff c4 00 1c 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 ff c4 00 38 11 00 02 02 01 03 02 04 02 0a 03 00 01 05 01 01 00 01 02 00 03 11 04 12 21 31 41 05 13 22 51 61 71 06 14 32 81 91 a1 b1 c1 d1 e1 23 42 f0 15 16 33 52 92 f1 43 62 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 c9 06 06 01 19 c7 7c 57 ab f3 1c 1e 29 41 01 27 1c 52 c4 60 10 49 e6 bc eb 38 99 4c e6 7c 31 d8 d3 8a 8a c3 91 f6 34 e7 f0 9e 1c 71 ba 9a ec 72 05 21 68 91 71 c6 49 c8 34 54 24 8c ee cd 32 a4 38 05 17 67 8c 03 c5 23 51 d5 ad f4 7d 36 e2 ee f1 64 60 85 56 30 9e 58 fb fd 38 34 06 25 c8 55 e4 99 c0 6e 38 10 8d 5b 58 87 43 d2 a7 bd b9 Data Ascii: 1AQ"aq2#BR3b$rCs%S'8!1A"Qaq2#B3RCb?\|W)A'R`I8L\|14qr!hqI4T$28g#Q}6d`V0X84%Un8[XC
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 70 37 63 93 8e a7 ff 00 d9 04 9c 98 c4 d2 ec 42 49 c5 01 13 49 75 29 db f9 7c d3 f7 2a d3 90 89 8c 62 8a b4 b6 58 14 8c 73 e4 d5 e8 db 5a fc 63 b3 0c b6 41 1a f0 a4 51 41 b0 3b 8a 08 cc 10 7c c6 86 6d 45 41 c0 c5 44 35 b3 9c c6 f3 37 85 8f 6e 77 1c 1a f7 05 79 c7 7a 9f ba d0 25 6b 8d 96 cb bd b6 e7 03 da a3 ee 6c a4 b5 65 8e 74 2a d8 f3 58 df 35 71 c1 99 c2 a4 41 12 20 40 c7 06 95 12 65 99 5b 1c 53 88 a4 0c 03 9a 7b 6c 76 d0 34 f3 29 62 7e 55 5f 73 ef 42 7b 31 18 79 88 86 26 0d b6 31 f2 9e 73 ed 55 ae b3 8a e7 59 89 34 ed 3a 1f e0 46 e1 de 57 3b 43 1c 63 03 ed 9a 97 9e f5 e4 3b 17 08 87 b8 5e 33 5e 64 00 69 69 b1 ab 7d f8 e6 39 5b 69 c8 99 a4 fd 15 a8 40 85 d1 a2 95 bf d0 ad c9 fb 50 23 4e 9e c6 64 8e f6 3f 49 fb 8e 6b 56 db bb b5 33 36 9b 6d 33 86 96 15 Data Ascii: p7cBIIu)\|bXsZcAQA;\|mEAD57nwyz%kletX5qA @e[S{lv4)b~U_sB{1y&1sUY4:FW;Cc;^3^dii}9[i@P#Nd?IkV36m3
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 26 07 9e 33 e8 aa 0c ef e7 1f 70 3e b5 9e 6b 1a cd bd ec e3 64 85 91 72 17 08 47 f7 a8 ad 47 51 ba d4 26 2f 7d 71 25 c4 ad 8c bc 8e 58 e3 db 24 d0 0d b5 4f 7c d7 9f d7 a7 09 ce 49 94 af 71 61 81 d2 4a ad d4 4a 47 a6 b9 27 de 99 bb 66 9f 69 62 48 03 81 e0 50 0b 38 5f e5 cd 37 35 f1 53 ed 47 d8 73 c4 8f 98 e9 8c 2b 79 af 1e 50 b9 20 f1 41 fe 28 cb 8d e7 cd 78 f3 f0 00 e6 8c 10 e7 99 d0 85 9c 83 f2 82 69 d5 95 88 f9 f1 51 cb 2b 6f c7 70 4d 35 a9 ea f1 e9 96 ea e5 1e 56 27 6f 03 80 7e a6 8c 2a 2c d8 03 30 8a 09 e0 46 f5 ee a1 b7 d1 82 7a c1 9e 47 07 62 81 51 76 9a 97 f9 84 22 63 81 bb c7 b5 52 b5 4b 87 d4 2f 24 b9 b8 6c 92 c4 fe 9e c2 a4 f4 0b cc 3f a2 78 07 90 2a eb ea 6b 5d 20 8f b5 de 5a d5 58 51 cc 7b a9 ec 84 d1 89 02 64 81 9c d5 69 18 18 70 a7 cd 68 33 Data Ascii: &3p>kdrGGQ&/}q%X$O\|IqaJJG'fibHP8_75SGs+yP A(xiQ+opM5V'o~,0FzGbQv"cRK/$l?xk] ZXQ{diph3
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 0e b7 1a 5d 88 93 4b 5b 6b a6 66 c3 6f 63 95 fd 2a 94 bd 61 ac ea 97 63 7d cb 45 11 ee 91 fc a2 ad 29 f0 eb ed 4d fc 01 f1 fe 24 b4 d2 d8 c3 26 69 da c6 af fe 51 0a 3a c1 bc be 76 e7 b6 6a 97 a8 eb b7 5a 8a 91 3b fc 87 9d 80 60 50 b3 5e cd 3c 22 37 91 9d 01 c8 0c 73 83 41 3b 1c fb 54 ea 34 cb 58 e7 ac 95 5d 21 63 73 ee 6c ee 1c 57 96 b7 06 de 64 71 c6 29 cc ee 18 3c d0 ee 8c 07 eb 9a b1 18 23 69 92 25 f6 d6 7f 5e 25 6e f9 15 0f ab 5a e2 41 20 03 eb c5 79 a1 dd 9f 4b d2 91 86 e1 da a4 35 0f 9e 1f fb 55 3e 0d 56 e2 3b b4 a5 eb 2f e9 c1 b5 4f 73 50 f6 4e 62 b8 46 27 6a e7 9a 3f 5e 72 ae 80 f6 1c 54 54 4f c6 7c d6 8e 91 fe 2f 9c 28 e5 65 c4 93 35 b3 00 43 02 3e 5a a2 dc 06 49 dd 24 e3 07 15 6e d3 67 df 00 e7 e6 1d f9 a8 dd 63 4b f5 1f d7 43 df b8 ff 00 7a 0e Data Ascii: ]K[kfoc*ac}E)M$&iQ:vjZ;`P^<"7sA;T4X]!cslWdq)<#i%^%nZA yK5U>V;/OsPNbF'j?^rTTO\|/(e5C>ZI$ngcKCz
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 91 06 09 3c d5 65 ab 6a b9 66 e4 4e e2 53 75 8b 42 cd b5 cf cc 3b 54 40 b0 99 00 f9 09 cd 68 57 7a 57 ab 2e fc 77 ef 48 b7 86 05 95 62 94 2a 9f ad 4e 4d 66 d4 c0 e6 18 3f 18 94 1b 79 65 b6 b9 55 21 80 6e e3 de ac 7b 3d 62 a8 d8 19 35 64 d4 ba 76 2b e1 09 85 40 65 39 04 79 a8 7b eb 46 b2 98 2b 77 03 39 ae 3a a4 bf 1b 78 31 84 f3 2c ba 4e 94 90 22 c8 c0 67 18 3f 5a 8c d7 ad 12 3c bc 78 50 4f b5 48 d9 6a a9 f8 00 4b 0d c3 8e f5 13 ab 5d 19 d0 11 db 8a ac ac 59 e7 64 c7 b3 7a 65 6f 6c 8a f9 76 24 50 77 31 6d 62 c0 f0 4d 49 ca 7d cd 30 63 12 2e 1b cd 5d 2b e3 98 30 64 7c 47 04 06 3e 78 ad 43 e1 8d d7 a3 7f b4 9c 02 7c d6 74 b6 e1 0f 1c d5 ab a3 ee cd ae a3 09 f0 58 7f 7a 8d ae 02 da 18 0f 68 b9 e6 75 0d 9b 65 14 e6 a4 e3 61 8e 2a 0f 4b 97 d4 b6 89 8f 72 2a 66 Data Ascii: <ejfNSuB;T@hWzW.wHbNMf?yeU!n{=b5dv+@e9y{F+w9:x1,N"g?Z<xPOHjK]Ydzeolv$Pw1mbMI}0c.]+0d\|G>xC\|tXzhueaKr*f
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 77 c6 3d cd 45 0b ab 79 db f8 6e bb 8f 8c d3 d0 96 19 c4 6f 33 cd 83 bd 1d a7 4b f8 5b 88 df 38 f9 87 f7 a0 c8 e7 e5 e6 87 b8 79 84 91 08 f3 80 e0 92 29 fb 43 8d b1 7a 99 d5 dd 33 72 2e 34 db 67 07 39 50 6a cb 13 7c b5 42 f8 7d 74 27 d1 2d 79 ce 16 af 51 37 15 e4 fe 20 9b 2e 61 f1 32 72 64 88 62 d3 a9 db 14 ca d3 95 46 c3 98 d7 94 ff 00 89 30 7a da 0c be 40 ef fb 57 2a ef 36 d3 b1 43 8c 1c 1a eb 9e b4 8b d5 d0 ee 78 c9 0b 9a e4 6d 45 76 dd cb 8e fb cd 7a 47 d1 56 ce 9d d3 e3 22 30 e6 48 35 f8 78 43 93 db c5 48 69 53 34 f0 16 3c 8c f1 55 4e 71 83 56 8e 8d bc 86 48 2f 20 97 1b 90 82 2b 51 a8 ab 65 45 80 82 7a f0 b9 10 cb 81 b8 a8 ed c5 31 b3 de 8a b8 4f 9f 3d a9 18 aa f0 78 91 62 9b 62 d9 94 db f3 13 de 81 c1 2d c5 48 b1 57 83 6e 3e 61 42 20 da e0 b0 27 14 Data Ascii: w=Eyno3K[8y)Cz3r.4g9Pj\|B}t'-yQ7 .a2rdbF0z@W*6CxmEvzGV"0H5xCHiS4<UNqVH/ +QeEz1O=xbb-HWn>aB '
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 1c ab cb d5 b0 84 af da 1e 9d b3 4e 83 9a 65 4f b5 3a 2b 28 c2 73 89 19 d4 10 fa da 55 ca 1f 31 9f ed 5c 61 d4 57 46 cf 58 bb 87 6e ed b2 1a ed 9d 45 3d 4b 49 57 8e 54 d7 13 75 f4 5f 87 ea 9d 45 5b 8c 3f 03 f4 af 41 fa 1c 43 35 88 64 75 19 69 09 3e a6 e5 b6 a7 00 f7 a3 34 6d 49 f4 fb ad ea 4e 24 23 77 35 04 5f 73 83 e2 8e 0b b8 29 15 e9 36 56 bb 70 47 06 15 d4 63 13 59 b7 5f c7 2a b4 6c 08 23 39 a6 dd 70 18 0e 70 71 55 dd 07 56 95 6c fd 20 c7 7a 8c 66 8e 83 51 f5 37 26 ef 98 1e 6b 2c d4 3a 39 1d 84 ac 6a c8 92 51 e0 67 34 a7 58 bd 11 83 f3 d2 63 8a 47 8f 76 dc 01 ed 49 29 f3 50 89 e6 06 0e 0e 0e 0f 22 ba 8b a3 e7 4b dd 2a c6 72 79 92 de 36 ff 00 da 2b 97 a5 1f 30 1d b3 5b b7 c3 7d 4c bf 4f 59 0d d9 31 03 19 fa 60 f1 fd 2b 3f f4 82 93 66 95 48 ec 7f 59 2a Data Ascii: NeO:+(sU1\aWFXnE=KIWTu_E[?AC5dui>4mIN$#w5_s)6VpGcY_l#9ppqUVl zfQ7&k,:9jQg4XcGvI)P"Kry6+0[}LOY1`+?fHY*
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 15 51 57 5a 62 a8 83 06 39 0e 04 08 8c 8c 52 56 31 9f ad 1d 3d 84 b0 8c b0 27 ed 43 2a 65 b8 f1 53 03 02 38 84 dd ed 34 8f 84 37 9f 85 d6 c4 64 f1 21 03 fa d7 4f d9 be 54 13 ed 5c 7b d1 d7 7f 81 d7 2d 1f 27 99 14 64 7d eb ae 34 99 84 d6 d1 b0 fe 60 0d 79 d7 d2 6a b1 7a bf b8 84 ac 9c c9 a5 38 ed 44 2f 6c d0 d1 73 44 03 5e 7e dd 61 98 71 11 70 37 44 c3 de b8 cf e3 0d a9 b4 eb 1b bd c0 80 f8 22 bb 3d ff 00 29 ae 4c f8 fd 68 61 ea 74 97 c3 8f f6 ad 9f d0 fb 36 6b 8a 7b 83 22 8e 1c 4c 87 3e d5 27 63 fc 44 e7 c5 46 81 93 ec 28 fb 39 42 b6 de c2 bd 6e d1 95 e2 48 71 91 2c ba 37 ca 64 23 da 84 7b 97 b7 bd 2e bd b3 cd 15 a5 1c ab e3 07 bf 34 1c c9 ea 5c 36 de e2 aa 00 06 c6 cc 84 c3 93 36 9f 87 1a 76 9f d5 ba 76 a0 97 73 fa 52 c1 18 65 01 80 3f 7a a9 4e a6 09 64 Data Ascii: QWZb9RV1='C*eS847d!OT\{-'d}4`yjz8D/lsD^~aqp7D"=)Lhat6k{"L>'cDF(9BnHq,7d#{.4\66vvsRe?zNd
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 7c 12 8b 98 57 1f 36 45 0d 71 a1 5b ca cc 4a 6d 62 73 91 47 59 da 8b 7d bb 7b 0f 15 67 a8 be bb b0 c3 ac 9a d7 07 89 d4 26 1a 76 95 b0 7c a5 b8 02 a4 7a 7e 22 ba 37 a8 c3 e6 60 49 a8 7d 65 45 f3 2a 01 f2 a9 1c 0a b1 da a7 e1 f4 41 c6 3e 43 55 f6 90 29 03 b9 31 84 e4 4a 9d e0 dd 2b e3 8e 69 b8 00 52 73 c5 7a ef b9 c9 03 39 35 e4 7c 31 15 38 0f 4e 22 83 c4 3a d2 d0 de ca b1 63 76 e3 8a 57 57 f4 5c bd 3f 0d b5 ca 29 29 33 ec 3c 79 c6 41 fe 86 a6 3a 57 6f f9 b4 02 41 9c 9c 62 b7 7e ab e8 35 ea 8e 9d 85 43 14 28 56 41 81 ec 0e 3f bd 53 6a 7c 4c e8 75 35 86 fb 27 ac 40 70 67 27 e9 e8 d6 d7 b0 bb 7c bb 5c 1f eb 5d 65 d1 b7 a2 f3 47 b6 90 1f e4 15 cb 5d 4b a3 cf d3 fa b4 b6 b7 2d bc a1 f9 5f 18 c8 ad ef e1 1e a7 f8 bd 05 14 9c 94 c0 a6 7d 20 51 76 91 6e 53 91 fc Data Ascii: \|W6Eq[JmbsGY}{g&v\|z~"7`I}eE*A>CU)1J+iRsz95\|18N":cvWW\?))3<yA:WoAb~5C(VA?Sj\|Lu5'@pg'\|\]eG]K-_} QvnS

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49748	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:43 UTC	930	OUT	GET /file/J5IrM8TywMmqx4ZfsUIWmzOHXcIjMdle0j0Zye8AO8h7bW7lhRtHf3rwMLDqu1isIJ0dw4EPOjBNlHAyHkNkqgqqjh8bR4nUqiAq6P_Ej9AZoBXBJeew5Cc4vlPcPkF_wYV80A7hegzAshbhSvXqCnDH5V6aOOf7JlRhjqTNYlbVwc86WiQGXK-PYmGGLWbETscY3DjcM5yPhiNFExJeNB4Vmje0RXBoV0ZTy6_9TRw07Sxw2e1uNLWxPedOdw1hodtMeSZKBpnDOCWgw8at3icavvKT6l06C2LJfPQsvc5AA8D84CylCQg4KJNRiSPyY75fex2yWcr7nk-SqIErpQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:44 UTC	685	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 66278 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:11 GMT Cache-Control: public,max-age=7200 ETag: "0b3a6e11912b26edc5a807ff7f70cf817800e057" Content-Type: image/jpeg Age: 813 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:44 UTC	705	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e2 01 db 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 cb 00 00 00 00 02 40 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 51 74 05 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 72 58 59 5a 00 00 00 f0 00 00 00 14 67 58 59 5a 00 00 01 04 00 00 00 14 62 58 59 5a 00 00 01 18 00 00 00 14 77 74 70 74 00 00 01 2c 00 00 00 14 63 70 72 74 00 00 01 40 00 00 00 0c 72 54 52 43 00 00 01 4c 00 00 00 20 67 54 52 43 00 00 01 4c 00 00 00 20 62 Data Ascii: JFIF``ICC_PROFILE@mntrRGB XYZ acsp-QtrXYZgXYZbXYZwtpt,cprt@rTRCL gTRCL b
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 0b 01 02 03 00 04 11 05 12 21 06 31 41 13 51 07 22 61 71 14 32 81 91 23 42 a1 b1 08 15 52 c1 33 62 d1 e1 f0 16 24 72 82 43 53 a2 f1 17 25 63 34 73 92 c2 d2 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 07 ff c4 00 31 11 00 02 02 02 02 01 04 01 03 03 03 05 01 01 00 00 01 02 00 03 11 21 04 12 31 05 13 22 41 51 32 61 71 14 23 81 91 a1 c1 24 42 b1 d1 f0 52 e1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 13 a6 74 01 ab da ac b7 2e 16 1f 6c f2 6b f5 df 45 da c5 7f 21 04 2a f1 8f 7a fb a0 ad e5 b6 9e c6 22 db 23 1f 97 1e 28 f8 6f 4c ac a6 46 dc 49 ee 6b ca 5b 78 54 09 8d cc 57 c0 32 bf 77 a0 9b 39 11 e2 04 a8 35 fa e5 16 f2 13 13 27 a6 c4 77 c7 7a b7 b1 8d d3 69 c1 cd 2d b9 b0 e0 95 19 5f ed 48 06 63 e2 0c 1c 4c 2b aa b4 63 6d Data Ascii: !1AQ"aq2#BR3b$rCS%c4s1!1"AQ2aq#$BR?t.lkE!*z"#(oLFIk[xTW2w95'wzi-_HcL+cm
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 48 a4 3a cd fa c1 9c 30 24 9c 1f a5 6b dc dd 2b 26 31 7b 61 71 0d b8 be 44 05 41 c9 02 ab 77 ba 93 b4 84 27 03 b1 fa ff 00 e7 34 b6 6d 4d dd 88 56 25 47 9a 1a 5b 89 36 33 f0 4e 3c fb 57 9f 21 99 b3 32 82 12 77 2c 36 37 78 0a 1d b0 dd c5 49 a9 ea 0a fb 80 90 96 1e 41 aa 03 6a d2 c7 38 3b 8e 79 f3 cf 7a 3a 1b e3 2a e6 43 9c f0 4f b5 41 e1 95 6e f0 e5 0a 88 75 c5 c0 56 dc e4 31 ef 9a e2 3d 4c 2a e3 0d fa 1c 50 12 b9 60 55 36 91 f5 a1 1a 19 9c e4 2f ef 4e 2a 2e 37 21 50 1f 33 d6 76 9d 4d 6b 0c 60 a2 60 ba ec 65 26 a1 4c 86 0d 82 aa fc a9 f0 6a 89 aa 6a 43 4b d4 5e 29 be 58 b7 f2 71 9c 56 8d d3 3a 95 8d ed b4 5b 66 47 55 20 80 79 aa dd 57 63 89 5d b9 c1 87 da d8 dc 4f 19 78 d4 b6 d1 d8 57 2e d2 a6 43 82 31 c1 15 a0 e9 5a 96 93 1a a9 8c a4 72 6d c7 b0 35 55 ea Data Ascii: H:0$k+&1{aqDAw'4mMV%G[63N<W!2w,67xIAj8;yz:COAnuV1=LP`U6/N*.7!P3vMk``e&LjjCK^)XqV:[fGU yWc]OxW.C1Zrm5U
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: ab e6 a1 72 23 8f b8 e7 bd 67 9a cd e2 49 39 23 8d bc 0c 76 35 6e 61 c0 0b 33 39 2c 33 04 86 df 7a 02 57 77 d0 51 53 44 8a 9f 32 85 38 f3 40 c1 76 01 3c f1 f4 a9 1a 43 20 20 9e 31 c0 ac 82 a7 39 31 20 77 2b f7 36 c1 ae b3 ce 3e 94 54 36 de 98 00 1d a0 9e c6 8b 64 09 b9 d8 02 4f d3 3f ad 47 b8 00 33 9c 63 83 ff 00 6a 77 b9 61 0a ce 5b 53 80 87 80 73 df be 29 c4 36 eb e9 8f 91 8f d7 34 97 78 23 2a e4 86 ef 5d 7f 98 63 b9 ff 00 f5 73 43 64 2f e2 70 9b 87 c4 dd 21 e0 d4 cc b0 8e 19 fc 0c d5 52 ca 69 a0 2b e9 33 c6 e3 c2 92 33 5a b7 55 5a 32 5e 49 63 7c 43 49 0b 9d ad ee be 2a ac 74 88 fd 53 91 5c d7 64 ca 38 01 b5 08 d0 fa 82 ed 48 8e e0 99 10 77 f7 15 a9 58 e8 31 ea 96 d1 35 c2 99 ad a7 4c 82 3b 8f fb d5 0b 48 d1 a3 99 a3 2b e4 e0 fd 6b 5e e8 7b 68 92 68 ec Data Ascii: r#gI9#v5na39,3zWwQSD28@v<C 191 w+6>T6dO?G3cjwa[Ss)64x#]csCd/p!Ri+33ZUZ2^Ic\|CItS\d8HwX15L;H+k^{hh
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: c3 16 07 82 3b f1 56 9d 76 19 ae 91 99 4f be 38 aa 51 43 6d 74 3d 76 27 3f d2 98 b5 0b 31 73 31 1d 43 12 63 1b 68 db 6f c8 00 19 e2 98 c6 c2 28 9b d4 0c 49 c6 3e b5 1d bc c8 f1 92 38 0b cd 43 3c fe a2 66 25 c0 07 9e 7b d6 69 cb 9c 62 26 3c ce 6e 64 3b ca ae 08 c7 93 fe f4 3b b9 08 79 5e 78 ce 7b 54 4d 21 01 98 9c f3 50 b3 0e 7c e7 eb 4c 2a e2 10 2c e5 26 76 63 cf 3f 6e d5 21 3b 89 24 ed fa 0a f8 85 7c 8f 98 f6 fa d4 98 c9 ef 8c 7d 28 87 cc 26 27 b0 fe 20 69 b3 5d 6a 6f 77 04 6c cb e8 06 18 1e 41 aa 62 31 d8 18 8f 1c 9a f4 9e 9f a1 db 6a 1a 60 59 36 b1 64 20 1c 7b 8e d5 89 f5 2f 4f 8d 2f 50 ba 8a 35 3b 43 60 ae 3d c7 06 97 ba be a7 23 c4 eb ea 20 96 11 7f 4d 5c 01 2e c6 c1 f9 b2 2b 47 b2 32 da 3c 77 30 8e 50 ee 15 9b 68 76 e6 0b 80 d2 8f 95 ab 46 7d 51 0c Data Ascii: ;VvO8QCmt=v'?1s1Ccho(I>8C<f%{ib&<nd;;y^x{TM!P\|L*,&vc?n!;$\|}(&' i]jowlAb1j`Y6d {/O/P5;C`=# M\.+G2<w0PhvF}Q
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: f9 a2 f1 2a 15 82 c6 69 72 9f 3a 91 1d 7e 17 cc 52 61 94 71 91 8a a4 75 1d ea 4d 7a 4d af 08 ad df de 88 8a dc cd 28 20 f7 62 6b a9 ac 14 38 2c 14 e4 f9 e3 34 f3 30 51 99 93 e2 0d 67 7b 33 db 61 72 a4 0e 38 ce 6b b9 2e a4 41 ce 06 3e 9d e8 d8 e0 45 8f b2 82 3e 98 a5 d7 c1 1d 1f 09 ba 41 e6 90 05 59 fc 40 95 19 82 dd eb 2a a4 01 b8 63 b8 a8 ad b5 2f 59 c0 0a c4 76 a5 57 36 ed bf 6a 8a 69 a4 59 ee 60 cd 9d ab ce 40 e0 d3 ac 95 a2 66 15 95 15 72 21 f0 cc cc 03 05 c8 1e 7d 8d 14 93 a8 51 99 55 4f b1 38 a8 da 38 e2 ca 83 b7 8e 07 d7 ed 40 32 99 19 88 07 be 3b 1a 54 00 fb 80 f3 e2 7b 83 e1 4f c4 89 f5 1d 32 0d 3e f5 9c 5d c2 31 93 dd b1 d8 d5 e7 5b d0 7f cd 77 ea 39 09 74 07 fc 36 ec ff 00 4f d6 b1 de 8e b0 b6 b4 bd 49 ad 64 11 48 8c 38 26 b7 78 9a 6d 4d 23 85 Data Ascii: ir:~RaquMzM( bk8,40Qg{3ar8k.A>E>AY@c/YvW6jiY`@fr!}QUO88@2;T{O2>]1[w9t6OIdH8&xmM#
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 98 d6 bf f1 33 52 68 53 d2 1f 2e e3 81 cf 7a c4 75 3b d4 9d f6 8e 5b ef 9a 71 41 5a c4 5f 94 d9 7d 45 f1 4e d0 dc b3 96 c4 61 70 17 ed e6 82 d4 b5 c5 32 28 47 38 38 cf 3d bf ef 5c 5f 34 9b 4a a2 93 c7 7a 42 d0 3b 38 2d c0 34 ca a8 71 b8 b2 af 6d 99 68 82 fd 6e 71 82 c0 9e 46 7c d1 f0 5b 89 db f2 92 33 df c5 26 d1 6c 19 9b e6 23 f4 3e 2a df 63 60 eb 10 6c 01 59 b7 95 ac fc 62 d6 90 b9 8b 6e 34 28 99 01 50 01 3e 00 02 a5 b3 b0 58 9d 50 0c 01 e3 14 d9 d3 f9 40 c9 f7 ae 22 8f d3 60 0f 3c 60 0a 53 dd 66 18 cc 49 ac 27 50 3b bd 38 18 99 80 c1 03 8f 6a a9 dc 69 f3 c9 2b 15 03 19 c7 1c 66 af f2 5c c5 14 64 11 c7 bd 57 5a ea 16 76 23 20 13 91 8a 66 9b 19 47 8c c3 50 c4 f9 97 9f fd 77 35 ac c9 18 73 f2 e0 6f 1e 7e f5 bc fc 34 f8 87 71 75 6b 0a cc fe a8 85 81 23 ce Data Ascii: 3RhS.zu;[qAZ_}ENap2(G88=\_4JzB;8-4qmhnqF\|[3&l#>*c`lYbn4(P>XP@"`<`SfI'P;8ji+f\dWZv# fGPw5so~4quk#
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: e3 fc 55 c1 2c 37 16 c6 4f 8a a1 1d 52 de 20 5a 3d b9 02 b5 ec 0c 00 55 99 76 b3 3b 12 23 19 e2 8c 45 b4 9c 95 39 3c f7 aa e5 e0 45 94 a4 69 92 0f 7a ee 5d 61 98 36 1c 0c fd 05 08 97 a8 66 dc 4e e2 7c 91 8c d1 2b 56 51 b9 15 29 fb 96 3d 26 35 8f 18 0c 4e 72 41 ab 4a 4a 85 7f 30 fd fb d5 1d 75 58 e3 8b 38 e4 fd 68 e8 35 8f 51 91 40 c2 a8 3d cd 23 6d 0e e4 ea 2f 6d 65 8e 65 b3 72 8e 58 e0 0e 47 15 d4 d1 97 5c a9 39 ee 31 55 4f f3 e6 6b 80 a8 dc 67 00 66 ad d6 13 7a a9 b9 f8 e3 3c d6 7d b5 3d 3b 31 0b 11 90 64 ca be a5 0d c9 46 2b c7 dc 9f f7 fb 55 3e e1 66 49 58 48 8d bb ce 05 69 d7 f2 c7 e9 b1 da ac 79 1d bb 0a a3 5e c6 86 e1 89 e0 9e e2 9f e1 dd 91 82 23 94 59 ac 62 7a 56 fb a5 77 de 06 5c 73 fc b8 e2 88 d3 d2 3d 38 3c 37 2a 23 74 3d ab 42 d2 7a 7e e7 53 Data Ascii: U,7OR Z=Uv;#E9<Eiz]a6fN\|+VQ)=&5NrAJJ0uX8h5Q@=#m/meerXG\91UOkgfz<}=;1dF+U>fIXHiy^#YbzVw\s=8<7*#t=Bz~S
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: eb 29 6f 61 3e cc 0c 0c 54 ba 24 06 d6 cd 98 fb 0c 56 75 f1 1f 54 30 59 c9 18 6d ac dd c6 7c 66 98 e0 d6 3d cd 4d cb 8f 5a fa cc 3f ac 75 46 bb bf 65 0d 91 9c 9a ac e4 fb d4 f7 d2 99 ee a4 76 39 3b aa 01 e2 bd 16 04 ce 03 53 e9 24 f9 ae 6b a2 6b 9a 99 33 a0 ec 07 73 53 47 75 22 0c 06 e0 d0 f5 35 bc 46 69 02 8a 83 8c 6e 54 e0 6c c9 ed 9d 8c ea e7 90 0e 7b 62 ad eb ae 9b 58 4a b1 db 91 c1 1f f5 ae b4 3e 9a 79 e3 0f 22 9d a3 fa d0 dd 4b a0 4b 6d 6e 25 5c 6d 04 e4 03 8c 0a cf 76 aa e7 ea 62 0c e9 6b f5 8a af 3a 92 59 c1 08 48 19 ef 9a 5b 25 e3 4a e5 d9 89 27 de 82 e4 70 7b d7 dd c2 9c 5a 91 06 00 8e 0a d5 7c 4f ec 9e 83 d2 b6 91 69 f1 9f 48 60 a0 f1 54 de b6 e9 8b 69 22 b8 61 19 6f 91 81 18 f1 8a d2 34 9d 56 23 a7 a7 a6 e0 86 00 62 95 eb 5a 58 d4 0c 92 02 70 Data Ascii: )oa>T$VuT0Ym\|f=MZ?uFev9;S$kk3sSGu"5FinTl{bXJ>y"KKmn%\mvbk:YH[%J'p{Z\|OiH`Ti"ao4V#bZXp
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: ab 11 f8 8d 7a f7 6d 30 e7 0a 08 c0 f2 2b 47 bd bc 51 08 12 36 40 15 9a eb e9 f8 c9 99 71 f9 89 cf de b5 38 75 05 dc ce e4 d8 4c c8 65 b7 78 c9 de 08 a8 b1 8a be 5d e9 88 51 97 1c fd a9 04 9a 2e d7 e0 f1 9f 35 aa 56 2a 2c 11 09 ef 5f 3b 53 f8 b4 46 c1 0c 79 27 db 8a 90 f4 f3 b7 0a 72 73 c7 15 18 96 ee 22 2b 6b 76 b9 90 24 60 b3 1f 02 ad 3d 39 a1 ee b9 53 2a 92 43 60 83 4c f4 1e 97 78 24 fe 27 cc 4f 7e 7f f3 e9 57 d8 34 32 be 98 8a 35 fd 06 2b 33 95 7f 5c a8 89 5f 76 34 23 1d 37 4f 8a 28 00 1d 80 c6 33 50 ea da 55 bd e4 27 28 5c f8 51 ef 47 db d8 4a a8 4b 82 14 0f de b9 82 19 03 39 6c 6d 23 8c 9e 6b 0d 1f ab f6 cc 42 a3 86 dc c2 fa 9f 48 6b 09 cb ed 23 dc d5 72 b6 3e b6 d2 5a 4b 4d b0 80 d2 3b 70 48 ac 92 6b 49 61 91 91 90 82 2b d2 d1 68 b5 3b 4d 9a 9b b0 Data Ascii: zm0+GQ6@q8uLex]Q.5V,_;SFy'rs"+kv$`=9SC`Lx$'O~W425+3\_v4#7O(3PU'(\QGJK9lm#kBHk#r>ZKM;pHkIa+h;M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49751	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:43 UTC	930	OUT	GET /file/TTkkD8vhw02tx6_lfOH_DCMJAewkY3MM9tiBVlKvkpzhsmMyB-J7bK0oKXpRQAccMp4OsJZMDFmm77EQ8GXduS6izr7JT1sss2JT2zIYl3jTiqOmnwx6SSAW_sNUDqovktr6YzgXP5gad40Yl5ZDNcelYrbftB8jlkqU6fDclHTdBlT8ExxMNtKw1g0UgGpSAe5GFmS8qZgjDz83K9GeJaNmzqAYCvxMdvGKo5_ZiDVfwBW4QAsJ_hKx5Kj4ABcDlMYEX4OdhB4Ym9BKT2MWrwZZtxDk0EJJSX4aUmOFMGae7G3ZIuSvgOaKT7JW9bQO_NQCTsVAxXSflL8MYYmy7Q.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:44 UTC	676	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:44 GMT Content-Type: image/jpeg Content-Length: 117731 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "eac7f32c2b07154d986039ea52b37a38187078d6" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:44 UTC	714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e2 01 db 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 cb 00 00 00 00 02 40 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 51 74 05 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 72 58 59 5a 00 00 00 f0 00 00 00 14 67 58 59 5a 00 00 01 04 00 00 00 14 62 58 59 5a 00 00 01 18 00 00 00 14 77 74 70 74 00 00 01 2c 00 00 00 14 63 70 72 74 00 00 01 40 00 00 00 0c 72 54 52 43 00 00 01 4c 00 00 00 20 67 54 52 43 00 00 01 4c 00 00 00 20 62 Data Ascii: JFIF``ICC_PROFILE@mntrRGB XYZ acsp-QtrXYZgXYZbXYZwtpt,cprt@rTRCL gTRCL b
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 21 12 31 07 13 41 51 22 61 71 81 14 32 91 a1 15 23 42 b1 08 52 c1 33 62 72 82 d1 e1 16 24 f0 f1 25 43 92 a2 b2 17 34 c2 53 73 18 44 63 a3 d2 26 27 83 84 93 ff c4 00 1c 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 00 07 08 ff c4 00 36 11 00 01 04 01 03 02 04 04 06 02 02 03 01 01 01 00 01 00 02 03 11 04 12 21 31 05 41 13 22 51 61 32 71 81 a1 14 91 b1 c1 d1 f0 06 e1 23 42 15 33 f1 52 24 62 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 e0 f4 3c 63 5e 91 9e 75 88 e4 6b dc 63 43 44 5b 15 87 3a db d2 24 53 9c eb 4a 00 7d 71 ad 9d 65 0f 49 e4 6a 84 22 83 b2 d7 8c 72 3b eb 1f 4c 83 ad b8 04 96 f7 d6 0c aa 3f 28 d5 ad 0c af 94 16 38 ce b1 61 ce 3d 75 ea fa 76 d7 ac 7f 5f 7d 4a 85 86 b2 8d 8a 9e d9 5f 5d 62 3e 2c eb 35 ce 31 a8 2b d5 6b d9 59 38 Data Ascii: !1AQ"aq2#BR3br$%C4SsDc&'6!1A"Qa2q#B3R$b?<c^ukcCD[:$SJ}qeIj"r;L?(8a=uv_}J_]b>,51+kY8
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 21 82 9e e8 1d a2 f8 23 0a f2 d3 b9 63 19 6c 77 c0 e9 ef e8 74 8b 1a 72 37 eb 16 a1 c2 8a f4 eb 2a 43 d1 72 a4 7f f2 38 6d 62 35 ba 8a 0f 3e b6 14 f7 61 a2 38 f9 4d aa a6 6c 53 34 d1 24 8c 01 cf 38 1a f6 ac b0 a2 61 12 fc 44 1e fd b3 ad 31 03 e5 22 37 c2 14 01 90 75 20 fc 34 e8 1d b3 93 ef dc 67 58 a0 de c8 cd aa 55 3b a0 4b 0d 91 c3 ba 87 2b 82 3e 5a a3 a0 eb fe 0f 46 32 17 0e a7 9f 6c ea fb 76 95 36 be 80 49 25 7d 7b 9d 55 52 41 24 16 7a 1f 35 17 ad d9 00 e7 90 08 3e 9f 6d 1e a9 95 ee a3 ba 2f a6 07 a1 0e 41 e3 19 0b ce a4 be 31 98 ce 78 f5 d6 88 57 30 a1 ea e9 56 ce 3d f1 af 5d c3 d4 74 41 c0 c6 7e da 45 d5 74 ae de 12 ef 7c bf f3 55 73 cf 6d 06 1e 46 3d b4 57 be 24 1f c4 7a 72 32 33 c7 b6 84 f3 ce b7 31 c5 44 10 cf 2b e2 9e dc eb 28 ce 32 75 e7 59 e7 Data Ascii: !#clwtr7*Cr8mb5>a8MlS4$8aD1"7u 4gXU;K+>ZF2lv6I%}{URA$z5>m/A1xW0V=]tA~Et\|UsmF=W$zr231D+(2uY
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: a9 f5 d4 71 10 ac 79 1c 9e cd d3 9e ae ff 00 fa ce ac a7 ea 10 64 95 20 20 24 63 50 ec eb 0f e0 55 a6 0e 59 98 9f 87 eb a8 6e f6 57 89 a4 04 17 24 fb 7c f5 f6 32 46 39 d7 92 64 e0 01 91 eb ac a3 23 80 a3 1a 78 a0 6c 56 32 2e 18 63 9d 6c 55 c7 cb 58 48 48 3c 6b 7a b0 65 0c 47 6f cd af 59 a5 e2 16 18 e7 9f 7d 62 e4 64 9c 64 6b 63 30 ea f8 38 1a d6 e4 06 c0 f5 ef f2 d7 82 a5 ac 3a c6 30 17 8f 4d 64 5f a9 46 bc 0b f7 1a f0 f0 3b 76 d4 ab 5a f9 89 3a f1 0b 06 e3 9d 7b 8f 87 58 83 c7 57 cb 5e 56 b5 be 37 60 70 dc 0f 6d 62 e4 f7 6e 46 b1 c9 20 f5 72 75 f6 78 21 be da 8a dd 7a d7 cc c4 e3 1a f0 77 c6 b1 1a cc e0 38 07 d3 53 4a 79 5e b0 c2 8d 6a 61 ad dd 59 1c 6b 56 a4 28 a5 82 71 9d 7a 71 ed 8d 7c 07 73 ef af 88 c6 3e 7a 95 eb ad 97 80 77 d7 b8 3d cf 1a f9 79 3e Data Ascii: qyd $cPUYnW$\|2F9d#xlV2.clUXHH<kzeGoY}bddkc08:0Md_F;vZ:{XW^V7`pmbnF rux!zw8SJy^jaYkV(qzq\|s>zw=y>
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: be 9e aa 59 6e 4f 0c 10 54 40 62 e9 58 97 a9 ca e1 b3 f1 67 07 e9 8d 27 00 f8 14 fb 1c 69 66 53 a4 71 f4 44 be cb ed 4b b6 b5 0a d6 47 fc 5d 2a 1e 8c 9c 49 f8 77 0a e0 7b 8c 82 3e da 89 af b4 d2 af 08 be e7 6b d9 72 33 36 df dc 57 18 17 3f 0c 77 3b 7f cb fc f1 16 cf 3f ee 8d 49 d8 b4 88 2b aa 9d 6a 69 a5 51 18 53 d2 cd ea 4e 38 20 1f 4d 04 0d 17 ec 24 eb ab ac f4 ca 20 18 fa 9d 0a 41 e5 2a 41 47 e6 26 7f cb c6 30 38 3d f5 85 6a 85 a8 89 0a 9f e6 65 bb 63 07 52 22 88 67 9c 8e 75 9d 42 97 91 39 24 e3 8c f3 ac f4 46 94 39 3a 66 a2 a4 e4 90 18 2f ed aa 4b 5c 47 f1 d5 ad d5 90 18 0c 9c 7c b5 73 58 9d 37 4a b5 f4 6c 3e 09 3e c0 6b cd b7 6c 8e a8 d5 4d 3c 8c aa 26 94 f4 af 24 90 78 1f 4d 5c 7c 2b c5 58 d4 42 0e 3a 57 04 a8 7f 7c 03 db f6 d0 d5 f2 53 0a 20 ee a4 Data Ascii: YnOT@bXg'ifSqDKG]Iw{>kr36W?w;?I+jiQSN8 M$ AAG&08=jecR"guB9$F9:f/K\G\|sX7Jl>>klM<&$xM\\|+XB:W\|S
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 6a e0 85 a2 2b 0c ab 94 33 c6 47 38 e3 3a dc 36 db a0 26 3a 88 d7 8e 4f 97 90 0f eb ac a2 ad a2 94 8e 89 d1 53 e7 20 1a 91 4f 5d 6e 92 59 21 8a a5 4c 80 65 88 93 8f 5e 33 aa b8 bf b2 b1 21 57 25 9a b3 ab cb 30 c2 7a bf 33 75 0c 1f 9f 6d 60 fb 6d fc ce 96 a6 85 89 ee 4f fe da b7 13 d3 aa 88 ff 00 1c a1 7d 8c 80 eb ef 32 18 fa 9c d7 02 9e 8b d4 35 52 e7 85 60 e1 c2 a8 6b 03 32 9e aa 58 4e 39 06 3c 2f 3f 4d 63 ff 00 86 4f 93 d4 be 52 48 fc f4 85 27 1f 7c ea cd eb 69 d3 01 2e 00 9c 9e 41 1a c0 57 c5 d9 ae 08 a7 db a8 0d 40 2f 2a 96 14 08 b6 cb 40 10 c6 63 2f dd 83 03 8c fc f5 17 ff 00 0d bc fd 52 b0 8a 1c 67 18 24 f6 f9 6a e2 4a f5 7c 98 eb e3 c0 1d c9 19 d6 83 5a ce 1d 16 ae 36 5e fe 83 8d 5a de a4 51 e5 0f c7 68 ea a8 86 4a 59 48 0a e4 39 74 c7 6f 61 a3 4a Data Ascii: j+3G8:6&:OS O]nY!Le^3!W%0z3um`mO}25R`k2XN9</?McORH'\|i.AW@/*@c/Rg$jJ\|Z6^ZQhJYH9toaJ
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 17 51 93 d8 9e 39 d4 85 57 76 02 46 62 be b8 3a f9 95 b1 8f 5d 66 3e 10 33 df df 43 72 b7 2b 29 50 82 3a 19 ca 7b 67 5a 72 c1 8e 09 04 7b 9d 4a 2c 7a 72 07 1e ba 8e 72 4e 48 d7 9a 14 af 83 b8 fe b6 cf d7 5f 79 8f 9e 5c 9f be bc c6 be 3c 0c ea f4 14 14 d0 d8 94 21 6c c9 34 9f 13 4f 23 3e 5b 9e 3b 7f a6 8b 66 88 47 4c d9 6c 00 32 71 a8 9b 5e 85 a9 ec 56 a8 9d 31 88 72 c0 1f 53 cf 3a 9d 75 65 4a 5a 9c f0 aa 84 fd 00 d6 69 36 e2 88 36 08 1f 6f 24 37 0d d7 18 90 29 88 48 d2 12 fd 8f 48 e0 7e ba 3c ba 2a a5 33 a0 e9 c9 1f 94 1f 5d 09 f8 7d 48 ed 53 31 a8 c7 41 57 6e ac 72 3a 88 38 fd b4 5b 71 65 cc 6a ad d4 f9 c9 51 ed ab 3f e2 a5 52 6d 51 4e be 55 2c 8c dc 61 59 be c0 7f db 4a 49 6a 9a 49 1d cf 0c c7 27 9f 5d 36 77 24 9f 86 b4 54 c8 c4 71 11 50 be c4 f1 fe ba Data Ascii: Q9WvFb:]f>3Cr+)P:{gZr{J,zrrNH_y\<!l4O#>[;fGLl2q^V1rS:ueJZi66o$7)HH~<*3]}HS1AWnr:8[qejQ?RmQNU,aYJIjI']6w$TqP
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 1c 6b 2d 79 c6 4e 74 ea aa f3 59 75 11 8d 79 e9 ac 5b b6 bc bd 4b e1 93 9d 78 7b f6 d7 dc 91 91 9c 0d 7a 47 7d 52 95 f6 5f 03 95 00 9f b6 bc f5 3a f3 18 3a f7 56 0b cb 1d 6d a6 84 d4 d5 41 0a f7 92 45 51 f7 38 ff 00 5d 61 8d 5b 6d 6a 5f c5 ee 3b 64 2a 32 5a 75 3f a7 3f e9 af 3b 60 aa 53 e2 8e 90 81 1c 50 03 f0 a0 5c 1f 96 ab 77 82 b4 36 7a 93 c6 70 06 33 df 27 45 74 b0 15 67 76 23 20 72 07 be 84 f7 dc 8e d4 b1 53 46 54 34 92 86 3c 7a 0c 9d 66 b4 0b b5 60 6f 65 8e cf b7 79 54 ce 4f e7 6c 28 55 e4 60 0e 4e 75 b6 a2 2e 8a c7 55 c4 98 1f 98 77 ef ab 2d a1 1a c1 6a 2a 47 c6 14 65 fd 4b 10 4e 3f 7d 63 43 02 35 44 98 42 17 ab 2a 4f 1c 0d 78 ee 49 5e 40 fe 20 54 9a 7b 2c 30 e1 4c 93 4d 8c 7c 80 27 fd 34 a7 27 93 a6 17 89 f5 8b 2d c6 38 17 8f 22 32 c7 ea c7 8f d8 Data Ascii: k-yNtYuy[Kx{zG}R_::VmAEQ8]a[mj_;d2Zu??;`SP\w6zp3'Etgv# rSFT4<zf`oeyTOl(U`Nu.Uw-jGeKN?}cC5DB*OxI^@ T{,0LM\|'4'-8"2
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 61 75 eb 68 f2 01 ca f7 f7 d2 b3 c5 46 e9 86 c9 1e 79 0b 21 23 e7 84 ff 00 ae a6 31 e6 52 dd d2 e4 9d 79 df 1a c4 fb eb 21 db 4d ab 2f 5b 19 1d 3c f1 ac 18 eb 3f 4d 62 c3 9d 79 79 78 ae 40 20 1c 0c e7 5f 64 e4 e7 5b 68 e9 26 af ab 82 96 8d 0c 93 ce e2 38 d0 7a b1 38 03 5b 2e 14 13 5b 2b aa 68 aa b0 26 a7 91 a3 7e 93 91 90 70 79 d5 54 6f ca 8a 4e bd 1a f3 1a f4 6a ca d6 bd 03 46 be 15 52 0a 9d d6 b2 37 ff 00 b3 40 d2 0f af 61 fd f4 16 39 d3 33 c1 ea 2c d5 dc ab 48 ce 15 61 5e 3e 79 3f e9 a1 c9 f0 95 05 37 e1 84 4b 1e 48 c7 a8 ce 81 77 4c e2 a2 ed 48 b4 cc 24 e8 0d c6 3b fc 58 fe f9 d1 fa 8e 88 c0 41 93 e9 9d 2f e5 8c 1d d5 4d 48 14 32 a3 74 12 7d 40 04 9f dc e9 16 ee 76 52 dd ac a3 1a 1a 63 6e b4 41 0d 32 f5 bb 29 92 42 7b e4 f2 75 a6 df 4e 91 52 c8 d2 13 Data Ascii: auhFy!#1Ry!M/[<?Mbyyx@ _d[h&8z8[.[+h&~pyToNjFR7@a93,Ha^>y?7KHwLH$;XA/MH2t}@vRcnA2)B{uNR
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 08 f9 2c 7c c2 70 73 cf 98 fa db 22 85 25 dc 51 02 48 26 e9 04 76 f4 3a 83 54 a8 a6 57 2e 42 f5 af f4 ff 00 bc 35 2d 09 57 52 07 3f df 51 6a df f9 38 38 e9 69 14 37 bf 7d 0c aa 8d ca d9 5c 3a e5 a3 29 82 05 4a 30 27 e4 0f 6d 5f 55 1e 98 c1 07 00 63 3f 2d 53 d4 61 e6 a4 e7 e1 33 67 8f f8 4e a4 5f 99 a3 a7 85 83 00 19 ce 47 be 07 1f df 50 77 01 78 8b 2b e9 2a c3 d4 54 42 bc f9 68 0e 47 cc 69 5f e2 b7 c3 59 69 45 62 c4 53 b1 e7 e6 47 fd 34 de b0 51 2d cb 6e dc a7 86 30 67 a5 65 32 36 79 31 90 00 e3 ea 33 f7 d2 93 c5 44 cd e2 8d 32 02 ad 20 f5 f5 2c c7 51 19 05 db 22 06 d1 4b b2 31 81 9c fc b5 9a 9e 90 c0 a8 62 46 06 7d 3e 7a f9 81 53 cf a7 63 af 14 e4 9c e9 c5 75 97 61 f3 d6 4e 9f cb 56 f7 d7 8b c9 3a 91 49 4b 2d 6d 44 54 f0 a9 77 91 82 a8 03 3d f5 05 79 32 Data Ascii: ,\|ps"%QH&v:TW.B5-WR?Qj88i7}\:)J0'm_Uc?-Sa3gN_GPwx+*TBhGi_YiEbSG4Q-n0ge26y13D2 ,Q"K1bF}>zScuaNV:IK-mDTw=y2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49749	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:43 UTC	930	OUT	GET /file/mXNwO8DVSXSRafJGfW3LoeUmuU7fidfGqSIAOB8lQIWxs_fxBvKHG0GSvd55EDulEM7uLm8GNgtQG3Wlwc8F2i-Z3d1LlZ4ymAUsAMGc6EYEL8dhxVM3aWiifE5vTAupsOw_VDcNkrzbe3dlIJ2Q7OPwK8nO0ht-SBE_F9i58duZcVAzbCmXRvBqz2-PN6RZaEIy3iFnnzTILo40fVObac7AyFeYjc1G1Hv6LtBLAFiUrGDE-geNNOWqpCIVaGwrQTf2Nbrn5eRUTk8C_k6r88VkZjxHOEAKXEBdkkF2XtsElsfAfvOemPQ7gBDKXPx72NEce3eyKrUOcjvnlQORkg.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:44 UTC	676	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:44 GMT Content-Type: image/jpeg Content-Length: 175961 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "484cf0478baf97e86e61c0107830d5e8c2f13759" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:44 UTC	714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e2 01 db 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 cb 00 00 00 00 02 40 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 51 74 05 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 72 58 59 5a 00 00 00 f0 00 00 00 14 67 58 59 5a 00 00 01 04 00 00 00 14 62 58 59 5a 00 00 01 18 00 00 00 14 77 74 70 74 00 00 01 2c 00 00 00 14 63 70 72 74 00 00 01 40 00 00 00 0c 72 54 52 43 00 00 01 4c 00 00 00 20 67 54 52 43 00 00 01 4c 00 00 00 20 62 Data Ascii: JFIF``ICC_PROFILE@mntrRGB XYZ acsp-QtrXYZgXYZbXYZwtpt,cprt@rTRCL gTRCL b
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 21 00 31 07 13 22 41 51 14 61 15 32 71 81 23 42 91 a1 08 16 52 b1 33 62 c1 d1 f0 24 72 e1 17 92 f1 25 34 43 82 53 35 44 63 73 83 a2 c2 f2 ff c4 00 1c 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 ff c4 00 3c 11 00 01 04 01 02 04 04 04 06 02 02 01 03 04 03 00 01 00 02 03 11 21 04 31 05 12 41 51 13 22 61 71 81 91 a1 f0 06 14 32 b1 c1 d1 e1 f1 15 23 42 16 33 52 07 24 72 a2 62 82 b2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 9c db ee 46 cd a9 ed c7 52 db 23 7a 09 64 0d 5b 15 33 a8 32 c4 bd f2 a0 e3 8c fb f1 9e 7a 29 5b ac c5 e2 ee b2 69 aa 08 a0 fa 57 f3 43 08 51 1d a9 d0 61 93 dc 9c 28 ee 79 3d fa 52 ad a6 b9 d7 d7 6d b5 d1 4d 76 46 95 83 55 48 00 67 42 4e 70 47 e4 4c 71 d8 7c f5 83 51 d1 bd aa e4 6d b1 43 14 cf e5 e3 10 b6 0a Data Ascii: !1"AQa2q#BR3b$r%4CS5Dcs<!1AQ"aq2#B3R$rb?FR#zd[32z)[iWCQa(y=RmMvFUHgBNpGLq\|QmC
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: ae 56 f2 25 24 05 07 85 f6 cf f6 e8 35 6d be 2b 7d d6 3f a9 6f a9 86 52 4b 10 9e df f7 ed d1 0b e9 8a 48 e2 ad 54 fa 5a b2 37 18 f7 86 f3 07 ca 1c 0d df f4 e7 ac 17 09 26 bc c5 6f a9 57 36 ca 5a 70 e1 d2 5d ac 95 39 1f ca e0 fa 5b 83 c1 ef d3 48 0b ad 4f a6 a0 fc 22 f5 3a 24 05 d4 12 51 f3 90 e8 7b 63 f6 3f b6 3a 63 a5 8e a2 cb 2c 35 ea e1 23 9d 41 2a bd d8 67 1f d3 8c 63 ad d9 a8 7f cc 34 4d 20 4f e2 43 27 96 15 4a 8d ca 7e 47 18 e4 0e 49 f7 fb f5 bf a7 cd 35 e2 d6 f4 32 7a 4d 26 4a 79 a8 51 c7 39 2b 9f 63 ef 83 f6 ea 13 5a 1b 3d 14 df 54 5a ee 01 a5 a4 ba db 4b 41 13 9e e4 60 02 30 76 fe a0 9f e9 d1 5d 63 60 5b 9e 90 b6 6a fd 38 d2 bb 23 08 6b 41 3c c7 27 60 c0 8f 63 c0 fb 1c 75 f7 41 49 4d 75 8e eb a4 ef 55 31 c3 f5 11 f9 d4 4f 2b 05 44 9d 78 5e fe e7 Data Ascii: V%$5m+}?oRKHTZ7&oW6Zp]9[HO":$Q{c?:c,5#A*gc4M OC'J~GI52zM&JyQ9+cZ=TZKA`0v]c`[j8#kA<'`cuAIMuU1O+Dx^
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 76 f9 e5 0f 7e 4f 1c 1c 75 a5 1c 89 0d 30 8e ad 95 b0 b8 52 47 27 ed d6 5b 6b 25 3b 23 cd 51 09 49 48 0a 0a b1 20 fe 80 1f eb d3 1a 06 c7 64 62 ee a1 6f c9 50 f7 aa 57 a9 11 4a 26 86 30 59 54 fc 0c 67 e7 1d 2f aa 4b 55 ba 49 76 6e 27 9c a7 7e 98 a9 5e 6a 5a 89 3c b9 fc a7 dc 40 05 89 dc a7 db af 13 b8 49 4a a4 52 b8 5e 32 91 12 3f 4c f4 66 10 cc 37 64 c7 b8 94 cf 1d 05 a2 d9 53 0b 53 d4 99 60 a5 52 aa 71 ba 57 56 fc ca 48 20 6d c0 38 f8 e9 96 a6 8e d7 32 34 70 d3 c3 08 99 76 f9 ce a5 f7 2f eb 8c 8c ff 00 6e 8d 26 9a d3 b5 1a c7 50 9b 75 b9 eb ad 71 c4 e6 95 48 76 8e 09 06 cc 92 15 83 15 ce 57 3c e3 20 e0 f4 ad 7e b2 5e 74 ed e1 ab 4d 24 8b 64 ae 6f 29 e1 a9 9c 19 29 25 0b 9d a3 3c 91 82 08 38 e4 11 ee 3a c7 bf 87 37 57 23 26 13 13 cb 60 91 83 8f 6d f3 bd Data Ascii: v~Ou0RG'[k%;#QIH dboPWJ&0YTg/KUIvn'~^jZ<@IJR^2?Lf7dSS`RqWVH m824pv/n&PuqHvW< ~^tM$do))%<8:7W#&`m
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: d3 df fa 75 c4 a5 4a c6 92 5b 66 a7 9e 9e 42 04 35 05 a3 6c b6 00 07 92 32 7e 31 fd ba 2d 47 59 5b a6 75 cd 3d 5d c8 3d 5c 3e 6a f9 cb 34 43 12 21 18 3c 90 78 21 b1 9f b7 45 f5 7d 0d 5a d0 d1 dd e8 01 9e 30 a3 70 00 10 5b 07 2a c7 be 70 7b 74 5a aa de 35 97 86 d0 df a9 a2 51 74 b5 7f e9 2a 55 71 f9 38 28 e7 8f 62 48 fd fe dd 08 86 d8 72 ec d5 21 5a bf 4e 36 80 d6 b4 f5 f6 49 71 47 2b a4 f4 b3 ac 87 d4 87 90 32 4e 7d 3d bb fb 7d fa de f1 0f 4f c1 1d 65 2e b7 b3 02 69 ae 43 ce 50 a4 e2 39 c7 12 28 1d 86 48 dd fb 9e 8e db 44 be 22 78 77 55 69 78 55 af 96 55 35 54 a8 ec 19 9e 30 08 65 ed 9e d8 38 ff 00 97 af 1e 1c 4e b7 ab 45 76 89 be ac 20 57 45 e6 5b 84 98 21 66 5c 9e 3e 32 01 1f bf 4d e6 21 72 17 ae 2d 9f e6 ad 31 6d d6 d4 bb 96 72 56 2b 8c 69 da 39 80 da Data Ascii: uJ[fB5l2~1-GY[u=]=\>j4C!<x!E}Z0p[p{tZ5QtUq8(bHr!ZN6IqG+2N}=}Oe.iCP9(HD"xwUixUU5T0e8NEv WE[!f\>2M!r-1mrV+i9
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 50 22 30 77 79 7f 87 18 19 db cf fd ba 20 d4 15 20 e2 79 9c 38 fb 01 d7 0a 68 a4 84 13 ba ae c5 75 ba cd 75 aa 6a 11 22 52 90 d2 49 3d 48 2b 21 63 cb 1d c3 9e fc e4 9c 71 cf 1d 31 d9 6e 03 c5 28 ae 90 cb 24 51 9b 25 2b 48 1e 85 8a ca 61 4e 0e 33 ff 00 10 0e 1b 04 af 73 83 8c 0e 91 fc 1b d6 d2 bd 5d da 2b ec b5 57 7a 85 a5 02 28 aa 66 f3 62 31 b3 62 5d ca d9 dd c1 c6 3f e6 cf b7 5b da 7e fb 41 e1 be be 12 e9 67 aa 4d 3d f5 0c ee b2 a6 e6 78 88 e6 36 c9 f5 76 50 4e 7e f8 c8 e6 1b 74 a2 3a 30 8a 1d 7f b3 fc a7 32 80 f3 75 44 52 9a c5 3c 3b 6a 2e b1 dc e5 6d a9 4d 2d 44 32 42 21 05 f2 c1 88 cb 63 9c e0 03 f6 fb a2 50 6a 35 a7 d4 d3 5a 96 82 9a d9 39 f3 20 a6 ab d8 41 cf f2 37 38 38 61 ce 4f 7c fe e2 99 e2 25 9e 9e f7 5b 1e a5 d2 d2 8a cb 25 c1 72 ab 19 cb 40 Data Ascii: P"0wy y8huuj"RI=H+!cq1n($Q%+HaN3s]+Wz(fb1b]?[~AgM=x6vPN~t:02uDR<;j.mM-D2B!cPj5Z9 A788aO\|%[%r@
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 1c d0 c1 a8 f4 cd d6 c7 33 7f eb e8 d1 a4 a7 21 46 18 e3 d4 3f f3 e7 a1 5e 19 de e0 d1 f7 ca da 6b 9c 72 cf 4d 5a 9e 5b d3 c3 16 f7 97 8f 65 fd f1 d0 5f 23 5b 8e cb a9 7b f0 bf ce d5 90 5e b4 5d 7c 89 1c 92 c5 f5 54 5e 62 e1 84 ea 72 3d 43 db e4 7c 13 d6 87 87 97 d5 d3 da aa 6b 5d 5a 08 ed f5 61 a9 aa a2 ce 15 5b 25 77 1f 7c 8f 9e b4 ee 77 2a ad 2f aa 6a 24 b7 db da dd 52 92 6d 8e 7a a7 31 cc 01 18 40 40 07 92 a4 71 d7 8a ba f0 1f cc 6b ad 05 4d 45 4c 72 54 54 9d 84 04 3b d8 32 c8 e4 7e 73 8c 8c 1e 7d c7 54 52 f1 61 6e 0c 6d 80 73 64 0a f5 4e 00 75 59 a2 ae b9 78 5b e2 25 49 8a a1 26 0a 5b f8 cc c5 92 54 6c 15 27 1d c6 0f db af 5a be 87 fc af a9 a8 ef b6 52 e2 92 ad 12 b6 94 8f 52 a1 6e ea 39 e0 06 04 63 e0 8e bc df ee 76 8d 63 64 a5 34 54 f0 52 5e e8 dd Data Ascii: 3!F?^krMZ[e_#[{^]\|T^br=C\|k]Za[%w\|w*/j$Rmz1@@qkMELrTT;2~s}TRanmsdNuYx[%I&[Tl'ZRRn9cvcd4TR^
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 12 5d 2d 8d 3f 47 35 ac ac e5 c4 26 35 2d 94 3c f6 c7 7f eb d6 c5 32 4d 2a 3c a6 44 cc ae 5f d4 09 3c fd fa d2 86 53 71 a3 94 46 4a 98 03 46 55 8e d1 9f 93 f6 ed d0 e1 05 43 80 d1 54 49 e5 91 e9 f6 e3 ae 26 b7 4e 04 ac 94 37 6b 86 9b a9 17 2b 34 88 b5 61 5a 35 05 32 36 91 82 7e 3e 3a 33 7a d4 b7 0b d5 24 15 74 c0 d3 5c 1a 26 35 b4 d0 ae 04 80 2e ed ea 7b 82 40 3e 9c f3 d2 f5 ba e9 0d 4a a5 35 c6 26 a4 68 c6 63 df f9 5d 4f 63 9f fc ed d3 15 9e 9a 38 26 91 d5 8c a8 8a 63 91 43 70 c8 ea 41 19 fd 09 1d 46 e7 90 03 5b a6 dd 15 4d f0 a3 57 2d 6d 9e e5 06 8f af 4b 46 a2 14 d1 d4 c5 21 97 08 ec 84 6f 47 46 24 3a e3 27 f2 92 31 91 ef d6 d5 4b da 75 dd cd 20 d6 97 1a 5b 13 b4 a5 65 a8 b6 c7 10 1b f0 46 e6 00 7a 97 04 f1 c7 07 b7 50 35 b3 c1 6c af 63 01 95 82 bf f0 Data Ascii: ]-?G5&5-<2M*<D_<SqFJFUCTI&N7k+4aZ526~>:3z$t\&5.{@>J5&hc]Oc8&cCpAF[MW-mKF!oGF$:'1Ku [eFzP5lc
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 47 74 a0 96 b2 68 a8 3f 11 8e 9c ca 67 2c 91 13 0a 53 99 46 01 e3 2c 32 d1 a9 c1 ee 7b 9e a2 f1 1d 54 f1 b0 b1 94 d2 ed b7 24 7a fb 75 b4 f0 01 00 92 b7 63 d4 37 bb 2d 73 ce 2a 22 a2 68 a4 11 a4 a2 2d af b1 bb a8 0c 78 c6 30 7b 93 c7 4a d7 6a 8f a2 92 aa 79 2b 0d 35 7d 22 96 4a 72 9e 54 af 22 93 8d d9 ce 48 71 ca 91 ec 7f 5e 84 df f5 00 d4 54 f5 09 51 41 0c 2a 93 b1 43 0e c5 3b 49 20 28 1e bf d8 0e 47 bf 5a 57 5a 7a 1a 09 a9 e2 bf d4 bc e3 c8 59 f6 88 b3 85 23 d0 49 2b 8c 65 bb 10 01 c1 38 cf 54 ba 58 df 1b 39 49 20 83 76 32 0d 76 c9 c1 f9 a1 13 94 ef a8 2b ed ba c6 cb 69 86 21 72 9b 55 c0 99 9b ce 95 25 48 d4 f2 5e 3d a0 6d 5c fb 73 c7 19 cf 5b 43 48 5c 6d 36 29 2e b3 d5 8a 0a 37 9c c6 aa 43 07 9c b0 19 19 da 06 47 07 ee 33 8c 77 e9 36 a3 57 ae 9f a5 8a Data Ascii: Gth?g,SF,2{T$zuc7-s"h-x0{Jjy+5}"JrT"Hq^TQAC;I (GZWZzY#I+e8TX9I v2v+i!rU%H^=m\s[CH\m6).7CG3w6W
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 56 c4 44 7b 1f 7e 99 ab 2c 26 b6 92 59 2a 27 32 ca 0e e5 5d dc 36 3d 81 f9 c7 41 04 11 d2 a0 22 62 5a 40 36 06 e7 8f 8e 99 e6 0b ac 83 94 31 a9 dc 29 12 2b 1c 36 33 9e ff 00 a7 5e 66 a6 46 98 08 10 30 00 e4 0e 7a 2f 51 6e 9c 10 a0 33 36 ef ca a3 3c 7d ba fb 43 4b 04 51 4e ce 84 4a aa 40 56 18 61 d2 92 6a d7 5a 1e ea b0 34 15 94 98 0c 87 25 49 cf 38 f8 eb 2f e2 8b 20 66 a9 8c 3b 33 0e 47 b2 fd ba d1 a8 aa 24 ce be 5e c7 63 8c 1f e5 eb 5e 99 0c f2 81 23 6d 51 dc f4 94 57 72 f7 4c 73 ea 79 0d 1c 54 d1 81 90 40 27 ec 0f 1f db ac f6 cb 8c d5 d7 32 90 e5 13 19 21 fb a8 f7 e8 3d 33 d1 43 5b 80 11 e3 0d b4 48 ed d8 e3 af d2 3d 6d 3c c6 45 85 d4 4e 70 ae 17 83 fa 1e d8 eb 80 01 21 68 38 4e f2 b5 2a 50 3d 3d 3a ac 92 b6 77 ec 07 2c 79 e4 fb f5 83 cc ae 40 ab 04 11 Data Ascii: VD{~,&Y'2]6=A"bZ@61)+63^fF0z/Qn36<}CKQNJ@VajZ4%I8/ f;3G$^c^#mQWrLsyT@'2!=3C[H=m<ENp!h8NP==:w,y@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49750	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:43 UTC	930	OUT	GET /file/FmiN1jd6kyJcAeWZgqW4F1M6SO2Eq2RyWTZW_blsnSEOdaGcnsZyCyUn7iIiSZTDSWAItP34AXMi8zvOoqM-IcdUp3TUVCz0MhcVRIWT4BXCt3eTxwYPub8hQGapqCMCUQQ656ysDa7TxKg2_iJgkXF8jnWEsubIs0Q7ol6Ma4rq1Tj21ueeiPUmscCaomkBd2JrnI_qU6CxtVAC7Dn7w-z6QsmN4TePjVK8NNkb7liOQWKnbxGEfgDyDriRvwLWSnaFj8kfRICBMhevGgqVyW0k0KWygDnfKeiWFwAmnmNtvGOtou8h7HZNKTgQEuX-Z2IvurSOcnyALF6aJtSGUg.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:44 UTC	684	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 7097 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "b89cf97bea36a66e0e73b908166e5cf0490cd719" Content-Type: image/jpeg Age: 814 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:44 UTC	706	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c0 00 11 08 00 a0 00 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 03 00 02 03 00 00 00 00 00 00 00 00 00 00 08 09 01 07 0a 02 06 03 04 05 ff c4 00 48 10 00 01 03 03 02 03 05 03 08 08 04 02 0b 00 00 00 01 02 03 04 00 05 06 07 11 08 12 21 13 31 41 51 61 14 22 52 09 15 32 42 71 Data Ascii: JFIF``CC"H!1AQa"R2Bq
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: ba 99 64 9e 89 09 1b f3 b9 de a2 0f 50 9d 85 40 8e 07 b0 88 d9 5f 1a 6c de 27 b2 97 a1 e3 36 d7 2e 48 4a c6 e9 32 0a 83 4c 9f b8 ad 4b 1e a8 15 38 f8 e3 ce a5 e2 1c 1c 7c c9 6c 7d 71 e6 e4 f7 14 db 9c 71 07 65 08 e1 2a 75 e0 0f ef 04 a5 07 d1 66 ad 74 d6 5b 66 59 73 ae 0b da f6 ee f3 be 51 bd 70 75 3e 4e 9d 48 7b 10 cd a3 68 b7 7d 80 79 58 5c 73 2a 21 20 ee 17 22 35 0e ac f1 f0 d5 af 26 9b 64 d2 4b 14 4b cb 2c 2c b6 ab fd d8 ac b0 f2 87 42 59 65 25 25 49 f2 5a 94 37 f0 4e dd 6b 46 da f8 f4 d7 08 57 84 3f 3e 36 3b 77 89 bf bf 19 76 b5 32 08 f2 0b 43 9b 8f b7 af df 50 9c 9e b5 8a c4 b9 52 9e 71 7b 5b 64 72 1a 45 1e 6b 19 62 39 99 82 e8 98 52 33 c8 27 24 8e 56 b1 bf 7d ef 17 cb a1 9c 42 61 5a ff 00 86 ce 80 98 49 b5 e4 ac 47 da eb 60 9a a4 bc 16 d1 f7 4a d0 Data Ascii: dP@_l'6.HJ2LK8\|l}qqeuft[fYsQpu>NH{h}yX\s! "5&dKK,,BYe%%IZ7NkFW?>6;wv2CPRq{[drEkb9R3'$V}BaZIG`J
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 88 dd 18 3d 10 49 1d 36 3b d7 47 5a 58 89 0d 70 cb a7 2d cb dc 4a 4e 33 6f 4b c1 5d e1 5e cc de fb fa d5 1c 68 06 8d 5e 75 97 5e ad 96 68 f1 1d 18 dc 47 d0 fe 41 3f 97 f4 71 e3 03 b9 46 fd dd a3 9b 72 25 3d fd 49 ee 49 ab 9e d6 fd 4c b5 e8 ef 0b b7 fc 99 4a 6e 3c c6 63 7b 25 92 28 3b 76 b2 96 92 96 50 91 e4 9f a4 7c 92 83 56 fa 32 3a 26 dc 98 5e 49 b7 d2 e4 fd a3 d0 1e ce d9 54 84 a4 dd 4e 63 e1 6a c0 5c ef d9 ba 89 1d 99 0e 64 da 28 e7 52 e5 31 37 8b bc f6 5c 52 0c 67 b2 f9 ab 68 8e e2 93 2d 5b 55 fa ea 22 3b 4e 1b b3 a6 fe 2c 66 68 fc e3 2e b9 cd 8c eb 8e e4 11 9d 79 65 d7 57 25 2a 5a cf 7a 94 55 b9 27 ed 3d 6b a3 cc d9 1d a6 85 e5 8d 7c 76 19 49 fc e3 aa 94 73 b6 1f 3c 7f ca 3b 3d 9f 2f a7 6e a4 bf e6 cf c4 3a 7c e3 9b 41 fa b4 ff 00 08 fe 95 93 b8 49 Data Ascii: =I6;GZXp-JN3oK]^h^u^hGA?qFr%=IILJn<c{%(;vP\|V2:&^ITNcj\d(R17\Rgh-[U";N,fh.yeW%*ZzU'=k\|vIs<;=/n:\|AI
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: f5 5e 5c a7 cb 6a c6 df fe f0 ac 13 8e ad e5 97 16 6e 4c 6a 89 d9 c9 aa 84 ca a6 66 15 b4 b5 1b 93 eb 40 34 03 70 8c 52 94 ae a8 c7 c2 94 a5 21 13 0f 81 e6 2d 73 b8 d8 55 ae ef 6d 89 74 8b 2f 1d 96 94 b3 32 32 1e 40 5a 14 d2 c1 01 40 8d f6 49 eb f6 d4 f2 e2 87 43 1f d4 1d 13 c7 71 ad 38 c5 2c f0 ef 6e e4 8c 2e 44 b4 45 6a 2a 23 47 0c bd ce e3 8b 4a 42 b9 01 28 e8 37 24 ed b0 35 5d 9c 1a 4d 30 fe 51 2c 15 23 7e 59 2d cc 8e a0 3c 95 11 c3 fd 52 2a d9 b5 ff 00 57 63 68 a7 0f 33 32 e3 00 dd 2e 6e c8 44 2b 54 53 b8 6d 72 1c 0a 29 2e 11 d4 21 21 0a 51 db a9 e5 d8 6c 4e e2 e9 4e 0c ae 98 e0 77 24 82 6e 77 db 23 c2 3d 1f 84 9b a7 cc 60 c9 84 ce 64 d8 52 f6 95 61 70 3e 03 91 b1 3c 87 6e 51 1b 71 1e 04 f4 9f 16 c6 9b 9d a9 59 14 bc 96 60 03 b7 26 67 cd b0 10 7c 40 Data Ascii: ^\jnLjf@4pR!-sUmt/22@Z@ICq8,n.DEj#GJB(7$5]M0Q,#~Y-<RWch32.nD+TSmr).!!QlNNw$nw#=`dRap><nQqY`&g\|@
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 53 96 f0 50 20 a7 3c c6 ef e9 1c 37 58 f8 9b c6 82 99 a9 b2 e2 1c 43 8d 59 79 a4 75 45 81 08 06 ff 00 08 37 49 41 b7 35 1b 9b eb f9 14 a5 2a 14 54 a1 4a 52 90 89 25 c2 1f ed 14 d3 6f f5 12 7f b4 7a ac 03 e5 01 ff 00 a1 65 8f fe f6 c6 fe de 45 57 ff 00 08 7f b4 53 4d bf d4 49 fe d1 ea b2 ce 35 70 8c 97 38 e0 c9 4c e2 f6 e5 dd a6 5a 6e ec dc e4 45 64 15 3a b6 1b 6d d4 2c a1 23 aa 8a 7b 40 ae 51 d4 80 76 dc f4 ab 6c 92 4a a9 2f 01 ae 7f 41 1b ef 0d b6 e3 d8 0e a0 86 c1 24 95 64 35 ea a0 f9 18 a4 13 df 4a f2 20 83 e7 f6 56 39 4e fb 77 74 df af 4a a9 46 85 b1 bc 59 c7 c9 d3 76 95 ed 7a a5 62 5a 89 84 13 06 62 52 7b 92 e1 2e b6 4f de 94 a7 f9 6b d7 b8 fd 6a 1c 8e 27 f4 c2 3b a5 20 bb 67 28 90 7c 7b 33 2f 61 bf a7 55 ff 00 bd 6f 2e 04 74 ce e7 87 e8 0d ef 34 bd Data Ascii: SP <7XCYyuE7IA5*TJR%ozeEWSMI5p8LZnEd:m,#{@QvlJ/A$d5J V9NwtJFYvzbZbR{.Okj'; g(\|{3/aUo.t4
2024-09-20 22:48:44 UTC	831	IN	Data Raw: 5f 63 b8 de 1d 71 c1 f4 9e ea cd e3 29 90 d2 a3 49 bc c1 58 54 5b 5a 08 e5 57 66 b1 d1 c7 76 dc 0e 5d d2 8e fd f7 00 55 49 95 95 28 92 49 24 ef ba 8e e7 f3 f1 af 1d fa 01 e0 06 c3 d2 b1 58 79 b9 b7 a7 1c db 73 76 83 70 f5 c6 35 ed 72 bd 3b 5e 9a 0f 4c 58 01 92 52 34 48 e5 c4 f1 27 5e cb 08 da da 4b ac 79 9e 8d 6a 2f cf f8 8c c4 06 df 09 45 c6 dd 24 15 45 9c d8 3b f2 b8 90 41 04 6e 79 56 36 52 77 3b 1d 89 06 cb f1 7e 3a 74 6b 27 c6 04 3c f6 c9 71 c6 25 38 90 24 b1 22 08 b8 c3 59 f4 52 01 24 7f 12 05 53 d5 67 7d bc 2b b2 5a 7e 66 51 3b 28 37 4f 03 98 89 74 7c 53 57 a2 b6 5a 61 61 4d 9f ca a1 b4 9e ed e2 fb ec 6c 78 45 cd ca e3 1f 86 ac 3e d3 21 58 ab 32 27 3c b4 ef ec b6 4c 73 d9 7b 53 e0 0a 96 96 d3 f9 93 50 17 5e b8 a4 cc 75 a9 06 c4 dc 6f f0 b6 0e db a1 Data Ascii: _cq)IXT[ZWfv]UI(I$Xysvp5r;^LXR4H'^Kyj/E$E;AnyV6Rw;~:tk'<q%8$"YR$Sg}+Z~fQ;(7Ot\|SWZaaMlxE>!X2'<Ls{SP^uo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	77.88.55.88	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:44 UTC	535	OUT	GET /ads/system/header-bidding.js HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:44 UTC	1941	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Cache-Control: private, max-age=3600 Connection: Close Content-Type: text/javascript; charset=utf-8 ETag: "efa73f96084485d39e3ff7766789219e-1117086" Expires: Fri, 20 Sep 2024 23:48:44 GMT Keep-Alive: timeout=600 NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Set-Cookie: i=GmNVkS+1q5EG+QZWaZequSAdEsZAYIQJqYkSXqpBiBW8RHxpVAeNYZqWeWLxv59vOg/zx7VfGq3GoEcsNjaaQUQpdjA=; Expires=Sun, 20-Sep-2026 22:48:44 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=1141320511726872524; Expires=Sun, 20-Sep-2026 22:48:44 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yashr=6680397161726872524; Path=/; Domain=.yandex.ru; Expires=Sat, 20 Sep 2025 22:48:44 GMT; SameSite=None; Secure; HttpOnly Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=.yandex.ru; Expires=Sat, 20 Sep 2025 22:48:44 GMT; SameSite=None; Secure; HttpOnly; Partitioned Set-Cookie: bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYMz3t7cGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=; Path=/; Domain=.yandex.ru; Expires=Sat, 25 Oct 2025 22:48:44 GMT; SameSite=None; Secure Timing-Allow-Origin: * Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Robots-Tag: noindex, noarchive, nofollow X-Yandex-Req-Id: 1726872524298808-15770533818614132051-balancer-l7leveler-kubr-yp-sas-233-BAL
2024-09-20 22:48:44 UTC	7017	IN	Data Raw: 31 42 36 31 0d 0a 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 6c 6f 61 64 65 72 73 2f 61 64 66 6f 78 2f 68 65 61 64 65 72 2d 62 69 64 64 69 6e 67 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e Data Ascii: 1B61/! v:1117086 b:default c:loaders/adfox/header-bidding /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.
2024-09-20 22:48:44 UTC	693	IN	Data Raw: 32 41 45 0d 0a 67 65 2c 6e 28 32 38 30 33 39 29 2e 53 2e 48 54 54 50 5f 45 52 52 4f 52 2e 63 6f 64 65 29 3a 65 2e 6f 6e 45 72 72 6f 72 28 72 2e 73 74 61 74 75 73 54 65 78 74 2c 6e 28 32 38 30 33 39 29 2e 53 2e 48 54 54 50 5f 45 52 52 4f 52 2e 63 6f 64 65 29 7d 2c 64 61 74 61 3a 74 68 69 73 2e 64 61 74 61 2c 6d 65 74 68 6f 64 3a 74 68 69 73 2e 6d 65 74 68 6f 64 7c 7c 22 70 6f 73 74 22 2c 77 69 74 68 43 72 65 64 65 6e 74 69 61 6c 73 3a 21 30 2c 68 65 61 64 65 72 73 3a 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 74 65 78 74 2f 70 6c 61 69 6e 22 7d 2c 74 69 6d 65 6f 75 74 3a 74 68 69 73 2e 74 69 6d 65 6f 75 74 7d 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 6e 52 65 73 70 6f 6e 73 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 69 73 52 65 Data Ascii: 2AEge,n(28039).S.HTTP_ERROR.code):e.onError(r.statusText,n(28039).S.HTTP_ERROR.code)},data:this.data,method:this.method\|\|"post",withCredentials:!0,headers:{"Content-Type":"text/plain"},timeout:this.timeout})},e.prototype.onResponse=function(e){this.isRe
2024-09-20 22:48:44 UTC	678	IN	Data Raw: 32 39 46 0d 0a 4e 45 5a 44 4f 3a 22 67 6e 65 7a 64 6f 22 2c 41 53 54 52 41 4c 41 42 3a 22 61 73 74 72 61 6c 61 62 22 2c 53 4f 4c 4f 57 41 59 3a 22 61 64 72 69 76 65 72 22 2c 42 55 5a 5a 4f 4f 4c 41 3a 22 62 75 7a 7a 6f 6f 6c 61 22 2c 4d 41 49 4c 3a 22 6d 79 74 61 72 67 65 74 22 2c 46 41 43 45 42 4f 4f 4b 3a 22 66 61 63 65 62 6f 6f 6b 22 2c 42 45 54 57 45 45 4e 5f 44 49 47 49 54 41 4c 3a 22 62 65 74 77 65 65 6e 64 69 67 69 74 61 6c 22 2c 47 45 54 5f 49 4e 54 45 4e 54 3a 22 67 65 74 69 6e 74 65 6e 74 22 2c 56 49 44 45 4f 4e 4f 57 3a 22 76 69 64 65 6f 6e 6f 77 22 2c 52 45 4c 41 50 3a 22 72 65 6c 61 70 22 2c 41 44 46 4f 58 3a 22 61 64 66 6f 78 22 2c 46 4f 54 4f 53 54 52 41 4e 41 3a 22 66 6f 74 6f 73 74 72 61 6e 61 22 2c 41 4c 46 41 53 45 4e 53 45 3a 22 61 6c Data Ascii: 29FNEZDO:"gnezdo",ASTRALAB:"astralab",SOLOWAY:"adriver",BUZZOOLA:"buzzoola",MAIL:"mytarget",FACEBOOK:"facebook",BETWEEN_DIGITAL:"betweendigital",GET_INTENT:"getintent",VIDEONOW:"videonow",RELAP:"relap",ADFOX:"adfox",FOTOSTRANA:"fotostrana",ALFASENSE:"al
2024-09-20 22:48:44 UTC	6819	IN	Data Raw: 31 41 39 42 0d 0a 6f 74 65 63 68 22 2c 54 45 53 54 3a 22 74 65 73 74 22 2c 41 44 53 50 45 43 54 4f 52 3a 22 61 64 73 70 65 63 74 6f 72 22 2c 48 48 52 55 3a 22 68 68 72 75 22 2c 55 50 52 41 56 45 4c 3a 22 75 70 72 61 76 65 6c 22 2c 48 59 50 45 52 3a 22 68 79 70 65 72 22 2c 4e 45 4d 45 44 49 41 3a 22 6e 65 6d 65 64 69 61 22 7d 7d 2c 37 32 37 38 35 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 72 2c 6f 3d 28 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 72 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 7c 7c 7b 5f 5f 70 72 6f 74 6f 5f 5f 3a 5b 5d 7d 69 6e 73 74 61 6e 63 65 6f 66 20 41 72 72 61 79 26 26 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 5f 5f 70 72 Data Ascii: 1A9Botech",TEST:"test",ADSPECTOR:"adspector",HHRU:"hhru",UPRAVEL:"upravel",HYPER:"hyper",NEMEDIA:"nemedia"}},72785:function(e,t,n){"use strict";var r,o=(r=function(e,t){return r=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(e,t){e.__pr
2024-09-20 22:48:44 UTC	677	IN	Data Raw: 32 39 45 0d 0a 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 6e 28 34 30 36 31 29 2e 66 69 6c 74 65 72 29 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 63 6f 64 65 3d 3d 3d 65 7d 29 29 5b 30 5d 7d 28 65 29 7d 29 29 2c 69 3d 6e 28 32 38 30 33 39 29 2e 53 2e 4e 4f 5f 52 45 53 50 4f 4e 53 45 2e 63 6f 64 65 2c 61 3d 22 45 6d 70 74 79 20 72 65 73 70 6f 6e 73 65 20 66 72 6f 6d 20 22 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 6e 61 6d 65 29 2c 74 68 69 73 2e 63 72 65 61 74 65 42 69 64 52 65 73 70 6f 6e 73 65 28 65 29 7d 65 6c 73 65 20 61 3d 22 68 74 74 70 53 74 61 74 75 73 20 22 2e 63 6f 6e 63 61 74 28 69 2c 22 20 66 72 6f 6d 20 22 29 2e 63 6f 6e 63 61 74 28 74 68 69 73 2e 6e 61 6d 65 29 2c 74 68 69 73 2e 6c 6f 67 28 22 48 42 5f Data Ascii: 29Ection(e){return(0,n(4061).filter)(t,(function(t){return t.code===e}))[0]}(e)})),i=n(28039).S.NO_RESPONSE.code,a="Empty response from ".concat(this.name),this.createBidResponse(e)}else a="httpStatus ".concat(i," from ").concat(this.name),this.log("HB_
2024-09-20 22:48:44 UTC	7506	IN	Data Raw: 31 44 34 41 0d 0a 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 2e 69 6d 70 72 65 73 73 69 6f 6e 49 64 5d 3d 65 7d 29 29 2c 74 29 72 2e 70 75 73 68 28 74 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 6e 46 72 6f 6d 4e 6f 74 52 65 71 75 65 73 74 65 64 42 69 64 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 7b 7d 2c 6f 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 28 30 2c 6e 28 36 30 34 33 30 29 2e 66 6f 72 45 61 63 68 29 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 63 6f 64 65 3b 72 65 74 75 72 6e 20 72 5b 69 5d 3d 28 6f 3d 69 2c 28 30 2c 6e 28 34 30 36 31 29 2e 66 69 6c 74 65 72 29 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: 1D4A(e,(function(e){return t[e.impressionId]=e})),t)r.push(t[o]);return r},t.prototype.cleanFromNotRequestedBids=function(e,t){var r={},o=[];for(var i in(0,n(60430).forEach)(t,(function(t){var o,i=t.code;return r[i]=(o=i,(0,n(4061).filter)(e,(function(e
2024-09-20 22:48:44 UTC	669	IN	Data Raw: 32 39 36 0d 0a 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 74 72 79 7b 76 61 72 20 72 3d 6e 2e 6c 76 5b 22 6a 73 6f 6e 22 5d 2e 70 61 72 73 65 28 65 29 3b 74 68 69 73 2e 70 72 6f 63 65 73 73 44 61 74 61 28 72 2c 74 29 7d 63 61 74 63 68 28 65 29 7b 74 68 69 73 2e 6c 6f 67 28 22 48 42 5f 41 44 41 50 54 45 52 5f 50 41 52 53 45 5f 45 52 52 4f 52 22 29 2c 74 68 69 73 2e 6f 6e 45 72 72 6f 72 28 65 2e 6d 65 73 73 61 67 65 2c 74 2c 6e 28 32 38 30 33 39 29 2e 53 2e 49 4e 56 41 4c 49 44 5f 52 45 53 50 4f 4e 53 45 2e 63 6f 64 65 29 7d 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 52 65 71 75 65 73 74 65 64 42 69 64 4e 61 6d 65 73 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 30 2c 6e 28 35 36 37 29 2e 6d 61 70 29 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 Data Ascii: 296nction(e,t){try{var r=n.lv["json"].parse(e);this.processData(r,t)}catch(e){this.log("HB_ADAPTER_PARSE_ERROR"),this.onError(e.message,t,n(28039).S.INVALID_RESPONSE.code)}},r.prototype.getRequestedBidNames=function(e){return(0,n(567).map)(e,(function(e
2024-09-20 22:48:44 UTC	7514	IN	Data Raw: 31 44 35 32 0d 0a 45 72 72 6f 72 42 69 64 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 67 65 74 52 65 71 75 65 73 74 65 64 42 69 64 4e 61 6d 65 73 28 74 29 2c 72 3d 74 68 69 73 2e 67 65 74 52 65 73 70 6f 6e 73 65 64 42 69 64 4e 61 6d 65 73 28 65 29 2c 6f 3d 74 68 69 73 2e 67 65 74 44 69 66 66 42 69 64 4e 61 6d 65 73 28 6e 2c 72 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 6f 72 74 52 65 71 75 65 73 74 65 64 42 69 64 73 42 79 4e 61 6d 65 73 28 74 2c 6f 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 63 65 73 73 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 62 69 64 73 3b 69 66 28 72 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 66 69 6c 74 65 72 45 72 72 6f 72 42 69 64 73 28 72 2c 74 29 Data Ascii: 1D52ErrorBids=function(e,t){var n=this.getRequestedBidNames(t),r=this.getResponsedBidNames(e),o=this.getDiffBidNames(n,r);return this.sortRequestedBidsByNames(t,o)},r.prototype.processData=function(e,t){var r=e.bids;if(r){var o=this.filterErrorBids(r,t)
2024-09-20 22:48:44 UTC	661	IN	Data Raw: 32 38 45 0d 0a 65 6e 64 73 20 76 61 6c 75 65 20 22 2b 53 74 72 69 6e 67 28 74 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 6f 72 20 6e 75 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 65 7d 72 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 74 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 74 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 3b 74 2e 67 3d 76 6f 69 64 20 30 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 72 29 7b 76 61 72 20 6f 3d 65 2e 63 61 6c 6c 28 74 68 69 73 2c 7b 62 69 64 4d 61 6e 61 67 65 72 3a 74 2c 6e 61 6d 65 3a 72 2c 62 61 6e 6e 65 Data Ascii: 28Eends value "+String(t)+" is not a constructor or null");function n(){this.constructor=e}r(e,t),e.prototype=null===t?Object.create(t):(n.prototype=t.prototype,new n)});t.g=void 0,function(e){function t(t,r){var o=e.call(this,{bidManager:t,name:r,banne
2024-09-20 22:48:44 UTC	7522	IN	Data Raw: 31 44 35 41 0d 0a 69 2c 74 29 7d 2c 6f 6e 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 6f 6e 54 69 6d 65 6f 75 74 28 69 29 7d 7d 7d 29 2e 73 65 6e 64 58 68 72 28 29 7d 7d 28 6e 28 31 32 32 30 29 2e 64 29 2c 74 2e 67 3d 76 6f 69 64 20 30 7d 2c 38 31 36 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 3d 76 6f 69 64 20 30 2c 74 2e 64 3d 7b 61 64 66 6f 78 3a 7b 61 64 61 70 74 65 72 3a 6e 28 37 32 37 38 35 29 2e 56 2c 6e 61 6d 65 3a 6e 28 35 36 32 39 33 29 2e 4f 2e 41 44 46 4f 58 7d 2c 63 72 69 74 65 6f 3a 7b 61 64 61 70 74 65 72 3a 6e 28 33 35 36 39 35 29 2e 4c 2c 6e 61 6d 65 3a 6e 28 35 36 32 39 33 29 2e 4f 2e 43 52 49 54 45 4f 7d 2c 66 61 63 65 62 6f 6f 6b 3a 7b Data Ascii: 1D5Ai,t)},onTimeout:function(){return r.onTimeout(i)}}}).sendXhr()}}(n(1220).d),t.g=void 0},81632:function(e,t,n){"use strict";t.d=void 0,t.d={adfox:{adapter:n(72785).V,name:n(56293).O.ADFOX},criteo:{adapter:n(35695).L,name:n(56293).O.CRITEO},facebook:{

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49760	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:44 UTC	930	OUT	GET /file/MRaZr89OCD5Qq9z9INWqGZsk0QSCS36uQSIbQJrq-YdzjVbiaMkbpeXSl1tcB8ZOu5KUs8WzGcfEXddbIVY78z_o8V0IxYibiI4BQsVCubSLMz_lP7idln0bE9i4LU0cr-irveRblfIb2UsB_mN-LI087zClUs3TsB41pQ-pQjAuG9DOmSM9WJDISYjfHg-P2VQOWNeOzARqN_JEa9FzI3lf0xVBuRxjgqwm2ZSf-JgZE5vXLDKKYw2nq41qEvh3ltHN9c_9kF9mUtaVqBhU01z7Ipud_44CPBNBH4BMYOWsZzxLMtqUmCN_GfmitAifPzbWiYtNo8envAOO5HmUUg.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:44 UTC	686	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 153534 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:11 GMT Cache-Control: public,max-age=7200 ETag: "085cb2f265f807e74f20baa46d991edfe61eba93" Content-Type: image/jpeg Age: 813 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:44 UTC	704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c0 00 11 08 02 16 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 03 02 00 01 09 ff c4 00 4b 10 00 01 03 03 03 02 04 04 04 05 01 07 03 02 01 0d 01 02 03 04 00 05 11 06 12 21 07 31 13 22 41 51 14 61 71 81 08 32 91 a1 15 23 Data Ascii: JFIFHHCC "K!1"AQaq2#
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: e6 41 56 f0 54 06 36 9e 01 c7 39 a6 27 49 6f 57 29 e9 79 b0 f0 dd 11 a5 38 82 47 2a c7 38 fd 3f b5 29 a3 5e 45 de 32 91 e0 6c 5a 3b 90 72 29 d3 d0 28 08 4c a9 ef ad 19 29 60 a7 93 c7 23 07 f6 cd 67 f8 e0 58 f8 74 8d 20 c9 1d e9 b0 d5 e0 e6 4e 74 6b 2b 56 bd 71 80 59 90 a1 f9 7b fb d0 8b ba 9c 59 27 43 9e b8 ad 5c 11 15 d0 b5 46 78 02 87 07 62 92 08 23 b1 3e 95 f9 74 42 2d 57 b9 36 e4 28 98 e1 c3 e1 2c fb 1f 30 fe f8 fb 50 a6 a3 74 67 e1 dc 27 24 f2 47 7f ad 65 b8 7d b2 c3 2a bc 7b 0e 62 95 48 58 90 d9 ad 53 d3 c9 9a 13 a9 56 94 09 5a 6a c2 cd dc 24 fc 4c 13 0d ad c1 39 e1 69 ca 7c c9 23 1f 4a 55 f5 1f f8 35 8b a8 f2 ec 76 db 25 ae 13 2c b4 da 93 e0 a5 4d b8 4a db 0b 24 60 ed f5 c6 31 fb d2 eb 45 df ee b6 3b ad b2 e5 a7 c2 1d b8 c0 51 43 64 e0 ef 42 f2 9d Data Ascii: AVT69'IoW)y8G8?)^E2lZ;r)(L)`#gXt Ntk+VqY{Y'C\Fxb#>tB-W6(,0Ptg'$Ge}{bHXSVZj$L9i\|#JU5v%,MJ$`1E;QCdB
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: cc 6c ec bb 33 e2 de 75 f7 1f 23 1b 94 e9 ed 8f 6a cb 1d 24 ea 05 a7 49 29 46 e4 ea 50 49 27 27 3e d4 c3 9b f8 89 b6 07 42 21 ff 00 30 7a 1d 87 15 d9 78 77 fc 6d bd b2 c8 0a 86 23 72 48 ce 7f 5a c4 71 39 84 97 6f a3 24 67 6a 64 df f4 5d aa e4 e8 91 26 37 9c 91 95 a1 44 2b f5 aa f8 5a 5a dc e4 c9 b6 a5 07 0c 37 9a 0b 69 2a 5e 7d 06 e1 9f ad 0a db 3a d7 1a e4 a4 b2 fa 76 a5 7c 03 b0 f7 fb 51 84 0b 9e e9 b6 db 8b 89 f0 a3 29 4a 69 c5 2f 8c 64 1c 71 f5 c5 59 2a 70 59 19 6e 24 f0 f5 03 90 4e 9c d2 f5 32 93 a5 41 de 82 b5 07 45 e2 db e3 48 91 68 0e 6e 3c a5 1b b2 33 53 f4 3e 8b 6e 0c 76 a2 b0 85 37 39 69 57 c6 4b 41 e5 a4 9c 9d a0 fb 9e 07 de ac 3a 95 d4 68 91 e1 1b 1e 9d 9a 87 2f 73 08 46 1b 1b 8b 0d e7 2a 59 f4 fc b9 c5 7d d3 fd 59 61 b7 44 6e c5 1a 4b ee 4a Data Ascii: l3u#j$I)FPI''>B!0zxwm#rHZq9o$gjd]&7D+ZZ7i^}:v\|Q)Ji/dqYpYn$N2AEHhn<3S>nv79iWKA:h/sF*Y}YaDnKJ
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 9b 87 86 c3 cb 25 b2 47 3d cd 5c c6 8f f1 a9 55 a1 6b 49 74 85 7c 1b 8e 1c 14 ac 73 b7 3e c4 66 81 93 8c 5c 48 98 8d 14 83 cb f8 e7 55 a4 23 98 38 ac 15 d4 2d 05 af a0 5e 1d 7a fd 17 c4 4b 84 17 26 30 7c 44 f6 e3 04 76 f6 c5 7d a0 62 a7 46 eb 2b 24 eb a4 55 ad 25 4a 3e 34 8c 90 95 29 25 23 83 c0 ef 5b 8d fb 44 85 93 0e 7c 44 a5 c4 79 48 20 73 fd e8 6f 58 74 c6 0d f2 ce f3 17 08 80 02 06 0a 70 97 11 cf 04 2a 9f 70 cf 88 de da 44 7b a8 88 55 23 90 db 6e e3 d3 d2 ad 95 9d 94 a8 a9 28 66 d5 a9 05 b5 77 10 87 5a 5f a6 78 cf a5 21 bf 15 3a 7e 25 b9 e8 ee 5b b6 a1 b5 04 0d a0 fb 71 47 96 06 a5 e9 96 0d b2 f8 a5 a5 11 94 7c 09 84 79 5c 4f 71 cf 60 7d 08 a4 0f 58 b5 24 cb ed fd c6 de 7b c6 88 d6 36 1f d2 ba ad f5 cc 5c 41 63 be b3 90 32 30 c1 c1 df be 08 fe 6a 5c Data Ascii: %G=\UkIt\|s>f\HU#8-^zK&0\|Dv}bF+$U%J>4)%#[D\|DyH soXtp*pD{U#n(fwZ_x!:~%[qG\|y\Oq`}X${6\Ac20j\
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: ed f3 c5 34 bb f8 66 fa c1 75 bb 29 cf 4c ef fa 50 42 68 df 6a 09 ca 82 ca 57 c7 c8 f1 5e e2 a1 95 cb 69 12 ca 83 25 60 2c a7 be 2a c9 d0 c3 e7 fd e1 69 40 cf 07 1c d4 09 50 56 ce f7 59 21 e6 46 30 a4 9e df 5a 42 e8 c8 74 38 c1 a9 69 db 22 9e dd 3e 5f 4f f4 b4 89 cf 59 25 49 55 d6 4c 32 db 0a 75 cd c5 b2 0a 56 a0 9c 01 df 6f cf b5 67 ae b4 4f 97 d4 8d 69 71 b8 c1 86 b9 0b b5 db da 54 e7 d9 68 e4 a7 38 0e 2f 1e c5 49 49 34 4b a0 6c 97 3b ee aa b7 43 b2 04 99 ee bd b9 b2 bc ed 48 48 2a 25 47 db 00 d3 e7 a4 3d 1d b9 69 7d 5f ae 25 ea f4 30 fa 2e b1 9b 8e 85 34 72 da d2 a1 95 00 3d b9 1f a5 3f e0 16 ef 0e 7c 69 4e 87 f2 82 c7 6c f3 db a6 7f 6a 21 24 d4 9a 80 dc 76 ac 5d a6 61 04 c7 78 04 12 49 e6 9b 3d 2b be 26 cf 77 95 09 fc 06 e5 47 56 dc 8e ca 4e 0f f6 06 Data Ascii: 4fu)LPBhjW^i%`,i@PVY!F0ZBt8i">_OY%IUL2uVogOiqTh8/II4Kl;CHH%G=i}_%0.4r=?\|iNlj!$v]axI=+&wGVN
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 67 e2 78 33 1c 9a 92 4a 96 c7 42 0f 2d 19 ca 75 58 39 aa 69 2b 57 3c f7 a6 2e 9d d0 77 1d 47 6f 65 d5 c6 75 a5 b8 0f 24 63 1c d1 3b 5d 03 79 fd a6 44 95 20 1e e0 62 bd b2 e0 97 d7 40 b2 21 03 d7 6f d6 8b 17 b0 21 19 35 9e e7 3d 20 32 53 10 94 b8 7b 29 27 9a b9 d3 2f ea c8 b1 b7 3a 99 12 61 8c 92 a5 23 3c 7d 6b 4b 58 ba 17 63 b7 2d 0f 4c 6d c9 2b 1f ea 5f 14 7c 34 85 bc 5b d5 1a 34 20 96 b1 80 52 2b 5d 17 c2 e9 24 7a 6e 58 0f a1 fc ea 17 1c 56 07 20 24 79 1e b5 9e 34 6e b2 83 3a e0 d5 8a 33 4e 9b 84 91 e7 18 c0 1c 67 bf a7 6a 66 5d ac 17 54 30 db 22 2b ca 42 46 5b 0d a7 70 cf b9 c5 52 1e 99 3f a6 75 cb 57 58 30 9e 54 65 1c 1d a9 24 82 53 8a 79 69 a9 2f b5 2c 2a 6a 7c 36 92 31 e6 4e 08 e3 da b9 f7 12 f8 4a da 1b a2 ba 88 3c c1 c8 22 8c 82 1b 7b a8 89 5d ab Data Ascii: gx3JB-uX9i+W<.wGoeu$c;]yD b@!o!5= 2S{)'/:a#<}kKXc-Lm+_\|4[4 R+]$znXV $y4n:3Ngjf]T0"+BF[pR?uWX0Te$Syi/,*j\|61NJ<"{]
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 4f 9b 3d c8 04 01 f3 a5 f6 56 d7 1c 42 75 98 6c aa 73 9e f8 de 8e b4 80 31 25 fb 50 26 90 fc 2f c8 b7 db 8c cd 7b 79 b7 d8 ec d0 d4 55 73 75 b9 01 c7 11 ce 76 ee 4e 52 09 24 0c 77 ed 43 7d 4c ea f6 96 b1 da da d2 7d 0f 80 b3 12 1c 80 f1 b9 29 6a de f2 c7 f5 29 44 8c f2 4d 56 eb ed 79 75 d6 76 76 74 be 9a 4b 96 9e 9e c5 09 28 6d 47 74 89 ae f0 a5 38 e2 8f 27 f9 9b 88 f9 50 1d be d8 cc 56 5d 8e 84 ed 69 04 77 1c 9f bd 6e e3 54 2e 3c 43 92 7f bb ff 00 14 49 9a 38 4e 98 f9 d3 73 f0 f7 16 5d cb f8 a4 ab 9d c4 19 d2 d9 52 53 11 b6 80 41 c2 b3 92 71 92 70 33 de 9b 88 d3 ef a1 7b 80 c1 c9 24 83 c9 15 99 b4 f6 ac 93 a6 a4 b8 bb 1a 83 72 12 30 95 ed ce d3 ff 00 e1 4e dd 1b d6 b8 77 26 9b 8f 7e 65 51 e6 a5 27 c4 75 b4 e5 0a f9 e3 bd 21 f8 a2 d2 da e4 c4 f0 ae 08 18 Data Ascii: O=VBuls1%P&/{yUsuvNR$wC}L})j)DMVyuvvtK(mGt8'PV]iwnT.<CI8Ns]RSAqp3{$r0Nw&~eQ'u!
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 0d 65 2e 60 6e c6 3d 0d 57 6a cd e0 a8 27 38 a1 b2 41 af df 1d cd a0 38 12 ac 0e 4e 2a 1b cd a0 2c 38 a4 8d c3 b1 15 2b 94 60 1e 2b ca 9b de 95 0c 70 68 c5 d8 ed 5e 33 31 eb 5b 36 1d e6 1d f2 12 5d 8c f4 77 c3 83 f3 a1 38 a8 f3 a0 bf 70 61 11 26 b6 87 a1 37 f9 06 3f f9 ee 69 65 a5 e4 7f 09 9e bd 3a 1d 11 ee 9b 43 91 9b 58 fc e9 c6 ef ed 4c c8 17 09 ac b0 91 74 67 c0 50 e1 59 ed de b1 bf 10 f0 9e 3d c2 ae 0d e4 8c 5b 24 8d 43 3b 60 f2 38 1b 7a 53 f3 34 3a bc 30 72 31 9f 95 00 75 2a 4c 1d 2b a6 15 12 2a 43 32 a6 ff 00 29 a0 93 92 12 0e 56 7f 43 8f bd 22 1c b9 b4 a4 28 30 37 1e db 89 e3 34 5b d7 89 d7 27 b5 1a 8a db 57 f0 b6 9b 6d 31 dc 4a 7c b9 20 15 02 7d 0e ec f7 f9 52 a6 34 bd 8d 14 ee 19 de 49 1f fc fa 56 e3 84 5e de cb c3 91 e7 94 c8 c7 7c 93 9c 67 a7 Data Ascii: e.`n=Wj'8A8N,8+`+ph^31[6]w8pa&7?ie:CXLtgPY=[$C;`8zS4:0r1uL+*C2)VC"(074['Wm1J\| }R4IV^\|g
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 09 3d f3 57 b0 ba 65 a8 55 68 7a f1 38 38 c7 90 ab 07 bf 7a d1 96 2e 9b da ed 53 9a d9 05 0d 80 4f 98 d4 de ad dc a0 69 6d 0f 3d c7 9c 6d ac 36 12 90 a3 dc 92 05 0b c4 78 4c 56 aa a6 39 75 ed bd 1f 00 d6 84 c9 d2 b1 14 4b 23 d7 1b 82 dd 9c 14 63 b4 a3 b9 58 e0 e2 a7 ea 8e a1 ca 4d ac d8 ed 85 b4 45 03 69 21 3c 9e 73 45 da 6e eb 6c 9d a4 25 aa 42 d0 87 d5 bc f7 e7 f3 52 42 e2 d9 55 c1 f0 c9 dc 37 1c 73 59 81 6e 25 9b 5c 9c 87 2a a5 db c3 40 10 f3 a8 bb 0b 84 95 f9 89 e4 9a 23 d0 36 44 dc b5 75 b5 b4 33 e2 80 b2 a5 8f 96 d3 55 1f 04 fb 28 4a dd 69 49 42 8e 01 c7 7a d1 1d 0f d0 ff 00 05 15 17 99 ac 29 0f bb bb 6e ef 41 c8 15 b0 e0 36 8f 7b 7a ba 7f 0a ee 7e 5d 29 74 ad a5 71 d4 d3 7e dd 05 a8 91 19 6d a6 92 80 94 f6 02 a6 01 93 81 c9 af 78 ae d0 c0 12 9b 24 Data Ascii: =WeUhz88z.SOim=m6xLV9uK#cXMEi!<sEnl%BRBU7sYn%\*@#6Du3U(JiIBz)nA6{z~])tq~mx$
2024-09-20 22:48:44 UTC	1390	IN	Data Raw: 34 da 47 d4 7a 0a fa 64 ab 9c 5b 1d bd 4e ef 6e 34 90 a5 94 e7 38 1b 88 4e 7d b2 39 ae 02 dd 79 95 a2 db 78 45 79 fb 7c 89 5b 57 24 37 94 a0 25 40 01 9f fa 89 a2 17 27 22 f5 1a 3d a5 88 aa 75 6c a5 29 f1 4f 01 29 48 fd cf 15 8d e2 57 ab 32 e0 ec a2 95 68 0a 84 9e b5 4b 63 86 dc 89 08 2b e7 3d c5 14 49 7e 0d b1 4b 6d e5 02 f8 68 ac 30 01 2b 57 1c 7d 89 c5 0a dd 75 dd 8f 48 a9 71 22 2d 0f 5d 58 db 95 04 78 88 4a bb e0 9e dd aa 4f ff 00 5c a3 16 e2 5e 3f 87 35 78 d5 ed e5 11 4b f1 92 88 d1 d3 9c 02 a4 a7 05 c5 63 b6 78 19 f9 52 5b 5e 18 d7 8c 26 98 e9 4e 83 bf af b5 4e c9 ed 61 7d 53 9e 5d 3f 6f 7a 62 69 5e 97 29 2f 9d 47 d4 c9 1e 2c 25 21 2b 85 65 49 f0 97 20 91 c0 50 ee 94 82 7d 7b ed cf ad 00 75 7f 5d 5c af b7 75 d9 67 36 dc 4b 7c 02 94 b7 01 a1 86 9b 18 Data Ascii: 4Gzd[Nn48N}9yxEy\|[W$7%@'"=ul)O)HW2hKc+=I~Kmh0+W}uHq"-]XxJO\^?5xKcxR[^&NNa}S]?ozbi^)/G,%!+eI P}{u]\ug6K\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49752	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:45 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-20 22:48:45 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=64660 Date: Fri, 20 Sep 2024 22:48:45 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49766	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:45 UTC	930	OUT	GET /file/JitwEocrGUIsjF7lIVjj81yr99dSOamCXttyW3h-_YJH6F1KYV6qX3iEpHS1nPcEz03nUgOqM9XNa9FbMUsIldglc_Qd9dDVe-Eh9K4cJMOY0AQB78C7CvcLX1boV-UWvh7bEYn87eEeCJM74wYIecz1VUC0dvUSsobArVa0tGYZWpy6eQLxELg5heZS6J_caSMAPmS2xCwwdiCblU0NbmbXanM9fi1RYPQOksZVCklr1QcQz-YHEHNnN8xA7JwcZjCbsWxPZenPnNKQCr5Om6muF5s6PeHKRz7rFNa_Y9N0a6V2-o9ap0ve1s0WFFa_W2TKh266_aX8cFNo1ovPNA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:45 UTC	685	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 92510 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "650674f6a6faf657c581390a60cd12d6db8126ac" Content-Type: image/jpeg Age: 815 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:45 UTC	705	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:45 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference V
2024-09-20 22:48:45 UTC	1390	IN	Data Raw: c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 Data Ascii: /050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIO
2024-09-20 22:48:45 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 04 00 02 03 05 06 07 01 08 09 ff c4 00 4a 11 00 01 03 02 04 03 04 07 04 07 07 02 05 05 01 00 01 00 02 03 04 11 05 12 21 31 06 13 41 22 51 61 71 14 32 81 91 b1 c1 d1 07 a1 d2 f0 23 42 62 72 92 b2 e1 15 16 33 34 52 82 f1 24 63 17 25 43 44 c2 35 53 73 93 a2 54 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ae e8 a2 8a a7 5f 3d a2 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 Data Ascii: J!1A"Qaq2#Bbr34R$c%CD5SsT?_=((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((
2024-09-20 22:48:45 UTC	1390	IN	Data Raw: 56 e3 7a b6 22 c1 dc d3 80 f9 04 90 aa 6e 76 f7 a2 99 f6 7d c5 32 7a b4 84 ff 00 b9 9f 8d 30 51 50 0e 6a a6 5b 51 06 3a f8 c7 ed 0a f5 1b 54 47 90 16 a5 36 59 4a 33 f3 2d 63 04 fa 0a 69 95 83 aa 94 7d 9c f1 61 39 45 19 fe 26 7e 35 3b 45 40 a3 55 46 53 a8 42 9a 5e 14 47 28 20 e2 9c ec 16 a8 fa 8e 39 76 0d c1 08 52 7e f3 4e a3 6a d3 ef 8c f6 a9 1a 43 85 c2 89 ff 00 67 bc 53 1f ad 46 7d ec fc 4a 2a 8a 76 77 a7 32 1b 82 25 26 73 4e 67 f6 12 83 9c e3 38 aa c9 fb ea 58 72 42 1d 8c b4 78 44 a7 e6 50 1b 88 3d ab de 97 5e 33 ec ff 00 8a 24 be 5a 42 6d e2 df c4 a5 e8 a5 47 b5 c3 0c 85 13 11 67 03 38 de 39 15 07 2f ab 91 61 ba 10 bb 63 e7 23 39 f1 07 f2 af 58 33 fa a8 1a ae 0d c7 e8 c5 e7 a6 2d f6 b7 e4 e5 63 d1 55 f3 1d 56 86 f9 1f da 0f 24 11 9c f8 83 f9 56 d7 fb Data Ascii: Vz"nv}2z0QPj[Q:TG6YJ3-ci}a9E&~5;E@UFSB^G( 9vR~NjCgSF}J*vw2%&sNg8XrBxDP=^3$ZBmGg89/ac#9X3-cUV$V
2024-09-20 22:48:45 UTC	1390	IN	Data Raw: bf 69 0a c7 f1 1e d5 93 4e 5c 2c b7 cd 2a f5 f2 5d d5 36 f5 b4 f2 99 f8 35 36 16 ea 88 48 20 a7 e6 19 07 38 a8 a6 70 a7 6e 69 34 1f 9e eb aa e9 78 4b 1d 84 5d f4 e7 de d3 f0 25 7a a2 96 5e d6 91 9b 90 b6 db 8b 20 a1 27 85 38 02 0f d7 1c d4 25 c3 aa 91 ed f2 96 c2 ed ae ac a7 b2 92 e8 c2 87 a8 e2 9e d0 5f b2 92 5e 0e c7 e0 68 74 94 c4 03 e2 df c4 ac 1a 2a 1b 4c 6a 26 b5 3d af e3 98 65 4c 27 c4 53 7b 14 ac 9c 8f fe b5 33 5e 11 63 65 95 9a 19 29 e4 74 52 0b 39 a6 c4 78 a2 8a 28 a4 a2 45 14 51 49 24 56 68 b2 4c 39 2c c9 4e 72 cb 89 70 63 d8 e7 fa ab 0d 78 78 e1 97 0f a2 4f f0 a6 b8 d8 5d 1b 40 01 ac 84 1f f5 b3 f9 9a ac 49 bd 4b 6b 50 c4 53 77 5d be 19 49 42 92 b1 92 a1 f9 fb d5 31 a9 95 0d f9 0e 1b 73 6b 43 40 91 b5 5f 8f a5 60 54 c7 0a 08 cf 96 72 2b 45 c7 Data Ascii: iN\,]656H 8pni4xK]%z^ '8%_^htLj&=eL'S{3^ce)tR9x(EQI$VhL9,NrpcxxO]@IKkPSw]IB1skC@_`Tr+E
2024-09-20 22:48:45 UTC	1390	IN	Data Raw: 51 7d c2 db 3b 8e 11 bc f3 df 93 cf bd 2b ce 9e b9 73 14 e4 a7 56 e1 cf 18 f3 a8 89 4f 6d 73 71 24 73 9c 1f 4a 02 59 f4 ca d5 04 11 c3 87 82 e6 0d 7b d5 a7 a0 b5 4a da 9a 88 8a 65 0e a7 3c 2f 1f 3a 47 1e 79 ed 56 6d c2 24 5b bc 45 b7 29 94 ba db 80 fc ae 20 1c 64 79 57 30 c1 bd b9 0a 5a 1f 88 b5 34 a4 11 c8 24 67 d8 fb 57 42 e8 4d 5b 0f 52 41 01 e2 84 4a 6c 00 b6 c9 1c f0 39 1c f6 a9 21 25 c2 e7 74 35 4d 53 24 3c c6 ee ab 5d 53 d2 e7 e3 b8 a7 6c ca de c2 d5 cb 6a 3f 74 fa 9c 0e c2 aa bb 9d aa 65 a2 62 84 98 fb 40 3c 82 93 b5 43 3e 5e a2 ba ea 56 c4 4a 29 42 d2 77 0e 72 78 03 d2 a0 af d6 2b 4d ce 23 a9 b8 30 da c1 49 c2 c2 46 e4 9f 63 44 35 8c 25 66 aa cc 73 8b b8 5b c4 2e 63 31 50 f4 55 4a b5 a9 41 6d a4 f8 f1 d5 c9 03 cd 49 f5 15 e1 9b a0 5a 10 12 42 48 Data Ascii: Q};+sVOmsq$sJY{Je</:GyVm$[E) dyW0Z4$gWBM[RAJl9!%t5MS$<]Slj?teb@<C>^VJ)Bwrx+M#0IFcD5%fs[.c1PUJAmIZBH
2024-09-20 22:48:45 UTC	1390	IN	Data Raw: 33 85 5b 73 db 03 9a 74 be a8 58 fc 30 81 23 ae 9b ec 5b 50 b6 ca 93 b8 23 0a 50 fc bb d3 6b cf 2a ff 00 21 a8 f6 98 69 f1 90 9d cb 2d a3 3b 50 3b 93 8f 21 48 f6 ab 97 c2 25 d0 84 a5 61 43 68 2a fa f7 15 62 f4 9a fe 2d 3a 82 64 a7 92 a0 c7 c2 29 0e ad 2d 92 94 85 a9 23 2a 20 8c 0e fd f2 33 8c 83 41 3e 5e 5c 66 db ae a7 0d 70 86 8f b0 75 4e 16 6e 90 8b dd a6 cf 2e 34 4b b3 8a 9c e2 d0 eb eb 7d 0d b6 ce d1 ca 8f c8 7c ff 00 67 93 81 e5 55 b6 a4 b0 48 d2 97 f9 56 c9 4e 37 21 c6 c9 52 16 c2 f7 02 32 47 3e 87 8e 45 5f 1a 8f a8 77 0b 8c 78 c9 d1 b3 ac d1 12 ca 94 a4 96 26 ad 85 9c a0 a5 65 6d 0f 94 ac f7 ca 4f 26 a8 1d 50 5d 8d 79 1e 34 95 bf 21 f6 7c 57 1c 52 b2 49 5a 89 23 3e 7f d7 55 2c 15 0f 05 d2 e8 3b ba a0 a8 71 07 49 50 01 76 eb eb 0f 04 a3 b9 3c 63 bf Data Ascii: 3[stX0#[P#Pk!i-;P;!H%aChb-:d)-#* 3A>^\fpuNn.4K}\|gUHVN7!R2G>E_wx&emO&P]y4!\|WRIZ#>U,;qIPv<c
2024-09-20 22:48:45 UTC	1390	IN	Data Raw: 53 98 27 81 e5 58 5c ba f8 4b 5f cc 0a 79 f3 a8 b9 17 04 39 b8 8e ff 00 5a b3 86 07 03 75 80 c4 71 78 5e d2 03 b5 5f 67 ca 1c f2 30 05 2e 29 5b dc 52 89 ee 6b 2c b9 5e 2a 8a 50 78 f3 ac 00 55 cc 6c c8 17 2f af ab f4 a9 6e 36 0b 20 20 76 ac a9 72 b0 62 bd 24 12 78 e2 a5 41 b5 e4 6c b7 98 ca 8f 15 62 74 8a c0 75 16 bd b3 c7 50 fd 44 77 91 25 f2 47 01 08 50 27 fa aa b5 69 6a 41 1c 57 4b 74 a6 d6 ee 87 d1 f2 35 04 86 9a 4d c6 e6 82 86 d6 e6 32 cb 05 20 83 83 83 bb bf b7 6a 0a b2 5e 54 24 8d ce 81 3a a6 52 20 2c 6e ee d3 ea a3 be d2 ba a1 37 19 bf 08 d2 80 53 6b 0c 00 0f fc 1a 37 7e ec 91 ed c5 26 74 4b 57 b9 66 bb fe 8c 7d e2 88 f2 96 0b 18 56 36 bf c0 1f 98 18 a5 0d 75 7e 55 fa ff 00 21 ed ca 5b 6d 12 da 0a 8f 2a c2 8e 49 f7 24 d4 15 aa 4a e3 4a 4b 8d 2b 63 Data Ascii: S'X\K_y9Zuqx^_g0.)[Rk,^PxUl/n6 vrb$xAlbtuPDw%GP'ijAWKt5M2 j^T$:R ,n7Sk7~&tKWf}V6u~U![mI$JJK+c
2024-09-20 22:48:45 UTC	1390	IN	Data Raw: 64 36 a6 c4 b4 a8 69 96 9c 60 23 0c 06 10 d4 16 d6 9e 37 95 2d 21 79 04 92 85 83 9f 45 df b4 fd a1 de bb 7d 96 b4 a7 50 ec d0 e1 49 ba db e3 c7 bb cc 31 b2 e2 99 61 6c 94 cb 65 04 64 e1 0e 6d 2b 04 f0 18 56 79 4d 58 86 06 8d 16 0a 6a c9 66 7d a4 3a 5d 7e 72 9e 2a f1 e8 c7 d9 6b 5f 75 5d f8 d7 16 6c ab b6 69 d2 12 ea 67 dc f7 47 6a 4a 78 20 37 94 95 2d 24 1f bc 94 94 f0 79 cd 46 fd 98 7a 60 9e ac f5 8e c7 68 96 da 1e b4 c1 57 e9 2b 9b 6e 27 72 5c 8c d2 92 4b 64 7a 2d 4a 42 0f b2 cd 76 07 da 8f a9 dd 4e d2 f3 d9 d0 bd 11 d3 77 58 16 48 50 58 4b 93 ed 16 47 54 52 76 a8 06 19 5a 01 42 1b 4a 0b 7f 70 05 02 08 04 01 82 c7 0e cd bb fb 94 12 3f f5 42 a7 fa d5 d0 be ab e8 1b 02 1f 89 6a 62 f1 65 61 b0 85 1b 12 9c 7c 47 40 49 e5 6d 6d 4a f6 80 32 55 b4 a4 79 9a e4 Data Ascii: d6i`#7-!yE}PI1aledm+VyMXjf}:]~r*k_u]ligGjJx 7-$yFz`hW+n'r\Kdz-JBvNwXHPXKGTRvZBJp?Bjbea\|G@ImmJ2Uy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49765	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:45 UTC	930	OUT	GET /file/rkk8WbtOH5kDN2Bvh89DE_-q7p6ydKIypCA8qrMoOqnzWuwss2N-4z7JZG8Isbr6ditAmqyfNXwvxeK_2KrdtV6D3-ex5jk64o7V6OPM94oIlbQGJ7hvbexd-6T-UWP_dZI9laui89-InBxC8i1BOjgwXy9o-5877cfMOYnFuqWMSrcLEmuUnE-TUnbvwybZDVJFUsjpvdmaWH7v4hkhcVImSq8bKofyeoaPhl9gH5O28uw9fFlcuMNxWsFOV4ulnqwIQ4coLZR2jr13R24M23Qp1EOW699OASic2AiATScyldwQ1RogzDMI-mCJVh2Rm3qGwbrQFNHwHIqvVaUqgQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:46 UTC	675	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:45 GMT Content-Type: image/jpeg Content-Length: 61826 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "b7de847c9cd415bde109691749f46aacd00472f5" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:46 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c2 00 11 08 01 90 02 94 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 00 08 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 b5 46 e0 4c 8d Data Ascii: JFIFHHCC"FL
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: 19 a1 55 0f 4f 8a 2e 8c 96 48 2f f1 a9 74 4c e3 5f cc 33 c4 8c f7 9b dc d2 9d d6 da a3 af 4a e9 32 6a 91 2e 03 17 ed e7 d9 3a b7 4a 84 5e fd a0 52 9c 8c 33 09 8c 5d a7 16 02 79 7b 4f 25 0f 48 22 bd 72 1d 9f 49 6b 2f 3c a3 6f 70 3a f8 56 62 f9 89 a1 b9 e1 3c df 0c e0 2d 75 b4 eb 0a 44 00 22 a8 84 42 17 b8 96 3e 8c 5b a4 c3 94 99 b6 68 69 f1 d6 d6 66 f3 9e 2c 61 cb ee 16 0e 86 4d 53 63 03 02 cd be be 2e d4 68 d1 73 cd 27 24 2c 53 75 28 48 20 39 e0 8a d1 7c 34 a1 dc 98 be b7 f3 44 db ec 58 9d 8d ea 5f 13 f0 0b 84 57 71 55 43 31 1c 39 22 c7 a9 c7 4a 66 5b 27 d4 a6 5e 2d 25 fa 95 d1 56 c8 5b 4b 54 35 1f 86 cd 77 8a 38 64 5b e2 d5 5a a4 d0 b4 9e 7d f6 95 c6 7b 12 ff 00 7c 5a de b2 d2 5e 82 9e a5 73 34 9d 16 69 1a f6 c9 88 3c 9e da 70 99 e0 9b 66 05 7c 58 51 6d Data Ascii: UO.H/tL_3J2j.:J^R3]y{O%H"rIk/<op:Vb<-uD"B>[hif,aMSc.hs'$,Su(H 9\|4DX_WqUC19"Jf['^-%V[KT5w8d[Z}{\|Z^s4i<pf\|XQm
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: e5 f4 a8 d2 59 fb 24 02 de 8e b2 35 43 99 be 9a bd 6c a3 59 f8 cc f6 74 4d d0 8f c7 24 f3 fc c7 c8 a7 42 76 80 d8 2e 09 77 25 80 da 97 54 a3 48 7b 5f 56 c4 59 b3 86 96 8c c1 f3 37 c3 f4 6c 22 14 19 b1 f1 57 e6 69 85 7b df e0 9a 73 82 61 1c 2b b2 b2 7c a5 3b ca 3c aa 56 2a a8 ec 39 cc 9d 7f 67 cd 8f 44 b3 46 f8 90 d3 b7 c5 c1 5b df 7a b4 75 cd 5f 49 17 3c a9 c4 75 89 6a 79 59 b1 7e 62 ea de 9d b8 49 03 85 d8 e2 3d 70 9b f9 3d ff 00 21 e1 22 17 1a 1a dd ba 20 aa ee 1f bc 13 52 d5 6d 81 47 28 33 26 4b c0 46 66 86 6b 7d ab e4 26 44 71 b5 e2 56 45 a6 40 5f 2b ec 67 ab 15 78 52 d1 94 f3 b6 a4 d5 be a4 33 4f 5b 8e 0f 90 5b b0 f6 63 a0 6e a5 a1 b2 a5 84 9b 79 89 3c c3 d2 ad 3b 43 c5 f7 a8 fc 8a 90 ec 67 6b cd 8b 23 b9 89 2e 2a e8 89 f4 53 74 39 91 a0 3e 79 d5 a5 Data Ascii: Y$5ClYtM$Bv.w%TH{_VY7l"Wi{sa+\|;<V9gDF[zu_I<ujyY~bI=p=!" RmG(3&KFfk}&DqVE@_+gxR3O[[cny<;Cgk#.St9>y
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: 07 7b 1e 79 14 e8 bd 0c ce 87 40 b5 2c d8 65 22 2a 6c b2 43 89 2a 56 a1 88 e3 59 18 31 46 ee f6 7a 54 d6 d3 c9 f3 d5 80 85 e0 3c d1 36 62 f0 b9 51 65 ef 2e 1f d0 c6 8b 21 41 d4 67 7d 42 20 1c fd 98 fa 78 b4 b0 df 94 50 c8 99 49 8d 5a 30 f8 9a e0 1b f6 85 3a 57 25 30 ed 99 02 d4 15 04 4f 1e f3 f3 91 0d c0 01 d0 b0 da 08 ac 17 1d 4e 07 97 b4 88 ab a2 66 ee fd ab 9d b6 85 52 57 6e 90 cf 3e d8 f1 df 4b 11 6e ac 17 34 f4 04 e6 18 54 b8 71 f7 00 03 ec 91 2e 6e d7 3b 5a dd 32 9f a0 03 40 a8 07 1c de 3d 24 9c 2d cd 60 eb 6c 59 24 e7 f4 1a 5f d9 cf d2 57 3c 57 4a 46 53 e6 f0 48 4f a2 18 75 82 27 03 61 7a cc ee 0a d3 df 22 e6 eb c3 f4 74 de 1a c4 3e 9c f3 fd 99 8a d7 e8 5c 79 99 ad 8a b9 ad 95 96 22 bc b9 10 e1 93 bd 11 b5 68 39 d6 a5 04 5f 2c 4a cd 98 ed 13 4f ea Data Ascii: {y@,e"lCVY1FzT<6bQe.!Ag}B xPIZ0:W%0ONfRWn>Kn4Tq.n;Z2@=$-`lY$_W<WJFSHOu'az"t>\y"h9_,JO
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: 92 85 b2 cc e5 81 1e 5f 57 a1 95 d5 72 7d 72 f6 9d 93 53 d7 c7 9b 42 59 b5 7f 33 a8 7e 5a da b1 82 af c5 da 4c 6c d6 02 57 7c 0f 52 b0 46 84 5f 5d 54 70 60 42 f9 3c a4 a4 3f ae e4 63 46 7d 9f a2 b7 5a 41 da 59 cd 2e d8 81 f7 bc 66 cb 8c 36 e7 b4 d7 fb ea bf 77 7e cc 9d 4a ab 18 ef 50 a8 d5 9e 79 f9 2f e8 e7 58 91 6b c4 e8 11 a4 f5 1c e3 ca a2 af 4b d8 01 4c d5 eb 66 40 5e 8b b8 d6 aa 0b 33 45 72 55 97 b3 d7 da 6c 35 de ce 52 2a cf 63 b9 62 9b e8 f8 94 42 0c d6 05 5c af 47 ee ca 12 3a 63 62 17 94 55 5d 1d 79 92 26 c4 d1 f3 a5 cd 45 e9 23 92 f6 c9 6c 72 f9 65 df cd 02 6e d0 f1 40 3b 25 48 80 e6 79 6d 56 d4 61 b9 42 84 1e 20 ef 71 41 52 5a 14 ac 9d 5e 3d 15 6c 35 82 0e 53 d4 aa aa 44 1e 4f d4 45 52 32 d9 b5 e7 42 c8 75 64 7f 3a 1a b1 a7 03 d4 a2 31 36 db b7 Data Ascii: _Wr}rSBY3~ZLlW\|RF_]Tp`B<?cF}ZAY.f6w~JPy/XkKLf@^3ErUl5R*cbB\G:cbU]y&E#lren@;%HymVaB qARZ^=l5SDOER2Bud:16
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: a6 97 36 68 ee 83 b3 2f 5f 53 c6 2f ea 71 a3 d9 0d 75 51 a3 d8 ea 1e 8e a0 dc 18 33 a9 99 7e 46 15 54 3c 89 d7 af bf cb 49 fd 9d ce e7 94 f2 99 7e ef 25 7d 2e bf 63 8d 8c 8d 85 fe 9e af b4 37 cc f1 0d f8 d0 c3 fa a7 9f d9 9c 71 c2 fc af 3e 3b 6d e4 c1 43 54 9a 1a 95 3c bb 87 53 55 fd f7 33 5f e3 ff 00 c3 8c ae ef 30 ff 00 62 c3 ea 86 35 7f 8e 84 f5 39 31 ea 03 3c 4f 0e af a4 9f 95 58 79 47 e6 9c 41 08 cd 01 e3 3d 9f 5c 8b 2f e4 06 d1 74 67 62 69 d5 75 18 55 e3 85 fe 24 a3 82 73 ce 51 77 74 3e 57 6a 1b 8e 01 eb 77 42 d3 3b 2b c8 bf b6 0c f1 82 33 8f 3f 1b 59 f9 54 71 f8 8e 82 f2 29 50 6e 2e 14 c3 5f 46 cf 01 df b0 9f 74 bf 11 d0 1d c6 0d d7 ed e5 2a e6 3a fb c9 50 2a 5d 46 46 c6 46 fd 4b ff 00 5f c4 1c c7 c6 b1 45 97 f1 aa 29 a3 b8 da ea 34 a3 4e 65 cd ec Data Ascii: 6h/_S/quQ3~FT<I~%}.c7q>;mCT<SU3_0b591<OXyGA=\/tgbiuU$sQwt>WjwB;+3?YTq)Pn._Ft:P]FFFK_E)4Ne
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: ee b9 ee 84 c9 c4 e3 bd 9a 5c ca a6 2c fb 99 c7 b6 08 fe d6 eb 1a 77 24 41 05 ec d1 62 9f a6 23 f2 68 d2 e9 da ba 87 66 db 4e 4f 29 e8 b5 cf 19 61 2c 27 84 b0 9c b2 3c 1e 15 1a 3f 79 ea 08 c4 07 71 61 d4 1a 87 fe 6a ff 00 1e bb 33 cc a1 52 b9 0d 62 34 f6 f9 59 9f 99 71 23 e9 46 8d 82 6c a1 1a 16 17 ec 06 20 2f e4 44 2b 76 9f 79 29 e6 a9 6e b3 be 17 60 fa 79 97 5d ab b9 e5 75 2b bf 62 eb c2 27 fb 19 a3 e9 8e 0f 16 ae fe d5 fe 14 6a bd f7 c7 67 f4 02 6f c4 bf d8 f5 d1 8b 11 54 55 95 6d 2d 19 14 f0 dc ac a8 32 ae af f4 c5 8d eb d4 7d 52 cc 7d 3b df 5e 3a 1f 66 4d 98 1d 62 15 b0 ea 33 49 9d 11 46 97 ed 77 f9 77 31 e4 66 d6 e1 c0 19 11 f0 46 ef e2 d5 4c 81 e2 ca 87 f5 34 e8 a1 8f d5 e5 7c 7b 3a a3 d8 02 3a 79 0f b6 ee b6 cf 13 b8 b5 c4 07 54 c0 ee 7a a7 aa 7a Data Ascii: \,w$Ab#hfNO)a,'<?yqaj3Rb4Yq#Fl /D+vy)n`y]u+b'jgoTUm-2}R};^:fMb3IFww1fFL4\|{::yTzz
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: ef a9 df 95 1c 5e 9a 76 1b 1a 00 28 b7 92 6d 0d 25 06 2f 53 13 bd 55 45 70 a6 4a a2 d1 a6 fc 82 d4 33 ae a1 4e fc 6c 90 14 5c 4f 26 bc a5 cb 7e a2 30 9c 57 24 1c 9a 76 2a bc 45 1d df a4 16 1b 79 6f bf 29 e5 dc 0e ee 57 f9 e5 45 32 36 bd 5a 0f b6 18 fd b0 3e bf fd 56 66 5d 03 0d 56 ad 3e 74 c4 8b 25 d3 92 be 00 02 e7 c4 ab 99 f2 a6 c3 75 8a e5 ab b9 9d 76 26 b0 bf 58 bb c6 5b fb 8e 64 c6 ce 85 8c ec 18 64 bb c7 ae ca 85 bd c2 bf c7 7f 23 d0 1d f7 19 7d d5 cf f2 5f 57 28 bb a0 2f 18 50 4f ca 5d f5 7f 89 4b e2 c2 ad 79 d6 30 15 50 56 44 45 65 6f 2e c6 d2 df 78 9f 7d b0 ab c3 2b 47 4c 63 3b 8e 3f b7 7f dd c5 ae f4 5d 66 35 93 54 55 18 cb 51 28 89 e0 59 e3 92 63 33 01 86 64 e9 34 c6 6b f3 1b 28 65 12 cf 16 5b 6e c6 ee 5d cb b8 51 07 ed 59 87 84 6d fd 7e 93 a3 Data Ascii: ^v(m%/SUEpJ3Nl\O&~0W$v*Eyo)WE26Z>Vf]V>t%uv&X[dd#}_W(/PO]Ky0PVDEeo.x}+GLc;?]f5TUQ(Yc3d4k(e[n]QYm~
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: d2 fe ce 3f 47 90 f2 60 c3 8f 03 1b ba fb 0b fc b0 ea e9 79 ba 70 67 d3 eb 8e e4 28 07 7e b6 6b 65 2f a8 1a 7d 72 f7 79 46 2a 99 60 9a e9 eb 18 9c a4 12 b3 53 ab e2 10 b7 e3 36 c7 1e 07 ed 3c 3f a6 80 21 62 e3 d4 1b d0 a0 6f 14 db 35 33 ee f0 71 a0 c5 07 1a 85 c3 52 d4 0e d3 5e 6d db 1d b7 b9 65 e7 5e cf 06 db fc a6 ea 3b a0 fc 6b ca 59 4e 07 32 fc 76 ae 86 db 7d 43 be e1 07 73 89 f5 55 af 3a f4 87 27 c7 d8 4b a9 ae be f8 32 e9 fb 35 52 75 f1 a8 9b b1 33 50 31 66 b2 ba 80 bf 38 d1 aa ac 79 3e 4b 54 85 a8 ab 3f c9 b1 c2 d6 36 f8 60 31 d3 c6 bb 35 50 f8 d7 94 a3 a9 5f e7 7f 42 53 cb e8 0e 27 53 15 79 b9 20 eb 6b 92 74 6b 4e ca 78 7c 7b a7 4f 6c c8 92 d8 fd fc 85 64 86 4e 79 50 d8 2f 53 3b 76 13 ea ce bb 1d a8 12 a7 ab c6 c4 3a 99 ab ca 71 b4 43 08 3b 8d cf Data Ascii: ?G`ypg(~ke/}ryF*`S6<?!bo53qR^me^;kYN2v}CsU:'K25Ru3P1f8y>KT?6`15P_BS'Sy ktkNx\|{OldNyP/S;v:qC;
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: a6 2e 2c 9e 45 80 05 7a b8 d3 3d 4a cb f0 f3 72 14 5b 1f c2 71 b4 cd 20 81 1a d2 aa e9 5d 54 d5 a0 00 1a c1 36 55 8d da 93 d5 02 bb 8e 09 a9 23 32 89 7c ac 61 e0 a7 b3 c0 34 dd b8 ed 5e 56 38 3c ef e2 8a c0 1d 55 39 1e ac 8e 1c cf fe f1 6b 13 6a b4 87 75 a9 6b a3 e6 73 8d 6c e7 28 a5 72 2d 22 c4 92 d0 dc a2 d9 a1 08 61 7c 05 ce 40 77 e6 12 dd ca 75 ab 5e 83 0c 48 0f 56 7c 82 c8 5c 4a 63 b2 e7 54 4a 42 ec 7a 4b 6f a6 53 b2 cb 50 86 ed 98 43 4e 2c 0d f8 7a 1a e1 0a db a6 de ff 00 28 c2 fa 00 ee 87 8d d3 70 78 dd 23 42 02 8a f9 41 dd d6 77 d3 73 fa 48 af c6 65 ee c8 39 1f c9 59 03 41 7c 11 15 1a 81 56 d2 5c 49 74 59 fd 67 2a 97 54 4b 57 7c 8b 3c 56 e6 ff 00 78 36 1e 89 57 dd 89 75 16 5d c0 fc a6 0e 33 b8 b5 50 53 2f e8 6a bc f9 57 50 66 52 ac e0 6e 0c 02 7f Data Ascii: .,Ez=Jr[q ]T6U#2\|a4^V8<U9kjuksl(r-"a\|@wu^HV\|\JcTJBzKoSPCN,z(px#BAwsHe9YA\|V\ItYg*TKW\|<Vx6Wu]3PS/jWPfRn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49767	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:46 UTC	930	OUT	GET /file/MSpszLg7U46su23KMCgH8A98mn1j0p2-6wBkxrguTs8yEhVA-oaBykeBGHnbmDgMIfkKoJwjFD22bkLCfzLXC_nZkOpn_IvNZWrn4lKleup8F9gallYy7JfpvqYPTDBOfKk_NhPPOXvBte8UjBr8p6BNiekhw_wgidfU07LtxhQxhg-yfs8gODhc8KhI3B2tedOpJt4s3gCKcD8iwg0mvt8ypGShZW-IqnTMdSM6viCBG3d1niNKp-WAIbJqf_Nqt8CF3bJxTZyy07G2fU3oAZBZC0t3aiIqapI8FAZf_TqIt9ENGUPFJdG1adRWyp65Tdcs7sWd9lUAw3udNMgwxA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:46 UTC	686	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 195183 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "77d037f038e2cad20e5c8822ff273dc1db0b179c" Content-Type: image/jpeg Age: 816 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:46 UTC	704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f Data Ascii: //050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIO
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: 1c 01 01 00 01 05 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 3e 11 00 02 02 01 02 03 03 08 09 03 05 01 00 03 01 00 00 01 02 11 03 04 21 12 31 41 05 51 61 06 13 22 71 72 81 91 b1 14 16 32 34 35 52 a1 d1 f0 42 c1 d2 15 23 62 e1 f1 33 53 54 82 a2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 92 cb d2 7b 4d e7 6a 5b 37 af 49 ad b1 5b b7 5d 96 92 9f ed 9b 14 94 71 bb f8 86 21 99 16 36 05 5b 92 92 c0 60 ac 8a 7b 79 b2 0e 06 d4 bd 6c 8d e7 0d b1 2f 54 f6 bd b1 bc 69 98 c5 15 7c 76 a8 12 29 24 67 2c 26 01 55 63 27 bf 19 23 94 14 60 58 c7 86 3c 4f 46 db 36 7f ca ed dd b7 bc b6 85 bc b6 eb 8e d3 42 93 44 b5 1e 12 dc 60 11 a0 68 64 c9 e1 cb 87 75 63 82 19 13 27 88 c6 a2 1d 45 e8 4c 17 9d ca f2 d2 d3 c3 49 63 bf 06 33 c8 42 23 da ee 04 0f 0e Data Ascii: >!1AQa"qr245RB#b3ST?{Mj[7I[]q!6[`{yl/Ti\|v)$g,&Uc'#`X<OF6BD`hduc'ELIc3B#
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: 7b 83 ec bb 6a 5e 64 aa 8e 0a db 7b 89 a4 8e 48 a1 69 41 23 20 63 ca 07 6c 76 cf a1 c1 d4 ad 6b ad 91 75 4f 7a 51 d1 5a 76 e5 de e1 70 2a 89 67 fb 26 7a e5 35 51 96 12 ac 5c a3 8f 0c 0a b3 b3 12 ab e6 24 13 8e db fb 47 41 2f 75 b5 83 75 6e d8 b6 b6 d3 98 8e 09 68 4a 79 05 3d 38 1e 50 c5 a1 9d 3c cd 82 7e fb 7d ef 63 80 a0 21 e9 d7 53 f6 25 d2 34 87 6f ed ed fd 62 a7 52 31 25 0d 1c 52 c8 b8 f7 66 51 27 3f d6 fe 9e fa 9c 59 37 0f 4b 37 2d d2 dd 69 dc 9b 66 8b 6d ee 55 90 91 67 b9 5a fc 10 b2 00 71 96 e0 23 90 10 72 bc 8f af 12 00 6c 6b ce cb 70 3b 1e 5e 11 ef 3d 93 24 6a 4a a4 35 3b 82 b2 35 f5 19 01 26 a9 99 57 1d fd 01 fd 5a d0 d2 75 36 97 71 75 4a bb 6a f5 10 ed db ce d7 bb c3 1b db 1e 0a c8 6b 69 69 a4 58 fc d8 97 8a 91 cd 91 bb 30 0c 1b 88 19 04 31 12 Data Ascii: {j^d{HiA# clvkuOzQZvp*g&z5Q\$GA/uunhJy=8P<~}c!S%4obR1%RfQ'?Y7K7-ifmUgZq#rlkp;^=$jJ5;5&WZu6quJjkiiX01
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: 57 4c 47 62 a4 b3 d3 32 c6 49 c0 25 c2 bc b2 37 bf 14 24 0f 52 48 ed aa cb 70 6c 5a 2d f7 ba 97 73 f4 07 63 47 12 52 39 66 ba 49 14 30 d1 56 3f 0c 32 a5 34 ea 06 7d 54 91 81 9c e4 64 f2 d5 99 ba 36 5f 47 36 2d 7c 12 6e d8 2a 6f db 86 6f ce 45 05 4d 55 45 7d 5d 49 c1 c6 62 0d c4 83 82 01 60 17 b7 af 6d 64 58 23 ea 76 ef dc 34 a2 2a 23 d3 9e 9f 44 83 c3 a3 8e 38 12 ad e3 03 b2 81 c5 9a 36 2c 3b 8c 20 0a 7f 6c 7d 44 13 ad 9b 60 db db 8b 6d d0 dc 2e 5b 32 d5 6c af 75 68 ea e9 25 b6 c4 0c 33 a3 14 91 7e ef 71 c9 4e 0f b8 c1 f7 d7 ae e1 e9 cd 05 5d 2a 2e da b6 6d ab 5d 48 7c b4 95 56 18 ea 55 d7 07 cb 80 c9 83 9c 77 c9 fd 1a 96 d1 d7 d1 56 4b 57 1d 0d 44 33 cb 4d 2f 85 52 b1 b8 63 1c 9c 54 f1 6c 7a 1e 25 4e 0f 7c 11 ac 93 df 38 ec 7e ba 12 50 fb 83 a7 bb ca 8e Data Ascii: WLGb2I%7$RHplZ-scGR9fI0V?24}Td6_G6-\|nooEMUE}]Ib`mdX#v4#D86,; l}D`m.[2luh%3~qN]*.m]H\|VUwVKWD3M/RcTlz%N\|8~P
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: 0e cb cd 51 c9 6c 7e e9 b3 f5 d4 7e cb b2 2a 2f 1d 59 a1 dc 36 de 9a c5 61 da 55 f4 ad 0d d3 ed 18 69 03 4c 52 37 f0 a4 f9 6e ef 13 06 e2 bd bd 46 09 03 b9 36 c6 c5 d8 db 67 6b db 69 a5 db 5b 6e 2b 1c 92 c4 1d 96 68 c3 55 27 21 9e 32 48 59 98 91 9c 63 91 03 db 53 0d 01 1f 1b 13 6a ff 00 8b 56 6f f4 7c 5f d1 d3 f2 13 6a ff 00 8b 36 5f f4 74 5f d1 d4 83 4d 01 1f fc 84 da bf e2 cd 97 fd 1d 17 f4 74 fc 84 da bf e2 cd 97 fd 1d 17 f4 75 20 d3 40 47 ff 00 21 36 af f8 b3 65 ff 00 47 45 fd 1d 3f 21 36 af f8 b3 65 ff 00 47 45 fd 1d 48 34 d0 11 ff 00 c8 4d ab fe 2c d9 7f d1 d1 7f 47 4f c8 4d ab fe 2c d9 7f d1 d1 7f 47 52 0d 34 04 7f f2 13 6a ff 00 8b 36 5f f4 74 5f d1 d3 f2 13 6a ff 00 8b 36 5f f4 74 5f d1 d4 83 4d 01 1f fc 84 da bf e2 cd 97 fd 1d 17 f4 74 fc 84 da Data Ascii: Ql~~*/Y6aUiLR7nF6gki[n+hU'!2HYcSjVo\|_j6_t_Mtu @G!6eGE?!6eGEH4M,GOM,GR4j6_t_j6_t_Mt
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: 6b b4 fa 6f b3 ae 9b 27 6e 3d c3 6a d9 2a 24 7b 55 29 69 1e dd 11 72 7c 35 27 cd c7 3e ba 8f 6f 8e 9e f4 5b 6d d2 1a 9d e3 6b b4 da 90 f9 95 63 96 48 64 7e ff 00 b5 48 98 33 7a 7e d4 1f 7d 01 8f 53 d5 be 8f df 2e b2 55 9d cc 69 ea ea 23 85 26 75 a7 a9 81 65 f0 a4 12 42 cc 4c 60 72 47 ee 0e 47 a9 07 23 b6 ab 7d c5 b3 7a 7d b9 b7 85 c2 ed 64 dc d6 8a 58 eb 24 15 11 cb 05 d1 20 99 24 64 e4 4a 29 61 87 12 c6 72 59 78 f1 aa 62 31 e1 76 da 52 5b fe 1a 6b 41 34 91 19 71 22 20 01 ae 60 97 73 85 55 1e ac 4f 7e c3 3e 84 ea 57 51 f0 d7 d2 fb 85 4d 6c 74 a9 5f 44 d4 95 09 04 e2 3a c6 0b 1c 8e aa ca 81 a4 07 24 89 13 d0 9f bc 06 84 14 4e e2 d9 5b 83 65 ee 11 ba b6 76 f8 b2 dd de 35 12 c7 5e 97 4a 7a 7a 9c 71 c1 f1 63 91 80 66 3e 84 65 8b 67 b8 c9 23 52 ee 9e 75 8e bf Data Ascii: ko'n=j*${U)ir\|5'>o[mkcHd~H3z~}S.Ui#&ueBL`rGG#}z}dX$ $dJ)arYxb1vR[kA4q" `sUO~>WQMlt_D:$N[ev5^Jzzqcf>eg#Ru
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: e9 5d b5 1e a7 94 8f 4d 6e 8e 79 a2 0d 8e 52 18 1f cc 7d 3b aa 48 7f 0e f8 1a 10 74 0d f7 64 58 b7 1d 6c 35 d7 4a 12 6e 10 20 48 ab 69 e7 92 9a a1 10 12 42 89 a2 65 70 b9 24 e3 38 ee 7e ba c5 bb 6d 5b 9c 96 f5 a7 db 1b aa e7 63 95 3b c6 f2 2c 75 c0 fd 79 f8 ea ce c3 f4 38 d6 bf 6d 4f bb a4 a1 a4 ae 6b c5 a3 72 db ea 14 38 63 6d 96 dd 31 52 7f 17 71 91 fb 92 8a 7d 89 1e ba 9d 68 49 53 6e 5d 99 b8 6e c2 92 a2 f1 48 97 6b 9d 14 2d 14 17 4b 3d ea 7b 5d 40 04 e4 e2 9c 86 8b 2c 3b 1e 4e 41 19 ec 3d 05 31 b9 b6 15 df 6a ce b7 cb dd 55 bf 6e db c4 ca 4d 65 f2 92 df 59 50 5f d7 cb e1 40 ef 2b fb e0 0f 6c fa 0d 74 6d 57 51 a8 0d 6d d6 db 62 b7 dc af 97 7b 5b ac 75 34 74 d4 c6 32 8e c3 2a 19 a5 e2 a1 48 ee 1f 3c 48 ee 09 d4 2e db b2 f7 ae f8 de 16 ed cf d4 29 a9 ec Data Ascii: ]MnyR};HtdXl5Jn HiBep$8~m[c;,uy8mOkr8cm1Rq}hISn]nHk-K={]@,;NA=1jUnMeYP_@+ltmWQmb{[u4t2*H<H.)
2024-09-20 22:48:46 UTC	1390	IN	Data Raw: b9 36 c7 4a 76 c5 aa c7 71 9a 81 2a 6d 74 70 45 1d 30 44 91 a6 91 10 b4 7c 87 29 4b 92 5d 81 fc ca f1 ec 0c 99 ee 04 1e ef 25 36 f4 ea dd c6 eb b9 2a aa aa b6 e5 87 8a 5d ae b5 11 2b b1 58 fc 8a 78 47 f9 b0 5e 52 11 11 06 08 21 98 37 9d 8d df b0 fa 67 57 ba ee c9 ba b7 3d be 5b 4d 1d 4c 32 ad 2d 23 d5 3f 8f 1d 2c 81 82 c6 ae af c9 0b f3 69 64 90 9e 6c ce 57 b0 2f ca 1d d1 6d 8b 59 74 af a6 b1 bd 2d 23 ed 1b 2c be 35 fa 54 7e 6b 74 b9 a8 2c 91 16 07 cc 90 97 41 c5 73 1b 18 99 8f 2e 63 57 d6 f5 ea 4d bf 6a ad 5d 0d 1f 87 72 dc 10 d2 35 50 a1 32 78 6a 91 2f de 92 69 48 29 12 01 93 96 20 b6 30 a0 92 06 80 93 db e8 2d 9b 6a d3 15 25 ba 0a 7b 65 b2 8e 3c 22 20 11 c7 1a 0e e4 fd 3e a4 9f d2 4e a1 5b 87 ad db 3b 6d da a9 ae 75 35 d2 55 d2 55 3c 91 d3 b5 34 5c 8c Data Ascii: 6JvqmtpE0D\|)K]%6]+XxG^R!7gW=[ML2-#?,idlW/mYt-#,5T~kt,As.cWMj]r5P2xj/iH) 0-j%{e<" >N[;mu5UU<4\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49763	77.88.55.88	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:46 UTC	885	OUT	GET /ads/system/context.js HTTP/1.1 Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=GmNVkS+1q5EG+QZWaZequSAdEsZAYIQJqYkSXqpBiBW8RHxpVAeNYZqWeWLxv59vOg/zx7VfGq3GoEcsNjaaQUQpdjA=; yandexuid=1141320511726872524; yashr=6680397161726872524; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYMz3t7cGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=
2024-09-20 22:48:46 UTC	1044	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Cache-Control: private, max-age=3600 Connection: Close Content-Type: text/javascript; charset=utf-8 ETag: "70d05c764d152e2968a526f3685ae070-1117086" Expires: Fri, 20 Sep 2024 23:48:46 GMT Keep-Alive: timeout=600 NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Robots-Tag: noindex, noarchive, nofollow X-Yandex-Req-Id: 1726872526656377-12994729834423978951-balancer-l7leveler-kubr-yp-sas-103-BAL
2024-09-20 22:48:46 UTC	7704	IN	Data Raw: 31 45 31 30 0d 0a 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 6c 6f 61 64 65 72 73 2f 63 6f 6e 74 65 78 74 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 Data Ascii: 1E10/! v:1117086 b:default c:loaders/context /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__p
2024-09-20 22:48:46 UTC	8174	IN	Data Raw: 31 46 45 36 0d 0a 6e 28 65 29 7b 74 72 79 7b 69 66 28 22 6e 6f 4d 6f 64 75 6c 65 22 69 6e 20 65 2e 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 32 32 31 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 44 45 42 55 47 5f 43 4f 4e 53 4f 4c 45 5f 45 4e 41 42 4c 45 44 5f 4c 4f 43 41 4c 5f 53 54 4f 52 41 47 45 5f 50 41 52 41 4d 45 54 45 52 3d 76 6f 69 64 20 30 2c 74 2e 44 45 42 55 47 5f 43 4f 4e 53 4f 4c 45 5f 45 4e 41 42 4c 45 44 5f 4c 4f 43 Data Ascii: 1FE6n(e){try{if("noModule"in e.HTMLScriptElement.prototype)return!0}catch(e){}return!1}},22130:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.DEBUG_CONSOLE_ENABLED_LOCAL_STORAGE_PARAMETER=void 0,t.DEBUG_CONSOLE_ENABLED_LOC
2024-09-20 22:48:46 UTC	7	IN	Data Raw: 32 0d 0a 75 72 0d 0a Data Ascii: 2ur
2024-09-20 22:48:46 UTC	8166	IN	Data Raw: 31 46 44 45 0d 0a 6e 20 65 2e 69 6e 63 72 65 61 73 65 55 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 2e 70 72 69 63 65 2c 6f 3d 74 2e 75 6e 69 74 3b 69 66 28 21 65 2e 69 73 49 6e 74 28 72 29 29 7b 69 66 28 6f 3d 3d 3d 6e 5b 22 31 2d 54 48 22 5d 29 72 65 74 75 72 6e 20 65 2e 69 6e 63 72 65 61 73 65 55 6e 69 74 28 7b 70 72 69 63 65 3a 31 30 30 2a 72 2c 75 6e 69 74 3a 6e 5b 22 31 30 30 2d 54 48 22 5d 7d 29 3b 69 66 28 6f 3d 3d 3d 6e 5b 22 31 30 30 2d 54 48 22 5d 29 72 65 74 75 72 6e 20 65 2e 69 6e 63 72 65 61 73 65 55 6e 69 74 28 7b 70 72 69 63 65 3a 31 30 2a 72 2c 75 6e 69 74 3a 6e 5b 22 31 30 30 30 2d 54 48 22 5d 7d 29 7d 72 65 74 75 72 6e 7b 70 72 69 63 65 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 29 2c 75 6e 69 74 3a 6f 7d 7d 2c 65 Data Ascii: 1FDEn e.increaseUnit=function(t){var r=t.price,o=t.unit;if(!e.isInt(r)){if(o===n["1-TH"])return e.increaseUnit({price:100r,unit:n["100-TH"]});if(o===n["100-TH"])return e.increaseUnit({price:10r,unit:n["1000-TH"]})}return{price:Math.floor(r),unit:o}},e
2024-09-20 22:48:46 UTC	15	IN	Data Raw: 41 0d 0a 64 54 79 70 65 43 68 6f 73 65 0d 0a Data Ascii: AdTypeChose
2024-09-20 22:48:46 UTC	8158	IN	Data Raw: 31 46 44 36 0d 0a 6e 22 5d 3d 22 30 36 30 22 2c 65 5b 22 42 75 6e 64 6c 65 4c 6f 61 64 65 64 22 5d 3d 22 30 37 30 22 2c 65 5b 22 42 75 6e 64 6c 65 52 65 6e 64 65 72 65 64 22 5d 3d 22 30 38 30 22 2c 65 5b 22 4f 6c 64 52 65 6e 64 65 72 65 64 22 5d 3d 22 30 38 30 22 2c 65 5b 22 48 42 52 65 6e 64 65 72 65 64 22 5d 3d 22 30 38 30 22 7d 28 63 7c 7c 28 74 2e 6e 78 3d 63 3d 7b 7d 29 29 2c 74 2e 6b 4e 3d 6e 65 77 20 75 28 7b 69 6e 69 74 53 74 65 70 73 3a 28 6f 3d 7b 7d 2c 6f 5b 63 2e 41 64 43 68 6f 73 65 6e 5d 3d 31 2c 6f 5b 63 2e 41 64 43 72 65 61 74 65 64 5d 3d 31 2c 6f 5b 63 2e 41 64 53 74 61 72 74 65 64 52 65 6e 64 65 72 5d 3d 31 2c 6f 5b 63 2e 41 64 66 6f 78 58 68 72 52 65 71 75 65 73 74 50 72 65 70 61 72 65 64 5d 3d 31 2c 6f 29 2c 64 61 74 61 53 74 65 70 73 Data Ascii: 1FD6n"]="060",e["BundleLoaded"]="070",e["BundleRendered"]="080",e["OldRendered"]="080",e["HBRendered"]="080"}(c\|\|(t.nx=c={})),t.kN=new u({initSteps:(o={},o[c.AdChosen]=1,o[c.AdCreated]=1,o[c.AdStartedRender]=1,o[c.AdfoxXhrRequestPrepared]=1,o),dataSteps
2024-09-20 22:48:46 UTC	24	IN	Data Raw: 31 32 0d 0a 74 65 6d 5c 2f 63 6f 6e 74 65 78 74 5c 2e 6a 73 2f 69 0d 0a Data Ascii: 12tem\/context\.js/i
2024-09-20 22:48:46 UTC	2919	IN	Data Raw: 42 36 30 0d 0a 3b 74 2e 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 74 3d 65 2e 59 41 5f 53 53 50 5f 50 41 47 45 26 26 65 2e 59 41 5f 53 53 50 5f 45 52 52 4f 52 5f 4c 4f 47 53 2c 6f 3d 65 2e 59 41 5f 4d 4f 42 5f 53 44 4b 5f 50 41 47 45 26 26 65 2e 59 41 5f 53 44 4b 5f 45 52 52 4f 52 5f 4c 4f 47 53 3b 28 30 2c 6e 28 34 38 31 39 29 2e 6f 6e 29 28 77 69 6e 64 6f 77 2c 22 65 72 72 6f 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6f 7c 7c 74 29 7b 76 61 72 20 69 3d 74 3f 22 55 4e 43 41 55 47 48 54 5f 53 53 50 22 3a 22 55 4e 43 41 55 47 48 54 5f 53 44 4b 22 3b 28 30 2c 6e 28 33 37 31 39 35 29 2e 65 72 72 6f 72 29 28 65 2c 69 2c 7b 63 6f 64 65 3a 69 7d 2c 31 30 30 29 7d 65 6c 73 65 20 72 2e 74 65 73 74 28 65 2e 66 69 Data Ascii: B60;t.R=function(){var e=window,t=e.YA_SSP_PAGE&&e.YA_SSP_ERROR_LOGS,o=e.YA_MOB_SDK_PAGE&&e.YA_SDK_ERROR_LOGS;(0,n(4819).on)(window,"error",(function(e){if(o\|\|t){var i=t?"UNCAUGHT_SSP":"UNCAUGHT_SDK";(0,n(37195).error)(e,i,{code:i},100)}else r.test(e.fi
2024-09-20 22:48:47 UTC	5231	IN	Data Raw: 31 34 36 37 0d 0a 2c 69 3d 5b 5d 3b 72 65 74 75 72 6e 28 30 2c 6e 28 39 30 35 36 33 29 2e 69 73 41 72 72 61 79 29 28 6f 29 26 26 28 6f 2e 6c 65 6e 67 74 68 26 26 28 30 2c 6e 28 37 39 36 33 39 29 2e 58 30 29 28 22 61 64 66 6f 78 22 29 2c 28 30 2c 6e 28 36 30 34 33 30 29 2e 66 6f 72 45 61 63 68 29 28 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 2e 63 61 6c 6c 28 65 2c 74 29 7d 63 61 74 63 68 28 65 29 7b 69 2e 70 75 73 68 28 65 29 7d 7d 29 29 29 2c 65 5b 74 5d 3d 7b 70 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 2c 69 7d 28 65 2c 6f 2c 69 29 29 7d 29 2c 5b 5d 29 3b 28 30 2c 6e 28 36 30 34 33 30 29 2e 66 6f 72 45 61 63 68 29 28 63 2c 6f 29 7d 7d 2c 33 34 35 34 38 3a 66 75 6e 63 Data Ascii: 1467,i=[];return(0,n(90563).isArray)(o)&&(o.length&&(0,n(79639).X0)("adfox"),(0,n(60430).forEach)(o,(function(t){try{r.call(e,t)}catch(e){i.push(e)}}))),e[t]={push:function(e){try{r(e)}catch(e){}}},i}(e,o,i))}),[]);(0,n(60430).forEach)(c,o)}},34548:func
2024-09-20 22:48:47 UTC	39	IN	Data Raw: 32 31 0d 0a 61 74 69 6f 6e 7c 7c 31 30 2c 74 2e 66 75 6c 6c 73 63 72 65 65 6e 44 75 72 61 74 69 6f 6e 26 26 6e 0d 0a Data Ascii: 21ation\|\|10,t.fullscreenDuration&&n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49764	135.181.113.151	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:46 UTC	558	OUT	GET /js/xn--r1a.website.js?ts=1726872521522 HTTP/1.1 Host: ads.digitalcaramel.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:46 UTC	692	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:46 GMT Content-Type: application/javascript Content-Length: 3631 Last-Modified: Mon, 09 Sep 2024 12:08:20 GMT Connection: close Vary: Accept-Encoding ETag: "66dee534-e2f" Expires: Fri, 27 Sep 2024 22:48:46 GMT Cache-Control: max-age=604800 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self'; Permissions-Policy: interest-cohort=() Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: DENY Accept-Ranges: bytes
2024-09-20 22:48:46 UTC	3631	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 34 66 33 28 29 7b 76 61 72 20 5f 30 78 35 62 62 65 36 33 3d 5b 27 62 65 74 77 65 65 6e 44 69 67 69 74 61 6c 27 2c 27 31 32 37 32 32 34 38 27 2c 27 35 37 3a 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 5f 66 6c 6f 6f 72 61 64 5f 64 65 73 6b 27 2c 27 38 39 37 37 30 38 27 2c 27 61 64 66 6f 78 5f 31 37 32 31 32 39 39 37 30 37 39 36 34 39 31 37 30 31 27 2c 27 36 36 5f 39 37 30 78 39 30 5f 61 6c 66 61 64 61 72 74 27 2c 27 31 33 36 36 30 37 38 27 2c 27 31 35 33 36 31 34 33 27 2c 27 31 36 37 32 36 39 39 27 2c 27 38 37 38 30 31 6a 4d 4d 62 4d 66 27 2c 27 31 32 37 32 32 34 37 27 2c 27 32 34 36 38 32 36 31 27 2c 27 36 36 39 66 36 33 66 63 34 64 35 30 36 65 36 30 31 30 38 39 31 64 38 64 27 2c 27 35 37 3a 78 6e 2d 2d 72 31 61 2e Data Ascii: function _0x14f3(){var _0x5bbe63=['betweenDigital','1272248','57:xn--r1a.website_floorad_desk','897708','adfox_172129970796491701','66_970x90_alfadart','1366078','1536143','1672699','87801jMMbMf','1272247','2468261','669f63fc4d506e6010891d8d','57:xn--r1a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49762	93.158.134.118	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:46 UTC	964	OUT	GET /getcookie HTTP/1.1 Host: matchid.adfox.yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=GmNVkS+1q5EG+QZWaZequSAdEsZAYIQJqYkSXqpBiBW8RHxpVAeNYZqWeWLxv59vOg/zx7VfGq3GoEcsNjaaQUQpdjA=; yandexuid=1141320511726872524; yashr=6680397161726872524; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYMz3t7cGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=
2024-09-20 22:48:46 UTC	277	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: http://xn--r1a.website Connection: Close Content-Length: 87 Content-Type: application/json Date: Fri, 20 Sep 2024 22:48:46 GMT Timing-Allow-Origin: * X-Content-Type-Options: nosniff
2024-09-20 22:48:46 UTC	87	IN	Data Raw: 7b 22 63 72 79 70 74 6f 75 69 64 22 3a 22 38 33 37 38 31 36 38 35 35 32 34 36 30 35 38 31 34 36 34 22 2c 22 63 72 79 70 74 6f 75 69 64 5f 73 69 67 6e 22 3a 22 32 37 62 31 65 66 64 62 39 37 62 66 35 35 35 32 36 61 66 38 66 63 30 65 33 31 64 33 35 32 32 39 22 7d Data Ascii: {"cryptouid":"8378168552460581464","cryptouid_sign":"27b1efdb97bf55526af8fc0e31d35229"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49768	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:46 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-20 22:48:46 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=64663 Date: Fri, 20 Sep 2024 22:48:46 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-20 22:48:46 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49769	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	930	OUT	GET /file/oEMIEzb1yTVBpW6MCUIUeeC2t40SZSMsbVRJJjyKs9mRAbrW--7Ue4_Iy0eBbvSSVVgELurmU-qaGFOiQ0xeEH7ltY329lR7ZMlNTABIskg4fS4M776FzjOm8YQ04V5PpLyo-CQ8nHlJX89Wfm1QVx11GmkY_Ad4rcDaVpCQzNsS-ekKPYDT2fTzWQEeW3CrPjYyxQIeSmLtqGrHHC1v6bQatqQywbR_L1XBI8Er-l7eY-TxX83PtrKirkybMrEckzy4qbQueRWGTXQFwknveFmdzqSFguOPtnexomnO6sH5mxBl33ouBAAOzyU6hHNkkcbpoKbkHVycq-fpqjLgCQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	686	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 152506 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "571c9c1f459044cf957a1814b975f615e5b54dfe" Content-Type: image/jpeg Age: 817 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:47 UTC	704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f Data Ascii: //050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIO
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 07 08 ff c4 00 40 11 01 00 01 02 02 05 07 0b 03 03 04 02 03 01 00 00 00 01 02 03 04 11 05 12 21 31 41 13 33 51 61 71 81 91 06 14 22 52 92 a1 b1 b2 d1 e2 f0 53 72 c1 32 42 e1 15 23 34 f1 43 62 82 a2 d2 16 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f5 ce 8a d0 da 65 ed 19 a7 1e 3a 76 d0 b7 55 6c 8c 56 55 01 a2 49 2d 24 92 7d 9a 9e 4e 87 d2 aa 03 3a 6a cc 95 7b fe 4e 6b fb 35 b7 42 a7 ff 00 32 34 ca 92 39 f9 2a 2f f4 49 a9 d5 36 33 f0 3f 71 a0 80 4e 86 d2 c3 85 69 ab 2f f3 73 5f d9 ac d5 a0 f4 b1 1c 69 9b 2e 7f 93 9a fe cd 4d 61 43 83 c8 f7 56 49 5f bb 91 ee f3 14 10 49 d0 ba 5b b7 e0 cd 97 8f 2f 93 9a fe cd 03 42 69 5d c7 ff 00 36 ac be 5f f2 73 5f d9 a9 f3 83 ca 7b d2 83 9f a6 82 Data Ascii: @!1A3Qaq"RSr2B#4Cb?e:vUlVUI-$}N:j{Nk5B249*/I63?qNi/s_i.MaCVI_I[/Bi]6_s_{
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: ff 00 37 35 fd 9a b0 51 41 5f fc 04 d2 bf bd 9b 2f f3 73 5f d9 a3 f0 13 4a fe f6 6c bf cd cd 7f 66 ac 14 50 57 ff 00 01 34 af ef 66 cb fc dc d7 f6 68 fc 04 d2 bf bd 9b 2f f3 73 5f d9 ab 05 14 15 ff 00 c0 4d 2b fb d9 b2 ff 00 37 35 fd 9a 3f 01 34 af ef 66 cb fc dc d7 f6 6a c1 45 05 7f f0 13 4a fe f6 6c bf cd cd 7f 66 8f c0 4d 2b fb d9 b2 ff 00 37 35 fd 9a b0 51 41 5f fc 04 d2 bf bd 9b 2f f3 73 5f d9 a3 f0 13 4a fe f6 6c bf cd cd 7f 66 ac 14 50 57 ff 00 01 34 af ef 66 cb fc dc d7 f6 68 fc 04 d2 bf bd 9b 2f f3 73 5f d9 ab 05 14 15 ff 00 c0 4d 2b fb d9 b2 ff 00 37 35 fd 9a 3f 01 34 af ef 66 cb fc dc d7 f6 6a c1 4d 6e 13 51 6e 88 e4 97 50 b5 b6 de 37 04 00 48 19 c6 68 21 d5 a1 74 a8 49 3f 83 36 63 c7 61 6e 68 ff 00 d9 a8 06 7a 73 a7 af a9 54 89 b6 4b 6c 78 ea Data Ascii: 75QA_/s_JlfPW4fh/s_M+75?4fjEJlfM+75QA_/s_JlfPW4fh/s_M+75?4fjMnQnP7Hh!tI?6canhzsTKlx
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 81 f3 41 f2 27 93 f4 24 d4 7a f4 75 a9 69 f6 9b 77 77 9a cb a4 93 f4 e6 82 6a 32 03 71 da 4a 0e 42 50 00 3e f1 8a d2 ed c5 b6 81 fc 4c 95 91 fb 98 eb 3f a2 b7 c6 8e dc 56 10 cb 20 86 d0 30 90 a5 15 10 3e 93 cd 6d a0 86 73 52 44 67 fd f2 d4 b8 e9 1f 94 e4 65 81 f9 ab 28 d7 bb 4d d0 86 59 94 d3 84 28 10 85 82 82 48 39 18 04 0c f2 33 52 f5 17 33 4e 5a e7 39 e2 49 86 82 b3 dd 49 25 04 fd 38 23 34 0e 65 c3 13 4a 10 f1 0a 8c 39 5b 45 39 0b 20 82 32 7d c0 8e df a3 8a d4 f5 bb d6 e4 15 4d 58 7a 28 db e1 c7 db 84 82 3c d5 fb ae 7b 79 7c 33 cd 36 4e 97 b5 a0 00 88 ee 24 0e db 64 38 3f ed 54 a3 0c 22 2b 29 69 a0 ad 89 ed b9 65 47 ed 24 9a 06 52 2d 82 72 9d 44 e7 4b 90 d5 b4 26 3a 7d 94 f1 8e 49 1c 9e 7c b3 8a 73 09 88 b1 d8 4a 20 21 a4 32 32 00 6b 18 fb ab 7f 27 f2 Data Ascii: A'$zuiwwj2qJBP>L?V 0>msRDge(MY(H93R3NZ9II%8#4eJ9[E9 2}MXz(<{y\|36N$d8?T"+)ieG$R-rDK&:}I\|sJ !22k'
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: d8 d7 58 bb 7c 66 d6 c4 85 e3 7a 42 87 cc 41 49 ca 54 0f 9d 33 97 e9 27 a0 19 51 4c 5b a3 b2 7e 3e a6 f2 52 7e d4 67 ee a8 e6 ed b8 fe e8 50 ab 48 60 a8 aa 69 aa f5 31 31 ff 00 b4 3a ed 15 c4 57 e9 25 a5 5f 38 62 e9 1e 20 3f 94 ec 59 2b c7 f8 ad d6 71 fa ef a3 96 ac ce d7 41 29 3d d0 c5 a1 ff 00 b9 45 af d1 58 e5 6d fa d0 d7 fd 4f 03 fa d4 fb 51 f5 76 bc d1 5c 86 3f 5c 7a 5b 1d f4 c8 fc 22 5b b2 00 20 3a ec 39 6b 23 e8 cb 78 1f 55 3f ff 00 74 47 4d bf 7c 7f fe 6f 95 fe ae 9c ad bf 5a 0f f5 3c 07 eb 53 ed 47 d5 d3 16 16 56 82 82 9d 9c ee 04 64 9f 76 39 ac c5 73 0f f7 44 74 db f7 c7 ff 00 e6 f9 5f ea e8 ff 00 74 47 4d bf 7c 7f fe 6f 95 fe ae 9c ad bf 5a 0f f5 3c 07 eb 53 ed 47 d5 d3 89 00 1a aa cb be 4a ba cb 5c 4b 02 d2 d3 0d 02 a7 e6 a9 39 4a 40 ef b4 1e Data Ascii: X\|fzBAIT3'QL[~>R~gPH`i11:W%_8b ?Y+qA)=EXmOQv\?\z["[ :9k#xU?tGM\|oZ<SGVdv9sDt_tGM\|oZ<SGJ\K9J@
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 03 e5 5f 01 e0 38 39 fa c8 ac 7a d5 ff 00 09 97 cf ff 00 01 fd 03 75 05 78 ec 4d cd 17 4d 73 5c c5 51 5e 59 e7 b6 63 2c d7 2d 68 9c 0d af 28 2b b5 16 e2 69 aa de b6 53 11 31 13 ad 11 b2 38 7f 9d 9b 1d 02 df 33 ad 06 7c 51 39 2f 08 be 32 3c 6c b1 10 7b 1b 86 ee c3 3d b3 56 3e a5 5c 7a 8c d5 ee 34 3d 17 19 28 b7 3e 36 36 f3 21 b5 ad 6b da 4a 82 ca f8 46 30 70 78 1d b9 cf 03 ad 1e c6 bc f9 d4 2e a5 ea 95 6b b7 74 d6 91 94 88 c9 4b 8d c6 6f 6b 68 dc eb aa 09 ce 54 e0 f6 70 a5 6d e3 1d ab b9 8b b5 4e 03 0f 31 5d ea e7 5a 63 2c a7 39 ec 8e df a3 c9 e8 fb f7 34 b6 36 26 d6 1e d5 3a 94 cc ce 71 95 39 74 cf 4c c7 0e ac fb 50 77 79 bd 5b d1 f1 95 75 bb ca 98 c4 64 ac 25 4e 2d e6 5f 42 49 e0 65 20 a8 0f b3 19 c7 9e 2b b6 74 bb 56 3d ac 74 7c 49 f3 9c 43 b3 d0 b5 b3 Data Ascii: _89zuxMMs\Q^Yc,-h(+iS183\|Q9/2<l{=V>\z4=(>66!kJF0px.ktKokhTpmN1]Zc,946&:q9tLPwy[ud%N-_BIe +tV=t\|IC
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: ee 30 08 a8 6f 47 5b 9d b2 25 e2 e9 0e 5a 92 dd ce 5b 6d 88 85 40 e5 69 4e e2 b4 0f 2c f6 3f 1c 7c 2b d0 8d dc a1 bb 3d e8 0d 49 69 53 59 40 71 c6 02 c6 f4 a4 f6 24 77 c5 67 46 61 ea c5 db a7 13 72 fd 5a d3 3b b3 d9 d9 97 e6 ce 0d 74 ee 2e de 8f bd 73 03 67 09 46 a4 53 be 69 db b6 3f ab 3e ad d9 cc ef df 3c 1e 7c ea 87 54 35 5e 9d d7 37 5b 65 9a eb ea d0 98 f0 bc 36 fd 59 a5 ed dc d2 14 79 52 49 3c 92 7b d5 af ab dd 5a 73 4c b9 f2 2e 98 7f 65 e1 2a 4a a4 bc 5a 0a 0c 24 80 a0 90 14 08 25 40 8f 7e 07 c7 b7 26 eb 58 c7 53 af 9f f5 7f e8 1b a8 cd 41 12 6e 9b d7 4f 8d 60 ca 6e cf b3 24 3b 21 2e 2c 84 c9 41 c1 04 11 8c 02 0f 6e c3 18 c7 04 57 2a f6 90 c4 db ae fd 14 d5 39 4d 59 67 9c fa 31 9c ee e8 cf f8 e9 77 f0 ba 1f 03 7e d6 12 ed 54 53 9c 5b d6 d5 88 88 9a Data Ascii: 0oG[%Z[m@iN,?\|+=IiSY@q$wgFarZ;t.sgFSi?><\|T5^7[e6YyRI<{ZsL.eJZ$%@~&XSAnO`n$;!.,AnW9MYg1w~TS[
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: e0 a9 e5 20 dc a7 cf 71 03 d9 69 2e 46 79 05 47 dc 3c 47 90 9f a5 42 ba 57 f7 49 55 9d 67 a1 bb ff 00 e8 c9 1e 5f fb d1 41 eb ff 00 45 cd 6d 7d ea 37 42 b4 a6 a6 d6 53 be 52 bd cf f5 bf 59 93 e0 b6 d6 fd 92 de 6d 3e c3 69 4a 46 10 84 8e 00 ed 93 cd 78 fb d1 7b d2 8f ab 1d 45 eb a6 95 d3 3a cb 55 7c a7 64 9d eb 9e b3 1b e4 c8 8c ef d9 11 e7 13 ed a1 a4 a8 61 48 49 e0 8e d8 ed 5e 9d f4 26 2a 3e 8c da 1c 0e 07 eb fe 73 ff 00 d3 e4 57 cc 2e 8d 69 dd 4f ab 7a 83 06 cb d3 d9 9e a3 a8 e6 c3 9e dc 47 03 81 b2 a1 ea 6f 17 1b 0a 3c 24 ad b0 b4 05 71 8d f9 c8 c6 68 3d 4f e9 07 e9 9b ac 93 d4 a5 e9 be 84 de 91 1e d9 01 c1 10 c9 8f 09 99 4a b8 49 24 05 04 78 ad ab d9 4a bd 84 ed e1 44 12 09 05 35 e8 fb 4f 50 f5 af 45 bd 1d e6 eb 8e bf cd 7e f5 ab 10 4a fe 4d 28 88 c7 Data Ascii: qi.FyG<GBWIUg_AEm}7BSRYm>iJFx{E:U\|daHI^&*>sW.iOzGo<$qh=OJI$xJD5OPE~JM(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49770	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	930	OUT	GET /file/ELzs1UgArxHStzcD91QUa9uaL2ddyRSFVOb32HZ5Q7SZLZI9SN8-CvHqkdeSTXz-1FJOHYLyaLzDpUXHrn-3RXYO_4I8oBD9yzwbCHmFeXODLfgUkIjYaugi2NfHyyx86_OZkKL2-vj668ki5vH1mtUCpu871TMMon8057k3jLN1Ba5qNzugM2DrntzGDSlJ045JcFoOh8aLOX3xkDOc0zE2t5O1lQOe8IC-8rtsvjePL8Yyh3HfF-P4WjILj0PfQgv1i7-JHb-jW_hkPmRAB42Uq2-m9whBNQYgypUynBNyLqkApbiUN7qdshWXE3jjbrm5i1asFn_Nd1GtMbAZpA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	686	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 150870 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:11 GMT Cache-Control: public,max-age=7200 ETag: "32d57128bf0ed9f4ff1642ac7fe408df73e1db68" Content-Type: image/jpeg Age: 816 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:47 UTC	704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f Data Ascii: //050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIO
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: ff c4 00 1b 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 07 ff c4 00 3e 11 01 00 01 02 02 05 09 06 03 09 01 00 03 01 00 00 00 01 02 03 04 11 05 12 21 31 41 13 33 51 61 71 81 a1 b1 d1 14 22 72 91 b2 f0 32 52 d2 06 15 34 42 53 92 c1 e1 f1 23 43 62 82 a2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 eb 9d 15 a1 b4 cb da 33 4e 3c 74 ed a1 6e aa d9 18 ac aa 03 44 92 5a 49 24 fb 35 3c 9d 0f a5 54 06 74 d5 99 2a f7 fd 1c d7 f5 6b 2e 85 4f fe 24 69 95 24 73 f4 54 5f e4 93 53 aa 6c 67 e0 7f 03 41 00 9d 0d a5 87 0a d3 56 5f e2 e6 bf ab 5e d5 a0 f4 b1 1c 69 9b 2e 7f 83 9a fe ad 4d 61 43 83 c8 f7 57 a4 af dd c8 f7 79 8a 08 24 e8 5d 2d db f2 66 cb c7 97 d1 cd 7f 56 81 a1 34 ae e3 ff 00 8b 56 5f 2f fd 1c d7 f5 6a 7c e0 f2 9e f4 a0 e7 e7 41 5c 3a Data Ascii: >!1A3Qaq"r2R4BS#Cb?3N<tnDZI$5<Tt*k.O$i$sT_SlgAV_^i.MaCWy$]-fV4V_/j\|A\:
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 7f 8b 9a fe ad 58 28 a0 af fe 42 69 5f de cd 97 f8 b9 af ea d1 f9 09 a5 7f 7b 36 5f e2 e6 bf ab 56 0a 28 2b ff 00 90 9a 57 f7 b3 65 fe 2e 6b fa b4 7e 42 69 5f de cd 97 f8 b9 af ea d5 82 8a 0a ff 00 e4 26 95 fd ec d9 7f 8b 9a fe ad 1f 90 9a 57 f7 b3 65 fe 2e 6b fa b5 60 a2 82 bf f9 09 a5 7f 7b 36 5f e2 e6 bf ab 47 e4 26 95 fd ec d9 7f 8b 9a fe ad 58 28 a0 af fe 42 69 5f de cd 97 f8 b9 af ea d1 f9 09 a5 7f 7b 36 5f e2 e6 bf ab 56 0a 28 2b ff 00 90 9a 57 f7 b3 65 fe 2e 6b fa b4 7e 42 69 5f de cd 97 f8 b9 af ea d5 82 8a 0a ff 00 e4 26 95 fd ec d9 7f 8b 9a fe ad 1f 90 9a 57 f7 b3 65 fe 2e 6b fa b5 60 a6 b7 09 a8 b7 44 72 4b a8 5a db 6f 1b 82 00 24 0c e3 34 10 ea d0 ba 54 24 9f c9 9b 31 e3 b0 b7 34 7f ee d4 03 3d 39 d3 d7 d4 aa 44 db 25 b6 3c 75 2c 84 c4 6e de Data Ascii: X(Bi_{6_V(+We.k~Bi_&We.k`{6_G&X(Bi_{6_V(+We.k~Bi_&We.k`DrKZo$4T$14=9D%<u,n
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 7d 50 7c 89 e4 fc 92 6a 3d 7a 3a d4 b4 fb 4d bb bb cd 65 d2 49 f9 e6 82 6a 32 03 71 da 4a 0e 42 50 00 3e f1 8a c2 ed c5 b6 81 fc cc 95 91 fb 98 eb 3f cd 59 e3 47 6e 2b 08 65 90 43 68 18 48 52 8a 88 1f 33 cd 65 a0 86 73 52 44 67 fe 32 d4 b8 e9 1f a4 e4 65 81 fa ab d4 6b dd a6 e8 43 2c ca 69 c2 14 08 42 c1 41 24 1c 8c 02 06 79 19 a9 7a 8b 99 a7 2d 73 9c f1 24 c3 41 59 ee a4 92 82 7e 78 23 34 0e 65 c3 13 4a 10 f1 0a 8c 39 5b 45 39 0b 20 82 32 7d c0 8e df cd c5 62 7a dd eb 72 0a a6 ac 3d 14 6d f0 e3 ed c2 41 1e 6a fd d7 3d bc be 19 e6 9b 27 4b da d0 00 44 77 12 07 6d b2 1c 1f f7 aa 51 86 11 15 94 b4 d0 56 c4 f6 dc b2 a3 f7 92 4d 03 29 16 c1 39 4e a2 73 a5 c8 6a da 13 1d 3e ca 78 c7 24 8e 4f 3e 59 c5 39 84 c4 58 ec 25 10 10 d2 19 19 00 35 8c 7e 15 9f 93 fa 38 Data Ascii: }P\|j=z:MeIj2qJBP>?YGn+eChHR3esRDg2ekC,iBA$yz-s$AY~x#4eJ9[E9 2}bzr=mAj='KDwmQVM)9Nsj>x$O>Y9X%5~8
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: ed f1 9b 5b 12 17 8d e9 0a 1f 51 05 27 29 50 3e 74 ce 5f a4 9e 80 65 45 31 6e 8e c9 f8 fa 9b c9 49 fb d1 9f c2 a3 9b b6 e3 f9 a1 42 ad 21 82 a2 a9 a6 ab d4 c4 c7 ff 00 68 6d da 2b 48 af d2 4b 4a be 70 c5 d2 3c 40 7f 49 d8 b2 57 8f f3 5b af 71 fa ef a3 96 ac ce d7 41 29 3d d0 c5 a1 ff 00 c1 45 af e6 ac 72 b6 ff 00 34 35 fd e7 81 fe b5 3f dd 1e ad d7 9a 2b 50 c7 eb 8f 4b 63 be 99 1f 94 4b 76 40 04 07 5d 87 2d 64 7c b2 de 07 d9 4f ff 00 f0 88 e9 b7 ef 8f ff 00 cd f2 bf fb 5d 39 5b 7f 9a 0f de 78 0f eb 53 fd d1 ea d9 8b 0b 2b 41 41 4e ce 77 02 32 4f bb 1c d7 b1 5a c3 ff 00 08 8e 9b 7e f8 ff 00 fc df 2b ff 00 b5 d1 ff 00 84 47 4d bf 7c 7f fe 6f 95 ff 00 da e9 ca db fc d0 7e f3 c0 7f 5a 9f ee 8f 56 ce 24 00 6a ab 2e f9 2a eb 2d 71 2c 0b 4b 4c 34 0a 9f 9a a4 e5 Data Ascii: [Q')P>t_eE1nIB!hm+HKJp<@IW[qA)=Er45?+PKcKv@]-d\|O]9[xS+AANw2OZ~+GM\|o~ZV$j.*-q,KL4
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: d0 98 f0 7c 36 fd 59 a5 e3 73 28 51 e5 49 27 b9 27 bf 9d 50 74 2e 91 d4 7a ab e9 0f c9 57 fc 0f 56 f0 fc 7f ee 92 d6 77 6e db db bf d5 55 44 6a 9b 45 ca c3 7e 97 6f bf 39 e2 dc 19 d9 e2 ab c5 2e 67 28 4a 93 ed 1e fc 11 54 6e e9 0c 5c e8 fa 23 2a a3 6f e3 cf 7e fd 9d 3f f1 d4 c3 e8 6d 1f 1a 5e ed 59 d1 57 bb cd ea c7 bb f8 76 e5 bb c3 8b a8 f5 36 bc 3a 4f a7 90 6f 32 14 dc 8b 9c a8 ac 86 10 e0 20 3a f2 90 0a 89 09 1c 00 37 28 f6 1c 63 8c 8a d4 d6 c9 fd 5b d6 b0 d1 74 b5 4a 7c c3 52 95 e1 ad b7 18 8e 92 52 79 00 70 48 07 8c 9f 71 04 d3 be b5 30 fa b4 5e 82 79 29 26 2a 22 6c 71 59 e0 2d 4d 34 52 08 f9 25 7f 75 44 68 4d 3f af 2f 9a 7d a5 e9 1d 46 dc 68 2c ad 49 f5 61 39 68 53 24 a8 92 0a 40 e3 27 2a f8 e6 af e2 b1 17 af 63 22 c4 eb cd 31 4c 6c a6 72 99 9c a2 Data Ascii: \|6Ys(QI''Pt.zWVwnUDjE~o9.g(JTn\#o~?m^YWv6:Oo2 :7(c[tJ\|RRypHq0^y)&"lqY-M4R%uDhM?/}Fh,Ia9hS$@'*c"1Llr
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: af d7 0d 35 a2 a6 5c 6c 92 3d 56 63 6e 34 94 39 e1 a5 78 05 60 1e 14 08 ec 7d d5 5d e8 86 b1 bd 6b 08 b7 97 35 14 df 5d 5c 67 1a 4b 47 c1 43 7b 41 0a cf d4 48 f7 0a d4 5a b3 a7 9a cb 4f d9 1f 9f a8 65 f8 b0 1b 52 02 d3 eb aa 73 24 a8 01 ec 9f 8d 5f 3d 1c 9f 44 6b 56 a5 79 e3 b5 b6 d6 ca d6 71 9c 00 95 93 52 5a c6 e2 2f 69 4a 22 ba 66 88 ca 7d d9 9e a9 db f7 d0 af 7f 45 e1 30 ba 06 ed 56 aa a6 ed 5a d1 95 71 1b 76 cc 46 59 ef ff 00 ac da ce e1 d5 39 9a ba e3 6c d3 6d ba cd bd 21 2b 8e 58 43 61 05 bf 23 e3 2c 0f 68 90 72 9c f9 10 32 39 34 bb 8e b1 ea 5f 4f a6 46 6e ff 00 2d f4 78 a3 7a 1b 94 5b 90 87 40 3c 8d c3 38 fb 08 23 23 e1 4f 13 d4 9d 69 d4 0d 54 bb 56 96 b8 26 d7 1e 62 d5 ea cc 90 84 ec 42 52 49 cb 9b 4a f3 84 92 70 7c f8 e2 a1 3a a5 a6 ef ba 79 56 Data Ascii: 5\l=Vcn49x`}]k5]\gKGC{AHZOeRs$_=DkVyqRZ/iJ"f}E0VZqvFY9lm!+XCa#,hr294_OFn-xz[@<8##OiTV&bBRIJp\|:yV
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 84 15 0f 53 78 ad b0 a3 c2 4a db 0b 40 57 18 df 9c 8c 66 ad fd 03 bf 5b fa 23 e9 05 67 97 d5 5b 7a a0 b3 66 91 22 34 f4 be c2 dc 5c 27 4b 4b 40 70 21 19 dc 52 a2 3c 95 c1 25 20 90 92 03 e8 be 82 d6 1a ab a5 3d 0b 9d ad 7d 24 2e f2 a4 5d a3 85 48 99 1c 45 8e 3d 58 17 7c 36 58 40 8c 80 14 a5 92 de 49 24 02 be 48 09 35 c5 ea f4 96 f4 81 eb f6 b6 9d 64 e9 5c b9 56 f6 a6 ee 7a 35 a6 da 88 ed 18 ac a1 3c 95 4b 5a 52 a1 ef 2a 52 c0 2a 56 00 19 4a 6b af 7d 31 2e 51 ae fe 8b 1a ca 6d b1 e6 e5 c2 96 d5 b5 f8 ef 32 a0 b4 38 da a6 c7 50 50 23 82 08 39 06 b9 f3 fb 1c 9a b3 4a 5a ee 5a ae c3 70 79 88 9a b6 ea a6 57 04 ba 08 54 98 ed a5 65 6d a1 5d 81 49 3b 8a 72 0a 81 ce 08 41 da 14 19 3e 91 3e 90 fd 00 d5 d0 ac bd 50 97 2a 62 18 09 7d eb 5d d5 2c 3e 99 6c a8 7e 8c a4 Data Ascii: SxJ@Wf[#g[zf"4\'KK@p!R<% =}$.]HE=X\|6X@I$H5d\Vz5<KZRRVJk}1.Qm28PP#9JZZpyWTem]I;rA>>P*b}],>l~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49771	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	930	OUT	GET /file/UFNhm7mbEFhB4QrlFgeburrHC3qsTU_P4QzBqpQl7FLGcglXyHwWnn38h1ag9ExV45hNk6v_-VbYoQ2dWzNlG-3HYnELtf553wjaYxDUy2T-b3mxSNS1VcUcsBF0KBR0wC7tzEoFaaFc2-PVjgMhDGUWoBZ1wf0AdPaK-ioNRsa6Hz67S3ThrSQdwaBG2LGo-xHuFMnqvj1nlD-9cNYR9P2pbjuMAxNgIcMtrxJtqgo_YYaI2R_CE0NkOZ9bFw1h-bl__7xhxn0d5NS7SSNjaV91vsGff9xShp_k-qFgfLp7-_9fbSGyA0tWrLMwZK-rdRTLJ_BB2vDmw2YDk2quZg.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	686	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 138122 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:11 GMT Cache-Control: public,max-age=7200 ETag: "64c178a5aad63f6776dba7655bfcb5fcbf6d9db1" Content-Type: image/jpeg Age: 816 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:47 UTC	704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f Data Ascii: //050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIO
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: ff c4 00 1b 01 01 00 02 03 01 01 00 00 00 00 00 00 00 00 00 00 00 01 04 02 03 05 06 07 ff c4 00 3f 11 00 02 01 02 02 05 08 08 05 04 02 03 01 01 00 00 00 01 02 03 11 04 21 05 12 31 41 51 13 14 22 33 61 71 81 91 52 53 92 a1 b1 d1 d2 f0 15 32 72 b2 e1 06 34 42 c1 23 f1 16 43 62 82 a2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f5 ce 8a d0 da 65 ed 19 a7 1e 3a 76 d0 b7 55 6c 8c 56 55 01 a2 49 2d 24 92 7d 1a 9e 4e 87 d2 aa 03 3a 6a cc 95 78 fc 9c d7 e8 d2 ba 15 3f ee 23 4c a9 23 7f 92 a2 ff 00 34 9a 9d 53 63 3e c3 f5 1a 02 01 3a 1b 4b 0d 95 a6 ac bf c9 cd 7e 8d 6e ad 07 a5 88 db 4c d9 73 fb dc d7 e8 d4 d6 14 36 3b 8f 0a d9 2b f0 dc 78 77 8a 02 09 3a 17 4b 74 fb 99 b2 ed dd f2 73 5f a3 40 d0 9a 57 98 ff 00 b9 ab 2f 77 fc dc d7 e8 d4 f9 c1 dd 3d 6b 20 e7 df 40 57 Data Ascii: ?!1AQ"3aqRS2r4B#Cb?e:vUlVUI-$}N:jx?#L#4Sc>:K~nLs6;+xw:Kts_@W/w=k @W
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 60 a2 80 af fd c2 69 5f d8 cd 97 f9 39 af d1 a3 ee 13 4a fe c6 6c bf c9 cd 7e 8d 58 28 a0 2b ff 00 70 9a 57 f6 33 65 fe 4e 6b f4 68 fb 84 d2 bf b1 9b 2f f2 73 5f a3 56 0a 28 0a ff 00 dc 26 95 fd 8c d9 7f 93 9a fd 1a 3e e1 34 af ec 66 cb fc 9c d7 e8 d5 82 8a 02 bf f7 09 a5 7f 63 36 5f e4 e6 bf 46 8f b8 4d 2b fb 19 b2 ff 00 27 35 fa 35 60 a2 80 af fd c2 69 5f d8 cd 97 f9 39 af d1 a3 ee 13 4a fe c6 6c bf c9 cd 7e 8d 58 28 a0 2b ff 00 70 9a 57 f6 33 65 fe 4e 6b f4 68 fb 84 d2 bf b1 9b 2f f2 73 5f a3 56 0a 28 0a ff 00 dc 26 95 fd 8c d9 7f 93 9a fd 1a 3e e1 34 af ec 66 cb fc 9c d7 e8 d5 82 9a dc 26 a2 dd 11 c9 2e a1 6b 6d bc 73 04 00 48 19 c6 68 08 75 68 5d 2a 12 4f dc cd 98 ed d0 5b 9a 3f f8 6a 01 9e 1c e9 eb ea 55 22 6d 92 db 1e 3a 96 42 62 37 6f 65 b2 9c 1c Data Ascii: `i_9Jl~X(+pW3eNkh/s_V(&>4fc6_FM+'55`i_9Jl~X(+pW3eNkh/s_V(&>4f&.kmsHhuh]*O[?jU"m:Bb7oe
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: e6 71 1e b6 c3 d5 07 b8 9d cf b9 26 a3 d7 a3 ad 4b 4f a4 db bc dd eb 2e 92 4f bf 34 04 d4 64 06 e3 b4 94 1c 84 a0 00 7c 46 29 17 6e 2d b4 0f cc c9 59 1f 8b 1d 67 f2 52 f1 a3 b7 15 84 32 c8 21 b4 0c 24 29 45 44 0f 79 de 95 a0 21 9c d4 91 19 ff 00 7c b5 2e 3a 47 e1 39 19 60 7d 95 b4 6b dd a6 e8 43 2c ca 69 c2 14 08 42 c1 41 24 1c 8c 02 06 77 19 a9 7a 8b 99 a7 2d 73 9c ed 24 c3 41 59 ea a4 92 82 7d f8 23 34 03 99 70 c4 d2 84 3c 42 a3 0d d6 d1 4e 42 c8 20 8c 9f 00 47 4f c9 b5 24 f5 bb ce e4 15 4d 58 7a 28 e5 ec e3 f2 e1 20 8e f5 7e 36 fd 3b bd 99 de 9b 27 4b da d0 00 44 77 12 07 4e 59 0e 0f fc 55 28 c3 08 8a ca 5a 68 2b 91 3d 39 96 54 7e 92 49 a0 19 48 b6 09 ca 75 13 9d 2e 43 57 28 4c 74 fa 29 db 1b 92 37 3b f7 67 14 e6 13 11 63 b0 94 40 43 48 64 64 00 d6 31 Data Ascii: q&KO.O4d\|F)n-YgR2!$)EDy!\|.:G9`}kC,iBA$wz-s$AY}#4p<BNB GO$MXz( ~6;'KDwNYU(Zh+=9T~IHu.CW(Lt)7;gc@CHdd1
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 03 df 4c e5 f9 49 e8 06 54 53 16 e8 ec 9f 6f 99 bc 94 9f a5 19 fa ab 5b ab 4d 7f 92 28 4b 48 60 a1 27 19 56 8a 6b ff 00 a4 75 da 2b 88 af ca 4b 4a be 70 c5 d2 3c 40 7f 09 d8 b2 57 8f e2 b7 5b c7 e3 be 8e 5a b3 3b 5d 04 a4 f5 43 16 87 fe a5 16 bf 25 47 2b 4f d2 46 3f 89 e0 7d 74 7d a5 f3 3b 5e 68 ae 43 1f 8e 3c 2d 8e fa 64 7d d1 2d d9 00 10 1d 76 1c b5 91 ee cb 78 1f 0a 7f fe c8 8e 1b 7e c8 ff 00 fc 9f 2b ff 00 2e 9c ad 3f 49 0f c4 f0 1e ba 3e d2 f9 9d 31 61 65 68 28 29 e4 df 98 11 92 7c 31 bd 6e 2b 98 7f b2 23 86 df b2 3f ff 00 27 ca ff 00 cb a3 fd 91 1c 36 fd 91 ff 00 f9 3e 57 fe 5d 39 5a 7e 92 1f 89 e0 3d 74 7d a5 f3 3a 71 20 03 55 59 77 c9 57 59 6b 89 60 5a 5a 61 a0 54 fc d5 27 29 48 1d 79 41 eb e1 fd 73 5c fb 50 79 40 e8 79 c9 44 28 37 e5 22 3b bf 7f Data Ascii: LITSo[M(KH`'Vku+KJp<@W[Z;]C%G+OF?}t};^hC<-d}-vx~+.?I>1aeh()\|1n+#?'6>W]9Z~=t}:q UYwWYk`ZZaT')HyAs\Py@yD(7";
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: b7 7b 34 43 46 60 ea 69 fa f1 74 e3 68 41 35 1b 74 6e d6 d6 96 db 6d 79 7f a2 e1 75 5f 17 b4 b4 27 af 77 29 92 5a 8e d6 0b c5 4f b0 f2 5b c9 e5 1f 37 92 3a 91 d0 1f 1d ab ac f0 9f 5d 8d 71 a7 f3 39 d4 ae f1 0c f2 cc 4a 51 c8 0e 49 e4 50 1d 37 03 7c 77 83 b0 da b9 65 eb 45 71 14 d9 64 bd 7c d5 51 8d a4 b5 97 94 f5 c9 65 b5 20 f8 fa 3b e7 6f a4 55 af 82 9a 02 eb a5 67 cc b8 cc 95 02 55 be 74 40 96 97 11 fe d0 29 41 40 83 9c 0d b1 9a b7 82 78 9a 58 c8 c6 31 9e a3 59 eb b4 ed db b4 e7 e9 58 e0 2b e8 c9 ce 73 a5 ca c5 f4 5d 34 d5 f6 74 5d d6 6e cd bd bc 19 57 e1 77 13 f5 5e a3 d7 56 ab 65 e6 eb e7 30 5f ed bb 46 fc d9 a4 73 72 b2 b5 0d d2 90 46 e9 07 ad 5a 78 e1 ae 2f da 3e 5d 99 1a 76 7f 99 a6 4b 6e a9 d1 d8 36 e7 31 05 38 f5 92 71 d4 f4 ae 51 c1 3f f8 ce b1 Data Ascii: {4CF`ithA5tnmyu_'w)ZO[7:]q9JQIP7\|weEqd\|Qe ;oUgUt@)A@xX1YX+s]4t]nWw^Ve0_FsrFZx/>]vKn618qQ?
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 34 d4 84 ba db 04 17 12 db 11 90 86 f9 b3 80 0b 83 27 a1 ef 27 6a 8c bd 71 4b 89 3a 72 e6 fd b2 f1 75 f3 69 ac 72 f6 8d 79 ac 65 e3 99 21 43 74 a0 83 b2 87 43 50 9a 6a fd aa 74 65 ee 4d 97 4c 49 41 97 22 48 8e b6 9b 43 6f 21 d7 12 4a 53 82 47 89 3b 82 3d bd 2a 37 5c aa f6 bd 53 3c ea f4 25 17 93 d9 f9 c2 52 51 81 f3 69 e5 f5 3d 1f 57 94 ed 5c 6a 98 ba dc dd 49 54 a9 af 7b 3c fa 3b f2 ef fe 4f 51 4b 47 61 9e 31 c2 54 68 f2 6e 37 8d 92 d7 7b 33 69 ee ed ee 3d a7 0d 6a 72 24 77 1c 3c ca 5b 69 52 8f 89 22 aa fc 58 be 4e d3 5c 2c d7 17 bb 23 fe 6b 73 b6 69 f9 f3 21 bd c8 95 f6 6f 37 1d 6b 42 b9 54 0a 4e 14 90 70 41 07 bc 55 9e 07 fb c6 27 fd 4a 3e c1 54 8e 3b 7f c4 87 12 ff 00 fc 29 74 ff 00 54 72 be 97 1f ca 8f 85 cf 29 3e f3 e6 ee 8f f2 a9 f2 90 d7 ba 86 1e Data Ascii: 4''jqK:ruirye!CtCPjteMLIA"HCo!JSG;=*7\S<%RQi=W\jIT{<;OQKGa1Thn7{3i=jr$w<[iR"XN\,#ksi!o7kBTNpAU'J>T;)tTr)>
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: db 02 d9 da 24 85 3e cb 61 c5 3a da 15 d0 11 e8 a8 a7 62 a0 33 bf 29 c0 14 6b d7 1f 3c a4 38 0f aa e3 42 e2 05 d2 6a 1e 57 23 ea 85 73 6a 3c 96 25 35 9d c2 5d 40 23 1d c4 b6 b0 41 db 20 d7 bc 87 18 4e b3 f2 69 bd 71 33 47 87 2d 72 d5 a6 2e 33 a2 87 10 97 0c 69 4c 34 e8 23 d2 1c ab e5 75 a3 82 46 14 06 48 c1 c5 79 c7 fb 23 3a bf 4b 4b b0 e9 dd 30 99 31 e4 6b 18 57 21 2c b4 82 54 e4 58 8b 65 61 61 64 6c 9e 75 76 2a 09 3b 90 90 71 8d cc c7 00 63 cb 89 e4 13 ad 57 3d c2 59 95 66 d4 0e c2 04 8f 45 a0 cb a8 20 7f 8c 43 87 7f 1f 75 01 e5 b5 f9 6b f1 d1 69 21 5a e7 20 ff 00 ec 68 1f f9 15 f4 7e c3 c7 4b 03 fe 4f d1 f8 b5 34 76 16 ff 00 92 8c 89 0d f2 a8 7e a9 4a 8b 4a 65 3b 67 77 d2 5b 07 a1 c8 3d 2b e5 7f 04 b8 7b 2f 8a 37 9d 45 a6 ac ed a1 db a4 8b 04 97 e1 20 Data Ascii: $>a:b3)k<8BjW#sj<%5]@#A Niq3G-r.3iL4#uFHy#:KK01kW!,TXeaadluv*;qcW=YfE Cuki!Z h~KO4v~JJe;gw[=+{/7E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49791	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	696	OUT	GET /file/FmiN1jd6kyJcAeWZgqW4F1M6SO2Eq2RyWTZW_blsnSEOdaGcnsZyCyUn7iIiSZTDSWAItP34AXMi8zvOoqM-IcdUp3TUVCz0MhcVRIWT4BXCt3eTxwYPub8hQGapqCMCUQQ656ysDa7TxKg2_iJgkXF8jnWEsubIs0Q7ol6Ma4rq1Tj21ueeiPUmscCaomkBd2JrnI_qU6CxtVAC7Dn7w-z6QsmN4TePjVK8NNkb7liOQWKnbxGEfgDyDriRvwLWSnaFj8kfRICBMhevGgqVyW0k0KWygDnfKeiWFwAmnmNtvGOtou8h7HZNKTgQEuX-Z2IvurSOcnyALF6aJtSGUg.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	684	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 7097 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "b89cf97bea36a66e0e73b908166e5cf0490cd719" Content-Type: image/jpeg Age: 817 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:47 UTC	706	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 02 02 02 02 02 01 02 02 02 02 03 02 02 03 03 06 04 03 03 03 03 07 05 05 04 06 08 07 09 08 08 07 08 08 09 0a 0d 0b 09 0a 0c 0a 08 08 0b 0f 0b 0c 0d 0e 0e 0f 0e 09 0b 10 11 10 0e 11 0d 0e 0e 0e ff db 00 43 01 02 03 03 03 03 03 07 04 04 07 0e 09 08 09 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e 0e ff c0 00 11 08 00 a0 00 a0 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 01 00 02 03 00 02 03 00 00 00 00 00 00 00 00 00 00 08 09 01 07 0a 02 06 03 04 05 ff c4 00 48 10 00 01 03 03 02 03 05 03 08 08 04 02 0b 00 00 00 01 02 03 04 00 05 06 07 11 08 12 21 13 31 41 51 61 14 22 52 09 15 32 42 71 Data Ascii: JFIF``CC"H!1AQa"R2Bq
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: ba 99 64 9e 89 09 1b f3 b9 de a2 0f 50 9d 85 40 8e 07 b0 88 d9 5f 1a 6c de 27 b2 97 a1 e3 36 d7 2e 48 4a c6 e9 32 0a 83 4c 9f b8 ad 4b 1e a8 15 38 f8 e3 ce a5 e2 1c 1c 7c c9 6c 7d 71 e6 e4 f7 14 db 9c 71 07 65 08 e1 2a 75 e0 0f ef 04 a5 07 d1 66 ad 74 d6 5b 66 59 73 ae 0b da f6 ee f3 be 51 bd 70 75 3e 4e 9d 48 7b 10 cd a3 68 b7 7d 80 79 58 5c 73 2a 21 20 ee 17 22 35 0e ac f1 f0 d5 af 26 9b 64 d2 4b 14 4b cb 2c 2c b6 ab fd d8 ac b0 f2 87 42 59 65 25 25 49 f2 5a 94 37 f0 4e dd 6b 46 da f8 f4 d7 08 57 84 3f 3e 36 3b 77 89 bf bf 19 76 b5 32 08 f2 0b 43 9b 8f b7 af df 50 9c 9e b5 8a c4 b9 52 9e 71 7b 5b 64 72 1a 45 1e 6b 19 62 39 99 82 e8 98 52 33 c8 27 24 8e 56 b1 bf 7d ef 17 cb a1 9c 42 61 5a ff 00 86 ce 80 98 49 b5 e4 ac 47 da eb 60 9a a4 bc 16 d1 f7 4a d0 Data Ascii: dP@_l'6.HJ2LK8\|l}qqeuft[fYsQpu>NH{h}yX\s! "5&dKK,,BYe%%IZ7NkFW?>6;wv2CPRq{[drEkb9R3'$V}BaZIG`J
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 88 dd 18 3d 10 49 1d 36 3b d7 47 5a 58 89 0d 70 cb a7 2d cb dc 4a 4e 33 6f 4b c1 5d e1 5e cc de fb fa d5 1c 68 06 8d 5e 75 97 5e ad 96 68 f1 1d 18 dc 47 d0 fe 41 3f 97 f4 71 e3 03 b9 46 fd dd a3 9b 72 25 3d fd 49 ee 49 ab 9e d6 fd 4c b5 e8 ef 0b b7 fc 99 4a 6e 3c c6 63 7b 25 92 28 3b 76 b2 96 92 96 50 91 e4 9f a4 7c 92 83 56 fa 32 3a 26 dc 98 5e 49 b7 d2 e4 fd a3 d0 1e ce d9 54 84 a4 dd 4e 63 e1 6a c0 5c ef d9 ba 89 1d 99 0e 64 da 28 e7 52 e5 31 37 8b bc f6 5c 52 0c 67 b2 f9 ab 68 8e e2 93 2d 5b 55 fa ea 22 3b 4e 1b b3 a6 fe 2c 66 68 fc e3 2e b9 cd 8c eb 8e e4 11 9d 79 65 d7 57 25 2a 5a cf 7a 94 55 b9 27 ed 3d 6b a3 cc d9 1d a6 85 e5 8d 7c 76 19 49 fc e3 aa 94 73 b6 1f 3c 7f ca 3b 3d 9f 2f a7 6e a4 bf e6 cf c4 3a 7c e3 9b 41 fa b4 ff 00 08 fe 95 93 b8 49 Data Ascii: =I6;GZXp-JN3oK]^h^u^hGA?qFr%=IILJn<c{%(;vP\|V2:&^ITNcj\d(R17\Rgh-[U";N,fh.yeW%*ZzU'=k\|vIs<;=/n:\|AI
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: f5 5e 5c a7 cb 6a c6 df fe f0 ac 13 8e ad e5 97 16 6e 4c 6a 89 d9 c9 aa 84 ca a6 66 15 b4 b5 1b 93 eb 40 34 03 70 8c 52 94 ae a8 c7 c2 94 a5 21 13 0f 81 e6 2d 73 b8 d8 55 ae ef 6d 89 74 8b 2f 1d 96 94 b3 32 32 1e 40 5a 14 d2 c1 01 40 8d f6 49 eb f6 d4 f2 e2 87 43 1f d4 1d 13 c7 71 ad 38 c5 2c f0 ef 6e e4 8c 2e 44 b4 45 6a 2a 23 47 0c bd ce e3 8b 4a 42 b9 01 28 e8 37 24 ed b0 35 5d 9c 1a 4d 30 fe 51 2c 15 23 7e 59 2d cc 8e a0 3c 95 11 c3 fd 52 2a d9 b5 ff 00 57 63 68 a7 0f 33 32 e3 00 dd 2e 6e c8 44 2b 54 53 b8 6d 72 1c 0a 29 2e 11 d4 21 21 0a 51 db a9 e5 d8 6c 4e e2 e9 4e 0c ae 98 e0 77 24 82 6e 77 db 23 c2 3d 1f 84 9b a7 cc 60 c9 84 ce 64 d8 52 f6 95 61 70 3e 03 91 b1 3c 87 6e 51 1b 71 1e 04 f4 9f 16 c6 9b 9d a9 59 14 bc 96 60 03 b7 26 67 cd b0 10 7c 40 Data Ascii: ^\jnLjf@4pR!-sUmt/22@Z@ICq8,n.DEj#GJB(7$5]M0Q,#~Y-<RWch32.nD+TSmr).!!QlNNw$nw#=`dRap><nQqY`&g\|@
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 53 96 f0 50 20 a7 3c c6 ef e9 1c 37 58 f8 9b c6 82 99 a9 b2 e2 1c 43 8d 59 79 a4 75 45 81 08 06 ff 00 08 37 49 41 b7 35 1b 9b eb f9 14 a5 2a 14 54 a1 4a 52 90 89 25 c2 1f ed 14 d3 6f f5 12 7f b4 7a ac 03 e5 01 ff 00 a1 65 8f fe f6 c6 fe de 45 57 ff 00 08 7f b4 53 4d bf d4 49 fe d1 ea b2 ce 35 70 8c 97 38 e0 c9 4c e2 f6 e5 dd a6 5a 6e ec dc e4 45 64 15 3a b6 1b 6d d4 2c a1 23 aa 8a 7b 40 ae 51 d4 80 76 dc f4 ab 6c 92 4a a9 2f 01 ae 7f 41 1b ef 0d b6 e3 d8 0e a0 86 c1 24 95 64 35 ea a0 f9 18 a4 13 df 4a f2 20 83 e7 f6 56 39 4e fb 77 74 df af 4a a9 46 85 b1 bc 59 c7 c9 d3 76 95 ed 7a a5 62 5a 89 84 13 06 62 52 7b 92 e1 2e b6 4f de 94 a7 f9 6b d7 b8 fd 6a 1c 8e 27 f4 c2 3b a5 20 bb 67 28 90 7c 7b 33 2f 61 bf a7 55 ff 00 bd 6f 2e 04 74 ce e7 87 e8 0d ef 34 bd Data Ascii: SP <7XCYyuE7IA5*TJR%ozeEWSMI5p8LZnEd:m,#{@QvlJ/A$d5J V9NwtJFYvzbZbR{.Okj'; g(\|{3/aUo.t4
2024-09-20 22:48:47 UTC	831	IN	Data Raw: 5f 63 b8 de 1d 71 c1 f4 9e ea cd e3 29 90 d2 a3 49 bc c1 58 54 5b 5a 08 e5 57 66 b1 d1 c7 76 dc 0e 5d d2 8e fd f7 00 55 49 95 95 28 92 49 24 ef ba 8e e7 f3 f1 af 1d fa 01 e0 06 c3 d2 b1 58 79 b9 b7 a7 1c db 73 76 83 70 f5 c6 35 ed 72 bd 3b 5e 9a 0f 4c 58 01 92 52 34 48 e5 c4 f1 27 5e cb 08 da da 4b ac 79 9e 8d 6a 2f cf f8 8c c4 06 df 09 45 c6 dd 24 15 45 9c d8 3b f2 b8 90 41 04 6e 79 56 36 52 77 3b 1d 89 06 cb f1 7e 3a 74 6b 27 c6 04 3c f6 c9 71 c6 25 38 90 24 b1 22 08 b8 c3 59 f4 52 01 24 7f 12 05 53 d5 67 7d bc 2b b2 5a 7e 66 51 3b 28 37 4f 03 98 89 74 7c 53 57 a2 b6 5a 61 61 4d 9f ca a1 b4 9e ed e2 fb ec 6c 78 45 cd ca e3 1f 86 ac 3e d3 21 58 ab 32 27 3c b4 ef ec b6 4c 73 d9 7b 53 e0 0a 96 96 d3 f9 93 50 17 5e b8 a4 cc 75 a9 06 c4 dc 6f f0 b6 0e db a1 Data Ascii: _cq)IXT[ZWfv]UI(I$Xysvp5r;^LXR4H'^Kyj/E$E;AnyV6Rw;~:tk'<q%8$"YR$Sg}+Z~fQ;(7Ot\|SWZaaMlxE>!X2'<Ls{SP^uo

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49795	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	696	OUT	GET /file/J5IrM8TywMmqx4ZfsUIWmzOHXcIjMdle0j0Zye8AO8h7bW7lhRtHf3rwMLDqu1isIJ0dw4EPOjBNlHAyHkNkqgqqjh8bR4nUqiAq6P_Ej9AZoBXBJeew5Cc4vlPcPkF_wYV80A7hegzAshbhSvXqCnDH5V6aOOf7JlRhjqTNYlbVwc86WiQGXK-PYmGGLWbETscY3DjcM5yPhiNFExJeNB4Vmje0RXBoV0ZTy6_9TRw07Sxw2e1uNLWxPedOdw1hodtMeSZKBpnDOCWgw8at3icavvKT6l06C2LJfPQsvc5AA8D84CylCQg4KJNRiSPyY75fex2yWcr7nk-SqIErpQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:48 UTC	675	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:47 GMT Content-Type: image/jpeg Content-Length: 66278 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "0b3a6e11912b26edc5a807ff7f70cf817800e057" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:48 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e2 01 db 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 cb 00 00 00 00 02 40 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 51 74 05 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 72 58 59 5a 00 00 00 f0 00 00 00 14 67 58 59 5a 00 00 01 04 00 00 00 14 62 58 59 5a 00 00 01 18 00 00 00 14 77 74 70 74 00 00 01 2c 00 00 00 14 63 70 72 74 00 00 01 40 00 00 00 0c 72 54 52 43 00 00 01 4c 00 00 00 20 67 54 52 43 00 00 01 4c 00 00 00 20 62 Data Ascii: JFIF``ICC_PROFILE@mntrRGB XYZ acsp-QtrXYZgXYZbXYZwtpt,cprt@rTRCL gTRCL b
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 06 31 41 13 51 07 22 61 71 14 32 81 91 23 42 a1 b1 08 15 52 c1 33 62 d1 e1 f0 16 24 72 82 43 53 a2 f1 17 25 63 34 73 92 c2 d2 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 07 ff c4 00 31 11 00 02 02 02 02 01 04 01 03 03 03 05 01 01 00 00 01 02 00 03 11 21 04 12 31 05 13 22 41 51 32 61 71 14 23 81 91 a1 c1 24 42 b1 d1 f0 52 e1 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 13 a6 74 01 ab da ac b7 2e 16 1f 6c f2 6b f5 df 45 da c5 7f 21 04 2a f1 8f 7a fb a0 ad e5 b6 9e c6 22 db 23 1f 97 1e 28 f8 6f 4c ac a6 46 dc 49 ee 6b ca 5b 78 54 09 8d cc 57 c0 32 bf 77 a0 9b 39 11 e2 04 a8 35 fa e5 16 f2 13 13 27 a6 c4 77 c7 7a b7 b1 8d d3 69 c1 cd 2d b9 b0 e0 95 19 5f ed 48 06 63 e2 0c 1c 4c 2b aa b4 63 6d 76 bb 32 01 f3 5a bf c0 0d 75 Data Ascii: 1AQ"aq2#BR3b$rCS%c4s1!1"AQ2aq#$BR?t.lkE!*z"#(oLFIk[xTW2w95'wzi-_HcL+cmv2Zu
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 1f a5 6b dc dd 2b 26 31 7b 61 71 0d b8 be 44 05 41 c9 02 ab 77 ba 93 b4 84 27 03 b1 fa ff 00 e7 34 b6 6d 4d dd 88 56 25 47 9a 1a 5b 89 36 33 f0 4e 3c fb 57 9f 21 99 b3 32 82 12 77 2c 36 37 78 0a 1d b0 dd c5 49 a9 ea 0a fb 80 90 96 1e 41 aa 03 6a d2 c7 38 3b 8e 79 f3 cf 7a 3a 1b e3 2a e6 43 9c f0 4f b5 41 e1 95 6e f0 e5 0a 88 75 c5 c0 56 dc e4 31 ef 9a e2 3d 4c 2a e3 0d fa 1c 50 12 b9 60 55 36 91 f5 a1 1a 19 9c e4 2f ef 4e 2a 2e 37 21 50 1f 33 d6 76 9d 4d 6b 0c 60 a2 60 ba ec 65 26 a1 4c 86 0d 82 aa fc a9 f0 6a 89 aa 6a 43 4b d4 5e 29 be 58 b7 f2 71 9c 56 8d d3 3a 95 8d ed b4 5b 66 47 55 20 80 79 aa dd 57 63 89 5d b9 c1 87 da d8 dc 4f 19 78 d4 b6 d1 d8 57 2e d2 a6 43 82 31 c1 15 a0 e9 5a 96 93 1a a9 8c a4 72 6d c7 b0 35 55 ea cd 5a c6 29 83 23 28 2c 71 c0 Data Ascii: k+&1{aqDAw'4mMV%G[63N<W!2w,67xIAj8;yz:COAnuV1=LP`U6/N*.7!P3vMk``e&LjjCK^)XqV:[fGU yWc]OxW.C1Zrm5UZ)#(,q
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 9a cd e2 49 39 23 8d bc 0c 76 35 6e 61 c0 0b 33 39 2c 33 04 86 df 7a 02 57 77 d0 51 53 44 8a 9f 32 85 38 f3 40 c1 76 01 3c f1 f4 a9 1a 43 20 20 9e 31 c0 ac 82 a7 39 31 20 77 2b f7 36 c1 ae b3 ce 3e 94 54 36 de 98 00 1d a0 9e c6 8b 64 09 b9 d8 02 4f d3 3f ad 47 b8 00 33 9c 63 83 ff 00 6a 77 b9 61 0a ce 5b 53 80 87 80 73 df be 29 c4 36 eb e9 8f 91 8f d7 34 97 78 23 2a e4 86 ef 5d 7f 98 63 b9 ff 00 f5 73 43 64 2f e2 70 9b 87 c4 dd 21 e0 d4 cc b0 8e 19 fc 0c d5 52 ca 69 a0 2b e9 33 c6 e3 c2 92 33 5a b7 55 5a 32 5e 49 63 7c 43 49 0b 9d ad ee be 2a ac 74 88 fd 53 91 5c d7 64 ca 38 01 b5 08 d0 fa 82 ed 48 8e e0 99 10 77 f7 15 a9 58 e8 31 ea 96 d1 35 c2 99 ad a7 4c 82 3b 8f fb d5 0b 48 d1 a3 99 a3 2b e4 e0 fd 6b 5e e8 7b 68 92 68 ec a5 62 22 7f 1e c6 ac 39 1b ea Data Ascii: I9#v5na39,3zWwQSD28@v<C 191 w+6>T6dO?G3cjwa[Ss)64x#]csCd/p!Ri+33ZUZ2^Ic\|CItS\d8HwX15L;H+k^{hhb"9
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: ae 91 99 4f be 38 aa 51 43 6d 74 3d 76 27 3f d2 98 b5 0b 31 73 31 1d 43 12 63 1b 68 db 6f c8 00 19 e2 98 c6 c2 28 9b d4 0c 49 c6 3e b5 1d bc c8 f1 92 38 0b cd 43 3c fe a2 66 25 c0 07 9e 7b d6 69 cb 9c 62 26 3c ce 6e 64 3b ca ae 08 c7 93 fe f4 3b b9 08 79 5e 78 ce 7b 54 4d 21 01 98 9c f3 50 b3 0e 7c e7 eb 4c 2a e2 10 2c e5 26 76 63 cf 3f 6e d5 21 3b 89 24 ed fa 0a f8 85 7c 8f 98 f6 fa d4 98 c9 ef 8c 7d 28 87 cc 26 27 b0 fe 20 69 b3 5d 6a 6f 77 04 6c cb e8 06 18 1e 41 aa 62 31 d8 18 8f 1c 9a f4 9e 9f a1 db 6a 1a 60 59 36 b1 64 20 1c 7b 8e d5 89 f5 2f 4f 8d 2f 50 ba 8a 35 3b 43 60 ae 3d c7 06 97 ba be a7 23 c4 eb ea 20 96 11 7f 4d 5c 01 2e c6 c1 f9 b2 2b 47 b2 32 da 3c 77 30 8e 50 ee 15 9b 68 76 e6 0b 80 d2 8f 95 ab 46 7d 51 0c 51 c4 b8 05 94 01 8a 09 45 c6 Data Ascii: O8QCmt=v'?1s1Ccho(I>8C<f%{ib&<nd;;y^x{TM!P\|L*,&vc?n!;$\|}(&' i]jowlAb1j`Y6d {/O/P5;C`=# M\.+G2<w0PhvF}QQE
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 3a 91 1d 7e 17 cc 52 61 94 71 91 8a a4 75 1d ea 4d 7a 4d af 08 ad df de 88 8a dc cd 28 20 f7 62 6b a9 ac 14 38 2c 14 e4 f9 e3 34 f3 30 51 99 93 e2 0d 67 7b 33 db 61 72 a4 0e 38 ce 6b b9 2e a4 41 ce 06 3e 9d e8 d8 e0 45 8f b2 82 3e 98 a5 d7 c1 1d 1f 09 ba 41 e6 90 05 59 fc 40 95 19 82 dd eb 2a a4 01 b8 63 b8 a8 ad b5 2f 59 c0 0a c4 76 a5 57 36 ed bf 6a 8a 69 a4 59 ee 60 cd 9d ab ce 40 e0 d3 ac 95 a2 66 15 95 15 72 21 f0 cc cc 03 05 c8 1e 7d 8d 14 93 a8 51 99 55 4f b1 38 a8 da 38 e2 ca 83 b7 8e 07 d7 ed 40 32 99 19 88 07 be 3b 1a 54 00 fb 80 f3 e2 7b 83 e1 4f c4 89 f5 1d 32 0d 3e f5 9c 5d c2 31 93 dd b1 d8 d5 e7 5b d0 7f cd 77 ea 39 09 74 07 fc 36 ec ff 00 4f d6 b1 de 8e b0 b6 b4 bd 49 ad 64 11 48 8c 38 26 b7 78 9a 6d 4d 23 85 b0 92 6d 05 59 69 34 b5 58 1a Data Ascii: :~RaquMzM( bk8,40Qg{3ar8k.A>E>AY@*c/YvW6jiY`@fr!}QUO88@2;T{O2>]1[w9t6OIdH8&xmM#mYi4X
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 2e e3 81 cf 7a c4 75 3b d4 9d f6 8e 5b ef 9a 71 41 5a c4 5f 94 d9 7d 45 f1 4e d0 dc b3 96 c4 61 70 17 ed e6 82 d4 b5 c5 32 28 47 38 38 cf 3d bf ef 5c 5f 34 9b 4a a2 93 c7 7a 42 d0 3b 38 2d c0 34 ca a8 71 b8 b2 af 6d 99 68 82 fd 6e 71 82 c0 9e 46 7c d1 f0 5b 89 db f2 92 33 df c5 26 d1 6c 19 9b e6 23 f4 3e 2a df 63 60 eb 10 6c 01 59 b7 95 ac fc 62 d6 90 b9 8b 6e 34 28 99 01 50 01 3e 00 02 a5 b3 b0 58 9d 50 0c 01 e3 14 d9 d3 f9 40 c9 f7 ae 22 8f d3 60 0f 3c 60 0a 53 dd 66 18 cc 49 ac 27 50 3b bd 38 18 99 80 c1 03 8f 6a a9 dc 69 f3 c9 2b 15 03 19 c7 1c 66 af f2 5c c5 14 64 11 c7 bd 57 5a ea 16 76 23 20 13 91 8a 66 9b 19 47 8c c3 50 c4 f9 97 9f fd 77 35 ac c9 18 73 f2 e0 6f 1e 7e f5 bc fc 34 f8 87 71 75 6b 0a cc fe a8 85 81 23 ce 33 5e 62 b9 d1 25 8e 72 1a 36 Data Ascii: .zu;[qAZ_}ENap2(G88=\_4JzB;8-4qmhnqF\|[3&l#>*c`lYbn4(P>XP@"`<`SfI'P;8ji+f\dWZv# fGPw5so~4quk#3^b%r6
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: a1 1d 52 de 20 5a 3d b9 02 b5 ec 0c 00 55 99 76 b3 3b 12 23 19 e2 8c 45 b4 9c 95 39 3c f7 aa e5 e0 45 94 a4 69 92 0f 7a ee 5d 61 98 36 1c 0c fd 05 08 97 a8 66 dc 4e e2 7c 91 8c d1 2b 56 51 b9 15 29 fb 96 3d 26 35 8f 18 0c 4e 72 41 ab 4a 4a 85 7f 30 fd fb d5 1d 75 58 e3 8b 38 e4 fd 68 e8 35 8f 51 91 40 c2 a8 3d cd 23 6d 0e e4 ea 2f 6d 65 8e 65 b3 72 8e 58 e0 0e 47 15 d4 d1 97 5c a9 39 ee 31 55 4f f3 e6 6b 80 a8 dc 67 00 66 ad d6 13 7a a9 b9 f8 e3 3c d6 7d b5 3d 3b 31 0b 11 90 64 ca be a5 0d c9 46 2b c7 dc 9f f7 fb 55 3e e1 66 49 58 48 8d bb ce 05 69 d7 f2 c7 e9 b1 da ac 79 1d bb 0a a3 5e c6 86 e1 89 e0 9e e2 9f e1 dd 91 82 23 94 59 ac 62 7a 56 fb a5 77 de 06 5c 73 fc b8 e2 88 d3 d2 3d 38 3c 37 2a 23 74 3d ab 42 d2 7a 7e e7 53 47 9a 24 c3 3c 61 80 27 bf d2 Data Ascii: R Z=Uv;#E9<Eiz]a6fN\|+VQ)=&5NrAJJ0uX8h5Q@=#m/meerXG\91UOkgfz<}=;1dF+U>fIXHiy^#YbzVw\s=8<7*#t=Bz~SG$<a'
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 24 06 d6 cd 98 fb 0c 56 75 f1 1f 54 30 59 c9 18 6d ac dd c6 7c 66 98 e0 d6 3d cd 4d cb 8f 5a fa cc 3f ac 75 46 bb bf 65 0d 91 9c 9a ac e4 fb d4 f7 d2 99 ee a4 76 39 3b aa 01 e2 bd 16 04 ce 03 53 e9 24 f9 ae 6b a2 6b 9a 99 33 a0 ec 07 73 53 47 75 22 0c 06 e0 d0 f5 35 bc 46 69 02 8a 83 8c 6e 54 e0 6c c9 ed 9d 8c ea e7 90 0e 7b 62 ad eb ae 9b 58 4a b1 db 91 c1 1f f5 ae b4 3e 9a 79 e3 0f 22 9d a3 fa d0 dd 4b a0 4b 6d 6e 25 5c 6d 04 e4 03 8c 0a cf 76 aa e7 ea 62 0c e9 6b f5 8a af 3a 92 59 c1 08 48 19 ef 9a 5b 25 e3 4a e5 d9 89 27 de 82 e4 70 7b d7 dd c2 9c 5a 91 06 00 8e 0a d5 7c 4f ec 9e 83 d2 b6 91 69 f1 9f 48 60 a0 f1 54 de b6 e9 8b 69 22 b8 61 19 6f 91 81 18 f1 8a d2 34 9d 56 23 a7 a7 a6 e0 86 00 62 95 eb 5a 58 d4 0c 92 02 70 47 83 e2 bc 77 25 16 c6 0c 90 Data Ascii: $VuT0Ym\|f=MZ?uFev9;S$kk3sSGu"5FinTl{bXJ>y"KKmn%\mvbk:YH[%J'p{Z\|OiH`Ti"ao4V#bZXpGw%
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 08 c0 f2 2b 47 bd bc 51 08 12 36 40 15 9a eb e9 f8 c9 99 71 f9 89 cf de b5 38 75 05 dc ce e4 d8 4c c8 65 b7 78 c9 de 08 a8 b1 8a be 5d e9 88 51 97 1c fd a9 04 9a 2e d7 e0 f1 9f 35 aa 56 2a 2c 11 09 ef 5f 3b 53 f8 b4 46 c1 0c 79 27 db 8a 90 f4 f3 b7 0a 72 73 c7 15 18 96 ee 22 2b 6b 76 b9 90 24 60 b3 1f 02 ad 3d 39 a1 ee b9 53 2a 92 43 60 83 4c f4 1e 97 78 24 fe 27 cc 4f 7e 7f f3 e9 57 d8 34 32 be 98 8a 35 fd 06 2b 33 95 7f 5c a8 89 5f 76 34 23 1d 37 4f 8a 28 00 1d 80 c6 33 50 ea da 55 bd e4 27 28 5c f8 51 ef 47 db d8 4a a8 4b 82 14 0f de b9 82 19 03 39 6c 6d 23 8c 9e 6b 0d 1f ab f6 cc 42 a3 86 dc c2 fa 9f 48 6b 09 cb ed 23 dc d5 72 b6 3e b6 d2 5a 4b 4d b0 80 d2 3b 70 48 ac 92 6b 49 61 91 91 90 82 2b d2 d1 68 b5 3b 4d 9a 9b b0 9f d8 8d 66 7b 7d 0e 26 94 46 Data Ascii: +GQ6@q8uLex]Q.5V,_;SFy'rs"+kv$`=9SC`Lx$'O~W425+3\_v4#7O(3PU'(\QGJK9lm#kBHk#r>ZKM;pHkIa+h;Mf{}&F

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.4	49793	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	696	OUT	GET /file/BDoevstmwc-LH-sbj-OyBhlAr9f_8REM5GylyjUbzp0C14JNGE0luefvosada74HY1heslHYjIFTJqYowqHZW2U0Ud55ISGdzPYMuUbsvK0U7jqDYY-QLs3IPVb2zbi0EMPrw82DmDiXtGfIl_nXcDU-a02mI72VHUBwEsB8wPyHqiKczgkPdhtL1n1sOO-1c3RWSQMS52k5nV_uHDjd1h8NFSl9LNRD-BGQdwhHx5IRdErI4RlKKXdjeDtsd-MzL846KS9mGB6U7PDlMoKR93EFw9CuEkhZl3NsVJvFI6ObKpJ6EdDOS9ZZBfCfFHU7de_YfmsbShE42TJI1yJqEA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	683	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 69659 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:48:44 GMT Cache-Control: public,max-age=7200 ETag: "dd7a2e944a3b56783d67be812bee82502c1844e5" Content-Type: image/jpeg Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:47 UTC	707	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e2 01 db 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 cb 00 00 00 00 02 40 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 51 74 05 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 72 58 59 5a 00 00 00 f0 00 00 00 14 67 58 59 5a 00 00 01 04 00 00 00 14 62 58 59 5a 00 00 01 18 00 00 00 14 77 74 70 74 00 00 01 2c 00 00 00 14 63 70 72 74 00 00 01 40 00 00 00 0c 72 54 52 43 00 00 01 4c 00 00 00 20 67 54 52 43 00 00 01 4c 00 00 00 20 62 Data Ascii: JFIF``ICC_PROFILE@mntrRGB XYZ acsp-QtrXYZgXYZbXYZwtpt,cprt@rTRCL gTRCL b
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 02 03 00 04 11 05 12 21 06 31 41 13 51 07 22 61 71 14 32 81 91 23 42 a1 b1 08 15 52 c1 16 33 62 d1 24 72 82 a2 e1 f0 43 73 92 f1 17 25 53 c2 27 83 b2 ff c4 00 1c 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 ff c4 00 38 11 00 02 02 01 03 02 04 02 0a 03 00 01 05 01 01 00 01 02 00 03 11 04 12 21 31 41 05 13 22 51 61 71 06 14 32 81 91 a1 b1 c1 d1 e1 23 42 f0 15 16 33 52 92 f1 43 62 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 c9 06 06 01 19 c7 7c 57 ab f3 1c 1e 29 41 01 27 1c 52 c4 60 10 49 e6 bc eb 38 99 4c e6 7c 31 d8 d3 8a 8a c3 91 f6 34 e7 f0 9e 1c 71 ba 9a ec 72 05 21 68 91 71 c6 49 c8 34 54 24 8c ee cd 32 a4 38 05 17 67 8c 03 c5 23 51 d5 ad f4 7d 36 e2 ee f1 64 60 85 56 30 9e 58 fb fd 38 34 06 25 c8 55 e4 99 c0 6e 38 10 8d Data Ascii: !1AQ"aq2#BR3b$rCs%S'8!1A"Qaq2#B3RCb?\|W)A'R`I8L\|14qr!hqI4T$28g#Q}6d`V0X84%Un8
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 26 bd c3 c3 74 35 e9 86 70 37 63 93 8e a7 ff 00 d9 04 9c 98 c4 d2 ec 42 49 c5 01 13 49 75 29 db f9 7c d3 f7 2a d3 90 89 8c 62 8a b4 b6 58 14 8c 73 e4 d5 e8 db 5a fc 63 b3 0c b6 41 1a f0 a4 51 41 b0 3b 8a 08 cc 10 7c c6 86 6d 45 41 c0 c5 44 35 b3 9c c6 f3 37 85 8f 6e 77 1c 1a f7 05 79 c7 7a 9f ba d0 25 6b 8d 96 cb bd b6 e7 03 da a3 ee 6c a4 b5 65 8e 74 2a d8 f3 58 df 35 71 c1 99 c2 a4 41 12 20 40 c7 06 95 12 65 99 5b 1c 53 88 a4 0c 03 9a 7b 6c 76 d0 34 f3 29 62 7e 55 5f 73 ef 42 7b 31 18 79 88 86 26 0d b6 31 f2 9e 73 ed 55 ae b3 8a e7 59 89 34 ed 3a 1f e0 46 e1 de 57 3b 43 1c 63 03 ed 9a 97 9e f5 e4 3b 17 08 87 b8 5e 33 5e 64 00 69 69 b1 ab 7d f8 e6 39 5b 69 c8 99 a4 fd 15 a8 40 85 d1 a2 95 bf d0 ad c9 fb 50 23 4e 9e c6 64 8e f6 3f 49 fb 8e 6b 56 db bb b5 Data Ascii: &t5p7cBIIu)\|bXsZcAQA;\|mEAD57nwyz%kletX5qA @e[S{lv4)b~U_sB{1y&1sUY4:FW;Cc;^3^dii}9[i@P#Nd?IkV
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: aa 75 94 8b a5 e4 07 58 26 07 9e 33 e8 aa 0c ef e7 1f 70 3e b5 9e 6b 1a cd bd ec e3 64 85 91 72 17 08 47 f7 a8 ad 47 51 ba d4 26 2f 7d 71 25 c4 ad 8c bc 8e 58 e3 db 24 d0 0d b5 4f 7c d7 9f d7 a7 09 ce 49 94 af 71 61 81 d2 4a ad d4 4a 47 a6 b9 27 de 99 bb 66 9f 69 62 48 03 81 e0 50 0b 38 5f e5 cd 37 35 f1 53 ed 47 d8 73 c4 8f 98 e9 8c 2b 79 af 1e 50 b9 20 f1 41 fe 28 cb 8d e7 cd 78 f3 f0 00 e6 8c 10 e7 99 d0 85 9c 83 f2 82 69 d5 95 88 f9 f1 51 cb 2b 6f c7 70 4d 35 a9 ea f1 e9 96 ea e5 1e 56 27 6f 03 80 7e a6 8c 2a 2c d8 03 30 8a 09 e0 46 f5 ee a1 b7 d1 82 7a c1 9e 47 07 62 81 51 76 9a 97 f9 84 22 63 81 bb c7 b5 52 b5 4b 87 d4 2f 24 b9 b8 6c 92 c4 fe 9e c2 a4 f4 0b cc 3f a2 78 07 90 2a eb ea 6b 5d 20 8f b5 de 5a d5 58 51 cc 7b a9 ec 84 d1 89 02 64 81 9c d5 Data Ascii: uX&3p>kdrGGQ&/}q%X$O\|IqaJJG'fibHP8_75SGs+yP A(xiQ+opM5V'o~,0FzGbQv"cRK/$l?xk] ZXQ{d
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 90 03 f2 a6 7e d5 52 ea 0e b7 1a 5d 88 93 4b 5b 6b a6 66 c3 6f 63 95 fd 2a 94 bd 61 ac ea 97 63 7d cb 45 11 ee 91 fc a2 ad 29 f0 eb ed 4d fc 01 f1 fe 24 b4 d2 d8 c3 26 69 da c6 af fe 51 0a 3a c1 bc be 76 e7 b6 6a 97 a8 eb b7 5a 8a 91 3b fc 87 9d 80 60 50 b3 5e cd 3c 22 37 91 9d 01 c8 0c 73 83 41 3b 1c fb 54 ea 34 cb 58 e7 ac 95 5d 21 63 73 ee 6c ee 1c 57 96 b7 06 de 64 71 c6 29 cc ee 18 3c d0 ee 8c 07 eb 9a b1 18 23 69 92 25 f6 d6 7f 5e 25 6e f9 15 0f ab 5a e2 41 20 03 eb c5 79 a1 dd 9f 4b d2 91 86 e1 da a4 35 0f 9e 1f fb 55 3e 0d 56 e2 3b b4 a5 eb 2f e9 c1 b5 4f 73 50 f6 4e 62 b8 46 27 6a e7 9a 3f 5e 72 ae 80 f6 1c 54 54 4f c6 7c d6 8e 91 fe 2f 9c 28 e5 65 c4 93 35 b3 00 43 02 3e 5a a2 dc 06 49 dd 24 e3 07 15 6e d3 67 df 00 e7 e6 1d f9 a8 dd 63 4b f5 1f Data Ascii: ~R]K[kfoc*ac}E)M$&iQ:vjZ;`P^<"7sA;T4X]!cslWdq)<#i%^%nZA yK5U>V;/OsPNbF'j?^rTTO\|/(e5C>ZI$ngcK
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 83 c8 35 37 6f 76 97 99 91 06 09 3c d5 65 ab 6a b9 66 e4 4e e2 53 75 8b 42 cd b5 cf cc 3b 54 40 b0 99 00 f9 09 cd 68 57 7a 57 ab 2e fc 77 ef 48 b7 86 05 95 62 94 2a 9f ad 4e 4d 66 d4 c0 e6 18 3f 18 94 1b 79 65 b6 b9 55 21 80 6e e3 de ac 7b 3d 62 a8 d8 19 35 64 d4 ba 76 2b e1 09 85 40 65 39 04 79 a8 7b eb 46 b2 98 2b 77 03 39 ae 3a a4 bf 1b 78 31 84 f3 2c ba 4e 94 90 22 c8 c0 67 18 3f 5a 8c d7 ad 12 3c bc 78 50 4f b5 48 d9 6a a9 f8 00 4b 0d c3 8e f5 13 ab 5d 19 d0 11 db 8a ac ac 59 e7 64 c7 b3 7a 65 6f 6c 8a f9 76 24 50 77 31 6d 62 c0 f0 4d 49 ca 7d cd 30 63 12 2e 1b cd 5d 2b e3 98 30 64 7c 47 04 06 3e 78 ad 43 e1 8d d7 a3 7f b4 9c 02 7c d6 74 b6 e1 0f 1c d5 ab a3 ee cd ae a3 09 f0 58 7f 7a 8d ae 02 da 18 0f 68 b9 e6 75 0d 9b 65 14 e6 a4 e3 61 8e 2a 0f 4b Data Ascii: 57ov<ejfNSuB;T@hWzW.wHbNMf?yeU!n{=b5dv+@e9y{F+w9:x1,N"g?Z<xPOHjK]Ydzeolv$Pw1mbMI}0c.]+0d\|G>xC\|tXzhueaK
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: c1 00 54 b5 ec 89 6f 08 77 c6 3d cd 45 0b ab 79 db f8 6e bb 8f 8c d3 d0 96 19 c4 6f 33 cd 83 bd 1d a7 4b f8 5b 88 df 38 f9 87 f7 a0 c8 e7 e5 e6 87 b8 79 84 91 08 f3 80 e0 92 29 fb 43 8d b1 7a 99 d5 dd 33 72 2e 34 db 67 07 39 50 6a cb 13 7c b5 42 f8 7d 74 27 d1 2d 79 ce 16 af 51 37 15 e4 fe 20 9b 2e 61 f1 32 72 64 88 62 d3 a9 db 14 ca d3 95 46 c3 98 d7 94 ff 00 89 30 7a da 0c be 40 ef fb 57 2a ef 36 d3 b1 43 8c 1c 1a eb 9e b4 8b d5 d0 ee 78 c9 0b 9a e4 6d 45 76 dd cb 8e fb cd 7a 47 d1 56 ce 9d d3 e3 22 30 e6 48 35 f8 78 43 93 db c5 48 69 53 34 f0 16 3c 8c f1 55 4e 71 83 56 8e 8d bc 86 48 2f 20 97 1b 90 82 2b 51 a8 ab 65 45 80 82 7a f0 b9 10 cb 81 b8 a8 ed c5 31 b3 de 8a b8 4f 9f 3d a9 18 aa f0 78 91 62 9b 62 d9 94 db f3 13 de 81 c1 2d c5 48 b1 57 83 6e 3e Data Ascii: Tow=Eyno3K[8y)Cz3r.4g9Pj\|B}t'-yQ7 .a2rdbF0z@W*6CxmEvzGV"0H5xCHiS4<UNqVH/ +QeEz1O=xbb-HWn>
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 61 5b f5 b3 64 0a f2 7f 1c ab cb d5 b0 84 af da 1e 9d b3 4e 83 9a 65 4f b5 3a 2b 28 c2 73 89 19 d4 10 fa da 55 ca 1f 31 9f ed 5c 61 d4 57 46 cf 58 bb 87 6e ed b2 1a ed 9d 45 3d 4b 49 57 8e 54 d7 13 75 f4 5f 87 ea 9d 45 5b 8c 3f 03 f4 af 41 fa 1c 43 35 88 64 75 19 69 09 3e a6 e5 b6 a7 00 f7 a3 34 6d 49 f4 fb ad ea 4e 24 23 77 35 04 5f 73 83 e2 8e 0b b8 29 15 e9 36 56 bb 70 47 06 15 d4 63 13 59 b7 5f c7 2a b4 6c 08 23 39 a6 dd 70 18 0e 70 71 55 dd 07 56 95 6c fd 20 c7 7a 8c 66 8e 83 51 f5 37 26 ef 98 1e 6b 2c d4 3a 39 1d 84 ac 6a c8 92 51 e0 67 34 a7 58 bd 11 83 f3 d2 63 8a 47 8f 76 dc 01 ed 49 29 f3 50 89 e6 06 0e 0e 0e 0f 22 ba 8b a3 e7 4b dd 2a c6 72 79 92 de 36 ff 00 da 2b 97 a5 1f 30 1d b3 5b b7 c3 7d 4c bf 4f 59 0d d9 31 03 19 fa 60 f1 fd 2b 3f f4 82 Data Ascii: a[dNeO:+(sU1\aWFXnE=KIWTu_E[?AC5dui>4mIN$#w5_s)6VpGcY_l#9ppqUVl zfQ7&k,:9jQg4XcGvI)P"Kry6+0[}LOY1`+?
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 4e c0 e0 d4 4a e9 f2 33 15 51 57 5a 62 a8 83 06 39 0e 04 08 8c 8c 52 56 31 9f ad 1d 3d 84 b0 8c b0 27 ed 43 2a 65 b8 f1 53 03 02 38 84 dd ed 34 8f 84 37 9f 85 d6 c4 64 f1 21 03 fa d7 4f d9 be 54 13 ed 5c 7b d1 d7 7f 81 d7 2d 1f 27 99 14 64 7d eb ae 34 99 84 d6 d1 b0 fe 60 0d 79 d7 d2 6a b1 7a bf b8 84 ac 9c c9 a5 38 ed 44 2f 6c d0 d1 73 44 03 5e 7e dd 61 98 71 11 70 37 44 c3 de b8 cf e3 0d a9 b4 eb 1b bd c0 80 f8 22 bb 3d ff 00 29 ae 4c f8 fd 68 61 ea 74 97 c3 8f f6 ad 9f d0 fb 36 6b 8a 7b 83 22 8e 1c 4c 87 3e d5 27 63 fc 44 e7 c5 46 81 93 ec 28 fb 39 42 b6 de c2 bd 6e d1 95 e2 48 71 91 2c ba 37 ca 64 23 da 84 7b 97 b7 bd 2e bd b3 cd 15 a5 1c ab e3 07 bf 34 1c c9 ea 5c 36 de e2 aa 00 06 c6 cc 84 c3 93 36 9f 87 1a 76 9f d5 ba 76 a0 97 73 fa 52 c1 18 65 01 Data Ascii: NJ3QWZb9RV1='C*eS847d!OT\{-'d}4`yjz8D/lsD^~aqp7D"=)Lhat6k{"L>'cDF(9BnHq,7d#{.4\66vvsRe
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 31 b6 bc 8d db 80 0f 35 7c 12 8b 98 57 1f 36 45 0d 71 a1 5b ca cc 4a 6d 62 73 91 47 59 da 8b 7d bb 7b 0f 15 67 a8 be bb b0 c3 ac 9a d7 07 89 d4 26 1a 76 95 b0 7c a5 b8 02 a4 7a 7e 22 ba 37 a8 c3 e6 60 49 a8 7d 65 45 f3 2a 01 f2 a9 1c 0a b1 da a7 e1 f4 41 c6 3e 43 55 f6 90 29 03 b9 31 84 e4 4a 9d e0 dd 2b e3 8e 69 b8 00 52 73 c5 7a ef b9 c9 03 39 35 e4 7c 31 15 38 0f 4e 22 83 c4 3a d2 d0 de ca b1 63 76 e3 8a 57 57 f4 5c bd 3f 0d b5 ca 29 29 33 ec 3c 79 c6 41 fe 86 a6 3a 57 6f f9 b4 02 41 9c 9c 62 b7 7e ab e8 35 ea 8e 9d 85 43 14 28 56 41 81 ec 0e 3f bd 53 6a 7c 4c e8 75 35 86 fb 27 ac 40 70 67 27 e9 e8 d6 d7 b0 bb 7c bb 5c 1f eb 5d 65 d1 b7 a2 f3 47 b6 90 1f e4 15 cb 5d 4b a3 cf d3 fa b4 b6 b7 2d bc a1 f9 5f 18 c8 ad ef e1 1e a7 f8 bd 05 14 9c 94 c0 a6 7d Data Ascii: 15\|W6Eq[JmbsGY}{g&v\|z~"7`I}eE*A>CU)1J+iRsz95\|18N":cvWW\?))3<yA:WoAb~5C(VA?Sj\|Lu5'@pg'\|\]eG]K-_}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.4	49792	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	696	OUT	GET /file/TTkkD8vhw02tx6_lfOH_DCMJAewkY3MM9tiBVlKvkpzhsmMyB-J7bK0oKXpRQAccMp4OsJZMDFmm77EQ8GXduS6izr7JT1sss2JT2zIYl3jTiqOmnwx6SSAW_sNUDqovktr6YzgXP5gad40Yl5ZDNcelYrbftB8jlkqU6fDclHTdBlT8ExxMNtKw1g0UgGpSAe5GFmS8qZgjDz83K9GeJaNmzqAYCvxMdvGKo5_ZiDVfwBW4QAsJ_hKx5Kj4ABcDlMYEX4OdhB4Ym9BKT2MWrwZZtxDk0EJJSX4aUmOFMGae7G3ZIuSvgOaKT7JW9bQO_NQCTsVAxXSflL8MYYmy7Q.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	686	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 117731 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "eac7f32c2b07154d986039ea52b37a38187078d6" Content-Type: image/jpeg Age: 817 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:47 UTC	704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e2 01 db 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 cb 00 00 00 00 02 40 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 51 74 05 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 72 58 59 5a 00 00 00 f0 00 00 00 14 67 58 59 5a 00 00 01 04 00 00 00 14 62 58 59 5a 00 00 01 18 00 00 00 14 77 74 70 74 00 00 01 2c 00 00 00 14 63 70 72 74 00 00 01 40 00 00 00 0c 72 54 52 43 00 00 01 4c 00 00 00 20 67 54 52 43 00 00 01 4c 00 00 00 20 62 Data Ascii: JFIF``ICC_PROFILE@mntrRGB XYZ acsp-QtrXYZgXYZbXYZwtpt,cprt@rTRCL gTRCL b
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 02 0f 01 02 03 04 05 11 00 06 21 12 31 07 13 41 51 22 61 71 81 14 32 91 a1 15 23 42 b1 08 52 c1 33 62 72 82 d1 e1 16 24 f0 f1 25 43 92 a2 b2 17 34 c2 53 73 18 44 63 a3 d2 26 27 83 84 93 ff c4 00 1c 01 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 00 07 08 ff c4 00 36 11 00 01 04 01 03 02 04 04 06 02 02 03 01 01 01 00 01 00 02 03 11 04 12 21 31 05 41 13 22 51 61 32 71 81 a1 14 91 b1 c1 d1 f0 06 e1 23 42 15 33 f1 52 24 62 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 e0 f4 3c 63 5e 91 9e 75 88 e4 6b dc 63 43 44 5b 15 87 3a db d2 24 53 9c eb 4a 00 7d 71 ad 9d 65 0f 49 e4 6a 84 22 83 b2 d7 8c 72 3b eb 1f 4c 83 ad b8 04 96 f7 d6 0c aa 3f 28 d5 ad 0c af 94 16 38 ce b1 61 ce 3d 75 ea fa 76 d7 ac 7f 5f 7d 4a 85 86 b2 8d 8a 9e d9 5f 5d 62 3e 2c eb Data Ascii: !1AQ"aq2#BR3br$%C4SsDc&'6!1A"Qa2q#B3R$b?<c^ukcCD[:$SJ}qeIj"r;L?(8a=uv_}J_]b>,
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 9e 20 6c d4 8f c0 6d 93 b9 6b 21 82 9e e8 1d a2 f8 23 0a f2 d3 b9 63 19 6c 77 c0 e9 ef e8 74 8b 1a 72 37 eb 16 a1 c2 8a f4 eb 2a 43 d1 72 a4 7f f2 38 6d 62 35 ba 8a 0f 3e b6 14 f7 61 a2 38 f9 4d aa a6 6c 53 34 d1 24 8c 01 cf 38 1a f6 ac b0 a2 61 12 fc 44 1e fd b3 ad 31 03 e5 22 37 c2 14 01 90 75 20 fc 34 e8 1d b3 93 ef dc 67 58 a0 de c8 cd aa 55 3b a0 4b 0d 91 c3 ba 87 2b 82 3e 5a a3 a0 eb fe 0f 46 32 17 0e a7 9f 6c ea fb 76 95 36 be 80 49 25 7d 7b 9d 55 52 41 24 16 7a 1f 35 17 ad d9 00 e7 90 08 3e 9f 6d 1e a9 95 ee a3 ba 2f a6 07 a1 0e 41 e3 19 0b ce a4 be 31 98 ce 78 f5 d6 88 57 30 a1 ea e9 56 ce 3d f1 af 5d c3 d4 74 41 c0 c6 7e da 45 d5 74 ae de 12 ef 7c bf f3 55 73 cf 6d 06 1e 46 3d b4 57 be 24 1f c4 7a 72 32 33 c7 b6 84 f3 ce b7 31 c5 44 10 cf 2b e2 Data Ascii: lmk!#clwtr7*Cr8mb5>a8MlS4$8aD1"7u 4gXU;K+>ZF2lv6I%}{URA$z5>m/A1xW0V=]tA~Et\|UsmF=W$zr231D+
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: b5 b7 40 f0 d1 40 ce 3a 54 2f a9 f5 d4 71 10 ac 79 1c 9e cd d3 9e ae ff 00 fa ce ac a7 ea 10 64 95 20 20 24 63 50 ec eb 0f e0 55 a6 0e 59 98 9f 87 eb a8 6e f6 57 89 a4 04 17 24 fb 7c f5 f6 32 46 39 d7 92 64 e0 01 91 eb ac a3 23 80 a3 1a 78 a0 6c 56 32 2e 18 63 9d 6c 55 c7 cb 58 48 48 3c 6b 7a b0 65 0c 47 6f cd af 59 a5 e2 16 18 e7 9f 7d 62 e4 64 9c 64 6b 63 30 ea f8 38 1a d6 e4 06 c0 f5 ef f2 d7 82 a5 ac 3a c6 30 17 8f 4d 64 5f a9 46 bc 0b f7 1a f0 f0 3b 76 d4 ab 5a f9 89 3a f1 0b 06 e3 9d 7b 8f 87 58 83 c7 57 cb 5e 56 b5 be 37 60 70 dc 0f 6d 62 e4 f7 6e 46 b1 c9 20 f5 72 75 f6 78 21 be da 8a dd 7a d7 cc c4 e3 1a f0 77 c6 b1 1a cc e0 38 07 d3 53 4a 79 5e b0 c2 8d 6a 61 ad dd 59 1c 6b 56 a4 28 a5 82 71 9d 7a 71 ed 8d 7c 07 73 ef af 88 c6 3e 7a 95 eb ad 97 Data Ascii: @@:T/qyd $cPUYnW$\|2F9d#xlV2.clUXHH<kzeGoY}bddkc08:0Md_F;vZ:{XW^V7`pmbnF rux!zw8SJy^jaYkV(qzq\|s>z
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 7d 37 36 15 2d 0d 2f 84 5b fa be 9e aa 59 6e 4f 0c 10 54 40 62 e9 58 97 a9 ca e1 b3 f1 67 07 e9 8d 27 00 f8 14 fb 1c 69 66 53 a4 71 f4 44 be cb ed 4b b6 b5 0a d6 47 fc 5d 2a 1e 8c 9c 49 f8 77 0a e0 7b 8c 82 3e da 89 af b4 d2 af 08 be e7 6b d9 72 33 36 df dc 57 18 17 3f 0c 77 3b 7f cb fc f1 16 cf 3f ee 8d 49 d8 b4 88 2b aa 9d 6a 69 a5 51 18 53 d2 cd ea 4e 38 20 1f 4d 04 0d 17 ec 24 eb ab ac f4 ca 20 18 fa 9d 0a 41 e5 2a 41 47 e6 26 7f cb c6 30 38 3d f5 85 6a 85 a8 89 0a 9f e6 65 bb 63 07 52 22 88 67 9c 8e 75 9d 42 97 91 39 24 e3 8c f3 ac f4 46 94 39 3a 66 a2 a4 e4 90 18 2f ed aa 4b 5c 47 f1 d5 ad d5 90 18 0c 9c 7c b5 73 58 9d 37 4a b5 f4 6c 3e 09 3e c0 6b cd b7 6c 8e a8 d5 4d 3c 8c aa 26 94 f4 af 24 90 78 1f 4d 5c 7c 2b c5 58 d4 42 0e 3a 57 04 a8 7f 7c 03 Data Ascii: }76-/[YnOT@bXg'ifSqDKG]Iw{>kr36W?w;?I+jiQSN8 M$ AAG&08=jecR"guB9$F9:f/K\G\|sX7Jl>>klM<&$xM\\|+XB:W\|
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 2d 4e 9f cb ab 18 f6 2d ab 8d 6a e0 85 a2 2b 0c ab 94 33 c6 47 38 e3 3a dc 36 db a0 26 3a 88 d7 8e 4f 97 90 0f eb ac a2 ad a2 94 8e 89 d1 53 e7 20 1a 91 4f 5d 6e 92 59 21 8a a5 4c 80 65 88 93 8f 5e 33 aa b8 bf b2 b1 21 57 25 9a b3 ab cb 30 c2 7a bf 33 75 0c 1f 9f 6d 60 fb 6d fc ce 96 a6 85 89 ee 4f fe da b7 13 d3 aa 88 ff 00 1c a1 7d 8c 80 eb ef 32 18 fa 9c d7 02 9e 8b d4 35 52 e7 85 60 e1 c2 a8 6b 03 32 9e aa 58 4e 39 06 3c 2f 3f 4d 63 ff 00 86 4f 93 d4 be 52 48 fc f4 85 27 1f 7c ea cd eb 69 d3 01 2e 00 9c 9e 41 1a c0 57 c5 d9 ae 08 a7 db a8 0d 40 2f 2a 96 14 08 b6 cb 40 10 c6 63 2f dd 83 03 8c fc f5 17 ff 00 0d bc fd 52 b0 8a 1c 67 18 24 f6 f9 6a e2 4a f5 7c 98 eb e3 c0 1d c9 19 d6 83 5a ce 1d 16 ae 36 5e fe 83 8d 5a de a4 51 e5 0f c7 68 ea a8 86 4a 59 Data Ascii: -N-j+3G8:6&:OS O]nY!Le^3!W%0z3um`mO}25R`k2XN9</?McORH'\|i.AW@/*@c/Rg$jJ\|Z6^ZQhJY
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 85 b2 aa bc e3 52 a4 1a 55 a2 17 51 93 d8 9e 39 d4 85 57 76 02 46 62 be b8 3a f9 95 b1 8f 5d 66 3e 10 33 df df 43 72 b7 2b 29 50 82 3a 19 ca 7b 67 5a 72 c1 8e 09 04 7b 9d 4a 2c 7a 72 07 1e ba 8e 72 4e 48 d7 9a 14 af 83 b8 fe b6 cf d7 5f 79 8f 9e 5c 9f be bc c6 be 3c 0c ea f4 14 14 d0 d8 94 21 6c c9 34 9f 13 4f 23 3e 5b 9e 3b 7f a6 8b 66 88 47 4c d9 6c 00 32 71 a8 9b 5e 85 a9 ec 56 a8 9d 31 88 72 c0 1f 53 cf 3a 9d 75 65 4a 5a 9c f0 aa 84 fd 00 d6 69 36 e2 88 36 08 1f 6f 24 37 0d d7 18 90 29 88 48 d2 12 fd 8f 48 e0 7e ba 3c ba 2a a5 33 a0 e9 c9 1f 94 1f 5d 09 f8 7d 48 ed 53 31 a8 c7 41 57 6e ac 72 3a 88 38 fd b4 5b 71 65 cc 6a ad d4 f9 c9 51 ed ab 3f e2 a5 52 6d 51 4e be 55 2c 8c dc 61 59 be c0 7f db 4a 49 6a 9a 49 1d cf 0c c7 27 9f 5d 36 77 24 9f 86 b4 54 Data Ascii: RUQ9WvFb:]f>3Cr+)P:{gZr{J,zrrNH_y\<!l4O#>[;fGLl2q^V1rS:ueJZi66o$7)HH~<*3]}HS1AWnr:8[qejQ?RmQNU,aYJIjI']6w$T
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 3c 2a 12 a4 89 79 1f 2c 6b 05 1c 6b 2d 79 c6 4e 74 ea aa f3 59 75 11 8d 79 e9 ac 5b b6 bc bd 4b e1 93 9d 78 7b f6 d7 dc 91 91 9c 0d 7a 47 7d 52 95 f6 5f 03 95 00 9f b6 bc f5 3a f3 18 3a f7 56 0b cb 1d 6d a6 84 d4 d5 41 0a f7 92 45 51 f7 38 ff 00 5d 61 8d 5b 6d 6a 5f c5 ee 3b 64 2a 32 5a 75 3f a7 3f e9 af 3b 60 aa 53 e2 8e 90 81 1c 50 03 f0 a0 5c 1f 96 ab 77 82 b4 36 7a 93 c6 70 06 33 df 27 45 74 b0 15 67 76 23 20 72 07 be 84 f7 dc 8e d4 b1 53 46 54 34 92 86 3c 7a 0c 9d 66 b4 0b b5 60 6f 65 8e cf b7 79 54 ce 4f e7 6c 28 55 e4 60 0e 4e 75 b6 a2 2e 8a c7 55 c4 98 1f 98 77 ef ab 2d a1 1a c1 6a 2a 47 c6 14 65 fd 4b 10 4e 3f 7d 63 43 02 35 44 98 42 17 ab 2a 4f 1c 0d 78 ee 49 5e 40 fe 20 54 9a 7b 2c 30 e1 4c 93 4d 8c 7c 80 27 fd 34 a7 27 93 a6 17 89 f5 8b 2d c6 Data Ascii: <y,kk-yNtYuy[Kx{zG}R_::VmAEQ8]a[mj_;d2Zu??;`SP\w6zp3'Etgv# rSFT4<zf`oeyTOl(U`Nu.Uw-jGeKN?}cC5DBOxI^@ T{,0LM\|'4'-
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 86 95 cf ec 7f eb a6 65 5a 89 61 75 eb 68 f2 01 ca f7 f7 d2 b3 c5 46 e9 86 c9 1e 79 0b 21 23 e7 84 ff 00 ae a6 31 e6 52 dd d2 e4 9d 79 df 1a c4 fb eb 21 db 4d ab 2f 5b 19 1d 3c f1 ac 18 eb 3f 4d 62 c3 9d 79 79 78 ae 40 20 1c 0c e7 5f 64 e4 e7 5b 68 e9 26 af ab 82 96 8d 0c 93 ce e2 38 d0 7a b1 38 03 5b 2e 14 13 5b 2b aa 68 aa b0 26 a7 91 a3 7e 93 91 90 70 79 d5 54 6f ca 8a 4e bd 1a f3 1a f4 6a ca d6 bd 03 46 be 15 52 0a 9d d6 b2 37 ff 00 b3 40 d2 0f af 61 fd f4 16 39 d3 33 c1 ea 2c d5 dc ab 48 ce 15 61 5e 3e 79 3f e9 a1 c9 f0 95 05 37 e1 84 4b 1e 48 c7 a8 ce 81 77 4c e2 a2 ed 48 b4 cc 24 e8 0d c6 3b fc 58 fe f9 d1 fa 8e 88 c0 41 93 e9 9d 2f e5 8c 1d d5 4d 48 14 32 a3 74 12 7d 40 04 9f dc e9 16 ee 76 52 dd ac a3 1a 1a 63 6e b4 41 0d 32 f5 bb 29 92 42 7b e4 Data Ascii: eZauhFy!#1Ry!M/[<?Mbyyx@ _d[h&8z8[.[+h&~pyToNjFR7@a93,Ha^>y?7KHwLH$;XA/MH2t}@vRcnA2)B{
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 00 70 3b 69 b3 b4 17 cb db 34 08 f9 2c 7c c2 70 73 cf 98 fa db 22 85 25 dc 51 02 48 26 e9 04 76 f4 3a 83 54 a8 a6 57 2e 42 f5 af f4 ff 00 bc 35 2d 09 57 52 07 3f df 51 6a df f9 38 38 e9 69 14 37 bf 7d 0c aa 8d ca d9 5c 3a e5 a3 29 82 05 4a 30 27 e4 0f 6d 5f 55 1e 98 c1 07 00 63 3f 2d 53 d4 61 e6 a4 e7 e1 33 67 8f f8 4e a4 5f 99 a3 a7 85 83 00 19 ce 47 be 07 1f df 50 77 01 78 8b 2b e9 2a c3 d4 54 42 bc f9 68 0e 47 cc 69 5f e2 b7 c3 59 69 45 62 c4 53 b1 e7 e6 47 fd 34 de b0 51 2d cb 6e dc a7 86 30 67 a5 65 32 36 79 31 90 00 e3 ea 33 f7 d2 93 c5 44 cd e2 8d 32 02 ad 20 f5 f5 2c c7 51 19 05 db 22 06 d1 4b b2 31 81 9c fc b5 9a 9e 90 c0 a8 62 46 06 7d 3e 7a f9 81 53 cf a7 63 af 14 e4 9c e9 c5 75 97 61 f3 d6 4e 9f cb 56 f7 d7 8b c9 3a 91 49 4b 2d 6d 44 54 f0 a9 Data Ascii: p;i4,\|ps"%QH&v:TW.B5-WR?Qj88i7}\:)J0'm_Uc?-Sa3gN_GPwx+*TBhGi_YiEbSG4Q-n0ge26y13D2 ,Q"K1bF}>zScuaNV:IK-mDT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.4	49789	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	696	OUT	GET /file/mXNwO8DVSXSRafJGfW3LoeUmuU7fidfGqSIAOB8lQIWxs_fxBvKHG0GSvd55EDulEM7uLm8GNgtQG3Wlwc8F2i-Z3d1LlZ4ymAUsAMGc6EYEL8dhxVM3aWiifE5vTAupsOw_VDcNkrzbe3dlIJ2Q7OPwK8nO0ht-SBE_F9i58duZcVAzbCmXRvBqz2-PN6RZaEIy3iFnnzTILo40fVObac7AyFeYjc1G1Hv6LtBLAFiUrGDE-geNNOWqpCIVaGwrQTf2Nbrn5eRUTk8C_k6r88VkZjxHOEAKXEBdkkF2XtsElsfAfvOemPQ7gBDKXPx72NEce3eyKrUOcjvnlQORkg.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	686	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 175961 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "484cf0478baf97e86e61c0107830d5e8c2f13759" Content-Type: image/jpeg Age: 817 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:47 UTC	704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e2 01 db 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 cb 00 00 00 00 02 40 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 51 74 05 0f 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 72 58 59 5a 00 00 00 f0 00 00 00 14 67 58 59 5a 00 00 01 04 00 00 00 14 62 58 59 5a 00 00 01 18 00 00 00 14 77 74 70 74 00 00 01 2c 00 00 00 14 63 70 72 74 00 00 01 40 00 00 00 0c 72 54 52 43 00 00 01 4c 00 00 00 20 67 54 52 43 00 00 01 4c 00 00 00 20 62 Data Ascii: JFIF``ICC_PROFILE@mntrRGB XYZ acsp-QtrXYZgXYZbXYZwtpt,cprt@rTRCL gTRCL b
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 01 0d 01 02 03 04 05 11 06 12 21 00 31 07 13 22 41 51 14 61 15 32 71 81 23 42 91 a1 08 16 52 b1 33 62 c1 d1 f0 24 72 e1 17 92 f1 25 34 43 82 53 35 44 63 73 83 a2 c2 f2 ff c4 00 1c 01 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 03 01 02 04 05 06 00 07 08 ff c4 00 3c 11 00 01 04 01 02 04 04 04 06 02 02 01 03 04 03 00 01 00 02 03 11 21 04 31 05 12 41 51 13 22 61 71 81 91 a1 f0 06 14 32 b1 c1 d1 e1 f1 15 23 42 16 33 52 07 24 72 a2 62 82 b2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 9c db ee 46 cd a9 ed c7 52 db 23 7a 09 64 0d 5b 15 33 a8 32 c4 bd f2 a0 e3 8c fb f1 9e 7a 29 5b ac c5 e2 ee b2 69 aa 08 a0 fa 57 f3 43 08 51 1d a9 d0 61 93 dc 9c 28 ee 79 3d fa 52 ad a6 b9 d7 d7 6d b5 d1 4d 76 46 95 83 55 48 00 67 42 4e 70 47 e4 4c 71 d8 7c f5 83 51 d1 bd aa e4 Data Ascii: !1"AQa2q#BR3b$r%4CS5Dcs<!1AQ"aq2#B3R$rb?FR#zd[32z)[iWCQa(y=RmMvFUHgBNpGLq\|Q
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 2b b6 5e ad b7 05 b7 55 cb 6e ae 56 f2 25 24 05 07 85 f6 cf f6 e8 35 6d be 2b 7d d6 3f a9 6f a9 86 52 4b 10 9e df f7 ed d1 0b e9 8a 48 e2 ad 54 fa 5a b2 37 18 f7 86 f3 07 ca 1c 0d df f4 e7 ac 17 09 26 bc c5 6f a9 57 36 ca 5a 70 e1 d2 5d ac 95 39 1f ca e0 fa 5b 83 c1 ef d3 48 0b ad 4f a6 a0 fc 22 f5 3a 24 05 d4 12 51 f3 90 e8 7b 63 f6 3f b6 3a 63 a5 8e a2 cb 2c 35 ea e1 23 9d 41 2a bd d8 67 1f d3 8c 63 ad d9 a8 7f cc 34 4d 20 4f e2 43 27 96 15 4a 8d ca 7e 47 18 e4 0e 49 f7 fb f5 bf a7 cd 35 e2 d6 f4 32 7a 4d 26 4a 79 a8 51 c7 39 2b 9f 63 ef 83 f6 ea 13 5a 1b 3d 14 df 54 5a ee 01 a5 a4 ba db 4b 41 13 9e e4 60 02 30 76 fe a0 9f e9 d1 5d 63 60 5b 9e 90 b6 6a fd 38 d2 bb 23 08 6b 41 3c c7 27 60 c0 8f 63 c0 fb 1c 75 f7 41 49 4d 75 8e eb a4 ef 55 31 c3 f5 11 f9 Data Ascii: +^UnV%$5m+}?oRKHTZ7&oW6Zp]9[HO":$Q{c?:c,5#A*gc4M OC'J~GI52zM&JyQ9+cZ=TZKA`0v]c`[j8#kA<'`cuAIMuU1
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 27 ab 9d 2a 64 ad a5 a8 63 16 76 f9 e5 0f 7e 4f 1c 1c 75 a5 1c 89 0d 30 8e ad 95 b0 b8 52 47 27 ed d6 5b 6b 25 3b 23 cd 51 09 49 48 0a 0a b1 20 fe 80 1f eb d3 1a 06 c7 64 62 ee a1 6f c9 50 f7 aa 57 a9 11 4a 26 86 30 59 54 fc 0c 67 e7 1d 2f aa 4b 55 ba 49 76 6e 27 9c a7 7e 98 a9 5e 6a 5a 89 3c b9 fc a7 dc 40 05 89 dc a7 db af 13 b8 49 4a a4 52 b8 5e 32 91 12 3f 4c f4 66 10 cc 37 64 c7 b8 94 cf 1d 05 a2 d9 53 0b 53 d4 99 60 a5 52 aa 71 ba 57 56 fc ca 48 20 6d c0 38 f8 e9 96 a6 8e d7 32 34 70 d3 c3 08 99 76 f9 ce a5 f7 2f eb 8c 8c ff 00 6e 8d 26 9a d3 b5 1a c7 50 9b 75 b9 eb ad 71 c4 e6 95 48 76 8e 09 06 cc 92 15 83 15 ce 57 3c e3 20 e0 f4 ad 7e b2 5e 74 ed e1 ab 4d 24 8b 64 ae 6f 29 e1 a9 9c 19 29 25 0b 9d a3 3c 91 82 08 38 e4 11 ee 3a c7 bf 87 37 57 23 26 Data Ascii: '*dcv~Ou0RG'[k%;#QIH dboPWJ&0YTg/KUIvn'~^jZ<@IJR^2?Lf7dSS`RqWVH m824pv/n&PuqHvW< ~^tM$do))%<8:7W#&
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: d0 4c e8 5b 0c e0 70 4a e3 8f d3 df fa 75 c4 a5 4a c6 92 5b 66 a7 9e 9e 42 04 35 05 a3 6c b6 00 07 92 32 7e 31 fd ba 2d 47 59 5b a6 75 cd 3d 5d c8 3d 5c 3e 6a f9 cb 34 43 12 21 18 3c 90 78 21 b1 9f b7 45 f5 7d 0d 5a d0 d1 dd e8 01 9e 30 a3 70 00 10 5b 07 2a c7 be 70 7b 74 5a aa de 35 97 86 d0 df a9 a2 51 74 b5 7f e9 2a 55 71 f9 38 28 e7 8f 62 48 fd fe dd 08 86 d8 72 ec d5 21 5a bf 4e 36 80 d6 b4 f5 f6 49 71 47 2b a4 f4 b3 ac 87 d4 87 90 32 4e 7d 3d bb fb 7d fa de f1 0f 4f c1 1d 65 2e b7 b3 02 69 ae 43 ce 50 a4 e2 39 c7 12 28 1d 86 48 dd fb 9e 8e db 44 be 22 78 77 55 69 78 55 af 96 55 35 54 a8 ec 19 9e 30 08 65 ed 9e d8 38 ff 00 97 af 1e 1c 4e b7 ab 45 76 89 be ac 20 57 45 e6 5b 84 98 21 66 5c 9e 3e 32 01 1f bf 4d e6 21 72 17 ae 2d 9f e6 ad 31 6d d6 d4 bb Data Ascii: L[pJuJ[fB5l2~1-GY[u=]=\>j4C!<x!E}Z0p[p{tZ5QtUq8(bHr!ZN6IqG+2N}=}Oe.iCP9(HD"xwUixUU5T0e8NEv WE[!f\>2M!r-1m
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 79 19 6c 9f 73 d0 38 ae 13 5d 50 22 30 77 79 7f 87 18 19 db cf fd ba 20 d4 15 20 e2 79 9c 38 fb 01 d7 0a 68 a4 84 13 ba ae c5 75 ba cd 75 aa 6a 11 22 52 90 d2 49 3d 48 2b 21 63 cb 1d c3 9e fc e4 9c 71 cf 1d 31 d9 6e 03 c5 28 ae 90 cb 24 51 9b 25 2b 48 1e 85 8a ca 61 4e 0e 33 ff 00 10 0e 1b 04 af 73 83 8c 0e 91 fc 1b d6 d2 bd 5d da 2b ec b5 57 7a 85 a5 02 28 aa 66 f3 62 31 b3 62 5d ca d9 dd c1 c6 3f e6 cf b7 5b da 7e fb 41 e1 be be 12 e9 67 aa 4d 3d f5 0c ee b2 a6 e6 78 88 e6 36 c9 f5 76 50 4e 7e f8 c8 e6 1b 74 a2 3a 30 8a 1d 7f b3 fc a7 32 80 f3 75 44 52 9a c5 3c 3b 6a 2e b1 dc e5 6d a9 4d 2d 44 32 42 21 05 f2 c1 88 cb 63 9c e0 03 f6 fb a2 50 6a 35 a7 d4 d3 5a 96 82 9a d9 39 f3 20 a6 ab d8 41 cf f2 37 38 38 61 ce 4f 7c fe e2 99 e2 25 9e 9e f7 5b 1e a5 d2 Data Ascii: yls8]P"0wy y8huuj"RI=H+!cq1n($Q%+HaN3s]+Wz(fb1b]?[~AgM=x6vPN~t:02uDR<;j.mM-D2B!cPj5Z9 A788aO\|%[
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 11 9e fe 93 cf ea 79 cf 4c 7e 1c d0 c1 a8 f4 cd d6 c7 33 7f eb e8 d1 a4 a7 21 46 18 e3 d4 3f f3 e7 a1 5e 19 de e0 d1 f7 ca da 6b 9c 72 cf 4d 5a 9e 5b d3 c3 16 f7 97 8f 65 fd f1 d0 5f 23 5b 8e cb a9 7b f0 bf ce d5 90 5e b4 5d 7c 89 1c 92 c5 f5 54 5e 62 e1 84 ea 72 3d 43 db e4 7c 13 d6 87 87 97 d5 d3 da aa 6b 5d 5a 08 ed f5 61 a9 aa a2 ce 15 5b 25 77 1f 7c 8f 9e b4 ee 77 2a ad 2f aa 6a 24 b7 db da dd 52 92 6d 8e 7a a7 31 cc 01 18 40 40 07 92 a4 71 d7 8a ba f0 1f cc 6b ad 05 4d 45 4c 72 54 54 9d 84 04 3b d8 32 c8 e4 7e 73 8c 8c 1e 7d c7 54 52 f1 61 6e 0c 6d 80 73 64 0a f5 4e 00 75 59 a2 ae b9 78 5b e2 25 49 8a a1 26 0a 5b f8 cc c5 92 54 6c 15 27 1d c6 0f db af 5a be 87 fc af a9 a8 ef b6 52 e2 92 ad 12 b6 94 8f 52 a1 6e ea 39 e0 06 04 63 e0 8e bc df ee 76 8d Data Ascii: yL~3!F?^krMZ[e_#[{^]\|T^br=C\|k]Za[%w\|w*/j$Rmz1@@qkMELrTT;2~s}TRanmsdNuYx[%I&[Tl'ZRRn9cv
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 64 12 b6 e7 6c 60 85 e9 40 1d 12 5d 2d 8d 3f 47 35 ac ac e5 c4 26 35 2d 94 3c f6 c7 7f eb d6 c5 32 4d 2a 3c a6 44 cc ae 5f d4 09 3c fd fa d2 86 53 71 a3 94 46 4a 98 03 46 55 8e d1 9f 93 f6 ed d0 e1 05 43 80 d1 54 49 e5 91 e9 f6 e3 ae 26 b7 4e 04 ac 94 37 6b 86 9b a9 17 2b 34 88 b5 61 5a 35 05 32 36 91 82 7e 3e 3a 33 7a d4 b7 0b d5 24 15 74 c0 d3 5c 1a 26 35 b4 d0 ae 04 80 2e ed ea 7b 82 40 3e 9c f3 d2 f5 ba e9 0d 4a a5 35 c6 26 a4 68 c6 63 df f9 5d 4f 63 9f fc ed d3 15 9e 9a 38 26 91 d5 8c a8 8a 63 91 43 70 c8 ea 41 19 fd 09 1d 46 e7 90 03 5b a6 dd 15 4d f0 a3 57 2d 6d 9e e5 06 8f af 4b 46 a2 14 d1 d4 c5 21 97 08 ec 84 6f 47 46 24 3a e3 27 f2 92 31 91 ef d6 d5 4b da 75 dd cd 20 d6 97 1a 5b 13 b4 a5 65 a8 b6 c7 10 1b f0 46 e6 00 7a 97 04 f1 c7 07 b7 50 35 Data Ascii: dl`@]-?G5&5-<2M*<D_<SqFJFUCTI&N7k+4aZ526~>:3z$t\&5.{@>J5&hc]Oc8&cCpAF[MW-mKF!oGF$:'1Ku [eFzP5
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 65 6d cc dc 0c 76 1c 7d ba f5 47 74 a0 96 b2 68 a8 3f 11 8e 9c ca 67 2c 91 13 0a 53 99 46 01 e3 2c 32 d1 a9 c1 ee 7b 9e a2 f1 1d 54 f1 b0 b1 94 d2 ed b7 24 7a fb 75 b4 f0 01 00 92 b7 63 d4 37 bb 2d 73 ce 2a 22 a2 68 a4 11 a4 a2 2d af b1 bb a8 0c 78 c6 30 7b 93 c7 4a d7 6a 8f a2 92 aa 79 2b 0d 35 7d 22 96 4a 72 9e 54 af 22 93 8d d9 ce 48 71 ca 91 ec 7f 5e 84 df f5 00 d4 54 f5 09 51 41 0c 2a 93 b1 43 0e c5 3b 49 20 28 1e bf d8 0e 47 bf 5a 57 5a 7a 1a 09 a9 e2 bf d4 bc e3 c8 59 f6 88 b3 85 23 d0 49 2b 8c 65 bb 10 01 c1 38 cf 54 ba 58 df 1b 39 49 20 83 76 32 0d 76 c9 c1 f9 a1 13 94 ef a8 2b ed ba c6 cb 69 86 21 72 9b 55 c0 99 9b ce 95 25 48 d4 f2 5e 3d a0 6d 5c fb 73 c7 19 cf 5b 43 48 5c 6d 36 29 2e b3 d5 8a 0a 37 9c c6 aa 43 07 9c b0 19 19 da 06 47 07 ee 33 Data Ascii: emv}Gth?g,SF,2{T$zuc7-s"h-x0{Jjy+5}"JrT"Hq^TQAC;I (GZWZzY#I+e8TX9I v2v+i!rU%H^=m\s[CH\m6).7CG3
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 44 e1 95 b3 df ac e2 98 48 09 56 c4 44 7b 1f 7e 99 ab 2c 26 b6 92 59 2a 27 32 ca 0e e5 5d dc 36 3d 81 f9 c7 41 04 11 d2 a0 22 62 5a 40 36 06 e7 8f 8e 99 e6 0b ac 83 94 31 a9 dc 29 12 2b 1c 36 33 9e ff 00 a7 5e 66 a6 46 98 08 10 30 00 e4 0e 7a 2f 51 6e 9c 10 a0 33 36 ef ca a3 3c 7d ba fb 43 4b 04 51 4e ce 84 4a aa 40 56 18 61 d2 92 6a d7 5a 1e ea b0 34 15 94 98 0c 87 25 49 cf 38 f8 eb 2f e2 8b 20 66 a9 8c 3b 33 0e 47 b2 fd ba d1 a8 aa 24 ce be 5e c7 63 8c 1f e5 eb 5e 99 0c f2 81 23 6d 51 dc f4 94 57 72 f7 4c 73 ea 79 0d 1c 54 d1 81 90 40 27 ec 0f 1f db ac f6 cb 8c d5 d7 32 90 e5 13 19 21 fb a8 f7 e8 3d 33 d1 43 5b 80 11 e3 0d b4 48 ed d8 e3 af d2 3d 6d 3c c6 45 85 d4 4e 70 ae 17 83 fa 1e d8 eb 80 01 21 68 38 4e f2 b5 2a 50 3d 3d 3a ac 92 b6 77 ec 07 2c 79 Data Ascii: DHVD{~,&Y'2]6=A"bZ@61)+63^fF0z/Qn36<}CKQNJ@VajZ4%I8/ f;3G$^c^#mQWrLsyT@'2!=3C[H=m<ENp!h8NP==:w,y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.4	49790	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	696	OUT	GET /file/MRaZr89OCD5Qq9z9INWqGZsk0QSCS36uQSIbQJrq-YdzjVbiaMkbpeXSl1tcB8ZOu5KUs8WzGcfEXddbIVY78z_o8V0IxYibiI4BQsVCubSLMz_lP7idln0bE9i4LU0cr-irveRblfIb2UsB_mN-LI087zClUs3TsB41pQ-pQjAuG9DOmSM9WJDISYjfHg-P2VQOWNeOzARqN_JEa9FzI3lf0xVBuRxjgqwm2ZSf-JgZE5vXLDKKYw2nq41qEvh3ltHN9c_9kF9mUtaVqBhU01z7Ipud_44CPBNBH4BMYOWsZzxLMtqUmCN_GfmitAifPzbWiYtNo8envAOO5HmUUg.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	686	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 153534 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:11 GMT Cache-Control: public,max-age=7200 ETag: "085cb2f265f807e74f20baa46d991edfe61eba93" Content-Type: image/jpeg Age: 816 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:47 UTC	704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c0 00 11 08 02 16 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 02 03 01 01 01 01 01 00 00 00 00 00 00 00 00 06 07 04 05 08 03 02 00 01 09 ff c4 00 4b 10 00 01 03 03 03 02 04 04 04 05 01 07 03 02 01 0d 01 02 03 04 00 05 11 06 12 21 07 31 13 22 41 51 14 61 71 81 08 32 91 a1 15 23 Data Ascii: JFIFHHCC "K!1"AQaq2#
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: e6 41 56 f0 54 06 36 9e 01 c7 39 a6 27 49 6f 57 29 e9 79 b0 f0 dd 11 a5 38 82 47 2a c7 38 fd 3f b5 29 a3 5e 45 de 32 91 e0 6c 5a 3b 90 72 29 d3 d0 28 08 4c a9 ef ad 19 29 60 a7 93 c7 23 07 f6 cd 67 f8 e0 58 f8 74 8d 20 c9 1d e9 b0 d5 e0 e6 4e 74 6b 2b 56 bd 71 80 59 90 a1 f9 7b fb d0 8b ba 9c 59 27 43 9e b8 ad 5c 11 15 d0 b5 46 78 02 87 07 62 92 08 23 b1 3e 95 f9 74 42 2d 57 b9 36 e4 28 98 e1 c3 e1 2c fb 1f 30 fe f8 fb 50 a6 a3 74 67 e1 dc 27 24 f2 47 7f ad 65 b8 7d b2 c3 2a bc 7b 0e 62 95 48 58 90 d9 ad 53 d3 c9 9a 13 a9 56 94 09 5a 6a c2 cd dc 24 fc 4c 13 0d ad c1 39 e1 69 ca 7c c9 23 1f 4a 55 f5 1f f8 35 8b a8 f2 ec 76 db 25 ae 13 2c b4 da 93 e0 a5 4d b8 4a db 0b 24 60 ed f5 c6 31 fb d2 eb 45 df ee b6 3b ad b2 e5 a7 c2 1d b8 c0 51 43 64 e0 ef 42 f2 9d Data Ascii: AVT69'IoW)y8G8?)^E2lZ;r)(L)`#gXt Ntk+VqY{Y'C\Fxb#>tB-W6(,0Ptg'$Ge}{bHXSVZj$L9i\|#JU5v%,MJ$`1E;QCdB
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: cc 6c ec bb 33 e2 de 75 f7 1f 23 1b 94 e9 ed 8f 6a cb 1d 24 ea 05 a7 49 29 46 e4 ea 50 49 27 27 3e d4 c3 9b f8 89 b6 07 42 21 ff 00 30 7a 1d 87 15 d9 78 77 fc 6d bd b2 c8 0a 86 23 72 48 ce 7f 5a c4 71 39 84 97 6f a3 24 67 6a 64 df f4 5d aa e4 e8 91 26 37 9c 91 95 a1 44 2b f5 aa f8 5a 5a dc e4 c9 b6 a5 07 0c 37 9a 0b 69 2a 5e 7d 06 e1 9f ad 0a db 3a d7 1a e4 a4 b2 fa 76 a5 7c 03 b0 f7 fb 51 84 0b 9e e9 b6 db 8b 89 f0 a3 29 4a 69 c5 2f 8c 64 1c 71 f5 c5 59 2a 70 59 19 6e 24 f0 f5 03 90 4e 9c d2 f5 32 93 a5 41 de 82 b5 07 45 e2 db e3 48 91 68 0e 6e 3c a5 1b b2 33 53 f4 3e 8b 6e 0c 76 a2 b0 85 37 39 69 57 c6 4b 41 e5 a4 9c 9d a0 fb 9e 07 de ac 3a 95 d4 68 91 e1 1b 1e 9d 9a 87 2f 73 08 46 1b 1b 8b 0d e7 2a 59 f4 fc b9 c5 7d d3 fd 59 61 b7 44 6e c5 1a 4b ee 4a Data Ascii: l3u#j$I)FPI''>B!0zxwm#rHZq9o$gjd]&7D+ZZ7i^}:v\|Q)Ji/dqYpYn$N2AEHhn<3S>nv79iWKA:h/sF*Y}YaDnKJ
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 9b 87 86 c3 cb 25 b2 47 3d cd 5c c6 8f f1 a9 55 a1 6b 49 74 85 7c 1b 8e 1c 14 ac 73 b7 3e c4 66 81 93 8c 5c 48 98 8d 14 83 cb f8 e7 55 a4 23 98 38 ac 15 d4 2d 05 af a0 5e 1d 7a fd 17 c4 4b 84 17 26 30 7c 44 f6 e3 04 76 f6 c5 7d a0 62 a7 46 eb 2b 24 eb a4 55 ad 25 4a 3e 34 8c 90 95 29 25 23 83 c0 ef 5b 8d fb 44 85 93 0e 7c 44 a5 c4 79 48 20 73 fd e8 6f 58 74 c6 0d f2 ce f3 17 08 80 02 06 0a 70 97 11 cf 04 2a 9f 70 cf 88 de da 44 7b a8 88 55 23 90 db 6e e3 d3 d2 ad 95 9d 94 a8 a9 28 66 d5 a9 05 b5 77 10 87 5a 5f a6 78 cf a5 21 bf 15 3a 7e 25 b9 e8 ee 5b b6 a1 b5 04 0d a0 fb 71 47 96 06 a5 e9 96 0d b2 f8 a5 a5 11 94 7c 09 84 79 5c 4f 71 cf 60 7d 08 a4 0f 58 b5 24 cb ed fd c6 de 7b c6 88 d6 36 1f d2 ba ad f5 cc 5c 41 63 be b3 90 32 30 c1 c1 df be 08 fe 6a 5c Data Ascii: %G=\UkIt\|s>f\HU#8-^zK&0\|Dv}bF+$U%J>4)%#[D\|DyH soXtp*pD{U#n(fwZ_x!:~%[qG\|y\Oq`}X${6\Ac20j\
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: ed f3 c5 34 bb f8 66 fa c1 75 bb 29 cf 4c ef fa 50 42 68 df 6a 09 ca 82 ca 57 c7 c8 f1 5e e2 a1 95 cb 69 12 ca 83 25 60 2c a7 be 2a c9 d0 c3 e7 fd e1 69 40 cf 07 1c d4 09 50 56 ce f7 59 21 e6 46 30 a4 9e df 5a 42 e8 c8 74 38 c1 a9 69 db 22 9e dd 3e 5f 4f f4 b4 89 cf 59 25 49 55 d6 4c 32 db 0a 75 cd c5 b2 0a 56 a0 9c 01 df 6f cf b5 67 ae b4 4f 97 d4 8d 69 71 b8 c1 86 b9 0b b5 db da 54 e7 d9 68 e4 a7 38 0e 2f 1e c5 49 49 34 4b a0 6c 97 3b ee aa b7 43 b2 04 99 ee bd b9 b2 bc ed 48 48 2a 25 47 db 00 d3 e7 a4 3d 1d b9 69 7d 5f ae 25 ea f4 30 fa 2e b1 9b 8e 85 34 72 da d2 a1 95 00 3d b9 1f a5 3f e0 16 ef 0e 7c 69 4e 87 f2 82 c7 6c f3 db a6 7f 6a 21 24 d4 9a 80 dc 76 ac 5d a6 61 04 c7 78 04 12 49 e6 9b 3d 2b be 26 cf 77 95 09 fc 06 e5 47 56 dc 8e ca 4e 0f f6 06 Data Ascii: 4fu)LPBhjW^i%`,i@PVY!F0ZBt8i">_OY%IUL2uVogOiqTh8/II4Kl;CHH%G=i}_%0.4r=?\|iNlj!$v]axI=+&wGVN
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 67 e2 78 33 1c 9a 92 4a 96 c7 42 0f 2d 19 ca 75 58 39 aa 69 2b 57 3c f7 a6 2e 9d d0 77 1d 47 6f 65 d5 c6 75 a5 b8 0f 24 63 1c d1 3b 5d 03 79 fd a6 44 95 20 1e e0 62 bd b2 e0 97 d7 40 b2 21 03 d7 6f d6 8b 17 b0 21 19 35 9e e7 3d 20 32 53 10 94 b8 7b 29 27 9a b9 d3 2f ea c8 b1 b7 3a 99 12 61 8c 92 a5 23 3c 7d 6b 4b 58 ba 17 63 b7 2d 0f 4c 6d c9 2b 1f ea 5f 14 7c 34 85 bc 5b d5 1a 34 20 96 b1 80 52 2b 5d 17 c2 e9 24 7a 6e 58 0f a1 fc ea 17 1c 56 07 20 24 79 1e b5 9e 34 6e b2 83 3a e0 d5 8a 33 4e 9b 84 91 e7 18 c0 1c 67 bf a7 6a 66 5d ac 17 54 30 db 22 2b ca 42 46 5b 0d a7 70 cf b9 c5 52 1e 99 3f a6 75 cb 57 58 30 9e 54 65 1c 1d a9 24 82 53 8a 79 69 a9 2f b5 2c 2a 6a 7c 36 92 31 e6 4e 08 e3 da b9 f7 12 f8 4a da 1b a2 ba 88 3c c1 c8 22 8c 82 1b 7b a8 89 5d ab Data Ascii: gx3JB-uX9i+W<.wGoeu$c;]yD b@!o!5= 2S{)'/:a#<}kKXc-Lm+_\|4[4 R+]$znXV $y4n:3Ngjf]T0"+BF[pR?uWX0Te$Syi/,*j\|61NJ<"{]
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 4f 9b 3d c8 04 01 f3 a5 f6 56 d7 1c 42 75 98 6c aa 73 9e f8 de 8e b4 80 31 25 fb 50 26 90 fc 2f c8 b7 db 8c cd 7b 79 b7 d8 ec d0 d4 55 73 75 b9 01 c7 11 ce 76 ee 4e 52 09 24 0c 77 ed 43 7d 4c ea f6 96 b1 da da d2 7d 0f 80 b3 12 1c 80 f1 b9 29 6a de f2 c7 f5 29 44 8c f2 4d 56 eb ed 79 75 d6 76 76 74 be 9a 4b 96 9e 9e c5 09 28 6d 47 74 89 ae f0 a5 38 e2 8f 27 f9 9b 88 f9 50 1d be d8 cc 56 5d 8e 84 ed 69 04 77 1c 9f bd 6e e3 54 2e 3c 43 92 7f bb ff 00 14 49 9a 38 4e 98 f9 d3 73 f0 f7 16 5d cb f8 a4 ab 9d c4 19 d2 d9 52 53 11 b6 80 41 c2 b3 92 71 92 70 33 de 9b 88 d3 ef a1 7b 80 c1 c9 24 83 c9 15 99 b4 f6 ac 93 a6 a4 b8 bb 1a 83 72 12 30 95 ed ce d3 ff 00 e1 4e dd 1b d6 b8 77 26 9b 8f 7e 65 51 e6 a5 27 c4 75 b4 e5 0a f9 e3 bd 21 f8 a2 d2 da e4 c4 f0 ae 08 18 Data Ascii: O=VBuls1%P&/{yUsuvNR$wC}L})j)DMVyuvvtK(mGt8'PV]iwnT.<CI8Ns]RSAqp3{$r0Nw&~eQ'u!
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 0d 65 2e 60 6e c6 3d 0d 57 6a cd e0 a8 27 38 a1 b2 41 af df 1d cd a0 38 12 ac 0e 4e 2a 1b cd a0 2c 38 a4 8d c3 b1 15 2b 94 60 1e 2b ca 9b de 95 0c 70 68 c5 d8 ed 5e 33 31 eb 5b 36 1d e6 1d f2 12 5d 8c f4 77 c3 83 f3 a1 38 a8 f3 a0 bf 70 61 11 26 b6 87 a1 37 f9 06 3f f9 ee 69 65 a5 e4 7f 09 9e bd 3a 1d 11 ee 9b 43 91 9b 58 fc e9 c6 ef ed 4c c8 17 09 ac b0 91 74 67 c0 50 e1 59 ed de b1 bf 10 f0 9e 3d c2 ae 0d e4 8c 5b 24 8d 43 3b 60 f2 38 1b 7a 53 f3 34 3a bc 30 72 31 9f 95 00 75 2a 4c 1d 2b a6 15 12 2a 43 32 a6 ff 00 29 a0 93 92 12 0e 56 7f 43 8f bd 22 1c b9 b4 a4 28 30 37 1e db 89 e3 34 5b d7 89 d7 27 b5 1a 8a db 57 f0 b6 9b 6d 31 dc 4a 7c b9 20 15 02 7d 0e ec f7 f9 52 a6 34 bd 8d 14 ee 19 de 49 1f fc fa 56 e3 84 5e de cb c3 91 e7 94 c8 c7 7c 93 9c 67 a7 Data Ascii: e.`n=Wj'8A8N,8+`+ph^31[6]w8pa&7?ie:CXLtgPY=[$C;`8zS4:0r1uL+*C2)VC"(074['Wm1J\| }R4IV^\|g
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 09 3d f3 57 b0 ba 65 a8 55 68 7a f1 38 38 c7 90 ab 07 bf 7a d1 96 2e 9b da ed 53 9a d9 05 0d 80 4f 98 d4 de ad dc a0 69 6d 0f 3d c7 9c 6d ac 36 12 90 a3 dc 92 05 0b c4 78 4c 56 aa a6 39 75 ed bd 1f 00 d6 84 c9 d2 b1 14 4b 23 d7 1b 82 dd 9c 14 63 b4 a3 b9 58 e0 e2 a7 ea 8e a1 ca 4d ac d8 ed 85 b4 45 03 69 21 3c 9e 73 45 da 6e eb 6c 9d a4 25 aa 42 d0 87 d5 bc f7 e7 f3 52 42 e2 d9 55 c1 f0 c9 dc 37 1c 73 59 81 6e 25 9b 5c 9c 87 2a a5 db c3 40 10 f3 a8 bb 0b 84 95 f9 89 e4 9a 23 d0 36 44 dc b5 75 b5 b4 33 e2 80 b2 a5 8f 96 d3 55 1f 04 fb 28 4a dd 69 49 42 8e 01 c7 7a d1 1d 0f d0 ff 00 05 15 17 99 ac 29 0f bb bb 6e ef 41 c8 15 b0 e0 36 8f 7b 7a ba 7f 0a ee 7e 5d 29 74 ad a5 71 d4 d3 7e dd 05 a8 91 19 6d a6 92 80 94 f6 02 a6 01 93 81 c9 af 78 ae d0 c0 12 9b 24 Data Ascii: =WeUhz88z.SOim=m6xLV9uK#cXMEi!<sEnl%BRBU7sYn%\*@#6Du3U(JiIBz)nA6{z~])tq~mx$
2024-09-20 22:48:47 UTC	1390	IN	Data Raw: 34 da 47 d4 7a 0a fa 64 ab 9c 5b 1d bd 4e ef 6e 34 90 a5 94 e7 38 1b 88 4e 7d b2 39 ae 02 dd 79 95 a2 db 78 45 79 fb 7c 89 5b 57 24 37 94 a0 25 40 01 9f fa 89 a2 17 27 22 f5 1a 3d a5 88 aa 75 6c a5 29 f1 4f 01 29 48 fd cf 15 8d e2 57 ab 32 e0 ec a2 95 68 0a 84 9e b5 4b 63 86 dc 89 08 2b e7 3d c5 14 49 7e 0d b1 4b 6d e5 02 f8 68 ac 30 01 2b 57 1c 7d 89 c5 0a dd 75 dd 8f 48 a9 71 22 2d 0f 5d 58 db 95 04 78 88 4a bb e0 9e dd aa 4f ff 00 5c a3 16 e2 5e 3f 87 35 78 d5 ed e5 11 4b f1 92 88 d1 d3 9c 02 a4 a7 05 c5 63 b6 78 19 f9 52 5b 5e 18 d7 8c 26 98 e9 4e 83 bf af b5 4e c9 ed 61 7d 53 9e 5d 3f 6f 7a 62 69 5e 97 29 2f 9d 47 d4 c9 1e 2c 25 21 2b 85 65 49 f0 97 20 91 c0 50 ee 94 82 7d 7b ed cf ad 00 75 7f 5d 5c af b7 75 d9 67 36 dc 4b 7c 02 94 b7 01 a1 86 9b 18 Data Ascii: 4Gzd[Nn48N}9yxEy\|[W$7%@'"=ul)O)HW2hKc+=I~Kmh0+W}uHq"-]XxJO\^?5xKcxR[^&NNa}S]?ozbi^)/G,%!+eI P}{u]\ug6K\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.4	49779	37.230.131.17	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	594	OUT	POST /adfoxhb HTTP/1.1 Host: ssp.hybrid.ai Connection: keep-alive Content-Length: 368 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	368	OUT	Data Raw: 7b 22 70 6c 61 63 65 73 22 3a 5b 7b 22 69 64 22 3a 22 61 64 66 6f 78 5f 31 37 32 31 32 39 39 37 30 37 39 36 34 39 31 37 30 31 22 2c 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 22 36 36 39 66 36 33 66 63 34 64 35 30 36 65 36 30 31 30 38 39 31 64 38 64 22 2c 22 73 69 7a 65 73 22 3a 5b 5b 39 37 30 2c 39 30 5d 5d 2c 22 74 61 72 67 65 74 52 65 66 22 3a 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 2f 73 2f 6f 67 6f 72 6f 64 72 75 22 7d 2c 7b 22 69 64 22 3a 22 61 64 66 6f 78 5f 31 37 32 31 32 39 39 36 35 34 33 39 35 33 31 37 30 31 22 2c 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 22 36 36 39 66 36 34 63 65 34 64 35 30 36 65 36 30 31 30 38 39 31 64 38 66 22 2c 22 73 69 7a 65 73 22 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 22 74 61 72 67 65 74 52 Data Ascii: {"places":[{"id":"adfox_172129970796491701","placementId":"669f63fc4d506e6010891d8d","sizes":[[970,90]],"targetRef":"http://xn--r1a.website/s/ogorodru"},{"id":"adfox_172129965439531701","placementId":"669f64ce4d506e6010891d8f","sizes":[[300,250]],"targetR
2024-09-20 22:48:48 UTC	492	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:48:47 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: http://xn--r1a.website Set-Cookie: vid=44070086312c3b295949; expires=Sat, 20 Sep 2025 22:48:48 GMT; domain=hybrid.ai; secure; samesite=none Vary: Origin P3P: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC' Server: Hybrid Web Server
2024-09-20 22:48:48 UTC	21	IN	Data Raw: 62 0d 0a 7b 22 62 69 64 73 22 3a 5b 5d 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: b{"bids":[]}0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.4	49778	167.235.7.148	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	604	OUT	POST /ssp/adfox HTTP/1.1 Host: exchange.buzzoola.com Connection: keep-alive Content-Length: 334 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	334	OUT	Data Raw: 7b 22 70 6c 61 63 65 73 22 3a 5b 7b 22 69 64 22 3a 22 61 64 66 6f 78 5f 31 37 32 31 32 39 39 37 30 37 39 36 34 39 31 37 30 31 22 2c 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 22 31 32 37 32 32 34 37 22 2c 22 73 69 7a 65 73 22 3a 5b 5b 39 37 30 2c 39 30 5d 5d 2c 22 74 61 72 67 65 74 52 65 66 22 3a 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 2f 73 2f 6f 67 6f 72 6f 64 72 75 22 7d 2c 7b 22 69 64 22 3a 22 61 64 66 6f 78 5f 31 37 32 31 32 39 39 36 35 34 33 39 35 33 31 37 30 31 22 2c 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 22 31 32 37 32 32 34 38 22 2c 22 73 69 7a 65 73 22 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 22 74 61 72 67 65 74 52 65 66 22 3a 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 2f 73 2f 6f 67 6f 72 Data Ascii: {"places":[{"id":"adfox_172129970796491701","placementId":"1272247","sizes":[[970,90]],"targetRef":"http://xn--r1a.website/s/ogorodru"},{"id":"adfox_172129965439531701","placementId":"1272248","sizes":[[300,250]],"targetRef":"http://xn--r1a.website/s/ogor
2024-09-20 22:48:48 UTC	597	IN	HTTP/1.1 307 Temporary Redirect server: nginx date: Fri, 20 Sep 2024 22:48:47 GMT content-length: 0 access-control-allow-credentials: true access-control-allow-headers: Set-Cookie, X-Alt-Referer, X-First-Party-Cookie, X-Aidata-FP, If-None-Match access-control-allow-origin: http://xn--r1a.website access-control-expose-headers: Set-Cookie, Etag location: /ssp/adfox?set_buzzoola_cookie=t set-cookie: uuid=07423726-b659-4bb0-6cef-0dbb74544185; Path=/; Domain=buzzoola.com; Expires=Sun, 20 Oct 2024 22:48:47 GMT; Max-Age=2592000; Secure; SameSite=None serverid: TODO connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.4	49780	195.209.109.24	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	602	OUT	POST /cgi-bin/bid.cgi HTTP/1.1 Host: pb.adriver.ru Connection: keep-alive Content-Length: 677 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	677	OUT	Data Raw: 7b 22 63 75 72 22 3a 5b 22 52 55 42 22 5d 2c 22 73 69 74 65 22 3a 7b 22 6e 61 6d 65 22 3a 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 22 2c 22 64 6f 6d 61 69 6e 22 3a 22 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 22 2c 22 69 64 22 3a 22 35 37 3a 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 5f 66 6c 6f 6f 72 61 64 5f 6d 6f 62 5f 33 30 30 78 32 35 30 22 2c 22 70 61 67 65 22 3a 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 2f 73 2f 6f 67 6f 72 6f 64 72 75 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 69 64 22 3a 22 35 37 22 7d 7d 2c 22 69 64 22 3a 22 30 2e 37 35 32 34 34 37 39 36 32 39 39 39 34 39 32 37 22 2c 22 75 73 65 72 22 3a 7b 22 62 75 79 65 72 69 64 22 3a 30 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 75 Data Ascii: {"cur":["RUB"],"site":{"name":"http://xn--r1a.website","domain":"xn--r1a.website","id":"57:xn--r1a.website_floorad_mob_300x250","page":"http://xn--r1a.website/s/ogorodru","publisher":{"id":"57"}},"id":"0.7524479629994927","user":{"buyerid":0},"device":{"u
2024-09-20 22:48:48 UTC	297	IN	HTTP/1.1 204 No Content Date: Fri, 20 Sep 2024 22:48:47 GMT Connection: close Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-control: no-cache, max-age=0, must-revalidate, no-store Pragma: no-cache Access-Control-Allow-Origin: http://xn--r1a.website Access-Control-Allow-Credentials: true

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.4	49772	188.42.34.65	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:47 UTC	610	OUT	POST /adjson?t=adfox HTTP/1.1 Host: ads.betweendigital.com Connection: keep-alive Content-Length: 334 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:47 UTC	334	OUT	Data Raw: 7b 22 70 6c 61 63 65 73 22 3a 5b 7b 22 69 64 22 3a 22 61 64 66 6f 78 5f 31 37 32 31 32 39 39 37 30 37 39 36 34 39 31 37 30 31 22 2c 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 22 34 37 38 30 30 37 31 22 2c 22 73 69 7a 65 73 22 3a 5b 5b 39 37 30 2c 39 30 5d 5d 2c 22 74 61 72 67 65 74 52 65 66 22 3a 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 2f 73 2f 6f 67 6f 72 6f 64 72 75 22 7d 2c 7b 22 69 64 22 3a 22 61 64 66 6f 78 5f 31 37 32 31 32 39 39 36 35 34 33 39 35 33 31 37 30 31 22 2c 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 22 34 37 38 30 30 37 32 22 2c 22 73 69 7a 65 73 22 3a 5b 5b 33 30 30 2c 32 35 30 5d 5d 2c 22 74 61 72 67 65 74 52 65 66 22 3a 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 2f 73 2f 6f 67 6f 72 Data Ascii: {"places":[{"id":"adfox_172129970796491701","placementId":"4780071","sizes":[[970,90]],"targetRef":"http://xn--r1a.website/s/ogorodru"},{"id":"adfox_172129965439531701","placementId":"4780072","sizes":[[300,250]],"targetRef":"http://xn--r1a.website/s/ogor
2024-09-20 22:48:48 UTC	997	IN	HTTP/1.1 200 OK content-type: application/json cache-control: no-cache, no-store, max-age=0, must-revalidate access-control-allow-origin: http://xn--r1a.website access-control-allow-credentials: true set-cookie: dc=lux1; Max-Age=31536000; Expires=Sat, 20 Sep 2025 22:48:48 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: tuuid=934fd479-13e4-5209-ba1b-9425dcf66ff5; Max-Age=31536000; Expires=Sat, 20 Sep 2025 22:48:48 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ut=Zu370AAAIyh89YMwyDb-xs_V4HAMjqxjMWk7dA==; Max-Age=31536000; Expires=Sat, 20 Sep 2025 22:48:48 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: ss=1; Max-Age=31536000; Expires=Sat, 20 Sep 2025 22:48:48 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure set-cookie: unm=1; Max-Age=31536000; Expires=Sat, 20 Sep 2025 22:48:48 GMT; Path=/; Domain=.betweendigital.com; SameSite=None; Secure content-length: 11 connection: close
2024-09-20 22:48:48 UTC	11	IN	Data Raw: 7b 22 62 69 64 73 22 3a 5b 5d 7d Data Ascii: {"bids":[]}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.4	49798	135.181.113.151	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:48 UTC	384	OUT	GET /js/xn--r1a.website.js?ts=1726872521522 HTTP/1.1 Host: ads.digitalcaramel.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:48 UTC	692	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:48 GMT Content-Type: application/javascript Content-Length: 3631 Last-Modified: Mon, 09 Sep 2024 12:08:20 GMT Connection: close Vary: Accept-Encoding ETag: "66dee534-e2f" Expires: Fri, 27 Sep 2024 22:48:48 GMT Cache-Control: max-age=604800 X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff Referrer-Policy: no-referrer-when-downgrade Content-Security-Policy: default-src 'self' http: https: ws: wss: data: blob: 'unsafe-inline'; frame-ancestors 'self'; Permissions-Policy: interest-cohort=() Strict-Transport-Security: max-age=31536000; includeSubDomains X-Frame-Options: DENY Accept-Ranges: bytes
2024-09-20 22:48:48 UTC	3631	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 34 66 33 28 29 7b 76 61 72 20 5f 30 78 35 62 62 65 36 33 3d 5b 27 62 65 74 77 65 65 6e 44 69 67 69 74 61 6c 27 2c 27 31 32 37 32 32 34 38 27 2c 27 35 37 3a 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 5f 66 6c 6f 6f 72 61 64 5f 64 65 73 6b 27 2c 27 38 39 37 37 30 38 27 2c 27 61 64 66 6f 78 5f 31 37 32 31 32 39 39 37 30 37 39 36 34 39 31 37 30 31 27 2c 27 36 36 5f 39 37 30 78 39 30 5f 61 6c 66 61 64 61 72 74 27 2c 27 31 33 36 36 30 37 38 27 2c 27 31 35 33 36 31 34 33 27 2c 27 31 36 37 32 36 39 39 27 2c 27 38 37 38 30 31 6a 4d 4d 62 4d 66 27 2c 27 31 32 37 32 32 34 37 27 2c 27 32 34 36 38 32 36 31 27 2c 27 36 36 39 66 36 33 66 63 34 64 35 30 36 65 36 30 31 30 38 39 31 64 38 64 27 2c 27 35 37 3a 78 6e 2d 2d 72 31 61 2e Data Ascii: function _0x14f3(){var _0x5bbe63=['betweenDigital','1272248','57:xn--r1a.website_floorad_desk','897708','adfox_172129970796491701','66_970x90_alfadart','1366078','1536143','1672699','87801jMMbMf','1272247','2468261','669f63fc4d506e6010891d8d','57:xn--r1a.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.4	49796	5.255.255.77	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:48 UTC	688	OUT	GET /ads/system/header-bidding.js HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=GmNVkS+1q5EG+QZWaZequSAdEsZAYIQJqYkSXqpBiBW8RHxpVAeNYZqWeWLxv59vOg/zx7VfGq3GoEcsNjaaQUQpdjA=; yandexuid=1141320511726872524; yashr=6680397161726872524; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYMz3t7cGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=
2024-09-20 22:48:48 UTC	1198	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Cache-Control: private, max-age=3600 Connection: Close Content-Type: text/javascript; charset=utf-8 ETag: "efa73f96084485d39e3ff7766789219e-1117086" Expires: Fri, 20 Sep 2024 23:48:48 GMT Keep-Alive: timeout=600 NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Set-Cookie: receive-cookie-deprecation=1; Path=/; Domain=.yandex.ru; Expires=Sat, 20 Sep 2025 22:48:48 GMT; SameSite=None; Secure; HttpOnly; Partitioned Timing-Allow-Origin: * Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Robots-Tag: noindex, noarchive, nofollow X-Yandex-Req-Id: 1726872528373953-12329230267259888995-balancer-l7leveler-kubr-yp-vla-106-BAL
2024-09-20 22:48:48 UTC	3747	IN	Data Raw: 45 39 43 0d 0a 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 6c 6f 61 64 65 72 73 2f 61 64 66 6f 78 2f 68 65 61 64 65 72 2d 62 69 64 64 69 6e 67 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 Data Ascii: E9C/! v:1117086 b:default c:loaders/adfox/header-bidding /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.p
2024-09-20 22:48:48 UTC	3962	IN	Data Raw: 46 37 33 0d 0a 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 66 6f 72 45 61 63 68 3d 76 6f 69 64 20 30 2c 74 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 65 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 74 2e 63 61 6c 6c 28 6e 2c 65 5b 72 5d 2c 72 2c 65 29 7d 7d 2c 34 37 31 36 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 49 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 74 68 69 73 2e 61 64 55 6e 69 74 42 69 64 64 65 72 73 3d 7b 7d 2c 74 68 69 73 2e 77 61 69 74 69 6e 67 42 69 64 73 3d 6e 75 6c 6c 2c 74 68 69 73 Data Ascii: F73operty(t,"__esModule",{value:!0}),t.forEach=void 0,t.forEach=function(e,t,n){for(var r=0;r<e.length;r++)t.call(n,e[r],r,e)}},47166:function(e,t,n){"use strict";t.I=void 0;var r=function(){function e(e){this.adUnitBidders={},this.waitingBids=null,this
2024-09-20 22:48:48 UTC	4221	IN	Data Raw: 31 30 37 35 0d 0a 4e 45 5a 44 4f 3a 22 67 6e 65 7a 64 6f 22 2c 41 53 54 52 41 4c 41 42 3a 22 61 73 74 72 61 6c 61 62 22 2c 53 4f 4c 4f 57 41 59 3a 22 61 64 72 69 76 65 72 22 2c 42 55 5a 5a 4f 4f 4c 41 3a 22 62 75 7a 7a 6f 6f 6c 61 22 2c 4d 41 49 4c 3a 22 6d 79 74 61 72 67 65 74 22 2c 46 41 43 45 42 4f 4f 4b 3a 22 66 61 63 65 62 6f 6f 6b 22 2c 42 45 54 57 45 45 4e 5f 44 49 47 49 54 41 4c 3a 22 62 65 74 77 65 65 6e 64 69 67 69 74 61 6c 22 2c 47 45 54 5f 49 4e 54 45 4e 54 3a 22 67 65 74 69 6e 74 65 6e 74 22 2c 56 49 44 45 4f 4e 4f 57 3a 22 76 69 64 65 6f 6e 6f 77 22 2c 52 45 4c 41 50 3a 22 72 65 6c 61 70 22 2c 41 44 46 4f 58 3a 22 61 64 66 6f 78 22 2c 46 4f 54 4f 53 54 52 41 4e 41 3a 22 66 6f 74 6f 73 74 72 61 6e 61 22 2c 41 4c 46 41 53 45 4e 53 45 3a 22 61 Data Ascii: 1075NEZDO:"gnezdo",ASTRALAB:"astralab",SOLOWAY:"adriver",BUZZOOLA:"buzzoola",MAIL:"mytarget",FACEBOOK:"facebook",BETWEEN_DIGITAL:"betweendigital",GET_INTENT:"getintent",VIDEONOW:"videonow",RELAP:"relap",ADFOX:"adfox",FOTOSTRANA:"fotostrana",ALFASENSE:"a
2024-09-20 22:48:48 UTC	3954	IN	Data Raw: 46 36 42 0d 0a 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6f 3d 65 2e 64 61 74 61 2c 69 3d 65 2e 65 72 72 6f 72 73 3b 28 30 2c 6e 28 36 30 34 33 30 29 2e 66 6f 72 45 61 63 68 29 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 62 69 64 64 65 72 4e 61 6d 65 2c 61 3d 65 2e 63 6f 64 65 2c 73 3d 69 26 26 28 30 2c 6e 28 31 32 35 36 31 29 2e 66 69 6e 64 29 28 69 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 69 64 2c 72 3d 65 2e 62 69 64 64 65 72 3b 72 65 74 75 72 6e 20 6e 3d 3d 3d 61 26 26 22 61 64 66 6f 78 5f 22 2e 63 6f 6e 63 61 74 28 72 29 3d 3d 3d 74 7d 29 29 3b 69 66 28 73 29 72 2e 63 72 65 61 74 65 45 72 72 6f 72 42 69 64 28 65 2c 6e 28 32 38 30 33 39 29 2e 53 2e 4e 4f 5f 52 45 53 50 4f 4e Data Ascii: F6Bction(e,t){var r=this,o=e.data,i=e.errors;(0,n(60430).forEach)(t,(function(e){var t=e.bidderName,a=e.code,s=i&&(0,n(12561).find)(i,(function(e){var n=e.id,r=e.bidder;return n===a&&"adfox_".concat(r)===t}));if(s)r.createErrorBid(e,n(28039).S.NO_RESPON
2024-09-20 22:48:48 UTC	4229	IN	Data Raw: 31 30 37 44 0d 0a 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 5b 65 2e 69 6d 70 72 65 73 73 69 6f 6e 49 64 5d 3d 65 7d 29 29 2c 74 29 72 2e 70 75 73 68 28 74 5b 6f 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 63 6c 65 61 6e 46 72 6f 6d 4e 6f 74 52 65 71 75 65 73 74 65 64 42 69 64 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 7b 7d 2c 6f 3d 5b 5d 3b 66 6f 72 28 76 61 72 20 69 20 69 6e 28 30 2c 6e 28 36 30 34 33 30 29 2e 66 6f 72 45 61 63 68 29 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 63 6f 64 65 3b 72 65 74 75 72 6e 20 72 5b 69 5d 3d 28 6f 3d 69 2c 28 30 2c 6e 28 34 30 36 31 29 2e 66 69 6c 74 65 72 29 28 65 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e Data Ascii: 107Dtion(e){return t[e.impressionId]=e})),t)r.push(t[o]);return r},t.prototype.cleanFromNotRequestedBids=function(e,t){var r={},o=[];for(var i in(0,n(60430).forEach)(t,(function(t){var o,i=t.code;return r[i]=(o=i,(0,n(4061).filter)(e,(function(e){return
2024-09-20 22:48:48 UTC	3946	IN	Data Raw: 46 36 33 0d 0a 42 2e 73 64 6b 4c 6f 61 64 65 64 3d 74 72 75 65 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 42 29 7b 76 61 72 20 43 3d 2f 5e 68 74 74 70 73 3f 3a 5c 5c 2f 5c 5c 2f 77 77 77 5c 5c 2e 67 6f 6f 67 6c 65 28 5c 5c 2e 63 6f 6d 3f 29 3f 2e 5c 5c 77 7b 32 2c 33 7d 24 2f 3b 72 65 74 75 72 6e 21 21 42 2e 6d 61 74 63 68 28 43 29 7d 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 42 29 7b 72 65 74 75 72 6e 21 21 42 2e 6d 61 74 63 68 28 2f 63 64 6e 2e 61 6d 70 70 72 6f 6a 65 63 74 2e 6f 72 67 24 2f 29 7d 2c 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 42 3d 63 2e 61 6e 63 65 73 74 6f 72 4f 72 69 67 69 6e 73 7c 7c 5b 5d 2c 43 3d 42 5b 42 2e 6c 65 6e 67 74 68 2d 31 5d 7c 7c 63 2e 6f 72 69 67 69 6e 2c 44 3d 42 5b 42 2e 6c 65 6e 67 74 68 2d 32 5d 7c 7c 63 2e 6f 72 69 Data Ascii: F63B.sdkLoaded=true},q=function(B){var C=/^https?:\\/\\/www\\.google(\\.com?)?.\\w{2,3}$/;return!!B.match(C)},r=function(B){return!!B.match(/cdn.ampproject.org$/)},s=function(){var B=c.ancestorOrigins\|\|[],C=B[B.length-1]\|\|c.origin,D=B[B.length-2]\|\|c.ori
2024-09-20 22:48:48 UTC	4237	IN	Data Raw: 31 30 38 35 0d 0a 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 2e 67 65 74 52 65 71 75 65 73 74 65 64 42 69 64 4e 61 6d 65 73 28 74 29 2c 72 3d 74 68 69 73 2e 67 65 74 52 65 73 70 6f 6e 73 65 64 42 69 64 4e 61 6d 65 73 28 65 29 2c 6f 3d 74 68 69 73 2e 67 65 74 44 69 66 66 42 69 64 4e 61 6d 65 73 28 6e 2c 72 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 73 6f 72 74 52 65 71 75 65 73 74 65 64 42 69 64 73 42 79 4e 61 6d 65 73 28 74 2c 6f 29 7d 2c 72 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 63 65 73 73 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 65 2e 62 69 64 73 3b 69 66 28 72 29 7b 76 61 72 20 6f 3d 74 68 69 73 2e 66 69 6c 74 65 72 45 72 72 6f 72 42 69 64 73 28 72 2c 74 29 3b 74 68 69 73 2e 63 72 Data Ascii: 1085s=function(e,t){var n=this.getRequestedBidNames(t),r=this.getResponsedBidNames(e),o=this.getDiffBidNames(n,r);return this.sortRequestedBidsByNames(t,o)},r.prototype.processData=function(e,t){var r=e.bids;if(r){var o=this.filterErrorBids(r,t);this.cr
2024-09-20 22:48:48 UTC	3938	IN	Data Raw: 46 35 42 0d 0a 28 65 29 7b 74 68 69 73 2e 6c 6f 67 28 22 48 42 5f 41 44 41 50 54 45 52 5f 50 41 52 53 45 5f 45 52 52 4f 52 22 29 2c 74 68 69 73 2e 6f 6e 45 72 72 6f 72 28 65 2e 6d 65 73 73 61 67 65 2c 74 2c 6e 28 32 38 30 33 39 29 2e 53 2e 49 4e 56 41 4c 49 44 5f 52 45 53 50 4f 4e 53 45 2e 63 6f 64 65 29 7d 7d 2c 74 2e 70 72 6f 74 6f 74 79 70 65 2e 70 72 6f 63 65 73 73 44 61 74 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 3d 74 68 69 73 2c 6f 3d 65 2e 73 65 61 74 62 69 64 3b 74 68 69 73 2e 64 69 73 61 62 6c 65 46 75 6c 6c 73 63 72 65 65 6e 3d 65 2e 64 69 73 61 62 6c 65 46 75 6c 6c 73 63 72 65 65 6e 3b 76 61 72 20 69 2c 61 3d 32 30 30 2c 73 3d 22 22 3b 69 66 28 28 30 2c 6e 28 38 34 33 36 32 29 2e 50 72 29 28 22 52 65 63 65 69 76 65 64 20 Data Ascii: F5B(e){this.log("HB_ADAPTER_PARSE_ERROR"),this.onError(e.message,t,n(28039).S.INVALID_RESPONSE.code)}},t.prototype.processData=function(e,t){var r=this,o=e.seatbid;this.disableFullscreen=e.disableFullscreen;var i,a=200,s="";if((0,n(84362).Pr)("Received
2024-09-20 22:48:48 UTC	4245	IN	Data Raw: 31 30 38 44 0d 0a 54 69 6d 65 6f 75 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 6f 6e 54 69 6d 65 6f 75 74 28 69 29 7d 7d 7d 29 2e 73 65 6e 64 58 68 72 28 29 7d 7d 28 6e 28 31 32 32 30 29 2e 64 29 2c 74 2e 67 3d 76 6f 69 64 20 30 7d 2c 38 31 36 33 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 74 2e 64 3d 76 6f 69 64 20 30 2c 74 2e 64 3d 7b 61 64 66 6f 78 3a 7b 61 64 61 70 74 65 72 3a 6e 28 37 32 37 38 35 29 2e 56 2c 6e 61 6d 65 3a 6e 28 35 36 32 39 33 29 2e 4f 2e 41 44 46 4f 58 7d 2c 63 72 69 74 65 6f 3a 7b 61 64 61 70 74 65 72 3a 6e 28 33 35 36 39 35 29 2e 4c 2c 6e 61 6d 65 3a 6e 28 35 36 32 39 33 29 2e 4f 2e 43 52 49 54 45 4f 7d 2c 66 61 63 65 62 6f 6f 6b 3a 7b 61 64 61 70 74 65 72 3a Data Ascii: 108DTimeout:function(){return r.onTimeout(i)}}}).sendXhr()}}(n(1220).d),t.g=void 0},81632:function(e,t,n){"use strict";t.d=void 0,t.d={adfox:{adapter:n(72785).V,name:n(56293).O.ADFOX},criteo:{adapter:n(35695).L,name:n(56293).O.CRITEO},facebook:{adapter:
2024-09-20 22:48:48 UTC	3930	IN	Data Raw: 46 35 33 0d 0a 41 4c 41 42 2c 74 79 70 65 3a 6e 28 33 34 34 36 37 29 2e 24 2e 48 54 4d 4c 7d 2c 62 65 74 77 65 65 6e 44 69 67 69 74 61 6c 3a 7b 75 72 6c 3a 22 61 64 73 2e 62 65 74 77 65 65 6e 64 69 67 69 74 61 6c 2e 63 6f 6d 2f 61 64 6a 73 6f 6e 3f 74 3d 61 64 66 6f 78 22 2c 6e 61 6d 65 3a 6e 28 35 36 32 39 33 29 2e 4f 2e 42 45 54 57 45 45 4e 5f 44 49 47 49 54 41 4c 2c 74 79 70 65 3a 6e 28 33 34 34 36 37 29 2e 24 2e 48 54 4d 4c 7d 2c 62 69 64 76 6f 6c 3a 7b 75 72 6c 3a 22 73 73 70 2e 62 69 64 76 6f 6c 2e 63 6f 6d 2f 72 74 62 2f 70 6c 39 39 39 22 2c 6e 61 6d 65 3a 6e 28 35 36 32 39 33 29 2e 4f 2e 42 49 44 56 4f 4c 2c 74 79 70 65 3a 6e 28 33 34 34 36 37 29 2e 24 2e 48 54 4d 4c 7d 2c 62 75 7a 7a 6f 6f 6c 61 3a 7b 75 72 6c 3a 22 65 78 63 68 61 6e 67 65 2e 62 Data Ascii: F53ALAB,type:n(34467).$.HTML},betweenDigital:{url:"ads.betweendigital.com/adjson?t=adfox",name:n(56293).O.BETWEEN_DIGITAL,type:n(34467).$.HTML},bidvol:{url:"ssp.bidvol.com/rtb/pl999",name:n(56293).O.BIDVOL,type:n(34467).$.HTML},buzzoola:{url:"exchange.b

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.4	49797	93.158.134.118	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:48 UTC	683	OUT	GET /getcookie HTTP/1.1 Host: matchid.adfox.yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=GmNVkS+1q5EG+QZWaZequSAdEsZAYIQJqYkSXqpBiBW8RHxpVAeNYZqWeWLxv59vOg/zx7VfGq3GoEcsNjaaQUQpdjA=; yandexuid=1141320511726872524; yashr=6680397161726872524; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYMz3t7cGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=
2024-09-20 22:48:48 UTC	256	IN	HTTP/1.1 200 OK Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Connection: Close Content-Length: 87 Content-Type: application/json Date: Fri, 20 Sep 2024 22:48:48 GMT Timing-Allow-Origin: * X-Content-Type-Options: nosniff
2024-09-20 22:48:48 UTC	87	IN	Data Raw: 7b 22 63 72 79 70 74 6f 75 69 64 22 3a 22 38 33 37 38 31 36 38 35 35 32 34 36 30 35 38 31 34 36 34 22 2c 22 63 72 79 70 74 6f 75 69 64 5f 73 69 67 6e 22 3a 22 32 37 62 31 65 66 64 62 39 37 62 66 35 35 35 32 36 61 66 38 66 63 30 65 33 31 64 33 35 32 32 39 22 7d Data Ascii: {"cryptouid":"8378168552460581464","cryptouid_sign":"27b1efdb97bf55526af8fc0e31d35229"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.4	49803	178.154.131.217	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:48 UTC	580	OUT	GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://xn--r1a.website sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:48 UTC	793	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:48 GMT Content-Type: font/woff2 Content-Length: 26004 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=31556952 Etag: "7f0cdaf91230f9789ca4162aedff612e" Expires: Sun, 21 Sep 2025 04:35:22 GMT Last-Modified: Mon, 25 Apr 2022 14:02:39 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Amz-Meta-Owner: {"role":"admin","login":"4eb0da"} X-Nginx-Request-Id: a66057207861c4da Accept-Ranges: bytes
2024-09-20 22:48:48 UTC	15591	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 65 94 00 14 00 00 00 00 e2 4c 00 00 65 20 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 02 1b 83 7a 1c 89 1a 3f 48 56 41 52 89 37 3f 4d 56 41 52 33 06 60 3f 53 54 41 54 1c 00 8a 28 2f 3c 11 08 0a 81 da 2c 81 ac 67 0b 88 1a 00 30 81 a2 16 01 36 02 24 03 90 30 04 20 05 87 59 07 20 0c 07 1b 0e c6 25 ec 26 33 bd 59 65 12 42 6f 8e 02 a2 28 61 b5 11 36 12 21 6c 1c 10 cc 41 ae ec ff cf 3a 36 64 34 8e bc 03 d8 e6 4c fd 2a a0 68 a4 8c 22 86 65 01 05 69 99 8c 26 c7 2c a5 cd b6 c1 35 cb b2 57 57 09 8a 76 e6 4e da c6 8b 76 12 15 10 04 55 c5 c4 fe 36 49 c6 3e 5d 4e 97 c4 80 01 27 69 5b 9e 8c ee a2 a7 90 7b d3 65 c8 49 47 0f 0e 93 09 ae f1 7e 66 5d db 3e dd 63 bd bd ad db 7b f5 83 09 72 68 af 2a 2e fc 75 22 Data Ascii: wOF2eLe z?HVAR7?MVAR3`?STAT(/<,g06$0 Y %&3YeBo(a6!lA:6d4Lh"ei&,5WWvNvU6I>]N'i[{eIG~f]>c{rh.u"
2024-09-20 22:48:48 UTC	10413	IN	Data Raw: c8 6d 4f 7f 51 f4 74 82 b2 50 7e a8 b2 96 a3 9c 25 8c 6d 48 44 48 cc db 1c 9d ce 36 ef 0c d6 d0 98 72 00 a6 be da 5e be 40 38 bf a9 62 81 e3 7b 58 69 4f 9f 2a 8f 6b 6d 6d 2b 6f f5 1c 12 18 d2 9a 56 b9 27 f1 52 6e fa 23 41 73 6d 3c 90 34 af 04 bf a7 bb 9b 30 60 4b 4f b4 d6 52 b8 1d e8 50 55 ad a1 2b c4 05 b0 30 22 6f 79 69 72 d8 9e 8c ce b9 b5 06 8b 60 72 20 93 0e db e8 f5 a1 c7 53 e9 ec 2e c4 ac dd 0a 3a 54 3c 9d a4 6c 6a ad aa c0 33 d3 a0 eb c3 b7 e2 ba dd e7 67 82 d3 4c 23 02 1d 76 98 30 ce 84 52 9b dc de bf 0b 36 50 69 04 d2 3b 55 c5 ac 0c 91 c1 98 14 ca 10 01 99 44 0f d6 d1 79 e0 af 36 95 77 9b 4d a1 a7 61 04 1c c8 d4 e7 18 3f 4d 77 c7 7d b2 39 be fb f8 99 11 4a 1a 76 b5 87 d6 b7 28 81 5b 80 3c 4c 89 32 53 43 0b 1a 88 c1 37 61 32 6b 0b 53 e6 b3 77 70 Data Ascii: mOQtP~%mHDH6r^@8b{XiO*kmm+oV'Rn#Asm<40`KORPU+0"oyir`r S.:T<lj3gL#v0R6Pi;UDy6wMa?Mw}9Jv([<L2SC7a2kSwp

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.4	49804	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:48 UTC	696	OUT	GET /file/JitwEocrGUIsjF7lIVjj81yr99dSOamCXttyW3h-_YJH6F1KYV6qX3iEpHS1nPcEz03nUgOqM9XNa9FbMUsIldglc_Qd9dDVe-Eh9K4cJMOY0AQB78C7CvcLX1boV-UWvh7bEYn87eEeCJM74wYIecz1VUC0dvUSsobArVa0tGYZWpy6eQLxELg5heZS6J_caSMAPmS2xCwwdiCblU0NbmbXanM9fi1RYPQOksZVCklr1QcQz-YHEHNnN8xA7JwcZjCbsWxPZenPnNKQCr5Om6muF5s6PeHKRz7rFNa_Y9N0a6V2-o9ap0ve1s0WFFa_W2TKh266_aX8cFNo1ovPNA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:48 UTC	685	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 92510 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "650674f6a6faf657c581390a60cd12d6db8126ac" Content-Type: image/jpeg Age: 818 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:48 UTC	705	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference V
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 Data Ascii: /050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIO
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 04 00 02 03 05 06 07 01 08 09 ff c4 00 4a 11 00 01 03 02 04 03 04 07 04 07 07 02 05 05 01 00 01 00 02 03 04 11 05 12 21 31 06 13 41 22 51 61 71 14 32 81 91 b1 c1 d1 07 a1 d2 f0 23 42 62 72 92 b2 e1 15 16 33 34 52 82 f1 24 63 17 25 43 44 c2 35 53 73 93 a2 54 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 ae e8 a2 8a a7 5f 3d a2 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 8a 49 22 8a 28 a4 92 28 a2 Data Ascii: J!1A"Qaq2#Bbr34R$c%CD5SsT?_=((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((I"((
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 56 e3 7a b6 22 c1 dc d3 80 f9 04 90 aa 6e 76 f7 a2 99 f6 7d c5 32 7a b4 84 ff 00 b9 9f 8d 30 51 50 0e 6a a6 5b 51 06 3a f8 c7 ed 0a f5 1b 54 47 90 16 a5 36 59 4a 33 f3 2d 63 04 fa 0a 69 95 83 aa 94 7d 9c f1 61 39 45 19 fe 26 7e 35 3b 45 40 a3 55 46 53 a8 42 9a 5e 14 47 28 20 e2 9c ec 16 a8 fa 8e 39 76 0d c1 08 52 7e f3 4e a3 6a d3 ef 8c f6 a9 1a 43 85 c2 89 ff 00 67 bc 53 1f ad 46 7d ec fc 4a 2a 8a 76 77 a7 32 1b 82 25 26 73 4e 67 f6 12 83 9c e3 38 aa c9 fb ea 58 72 42 1d 8c b4 78 44 a7 e6 50 1b 88 3d ab de 97 5e 33 ec ff 00 8a 24 be 5a 42 6d e2 df c4 a5 e8 a5 47 b5 c3 0c 85 13 11 67 03 38 de 39 15 07 2f ab 91 61 ba 10 bb 63 e7 23 39 f1 07 f2 af 58 33 fa a8 1a ae 0d c7 e8 c5 e7 a6 2d f6 b7 e4 e5 63 d1 55 f3 1d 56 86 f9 1f da 0f 24 11 9c f8 83 f9 56 d7 fb Data Ascii: Vz"nv}2z0QPj[Q:TG6YJ3-ci}a9E&~5;E@UFSB^G( 9vR~NjCgSF}J*vw2%&sNg8XrBxDP=^3$ZBmGg89/ac#9X3-cUV$V
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: bf 69 0a c7 f1 1e d5 93 4e 5c 2c b7 cd 2a f5 f2 5d d5 36 f5 b4 f2 99 f8 35 36 16 ea 88 48 20 a7 e6 19 07 38 a8 a6 70 a7 6e 69 34 1f 9e eb aa e9 78 4b 1d 84 5d f4 e7 de d3 f0 25 7a a2 96 5e d6 91 9b 90 b6 db 8b 20 a1 27 85 38 02 0f d7 1c d4 25 c3 aa 91 ed f2 96 c2 ed ae ac a7 b2 92 e8 c2 87 a8 e2 9e d0 5f b2 92 5e 0e c7 e0 68 74 94 c4 03 e2 df c4 ac 1a 2a 1b 4c 6a 26 b5 3d af e3 98 65 4c 27 c4 53 7b 14 ac 9c 8f fe b5 33 5e 11 63 65 95 9a 19 29 e4 74 52 0b 39 a6 c4 78 a2 8a 28 a4 a2 45 14 51 49 24 56 68 b2 4c 39 2c c9 4e 72 cb 89 70 63 d8 e7 fa ab 0d 78 78 e1 97 0f a2 4f f0 a6 b8 d8 5d 1b 40 01 ac 84 1f f5 b3 f9 9a ac 49 bd 4b 6b 50 c4 53 77 5d be 19 49 42 92 b1 92 a1 f9 fb d5 31 a9 95 0d f9 0e 1b 73 6b 43 40 91 b5 5f 8f a5 60 54 c7 0a 08 cf 96 72 2b 45 c7 Data Ascii: iN\,]656H 8pni4xK]%z^ '8%_^htLj&=eL'S{3^ce)tR9x(EQI$VhL9,NrpcxxO]@IKkPSw]IB1skC@_`Tr+E
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 51 7d c2 db 3b 8e 11 bc f3 df 93 cf bd 2b ce 9e b9 73 14 e4 a7 56 e1 cf 18 f3 a8 89 4f 6d 73 71 24 73 9c 1f 4a 02 59 f4 ca d5 04 11 c3 87 82 e6 0d 7b d5 a7 a0 b5 4a da 9a 88 8a 65 0e a7 3c 2f 1f 3a 47 1e 79 ed 56 6d c2 24 5b bc 45 b7 29 94 ba db 80 fc ae 20 1c 64 79 57 30 c1 bd b9 0a 5a 1f 88 b5 34 a4 11 c8 24 67 d8 fb 57 42 e8 4d 5b 0f 52 41 01 e2 84 4a 6c 00 b6 c9 1c f0 39 1c f6 a9 21 25 c2 e7 74 35 4d 53 24 3c c6 ee ab 5d 53 d2 e7 e3 b8 a7 6c ca de c2 d5 cb 6a 3f 74 fa 9c 0e c2 aa bb 9d aa 65 a2 62 84 98 fb 40 3c 82 93 b5 43 3e 5e a2 ba ea 56 c4 4a 29 42 d2 77 0e 72 78 03 d2 a0 af d6 2b 4d ce 23 a9 b8 30 da c1 49 c2 c2 46 e4 9f 63 44 35 8c 25 66 aa cc 73 8b b8 5b c4 2e 63 31 50 f4 55 4a b5 a9 41 6d a4 f8 f1 d5 c9 03 cd 49 f5 15 e1 9b a0 5a 10 12 42 48 Data Ascii: Q};+sVOmsq$sJY{Je</:GyVm$[E) dyW0Z4$gWBM[RAJl9!%t5MS$<]Slj?teb@<C>^VJ)Bwrx+M#0IFcD5%fs[.c1PUJAmIZBH
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 33 85 5b 73 db 03 9a 74 be a8 58 fc 30 81 23 ae 9b ec 5b 50 b6 ca 93 b8 23 0a 50 fc bb d3 6b cf 2a ff 00 21 a8 f6 98 69 f1 90 9d cb 2d a3 3b 50 3b 93 8f 21 48 f6 ab 97 c2 25 d0 84 a5 61 43 68 2a fa f7 15 62 f4 9a fe 2d 3a 82 64 a7 92 a0 c7 c2 29 0e ad 2d 92 94 85 a9 23 2a 20 8c 0e fd f2 33 8c 83 41 3e 5e 5c 66 db ae a7 0d 70 86 8f b0 75 4e 16 6e 90 8b dd a6 cf 2e 34 4b b3 8a 9c e2 d0 eb eb 7d 0d b6 ce d1 ca 8f c8 7c ff 00 67 93 81 e5 55 b6 a4 b0 48 d2 97 f9 56 c9 4e 37 21 c6 c9 52 16 c2 f7 02 32 47 3e 87 8e 45 5f 1a 8f a8 77 0b 8c 78 c9 d1 b3 ac d1 12 ca 94 a4 96 26 ad 85 9c a0 a5 65 6d 0f 94 ac f7 ca 4f 26 a8 1d 50 5d 8d 79 1e 34 95 bf 21 f6 7c 57 1c 52 b2 49 5a 89 23 3e 7f d7 55 2c 15 0f 05 d2 e8 3b ba a0 a8 71 07 49 50 01 76 eb eb 0f 04 a3 b9 3c 63 bf Data Ascii: 3[stX0#[P#Pk!i-;P;!H%aChb-:d)-#* 3A>^\fpuNn.4K}\|gUHVN7!R2G>E_wx&emO&P]y4!\|WRIZ#>U,;qIPv<c
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 53 98 27 81 e5 58 5c ba f8 4b 5f cc 0a 79 f3 a8 b9 17 04 39 b8 8e ff 00 5a b3 86 07 03 75 80 c4 71 78 5e d2 03 b5 5f 67 ca 1c f2 30 05 2e 29 5b dc 52 89 ee 6b 2c b9 5e 2a 8a 50 78 f3 ac 00 55 cc 6c c8 17 2f af ab f4 a9 6e 36 0b 20 20 76 ac a9 72 b0 62 bd 24 12 78 e2 a5 41 b5 e4 6c b7 98 ca 8f 15 62 74 8a c0 75 16 bd b3 c7 50 fd 44 77 91 25 f2 47 01 08 50 27 fa aa b5 69 6a 41 1c 57 4b 74 a6 d6 ee 87 d1 f2 35 04 86 9a 4d c6 e6 82 86 d6 e6 32 cb 05 20 83 83 83 bb bf b7 6a 0a b2 5e 54 24 8d ce 81 3a a6 52 20 2c 6e ee d3 ea a3 be d2 ba a1 37 19 bf 08 d2 80 53 6b 0c 00 0f fc 1a 37 7e ec 91 ed c5 26 74 4b 57 b9 66 bb fe 8c 7d e2 88 f2 96 0b 18 56 36 bf c0 1f 98 18 a5 0d 75 7e 55 fa ff 00 21 ed ca 5b 6d 12 da 0a 8f 2a c2 8e 49 f7 24 d4 15 aa 4a e3 4a 4b 8d 2b 63 Data Ascii: S'X\K_y9Zuqx^_g0.)[Rk,^PxUl/n6 vrb$xAlbtuPDw%GP'ijAWKt5M2 j^T$:R ,n7Sk7~&tKWf}V6u~U![mI$JJK+c
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 64 36 a6 c4 b4 a8 69 96 9c 60 23 0c 06 10 d4 16 d6 9e 37 95 2d 21 79 04 92 85 83 9f 45 df b4 fd a1 de bb 7d 96 b4 a7 50 ec d0 e1 49 ba db e3 c7 bb cc 31 b2 e2 99 61 6c 94 cb 65 04 64 e1 0e 6d 2b 04 f0 18 56 79 4d 58 86 06 8d 16 0a 6a c9 66 7d a4 3a 5d 7e 72 9e 2a f1 e8 c7 d9 6b 5f 75 5d f8 d7 16 6c ab b6 69 d2 12 ea 67 dc f7 47 6a 4a 78 20 37 94 95 2d 24 1f bc 94 94 f0 79 cd 46 fd 98 7a 60 9e ac f5 8e c7 68 96 da 1e b4 c1 57 e9 2b 9b 6e 27 72 5c 8c d2 92 4b 64 7a 2d 4a 42 0f b2 cd 76 07 da 8f a9 dd 4e d2 f3 d9 d0 bd 11 d3 77 58 16 48 50 58 4b 93 ed 16 47 54 52 76 a8 06 19 5a 01 42 1b 4a 0b 7f 70 05 02 08 04 01 82 c7 0e cd bb fb 94 12 3f f5 42 a7 fa d5 d0 be ab e8 1b 02 1f 89 6a 62 f1 65 61 b0 85 1b 12 9c 7c 47 40 49 e5 6d 6d 4a f6 80 32 55 b4 a4 79 9a e4 Data Ascii: d6i`#7-!yE}PI1aledm+VyMXjf}:]~r*k_u]ligGjJx 7-$yFz`hW+n'r\Kdz-JBvNwXHPXKGTRvZBJp?Bjbea\|G@ImmJ2Uy

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.4	49806	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:48 UTC	696	OUT	GET /file/rkk8WbtOH5kDN2Bvh89DE_-q7p6ydKIypCA8qrMoOqnzWuwss2N-4z7JZG8Isbr6ditAmqyfNXwvxeK_2KrdtV6D3-ex5jk64o7V6OPM94oIlbQGJ7hvbexd-6T-UWP_dZI9laui89-InBxC8i1BOjgwXy9o-5877cfMOYnFuqWMSrcLEmuUnE-TUnbvwybZDVJFUsjpvdmaWH7v4hkhcVImSq8bKofyeoaPhl9gH5O28uw9fFlcuMNxWsFOV4ulnqwIQ4coLZR2jr13R24M23Qp1EOW699OASic2AiATScyldwQ1RogzDMI-mCJVh2Rm3qGwbrQFNHwHIqvVaUqgQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:48 UTC	683	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 61826 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:48:45 GMT Cache-Control: public,max-age=7200 ETag: "b7de847c9cd415bde109691749f46aacd00472f5" Content-Type: image/jpeg Age: 3 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:48 UTC	707	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c2 00 11 08 01 90 02 94 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 05 06 03 04 07 02 01 00 08 ff c4 00 1b 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 00 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 b5 46 e0 4c 8d Data Ascii: JFIFHHCC"FL
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: a8 57 33 0b 8c 19 b4 84 19 a1 55 0f 4f 8a 2e 8c 96 48 2f f1 a9 74 4c e3 5f cc 33 c4 8c f7 9b dc d2 9d d6 da a3 af 4a e9 32 6a 91 2e 03 17 ed e7 d9 3a b7 4a 84 5e fd a0 52 9c 8c 33 09 8c 5d a7 16 02 79 7b 4f 25 0f 48 22 bd 72 1d 9f 49 6b 2f 3c a3 6f 70 3a f8 56 62 f9 89 a1 b9 e1 3c df 0c e0 2d 75 b4 eb 0a 44 00 22 a8 84 42 17 b8 96 3e 8c 5b a4 c3 94 99 b6 68 69 f1 d6 d6 66 f3 9e 2c 61 cb ee 16 0e 86 4d 53 63 03 02 cd be be 2e d4 68 d1 73 cd 27 24 2c 53 75 28 48 20 39 e0 8a d1 7c 34 a1 dc 98 be b7 f3 44 db ec 58 9d 8d ea 5f 13 f0 0b 84 57 71 55 43 31 1c 39 22 c7 a9 c7 4a 66 5b 27 d4 a6 5e 2d 25 fa 95 d1 56 c8 5b 4b 54 35 1f 86 cd 77 8a 38 64 5b e2 d5 5a a4 d0 b4 9e 7d f6 95 c6 7b 12 ff 00 7c 5a de b2 d2 5e 82 9e a5 73 34 9d 16 69 1a f6 c9 88 3c 9e da 70 99 Data Ascii: W3UO.H/tL_3J2j.:J^R3]y{O%H"rIk/<op:Vb<-uD"B>[hif,aMSc.hs'$,Su(H 9\|4DX_WqUC19"Jf['^-%V[KT5w8d[Z}{\|Z^s4i<p
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: d3 80 50 f2 e1 90 36 b1 e5 f4 a8 d2 59 fb 24 02 de 8e b2 35 43 99 be 9a bd 6c a3 59 f8 cc f6 74 4d d0 8f c7 24 f3 fc c7 c8 a7 42 76 80 d8 2e 09 77 25 80 da 97 54 a3 48 7b 5f 56 c4 59 b3 86 96 8c c1 f3 37 c3 f4 6c 22 14 19 b1 f1 57 e6 69 85 7b df e0 9a 73 82 61 1c 2b b2 b2 7c a5 3b ca 3c aa 56 2a a8 ec 39 cc 9d 7f 67 cd 8f 44 b3 46 f8 90 d3 b7 c5 c1 5b df 7a b4 75 cd 5f 49 17 3c a9 c4 75 89 6a 79 59 b1 7e 62 ea de 9d b8 49 03 85 d8 e2 3d 70 9b f9 3d ff 00 21 e1 22 17 1a 1a dd ba 20 aa ee 1f bc 13 52 d5 6d 81 47 28 33 26 4b c0 46 66 86 6b 7d ab e4 26 44 71 b5 e2 56 45 a6 40 5f 2b ec 67 ab 15 78 52 d1 94 f3 b6 a4 d5 be a4 33 4f 5b 8e 0f 90 5b b0 f6 63 a0 6e a5 a1 b2 a5 84 9b 79 89 3c c3 d2 ad 3b 43 c5 f7 a8 fc 8a 90 ec 67 6b cd 8b 23 b9 89 2e 2a e8 89 f4 53 Data Ascii: P6Y$5ClYtM$Bv.w%TH{_VY7l"Wi{sa+\|;<V9gDF[zu_I<ujyY~bI=p=!" RmG(3&KFfk}&DqVE@_+gxR3O[[cny<;Cgk#.S
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: e2 46 a8 8c af 5c cc 56 07 7b 1e 79 14 e8 bd 0c ce 87 40 b5 2c d8 65 22 2a 6c b2 43 89 2a 56 a1 88 e3 59 18 31 46 ee f6 7a 54 d6 d3 c9 f3 d5 80 85 e0 3c d1 36 62 f0 b9 51 65 ef 2e 1f d0 c6 8b 21 41 d4 67 7d 42 20 1c fd 98 fa 78 b4 b0 df 94 50 c8 99 49 8d 5a 30 f8 9a e0 1b f6 85 3a 57 25 30 ed 99 02 d4 15 04 4f 1e f3 f3 91 0d c0 01 d0 b0 da 08 ac 17 1d 4e 07 97 b4 88 ab a2 66 ee fd ab 9d b6 85 52 57 6e 90 cf 3e d8 f1 df 4b 11 6e ac 17 34 f4 04 e6 18 54 b8 71 f7 00 03 ec 91 2e 6e d7 3b 5a dd 32 9f a0 03 40 a8 07 1c de 3d 24 9c 2d cd 60 eb 6c 59 24 e7 f4 1a 5f d9 cf d2 57 3c 57 4a 46 53 e6 f0 48 4f a2 18 75 82 27 03 61 7a cc ee 0a d3 df 22 e6 eb c3 f4 74 de 1a c4 3e 9c f3 fd 99 8a d7 e8 5c 79 99 ad 8a b9 ad 95 96 22 bc b9 10 e1 93 bd 11 b5 68 39 d6 a5 04 5f Data Ascii: F\V{y@,e"lCVY1FzT<6bQe.!Ag}B xPIZ0:W%0ONfRWn>Kn4Tq.n;Z2@=$-`lY$_W<WJFSHOu'az"t>\y"h9_
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 9a 02 a7 9f 12 e8 50 29 92 85 b2 cc e5 81 1e 5f 57 a1 95 d5 72 7d 72 f6 9d 93 53 d7 c7 9b 42 59 b5 7f 33 a8 7e 5a da b1 82 af c5 da 4c 6c d6 02 57 7c 0f 52 b0 46 84 5f 5d 54 70 60 42 f9 3c a4 a4 3f ae e4 63 46 7d 9f a2 b7 5a 41 da 59 cd 2e d8 81 f7 bc 66 cb 8c 36 e7 b4 d7 fb ea bf 77 7e cc 9d 4a ab 18 ef 50 a8 d5 9e 79 f9 2f e8 e7 58 91 6b c4 e8 11 a4 f5 1c e3 ca a2 af 4b d8 01 4c d5 eb 66 40 5e 8b b8 d6 aa 0b 33 45 72 55 97 b3 d7 da 6c 35 de ce 52 2a cf 63 b9 62 9b e8 f8 94 42 0c d6 05 5c af 47 ee ca 12 3a 63 62 17 94 55 5d 1d 79 92 26 c4 d1 f3 a5 cd 45 e9 23 92 f6 c9 6c 72 f9 65 df cd 02 6e d0 f1 40 3b 25 48 80 e6 79 6d 56 d4 61 b9 42 84 1e 20 ef 71 41 52 5a 14 ac 9d 5e 3d 15 6c 35 82 0e 53 d4 aa aa 44 1e 4f d4 45 52 32 d9 b5 e7 42 c8 75 64 7f 3a 1a b1 Data Ascii: P)_Wr}rSBY3~ZLlW\|RF_]Tp`B<?cF}ZAY.f6w~JPy/XkKLf@^3ErUl5R*cbB\G:cbU]y&E#lren@;%HymVaB qARZ^=l5SDOER2Bud:
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 74 f1 84 c8 3c 79 ac 97 a6 97 36 68 ee 83 b3 2f 5f 53 c6 2f ea 71 a3 d9 0d 75 51 a3 d8 ea 1e 8e a0 dc 18 33 a9 99 7e 46 15 54 3c 89 d7 af bf cb 49 fd 9d ce e7 94 f2 99 7e ef 25 7d 2e bf 63 8d 8c 8d 85 fe 9e af b4 37 cc f1 0d f8 d0 c3 fa a7 9f d9 9c 71 c2 fc af 3e 3b 6d e4 c1 43 54 9a 1a 95 3c bb 87 53 55 fd f7 33 5f e3 ff 00 c3 8c ae ef 30 ff 00 62 c3 ea 86 35 7f 8e 84 f5 39 31 ea 03 3c 4f 0e af a4 9f 95 58 79 47 e6 9c 41 08 cd 01 e3 3d 9f 5c 8b 2f e4 06 d1 74 67 62 69 d5 75 18 55 e3 85 fe 24 a3 82 73 ce 51 77 74 3e 57 6a 1b 8e 01 eb 77 42 d3 3b 2b c8 bf b6 0c f1 82 33 8f 3f 1b 59 f9 54 71 f8 8e 82 f2 29 50 6e 2e 14 c3 5f 46 cf 01 df b0 9f 74 bf 11 d0 1d c6 0d d7 ed e5 2a e6 3a fb c9 50 2a 5d 46 46 c6 46 fd 4b ff 00 5f c4 1c c7 c6 b1 45 97 f1 aa 29 a3 b8 Data Ascii: t<y6h/_S/quQ3~FT<I~%}.c7q>;mCT<SU3_0b591<OXyGA=\/tgbiuU$sQwt>WjwB;+3?YTq)Pn._Ft:P]FFFK_E)
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 25 7a 6f 40 d1 5f 8f 57 ee b9 ee 84 c9 c4 e3 bd 9a 5c ca a6 2c fb 99 c7 b6 08 fe d6 eb 1a 77 24 41 05 ec d1 62 9f a6 23 f2 68 d2 e9 da ba 87 66 db 4e 4f 29 e8 b5 cf 19 61 2c 27 84 b0 9c b2 3c 1e 15 1a 3f 79 ea 08 c4 07 71 61 d4 1a 87 fe 6a ff 00 1e bb 33 cc a1 52 b9 0d 62 34 f6 f9 59 9f 99 71 23 e9 46 8d 82 6c a1 1a 16 17 ec 06 20 2f e4 44 2b 76 9f 79 29 e6 a9 6e b3 be 17 60 fa 79 97 5d ab b9 e5 75 2b bf 62 eb c2 27 fb 19 a3 e9 8e 0f 16 ae fe d5 fe 14 6a bd f7 c7 67 f4 02 6f c4 bf d8 f5 d1 8b 11 54 55 95 6d 2d 19 14 f0 dc ac a8 32 ae af f4 c5 8d eb d4 7d 52 cc 7d 3b df 5e 3a 1f 66 4d 98 1d 62 15 b0 ea 33 49 9d 11 46 97 ed 77 f9 77 31 e4 66 d6 e1 c0 19 11 f0 46 ef e2 d5 4c 81 e2 ca 87 f5 34 e8 a1 8f d5 e5 7c 7b 3a a3 d8 02 3a 79 0f b6 ee b6 cf 13 b8 b5 c4 Data Ascii: %zo@_W\,w$Ab#hfNO)a,'<?yqaj3Rb4Yq#Fl /D+vy)n`y]u+b'jgoTUm-2}R};^:fMb3IFww1fFL4\|{::y
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 35 ed d9 ed a7 97 91 dc ef a9 df 95 1c 5e 9a 76 1b 1a 00 28 b7 92 6d 0d 25 06 2f 53 13 bd 55 45 70 a6 4a a2 d1 a6 fc 82 d4 33 ae a1 4e fc 6c 90 14 5c 4f 26 bc a5 cb 7e a2 30 9c 57 24 1c 9a 76 2a bc 45 1d df a4 16 1b 79 6f bf 29 e5 dc 0e ee 57 f9 e5 45 32 36 bd 5a 0f b6 18 fd b0 3e bf fd 56 66 5d 03 0d 56 ad 3e 74 c4 8b 25 d3 92 be 00 02 e7 c4 ab 99 f2 a6 c3 75 8a e5 ab b9 9d 76 26 b0 bf 58 bb c6 5b fb 8e 64 c6 ce 85 8c ec 18 64 bb c7 ae ca 85 bd c2 bf c7 7f 23 d0 1d f7 19 7d d5 cf f2 5f 57 28 bb a0 2f 18 50 4f ca 5d f5 7f 89 4b e2 c2 ad 79 d6 30 15 50 56 44 45 65 6f 2e c6 d2 df 78 9f 7d b0 ab c3 2b 47 4c 63 3b 8e 3f b7 7f dd c5 ae f4 5d 66 35 93 54 55 18 cb 51 28 89 e0 59 e3 92 63 33 01 86 64 e9 34 c6 6b f3 1b 28 65 12 cf 16 5b 6e c6 ee 5d cb b8 51 07 ed Data Ascii: 5^v(m%/SUEpJ3Nl\O&~0W$v*Eyo)WE26Z>Vf]V>t%uv&X[dd#}_W(/PO]Ky0PVDEeo.x}+GLc;?]f5TUQ(Yc3d4k(e[n]Q
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 4e 3d 3b d5 99 89 fa 56 d2 fe ce 3f 47 90 f2 60 c3 8f 03 1b ba fb 0b fc b0 ea e9 79 ba 70 67 d3 eb 8e e4 28 07 7e b6 6b 65 2f a8 1a 7d 72 f7 79 46 2a 99 60 9a e9 eb 18 9c a4 12 b3 53 ab e2 10 b7 e3 36 c7 1e 07 ed 3c 3f a6 80 21 62 e3 d4 1b d0 a0 6f 14 db 35 33 ee f0 71 a0 c5 07 1a 85 c3 52 d4 0e d3 5e 6d db 1d b7 b9 65 e7 5e cf 06 db fc a6 ea 3b a0 fc 6b ca 59 4e 07 32 fc 76 ae 86 db 7d 43 be e1 07 73 89 f5 55 af 3a f4 87 27 c7 d8 4b a9 ae be f8 32 e9 fb 35 52 75 f1 a8 9b b1 33 50 31 66 b2 ba 80 bf 38 d1 aa ac 79 3e 4b 54 85 a8 ab 3f c9 b1 c2 d6 36 f8 60 31 d3 c6 bb 35 50 f8 d7 94 a3 a9 5f e7 7f 42 53 cb e8 0e 27 53 15 79 b9 20 eb 6b 92 74 6b 4e ca 78 7c 7b a7 4f 6c c8 92 d8 fd fc 85 64 86 4e 79 50 d8 2f 53 3b 76 13 ea ce bb 1d a8 12 a7 ab c6 c4 3a 99 ab Data Ascii: N=;V?G`ypg(~ke/}ryF*`S6<?!bo53qR^me^;kYN2v}CsU:'K25Ru3P1f8y>KT?6`15P_BS'Sy ktkNx\|{OldNyP/S;v:
2024-09-20 22:48:48 UTC	1390	IN	Data Raw: 55 4e 3e e2 a5 41 af ae a6 2e 2c 9e 45 80 05 7a b8 d3 3d 4a cb f0 f3 72 14 5b 1f c2 71 b4 cd 20 81 1a d2 aa e9 5d 54 d5 a0 00 1a c1 36 55 8d da 93 d5 02 bb 8e 09 a9 23 32 89 7c ac 61 e0 a7 b3 c0 34 dd b8 ed 5e 56 38 3c ef e2 8a c0 1d 55 39 1e ac 8e 1c cf fe f1 6b 13 6a b4 87 75 a9 6b a3 e6 73 8d 6c e7 28 a5 72 2d 22 c4 92 d0 dc a2 d9 a1 08 61 7c 05 ce 40 77 e6 12 dd ca 75 ab 5e 83 0c 48 0f 56 7c 82 c8 5c 4a 63 b2 e7 54 4a 42 ec 7a 4b 6f a6 53 b2 cb 50 86 ed 98 43 4e 2c 0d f8 7a 1a e1 0a db a6 de ff 00 28 c2 fa 00 ee 87 8d d3 70 78 dd 23 42 02 8a f9 41 dd d6 77 d3 73 fa 48 af c6 65 ee c8 39 1f c9 59 03 41 7c 11 15 1a 81 56 d2 5c 49 74 59 fd 67 2a 97 54 4b 57 7c 8b 3c 56 e6 ff 00 78 36 1e 89 57 dd 89 75 16 5d c0 fc a6 0e 33 b8 b5 50 53 2f e8 6a bc f9 57 50 Data Ascii: UN>A.,Ez=Jr[q ]T6U#2\|a4^V8<U9kjuksl(r-"a\|@wu^HV\|\JcTJBzKoSPCN,z(px#BAwsHe9YA\|V\ItYg*TKW\|<Vx6Wu]3PS/jWP

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
34	192.168.2.4	49805	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:48 UTC	696	OUT	GET /file/MSpszLg7U46su23KMCgH8A98mn1j0p2-6wBkxrguTs8yEhVA-oaBykeBGHnbmDgMIfkKoJwjFD22bkLCfzLXC_nZkOpn_IvNZWrn4lKleup8F9gallYy7JfpvqYPTDBOfKk_NhPPOXvBte8UjBr8p6BNiekhw_wgidfU07LtxhQxhg-yfs8gODhc8KhI3B2tedOpJt4s3gCKcD8iwg0mvt8ypGShZW-IqnTMdSM6viCBG3d1niNKp-WAIbJqf_Nqt8CF3bJxTZyy07G2fU3oAZBZC0t3aiIqapI8FAZf_TqIt9ENGUPFJdG1adRWyp65Tdcs7sWd9lUAw3udNMgwxA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:49 UTC	676	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:48 GMT Content-Type: image/jpeg Content-Length: 195183 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "77d037f038e2cad20e5c8822ff273dc1db0b179c" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:49 UTC	714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Co
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 Data Ascii: 011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOOP'PqPQ
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff c4 00 3e 11 00 02 02 01 02 03 03 08 09 03 05 01 00 03 01 00 00 01 02 11 03 04 21 12 31 41 05 51 61 06 13 22 71 72 81 91 b1 14 16 32 34 35 52 a1 d1 f0 42 c1 d2 15 23 62 e1 f1 33 53 54 82 a2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 92 cb d2 7b 4d e7 6a 5b 37 af 49 ad b1 5b b7 5d 96 92 9f ed 9b 14 94 71 bb f8 86 21 99 16 36 05 5b 92 92 c0 60 ac 8a 7b 79 b2 0e 06 d4 bd 6c 8d e7 0d b1 2f 54 f6 bd b1 bc 69 98 c5 15 7c 76 a8 12 29 24 67 2c 26 01 55 63 27 bf 19 23 94 14 60 58 c7 86 3c 4f 46 db 36 7f ca ed dd b7 bc b6 85 bc b6 eb 8e d3 42 93 44 b5 1e 12 dc 60 11 a0 68 64 c9 e1 cb 87 75 63 82 19 13 27 88 c6 a2 1d 45 e8 4c 17 9d ca f2 d2 d3 c3 49 63 bf 06 33 c8 42 23 da ee 04 0f 0e 55 c7 de 59 58 08 dd 01 20 b3 Data Ascii: >!1AQa"qr245RB#b3ST?{Mj[7I[]q!6[`{yl/Ti\|v)$g,&Uc'#`X<OF6BD`hduc'ELIc3B#UYX
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: db 7b 89 a4 8e 48 a1 69 41 23 20 63 ca 07 6c 76 cf a1 c1 d4 ad 6b ad 91 75 4f 7a 51 d1 5a 76 e5 de e1 70 2a 89 67 fb 26 7a e5 35 51 96 12 ac 5c a3 8f 0c 0a b3 b3 12 ab e6 24 13 8e db fb 47 41 2f 75 b5 83 75 6e d8 b6 b6 d3 98 8e 09 68 4a 79 05 3d 38 1e 50 c5 a1 9d 3c cd 82 7e fb 7d ef 63 80 a0 21 e9 d7 53 f6 25 d2 34 87 6f ed ed fd 62 a7 52 31 25 0d 1c 52 c8 b8 f7 66 51 27 3f d6 fe 9e fa 9c 59 37 0f 4b 37 2d d2 dd 69 dc 9b 66 8b 6d ee 55 90 91 67 b9 5a fc 10 b2 00 71 96 e0 23 90 10 72 bc 8f af 12 00 6c 6b ce cb 70 3b 1e 5e 11 ef 3d 93 24 6a 4a a4 35 3b 82 b2 35 f5 19 01 26 a9 99 57 1d fd 01 fd 5a d0 d2 75 36 97 71 75 4a bb 6a f5 10 ed db ce d7 bb c3 1b db 1e 0a c8 6b 69 69 a4 58 fc d8 97 8a 91 cd 91 bb 30 0c 1b 88 19 04 31 12 4b 37 ee cb ba 5e ab 24 db 9b Data Ascii: {HiA# clvkuOzQZvp*g&z5Q\$GA/uunhJy=8P<~}c!S%4obR1%RfQ'?Y7K7-ifmUgZq#rlkp;^=$jJ5;5&WZu6quJjkiiX01K7^$
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: c0 25 c2 bc b2 37 bf 14 24 0f 52 48 ed aa cb 70 6c 5a 2d f7 ba 97 73 f4 07 63 47 12 52 39 66 ba 49 14 30 d1 56 3f 0c 32 a5 34 ea 06 7d 54 91 81 9c e4 64 f2 d5 99 ba 36 5f 47 36 2d 7c 12 6e d8 2a 6f db 86 6f ce 45 05 4d 55 45 7d 5d 49 c1 c6 62 0d c4 83 82 01 60 17 b7 af 6d 64 58 23 ea 76 ef dc 34 a2 2a 23 d3 9e 9f 44 83 c3 a3 8e 38 12 ad e3 03 b2 81 c5 9a 36 2c 3b 8c 20 0a 7f 6c 7d 44 13 ad 9b 60 db db 8b 6d d0 dc 2e 5b 32 d5 6c af 75 68 ea e9 25 b6 c4 0c 33 a3 14 91 7e ef 71 c9 4e 0f b8 c1 f7 d7 ae e1 e9 cd 05 5d 2a 2e da b6 6d ab 5d 48 7c b4 95 56 18 ea 55 d7 07 cb 80 c9 83 9c 77 c9 fd 1a 96 d1 d7 d1 56 4b 57 1d 0d 44 33 cb 4d 2f 85 52 b1 b8 63 1c 9c 54 f1 6c 7a 1e 25 4e 0f 7c 11 ac 93 df 38 ec 7e ba 12 50 fb 83 a7 bb ca 8e 8a 55 a6 da 7d 37 dd 94 c7 02 Data Ascii: %7$RHplZ-scGR9fI0V?24}Td6_G6-\|nooEMUE}]Ib`mdX#v4#D86,; l}D`m.[2luh%3~qN]*.m]H\|VUwVKWD3M/RcTlz%N\|8~PU}7
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: d4 7e cb b2 2a 2f 1d 59 a1 dc 36 de 9a c5 61 da 55 f4 ad 0d d3 ed 18 69 03 4c 52 37 f0 a4 f9 6e ef 13 06 e2 bd bd 46 09 03 b9 36 c6 c5 d8 db 67 6b db 69 a5 db 5b 6e 2b 1c 92 c4 1d 96 68 c3 55 27 21 9e 32 48 59 98 91 9c 63 91 03 db 53 0d 01 1f 1b 13 6a ff 00 8b 56 6f f4 7c 5f d1 d3 f2 13 6a ff 00 8b 36 5f f4 74 5f d1 d4 83 4d 01 1f fc 84 da bf e2 cd 97 fd 1d 17 f4 74 fc 84 da bf e2 cd 97 fd 1d 17 f4 75 20 d3 40 47 ff 00 21 36 af f8 b3 65 ff 00 47 45 fd 1d 3f 21 36 af f8 b3 65 ff 00 47 45 fd 1d 48 34 d0 11 ff 00 c8 4d ab fe 2c d9 7f d1 d1 7f 47 4f c8 4d ab fe 2c d9 7f d1 d1 7f 47 52 0d 34 04 7f f2 13 6a ff 00 8b 36 5f f4 74 5f d1 d3 f2 13 6a ff 00 8b 36 5f f4 74 5f d1 d4 83 4d 01 1f fc 84 da bf e2 cd 97 fd 1d 17 f4 74 fc 84 da bf e2 cd 97 fd 1d 17 f4 75 20 Data Ascii: ~*/Y6aUiLR7nF6gki[n+hU'!2HYcSjVo\|_j6_t_Mtu @G!6eGE?!6eGEH4M,GOM,GR4j6_t_j6_t_Mtu
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: c3 6a d9 2a 24 7b 55 29 69 1e dd 11 72 7c 35 27 cd c7 3e ba 8f 6f 8e 9e f4 5b 6d d2 1a 9d e3 6b b4 da 90 f9 95 63 96 48 64 7e ff 00 b5 48 98 33 7a 7e d4 1f 7d 01 8f 53 d5 be 8f df 2e b2 55 9d cc 69 ea ea 23 85 26 75 a7 a9 81 65 f0 a4 12 42 cc 4c 60 72 47 ee 0e 47 a9 07 23 b6 ab 7d c5 b3 7a 7d b9 b7 85 c2 ed 64 dc d6 8a 58 eb 24 15 11 cb 05 d1 20 99 24 64 e4 4a 29 61 87 12 c6 72 59 78 f1 aa 62 31 e1 76 da 52 5b fe 1a 6b 41 34 91 19 71 22 20 01 ae 60 97 73 85 55 1e ac 4f 7e c3 3e 84 ea 57 51 f0 d7 d2 fb 85 4d 6c 74 a9 5f 44 d4 95 09 04 e2 3a c6 0b 1c 8e aa ca 81 a4 07 24 89 13 d0 9f bc 06 84 14 4e e2 d9 5b 83 65 ee 11 ba b6 76 f8 b2 dd de 35 12 c7 5e 97 4a 7a 7a 9c 71 c1 f1 63 91 80 66 3e 84 65 8b 67 b8 c9 23 52 ee 9e 75 8e bf 7a db 6f 5b 66 a6 d1 45 55 be Data Ascii: j*${U)ir\|5'>o[mkcHd~H3z~}S.Ui#&ueBL`rGG#}z}dX$ $dJ)arYxb1vR[kA4q" `sUO~>WQMlt_D:$N[ev5^Jzzqcf>eg#Ruzo[fEU
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 79 a2 0d 8e 52 18 1f cc 7d 3b aa 48 7f 0e f8 1a 10 74 0d f7 64 58 b7 1d 6c 35 d7 4a 12 6e 10 20 48 ab 69 e7 92 9a a1 10 12 42 89 a2 65 70 b9 24 e3 38 ee 7e ba c5 bb 6d 5b 9c 96 f5 a7 db 1b aa e7 63 95 3b c6 f2 2c 75 c0 fd 79 f8 ea ce c3 f4 38 d6 bf 6d 4f bb a4 a1 a4 ae 6b c5 a3 72 db ea 14 38 63 6d 96 dd 31 52 7f 17 71 91 fb 92 8a 7d 89 1e ba 9d 68 49 53 6e 5d 99 b8 6e c2 92 a2 f1 48 97 6b 9d 14 2d 14 17 4b 3d ea 7b 5d 40 04 e4 e2 9c 86 8b 2c 3b 1e 4e 41 19 ec 3d 05 31 b9 b6 15 df 6a ce b7 cb dd 55 bf 6e db c4 ca 4d 65 f2 92 df 59 50 5f d7 cb e1 40 ef 2b fb e0 0f 6c fa 0d 74 6d 57 51 a8 0d 6d d6 db 62 b7 dc af 97 7b 5b ac 75 34 74 d4 c6 32 8e c3 2a 19 a5 e2 a1 48 ee 1f 3c 48 ee 09 d4 2e db b2 f7 ae f8 de 16 ed cf d4 29 a9 ec 16 db 54 ef 25 be c1 0a 43 54 Data Ascii: yR};HtdXl5Jn HiBep$8~m[c;,uy8mOkr8cm1Rq}hISn]nHk-K={]@,;NA=1jUnMeYP_@+ltmWQmb{[u4t2*H<H.)T%CT
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 81 2a 6d 74 70 45 1d 30 44 91 a6 91 10 b4 7c 87 29 4b 92 5d 81 fc ca f1 ec 0c 99 ee 04 1e ef 25 36 f4 ea dd c6 eb b9 2a aa aa b6 e5 87 8a 5d ae b5 11 2b b1 58 fc 8a 78 47 f9 b0 5e 52 11 11 06 08 21 98 37 9d 8d df b0 fa 67 57 ba ee c9 ba b7 3d be 5b 4d 1d 4c 32 ad 2d 23 d5 3f 8f 1d 2c 81 82 c6 ae af c9 0b f3 69 64 90 9e 6c ce 57 b0 2f ca 1d d1 6d 8b 59 74 af a6 b1 bd 2d 23 ed 1b 2c be 35 fa 54 7e 6b 74 b9 a8 2c 91 16 07 cc 90 97 41 c5 73 1b 18 99 8f 2e 63 57 d6 f5 ea 4d bf 6a ad 5d 0d 1f 87 72 dc 10 d2 35 50 a1 32 78 6a 91 2f de 92 69 48 29 12 01 93 96 20 b6 30 a0 92 06 80 93 db e8 2d 9b 6a d3 15 25 ba 0a 7b 65 b2 8e 3c 22 20 11 c7 1a 0e e4 fd 3e a4 9f d2 4e a1 5b 87 ad db 3b 6d da a9 ae 75 35 d2 55 d2 55 3c 91 d3 b5 34 5c 8c ec 99 cf 86 09 05 d4 91 c7 9a Data Ascii: mtpE0D\|)K]%6]+XxG^R!7gW=[ML2-#?,idlW/mYt-#,5T~kt,As.cWMj]r5P2xj/iH) 0-j%{e<" >N[;mu5UU<4\

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.4	49810	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:49 UTC	930	OUT	GET /file/PRwF4HU2mz8_cqvTXNsa-Kd7jb5s5SrzZiFiOQ3g51eziuzlaGps_s9nO7xGuuagpHrfRXLlHMg5UOeNtTVCbEg-9_HuJStxzLyka7v1AY_XcXJRRoFuO9luY7Lb6KNL9m6aqlxvKnZVq28apWcBebnGFw5mlxhpFxFTR9ftopmrxZaw-xUj7RyzwsXF7ha3GPJcrE7ZHbpPll23Bh3e7TEwqIrEWOQ4CVszx4S6PZXa3x7jXL39680brmWiBdMyJy-Uo_WlsTHaUwr5o16C4qVpoM7GewqNWT1OQIDsftojAVmD_amBa7y9mNOCHNjsk2FcO4zZFJoo87-1vpbkxA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:49 UTC	676	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/jpeg Content-Length: 157593 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "75bbd259525bf44c0b3f9aecb86977ab3732ddd0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:49 UTC	714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Co
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 Data Ascii: 011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOOP'PqPQ
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 01 00 00 00 00 00 00 00 00 00 00 00 04 03 05 01 02 06 07 ff c4 00 3f 11 01 00 01 02 02 06 04 0b 07 05 00 03 01 01 00 00 00 01 02 03 04 11 05 12 21 31 33 41 51 61 71 81 13 14 15 22 72 91 92 b1 b2 d1 f0 06 32 52 93 a1 c1 d2 34 42 53 e1 f1 23 62 82 43 a2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f5 ce 8a d0 da 65 ed 19 a7 1e 3a 76 d0 b7 55 6c 8c 56 55 01 a2 49 2d 24 92 7d 9a 7e 4e 87 d2 aa 03 3a 6a cc 95 7b fe 8e 6b fb 35 d7 42 a7 fd e4 69 95 24 73 f4 54 5f e8 93 4f aa 6c 67 e0 7f 03 40 c0 9d 0d a5 87 0a d3 56 5f e6 e6 bf b3 5b ab 41 e9 62 38 d3 36 5c ff 00 27 35 fd 9a 7a c2 87 07 91 ee ad 92 bf 77 23 dd e6 28 18 93 a1 74 b7 6f c9 9b 2f 1e 5f 47 35 fd 9a 06 84 d2 bb 8f fb da b2 f9 7f e6 e6 bf b3 4f e7 07 94 f7 ac 83 9f 9d 04 70 e8 4d 2d 9f de d5 97 1e 7f ee Data Ascii: ?!13AQaq"r2R4BS#bC?e:vUlVUI-$}~N:j{k5Bi$sT_Olg@V_[Ab86\'5zw#(to/_G5OpM-
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: f9 09 a5 7f 8b 36 5f e6 e6 bf b3 47 e4 26 95 fe 2c d9 7f 9b 9a fe cd 48 28 a0 8f fe 42 69 5f e2 cd 97 f9 b9 af ec d1 f9 09 a5 7f 8b 36 5f e6 e6 bf b3 52 0a 28 23 ff 00 90 9a 57 f8 b3 65 fe 6e 6b fb 34 7e 42 69 5f e2 cd 97 f9 b9 af ec d4 82 8a 08 ff 00 e4 26 95 fe 2c d9 7f 9b 9a fe cd 1f 90 9a 57 f8 b3 65 fe 6e 6b fb 35 20 a2 82 3f f9 09 a5 7f 8b 36 5f e6 e6 bf b3 47 e4 26 95 fe 2c d9 7f 9b 9a fe cd 48 28 a0 8f fe 42 69 5f e2 cd 97 f9 b9 af ec d1 f9 09 a5 7f 8b 36 5f e6 e6 bf b3 52 0a 28 23 ff 00 90 9a 57 f8 b3 65 fe 6e 6b fb 34 7e 42 69 5f e2 cd 97 f9 b9 af ec d4 82 92 dc 26 a2 dd 11 c9 2e a1 6b 6d bc 6e 08 00 90 33 8c d0 33 ab 42 e9 50 92 7f 26 6c c7 8e c2 dc d1 ff 00 ab 4c 0c f4 e7 4f 5f 52 a9 13 6c 96 d8 f1 d4 b2 13 11 bb 7b 2d 94 e0 e3 da 56 dc 9c f7 Data Ascii: 6_G&,H(Bi_6_R(#Wenk4~Bi_&,Wenk5 ?6_G&,H(Bi_6_R(#Wenk4~Bi_&.kmn33BP&lLO_Rl{-V
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 6a 5a 7d a6 dd dd e6 b2 e9 24 fc f3 40 f5 19 01 b8 ed 25 07 21 28 00 1f 78 c5 71 76 e2 db 40 fe 66 4a c8 fe 0c 75 9f d9 5d e3 47 6e 2b 08 65 90 43 68 18 48 52 8a 88 1f 33 cd 75 a0 66 73 52 44 67 fe 12 d4 b8 e9 1f a4 e4 65 81 fa ab 68 d7 bb 4d d0 86 59 94 d3 84 28 10 85 82 82 48 39 18 04 0c f2 33 4e f4 d7 33 4e 5a e7 39 e2 49 86 82 b3 dd 49 25 04 fc f0 46 68 14 cb 86 26 94 21 e2 15 18 72 b6 8a 72 16 41 04 64 fb 81 1d bf 67 15 c9 eb 77 ad c8 2a 9a b0 f4 51 b7 c3 8f b7 09 04 79 ab f8 5c f6 f2 f8 67 9a 4c 9d 2f 6b 40 01 11 dc 48 1d b6 c8 70 7f d6 a7 46 18 44 56 52 d3 41 5b 13 db 72 ca 8f de 49 34 08 a4 5b 04 e5 3a 89 ce 97 21 ab 68 4c 74 fb 29 e3 1c 92 39 3c f9 67 14 a6 13 11 63 b0 94 40 43 48 64 64 00 d6 31 f8 57 7e 4f e8 e3 e6 69 33 30 c4 62 e7 aa 21 98 e1 Data Ascii: jZ}$@%!(xqv@fJu]Gn+eChHR3ufsRDgehMY(H93N3NZ9II%Fh&!rrAdgw*Qy\gL/k@HpFDVRA[rI4[:!hLt)9<gc@CHdd1W~Oi30b!
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: b4 2d da 2a 91 5f a4 96 95 7c e1 8b a4 78 80 fe 93 b1 64 af 1f f3 5b ad e3 f5 df 47 2d 59 9d ae 82 52 7b a1 8b 43 ff 00 82 8b 5f b2 b8 f0 b6 ff 00 14 3a f9 4f 03 fe 6a 7d a8 f9 ae bc d1 55 0c 7e b8 f4 b6 3b e9 91 f9 44 b7 64 00 40 75 d8 72 d6 47 cb 2d e0 7d 94 bf fe e8 8e 9b 7f 18 ff 00 f7 7c af ff 00 67 4f 0b 6f f1 41 e5 3c 07 f9 a9 f6 a3 e6 b3 16 16 56 82 82 9d 9c ee 04 64 9f 76 39 ad c5 56 1f f7 44 74 db f8 c7 ff 00 bb e5 7f fb 3a 3f ee 88 e9 b7 f1 8f ff 00 77 ca ff 00 f6 74 f0 b6 ff 00 14 1e 53 c0 7f 9a 9f 6a 3e 6b 38 90 01 a8 ac bb e4 ab ac b5 c4 b0 2d 2d 30 d0 2a 7e 6a 93 94 a4 0e fb 41 ef ee ff 00 5c d5 7d a8 3d 20 74 3c e4 a2 14 1b f2 91 1d df dd df f5 29 03 8f e0 8f cd e7 9f 33 8a c3 fd 6e e9 b4 3b 14 98 76 ad 42 54 eb 8d 06 c7 f7 04 9c e0 f7 e4 Data Ascii: -_\|xd[G-YR{C_:Oj}U~;Dd@urG-}\|gOoA<Vdv9VDt:?wtSj>k8--0~jA\}= t<)3n;vBT
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: d8 f7 8e a3 5e 1f b5 3a 99 8c b8 b6 50 85 33 ed 05 a9 2d 21 24 0c 77 f6 81 1c 66 a4 7d 76 81 3a 2d cf 4e 2e 78 52 87 d0 ed 32 a5 92 08 53 c8 52 bc 4f b7 da 4f df 53 db c7 e2 2c 61 b1 16 e9 aa 6a d5 98 88 ab 7e c9 99 8d fd db 16 5d d1 18 2c 66 3b 07 76 ba 22 8f 09 4c cd 54 46 c8 99 88 8a b7 6c e7 39 4f 39 cb b4 5a ae bd 59 d6 11 4d ca d3 26 73 f1 52 78 71 b5 33 1d 2a 23 be d1 ec ee f7 70 0f 3f 1a 76 d0 5d 63 be c3 d4 8d da 75 d4 80 b8 ae 2c b2 b7 1e 60 36 e4 75 80 40 ce d0 32 0a b0 0e 47 9e 73 c5 59 3d 1b b8 c0 7f a7 96 a4 44 71 b4 18 a8 58 90 82 e6 4b 6a de a2 4a bd d9 c9 57 3e 46 bc ff 00 d5 09 4c 6a 0e a4 5d 5c b1 b8 99 ad c8 75 a6 99 53 3c 87 16 1b 42 08 1e ff 00 68 11 9e d5 cd ff 00 0b 81 b1 67 15 6e f5 55 55 56 59 c4 ce 71 3b 33 dd fa 7f b7 18 5f 01 Data Ascii: ^:P3-!$wf}v:-N.xR2SROOS,aj~],f;v"LTFl9O9ZYM&sRxq3*#p?v]cu,`6u@2GsY=DqXKjJW>FLj]\uS<BhgnUUVYq;3_
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 67 44 c9 4f e5 e4 f6 d0 e8 70 b4 1c 4d b9 82 af dd 14 14 92 85 2d 5b 54 12 8e 71 f5 88 c6 d0 af 30 59 75 1f a5 bf 51 34 f3 7a fb 4e dc 75 05 c2 cd 85 a9 a7 61 bb 15 94 ba 10 76 2b 64 44 ed 2e 60 a4 8f 65 b3 92 0f 9e 6a 31 e9 d3 6d b8 41 f4 90 d4 92 2e 0d 2d 11 a7 c5 84 fc 15 28 e4 2d 91 19 b6 c9 1e e1 e2 36 e8 c7 bc 1f 7d 7d 17 e8 7e b3 d1 d3 7a 19 a5 af 3a 76 64 3b 76 9b 81 69 69 a7 cb ab f0 51 0d 6d 24 21 d4 38 57 8c 14 ad 2a ca 8f d6 fa c0 90 a0 48 79 6f d1 57 d3 27 55 ea 8d 79 0b 42 f5 69 d6 6e 6b ba ba a6 a1 5c fd 5d 11 dd 65 f0 92 52 d3 88 6d 21 2a 0a 29 da 0e 01 0a 23 39 07 8f 46 fa 58 6b ed 43 d3 4e 89 de 75 1e 89 b8 7d 17 79 8f 26 2a 1a 91 e0 36 f6 d0 b7 92 95 0d ae 25 49 39 04 f7 15 f3 ca eb 2a 0f 50 bd 30 1a 9d d2 70 5d 89 70 d5 91 a5 40 75 86 Data Ascii: gDOpM-[Tq0YuQ4zNuav+dD.`ej1mA.-(-6}}~z:vd;viiQm$!8WHyoW'UyBink\]eRm!)#9FXkCNu}y&6%I9P0p]p@u
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: f5 63 a7 3d 76 d5 7a 67 46 ea bf a3 6c 90 3d 53 d5 a3 7d 19 11 ed 9b e2 32 e2 bd a7 1a 52 8e 54 b5 1e 49 ef 8e d5 4f fa 13 90 9f 49 cd 0c 4f 61 eb ff 00 e8 12 28 f4 d8 50 57 a4 e6 b9 29 e4 1f 50 ff 00 40 8f 41 ea 7e b3 7a 5c bb a3 3a 1b a3 e1 59 6f be 2f 55 af ba 7e d3 3e 43 ed 45 6d 42 20 75 96 dd 71 e5 a4 a0 b4 0a fd a0 1b 03 20 2c 2b 00 6d cb a7 a2 05 ff 00 ae 3d 4d 75 ad 67 d4 5d 50 17 a1 54 db a2 14 61 6f 82 85 5c 5d 05 6d 1e 5b 6c 38 84 36 a4 93 dd 25 4a 48 03 23 35 e0 3e a1 e9 cd 43 a5 ee fa 6a 76 b3 6b e9 26 6e 76 2b 54 e8 0e ba 0a 5a 93 0f d5 1a 0d b5 94 90 70 84 24 32 ac 10 af 63 39 e4 1a fa df e8 ff 00 ae f4 be bd e9 2e 9e ba 68 68 ac 5a ad 6c 47 4c 55 db 5a 23 fb 85 d6 c6 14 c9 f3 f7 10 4f 2a 0a 0a fd 2a 0f 3e 7a 44 6a 7f 49 77 ba b8 e6 96 e9 Data Ascii: c=vzgFl=S}2RTIOIOa(PW)P@A~z\:Yo/U~>CEmB uq ,+m=Mug]PTao\]m[l86%JH#5>Cjvk&nv+TZp$2c9.hhZlGLUZ#O**>zDjIw

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.4	49809	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:49 UTC	930	OUT	GET /file/cgF49kKyIze3mCwToG0WWiz2_xQnBNuWR_rlBEEue-BbbFKp-D16ZJxo1gXjON9HRn26_5OxvuQ0WFHhgFELWpAcxOvTxjA1zbE0-2qIM4vxV7olCGiWbKtJ-RUiihXZS4WaX5t6YPs0IXwAkKLIQmwcg6JS9eLoznoFv1yiJD-T55rZblWRR7qJjs7l6ao5Ed-Mxx2FKa2UkrV0NmIno4sICuU56SIoF7acrMzRXeHiDhMUbYcalAGL80oBQDK_3kxaSwVb103nBTxKDGitTID0G1Qdu4-ny0bZooQZhTZroc1RNXyBBQ_G7l6RhN7iTi03qQqIooeMOPvON8UAMw.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:49 UTC	676	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/jpeg Content-Length: 212621 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "a0e65a4ec16c6db7d65dd2338f66f6190e07aee9" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:49 UTC	714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c0 00 11 08 03 20 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 00 02 08 01 09 ff c4 00 5b 10 00 02 01 02 05 02 04 03 06 03 05 06 02 05 01 19 01 02 03 04 11 00 05 06 12 21 31 41 07 13 22 51 14 61 71 08 23 32 81 91 a1 15 Data Ascii: JFIFHHCC "[!1A"Qaq#2
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: b7 43 89 35 86 18 a1 0c a9 70 ab 70 0d fa e1 24 a2 2a d9 69 13 c9 5e 2a df b0 e6 c0 e3 5a 6c a2 69 29 e4 7a 87 bc ce 3d 2b d0 01 f3 c4 c6 4f 94 0a ba 81 53 50 8c 6a 5c df d5 d2 df d3 0f f3 28 51 a5 93 cd 3b 20 52 03 05 e0 31 ff 00 cf 0f ae 49 d0 ae 5f 91 c7 51 e6 c9 50 e1 21 8f 86 2a dd 07 d3 0c 64 a0 a6 47 67 ca 65 32 47 7f 55 cd 8f ef 88 df 10 75 95 1e 8a cc 69 28 92 98 f9 55 10 ee 90 ab 92 45 fa 1e b8 cc 96 68 f5 2c 48 f9 1d 4c 73 d3 72 4a 86 d8 c0 f7 04 1b 1e b8 a9 b3 31 ce 2d be 61 6f 92 86 a2 38 5b 39 6f 74 8b dc 7d 79 29 2a 39 e5 a5 57 12 51 47 50 c4 10 ac d2 74 fd f0 f6 82 af 34 33 6d 94 2d 3a a0 dc a8 0a 9e 3e bd 7b e2 0f 39 ca f3 2a 46 f3 90 33 22 f0 16 32 0f fe 78 67 45 4b a8 b3 0f bc a2 a4 a9 05 b8 e4 5b fa e2 fc 8a c2 ac 8a 8a a9 24 86 20 97 Data Ascii: C5pp$i^Zli)z=+OSPj\(Q; R1I_QP!dGge2GUui(UEh,HLsrJ1-ao8[9ot}y)9WQGPt43m-:>{9*F3"2xgEK[$
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: e9 cf 85 90 d6 bd 2e ac cc 24 92 5f e1 e9 4f b3 7b 33 2e e6 be eb 29 b8 f5 5e d7 f5 0f a1 e9 82 3f 0e 2a 65 97 3a db 24 f3 3c 30 c2 c4 a6 f3 bc 96 f6 b5 89 c3 6f 0b 8a 51 68 ac ee 9b 35 8e 6a 45 ad 71 1b d4 34 0e 7c 92 5d 14 5c 28 2e 2e 4d b9 b0 e7 8b 9e a5 da 27 c3 dc df 28 7c ee 79 a8 5e 68 10 a2 ad 4d 39 0c 4a 92 38 52 01 17 bf 5b 9f c8 f4 c4 8c ac 6d 34 ef 69 ce e0 7c 00 55 19 e7 c6 d1 8c fa 9f ba b0 25 a9 9a 50 e1 24 97 6e c5 40 41 22 ff 00 25 b5 bd 5e f6 0b f3 bf 77 14 b9 8d 5d 1c a6 48 ea 24 52 8a 14 da d6 5f 97 4b 06 fc 81 eb d7 11 13 65 f9 bd 18 a9 1f 05 55 1a 44 b1 89 36 46 4e c0 d6 b2 a7 a7 82 6f ea 06 d7 b9 b2 1c 33 cc 7e 3a 86 0a e9 a4 86 78 05 2c 23 71 48 88 11 5c 0b 05 ba 8d ac 6f cd f6 71 7f 49 c7 3a da 80 48 03 55 79 92 5b 7e a3 ea 50 9e Data Ascii: .$_O{3.)^?*e:$<0oQh5jEq4\|]\(..M'(\|y^hM9J8R[m4i\|U%P$n@A"%^w]H$R_KeUD6FNo3~:x,#qH\oqI:HUy[~P
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: d0 b4 d3 b0 03 b5 c7 7c 03 e6 fa ae b5 aa 1a 2a 15 50 dc 5d 1b a9 fd 70 93 a2 f4 a4 a6 59 9e 48 e3 bb fb 9c 07 6a 64 31 57 a5 5b 3d 99 2d db ae 27 72 1c dd 73 1a 32 c9 75 a8 4e 25 52 3a 1c 7b 9a e5 eb 5d 17 95 38 05 cf 2a 71 44 d3 c5 4c ce d2 67 06 8e 67 25 7c 34 f2 d4 bf 04 4d 2e 3d 14 0e 99 8a a5 f3 0d d5 13 22 52 b5 d9 ee bc 93 6e 31 31 9e 55 2c 11 c8 d0 aa c9 20 36 5b f4 38 83 cc 6b 1b 27 f2 e2 a9 b2 00 05 98 0e 0e 20 f3 4d 59 4e b4 ee 7c d1 b5 7b db 1e 33 c4 6a e6 ac ae 7b d8 db b6 f9 65 b2 f7 6e 0f c3 7f 2d 4b 13 49 b6 59 f8 ee 90 8b f8 a6 61 a8 22 5c 9e 43 4d 28 3f 7c c6 c4 6d b1 ec 7a e0 8a 7f 0e a9 4c e6 b6 a9 a6 f8 fb 86 59 d5 c8 b1 fa 74 c4 4f 87 19 c4 39 82 55 55 44 44 8c 26 da c6 d6 23 16 85 75 74 4d 4a ac 2c 08 02 e2 d8 c1 2c 93 46 f2 c0 70 Data Ascii: \|P]pYHjd1W[=-'rs2uN%R:{]8qDLgg%\|4M.="Rn11U, 6[8k' MYN\|{3j{en-KIYa"\CM(?\|mzLYtO9UUDD&#utMJ,,Fp
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: b9 c4 8c b2 27 de 8a 7d cb 0a 8b c8 d6 e9 fa e1 ac 75 53 47 97 f9 4a c2 31 ee 39 b6 23 a4 ae 76 51 49 1d 89 eb b7 f7 24 9c 14 b1 58 12 19 f6 76 f4 79 7c c6 8a 4f 29 d0 2f 95 74 04 f2 c2 e4 df eb 80 a7 d4 b9 a3 c8 5d aa ae c7 bf 96 9f e5 82 0d 4c e1 28 65 e3 7c 8e 00 2e 3a 7e 21 80 93 d4 e0 0f 10 91 ec 94 06 92 32 fb af 34 fc 51 59 53 4f 5a d6 c5 21 68 c2 34 24 6e 79 27 33 57 d4 4e 18 4b 26 e0 df 88 58 73 84 e2 a9 96 1f ec dc 8f df 09 63 30 37 f3 13 7f 59 f5 5c 8f f8 9d 7f fd e7 7f b8 fd d3 b6 cc aa 5d 42 b4 9c 0e 9e 91 fe 58 da 2c da ae 02 4c 52 05 27 a9 f2 d4 ff 00 86 19 63 30 dd bc df d4 7d 52 ff 00 13 af ff 00 bc ef f7 1f ba 78 d9 a5 5b cc 66 79 6f 21 ef b1 7f a5 b1 b0 ce 2b 42 05 13 7a 41 e3 d0 bf e5 86 38 cc 2e de 5f ea 3e a9 7f 89 d7 ff 00 de 77 fb Data Ascii: '}uSGJ19#vQI$Xvy\|O)/t]L(e\|.:~!24QYSOZ!h4$ny'3WNK&Xsc07Y\]BX,LR'c0}Rx[fyo!+BzA8._>w
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: a8 92 26 a6 31 40 1d 63 8c 86 00 33 fa 4f 22 c0 5d 57 bb 87 37 24 17 49 78 c1 ac 74 6d 2c 14 99 66 77 1f f0 c8 a3 ba d2 c9 0a cf 11 50 de a2 09 05 95 56 db 40 04 6e 6e 79 be 3a 43 44 7d a1 29 73 b8 7c ad 47 91 d7 e5 13 c6 50 4d 22 45 e6 c4 37 b7 dd dc 0f 55 d9 48 27 fb b7 b1 c0 9a da 28 e6 6f f1 4f 9d ec 50 29 f8 55 65 31 2f 6f 7c 74 d7 cc 6b ef 75 cb 79 f6 9f cc f2 29 ab 93 37 c8 1a 99 e4 78 25 9c 79 02 48 f7 6e 0b 1a ab 08 c8 20 70 49 70 7f fa 1a 28 da d8 3e cf 29 1b 2f f0 f7 29 8a 58 a9 c5 74 f3 a0 4b a9 0a 5a ec c4 f3 77 da a2 e7 8e 41 02 fb 00 ba f5 4c 75 ba 53 55 27 94 24 a5 ab 12 17 50 a4 95 6b 8e 1b d2 6d db 8b fb 62 3b 39 f0 8f 4a 67 79 52 e5 95 19 7c 62 84 15 2b 12 96 54 1b 4d c0 b0 20 11 c7 20 f0 6f cd f1 c6 55 7e 1e 33 39 ae a7 90 10 0e ff 00 Data Ascii: &1@c3O"]W7$Ixtm,fwPV@nny:CD})s\|GPM"E7UH'(oOP)Ue1/o\|tkuy)7x%yHn pIp(>)/)XtKZwALuSU'$Pkmb;9JgyR\|b+TM oU~39
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 87 1f 7e 1c d7 a2 4a f6 d0 42 5a d3 79 08 17 3c b9 db df 8f 25 e6 8f 45 4c d1 98 8b 04 9a 60 3e 96 6c 75 47 85 f2 25 56 88 cb 67 1e a2 4c b6 3f 49 18 7f 86 39 53 2a 90 d1 55 57 25 ed 29 9e 44 4e 3d c7 3f b1 c7 4f f8 3e c6 0f 0e 72 b6 63 68 d1 ea 05 cf ff 00 4d 6c 76 dc 35 a4 e3 7f 3b 7c 82 f3 ea e7 5d c0 23 f6 ac 6a 78 b7 11 b1 47 52 70 1f a8 b5 38 da ea b2 59 78 b7 18 65 a9 75 6a a8 92 38 a4 1b 17 bd ba e2 af cc f3 e6 a9 95 82 bf ed 83 c0 06 8b a1 36 32 9c 21 12 4b 9d fa d9 cb 8e 39 38 95 d3 74 15 79 fd 44 75 75 11 df 2a b9 d8 49 b7 9c c3 8f a8 00 ff 00 4c 07 69 9c ae a3 52 66 08 9e 44 92 e5 b1 31 f8 c9 10 d8 da dc 28 ef 7b db f5 c5 e5 97 a7 91 49 0c 54 54 e2 9e 08 86 d8 e2 7e c3 14 13 da 1e 8b 51 0d 89 b6 1a a4 9a 91 29 85 dd 02 8f 71 db 0b c6 c0 a0 2a Data Ascii: ~JBZy<%EL`>luG%VgL?I9SUW%)DN=?O>rchMlv5;\|]#jxGRp8Yxeuj862!K98tyDuuILiRfD1({ITT~Q)q*
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: fe 58 63 5b 93 d7 57 4f e7 57 c8 65 9c 90 1a c3 8e 9d 00 1c 0e 31 2b a7 f2 f9 73 7c d0 57 d4 46 de 50 b8 45 51 f8 17 b6 08 b3 18 16 90 b4 54 6c 5a b1 ac 63 56 1f 83 e6 6f f2 e9 84 65 31 3f bb 6b ef f6 5e 49 c6 b8 a3 b8 84 e4 33 26 0d 07 d4 f5 2a b1 cd a9 da 8a 29 99 86 d4 44 da 00 e7 ea 70 8d 16 41 1e 61 90 cd 9a c5 3a 09 57 d2 22 56 04 dc 1e 49 5e a0 5b 9c 1a eb ec b6 0c 8f 48 53 2d 6e d5 ae ab 97 d3 cd ce d0 6e 71 ef d9 a3 20 a6 d4 7e 23 bd 15 6d 3f c5 d1 49 97 4e 24 8c 9b 75 50 07 e7 73 82 d0 bd ce a6 32 03 62 0f aa 08 d3 76 e6 ab 7a 5a cf 2d 82 48 a1 94 f7 f7 c1 fe 9f a9 c8 96 95 24 a9 a6 91 61 8c 37 9b 22 16 20 31 be d5 b7 7b 9b 7e b8 7d e3 6f 84 67 44 67 08 b9 15 3c 83 2f 2c 10 bb cd 73 bd 89 b2 81 7b d8 02 30 c7 43 e9 79 b3 5a aa 3a 55 99 4d 0c 32 Data Ascii: Xc[WOWe1+s\|WFPEQTlZcVoe1?k^I3&*)DpAa:W"VI^[HS-nnq ~#m?IN$uPs2bvzZ-H$a7" 1{~}ogDg</,s{0CyZ:UM2
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 20 fe 28 9b 8e 9f 21 89 9e 27 52 d3 6a 82 48 e6 0d bf 63 f0 28 81 e1 86 07 f6 94 c7 09 e4 74 f0 f7 74 43 47 49 43 e4 2f f0 da 0a 6f 2c 07 88 21 95 6d 64 b9 11 86 1d 87 e3 63 ef 75 f9 61 f4 12 96 62 eb 53 24 80 34 6d ba 28 ac 45 c6 dd e4 5b a9 be c5 1d 81 dd f3 c3 bc bb 59 65 39 84 be 56 b4 c8 a9 ab 4d b6 0a 8a 63 f0 d2 28 26 e4 05 52 13 93 d7 de f8 21 ab a7 d2 d5 52 46 f4 1a 92 6c be 56 2a c9 1d 4d 23 85 07 80 49 90 26 d2 42 5d 17 92 07 5e bc e1 9b 55 04 d9 36 50 4f 22 6c 7e 3f 42 89 89 1c d6 ff 00 11 84 75 b5 c7 a8 b9 f5 08 4f c9 30 15 22 18 69 9c 2b 80 1a 52 c0 ed 37 db 7b f0 a9 f8 89 fe 76 04 73 7b 60 93 2b d5 79 f5 0a 85 a6 cd ab a4 5d e9 e9 2a 05 ae 2f 7b 11 62 ce 6c 00 e8 aa 6e 6d 6c 6f 0e 86 ce aa 21 92 4d 3f 45 47 98 c4 8a 41 f8 6a d8 a5 06 cf e8 Data Ascii: (!'RjHc(ttCGIC/o,!mdcuabS$4m(E[Ye9VMc(&R!RFlVM#I&B]^U6PO"l~?BuO0"i+R7{vs{`+y]/{blnmlo!M?EGAj
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: b2 36 26 d7 e2 f8 61 5d 50 72 fa a2 b2 3e c4 46 06 fd 86 21 73 bc ee 7c c7 25 ac 86 9d 8f c2 89 11 bf 0d b7 1d d8 ea e2 a6 73 cb 70 fe 9b 85 c6 d4 4c 30 3e fa 80 51 36 51 38 cc f3 da 8a b8 8f dd 17 ba dc 5b a8 03 17 7e 99 d5 12 e5 5a 3a 3c bd 67 64 51 34 85 90 0e 39 72 71 46 e8 f5 01 63 2d c5 c2 ee c1 f5 54 82 32 d0 c2 df 77 c1 16 f9 8e 71 d3 53 31 b1 80 d1 b0 0b 93 90 3a 42 4f 32 a5 2b f3 c9 6b 25 71 bf 8f a6 1b e5 74 15 59 e6 67 0e 5b 96 f3 53 31 b9 63 d1 14 72 58 fe 58 61 4f 4d 3d 4c c9 4f 47 1b 4f 55 31 db 1c 63 ab 1f fc b9 c7 40 68 2d 27 49 a7 72 98 84 f1 46 d9 d4 a2 f5 72 86 e6 fd 94 76 00 0b 0e 3d b1 71 38 cf 44 8d a2 6d 86 a9 f6 9f c8 d7 4e 50 c3 41 43 63 12 5c bb 9e ac c7 92 4f e7 89 bf 89 b0 fb ce 83 09 d5 3a c5 19 69 0e d2 3b e1 9f 9b e6 c2 64 Data Ascii: 6&a]Pr>F!s\|%spL0>Q6Q8[~Z:<gdQ49rqFc-T2wqS1:BO2+k%qtYg[S1crXXaOM=LOGOU1c@h-'IrFrv=q8DmNPACc\O:i;d

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.4	49813	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:49 UTC	696	OUT	GET /file/UFNhm7mbEFhB4QrlFgeburrHC3qsTU_P4QzBqpQl7FLGcglXyHwWnn38h1ag9ExV45hNk6v_-VbYoQ2dWzNlG-3HYnELtf553wjaYxDUy2T-b3mxSNS1VcUcsBF0KBR0wC7tzEoFaaFc2-PVjgMhDGUWoBZ1wf0AdPaK-ioNRsa6Hz67S3ThrSQdwaBG2LGo-xHuFMnqvj1nlD-9cNYR9P2pbjuMAxNgIcMtrxJtqgo_YYaI2R_CE0NkOZ9bFw1h-bl__7xhxn0d5NS7SSNjaV91vsGff9xShp_k-qFgfLp7-_9fbSGyA0tWrLMwZK-rdRTLJ_BB2vDmw2YDk2quZg.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:49 UTC	676	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/jpeg Content-Length: 138122 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "64c178a5aad63f6776dba7655bfcb5fcbf6d9db1" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:49 UTC	714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Co
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 Data Ascii: 011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOOP'PqPQ
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 01 00 00 00 00 00 00 00 00 00 00 00 01 04 02 03 05 06 07 ff c4 00 3f 11 00 02 01 02 02 05 08 08 05 04 02 03 01 01 00 00 00 01 02 03 11 04 21 05 12 31 41 51 13 14 22 33 61 71 81 91 52 53 92 a1 b1 d1 d2 f0 15 32 72 b2 e1 06 34 42 c1 23 f1 16 43 62 82 a2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f5 ce 8a d0 da 65 ed 19 a7 1e 3a 76 d0 b7 55 6c 8c 56 55 01 a2 49 2d 24 92 7d 1a 9e 4e 87 d2 aa 03 3a 6a cc 95 78 fc 9c d7 e8 d2 ba 15 3f ee 23 4c a9 23 7f 92 a2 ff 00 34 9a 9d 53 63 3e c3 f5 1a 02 01 3a 1b 4b 0d 95 a6 ac bf c9 cd 7e 8d 6e ad 07 a5 88 db 4c d9 73 fb dc d7 e8 d4 d6 14 36 3b 8f 0a d9 2b f0 dc 78 77 8a 02 09 3a 17 4b 74 fb 99 b2 ed dd f2 73 5f a3 40 d0 9a 57 98 ff 00 b9 ab 2f 77 fc dc d7 e8 d4 f9 c1 dd 3d 6b 20 e7 df 40 57 0e 84 d2 d9 fd 6d 59 71 df fe Data Ascii: ?!1AQ"3aqRS2r4B#Cb?e:vUlVUI-$}N:jx?#L#4Sc>:K~nLs6;+xw:Kts_@W/w=k @WmYq
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 97 f9 39 af d1 a3 ee 13 4a fe c6 6c bf c9 cd 7e 8d 58 28 a0 2b ff 00 70 9a 57 f6 33 65 fe 4e 6b f4 68 fb 84 d2 bf b1 9b 2f f2 73 5f a3 56 0a 28 0a ff 00 dc 26 95 fd 8c d9 7f 93 9a fd 1a 3e e1 34 af ec 66 cb fc 9c d7 e8 d5 82 8a 02 bf f7 09 a5 7f 63 36 5f e4 e6 bf 46 8f b8 4d 2b fb 19 b2 ff 00 27 35 fa 35 60 a2 80 af fd c2 69 5f d8 cd 97 f9 39 af d1 a3 ee 13 4a fe c6 6c bf c9 cd 7e 8d 58 28 a0 2b ff 00 70 9a 57 f6 33 65 fe 4e 6b f4 68 fb 84 d2 bf b1 9b 2f f2 73 5f a3 56 0a 28 0a ff 00 dc 26 95 fd 8c d9 7f 93 9a fd 1a 3e e1 34 af ec 66 cb fc 9c d7 e8 d5 82 9a dc 26 a2 dd 11 c9 2e a1 6b 6d bc 73 04 00 48 19 c6 68 08 75 68 5d 2a 12 4f dc cd 98 ed d0 5b 9a 3f f8 6a 01 9e 1c e9 eb ea 55 22 6d 92 db 1e 3a 96 42 62 37 6f 65 b2 9c 1c 7a 4a e5 c9 cf 5c 7b 45 5a df Data Ascii: 9Jl~X(+pW3eNkh/s_V(&>4fc6_FM+'55`i_9Jl~X(+pW3eNkh/s_V(&>4f&.kmsHhuh]*O[?jU"m:Bb7oezJ\{EZ
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: b9 26 a3 d7 a3 ad 4b 4f a4 db bc dd eb 2e 92 4f bf 34 04 d4 64 06 e3 b4 94 1c 84 a0 00 7c 46 29 17 6e 2d b4 0f cc c9 59 1f 8b 1d 67 f2 52 f1 a3 b7 15 84 32 c8 21 b4 0c 24 29 45 44 0f 79 de 95 a0 21 9c d4 91 19 ff 00 7c b5 2e 3a 47 e1 39 19 60 7d 95 b4 6b dd a6 e8 43 2c ca 69 c2 14 08 42 c1 41 24 1c 8c 02 06 77 19 a9 7a 8b 99 a7 2d 73 9c ed 24 c3 41 59 ea a4 92 82 7d f8 23 34 03 99 70 c4 d2 84 3c 42 a3 0d d6 d1 4e 42 c8 20 8c 9f 00 47 4f c9 b5 24 f5 bb ce e4 15 4d 58 7a 28 e5 ec e3 f2 e1 20 8e f5 7e 36 fd 3b bd 99 de 9b 27 4b da d0 00 44 77 12 07 4e 59 0e 0f fc 55 28 c3 08 8a ca 5a 68 2b 91 3d 39 96 54 7e 92 49 a0 19 48 b6 09 ca 75 13 9d 2e 43 57 28 4c 74 fa 29 db 1b 92 37 3b f7 67 14 e6 13 11 63 b0 94 40 43 48 64 64 00 d6 31 f5 52 fb 9f c1 c7 bc d3 66 61 Data Ascii: &KO.O4d\|F)n-YgR2!$)EDy!\|.:G9`}kC,iBA$wz-s$AY}#4p<BNB GO$MXz( ~6;'KDwNYU(Zh+=9T~IHu.CW(Lt)7;gc@CHdd1Rfa
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 16 e8 ec 9f 6f 99 bc 94 9f a5 19 fa ab 5b ab 4d 7f 92 28 4b 48 60 a1 27 19 56 8a 6b ff 00 a4 75 da 2b 88 af ca 4b 4a be 70 c5 d2 3c 40 7f 09 d8 b2 57 8f e2 b7 5b c7 e3 be 8e 5a b3 3b 5d 04 a4 f5 43 16 87 fe a5 16 bf 25 47 2b 4f d2 46 3f 89 e0 7d 74 7d a5 f3 3b 5e 68 ae 43 1f 8e 3c 2d 8e fa 64 7d d1 2d d9 00 10 1d 76 1c b5 91 ee cb 78 1f 0a 7f fe c8 8e 1b 7e c8 ff 00 fc 9f 2b ff 00 2e 9c ad 3f 49 0f c4 f0 1e ba 3e d2 f9 9d 31 61 65 68 28 29 e4 df 98 11 92 7c 31 bd 6e 2b 98 7f b2 23 86 df b2 3f ff 00 27 ca ff 00 cb a3 fd 91 1c 36 fd 91 ff 00 f9 3e 57 fe 5d 39 5a 7e 92 1f 89 e0 3d 74 7d a5 f3 3a 71 20 03 55 59 77 c9 57 59 6b 89 60 5a 5a 61 a0 54 fc d5 27 29 48 1d 79 41 eb e1 fd 73 5c fb 50 79 40 e8 79 c9 44 28 37 e5 22 3b bf 7f 7f cc a4 0d bf 14 7c de 77 ef Data Ascii: o[M(KH`'Vku+KJp<@W[Z;]C%G+OF?}t};^hC<-d}-vx~+.?I>1aeh()\|1n+#?'6>W]9Z~=t}:q UYwWYk`ZZaT')HyAs\Py@yD(7";\|w
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 74 e3 68 41 35 1b 74 6e d6 d6 96 db 6d 79 7f a2 e1 75 5f 17 b4 b4 27 af 77 29 92 5a 8e d6 0b c5 4f b0 f2 5b c9 e5 1f 37 92 3a 91 d0 1f 1d ab ac f0 9f 5d 8d 71 a7 f3 39 d4 ae f1 0c f2 cc 4a 51 c8 0e 49 e4 50 1d 37 03 7c 77 83 b0 da b9 65 eb 45 71 14 d9 64 bd 7c d5 51 8d a4 b5 97 94 f5 c9 65 b5 20 f8 fa 3b e7 6f a4 55 af 82 9a 02 eb a5 67 cc b8 cc 95 02 55 be 74 40 96 97 11 fe d0 29 41 40 83 9c 0d b1 9a b7 82 78 9a 58 c8 c6 31 9e a3 59 eb b4 ed db b4 e7 e9 58 e0 2b e8 c9 ce 73 a5 ca c5 f4 5d 34 d5 f6 74 5d d6 6e cd bd bc 19 57 e1 77 13 f5 5e a3 d7 56 ab 65 e6 eb e7 30 5f ed bb 46 fc d9 a4 73 72 b2 b5 0d d2 90 46 e9 07 ad 5a 78 e1 ae 2f da 3e 5d 99 1a 76 7f 99 a6 4b 6e a9 d1 d8 36 e7 31 05 38 f5 92 71 d4 f4 ae 51 c1 3f f8 ce b1 ff 00 de 3f 98 72 ae de 52 bf Data Ascii: thA5tnmyu_'w)ZO[7:]q9JQIP7\|weEqd\|Qe ;oUgUt@)A@xX1YX+s]4t]nWw^Ve0_FsrFZx/>]vKn618qQ??rR
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 90 86 f9 b3 80 0b 83 27 a1 ef 27 6a 8c bd 71 4b 89 3a 72 e6 fd b2 f1 75 f3 69 ac 72 f6 8d 79 ac 65 e3 99 21 43 74 a0 83 b2 87 43 50 9a 6a fd aa 74 65 ee 4d 97 4c 49 41 97 22 48 8e b6 9b 43 6f 21 d7 12 4a 53 82 47 89 3b 82 3d bd 2a 37 5c aa f6 bd 53 3c ea f4 25 17 93 d9 f9 c2 52 51 81 f3 69 e5 f5 3d 1f 57 94 ed 5c 6a 98 ba dc dd 49 54 a9 af 7b 3c fa 3b f2 ef fe 4f 51 4b 47 61 9e 31 c2 54 68 f2 6e 37 8d 92 d7 7b 33 69 ee ed ee 3d a7 0d 6a 72 24 77 1c 3c ca 5b 69 52 8f 89 22 aa fc 58 be 4e d3 5c 2c d7 17 bb 23 fe 6b 73 b6 69 f9 f3 21 bd c8 95 f6 6f 37 1d 6b 42 b9 54 0a 4e 14 90 70 41 07 bc 55 9e 07 fb c6 27 fd 4a 3e c1 54 8e 3b 7f c4 87 12 ff 00 fc 29 74 ff 00 54 72 be 97 1f ca 8f 85 cf 29 3e f3 e6 ee 8f f2 a9 f2 90 d7 ba 86 1e 9e d2 3a a9 77 3b cc de d3 cd Data Ascii: ''jqK:ruirye!CtCPjteMLIA"HCo!JSG;=*7\S<%RQi=W\jIT{<;OQKGa1Thn7{3i=jr$w<[iR"XN\,#ksi!o7kBTNpAU'J>T;)tTr)>:w;
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 3a da 15 d0 11 e8 a8 a7 62 a0 33 bf 29 c0 14 6b d7 1f 3c a4 38 0f aa e3 42 e2 05 d2 6a 1e 57 23 ea 85 73 6a 3c 96 25 35 9d c2 5d 40 23 1d c4 b6 b0 41 db 20 d7 bc 87 18 4e b3 f2 69 bd 71 33 47 87 2d 72 d5 a6 2e 33 a2 87 10 97 0c 69 4c 34 e8 23 d2 1c ab e5 75 a3 82 46 14 06 48 c1 c5 79 c7 fb 23 3a bf 4b 4b b0 e9 dd 30 99 31 e4 6b 18 57 21 2c b4 82 54 e4 58 8b 65 61 61 64 6c 9e 75 76 2a 09 3b 90 90 71 8d cc c7 00 63 cb 89 e4 13 ad 57 3d c2 59 95 66 d4 0e c2 04 8f 45 a0 cb a8 20 7f 8c 43 87 7f 1f 75 01 e5 b5 f9 6b f1 d1 69 21 5a e7 20 ff 00 ec 68 1f f9 15 f4 7e c3 c7 4b 03 fe 4f d1 f8 b5 34 76 16 ff 00 92 8c 89 0d f2 a8 7e a9 4a 8b 4a 65 3b 67 77 d2 5b 07 a1 c8 3d 2b e5 7f 04 b8 7b 2f 8a 37 9d 45 a6 ac ed a1 db a4 8b 04 97 e1 20 e0 15 bc ca db 75 28 04 ec 0a Data Ascii: :b3)k<8BjW#sj<%5]@#A Niq3G-r.3iL4#uFHy#:KK01kW!,TXeaadluv*;qcW=YfE Cuki!Z h~KO4v~JJe;gw[=+{/7E u(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.4	49814	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:49 UTC	696	OUT	GET /file/oEMIEzb1yTVBpW6MCUIUeeC2t40SZSMsbVRJJjyKs9mRAbrW--7Ue4_Iy0eBbvSSVVgELurmU-qaGFOiQ0xeEH7ltY329lR7ZMlNTABIskg4fS4M776FzjOm8YQ04V5PpLyo-CQ8nHlJX89Wfm1QVx11GmkY_Ad4rcDaVpCQzNsS-ekKPYDT2fTzWQEeW3CrPjYyxQIeSmLtqGrHHC1v6bQatqQywbR_L1XBI8Er-l7eY-TxX83PtrKirkybMrEckzy4qbQueRWGTXQFwknveFmdzqSFguOPtnexomnO6sH5mxBl33ouBAAOzyU6hHNkkcbpoKbkHVycq-fpqjLgCQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:49 UTC	686	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 152506 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "571c9c1f459044cf957a1814b975f615e5b54dfe" Content-Type: image/jpeg Age: 819 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:49 UTC	704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f Data Ascii: //050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIO
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 00 1c 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 07 08 ff c4 00 40 11 01 00 01 02 02 05 07 0b 03 03 04 02 03 01 00 00 00 01 02 03 04 11 05 12 21 31 41 13 33 51 61 71 81 91 06 14 22 52 92 a1 b1 b2 d1 e2 f0 53 72 c1 32 42 e1 15 23 34 f1 43 62 82 a2 d2 16 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f5 ce 8a d0 da 65 ed 19 a7 1e 3a 76 d0 b7 55 6c 8c 56 55 01 a2 49 2d 24 92 7d 9a 9e 4e 87 d2 aa 03 3a 6a cc 95 7b fe 4e 6b fb 35 b7 42 a7 ff 00 32 34 ca 92 39 f9 2a 2f f4 49 a9 d5 36 33 f0 3f 71 a0 80 4e 86 d2 c3 85 69 ab 2f f3 73 5f d9 ac d5 a0 f4 b1 1c 69 9b 2e 7f 93 9a fe cd 4d 61 43 83 c8 f7 56 49 5f bb 91 ee f3 14 10 49 d0 ba 5b b7 e0 cd 97 8f 2f 93 9a fe cd 03 42 69 5d c7 ff 00 36 ac be 5f f2 73 5f d9 a9 f3 83 ca 7b d2 83 9f a6 82 Data Ascii: @!1A3Qaq"RSr2B#4Cb?e:vUlVUI-$}N:j{Nk5B249*/I63?qNi/s_i.MaCVI_I[/Bi]6_s_{
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: ff 00 37 35 fd 9a b0 51 41 5f fc 04 d2 bf bd 9b 2f f3 73 5f d9 a3 f0 13 4a fe f6 6c bf cd cd 7f 66 ac 14 50 57 ff 00 01 34 af ef 66 cb fc dc d7 f6 68 fc 04 d2 bf bd 9b 2f f3 73 5f d9 ab 05 14 15 ff 00 c0 4d 2b fb d9 b2 ff 00 37 35 fd 9a 3f 01 34 af ef 66 cb fc dc d7 f6 6a c1 45 05 7f f0 13 4a fe f6 6c bf cd cd 7f 66 8f c0 4d 2b fb d9 b2 ff 00 37 35 fd 9a b0 51 41 5f fc 04 d2 bf bd 9b 2f f3 73 5f d9 a3 f0 13 4a fe f6 6c bf cd cd 7f 66 ac 14 50 57 ff 00 01 34 af ef 66 cb fc dc d7 f6 68 fc 04 d2 bf bd 9b 2f f3 73 5f d9 ab 05 14 15 ff 00 c0 4d 2b fb d9 b2 ff 00 37 35 fd 9a 3f 01 34 af ef 66 cb fc dc d7 f6 6a c1 4d 6e 13 51 6e 88 e4 97 50 b5 b6 de 37 04 00 48 19 c6 68 21 d5 a1 74 a8 49 3f 83 36 63 c7 61 6e 68 ff 00 d9 a8 06 7a 73 a7 af a9 54 89 b6 4b 6c 78 ea Data Ascii: 75QA_/s_JlfPW4fh/s_M+75?4fjEJlfM+75QA_/s_JlfPW4fh/s_M+75?4fjMnQnP7Hh!tI?6canhzsTKlx
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 81 f3 41 f2 27 93 f4 24 d4 7a f4 75 a9 69 f6 9b 77 77 9a cb a4 93 f4 e6 82 6a 32 03 71 da 4a 0e 42 50 00 3e f1 8a d2 ed c5 b6 81 fc 4c 95 91 fb 98 eb 3f a2 b7 c6 8e dc 56 10 cb 20 86 d0 30 90 a5 15 10 3e 93 cd 6d a0 86 73 52 44 67 fd f2 d4 b8 e9 1f 94 e4 65 81 f9 ab 28 d7 bb 4d d0 86 59 94 d3 84 28 10 85 82 82 48 39 18 04 0c f2 33 52 f5 17 33 4e 5a e7 39 e2 49 86 82 b3 dd 49 25 04 fd 38 23 34 0e 65 c3 13 4a 10 f1 0a 8c 39 5b 45 39 0b 20 82 32 7d c0 8e df a3 8a d4 f5 bb d6 e4 15 4d 58 7a 28 db e1 c7 db 84 82 3c d5 fb ae 7b 79 7c 33 cd 36 4e 97 b5 a0 00 88 ee 24 0e db 64 38 3f ed 54 a3 0c 22 2b 29 69 a0 ad 89 ed b9 65 47 ed 24 9a 06 52 2d 82 72 9d 44 e7 4b 90 d5 b4 26 3a 7d 94 f1 8e 49 1c 9e 7c b3 8a 73 09 88 b1 d8 4a 20 21 a4 32 32 00 6b 18 fb ab 7f 27 f2 Data Ascii: A'$zuiwwj2qJBP>L?V 0>msRDge(MY(H93R3NZ9II%8#4eJ9[E9 2}MXz(<{y\|36N$d8?T"+)ieG$R-rDK&:}I\|sJ !22k'
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: d8 d7 58 bb 7c 66 d6 c4 85 e3 7a 42 87 cc 41 49 ca 54 0f 9d 33 97 e9 27 a0 19 51 4c 5b a3 b2 7e 3e a6 f2 52 7e d4 67 ee a8 e6 ed b8 fe e8 50 ab 48 60 a8 aa 69 aa f5 31 31 ff 00 b4 3a ed 15 c4 57 e9 25 a5 5f 38 62 e9 1e 20 3f 94 ec 59 2b c7 f8 ad d6 71 fa ef a3 96 ac ce d7 41 29 3d d0 c5 a1 ff 00 b9 45 af d1 58 e5 6d fa d0 d7 fd 4f 03 fa d4 fb 51 f5 76 bc d1 5c 86 3f 5c 7a 5b 1d f4 c8 fc 22 5b b2 00 20 3a ec 39 6b 23 e8 cb 78 1f 55 3f ff 00 74 47 4d bf 7c 7f fe 6f 95 fe ae 9c ad bf 5a 0f f5 3c 07 eb 53 ed 47 d5 d3 16 16 56 82 82 9d 9c ee 04 64 9f 76 39 ac c5 73 0f f7 44 74 db f7 c7 ff 00 e6 f9 5f ea e8 ff 00 74 47 4d bf 7c 7f fe 6f 95 fe ae 9c ad bf 5a 0f f5 3c 07 eb 53 ed 47 d5 d3 89 00 1a aa cb be 4a ba cb 5c 4b 02 d2 d3 0d 02 a7 e6 a9 39 4a 40 ef b4 1e Data Ascii: X\|fzBAIT3'QL[~>R~gPH`i11:W%_8b ?Y+qA)=EXmOQv\?\z["[ :9k#xU?tGM\|oZ<SGVdv9sDt_tGM\|oZ<SGJ\K9J@
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 03 e5 5f 01 e0 38 39 fa c8 ac 7a d5 ff 00 09 97 cf ff 00 01 fd 03 75 05 78 ec 4d cd 17 4d 73 5c c5 51 5e 59 e7 b6 63 2c d7 2d 68 9c 0d af 28 2b b5 16 e2 69 aa de b6 53 11 31 13 ad 11 b2 38 7f 9d 9b 1d 02 df 33 ad 06 7c 51 39 2f 08 be 32 3c 6c b1 10 7b 1b 86 ee c3 3d b3 56 3e a5 5c 7a 8c d5 ee 34 3d 17 19 28 b7 3e 36 36 f3 21 b5 ad 6b da 4a 82 ca f8 46 30 70 78 1d b9 cf 03 ad 1e c6 bc f9 d4 2e a5 ea 95 6b b7 74 d6 91 94 88 c9 4b 8d c6 6f 6b 68 dc eb aa 09 ce 54 e0 f6 70 a5 6d e3 1d ab b9 8b b5 4e 03 0f 31 5d ea e7 5a 63 2c a7 39 ec 8e df a3 c9 e8 fb f7 34 b6 36 26 d6 1e d5 3a 94 cc ce 71 95 39 74 cf 4c c7 0e ac fb 50 77 79 bd 5b d1 f1 95 75 bb ca 98 c4 64 ac 25 4e 2d e6 5f 42 49 e0 65 20 a8 0f b3 19 c7 9e 2b b6 74 bb 56 3d ac 74 7c 49 f3 9c 43 b3 d0 b5 b3 Data Ascii: _89zuxMMs\Q^Yc,-h(+iS183\|Q9/2<l{=V>\z4=(>66!kJF0px.ktKokhTpmN1]Zc,946&:q9tLPwy[ud%N-_BIe +tV=t\|IC
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: ee 30 08 a8 6f 47 5b 9d b2 25 e2 e9 0e 5a 92 dd ce 5b 6d 88 85 40 e5 69 4e e2 b4 0f 2c f6 3f 1c 7c 2b d0 8d dc a1 bb 3d e8 0d 49 69 53 59 40 71 c6 02 c6 f4 a4 f6 24 77 c5 67 46 61 ea c5 db a7 13 72 fd 5a d3 3b b3 d9 d9 97 e6 ce 0d 74 ee 2e de 8f bd 73 03 67 09 46 a4 53 be 69 db b6 3f ab 3e ad d9 cc ef df 3c 1e 7c ea 87 54 35 5e 9d d7 37 5b 65 9a eb ea d0 98 f0 bc 36 fd 59 a5 ed dc d2 14 79 52 49 3c 92 7b d5 af ab dd 5a 73 4c b9 f2 2e 98 7f 65 e1 2a 4a a4 bc 5a 0a 0c 24 80 a0 90 14 08 25 40 8f 7e 07 c7 b7 26 eb 58 c7 53 af 9f f5 7f e8 1b a8 cd 41 12 6e 9b d7 4f 8d 60 ca 6e cf b3 24 3b 21 2e 2c 84 c9 41 c1 04 11 8c 02 0f 6e c3 18 c7 04 57 2a f6 90 c4 db ae fd 14 d5 39 4d 59 67 9c fa 31 9c ee e8 cf f8 e9 77 f0 ba 1f 03 7e d6 12 ed 54 53 9c 5b d6 d5 88 88 9a Data Ascii: 0oG[%Z[m@iN,?\|+=IiSY@q$wgFarZ;t.sgFSi?><\|T5^7[e6YyRI<{ZsL.eJZ$%@~&XSAnO`n$;!.,AnW9MYg1w~TS[
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: e0 a9 e5 20 dc a7 cf 71 03 d9 69 2e 46 79 05 47 dc 3c 47 90 9f a5 42 ba 57 f7 49 55 9d 67 a1 bb ff 00 e8 c9 1e 5f fb d1 41 eb ff 00 45 cd 6d 7d ea 37 42 b4 a6 a6 d6 53 be 52 bd cf f5 bf 59 93 e0 b6 d6 fd 92 de 6d 3e c3 69 4a 46 10 84 8e 00 ed 93 cd 78 fb d1 7b d2 8f ab 1d 45 eb a6 95 d3 3a cb 55 7c a7 64 9d eb 9e b3 1b e4 c8 8c ef d9 11 e7 13 ed a1 a4 a8 61 48 49 e0 8e d8 ed 5e 9d f4 26 2a 3e 8c da 1c 0e 07 eb fe 73 ff 00 d3 e4 57 cc 2e 8d 69 dd 4f ab 7a 83 06 cb d3 d9 9e a3 a8 e6 c3 9e dc 47 03 81 b2 a1 ea 6f 17 1b 0a 3c 24 ad b0 b4 05 71 8d f9 c8 c6 68 3d 4f e9 07 e9 9b ac 93 d4 a5 e9 be 84 de 91 1e d9 01 c1 10 c9 8f 09 99 4a b8 49 24 05 04 78 ad ab d9 4a bd 84 ed e1 44 12 09 05 35 e8 fb 4f 50 f5 af 45 bd 1d e6 eb 8e bf cd 7e f5 ab 10 4a fe 4d 28 88 c7 Data Ascii: qi.FyG<GBWIUg_AEm}7BSRYm>iJFx{E:U\|daHI^&*>sW.iOzGo<$qh=OJI$xJD5OPE~JM(

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.4	49815	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:49 UTC	696	OUT	GET /file/ELzs1UgArxHStzcD91QUa9uaL2ddyRSFVOb32HZ5Q7SZLZI9SN8-CvHqkdeSTXz-1FJOHYLyaLzDpUXHrn-3RXYO_4I8oBD9yzwbCHmFeXODLfgUkIjYaugi2NfHyyx86_OZkKL2-vj668ki5vH1mtUCpu871TMMon8057k3jLN1Ba5qNzugM2DrntzGDSlJ045JcFoOh8aLOX3xkDOc0zE2t5O1lQOe8IC-8rtsvjePL8Yyh3HfF-P4WjILj0PfQgv1i7-JHb-jW_hkPmRAB42Uq2-m9whBNQYgypUynBNyLqkApbiUN7qdshWXE3jjbrm5i1asFn_Nd1GtMbAZpA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:49 UTC	676	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:49 GMT Content-Type: image/jpeg Content-Length: 150870 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "32d57128bf0ed9f4ff1642ac7fe408df73e1db68" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:49 UTC	714	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Co
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 Data Ascii: 011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOOP'PqPQ
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 01 00 00 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 07 ff c4 00 3e 11 01 00 01 02 02 05 09 06 03 09 01 00 03 01 00 00 00 01 02 03 04 11 05 12 21 31 41 13 33 51 61 71 81 a1 b1 d1 14 22 72 91 b2 f0 32 52 d2 06 15 34 42 53 92 c1 e1 f1 23 43 62 82 a2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 eb 9d 15 a1 b4 cb da 33 4e 3c 74 ed a1 6e aa d9 18 ac aa 03 44 92 5a 49 24 fb 35 3c 9d 0f a5 54 06 74 d5 99 2a f7 fd 1c d7 f5 6b 2e 85 4f fe 24 69 95 24 73 f4 54 5f e4 93 53 aa 6c 67 e0 7f 03 41 00 9d 0d a5 87 0a d3 56 5f e2 e6 bf ab 5e d5 a0 f4 b1 1c 69 9b 2e 7f 83 9a fe ad 4d 61 43 83 c8 f7 57 a4 af dd c8 f7 79 8a 08 24 e8 5d 2d db f2 66 cb c7 97 d1 cd 7f 56 81 a1 34 ae e3 ff 00 8b 56 5f 2f fd 1c d7 f5 6a 7c e0 f2 9e f4 a0 e7 e7 41 5c 3a 13 4b 67 f6 b5 65 c7 9f fc 1c Data Ascii: >!1A3Qaq"r2R4BS#Cb?3N<tnDZI$5<Tt*k.O$i$sT_SlgAV_^i.MaCWy$]-fV4V_/j\|A\:Kge
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 42 69 5f de cd 97 f8 b9 af ea d1 f9 09 a5 7f 7b 36 5f e2 e6 bf ab 56 0a 28 2b ff 00 90 9a 57 f7 b3 65 fe 2e 6b fa b4 7e 42 69 5f de cd 97 f8 b9 af ea d5 82 8a 0a ff 00 e4 26 95 fd ec d9 7f 8b 9a fe ad 1f 90 9a 57 f7 b3 65 fe 2e 6b fa b5 60 a2 82 bf f9 09 a5 7f 7b 36 5f e2 e6 bf ab 47 e4 26 95 fd ec d9 7f 8b 9a fe ad 58 28 a0 af fe 42 69 5f de cd 97 f8 b9 af ea d1 f9 09 a5 7f 7b 36 5f e2 e6 bf ab 56 0a 28 2b ff 00 90 9a 57 f7 b3 65 fe 2e 6b fa b4 7e 42 69 5f de cd 97 f8 b9 af ea d5 82 8a 0a ff 00 e4 26 95 fd ec d9 7f 8b 9a fe ad 1f 90 9a 57 f7 b3 65 fe 2e 6b fa b5 60 a6 b7 09 a8 b7 44 72 4b a8 5a db 6f 1b 82 00 24 0c e3 34 10 ea d0 ba 54 24 9f c9 9b 31 e3 b0 b7 34 7f ee d4 03 3d 39 d3 d7 d4 aa 44 db 25 b6 3c 75 2c 84 c4 6e de cb 65 38 38 f6 95 b7 27 3d f1 Data Ascii: Bi_{6_V(+We.k~Bi_&We.k`{6_G&X(Bi_{6_V(+We.k~Bi_&We.k`DrKZo$4T$14=9D%<u,ne88'=
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 3a d4 b4 fb 4d bb bb cd 65 d2 49 f9 e6 82 6a 32 03 71 da 4a 0e 42 50 00 3e f1 8a c2 ed c5 b6 81 fc cc 95 91 fb 98 eb 3f cd 59 e3 47 6e 2b 08 65 90 43 68 18 48 52 8a 88 1f 33 cd 65 a0 86 73 52 44 67 fe 32 d4 b8 e9 1f a4 e4 65 81 fa ab d4 6b dd a6 e8 43 2c ca 69 c2 14 08 42 c1 41 24 1c 8c 02 06 79 19 a9 7a 8b 99 a7 2d 73 9c f1 24 c3 41 59 ee a4 92 82 7e 78 23 34 0e 65 c3 13 4a 10 f1 0a 8c 39 5b 45 39 0b 20 82 32 7d c0 8e df cd c5 62 7a dd eb 72 0a a6 ac 3d 14 6d f0 e3 ed c2 41 1e 6a fd d7 3d bc be 19 e6 9b 27 4b da d0 00 44 77 12 07 6d b2 1c 1f f7 aa 51 86 11 15 94 b4 d0 56 c4 f6 dc b2 a3 f7 92 4d 03 29 16 c1 39 4e a2 73 a5 c8 6a da 13 1d 3e ca 78 c7 24 8e 4f 3e 59 c5 39 84 c4 58 ec 25 10 10 d2 19 19 00 35 8c 7e 15 9f 93 fa 38 f9 9a 6c cc 31 18 b9 ea 88 66 Data Ascii: :MeIj2qJBP>?YGn+eChHR3esRDg2ekC,iBA$yz-s$AY~x#4eJ9[E9 2}bzr=mAj='KDwmQVM)9Nsj>x$O>Y9X%5~8l1f
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 51 05 27 29 50 3e 74 ce 5f a4 9e 80 65 45 31 6e 8e c9 f8 fa 9b c9 49 fb d1 9f c2 a3 9b b6 e3 f9 a1 42 ad 21 82 a2 a9 a6 ab d4 c4 c7 ff 00 68 6d da 2b 48 af d2 4b 4a be 70 c5 d2 3c 40 7f 49 d8 b2 57 8f f3 5b af 71 fa ef a3 96 ac ce d7 41 29 3d d0 c5 a1 ff 00 c1 45 af e6 ac 72 b6 ff 00 34 35 fd e7 81 fe b5 3f dd 1e ad d7 9a 2b 50 c7 eb 8f 4b 63 be 99 1f 94 4b 76 40 04 07 5d 87 2d 64 7c b2 de 07 d9 4f ff 00 f0 88 e9 b7 ef 8f ff 00 cd f2 bf fb 5d 39 5b 7f 9a 0f de 78 0f eb 53 fd d1 ea d9 8b 0b 2b 41 41 4e ce 77 02 32 4f bb 1c d7 b1 5a c3 ff 00 08 8e 9b 7e f8 ff 00 fc df 2b ff 00 b5 d1 ff 00 84 47 4d bf 7c 7f fe 6f 95 ff 00 da e9 ca db fc d0 7e f3 c0 7f 5a 9f ee 8f 56 ce 24 00 6a ab 2e f9 2a eb 2d 71 2c 0b 4b 4c 34 0a 9f 9a a4 e5 29 03 be d0 7b fb bf df 35 af Data Ascii: Q')P>t_eE1nIB!hm+HKJp<@IW[qA)=Er45?+PKcKv@]-d\|O]9[xS+AANw2OZ~+GM\|o~ZV$j.*-q,KL4){5
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 28 51 e5 49 27 b9 27 bf 9d 50 74 2e 91 d4 7a ab e9 0f c9 57 fc 0f 56 f0 fc 7f ee 92 d6 77 6e db db bf d5 55 44 6a 9b 45 ca c3 7e 97 6f bf 39 e2 dc 19 d9 e2 ab c5 2e 67 28 4a 93 ed 1e fc 11 54 6e e9 0c 5c e8 fa 23 2a a3 6f e3 cf 7e fd 9d 3f f1 d4 c3 e8 6d 1f 1a 5e ed 59 d1 57 bb cd ea c7 bb f8 76 e5 bb c3 8b a8 f5 36 bc 3a 4f a7 90 6f 32 14 dc 8b 9c a8 ac 86 10 e0 20 3a f2 90 0a 89 09 1c 00 37 28 f6 1c 63 8c 8a d4 d6 c9 fd 5b d6 b0 d1 74 b5 4a 7c c3 52 95 e1 ad b7 18 8e 92 52 79 00 70 48 07 8c 9f 71 04 d3 be b5 30 fa b4 5e 82 79 29 26 2a 22 6c 71 59 e0 2d 4d 34 52 08 f9 25 7f 75 44 68 4d 3f af 2f 9a 7d a5 e9 1d 46 dc 68 2c ad 49 f5 61 39 68 53 24 a8 92 0a 40 e3 27 2a f8 e6 af e2 b1 17 af 63 22 c4 eb cd 31 4c 6c a6 72 99 9c a2 73 db bf 7f de d7 27 47 e0 f0 Data Ascii: (QI''Pt.zWVwnUDjE~o9.g(JTn\#o~?m^YWv6:Oo2 :7(c[tJ\|RRypHq0^y)&"lqY-M4R%uDhM?/}Fh,Ia9hS$@'*c"1Llrs'G
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 56 63 6e 34 94 39 e1 a5 78 05 60 1e 14 08 ec 7d d5 5d e8 86 b1 bd 6b 08 b7 97 35 14 df 5d 5c 67 1a 4b 47 c1 43 7b 41 0a cf d4 48 f7 0a d4 5a b3 a7 9a cb 4f d9 1f 9f a8 65 f8 b0 1b 52 02 d3 eb aa 73 24 a8 01 ec 9f 8d 5f 3d 1c 9f 44 6b 56 a5 79 e3 b5 b6 d6 ca d6 71 9c 00 95 93 52 5a c6 e2 2f 69 4a 22 ba 66 88 ca 7d d9 9e a9 db f7 d0 af 7f 45 e1 30 ba 06 ed 56 aa a6 ed 5a d1 95 71 1b 76 cc 46 59 ef ff 00 ac da ce e1 d5 39 9a ba e3 6c d3 6d ba cd bd 21 2b 8e 58 43 61 05 bf 23 e3 2c 0f 68 90 72 9c f9 10 32 39 34 bb 8e b1 ea 5f 4f a6 46 6e ff 00 2d f4 78 a3 7a 1b 94 5b 90 87 40 3c 8d c3 38 fb 08 23 23 e1 4f 13 d4 9d 69 d4 0d 54 bb 56 96 b8 26 d7 1e 62 d5 ea cc 90 84 ec 42 52 49 cb 9b 4a f3 84 92 70 7c f8 e2 a1 3a a5 a6 ef ba 79 56 c4 ea ad 46 ab d4 b7 c3 8a 43 Data Ascii: Vcn49x`}]k5]\gKGC{AHZOeRs$_=DkVyqRZ/iJ"f}E0VZqvFY9lm!+XCa#,hr294_OFn-xz[@<8##OiTV&bBRIJp\|:yVFC
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: db 0b 40 57 18 df 9c 8c 66 ad fd 03 bf 5b fa 23 e9 05 67 97 d5 5b 7a a0 b3 66 91 22 34 f4 be c2 dc 5c 27 4b 4b 40 70 21 19 dc 52 a2 3c 95 c1 25 20 90 92 03 e8 be 82 d6 1a ab a5 3d 0b 9d ad 7d 24 2e f2 a4 5d a3 85 48 99 1c 45 8e 3d 58 17 7c 36 58 40 8c 80 14 a5 92 de 49 24 02 be 48 09 35 c5 ea f4 96 f4 81 eb f6 b6 9d 64 e9 5c b9 56 f6 a6 ee 7a 35 a6 da 88 ed 18 ac a1 3c 95 4b 5a 52 a1 ef 2a 52 c0 2a 56 00 19 4a 6b af 7d 31 2e 51 ae fe 8b 1a ca 6d b1 e6 e5 c2 96 d5 b5 f8 ef 32 a0 b4 38 da a6 c7 50 50 23 82 08 39 06 b9 f3 fb 1c 9a b3 4a 5a ee 5a ae c3 70 79 88 9a b6 ea a6 57 04 ba 08 54 98 ed a5 65 6d a1 5d 81 49 3b 8a 72 0a 81 ce 08 41 da 14 19 3e 91 3e 90 fd 00 d5 d0 ac bd 50 97 2a 62 18 09 7d eb 5d d5 2c 3e 99 6c a8 7e 8c a4 05 28 ff 00 84 95 90 14 9c 28 Data Ascii: @Wf[#g[zf"4\'KK@p!R<% =}$.]HE=X\|6X@I$H5d\Vz5<KZRRVJk}1.Qm28PP#9JZZpyWTem]I;rA>>P*b}],>l~((

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.4	49811	77.88.55.88	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:49 UTC	12647	OUT	GET /ads/adfox/332443/getBulk/v2?pr=2302063733&pr1=3849475745&dl=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru&prr=&extid_loader=&extid_tag_loader=xn--r1a.website&fa=&date=2024-09-20T18%3A48%3A47.259-04%3A00&pd=20&pw=5&pv=18&pdw=1280&pdh=1024&ylv=0.1117086&ybv=0.1117086&ytt=509073883660293&is-turbo=0&skip-token=&ad-session-id=8249541726872527269&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.35%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1278%2C%22h%22%3A98%2C%22width%22%3A1278%2C%22height%22%3A98%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A1%2C%22top%22%3A9422%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&pcode-version=1117086&yaru=true&p1=ddhej&p2=iqvg&slotNumber=1&bids=W3siYmlkZGVyTmFtZSI6ImJldHdlZW5kaWdpdGFsIiwiY2FtcGFpZ25faWQiOjEzNjYwNzQsInJlc3BvbnNlX3RpbWUiOjE1MTUsImVycm9yIjp7ImNvZGUiOjN9LCJwbGFjZW1lbnRfaWQiOiI0NzgwMDcxIn0seyJiaWRkZXJOYW1lIjoib3RtIiwiY2FtcGFpZ25faWQiOjE1MzYxNDMsInJlc3BvbnNlX3RpbWUiOjE1MTUsImVycm9yIjp7ImNvZGUiO [TRUNCATED] Host: yandex.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=GmNVkS+1q5EG+QZWaZequSAdEsZAYIQJqYkSXqpBiBW8RHxpVAeNYZqWeWLxv59vOg/zx7VfGq3GoEcsNjaaQUQpdjA=; yandexuid=1141320511726872524; yashr=6680397161726872524; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYMz3t7cGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=
2024-09-20 22:48:49 UTC	1138	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Connection: Close NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1726872529420849-837975010576337532-balancer-l7leveler-kubr-yp-sas-218-BAL access-control-allow-credentials: true access-control-allow-origin: http://xn--r1a.website cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: application/json date: Fri, 20 Sep 2024 22:48:49 GMT expires: Fri, 20 Sep 2024 22:48:49 GMT last-modified: Fri, 20 Sep 2024 22:48:49 GMT pragma: no-cache timing-allow-origin: * x-xss-protection: 1; mode=block
2024-09-20 22:48:49 UTC	2359	IN	Data Raw: 39 33 30 0d 0a 7b 22 6a 73 6f 6e 61 70 69 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 6d 65 74 61 22 3a 7b 22 70 72 6f 74 6f 63 6f 6c 5f 76 65 72 73 69 6f 6e 22 3a 22 32 2e 30 22 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 32 33 30 32 30 36 33 37 33 33 22 2c 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 31 22 7d 2c 22 64 61 74 61 22 3a 5b 7b 22 69 64 22 3a 22 33 38 34 39 34 37 35 37 34 35 22 2c 22 74 79 70 65 22 3a 22 62 61 6e 6e 65 72 2e 74 72 61 6e 73 66 65 72 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 62 61 6e 6e 65 72 49 64 22 3a 22 31 32 36 34 35 34 39 37 22 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 22 33 31 33 31 39 36 37 22 2c 22 70 6c 61 63 65 49 64 22 3a 22 31 34 32 38 35 30 31 22 2c 22 65 76 65 Data Ascii: 930{"jsonapi":{"version":"1.0","meta":{"protocol_version":"2.0"}},"meta":{"session_id":"2302063733","request_id":"1"},"data":[{"id":"3849475745","type":"banner.transfer","attributes":{"bannerId":"12645497","campaignId":"3131967","placeId":"1428501","eve
2024-09-20 22:48:49 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.4	49812	5.255.255.77	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:49 UTC	711	OUT	GET /ads/system/context.js HTTP/1.1 Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=GmNVkS+1q5EG+QZWaZequSAdEsZAYIQJqYkSXqpBiBW8RHxpVAeNYZqWeWLxv59vOg/zx7VfGq3GoEcsNjaaQUQpdjA=; yandexuid=1141320511726872524; yashr=6680397161726872524; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYMz3t7cGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=; receive-cookie-deprecation=1
2024-09-20 22:48:49 UTC	1044	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Cache-Control: private, max-age=3600 Connection: Close Content-Type: text/javascript; charset=utf-8 ETag: "70d05c764d152e2968a526f3685ae070-1117086" Expires: Fri, 20 Sep 2024 23:48:49 GMT Keep-Alive: timeout=600 NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Timing-Allow-Origin: * Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Robots-Tag: noindex, noarchive, nofollow X-Yandex-Req-Id: 1726872529578649-10499557936130561423-balancer-l7leveler-kubr-yp-vla-179-BAL
2024-09-20 22:48:49 UTC	7704	IN	Data Raw: 31 45 31 30 0d 0a 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 6c 6f 61 64 65 72 73 2f 63 6f 6e 74 65 78 74 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 Data Ascii: 1E10/! v:1117086 b:default c:loaders/context /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__p
2024-09-20 22:48:49 UTC	8174	IN	Data Raw: 31 46 45 36 0d 0a 6e 28 65 29 7b 74 72 79 7b 69 66 28 22 6e 6f 4d 6f 64 75 6c 65 22 69 6e 20 65 2e 48 54 4d 4c 53 63 72 69 70 74 45 6c 65 6d 65 6e 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 21 30 7d 63 61 74 63 68 28 65 29 7b 7d 72 65 74 75 72 6e 21 31 7d 7d 2c 32 32 31 33 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 74 2e 44 45 42 55 47 5f 43 4f 4e 53 4f 4c 45 5f 45 4e 41 42 4c 45 44 5f 4c 4f 43 41 4c 5f 53 54 4f 52 41 47 45 5f 50 41 52 41 4d 45 54 45 52 3d 76 6f 69 64 20 30 2c 74 2e 44 45 42 55 47 5f 43 4f 4e 53 4f 4c 45 5f 45 4e 41 42 4c 45 44 5f 4c 4f 43 Data Ascii: 1FE6n(e){try{if("noModule"in e.HTMLScriptElement.prototype)return!0}catch(e){}return!1}},22130:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),t.DEBUG_CONSOLE_ENABLED_LOCAL_STORAGE_PARAMETER=void 0,t.DEBUG_CONSOLE_ENABLED_LOC
2024-09-20 22:48:49 UTC	7	IN	Data Raw: 32 0d 0a 75 72 0d 0a Data Ascii: 2ur
2024-09-20 22:48:49 UTC	8166	IN	Data Raw: 31 46 44 45 0d 0a 6e 20 65 2e 69 6e 63 72 65 61 73 65 55 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 72 3d 74 2e 70 72 69 63 65 2c 6f 3d 74 2e 75 6e 69 74 3b 69 66 28 21 65 2e 69 73 49 6e 74 28 72 29 29 7b 69 66 28 6f 3d 3d 3d 6e 5b 22 31 2d 54 48 22 5d 29 72 65 74 75 72 6e 20 65 2e 69 6e 63 72 65 61 73 65 55 6e 69 74 28 7b 70 72 69 63 65 3a 31 30 30 2a 72 2c 75 6e 69 74 3a 6e 5b 22 31 30 30 2d 54 48 22 5d 7d 29 3b 69 66 28 6f 3d 3d 3d 6e 5b 22 31 30 30 2d 54 48 22 5d 29 72 65 74 75 72 6e 20 65 2e 69 6e 63 72 65 61 73 65 55 6e 69 74 28 7b 70 72 69 63 65 3a 31 30 2a 72 2c 75 6e 69 74 3a 6e 5b 22 31 30 30 30 2d 54 48 22 5d 7d 29 7d 72 65 74 75 72 6e 7b 70 72 69 63 65 3a 4d 61 74 68 2e 66 6c 6f 6f 72 28 72 29 2c 75 6e 69 74 3a 6f 7d 7d 2c 65 Data Ascii: 1FDEn e.increaseUnit=function(t){var r=t.price,o=t.unit;if(!e.isInt(r)){if(o===n["1-TH"])return e.increaseUnit({price:100r,unit:n["100-TH"]});if(o===n["100-TH"])return e.increaseUnit({price:10r,unit:n["1000-TH"]})}return{price:Math.floor(r),unit:o}},e
2024-09-20 22:48:49 UTC	15	IN	Data Raw: 41 0d 0a 64 54 79 70 65 43 68 6f 73 65 0d 0a Data Ascii: AdTypeChose
2024-09-20 22:48:49 UTC	8158	IN	Data Raw: 31 46 44 36 0d 0a 6e 22 5d 3d 22 30 36 30 22 2c 65 5b 22 42 75 6e 64 6c 65 4c 6f 61 64 65 64 22 5d 3d 22 30 37 30 22 2c 65 5b 22 42 75 6e 64 6c 65 52 65 6e 64 65 72 65 64 22 5d 3d 22 30 38 30 22 2c 65 5b 22 4f 6c 64 52 65 6e 64 65 72 65 64 22 5d 3d 22 30 38 30 22 2c 65 5b 22 48 42 52 65 6e 64 65 72 65 64 22 5d 3d 22 30 38 30 22 7d 28 63 7c 7c 28 74 2e 6e 78 3d 63 3d 7b 7d 29 29 2c 74 2e 6b 4e 3d 6e 65 77 20 75 28 7b 69 6e 69 74 53 74 65 70 73 3a 28 6f 3d 7b 7d 2c 6f 5b 63 2e 41 64 43 68 6f 73 65 6e 5d 3d 31 2c 6f 5b 63 2e 41 64 43 72 65 61 74 65 64 5d 3d 31 2c 6f 5b 63 2e 41 64 53 74 61 72 74 65 64 52 65 6e 64 65 72 5d 3d 31 2c 6f 5b 63 2e 41 64 66 6f 78 58 68 72 52 65 71 75 65 73 74 50 72 65 70 61 72 65 64 5d 3d 31 2c 6f 29 2c 64 61 74 61 53 74 65 70 73 Data Ascii: 1FD6n"]="060",e["BundleLoaded"]="070",e["BundleRendered"]="080",e["OldRendered"]="080",e["HBRendered"]="080"}(c\|\|(t.nx=c={})),t.kN=new u({initSteps:(o={},o[c.AdChosen]=1,o[c.AdCreated]=1,o[c.AdStartedRender]=1,o[c.AdfoxXhrRequestPrepared]=1,o),dataSteps
2024-09-20 22:48:49 UTC	24	IN	Data Raw: 31 32 0d 0a 74 65 6d 5c 2f 63 6f 6e 74 65 78 74 5c 2e 6a 73 2f 69 0d 0a Data Ascii: 12tem\/context\.js/i
2024-09-20 22:48:49 UTC	2919	IN	Data Raw: 42 36 30 0d 0a 3b 74 2e 52 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 77 69 6e 64 6f 77 2c 74 3d 65 2e 59 41 5f 53 53 50 5f 50 41 47 45 26 26 65 2e 59 41 5f 53 53 50 5f 45 52 52 4f 52 5f 4c 4f 47 53 2c 6f 3d 65 2e 59 41 5f 4d 4f 42 5f 53 44 4b 5f 50 41 47 45 26 26 65 2e 59 41 5f 53 44 4b 5f 45 52 52 4f 52 5f 4c 4f 47 53 3b 28 30 2c 6e 28 34 38 31 39 29 2e 6f 6e 29 28 77 69 6e 64 6f 77 2c 22 65 72 72 6f 72 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 6f 7c 7c 74 29 7b 76 61 72 20 69 3d 74 3f 22 55 4e 43 41 55 47 48 54 5f 53 53 50 22 3a 22 55 4e 43 41 55 47 48 54 5f 53 44 4b 22 3b 28 30 2c 6e 28 33 37 31 39 35 29 2e 65 72 72 6f 72 29 28 65 2c 69 2c 7b 63 6f 64 65 3a 69 7d 2c 31 30 30 29 7d 65 6c 73 65 20 72 2e 74 65 73 74 28 65 2e 66 69 Data Ascii: B60;t.R=function(){var e=window,t=e.YA_SSP_PAGE&&e.YA_SSP_ERROR_LOGS,o=e.YA_MOB_SDK_PAGE&&e.YA_SDK_ERROR_LOGS;(0,n(4819).on)(window,"error",(function(e){if(o\|\|t){var i=t?"UNCAUGHT_SSP":"UNCAUGHT_SDK";(0,n(37195).error)(e,i,{code:i},100)}else r.test(e.fi
2024-09-20 22:48:49 UTC	5231	IN	Data Raw: 31 34 36 37 0d 0a 2c 69 3d 5b 5d 3b 72 65 74 75 72 6e 28 30 2c 6e 28 39 30 35 36 33 29 2e 69 73 41 72 72 61 79 29 28 6f 29 26 26 28 6f 2e 6c 65 6e 67 74 68 26 26 28 30 2c 6e 28 37 39 36 33 39 29 2e 58 30 29 28 22 61 64 66 6f 78 22 29 2c 28 30 2c 6e 28 36 30 34 33 30 29 2e 66 6f 72 45 61 63 68 29 28 6f 2c 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 72 79 7b 72 2e 63 61 6c 6c 28 65 2c 74 29 7d 63 61 74 63 68 28 65 29 7b 69 2e 70 75 73 68 28 65 29 7d 7d 29 29 29 2c 65 5b 74 5d 3d 7b 70 75 73 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 72 79 7b 72 28 65 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 2c 69 7d 28 65 2c 6f 2c 69 29 29 7d 29 2c 5b 5d 29 3b 28 30 2c 6e 28 36 30 34 33 30 29 2e 66 6f 72 45 61 63 68 29 28 63 2c 6f 29 7d 7d 2c 33 34 35 34 38 3a 66 75 6e 63 Data Ascii: 1467,i=[];return(0,n(90563).isArray)(o)&&(o.length&&(0,n(79639).X0)("adfox"),(0,n(60430).forEach)(o,(function(t){try{r.call(e,t)}catch(e){i.push(e)}}))),e[t]={push:function(e){try{r(e)}catch(e){}}},i}(e,o,i))}),[]);(0,n(60430).forEach)(c,o)}},34548:func
2024-09-20 22:48:49 UTC	39	IN	Data Raw: 32 31 0d 0a 61 74 69 6f 6e 7c 7c 31 30 2c 74 2e 66 75 6c 6c 73 63 72 65 65 6e 44 75 72 61 74 69 6f 6e 26 26 6e 0d 0a Data Ascii: 21ation\|\|10,t.fullscreenDuration&&n

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.4	49817	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:49 UTC	930	OUT	GET /file/uiPk3Z5ix6sgFrblrDtl45mDlgniH66ntxVBMte3HxcZ5SpLdIuud7S2vkgnyF343Sqy2_YNmNvuobjq3MZ9txmE1ATrRYNkCYRnlds8uTp-FeBCf_HLUp3uq2uV23I_spdjzyXYn0xlbO5jIidI1gArQadXXtB2wcvV615k9n07gC9_YNwmJZYJ4m8eMIIrvLWpuiNpzwACEK8K0f1g3H1oX3bRf3Z5WfRb4wySb4QeL6uWQOKkxZp4v0rp4eGJpR31QJqi7QIqZ9iCuxc7An3-U9t84qkxi1hDBOAHUxbfLtO8DezjrktvyMUA0M4A5BoSjekXVL9IW9pRRAkpZQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:49 UTC	685	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 84856 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "0b7b37fd99a0678b99db4c7de67da384386142f0" Content-Type: image/jpeg Age: 819 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:49 UTC	705	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2b 01 2b 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c0 00 11 08 02 15 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 07 02 08 09 ff c4 00 45 10 00 01 03 03 03 02 04 04 03 06 05 03 03 03 04 03 01 02 03 04 00 05 11 06 12 21 31 41 07 13 51 61 14 22 71 81 32 91 a1 15 23 42 Data Ascii: JFIF++CC "E!1AQa"q2#B
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 62 4f d0 d6 71 7e bb ed 51 48 3f af d6 ad 9a 8e 69 65 95 10 7b 1f eb 59 05 c6 61 75 f5 e4 e7 93 de 8d d3 dd c2 e8 1d 49 6b 0d 93 85 cc 2e 28 7d 6a e3 a6 e3 ef da 7d 70 7f 95 52 6d ac 19 0e 8c d6 a1 a7 e2 79 6d a7 d7 03 fa 51 e1 66 c7 65 96 20 be 52 55 c2 03 61 0d 81 4f f7 63 f2 a6 6c 7c a8 1c d2 85 cc d5 3b e5 5b ca 71 ba 8e 9b 79 9e f5 d2 5c f5 a5 74 c9 7a 1d 68 92 a0 6b ba 57 4e 42 e4 fd 68 75 a3 f5 a1 9a 74 90 a1 42 85 24 91 d1 0a 07 9e 94 3d e9 24 b9 53 41 47 23 82 78 a6 fe 42 d2 54 85 af 23 b7 d2 9d f4 e4 76 a6 52 9c 5a 96 39 1d 3b 54 32 0c 2b 50 91 7c 9b 28 f9 11 78 5a f0 48 e6 9b 44 d1 ab b9 36 a9 32 4a 90 d6 0e 06 3b 54 d0 92 0e d6 c3 59 f5 e6 a6 2f 3a 81 0d e9 f3 1e 13 7b 5e 28 29 20 f6 3b 6b 35 a8 c6 e7 b2 fb 70 b5 7a 74 ad 64 96 df 95 9e a7 45 Data Ascii: bOq~QH?ie{YauIk.(}j}pRmymQfe RUaOcl\|;[qy\tzhkWNBhutB$=$SAG#xBT#vRZ9;T2+P\|(xZHD62J;TY/:{^() ;k5pztdE
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 4f e3 a7 a5 65 a7 75 de b5 b0 8b 35 4c c6 73 e5 e6 9d 05 e6 a3 9a c8 14 e9 0a e2 99 86 cb b7 0b a5 4f 34 d9 f4 80 33 4e 37 8c 53 59 0b 18 38 a2 70 bd 0c 9e 30 42 8b 96 01 a8 e5 b5 d6 9e c8 56 4d 36 3d 28 9b 66 b2 03 35 3d f2 9a 29 18 a3 08 02 94 74 63 9e 94 88 55 4e 67 b8 43 7c 0b 14 b2 06 7a 53 84 31 9a 49 91 b8 d4 93 6d 90 81 51 1a 8b 05 3b 29 b7 14 c5 e8 81 49 35 09 2a 29 46 73 56 a2 9e 39 a8 f9 8c 64 1e f5 d3 2a 2e 9e 4a 5b 0c 2a 93 ad f0 45 44 3f 10 6f 24 7d 6a 7e 5a 36 92 2a 3c 27 24 e4 51 16 bb 08 71 6e 6c 99 30 d9 49 c6 2a 72 2b 39 4f 34 c9 08 c1 a9 48 a7 1c 55 59 4a 23 03 71 94 b3 4d 28 1a 91 68 10 2b 96 90 0d 3b 4a 70 2a a1 00 ab a0 90 89 bc e7 9a 72 95 0e f4 80 3c d7 44 80 28 7c 8d f8 95 e8 dc 6c 94 5e 08 a8 b9 a9 1b 4e 0d 39 75 e0 90 79 ed 50 Data Ascii: Oeu5LsO43N7SY8p0BVM6=(f5=)tcUNgC\|zS1ImQ;)I5)FsV9d.J[ED?o$}j~Z6<'$Qqnl0Ir+9O4HUYJ#qM(h+;Jpr<D(\|l^N9uyP
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: b6 fb 8e cb 6a 4a 52 94 e4 a9 4a 57 35 65 b2 5d 64 2d 94 bd 18 a8 3f 1f 0a 5e 09 e5 23 d6 86 b3 da e0 fb 7f 8b 07 cf f8 43 25 d3 dc c7 7c 45 7a 24 a0 11 90 78 34 a3 27 6a 80 cf 5a 81 d2 97 73 78 b6 a1 e2 36 9c 00 a1 9c f3 81 53 b8 c1 ad 08 9d 95 71 89 18 70 54 6c 8b 66 14 81 1b 93 5c 14 e2 93 6d d2 06 0d 2b bc 11 52 c0 2c 57 72 32 e1 24 b1 4c 9f 4e 07 14 f5 c5 03 4d 5c e4 56 86 17 61 04 a8 65 d4 6a ba 9a 77 19 dc 70 48 a4 5d 46 0f 1c d7 08 3b 15 9a b7 2c 62 46 a1 2d 71 8d ca 65 2b e2 81 55 35 43 99 02 ba df 40 fd d6 c5 15 13 5c 2e d6 aa 61 2d 01 c4 e7 d2 9c a9 59 a4 56 73 44 20 8f 69 55 65 7e e1 65 01 25 9c 9e 2a 35 e8 bb 86 40 e9 56 27 5b c9 39 a6 c5 8e 68 b0 38 43 6f 95 06 db 3d 42 ba 0a 02 38 49 ce 2a 61 51 87 a5 33 90 0b 62 85 d4 c7 7e 11 ba 49 ac 2c Data Ascii: jJRJW5e]d-?^#C%\|Ez$x4'jZsx6SqpTlf\m+R,Wr2$LNM\VaejwpH]F;,bF-qe+U5C@\.a-YVsD iUe~e%5@V'[9h8Co=B8IaQ3b~I,
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 38 f4 fe b5 a7 b5 a3 62 42 82 d3 51 fe 55 a1 20 64 8e bc 55 43 48 6a 88 ad 4a 79 fb ab 88 69 c5 38 19 6d 2a 38 ee 31 5a c3 4b 44 84 36 a0 72 09 04 60 d1 cd 3a 9e 90 d3 97 46 2e 0f f7 e4 85 ea 75 95 7e f0 d0 e3 c0 5e 7d f1 6d 99 68 8d 14 2d 2a 29 6b e5 c6 0f 6c d5 a3 c0 80 a9 8d 48 4a 54 52 a4 10 70 0f fe 9a d2 7c 44 b1 c5 b8 69 b7 54 a4 02 e2 1a 56 06 3a 9d a6 b0 bf 0a 6f ce d8 35 49 8a 9e 03 84 0e 4e 3f 8c 56 2e b1 ac a5 d5 23 92 31 76 e4 5b d5 68 a3 6c 95 34 b6 94 d8 f3 75 ea 29 24 b2 de 5f 4e d5 01 d4 0e 0d 43 1b 8b 5b 5c 71 64 6d 42 73 4f 6f fa aa 2b 76 e6 94 d2 3c e5 b8 30 42 79 c7 15 4c 5c 57 67 c2 7d 6a 74 b6 87 01 1b 40 e7 a5 68 84 de 03 6f 1f d1 0a 75 31 91 ff 00 17 1d d5 73 57 6f d4 6b 6c 32 b0 98 fe 66 0a c7 20 75 ac f3 5b 69 15 da 1a 8e 88 bf Data Ascii: 8bBQU dUCHjJyi8m81ZKD6r`:F.u~^}mh-)klHJTRp\|DiTV:o5IN?V.#1v[hl4u)$_NC[\qdmBsOo+v<0ByL\Wg}jt@hou1sWokl2f u[i
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 9f 18 21 53 2e 70 f6 82 45 56 16 90 97 08 1c 73 57 cb 93 79 04 55 2a 7b 7b 1d 26 b4 d4 8f dc db 2c 9d 7c 7b 1d b9 2a c3 9b 31 9a 7a 1d dc 38 a8 66 dc cf 07 d2 9e 34 f0 02 ad 38 5b 95 55 87 78 c2 ee 4b 9b 52 72 6a a9 79 b8 86 90 a3 91 d0 d4 dd c6 48 4a 49 26 b3 8d 45 70 04 90 0f af 7f ad 42 e6 df 2a d3 1d 65 03 79 bb 15 a8 ff 00 7a ab b8 f2 df 74 01 dc d3 b9 8a 2e 2b 3d e9 6b 64 02 eb a0 e3 b8 a0 f2 4b f1 59 5f 0c 00 5c a9 dd 39 67 f3 56 92 a1 e9 db e9 5a 1c 6b 3a 50 df 03 18 f6 a8 fb 04 10 d2 53 9f 41 db e9 57 34 20 6c 1c 76 a9 03 77 0b 28 49 b6 54 6c 68 41 27 81 52 8d 31 8e d4 a3 2d 84 9e 07 15 6b b1 e9 f3 35 a5 3a ff 00 ee da 03 3b 88 eb ed 49 cd 64 4d bb 97 0d 0e 99 fb 5a ab 8c c3 72 42 5c f2 93 bb cb 4e e3 81 da 9e a7 4c 4b 54 14 cb 00 8c 9f c3 8e 71 Data Ascii: !S.pEVsWyU{{&,\|{1z8f48[UxKRrjyHJI&EpB*eyzt.+=kdKY_\9gVZk:PSAW4 lvw(ITlhA'R1-k5:;IdMZrB\NLKTq
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 76 8c 2b 4e a9 be 5a 25 34 5a 65 28 75 c3 9e 51 8f 7a cc 26 6a 29 da 65 4a 7e 2e f4 b6 a2 7a 12 01 1e 95 77 b2 59 53 2d e0 db 68 c0 dd 82 a2 2a 03 c6 24 32 db 50 2d 56 f0 95 3c ea c2 49 03 9e e2 bc ca 7d 42 a7 5b a8 33 3c 00 c6 f6 c7 df 95 72 9e 20 de 72 a2 74 9e b0 b8 de 6e 0e 96 da 25 4a 39 df cf 03 23 fb d6 b1 0a d1 22 63 21 6f c9 3b b1 c8 4d 47 f8 73 a0 d3 a5 e2 32 26 23 79 90 94 a8 a8 8e 84 81 56 6b 94 71 16 6a 03 0b 2d 1c f4 3c 0e b4 3e 9a 28 df 23 a7 8a 30 fd 86 db 0d f3 e6 a6 94 83 81 84 ea dd 64 62 1b 5b 97 fb c5 0e a4 f3 5e 77 ff 00 10 6a 02 f9 0c 23 09 41 47 20 71 93 b9 5c d6 d7 ac ef 97 6b 6d 9f 6d ad 94 19 8e 02 96 c9 07 04 e0 e3 a7 bd 79 fd 7e 1b 6b 2d 6b a8 11 2b 50 3f 82 48 19 28 38 48 2a ce 00 fb d6 d0 6b fa 74 f4 46 33 18 89 e3 16 b0 1f Data Ascii: v+NZ%4Ze(uQz&j)eJ~.zwYS-h$2P-V<I}B[3<r rtn%J9#"c!o;MGs2&#yVkqj-<>(#0db[^wj#AG q\kmmy~k-k+P?H(8HktF3
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 16 99 13 34 ec b6 94 e8 59 29 50 3c f1 91 ff 00 05 4e 4e 96 e5 b5 2d a1 dc a9 04 e3 02 97 7e f6 cc f8 a1 bb 89 65 b6 c0 09 0e 2c 00 52 3a 75 35 94 a9 74 86 73 8d a4 77 ea b5 10 11 ee e0 5e e0 a5 75 15 9d 0e da da ba 3b 82 97 1d c9 4f d4 6e aa 54 a9 11 75 07 c3 a1 0d 82 db 24 25 3c 74 3e d5 70 9d 3c 35 6a 45 ad e7 50 a6 92 e8 2d b9 bb 82 08 c0 c5 21 67 b2 07 60 26 40 6c 36 cb 07 00 81 f8 cd 43 55 04 d5 95 cd 31 73 26 0f c8 04 d4 d5 2c d3 e1 37 be d6 5c 85 61 f0 cb 6e 8e 94 62 29 c7 1f 6a 69 0a cb 8a c9 4a 89 1c 0f 6e 2b 48 be 47 4b 0f 2e ec c2 12 ea 9b 64 a7 69 19 c6 32 73 59 4a 21 2a 64 96 9c 53 85 b4 c6 c3 b9 07 a9 07 a5 59 2f 5a dd d9 d0 3e 15 86 7c 92 46 d5 af 77 51 8c 1a d2 d0 d0 3c ca ea 76 0b b2 32 05 fa 5e d7 23 e4 81 57 ea d1 c9 18 a8 93 e1 73 c1 Data Ascii: 4Y)P<NN-~e,R:u5tsw^u;OnTu$%<t>p<5jEP-!g`&@l6CU1s&,7\anb)jiJn+HGK.di2sYJ!*dSY/Z>\|FwQ<v2^#Ws
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: f4 a6 b7 44 b3 78 b4 ba c2 9b 2d b8 96 c8 29 38 3d 8d 54 bc 2f f1 35 a2 cb b6 ab e2 db 6d c6 c7 c8 b5 2b 1b b0 00 ef 52 7a fe ff 00 6d 86 d3 53 6d d3 1b 2a 6d 5b ca 50 b1 c8 e4 e2 b0 1a 6e a9 a9 e8 f3 47 17 8a 5c ce 0b 4e 6c 3c 95 c7 32 9e 73 d3 3d 56 5b a6 7c 26 9c f6 ad 5d d9 32 57 0a 3b 0e 71 b4 11 e6 0d f9 c1 f6 a9 cf 14 7c 4b 67 48 45 16 db 41 43 d3 dc 49 4a 96 55 c3 7c 11 9f cc 55 b6 fd 7b 99 77 d1 8d 3d a6 36 a1 e9 51 f2 92 0f e1 25 1e de 99 15 e4 ad 49 a3 2e f1 5d 53 d7 e9 3b 14 e2 8a 96 b7 14 72 79 39 fe b5 a2 96 96 b3 5a d4 1c ea d7 5a 26 db 6b 3b f9 9b 24 c8 84 7f 0b 8a e2 d0 e2 e4 5e 17 2d d5 aa 54 97 dd dc b3 9c 9c 93 9f e7 5e 9c d2 17 03 6a b5 20 38 85 2d 6a 00 f1 c6 38 1c 55 03 c2 2d 1f 61 30 9b 94 c4 84 ca 74 ed ca b8 e0 e0 1a dd e3 59 62 Data Ascii: Dx-)8=T/5m+RzmSm*m[PnG\Nl<2s=V[\|&]2W;q\|KgHEACIJU\|U{w=6Q%I.]S;ry9ZZ&k;$^-T^j 8-j8U-a0tYb
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: d4 84 b4 b3 82 2c 7e 76 29 ac 80 23 44 43 60 e1 6e fc ea f6 18 e9 50 af af 9f 6a 91 9d bc c8 75 28 49 51 4a 88 a8 57 96 a0 a2 14 30 7d eb d5 f4 aa 41 45 48 c8 41 b9 b5 c9 ea 49 c9 27 d4 95 e7 7a 8d 41 a8 a9 73 ed 60 30 07 60 30 02 25 1d c7 00 67 35 21 6d b5 39 22 62 18 75 0a 68 b8 3e 5d c9 3d 7b 51 d8 8a 19 96 89 52 99 53 ac 35 f3 0c 74 2a 18 38 35 79 3a bc ad 96 df 30 51 e7 b8 42 5b 03 8f 97 d2 b9 ae ac 34 e2 c0 7c d5 fd 2b 4d f7 c7 03 bb 3d 92 17 7d 1f 29 bb 14 34 a1 05 c9 0c 7c aa c0 ce 53 8a af 2e d2 f4 16 1b 0e 32 a0 fb 87 71 e3 a2 7b 0a d5 1a b8 2b f6 6b 2f 3a 0b 4f 3e 90 42 56 7b 91 db d6 a3 6e f7 29 b1 5c 6d 6f 40 0f 46 4e 14 a5 20 f2 47 e5 42 a9 2b a4 36 8d a0 1e bc d9 15 ad d3 a2 17 95 ce 23 a7 7f c9 67 05 a5 a4 94 94 90 47 51 e9 5c 90 47 5e 0d Data Ascii: ,~v)#DC`nPju(IQJW0}AEHAI'zAs`0`0%g5!m9"buh>]={QRS5t*85y:0QB[4\|+M=})4\|S.2q{+k/:O>BV{n)\mo@FN GB+6#gGQ\G^

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.4	49818	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:49 UTC	930	OUT	GET /file/uPQ5ind25iS73kme6wYzUIw_tJvT7exWmnuWZYHK1cp_1YCh0rRaPOrArn3HBpQ1pWFcVrbWmFnV4J3My4Fk-2aXdWP5T20Q8zVMUDDALJUelJBFFCfTc1syEChrXoLCqk8YxngD5JNjYRTvD9tcmIhIAlOJ_xBnEU_OLhUaz86mnvJws3L602OOtsJENHuXjjI46SQWNter7T4FgELHcCGaPiXzMFkZJDqRx4xBMSkDmLJn19G39GH_gQFci9BN6OwP5jazsqGnFdRrIXTrwmYFU-DbhCGS-ruojPASHQyw5CUrV8lJ-wv6xo5lfHaZCwo6XG5R8ih8Heb_xNU_bA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:49 UTC	685	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 46811 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "fb7859b076ba9727248b29e8ac67c1fdb7006df9" Content-Type: image/jpeg Age: 819 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:49 UTC	705	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c2 00 11 08 01 ab 02 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 00 07 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ef 3c 1f 78 fe 99 Data Ascii: JFIFHHCC"<x
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 7a 26 92 f7 bd ed bd e8 f0 d6 f5 63 6b 06 57 53 c7 07 41 13 68 1b 10 f9 6a b5 e1 94 a5 7d 3a 52 c3 9c 4a 22 d3 6f 54 fa 71 a2 5a 56 a7 9b da 58 14 f1 da c3 0c 25 0f ea 41 06 95 6d b3 1e a5 70 35 03 3b 34 09 f6 de f5 00 f9 bb 25 27 3d 54 cf 87 a6 69 33 45 dc 84 dc cf 1d f5 5c 9e fe 7f 9a 5b 70 1d 90 51 20 f4 2e 35 72 74 38 b6 06 d6 be 88 1d 40 92 8b cc e8 59 85 3b 3a df 3e e8 b9 5f a1 aa de 90 33 39 51 3d 3f 32 ee fe 57 df 1f a8 77 5f 3c e9 64 3a 53 f2 76 75 ea 81 ce f2 07 47 d6 be 65 be ad d9 d7 91 31 4e 95 6e 79 69 b7 61 6e 43 ce 3a b0 f3 90 0e c2 ab 54 38 c5 5a 77 c9 82 2d 67 05 f0 6d b2 5e 28 67 51 91 79 d9 c3 ad af cb 68 ad bd e2 fa 23 28 45 0a 30 2a f9 5a fe 81 1c 5b 78 5b 31 51 fb 02 af 70 cd 8b 14 bd 77 bd 11 b4 f8 65 c4 52 49 20 44 1d 46 66 07 69 Data Ascii: z&ckWSAhj}:RJ"oTqZVX%Amp5;4%'=Ti3E\[pQ .5rt8@Y;:>_39Q=?2Ww_<d:SvuGe1NnyianC:T8Zw-gm^(gQyh#(E0*Z[x[1QpweRI DFfi
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 96 58 84 c4 0a f4 34 8a cb 0b d8 37 04 b6 07 97 30 1a f8 9a cc 51 c1 4e a5 d7 3d 41 5a 40 76 ad 5f 10 e8 4e ce f9 23 81 7b 03 c3 33 e4 e7 03 d0 03 7c 6a 8a af ac 23 a7 45 4d 26 10 f4 78 37 1e c2 57 a3 83 b1 e2 5a d2 2d c3 5f be e2 6d d9 9e 4a 7b a6 ac d6 2a 94 b6 96 76 b4 b6 80 4d 6e 29 80 90 b1 2f aa 88 5e 8c 79 43 54 3b a5 89 a6 92 68 a2 f3 e3 c8 2e 01 a3 c4 61 76 d6 6c cb 6f b7 e5 3a 9a f1 7a e2 b5 23 37 ac 90 d7 8e be 1c d6 1f 6b c7 fc df b2 b0 ae 2f 27 d0 08 1b 15 99 62 56 28 7d 4f 09 81 c4 3a be 35 56 97 d7 80 d5 81 ac b4 30 76 ab d0 16 a7 3a cc da e4 c8 bc 86 84 29 23 31 75 04 43 44 58 a3 31 02 f2 09 8a 43 0b 54 37 7d 6b 86 e0 79 22 e7 d9 17 6b 3b a1 f5 7c d3 fa 3d d1 09 e6 ba 6c a0 dc 92 ba 59 b4 ec b7 a2 59 db 83 1a 05 3a b6 ab 3d ac b4 96 66 ca Data Ascii: X470QN=AZ@v_N#{3\|j#EM&x7WZ-_mJ{*vMn)/^yCT;h.avlo:z#7k/'bV(}O:5V0v:)#1uCDX1CT7}ky"k;\|=lYY:=f
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 7b 79 9f 1b d3 f1 d7 7a b5 e5 7d 16 30 e6 1b a5 3e 13 54 9e bc 63 80 2e f0 f1 a6 0d aa 34 23 8f a3 4e 88 79 19 ab a7 2a da 56 cd b5 d3 54 b8 9e a4 fa 3b 63 13 b2 3a 24 ce 26 0f 7a b7 e9 8c 7a 7c 74 7a de 1a 93 68 3a 3d 3e da a3 3c 6c b0 9c 17 3d 38 cb 74 9f 2c 7e 6e e8 9c 0f 45 d2 bd 53 19 ba 1d 34 28 8a 00 66 95 b8 30 3b 08 11 ae 7a a5 12 c6 d2 f4 2f c4 53 4b 0f cd f5 f4 49 9e c7 2d 58 49 94 0e f5 e9 5b 13 4a f3 b3 0c e7 f9 76 ad f2 6d 25 d5 8c ef 22 e8 0f 39 7a 8d 3c d5 eb d0 ca 14 ac 74 1a f6 79 fa 75 f3 df aa c4 e9 e2 78 6b e1 a4 93 e6 fa 7c 3e 2e 17 1e e4 15 af 4f 71 a3 f3 11 ce df 55 6b e3 e4 93 fd 99 bf 95 6c f0 5f be b7 3b a3 e5 f4 eb 1b 31 b5 76 3c 0f 29 66 eb 5a e2 c3 28 31 61 ec b6 3a 65 b4 e7 3e df ad c3 b1 6c e6 bb 20 c4 d6 d6 4f 44 c9 d5 8b Data Ascii: {yz}0>Tc.4#Ny*VT;c:$&zz\|tzh:=><l=8t,~nES4(f0;z/SKI-XI[Jvm%"9z<tyuxk\|>.OqUkl_;1v<)fZ(1a:e>l OD
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 24 33 42 25 ff da 00 08 01 01 00 01 05 02 dc dc dc dc d9 9b 33 66 65 8d b3 26 4c 8c 7d f6 1b 32 6c 39 0d 9e fb e7 b6 4c f6 43 14 5b 1d 91 a2 3c 9e 53 b5 b9 1b 11 52 99 f8 d6 14 66 b9 d3 18 ed 7c f4 ba 99 ab d7 22 2e 8b 2d cc e5 86 85 21 4c c3 99 d3 a8 95 53 8d 91 94 6c a3 26 98 39 50 da 8e 01 a1 a1 a9 cc ea 3a 3f 17 50 9d 35 cf 95 c3 b2 8e 6c 39 27 b3 61 b3 3f a6 4d 8c 91 64 9f 66 23 3f ae 4c 9b 1b 9b 76 7f a6 47 fa 65 91 35 35 30 34 46 23 5f a6 06 84 86 59 7a 82 bb 92 e6 39 91 4e 64 69 7b 55 6d 54 ab f9 c8 8d ca f4 ec 9c 5a a2 73 23 29 71 e7 bc 39 50 b3 86 e2 3e 3c 8f c5 9b 2b e0 4d 9c 6e 14 60 59 ad 4a ee a5 28 4b a7 f3 d7 22 37 55 91 b2 16 cb 8d cc 55 ce 42 e2 d8 ce ab 7c eb 97 03 a1 ba 60 f8 76 22 5c 39 49 72 38 12 e9 dc 98 c6 53 83 ae 43 84 8f 14 d9 Data Ascii: $3B%3fe&L}2l9LC[<SRf\|".-!LSl&9P:?P5l9'a?Mdf#?LvGe5504F#_Yz9Ndi{UmTZs#)q9P><+Mn`YJ(K"7UUB\|`v"\9Ir8SC
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 45 7f db 46 44 ba b6 09 75 59 e1 f5 4b 87 d4 2d 6a 36 59 22 ae 9d c8 91 1e 02 e1 d6 fe e1 db 3d 93 ed 34 60 4b 2e a8 e1 38 9f 67 c1 0e 71 37 43 66 54 8f 8a 30 21 b8 91 fe 4f e2 36 85 ee 38 63 f4 6b 13 5d 63 fd 37 91 b8 a3 73 c8 d0 dc 24 6a 84 d4 45 3c 8f 0c 8f b3 38 96 46 f2 2c 25 ca a1 72 21 c9 e3 f8 97 0a bf f1 e8 4a 24 f3 e6 94 a3 5a f2 c9 d9 0b bc 75 f2 3a bc e6 73 27 97 54 24 dd 31 f2 b9 ab f8 cd 73 2f be 7c ac c6 c8 37 5d fc 0b bc 25 fc da 5c ad be 53 29 71 82 fe 52 f5 61 e2 96 21 c5 bc 5c 3e 44 9c ba 65 f8 8f 07 11 7c 3a a1 2a 7a 3f 19 c3 fe 9f 8e 89 f0 21 17 5f 05 23 8d 23 95 4f 9a b9 c7 49 21 18 ed 8e d3 5d a9 87 b2 53 c1 2b 32 6b 29 3c 45 2d b0 27 09 1a fb fa 3e 48 52 f4 9f 67 22 5f 23 e8 d8 56 31 b5 32 30 c3 f7 85 f1 18 e3 01 c4 51 c9 1d 90 e0 Data Ascii: EFDuYK-j6Y"=4`K.8gq7CfT0!O68ck]c7s$jE<8F,%r!J$Zu:s'T$1s/\|7]%\S)qRa!\>De\|:*z?!_##OI!]S+2k)<E-'>HRg"_#V120Q
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 65 1e 8c 28 9e 44 65 1f 16 45 c4 d4 d4 c0 f6 32 36 d9 89 1a a4 4a b8 90 ab 2e c5 14 a3 85 14 f0 4a 3b 15 7f 19 47 b4 d2 67 f5 b1 29 16 4f 06 71 64 1f c3 27 2b ff 00 9f 23 f9 76 83 f7 28 e2 93 62 2f c9 67 31 78 ce 34 23 64 9f 12 04 f8 ba 9f 8f 21 42 68 f9 a2 6d b6 9f a5 26 2f a6 28 93 a5 c9 c7 8c c8 f1 d0 a2 a2 b5 c9 15 82 bf be 22 f8 12 42 42 46 a7 23 d2 99 91 fd b7 83 28 7f 50 79 1f a3 3e bd a1 0c 78 36 81 e4 4c 56 9f e4 ce 49 31 cc dd 9e 43 2d 8e 08 50 32 d0 e4 d9 a3 13 c1 84 cd 53 35 49 fa 6b e9 37 81 fb 30 bb 67 51 cf e5 6b 33 99 47 f8 e4 e4 7f f3 e4 3f 92 59 18 be e9 95 57 ab b8 8e 24 be f8 1c 77 23 9b 67 96 5c 7a d5 48 71 6d ac 24 9a 32 98 ea 4c f0 ac aa 91 a2 34 46 a8 d7 f4 42 28 f6 f8 eb 15 e0 92 12 12 ed c9 5e a4 fd b1 cb 06 4c e4 6c fa 13 33 81 Data Ascii: e(DeE26J.J;Gg)Oqd'+#v(b/g1x4#d!Bhm&/("BBF#(Py>x6LVI1C-P2S5Ik70gQk3G?YW$w#g\zHqm$2L4FB(^Ll3
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 66 70 7b 62 dc 87 ca 54 c6 a4 ae f1 eb 14 b6 de a9 11 84 1c 55 5a 8e 32 72 bb d4 9c 30 ff 00 1f 30 d5 e8 fd 38 e6 45 5c 6c 18 68 68 ca 44 14 b6 21 23 71 48 72 1c f0 72 e1 96 8f b3 1d b2 67 d4 99 33 07 d1 96 6c c5 ec 8c 48 23 7f 5f 62 30 45 89 9c 75 b4 92 f8 d5 21 76 6b b6 04 64 c8 d8 e4 39 8e 47 52 b9 b2 6d 42 bf cb e3 e9 3b 5c a3 47 36 ca 8e 3f 54 8c 8a b9 59 23 6e 4d cf b2 ee 0f 1b 90 5f ff 00 1e ae 67 fd 1d f4 b9 d7 3a c9 6a cd 20 c7 44 51 37 31 d6 d3 ae b4 37 97 f6 60 5e da 8e f1 ae bc 29 d3 19 12 8a 81 1f 85 5c 88 eb 05 1d dd 78 81 e6 c0 ef c9 e4 c9 5e 07 6a 44 5b 92 4d a3 76 29 0e 64 ac 2f 7b a8 f1 2e 99 0e 95 ca 90 ba 27 29 8b a0 72 18 bf e3 d6 1f f8 eb c7 fe 3a 4f fe 37 61 3f f8 f7 26 2e 5d 0b 98 95 9c 4b 69 7a 0a 06 04 8c 76 42 f7 da 27 02 9f 5f Data Ascii: fp{bTUZ2r008E\lhhD!#qHrrg3lH#_b0Eu!vkd9GRmB;\G6?TY#nM_g:j DQ717`^)\x^jD[Mv)d/{.')r:O7a?&.]KizvB'_
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: e5 c3 91 15 66 05 69 ba ee a4 6c 6e 63 d8 97 a8 cb 04 6d c0 ae 23 2f f5 b2 4b 2b 95 4f 82 fe f2 59 1f da 5e df a5 9f 72 17 a2 c1 cb 2f 04 eb f2 47 91 56 ae 22 64 99 37 ef 76 64 c9 b9 b6 4d 8d 8c 8c 79 ec bb 60 45 30 4d c2 5e b5 cc 93 71 71 b3 2b 9d 73 55 d7 1c 57 22 51 c9 65 24 aa 1d 43 81 a8 d1 8e d0 9c ab 6b a9 72 a2 71 ba ec 71 0e 6d 17 90 9e 44 60 c1 f4 32 08 c9 85 8f a3 7f 75 db ee 32 cf fa 9f 6e b1 1c 72 3b fd 76 44 bd 0b ee 6b 3d ac f4 97 6f ea ea fc 8a 51 d5 8f e9 fd 8d f6 c1 9c 1b 19 ec fd 0e 5d 92 17 6a a1 b3 8c 65 17 44 65 af cb 79 fd ca 52 47 21 b9 4f 04 8c 0e 23 a8 75 12 a4 74 92 a4 75 0e b3 53 53 51 45 e7 8d 67 36 b9 f1 fa 9c 64 46 4a 69 1a 9a a3 53 d9 12 5e d6 30 bf 89 45 cd b5 fe a6 75 af 7f a3 fa f7 aa fa 97 b3 e9 0f ea df 62 24 fe 2f e9 Data Ascii: filncm#/K+OY^r/GV"d7vdMy`E0M^qq+sUW"Qe$CkrqqmD`2u2nr;vDk=oQ]jeDeyRG!O#utuSSQEg6dFJiS^0Eub$/
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 6e a5 6a 8c 7a 8d 16 12 e3 d1 79 67 47 8b 2c e9 96 c0 97 1e 71 3d c4 f2 48 56 9b a6 67 f6 63 24 87 11 c0 70 1c 07 01 d6 3a 88 5b 6d 27 0f ab ca 0b fe ce 13 3c 33 bd d3 d2 66 ca ba 7d 75 13 e5 71 b8 a5 dd 5a 73 37 95 92 7f 5f d3 ed f4 4c 6f df f4 48 97 d3 19 fd 8b f8 b3 24 c9 7a 87 ff 00 97 f7 fd bf af ea 48 7f c9 10 f7 12 5f fc ff 00 a7 f7 fd 48 bb f8 2f b9 0d 13 48 7e ed 92 25 fc 67 fc 17 dd 67 2d 22 8e 4d d5 d9 c4 ba c9 a4 f2 3a e2 cb e8 ac b6 b8 a3 06 3b 65 89 b3 3f a3 18 c6 34 60 c0 c8 c5 37 5d 15 b2 ae 2d 27 1b 8b 4c 45 14 95 8d a5 cd e4 da e5 8c d5 0f e5 8f 5f ff c4 00 2b 11 00 02 02 02 01 04 01 05 00 01 05 01 00 00 00 00 00 01 02 11 03 12 10 13 20 21 31 04 22 30 32 41 51 61 14 23 40 42 71 81 ff da 00 08 01 03 01 01 3f 01 fb fe c8 e3 af b0 d9 28 57 Data Ascii: njzygG,q=HVgc$p:[m'<3f}uqZs7_LoH$zH_H/H~%gg-"M:;e?4`7]-'LE_+ !1"02AQa#@Bq?(W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.4	49816	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:49 UTC	930	OUT	GET /file/QK60TZJk0YMhme0DiIpkWeQhvy1qOXmF5dbvK-dRuAYBD-85HXLtrMXsPu4HmKh3drLvuHgWdZomPfsZCRxMB-j4Aie0-3hgh8wn1ht25lAK6xDmygEyaA7eqXQs9tXPc5bxVoSG3hPZVJ9u4rdP3PR1TexQuZVjdFpnYQk5HSQnEO5lY0kVO64nK4OwqB4kUS9kFIB-NoxwdLUX1_7AuL2o0A7UwKrVsJaMbQOmOPvaUjda0-c6GFEvKsGNUQXtHLVXfi3w9oOzo1zBxsD03RbNSNoQibtmrtoDtS8kcE6gH2P5epI3UPHrpW91LMasc6HKOih3Ya3OpoNG8DZEtQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:49 UTC	686	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 106189 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "eb29ccddb807dea300a25f2b549e58f7aeab2f88" Content-Type: image/jpeg Age: 819 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:49 UTC	704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f Data Ascii: //050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIO
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 04 02 03 05 06 07 08 ff c4 00 46 11 00 02 01 03 00 06 06 08 04 04 04 05 04 03 01 00 00 01 02 03 04 11 05 12 21 31 41 51 13 14 61 71 81 91 06 22 32 52 a1 b1 c1 d1 15 33 e1 f0 16 42 53 72 23 34 62 f1 35 82 92 a2 c2 07 24 25 e2 43 73 d2 b2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 df e8 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 Data Ascii: F!1AQaq"2R3BSr#4b5$%Cs?B!!@B!!@B!!@B!!@B!!@B!!@B!!@B!!@B!!@B!!@B!!
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 9f cd 11 49 b4 a4 07 56 d3 f9 a2 32 d4 21 dc b5 c0 b8 be 9c 76 57 e3 85 7e a3 31 fe 08 7d 38 ec af c7 0a fd 46 63 fc 11 6e 1b 46 43 b9 b4 fe 68 88 f7 a5 21 f8 34 7e 68 86 a1 1d 69 f2 2e 3f a7 25 95 f8 e1 5f a9 4c 7f 0e 1f 4e 4b 2b f1 c2 bf 52 98 ff 00 04 5b 86 d2 91 fc 1a 3f 34 44 7b d2 90 fc 1a 3f 34 44 f4 64 75 b7 c8 b9 3e 9c 96 57 e3 85 7e a3 31 fc 38 7d 39 2c af c7 0a fd 46 63 f8 71 6d 1b 4a 43 bd b4 fe 68 8a 4d a7 23 dc da 7f 34 44 f4 68 8e b6 f9 17 37 d3 96 c9 fc 72 af d4 66 3f 87 0f a7 2d 93 f8 e5 5f a8 cc 7f 0e 2d 8f 7a 72 3d ed a7 f3 44 50 6d 39 0f c1 a7 f3 44 3a 24 47 5c 97 22 ea fa 73 59 3f 8e 55 fa 8c c7 f8 21 f4 e7 b2 7f 1c ab f5 19 8f f0 45 a9 ef 4e 47 bd b4 fe 68 88 36 9c 81 ff 00 46 9f cd 11 3d 12 31 77 b2 e4 5d 7f 4e 7b 27 f1 ca bf 52 98 Data Ascii: IV2!vW~1}8FcnFCh!4~hi.?%_LNK+R[?4D{?4Ddu>W~18}9,FcqmJChM#4Dh7rf?-_-zr=DPm9D:$G\"sY?U!ENGh6F=1w]N{'R
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 98 8d cf 7c 30 60 08 26 04 43 11 38 f1 81 93 58 20 43 11 38 f4 c4 9e 9b 40 8c 94 e6 1d 61 8c 44 e3 10 20 a4 88 44 98 11 93 02 72 44 21 8f 4c 71 a6 e7 e5 24 02 7c b6 69 89 6e 6e 9d ab 81 19 f9 e0 0e 44 46 31 d6 2d 49 cd 4f b2 29 e8 71 73 97 7d 05 a0 df c3 06 a4 d7 30 f4 60 2b 31 6d b9 c4 6e 97 34 ae 55 de 12 24 8f bd 6d d5 0f 9c 27 11 29 a3 2d 59 3e 06 4f 8a 55 18 75 ce 2a 74 a1 0b 29 17 32 d5 83 8c a6 9b 32 47 ee e3 93 2d c4 d6 95 ce 25 4a 6e ec 69 bc 1c 10 ec 9c c3 67 e4 e6 46 f1 96 57 32 1d 39 e3 73 32 c7 48 83 16 25 2b 5b 34 ee b5 cc 24 2f 2a 3e 52 32 43 f3 21 83 8f ff 00 29 cb 98 b9 e4 2e 5a 2d 59 29 55 2e b1 4f 9e 0b 38 49 97 9a 43 80 9f 46 09 89 ca 35 b8 c9 6f 47 69 0c 9c 44 62 2a c6 46 22 4c 30 50 ae b1 49 1e 11 59 1e 88 a6 24 86 52 7a 45 18 8a c8 Data Ascii: \|0`&C8X C8@aD DrD!Lq$\|innDF1-IO)qs}0`+1mn4U$m')-Y>OUut)22G-%JnigFW29s2H%+[4$/>R2C!).Z-Y)U.O8ICF5oGiDb*F"L0PIY$RzE
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 63 47 e1 8b 58 6f 07 5c 79 db 6a 79 82 80 01 76 aa fa 58 27 7e ee d0 f3 1f 1e 91 ea 83 6d 21 a4 25 0d 24 21 09 18 4a 52 30 00 f0 c4 57 88 c4 dc b0 b7 23 ce c9 1e 02 35 06 61 96 97 39 5b b7 24 d6 a1 95 35 db bc b5 23 d1 90 d6 3e 63 1d e3 1f 43 ee e0 53 60 cc de 94 b6 dc ef 08 92 71 63 e7 24 7b 23 7d e1 02 72 cd 0d ff 00 f6 7c d6 7f f5 e2 43 ff 00 d1 cb ff 00 1c 7c dc fa 1f 75 e0 85 16 6f 5a 62 d5 8d 82 a4 9c 48 3e b3 cc 63 7d a1 01 96 79 df 37 c0 3d fc ca 1c 54 a5 7a dd 99 29 49 29 49 75 e4 15 1f 0f e8 f0 3e 78 c7 57 07 0a fa b5 6a f6 2f 2e d7 98 9d ca cf 2a e9 8e a6 64 a4 8c 6e 42 0f 30 f4 1c 77 47 aa b0 80 cb 3c 87 95 bd f5 47 4e 92 89 61 53 b9 28 4d a4 12 99 79 a0 e2 10 33 b1 3c 8e 0e 5e be 88 ca d6 37 19 97 25 20 f6 17 bd 3d 9b 81 82 76 79 9e 59 77 92 Data Ascii: cGXo\yjyvX'~m!%$!JR0W#5a9[$5#>cCS`qc${#}r\|C\|uoZbH>c}y7=Tz)I)Iu>xWj/.*dnB0wG<GNaS(My3<^7% =vyYw
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 37 35 54 9b 98 44 87 39 76 a5 54 52 79 d2 c0 3b a5 b4 83 f7 47 b8 7a 09 31 e9 4d 87 a7 f4 0d 37 b7 e5 e8 b6 a5 3d 99 29 66 92 3b 47 12 80 1c 7d 7d ee 38 af ba 51 fd 9d 06 00 02 35 37 93 a9 4e 94 69 ae d3 5f f4 8f 82 9b 6a d1 5b 15 3b f9 f1 73 d5 00 4a bc 94 b7 cb 2a d2 81 07 a7 55 9c 8e a7 03 bb 18 eb b4 52 b2 92 f2 32 ed cb c9 30 d4 b4 bb 63 08 69 a4 04 25 23 c0 01 b0 8f b4 22 0d 82 10 84 00 84 21 00 21 08 40 08 64 1e 91 d3 dd 17 45 26 cc b7 ea 35 eb 96 71 ba 7d 2a 9e c9 76 65 f7 0e 02 52 36 f9 49 24 00 3a 92 40 1d 63 53 b8 4b d5 67 ea da 93 7a d3 ae d9 a2 8a a5 e0 a4 d7 a9 cc ad c2 42 48 e7 0e 4b a4 a8 e4 f2 34 19 20 78 25 5d 00 8d 72 a9 18 c9 45 bd af 77 86 f3 5c aa 42 33 8c 1b db 2c e3 c3 6b 37 26 10 84 6c 36 08 42 10 02 35 2b 8b 6d 31 d3 07 a9 9e ee Data Ascii: 75TD9vTRy;Gz1M7=)f;G}}8Q57Ni_j[;sJUR20ci%#"!!@dE&5q}veR6I$:@cSKgzBHK4 x%]rEw\B3,k7&l6B5+m1
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 39 c0 f5 e4 27 d4 4c 5e b7 a7 1d 47 56 7b 91 eb 74 35 8d ba b7 ab a4 6e d6 61 4f 74 7d e9 76 f6 65 a5 db 9e 4b 6f 16 a9 a8 fa 59 a6 f3 6a 90 a3 d2 18 9a 9a 6b cc 74 d3 e5 10 be 53 e0 a7 14 47 31 f5 13 1f 5a 2e a1 69 86 a6 cd 99 0a a5 26 5a 5a 6d 43 95 b1 52 96 6d 05 64 f7 21 c0 4e ff 00 28 3e 11 a8 bd 3a 6d 01 b1 18 87 5b 96 77 2c 72 0b d2 6b 95 3c 74 50 e8 f3 ec ea ac 63 bf 19 f1 33 ee ae 68 18 b7 e5 26 6b d6 6f 68 ed 3d a0 0b d2 18 52 d6 d8 e8 54 95 6e 4a 47 78 3d 37 de 30 18 4e 48 19 ea 71 98 dc ed 00 bc a6 2e eb 24 b5 55 98 5c d5 42 9a f1 61 c7 1c 56 54 b4 11 94 13 e3 b6 46 7b f9 63 5a 75 7a d4 16 6d f9 52 92 61 21 12 8e ac 4d 4b 24 0d 92 da c9 20 0f 51 04 7c 90 b8 a7 1d 55 56 1b 99 9e 9b d1 f6 ea de 9e 91 b3 58 85 4d eb dd 7f ee 9a c7 35 b3 79 77 a7 Data Ascii: 9'L^GV{t5naOt}veKoYjktSG1Z.i&ZZmCRmd!N(>:m[w,rk<tPc3h&koh=RTnJGx=70NHq.$U\BaVTF{cZuzmRa!MK$ Q\|UVXM5yw
2024-09-20 22:48:49 UTC	1390	IN	Data Raw: 13 4c a3 9d d6 65 a6 d0 ea d0 9c e3 2a 4a 49 20 67 6d e3 cb 8a 56 99 3b a9 b7 9d 36 d1 b6 e4 bc b6 b1 3f cc f4 d4 f4 db 8b 98 14 f9 60 47 3b ee 73 28 93 d4 04 82 7c e5 60 6f d0 fa 49 a5 da 49 6a 68 fd be 8a 35 91 4c 6e 4d b5 04 99 a9 95 0e 67 e6 d6 06 39 dd 5f 55 1d ce 07 41 93 80 04 74 ad 2e 55 dd 3e 91 45 a4 f7 67 89 d6 b1 bc 57 d4 7a 68 c1 c6 2f 76 71 b7 b4 be 61 08 45 c2 f8 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 0c 46 0b d7 7e 1a 2d ed 5e a7 b9 35 4e 66 56 89 75 24 f3 22 a2 86 f9 43 dd 72 97 82 7e 10 39 cf 36 0a b6 eb 88 ce 90 80 3c 84 a7 d4 6f 1d 03 bf dc 41 4c c5 36 a7 20 f9 44 c4 b3 9c c1 a9 a6 c1 dc 11 f7 48 56 06 0f a8 8d c6 de 82 69 9e a2 d3 35 3a d6 95 ad d2 79 59 71 63 96 6a 57 b4 0b 5c bb 9d e8 51 db 3e 83 81 91 e1 d2 38 dc Data Ascii: Le*JI gmV;6?`G;s(\|`oIIjh5LnMg9_UAt.U>EgWzh/vqaE!!@B!!@F~-^5NfVu$"Cr~96<oAL6 DHVi5:yYqcjW\Q>8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.4	49819	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	930	OUT	GET /file/Ukozu20epRcRaVDvklUZ6TM2vj0mDF9eamysHAG6rX5w1yPDYfRyqAed3aJtDHE3scAVu0L9KuCcjwJJYjccsUwnjs1cCUTMvez85fCszOr7fBJEMunpA4Zae8WtFx_YCwGjD1nqHmEU1r1rfnuy6emFkIunTPy2Aq7k6FvkwRY8fydKLa6ClZhgfYLzbvZg-uw5v4qJvet_Mvy0OlMTTnhFXb1rtY2SLGwSM33GeoXd2z7Odq1TyNss3ivw41kMnpqncccJely9kKPyUCjvqYda0-kApF2v0xve_USsU6Iz7LapXzATCI_1H-Q4yh2zFvD_7qyNz72-Uh9kw7O0ag.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:50 UTC	675	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:50 GMT Content-Type: image/jpeg Content-Length: 77753 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "39fd129970309d9a7751e9b128023fa9972f352a" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:50 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Viewing Con
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd 50 27 50 71 50 bb 51 06 Data Ascii: 11J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOOP'PqPQ
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 00 02 03 05 06 01 07 08 ff c4 00 41 11 00 01 03 02 04 02 06 08 03 08 03 00 02 03 01 00 01 00 02 03 04 11 05 12 21 31 41 51 13 22 61 71 91 d1 06 14 32 81 a1 b1 c1 f0 15 23 52 16 33 34 42 43 53 72 e1 35 62 f1 24 82 25 a2 b2 c2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 cd 68 a2 8a f1 b5 ee 08 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a Data Ascii: A!1AQ"aq2#R34BCSr5b$%?h)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 38 85 2b 77 7f cf c9 60 d4 56 f8 7d 97 6e 43 39 d4 31 38 ff 00 f1 95 f8 d7 bf e9 5a b9 ff 00 f7 0c 4e 99 ff 00 d1 97 f8 d2 fc 32 b3 f4 7c bc d3 3f 13 a3 1f cf f3 f2 58 05 15 bc 39 ec c5 71 6f 95 6a 18 78 3c 0f ea 75 64 9f b6 98 bf ec eb 39 85 6d 37 d8 aa f3 c3 0a fc 6a 37 50 54 b7 76 7c bc d4 8d af a6 7f b2 ff 00 9f 92 c5 68 ad 62 57 61 93 a2 9c 2a ee c2 ba e7 f3 2a 18 c7 5f 1a 8a 91 d9 3c b8 e0 66 e2 c2 89 e4 00 d9 ce 3c fa d4 26 9a 50 6c 42 9c 54 44 76 2b 3c a2 ac 57 4d 26 ed b1 58 54 94 ba 72 47 c2 83 55 39 b3 53 09 4a 4a 92 56 a4 e7 3b 4f 4a 42 9a 63 b3 57 1d 53 13 05 cb 93 aa 2a b0 35 a3 1e 31 96 3f bb 14 a3 7a bd 87 0e 03 0b 1f 35 0a 93 d4 ea 3f 4a 83 d7 e9 7f 5f cf c9 58 e8 a8 a9 57 b4 44 8b 1d e7 1a 25 d9 07 2d b0 0f c7 b3 f8 67 d0 9e 07 9f 35 e9 Data Ascii: 8+w`V}nC918ZN2\|?X9qojx<ud9m7j7PTv\|hbWa*_<f<&PlBTDv+<WM&XTrGU9SJJV;OJBcWS51?z5?J_XWD%-g5
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 1b db 56 0e 08 38 f5 ae 42 d6 dd 94 de 74 24 49 13 9f 50 7e 1b 73 7d dd b5 20 12 76 10 48 51 e0 01 d3 1f 3a df 60 38 d4 35 d4 ed a6 a8 7f e6 8d 35 fe 6e 56 54 38 95 04 8c 79 9e 06 f5 2d 73 6e 1c f4 ed ec 57 6d 29 76 72 74 a6 23 b0 4a dc 71 41 20 0f aa ba 3d 98 8a 8b a7 83 6b 3f 12 1a 07 eb c5 61 be ce 5a 26 65 c8 ae fb 74 69 6c c6 1f 0c 7e f1 24 6f fa 27 72 72 39 1e a2 b7 8d 59 25 36 cb 7b 89 ce 12 a4 e0 7c b0 7f 0a ca 7a 4b 31 9a b1 b4 f1 ea 1a 75 ef ff 00 4a f7 06 8f a3 8d ae 77 b4 ed 7b 80 fb ba a1 4c 97 bd d0 82 ae 07 27 9e be 94 d2 54 95 14 fc 26 a1 5a 98 b7 e4 b8 b5 67 6a 94 76 fc bc 2a 6a df 6e 72 e9 25 a6 19 ea b2 01 3e 43 ce ad e1 85 b4 70 5d da 71 2b 3f 89 d6 49 88 d5 11 1e a3 60 a2 5d 5a d5 90 4e 45 34 5c 15 ba 72 9e 2b 5b 47 67 70 02 53 bd f7 Data Ascii: V8Bt$IP~s} vHQ:`855nVT8y-snWm)vrt#JqA =k?aZ&etil~$o'rr9Y%6{\|zK1uJw{L'T&Zgjv*jnr%>Cp]q+?I`]ZNE4\r+[GgpS
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: af df 41 3e f7 46 32 50 1b 60 9c 4c 93 8c e0 f5 a8 49 0e 95 93 c9 c5 38 7d 65 c2 79 a8 f9 2b d8 93 52 c4 cb 95 1b ae e3 72 93 71 e0 9e a6 95 81 38 c7 92 db 89 3d 14 3c 7d 6a 11 f9 27 77 26 86 64 80 79 38 a3 cc 57 6a 85 cf 07 45 be 59 66 a6 7c 04 10 72 70 3f 45 22 6d 51 85 e6 15 c2 e0 d2 5f 6a 3b c9 71 2c e0 7c 45 27 39 20 f8 7e ba ad f6 7d 71 12 47 72 15 9c 71 80 79 3d 3a 7a d5 ca 6a 1c 50 25 c4 2d 2f 83 dc 96 d0 38 c7 81 ac 95 4b 4c 12 90 0d ae b3 92 83 14 9a 29 b9 d1 51 73 9c a9 76 a4 28 c4 92 bd c0 10 00 6d 47 aa 38 e0 63 cb ca ac 51 61 b7 06 27 bb e3 2a ea a2 71 c9 f3 14 86 97 7d 16 78 2e 44 9c 33 ef 29 ca 9a 38 c2 16 71 85 73 d1 7c 62 9a 5e ef 51 6d 51 9c 76 43 80 21 29 51 47 c5 ca f1 fb d1 eb 55 d1 37 33 cd fd ca 29 6c 75 6f 1d d4 36 b3 b9 b5 6a b0 Data Ascii: A>F2P`LI8}ey+Rrq8=<}j'w&dy8WjEYf\|rp?E"mQ_j;q,\|E'9 ~}qGrqy=:zjP%-/8KL)Qsv(mG8cQa'*q}x.D3)8qs\|b^QmQvC!)QGU73)luo6j
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 0d c2 55 a9 c8 2e 2a 3d c2 e7 6a 71 b5 39 ca 52 63 ba a5 24 21 61 48 2a 39 50 c9 c1 04 ab 23 1b 96 fa 3d 86 17 08 da d7 66 1f cc 76 27 b4 2a 43 5b 56 1a 65 24 58 ee 38 db ff 00 16 4d 6e 43 0e c3 ef d6 ae ed bc 64 7f 08 d6 a9 a7 3b 31 d5 eb 83 0e e5 66 b7 30 ec 69 8c 21 f6 9c 54 b4 05 14 2d 21 49 3d 78 e0 8e 2b 31 ed 2a c4 e6 84 d6 77 fb 18 c3 70 d0 e9 7a 10 49 24 08 ee 0d c8 00 9e 4e d0 76 9f 54 9a de 6c da f2 f7 d9 c7 b3 5b ba 9b 55 4a 8e ab 82 20 6d b0 b4 59 48 c0 53 69 44 46 d4 91 8d fc 80 b5 78 ed 27 ca a9 70 fc 21 95 95 53 45 5d 7b 37 80 d0 68 78 fd 11 b5 b5 2c a7 8a 37 d2 00 2f c4 ee a1 64 ae e7 a6 6e cc da f5 2b 48 8f 2d d6 03 e9 4a 5c 0b 05 05 45 39 c8 3e 69 34 b5 e2 f7 1e 14 35 2d c5 24 0c 78 e3 ca a5 3b 59 7c eb 0e cb 74 ae bf b4 c4 db 20 33 1e Data Ascii: U.=jq9Rc$!aH9P#=fv'C[Ve$X8MnCd;1f0i!T-!I=x+1wpzI$NvTl[UJ mYHSiDFx'p!SE]{7hx,7/dn+H-J\E9>i45-$x;Y\|t 3
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 88 89 74 a8 29 4a c7 01 47 24 03 e1 8f 0a d3 b5 55 ed b4 a5 c7 19 f0 56 0a 94 9c 81 e9 59 25 e2 6a 9e 6c be f2 89 71 6e 60 95 78 f5 3f b7 ce 94 6a 0a ab e6 b2 85 50 de 4a da f8 7d 29 e5 be 4a d2 b0 0e 41 cd 37 4b cd 81 90 05 7d 69 d4 ef 04 1c 1c d1 40 ea 86 d1 5e 6d ca 5b 9b 06 fc a4 e3 22 a6 cc 56 90 d2 b2 0f 3d 0a aa 97 0e e5 dc 00 41 c9 f9 d4 a8 bc ad d4 00 a5 12 2a 70 45 94 16 37 d1 7b bb 04 ae 0c 86 87 20 a4 fe 8a ca 17 1f 6b ab 18 e8 a3 5a 62 a4 ef 6d dc a7 8c 1e b5 4d 7e 30 54 87 0e 3a a8 9c 50 fd 26 52 a8 71 3e a9 69 51 41 25 23 81 5e f6 90 32 7a 53 b7 9a 0d e3 8a f0 b0 0a 7e aa e6 7b aa f8 e7 e6 9a 95 80 93 8a 88 9c ee 0e 2a 4d de 33 d0 54 2d c4 fc 54 64 03 ac 8f e9 f3 05 15 25 60 13 8a 67 df a8 1e 0d 2b 24 71 49 42 65 b9 33 63 b2 fb e9 8a d3 8e Data Ascii: t)JG$UVY%jlqn`x?jPJ})JA7K}i@^m["V=ApE7{ kZbmM~0T:P&Rq>iQA%#^2zS~{M3T-Td%`g+$qIBe3c
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: f2 ee d3 f4 4d b4 3d bd 5a f7 b5 0b 55 bd a5 b6 63 5b dc 17 29 61 58 39 69 a5 8f 87 1e 3b 94 a4 24 8f 22 6a a3 ed 73 ac 62 6a 7e d1 9a b2 c4 9b ef 11 2c 31 03 2e b6 14 0a 11 29 44 a9 cc 60 f5 09 ee d2 7c 41 49 1e 15 d1 3a 26 e3 a7 fb 3d ec 76 2e b9 b8 59 5b 32 99 83 99 92 21 44 6f de de 49 7b 1b 77 12 92 ae 76 9c 15 63 8f 4a ce 9c ed c3 b1 4b ac 89 33 a4 f6 5a fc a9 52 1c 53 cf bc ee 9c 80 b7 1d 5a 8e 54 a5 28 b8 49 24 9c 92 7a 9a df d0 e1 f0 61 d8 63 60 32 86 97 d9 c4 9b f2 d0 21 65 a8 92 a6 b0 ca 18 5c 1b a2 95 ec d6 42 3b 6d f6 64 9f 61 5c 46 dc b9 d9 a3 39 6b 88 38 48 f7 88 ed 25 51 96 0f 24 70 5b 49 3c 64 85 f8 1a a7 fb 15 6a 8f fc a1 d5 ba 76 73 2e b3 39 c8 ac c9 da b4 14 94 77 2b 2d b8 95 03 c8 20 bc 9e 31 e0 6a ed a2 3d a2 bb 31 85 7c b7 58 34 7e Data Ascii: M=ZUc[)aX9i;$"jsbj~,1.)D`\|AI:&=v.Y[2!DoI{wvcJK3ZRSZT(I$zac`2!e\B;mda\F9k8H%Q$p[I<djvs.9w+- 1j=1\|X4~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.4	49820	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	930	OUT	GET /file/vJ1qeXNLCjuVDEIRhU0Uc51fVywA0h7ZJSrOuLx4ENx93PE6tFR-ImbH6R6TH2Hq6nolVRWos6mpdVpSPGzX6p8Q0j_0ODtSqtNpysuhrykAfSdDnQ8DgGgskor3Fu8WtaJQxQri8j-hK-g2OOleHoS4KD1B0YhItDZRP0_vlqps17Ld32FQSc-vJxYs9CL8o_6Sc2cXvhUbtn_7wmvnKnWc3Ob9fJcHtXZftEkAVq7aPN2oFh3v2moUXctch7gw9VdyvDNMhGhuxQS8ZIXFjLAIuzgQpvq6SlitGvbib6Rw1hWW_W2ZTDtWGJjMPaOwDaNsLxFvXuGHDGd4VBasvQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:50 UTC	675	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:50 GMT Content-Type: image/jpeg Content-Length: 49227 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "b2cb13ab36549c922c24b61f18f1fdf650e8482a" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:50 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e2 01 db 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 cb 00 00 00 00 02 40 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 51 74 06 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 72 58 59 5a 00 00 00 f0 00 00 00 14 67 58 59 5a 00 00 01 04 00 00 00 14 62 58 59 5a 00 00 01 18 00 00 00 14 77 74 70 74 00 00 01 2c 00 00 00 14 63 70 72 74 00 00 01 40 00 00 00 0c 72 54 52 43 00 00 01 4c 00 00 00 20 67 54 52 43 00 00 01 4c 00 00 00 20 62 Data Ascii: JFIFICC_PROFILE@mntrRGB XYZ acsp-QtrXYZgXYZbXYZwtpt,cprt@rTRCL gTRCL b
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 03 01 00 02 10 03 10 00 00 01 f0 c6 f1 73 b5 9a d9 c3 57 28 26 d3 9b 68 e6 5e b6 1d ee 74 49 68 aa f9 9c c0 56 a3 18 63 00 a0 65 67 09 ca 36 88 aa 05 68 ef 8c 5a 52 1c 15 68 dc 34 61 38 6e 69 51 e8 d0 47 20 6d 45 8d 3e 3d 10 07 2a 38 c2 bc c1 11 e1 70 2b 5c d0 18 4c 26 05 08 d9 48 f4 59 6e 28 88 32 9e 39 42 71 a1 48 14 e9 30 cc 12 38 3c 04 50 b4 0f d1 90 52 18 26 d1 d1 df 16 97 44 78 29 47 e6 75 1e 43 24 52 b9 74 94 78 fc ac a2 75 88 9d a7 65 d2 6f b3 19 22 dc d4 60 9c 34 18 dd c3 20 de 68 ea 12 3a 3f 08 ec 6a 08 8f 1b da 73 c6 fa 4f 78 5e c2 a8 de d3 9e c2 39 7f 77 34 c6 3d b4 84 19 00 a2 34 69 80 1c 11 9c 0d 73 98 e0 23 15 80 c6 39 82 6a 2a 48 ee 6b a5 b9 cd 7a 08 f1 bc 64 3c 42 85 89 eb e4 22 4a 47 40 92 81 40 22 09 ac 2b 18 2a 44 0b 03 42 c7 70 2a 59 Data Ascii: sW(&h^tIhVceg6hZRh4a8niQG mE>=8p+\L&HYn(29BqH08<PR&Dx)GuC$Rtxueo"`4 h:?jsOx^9w4=4is#9jHkzd<B"JG@@"+DBpY
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: a7 60 00 52 04 c0 06 48 ae 23 0a 48 ae 62 46 b0 8b 53 03 8b d6 af c3 20 3c bb 8d 39 55 39 c3 e4 38 80 78 ce f0 90 65 1a b4 15 c2 7a 0e f6 1d 57 2b d4 4c 73 9a 0d 01 02 98 de ce 4c 8d 6f 36 47 35 01 53 91 a5 6a b5 a6 31 c2 a5 24 b0 65 b9 90 e6 b9 ae 8d 6d 77 ae 50 2b 33 59 cd b2 1e b2 65 b6 d0 91 5f 59 a4 ad 93 64 e3 49 8e b4 c5 65 a5 94 f7 60 22 c5 b0 a2 d2 61 a6 e1 f0 6c ca 6a f7 21 ca d7 4b 72 3f 90 11 9c 6d 00 27 62 51 98 70 d2 8e 29 00 d2 42 03 cf a5 23 af 3b 3b cc 08 c1 01 a7 31 35 46 2a 65 70 9e 82 bc 4f 4c 8c 4e 6c a5 19 50 f2 8d c9 91 e1 78 c8 ce 6a 04 c2 30 63 09 23 0c 85 8b 20 0e 89 c2 46 ab 18 e6 2b 1c f0 5c 2a 5d 36 15 93 53 cb 32 a7 a7 9a e3 cd f6 f7 fb 67 8d b4 9f 13 58 56 4a a0 01 1c 33 62 8d 52 9e 71 9b 5b ca 7b 1c f5 66 52 f2 aa 1d b5 bd Data Ascii: `RH#HbFS <9U98xezW+LsLo6G5Sj1$emwP+3Ye_YdIe`"alj!Kr?m'bQp)B#;;15FepOLNlPxj0c# F+\]6S2gXVJ3bRq[{fR
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: ac 13 02 40 08 60 78 c2 34 69 71 34 7b 3b bf 02 16 57 ed 5e 69 91 8a c3 c8 ad 9f 0f bb 57 7d 6b 03 7f e9 2c b8 a5 d9 06 2e 91 1a 54 12 49 12 7d 0e ce 2f 79 12 5d 77 1f 45 34 7b 15 e3 df 29 5b 7d 65 eb f0 66 25 6d 69 39 b6 aa a5 b8 5e 7d 5f 97 d0 e3 43 61 e7 3b df 3e b5 53 65 d2 6c 64 09 51 82 50 47 15 08 f6 0e 93 83 d1 00 51 9b 73 53 b2 bf 48 79 d2 d3 4a f2 9b 43 28 8f be 4a 31 85 a9 06 87 3d 9e bc e4 ac ce ea 47 9a b5 16 ea eb a0 a7 08 31 64 06 43 3b 77 7a 8c ff 00 17 9a f5 e4 44 d2 1a 1e 86 d1 63 e7 72 76 b6 39 aa 11 05 ec 28 0c 63 b9 2c 32 d6 a7 d2 33 77 ee 75 64 91 12 a2 f6 4c 5b fa 20 d0 3c 15 03 99 2a 86 2b 4d 9e 11 b1 be dd e5 6e b0 d3 46 c8 45 e2 e9 9a 81 32 70 ee 23 8b 6c c5 97 d4 66 30 d9 d2 c5 1e a2 b2 14 32 6a ab b3 66 15 a9 16 56 d9 8a 98 f1 Data Ascii: @`x4iq4{;W^iW}k,.TI}/y]wE4{)[}ef%mi9^}_Ca;>SeldQPGQsSHyJC(J1=G1dC;wzDcrv9(c,23wudL[ <*+MnFE2p#lf02jfV
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 6c fd b5 2c 95 f4 36 15 14 13 74 0d 3c be a9 1c b9 aa bf 2f 93 09 84 e8 3d 47 a9 4c aa 9c e2 c2 4c 09 1a 4c f3 c2 91 71 2c b1 8c 12 1e 32 31 ea 8f 43 50 8d 00 82 50 02 04 4b 18 8c ad 87 63 0d 38 23 94 18 a8 e3 3b 26 a3 b4 ec 9a 0b 48 01 bf a3 b4 24 20 51 39 a6 81 25 39 4f 0b e5 c9 d4 e4 bd 87 37 99 ca fa ee 33 83 a7 cc c3 9c f6 ff 00 47 9a 88 ec a5 79 c6 7c 67 e9 38 2d 4c 3b ea 56 51 b3 99 56 ac a6 e7 ef c3 d4 34 99 ab 9c ae ab c6 37 f8 4d 27 61 ba ac b3 4f 3d 51 1e 90 9b cd 46 5b 7d 15 0f 3d 53 0d b9 d2 09 b0 6a 55 7d 84 14 4a f3 6d 4f 98 8d d1 4e 26 c7 d6 1c 1b 39 f4 b6 2d 5a 4a af 95 51 3e 54 19 3a 44 d3 44 94 29 25 09 58 67 31 c0 e6 f7 21 82 2b 02 34 49 d1 99 5d 0e c6 22 2b e3 cc 8a aa 3b 08 39 a6 0c ac 9b 64 79 01 4e 10 cf 10 1d c2 68 e5 49 ae 3a 76 Data Ascii: l,6t</=GLLLq,21CPPKc8#;&H$ Q9%9O73Gy\|g8-L;VQV47M'aO=QF[}=SjU}JmON&9-ZJQ>T:DD)%Xg1!+4I]"+;9dyNhI:v
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 41 e8 44 22 34 61 0f a6 fa 9f 71 d0 40 62 98 a6 03 37 37 d3 73 73 73 ba 16 84 c6 30 98 61 82 28 88 26 e1 33 5b 95 53 b9 45 1d a1 2b 80 6b d0 f5 06 6e 6e 6e 6e 6f d7 7d 07 51 d4 f4 30 c3 0c 6f 53 fd 23 a0 30 18 a6 6e 6e 77 4d cd cd cd cd c2 d3 ba 13 09 84 c2 60 11 60 84 c5 fc a5 55 77 4a 6a d0 ad 22 8f ae a4 f5 1d 37 3b a6 e6 ff 00 fc 03 0c 30 88 c3 d4 fb 8f 4d c0 60 30 19 b9 b9 b9 be 9b 9b e8 4c dc 26 1e 80 40 26 e7 ee 54 93 1e 9d 04 ae 22 fa 1e a2 08 61 33 73 70 74 dc 07 d3 70 7f 41 86 1e 8c 21 1d 37 37 fd 03 d8 19 b9 b9 b9 be 9b 9b 9b 9b 84 c2 7a 18 4c 03 ad 49 b9 45 7f 74 a4 55 e8 7a 98 4f 41 01 86 1e 80 c0 d3 73 7e fb f5 33 7e 9a 84 46 10 fb 9f 5d cd f4 d8 11 2c 0f ed b8 66 e1 30 9e 9b 9b 84 f5 5f b3 45 72 9a e5 49 04 26 6f a9 9b 83 d0 f5 dc ee 80 fa Data Ascii: AD"4aq@b77sss0a(&3[SE+knnnno}Q0oS#0nnwM``UwJj"7;0M`0L&@&T"a3sptpA!77zLIEtUzOAs~3~F],f0_ErI&o
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: f8 eb dd f1 a6 6e 40 c2 a6 84 6c d6 b2 e4 15 66 65 be 4d b4 a7 8d 38 bf e1 38 cf dd fd 07 a1 87 a1 86 18 66 1e 37 90 9b f4 0c 3f d6 3a 0e 9b ea 61 ea 4c dc 1e 9b eb b8 7a 24 a6 a6 b8 85 5a ac cf e4 7e 2e 3d d6 66 72 53 13 86 18 a2 d1 e3 8b 4f 8d 6d 54 aa 59 e4 b6 05 18 d0 db f1 d6 fc 8f 83 59 b2 ce 4a fa d9 6c 5c 85 7c d4 a8 6e c4 3a 98 ff 00 46 a7 d0 5b 47 f4 1e 87 a1 86 19 55 5e 67 62 b5 2a d6 4c 30 c3 d3 7d 37 37 d3 7d 47 ae fa 1e a6 18 22 fb 1f 4c 5a 4d ef 63 bf 6f 90 ab 57 c4 f9 0e 92 b0 d7 7d bd 9d a1 ad 14 57 6d 9d cf fa 25 44 7b c2 8c 8b ed e4 72 74 19 95 7c cd c9 66 07 94 0d 4e ef ac 32 3b 7e 46 cd 16 17 65 6e e1 d4 7a 18 61 86 19 fb 98 c3 e3 d4 13 f2 f1 92 a6 18 61 fe a1 eb b9 be a6 18 20 ea 7d 0f 4c 5c 37 c9 29 4d 48 a7 1c 38 a2 ad 0f 1a f7 58 Data Ascii: n@lfeM88f7?:aLz$Z~.=frSOmTYYJl\\|n:F[GU^gb*L0}77}G"LZMcoW}Wm%D{rt\|fN2;~Fenzaa }L\7)MH8X
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 88 e6 d2 3b ed 50 ad e5 40 3c c6 c8 7f 8d 1a dd c5 75 0c b6 0b 66 7f 21 b9 65 86 c3 4e 3b 5d 05 23 ba ba fb 50 2e c5 bf 8a d2 76 cc f2 99 7f ea bf f7 65 08 38 3a bf 8d a1 84 c2 7a 1a dd 27 15 c9 ad e9 93 c8 59 86 78 f6 c7 e4 71 ce 35 dc 5c 5c bc 6c e8 fc 3d 5d d9 d8 0d 64 7e 1d 0c 5e 32 ba a7 c8 55 4a 2c a3 09 1f 21 c2 f4 3d 0c 30 c3 d0 f4 df 4c 5c 16 b6 2a 69 d8 6a 77 85 8d 65 8e e5 3b 82 ad 8f 0d ad 44 c8 e5 02 1c 9e 6d 0a 1e 4a e6 36 d8 6e 94 5c 2b 99 36 2a f1 b5 e3 9b 15 b8 8b 2b a5 b1 2e 46 c5 05 1f 10 69 3b 36 1e ff 00 c6 e4 36 15 ff 00 d8 2b dc ce 75 52 ee 11 50 0b 26 55 f3 2d bf 3a 6b 37 58 d6 76 ad 75 76 c0 9f 6c bd b2 c5 dc 3a 50 01 62 34 ab 63 f7 1a bf de e3 b1 c3 ec 50 4c 30 c3 1d 96 b5 cd e6 3c 8b 81 98 f8 79 18 79 78 fc 85 5c c7 1d 93 86 fc Data Ascii: ;P@<uf!eN;]#P.ve8:z'Yxq5\\l=]d~^2UJ,!=0L\ijwe;DmJ6n\+6+.Fi;66+uRP&U-:k7Xvuvl:Pb4cPL0<yyx\
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: d5 58 ce d4 e3 0b 17 8f b7 76 5b 8f 79 4c cb ac 02 b7 cc b1 1a 8c 53 7b f8 ab 45 66 b3 68 a5 0f 6e e2 53 6a ca 2c b5 a5 76 6d de c9 5b 96 00 77 4d 04 85 d8 b5 d2 ce df 25 2f e5 6b 98 f6 d8 7b a2 ef bb 2a e1 6b 2a 7f 0a 63 0c 61 6b f7 33 9d 9f d8 51 a8 c7 51 e1 0d 0b 4d ce 3a a7 7c 86 68 c6 64 e4 ae 3d 65 8d f6 97 d4 3f 64 7d c0 35 31 b1 6c c9 6a b1 71 f8 fa f3 b2 0e 55 dc 7d 80 4e 53 29 6c 6e 27 00 df 6d b6 0c 6a 71 77 71 cc c8 5a ab c8 cd b2 fb 48 d4 e2 a9 3d b7 d3 e1 c7 c4 a9 e9 e8 c7 53 33 9a ec 39 f9 cd 94 fe 41 dc cd f7 f9 18 b4 16 8b 89 28 c0 63 13 17 b4 7c 56 9e 37 de 22 d4 b1 2f c7 4a ee 0a 1a a0 dd e2 de f0 d5 2a 17 c8 5a 6b 36 78 df 2a c1 05 fa 98 a9 e4 95 53 f4 88 9b 42 23 59 b3 47 e8 0e e8 40 52 5b 53 2b 23 e8 2e e2 b4 c9 c8 da dd 90 a9 2f 36 Data Ascii: Xv[yLS{EfhnSj,vm[wM%/k{kcak3QQM:\|hd=e?d}51ljqU}NS)ln'mjqwqZH=S39A(c\|V7"/JZk6xSB#YG@R[S+#./6
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 6f a2 a6 97 0b 0b c8 d9 57 77 1a ea 35 9c cb 6b a8 70 98 05 8d fe 3a ab c8 b7 ba fc eb 1a ec 8e 3b 0f f1 cd ca 0f 65 ff 00 80 ac 8b 66 25 4a 83 91 ca 5a a8 b2 c7 b9 f2 ec 16 0c 6a fc 34 f1 d8 e2 aa f2 32 7e 33 08 0f f5 11 18 46 11 84 61 18 43 0f 53 37 30 b9 6b 31 66 b1 39 1a fc 79 5c 5b e3 73 55 df 3e 60 25 2e 57 99 54 a9 63 8a 84 5b 89 5e ce 56 3e 38 ca e5 6a 63 68 f3 bd 7f 1e b1 91 88 95 ce d0 3a 7e e5 96 ad 71 9c d8 70 2b dd b5 fe 35 33 6a 72 39 cd 73 2f 41 e8 a2 16 0c df 18 80 6a 4a 5c b3 64 36 37 0c f6 b9 a9 31 87 25 c8 f9 ee bc 8a 31 38 aa 1b 22 ec 8b 53 0a 8e 2f 1b ba ab 41 71 85 4f 71 b3 31 6b b7 99 cb 54 6a c5 9c 85 b8 be 3b b2 29 c4 95 6c d9 93 70 0c 3a 0f e9 30 88 c2 30 8c 23 08 c2 11 0f aa 3b 21 c7 e5 59 56 d5 a3 2a 37 9b 1c ad 96 b2 36 7d d3 Data Ascii: oWw5kp:;ef%JZj42~3FaCS70k1f9y\[sU>`%.WTc[^V>8jch:~qp+53jr9s/AjJ\d671%18"S/AqOq1kTj;)lp:00#;!YV*76}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.4	49822	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	696	OUT	GET /file/PRwF4HU2mz8_cqvTXNsa-Kd7jb5s5SrzZiFiOQ3g51eziuzlaGps_s9nO7xGuuagpHrfRXLlHMg5UOeNtTVCbEg-9_HuJStxzLyka7v1AY_XcXJRRoFuO9luY7Lb6KNL9m6aqlxvKnZVq28apWcBebnGFw5mlxhpFxFTR9ftopmrxZaw-xUj7RyzwsXF7ha3GPJcrE7ZHbpPll23Bh3e7TEwqIrEWOQ4CVszx4S6PZXa3x7jXL39680brmWiBdMyJy-Uo_WlsTHaUwr5o16C4qVpoM7GewqNWT1OQIDsftojAVmD_amBa7y9mNOCHNjsk2FcO4zZFJoo87-1vpbkxA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:50 UTC	684	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 157593 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:48:49 GMT Cache-Control: public,max-age=7200 ETag: "75bbd259525bf44c0b3f9aecb86977ab3732ddd0" Content-Type: image/jpeg Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:50 UTC	706	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Vi
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f Data Ascii: /050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOO
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 00 1b 01 01 01 00 02 03 01 00 00 00 00 00 00 00 00 00 00 00 04 03 05 01 02 06 07 ff c4 00 3f 11 01 00 01 02 02 06 04 0b 07 05 00 03 01 01 00 00 00 01 02 03 04 11 05 12 21 31 33 41 51 61 71 81 13 14 15 22 72 91 92 b1 b2 d1 f0 06 32 52 93 a1 c1 d2 34 42 53 e1 f1 23 62 82 43 a2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f5 ce 8a d0 da 65 ed 19 a7 1e 3a 76 d0 b7 55 6c 8c 56 55 01 a2 49 2d 24 92 7d 9a 7e 4e 87 d2 aa 03 3a 6a cc 95 7b fe 8e 6b fb 35 d7 42 a7 fd e4 69 95 24 73 f4 54 5f e8 93 4f aa 6c 67 e0 7f 03 40 c0 9d 0d a5 87 0a d3 56 5f e6 e6 bf b3 5b ab 41 e9 62 38 d3 36 5c ff 00 27 35 fd 9a 7a c2 87 07 91 ee ad 92 bf 77 23 dd e6 28 18 93 a1 74 b7 6f c9 9b 2f 1e 5f 47 35 fd 9a 06 84 d2 bb 8f fb da b2 f9 7f e6 e6 bf b3 4f e7 07 94 f7 ac 83 9f 9d 04 70 e8 4d Data Ascii: ?!13AQaq"r2R4BS#bC?e:vUlVUI-$}~N:j{k5Bi$sT_Olg@V_[Ab86\'5zw#(to/_G5OpM
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 6e 6b fb 35 20 a2 82 3f f9 09 a5 7f 8b 36 5f e6 e6 bf b3 47 e4 26 95 fe 2c d9 7f 9b 9a fe cd 48 28 a0 8f fe 42 69 5f e2 cd 97 f9 b9 af ec d1 f9 09 a5 7f 8b 36 5f e6 e6 bf b3 52 0a 28 23 ff 00 90 9a 57 f8 b3 65 fe 6e 6b fb 34 7e 42 69 5f e2 cd 97 f9 b9 af ec d4 82 8a 08 ff 00 e4 26 95 fe 2c d9 7f 9b 9a fe cd 1f 90 9a 57 f8 b3 65 fe 6e 6b fb 35 20 a2 82 3f f9 09 a5 7f 8b 36 5f e6 e6 bf b3 47 e4 26 95 fe 2c d9 7f 9b 9a fe cd 48 28 a0 8f fe 42 69 5f e2 cd 97 f9 b9 af ec d1 f9 09 a5 7f 8b 36 5f e6 e6 bf b3 52 0a 28 23 ff 00 90 9a 57 f8 b3 65 fe 6e 6b fb 34 7e 42 69 5f e2 cd 97 f9 b9 af ec d4 82 92 dc 26 a2 dd 11 c9 2e a1 6b 6d bc 6e 08 00 90 33 8c d0 33 ab 42 e9 50 92 7f 26 6c c7 8e c2 dc d1 ff 00 ab 4c 0c f4 e7 4f 5f 52 a9 13 6c 96 d8 f1 d4 b2 13 11 bb 7b 2d Data Ascii: nk5 ?6_G&,H(Bi_6_R(#Wenk4~Bi_&,Wenk5 ?6_G&,H(Bi_6_R(#Wenk4~Bi_&.kmn33BP&lLO_Rl{-
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 44 f2 7e 49 34 de bd 1d 6a 5a 7d a6 dd dd e6 b2 e9 24 fc f3 40 f5 19 01 b8 ed 25 07 21 28 00 1f 78 c5 71 76 e2 db 40 fe 66 4a c8 fe 0c 75 9f d9 5d e3 47 6e 2b 08 65 90 43 68 18 48 52 8a 88 1f 33 cd 75 a0 66 73 52 44 67 fe 12 d4 b8 e9 1f a4 e4 65 81 fa ab 68 d7 bb 4d d0 86 59 94 d3 84 28 10 85 82 82 48 39 18 04 0c f2 33 4e f4 d7 33 4e 5a e7 39 e2 49 86 82 b3 dd 49 25 04 fc f0 46 68 14 cb 86 26 94 21 e2 15 18 72 b6 8a 72 16 41 04 64 fb 81 1d bf 67 15 c9 eb 77 ad c8 2a 9a b0 f4 51 b7 c3 8f b7 09 04 79 ab f8 5c f6 f2 f8 67 9a 4c 9d 2f 6b 40 01 11 dc 48 1d b6 c8 70 7f d6 a7 46 18 44 56 52 d3 41 5b 13 db 72 ca 8f de 49 34 08 a4 5b 04 e5 3a 89 ce 97 21 ab 68 4c 74 fb 29 e3 1c 92 39 3c f9 67 14 a6 13 11 63 b0 94 40 43 48 64 64 00 d6 31 f8 57 7e 4f e8 e3 e6 69 33 Data Ascii: D~I4jZ}$@%!(xqv@fJu]Gn+eChHR3ufsRDgehMY(H93N3NZ9II%Fh&!rrAdgw*Qy\gL/k@HpFDVRA[rI4[:!hLt)9<gc@CHdd1W~Oi3
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: aa 69 aa f5 31 31 ff 00 b4 2d da 2a 91 5f a4 96 95 7c e1 8b a4 78 80 fe 93 b1 64 af 1f f3 5b ad e3 f5 df 47 2d 59 9d ae 82 52 7b a1 8b 43 ff 00 82 8b 5f b2 b8 f0 b6 ff 00 14 3a f9 4f 03 fe 6a 7d a8 f9 ae bc d1 55 0c 7e b8 f4 b6 3b e9 91 f9 44 b7 64 00 40 75 d8 72 d6 47 cb 2d e0 7d 94 bf fe e8 8e 9b 7f 18 ff 00 f7 7c af ff 00 67 4f 0b 6f f1 41 e5 3c 07 f9 a9 f6 a3 e6 b3 16 16 56 82 82 9d 9c ee 04 64 9f 76 39 ad c5 56 1f f7 44 74 db f8 c7 ff 00 bb e5 7f fb 3a 3f ee 88 e9 b7 f1 8f ff 00 77 ca ff 00 f6 74 f0 b6 ff 00 14 1e 53 c0 7f 9a 9f 6a 3e 6b 38 90 01 a8 ac bb e4 ab ac b5 c4 b0 2d 2d 30 d0 2a 7e 6a 93 94 a4 0e fb 41 ef ee ff 00 5c d5 7d a8 3d 20 74 3c e4 a2 14 1b f2 91 1d df dd df f5 29 03 8f e0 8f cd e7 9f 33 8a c3 fd 6e e9 b4 3b 14 98 76 ad 42 54 eb 8d Data Ascii: i11-_\|xd[G-YR{C_:Oj}U~;Dd@urG-}\|gOoA<Vdv9VDt:?wtSj>k8--0~jA\}= t<)3n;vBT
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: ef 38 f2 07 1e 79 ea bc d8 f7 8e a3 5e 1f b5 3a 99 8c b8 b6 50 85 33 ed 05 a9 2d 21 24 0c 77 f6 81 1c 66 a4 7d 76 81 3a 2d cf 4e 2e 78 52 87 d0 ed 32 a5 92 08 53 c8 52 bc 4f b7 da 4f df 53 db c7 e2 2c 61 b1 16 e9 aa 6a d5 98 88 ab 7e c9 99 8d fd db 16 5d d1 18 2c 66 3b 07 76 ba 22 8f 09 4c cd 54 46 c8 99 88 8a b7 6c e7 39 4f 39 cb b4 5a ae bd 59 d6 11 4d ca d3 26 73 f1 52 78 71 b5 33 1d 2a 23 be d1 ec ee f7 70 0f 3f 1a 76 d0 5d 63 be c3 d4 8d da 75 d4 80 b8 ae 2c b2 b7 1e 60 36 e4 75 80 40 ce d0 32 0a b0 0e 47 9e 73 c5 59 3d 1b b8 c0 7f a7 96 a4 44 71 b4 18 a8 58 90 82 e6 4b 6a de a2 4a bd d9 c9 57 3e 46 bc ff 00 d5 09 4c 6a 0e a4 5d 5c b1 b8 99 ad c8 75 a6 99 53 3c 87 16 1b 42 08 1e ff 00 68 11 9e d5 cd ff 00 0b 81 b1 67 15 6e f5 55 55 56 59 c4 ce 71 3b Data Ascii: 8y^:P3-!$wf}v:-N.xR2SROOS,aj~],f;v"LTFl9O9ZYM&sRxq3*#p?v]cu,`6u@2GsY=DqXKjJW>FLj]\uS<BhgnUUVYq;
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: a5 ef a5 20 e8 e5 ad 3a 67 44 c9 4f e5 e4 f6 d0 e8 70 b4 1c 4d b9 82 af dd 14 14 92 85 2d 5b 54 12 8e 71 f5 88 c6 d0 af 30 59 75 1f a5 bf 51 34 f3 7a fb 4e dc 75 05 c2 cd 85 a9 a7 61 bb 15 94 ba 10 76 2b 64 44 ed 2e 60 a4 8f 65 b3 92 0f 9e 6a 31 e9 d3 6d b8 41 f4 90 d4 92 2e 0d 2d 11 a7 c5 84 fc 15 28 e4 2d 91 19 b6 c9 1e e1 e2 36 e8 c7 bc 1f 7d 7d 17 e8 7e b3 d1 d3 7a 19 a5 af 3a 76 64 3b 76 9b 81 69 69 a7 cb ab f0 51 0d 6d 24 21 d4 38 57 8c 14 ad 2a ca 8f d6 fa c0 90 a0 48 79 6f d1 57 d3 27 55 ea 8d 79 0b 42 f5 69 d6 6e 6b ba ba a6 a1 5c fd 5d 11 dd 65 f0 92 52 d3 88 6d 21 2a 0a 29 da 0e 01 0a 23 39 07 8f 46 fa 58 6b ed 43 d3 4e 89 de 75 1e 89 b8 7d 17 79 8f 26 2a 1a 91 e0 36 f6 d0 b7 92 95 0d ae 25 49 39 04 f7 15 f3 ca eb 2a 0f 50 bd 30 1a 9d d2 70 5d Data Ascii: :gDOpM-[Tq0YuQ4zNuav+dD.`ej1mA.-(-6}}~z:vd;viiQm$!8WHyoW'UyBink\]eRm!)#9FXkCNu}y&6%I9P0p]
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 11 db dd 5b 7a 51 fa 51 f5 63 a7 3d 76 d5 7a 67 46 ea bf a3 6c 90 3d 53 d5 a3 7d 19 11 ed 9b e2 32 e2 bd a7 1a 52 8e 54 b5 1e 49 ef 8e d5 4f fa 13 90 9f 49 cd 0c 4f 61 eb ff 00 e8 12 28 f4 d8 50 57 a4 e6 b9 29 e4 1f 50 ff 00 40 8f 41 ea 7e b3 7a 5c bb a3 3a 1b a3 e1 59 6f be 2f 55 af ba 7e d3 3e 43 ed 45 6d 42 20 75 96 dd 71 e5 a4 a0 b4 0a fd a0 1b 03 20 2c 2b 00 6d cb a7 a2 05 ff 00 ae 3d 4d 75 ad 67 d4 5d 50 17 a1 54 db a2 14 61 6f 82 85 5c 5d 05 6d 1e 5b 6c 38 84 36 a4 93 dd 25 4a 48 03 23 35 e0 3e a1 e9 cd 43 a5 ee fa 6a 76 b3 6b e9 26 6e 76 2b 54 e8 0e ba 0a 5a 93 0f d5 1a 0d b5 94 90 70 84 24 32 ac 10 af 63 39 e4 1a fa df e8 ff 00 ae f4 be bd e9 2e 9e ba 68 68 ac 5a ad 6c 47 4c 55 db 5a 23 fb 85 d6 c6 14 c9 f3 f7 10 4f 2a 0a 0a fd 2a 0f 3e 7a 44 6a Data Ascii: [zQQc=vzgFl=S}2RTIOIOa(PW)P@A~z\:Yo/U~>CEmB uq ,+m=Mug]PTao\]m[l86%JH#5>Cjvk&nv+TZp$2c9.hhZlGLUZ#O**>zDj

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.4	49823	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	696	OUT	GET /file/uPQ5ind25iS73kme6wYzUIw_tJvT7exWmnuWZYHK1cp_1YCh0rRaPOrArn3HBpQ1pWFcVrbWmFnV4J3My4Fk-2aXdWP5T20Q8zVMUDDALJUelJBFFCfTc1syEChrXoLCqk8YxngD5JNjYRTvD9tcmIhIAlOJ_xBnEU_OLhUaz86mnvJws3L602OOtsJENHuXjjI46SQWNter7T4FgELHcCGaPiXzMFkZJDqRx4xBMSkDmLJn19G39GH_gQFci9BN6OwP5jazsqGnFdRrIXTrwmYFU-DbhCGS-ruojPASHQyw5CUrV8lJ-wv6xo5lfHaZCwo6XG5R8ih8Heb_xNU_bA.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:50 UTC	685	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 46811 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "fb7859b076ba9727248b29e8ac67c1fdb7006df9" Content-Type: image/jpeg Age: 820 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:50 UTC	705	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c2 00 11 08 01 ab 02 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 00 07 08 ff c4 00 1a 01 00 03 01 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 03 00 04 05 06 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 ef 3c 1f 78 fe 99 Data Ascii: JFIFHHCC"<x
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 7a 26 92 f7 bd ed bd e8 f0 d6 f5 63 6b 06 57 53 c7 07 41 13 68 1b 10 f9 6a b5 e1 94 a5 7d 3a 52 c3 9c 4a 22 d3 6f 54 fa 71 a2 5a 56 a7 9b da 58 14 f1 da c3 0c 25 0f ea 41 06 95 6d b3 1e a5 70 35 03 3b 34 09 f6 de f5 00 f9 bb 25 27 3d 54 cf 87 a6 69 33 45 dc 84 dc cf 1d f5 5c 9e fe 7f 9a 5b 70 1d 90 51 20 f4 2e 35 72 74 38 b6 06 d6 be 88 1d 40 92 8b cc e8 59 85 3b 3a df 3e e8 b9 5f a1 aa de 90 33 39 51 3d 3f 32 ee fe 57 df 1f a8 77 5f 3c e9 64 3a 53 f2 76 75 ea 81 ce f2 07 47 d6 be 65 be ad d9 d7 91 31 4e 95 6e 79 69 b7 61 6e 43 ce 3a b0 f3 90 0e c2 ab 54 38 c5 5a 77 c9 82 2d 67 05 f0 6d b2 5e 28 67 51 91 79 d9 c3 ad af cb 68 ad bd e2 fa 23 28 45 0a 30 2a f9 5a fe 81 1c 5b 78 5b 31 51 fb 02 af 70 cd 8b 14 bd 77 bd 11 b4 f8 65 c4 52 49 20 44 1d 46 66 07 69 Data Ascii: z&ckWSAhj}:RJ"oTqZVX%Amp5;4%'=Ti3E\[pQ .5rt8@Y;:>_39Q=?2Ww_<d:SvuGe1NnyianC:T8Zw-gm^(gQyh#(E0*Z[x[1QpweRI DFfi
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 96 58 84 c4 0a f4 34 8a cb 0b d8 37 04 b6 07 97 30 1a f8 9a cc 51 c1 4e a5 d7 3d 41 5a 40 76 ad 5f 10 e8 4e ce f9 23 81 7b 03 c3 33 e4 e7 03 d0 03 7c 6a 8a af ac 23 a7 45 4d 26 10 f4 78 37 1e c2 57 a3 83 b1 e2 5a d2 2d c3 5f be e2 6d d9 9e 4a 7b a6 ac d6 2a 94 b6 96 76 b4 b6 80 4d 6e 29 80 90 b1 2f aa 88 5e 8c 79 43 54 3b a5 89 a6 92 68 a2 f3 e3 c8 2e 01 a3 c4 61 76 d6 6c cb 6f b7 e5 3a 9a f1 7a e2 b5 23 37 ac 90 d7 8e be 1c d6 1f 6b c7 fc df b2 b0 ae 2f 27 d0 08 1b 15 99 62 56 28 7d 4f 09 81 c4 3a be 35 56 97 d7 80 d5 81 ac b4 30 76 ab d0 16 a7 3a cc da e4 c8 bc 86 84 29 23 31 75 04 43 44 58 a3 31 02 f2 09 8a 43 0b 54 37 7d 6b 86 e0 79 22 e7 d9 17 6b 3b a1 f5 7c d3 fa 3d d1 09 e6 ba 6c a0 dc 92 ba 59 b4 ec b7 a2 59 db 83 1a 05 3a b6 ab 3d ac b4 96 66 ca Data Ascii: X470QN=AZ@v_N#{3\|j#EM&x7WZ-_mJ{*vMn)/^yCT;h.avlo:z#7k/'bV(}O:5V0v:)#1uCDX1CT7}ky"k;\|=lYY:=f
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 7b 79 9f 1b d3 f1 d7 7a b5 e5 7d 16 30 e6 1b a5 3e 13 54 9e bc 63 80 2e f0 f1 a6 0d aa 34 23 8f a3 4e 88 79 19 ab a7 2a da 56 cd b5 d3 54 b8 9e a4 fa 3b 63 13 b2 3a 24 ce 26 0f 7a b7 e9 8c 7a 7c 74 7a de 1a 93 68 3a 3d 3e da a3 3c 6c b0 9c 17 3d 38 cb 74 9f 2c 7e 6e e8 9c 0f 45 d2 bd 53 19 ba 1d 34 28 8a 00 66 95 b8 30 3b 08 11 ae 7a a5 12 c6 d2 f4 2f c4 53 4b 0f cd f5 f4 49 9e c7 2d 58 49 94 0e f5 e9 5b 13 4a f3 b3 0c e7 f9 76 ad f2 6d 25 d5 8c ef 22 e8 0f 39 7a 8d 3c d5 eb d0 ca 14 ac 74 1a f6 79 fa 75 f3 df aa c4 e9 e2 78 6b e1 a4 93 e6 fa 7c 3e 2e 17 1e e4 15 af 4f 71 a3 f3 11 ce df 55 6b e3 e4 93 fd 99 bf 95 6c f0 5f be b7 3b a3 e5 f4 eb 1b 31 b5 76 3c 0f 29 66 eb 5a e2 c3 28 31 61 ec b6 3a 65 b4 e7 3e df ad c3 b1 6c e6 bb 20 c4 d6 d6 4f 44 c9 d5 8b Data Ascii: {yz}0>Tc.4#Ny*VT;c:$&zz\|tzh:=><l=8t,~nES4(f0;z/SKI-XI[Jvm%"9z<tyuxk\|>.OqUkl_;1v<)fZ(1a:e>l OD
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 24 33 42 25 ff da 00 08 01 01 00 01 05 02 dc dc dc dc d9 9b 33 66 65 8d b3 26 4c 8c 7d f6 1b 32 6c 39 0d 9e fb e7 b6 4c f6 43 14 5b 1d 91 a2 3c 9e 53 b5 b9 1b 11 52 99 f8 d6 14 66 b9 d3 18 ed 7c f4 ba 99 ab d7 22 2e 8b 2d cc e5 86 85 21 4c c3 99 d3 a8 95 53 8d 91 94 6c a3 26 98 39 50 da 8e 01 a1 a1 a9 cc ea 3a 3f 17 50 9d 35 cf 95 c3 b2 8e 6c 39 27 b3 61 b3 3f a6 4d 8c 91 64 9f 66 23 3f ae 4c 9b 1b 9b 76 7f a6 47 fa 65 91 35 35 30 34 46 23 5f a6 06 84 86 59 7a 82 bb 92 e6 39 91 4e 64 69 7b 55 6d 54 ab f9 c8 8d ca f4 ec 9c 5a a2 73 23 29 71 e7 bc 39 50 b3 86 e2 3e 3c 8f c5 9b 2b e0 4d 9c 6e 14 60 59 ad 4a ee a5 28 4b a7 f3 d7 22 37 55 91 b2 16 cb 8d cc 55 ce 42 e2 d8 ce ab 7c eb 97 03 a1 ba 60 f8 76 22 5c 39 49 72 38 12 e9 dc 98 c6 53 83 ae 43 84 8f 14 d9 Data Ascii: $3B%3fe&L}2l9LC[<SRf\|".-!LSl&9P:?P5l9'a?Mdf#?LvGe5504F#_Yz9Ndi{UmTZs#)q9P><+Mn`YJ(K"7UUB\|`v"\9Ir8SC
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 45 7f db 46 44 ba b6 09 75 59 e1 f5 4b 87 d4 2d 6a 36 59 22 ae 9d c8 91 1e 02 e1 d6 fe e1 db 3d 93 ed 34 60 4b 2e a8 e1 38 9f 67 c1 0e 71 37 43 66 54 8f 8a 30 21 b8 91 fe 4f e2 36 85 ee 38 63 f4 6b 13 5d 63 fd 37 91 b8 a3 73 c8 d0 dc 24 6a 84 d4 45 3c 8f 0c 8f b3 38 96 46 f2 2c 25 ca a1 72 21 c9 e3 f8 97 0a bf f1 e8 4a 24 f3 e6 94 a3 5a f2 c9 d9 0b bc 75 f2 3a bc e6 73 27 97 54 24 dd 31 f2 b9 ab f8 cd 73 2f be 7c ac c6 c8 37 5d fc 0b bc 25 fc da 5c ad be 53 29 71 82 fe 52 f5 61 e2 96 21 c5 bc 5c 3e 44 9c ba 65 f8 8f 07 11 7c 3a a1 2a 7a 3f 19 c3 fe 9f 8e 89 f0 21 17 5f 05 23 8d 23 95 4f 9a b9 c7 49 21 18 ed 8e d3 5d a9 87 b2 53 c1 2b 32 6b 29 3c 45 2d b0 27 09 1a fb fa 3e 48 52 f4 9f 67 22 5f 23 e8 d8 56 31 b5 32 30 c3 f7 85 f1 18 e3 01 c4 51 c9 1d 90 e0 Data Ascii: EFDuYK-j6Y"=4`K.8gq7CfT0!O68ck]c7s$jE<8F,%r!J$Zu:s'T$1s/\|7]%\S)qRa!\>De\|:*z?!_##OI!]S+2k)<E-'>HRg"_#V120Q
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 65 1e 8c 28 9e 44 65 1f 16 45 c4 d4 d4 c0 f6 32 36 d9 89 1a a4 4a b8 90 ab 2e c5 14 a3 85 14 f0 4a 3b 15 7f 19 47 b4 d2 67 f5 b1 29 16 4f 06 71 64 1f c3 27 2b ff 00 9f 23 f9 76 83 f7 28 e2 93 62 2f c9 67 31 78 ce 34 23 64 9f 12 04 f8 ba 9f 8f 21 42 68 f9 a2 6d b6 9f a5 26 2f a6 28 93 a5 c9 c7 8c c8 f1 d0 a2 a2 b5 c9 15 82 bf be 22 f8 12 42 42 46 a7 23 d2 99 91 fd b7 83 28 7f 50 79 1f a3 3e bd a1 0c 78 36 81 e4 4c 56 9f e4 ce 49 31 cc dd 9e 43 2d 8e 08 50 32 d0 e4 d9 a3 13 c1 84 cd 53 35 49 fa 6b e9 37 81 fb 30 bb 67 51 cf e5 6b 33 99 47 f8 e4 e4 7f f3 e4 3f 92 59 18 be e9 95 57 ab b8 8e 24 be f8 1c 77 23 9b 67 96 5c 7a d5 48 71 6d ac 24 9a 32 98 ea 4c f0 ac aa 91 a2 34 46 a8 d7 f4 42 28 f6 f8 eb 15 e0 92 12 12 ed c9 5e a4 fd b1 cb 06 4c e4 6c fa 13 33 81 Data Ascii: e(DeE26J.J;Gg)Oqd'+#v(b/g1x4#d!Bhm&/("BBF#(Py>x6LVI1C-P2S5Ik70gQk3G?YW$w#g\zHqm$2L4FB(^Ll3
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 66 70 7b 62 dc 87 ca 54 c6 a4 ae f1 eb 14 b6 de a9 11 84 1c 55 5a 8e 32 72 bb d4 9c 30 ff 00 1f 30 d5 e8 fd 38 e6 45 5c 6c 18 68 68 ca 44 14 b6 21 23 71 48 72 1c f0 72 e1 96 8f b3 1d b2 67 d4 99 33 07 d1 96 6c c5 ec 8c 48 23 7f 5f 62 30 45 89 9c 75 b4 92 f8 d5 21 76 6b b6 04 64 c8 d8 e4 39 8e 47 52 b9 b2 6d 42 bf cb e3 e9 3b 5c a3 47 36 ca 8e 3f 54 8c 8a b9 59 23 6e 4d cf b2 ee 0f 1b 90 5f ff 00 1e ae 67 fd 1d f4 b9 d7 3a c9 6a cd 20 c7 44 51 37 31 d6 d3 ae b4 37 97 f6 60 5e da 8e f1 ae bc 29 d3 19 12 8a 81 1f 85 5c 88 eb 05 1d dd 78 81 e6 c0 ef c9 e4 c9 5e 07 6a 44 5b 92 4d a3 76 29 0e 64 ac 2f 7b a8 f1 2e 99 0e 95 ca 90 ba 27 29 8b a0 72 18 bf e3 d6 1f f8 eb c7 fe 3a 4f fe 37 61 3f f8 f7 26 2e 5d 0b 98 95 9c 4b 69 7a 0a 06 04 8c 76 42 f7 da 27 02 9f 5f Data Ascii: fp{bTUZ2r008E\lhhD!#qHrrg3lH#_b0Eu!vkd9GRmB;\G6?TY#nM_g:j DQ717`^)\x^jD[Mv)d/{.')r:O7a?&.]KizvB'_
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: e5 c3 91 15 66 05 69 ba ee a4 6c 6e 63 d8 97 a8 cb 04 6d c0 ae 23 2f f5 b2 4b 2b 95 4f 82 fe f2 59 1f da 5e df a5 9f 72 17 a2 c1 cb 2f 04 eb f2 47 91 56 ae 22 64 99 37 ef 76 64 c9 b9 b6 4d 8d 8c 8c 79 ec bb 60 45 30 4d c2 5e b5 cc 93 71 71 b3 2b 9d 73 55 d7 1c 57 22 51 c9 65 24 aa 1d 43 81 a8 d1 8e d0 9c ab 6b a9 72 a2 71 ba ec 71 0e 6d 17 90 9e 44 60 c1 f4 32 08 c9 85 8f a3 7f 75 db ee 32 cf fa 9f 6e b1 1c 72 3b fd 76 44 bd 0b ee 6b 3d ac f4 97 6f ea ea fc 8a 51 d5 8f e9 fd 8d f6 c1 9c 1b 19 ec fd 0e 5d 92 17 6a a1 b3 8c 65 17 44 65 af cb 79 fd ca 52 47 21 b9 4f 04 8c 0e 23 a8 75 12 a4 74 92 a4 75 0e b3 53 53 51 45 e7 8d 67 36 b9 f1 fa 9c 64 46 4a 69 1a 9a a3 53 d9 12 5e d6 30 bf 89 45 cd b5 fe a6 75 af 7f a3 fa f7 aa fa 97 b3 e9 0f ea df 62 24 fe 2f e9 Data Ascii: filncm#/K+OY^r/GV"d7vdMy`E0M^qq+sUW"Qe$CkrqqmD`2u2nr;vDk=oQ]jeDeyRG!O#utuSSQEg6dFJiS^0Eub$/
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 6e a5 6a 8c 7a 8d 16 12 e3 d1 79 67 47 8b 2c e9 96 c0 97 1e 71 3d c4 f2 48 56 9b a6 67 f6 63 24 87 11 c0 70 1c 07 01 d6 3a 88 5b 6d 27 0f ab ca 0b fe ce 13 3c 33 bd d3 d2 66 ca ba 7d 75 13 e5 71 b8 a5 dd 5a 73 37 95 92 7f 5f d3 ed f4 4c 6f df f4 48 97 d3 19 fd 8b f8 b3 24 c9 7a 87 ff 00 97 f7 fd bf af ea 48 7f c9 10 f7 12 5f fc ff 00 a7 f7 fd 48 bb f8 2f b9 0d 13 48 7e ed 92 25 fc 67 fc 17 dd 67 2d 22 8e 4d d5 d9 c4 ba c9 a4 f2 3a e2 cb e8 ac b6 b8 a3 06 3b 65 89 b3 3f a3 18 c6 34 60 c0 c8 c5 37 5d 15 b2 ae 2d 27 1b 8b 4c 45 14 95 8d a5 cd e4 da e5 8c d5 0f e5 8f 5f ff c4 00 2b 11 00 02 02 02 01 04 01 05 00 01 05 01 00 00 00 00 00 01 02 11 03 12 10 13 20 21 31 04 22 30 32 41 51 61 14 23 40 42 71 81 ff da 00 08 01 03 01 01 3f 01 fb fe c8 e3 af b0 d9 28 57 Data Ascii: njzygG,q=HVgc$p:[m'<3f}uqZs7_LoH$zH_H/H~%gg-"M:;e?4`7]-'LE_+ !1"02AQa#@Bq?(W

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.4	49825	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	696	OUT	GET /file/uiPk3Z5ix6sgFrblrDtl45mDlgniH66ntxVBMte3HxcZ5SpLdIuud7S2vkgnyF343Sqy2_YNmNvuobjq3MZ9txmE1ATrRYNkCYRnlds8uTp-FeBCf_HLUp3uq2uV23I_spdjzyXYn0xlbO5jIidI1gArQadXXtB2wcvV615k9n07gC9_YNwmJZYJ4m8eMIIrvLWpuiNpzwACEK8K0f1g3H1oX3bRf3Z5WfRb4wySb4QeL6uWQOKkxZp4v0rp4eGJpR31QJqi7QIqZ9iCuxc7An3-U9t84qkxi1hDBOAHUxbfLtO8DezjrktvyMUA0M4A5BoSjekXVL9IW9pRRAkpZQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:50 UTC	675	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Fri, 20 Sep 2024 22:48:50 GMT Content-Type: image/jpeg Content-Length: 84856 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Cache-Control: public,max-age=7200 ETag: "0b7b37fd99a0678b99db4c7de67da384386142f0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:50 UTC	715	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 01 2b 01 2b 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c0 00 11 08 02 15 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 00 07 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 03 04 05 06 07 02 08 09 ff c4 00 45 10 00 01 03 03 03 02 04 04 03 06 05 03 03 03 04 03 01 02 03 04 00 05 11 06 12 21 31 41 07 13 51 61 14 22 71 81 32 91 a1 15 23 42 Data Ascii: JFIF++CC "E!1AQa"q2#B
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 3f af d6 ad 9a 8e 69 65 95 10 7b 1f eb 59 05 c6 61 75 f5 e4 e7 93 de 8d d3 dd c2 e8 1d 49 6b 0d 93 85 cc 2e 28 7d 6a e3 a6 e3 ef da 7d 70 7f 95 52 6d ac 19 0e 8c d6 a1 a7 e2 79 6d a7 d7 03 fa 51 e1 66 c7 65 96 20 be 52 55 c2 03 61 0d 81 4f f7 63 f2 a6 6c 7c a8 1c d2 85 cc d5 3b e5 5b ca 71 ba 8e 9b 79 9e f5 d2 5c f5 a5 74 c9 7a 1d 68 92 a0 6b ba 57 4e 42 e4 fd 68 75 a3 f5 a1 9a 74 90 a1 42 85 24 91 d1 0a 07 9e 94 3d e9 24 b9 53 41 47 23 82 78 a6 fe 42 d2 54 85 af 23 b7 d2 9d f4 e4 76 a6 52 9c 5a 96 39 1d 3b 54 32 0c 2b 50 91 7c 9b 28 f9 11 78 5a f0 48 e6 9b 44 d1 ab b9 36 a9 32 4a 90 d6 0e 06 3b 54 d0 92 0e d6 c3 59 f5 e6 a6 2f 3a 81 0d e9 f3 1e 13 7b 5e 28 29 20 f6 3b 6b 35 a8 c6 e7 b2 fb 70 b5 7a 74 ad 64 96 df 95 9e a7 45 c1 62 72 24 b4 b4 a9 4d a8 1c Data Ascii: ?ie{YauIk.(}j}pRmymQfe RUaOcl\|;[qy\tzhkWNBhutB$=$SAG#xBT#vRZ9;T2+P\|(xZHD62J;TY/:{^() ;k5pztdEbr$M
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 8b 35 4c c6 73 e5 e6 9d 05 e6 a3 9a c8 14 e9 0a e2 99 86 cb b7 0b a5 4f 34 d9 f4 80 33 4e 37 8c 53 59 0b 18 38 a2 70 bd 0c 9e 30 42 8b 96 01 a8 e5 b5 d6 9e c8 56 4d 36 3d 28 9b 66 b2 03 35 3d f2 9a 29 18 a3 08 02 94 74 63 9e 94 88 55 4e 67 b8 43 7c 0b 14 b2 06 7a 53 84 31 9a 49 91 b8 d4 93 6d 90 81 51 1a 8b 05 3b 29 b7 14 c5 e8 81 49 35 09 2a 29 46 73 56 a2 9e 39 a8 f9 8c 64 1e f5 d3 2a 2e 9e 4a 5b 0c 2a 93 ad f0 45 44 3f 10 6f 24 7d 6a 7e 5a 36 92 2a 3c 27 24 e4 51 16 bb 08 71 6e 6c 99 30 d9 49 c6 2a 72 2b 39 4f 34 c9 08 c1 a9 48 a7 1c 55 59 4a 23 03 71 94 b3 4d 28 1a 91 68 10 2b 96 90 0d 3b 4a 70 2a a1 00 ab a0 90 89 bc e7 9a 72 95 0e f4 80 3c d7 44 80 28 7c 8d f8 95 e8 dc 6c 94 5e 08 a8 b9 a9 1b 4e 0d 39 75 e0 90 79 ed 50 57 19 fb 01 e6 93 5b 94 ee 38 Data Ascii: 5LsO43N7SY8p0BVM6=(f5=)tcUNgC\|zS1ImQ;)I5)FsV9d.J[ED?o$}j~Z6<'$Qqnl0Ir+9O4HUYJ#qM(h+;Jpr<D(\|l^N9uyPW[8
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 4a 57 35 65 b2 5d 64 2d 94 bd 18 a8 3f 1f 0a 5e 09 e5 23 d6 86 b3 da e0 fb 7f 8b 07 cf f8 43 25 d3 dc c7 7c 45 7a 24 a0 11 90 78 34 a3 27 6a 80 cf 5a 81 d2 97 73 78 b6 a1 e2 36 9c 00 a1 9c f3 81 53 b8 c1 ad 08 9d 95 71 89 18 70 54 6c 8b 66 14 81 1b 93 5c 14 e2 93 6d d2 06 0d 2b bc 11 52 c0 2c 57 72 32 e1 24 b1 4c 9f 4e 07 14 f5 c5 03 4d 5c e4 56 86 17 61 04 a8 65 d4 6a ba 9a 77 19 dc 70 48 a4 5d 46 0f 1c d7 08 3b 15 9a b7 2c 62 46 a1 2d 71 8d ca 65 2b e2 81 55 35 43 99 02 ba df 40 fd d6 c5 15 13 5c 2e d6 aa 61 2d 01 c4 e7 d2 9c a9 59 a4 56 73 44 20 8f 69 55 65 7e e1 65 01 25 9c 9e 2a 35 e8 bb 86 40 e9 56 27 5b c9 39 a6 c5 8e 68 b0 38 43 6f 95 06 db 3d 42 ba 0a 02 38 49 ce 2a 61 51 87 a5 33 90 0b 62 85 d4 c7 7e 11 ba 49 ac 2c 57 08 50 48 c7 a5 27 21 63 6f Data Ascii: JW5e]d-?^#C%\|Ez$x4'jZsx6SqpTlf\m+R,Wr2$LNM\VaejwpH]F;,bF-qe+U5C@\.a-YVsD iUe~e%5@V'[9h8Co=B8IaQ3b~I,WPH'!co
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: d3 51 fe 55 a1 20 64 8e bc 55 43 48 6a 88 ad 4a 79 fb ab 88 69 c5 38 19 6d 2a 38 ee 31 5a c3 4b 44 84 36 a0 72 09 04 60 d1 cd 3a 9e 90 d3 97 46 2e 0f f7 e4 85 ea 75 95 7e f0 d0 e3 c0 5e 7d f1 6d 99 68 8d 14 2d 2a 29 6b e5 c6 0f 6c d5 a3 c0 80 a9 8d 48 4a 54 52 a4 10 70 0f fe 9a d2 7c 44 b1 c5 b8 69 b7 54 a4 02 e2 1a 56 06 3a 9d a6 b0 bf 0a 6f ce d8 35 49 8a 9e 03 84 0e 4e 3f 8c 56 2e b1 ac a5 d5 23 92 31 76 e4 5b d5 68 a3 6c 95 34 b6 94 d8 f3 75 ea 29 24 b2 de 5f 4e d5 01 d4 0e 0d 43 1b 8b 5b 5c 71 64 6d 42 73 4f 6f fa aa 2b 76 e6 94 d2 3c e5 b8 30 42 79 c7 15 4c 5c 57 67 c2 7d 6a 74 b6 87 01 1b 40 e7 a5 68 84 de 03 6f 1f d1 0a 75 31 91 ff 00 17 1d d5 73 57 6f d4 6b 6c 32 b0 98 fe 66 0a c7 20 75 ac f3 5b 69 15 da 1a 8e 88 bf bf f8 82 12 08 1c 73 9e 6b 4a Data Ascii: QU dUCHjJyi8m81ZKD6r`:F.u~^}mh-)klHJTRp\|DiTV:o5IN?V.#1v[hl4u)$_NC[\qdmBsOo+v<0ByL\Wg}jt@hou1sWokl2f u[iskJ
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 16 90 97 08 1c 73 57 cb 93 79 04 55 2a 7b 7b 1d 26 b4 d4 8f dc db 2c 9d 7c 7b 1d b9 2a c3 9b 31 9a 7a 1d dc 38 a8 66 dc cf 07 d2 9e 34 f0 02 ad 38 5b 95 55 87 78 c2 ee 4b 9b 52 72 6a a9 79 b8 86 90 a3 91 d0 d4 dd c6 48 4a 49 26 b3 8d 45 70 04 90 0f af 7f ad 42 e6 df 2a d3 1d 65 03 79 bb 15 a8 ff 00 7a ab b8 f2 df 74 01 dc d3 b9 8a 2e 2b 3d e9 6b 64 02 eb a0 e3 b8 a0 f2 4b f1 59 5f 0c 00 5c a9 dd 39 67 f3 56 92 a1 e9 db e9 5a 1c 6b 3a 50 df 03 18 f6 a8 fb 04 10 d2 53 9f 41 db e9 57 34 20 6c 1c 76 a9 03 77 0b 28 49 b6 54 6c 68 41 27 81 52 8d 31 8e d4 a3 2d 84 9e 07 15 6b b1 e9 f3 35 a5 3a ff 00 ee da 03 3b 88 eb ed 49 cd 64 4d bb 97 0d 0e 99 fb 5a ab 8c c3 72 42 5c f2 93 bb cb 4e e3 81 da 9e a7 4c 4b 54 14 cb 00 8c 9f c3 8e 71 8c e6 af 30 a2 5a b4 d0 49 9c Data Ascii: sWyU{{&,\|{1z8f48[UxKRrjyHJI&EpB*eyzt.+=kdKY_\9gVZk:PSAW4 lvw(ITlhA'R1-k5:;IdMZrB\NLKTq0ZI
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 65 28 75 c3 9e 51 8f 7a cc 26 6a 29 da 65 4a 7e 2e f4 b6 a2 7a 12 01 1e 95 77 b2 59 53 2d e0 db 68 c0 dd 82 a2 2a 03 c6 24 32 db 50 2d 56 f0 95 3c ea c2 49 03 9e e2 bc ca 7d 42 a7 5b a8 33 3c 00 c6 f6 c7 df 95 72 9e 20 de 72 a2 74 9e b0 b8 de 6e 0e 96 da 25 4a 39 df cf 03 23 fb d6 b1 0a d1 22 63 21 6f c9 3b b1 c8 4d 47 f8 73 a0 d3 a5 e2 32 26 23 79 90 94 a8 a8 8e 84 81 56 6b 94 71 16 6a 03 0b 2d 1c f4 3c 0e b4 3e 9a 28 df 23 a7 8a 30 fd 86 db 0d f3 e6 a6 94 83 81 84 ea dd 64 62 1b 5b 97 fb c5 0e a4 f3 5e 77 ff 00 10 6a 02 f9 0c 23 09 41 47 20 71 93 b9 5c d6 d7 ac ef 97 6b 6d 9f 6d ad 94 19 8e 02 96 c9 07 04 e0 e3 a7 bd 79 fd 7e 1b 6b 2d 6b a8 11 2b 50 3f 82 48 19 28 38 48 2a ce 00 fb d6 d0 6b fa 74 f4 46 33 18 89 e3 16 b0 1f 45 5d 90 39 8e dc e7 5c 2b 9f Data Ascii: e(uQz&j)eJ~.zwYS-h$2P-V<I}B[3<r rtn%J9#"c!o;MGs2&#yVkqj-<>(#0db[^wj#AG q\kmmy~k-k+P?H(8HktF3E]9\+
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 50 3c f1 91 ff 00 05 4e 4e 96 e5 b5 2d a1 dc a9 04 e3 02 97 7e f6 cc f8 a1 bb 89 65 b6 c0 09 0e 2c 00 52 3a 75 35 94 a9 74 86 73 8d a4 77 ea b5 10 11 ee e0 5e e0 a5 75 15 9d 0e da da ba 3b 82 97 1d c9 4f d4 6e aa 54 a9 11 75 07 c3 a1 0d 82 db 24 25 3c 74 3e d5 70 9d 3c 35 6a 45 ad e7 50 a6 92 e8 2d b9 bb 82 08 c0 c5 21 67 b2 07 60 26 40 6c 36 cb 07 00 81 f8 cd 43 55 04 d5 95 cd 31 73 26 0f c8 04 d4 d5 2c d3 e1 37 be d6 5c 85 61 f0 cb 6e 8e 94 62 29 c7 1f 6a 69 0a cb 8a c9 4a 89 1c 0f 6e 2b 48 be 47 4b 0f 2e ec c2 12 ea 9b 64 a7 69 19 c6 32 73 59 4a 21 2a 64 96 9c 53 85 b4 c6 c3 b9 07 a9 07 a5 59 2f 5a dd d9 d0 3e 15 86 7c 92 46 d5 af 77 51 8c 1a d2 d0 d0 3c ca ea 76 0b b2 32 05 fa 5e d7 23 e4 81 57 ea d1 c9 18 a8 93 e1 73 c1 c7 5e c3 ea b9 9d ab d3 7c 0d Data Ascii: P<NN-~e,R:u5tsw^u;OnTu$%<t>p<5jEP-!g`&@l6CU1s&,7\anb)jiJn+HGK.di2sYJ!*dSY/Z>\|FwQ<v2^#Ws^\|
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 2d b8 96 c8 29 38 3d 8d 54 bc 2f f1 35 a2 cb b6 ab e2 db 6d c6 c7 c8 b5 2b 1b b0 00 ef 52 7a fe ff 00 6d 86 d3 53 6d d3 1b 2a 6d 5b ca 50 b1 c8 e4 e2 b0 1a 6e a9 a9 e8 f3 47 17 8a 5c ce 0b 4e 6c 3c 95 c7 32 9e 73 d3 3d 56 5b a6 7c 26 9c f6 ad 5d d9 32 57 0a 3b 0e 71 b4 11 e6 0d f9 c1 f6 a9 cf 14 7c 4b 67 48 45 16 db 41 43 d3 dc 49 4a 96 55 c3 7c 11 9f cc 55 b6 fd 7b 99 77 d1 8d 3d a6 36 a1 e9 51 f2 92 0f e1 25 1e de 99 15 e4 ad 49 a3 2e f1 5d 53 d7 e9 3b 14 e2 8a 96 b7 14 72 79 39 fe b5 a2 96 96 b3 5a d4 1c ea d7 5a 26 db 6b 3b f9 9b 24 c8 84 7f 0b 8a e2 d0 e2 e4 5e 17 2d d5 aa 54 97 dd dc b3 9c 9c 93 9f e7 5e 9c d2 17 03 6a b5 20 38 85 2d 6a 00 f1 c6 38 1c 55 03 c2 2d 1f 61 30 9b 94 c4 84 ca 74 ed ca b8 e0 e0 1a dd e3 59 62 25 b1 b4 67 81 5a d8 f4 1d 51 Data Ascii: -)8=T/5m+RzmSm*m[PnG\Nl<2s=V[\|&]2W;q\|KgHEACIJU\|U{w=6Q%I.]S;ry9ZZ&k;$^-T^j 8-j8U-a0tYb%gZQ
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 80 23 44 43 60 e1 6e fc ea f6 18 e9 50 af af 9f 6a 91 9d bc c8 75 28 49 51 4a 88 a8 57 96 a0 a2 14 30 7d eb d5 f4 aa 41 45 48 c8 41 b9 b5 c9 ea 49 c9 27 d4 95 e7 7a 8d 41 a8 a9 73 ed 60 30 07 60 30 02 25 1d c7 00 67 35 21 6d b5 39 22 62 18 75 0a 68 b8 3e 5d c9 3d 7b 51 d8 8a 19 96 89 52 99 53 ac 35 f3 0c 74 2a 18 38 35 79 3a bc ad 96 df 30 51 e7 b8 42 5b 03 8f 97 d2 b9 ae ac 34 e2 c0 7c d5 fd 2b 4d f7 c7 03 bb 3d 92 17 7d 1f 29 bb 14 34 a1 05 c9 0c 7c aa c0 ce 53 8a af 2e d2 f4 16 1b 0e 32 a0 fb 87 71 e3 a2 7b 0a d5 1a b8 2b f6 6b 2f 3a 0b 4f 3e 90 42 56 7b 91 db d6 a3 6e f7 29 b1 5c 6d 6f 40 0f 46 4e 14 a5 20 f2 47 e5 42 a9 2b a4 36 8d a0 1e bc d9 15 ad d3 a2 17 95 ce 23 a7 7f c9 67 05 a5 a4 94 94 90 47 51 e9 5c 90 47 5e 0d 6a fa 7d bb 6c c8 f2 57 14 a1 Data Ascii: #DC`nPju(IQJW0}AEHAI'zAs`0`0%g5!m9"buh>]={QRS5t*85y:0QB[4\|+M=})4\|S.2q{+k/:O>BV{n)\mo@FN GB+6#gGQ\G^j}lW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.4	49827	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	696	OUT	GET /file/QK60TZJk0YMhme0DiIpkWeQhvy1qOXmF5dbvK-dRuAYBD-85HXLtrMXsPu4HmKh3drLvuHgWdZomPfsZCRxMB-j4Aie0-3hgh8wn1ht25lAK6xDmygEyaA7eqXQs9tXPc5bxVoSG3hPZVJ9u4rdP3PR1TexQuZVjdFpnYQk5HSQnEO5lY0kVO64nK4OwqB4kUS9kFIB-NoxwdLUX1_7AuL2o0A7UwKrVsJaMbQOmOPvaUjda0-c6GFEvKsGNUQXtHLVXfi3w9oOzo1zBxsD03RbNSNoQibtmrtoDtS8kcE6gH2P5epI3UPHrpW91LMasc6HKOih3Ya3OpoNG8DZEtQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:50 UTC	686	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 106189 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "eb29ccddb807dea300a25f2b549e58f7aeab2f88" Content-Type: image/jpeg Age: 820 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:50 UTC	704	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 2f c7 2f fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f Data Ascii: //050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIO
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 01 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 04 02 03 05 06 07 08 ff c4 00 46 11 00 02 01 03 00 06 06 08 04 04 04 05 04 03 01 00 00 01 02 03 04 11 05 12 21 31 41 51 13 14 61 71 81 91 06 22 32 52 a1 b1 c1 d1 15 33 e1 f0 16 42 53 72 23 34 62 f1 35 82 92 a2 c2 07 24 25 e2 43 73 d2 b2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 df e8 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 Data Ascii: F!1AQaq"2R3BSr#4b5$%Cs?B!!@B!!@B!!@B!!@B!!@B!!@B!!@B!!@B!!@B!!@B!!
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 9f cd 11 49 b4 a4 07 56 d3 f9 a2 32 d4 21 dc b5 c0 b8 be 9c 76 57 e3 85 7e a3 31 fe 08 7d 38 ec af c7 0a fd 46 63 fc 11 6e 1b 46 43 b9 b4 fe 68 88 f7 a5 21 f8 34 7e 68 86 a1 1d 69 f2 2e 3f a7 25 95 f8 e1 5f a9 4c 7f 0e 1f 4e 4b 2b f1 c2 bf 52 98 ff 00 04 5b 86 d2 91 fc 1a 3f 34 44 7b d2 90 fc 1a 3f 34 44 f4 64 75 b7 c8 b9 3e 9c 96 57 e3 85 7e a3 31 fc 38 7d 39 2c af c7 0a fd 46 63 f8 71 6d 1b 4a 43 bd b4 fe 68 8a 4d a7 23 dc da 7f 34 44 f4 68 8e b6 f9 17 37 d3 96 c9 fc 72 af d4 66 3f 87 0f a7 2d 93 f8 e5 5f a8 cc 7f 0e 2d 8f 7a 72 3d ed a7 f3 44 50 6d 39 0f c1 a7 f3 44 3a 24 47 5c 97 22 ea fa 73 59 3f 8e 55 fa 8c c7 f8 21 f4 e7 b2 7f 1c ab f5 19 8f f0 45 a9 ef 4e 47 bd b4 fe 68 88 36 9c 81 ff 00 46 9f cd 11 3d 12 31 77 b2 e4 5d 7f 4e 7b 27 f1 ca bf 52 98 Data Ascii: IV2!vW~1}8FcnFCh!4~hi.?%_LNK+R[?4D{?4Ddu>W~18}9,FcqmJChM#4Dh7rf?-_-zr=DPm9D:$G\"sY?U!ENGh6F=1w]N{'R
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 98 8d cf 7c 30 60 08 26 04 43 11 38 f1 81 93 58 20 43 11 38 f4 c4 9e 9b 40 8c 94 e6 1d 61 8c 44 e3 10 20 a4 88 44 98 11 93 02 72 44 21 8f 4c 71 a6 e7 e5 24 02 7c b6 69 89 6e 6e 9d ab 81 19 f9 e0 0e 44 46 31 d6 2d 49 cd 4f b2 29 e8 71 73 97 7d 05 a0 df c3 06 a4 d7 30 f4 60 2b 31 6d b9 c4 6e 97 34 ae 55 de 12 24 8f bd 6d d5 0f 9c 27 11 29 a3 2d 59 3e 06 4f 8a 55 18 75 ce 2a 74 a1 0b 29 17 32 d5 83 8c a6 9b 32 47 ee e3 93 2d c4 d6 95 ce 25 4a 6e ec 69 bc 1c 10 ec 9c c3 67 e4 e6 46 f1 96 57 32 1d 39 e3 73 32 c7 48 83 16 25 2b 5b 34 ee b5 cc 24 2f 2a 3e 52 32 43 f3 21 83 8f ff 00 29 cb 98 b9 e4 2e 5a 2d 59 29 55 2e b1 4f 9e 0b 38 49 97 9a 43 80 9f 46 09 89 ca 35 b8 c9 6f 47 69 0c 9c 44 62 2a c6 46 22 4c 30 50 ae b1 49 1e 11 59 1e 88 a6 24 86 52 7a 45 18 8a c8 Data Ascii: \|0`&C8X C8@aD DrD!Lq$\|innDF1-IO)qs}0`+1mn4U$m')-Y>OUut)22G-%JnigFW29s2H%+[4$/>R2C!).Z-Y)U.O8ICF5oGiDb*F"L0PIY$RzE
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 63 47 e1 8b 58 6f 07 5c 79 db 6a 79 82 80 01 76 aa fa 58 27 7e ee d0 f3 1f 1e 91 ea 83 6d 21 a4 25 0d 24 21 09 18 4a 52 30 00 f0 c4 57 88 c4 dc b0 b7 23 ce c9 1e 02 35 06 61 96 97 39 5b b7 24 d6 a1 95 35 db bc b5 23 d1 90 d6 3e 63 1d e3 1f 43 ee e0 53 60 cc de 94 b6 dc ef 08 92 71 63 e7 24 7b 23 7d e1 02 72 cd 0d ff 00 f6 7c d6 7f f5 e2 43 ff 00 d1 cb ff 00 1c 7c dc fa 1f 75 e0 85 16 6f 5a 62 d5 8d 82 a4 9c 48 3e b3 cc 63 7d a1 01 96 79 df 37 c0 3d fc ca 1c 54 a5 7a dd 99 29 49 29 49 75 e4 15 1f 0f e8 f0 3e 78 c7 57 07 0a fa b5 6a f6 2f 2e d7 98 9d ca cf 2a e9 8e a6 64 a4 8c 6e 42 0f 30 f4 1c 77 47 aa b0 80 cb 3c 87 95 bd f5 47 4e 92 89 61 53 b9 28 4d a4 12 99 79 a0 e2 10 33 b1 3c 8e 0e 5e be 88 ca d6 37 19 97 25 20 f6 17 bd 3d 9b 81 82 76 79 9e 59 77 92 Data Ascii: cGXo\yjyvX'~m!%$!JR0W#5a9[$5#>cCS`qc${#}r\|C\|uoZbH>c}y7=Tz)I)Iu>xWj/.*dnB0wG<GNaS(My3<^7% =vyYw
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 37 35 54 9b 98 44 87 39 76 a5 54 52 79 d2 c0 3b a5 b4 83 f7 47 b8 7a 09 31 e9 4d 87 a7 f4 0d 37 b7 e5 e8 b6 a5 3d 99 29 66 92 3b 47 12 80 1c 7d 7d ee 38 af ba 51 fd 9d 06 00 02 35 37 93 a9 4e 94 69 ae d3 5f f4 8f 82 9b 6a d1 5b 15 3b f9 f1 73 d5 00 4a bc 94 b7 cb 2a d2 81 07 a7 55 9c 8e a7 03 bb 18 eb b4 52 b2 92 f2 32 ed cb c9 30 d4 b4 bb 63 08 69 a4 04 25 23 c0 01 b0 8f b4 22 0d 82 10 84 00 84 21 00 21 08 40 08 64 1e 91 d3 dd 17 45 26 cc b7 ea 35 eb 96 71 ba 7d 2a 9e c9 76 65 f7 0e 02 52 36 f9 49 24 00 3a 92 40 1d 63 53 b8 4b d5 67 ea da 93 7a d3 ae d9 a2 8a a5 e0 a4 d7 a9 cc ad c2 42 48 e7 0e 4b a4 a8 e4 f2 34 19 20 78 25 5d 00 8d 72 a9 18 c9 45 bd af 77 86 f3 5c aa 42 33 8c 1b db 2c e3 c3 6b 37 26 10 84 6c 36 08 42 10 02 35 2b 8b 6d 31 d3 07 a9 9e ee Data Ascii: 75TD9vTRy;Gz1M7=)f;G}}8Q57Ni_j[;sJUR20ci%#"!!@dE&5q}veR6I$:@cSKgzBHK4 x%]rEw\B3,k7&l6B5+m1
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 39 c0 f5 e4 27 d4 4c 5e b7 a7 1d 47 56 7b 91 eb 74 35 8d ba b7 ab a4 6e d6 61 4f 74 7d e9 76 f6 65 a5 db 9e 4b 6f 16 a9 a8 fa 59 a6 f3 6a 90 a3 d2 18 9a 9a 6b cc 74 d3 e5 10 be 53 e0 a7 14 47 31 f5 13 1f 5a 2e a1 69 86 a6 cd 99 0a a5 26 5a 5a 6d 43 95 b1 52 96 6d 05 64 f7 21 c0 4e ff 00 28 3e 11 a8 bd 3a 6d 01 b1 18 87 5b 96 77 2c 72 0b d2 6b 95 3c 74 50 e8 f3 ec ea ac 63 bf 19 f1 33 ee ae 68 18 b7 e5 26 6b d6 6f 68 ed 3d a0 0b d2 18 52 d6 d8 e8 54 95 6e 4a 47 78 3d 37 de 30 18 4e 48 19 ea 71 98 dc ed 00 bc a6 2e eb 24 b5 55 98 5c d5 42 9a f1 61 c7 1c 56 54 b4 11 94 13 e3 b6 46 7b f9 63 5a 75 7a d4 16 6d f9 52 92 61 21 12 8e ac 4d 4b 24 0d 92 da c9 20 0f 51 04 7c 90 b8 a7 1d 55 56 1b 99 9e 9b d1 f6 ea de 9e 91 b3 58 85 4d eb dd 7f ee 9a c7 35 b3 79 77 a7 Data Ascii: 9'L^GV{t5naOt}veKoYjktSG1Z.i&ZZmCRmd!N(>:m[w,rk<tPc3h&koh=RTnJGx=70NHq.$U\BaVTF{cZuzmRa!MK$ Q\|UVXM5yw
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 13 4c a3 9d d6 65 a6 d0 ea d0 9c e3 2a 4a 49 20 67 6d e3 cb 8a 56 99 3b a9 b7 9d 36 d1 b6 e4 bc b6 b1 3f cc f4 d4 f4 db 8b 98 14 f9 60 47 3b ee 73 28 93 d4 04 82 7c e5 60 6f d0 fa 49 a5 da 49 6a 68 fd be 8a 35 91 4c 6e 4d b5 04 99 a9 95 0e 67 e6 d6 06 39 dd 5f 55 1d ce 07 41 93 80 04 74 ad 2e 55 dd 3e 91 45 a4 f7 67 89 d6 b1 bc 57 d4 7a 68 c1 c6 2f 76 71 b7 b4 be 61 08 45 c2 f8 84 21 00 21 08 40 08 42 10 02 10 84 00 84 21 00 21 08 40 0c 46 0b d7 7e 1a 2d ed 5e a7 b9 35 4e 66 56 89 75 24 f3 22 a2 86 f9 43 dd 72 97 82 7e 10 39 cf 36 0a b6 eb 88 ce 90 80 3c 84 a7 d4 6f 1d 03 bf dc 41 4c c5 36 a7 20 f9 44 c4 b3 9c c1 a9 a6 c1 dc 11 f7 48 56 06 0f a8 8d c6 de 82 69 9e a2 d3 35 3a d6 95 ad d2 79 59 71 63 96 6a 57 b4 0b 5c bb 9d e8 51 db 3e 83 81 91 e1 d2 38 dc Data Ascii: Le*JI gmV;6?`G;s(\|`oIIjh5LnMg9_UAt.U>EgWzh/vqaE!!@B!!@F~-^5NfVu$"Cr~96<oAL6 DHVi5:yYqcjW\Q>8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.4	49821	5.255.255.77	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	12396	OUT	GET /ads/adfox/332443/getBulk/v2?pr=2302063733&pr1=3849475745&dl=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru&prr=&extid_loader=&extid_tag_loader=xn--r1a.website&fa=&date=2024-09-20T18%3A48%3A47.259-04%3A00&pd=20&pw=5&pv=18&pdw=1280&pdh=1024&ylv=0.1117086&ybv=0.1117086&ytt=509073883660293&is-turbo=0&skip-token=&ad-session-id=8249541726872527269&layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A907%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A1.35%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1278%2C%22h%22%3A98%2C%22width%22%3A1278%2C%22height%22%3A98%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A1%2C%22top%22%3A9422%2C%22req_no%22%3A0%2C%22ad_no%22%3A0%7D&pcode-version=1117086&yaru=true&p1=ddhej&p2=iqvg&slotNumber=1&bids=W3siYmlkZGVyTmFtZSI6ImJldHdlZW5kaWdpdGFsIiwiY2FtcGFpZ25faWQiOjEzNjYwNzQsInJlc3BvbnNlX3RpbWUiOjE1MTUsImVycm9yIjp7ImNvZGUiOjN9LCJwbGFjZW1lbnRfaWQiOiI0NzgwMDcxIn0seyJiaWRkZXJOYW1lIjoib3RtIiwiY2FtcGFpZ25faWQiOjE1MzYxNDMsInJlc3BvbnNlX3RpbWUiOjE1MTUsImVycm9yIjp7ImNvZGUiO [TRUNCATED] Host: yandex.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=GmNVkS+1q5EG+QZWaZequSAdEsZAYIQJqYkSXqpBiBW8RHxpVAeNYZqWeWLxv59vOg/zx7VfGq3GoEcsNjaaQUQpdjA=; yandexuid=1141320511726872524; yashr=6680397161726872524; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYMz3t7cGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=; receive-cookie-deprecation=1
2024-09-20 22:48:50 UTC	1079	IN	HTTP/1.1 200 Ok Accept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT Access-Control-Allow-Origin: * Connection: Close NEL: {"report_to": "network-errors", "max_age": 100, "success_fraction": 0.001, "failure_fraction": 0.1} Report-To: { "group": "network-errors", "max_age": 100, "endpoints": [{"url": "https://dr.yandex.net/nel", "priority": 1}, {"url": "https://dr2.yandex.net/nel", "priority": 2}]} Transfer-Encoding: chunked X-Content-Type-Options: nosniff X-Yandex-Req-Id: 1726872530677984-10210254189520863467-balancer-l7leveler-kubr-yp-vla-228-BAL cache-control: private, no-cache, no-store, must-revalidate, max-age=0 content-type: application/json date: Fri, 20 Sep 2024 22:48:50 GMT expires: Fri, 20 Sep 2024 22:48:50 GMT last-modified: Fri, 20 Sep 2024 22:48:50 GMT pragma: no-cache timing-allow-origin: * x-xss-protection: 1; mode=block
2024-09-20 22:48:50 UTC	2360	IN	Data Raw: 39 33 31 0d 0a 7b 22 6a 73 6f 6e 61 70 69 22 3a 7b 22 76 65 72 73 69 6f 6e 22 3a 22 31 2e 30 22 2c 22 6d 65 74 61 22 3a 7b 22 70 72 6f 74 6f 63 6f 6c 5f 76 65 72 73 69 6f 6e 22 3a 22 32 2e 30 22 7d 7d 2c 22 6d 65 74 61 22 3a 7b 22 73 65 73 73 69 6f 6e 5f 69 64 22 3a 22 32 33 30 32 30 36 33 37 33 33 22 2c 22 72 65 71 75 65 73 74 5f 69 64 22 3a 22 31 22 7d 2c 22 64 61 74 61 22 3a 5b 7b 22 69 64 22 3a 22 33 38 34 39 34 37 35 37 34 35 22 2c 22 74 79 70 65 22 3a 22 62 61 6e 6e 65 72 2e 74 72 61 6e 73 66 65 72 22 2c 22 61 74 74 72 69 62 75 74 65 73 22 3a 7b 22 62 61 6e 6e 65 72 49 64 22 3a 22 31 32 36 34 35 34 39 37 22 2c 22 63 61 6d 70 61 69 67 6e 49 64 22 3a 22 33 31 33 31 39 36 37 22 2c 22 70 6c 61 63 65 49 64 22 3a 22 31 34 32 38 35 30 31 22 2c 22 65 76 65 Data Ascii: 931{"jsonapi":{"version":"1.0","meta":{"protocol_version":"2.0"}},"meta":{"session_id":"2302063733","request_id":"1"},"data":[{"id":"3849475745","type":"banner.transfer","attributes":{"bannerId":"12645497","campaignId":"3131967","placeId":"1428501","eve
2024-09-20 22:48:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.4	49832	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	696	OUT	GET /file/cgF49kKyIze3mCwToG0WWiz2_xQnBNuWR_rlBEEue-BbbFKp-D16ZJxo1gXjON9HRn26_5OxvuQ0WFHhgFELWpAcxOvTxjA1zbE0-2qIM4vxV7olCGiWbKtJ-RUiihXZS4WaX5t6YPs0IXwAkKLIQmwcg6JS9eLoznoFv1yiJD-T55rZblWRR7qJjs7l6ao5Ed-Mxx2FKa2UkrV0NmIno4sICuU56SIoF7acrMzRXeHiDhMUbYcalAGL80oBQDK_3kxaSwVb103nBTxKDGitTID0G1Qdu4-ny0bZooQZhTZroc1RNXyBBQ_G7l6RhN7iTi03qQqIooeMOPvON8UAMw.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:50 UTC	684	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 212621 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:48:49 GMT Cache-Control: public,max-age=7200 ETag: "a0e65a4ec16c6db7d65dd2338f66f6190e07aee9" Content-Type: image/jpeg Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:50 UTC	706	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff db 00 43 00 04 03 03 04 03 03 04 04 03 04 05 04 04 05 06 0a 07 06 06 06 06 0d 09 0a 08 0a 0f 0d 10 10 0f 0d 0f 0e 11 13 18 14 11 12 17 12 0e 0f 15 1c 15 17 19 19 1b 1b 1b 10 14 1d 1f 1d 1a 1f 18 1a 1b 1a ff db 00 43 01 04 05 05 06 05 06 0c 07 07 0c 1a 11 0f 11 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a 1a ff c0 00 11 08 03 20 03 20 03 01 22 00 02 11 01 03 11 01 ff c4 00 1d 00 00 01 04 03 01 01 00 00 00 00 00 00 00 00 00 00 06 03 04 05 07 00 02 08 01 09 ff c4 00 5b 10 00 02 01 02 05 02 04 03 06 03 05 06 02 05 01 19 01 02 03 04 11 00 05 06 12 21 31 41 07 13 22 51 14 61 71 08 23 32 81 91 a1 15 Data Ascii: JFIFHHCC "[!1A"Qaq#2
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: b5 32 46 a2 25 60 55 89 b7 43 89 35 86 18 a1 0c a9 70 ab 70 0d fa e1 24 a2 2a d9 69 13 c9 5e 2a df b0 e6 c0 e3 5a 6c a2 69 29 e4 7a 87 bc ce 3d 2b d0 01 f3 c4 c6 4f 94 0a ba 81 53 50 8c 6a 5c df d5 d2 df d3 0f f3 28 51 a5 93 cd 3b 20 52 03 05 e0 31 ff 00 cf 0f ae 49 d0 ae 5f 91 c7 51 e6 c9 50 e1 21 8f 86 2a dd 07 d3 0c 64 a0 a6 47 67 ca 65 32 47 7f 55 cd 8f ef 88 df 10 75 95 1e 8a cc 69 28 92 98 f9 55 10 ee 90 ab 92 45 fa 1e b8 cc 96 68 f5 2c 48 f9 1d 4c 73 d3 72 4a 86 d8 c0 f7 04 1b 1e b8 a9 b3 31 ce 2d be 61 6f 92 86 a2 38 5b 39 6f 74 8b dc 7d 79 29 2a 39 e5 a5 57 12 51 47 50 c4 10 ac d2 74 fd f0 f6 82 af 34 33 6d 94 2d 3a a0 dc a8 0a 9e 3e bd 7b e2 0f 39 ca f3 2a 46 f3 90 33 22 f0 16 32 0f fe 78 67 45 4b a8 b3 0f bc a2 a4 a9 05 b8 e4 5b fa e2 fc 8a c2 Data Ascii: 2F%`UC5pp$i^Zli)z=+OSPj\(Q; R1I_QP!dGge2GUui(UEh,HLsrJ1-ao8[9ot}y)9WQGPt43m-:>{9*F3"2xgEK[
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 21 91 cd 2e 7d e3 ea 7e e9 cf 85 90 d6 bd 2e ac cc 24 92 5f e1 e9 4f b3 7b 33 2e e6 be eb 29 b8 f5 5e d7 f5 0f a1 e9 82 3f 0e 2a 65 97 3a db 24 f3 3c 30 c2 c4 a6 f3 bc 96 f6 b5 89 c3 6f 0b 8a 51 68 ac ee 9b 35 8e 6a 45 ad 71 1b d4 34 0e 7c 92 5d 14 5c 28 2e 2e 4d b9 b0 e7 8b 9e a5 da 27 c3 dc df 28 7c ee 79 a8 5e 68 10 a2 ad 4d 39 0c 4a 92 38 52 01 17 bf 5b 9f c8 f4 c4 8c ac 6d 34 ef 69 ce e0 7c 00 55 19 e7 c6 d1 8c fa 9f ba b0 25 a9 9a 50 e1 24 97 6e c5 40 41 22 ff 00 25 b5 bd 5e f6 0b f3 bf 77 14 b9 8d 5d 1c a6 48 ea 24 52 8a 14 da d6 5f 97 4b 06 fc 81 eb d7 11 13 65 f9 bd 18 a9 1f 05 55 1a 44 b1 89 36 46 4e c0 d6 b2 a7 a7 82 6f ea 06 d7 b9 b2 1c 33 cc 7e 3a 86 0a e9 a4 86 78 05 2c 23 71 48 88 11 5c 0b 05 ba 8d ac 6f cd f6 71 7f 49 c7 3a da 80 48 03 55 Data Ascii: !.}~.$_O{3.)^?*e:$<0oQh5jEq4\|]\(..M'(\|y^hM9J8R[m4i\|U%P$n@A"%^w]H$R_KeUD6FNo3~:x,#qH\oqI:HU
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 33 9e 3a 8c 65 6d 64 54 d0 b4 d3 b0 03 b5 c7 7c 03 e6 fa ae b5 aa 1a 2a 15 50 dc 5d 1b a9 fd 70 93 a2 f4 a4 a6 59 9e 48 e3 bb fb 9c 07 6a 64 31 57 a5 5b 3d 99 2d db ae 27 72 1c dd 73 1a 32 c9 75 a8 4e 25 52 3a 1c 7b 9a e5 eb 5d 17 95 38 05 cf 2a 71 44 d3 c5 4c ce d2 67 06 8e 67 25 7c 34 f2 d4 bf 04 4d 2e 3d 14 0e 99 8a a5 f3 0d d5 13 22 52 b5 d9 ee bc 93 6e 31 31 9e 55 2c 11 c8 d0 aa c9 20 36 5b f4 38 83 cc 6b 1b 27 f2 e2 a9 b2 00 05 98 0e 0e 20 f3 4d 59 4e b4 ee 7c d1 b5 7b db 1e 33 c4 6a e6 ac ae 7b d8 db b6 f9 65 b2 f7 6e 0f c3 7f 2d 4b 13 49 b6 59 f8 ee 90 8b f8 a6 61 a8 22 5c 9e 43 4d 28 3f 7c c6 c4 6d b1 ec 7a e0 8a 7f 0e a9 4c e6 b6 a9 a6 f8 fb 86 59 d5 c8 b1 fa 74 c4 4f 87 19 c4 39 82 55 55 44 44 8c 26 da c6 d6 23 16 85 75 74 4d 4a ac 2c 08 02 e2 Data Ascii: 3:emdT\|P]pYHjd1W[=-'rs2uN%R:{]8qDLgg%\|4M.="Rn11U, 6[8k' MYN\|{3j{en-KIYa"\CM(?\|mzLYtO9UUDD&#utMJ,
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: 28 48 60 4f 25 4a c2 b7 b9 c4 8c b2 27 de 8a 7d cb 0a 8b c8 d6 e9 fa e1 ac 75 53 47 97 f9 4a c2 31 ee 39 b6 23 a4 ae 76 51 49 1d 89 eb b7 f7 24 9c 14 b1 58 12 19 f6 76 f4 79 7c c6 8a 4f 29 d0 2f 95 74 04 f2 c2 e4 df eb 80 a7 d4 b9 a3 c8 5d aa ae c7 bf 96 9f e5 82 0d 4c e1 28 65 e3 7c 8e 00 2e 3a 7e 21 80 93 d4 e0 0f 10 91 ec 94 06 92 32 fb af 34 fc 51 59 53 4f 5a d6 c5 21 68 c2 34 24 6e 79 27 33 57 d4 4e 18 4b 26 e0 df 88 58 73 84 e2 a9 96 1f ec dc 8f df 09 63 30 37 f3 13 7f 59 f5 5c 8f f8 9d 7f fd e7 7f b8 fd d3 b6 cc aa 5d 42 b4 9c 0e 9e 91 fe 58 da 2c da ae 02 4c 52 05 27 a9 f2 d4 ff 00 86 19 63 30 dd bc df d4 7d 52 ff 00 13 af ff 00 bc ef f7 1f ba 78 d9 a5 5b cc 66 79 6f 21 ef b1 7f a5 b1 b0 ce 2b 42 05 13 7a 41 e3 d0 bf e5 86 38 cc 2e de 5f ea 3e a9 Data Ascii: (H`O%J'}uSGJ19#vQI$Xvy\|O)/t]L(e\|.:~!24QYSOZ!h4$ny'3WNK&Xsc07Y\]BX,LR'c0}Rx[fyo!+BzA8._>
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: a0 d5 36 97 a1 82 7a 2a a8 92 26 a6 31 40 1d 63 8c 86 00 33 fa 4f 22 c0 5d 57 bb 87 37 24 17 49 78 c1 ac 74 6d 2c 14 99 66 77 1f f0 c8 a3 ba d2 c9 0a cf 11 50 de a2 09 05 95 56 db 40 04 6e 6e 79 be 3a 43 44 7d a1 29 73 b8 7c ad 47 91 d7 e5 13 c6 50 4d 22 45 e6 c4 37 b7 dd dc 0f 55 d9 48 27 fb b7 b1 c0 9a da 28 e6 6f f1 4f 9d ec 50 29 f8 55 65 31 2f 6f 7c 74 d7 cc 6b ef 75 cb 79 f6 9f cc f2 29 ab 93 37 c8 1a 99 e4 78 25 9c 79 02 48 f7 6e 0b 1a ab 08 c8 20 70 49 70 7f fa 1a 28 da d8 3e cf 29 1b 2f f0 f7 29 8a 58 a9 c5 74 f3 a0 4b a9 0a 5a ec c4 f3 77 da a2 e7 8e 41 02 fb 00 ba f5 4c 75 ba 53 55 27 94 24 a5 ab 12 17 50 a4 95 6b 8e 1b d2 6d db 8b fb 62 3b 39 f0 8f 4a 67 79 52 e5 95 19 7c 62 84 15 2b 12 96 54 1b 4d c0 b0 20 11 c7 20 f0 6f cd f1 c6 55 7e 1e 33 Data Ascii: 6z*&1@c3O"]W7$Ixtm,fwPV@nny:CD})s\|GPM"E7UH'(oOP)Ue1/o\|tkuy)7x%yHn pIp(>)/)XtKZwALuSU'$Pkmb;9JgyR\|b+TM oU~3
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: f3 5c 42 0f 75 a6 f7 3b 87 1f 7e 1c d7 a2 4a f6 d0 42 5a d3 79 08 17 3c b9 db df 8f 25 e6 8f 45 4c d1 98 8b 04 9a 60 3e 96 6c 75 47 85 f2 25 56 88 cb 67 1e a2 4c b6 3f 49 18 7f 86 39 53 2a 90 d1 55 57 25 ed 29 9e 44 4e 3d c7 3f b1 c7 4f f8 3e c6 0f 0e 72 b6 63 68 d1 ea 05 cf ff 00 4d 6c 76 dc 35 a4 e3 7f 3b 7c 82 f3 ea e7 5d c0 23 f6 ac 6a 78 b7 11 b1 47 52 70 1f a8 b5 38 da ea b2 59 78 b7 18 65 a9 75 6a a8 92 38 a4 1b 17 bd ba e2 af cc f3 e6 a9 95 82 bf ed 83 c0 06 8b a1 36 32 9c 21 12 4b 9d fa d9 cb 8e 39 38 95 d3 74 15 79 fd 44 75 75 11 df 2a b9 d8 49 b7 9c c3 8f a8 00 ff 00 4c 07 69 9c ae a3 52 66 08 9e 44 92 e5 b1 31 f8 c9 10 d8 da dc 28 ef 7b db f5 c5 e5 97 a7 91 49 0c 54 54 e2 9e 08 86 d8 e2 7e c3 14 13 da 1e 8b 51 0d 89 b6 1a a4 9a 91 29 85 dd 02 Data Ascii: \Bu;~JBZy<%EL`>luG%VgL?I9SUW%)DN=?O>rchMlv5;\|]#jxGRp8Yxeuj862!K98tyDuuILiRfD1({ITT~Q)
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: ad 3c 67 ab b7 cf e4 3a fe 58 63 5b 93 d7 57 4f e7 57 c8 65 9c 90 1a c3 8e 9d 00 1c 0e 31 2b a7 f2 f9 73 7c d0 57 d4 46 de 50 b8 45 51 f8 17 b6 08 b3 18 16 90 b4 54 6c 5a b1 ac 63 56 1f 83 e6 6f f2 e9 84 65 31 3f bb 6b ef f6 5e 49 c6 b8 a3 b8 84 e4 33 26 0d 07 d4 f5 2a b1 cd a9 da 8a 29 99 86 d4 44 da 00 e7 ea 70 8d 16 41 1e 61 90 cd 9a c5 3a 09 57 d2 22 56 04 dc 1e 49 5e a0 5b 9c 1a eb ec b6 0c 8f 48 53 2d 6e d5 ae ab 97 d3 cd ce d0 6e 71 ef d9 a3 20 a6 d4 7e 23 bd 15 6d 3f c5 d1 49 97 4e 24 8c 9b 75 50 07 e7 73 82 d0 bd ce a6 32 03 62 0f aa 08 d3 76 e6 ab 7a 5a cf 2d 82 48 a1 94 f7 f7 c1 fe 9f a9 c8 96 95 24 a9 a6 91 61 8c 37 9b 22 16 20 31 be d5 b7 7b 9b 7e b8 7d e3 6f 84 67 44 67 08 b9 15 3c 83 2f 2c 10 bb cd 73 bd 89 b2 81 7b d8 02 30 c7 43 e9 79 b3 Data Ascii: <g:Xc[WOWe1+s\|WFPEQTlZcVoe1?k^I3&*)DpAa:W"VI^[HS-nnq ~#m?IN$uPs2bvzZ-H$a7" 1{~}ogDg</,s{0Cy
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: cc 1a 91 83 f2 21 3b 47 20 fe 28 9b 8e 9f 21 89 9e 27 52 d3 6a 82 48 e6 0d bf 63 f0 28 81 e1 86 07 f6 94 c7 09 e4 74 f0 f7 74 43 47 49 43 e4 2f f0 da 0a 6f 2c 07 88 21 95 6d 64 b9 11 86 1d 87 e3 63 ef 75 f9 61 f4 12 96 62 eb 53 24 80 34 6d ba 28 ac 45 c6 dd e4 5b a9 be c5 1d 81 dd f3 c3 bc bb 59 65 39 84 be 56 b4 c8 a9 ab 4d b6 0a 8a 63 f0 d2 28 26 e4 05 52 13 93 d7 de f8 21 ab a7 d2 d5 52 46 f4 1a 92 6c be 56 2a c9 1d 4d 23 85 07 80 49 90 26 d2 42 5d 17 92 07 5e bc e1 9b 55 04 d9 36 50 4f 22 6c 7e 3f 42 89 89 1c d6 ff 00 11 84 75 b5 c7 a8 b9 f5 08 4f c9 30 15 22 18 69 9c 2b 80 1a 52 c0 ed 37 db 7b f0 a9 f8 89 fe 76 04 73 7b 60 93 2b d5 79 f5 0a 85 a6 cd ab a4 5d e9 e9 2a 05 ae 2f 7b 11 62 ce 6c 00 e8 aa 6e 6d 6c 6f 0e 86 ce aa 21 92 4d 3f 45 47 98 c4 8a Data Ascii: !;G (!'RjHc(ttCGIC/o,!mdcuabS$4m(E[Ye9VMc(&R!RFlVM#I&B]^U6PO"l~?BuO0"i+R7{vs{`+y]/{blnmlo!M?EG
2024-09-20 22:48:50 UTC	1390	IN	Data Raw: c2 9f 20 f3 25 3b 56 9a b2 36 26 d7 e2 f8 61 5d 50 72 fa a2 b2 3e c4 46 06 fd 86 21 73 bc ee 7c c7 25 ac 86 9d 8f c2 89 11 bf 0d b7 1d d8 ea e2 a6 73 cb 70 fe 9b 85 c6 d4 4c 30 3e fa 80 51 36 51 38 cc f3 da 8a b8 8f dd 17 ba dc 5b a8 03 17 7e 99 d5 12 e5 5a 3a 3c bd 67 64 51 34 85 90 0e 39 72 71 46 e8 f5 01 63 2d c5 c2 ee c1 f5 54 82 32 d0 c2 df 77 c1 16 f9 8e 71 d3 53 31 b1 80 d1 b0 0b 93 90 3a 42 4f 32 a5 2b f3 c9 6b 25 71 bf 8f a6 1b e5 74 15 59 e6 67 0e 5b 96 f3 53 31 b9 63 d1 14 72 58 fe 58 61 4f 4d 3d 4c c9 4f 47 1b 4f 55 31 db 1c 63 ab 1f fc b9 c7 40 68 2d 27 49 a7 72 98 84 f1 46 d9 d4 a2 f5 72 86 e6 fd 94 76 00 0b 0e 3d b1 71 38 cf 44 8d a2 6d 86 a9 f6 9f c8 d7 4e 50 c3 41 43 63 12 5c bb 9e ac c7 92 4f e7 89 bf 89 b0 fb ce 83 09 d5 3a c5 19 69 0e Data Ascii: %;V6&a]Pr>F!s\|%spL0>Q6Q8[~Z:<gdQ49rqFc-T2wqS1:BO2+k%qtYg[S1crXXaOM=LOGOU1c@h-'IrFrv=q8DmNPACc\O:i

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.4	49826	178.154.131.217	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	591	OUT	GET /partner-code-bundles/1117086/17fb885b38886c06b632.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://xn--r1a.website sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:50 UTC	766	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:50 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 9208 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "bfbede26d7bd8ae58f10aea5819767fd" Expires: Mon, 21 Sep 2054 05:24:50 GMT Last-Modified: Wed, 18 Sep 2024 15:26:57 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:50 UTC	9208	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 39 32 37 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 72 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 72 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 72 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 Data Ascii: /! v:1117086 b:default c:927 /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const r=e.toString();return/\[native code\]/.test(r)\|\|/\/\* source code not available \*\//.test(r)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.4	49824	178.154.131.217	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	591	OUT	GET /partner-code-bundles/1117086/f7c4024c86a402702d20.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://xn--r1a.website sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:51 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:50 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 29886 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "59e2c5670b6452a790b613190896347d" Expires: Mon, 21 Sep 2054 05:24:50 GMT Last-Modified: Wed, 18 Sep 2024 15:26:58 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow
2024-09-20 22:48:51 UTC	15617	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 65 72 72 6f 72 43 6f 75 6e 74 65 72 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 Data Ascii: /! v:1117086 b:default c:errorCounter /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Func
2024-09-20 22:48:51 UTC	14269	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 74 7d 28 6e 28 37 31 36 32 36 29 29 3b 74 2e 69 73 48 6f 73 74 49 6e 4c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 77 69 6e 64 6f 77 29 3b 76 61 72 20 72 3d 28 30 2c 6e 28 35 38 34 38 34 29 2e 67 65 74 48 6f 73 74 57 69 74 68 50 61 74 68 29 28 65 29 3b 69 66 28 28 30 2c 6e 28 36 34 30 35 30 29 2e 69 73 54 75 72 62 6f 50 61 67 65 29 28 65 29 7c 7c 6e 28 35 34 37 35 36 29 2e 52 66 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 6f 3d 5b 5d 2c 61 3d 30 3b 61 3c 74 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 75 3d 74 5b 61 5d 2c 63 3d 69 5b 75 5d 3b 6f 3d 6f 2e 63 6f 6e 63 61 74 28 63 29 7d 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 6f 2e 6c 65 6e Data Ascii: ;return o(t,e),t}(n(71626));t.isHostInList=function(e,t){void 0===e&&(e=window);var r=(0,n(58484).getHostWithPath)(e);if((0,n(64050).isTurboPage)(e)\|\|n(54756).Rf)return!1;for(var o=[],a=0;a<t.length;a++){var u=t[a],c=i[u];o=o.concat(c)}for(var s=0;s<o.len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.4	49828	178.154.131.217	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	591	OUT	GET /partner-code-bundles/1117086/77b050485636874c5aed.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://xn--r1a.website sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:51 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:50 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 44580 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "344f097e4203cae3e76254b37374d36c" Expires: Mon, 21 Sep 2054 05:24:50 GMT Last-Modified: Wed, 18 Sep 2024 15:26:57 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:51 UTC	15617	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 36 36 36 30 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f Data Ascii: /! v:1117086 b:default c:6660 /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.pro
2024-09-20 22:48:51 UTC	16384	IN	Data Raw: 6e 28 38 35 39 38 31 29 3b 63 6f 6e 73 74 20 41 3d 65 3d 3e 28 30 2c 79 2e 45 29 28 65 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 2c 77 3d 41 28 77 69 6e 64 6f 77 29 3b 63 6c 61 73 73 20 45 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 7b 64 65 66 61 75 6c 74 50 72 6f 62 61 62 69 6c 69 74 79 3a 65 2c 72 6e 64 3a 74 2c 76 73 69 64 3a 6e 2c 73 65 72 76 69 63 65 4e 61 6d 65 3a 72 2c 73 65 72 76 69 63 65 56 65 72 73 69 6f 6e 3a 6f 7d 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 72 6e 64 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e Data Ascii: n(85981);const A=e=>(0,y.E)(e.navigator.sendBeacon),w=A(window);class E{constructor({defaultProbability:e,rnd:t,vsid:n,serviceName:r,serviceVersion:o}){Object.defineProperty(this,"rnd",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defin
2024-09-20 22:48:51 UTC	12579	IN	Data Raw: 4e 5f 50 41 52 41 4d 45 54 45 52 53 5f 5f 29 2c 69 3d 28 65 2c 74 29 3d 3e 7b 65 2e 5f 5f 41 44 5f 53 44 4b 5f 53 43 52 49 50 54 5f 53 45 53 53 49 4f 4e 5f 50 41 52 41 4d 45 54 45 52 53 5f 5f 3d 74 7d 2c 61 3d 65 3d 3e 65 2e 5f 5f 41 44 5f 53 44 4b 5f 53 43 52 49 50 54 5f 53 45 53 53 49 4f 4e 5f 50 41 52 41 4d 45 54 45 52 53 5f 5f 2c 73 3d 65 3d 3e 7b 64 65 6c 65 74 65 20 65 2e 5f 5f 41 44 5f 53 44 4b 5f 53 43 52 49 50 54 5f 53 45 53 53 49 4f 4e 5f 50 41 52 41 4d 45 54 45 52 53 5f 5f 7d 7d 2c 37 37 35 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 24 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 37 37 33 34 33 29 3b 63 6f 6e 73 74 20 6f 3d 28 65 2c 74 29 3d 3e 7b 76 61 72 20 Data Ascii: N_PARAMETERS__),i=(e,t)=>{e.__AD_SDK_SCRIPT_SESSION_PARAMETERS__=t},a=e=>e.__AD_SDK_SCRIPT_SESSION_PARAMETERS__,s=e=>{delete e.__AD_SDK_SCRIPT_SESSION_PARAMETERS__}},77599:function(e,t,n){n.d(t,{$:function(){return o}});var r=n(77343);const o=(e,t)=>{var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.4	49831	178.154.131.217	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	591	OUT	GET /partner-code-bundles/1117086/8191d15d1fd1e4c04fa3.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://xn--r1a.website sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:50 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:50 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 24545 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "afdd155ac8eec69aa189c7ceeb9e6910" Expires: Mon, 21 Sep 2054 05:21:00 GMT Last-Modified: Wed, 18 Sep 2024 15:26:57 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:50 UTC	15617	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 39 35 33 37 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 6e 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 6e 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f Data Ascii: /! v:1117086 b:default c:9537 /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const n=e.toString();return/\[native code\]/.test(n)\|\|/\/\* source code not available \*\//.test(n)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.pro
2024-09-20 22:48:51 UTC	8928	IN	Data Raw: 74 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 6e 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 75 2c 69 2c 63 2c 6c 2c 5f 3b 69 66 28 6f 3f 22 63 6c 61 73 73 4e 61 6d 65 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 6c 61 73 73 22 29 3a 22 63 6c 61 73 73 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 6c 61 73 73 4e 61 6d 65 22 29 2c 22 6b 65 79 22 3d 3d 3d 6e 7c 7c 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 6e 29 3b 65 6c 73 65 20 69 66 28 22 73 74 79 6c 65 22 3d 3d 3d 6e 29 69 66 28 75 3d 65 2e 73 74 79 6c 65 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 75 2e 63 73 73 54 65 78 74 3d 74 3b 65 6c 73 65 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 75 2e 63 73 73 54 65 78 74 3d 22 22 2c 72 3d 6e 75 6c 6c 29 2c 72 29 66 6f 72 28 69 20 69 6e 20 72 29 Data Ascii: t}function A(e,n,t,r,o){var u,i,c,l,_;if(o?"className"===n&&(n="class"):"class"===n&&(n="className"),"key"===n\|\|"children"===n);else if("style"===n)if(u=e.style,"string"==typeof t)u.cssText=t;else{if("string"==typeof r&&(u.cssText="",r=null),r)for(i in r)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.4	49829	178.154.131.217	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	591	OUT	GET /partner-code-bundles/1117086/28ced93adc464997b048.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://xn--r1a.website sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:51 UTC	768	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:50 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 634944 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "1f70bbe29bd47349bd5b7e133b211097" Expires: Mon, 21 Sep 2054 05:24:50 GMT Last-Modified: Wed, 18 Sep 2024 15:26:57 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:51 UTC	15616	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 61 64 76 6d 61 6e 61 67 65 72 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 65 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 65 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 Data Ascii: /! v:1117086 b:default c:advmanager /try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Functi
2024-09-20 22:48:51 UTC	16384	IN	Data Raw: 73 20 76 61 6c 75 65 20 22 2b 53 74 72 69 6e 67 28 65 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 6f 72 20 6e 75 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 7d 69 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 4c 65 61 64 46 6f 72 6d 43 6c 69 65 6e 74 43 6f 64 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 6e 28 34 36 33 34 30 29 Data Ascii: s value "+String(e)+" is not a constructor or null");function n(){this.constructor=t}i(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)});Object.defineProperty(e,"__esModule",{value:!0}),e.LeadFormClientCode=void 0;var a=n(46340)
2024-09-20 22:48:51 UTC	16384	IN	Data Raw: 6e 42 61 6e 6e 65 72 44 61 74 61 29 2c 72 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 26 26 28 69 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 3d 21 30 2c 69 2e 69 73 49 6e 74 65 72 73 74 69 74 69 61 6c 3d 21 30 29 2c 69 2e 68 6f 6e 65 79 70 6f 74 3d 72 2e 67 65 74 48 6f 6e 65 79 70 6f 74 28 29 2c 73 2e 73 65 74 50 72 6f 70 73 28 7b 69 73 46 75 6c 6c 73 63 72 65 65 6e 3a 69 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 2c 69 73 46 6c 6f 6f 72 41 64 3a 72 2e 69 73 46 6c 6f 6f 72 41 64 2c 69 73 54 6f 70 41 64 3a 72 2e 69 73 54 6f 70 41 64 7d 29 3b 76 61 72 20 63 3d 6e 65 77 20 78 2e 44 65 66 65 72 72 65 64 3b 72 65 74 75 72 6e 20 63 2e 70 72 6f 6d 69 73 65 2e 74 68 65 6e 28 28 30 2c 44 2e 70 72 6f 74 65 63 74 29 28 22 52 54 42 42 61 6e 6e 65 72 2e 6f 6e 52 65 61 64 79 22 2c Data Ascii: nBannerData),r.isFullscreen&&(i.isFullscreen=!0,i.isInterstitial=!0),i.honeypot=r.getHoneypot(),s.setProps({isFullscreen:i.isFullscreen,isFloorAd:r.isFloorAd,isTopAd:r.isTopAd});var c=new x.Deferred;return c.promise.then((0,D.protect)("RTBBanner.onReady",
2024-09-20 22:48:51 UTC	16384	IN	Data Raw: 74 6f 74 79 70 65 2e 6f 6e 56 69 73 69 62 69 6c 69 74 79 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 63 6f 6e 66 69 72 6d 54 69 6d 65 2c 6e 3d 74 68 69 73 2e 67 65 74 52 75 6d 41 64 64 69 74 69 6f 6e 61 6c 73 28 29 3b 28 30 2c 7a 2e 73 65 6e 64 52 75 6d 44 65 6c 74 61 73 29 28 7b 76 69 73 69 62 69 6c 69 74 79 43 6f 6e 66 69 72 6d 65 64 3a 65 7d 2c 6e 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 61 63 6b 43 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 63 74 2e 72 65 66 72 65 73 68 65 72 2e 72 65 67 69 73 74 65 72 43 6c 69 63 6b 28 29 2c 28 30 2c 68 2e 74 72 61 63 6b 43 6c 69 63 6b 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 3d 3d 3d 79 2e 43 Data Ascii: totype.onVisibilityConfirmation=function(t){var e=t.confirmTime,n=this.getRumAdditionals();(0,z.sendRumDeltas)({visibilityConfirmed:e},n)},e.prototype.trackClick=function(){var t=this;ct.refresher.registerClick(),(0,h.trackClick)((function(e,n){if(e===y.C
2024-09-20 22:48:51 UTC	16384	IN	Data Raw: 6e 74 43 6f 64 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 6e 28 37 39 30 32 31 29 2c 61 3d 6e 28 35 31 34 30 35 29 2c 73 3d 6e 28 31 36 38 38 29 2c 6c 3d 6e 28 38 36 33 30 37 29 2c 63 3d 6e 28 33 38 38 34 39 29 2c 75 3d 6e 28 37 32 36 30 39 29 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 69 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 28 30 2c 61 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 44 61 74 61 29 28 75 2e 50 52 4f 4d 4f 5f 43 4f 44 45 5f 44 41 54 41 5f 41 54 Data Ascii: ntCode=void 0;var r=n(79021),a=n(51405),s=n(1688),l=n(86307),c=n(38849),u=n(72609),d=function(t){function e(){return null!==t&&t.apply(this,arguments)\|\|this}return i(e,t),e.prototype.init=function(){var t=this,e=(0,a.getElementByData)(u.PROMO_CODE_DATA_AT
2024-09-20 22:48:51 UTC	16384	IN	Data Raw: 65 2e 73 68 6f 77 41 72 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 70 72 6f 70 73 2e 70 72 65 76 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 7c 7c 74 68 69 73 2e 70 72 6f 70 73 2e 6e 65 78 74 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 70 72 6f 70 73 2e 67 65 74 42 6f 75 6e 64 61 72 79 43 6f 6e 64 69 74 69 6f 6e 28 29 2c 6e 3d 65 2e 69 73 46 69 72 73 74 45 6c 65 6d 65 6e 74 53 68 6f 77 6e 2c 6f 3d 65 2e 69 73 4c 61 73 74 45 6c 65 6d 65 6e 74 53 68 6f 77 6e 2c 69 3d 74 68 69 73 2e 67 65 74 48 6f 76 65 72 65 64 53 69 64 65 4f 66 43 6f 6e 74 61 69 6e 65 72 28 74 29 2c 61 3d 21 6e 26 26 22 6c 65 66 74 22 3d 3d 3d 69 3b 69 66 28 61 29 7b 69 66 28 74 68 69 73 2e 61 72 72 6f 77 53 74 61 74 65 3d 3d 3d 72 Data Ascii: e.showArrow=function(t){if(this.props.prevButtonElement\|\|this.props.nextButtonElement){var e=this.props.getBoundaryCondition(),n=e.isFirstElementShown,o=e.isLastElementShown,i=this.getHoveredSideOfContainer(t),a=!n&&"left"===i;if(a){if(this.arrowState===r
2024-09-20 22:48:51 UTC	16384	IN	Data Raw: 2c 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 66 2e 54 69 6d 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 21 3d 3d 65 2e 63 6f 75 6e 74 26 26 28 74 2e 61 75 74 6f 73 63 72 6f 6c 6c 53 6c 69 64 65 46 6c 6f 77 3d 3d 3d 72 2e 43 49 52 43 4c 45 26 26 74 2e 68 61 6e 64 6c 65 43 69 72 63 6c 65 41 75 74 6f 73 63 72 6f 6c 6c 46 6c 6f 77 53 74 65 70 28 29 2c 74 2e 61 75 74 6f 73 63 72 6f 6c 6c 53 6c 69 64 65 46 6c 6f 77 3d 3d 3d 72 2e 53 45 51 55 45 4e 54 49 41 4c 26 26 74 2e 68 61 6e 64 6c 65 53 65 71 75 65 6e 74 69 61 6c 41 75 74 6f 73 63 72 6f 6c 6c 46 6c 6f 77 53 74 65 70 28 29 29 2c 74 2e 70 72 6f 70 73 2e 61 75 74 6f 53 63 72 6f 6c 6c 44 65 6c 61 79 7d 29 29 2c 74 68 69 73 2e 74 69 6d 65 72 2e 73 74 61 72 74 28 29 29 7d 2c 65 2e Data Ascii: ,this.timer=new f.Timer((function(e){return 0!==e.count&&(t.autoscrollSlideFlow===r.CIRCLE&&t.handleCircleAutoscrollFlowStep(),t.autoscrollSlideFlow===r.SEQUENTIAL&&t.handleSequentialAutoscrollFlowStep()),t.props.autoScrollDelay})),this.timer.start())},e.
2024-09-20 22:48:51 UTC	16384	IN	Data Raw: 73 5b 74 5d 29 7b 76 61 72 20 65 3d 30 3d 3d 3d 74 2c 6e 3d 74 3d 3d 3d 74 68 69 73 2e 73 6c 69 64 65 45 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 3b 28 65 7c 7c 74 3e 74 68 69 73 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 26 26 21 6e 29 26 26 28 74 68 69 73 2e 61 75 74 6f 53 63 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 3d 67 2e 43 61 72 6f 75 73 65 6c 44 69 72 65 63 74 69 6f 6e 2e 4e 45 58 54 29 2c 28 6e 7c 7c 74 3c 74 68 69 73 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 26 26 21 65 29 26 26 28 74 68 69 73 2e 61 75 74 6f 53 63 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 3d 67 2e 43 61 72 6f 75 73 65 6c 44 69 72 65 63 74 69 6f 6e 2e 50 52 45 56 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 Data Ascii: s[t]){var e=0===t,n=t===this.slideElements.length-1;(e\|\|t>this.currentIndex&&!n)&&(this.autoScrollDirection=g.CarouselDirection.NEXT),(n\|\|t<this.currentIndex&&!e)&&(this.autoScrollDirection=g.CarouselDirection.PREV)}},e.prototype.scrollTo=function(t,e){va
2024-09-20 22:48:51 UTC	16384	IN	Data Raw: 6f 43 6f 6e 74 61 69 6e 65 72 29 28 74 29 2c 28 30 2c 5f 2e 69 6e 69 74 41 64 61 70 74 69 76 65 49 6d 61 67 65 43 6c 69 65 6e 74 43 6f 64 65 29 28 74 2c 65 2c 7b 65 6e 61 62 6c 65 41 6e 69 6d 61 74 69 6f 6e 3a 21 31 2c 6c 61 7a 79 4c 6f 61 64 4d 61 72 67 69 6e 3a 22 31 30 30 25 22 2c 6c 61 7a 79 4c 6f 61 64 43 6f 6e 74 61 69 6e 65 72 3a 6c 2e 74 72 61 63 6b 45 6c 65 6d 65 6e 74 7d 29 2c 6f 2e 64 6f 4f 6e 44 65 73 74 72 6f 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 5f 2e 64 65 73 74 72 6f 79 41 64 61 70 74 69 76 65 49 6d 61 67 65 43 6c 69 65 6e 74 43 6f 64 65 29 28 74 2c 65 29 7d 29 29 7d 29 29 2c 6f 2e 64 69 73 61 62 6c 65 46 61 6c 73 65 43 6c 69 63 6b 50 72 6f 74 65 63 74 69 6f 6e 3d 28 30 2c 63 2e 64 65 62 6f 75 6e 63 65 29 28 Data Ascii: oContainer)(t),(0,_.initAdaptiveImageClientCode)(t,e,{enableAnimation:!1,lazyLoadMargin:"100%",lazyLoadContainer:l.trackElement}),o.doOnDestroy((function(){return(0,_.destroyAdaptiveImageClientCode)(t,e)}))})),o.disableFalseClickProtection=(0,c.debounce)(
2024-09-20 22:48:51 UTC	16384	IN	Data Raw: 65 2e 53 43 52 4f 4c 4c 45 52 5f 41 55 54 4f 50 4c 41 59 3d 65 2e 53 43 52 4f 4c 4c 45 52 5f 44 41 54 41 5f 41 54 54 52 3d 76 6f 69 64 20 30 2c 65 2e 53 43 52 4f 4c 4c 45 52 5f 44 41 54 41 5f 41 54 54 52 3d 22 73 63 72 6f 6c 6c 65 72 22 2c 65 2e 53 43 52 4f 4c 4c 45 52 5f 41 55 54 4f 50 4c 41 59 3d 22 61 75 74 6f 70 6c 61 79 22 2c 65 2e 53 43 52 4f 4c 4c 45 52 5f 41 55 54 4f 50 4c 41 59 5f 41 4e 49 4d 41 54 49 4f 4e 3d 22 61 75 74 6f 70 6c 61 79 2d 61 6e 69 6d 61 74 69 6f 6e 22 2c 65 2e 53 43 52 4f 4c 4c 45 52 5f 41 55 54 4f 50 4c 41 59 5f 44 45 4c 41 59 3d 22 61 75 74 6f 70 6c 61 79 2d 64 65 6c 61 79 22 2c 65 2e 53 43 52 4f 4c 4c 45 52 5f 41 55 54 4f 50 4c 41 59 5f 44 55 52 41 54 49 4f 4e 3d 22 61 75 74 6f 70 6c 61 79 2d 64 75 72 61 74 69 6f 6e 22 7d 2c Data Ascii: e.SCROLLER_AUTOPLAY=e.SCROLLER_DATA_ATTR=void 0,e.SCROLLER_DATA_ATTR="scroller",e.SCROLLER_AUTOPLAY="autoplay",e.SCROLLER_AUTOPLAY_ANIMATION="autoplay-animation",e.SCROLLER_AUTOPLAY_DELAY="autoplay-delay",e.SCROLLER_AUTOPLAY_DURATION="autoplay-duration"},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.4	49830	178.154.131.217	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:50 UTC	569	OUT	GET /safeframe-bundles/0.83/host.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://xn--r1a.website sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:51 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:50 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 33703 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "2435549eac66915d7464ee7b9efce038" Expires: Mon, 21 Sep 2054 05:24:50 GMT Last-Modified: Wed, 03 Nov 2021 13:42:58 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:51 UTC	15617	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 6f 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=fun
2024-09-20 22:48:51 UTC	16384	IN	Data Raw: 63 65 6f 66 20 45 6c 65 6d 65 6e 74 3f 74 2e 63 6f 6e 66 2e 64 65 73 74 3a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2e 63 6f 6e 66 2e 64 65 73 74 29 29 26 26 6e 29 7b 76 61 72 20 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 2e 73 65 74 41 74 74 72 28 75 2c 22 69 64 22 2c 74 2e 63 6f 6e 66 2e 64 65 73 74 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 29 7d 6c 2e 73 74 61 74 75 73 2e 73 65 74 50 6f 73 69 74 69 6f 6e 52 65 61 64 79 28 6e 65 77 20 63 2e 50 6f 73 69 74 69 6f 6e 28 74 29 29 7d 65 6c 73 65 20 73 2e 6c 6f 67 45 72 72 6f 72 28 22 6e 6f 20 63 6f 6e 74 65 6e 74 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 69 6e 6c 69 6e 65 20 70 6f 73 69 74 69 6f 6e 20 6f 62 6a Data Ascii: ceof Element?t.conf.dest:document.getElementById(t.conf.dest))&&n){var u=document.createElement("div");i.setAttr(u,"id",t.conf.dest),n.appendChild(u)}l.status.setPositionReady(new c.Position(t))}else s.logError("no content found in the inline position obj
2024-09-20 22:48:51 UTC	1702	IN	Data Raw: 69 64 20 75 2e 70 6f 73 74 4d 65 73 73 61 67 65 73 2e 73 65 6e 64 28 74 2c 7b 74 79 70 65 3a 22 65 72 72 6f 72 22 2c 63 61 75 73 65 64 42 79 4d 65 74 68 6f 64 3a 22 63 6f 6c 6c 61 70 73 65 22 2c 6d 65 73 73 61 67 65 3a 22 63 61 6e 63 65 6c 65 64 22 7d 29 3b 64 2e 73 74 61 74 75 73 2e 73 65 74 50 6f 73 69 74 69 6f 6e 43 6f 6c 6c 61 70 73 69 6e 67 28 65 29 2c 73 2e 63 6f 6c 6c 61 70 73 65 28 74 2c 68 29 2c 64 2e 73 74 61 74 75 73 2e 73 65 74 50 6f 73 69 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 64 28 65 29 2c 75 2e 70 6f 73 74 4d 65 73 73 61 67 65 73 2e 73 65 6e 64 28 74 2c 7b 74 79 70 65 3a 22 63 6f 6c 6c 61 70 73 65 64 22 7d 29 2c 72 2e 6e 6f 74 69 66 79 50 6f 73 4d 73 67 28 65 2c 22 63 6f 6c 6c 61 70 73 65 22 29 7d 69 66 28 22 6e 75 6b 65 22 3d 3d 3d 6f 2e 74 Data Ascii: id u.postMessages.send(t,{type:"error",causedByMethod:"collapse",message:"canceled"});d.status.setPositionCollapsing(e),s.collapse(t,h),d.status.setPositionCollapsed(e),u.postMessages.send(t,{type:"collapsed"}),r.notifyPosMsg(e,"collapse")}if("nuke"===o.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.4	49833	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:51 UTC	696	OUT	GET /file/vJ1qeXNLCjuVDEIRhU0Uc51fVywA0h7ZJSrOuLx4ENx93PE6tFR-ImbH6R6TH2Hq6nolVRWos6mpdVpSPGzX6p8Q0j_0ODtSqtNpysuhrykAfSdDnQ8DgGgskor3Fu8WtaJQxQri8j-hK-g2OOleHoS4KD1B0YhItDZRP0_vlqps17Ld32FQSc-vJxYs9CL8o_6Sc2cXvhUbtn_7wmvnKnWc3Ob9fJcHtXZftEkAVq7aPN2oFh3v2moUXctch7gw9VdyvDNMhGhuxQS8ZIXFjLAIuzgQpvq6SlitGvbib6Rw1hWW_W2ZTDtWGJjMPaOwDaNsLxFvXuGHDGd4VBasvQ.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:51 UTC	685	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 49227 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:35:10 GMT Cache-Control: public,max-age=7200 ETag: "b2cb13ab36549c922c24b61f18f1fdf650e8482a" Content-Type: image/jpeg Age: 821 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:51 UTC	705	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 90 00 90 00 00 ff e2 01 db 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 01 cb 00 00 00 00 02 40 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 51 74 06 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 72 58 59 5a 00 00 00 f0 00 00 00 14 67 58 59 5a 00 00 01 04 00 00 00 14 62 58 59 5a 00 00 01 18 00 00 00 14 77 74 70 74 00 00 01 2c 00 00 00 14 63 70 72 74 00 00 01 40 00 00 00 0c 72 54 52 43 00 00 01 4c 00 00 00 20 67 54 52 43 00 00 01 4c 00 00 00 20 62 Data Ascii: JFIFICC_PROFILE@mntrRGB XYZ acsp-QtrXYZgXYZbXYZwtpt,cprt@rTRCL gTRCL b
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: 00 01 02 03 04 05 ff da 00 0c 03 01 00 02 10 03 10 00 00 01 f0 c6 f1 73 b5 9a d9 c3 57 28 26 d3 9b 68 e6 5e b6 1d ee 74 49 68 aa f9 9c c0 56 a3 18 63 00 a0 65 67 09 ca 36 88 aa 05 68 ef 8c 5a 52 1c 15 68 dc 34 61 38 6e 69 51 e8 d0 47 20 6d 45 8d 3e 3d 10 07 2a 38 c2 bc c1 11 e1 70 2b 5c d0 18 4c 26 05 08 d9 48 f4 59 6e 28 88 32 9e 39 42 71 a1 48 14 e9 30 cc 12 38 3c 04 50 b4 0f d1 90 52 18 26 d1 d1 df 16 97 44 78 29 47 e6 75 1e 43 24 52 b9 74 94 78 fc ac a2 75 88 9d a7 65 d2 6f b3 19 22 dc d4 60 9c 34 18 dd c3 20 de 68 ea 12 3a 3f 08 ec 6a 08 8f 1b da 73 c6 fa 4f 78 5e c2 a8 de d3 9e c2 39 7f 77 34 c6 3d b4 84 19 00 a2 34 69 80 1c 11 9c 0d 73 98 e0 23 15 80 c6 39 82 6a 2a 48 ee 6b a5 b9 cd 7a 08 f1 bc 64 3c 42 85 89 eb e4 22 4a 47 40 92 81 40 22 09 ac 2b Data Ascii: sW(&h^tIhVceg6hZRh4a8niQG mE>=8p+\L&HYn(29BqH08<PR&Dx)GuC$Rtxueo"`4 h:?jsOx^9w4=4is#9jHkzd<B"JG@@"+
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: ab dc a9 8a e7 20 6d 32 25 1d a7 60 00 52 04 c0 06 48 ae 23 0a 48 ae 62 46 b0 8b 53 03 8b d6 af c3 20 3c bb 8d 39 55 39 c3 e4 38 80 78 ce f0 90 65 1a b4 15 c2 7a 0e f6 1d 57 2b d4 4c 73 9a 0d 01 02 98 de ce 4c 8d 6f 36 47 35 01 53 91 a5 6a b5 a6 31 c2 a5 24 b0 65 b9 90 e6 b9 ae 8d 6d 77 ae 50 2b 33 59 cd b2 1e b2 65 b6 d0 91 5f 59 a4 ad 93 64 e3 49 8e b4 c5 65 a5 94 f7 60 22 c5 b0 a2 d2 61 a6 e1 f0 6c ca 6a f7 21 ca d7 4b 72 3f 90 11 9c 6d 00 27 62 51 98 70 d2 8e 29 00 d2 42 03 cf a5 23 af 3b 3b cc 08 c1 01 a7 31 35 46 2a 65 70 9e 82 bc 4f 4c 8c 4e 6c a5 19 50 f2 8d c9 91 e1 78 c8 ce 6a 04 c2 30 63 09 23 0c 85 8b 20 0e 89 c2 46 ab 18 e6 2b 1c f0 5c 2a 5d 36 15 93 53 cb 32 a7 a7 9a e3 cd f6 f7 fb 67 8d b4 9f 13 58 56 4a a0 01 1c 33 62 8d 52 9e 71 9b 5b ca Data Ascii: m2%`RH#HbFS <9U98xezW+LsLo6G5Sj1$emwP+3Ye_YdIe`"alj!Kr?m'bQp)B#;;15FepOLNlPxj0c# F+\]6S2gXVJ3bRq[
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: a2 2f 67 f8 3d 79 dd da 43 5a ac 13 02 40 08 60 78 c2 34 69 71 34 7b 3b bf 02 16 57 ed 5e 69 91 8a c3 c8 ad 9f 0f bb 57 7d 6b 03 7f e9 2c b8 a5 d9 06 2e 91 1a 54 12 49 12 7d 0e ce 2f 79 12 5d 77 1f 45 34 7b 15 e3 df 29 5b 7d 65 eb f0 66 25 6d 69 39 b6 aa a5 b8 5e 7d 5f 97 d0 e3 43 61 e7 3b df 3e b5 53 65 d2 6c 64 09 51 82 50 47 15 08 f6 0e 93 83 d1 00 51 9b 73 53 b2 bf 48 79 d2 d3 4a f2 9b 43 28 8f be 4a 31 85 a9 06 87 3d 9e bc e4 ac ce ea 47 9a b5 16 ea eb a0 a7 08 31 64 06 43 3b 77 7a 8c ff 00 17 9a f5 e4 44 d2 1a 1e 86 d1 63 e7 72 76 b6 39 aa 11 05 ec 28 0c 63 b9 2c 32 d6 a7 d2 33 77 ee 75 64 91 12 a2 f6 4c 5b fa 20 d0 3c 15 03 99 2a 86 2b 4d 9e 11 b1 be dd e5 6e b0 d3 46 c8 45 e2 e9 9a 81 32 70 ee 23 8b 6c c5 97 d4 66 30 d9 d2 c5 1e a2 b2 14 32 6a ab Data Ascii: /g=yCZ@`x4iq4{;W^iW}k,.TI}/y]wE4{)[}ef%mi9^}_Ca;>SeldQPGQsSHyJC(J1=G1dC;wzDcrv9(c,23wudL[ <*+MnFE2p#lf02j
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: 98 d7 33 3e e6 b8 d4 ba f5 5a 6c fd b5 2c 95 f4 36 15 14 13 74 0d 3c be a9 1c b9 aa bf 2f 93 09 84 e8 3d 47 a9 4c aa 9c e2 c2 4c 09 1a 4c f3 c2 91 71 2c b1 8c 12 1e 32 31 ea 8f 43 50 8d 00 82 50 02 04 4b 18 8c ad 87 63 0d 38 23 94 18 a8 e3 3b 26 a3 b4 ec 9a 0b 48 01 bf a3 b4 24 20 51 39 a6 81 25 39 4f 0b e5 c9 d4 e4 bd 87 37 99 ca fa ee 33 83 a7 cc c3 9c f6 ff 00 47 9a 88 ec a5 79 c6 7c 67 e9 38 2d 4c 3b ea 56 51 b3 99 56 ac a6 e7 ef c3 d4 34 99 ab 9c ae ab c6 37 f8 4d 27 61 ba ac b3 4f 3d 51 1e 90 9b cd 46 5b 7d 15 0f 3d 53 0d b9 d2 09 b0 6a 55 7d 84 14 4a f3 6d 4f 98 8d d1 4e 26 c7 d6 1c 1b 39 f4 b6 2d 5a 4a af 95 51 3e 54 19 3a 44 d3 44 94 29 25 09 58 67 31 c0 e6 f7 21 82 2b 02 34 49 d1 99 5d 0e c6 22 2b e3 cc 8a aa 3b 08 39 a6 0c ac 9b 64 79 01 4e 10 Data Ascii: 3>Zl,6t</=GLLLq,21CPPKc8#;&H$ Q9%9O73Gy\|g8-L;VQV47M'aO=QF[}=SjU}JmON&9-ZJQ>T:DD)%Xg1!+4I]"+;9dyN
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: 41 d3 73 73 7d 37 37 01 e9 bf 41 e8 44 22 34 61 0f a6 fa 9f 71 d0 40 62 98 a6 03 37 37 d3 73 73 73 ba 16 84 c6 30 98 61 82 28 88 26 e1 33 5b 95 53 b9 45 1d a1 2b 80 6b d0 f5 06 6e 6e 6e 6e 6f d7 7d 07 51 d4 f4 30 c3 0c 6f 53 fd 23 a0 30 18 a6 6e 6e 77 4d cd cd cd cd c2 d3 ba 13 09 84 c2 60 11 60 84 c5 fc a5 55 77 4a 6a d0 ad 22 8f ae a4 f5 1d 37 3b a6 e6 ff 00 fc 03 0c 30 88 c3 d4 fb 8f 4d c0 60 30 19 b9 b9 b9 be 9b 9b e8 4c dc 26 1e 80 40 26 e7 ee 54 93 1e 9d 04 ae 22 fa 1e a2 08 61 33 73 70 74 dc 07 d3 70 7f 41 86 1e 8c 21 1d 37 37 fd 03 d8 19 b9 b9 b9 be 9b 9b 9b 9b 84 c2 7a 18 4c 03 ad 49 b9 45 7f 74 a4 55 e8 7a 98 4f 41 01 86 1e 80 c0 d3 73 7e fb f5 33 7e 9a 84 46 10 fb 9f 5d cd f4 d8 11 2c 0f ed b8 66 e1 30 9e 9b 9b 84 f5 5f b3 45 72 9a e5 49 04 26 Data Ascii: Ass}77AD"4aq@b77sss0a(&3[SE+knnnno}Q0oS#0nnwM``UwJj"7;0M`0L&@&T"a3sptpA!77zLIEtUzOAs~3~F],f0_ErI&
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: 31 06 97 18 31 dc 7b ce 41 55 f8 eb dd f1 a6 6e 40 c2 a6 84 6c d6 b2 e4 15 66 65 be 4d b4 a7 8d 38 bf e1 38 cf dd fd 07 a1 87 a1 86 18 66 1e 37 90 9b f4 0c 3f d6 3a 0e 9b ea 61 ea 4c dc 1e 9b eb b8 7a 24 a6 a6 b8 85 5a ac cf e4 7e 2e 3d d6 66 72 53 13 86 18 a2 d1 e3 8b 4f 8d 6d 54 aa 59 e4 b6 05 18 d0 db f1 d6 fc 8f 83 59 b2 ce 4a fa d9 6c 5c 85 7c d4 a8 6e c4 3a 98 ff 00 46 a7 d0 5b 47 f4 1e 87 a1 86 19 55 5e 67 62 b5 2a d6 4c 30 c3 d3 7d 37 37 d3 7d 47 ae fa 1e a6 18 22 fb 1f 4c 5a 4d ef 63 bf 6f 90 ab 57 c4 f9 0e 92 b0 d7 7d bd 9d a1 ad 14 57 6d 9d cf fa 25 44 7b c2 8c 8b ed e4 72 74 19 95 7c cd c9 66 07 94 0d 4e ef ac 32 3b 7e 46 cd 16 17 65 6e e1 d4 7a 18 61 86 19 fb 98 c3 e3 d4 13 f2 f1 92 a6 18 61 fe a1 eb b9 be a6 18 20 ea 7d 0f 4c 5c 37 c9 29 4d Data Ascii: 11{AUn@lfeM88f7?:aLz$Z~.=frSOmTYYJl\\|n:F[GU^gb*L0}77}G"LZMcoW}Wm%D{rt\|fN2;~Fenzaa }L\7)M
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: ec 98 97 e2 52 f8 b9 eb 73 35 88 e6 d2 3b ed 50 ad e5 40 3c c6 c8 7f 8d 1a dd c5 75 0c b6 0b 66 7f 21 b9 65 86 c3 4e 3b 5d 05 23 ba ba fb 50 2e c5 bf 8a d2 76 cc f2 99 7f ea bf f7 65 08 38 3a bf 8d a1 84 c2 7a 1a dd 27 15 c9 ad e9 93 c8 59 86 78 f6 c7 e4 71 ce 35 dc 5c 5c bc 6c e8 fc 3d 5d d9 d8 0d 64 7e 1d 0c 5e 32 ba a7 c8 55 4a 2c a3 09 1f 21 c2 f4 3d 0c 30 c3 d0 f4 df 4c 5c 16 b6 2a 69 d8 6a 77 85 8d 65 8e e5 3b 82 ad 8f 0d ad 44 c8 e5 02 1c 9e 6d 0a 1e 4a e6 36 d8 6e 94 5c 2b 99 36 2a f1 b5 e3 9b 15 b8 8b 2b a5 b1 2e 46 c5 05 1f 10 69 3b 36 1e ff 00 c6 e4 36 15 ff 00 d8 2b dc ce 75 52 ee 11 50 0b 26 55 f3 2d bf 3a 6b 37 58 d6 76 ad 75 76 c0 9f 6c bd b2 c5 dc 3a 50 01 62 34 ab 63 f7 1a bf de e3 b1 c3 ec 50 4c 30 c3 1d 96 b5 cd e6 3c 8b 81 98 f8 79 18 Data Ascii: Rs5;P@<uf!eN;]#P.ve8:z'Yxq5\\l=]d~^2UJ,!=0L\ijwe;DmJ6n\+6+.Fi;66+uRP&U-:k7Xvuvl:Pb4cPL0<y
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: fb 14 5c 76 a5 98 d6 2e 95 21 d5 58 ce d4 e3 0b 17 8f b7 76 5b 8f 79 4c cb ac 02 b7 cc b1 1a 8c 53 7b f8 ab 45 66 b3 68 a5 0f 6e e2 53 6a ca 2c b5 a5 76 6d de c9 5b 96 00 77 4d 04 85 d8 b5 d2 ce df 25 2f e5 6b 98 f6 d8 7b a2 ef bb 2a e1 6b 2a 7f 0a 63 0c 61 6b f7 33 9d 9f d8 51 a8 c7 51 e1 0d 0b 4d ce 3a a7 7c 86 68 c6 64 e4 ae 3d 65 8d f6 97 d4 3f 64 7d c0 35 31 b1 6c c9 6a b1 71 f8 fa f3 b2 0e 55 dc 7d 80 4e 53 29 6c 6e 27 00 df 6d b6 0c 6a 71 77 71 cc c8 5a ab c8 cd b2 fb 48 d4 e2 a9 3d b7 d3 e1 c7 c4 a9 e9 e8 c7 53 33 9a ec 39 f9 cd 94 fe 41 dc cd f7 f9 18 b4 16 8b 89 28 c0 63 13 17 b4 7c 56 9e 37 de 22 d4 b1 2f c7 4a ee 0a 1a a0 dd e2 de f0 d5 2a 17 c8 5a 6b 36 78 df 2a c1 05 fa 98 a9 e4 95 53 f4 88 9b 42 23 59 b3 47 e8 0e e8 40 52 5b 53 2b 23 e8 2e Data Ascii: \v.!Xv[yLS{EfhnSj,vm[wM%/k{kcak3QQM:\|hd=e?d}51ljqU}NS)ln'mjqwqZH=S39A(c\|V7"/JZk6xSB#YG@R[S+#.
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: d2 c7 7d 0e 43 38 e4 bf 5d cd 6f a2 a6 97 0b 0b c8 d9 57 77 1a ea 35 9c cb 6b a8 70 98 05 8d fe 3a ab c8 b7 ba fc eb 1a ec 8e 3b 0f f1 cd ca 0f 65 ff 00 80 ac 8b 66 25 4a 83 91 ca 5a a8 b2 c7 b9 f2 ec 16 0c 6a fc 34 f1 d8 e2 aa f2 32 7e 33 08 0f f5 11 18 46 11 84 61 18 43 0f 53 37 30 b9 6b 31 66 b1 39 1a fc 79 5c 5b e3 73 55 df 3e 60 25 2e 57 99 54 a9 63 8a 84 5b 89 5e ce 56 3e 38 ca e5 6a 63 68 f3 bd 7f 1e b1 91 88 95 ce d0 3a 7e e5 96 ad 71 9c d8 70 2b dd b5 fe 35 33 6a 72 39 cd 73 2f 41 e8 a2 16 0c df 18 80 6a 4a 5c b3 64 36 37 0c f6 b9 a9 31 87 25 c8 f9 ee bc 8a 31 38 aa 1b 22 ec 8b 53 0a 8e 2f 1b ba ab 41 71 85 4f 71 b3 31 6b b7 99 cb 54 6a c5 9c 85 b8 be 3b b2 29 c4 95 6c d9 93 70 0c 3a 0f e9 30 88 c2 30 8c 23 08 c2 11 0f aa 3b 21 c7 e5 59 56 d5 a3 Data Ascii: }C8]oWw5kp:;ef%JZj42~3FaCS70k1f9y\[sU>`%.WTc[^V>8jch:~qp+53jr9s/AjJ\d671%18"S/AqOq1kTj;)lp:00#;!YV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.4	49834	34.111.35.152	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:51 UTC	696	OUT	GET /file/Ukozu20epRcRaVDvklUZ6TM2vj0mDF9eamysHAG6rX5w1yPDYfRyqAed3aJtDHE3scAVu0L9KuCcjwJJYjccsUwnjs1cCUTMvez85fCszOr7fBJEMunpA4Zae8WtFx_YCwGjD1nqHmEU1r1rfnuy6emFkIunTPy2Aq7k6FvkwRY8fydKLa6ClZhgfYLzbvZg-uw5v4qJvet_Mvy0OlMTTnhFXb1rtY2SLGwSM33GeoXd2z7Odq1TyNss3ivw41kMnpqncccJely9kKPyUCjvqYda0-kApF2v0xve_USsU6Iz7LapXzATCI_1H-Q4yh2zFvD_7qyNz72-Uh9kw7O0ag.jpg HTTP/1.1 Host: cdn4.cdn-telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:51 UTC	683	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Content-Length: 77753 Access-Control-Allow-Origin: * X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; sandbox X-Frame-Options: DENY X-Xss-Protection: 1; mode=block Access-Control-Expose-Headers: Accept-Ranges, Content-Range, Content-Length Accept-Ranges: bytes Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes Via: 1.1 google Date: Fri, 20 Sep 2024 22:48:50 GMT Cache-Control: public,max-age=7200 ETag: "39fd129970309d9a7751e9b128023fa9972f352a" Content-Type: image/jpeg Age: 1 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-09-20 22:48:51 UTC	707	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 2e 49 45 43 20 36 31 39 36 36 2d 32 2e 31 20 44 65 66 61 75 6c 74 20 52 47 42 20 63 6f 6c 6f 75 72 20 73 70 61 63 65 20 2d 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 64 65 73 63 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 77 69 6e 67 20 43 6f 6e 64 69 74 69 6f 6e 20 69 6e 20 49 45 43 36 31 39 36 36 2d 32 2e 31 00 00 00 00 00 00 00 00 00 00 00 2c 52 65 66 65 72 65 6e 63 65 20 56 69 65 Data Ascii: desc.IEC 61966-2.1 Default RGB colour space - sRGB.IEC 61966-2.1 Default RGB colour space - sRGBdesc,Reference Viewing Condition in IEC61966-2.1,Reference Vie
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: fe 30 35 30 6c 30 a4 30 db 31 12 31 4a 31 82 31 ba 31 f2 32 2a 32 63 32 9b 32 d4 33 0d 33 46 33 7f 33 b8 33 f1 34 2b 34 65 34 9e 34 d8 35 13 35 4d 35 87 35 c2 35 fd 36 37 36 72 36 ae 36 e9 37 24 37 60 37 9c 37 d7 38 14 38 50 38 8c 38 c8 39 05 39 42 39 7f 39 bc 39 f9 3a 36 3a 74 3a b2 3a ef 3b 2d 3b 6b 3b aa 3b e8 3c 27 3c 65 3c a4 3c e3 3d 22 3d 61 3d a1 3d e0 3e 20 3e 60 3e a0 3e e0 3f 21 3f 61 3f a2 3f e2 40 23 40 64 40 a6 40 e7 41 29 41 6a 41 ac 41 ee 42 30 42 72 42 b5 42 f7 43 3a 43 7d 43 c0 44 03 44 47 44 8a 44 ce 45 12 45 55 45 9a 45 de 46 22 46 67 46 ab 46 f0 47 35 47 7b 47 c0 48 05 48 4b 48 91 48 d7 49 1d 49 63 49 a9 49 f0 4a 37 4a 7d 4a c4 4b 0c 4b 53 4b 9a 4b e2 4c 2a 4c 72 4c ba 4d 02 4d 4a 4d 93 4d dc 4e 25 4e 6e 4e b7 4f 00 4f 49 4f 93 4f dd Data Ascii: 050l0011J11122c2233F3334+4e4455M555676r667$7`7788P8899B999:6:t::;-;k;;<'<e<<="=a==> >`>>?!?a??@#@d@@A)AjAAB0BrBBC:C}CDDGDDEEUEEF"FgFFG5G{GHHKHHIIcIIJ7J}JKKSKKLLrLMMJMMN%NnNOOIOO
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: 00 00 00 00 00 00 00 04 00 02 03 05 06 01 07 08 ff c4 00 41 11 00 01 03 02 04 02 06 08 03 08 03 00 02 03 01 00 01 00 02 03 04 11 05 12 21 31 41 51 13 22 61 71 91 d1 06 14 32 81 a1 b1 c1 f0 15 23 52 16 33 34 42 43 53 72 e1 35 62 f1 24 82 25 a2 b2 c2 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 cd 68 a2 8a f1 b5 ee 08 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 a2 92 48 a2 8a 29 24 8a 28 Data Ascii: A!1AQ"aq2#R34BCSr5b$%?h)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(H)$(
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: 5d fc 36 b3 f4 7c bc d2 38 85 2b 77 7f cf c9 60 d4 56 f8 7d 97 6e 43 39 d4 31 38 ff 00 f1 95 f8 d7 bf e9 5a b9 ff 00 f7 0c 4e 99 ff 00 d1 97 f8 d2 fc 32 b3 f4 7c bc d3 3f 13 a3 1f cf f3 f2 58 05 15 bc 39 ec c5 71 6f 95 6a 18 78 3c 0f ea 75 64 9f b6 98 bf ec eb 39 85 6d 37 d8 aa f3 c3 0a fc 6a 37 50 54 b7 76 7c bc d4 8d af a6 7f b2 ff 00 9f 92 c5 68 ad 62 57 61 93 a2 9c 2a ee c2 ba e7 f3 2a 18 c7 5f 1a 8a 91 d9 3c b8 e0 66 e2 c2 89 e4 00 d9 ce 3c fa d4 26 9a 50 6c 42 9c 54 44 76 2b 3c a2 ac 57 4d 26 ed b1 58 54 94 ba 72 47 c2 83 55 39 b3 53 09 4a 4a 92 56 a4 e7 3b 4f 4a 42 9a 63 b3 57 1d 53 13 05 cb 93 aa 2a b0 35 a3 1e 31 96 3f bb 14 a3 7a bd 87 0e 03 0b 1f 35 0a 93 d4 ea 3f 4a 83 d7 e9 7f 5f cf c9 58 e8 a8 a9 57 b4 44 8b 1d e7 1a 25 d9 07 2d b0 0f c7 b3 Data Ascii: ]6\|8+w`V}nC918ZN2\|?X9qojx<ud9m7j7PTv\|hbWa*_<f<&PlBTDv+<WM&XTrGU9SJJV;OJBcWS51?z5?J_XWD%-
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: 12 e8 d8 2b 00 96 5e 48 1b db 56 0e 08 38 f5 ae 42 d6 dd 94 de 74 24 49 13 9f 50 7e 1b 73 7d dd b5 20 12 76 10 48 51 e0 01 d3 1f 3a df 60 38 d4 35 d4 ed a6 a8 7f e6 8d 35 fe 6e 56 54 38 95 04 8c 79 9e 06 f5 2d 73 6e 1c f4 ed ec 57 6d 29 76 72 74 a6 23 b0 4a dc 71 41 20 0f aa ba 3d 98 8a 8b a7 83 6b 3f 12 1a 07 eb c5 61 be ce 5a 26 65 c8 ae fb 74 69 6c c6 1f 0c 7e f1 24 6f fa 27 72 72 39 1e a2 b7 8d 59 25 36 cb 7b 89 ce 12 a4 e0 7c b0 7f 0a ca 7a 4b 31 9a b1 b4 f1 ea 1a 75 ef ff 00 4a f7 06 8f a3 8d ae 77 b4 ed 7b 80 fb ba a1 4c 97 bd d0 82 ae 07 27 9e be 94 d2 54 95 14 fc 26 a1 5a 98 b7 e4 b8 b5 67 6a 94 76 fc bc 2a 6a df 6e 72 e9 25 a6 19 ea b2 01 3e 43 ce ad e1 85 b4 70 5d da 71 2b 3f 89 d6 49 88 d5 11 1e a3 60 a2 5d 5a d5 90 4e 45 34 5c 15 ba 72 9e 2b Data Ascii: +^HV8Bt$IP~s} vHQ:`855nVT8y-snWm)vrt#JqA =k?aZ&etil~$o'rr9Y%6{\|zK1uJw{L'T&Zgjv*jnr%>Cp]q+?I`]ZNE4\r+
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: 33 db 00 c7 14 f0 4a e3 af df 41 3e f7 46 32 50 1b 60 9c 4c 93 8c e0 f5 a8 49 0e 95 93 c9 c5 38 7d 65 c2 79 a8 f9 2b d8 93 52 c4 cb 95 1b ae e3 72 93 71 e0 9e a6 95 81 38 c7 92 db 89 3d 14 3c 7d 6a 11 f9 27 77 26 86 64 80 79 38 a3 cc 57 6a 85 cf 07 45 be 59 66 a6 7c 04 10 72 70 3f 45 22 6d 51 85 e6 15 c2 e0 d2 5f 6a 3b c9 71 2c e0 7c 45 27 39 20 f8 7e ba ad f6 7d 71 12 47 72 15 9c 71 80 79 3d 3a 7a d5 ca 6a 1c 50 25 c4 2d 2f 83 dc 96 d0 38 c7 81 ac 95 4b 4c 12 90 0d ae b3 92 83 14 9a 29 b9 d1 51 73 9c a9 76 a4 28 c4 92 bd c0 10 00 6d 47 aa 38 e0 63 cb ca ac 51 61 b7 06 27 bb e3 2a ea a2 71 c9 f3 14 86 97 7d 16 78 2e 44 9c 33 ef 29 ca 9a 38 c2 16 71 85 73 d1 7c 62 9a 5e ef 51 6d 51 9c 76 43 80 21 29 51 47 c5 ca f1 fb d1 eb 55 d1 37 33 cd fd ca 29 6c 75 6f Data Ascii: 3JA>F2P`LI8}ey+Rrq8=<}j'w&dy8WjEYf\|rp?E"mQ_j;q,\|E'9 ~}qGrqy=:zjP%-/8KL)Qsv(mG8cQa'*q}x.D3)8qs\|b^QmQvC!)QGU73)luo
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: 46 d4 b7 09 fa 3b b6 1b 0d c2 55 a9 c8 2e 2a 3d c2 e7 6a 71 b5 39 ca 52 63 ba a5 24 21 61 48 2a 39 50 c9 c1 04 ab 23 1b 96 fa 3d 86 17 08 da d7 66 1f cc 76 27 b4 2a 43 5b 56 1a 65 24 58 ee 38 db ff 00 16 4d 6e 43 0e c3 ef d6 ae ed bc 64 7f 08 d6 a9 a7 3b 31 d5 eb 83 0e e5 66 b7 30 ec 69 8c 21 f6 9c 54 b4 05 14 2d 21 49 3d 78 e0 8e 2b 31 ed 2a c4 e6 84 d6 77 fb 18 c3 70 d0 e9 7a 10 49 24 08 ee 0d c8 00 9e 4e d0 76 9f 54 9a de 6c da f2 f7 d9 c7 b3 5b ba 9b 55 4a 8e ab 82 20 6d b0 b4 59 48 c0 53 69 44 46 d4 91 8d fc 80 b5 78 ed 27 ca a9 70 fc 21 95 95 53 45 5d 7b 37 80 d0 68 78 fd 11 b5 b5 2c a7 8a 37 d2 00 2f c4 ee a1 64 ae e7 a6 6e cc da f5 2b 48 8f 2d d6 03 e9 4a 5c 0b 05 05 45 39 c8 3e 69 34 b5 e2 f7 1e 14 35 2d c5 24 0c 78 e3 ca a5 3b 59 7c eb 0e cb 74 Data Ascii: F;U.=jq9Rc$!aH9P#=fv'C[Ve$X8MnCd;1f0i!T-!I=x+1wpzI$NvTl[UJ mYHSiDFx'p!SE]{7hx,7/dn+H-J\E9>i45-$x;Y\|t
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: 3a 78 e7 a7 85 64 97 94 88 89 74 a8 29 4a c7 01 47 24 03 e1 8f 0a d3 b5 55 ed b4 a5 c7 19 f0 56 0a 94 9c 81 e9 59 25 e2 6a 9e 6c be f2 89 71 6e 60 95 78 f5 3f b7 ce 94 6a 0a ab e6 b2 85 50 de 4a da f8 7d 29 e5 be 4a d2 b0 0e 41 cd 37 4b cd 81 90 05 7d 69 d4 ef 04 1c 1c d1 40 ea 86 d1 5e 6d ca 5b 9b 06 fc a4 e3 22 a6 cc 56 90 d2 b2 0f 3d 0a aa 97 0e e5 dc 00 41 c9 f9 d4 a8 bc ad d4 00 a5 12 2a 70 45 94 16 37 d1 7b bb 04 ae 0c 86 87 20 a4 fe 8a ca 17 1f 6b ab 18 e8 a3 5a 62 a4 ef 6d dc a7 8c 1e b5 4d 7e 30 54 87 0e 3a a8 9c 50 fd 26 52 a8 71 3e a9 69 51 41 25 23 81 5e f6 90 32 7a 53 b7 9a 0d e3 8a f0 b0 0a 7e aa e6 7b aa f8 e7 e6 9a 95 80 93 8a 88 9c ee 0e 2a 4d de 33 d0 54 2d c4 fc 54 64 03 ac 8f e9 f3 05 15 25 60 13 8a 67 df a8 1e 0d 2b 24 71 49 42 65 b9 Data Ascii: :xdt)JG$UVY%jlqn`x?jPJ})JA7K}i@^m["V=ApE7{ kZbmM~0T:P&Rq>iQA%#^2zS~{M3T-Td%`g+$qIBe
2024-09-20 22:48:51 UTC	1390	IN	Data Raw: c7 30 17 b5 fa 24 4b 30 f2 ee d3 f4 4d b4 3d bd 5a f7 b5 0b 55 bd a5 b6 63 5b dc 17 29 61 58 39 69 a5 8f 87 1e 3b 94 a4 24 8f 22 6a a3 ed 73 ac 62 6a 7e d1 9a b2 c4 9b ef 11 2c 31 03 2e b6 14 0a 11 29 44 a9 cc 60 f5 09 ee d2 7c 41 49 1e 15 d1 3a 26 e3 a7 fb 3d ec 76 2e b9 b8 59 5b 32 99 83 99 92 21 44 6f de de 49 7b 1b 77 12 92 ae 76 9c 15 63 8f 4a ce 9c ed c3 b1 4b ac 89 33 a4 f6 5a fc a9 52 1c 53 cf bc ee 9c 80 b7 1d 5a 8e 54 a5 28 b8 49 24 9c 92 7a 9a df d0 e1 f0 61 d8 63 60 32 86 97 d9 c4 9b f2 d0 21 65 a8 92 a6 b0 ca 18 5c 1b a2 95 ec d6 42 3b 6d f6 64 9f 61 5c 46 dc b9 d9 a3 39 6b 88 38 48 f7 88 ed 25 51 96 0f 24 70 5b 49 3c 64 85 f8 1a a7 fb 15 6a 8f fc a1 d5 ba 76 73 2e b3 39 c8 ac c9 da b4 14 94 77 2b 2d b8 95 03 c8 20 bc 9e 31 e0 6a ed a2 3d a2 Data Ascii: 0$K0M=ZUc[)aX9i;$"jsbj~,1.)D`\|AI:&=v.Y[2!DoI{wvcJK3ZRSZT(I$zac`2!e\B;mda\F9k8H%Q$p[I<djvs.9w+- 1j=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.4	49835	178.154.131.217	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:51 UTC	591	OUT	GET /partner-code-bundles/1117086/40014e7ae9852a9faa7b.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://xn--r1a.website sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:51 UTC	768	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:51 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 124891 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "ae97b143d2893673c378d297cc02d1fe" Expires: Mon, 21 Sep 2054 05:24:51 GMT Last-Modified: Wed, 18 Sep 2024 15:26:57 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:51 UTC	15616	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 61 64 66 6f 78 5f 62 61 6e 6e 65 72 73 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 65 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 65 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e Data Ascii: /! v:1117086 b:default c:adfox_banners /try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Fun
2024-09-20 22:48:52 UTC	16384	IN	Data Raw: 74 61 69 6e 65 72 3a 74 68 69 73 2e 77 72 61 70 70 65 72 7c 7c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2c 64 6f 63 75 6d 65 6e 74 3a 74 68 69 73 2e 64 6f 63 7d 2c 65 29 29 3b 6f 26 26 28 74 68 69 73 2e 77 72 61 70 70 65 72 3f 74 68 69 73 2e 77 72 61 70 70 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 3a 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 29 2c 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 65 6c 29 26 26 28 74 68 69 73 2e 77 72 61 70 70 65 72 3f 74 68 69 73 2e 77 72 61 70 70 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 65 6c 29 3a 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 75 6c 6c 3d 3d 61 3f 76 6f Data Ascii: tainer:this.wrapper\|\|this.container,document:this.doc},e));o&&(this.wrapper?this.wrapper.appendChild(o):this.container.appendChild(o)),(null==a?void 0:a.el)&&(this.wrapper?this.wrapper.appendChild(null==a?void 0:a.el):this.container.appendChild(null==a?vo
2024-09-20 22:48:52 UTC	16384	IN	Data Raw: 73 54 65 78 74 3d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 22 2e 63 6f 6e 63 61 74 28 72 2e 77 69 64 74 68 2c 22 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 22 29 2e 63 6f 6e 63 61 74 28 72 2e 68 65 69 67 68 74 2c 22 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 29 2c 74 68 69 73 2e 77 72 61 70 70 65 72 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 29 7b 76 61 72 20 6f 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e Data Ascii: sText="\n width: ".concat(r.width,";\n height: ").concat(r.height,";\n margin: 0 auto;\n "),this.wrapper.innerHTML=""),this.container){var o=Array.prototype.slice.call(this.container.
2024-09-20 22:48:52 UTC	16384	IN	Data Raw: 69 6c 69 74 79 28 29 7d 2c 69 6e 6c 69 6e 65 53 74 79 6c 65 73 3a 6f 2c 6c 6f 67 50 72 65 66 69 78 3a 22 42 61 6e 6e 65 72 48 74 6d 6c 22 2c 73 68 6f 75 6c 64 53 68 6f 77 53 74 69 63 6b 79 41 64 3a 74 68 69 73 2e 70 61 72 61 6d 73 2e 73 68 6f 75 6c 64 53 68 6f 77 53 74 69 63 6b 79 41 64 7d 2c 74 68 69 73 2e 67 65 74 4b 65 62 61 62 41 6e 64 4c 61 62 65 6c 50 72 6f 70 73 28 29 29 29 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 50 72 65 61 63 74 43 6f 6d 70 6f 6e 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 30 2c 6e 28 36 31 36 31 38 29 2e 72 65 6e 64 65 72 29 28 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 49 6e 6c 69 6e Data Ascii: ility()},inlineStyles:o,logPrefix:"BannerHtml",shouldShowStickyAd:this.params.shouldShowStickyAd},this.getKebabAndLabelProps()))),this.container)},e.prototype.destroyPreactComponent=function(){(0,n(61618).render)(null,this.container)},e.prototype.getInlin
2024-09-20 22:48:52 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 33 39 30 32 29 2e 6c 6f 67 67 65 72 2e 65 72 72 6f 72 28 74 2c 22 41 64 74 75 6e 65 20 62 75 6e 64 6c 65 20 6c 6f 61 64 69 6e 67 20 65 72 72 6f 72 22 29 7d 29 29 7d 29 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 65 65 64 62 61 63 6b 22 2c 22 74 72 75 65 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 61 6d 65 22 2c 22 61 64 74 75 6e 65 2d 66 65 65 64 62 61 63 6b 22 29 2c 77 26 26 28 69 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 31 30 30 30 30 22 29 2c 69 2e 73 74 79 6c 65 2e 62 Data Ascii: unction(t){return n(3902).logger.error(t,"Adtune bundle loading error")}))}))).then((function(e){var i=document.createElement("div");i.setAttribute("data-feedback","true"),i.setAttribute("data-name","adtune-feedback"),w&&(i.style.zIndex="10000"),i.style.b
2024-09-20 22:48:52 UTC	16384	IN	Data Raw: 69 64 2c 72 2c 22 22 5d 5d 3a 72 3b 28 65 3d 74 2e 65 78 70 6f 72 74 73 3d 72 2e 6c 6f 63 61 6c 73 7c 7c 7b 7d 29 2e 5f 67 65 74 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 65 2e 5f 67 65 74 43 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 22 2b 72 7d 2c 65 2e 5f 69 6e 73 65 72 74 43 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 69 2c 74 29 7d 7d 2c 37 39 38 36 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 27 3c 73 76 67 20 77 69 64 74 68 3d 22 38 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 34 22 20 63 79 3d 22 Data Ascii: id,r,""]]:r;(e=t.exports=r.locals\|\|{})._getContent=function(){return i},e._getCss=function(){return""+r},e._insertCss=function(t){return o(i,t)}},7986:function(t){t.exports='<svg width="8" height="20" xmlns="http://www.w3.org/2000/svg"><circle cx="4" cy="
2024-09-20 22:48:52 UTC	16384	IN	Data Raw: 68 28 67 28 6f 2e 70 61 72 74 73 5b 61 5d 2c 65 29 29 7d 65 6c 73 65 7b 76 61 72 20 73 3d 5b 5d 3b 66 6f 72 28 61 3d 30 3b 61 3c 6f 2e 70 61 72 74 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 73 2e 70 75 73 68 28 67 28 6f 2e 70 61 72 74 73 5b 61 5d 2c 65 29 29 3b 72 5b 6f 2e 69 64 5d 3d 7b 69 64 3a 6f 2e 69 64 2c 72 65 66 73 3a 31 2c 70 61 72 74 73 3a 73 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 7b 7d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 2c 69 3d 6f 5b 30 5d 2c 61 3d 7b 63 73 73 3a 6f 5b 31 5d 2c 6d 65 64 69 61 3a 6f 5b 32 5d 2c 73 6f 75 72 63 65 4d 61 70 3a 6f 5b 33 5d 7d 3b 6e 5b 69 5d 3f 6e 5b 69 5d 2e 70 61 72 74 73 2e 70 75 73 68 28 61 29 3a 65 Data Ascii: h(g(o.parts[a],e))}else{var s=[];for(a=0;a<o.parts.length;a++)s.push(g(o.parts[a],e));r[o.id]={id:o.id,refs:1,parts:s}}}}function p(t){for(var e=[],n={},r=0;r<t.length;r++){var o=t[r],i=o[0],a={css:o[1],media:o[2],sourceMap:o[3]};n[i]?n[i].parts.push(a):e
2024-09-20 22:48:52 UTC	10971	IN	Data Raw: 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 61 72 67 73 3d 74 2c 74 68 69 73 2e 69 73 44 65 74 65 72 6d 69 6e 65 64 3d 21 30 2c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 3e 3d 65 2e 6f 62 73 65 72 76 65 72 2e 74 68 72 65 73 68 6f 6c 64 73 5b 30 5d 3b 65 2e 61 72 67 73 2e 63 61 6c 6c 62 61 63 6b 28 6e 29 7d 2c 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 4d 61 74 68 2e 6d 61 78 28 6f 2c 74 68 69 73 2e 61 72 67 73 2e 70 6f 72 74 69 6f 6e 29 2c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b Data Ascii: (t){var e=this;this.args=t,this.isDetermined=!0,this.callback=function(t){var n=t[t.length-1].intersectionRatio>=e.observer.thresholds[0];e.args.callback(n)},this.threshold=Math.max(o,this.args.portion),this.observer=new IntersectionObserver(this.callback

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.4	49836	178.154.131.215	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:51 UTC	388	OUT	GET /partner-code-bundles/1117086/17fb885b38886c06b632.js HTTP/1.1 Host: yastatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:51 UTC	766	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:51 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 9208 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "bfbede26d7bd8ae58f10aea5819767fd" Expires: Mon, 21 Sep 2054 05:24:51 GMT Last-Modified: Wed, 18 Sep 2024 15:26:57 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:51 UTC	9208	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 39 32 37 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 72 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 72 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 72 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 Data Ascii: /! v:1117086 b:default c:927 /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const r=e.toString();return/\[native code\]/.test(r)\|\|/\/\* source code not available \*\//.test(r)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.prot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.4	49837	178.154.131.217	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:51 UTC	591	OUT	GET /partner-code-bundles/1117086/ee55314d29f5e472edba.js HTTP/1.1 Host: yastatic.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: http://xn--r1a.website sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:52 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:52 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 45670 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "c371deee9efccfea4089ef7b0fded83d" Expires: Mon, 21 Sep 2054 05:24:52 GMT Last-Modified: Wed, 18 Sep 2024 15:26:58 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:52 UTC	15617	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 66 6c 6f 6f 72 41 64 43 6f 6e 74 72 6f 6c 6c 65 72 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 65 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 65 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 Data Ascii: /! v:1117086 b:default c:floorAdController /try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind
2024-09-20 22:48:52 UTC	16384	IN	Data Raw: 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 3d 76 6f 69 64 20 30 2c 65 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 30 2c 6e 28 34 30 36 31 29 2e 66 69 6c 74 65 72 29 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 72 65 74 75 72 6e 28 30 2c 6e 28 31 38 35 32 32 29 2e 69 6e 64 65 78 4f 66 29 28 6f 2c 74 29 3d 3d 3d 65 7d 29 29 7d 7d 2c 37 39 30 31 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 69 73 49 6e 53 68 61 64 6f 77 44 6f 6d 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 28 30 2c 6e 28 32 30 35 Data Ascii: n(t,e,n){"use strict";e.r=void 0,e.r=function(t){return(0,n(4061).filter)(t,(function(t,e,o){return(0,n(18522).indexOf)(o,t)===e}))}},79010:function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.isInShadowDom=void 0;var o=(0,n(205
2024-09-20 22:48:52 UTC	13669	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 62 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 29 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 74 29 7b 76 61 72 20 65 3d 72 2e 63 6f 6e 74 65 78 74 5b 74 2e 5f 5f 63 5d 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 74 2e 5f 5f 3b 76 61 72 20 6e 3d 64 28 6f 2b 2b 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 2e 5f 5f 26 26 28 6e 2e 5f 5f 3d 21 30 2c 65 2e 73 75 62 28 72 29 29 2c 65 2e 70 72 6f 70 73 2e 76 61 6c 75 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 29 7b 61 2e 6f 70 74 69 6f 6e 73 2e 75 73 65 44 65 62 75 67 56 61 6c 75 65 26 26 61 2e 6f 70 74 69 6f 6e 73 2e 75 73 65 44 65 62 75 67 56 61 6c 75 65 28 65 3f 65 28 74 29 3a 74 29 7d 66 75 6e 63 74 69 6f 6e Data Ascii: }function g(t,e){return b((function(){return t}),e)}function S(t){var e=r.context[t.__c];if(!e)return t.__;var n=d(o++);return null==n.__&&(n.__=!0,e.sub(r)),e.props.value}function A(t,e){a.options.useDebugValue&&a.options.useDebugValue(e?e(t):t)}function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.4	49838	77.88.55.88	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:51 UTC	968	OUT	POST /clck/click HTTP/1.1 Host: yandex.ru Connection: keep-alive Content-Length: 1409 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: text/plain;charset=UTF-8 Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: i=GmNVkS+1q5EG+QZWaZequSAdEsZAYIQJqYkSXqpBiBW8RHxpVAeNYZqWeWLxv59vOg/zx7VfGq3GoEcsNjaaQUQpdjA=; yandexuid=1141320511726872524; yashr=6680397161726872524; receive-cookie-deprecation=1; bh=EkAiR29vZ2xlIENocm9tZSI7dj0iMTE3IiwgIk5vdDtBPUJyYW5kIjt2PSI4IiwgIkNocm9taXVtIjt2PSIxMTciKgI/MDoJIldpbmRvd3MiYMz3t7cGah7cyuH/CJLYobEDn8/h6gP7+vDnDev//fYPutfOhwg=
2024-09-20 22:48:51 UTC	1409	OUT	Data Raw: 2f 72 65 71 69 64 3d 38 32 34 39 35 34 31 37 32 36 38 37 32 35 32 37 32 36 39 2f 70 61 74 68 3d 36 39 30 2e 32 33 35 34 2f 73 6c 6f 74 73 3d 31 30 39 34 30 31 30 2c 30 2c 34 37 3b 31 31 31 34 35 38 37 2c 30 2c 32 3b 31 31 30 38 39 31 30 2c 30 2c 32 30 3b 31 31 30 36 36 37 39 2c 30 2c 36 34 3b 31 30 39 34 39 38 30 2c 30 2c 35 36 3b 31 31 31 36 31 38 31 2c 30 2c 39 30 3b 31 31 31 32 35 38 32 2c 30 2c 31 39 3b 31 30 33 35 34 36 30 2c 30 2c 31 37 3b 31 30 39 37 39 31 39 2c 30 2c 33 35 3b 31 31 30 37 32 38 36 2c 30 2c 31 33 3b 31 31 31 36 35 30 33 2c 30 2c 35 3b 31 31 31 30 38 37 35 2c 30 2c 38 35 3b 31 31 31 31 33 36 30 2c 30 2c 36 36 3b 31 31 31 30 38 37 39 2c 30 2c 34 35 3b 31 31 31 30 38 38 33 2c 30 2c 35 34 3b 31 30 38 35 39 31 39 2c 30 2c 32 35 3b 31 31 Data Ascii: /reqid=8249541726872527269/path=690.2354/slots=1094010,0,47;1114587,0,2;1108910,0,20;1106679,0,64;1094980,0,56;1116181,0,90;1112582,0,19;1035460,0,17;1097919,0,35;1107286,0,13;1116503,0,5;1110875,0,85;1111360,0,66;1110879,0,45;1110883,0,54;1085919,0,25;11
2024-09-20 22:48:52 UTC	768	IN	Data Raw: 48 54 54 50 2f 31 2e 30 20 32 30 30 20 4f 6b 0d 0a 41 63 63 65 70 74 2d 43 48 3a 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2d 56 65 72 73 69 6f 6e 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 62 69 6c 65 2c 20 53 65 63 2d 43 48 2d 55 41 2d 4d 6f 64 65 6c 2c 20 53 65 63 2d 43 48 2d 55 41 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2d 4c 69 73 74 2c 20 53 65 63 2d 43 48 2d 55 41 2d 57 6f 57 36 34 2c 20 53 65 63 2d 43 48 2d 55 41 2d 41 72 63 68 2c 20 53 65 63 2d 43 48 2d 55 41 2d 42 69 74 6e 65 73 73 2c 20 53 65 63 2d 43 48 2d 55 41 2d 50 6c 61 74 66 6f 72 6d 2c 20 53 65 63 2d 43 48 2d 55 41 2d 46 75 6c 6c 2d 56 65 72 73 69 6f 6e 2c 20 56 69 65 77 70 6f 72 74 2d 57 69 64 74 68 2c 20 44 50 52 2c 20 44 65 76 69 63 65 2d Data Ascii: HTTP/1.0 200 OkAccept-CH: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Viewport-Width, DPR, Device-
2024-09-20 22:48:52 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 ff ff ff 21 f9 04 01 00 00 01 00 2c 00 00 00 00 01 00 01 00 00 02 02 4c 01 00 3b Data Ascii: GIF89a!,L;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.4	49841	178.154.131.215	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:51 UTC	388	OUT	GET /partner-code-bundles/1117086/8191d15d1fd1e4c04fa3.js HTTP/1.1 Host: yastatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:52 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:52 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 24545 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "afdd155ac8eec69aa189c7ceeb9e6910" Expires: Mon, 21 Sep 2054 05:21:00 GMT Last-Modified: Wed, 18 Sep 2024 15:26:57 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:52 UTC	15617	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 39 35 33 37 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 6e 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 6e 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 6e 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f Data Ascii: /! v:1117086 b:default c:9537 /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const n=e.toString();return/\[native code\]/.test(n)\|\|/\/\* source code not available \*\//.test(n)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.pro
2024-09-20 22:48:52 UTC	8928	IN	Data Raw: 74 7d 66 75 6e 63 74 69 6f 6e 20 41 28 65 2c 6e 2c 74 2c 72 2c 6f 29 7b 76 61 72 20 75 2c 69 2c 63 2c 6c 2c 5f 3b 69 66 28 6f 3f 22 63 6c 61 73 73 4e 61 6d 65 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 6c 61 73 73 22 29 3a 22 63 6c 61 73 73 22 3d 3d 3d 6e 26 26 28 6e 3d 22 63 6c 61 73 73 4e 61 6d 65 22 29 2c 22 6b 65 79 22 3d 3d 3d 6e 7c 7c 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 6e 29 3b 65 6c 73 65 20 69 66 28 22 73 74 79 6c 65 22 3d 3d 3d 6e 29 69 66 28 75 3d 65 2e 73 74 79 6c 65 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 74 29 75 2e 63 73 73 54 65 78 74 3d 74 3b 65 6c 73 65 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 26 26 28 75 2e 63 73 73 54 65 78 74 3d 22 22 2c 72 3d 6e 75 6c 6c 29 2c 72 29 66 6f 72 28 69 20 69 6e 20 72 29 Data Ascii: t}function A(e,n,t,r,o){var u,i,c,l,_;if(o?"className"===n&&(n="class"):"class"===n&&(n="className"),"key"===n\|\|"children"===n);else if("style"===n)if(u=e.style,"string"==typeof t)u.cssText=t;else{if("string"==typeof r&&(u.cssText="",r=null),r)for(i in r)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.4	49840	178.154.131.215	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:51 UTC	388	OUT	GET /partner-code-bundles/1117086/77b050485636874c5aed.js HTTP/1.1 Host: yastatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:52 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:52 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 44580 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "344f097e4203cae3e76254b37374d36c" Expires: Mon, 21 Sep 2054 05:21:14 GMT Last-Modified: Wed, 18 Sep 2024 15:26:57 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:52 UTC	15617	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 36 36 36 30 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 6f 6e 2e 70 72 6f Data Ascii: /! v:1117086 b:default c:6660 /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Function.pro
2024-09-20 22:48:52 UTC	16384	IN	Data Raw: 6e 28 38 35 39 38 31 29 3b 63 6f 6e 73 74 20 41 3d 65 3d 3e 28 30 2c 79 2e 45 29 28 65 2e 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 29 2c 77 3d 41 28 77 69 6e 64 6f 77 29 3b 63 6c 61 73 73 20 45 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 7b 64 65 66 61 75 6c 74 50 72 6f 62 61 62 69 6c 69 74 79 3a 65 2c 72 6e 64 3a 74 2c 76 73 69 64 3a 6e 2c 73 65 72 76 69 63 65 4e 61 6d 65 3a 72 2c 73 65 72 76 69 63 65 56 65 72 73 69 6f 6e 3a 6f 7d 29 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 68 69 73 2c 22 72 6e 64 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e Data Ascii: n(85981);const A=e=>(0,y.E)(e.navigator.sendBeacon),w=A(window);class E{constructor({defaultProbability:e,rnd:t,vsid:n,serviceName:r,serviceVersion:o}){Object.defineProperty(this,"rnd",{enumerable:!0,configurable:!0,writable:!0,value:void 0}),Object.defin
2024-09-20 22:48:52 UTC	12579	IN	Data Raw: 4e 5f 50 41 52 41 4d 45 54 45 52 53 5f 5f 29 2c 69 3d 28 65 2c 74 29 3d 3e 7b 65 2e 5f 5f 41 44 5f 53 44 4b 5f 53 43 52 49 50 54 5f 53 45 53 53 49 4f 4e 5f 50 41 52 41 4d 45 54 45 52 53 5f 5f 3d 74 7d 2c 61 3d 65 3d 3e 65 2e 5f 5f 41 44 5f 53 44 4b 5f 53 43 52 49 50 54 5f 53 45 53 53 49 4f 4e 5f 50 41 52 41 4d 45 54 45 52 53 5f 5f 2c 73 3d 65 3d 3e 7b 64 65 6c 65 74 65 20 65 2e 5f 5f 41 44 5f 53 44 4b 5f 53 43 52 49 50 54 5f 53 45 53 53 49 4f 4e 5f 50 41 52 41 4d 45 54 45 52 53 5f 5f 7d 7d 2c 37 37 35 39 39 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6e 2e 64 28 74 2c 7b 24 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6f 7d 7d 29 3b 76 61 72 20 72 3d 6e 28 37 37 33 34 33 29 3b 63 6f 6e 73 74 20 6f 3d 28 65 2c 74 29 3d 3e 7b 76 61 72 20 Data Ascii: N_PARAMETERS__),i=(e,t)=>{e.__AD_SDK_SCRIPT_SESSION_PARAMETERS__=t},a=e=>e.__AD_SDK_SCRIPT_SESSION_PARAMETERS__,s=e=>{delete e.__AD_SDK_SCRIPT_SESSION_PARAMETERS__}},77599:function(e,t,n){n.d(t,{$:function(){return o}});var r=n(77343);const o=(e,t)=>{var

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.4	49842	178.154.131.215	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:52 UTC	388	OUT	GET /partner-code-bundles/1117086/f7c4024c86a402702d20.js HTTP/1.1 Host: yastatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:52 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:52 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 29886 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "59e2c5670b6452a790b613190896347d" Expires: Mon, 21 Sep 2054 05:24:52 GMT Last-Modified: Wed, 18 Sep 2024 15:26:58 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow
2024-09-20 22:48:52 UTC	15617	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 65 72 72 6f 72 43 6f 75 6e 74 65 72 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 7c 7c 21 65 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 74 3d 65 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 74 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 74 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 Data Ascii: /! v:1117086 b:default c:errorCounter /try{var cnc=function(e){if(!e\|\|!e.toString)return!1;const t=e.toString();return/\[native code\]/.test(t)\|\|/\/\* source code not available \*\//.test(t)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Func
2024-09-20 22:48:52 UTC	14269	IN	Data Raw: 3b 72 65 74 75 72 6e 20 6f 28 74 2c 65 29 2c 74 7d 28 6e 28 37 31 36 32 36 29 29 3b 74 2e 69 73 48 6f 73 74 49 6e 4c 69 73 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 6f 69 64 20 30 3d 3d 3d 65 26 26 28 65 3d 77 69 6e 64 6f 77 29 3b 76 61 72 20 72 3d 28 30 2c 6e 28 35 38 34 38 34 29 2e 67 65 74 48 6f 73 74 57 69 74 68 50 61 74 68 29 28 65 29 3b 69 66 28 28 30 2c 6e 28 36 34 30 35 30 29 2e 69 73 54 75 72 62 6f 50 61 67 65 29 28 65 29 7c 7c 6e 28 35 34 37 35 36 29 2e 52 66 29 72 65 74 75 72 6e 21 31 3b 66 6f 72 28 76 61 72 20 6f 3d 5b 5d 2c 61 3d 30 3b 61 3c 74 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 7b 76 61 72 20 75 3d 74 5b 61 5d 2c 63 3d 69 5b 75 5d 3b 6f 3d 6f 2e 63 6f 6e 63 61 74 28 63 29 7d 66 6f 72 28 76 61 72 20 73 3d 30 3b 73 3c 6f 2e 6c 65 6e Data Ascii: ;return o(t,e),t}(n(71626));t.isHostInList=function(e,t){void 0===e&&(e=window);var r=(0,n(58484).getHostWithPath)(e);if((0,n(64050).isTurboPage)(e)\|\|n(54756).Rf)return!1;for(var o=[],a=0;a<t.length;a++){var u=t[a],c=i[u];o=o.concat(c)}for(var s=0;s<o.len

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.4	49839	178.154.131.215	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:52 UTC	366	OUT	GET /safeframe-bundles/0.83/host.js HTTP/1.1 Host: yastatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:52 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:52 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 33703 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "2435549eac66915d7464ee7b9efce038" Expires: Mon, 21 Sep 2054 05:23:56 GMT Last-Modified: Wed, 03 Nov 2021 13:42:58 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:52 UTC	15617	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 6e 29 7b 69 66 28 74 5b 6e 5d 29 72 65 74 75 72 6e 20 74 5b 6e 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 6e 5d 3d 7b 69 3a 6e 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 65 5b 6e 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 6f 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 65 2c 6f 2e 63 3d 74 2c 6f 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 6f 2e 6f 28 65 2c 74 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 7d 29 7d 2c 6f 2e 72 3d 66 75 6e Data Ascii: !function(e){var t={};function o(n){if(t[n])return t[n].exports;var r=t[n]={i:n,l:!1,exports:{}};return e[n].call(r.exports,r,r.exports,o),r.l=!0,r.exports}o.m=e,o.c=t,o.d=function(e,t,n){o.o(e,t)\|\|Object.defineProperty(e,t,{enumerable:!0,get:n})},o.r=fun
2024-09-20 22:48:52 UTC	16384	IN	Data Raw: 63 65 6f 66 20 45 6c 65 6d 65 6e 74 3f 74 2e 63 6f 6e 66 2e 64 65 73 74 3a 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 74 2e 63 6f 6e 66 2e 64 65 73 74 29 29 26 26 6e 29 7b 76 61 72 20 75 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 2e 73 65 74 41 74 74 72 28 75 2c 22 69 64 22 2c 74 2e 63 6f 6e 66 2e 64 65 73 74 29 2c 6e 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 75 29 7d 6c 2e 73 74 61 74 75 73 2e 73 65 74 50 6f 73 69 74 69 6f 6e 52 65 61 64 79 28 6e 65 77 20 63 2e 50 6f 73 69 74 69 6f 6e 28 74 29 29 7d 65 6c 73 65 20 73 2e 6c 6f 67 45 72 72 6f 72 28 22 6e 6f 20 63 6f 6e 74 65 6e 74 20 66 6f 75 6e 64 20 69 6e 20 74 68 65 20 69 6e 6c 69 6e 65 20 70 6f 73 69 74 69 6f 6e 20 6f 62 6a Data Ascii: ceof Element?t.conf.dest:document.getElementById(t.conf.dest))&&n){var u=document.createElement("div");i.setAttr(u,"id",t.conf.dest),n.appendChild(u)}l.status.setPositionReady(new c.Position(t))}else s.logError("no content found in the inline position obj
2024-09-20 22:48:52 UTC	1702	IN	Data Raw: 69 64 20 75 2e 70 6f 73 74 4d 65 73 73 61 67 65 73 2e 73 65 6e 64 28 74 2c 7b 74 79 70 65 3a 22 65 72 72 6f 72 22 2c 63 61 75 73 65 64 42 79 4d 65 74 68 6f 64 3a 22 63 6f 6c 6c 61 70 73 65 22 2c 6d 65 73 73 61 67 65 3a 22 63 61 6e 63 65 6c 65 64 22 7d 29 3b 64 2e 73 74 61 74 75 73 2e 73 65 74 50 6f 73 69 74 69 6f 6e 43 6f 6c 6c 61 70 73 69 6e 67 28 65 29 2c 73 2e 63 6f 6c 6c 61 70 73 65 28 74 2c 68 29 2c 64 2e 73 74 61 74 75 73 2e 73 65 74 50 6f 73 69 74 69 6f 6e 43 6f 6c 6c 61 70 73 65 64 28 65 29 2c 75 2e 70 6f 73 74 4d 65 73 73 61 67 65 73 2e 73 65 6e 64 28 74 2c 7b 74 79 70 65 3a 22 63 6f 6c 6c 61 70 73 65 64 22 7d 29 2c 72 2e 6e 6f 74 69 66 79 50 6f 73 4d 73 67 28 65 2c 22 63 6f 6c 6c 61 70 73 65 22 29 7d 69 66 28 22 6e 75 6b 65 22 3d 3d 3d 6f 2e 74 Data Ascii: id u.postMessages.send(t,{type:"error",causedByMethod:"collapse",message:"canceled"});d.status.setPositionCollapsing(e),s.collapse(t,h),d.status.setPositionCollapsed(e),u.postMessages.send(t,{type:"collapsed"}),r.notifyPosMsg(e,"collapse")}if("nuke"===o.t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.4	49802	77.88.21.179	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:52 UTC	933	OUT	GET /332443/event?hash=3bbdadfaa3a01a78&pm=cyz&p5=bbrmjh&rand=gfxyz&sj=Ww0lRghMdjUh3MThXRHpLTbKrHJlAJJCuqcnRIGxynjGaVxzZaY8gMpQh-32_A%3D%3D&ad-session-id=8249541726872527269&lts=fpixtef&ytt=509073883660293&ybv=0.1117086&ylv=0.1117086&dl=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru&pr=hltprsv&p1=ddhej&rqs=zOdYXPXI1g_R--1mPkdNX3Ht8SMOhx0q&p2=iqvg&bundle=banner.transfer HTTP/1.1 Host: ads.adfox.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:52 UTC	339	IN	HTTP/1.1 204 No Content Access-Control-Allow-Origin: * Cache-Control: no-store, no-cache, must-revalidate, max-age=0 Connection: Close Date: Fri, 20 Sep 2024 22:48:52 GMT Expires: Mon, 04 Dec 1999 21:29:02 GMT Last-Modified: Fri, 20 Sep 2024 22:48:52 GMT Pragma: no-cache Timing-Allow-Origin: * X-Content-Type-Options: nosniff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.4	49844	178.154.131.215	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:52 UTC	388	OUT	GET /partner-code-bundles/1117086/28ced93adc464997b048.js HTTP/1.1 Host: yastatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:52 UTC	768	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:52 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 634944 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "1f70bbe29bd47349bd5b7e133b211097" Expires: Mon, 21 Sep 2054 05:24:52 GMT Last-Modified: Wed, 18 Sep 2024 15:26:57 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:52 UTC	15616	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 61 64 76 6d 61 6e 61 67 65 72 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 65 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 65 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e 63 74 69 Data Ascii: /! v:1117086 b:default c:advmanager /try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Functi
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 73 20 76 61 6c 75 65 20 22 2b 53 74 72 69 6e 67 28 65 29 2b 22 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 6f 72 20 6e 75 6c 6c 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6e 28 29 7b 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 74 7d 69 28 74 2c 65 29 2c 74 2e 70 72 6f 74 6f 74 79 70 65 3d 6e 75 6c 6c 3d 3d 3d 65 3f 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 65 29 3a 28 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2c 6e 65 77 20 6e 29 7d 29 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 4c 65 61 64 46 6f 72 6d 43 6c 69 65 6e 74 43 6f 64 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 61 3d 6e 28 34 36 33 34 30 29 Data Ascii: s value "+String(e)+" is not a constructor or null");function n(){this.constructor=t}i(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)});Object.defineProperty(e,"__esModule",{value:!0}),e.LeadFormClientCode=void 0;var a=n(46340)
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 6e 42 61 6e 6e 65 72 44 61 74 61 29 2c 72 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 26 26 28 69 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 3d 21 30 2c 69 2e 69 73 49 6e 74 65 72 73 74 69 74 69 61 6c 3d 21 30 29 2c 69 2e 68 6f 6e 65 79 70 6f 74 3d 72 2e 67 65 74 48 6f 6e 65 79 70 6f 74 28 29 2c 73 2e 73 65 74 50 72 6f 70 73 28 7b 69 73 46 75 6c 6c 73 63 72 65 65 6e 3a 69 2e 69 73 46 75 6c 6c 73 63 72 65 65 6e 2c 69 73 46 6c 6f 6f 72 41 64 3a 72 2e 69 73 46 6c 6f 6f 72 41 64 2c 69 73 54 6f 70 41 64 3a 72 2e 69 73 54 6f 70 41 64 7d 29 3b 76 61 72 20 63 3d 6e 65 77 20 78 2e 44 65 66 65 72 72 65 64 3b 72 65 74 75 72 6e 20 63 2e 70 72 6f 6d 69 73 65 2e 74 68 65 6e 28 28 30 2c 44 2e 70 72 6f 74 65 63 74 29 28 22 52 54 42 42 61 6e 6e 65 72 2e 6f 6e 52 65 61 64 79 22 2c Data Ascii: nBannerData),r.isFullscreen&&(i.isFullscreen=!0,i.isInterstitial=!0),i.honeypot=r.getHoneypot(),s.setProps({isFullscreen:i.isFullscreen,isFloorAd:r.isFloorAd,isTopAd:r.isTopAd});var c=new x.Deferred;return c.promise.then((0,D.protect)("RTBBanner.onReady",
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 74 6f 74 79 70 65 2e 6f 6e 56 69 73 69 62 69 6c 69 74 79 43 6f 6e 66 69 72 6d 61 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 2e 63 6f 6e 66 69 72 6d 54 69 6d 65 2c 6e 3d 74 68 69 73 2e 67 65 74 52 75 6d 41 64 64 69 74 69 6f 6e 61 6c 73 28 29 3b 28 30 2c 7a 2e 73 65 6e 64 52 75 6d 44 65 6c 74 61 73 29 28 7b 76 69 73 69 62 69 6c 69 74 79 43 6f 6e 66 69 72 6d 65 64 3a 65 7d 2c 6e 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 61 63 6b 43 6c 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 3b 63 74 2e 72 65 66 72 65 73 68 65 72 2e 72 65 67 69 73 74 65 72 43 6c 69 63 6b 28 29 2c 28 30 2c 68 2e 74 72 61 63 6b 43 6c 69 63 6b 29 28 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 29 7b 69 66 28 65 3d 3d 3d 79 2e 43 Data Ascii: totype.onVisibilityConfirmation=function(t){var e=t.confirmTime,n=this.getRumAdditionals();(0,z.sendRumDeltas)({visibilityConfirmed:e},n)},e.prototype.trackClick=function(){var t=this;ct.refresher.registerClick(),(0,h.trackClick)((function(e,n){if(e===y.C
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 6e 74 43 6f 64 65 3d 76 6f 69 64 20 30 3b 76 61 72 20 72 3d 6e 28 37 39 30 32 31 29 2c 61 3d 6e 28 35 31 34 30 35 29 2c 73 3d 6e 28 31 36 38 38 29 2c 6c 3d 6e 28 38 36 33 30 37 29 2c 63 3d 6e 28 33 38 38 34 39 29 2c 75 3d 6e 28 37 32 36 30 39 29 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 3d 74 26 26 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7c 7c 74 68 69 73 7d 72 65 74 75 72 6e 20 69 28 65 2c 74 29 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 69 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 65 3d 28 30 2c 61 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 44 61 74 61 29 28 75 2e 50 52 4f 4d 4f 5f 43 4f 44 45 5f 44 41 54 41 5f 41 54 Data Ascii: ntCode=void 0;var r=n(79021),a=n(51405),s=n(1688),l=n(86307),c=n(38849),u=n(72609),d=function(t){function e(){return null!==t&&t.apply(this,arguments)\|\|this}return i(e,t),e.prototype.init=function(){var t=this,e=(0,a.getElementByData)(u.PROMO_CODE_DATA_AT
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 65 2e 73 68 6f 77 41 72 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 74 68 69 73 2e 70 72 6f 70 73 2e 70 72 65 76 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 7c 7c 74 68 69 73 2e 70 72 6f 70 73 2e 6e 65 78 74 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 70 72 6f 70 73 2e 67 65 74 42 6f 75 6e 64 61 72 79 43 6f 6e 64 69 74 69 6f 6e 28 29 2c 6e 3d 65 2e 69 73 46 69 72 73 74 45 6c 65 6d 65 6e 74 53 68 6f 77 6e 2c 6f 3d 65 2e 69 73 4c 61 73 74 45 6c 65 6d 65 6e 74 53 68 6f 77 6e 2c 69 3d 74 68 69 73 2e 67 65 74 48 6f 76 65 72 65 64 53 69 64 65 4f 66 43 6f 6e 74 61 69 6e 65 72 28 74 29 2c 61 3d 21 6e 26 26 22 6c 65 66 74 22 3d 3d 3d 69 3b 69 66 28 61 29 7b 69 66 28 74 68 69 73 2e 61 72 72 6f 77 53 74 61 74 65 3d 3d 3d 72 Data Ascii: e.showArrow=function(t){if(this.props.prevButtonElement\|\|this.props.nextButtonElement){var e=this.props.getBoundaryCondition(),n=e.isFirstElementShown,o=e.isLastElementShown,i=this.getHoveredSideOfContainer(t),a=!n&&"left"===i;if(a){if(this.arrowState===r
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 2c 74 68 69 73 2e 74 69 6d 65 72 3d 6e 65 77 20 66 2e 54 69 6d 65 72 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 30 21 3d 3d 65 2e 63 6f 75 6e 74 26 26 28 74 2e 61 75 74 6f 73 63 72 6f 6c 6c 53 6c 69 64 65 46 6c 6f 77 3d 3d 3d 72 2e 43 49 52 43 4c 45 26 26 74 2e 68 61 6e 64 6c 65 43 69 72 63 6c 65 41 75 74 6f 73 63 72 6f 6c 6c 46 6c 6f 77 53 74 65 70 28 29 2c 74 2e 61 75 74 6f 73 63 72 6f 6c 6c 53 6c 69 64 65 46 6c 6f 77 3d 3d 3d 72 2e 53 45 51 55 45 4e 54 49 41 4c 26 26 74 2e 68 61 6e 64 6c 65 53 65 71 75 65 6e 74 69 61 6c 41 75 74 6f 73 63 72 6f 6c 6c 46 6c 6f 77 53 74 65 70 28 29 29 2c 74 2e 70 72 6f 70 73 2e 61 75 74 6f 53 63 72 6f 6c 6c 44 65 6c 61 79 7d 29 29 2c 74 68 69 73 2e 74 69 6d 65 72 2e 73 74 61 72 74 28 29 29 7d 2c 65 2e Data Ascii: ,this.timer=new f.Timer((function(e){return 0!==e.count&&(t.autoscrollSlideFlow===r.CIRCLE&&t.handleCircleAutoscrollFlowStep(),t.autoscrollSlideFlow===r.SEQUENTIAL&&t.handleSequentialAutoscrollFlowStep()),t.props.autoScrollDelay})),this.timer.start())},e.
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 73 5b 74 5d 29 7b 76 61 72 20 65 3d 30 3d 3d 3d 74 2c 6e 3d 74 3d 3d 3d 74 68 69 73 2e 73 6c 69 64 65 45 6c 65 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 3b 28 65 7c 7c 74 3e 74 68 69 73 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 26 26 21 6e 29 26 26 28 74 68 69 73 2e 61 75 74 6f 53 63 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 3d 67 2e 43 61 72 6f 75 73 65 6c 44 69 72 65 63 74 69 6f 6e 2e 4e 45 58 54 29 2c 28 6e 7c 7c 74 3c 74 68 69 73 2e 63 75 72 72 65 6e 74 49 6e 64 65 78 26 26 21 65 29 26 26 28 74 68 69 73 2e 61 75 74 6f 53 63 72 6f 6c 6c 44 69 72 65 63 74 69 6f 6e 3d 67 2e 43 61 72 6f 75 73 65 6c 44 69 72 65 63 74 69 6f 6e 2e 50 52 45 56 29 7d 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 63 72 6f 6c 6c 54 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 Data Ascii: s[t]){var e=0===t,n=t===this.slideElements.length-1;(e\|\|t>this.currentIndex&&!n)&&(this.autoScrollDirection=g.CarouselDirection.NEXT),(n\|\|t<this.currentIndex&&!e)&&(this.autoScrollDirection=g.CarouselDirection.PREV)}},e.prototype.scrollTo=function(t,e){va
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 6f 43 6f 6e 74 61 69 6e 65 72 29 28 74 29 2c 28 30 2c 5f 2e 69 6e 69 74 41 64 61 70 74 69 76 65 49 6d 61 67 65 43 6c 69 65 6e 74 43 6f 64 65 29 28 74 2c 65 2c 7b 65 6e 61 62 6c 65 41 6e 69 6d 61 74 69 6f 6e 3a 21 31 2c 6c 61 7a 79 4c 6f 61 64 4d 61 72 67 69 6e 3a 22 31 30 30 25 22 2c 6c 61 7a 79 4c 6f 61 64 43 6f 6e 74 61 69 6e 65 72 3a 6c 2e 74 72 61 63 6b 45 6c 65 6d 65 6e 74 7d 29 2c 6f 2e 64 6f 4f 6e 44 65 73 74 72 6f 79 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 28 30 2c 5f 2e 64 65 73 74 72 6f 79 41 64 61 70 74 69 76 65 49 6d 61 67 65 43 6c 69 65 6e 74 43 6f 64 65 29 28 74 2c 65 29 7d 29 29 7d 29 29 2c 6f 2e 64 69 73 61 62 6c 65 46 61 6c 73 65 43 6c 69 63 6b 50 72 6f 74 65 63 74 69 6f 6e 3d 28 30 2c 63 2e 64 65 62 6f 75 6e 63 65 29 28 Data Ascii: oContainer)(t),(0,_.initAdaptiveImageClientCode)(t,e,{enableAnimation:!1,lazyLoadMargin:"100%",lazyLoadContainer:l.trackElement}),o.doOnDestroy((function(){return(0,_.destroyAdaptiveImageClientCode)(t,e)}))})),o.disableFalseClickProtection=(0,c.debounce)(
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 65 2e 53 43 52 4f 4c 4c 45 52 5f 41 55 54 4f 50 4c 41 59 3d 65 2e 53 43 52 4f 4c 4c 45 52 5f 44 41 54 41 5f 41 54 54 52 3d 76 6f 69 64 20 30 2c 65 2e 53 43 52 4f 4c 4c 45 52 5f 44 41 54 41 5f 41 54 54 52 3d 22 73 63 72 6f 6c 6c 65 72 22 2c 65 2e 53 43 52 4f 4c 4c 45 52 5f 41 55 54 4f 50 4c 41 59 3d 22 61 75 74 6f 70 6c 61 79 22 2c 65 2e 53 43 52 4f 4c 4c 45 52 5f 41 55 54 4f 50 4c 41 59 5f 41 4e 49 4d 41 54 49 4f 4e 3d 22 61 75 74 6f 70 6c 61 79 2d 61 6e 69 6d 61 74 69 6f 6e 22 2c 65 2e 53 43 52 4f 4c 4c 45 52 5f 41 55 54 4f 50 4c 41 59 5f 44 45 4c 41 59 3d 22 61 75 74 6f 70 6c 61 79 2d 64 65 6c 61 79 22 2c 65 2e 53 43 52 4f 4c 4c 45 52 5f 41 55 54 4f 50 4c 41 59 5f 44 55 52 41 54 49 4f 4e 3d 22 61 75 74 6f 70 6c 61 79 2d 64 75 72 61 74 69 6f 6e 22 7d 2c Data Ascii: e.SCROLLER_AUTOPLAY=e.SCROLLER_DATA_ATTR=void 0,e.SCROLLER_DATA_ATTR="scroller",e.SCROLLER_AUTOPLAY="autoplay",e.SCROLLER_AUTOPLAY_ANIMATION="autoplay-animation",e.SCROLLER_AUTOPLAY_DELAY="autoplay-delay",e.SCROLLER_AUTOPLAY_DURATION="autoplay-duration"},

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.4	49845	178.154.131.215	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:53 UTC	388	OUT	GET /partner-code-bundles/1117086/40014e7ae9852a9faa7b.js HTTP/1.1 Host: yastatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:53 UTC	768	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:53 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 124891 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "ae97b143d2893673c378d297cc02d1fe" Expires: Mon, 21 Sep 2054 05:24:53 GMT Last-Modified: Wed, 18 Sep 2024 15:26:57 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow Accept-Ranges: bytes
2024-09-20 22:48:53 UTC	15616	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 61 64 66 6f 78 5f 62 61 6e 6e 65 72 73 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 65 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 65 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 3d 46 75 6e Data Ascii: /! v:1117086 b:default c:adfox_banners /try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind=Fun
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 74 61 69 6e 65 72 3a 74 68 69 73 2e 77 72 61 70 70 65 72 7c 7c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2c 64 6f 63 75 6d 65 6e 74 3a 74 68 69 73 2e 64 6f 63 7d 2c 65 29 29 3b 6f 26 26 28 74 68 69 73 2e 77 72 61 70 70 65 72 3f 74 68 69 73 2e 77 72 61 70 70 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 3a 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6f 29 29 2c 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 65 6c 29 26 26 28 74 68 69 73 2e 77 72 61 70 70 65 72 3f 74 68 69 73 2e 77 72 61 70 70 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 75 6c 6c 3d 3d 61 3f 76 6f 69 64 20 30 3a 61 2e 65 6c 29 3a 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 6e 75 6c 6c 3d 3d 61 3f 76 6f Data Ascii: tainer:this.wrapper\|\|this.container,document:this.doc},e));o&&(this.wrapper?this.wrapper.appendChild(o):this.container.appendChild(o)),(null==a?void 0:a.el)&&(this.wrapper?this.wrapper.appendChild(null==a?void 0:a.el):this.container.appendChild(null==a?vo
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 73 54 65 78 74 3d 22 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 22 2e 63 6f 6e 63 61 74 28 72 2e 77 69 64 74 68 2c 22 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 22 29 2e 63 6f 6e 63 61 74 28 72 2e 68 65 69 67 68 74 2c 22 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 29 2c 74 68 69 73 2e 77 72 61 70 70 65 72 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 22 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 29 7b 76 61 72 20 6f 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 2e Data Ascii: sText="\n width: ".concat(r.width,";\n height: ").concat(r.height,";\n margin: 0 auto;\n "),this.wrapper.innerHTML=""),this.container){var o=Array.prototype.slice.call(this.container.
2024-09-20 22:48:54 UTC	16384	IN	Data Raw: 69 6c 69 74 79 28 29 7d 2c 69 6e 6c 69 6e 65 53 74 79 6c 65 73 3a 6f 2c 6c 6f 67 50 72 65 66 69 78 3a 22 42 61 6e 6e 65 72 48 74 6d 6c 22 2c 73 68 6f 75 6c 64 53 68 6f 77 53 74 69 63 6b 79 41 64 3a 74 68 69 73 2e 70 61 72 61 6d 73 2e 73 68 6f 75 6c 64 53 68 6f 77 53 74 69 63 6b 79 41 64 7d 2c 74 68 69 73 2e 67 65 74 4b 65 62 61 62 41 6e 64 4c 61 62 65 6c 50 72 6f 70 73 28 29 29 29 29 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 73 74 72 6f 79 50 72 65 61 63 74 43 6f 6d 70 6f 6e 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 30 2c 6e 28 36 31 36 31 38 29 2e 72 65 6e 64 65 72 29 28 6e 75 6c 6c 2c 74 68 69 73 2e 63 6f 6e 74 61 69 6e 65 72 29 7d 2c 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 49 6e 6c 69 6e Data Ascii: ility()},inlineStyles:o,logPrefix:"BannerHtml",shouldShowStickyAd:this.params.shouldShowStickyAd},this.getKebabAndLabelProps()))),this.container)},e.prototype.destroyPreactComponent=function(){(0,n(61618).render)(null,this.container)},e.prototype.getInlin
2024-09-20 22:48:54 UTC	16384	IN	Data Raw: 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6e 28 33 39 30 32 29 2e 6c 6f 67 67 65 72 2e 65 72 72 6f 72 28 74 2c 22 41 64 74 75 6e 65 20 62 75 6e 64 6c 65 20 6c 6f 61 64 69 6e 67 20 65 72 72 6f 72 22 29 7d 29 29 7d 29 29 29 2e 74 68 65 6e 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 69 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 65 65 64 62 61 63 6b 22 2c 22 74 72 75 65 22 29 2c 69 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 6e 61 6d 65 22 2c 22 61 64 74 75 6e 65 2d 66 65 65 64 62 61 63 6b 22 29 2c 77 26 26 28 69 2e 73 74 79 6c 65 2e 7a 49 6e 64 65 78 3d 22 31 30 30 30 30 22 29 2c 69 2e 73 74 79 6c 65 2e 62 Data Ascii: unction(t){return n(3902).logger.error(t,"Adtune bundle loading error")}))}))).then((function(e){var i=document.createElement("div");i.setAttribute("data-feedback","true"),i.setAttribute("data-name","adtune-feedback"),w&&(i.style.zIndex="10000"),i.style.b
2024-09-20 22:48:54 UTC	16384	IN	Data Raw: 69 64 2c 72 2c 22 22 5d 5d 3a 72 3b 28 65 3d 74 2e 65 78 70 6f 72 74 73 3d 72 2e 6c 6f 63 61 6c 73 7c 7c 7b 7d 29 2e 5f 67 65 74 43 6f 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 69 7d 2c 65 2e 5f 67 65 74 43 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 22 2b 72 7d 2c 65 2e 5f 69 6e 73 65 72 74 43 73 73 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 6f 28 69 2c 74 29 7d 7d 2c 37 39 38 36 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 74 2e 65 78 70 6f 72 74 73 3d 27 3c 73 76 67 20 77 69 64 74 68 3d 22 38 22 20 68 65 69 67 68 74 3d 22 32 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 63 69 72 63 6c 65 20 63 78 3d 22 34 22 20 63 79 3d 22 Data Ascii: id,r,""]]:r;(e=t.exports=r.locals\|\|{})._getContent=function(){return i},e._getCss=function(){return""+r},e._insertCss=function(t){return o(i,t)}},7986:function(t){t.exports='<svg width="8" height="20" xmlns="http://www.w3.org/2000/svg"><circle cx="4" cy="
2024-09-20 22:48:54 UTC	16384	IN	Data Raw: 68 28 67 28 6f 2e 70 61 72 74 73 5b 61 5d 2c 65 29 29 7d 65 6c 73 65 7b 76 61 72 20 73 3d 5b 5d 3b 66 6f 72 28 61 3d 30 3b 61 3c 6f 2e 70 61 72 74 73 2e 6c 65 6e 67 74 68 3b 61 2b 2b 29 73 2e 70 75 73 68 28 67 28 6f 2e 70 61 72 74 73 5b 61 5d 2c 65 29 29 3b 72 5b 6f 2e 69 64 5d 3d 7b 69 64 3a 6f 2e 69 64 2c 72 65 66 73 3a 31 2c 70 61 72 74 73 3a 73 7d 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 6e 3d 7b 7d 2c 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6f 3d 74 5b 72 5d 2c 69 3d 6f 5b 30 5d 2c 61 3d 7b 63 73 73 3a 6f 5b 31 5d 2c 6d 65 64 69 61 3a 6f 5b 32 5d 2c 73 6f 75 72 63 65 4d 61 70 3a 6f 5b 33 5d 7d 3b 6e 5b 69 5d 3f 6e 5b 69 5d 2e 70 61 72 74 73 2e 70 75 73 68 28 61 29 3a 65 Data Ascii: h(g(o.parts[a],e))}else{var s=[];for(a=0;a<o.parts.length;a++)s.push(g(o.parts[a],e));r[o.id]={id:o.id,refs:1,parts:s}}}}function p(t){for(var e=[],n={},r=0;r<t.length;r++){var o=t[r],i=o[0],a={css:o[1],media:o[2],sourceMap:o[3]};n[i]?n[i].parts.push(a):e
2024-09-20 22:48:54 UTC	10971	IN	Data Raw: 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 61 72 67 73 3d 74 2c 74 68 69 73 2e 69 73 44 65 74 65 72 6d 69 6e 65 64 3d 21 30 2c 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 5b 74 2e 6c 65 6e 67 74 68 2d 31 5d 2e 69 6e 74 65 72 73 65 63 74 69 6f 6e 52 61 74 69 6f 3e 3d 65 2e 6f 62 73 65 72 76 65 72 2e 74 68 72 65 73 68 6f 6c 64 73 5b 30 5d 3b 65 2e 61 72 67 73 2e 63 61 6c 6c 62 61 63 6b 28 6e 29 7d 2c 74 68 69 73 2e 74 68 72 65 73 68 6f 6c 64 3d 4d 61 74 68 2e 6d 61 78 28 6f 2c 74 68 69 73 2e 61 72 67 73 2e 70 6f 72 74 69 6f 6e 29 2c 74 68 69 73 2e 6f 62 73 65 72 76 65 72 3d 6e 65 77 20 49 6e 74 65 72 73 65 63 74 69 6f 6e 4f 62 73 65 72 76 65 72 28 74 68 69 73 2e 63 61 6c 6c 62 61 63 6b Data Ascii: (t){var e=this;this.args=t,this.isDetermined=!0,this.callback=function(t){var n=t[t.length-1].intersectionRatio>=e.observer.thresholds[0];e.args.callback(n)},this.threshold=Math.max(o,this.args.portion),this.observer=new IntersectionObserver(this.callback

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.4	49846	178.154.131.215	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:53 UTC	388	OUT	GET /partner-code-bundles/1117086/ee55314d29f5e472edba.js HTTP/1.1 Host: yastatic.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:53 UTC	767	IN	HTTP/1.1 200 OK Server: nginx/1.17.9 Date: Fri, 20 Sep 2024 22:48:53 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 45670 Connection: close Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: public, max-age=946708560 Etag: "c371deee9efccfea4089ef7b0fded83d" Expires: Mon, 21 Sep 2054 05:24:53 GMT Last-Modified: Wed, 18 Sep 2024 15:26:58 GMT NEL: {"report_to": "network-errors", "max_age": 7200, "success_fraction": 0.001, "failure_fraction": 0.01} Report-To: { "group": "network-errors", "max_age": 7200, "endpoints": [ { "url": "https://dr.yandex.net/nel"}]} Strict-Transport-Security: max-age=43200000; includeSubDomains; Timing-Allow-Origin: * Vary: Accept-Encoding X-Robots-Tag: noindex, noarchive, nofollow
2024-09-20 22:48:53 UTC	15617	IN	Data Raw: 2f 2a 21 20 76 3a 31 31 31 37 30 38 36 20 62 3a 64 65 66 61 75 6c 74 20 63 3a 66 6c 6f 6f 72 41 64 43 6f 6e 74 72 6f 6c 6c 65 72 20 2a 2f 0a 74 72 79 7b 76 61 72 20 63 6e 63 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 21 74 7c 7c 21 74 2e 74 6f 53 74 72 69 6e 67 29 72 65 74 75 72 6e 21 31 3b 63 6f 6e 73 74 20 65 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 3b 72 65 74 75 72 6e 2f 5c 5b 6e 61 74 69 76 65 20 63 6f 64 65 5c 5d 2f 2e 74 65 73 74 28 65 29 7c 7c 2f 5c 2f 5c 2a 20 73 6f 75 72 63 65 20 63 6f 64 65 20 6e 6f 74 20 61 76 61 69 6c 61 62 6c 65 20 5c 2a 5c 2f 2f 2e 74 65 73 74 28 65 29 7d 3b 63 6e 63 28 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 62 69 6e 64 29 3f 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 5f 5f 70 62 69 6e 64 Data Ascii: /! v:1117086 b:default c:floorAdController /try{var cnc=function(t){if(!t\|\|!t.toString)return!1;const e=t.toString();return/\[native code\]/.test(e)\|\|/\/\* source code not available \*\//.test(e)};cnc(Function.prototype.bind)?Function.prototype.__pbind
2024-09-20 22:48:53 UTC	16384	IN	Data Raw: 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 65 2e 72 3d 76 6f 69 64 20 30 2c 65 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 30 2c 6e 28 34 30 36 31 29 2e 66 69 6c 74 65 72 29 28 74 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6f 29 7b 72 65 74 75 72 6e 28 30 2c 6e 28 31 38 35 32 32 29 2e 69 6e 64 65 78 4f 66 29 28 6f 2c 74 29 3d 3d 3d 65 7d 29 29 7d 7d 2c 37 39 30 31 30 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 65 2e 69 73 49 6e 53 68 61 64 6f 77 44 6f 6d 3d 76 6f 69 64 20 30 3b 76 61 72 20 6f 3d 28 30 2c 6e 28 32 30 35 Data Ascii: n(t,e,n){"use strict";e.r=void 0,e.r=function(t){return(0,n(4061).filter)(t,(function(t,e,o){return(0,n(18522).indexOf)(o,t)===e}))}},79010:function(t,e,n){"use strict";Object.defineProperty(e,"__esModule",{value:!0}),e.isInShadowDom=void 0;var o=(0,n(205
2024-09-20 22:48:53 UTC	13669	IN	Data Raw: 7d 66 75 6e 63 74 69 6f 6e 20 67 28 74 2c 65 29 7b 72 65 74 75 72 6e 20 62 28 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 7d 29 2c 65 29 7d 66 75 6e 63 74 69 6f 6e 20 53 28 74 29 7b 76 61 72 20 65 3d 72 2e 63 6f 6e 74 65 78 74 5b 74 2e 5f 5f 63 5d 3b 69 66 28 21 65 29 72 65 74 75 72 6e 20 74 2e 5f 5f 3b 76 61 72 20 6e 3d 64 28 6f 2b 2b 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 2e 5f 5f 26 26 28 6e 2e 5f 5f 3d 21 30 2c 65 2e 73 75 62 28 72 29 29 2c 65 2e 70 72 6f 70 73 2e 76 61 6c 75 65 7d 66 75 6e 63 74 69 6f 6e 20 41 28 74 2c 65 29 7b 61 2e 6f 70 74 69 6f 6e 73 2e 75 73 65 44 65 62 75 67 56 61 6c 75 65 26 26 61 2e 6f 70 74 69 6f 6e 73 2e 75 73 65 44 65 62 75 67 56 61 6c 75 65 28 65 3f 65 28 74 29 3a 74 29 7d 66 75 6e 63 74 69 6f 6e Data Ascii: }function g(t,e){return b((function(){return t}),e)}function S(t){var e=r.context[t.__c];if(!e)return t.__;var n=d(o++);return null==n.__&&(n.__=!0,e.sub(r)),e.props.value}function A(t,e){a.options.useDebugValue&&a.options.useDebugValue(e?e(t):t)}function

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.4	49847	5.101.37.37	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:53 UTC	538	OUT	GET /lib/alfadart.lib.min.js HTTP/1.1 Host: cdn.alfasense.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:53 UTC	936	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:53 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 18 Apr 2024 10:46:13 GMT ETag: W/"6620f9f5-8dfa" Strict-Transport-Security: max-age=5; includeSubDomains Expect-CT: max-age=3600, enforce Content-Security-Policy: frame-ancestors 'none';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Cache-Control: public, max-age=60 Content-Encoding: gzip Cache: HIT X-Cached-Since: 2024-09-20T22:48:02+00:00 X-Node: am4-up-gc94
2024-09-20 22:48:53 UTC	3160	IN	Data Raw: 32 33 65 35 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 7d eb 72 db 48 96 e6 ab 50 18 b7 4c 58 20 44 c9 e5 ba 90 86 15 b2 6c b7 b5 e1 5b 58 aa 76 cc 78 14 2a 90 48 8a 68 83 00 17 00 75 29 4a 11 33 f3 67 7f 6e cc 9b cc 9f 89 89 d8 88 dd 67 a8 7a a3 fd ce c9 4c 20 71 a1 2e 2e 57 f7 f6 b6 bb ab 4a 44 22 ef 79 f2 9c ef 5c 32 b1 36 59 c4 e3 3c 4c e2 ae b0 97 e1 a4 bb 76 16 c6 41 72 e6 fa d1 c4 0f fc 34 b7 97 a7 7e da c9 3d 95 1c 25 63 9f 72 bb d3 24 cb 63 7f 26 86 54 a6 bb 96 5f 5e e6 ee cc cf c7 d3 ee e6 3c 49 e3 cb 4c 9c 5f 9e 9f 9f 5f fa c1 22 ba 3c 09 d3 68 d3 b6 ed 65 ad f2 bd 24 9e 84 27 ba 6e dd a4 4c bd bc 5c 5e 39 ed f9 df 8e fe 2c c6 b9 eb 67 59 78 12 77 5b f3 38 4b 71 9e 8b 34 f6 a3 d7 49 20 06 6b 5b ce 98 db fa 31 8d 06 d6 34 cf e7 d9 60 73 73 1c c4 3c Data Ascii: 23e5}rHPLX Dl[Xvx*Hhu)J3gngzL q..WJD"y\26Y<LvAr4~=%cr$c&T_^<IL__"<he$'nL\^9,gYxw[8Kq4I k[14`ss<
2024-09-20 22:48:53 UTC	4096	IN	Data Raw: 8c ac 12 46 c1 0e 9b 23 59 35 cc a4 09 76 3f 80 39 c4 67 6b 3c 21 5e ec 68 b8 15 c6 d0 f1 b5 55 fe 18 1a 0b b4 15 6d 8c 6e 5a c7 b5 d3 4f 73 d3 22 2b e4 d9 01 59 d1 4b 7b 6f d5 8e d7 2d ba e0 58 a7 bc 4c 34 b2 be fd bb 34 b6 bd b2 35 a6 ad c2 67 a0 5d 17 02 64 c9 cb 91 31 35 49 1f a5 36 f4 ab 37 87 c9 de 54 8c 3f bd 6a 75 33 60 eb dc 25 bb 72 02 ab 22 c7 7e 10 ec c6 7e 74 81 1d 6d e0 68 02 13 6d 39 9e 25 31 ab 51 fa 1d fe 4e 04 38 ee 33 3f f7 4b e9 61 96 36 73 50 69 a0 2a bd 7e ac 98 54 74 00 bd d5 b5 61 e0 5d 61 7b 50 e2 bc 5b 58 93 fd 20 73 47 22 3f 23 63 12 ac 0c b9 1f 91 81 de e2 35 6d eb 1d b5 cd 2e 1f 50 8d 7a 1f 80 02 93 8b dd c0 9f e7 d8 62 4f 59 46 94 83 30 3c 19 3f 3d 86 c6 d0 61 85 c6 b3 a4 1c ed 3c dc ea cf cf 87 1d 25 4d 3b db df e2 d1 ea 84 Data Ascii: F#Y5v?9gk<!^hUmnZOs"+YK{o-XL445g]d15I67T?ju3`%r"~~tmhm9%1QN83?Ka6sPi*~Tta]a{P[X sG"?#c5m.PzbOYF0<?=a<%M;
2024-09-20 22:48:53 UTC	1941	IN	Data Raw: 21 22 d8 71 40 c3 8f 54 43 33 d8 1e 23 81 18 ec 14 f7 2b f4 d8 b7 3b 78 34 3f ff fc 96 79 ff 95 7b c1 1f e1 9c 0f ae 65 52 db 41 36 d0 1f c2 7c 88 3b 1d 06 73 3a 67 2c 52 b5 3d 6a 44 37 58 a4 51 f7 9f ad 00 07 42 06 4c 7f 9b d9 e9 c9 c6 f9 2c 1a e2 c4 2a 60 77 ee 2d f2 49 ef 7b e7 0f 0f f7 f0 a2 83 17 71 e6 dd a7 fb 34 71 9d e6 d9 d9 99 7b f6 d0 4d d2 93 cd 6d 6c 2b 2a 7a 1f a7 8a 71 70 d1 bb ff 4d ff be 3a 6d 21 7f 93 6b f8 29 ee 50 bc df ef f4 3b df d0 3f f7 ff f0 f0 39 aa 1d 87 29 0e 22 76 92 b9 3f 46 68 84 77 df dd be df 19 23 df 36 2a 18 e3 99 fe a6 de fd ad 87 ee a3 fb 9b b2 c8 1c 37 98 75 26 61 14 79 f7 ff b0 fd 10 6b 7f 1f 66 85 fb af b7 bf eb 20 d7 77 51 cf fd 8e fe f9 d6 7d d8 c1 bf f4 97 ff 75 bf 73 bf a3 04 9d 48 7f 75 9a ce 2c d3 54 69 4a fc Data Ascii: !"q@TC3#+;x4?y{eRA6\|;s:g,R=jD7XQBL,`w-I{q4q{Mml+zqpM:m!k)P;?9)"v?Fhw#6*7u&aykf wQ}usHu,TiJ
2024-09-20 22:48:53 UTC	1225	IN	Data Raw: 34 63 32 0d 0a ac 7a b9 2a bd 7d d8 ab 3b 2f 77 73 e7 c1 d2 70 5d 48 d7 88 11 91 7d 53 71 75 6b 36 79 28 4e cf 5a 62 1b ea 73 ac 11 2a 47 ed ac ae 5c c9 f0 6b 17 b7 9c e8 d5 f5 b0 74 57 7d e4 65 d0 ed f3 8b 1b ca b1 a4 2f 6c 76 5c 42 2a 4a 35 87 8a 0a 36 6a 4c 23 45 5a f0 69 92 16 a3 cb 4a 92 92 ab a2 a7 95 be 00 09 9c b9 ba a3 7a a2 34 4d cb 49 d1 c5 d0 01 28 1b 1c ea 51 ca fd ca 8e d6 47 d2 08 ed d2 c1 b2 15 32 1b 21 00 3e 3e f2 23 c3 fe e0 ef a7 07 6e b2 a7 12 7b 5b 88 9f cd 15 88 7d c9 1c 8c 83 ad 6d e9 37 ef c5 7c e3 6a 47 3e 15 5b fd 3a 86 d1 4b ec cd 6d f0 2b 39 79 ea b2 83 dd ca b7 b0 4c e1 42 35 d3 07 36 c8 11 6d 6d 64 12 3b 68 d0 10 d1 a3 35 0c e8 6a 16 7c 49 c4 b3 0a df 9b b5 11 f0 3b 0a cf 68 3d ac c0 57 96 5e 51 e4 28 05 63 18 17 83 af 8a c8 Data Ascii: 4c2z};/wsp]H}Squk6y(NZbsG\ktW}e/lv\B*J56jL#EZiJz4MI(QG2!>>#n{[}m7\|jG>[:Km+9yLB56mmd;h5j\|I;h=W^Q(c
2024-09-20 22:48:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.4	49850	5.101.37.37	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:54 UTC	529	OUT	GET /js/ad_13097.js HTTP/1.1 Host: cdn.alfasense.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:54 UTC	938	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:54 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 20 Sep 2024 04:16:35 GMT ETag: W/"66ecf723-2f95" Strict-Transport-Security: max-age=5; includeSubDomains Expect-CT: max-age=3600, enforce Content-Security-Policy: frame-ancestors 'none';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Cache-Control: public, max-age=60 Content-Encoding: gzip Cache: STALE X-Cached-Since: 2024-09-20T22:47:52+00:00 X-Node: am4-up-gc95
2024-09-20 22:48:54 UTC	507	IN	Data Raw: 31 66 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5a 6d 6f db 38 0c fe de 5f 21 f8 c3 90 de 12 d7 2f 49 93 b8 e8 01 5b b6 61 05 b6 c3 b0 ed ee 3e 34 43 a1 d8 72 a3 d6 96 0d 59 4e 9a eb f2 df 8f 92 2d c7 76 da ee 05 2d 30 60 2e d2 44 a2 28 52 a2 48 e9 31 ad 30 67 be a0 09 43 59 44 48 da 8b b3 43 74 7b 80 10 27 22 e7 0c 31 b2 46 1f 78 12 d3 8c f4 38 c9 92 68 45 d0 e9 9f 28 23 e2 33 8d 49 92 0b 4d ed 23 e8 79 78 72 b0 3d 38 e8 e1 6c c3 7c 14 6a c1 3d 29 11 44 ae 97 34 22 a8 27 36 29 49 42 b4 a6 2c 48 d6 26 8e 42 1c 60 2e d0 e9 29 32 72 16 90 90 32 12 18 87 c0 8f 10 5e 63 2a ca 81 8d 2c 0b c4 03 19 3e 47 47 19 29 06 6d 3b 53 67 38 94 c2 9b e2 cc 94 93 05 0d 4c 29 e0 4d c2 3f 15 ec d9 bb 04 07 1f 54 cb 0b 16 bc a2 59 1a e1 cd 8b a0 27 27 6c e8 91 9c 05 86 87 0a Data Ascii: 1f4Zmo8_!/I[a>4CrYN-v-0`.D(RH10gCYDHCt{'"1Fx8hE(#3IM#yxr=8l\|j=)D4"'6)IB,H&B`.)2r2^c*,>GG)m;Sg8L)M?TY''l
2024-09-20 22:48:54 UTC	1225	IN	Data Raw: 34 63 32 0d 0a ca ce 13 6b 70 c6 9c 4f 11 0c 0b 7d d1 ee 05 0e 95 cd 12 16 d2 4b f0 b3 5b 54 b9 16 38 d4 b5 6d 78 96 39 e9 1b d7 8e 2a 6c fb c6 ce 39 aa f6 a9 6e 9f 42 bb 5c e9 aa a5 d1 53 ae 53 d5 32 d6 7d c6 d0 67 b7 2a 55 7b 43 a6 b6 5a d5 da e8 5d 9b 7a c5 e0 16 e2 ed 2d da aa 69 ae 69 20 20 0c 10 b8 ac aa 2f 09 bd 5c 0a 49 28 ea 85 67 7d 86 dd 03 68 a5 9f 5d e0 20 94 6e 2b e3 b4 68 af 5b 29 c8 39 96 5b db 19 83 f8 4f 98 0c 52 db 82 68 d4 92 27 56 a9 3a a6 6c 96 c6 ff e0 28 27 67 ec 63 be 88 88 8c 67 cb 04 6e 29 99 93 10 f6 be e5 2c c9 21 de 3c e4 36 a8 67 10 86 7c 85 23 68 70 1a 0d 6f 70 14 2d b0 7f 0d 0d 21 8e 32 a2 44 f9 4b e2 5f bf 4a 62 4c 59 83 2e 7d f7 2f 1c ab a9 dd b0 c1 80 db d8 5c 93 85 24 ab d9 c9 cd c5 00 31 5a a2 31 cf 2d cb 9d 05 74 85 Data Ascii: 4c2kpO}K[T8mx9l9nB\SS2}gU{CZ]z-ii /\I(g}h] n+h[)9[ORh'V:l('gcgn),!<6g\|#hpop-!2DK_JbLY.}/\$1Z1-t
2024-09-20 22:48:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.4	49851	5.101.37.37	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:54 UTC	364	OUT	GET /lib/alfadart.lib.min.js HTTP/1.1 Host: cdn.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:54 UTC	936	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:54 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 18 Apr 2024 10:46:13 GMT ETag: W/"6620f9f5-8dfa" Strict-Transport-Security: max-age=5; includeSubDomains Expect-CT: max-age=3600, enforce Content-Security-Policy: frame-ancestors 'none';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Cache-Control: public, max-age=60 Content-Encoding: gzip Cache: HIT X-Cached-Since: 2024-09-20T22:48:02+00:00 X-Node: am4-up-gc94
2024-09-20 22:48:54 UTC	3160	IN	Data Raw: 32 38 61 37 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 7d eb 72 db 48 96 e6 ab 50 18 b7 4c 58 20 44 c9 e5 ba 90 86 15 b2 6c b7 b5 e1 5b 58 aa 76 cc 78 14 2a 90 48 8a 68 83 00 17 00 75 29 4a 11 33 f3 67 7f 6e cc 9b cc 9f 89 89 d8 88 dd 67 a8 7a a3 fd ce c9 4c 20 71 a1 2e 2e 57 f7 f6 b6 bb ab 4a 44 22 ef 79 f2 9c ef 5c 32 b1 36 59 c4 e3 3c 4c e2 ae b0 97 e1 a4 bb 76 16 c6 41 72 e6 fa d1 c4 0f fc 34 b7 97 a7 7e da c9 3d 95 1c 25 63 9f 72 bb d3 24 cb 63 7f 26 86 54 a6 bb 96 5f 5e e6 ee cc cf c7 d3 ee e6 3c 49 e3 cb 4c 9c 5f 9e 9f 9f 5f fa c1 22 ba 3c 09 d3 68 d3 b6 ed 65 ad f2 bd 24 9e 84 27 ba 6e dd a4 4c bd bc 5c 5e 39 ed f9 df 8e fe 2c c6 b9 eb 67 59 78 12 77 5b f3 38 4b 71 9e 8b 34 f6 a3 d7 49 20 06 6b 5b ce 98 db fa 31 8d 06 d6 34 cf e7 d9 60 73 73 1c c4 3c Data Ascii: 28a7}rHPLX Dl[Xvx*Hhu)J3gngzL q..WJD"y\26Y<LvAr4~=%cr$c&T_^<IL__"<he$'nL\^9,gYxw[8Kq4I k[14`ss<
2024-09-20 22:48:54 UTC	4096	IN	Data Raw: 8c ac 12 46 c1 0e 9b 23 59 35 cc a4 09 76 3f 80 39 c4 67 6b 3c 21 5e ec 68 b8 15 c6 d0 f1 b5 55 fe 18 1a 0b b4 15 6d 8c 6e 5a c7 b5 d3 4f 73 d3 22 2b e4 d9 01 59 d1 4b 7b 6f d5 8e d7 2d ba e0 58 a7 bc 4c 34 b2 be fd bb 34 b6 bd b2 35 a6 ad c2 67 a0 5d 17 02 64 c9 cb 91 31 35 49 1f a5 36 f4 ab 37 87 c9 de 54 8c 3f bd 6a 75 33 60 eb dc 25 bb 72 02 ab 22 c7 7e 10 ec c6 7e 74 81 1d 6d e0 68 02 13 6d 39 9e 25 31 ab 51 fa 1d fe 4e 04 38 ee 33 3f f7 4b e9 61 96 36 73 50 69 a0 2a bd 7e ac 98 54 74 00 bd d5 b5 61 e0 5d 61 7b 50 e2 bc 5b 58 93 fd 20 73 47 22 3f 23 63 12 ac 0c b9 1f 91 81 de e2 35 6d eb 1d b5 cd 2e 1f 50 8d 7a 1f 80 02 93 8b dd c0 9f e7 d8 62 4f 59 46 94 83 30 3c 19 3f 3d 86 c6 d0 61 85 c6 b3 a4 1c ed 3c dc ea cf cf 87 1d 25 4d 3b db df e2 d1 ea 84 Data Ascii: F#Y5v?9gk<!^hUmnZOs"+YK{o-XL445g]d15I67T?ju3`%r"~~tmhm9%1QN83?Ka6sPi*~Tta]a{P[X sG"?#c5m.PzbOYF0<?=a<%M;
2024-09-20 22:48:54 UTC	3159	IN	Data Raw: 21 22 d8 71 40 c3 8f 54 43 33 d8 1e 23 81 18 ec 14 f7 2b f4 d8 b7 3b 78 34 3f ff fc 96 79 ff 95 7b c1 1f e1 9c 0f ae 65 52 db 41 36 d0 1f c2 7c 88 3b 1d 06 73 3a 67 2c 52 b5 3d 6a 44 37 58 a4 51 f7 9f ad 00 07 42 06 4c 7f 9b d9 e9 c9 c6 f9 2c 1a e2 c4 2a 60 77 ee 2d f2 49 ef 7b e7 0f 0f f7 f0 a2 83 17 71 e6 dd a7 fb 34 71 9d e6 d9 d9 99 7b f6 d0 4d d2 93 cd 6d 6c 2b 2a 7a 1f a7 8a 71 70 d1 bb ff 4d ff be 3a 6d 21 7f 93 6b f8 29 ee 50 bc df ef f4 3b df d0 3f f7 ff f0 f0 39 aa 1d 87 29 0e 22 76 92 b9 3f 46 68 84 77 df dd be df 19 23 df 36 2a 18 e3 99 fe a6 de fd ad 87 ee a3 fb 9b b2 c8 1c 37 98 75 26 61 14 79 f7 ff b0 fd 10 6b 7f 1f 66 85 fb af b7 bf eb 20 d7 77 51 cf fd 8e fe f9 d6 7d d8 c1 bf f4 97 ff 75 bf 73 bf a3 04 9d 48 7f 75 9a ce 2c d3 54 69 4a fc Data Ascii: !"q@TC3#+;x4?y{eRA6\|;s:g,R=jD7XQBL,`w-I{q4q{Mml+zqpM:m!k)P;?9)"v?Fhw#6*7u&aykf wQ}usHu,TiJ
2024-09-20 22:48:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.4	49856	5.101.37.37	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:55 UTC	533	OUT	GET /lib_test/config.js HTTP/1.1 Host: cdn.alfasense.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:55 UTC	935	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:55 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 15 Apr 2024 11:58:49 GMT ETag: W/"661d1679-2d1" Strict-Transport-Security: max-age=5; includeSubDomains Expect-CT: max-age=3600, enforce Content-Security-Policy: frame-ancestors 'none';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Cache-Control: public, max-age=60 Content-Encoding: gzip Cache: HIT X-Cached-Since: 2024-09-20T22:48:02+00:00 X-Node: am4-up-gc94
2024-09-20 22:48:55 UTC	344	IN	Data Raw: 31 35 31 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ad 52 e1 4a c3 30 10 fe 3f d8 3b 84 fc 90 16 d6 a4 9d dd dc 3a ca 7e f8 00 3e 80 c8 48 d3 ac 46 db 34 34 e9 a6 6c 7d 77 73 75 2a 85 aa 08 1e 84 3b 3e ee ee bb dc 77 1e 33 af 8a a3 7d ab b8 95 b5 42 9e 8f 4e d3 c9 74 82 9c 1d a5 ca eb 23 61 e5 9e e5 ac b1 b7 b5 da cb 02 a5 df e0 e7 33 3a 75 9b 9f 2b ef b2 27 c1 2d 61 c6 c8 42 79 a3 fd 67 c0 0f ec 60 07 66 6c 82 ee bf 00 00 4f 18 e0 5d db 94 38 c1 8f d6 6a 93 50 aa db 2c 10 2d d1 a4 b6 55 d0 10 5e 57 b4 10 76 ab 4b c6 45 25 94 dd c9 3c 5d 86 eb d5 e2 ea 13 4a 23 3c 43 d8 7d 4d 5b d1 b8 56 ae 12 80 e7 08 27 11 f8 f9 bb e7 ba c2 49 48 a2 b0 9b 0d e7 a0 74 7c 14 9e ab a0 b1 19 31 4c 0b d2 b4 d4 c5 41 46 61 66 1a df 84 74 b5 5a 3b 47 5e aa 72 48 ef d2 a0 e2 5f 46 60 Data Ascii: 151RJ0?;:~>HF44l}wsu*;>w3}BNt#a3:u+'-aByg`flO]8jP,-U^WvKE%<]J#<C}M[V'IHt\|1LAFaftZ;G^rH_F`
2024-09-20 22:48:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.4	49858	5.101.37.37	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:55 UTC	528	OUT	GET /lib/prebid.js HTTP/1.1 Host: cdn.alfasense.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:55 UTC	937	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:55 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 14 Mar 2024 10:57:02 GMT ETag: W/"65f2d7fe-37314" Strict-Transport-Security: max-age=5; includeSubDomains Expect-CT: max-age=3600, enforce Content-Security-Policy: frame-ancestors 'none';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Cache-Control: public, max-age=60 Content-Encoding: gzip Cache: HIT X-Cached-Since: 2024-09-20T22:48:31+00:00 X-Node: am4-up-gc94
2024-09-20 22:48:55 UTC	3159	IN	Data Raw: 37 63 34 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ec bd 6b 77 13 57 ba ef fb 7e 7d 0a a1 d1 1b a4 a6 50 6c 20 37 19 c5 cb 18 13 9c 00 26 d8 24 bd e2 ed cd 92 a5 b2 2d 90 25 45 17 83 63 fc dd cf ef ff cc 5b 95 54 86 ac d5 ab c7 d8 e3 9c d3 23 8d 55 55 b3 66 cd cb 73 bf cd af fe 5e 9b 4c f3 e3 41 bf f5 6e 56 bb f8 ae f5 70 bd b5 76 8f 3b ff f6 66 d2 ef ce f3 7e bb 76 7f ed fe c3 7b 6b 0f ee ad 3f fc b7 17 e3 fe 62 98 cf da b5 93 49 df fd ce 6a e3 f9 f9 e3 41 7f ab df 9d cc f3 69 56 3b ce e7 1f f2 7c 54 bc 75 9a cf 07 a3 79 3e 9a 17 6f 76 fb d3 c1 45 3e 2d de ba 18 7f 2c 5e 4e e7 c7 b3 ee 24 2f de ea 0e 4f ba b3 7c 34 2b dd 7c 3f 38 3f ce a7 c3 c1 bc 74 77 31 cb a7 bb fd ac e6 bf b3 db df bf 9c cd f3 f3 ac 36 3b eb 4e f3 7e ba 3e 1e f4 7f 1d e4 1f ba c7 03 ba Data Ascii: 7c4bkwW~}Pl 7&$-%Ec[T#UUfs^LAnVpv;f~v{k?bIjAiV;\|Tuy>ovE>-,^N$/O\|4+\|?8?tw16;N~>
2024-09-20 22:48:55 UTC	4096	IN	Data Raw: 05 7c 5e 1c 72 e2 b8 fd c4 81 72 60 76 33 ee 67 10 e4 71 67 02 9d 8b 0a 6b bf 95 33 d8 48 0f fb ad 13 a8 a3 c7 3f 40 62 26 9b 1a 8c ea e8 1a 05 bc 1f 17 bd 97 21 b0 ce 3a 7d 0d f3 84 3f eb a0 dd 77 df 16 74 c9 b2 4c 55 22 ce 01 b9 8b 12 b0 19 b0 07 25 2a 35 36 80 8a 26 b5 d5 e5 9e 77 06 22 5e fa e7 d3 a7 2b a7 7b cc da 57 d7 81 13 d7 f2 cd 39 c6 3d a9 24 b3 c3 fc 08 3e 90 2e 78 e1 ba 3d 87 f3 23 9b 06 c8 99 aa 51 43 ff 7e fa b4 d6 bc 0b 3d e2 a7 51 12 88 14 f6 cb 69 2e f3 eb eb fc 8f 05 52 c4 6c 7b bc c0 82 38 4d 8c 3e 89 98 1a 39 6a 67 a9 1d 76 d3 2c f6 f1 d8 06 75 73 4f 92 d7 c2 16 54 f5 c5 f3 95 de 7e c3 a2 b5 3a a6 e5 9e f0 bf 84 56 75 eb 05 13 d3 cd e3 08 a3 08 20 3a 28 88 ee 4c 11 02 b9 34 47 c4 a8 35 8c 01 b9 7c 5d 2c fb cd 3d a7 71 dd d4 b7 df ab Data Ascii: \|^rr`v3gqgk3H?@b&!:}?wtLU"%*56&w"^+{W9=$>.x=#QC~=Qi.Rl{8M>9jgv,usOT~:Vu :(L4G5\|],=q
2024-09-20 22:48:55 UTC	4096	IN	Data Raw: 2f 5b 9d 8b cf 98 38 28 fd 31 f5 d9 ee 5b f8 75 8a 51 20 ec da a7 4f 3d b6 d7 2d 72 64 d5 8a 4c 70 4a 01 1c 3d e0 00 aa 07 c4 64 db 89 02 52 45 d3 68 3e 67 22 ac 0d 08 2f ef 0d 17 7d 79 bc 84 95 48 20 88 61 96 da bc bd f5 fc f9 ee cb 1f 6b 30 97 da b3 9d ad 27 3b af 6b 88 cf fc d9 af b1 56 9d 44 c6 b6 fd 7c 7f 58 db dc f6 d1 2d 19 7a 51 fb 0e 85 1e dc d8 6b 33 b4 cb c1 09 79 08 19 55 1d 4c 8d b2 25 c4 b7 5e 77 65 16 4c 99 45 24 a5 d8 c2 f0 f2 0e 53 c1 2a 5b c5 6f 0a 92 fd ee 93 20 d6 ef 3c c9 de 36 de ca a4 8f 68 cf bf 26 39 02 31 41 dc 61 5e 5a 9d 93 48 59 e0 e6 13 54 94 82 92 1e 6d 13 5b 15 df 4d 74 c0 22 d4 d5 1b 82 ef b5 55 65 b1 f5 12 3b 38 1f 90 07 28 15 f7 6e 84 d5 e6 c6 f9 dd bb b6 31 37 cc 06 2b d4 d2 fe 1b 2e e6 06 f0 09 b7 aa 55 d9 02 f2 15 66 Data Ascii: /[8(1[uQ O=-rdLpJ=dREh>g"/}yH ak0';kVD\|X-zQk3yUL%^weLE$S*[o <6h&91Aa^ZHYTm[Mt"Ue;8(n17+.Uf
2024-09-20 22:48:55 UTC	4096	IN	Data Raw: 5d ea 54 ba 29 74 2c be 7b c3 92 af b4 53 91 15 83 d4 e8 2e 8f 0c ca 69 10 cb 44 36 0a 1f 4e 71 b0 da e4 e1 e3 16 98 e0 ea 57 dc 11 2e 3b 80 bc 51 6f 80 6f 38 89 83 58 45 c5 e8 b3 ac 66 c9 18 6f 90 40 67 2c c4 44 71 12 21 57 55 3e 0e ad ea 13 d1 51 f9 48 76 13 33 30 34 db fc ca a8 7c ab d4 98 89 15 b0 18 37 37 c7 11 2e ba cd 76 57 49 6b 9c 44 a0 35 20 da b5 b8 93 26 d7 b0 93 99 4a 99 90 62 e8 1a 6d 58 d6 a2 54 1b cc bc 65 f4 c0 2c 5b cc 22 3c 97 a2 63 96 19 33 32 8e ad a4 76 ac 12 51 36 d7 09 bb af 8e 29 05 af d0 83 03 3b b5 af 7d cb 3b 49 06 54 6a 5b 4e 3a ab 97 db 2a 82 ea d6 a0 55 be 29 83 a7 75 01 6b 40 b7 09 7a 51 d8 40 77 36 a0 83 31 88 6b 21 d0 8b b3 a9 a6 7a 39 19 f7 a8 91 c4 55 c1 b8 e7 34 73 19 28 ae 67 a8 82 94 7c 33 89 8f ba f1 4d cc f8 b3 bc Data Ascii: ]T)t,{S.iD6NqW.;Qoo8XEfo@g,Dq!WU>QHv304\|77.vWIkD5 &JbmXTe,["<c32vQ6);};ITj[N:*U)uk@zQ@w61k!z9U4s(g\|3M
2024-09-20 22:48:55 UTC	4096	IN	Data Raw: 35 37 fe f4 05 f7 5e 67 54 3d 1f 65 5b 47 4d 10 49 5f 2a 1c 24 68 e0 50 e5 01 11 44 3f c6 31 f7 0c 3f 29 16 71 54 67 09 16 d0 20 6f 54 c2 12 ee 5c 2c b7 6f ef 29 73 53 4b 21 da 21 55 92 15 57 78 1d 5c 7e 9e bd 73 44 00 d3 d8 92 dd 2f 84 99 88 22 a3 40 0d 7c c5 8b 3d c4 13 fc 9f 94 56 d9 e5 64 11 b1 5b f2 f5 bb 97 72 b2 f0 ff 48 de a8 f2 2a 6f 90 02 4b 73 4c f5 ee 8b ce 2a 3f 6e 59 f5 76 6d 3b c1 36 21 ad 08 a7 4b 00 78 19 7b 6b 16 94 1d c4 91 ad 66 f6 dc 81 da 3f 38 26 b2 20 7f ab 8c 75 f3 ea 23 cb 6c 89 7f f1 f3 ee 30 02 51 37 d2 68 30 84 60 3b c0 ad b3 7a 0e a7 b5 d8 20 69 1a f2 45 51 05 2f fc 44 42 6e c5 f3 15 96 18 99 ed 0c 8d bc 74 3c 29 20 71 93 2f c2 33 0d 86 cc e9 a2 e4 8a 69 06 18 aa c9 ad 3c 65 51 00 dc 55 38 dc 7d b9 eb 08 86 51 e6 62 51 08 58 Data Ascii: 57^gT=e[GMI_$hPD?1?)qTg oT\,o)sSK!!UWx\~sD/"@\|=Vd[rHoKsL*?nYvm;6!Kx{kf?8& u#l0Q7h0`;z iEQ/DBnt<) q/3i<eQU8}QbQX
2024-09-20 22:48:55 UTC	4096	IN	Data Raw: b7 c2 e6 64 8e c3 4a 72 5b 1a 1a ef 08 af 14 c5 10 5e 41 9f 8c 8a 67 79 a0 d6 14 8d 51 1e 3c a7 f3 07 3d 0f 61 24 98 e2 f9 5c 5a 4b 69 4d 4e 3b 84 08 2a 62 e7 0d c7 55 db a8 f0 92 04 6c 87 37 f9 72 ae 33 57 f5 4c d8 68 5b e1 37 8a 1a 41 fe 93 6e 65 1b c4 54 b8 8e a4 88 a7 af 0d 42 97 85 28 be 19 d1 37 6e ac 48 23 7e b8 69 fa 05 48 88 33 40 4e ca bd 01 c0 b7 2f ad 02 ac d3 c6 16 29 12 56 a8 2f 44 41 97 d6 8a c0 38 e0 24 10 2f df 17 cb 34 80 24 dd 5c e2 1c 78 73 36 89 38 24 00 4e 85 6e 41 03 86 03 f0 6d 0e 24 66 a8 8f 1b 21 56 d8 13 b0 dd fa 23 3e ed b3 ad 13 fc 88 3a fb 75 fc 4b 8b 98 36 a5 8c 4e 5f 82 ef c7 c9 29 ee 61 fc b3 6f 68 46 2c c2 67 a6 21 01 8e 56 69 26 54 55 34 88 27 34 ad f1 cd 3a b9 93 73 fd fa ee bb 07 0f 0a 49 15 d3 62 dc 5c 87 d0 4a 5f 4b Data Ascii: dJr[^AgyQ<=a$\ZKiMN;*bUl7r3WLh[7AneTB(7nH#~iH3@N/)V/DA8$/4$\xs68$NnAm$f!V#>:uK6N_)aohF,g!Vi&TU4'4:sIb\J_K
2024-09-20 22:48:55 UTC	4096	IN	Data Raw: 22 05 21 21 06 67 bb df 59 b9 06 04 3f 0d 6f 27 0e ef 40 c3 7b df d9 d1 f0 de f1 07 12 11 b6 a2 b6 8b e7 4d d8 96 f0 cc 2f 64 54 82 9d 99 53 4a ba 42 8d 2a 3c 13 3e 74 10 57 00 00 ad b0 09 af 72 08 d2 0b 08 3c d6 45 45 ad 09 43 03 4e 56 b6 c8 84 01 2f 19 5e 75 c6 29 b2 c0 ba 34 45 cd fb 01 20 f9 01 2a 11 ea 62 d5 ef 54 12 56 c2 0d 92 14 e0 e8 b6 6a 5f a7 35 89 05 58 57 a2 ef 74 b1 ed e0 da e7 ab 45 61 a8 20 35 26 9a 64 87 b0 3b 08 ab c8 4f bc 5f 79 dc c2 fd a3 cd 08 31 87 f7 8f e4 0b 27 e0 db 89 93 8e 23 06 18 af a9 c2 2d c5 ec 39 5e ea 18 62 48 70 a9 9d 9b 1a 36 09 85 df 87 e9 f9 78 6f aa 8a d8 91 cc 24 de 88 23 2a 83 8f f0 ac 00 28 3e a4 98 d4 3d b9 e9 06 10 d1 01 81 26 9d ce f1 e6 1e 9e 68 56 c0 9c 04 8c 86 42 d0 e2 7c 85 73 ff b0 2b da d1 33 a8 4a 33 Data Ascii: "!!gY?o'@{M/dTSJB<>tWr<EECNV/^u)4E bTVj_5XWtEa 5&d;O_y1'#-9^bHp6xo$#*(>=&hVB\|s+3J3
2024-09-20 22:48:55 UTC	4092	IN	Data Raw: 98 bf ce 1e 7c fb fd 5a a2 be 65 c6 b2 f5 36 3d 89 73 19 5f 67 bb 7f 54 dc 1f 5c 67 bf 9c 56 dc ef 56 31 90 c3 7a 7f 3c c6 f4 5d 87 4a f0 ef 8c 82 87 d4 d1 8c d4 8f f0 81 f8 bd 70 b3 a0 f6 0e 56 45 44 03 63 bf 92 5d 68 a7 9d e0 ee 82 2d a8 25 66 9a ae c5 4b c7 6c af 11 01 d1 b3 09 42 1f 19 e9 94 7e 1e cf cf 6a 77 52 29 8c 79 56 bf 63 69 ae 85 7b 03 ee 6d d4 fa 14 c8 99 88 16 eb f0 2d 6a 97 62 c6 50 22 1f 52 f2 90 e0 ff 5a 2e 1c e1 04 82 01 1e 3e 44 52 8d c0 18 78 98 45 cd 07 88 f8 a1 ba 11 8a 18 70 7a ab 45 22 a8 6c 35 71 6f dc 69 06 7d 81 38 8c ec bb f5 ef 6f 2c fd f0 5b c5 aa af 96 7e 20 c8 8a 65 80 73 af 7f f3 90 3c 6b 4e 14 a8 9f 4c fa 3b 23 d2 4c cf 54 27 06 69 8a a3 5e 64 12 78 86 87 2c 45 12 06 16 15 c9 49 1c 56 65 00 ef 5a 31 76 90 82 b5 54 5e eb Data Ascii: \|Ze6=s_gT\gVV1z<]JpVEDc]h-%fKlB~jwR)yVci{m-jbP"RZ.>DRxEpzE"l5qoi}8o,[~ es<kNL;#LT'i^dx,EIVeZ1vT^
2024-09-20 22:48:55 UTC	4096	IN	Data Raw: 38 30 30 30 0d 0a 61 71 cf 08 fb 23 0e 92 b4 ea cf 38 fd 95 89 8d c2 d2 23 4d d7 b2 8a 5b 51 01 a0 1f 1d 75 e8 66 64 c9 8a 6b 0b 12 2c 81 8d a0 01 1e 86 63 8e ba 51 87 2a 06 ca e8 d8 96 40 ac 3f bd 88 07 e9 a7 e0 e3 a4 0e ef f0 0f 49 90 67 bf 41 5d e6 94 d4 0c 95 48 c3 48 cd d3 1a d1 86 ca 9f a2 68 09 2c 49 73 f6 b2 e9 12 2b ed 5e ae 59 99 49 3c 91 55 d7 bc f9 47 ad c3 00 b5 f4 c3 9c 8f fa 5d 4b 4f 7c 9c e1 97 51 bd c7 32 fa 43 cb 07 3b 8d de 73 e9 e4 dc 29 22 63 87 ab 06 5e 86 1e e9 95 83 8e bd c3 4c f7 6c 68 78 49 dc 9b d9 11 05 76 4d d9 9b 89 36 0b 72 94 6f 64 0c 17 13 96 5a 13 ba ef 0f ad 7e 59 21 78 61 1f e1 d3 5c d9 cc 0c 1d 36 e5 11 41 9c 62 ec d4 a8 07 ee 72 2f a7 0d 7a 2a 2d ac ce 00 40 ff 8d 44 db 11 d0 b4 b4 0f 92 b9 29 3d 52 5c a1 8f 85 15 9a Data Ascii: 8000aq#8#M[Qufdk,cQ@?IgA]HHh,Is+^YI<UG]KO\|Q2C;s)"c^LlhxIvM6rodZ~Y!xa\6Abr/z-@D)=R\
2024-09-20 22:48:55 UTC	4096	IN	Data Raw: 93 6f 5c f8 eb a9 25 3e c1 24 63 1a f0 5d d8 3f f7 14 2c 40 5e 12 7f 7d 89 0f 40 30 b2 ef 09 1e 3d c2 58 f0 e4 cb 3c 09 c6 b5 43 7c 84 66 02 a3 23 67 b3 a0 f2 22 c0 8d 01 f2 39 30 f2 35 c6 9e 88 3b 3c 3e f8 ca d0 2d bc 18 73 b4 13 5e bd ca 85 2e f5 f0 bc 6b b9 1d 17 a2 3f 0c d0 8a ab e2 8c 1a 5f 8a 4d 96 77 ec 41 17 6d 65 bb ff 76 d4 83 6b 9e f4 fe b0 a0 51 54 dd e6 87 39 6d 9c be 12 be 42 7f 15 b8 5f 12 af 78 44 e5 97 ce 00 8e ac b1 20 c1 0d 42 c3 13 7d 2a ab 2c aa 33 d2 99 41 85 2c 37 32 75 d7 06 f6 ea d5 3d 53 09 0a a2 e8 31 ed aa 73 45 57 fe ab 23 e7 c5 d4 a1 13 14 16 dd a9 32 64 b3 29 3a a5 48 19 e8 96 87 ab a4 51 40 9e aa 1d 0f 6a 72 00 c5 38 64 3f 13 69 4c c6 38 df 1d a5 d9 4e 8e 6f 9a 09 4e 7d f4 52 77 d2 9e 98 99 6f 54 0a 91 2e 88 4f c9 f8 09 39 Data Ascii: o\%>$c]?,@^}@0=X<C\|f#g"905;<>-s^.k?_MwAmevkQT9mB_xD B}*,3A,72u=S1sEW#2d):HQ@jr8d?iL8NoN}RwoT.O9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.4	49854	5.101.37.37	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:55 UTC	355	OUT	GET /js/ad_13097.js HTTP/1.1 Host: cdn.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:55 UTC	936	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:55 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Fri, 20 Sep 2024 04:16:35 GMT ETag: W/"66ecf723-2f95" Strict-Transport-Security: max-age=5; includeSubDomains Expect-CT: max-age=3600, enforce Content-Security-Policy: frame-ancestors 'none';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Cache-Control: public, max-age=60 Content-Encoding: gzip Cache: HIT X-Cached-Since: 2024-09-20T22:48:54+00:00 X-Node: am4-up-gc95
2024-09-20 22:48:55 UTC	1725	IN	Data Raw: 36 62 36 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5a 6d 6f db 38 0c fe de 5f 21 f8 c3 90 de 12 d7 2f 49 93 b8 e8 01 5b b6 61 05 b6 c3 b0 ed ee 3e 34 43 a1 d8 72 a3 d6 96 0d 59 4e 9a eb f2 df 8f 92 2d c7 76 da ee 05 2d 30 60 2e d2 44 a2 28 52 a2 48 e9 31 ad 30 67 be a0 09 43 59 44 48 da 8b b3 43 74 7b 80 10 27 22 e7 0c 31 b2 46 1f 78 12 d3 8c f4 38 c9 92 68 45 d0 e9 9f 28 23 e2 33 8d 49 92 0b 4d ed 23 e8 79 78 72 b0 3d 38 e8 e1 6c c3 7c 14 6a c1 3d 29 11 44 ae 97 34 22 a8 27 36 29 49 42 b4 a6 2c 48 d6 26 8e 42 1c 60 2e d0 e9 29 32 72 16 90 90 32 12 18 87 c0 8f 10 5e 63 2a ca 81 8d 2c 0b c4 03 19 3e 47 47 19 29 06 6d 3b 53 67 38 94 c2 9b e2 cc 94 93 05 0d 4c 29 e0 4d c2 3f 15 ec d9 bb 04 07 1f 54 cb 0b 16 bc a2 59 1a e1 cd 8b a0 27 27 6c e8 91 9c 05 86 87 0a Data Ascii: 6b6Zmo8_!/I[a>4CrYN-v-0`.D(RH10gCYDHCt{'"1Fx8hE(#3IM#yxr=8l\|j=)D4"'6)IB,H&B`.)2r2^c*,>GG)m;Sg8L)M?TY''l
2024-09-20 22:48:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.4	49857	5.101.37.37	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:55 UTC	532	OUT	GET /ext/weboctxrun.js HTTP/1.1 Host: cdn.alfasense.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:55 UTC	934	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:55 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 12 Jul 2023 13:34:46 GMT ETag: W/"64aeabf6-d5" Strict-Transport-Security: max-age=5; includeSubDomains Expect-CT: max-age=3600, enforce Content-Security-Policy: frame-ancestors 'none';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Cache-Control: public, max-age=60 Content-Encoding: gzip Cache: HIT X-Cached-Since: 2024-09-20T22:48:02+00:00 X-Node: am4-up-gc94
2024-09-20 22:48:55 UTC	186	IN	Data Raw: 62 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 55 8e bd 0a 83 30 10 80 77 c1 77 b8 51 41 a2 1d 6b e9 a4 1d 04 a1 50 da a9 74 88 49 aa 81 98 14 bd 90 96 da 77 6f 44 a1 f4 86 83 fb ee bb 1f 27 35 37 8e 38 d1 98 02 9f b0 07 f7 0f a6 09 ae b7 5d 18 a4 29 14 c7 ba 3e 14 67 a8 ca 30 58 7d f2 b0 63 17 dd ad 66 28 8d 8e 62 78 87 01 f8 c0 4e 8e 84 19 a5 04 c3 cb a9 8e 56 3c b7 b8 68 6c 9b c3 9d aa 51 24 8b 3d 63 a6 a4 d0 58 95 39 6c b2 6d 96 80 bf d7 53 cd 29 9a e1 45 e0 e7 21 1d 5a 31 ef cc 81 1b 66 7b 3f 44 7c b5 08 9f d8 7f ea d3 17 5f 34 af ae d5 00 00 00 0d 0a Data Ascii: b4U0wwQAkPtIwoD'578])>g0X}cf(bxNV<hlQ$=cX9lmS)E!Z1f{?D\|_4
2024-09-20 22:48:55 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.4	49859	192.229.202.216	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:55 UTC	553	OUT	GET /bigsea/contextual/v1/weboctx.min.js HTTP/1.1 Host: cstatic.weborama.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:55 UTC	438	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 504110 Cache-Control: max-age=604800 Content-Type: text/javascript Date: Fri, 20 Sep 2024 22:48:55 GMT Etag: "1502123720+gzip+ident" Expires: Fri, 27 Sep 2024 22:48:55 GMT Last-Modified: Tue, 21 Mar 2023 09:30:45 GMT P3P: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Server: ECAcc (lhc/791E) Vary: Accept-Encoding X-Cache: HIT Content-Length: 3536 Connection: close
2024-09-20 22:48:55 UTC	3536	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 6f 43 74 78 28 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 6f 2c 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6f 26 26 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 3f 6f 5b 74 5d 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6f 2c 74 29 7b 72 65 74 75 72 6e 28 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 29 2e 75 6e 73 68 69 66 74 28 6f 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 6f 2c 74 2c 65 29 7b 28 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 2e 6f 70 65 6e 28 22 47 45 54 22 2c 6f 2c 21 30 29 2c 78 68 72 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 61 64 79 53 74 Data Ascii: function WeboCtx(){function p(o,t,e){return null!=o&&o.hasOwnProperty(t)?o[t]:e}function f(o,t){return(t=Array.prototype.slice.call(t)).unshift(o),t}function a(o,t,e){(xhr=new XMLHttpRequest).open("GET",o,!0),xhr.onreadystatechange=function(){this.readySt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.4	49860	23.111.100.20	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:55 UTC	521	OUT	GET /pixeljs HTTP/1.1 Host: cs.alfasense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:56 UTC	619	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:48:55 GMT Content-Type: application/javascript Content-Length: 7200 Connection: close Server: fasthttp Access-Control-Allow-Headers: authorization Set-Cookie: uuid=5322f90c-68ee-4d33-bc6f-6140cef1f878; expires=Thu, 11 Sep 2025 22:48:55 GMT; domain=alfasense.com; path=/; secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes
2024-09-20 22:48:56 UTC	7200	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 20 76 61 72 20 62 3d 64 2e 62 6f 64 79 3b 20 69 66 28 62 29 7b 76 61 72 20 69 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 69 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 61 63 69 6e 74 2e 6e 65 74 2f 63 6d 61 74 63 68 2f 3f 64 70 3d 31 34 26 70 69 3d 31 36 34 37 32 33 32 26 73 6b 69 70 5f 69 74 3d 35 33 32 32 66 39 30 63 2d 36 38 65 65 2d 34 64 33 33 2d 62 63 36 66 2d 36 31 34 30 63 65 66 31 66 38 37 38 27 3b 69 2e 77 69 64 74 68 3d 31 3b 69 2e 68 65 69 67 68 74 3d 31 3b 76 61 72 20 73 3d 69 2e 73 74 79 6c 65 3b 73 2e 6c 65 66 74 3d 27 2d 39 39 39 39 70 78 27 3b 73 2e 74 6f 70 3d 27 2d 39 39 39 39 70 78 27 3b 73 2e 70 6f 73 69 74 69 6f 6e 3d 27 61 62 73 6f 6c 75 74 65 27 3b 69 2e 61 6c 74 3d Data Ascii: (function(d){ var b=d.body; if(b){var i=d.createElement('img');i.src='https://acint.net/cmatch/?dp=14&pi=1647232&skip_it=5322f90c-68ee-4d33-bc6f-6140cef1f878';i.width=1;i.height=1;var s=i.style;s.left='-9999px';s.top='-9999px';s.position='absolute';i.alt=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.4	49855	188.42.34.65	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:56 UTC	123	IN	HTTP/1.1 408 Request Time-out Content-length: 110 Cache-Control: no-cache Connection: close Content-Type: text/html
2024-09-20 22:48:56 UTC	110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 62 6f 64 79 3e 3c 68 31 3e 34 30 38 20 52 65 71 75 65 73 74 20 54 69 6d 65 2d 6f 75 74 3c 2f 68 31 3e 0a 59 6f 75 72 20 62 72 6f 77 73 65 72 20 64 69 64 6e 27 74 20 73 65 6e 64 20 61 20 63 6f 6d 70 6c 65 74 65 20 72 65 71 75 65 73 74 20 69 6e 20 74 69 6d 65 2e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <html><body><h1>408 Request Time-out</h1>Your browser didn't send a complete request in time.</body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.4	49781	217.199.220.44	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:56 UTC	599	OUT	POST /rtb/bid/pbjs HTTP/1.1 Host: kimberlite.io Connection: keep-alive Content-Length: 661 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:56 UTC	661	OUT	Data Raw: 7b 22 69 6d 70 22 3a 5b 7b 22 65 78 74 22 3a 7b 7d 2c 22 69 64 22 3a 22 36 35 37 30 39 65 63 33 63 64 64 35 36 22 2c 22 62 61 6e 6e 65 72 22 3a 7b 22 74 6f 70 66 72 61 6d 65 22 3a 31 2c 22 66 6f 72 6d 61 74 22 3a 5b 7b 22 77 22 3a 39 37 30 2c 22 68 22 3a 39 30 7d 5d 7d 2c 22 74 61 67 69 64 22 3a 22 38 30 2d 49 6e 32 53 6c 22 7d 5d 2c 22 73 6f 75 72 63 65 22 3a 7b 7d 2c 22 73 69 74 65 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 22 2c 22 70 75 62 6c 69 73 68 65 72 22 3a 7b 22 64 6f 6d 61 69 6e 22 3a 22 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 22 7d 2c 22 70 61 67 65 22 3a 22 68 74 74 70 3a 2f 2f 78 6e 2d 2d 72 31 61 2e 77 65 62 73 69 74 65 2f 73 2f 6f 67 6f 72 6f 64 72 75 22 7d 2c 22 64 65 76 69 63 65 22 3a 7b 22 Data Ascii: {"imp":[{"ext":{},"id":"65709ec3cdd56","banner":{"topframe":1,"format":[{"w":970,"h":90}]},"tagid":"80-In2Sl"}],"source":{},"site":{"domain":"xn--r1a.website","publisher":{"domain":"xn--r1a.website"},"page":"http://xn--r1a.website/s/ogorodru"},"device":{"
2024-09-20 22:48:57 UTC	342	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 20 Sep 2024 22:48:56 GMT Connection: close access-control-allow-credentials: true access-control-allow-origin: http://xn--r1a.website set-cookie: u=Zu372NYn4og~ApTXE7XyWiS79ldKFQbaW0Z7ybQ; path=/; max-age=7776000; samesite=none; httponly; secure server-timing: app;srv=s7;dur=0.0591

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.4	49777	193.3.184.222	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:56 UTC	596	OUT	POST /prebid HTTP/1.1 Host: ssp-rtb.sape.ru Connection: keep-alive Content-Length: 1919 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:56 UTC	1919	OUT	Data Raw: 7b 22 61 75 63 74 69 6f 6e 49 64 22 3a 6e 75 6c 6c 2c 22 72 65 71 75 65 73 74 49 64 22 3a 22 39 63 66 39 32 63 33 65 30 35 30 37 62 62 22 2c 22 62 69 64 73 22 3a 5b 7b 22 62 69 64 64 65 72 22 3a 22 72 74 62 73 61 70 65 22 2c 22 70 61 72 61 6d 73 22 3a 7b 22 70 6c 61 63 65 49 64 22 3a 22 37 33 33 33 32 31 22 2c 22 73 69 74 65 5f 69 64 22 3a 22 31 33 30 39 37 22 2c 22 74 61 67 5f 69 64 22 3a 22 31 32 39 32 34 32 22 7d 2c 22 75 73 65 72 49 64 22 3a 7b 22 70 75 62 63 69 64 22 3a 22 36 66 36 61 34 63 36 39 2d 62 63 35 39 2d 34 63 31 33 2d 39 30 61 33 2d 31 38 65 33 34 34 33 38 38 30 63 66 22 2c 22 73 74 61 62 6c 65 49 64 22 3a 6e 75 6c 6c 7d 2c 22 75 73 65 72 49 64 41 73 45 69 64 73 22 3a 5b 7b 22 73 6f 75 72 63 65 22 3a 22 70 75 62 63 69 64 2e 6f 72 67 22 2c Data Ascii: {"auctionId":null,"requestId":"9cf92c3e0507bb","bids":[{"bidder":"rtbsape","params":{"placeId":"733321","site_id":"13097","tag_id":"129242"},"userId":{"pubcid":"6f6a4c69-bc59-4c13-90a3-18e3443880cf","stableId":null},"userIdAsEids":[{"source":"pubcid.org",
2024-09-20 22:48:57 UTC	704	IN	HTTP/1.1 204 No Content Server: openresty Date: Fri, 20 Sep 2024 22:48:57 GMT Content-Type: application/octet-stream Connection: close Access-Control-Allow-Origin: http://xn--r1a.website Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: POST Accept-Encoding: gzip, identity X-YaRequestId: efe2fc411b34405db53f0512016578f1 X-YaTraceId: 50796c184c574ee988167ac4fcb21f8b X-YaSpanId: df511bd6a33b7aa1 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Set-Cookie: sspuid=CkIDO2bt+9gdigElhj4hAgAeX/aXQX7XgCV1hJ87JTfMrnFy; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.ssp-rtb.sape.ru; path=/; Secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.4	49782	23.111.112.116	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:56 UTC	656	OUT	POST /yandex/auction HTTP/1.1 Host: pbs.alfasense.com Connection: keep-alive Content-Length: 272 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=5322f90c-68ee-4d33-bc6f-6140cef1f878
2024-09-20 22:48:56 UTC	272	OUT	Data Raw: 7b 22 70 6c 61 63 65 73 22 3a 5b 7b 22 69 64 22 3a 22 31 32 33 62 30 34 31 34 35 64 31 62 30 34 64 22 2c 22 70 6c 61 63 65 6d 65 6e 74 49 64 22 3a 22 32 38 22 2c 22 74 61 67 49 64 22 3a 22 31 32 39 32 34 32 22 2c 22 73 69 74 65 49 64 22 3a 22 31 33 30 39 37 22 2c 22 70 75 62 49 64 22 3a 22 31 32 34 22 2c 22 76 69 65 77 61 62 69 6c 69 74 79 22 3a 22 30 2e 32 31 22 2c 22 73 69 7a 65 73 22 3a 5b 5b 39 37 30 2c 39 30 5d 5d 2c 22 65 69 64 73 22 3a 5b 7b 22 73 6f 75 72 63 65 22 3a 22 70 75 62 63 69 64 2e 6f 72 67 22 2c 22 75 69 64 73 22 3a 5b 7b 22 69 64 22 3a 22 36 66 36 61 34 63 36 39 2d 62 63 35 39 2d 34 63 31 33 2d 39 30 61 33 2d 31 38 65 33 34 34 33 38 38 30 63 66 22 2c 22 61 74 79 70 65 22 3a 31 7d 5d 7d 5d 7d 5d 2c 22 73 65 74 74 69 6e 67 73 22 3a 7b 22 Data Ascii: {"places":[{"id":"123b04145d1b04d","placementId":"28","tagId":"129242","siteId":"13097","pubId":"124","viewability":"0.21","sizes":[[970,90]],"eids":[{"source":"pubcid.org","uids":[{"id":"6f6a4c69-bc59-4c13-90a3-18e3443880cf","atype":1}]}]}],"settings":{"
2024-09-20 22:48:57 UTC	407	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 20 Sep 2024 22:48:57 GMT Connection: close X-Error: empty candidates Access-Control-Allow-Origin: http://xn--r1a.website Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.4	49774	193.232.150.148	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:56 UTC	724	OUT	GET /rtb/direct_banner?bid_id=4e4e00bb31f5f6&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB HTTP/1.1 Host: px.adhigh.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:56 UTC	748	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 20 Sep 2024 22:48:56 GMT Content-Length: 0 Connection: close Access-Control-Allow-Origin: http://xn--r1a.website Access-Control-Allow-Credentials: true X-Backend-id: f15-ru Set-Cookie: gi_u=ujPJCLnjOrl.AikABlGSEZ_GxQ;Path=/;Domain=.adhigh.net;Expires=Sat, 20-Sep-2025 22:48:56 GMT;Secure;SameSite=None P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: no-cache Cache-Control: no-store Location: https://px.adhigh.net/rtb/direct_banner?bid_id=4e4e00bb31f5f6&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.4	49864	34.111.205.194	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:56 UTC	627	OUT	GET /collect?ctx=1&touchpoint=1090&url=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru HTTP/1.1 Host: dx.frontend.weborama.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:57 UTC	547	IN	HTTP/1.1 204 No Content Server: Weborama Collect Frontend Date: Fri, 20 Sep 2024 22:48:56 GMT Vary: Origin Access-Control-Allow-Origin: http://xn--r1a.website P3p: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Cache-Control: no-store, no-cache, must-revalidate, max-age=0, post-check=0, pre-check=0 Pragma: no-cache Expires: Tue, 03 Jul 2001 06:00:00 GMT Last-Modified: Fri, 20 Sep 2024 22:48:56 GMT Access-Control-Allow-Credentials: true Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.4	49861	195.209.109.15	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	660	OUT	GET /cgi-bin/json.cgi?sid=1&ad=719473&bt=55&pid=3198680&bid=7189165&bn=7189165&tuid=1&cfa=1&cid=null HTTP/1.1 Host: ad.adriver.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:57 UTC	623	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:48:57 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: http://xn--r1a.website Access-Control-Allow-Credentials: true Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA" Set-Cookie: cid=Aw3Ag_Y9A3-Y3hFZA-qKtHQ; expires=Sun, 20 Sep 2026 22:48:57 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
2024-09-20 22:48:57 UTC	508	IN	Data Raw: 31 66 35 0d 0a 0d 0a 0d 0a 7b 0d 0a 09 22 61 64 69 64 22 3a 20 37 31 39 34 37 33 2c 0d 0a 09 22 61 64 72 63 69 64 22 3a 20 22 41 77 33 41 67 5f 59 39 41 33 2d 59 33 68 46 5a 41 2d 71 4b 74 48 51 22 2c 0d 0a 09 22 70 69 64 22 3a 20 33 31 39 38 36 38 30 2c 0d 0a 09 22 62 69 64 22 3a 20 37 31 38 39 31 36 35 2c 0d 0a 20 20 20 20 20 20 20 20 22 78 70 69 64 22 3a 20 22 44 51 47 76 65 31 77 70 79 6b 73 4a 61 42 70 6b 55 51 54 6b 57 6b 41 65 67 36 6e 71 71 30 6f 65 33 53 62 61 73 5a 74 6d 62 30 39 7a 78 37 31 44 47 30 31 4f 5a 44 5a 73 79 4b 35 4a 78 42 59 78 55 4c 32 77 56 63 6b 57 6f 43 77 41 44 42 46 4a 74 68 65 45 30 43 67 22 2c 0d 0a 09 22 64 75 72 61 74 69 6f 6e 22 3a 20 22 30 30 3a 30 30 3a 30 30 2e 30 30 30 22 2c 0d 0a 09 22 73 6b 69 70 74 69 6d 65 22 3a Data Ascii: 1f5{"adid": 719473,"adrcid": "Aw3Ag_Y9A3-Y3hFZA-qKtHQ","pid": 3198680,"bid": 7189165, "xpid": "DQGve1wpyksJaBpkUQTkWkAeg6nqq0oe3SbasZtmb09zx71DG01OZDZsyK5JxBYxUL2wVckWoCwADBFJtheE0Cg","duration": "00:00:00.000","skiptime":
2024-09-20 22:48:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.4	49871	5.101.37.37	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	359	OUT	GET /lib_test/config.js HTTP/1.1 Host: cdn.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:57 UTC	935	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 15 Apr 2024 11:58:49 GMT ETag: W/"661d1679-2d1" Strict-Transport-Security: max-age=5; includeSubDomains Expect-CT: max-age=3600, enforce Content-Security-Policy: frame-ancestors 'none';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Cache-Control: public, max-age=60 Content-Encoding: gzip Cache: HIT X-Cached-Since: 2024-09-20T22:48:02+00:00 X-Node: am4-up-gc94
2024-09-20 22:48:57 UTC	344	IN	Data Raw: 31 35 31 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ad 52 e1 4a c3 30 10 fe 3f d8 3b 84 fc 90 16 d6 a4 9d dd dc 3a ca 7e f8 00 3e 80 c8 48 d3 ac 46 db 34 34 e9 a6 6c 7d 77 73 75 2a 85 aa 08 1e 84 3b 3e ee ee bb dc 77 1e 33 af 8a a3 7d ab b8 95 b5 42 9e 8f 4e d3 c9 74 82 9c 1d a5 ca eb 23 61 e5 9e e5 ac b1 b7 b5 da cb 02 a5 df e0 e7 33 3a 75 9b 9f 2b ef b2 27 c1 2d 61 c6 c8 42 79 a3 fd 67 c0 0f ec 60 07 66 6c 82 ee bf 00 00 4f 18 e0 5d db 94 38 c1 8f d6 6a 93 50 aa db 2c 10 2d d1 a4 b6 55 d0 10 5e 57 b4 10 76 ab 4b c6 45 25 94 dd c9 3c 5d 86 eb d5 e2 ea 13 4a 23 3c 43 d8 7d 4d 5b d1 b8 56 ae 12 80 e7 08 27 11 f8 f9 bb e7 ba c2 49 48 a2 b0 9b 0d e7 a0 74 7c 14 9e ab a0 b1 19 31 4c 0b d2 b4 d4 c5 41 46 61 66 1a df 84 74 b5 5a 3b 47 5e aa 72 48 ef d2 a0 e2 5f 46 60 Data Ascii: 151RJ0?;:~>HF44l}wsu*;>w3}BNt#a3:u+'-aByg`flO]8jP,-U^WvKE%<]J#<C}M[V'IHt\|1LAFaftZ;G^rH_F`
2024-09-20 22:48:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.4	49866	188.42.34.65	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	730	OUT	POST /adjson?t=prebid HTTP/1.1 Host: ads.betweendigital.com Connection: keep-alive Content-Length: 317 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dc=lux1; tuuid=934fd479-13e4-5209-ba1b-9425dcf66ff5; ut=Zu370AAAIyh89YMwyDb-xs_V4HAMjqxjMWk7dA==; ss=1; unm=1
2024-09-20 22:48:57 UTC	317	OUT	Data Raw: 5b 7b 22 64 61 74 61 22 3a 7b 22 65 69 64 73 22 3a 5b 7b 22 73 6f 75 72 63 65 22 3a 22 70 75 62 63 69 64 2e 6f 72 67 22 2c 22 75 69 64 73 22 3a 5b 7b 22 69 64 22 3a 22 36 66 36 61 34 63 36 39 2d 62 63 35 39 2d 34 63 31 33 2d 39 30 61 33 2d 31 38 65 33 34 34 33 38 38 30 63 66 22 2c 22 61 74 79 70 65 22 3a 31 7d 5d 7d 5d 2c 22 73 69 7a 65 73 22 3a 5b 22 39 37 30 78 39 30 22 5d 2c 22 6a 73 74 22 3a 22 68 62 22 2c 22 6f 72 64 22 3a 32 36 32 39 38 38 39 38 31 38 32 31 38 36 30 39 2c 22 74 7a 22 3a 32 34 30 2c 22 66 6c 22 3a 30 2c 22 72 72 22 3a 22 64 69 72 65 63 74 22 2c 22 73 22 3a 22 32 35 31 37 34 33 33 22 2c 22 62 69 64 69 64 22 3a 22 38 35 34 39 61 37 36 64 31 36 36 32 37 38 22 2c 22 61 75 63 74 69 6f 6e 69 64 22 3a 6e 75 6c 6c 2c 22 63 75 72 22 3a 22 52 Data Ascii: [{"data":{"eids":[{"source":"pubcid.org","uids":[{"id":"6f6a4c69-bc59-4c13-90a3-18e3443880cf","atype":1}]}],"sizes":["970x90"],"jst":"hb","ord":2629889818218609,"tz":240,"fl":0,"rr":"direct","s":"2517433","bidid":"8549a76d166278","auctionid":null,"cur":"R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.4	49869	5.101.37.37	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	358	OUT	GET /ext/weboctxrun.js HTTP/1.1 Host: cdn.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:57 UTC	934	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Wed, 12 Jul 2023 13:34:46 GMT ETag: W/"64aeabf6-d5" Strict-Transport-Security: max-age=5; includeSubDomains Expect-CT: max-age=3600, enforce Content-Security-Policy: frame-ancestors 'none';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Cache-Control: public, max-age=60 Content-Encoding: gzip Cache: HIT X-Cached-Since: 2024-09-20T22:48:02+00:00 X-Node: am4-up-gc94
2024-09-20 22:48:57 UTC	186	IN	Data Raw: 62 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 55 8e bd 0a 83 30 10 80 77 c1 77 b8 51 41 a2 1d 6b e9 a4 1d 04 a1 50 da a9 74 88 49 aa 81 98 14 bd 90 96 da 77 6f 44 a1 f4 86 83 fb ee bb 1f 27 35 37 8e 38 d1 98 02 9f b0 07 f7 0f a6 09 ae b7 5d 18 a4 29 14 c7 ba 3e 14 67 a8 ca 30 58 7d f2 b0 63 17 dd ad 66 28 8d 8e 62 78 87 01 f8 c0 4e 8e 84 19 a5 04 c3 cb a9 8e 56 3c b7 b8 68 6c 9b c3 9d aa 51 24 8b 3d 63 a6 a4 d0 58 95 39 6c b2 6d 96 80 bf d7 53 cd 29 9a e1 45 e0 e7 21 1d 5a 31 ef cc 81 1b 66 7b 3f 44 7c b5 08 9f d8 7f ea d3 17 5f 34 af ae d5 00 00 00 0d 0a Data Ascii: b4U0wwQAkPtIwoD'578])>g0X}cf(bxNV<hlQ$=cX9lmS)E!Z1f{?D\|_4
2024-09-20 22:48:57 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.4	49863	95.163.84.7	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	572	OUT	GET /id.json?p=5 HTTP/1.1 Host: const.uno Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:57 UTC	234	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:57 GMT Content-Type: application/json Content-Length: 9 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: http://xn--r1a.website
2024-09-20 22:48:57 UTC	9	IN	Data Raw: 7b 22 69 64 22 3a 22 22 7d Data Ascii: {"id":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.4	49867	37.230.131.17	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	510	OUT	OPTIONS /auction/prebid HTTP/1.1 Host: ssp.hybrid.ai Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type Origin: http://xn--r1a.website User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:57 UTC	387	IN	HTTP/1.1 204 No Content Date: Fri, 20 Sep 2024 22:48:57 GMT Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: content-type Access-Control-Allow-Methods: POST Access-Control-Allow-Origin: http://xn--r1a.website Vary: Origin P3P: CP='NOI DSP COR CUR ADMa DEVo TAIo PSAo PSDo IVAo IVDo OUR IND COM NAV INT STA OTC' Server: Hybrid Web Server

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.4	49870	5.101.37.37	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	354	OUT	GET /lib/prebid.js HTTP/1.1 Host: cdn.alfasense.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:57 UTC	937	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:57 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Last-Modified: Thu, 14 Mar 2024 10:57:02 GMT ETag: W/"65f2d7fe-37314" Strict-Transport-Security: max-age=5; includeSubDomains Expect-CT: max-age=3600, enforce Content-Security-Policy: frame-ancestors 'none';frame-src 'self'; Cross-Origin-Embedder-Policy: unsafe-none Cross-Origin-Opener-Policy: same-origin-allow-popups Cross-Origin-Resource-Policy: cross-origin Access-Control-Allow-Origin: * Permissions-Policy: geolocation=(self), payment=(self) Referrer-Policy: strict-origin-when-cross-origin X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-XSS-Protection: 1; mode=block; Cache-Control: public, max-age=60 Content-Encoding: gzip Cache: HIT X-Cached-Since: 2024-09-20T22:48:31+00:00 X-Node: am4-up-gc94
2024-09-20 22:48:57 UTC	3159	IN	Data Raw: 37 63 34 62 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ec bd 6b 77 13 57 ba ef fb 7e 7d 0a a1 d1 1b a4 a6 50 6c 20 37 19 c5 cb 18 13 9c 00 26 d8 24 bd e2 ed cd 92 a5 b2 2d 90 25 45 17 83 63 fc dd cf ef ff cc 5b 95 54 86 ac d5 ab c7 d8 e3 9c d3 23 8d 55 55 b3 66 cd cb 73 bf cd af fe 5e 9b 4c f3 e3 41 bf f5 6e 56 bb f8 ae f5 70 bd b5 76 8f 3b ff f6 66 d2 ef ce f3 7e bb 76 7f ed fe c3 7b 6b 0f ee ad 3f fc b7 17 e3 fe 62 98 cf da b5 93 49 df fd ce 6a e3 f9 f9 e3 41 7f ab df 9d cc f3 69 56 3b ce e7 1f f2 7c 54 bc 75 9a cf 07 a3 79 3e 9a 17 6f 76 fb d3 c1 45 3e 2d de ba 18 7f 2c 5e 4e e7 c7 b3 ee 24 2f de ea 0e 4f ba b3 7c 34 2b dd 7c 3f 38 3f ce a7 c3 c1 bc 74 77 31 cb a7 bb fd ac e6 bf b3 db df bf 9c cd f3 f3 ac 36 3b eb 4e f3 7e ba 3e 1e f4 7f 1d e4 1f ba c7 03 ba Data Ascii: 7c4bkwW~}Pl 7&$-%Ec[T#UUfs^LAnVpv;f~v{k?bIjAiV;\|Tuy>ovE>-,^N$/O\|4+\|?8?tw16;N~>
2024-09-20 22:48:57 UTC	4096	IN	Data Raw: 05 7c 5e 1c 72 e2 b8 fd c4 81 72 60 76 33 ee 67 10 e4 71 67 02 9d 8b 0a 6b bf 95 33 d8 48 0f fb ad 13 a8 a3 c7 3f 40 62 26 9b 1a 8c ea e8 1a 05 bc 1f 17 bd 97 21 b0 ce 3a 7d 0d f3 84 3f eb a0 dd 77 df 16 74 c9 b2 4c 55 22 ce 01 b9 8b 12 b0 19 b0 07 25 2a 35 36 80 8a 26 b5 d5 e5 9e 77 06 22 5e fa e7 d3 a7 2b a7 7b cc da 57 d7 81 13 d7 f2 cd 39 c6 3d a9 24 b3 c3 fc 08 3e 90 2e 78 e1 ba 3d 87 f3 23 9b 06 c8 99 aa 51 43 ff 7e fa b4 d6 bc 0b 3d e2 a7 51 12 88 14 f6 cb 69 2e f3 eb eb fc 8f 05 52 c4 6c 7b bc c0 82 38 4d 8c 3e 89 98 1a 39 6a 67 a9 1d 76 d3 2c f6 f1 d8 06 75 73 4f 92 d7 c2 16 54 f5 c5 f3 95 de 7e c3 a2 b5 3a a6 e5 9e f0 bf 84 56 75 eb 05 13 d3 cd e3 08 a3 08 20 3a 28 88 ee 4c 11 02 b9 34 47 c4 a8 35 8c 01 b9 7c 5d 2c fb cd 3d a7 71 dd d4 b7 df ab Data Ascii: \|^rr`v3gqgk3H?@b&!:}?wtLU"%*56&w"^+{W9=$>.x=#QC~=Qi.Rl{8M>9jgv,usOT~:Vu :(L4G5\|],=q
2024-09-20 22:48:57 UTC	4096	IN	Data Raw: 2f 5b 9d 8b cf 98 38 28 fd 31 f5 d9 ee 5b f8 75 8a 51 20 ec da a7 4f 3d b6 d7 2d 72 64 d5 8a 4c 70 4a 01 1c 3d e0 00 aa 07 c4 64 db 89 02 52 45 d3 68 3e 67 22 ac 0d 08 2f ef 0d 17 7d 79 bc 84 95 48 20 88 61 96 da bc bd f5 fc f9 ee cb 1f 6b 30 97 da b3 9d ad 27 3b af 6b 88 cf fc d9 af b1 56 9d 44 c6 b6 fd 7c 7f 58 db dc f6 d1 2d 19 7a 51 fb 0e 85 1e dc d8 6b 33 b4 cb c1 09 79 08 19 55 1d 4c 8d b2 25 c4 b7 5e 77 65 16 4c 99 45 24 a5 d8 c2 f0 f2 0e 53 c1 2a 5b c5 6f 0a 92 fd ee 93 20 d6 ef 3c c9 de 36 de ca a4 8f 68 cf bf 26 39 02 31 41 dc 61 5e 5a 9d 93 48 59 e0 e6 13 54 94 82 92 1e 6d 13 5b 15 df 4d 74 c0 22 d4 d5 1b 82 ef b5 55 65 b1 f5 12 3b 38 1f 90 07 28 15 f7 6e 84 d5 e6 c6 f9 dd bb b6 31 37 cc 06 2b d4 d2 fe 1b 2e e6 06 f0 09 b7 aa 55 d9 02 f2 15 66 Data Ascii: /[8(1[uQ O=-rdLpJ=dREh>g"/}yH ak0';kVD\|X-zQk3yUL%^weLE$S*[o <6h&91Aa^ZHYTm[Mt"Ue;8(n17+.Uf
2024-09-20 22:48:57 UTC	4096	IN	Data Raw: 5d ea 54 ba 29 74 2c be 7b c3 92 af b4 53 91 15 83 d4 e8 2e 8f 0c ca 69 10 cb 44 36 0a 1f 4e 71 b0 da e4 e1 e3 16 98 e0 ea 57 dc 11 2e 3b 80 bc 51 6f 80 6f 38 89 83 58 45 c5 e8 b3 ac 66 c9 18 6f 90 40 67 2c c4 44 71 12 21 57 55 3e 0e ad ea 13 d1 51 f9 48 76 13 33 30 34 db fc ca a8 7c ab d4 98 89 15 b0 18 37 37 c7 11 2e ba cd 76 57 49 6b 9c 44 a0 35 20 da b5 b8 93 26 d7 b0 93 99 4a 99 90 62 e8 1a 6d 58 d6 a2 54 1b cc bc 65 f4 c0 2c 5b cc 22 3c 97 a2 63 96 19 33 32 8e ad a4 76 ac 12 51 36 d7 09 bb af 8e 29 05 af d0 83 03 3b b5 af 7d cb 3b 49 06 54 6a 5b 4e 3a ab 97 db 2a 82 ea d6 a0 55 be 29 83 a7 75 01 6b 40 b7 09 7a 51 d8 40 77 36 a0 83 31 88 6b 21 d0 8b b3 a9 a6 7a 39 19 f7 a8 91 c4 55 c1 b8 e7 34 73 19 28 ae 67 a8 82 94 7c 33 89 8f ba f1 4d cc f8 b3 bc Data Ascii: ]T)t,{S.iD6NqW.;Qoo8XEfo@g,Dq!WU>QHv304\|77.vWIkD5 &JbmXTe,["<c32vQ6);};ITj[N:*U)uk@zQ@w61k!z9U4s(g\|3M
2024-09-20 22:48:57 UTC	4096	IN	Data Raw: 35 37 fe f4 05 f7 5e 67 54 3d 1f 65 5b 47 4d 10 49 5f 2a 1c 24 68 e0 50 e5 01 11 44 3f c6 31 f7 0c 3f 29 16 71 54 67 09 16 d0 20 6f 54 c2 12 ee 5c 2c b7 6f ef 29 73 53 4b 21 da 21 55 92 15 57 78 1d 5c 7e 9e bd 73 44 00 d3 d8 92 dd 2f 84 99 88 22 a3 40 0d 7c c5 8b 3d c4 13 fc 9f 94 56 d9 e5 64 11 b1 5b f2 f5 bb 97 72 b2 f0 ff 48 de a8 f2 2a 6f 90 02 4b 73 4c f5 ee 8b ce 2a 3f 6e 59 f5 76 6d 3b c1 36 21 ad 08 a7 4b 00 78 19 7b 6b 16 94 1d c4 91 ad 66 f6 dc 81 da 3f 38 26 b2 20 7f ab 8c 75 f3 ea 23 cb 6c 89 7f f1 f3 ee 30 02 51 37 d2 68 30 84 60 3b c0 ad b3 7a 0e a7 b5 d8 20 69 1a f2 45 51 05 2f fc 44 42 6e c5 f3 15 96 18 99 ed 0c 8d bc 74 3c 29 20 71 93 2f c2 33 0d 86 cc e9 a2 e4 8a 69 06 18 aa c9 ad 3c 65 51 00 dc 55 38 dc 7d b9 eb 08 86 51 e6 62 51 08 58 Data Ascii: 57^gT=e[GMI_$hPD?1?)qTg oT\,o)sSK!!UWx\~sD/"@\|=Vd[rHoKsL*?nYvm;6!Kx{kf?8& u#l0Q7h0`;z iEQ/DBnt<) q/3i<eQU8}QbQX
2024-09-20 22:48:57 UTC	4096	IN	Data Raw: b7 c2 e6 64 8e c3 4a 72 5b 1a 1a ef 08 af 14 c5 10 5e 41 9f 8c 8a 67 79 a0 d6 14 8d 51 1e 3c a7 f3 07 3d 0f 61 24 98 e2 f9 5c 5a 4b 69 4d 4e 3b 84 08 2a 62 e7 0d c7 55 db a8 f0 92 04 6c 87 37 f9 72 ae 33 57 f5 4c d8 68 5b e1 37 8a 1a 41 fe 93 6e 65 1b c4 54 b8 8e a4 88 a7 af 0d 42 97 85 28 be 19 d1 37 6e ac 48 23 7e b8 69 fa 05 48 88 33 40 4e ca bd 01 c0 b7 2f ad 02 ac d3 c6 16 29 12 56 a8 2f 44 41 97 d6 8a c0 38 e0 24 10 2f df 17 cb 34 80 24 dd 5c e2 1c 78 73 36 89 38 24 00 4e 85 6e 41 03 86 03 f0 6d 0e 24 66 a8 8f 1b 21 56 d8 13 b0 dd fa 23 3e ed b3 ad 13 fc 88 3a fb 75 fc 4b 8b 98 36 a5 8c 4e 5f 82 ef c7 c9 29 ee 61 fc b3 6f 68 46 2c c2 67 a6 21 01 8e 56 69 26 54 55 34 88 27 34 ad f1 cd 3a b9 93 73 fd fa ee bb 07 0f 0a 49 15 d3 62 dc 5c 87 d0 4a 5f 4b Data Ascii: dJr[^AgyQ<=a$\ZKiMN;*bUl7r3WLh[7AneTB(7nH#~iH3@N/)V/DA8$/4$\xs68$NnAm$f!V#>:uK6N_)aohF,g!Vi&TU4'4:sIb\J_K
2024-09-20 22:48:57 UTC	4096	IN	Data Raw: 22 05 21 21 06 67 bb df 59 b9 06 04 3f 0d 6f 27 0e ef 40 c3 7b df d9 d1 f0 de f1 07 12 11 b6 a2 b6 8b e7 4d d8 96 f0 cc 2f 64 54 82 9d 99 53 4a ba 42 8d 2a 3c 13 3e 74 10 57 00 00 ad b0 09 af 72 08 d2 0b 08 3c d6 45 45 ad 09 43 03 4e 56 b6 c8 84 01 2f 19 5e 75 c6 29 b2 c0 ba 34 45 cd fb 01 20 f9 01 2a 11 ea 62 d5 ef 54 12 56 c2 0d 92 14 e0 e8 b6 6a 5f a7 35 89 05 58 57 a2 ef 74 b1 ed e0 da e7 ab 45 61 a8 20 35 26 9a 64 87 b0 3b 08 ab c8 4f bc 5f 79 dc c2 fd a3 cd 08 31 87 f7 8f e4 0b 27 e0 db 89 93 8e 23 06 18 af a9 c2 2d c5 ec 39 5e ea 18 62 48 70 a9 9d 9b 1a 36 09 85 df 87 e9 f9 78 6f aa 8a d8 91 cc 24 de 88 23 2a 83 8f f0 ac 00 28 3e a4 98 d4 3d b9 e9 06 10 d1 01 81 26 9d ce f1 e6 1e 9e 68 56 c0 9c 04 8c 86 42 d0 e2 7c 85 73 ff b0 2b da d1 33 a8 4a 33 Data Ascii: "!!gY?o'@{M/dTSJB<>tWr<EECNV/^u)4E bTVj_5XWtEa 5&d;O_y1'#-9^bHp6xo$#*(>=&hVB\|s+3J3
2024-09-20 22:48:57 UTC	4092	IN	Data Raw: 98 bf ce 1e 7c fb fd 5a a2 be 65 c6 b2 f5 36 3d 89 73 19 5f 67 bb 7f 54 dc 1f 5c 67 bf 9c 56 dc ef 56 31 90 c3 7a 7f 3c c6 f4 5d 87 4a f0 ef 8c 82 87 d4 d1 8c d4 8f f0 81 f8 bd 70 b3 a0 f6 0e 56 45 44 03 63 bf 92 5d 68 a7 9d e0 ee 82 2d a8 25 66 9a ae c5 4b c7 6c af 11 01 d1 b3 09 42 1f 19 e9 94 7e 1e cf cf 6a 77 52 29 8c 79 56 bf 63 69 ae 85 7b 03 ee 6d d4 fa 14 c8 99 88 16 eb f0 2d 6a 97 62 c6 50 22 1f 52 f2 90 e0 ff 5a 2e 1c e1 04 82 01 1e 3e 44 52 8d c0 18 78 98 45 cd 07 88 f8 a1 ba 11 8a 18 70 7a ab 45 22 a8 6c 35 71 6f dc 69 06 7d 81 38 8c ec bb f5 ef 6f 2c fd f0 5b c5 aa af 96 7e 20 c8 8a 65 80 73 af 7f f3 90 3c 6b 4e 14 a8 9f 4c fa 3b 23 d2 4c cf 54 27 06 69 8a a3 5e 64 12 78 86 87 2c 45 12 06 16 15 c9 49 1c 56 65 00 ef 5a 31 76 90 82 b5 54 5e eb Data Ascii: \|Ze6=s_gT\gVV1z<]JpVEDc]h-%fKlB~jwR)yVci{m-jbP"RZ.>DRxEpzE"l5qoi}8o,[~ es<kNL;#LT'i^dx,EIVeZ1vT^
2024-09-20 22:48:57 UTC	4096	IN	Data Raw: 38 30 30 30 0d 0a 61 71 cf 08 fb 23 0e 92 b4 ea cf 38 fd 95 89 8d c2 d2 23 4d d7 b2 8a 5b 51 01 a0 1f 1d 75 e8 66 64 c9 8a 6b 0b 12 2c 81 8d a0 01 1e 86 63 8e ba 51 87 2a 06 ca e8 d8 96 40 ac 3f bd 88 07 e9 a7 e0 e3 a4 0e ef f0 0f 49 90 67 bf 41 5d e6 94 d4 0c 95 48 c3 48 cd d3 1a d1 86 ca 9f a2 68 09 2c 49 73 f6 b2 e9 12 2b ed 5e ae 59 99 49 3c 91 55 d7 bc f9 47 ad c3 00 b5 f4 c3 9c 8f fa 5d 4b 4f 7c 9c e1 97 51 bd c7 32 fa 43 cb 07 3b 8d de 73 e9 e4 dc 29 22 63 87 ab 06 5e 86 1e e9 95 83 8e bd c3 4c f7 6c 68 78 49 dc 9b d9 11 05 76 4d d9 9b 89 36 0b 72 94 6f 64 0c 17 13 96 5a 13 ba ef 0f ad 7e 59 21 78 61 1f e1 d3 5c d9 cc 0c 1d 36 e5 11 41 9c 62 ec d4 a8 07 ee 72 2f a7 0d 7a 2a 2d ac ce 00 40 ff 8d 44 db 11 d0 b4 b4 0f 92 b9 29 3d 52 5c a1 8f 85 15 9a Data Ascii: 8000aq#8#M[Qufdk,cQ@?IgA]HHh,Is+^YI<UG]KO\|Q2C;s)"c^LlhxIvM6rodZ~Y!xa\6Abr/z-@D)=R\
2024-09-20 22:48:57 UTC	4096	IN	Data Raw: 93 6f 5c f8 eb a9 25 3e c1 24 63 1a f0 5d d8 3f f7 14 2c 40 5e 12 7f 7d 89 0f 40 30 b2 ef 09 1e 3d c2 58 f0 e4 cb 3c 09 c6 b5 43 7c 84 66 02 a3 23 67 b3 a0 f2 22 c0 8d 01 f2 39 30 f2 35 c6 9e 88 3b 3c 3e f8 ca d0 2d bc 18 73 b4 13 5e bd ca 85 2e f5 f0 bc 6b b9 1d 17 a2 3f 0c d0 8a ab e2 8c 1a 5f 8a 4d 96 77 ec 41 17 6d 65 bb ff 76 d4 83 6b 9e f4 fe b0 a0 51 54 dd e6 87 39 6d 9c be 12 be 42 7f 15 b8 5f 12 af 78 44 e5 97 ce 00 8e ac b1 20 c1 0d 42 c3 13 7d 2a ab 2c aa 33 d2 99 41 85 2c 37 32 75 d7 06 f6 ea d5 3d 53 09 0a a2 e8 31 ed aa 73 45 57 fe ab 23 e7 c5 d4 a1 13 14 16 dd a9 32 64 b3 29 3a a5 48 19 e8 96 87 ab a4 51 40 9e aa 1d 0f 6a 72 00 c5 38 64 3f 13 69 4c c6 38 df 1d a5 d9 4e 8e 6f 9a 09 4e 7d f4 52 77 d2 9e 98 99 6f 54 0a 91 2e 88 4f c9 f8 09 39 Data Ascii: o\%>$c]?,@^}@0=X<C\|f#g"905;<>-s^.k?_MwAmevkQT9mB_xD B}*,3A,72u=S1sEW#2d):HQ@jr8d?iL8NoN}RwoT.O9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.4	49865	84.201.179.252	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	601	OUT	GET /stats/2x2.png?s=129242&e=r&t=p HTTP/1.1 Host: v.alfasrv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:57 UTC	294	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Fri, 20 Sep 2024 22:48:57 GMT Content-Type: image/png Content-Length: 95 Connection: close Last-Modified: Friday, 20-Sep-2024 22:48:57 GMT Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0 Accept-Ranges: bytes
2024-09-20 22:48:57 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 ff 4d 00 5c 35 38 7f 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 78 9c 63 62 00 00 00 06 00 03 36 37 7c a8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEM\58tRNS@fIDATxcb67\|IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.4	49873	23.111.100.20	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	398	OUT	GET /pixeljs HTTP/1.1 Host: cs.alfasense.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=5322f90c-68ee-4d33-bc6f-6140cef1f878
2024-09-20 22:48:57 UTC	472	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:48:57 GMT Content-Type: application/javascript Content-Length: 7200 Connection: close Server: fasthttp Access-Control-Allow-Headers: authorization Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes
2024-09-20 22:48:57 UTC	7200	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 64 29 7b 20 76 61 72 20 62 3d 64 2e 62 6f 64 79 3b 20 69 66 28 62 29 7b 76 61 72 20 69 3d 64 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 69 6d 67 27 29 3b 69 2e 73 72 63 3d 27 68 74 74 70 73 3a 2f 2f 73 73 70 2e 61 6c 2d 61 64 74 65 63 68 2e 63 6f 6d 2f 61 70 69 2f 73 79 6e 63 2f 61 6c 66 61 64 61 72 74 3f 73 6b 69 70 6d 65 3d 35 33 32 32 66 39 30 63 2d 36 38 65 65 2d 34 64 33 33 2d 62 63 36 66 2d 36 31 34 30 63 65 66 31 66 38 37 38 27 3b 69 2e 77 69 64 74 68 3d 31 3b 69 2e 68 65 69 67 68 74 3d 31 3b 76 61 72 20 73 3d 69 2e 73 74 79 6c 65 3b 73 2e 6c 65 66 74 3d 27 2d 39 39 39 39 70 78 27 3b 73 2e 74 6f 70 3d 27 2d 39 39 39 39 70 78 27 3b 73 2e 70 6f 73 69 74 69 6f 6e 3d 27 61 62 73 6f 6c 75 74 65 27 3b 69 2e 61 6c 74 3d Data Ascii: (function(d){ var b=d.body; if(b){var i=d.createElement('img');i.src='https://ssp.al-adtech.com/api/sync/alfadart?skipme=5322f90c-68ee-4d33-bc6f-6140cef1f878';i.width=1;i.height=1;var s=i.style;s.left='-9999px';s.top='-9999px';s.position='absolute';i.alt=

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
97	192.168.2.4	49872	192.229.202.216	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	379	OUT	GET /bigsea/contextual/v1/weboctx.min.js HTTP/1.1 Host: cstatic.weborama.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:57 UTC	438	IN	HTTP/1.1 200 OK Access-Control-Allow-Origin: * Age: 504112 Cache-Control: max-age=604800 Content-Type: text/javascript Date: Fri, 20 Sep 2024 22:48:57 GMT Etag: "1502123720+gzip+ident" Expires: Fri, 27 Sep 2024 22:48:57 GMT Last-Modified: Tue, 21 Mar 2023 09:30:45 GMT P3P: CP="NOI DSP COR CURa DEVa PSAa OUR STP UNI DEM" Server: ECAcc (lhc/791E) Vary: Accept-Encoding X-Cache: HIT Content-Length: 3536 Connection: close
2024-09-20 22:48:57 UTC	3536	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 57 65 62 6f 43 74 78 28 29 7b 66 75 6e 63 74 69 6f 6e 20 70 28 6f 2c 74 2c 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 6f 26 26 6f 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 74 29 3f 6f 5b 74 5d 3a 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6f 2c 74 29 7b 72 65 74 75 72 6e 28 74 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 29 29 2e 75 6e 73 68 69 66 74 28 6f 29 2c 74 7d 66 75 6e 63 74 69 6f 6e 20 61 28 6f 2c 74 2c 65 29 7b 28 78 68 72 3d 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 29 2e 6f 70 65 6e 28 22 47 45 54 22 2c 6f 2c 21 30 29 2c 78 68 72 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 72 65 61 64 79 53 74 Data Ascii: function WeboCtx(){function p(o,t,e){return null!=o&&o.hasOwnProperty(t)?o[t]:e}function f(o,t){return(t=Array.prototype.slice.call(t)).unshift(o),t}function a(o,t,e){(xhr=new XMLHttpRequest).open("GET",o,!0),xhr.onreadystatechange=function(){this.readySt

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
98	192.168.2.4	49868	195.201.108.196	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	732	OUT	GET /adjson?tz=240&w=970&h=90&domain=xn--r1a.website&l=http%3A%2F%2Fxn--r1a.website%2Fs%2Fogorodru&s=38014&cur=RUB&bidid=27eb92cbf416fc&transactionid=&auctionid=&bidfloor=0 HTTP/1.1 Host: ssp.otm-r.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
99	192.168.2.4	49874	193.232.150.148	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:57 UTC	775	OUT	GET /rtb/direct_banner?bid_id=4e4e00bb31f5f6&pid=66&tid=970x90_alfadart&known=1&is_video=false&resp_type=JSON&provider=direct.prebidjs&size=970x90&floor=0.1&cur=RUB&bounced=1 HTTP/1.1 Host: px.adhigh.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 content-type: text/plain Accept: / Origin: http://xn--r1a.website Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gi_u=ujPJCLnjOrl.AikABlGSEZ_GxQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
100	192.168.2.4	49875	195.209.109.13	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:58 UTC	432	OUT	GET /cgi-bin/json.cgi?sid=1&ad=719473&bt=55&pid=3198680&bid=7189165&bn=7189165&tuid=1&cfa=1&cid=null HTTP/1.1 Host: ad.adriver.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:58 UTC	602	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:48:58 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA" Set-Cookie: cid=A-jDGZJ2XDp6ijgtGMM-BdQ; expires=Sun, 20 Sep 2026 22:48:58 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure
2024-09-20 22:48:58 UTC	508	IN	Data Raw: 31 66 35 0d 0a 0d 0a 0d 0a 7b 0d 0a 09 22 61 64 69 64 22 3a 20 37 31 39 34 37 33 2c 0d 0a 09 22 61 64 72 63 69 64 22 3a 20 22 41 2d 6a 44 47 5a 4a 32 58 44 70 36 69 6a 67 74 47 4d 4d 2d 42 64 51 22 2c 0d 0a 09 22 70 69 64 22 3a 20 33 31 39 38 36 38 30 2c 0d 0a 09 22 62 69 64 22 3a 20 37 31 38 39 31 36 35 2c 0d 0a 20 20 20 20 20 20 20 20 22 78 70 69 64 22 3a 20 22 44 78 59 4d 6b 79 6c 34 4e 4c 30 33 6c 55 7a 48 74 41 5f 5f 6a 70 72 43 63 39 69 63 6c 50 33 63 55 53 5f 4d 5f 52 61 6b 2d 55 72 6d 73 65 37 69 57 6c 39 66 57 5f 49 63 5a 44 4c 59 62 77 4c 61 59 5a 69 4e 57 31 34 51 50 52 6b 74 30 36 6a 56 63 6a 53 47 30 55 67 22 2c 0d 0a 09 22 64 75 72 61 74 69 6f 6e 22 3a 20 22 30 30 3a 30 30 3a 30 30 2e 30 30 30 22 2c 0d 0a 09 22 73 6b 69 70 74 69 6d 65 22 3a Data Ascii: 1f5{"adid": 719473,"adrcid": "A-jDGZJ2XDp6ijgtGMM-BdQ","pid": 3198680,"bid": 7189165, "xpid": "DxYMkyl4NL03lUzHtA__jprCc9iclP3cUS_M_Rak-Urmse7iWl9fW_IcZDLYbwLaYZiNW14QPRkt06jVcjSG0Ug","duration": "00:00:00.000","skiptime":
2024-09-20 22:48:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
101	192.168.2.4	49884	31.172.81.146	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:58 UTC	625	OUT	GET /?src=asense&uid=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: sync.bumlam.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:58 UTC	678	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 20 Sep 2024 22:48:58 GMT Content-Length: 0 Connection: close Set-Cookie: suuid3=IiQ4NWM2OGY1YS03N2EyLTExZWYtODZlMC0wMDI1OTBjMDY0N2M; Path=/; Expires=Thu, 15 Sep 2044 22:48:58 GMT; Domain=bumlam.com; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Location: //sync.bumlam.com/?src=asense&s_data=CAIQARja97e3BmIkNTMyMmY5MGMtNjhlZS00ZDMzLWJjNmYtNjE0MGNlZjFmODc4ogEQhcaPWneiEe-G4AAlkMBkfA* ETag: 85c68f5a-77a2-11ef-86e0-002590c0647c Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
102	192.168.2.4	49876	84.201.179.252	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:58 UTC	367	OUT	GET /stats/2x2.png?s=129242&e=r&t=p HTTP/1.1 Host: v.alfasrv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:58 UTC	294	IN	HTTP/1.1 200 OK Server: nginx/1.14.1 Date: Fri, 20 Sep 2024 22:48:58 GMT Content-Type: image/png Content-Length: 95 Connection: close Last-Modified: Friday, 20-Sep-2024 22:48:58 GMT Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate, max-age=0 Accept-Ranges: bytes
2024-09-20 22:48:58 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 ff 4d 00 5c 35 38 7f 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 78 9c 63 62 00 00 00 06 00 03 36 37 7c a8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEM\58tRNS@fIDATxcb67\|IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
103	192.168.2.4	49880	142.132.138.214	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:58 UTC	636	OUT	GET /cmatch/?dp=14&pi=1647232&skip_it=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: acint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:58 UTC	721	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 20 Sep 2024 22:48:58 GMT Content-Type: text/html Content-Length: 154 Connection: close Set-Cookie: cSyncDp14v6=1726872538; expires=Sun, 20-Oct-24 22:48:58 GMT; path=/; Secure; SameSite=None; domain=.acint.net Location: https://ssp-rtb.sape.ru/rmatch/?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D14 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Set-Cookie: aid=fwAAA2bt+9oQjReGJr8EAnw1bQCOHYOy1RbRFA0yx3WKYqy2; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
2024-09-20 22:48:58 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
104	192.168.2.4	49886	142.132.138.212	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:58 UTC	699	OUT	GET /rmatch?dp=185&euid=5322f90c-68ee-4d33-bc6f-6140cef1f878&r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D%24%7BUSER_ID%7D HTTP/1.1 Host: www.acint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:58 UTC	695	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 20 Sep 2024 22:48:58 GMT Content-Type: text/html Content-Length: 154 Connection: close Set-Cookie: test_cookie=CheckForPermission; path=/; Secure; SameSite=None; domain=.acint.net; expires=Fri, 20-Sep-24 22:58:58 GMT Location: /rmatch?r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D$%7BUSER_ID%7D&dp=185&tc=1&euid=5322f90c-68ee-4d33-bc6f-6140cef1f878 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0 Set-Cookie: aid=fwAAAmbt+9oB1RYgkLwDAnZ8FKZyxlz382e+nMOc/E0BTrn0; expires=Thu, 31-Dec-37 23:55:55 GMT; domain=.acint.net; path=/; Secure; SameSite=None
2024-09-20 22:48:58 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
105	192.168.2.4	49883	213.248.44.211	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:58 UTC	628	OUT	GET /p?source=alfasense&id=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: s.suprion.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:58 UTC	261	IN	HTTP/1.1 200 Ok server: nginx date: Fri, 20 Sep 2024 22:48:58 GMT content-type: image/gif content-length: 807 set-cookie: KsId=5IGiW2jKnMllFA; Expires=:Mon, 21 Sep 2026 00:00:00 GMT; Domain=.suprion.ru; HttpOnly; Secure;SameSite=None connection: close
2024-09-20 22:48:58 UTC	807	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
106	192.168.2.4	49885	87.242.127.163	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:58 UTC	664	OUT	GET /set?partner_id=a45901af-fbca-4cab-b3b8-0e6b6ec957e8&id=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: sync.rambler.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:58 UTC	174	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:48:58 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains x-sca-elb: ext

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
107	192.168.2.4	49878	95.163.84.7	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:58 UTC	344	OUT	GET /id.json?p=5 HTTP/1.1 Host: const.uno Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:58 UTC	181	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:58 GMT Content-Type: application/json Content-Length: 9 Connection: close Access-Control-Allow-Credentials: true
2024-09-20 22:48:58 UTC	9	IN	Data Raw: 7b 22 69 64 22 3a 22 22 7d Data Ascii: {"id":""}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
108	192.168.2.4	49881	65.109.23.99	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:58 UTC	643	OUT	GET /usersync?dspcsid=135&redirect=1&id=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: ssp.bidvol.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:58 UTC	713	IN	HTTP/1.1 302 Found Server: nginx/1.22.0 Date: Fri, 20 Sep 2024 22:48:58 GMT Transfer-Encoding: chunked Connection: close X-Request-Id: 9b2ab25e-f99b-4a96-b147-88221a75a75a Vary: Origin Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Cache-Control: no-store, no-cache, must-revalidate, proxy-revalidate Pragma: no-cache Expires: 0 Surrogate-Control: no-store Set-Cookie: bvuid=lfihjef9ln; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT; Secure; SameSite=None Set-Cookie: bvuid2=lfihjef9ln; Max-Age=2147483647; Domain=.bidvol.com; Path=/; Expires=Tue, 19 Jan 2038 03:14:07 GMT Location: https://cs.alfasense.com/p?ssp=bv&uid=lfihjef9ln
2024-09-20 22:48:58 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
109	192.168.2.4	49879	130.193.42.23	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:58 UTC	602	OUT	GET /events/1x1.png?s=129242&e=r&t=p HTTP/1.1 Host: s.alfasrv.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:58 UTC	460	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 20 Sep 2024 22:48:58 GMT Content-Type: image/png Content-Length: 95 Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer Access-Control-Allow-Credentials: true Cache-Control: no-cache,no-store Expires: Tue, 01 Jan 1980 1:00:00 GMT Accept-Ranges: bytes
2024-09-20 22:48:58 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 ff 4d 00 5c 35 38 7f 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 78 9c 63 62 00 00 00 06 00 03 36 37 7c a8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEM\58tRNS@fIDATxcb67\|IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
110	192.168.2.4	49887	188.114.97.3	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:58 UTC	626	OUT	GET /sync?ssp=42&uid=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: a.videohead.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:48:58 UTC	925	IN	HTTP/1.1 204 No Content Date: Fri, 20 Sep 2024 22:48:58 GMT Content-Type: text/plain Connection: close Set-Cookie: prevhead=1; Expires=Mon, 21 Oct 2024 01:48:58 GMT; Domain=.videohead.tech; SameSite=None; Secure; Path=/ Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization Access-Control-Expose-Headers: Content-Length,Content-Range Vary: Origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CMtxzf0yqvJ3x2nwt2aK9iMEM39Siucxi%2Ft%2FDUVfKnmDi9r4T74L4J9k8y%2FTtAaTD%2BGogU1P%2B2NkDG%2FuRGY1X880eRJ97SOrDRxNfrBW4jJD4cHAyQ7WqbNWHVJZ91onhZGt"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c655db6ba5372a7-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
111	192.168.2.4	49890	142.132.138.212	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:59 UTC	820	OUT	GET /rmatch?r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D$%7BUSER_ID%7D&dp=185&tc=1&euid=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: www.acint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cSyncDp14v6=1726872538; test_cookie=CheckForPermission; aid=fwAAAmbt+9oB1RYgkLwDAnZ8FKZyxlz382e+nMOc/E0BTrn0
2024-09-20 22:48:59 UTC	655	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 20 Sep 2024 22:48:59 GMT Content-Type: text/html Content-Length: 154 Connection: close P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" Set-Cookie: cSyncDp14v4=1726872539; expires=Sun, 20-Oct-24 22:48:59 GMT; path=/; Secure; SameSite=None; domain=.acint.net Location: https://ssp-rtb.sape.ru/rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcs.alfasense.com%252Fp%253Fssp%253Dsp%2526uid%253D$%257BUSER_ID%257D&dp=14 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
2024-09-20 22:48:59 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
112	192.168.2.4	49889	31.172.81.146	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:59 UTC	753	OUT	GET /?src=asense&s_data=CAIQARja97e3BmIkNTMyMmY5MGMtNjhlZS00ZDMzLWJjNmYtNjE0MGNlZjFmODc4ogEQhcaPWneiEe-G4AAlkMBkfA** HTTP/1.1 Host: sync.bumlam.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suuid3=IiQ4NWM2OGY1YS03N2EyLTExZWYtODZlMC0wMDI1OTBjMDY0N2M
2024-09-20 22:48:59 UTC	504	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:48:59 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: suuid3=IiQ4NWM2OGY1YS03N2EyLTExZWYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 15 Sep 2044 22:48:59 GMT; Domain=bumlam.com; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
2024-09-20 22:48:59 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
113	192.168.2.4	49888	193.3.184.222	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:59 UTC	780	OUT	GET /rmatch/?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D%24%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fmc.acint.net%252Fcmatch%253Fdp%253D14 HTTP/1.1 Host: ssp-rtb.sape.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sspuid=CkIDO2bt+9gdigElhj4hAgAeX/aXQX7XgCV1hJ87JTfMrnFy
2024-09-20 22:48:59 UTC	515	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 20 Sep 2024 22:48:59 GMT Content-Type: text/html Content-Length: 142 Connection: close P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Location: https://acint.net/rmatch?dp=14&euid=3B03420AD8FBED6625018A1D02213E86&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
2024-09-20 22:48:59 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
114	192.168.2.4	49891	23.111.100.20	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:59 UTC	648	OUT	GET /p?ssp=bv&uid=lfihjef9ln HTTP/1.1 Host: cs.alfasense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=5322f90c-68ee-4d33-bc6f-6140cef1f878
2024-09-20 22:49:00 UTC	350	IN	HTTP/1.1 204 No Content Date: Fri, 20 Sep 2024 22:48:59 GMT Connection: close Server: nginx Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
115	192.168.2.4	49894	172.67.69.82	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:59 UTC	626	OUT	GET /alfasense?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: sync.adspend.space Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:00 UTC	490	IN	HTTP/1.1 204 No Content Date: Fri, 20 Sep 2024 22:49:00 GMT Connection: close CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UFuLP8f8nSV7w4sADLi11Vw5OHZfq2ed2epo8Or5xeQDtWRHAc8Ds9jQhvLi3rZLNgaEaniErAgIQgUHj7%2FDOXNggXIEC%2BCv%2B73Il3aCOA69aZZzben1xygjsPrFYZdc6Y4CEQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c655dbd6e628c53-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
116	192.168.2.4	49896	130.193.42.23	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:59 UTC	368	OUT	GET /events/1x1.png?s=129242&e=r&t=p HTTP/1.1 Host: s.alfasrv.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:00 UTC	460	IN	HTTP/1.1 200 OK Server: nginx/1.24.0 Date: Fri, 20 Sep 2024 22:49:00 GMT Content-Type: image/png Content-Length: 95 Connection: close Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,X-Original-Referer Access-Control-Allow-Credentials: true Cache-Control: no-cache,no-store Expires: Tue, 01 Jan 1980 1:00:00 GMT Accept-Ranges: bytes
2024-09-20 22:49:00 UTC	95	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 01 00 00 00 01 01 03 00 00 00 25 db 56 ca 00 00 00 03 50 4c 54 45 ff 4d 00 5c 35 38 7f 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 0a 49 44 41 54 78 9c 63 62 00 00 00 06 00 03 36 37 7c a8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR%VPLTEM\58tRNS@fIDATxcb67\|IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
117	192.168.2.4	49895	45.139.25.125	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:59 UTC	636	OUT	GET /api/sync/alfadart?skipme=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: ssp.al-adtech.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:00 UTC	633	IN	HTTP/1.1 302 Found Server: nginx/1.20.1 Date: Fri, 20 Sep 2024 22:49:00 GMT Content-Length: 0 Connection: close Vary: Origin Access-Control-Allow-Origin: Access-Control-Allow-Credentials: true Location: https://cs.alfasense.com/p?ssp=al&id=9291fa75-8358-4079-b4ea-83f0b6e026ab Set-Cookie: afp_cookie=gAAAAABm7fvckCAa_M0azu6VuHw4knbGIbjyK4wT8sZ0_8MlYiW28mxonScPQeYte8eQEnTbA1LU1dEKnRdDhjnScTK_lRpZep-Y5vB0jWqQsXcEg8e2ri03rqIpRIH3mkM_9Lp3Lb1W4xnB4UHSTFHjS4Vwo6moMrL1C9ETAT6w5EnFJcTzBXYvfchGYo0bq2SKAaKpHKaQUGyxuudngDmzFptXRooOoQQ59A2gKuyuuJNIL_nS3sc=$; expires=Sun, 20 Oct 2024 22:49:00 GMT; path=/; secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
118	192.168.2.4	49898	213.248.44.211	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:59 UTC	423	OUT	GET /p?source=alfasense&id=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: s.suprion.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: KsId=5IGiW2jKnMllFA
2024-09-20 22:49:00 UTC	136	IN	HTTP/1.1 200 Ok server: nginx date: Fri, 20 Sep 2024 22:49:00 GMT content-type: image/gif content-length: 807 connection: close
2024-09-20 22:49:00 UTC	807	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 f7 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
119	192.168.2.4	49897	87.242.127.163	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:59 UTC	430	OUT	GET /set?partner_id=a45901af-fbca-4cab-b3b8-0e6b6ec957e8&id=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: sync.rambler.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:00 UTC	174	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:49:00 GMT Content-Length: 0 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains x-sca-elb: ext

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
120	192.168.2.4	49892	23.105.255.196	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:48:59 UTC	620	OUT	GET /p?ssp=al&uid=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: cs.agency2.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:00 UTC	747	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 20 Sep 2024 22:49:00 GMT Content-Length: 0 Connection: close Server: fasthttp Access-Control-Allow-Headers: authorization Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://cs.alfasense.com/p?ssp=a2&uid=1df50709-a9fb-4e05-86f5-02be4cab6108 Set-Cookie: uuid=1df50709-a9fb-4e05-86f5-02be4cab6108; expires=Thu, 11 Sep 2025 22:49:00 GMT; domain=agency2.ru; path=/; secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.105.255.196

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
121	192.168.2.4	49893	23.105.255.196	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:00 UTC	623	OUT	GET /p?ssp=ai&skipme=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: cs.agency2.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:00 UTC	752	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 20 Sep 2024 22:49:00 GMT Content-Length: 0 Connection: close Server: fasthttp Access-Control-Allow-Headers: authorization Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://x01.aidata.io/0.gif?pid=7140034&id=00b68fd6-fa94-4da3-8aec-cadd88b69733 Set-Cookie: uuid=00b68fd6-fa94-4da3-8aec-cadd88b69733; expires=Thu, 11 Sep 2025 22:49:00 GMT; domain=agency2.ru; path=/; secure; SameSite=None Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.105.255.196

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
122	192.168.2.4	49900	217.199.220.44	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:00 UTC	679	OUT	GET /rtb/sync/alfasense?u=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: kimberlite.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: u=Zu372NYn4og~ApTXE7XyWiS79ldKFQbaW0Z7ybQ
2024-09-20 22:49:00 UTC	745	IN	HTTP/1.1 307 Temporary Redirect Server: nginx Date: Fri, 20 Sep 2024 22:49:00 GMT Content-Length: 0 Connection: close cache-control: no-store access-control-allow-credentials: true access-control-allow-origin: * set-cookie: u=Zu372NYn4og~ApTXE7XyWiS79ldKFQbaW0Z7ybQ; path=/; max-age=7776000; samesite=none; httponly; secure set-cookie: da=KLqvcgAAAAE; path=/rtb; max-age=604800; samesite=none; httponly; secure set-cookie: f=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dst%26id%3DZu372NYn4og; max-age=30; samesite=none; httponly; secure set-cookie: n=1; max-age=30; samesite=none; httponly; secure location: https://sm.rtb.mts.ru/p?ssp=toptraffic&id=Zu372NYn4og referrer-policy: no-referrer server-timing: app;srv=s11a;dur=0.0003

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
123	192.168.2.4	49902	142.132.138.214	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:00 UTC	807	OUT	GET /rmatch?dp=14&euid=3B03420AD8FBED6625018A1D02213E86&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D14 HTTP/1.1 Host: acint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cSyncDp14v6=1726872538; test_cookie=CheckForPermission; aid=fwAAAmbt+9oB1RYgkLwDAnZ8FKZyxlz382e+nMOc/E0BTrn0; cSyncDp14v4=1726872539
2024-09-20 22:49:00 UTC	365	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 20 Sep 2024 22:49:00 GMT Content-Type: text/html Content-Length: 154 Connection: close P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" Location: https://mc.acint.net/cmatch?dp=14 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
2024-09-20 22:49:00 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
124	192.168.2.4	49899	193.3.184.222	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:00 UTC	814	OUT	GET /rmatch?r=https%3A%2F%2Facint.net%2Frmatch%3Fdp%3D14%26euid%3D$%7BUSER_ID%7D%26r%3Dhttps%253A%252F%252Fcs.alfasense.com%252Fp%253Fssp%253Dsp%2526uid%253D$%257BUSER_ID%257D&dp=14 HTTP/1.1 Host: ssp-rtb.sape.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: sspuid=CkIDO2bt+9gdigElhj4hAgAeX/aXQX7XgCV1hJ87JTfMrnFy
2024-09-20 22:49:00 UTC	538	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 20 Sep 2024 22:49:00 GMT Content-Type: text/html Content-Length: 142 Connection: close P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Location: https://acint.net/rmatch?dp=14&euid=3B03420AD8FBED6625018A1D02213E86&r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D$%7BUSER_ID%7D Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
2024-09-20 22:49:00 UTC	142	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6f 70 65 6e 72 65 73 74 79 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body><center><h1>302 Found</h1></center><hr><center>openresty</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
125	192.168.2.4	49901	31.172.81.146	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:00 UTC	519	OUT	GET /?src=asense&s_data=CAIQARja97e3BmIkNTMyMmY5MGMtNjhlZS00ZDMzLWJjNmYtNjE0MGNlZjFmODc4ogEQhcaPWneiEe-G4AAlkMBkfA** HTTP/1.1 Host: sync.bumlam.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: suuid3=IiQ4NWM2OGY1YS03N2EyLTExZWYtODZlMC0wMDI1OTBjMDY0N2M*
2024-09-20 22:49:00 UTC	504	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:49:00 GMT Content-Type: image/gif Content-Length: 43 Connection: close Set-Cookie: suuid3=IiQ4NWM2OGY1YS03N2EyLTExZWYtODZlMC0wMDI1OTBjMDY0N2M*; Path=/; Expires=Thu, 15 Sep 2044 22:49:00 GMT; Domain=bumlam.com; SameSite=None; Secure P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Cache-Control: no-cache, must-revalidate, post-check=0, pre-check=0, no-cache=Set-Cookie, max-age=0, proxy-revalidate, s-maxage=0
2024-09-20 22:49:00 UTC	43	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 00 00 00 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
126	192.168.2.4	64985	23.111.100.20	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:00 UTC	673	OUT	GET /p?ssp=al&id=9291fa75-8358-4079-b4ea-83f0b6e026ab HTTP/1.1 Host: cs.alfasense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=5322f90c-68ee-4d33-bc6f-6140cef1f878
2024-09-20 22:49:01 UTC	549	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:49:01 GMT Content-Type: image/gif Content-Length: 35 Connection: close Server: fasthttp Access-Control-Allow-Headers: authorization Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes
2024-09-20 22:49:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
127	192.168.2.4	64990	188.114.97.3	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:01 UTC	623	OUT	GET /sync?ssp=12&skip=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: a.adiam.tech Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:01 UTC	921	IN	HTTP/1.1 204 No Content Date: Fri, 20 Sep 2024 22:49:01 GMT Content-Type: text/plain Connection: close Set-Cookie: preadiam=1; Expires=Mon, 21 Oct 2024 00:49:01 GMT; Domain=.adiam.tech; SameSite=None; Secure; Path=/ Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization Access-Control-Expose-Headers: Content-Length,Content-Range Vary: Origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jlnJ9Ua%2BF%2FU6W6mZ9Pb1SKLR0cHPWCrBqTMBTIdsDyWE7ru%2FI8qf%2F%2BWXCKkCzoMbLAt4lY1RDMXTblc5Ldln7iRgrOcExwvw%2BHJDZytowJb8REOfS25QqFP1sP%2FQwmY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c655dc638e378e7-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
128	192.168.2.4	64986	23.111.100.20	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:01 UTC	674	OUT	GET /p?ssp=a2&uid=1df50709-a9fb-4e05-86f5-02be4cab6108 HTTP/1.1 Host: cs.alfasense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=5322f90c-68ee-4d33-bc6f-6140cef1f878
2024-09-20 22:49:01 UTC	549	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:49:01 GMT Content-Type: image/gif Content-Length: 35 Connection: close Server: fasthttp Access-Control-Allow-Headers: authorization Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes
2024-09-20 22:49:01 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
129	192.168.2.4	64988	89.108.119.28	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:01 UTC	628	OUT	GET /0.gif?pid=7140034&id=00b68fd6-fa94-4da3-8aec-cadd88b69733 HTTP/1.1 Host: x01.aidata.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:01 UTC	734	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 20 Sep 2024 22:49:01 GMT Content-Length: 0 Connection: close Location: https://x01.aidata.io/0.gif?pid=7140034&id=00b68fd6-fa94-4da3-8aec-cadd88b69733&bounce=1 Expires: Fri, 20 Sep 2024 22:49:00 GMT Cache-Control: no-cache Access-Control-Allow-Methods: GET, POST Pragma: no-cache Cache-Control: no-store, must-revalidate, post-check=0, pre-check=0 Last-Modified: Fri, 20 Sep 2024 22:49:00 GMT Set-Cookie: __upin=Am7kf69LIcgvanWqC1BQ1A;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure Set-Cookie: __upints=1726872541;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
130	192.168.2.4	64989	45.9.24.193	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:01 UTC	629	OUT	GET /sync?uid=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: alfasense-sync.rutarget.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:01 UTC	473	IN	HTTP/1.1 302 Moved Temporarily Server: nginx Date: Fri, 20 Sep 2024 22:49:01 GMT Content-Length: 0 Connection: close Location: https://cs.alfasense.com/p?ssp=sg&uid=JcwMBctHpuCG P3P: CP="This is not a P3P policy. Please visit http://rutarget.ru/p3p/ to get more information." Set-Cookie: userId=JcwMBctHpuCG; Path=/; Domain=.rutarget.ru; Expires=Wed, 19 Mar 2025 22:49:01 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
131	192.168.2.4	64991	193.3.184.140	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:01 UTC	724	OUT	GET /cmatch?dp=14 HTTP/1.1 Host: mc.acint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cSyncDp14v6=1726872538; test_cookie=CheckForPermission; aid=fwAAAmbt+9oB1RYgkLwDAnZ8FKZyxlz382e+nMOc/E0BTrn0; cSyncDp14v4=1726872539
2024-09-20 22:49:01 UTC	468	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 20 Sep 2024 22:49:01 GMT Content-Type: text/html Content-Length: 154 Connection: close Set-Cookie: cSyncDp17v2=1726872541; expires=Sun, 20-Oct-24 22:49:01 GMT; path=/; Secure; SameSite=None; domain=.acint.net Location: https://px.adhigh.net/p/cm/sape?u=0200007FDAFBED662016D5010203BC90 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
2024-09-20 22:49:01 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
132	192.168.2.4	64992	142.132.138.214	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:01 UTC	830	OUT	GET /rmatch?dp=14&euid=3B03420AD8FBED6625018A1D02213E86&r=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dsp%26uid%3D$%7BUSER_ID%7D HTTP/1.1 Host: acint.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cSyncDp14v6=1726872538; test_cookie=CheckForPermission; aid=fwAAAmbt+9oB1RYgkLwDAnZ8FKZyxlz382e+nMOc/E0BTrn0; cSyncDp14v4=1726872539
2024-09-20 22:49:02 UTC	402	IN	HTTP/1.1 302 Moved Temporarily Server: openresty Date: Fri, 20 Sep 2024 22:49:01 GMT Content-Type: text/html Content-Length: 154 Connection: close P3P: CP="ALL ADM DEV PSAi COM OUR OTRo STP IND ONL" Location: https://cs.alfasense.com/p?ssp=sp&uid=0200007FDAFBED662016D5010203BC90 Expires: Wed, 19 Apr 2000 11:43:00 GMT Cache-Control: private, no-cache, no-store, must-revalidate, max-age=0
2024-09-20 22:49:02 UTC	154	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 20 62 67 63 6f 6c 6f 72 3d 22 77 68 69 74 65 22 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 32 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>302 Found</title></head><body bgcolor="white"><center><h1>302 Found</h1></center><hr><center>nginx</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
133	192.168.2.4	64993	217.66.147.39	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:01 UTC	568	OUT	GET /p?ssp=toptraffic&id=Zu372NYn4og HTTP/1.1 Host: sm.rtb.mts.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:02 UTC	612	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 20 Sep 2024 22:49:01 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS Access-Control-Allow-Origin: * Vary: Origin Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://vma.mts.ru/match/second?ssp=59&exu=Zu372NYn4og Set-Cookie: dspid=2d186298-c967-43b7-9ce5-9f669932114c; expires=Thu, 11 Sep 2025 22:49:01 GMT; domain=.mts.ru; path=/; secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
134	192.168.2.4	64995	104.26.6.189	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:01 UTC	626	OUT	GET /sync?ssp=716&skipme=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: a.utraff.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:02 UTC	1029	IN	HTTP/1.1 204 No Content Date: Fri, 20 Sep 2024 22:49:02 GMT Content-Type: text/plain Connection: close Set-Cookie: preutid=1; Expires=Mon, 21 Oct 2024 01:49:02 GMT; Domain=.itraff.net; SameSite=None; Secure; Path=/ Set-Cookie: preutid=1; Expires=Mon, 21 Oct 2024 01:49:02 GMT; Domain=.utraff.com; SameSite=None; Secure; Path=/ Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, POST, OPTIONS Access-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Authorization Access-Control-Expose-Headers: Content-Length,Content-Range Vary: Origin CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3eY6gixANzpGemsNHFITn%2Fe8oiXBf%2FOL6WZlgQQZnnfIN6ctHJNt9d71Crfb8s8Zc3o7v6rzSsOlzSrEEiW908iAOuRwi6L981Bz%2F%2F5K4mVwTQVdA0o0TmHi0vqETA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8c655dcaec8715c3-EWR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
135	192.168.2.4	64994	23.111.100.20	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:02 UTC	439	OUT	GET /p?ssp=al&id=9291fa75-8358-4079-b4ea-83f0b6e026ab HTTP/1.1 Host: cs.alfasense.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=5322f90c-68ee-4d33-bc6f-6140cef1f878
2024-09-20 22:49:02 UTC	549	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:49:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Server: fasthttp Access-Control-Allow-Headers: authorization Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes
2024-09-20 22:49:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
136	192.168.2.4	64996	195.209.109.27	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:02 UTC	722	OUT	GET /cgi-bin/rle.cgi?sid=1&ad=608223&bt=21&pid=2551979&bid=8918732&bn=8918732&skip=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: ev.adriver.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cid=A-jDGZJ2XDp6ijgtGMM-BdQ
2024-09-20 22:49:02 UTC	696	IN	HTTP/1.1 302 Moved Temporarily Date: Fri, 20 Sep 2024 22:49:02 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-control: no-cache, no-cache=Set-Cookie, max-age=0, must-revalidate, proxy-revalidate, no-store Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT P3P: policyref="//adriver.ru/w3c/p3p.xml", CP="NON DSP COR CURa ADMa DEVa OUR BUS UNI COM NAV INT STA" Set-Cookie: cid=A-jDGZJ2XDp6ijgtGMM-BdQ; expires=Sun, 20 Sep 2026 22:49:02 GMT; path=/; domain=.adriver.ru; SameSite=None; Secure Set-Cookie: uid=0; expires=Thu, 01 Jan 1970 00:00:00 GMT; path=/; domain=.adriver.ru Location: https://cs.alfasense.com/p?ssp=ar&id=A-jDGZJ2XDp6ijgtGMM-BdQ
2024-09-20 22:49:02 UTC	46	IN	Data Raw: 32 38 0d 0a 0d 0a 3c 68 31 3e 45 72 72 6f 72 20 33 30 32 20 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 68 31 3e 0d 0a 0d 0a Data Ascii: 28<h1>Error 302 Moved Temporarily</h1>
2024-09-20 22:49:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
137	192.168.2.4	64997	89.108.119.28	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:02 UTC	697	OUT	GET /0.gif?pid=7140034&id=00b68fd6-fa94-4da3-8aec-cadd88b69733&bounce=1 HTTP/1.1 Host: x01.aidata.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __upin=Am7kf69LIcgvanWqC1BQ1A; __upints=1726872541
2024-09-20 22:49:02 UTC	620	IN	HTTP/1.1 204 No Content Server: nginx Date: Fri, 20 Sep 2024 22:49:02 GMT Connection: close Expires: Fri, 20 Sep 2024 22:49:01 GMT Cache-Control: no-cache Access-Control-Allow-Methods: GET, POST Pragma: no-cache Cache-Control: no-store, must-revalidate, post-check=0, pre-check=0 Last-Modified: Fri, 20 Sep 2024 22:49:01 GMT Set-Cookie: __upin=Am7kf69LIcgvanWqC1BQ1A;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure Set-Cookie: __upints=1726872541;domain=.aidata.io;path=/;max-age=63072000;SameSite=None;Secure P3P: CP='NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
138	192.168.2.4	64999	23.111.100.20	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:02 UTC	650	OUT	GET /p?ssp=sg&uid=JcwMBctHpuCG HTTP/1.1 Host: cs.alfasense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=5322f90c-68ee-4d33-bc6f-6140cef1f878
2024-09-20 22:49:02 UTC	549	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:49:02 GMT Content-Type: image/gif Content-Length: 35 Connection: close Server: fasthttp Access-Control-Allow-Headers: authorization Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20 Accept-Ranges: bytes
2024-09-20 22:49:02 UTC	35	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
139	192.168.2.4	64998	167.235.14.51	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:02 UTC	702	OUT	GET /cm?ssp=alfas&skip=5322f90c-68ee-4d33-bc6f-6140cef1f878&redirect_url=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dob%26id%3D%7Buid%7D HTTP/1.1 Host: match.ohmy.bid Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:02 UTC	376	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 20 Sep 2024 22:49:02 GMT Content-Type: image/gif Content-Length: 44 Connection: close Bidder: bid-23 1.1668.8b7ca43a Set-Cookie: uid=4d880002-8336-4b41-aa6e-dedd7ee96ac8.66edfbde.dc3fbe0b83c08b1c; domain=.ohmy.bid; path=/; expires=Sun, 20-Oct-2024 22:49:02 GMT; SameSite=None; Secure; Access-Control-Allow-Credentials: true
2024-09-20 22:49:02 UTC	44	IN	Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 ff ff ff 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b 00 Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
140	192.168.2.4	65001	23.111.100.20	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:02 UTC	670	OUT	GET /p?ssp=sp&uid=0200007FDAFBED662016D5010203BC90 HTTP/1.1 Host: cs.alfasense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=5322f90c-68ee-4d33-bc6f-6140cef1f878
2024-09-20 22:49:03 UTC	350	IN	HTTP/1.1 204 No Content Date: Fri, 20 Sep 2024 22:49:03 GMT Connection: close Server: nginx Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
141	192.168.2.4	65002	217.66.147.39	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:02 UTC	621	OUT	GET /match/second?ssp=59&exu=Zu372NYn4og HTTP/1.1 Host: vma.mts.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dspid=2d186298-c967-43b7-9ce5-9f669932114c
2024-09-20 22:49:03 UTC	746	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Fri, 20 Sep 2024 22:49:03 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: Origin Access-Control-Allow-Methods: HEAD,GET,POST,PUT,DELETE,OPTIONS Access-Control-Allow-Origin: * Vary: Origin Cache-Control: no-store, no-cache, must-revalidate Expires: Thu, 01 Jan 1970 00:00:00 GMT Location: https://cm.a.mts.ru/cm/tech?flowId=c128a652-29c1-46c5-aece-22212bde700f&measurement_id=MTS_DSP_web&dsp_uid=2d186298-c967-43b7-9ce5-9f669932114c&redirect_return_url=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9503528%26dest%3Dhttps%253A%252F%252Fvma.mts.ru%252Fem%253Fnext%253D59%2526em%253D2%2526ssp%253Daidata%2526id%253D%2524UID

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
142	192.168.2.4	65003	23.111.100.20	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:02 UTC	440	OUT	GET /p?ssp=a2&uid=1df50709-a9fb-4e05-86f5-02be4cab6108 HTTP/1.1 Host: cs.alfasense.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=5322f90c-68ee-4d33-bc6f-6140cef1f878
2024-09-20 22:49:03 UTC	350	IN	HTTP/1.1 204 No Content Date: Fri, 20 Sep 2024 22:49:03 GMT Connection: close Server: nginx Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
143	192.168.2.4	65000	193.232.150.148	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:02 UTC	656	OUT	GET /p/cm/sape?u=0200007FDAFBED662016D5010203BC90 HTTP/1.1 Host: px.adhigh.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: gi_u=ujPJCLnjOrl.AikABlGSEZ_GxQ
2024-09-20 22:49:03 UTC	632	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 20 Sep 2024 22:49:03 GMT Content-Length: 0 Connection: close X-Backend-id: f15-ru Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true P3P: CP="NOI DSP COR NID CURa ADMa DEVa PSAa PSDa OUR BUS COM INT OTC PUR STA" Pragma: no-cache Expires: Thu, 01 Jan 1970 00:00:00 GMT Cache-Control: no-cache Cache-Control: no-store Set-Cookie: sape_sync=L7Gf;Path=/;Domain=.adhigh.net;Expires=Sat, 20-Sep-2025 22:49:03 GMT;Secure;SameSite=None Location: https://mc.acint.net/rmatch?dp=17&euid=ujPJCLnjOrl.AikABlGSEZ_GxQ&r=https%3A%2F%2Fmc.acint.net%2Fcmatch%3Fdp%3D17

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
144	192.168.2.4	65008	188.114.96.3	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:03 UTC	653	OUT	GET /ogorodru/14045?single HTTP/1.1 Host: tttttt.me Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:05 UTC	911	IN	HTTP/1.1 200 OK Date: Fri, 20 Sep 2024 22:49:05 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Set-Cookie: stel_ssid=39622c525e4fb041eb_17928877124735159298; expires=Sat, 21 Sep 2024 22:49:03 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store Content-Security-Policy: frame-ancestors https://web.telegram.org Strict-Transport-Security: max-age=35768000 Access-Control-Allow-Origin: * CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=FbaVJjJlHQXWQokTwvU4ZhuB2HLO%2BXR4964zretbPWcXKFabB9DIUgwQyMSogZZDy7G%2FxAT21azemQ8wozLpoMaE5HEE%2Fdk5tm9pw5YxQ%2FhKlRIQmyDWortl9P8%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c655dd2eb3478d0-EWR
2024-09-20 22:49:05 UTC	458	IN	Data Raw: 32 36 33 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6f 67 6f 72 6f 64 72 75 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 74 72 79 7b 69 66 28 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 21 3d 6e 75 6c 6c 26 26 77 69 6e 64 6f 77 21 3d 77 69 6e 64 6f 77 2e 70 61 72 65 6e 74 29 7b 77 69 6e 64 6f Data Ascii: 2631<!DOCTYPE html><html> <head> <meta charset="utf-8"> <title>Telegram: Contact @ogorodru</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>try{if(window.parent!=null&&window!=window.parent){windo
2024-09-20 22:49:05 UTC	1369	IN	Data Raw: 22 6e 6f 69 6e 64 65 78 2c 20 6e 6f 66 6f 6c 6c 6f 77 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 54 65 6c 65 67 72 61 6d 3a 20 43 6f 6e 74 61 63 74 20 40 6f 67 6f 72 6f 64 72 75 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 69 6d 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 73 3a 2f 2f 74 65 6c 65 67 72 61 6d 2e 6f 72 67 2f 69 6d 67 2f 74 5f 6c 6f 67 6f 5f 32 78 2e 70 6e 67 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 73 69 74 65 5f 6e 61 6d 65 22 20 63 6f 6e 74 65 6e 74 3d 22 54 65 6c 65 67 72 61 6d 22 3e 0a 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 22 3e Data Ascii: "noindex, nofollow"><meta property="og:title" content="Telegram: Contact @ogorodru"><meta property="og:image" content="https://telegram.org/img/t_logo_2x.png"><meta property="og:site_name" content="Telegram"><meta property="og:description" content="">
2024-09-20 22:49:05 UTC	1369	IN	Data Raw: 74 3d 22 36 38 36 34 34 39 38 30 37 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 61 70 70 3a 75 72 6c 3a 69 70 61 64 22 20 63 6f 6e 74 65 6e 74 3d 22 74 67 3a 2f 2f 72 65 73 6f 6c 76 65 3f 64 6f 6d 61 69 6e 3d 6f 67 6f 72 6f 64 72 75 26 61 6d 70 3b 70 6f 73 74 3d 31 34 30 34 35 26 61 6d 70 3b 73 69 6e 67 6c 65 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 61 70 70 3a 6e 61 6d 65 3a 67 6f 6f 67 6c 65 70 6c 61 79 22 20 63 6f 6e 74 65 6e 74 3d 22 54 65 6c 65 67 72 61 6d 22 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 77 69 74 74 65 72 3a 61 70 70 3a 69 64 3a 67 6f 6f 67 6c 65 70 6c 61 79 22 20 63 6f 6e 74 65 6e 74 3d 22 6f 72 67 2e 74 65 6c 65 67 72 61 6d 2e 6d 65 73 73 65 6e 67 65 72 22 3e 0a 3c 6d 65 74 61 20 Data Ascii: t="686449807"><meta name="twitter:app:url:ipad" content="tg://resolve?domain=ogorodru&post=14045&single"><meta name="twitter:app:name:googleplay" content="Telegram"><meta name="twitter:app:id:googleplay" content="org.telegram.messenger"><meta
2024-09-20 22:49:05 UTC	1369	IN	Data Raw: 6f 72 67 2f 63 73 73 2f 74 65 6c 65 67 72 61 6d 2e 63 73 73 3f 32 34 30 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 22 3e 0a 20 20 3c 2f 68 65 61 64 3e 0a 20 20 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 6e 6f 5f 74 72 61 6e 73 69 74 69 6f 6e 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 67 6d 65 5f 62 61 63 6b 67 72 6f 75 6e 64 5f 77 72 61 70 22 3e 0a 20 20 20 20 3c 63 61 6e 76 61 73 20 69 64 3d 22 74 67 6d 65 5f 62 61 63 6b 67 72 6f 75 6e 64 22 20 63 6c 61 73 73 3d 22 74 67 6d 65 5f 62 61 63 6b 67 72 6f 75 6e 64 20 64 65 66 61 75 6c 74 22 20 77 69 64 74 68 3d 22 35 30 22 20 68 65 69 67 68 74 3d 22 35 30 22 20 64 61 74 61 2d 63 6f 6c 6f 72 73 3d 22 64 62 64 64 62 62 2c 36 62 61 35 38 37 Data Ascii: org/css/telegram.css?240" rel="stylesheet" media="screen"> </head> <body class="no_transition"> <div class="tgme_background_wrap"> <canvas id="tgme_background" class="tgme_background default" width="50" height="50" data-colors="dbddbb,6ba587
2024-09-20 22:49:05 UTC	1369	IN	Data Raw: 34 31 20 34 2e 37 35 35 39 37 36 2d 34 2e 34 33 31 37 30 36 2d 2e 30 30 37 30 34 39 34 2d 2e 30 34 34 32 39 38 34 2d 2e 31 34 30 39 30 31 38 2d 2e 34 38 31 36 34 39 2d 2e 32 34 35 37 34 39 39 2d 2e 35 36 37 38 34 34 37 2d 2e 31 30 34 38 34 38 2d 2e 30 38 36 31 39 35 37 2d 2e 32 35 39 35 39 34 36 2d 2e 30 35 36 37 32 30 32 2d 2e 33 37 31 32 36 34 31 2d 2e 30 33 33 32 37 38 2d 2e 31 35 38 32 38 38 31 2e 30 33 33 32 32 38 36 2d 32 2e 36 37 39 34 39 30 37 20 31 2e 35 37 34 35 34 39 32 2d 37 2e 35 36 33 36 30 37 37 20 34 2e 36 32 33 39 36 31 36 2d 2e 37 31 35 36 33 35 2e 34 35 34 35 31 39 33 2d 31 2e 33 36 33 38 33 34 39 2e 36 37 35 39 37 36 33 2d 31 2e 39 34 34 35 39 39 38 2e 36 36 34 33 37 31 32 2d 2e 36 34 30 32 34 36 37 32 2d 2e 30 31 32 37 39 33 38 2d 31 Data Ascii: 41 4.755976-4.431706-.0070494-.0442984-.1409018-.481649-.2457499-.5678447-.104848-.0861957-.2595946-.0567202-.3712641-.033278-.1582881.0332286-2.6794907 1.5745492-7.5636077 4.6239616-.715635.4545193-1.3638349.6759763-1.9445998.6643712-.64024672-.0127938-1
2024-09-20 22:49:05 UTC	1369	IN	Data Raw: 35 38 34 2d 33 2e 31 32 34 20 31 2e 35 38 34 2d 32 2e 36 36 32 20 30 2d 34 2e 35 35 34 2d 32 2e 32 2d 34 2e 35 35 34 2d 35 2e 32 33 36 20 30 2d 33 2e 35 32 20 32 2e 32 38 38 2d 35 2e 36 35 34 20 34 2e 38 36 32 2d 35 2e 36 35 34 20 31 2e 36 35 20 30 20 32 2e 35 39 36 2e 37 39 32 20 33 2e 31 30 32 20 31 2e 36 37 32 68 2e 30 34 34 6c 2e 31 31 2d 31 2e 34 33 68 32 2e 33 35 34 63 2d 2e 30 34 34 2e 37 32 36 2d 2e 30 38 38 20 31 2e 36 30 36 2d 2e 30 38 38 20 33 2e 30 38 7a 6d 2d 32 2e 37 30 36 20 32 2e 39 34 38 76 2d 31 2e 37 33 38 63 30 2d 2e 32 36 34 2d 2e 30 32 32 2d 2e 35 30 36 2d 2e 30 38 38 2d 2e 37 32 36 2d 2e 32 38 36 2d 2e 39 39 2d 31 2e 30 35 36 2d 31 2e 37 33 38 2d 32 2e 32 2d 31 2e 37 33 38 2d 31 2e 35 31 38 20 30 2d 32 2e 36 34 20 31 2e 33 32 2d 32 Data Ascii: 584-3.124 1.584-2.662 0-4.554-2.2-4.554-5.236 0-3.52 2.288-5.654 4.862-5.654 1.65 0 2.596.792 3.102 1.672h.044l.11-1.43h2.354c-.044.726-.088 1.606-.088 3.08zm-2.706 2.948v-1.738c0-.264-.022-.506-.088-.726-.286-.99-1.056-1.738-2.2-1.738-1.518 0-2.64 1.32-2
2024-09-20 22:49:05 UTC	1369	IN	Data Raw: 2e 38 34 38 2d 32 2e 35 35 32 2d 31 2e 30 31 32 20 30 2d 31 2e 36 39 34 2e 37 39 32 2d 31 2e 39 35 38 20 31 2e 35 31 38 2d 2e 30 38 38 2e 32 38 36 2d 2e 31 33 32 2e 35 39 34 2d 2e 31 33 32 2e 39 30 32 76 36 2e 33 33 36 7a 22 20 66 69 6c 6c 3d 22 76 61 72 28 2d 2d 74 6d 65 2d 6c 6f 67 6f 2d 63 6f 6c 6f 72 29 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 6e 6f 6e 7a 65 72 6f 22 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 73 76 67 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 61 20 63 6c 61 73 73 3d 22 74 67 6d 65 5f 68 65 61 64 5f 72 69 67 68 74 5f 62 74 6e 22 20 68 72 65 66 3d 22 2f 2f 74 65 6c 65 67 72 61 6d 2e 6f 72 67 2f 74 65 6c 65 67 72 61 6d 2f 64 6c 3f 74 Data Ascii: .848-2.552-1.012 0-1.694.792-1.958 1.518-.088.286-.132.594-.132.902v6.336z" fill="var(--tme-logo-color)" fill-rule="nonzero"/> </g> </svg> </a> <a class="tgme_head_right_btn" href="//telegram.org/telegram/dl?t
2024-09-20 22:49:05 UTC	1113	IN	Data Raw: 20 66 61 6c 73 65 3b 0a 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 70 61 67 65 68 69 64 65 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 70 61 67 65 48 69 64 64 65 6e 20 3d 20 74 72 75 65 3b 0a 20 20 7d 2c 20 66 61 6c 73 65 29 3b 0a 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 62 6c 75 72 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 70 61 67 65 48 69 64 64 65 6e 20 3d 20 74 72 75 65 3b 0a 20 20 7d 2c 20 66 61 6c 73 65 29 3b 0a 20 20 69 66 20 28 69 66 72 61 6d 65 45 6c 20 21 3d 3d 20 6e 75 6c 6c 29 20 7b 0a 20 20 20 20 69 66 72 61 6d 65 45 6c 2e 73 72 63 20 3d 20 70 72 6f 74 6f 55 72 6c 3b 0a 20 20 7d 0a 20 20 21 66 61 6c 73 65 20 26 26 20 73 65 74 Data Ascii: false; window.addEventListener('pagehide', function () { pageHidden = true; }, false); window.addEventListener('blur', function () { pageHidden = true; }, false); if (iframeEl !== null) { iframeEl.src = protoUrl; } !false && set
2024-09-20 22:49:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
145	192.168.2.4	65007	23.111.100.20	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:03 UTC	660	OUT	GET /p?ssp=ar&id=A-jDGZJ2XDp6ijgtGMM-BdQ HTTP/1.1 Host: cs.alfasense.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=5322f90c-68ee-4d33-bc6f-6140cef1f878
2024-09-20 22:49:03 UTC	350	IN	HTTP/1.1 204 No Content Date: Fri, 20 Sep 2024 22:49:03 GMT Connection: close Server: nginx Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET, HEAD, POST, OPTIONS, PUT, DELETE Access-Control-Allow-Headers: Content-Type, Authorization, Origin, X-Requested-With, Accept, Key, Accept-Encoding, DNT X-Host: 23.111.100.20

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
146	192.168.2.4	65010	167.235.7.148	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:03 UTC	773	OUT	GET /cookiesync/redirect?skip2=5322f90c-68ee-4d33-bc6f-6140cef1f878&redirect_url=https%3A%2F%2Fcs.alfasense.com%2Fp%3Fssp%3Dbz%26uid%3D%24%7BUUID%7D HTTP/1.1 Host: exchange.buzzoola.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: uuid=07423726-b659-4bb0-6cef-0dbb74544185
2024-09-20 22:49:03 UTC	256	IN	HTTP/1.1 302 Found server: nginx date: Fri, 20 Sep 2024 22:49:03 GMT content-type: text/html; charset=utf-8 content-length: 101 location: https://cs.alfasense.com/p?ssp=bz&uid=07423726-b659-4bb0-6cef-0dbb74544185 serverid: TODO connection: close
2024-09-20 22:49:03 UTC	101	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 73 2e 61 6c 66 61 73 65 6e 73 65 2e 63 6f 6d 2f 70 3f 73 73 70 3d 62 7a 26 61 6d 70 3b 75 69 64 3d 30 37 34 32 33 37 32 36 2d 62 36 35 39 2d 34 62 62 30 2d 36 63 65 66 2d 30 64 62 62 37 34 35 34 34 31 38 35 22 3e 46 6f 75 6e 64 3c 2f 61 3e 2e 0a 0a Data Ascii: <a href="https://cs.alfasense.com/p?ssp=bz&uid=07423726-b659-4bb0-6cef-0dbb74544185">Found</a>.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
147	192.168.2.4	65013	31.220.27.135	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:03 UTC	632	OUT	GET /match/1215/?remote_uid=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: s.uuidksinc.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:03 UTC	323	IN	HTTP/1.1 302 Found Server: nginx/1.23.2 Date: Fri, 20 Sep 2024 22:49:03 GMT Content-Length: 0 Connection: close Location: https://cs.alfasense.com/p?ssp=kd&uid=OBoQhsBgeRgmqPkpWuU5 Set-Cookie: jcsuuid=OBoQhsBgeRgmqPkpWuU5; expires=Sat, 20 Sep 2025 22:49:03 GMT; domain=uuidksinc.net; path=/; secure; SameSite=None

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
148	192.168.2.4	65015	185.65.149.228	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:03 UTC	897	OUT	GET /cm/tech?flowId=c128a652-29c1-46c5-aece-22212bde700f&measurement_id=MTS_DSP_web&dsp_uid=2d186298-c967-43b7-9ce5-9f669932114c&redirect_return_url=https%3A%2F%2Fx01.aidata.io%2F0.gif%3Fpid%3D9503528%26dest%3Dhttps%253A%252F%252Fvma.mts.ru%252Fem%253Fnext%253D59%2526em%253D2%2526ssp%253Daidata%2526id%253D%2524UID HTTP/1.1 Host: cm.a.mts.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: dspid=2d186298-c967-43b7-9ce5-9f669932114c
2024-09-20 22:49:03 UTC	1187	IN	HTTP/1.1 302 Found Server: QRATOR Date: Fri, 20 Sep 2024 22:49:03 GMT Content-Length: 0 Connection: close Access-Control-Allow-Credentials: true Access-Control-Allow-Methods: GET,POST,OPTIONS Access-Control-Max-Age: 3600 Vary: Origin Access-Control-Allow-Headers: Origin, X-Requested-With, Content-Type, Accept, X-Forwarded-For Vary: Access-Control-Request-Method Vary: Access-Control-Request-Headers Set-Cookie: ma_last_sync=1726872543783; Path=/; Domain=.mts.ru; Expires=Mon, 18 Sep 2034 22:49:03 GMT; Max-Age=315360000; Secure; HttpOnly; SameSite=None Expires: Thu, 01 Jan 1970 00:00:00 GMT Set-Cookie: ma_id=2348964281726872543783; Path=/; Domain=.mts.ru; Expires=Mon, 18 Sep 2034 22:49:03 GMT; Max-Age=315360000; Secure; HttpOnly; SameSite=None Location: https://2348964281726872543783.cm.a.mts.ru/cm/match?flowId=c128a652-29c1-46c5-aece-22212bde700f&measurement_id=MTS_DSP_web&dsp_uid=2d186298-c967-43b7-9ce5-9f669932114c&redirect_return_url=https://x01.aidata.io/0.gif?pid%3D9503528%26dest%3Dhttps%253A%252F%252Fvma.mts.ru%252Fem%253Fnext%253D59%2526em%253D2%2526ssp%253Daidata%2526id%253D%2524UID Strict-Transport-Security: max-age=15724800; includeSubDomains

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
149	192.168.2.4	65011	81.163.20.122	443	1880	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-20 22:49:03 UTC	628	OUT	GET /match/alfasense?id=5322f90c-68ee-4d33-bc6f-6140cef1f878 HTTP/1.1 Host: sync.opendsp.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://xn--r1a.website/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-20 22:49:04 UTC	332	IN	HTTP/1.1 302 Found Server: nginx Date: Fri, 20 Sep 2024 22:49:03 GMT Content-Length: 0 Connection: close Location: https://sync.opendsp.ru/match/alfasense?id=5322f90c-68ee-4d33-bc6f-6140cef1f878&chk=1 Set-Cookie: chk=1; path=/; secure; SameSite=None Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Target ID:	0
Start time:	18:48:33
Start date:	20/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	18:48:37
Start date:	20/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2052 --field-trial-handle=1720,i,7126892294250420465,11752881237129370253,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	18:48:39
Start date:	20/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://xn--r1a.website/s/ogorodru"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 167.235.7.148
Source: unknown	TCP traffic detected without corresponding DNS query: 167.235.7.148
Source: unknown	TCP traffic detected without corresponding DNS query: 167.235.7.148
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 167.235.7.148
Source: unknown	TCP traffic detected without corresponding DNS query: 167.235.7.148
Source: unknown	TCP traffic detected without corresponding DNS query: 167.235.7.148
Source: unknown	TCP traffic detected without corresponding DNS query: 167.235.7.148
Source: unknown	TCP traffic detected without corresponding DNS query: 167.235.7.148
Source: unknown	TCP traffic detected without corresponding DNS query: 167.235.7.148
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 167.235.7.148
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.108.196
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.108.196
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.108.196
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148
Source: unknown	TCP traffic detected without corresponding DNS query: 193.232.150.148

Source: global traffic	DNS traffic detected: DNS query: xn--r1a.website
Source: global traffic	DNS traffic detected: DNS query: telegram.org
Source: global traffic	DNS traffic detected: DNS query: cdn4.cdn-telegram.org
Source: global traffic	DNS traffic detected: DNS query: yandex.ru
Source: global traffic	DNS traffic detected: DNS query: tttttt.me
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: matchid.adfox.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: ads.digitalcaramel.com
Source: global traffic	DNS traffic detected: DNS query: ads.betweendigital.com
Source: global traffic	DNS traffic detected: DNS query: yhb.p.otm-r.com
Source: global traffic	DNS traffic detected: DNS query: px.adhigh.net
Source: global traffic	DNS traffic detected: DNS query: ad.mail.ru
Source: global traffic	DNS traffic detected: DNS query: ssp.bidvol.com
Source: global traffic	DNS traffic detected: DNS query: ssp-rtb.sape.ru
Source: global traffic	DNS traffic detected: DNS query: exchange.buzzoola.com
Source: global traffic	DNS traffic detected: DNS query: ssp.hybrid.ai
Source: global traffic	DNS traffic detected: DNS query: pb.adriver.ru
Source: global traffic	DNS traffic detected: DNS query: kimberlite.io
Source: global traffic	DNS traffic detected: DNS query: pbs.alfasense.com
Source: global traffic	DNS traffic detected: DNS query: yastatic.net
Source: global traffic	DNS traffic detected: DNS query: avatars.mds.yandex.net
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: ads.adfox.ru
Source: global traffic	DNS traffic detected: DNS query: cdn.alfasense.net
Source: global traffic	DNS traffic detected: DNS query: cs.alfasense.com
Source: global traffic	DNS traffic detected: DNS query: cstatic.weborama.com
Source: global traffic	DNS traffic detected: DNS query: ad.adriver.ru
Source: global traffic	DNS traffic detected: DNS query: const.uno
Source: global traffic	DNS traffic detected: DNS query: v.alfasrv.com
Source: global traffic	DNS traffic detected: DNS query: dx.frontend.weborama.com
Source: global traffic	DNS traffic detected: DNS query: ssp.otm-r.com
Source: global traffic	DNS traffic detected: DNS query: s.alfasrv.com
Source: global traffic	DNS traffic detected: DNS query: acint.net
Source: global traffic	DNS traffic detected: DNS query: a.videohead.tech
Source: global traffic	DNS traffic detected: DNS query: s.suprion.ru
Source: global traffic	DNS traffic detected: DNS query: sync.bumlam.com
Source: global traffic	DNS traffic detected: DNS query: sync.rambler.ru
Source: global traffic	DNS traffic detected: DNS query: www.acint.net
Source: global traffic	DNS traffic detected: DNS query: cs.agency2.ru
Source: global traffic	DNS traffic detected: DNS query: ssp.al-adtech.com
Source: global traffic	DNS traffic detected: DNS query: sync.adspend.space
Source: global traffic	DNS traffic detected: DNS query: a.adiam.tech
Source: global traffic	DNS traffic detected: DNS query: x01.aidata.io
Source: global traffic	DNS traffic detected: DNS query: alfasense-sync.rutarget.ru
Source: global traffic	DNS traffic detected: DNS query: mc.acint.net
Source: global traffic	DNS traffic detected: DNS query: sm.rtb.mts.ru
Source: global traffic	DNS traffic detected: DNS query: a.utraff.com
Source: global traffic	DNS traffic detected: DNS query: ev.adriver.ru
Source: global traffic	DNS traffic detected: DNS query: match.ohmy.bid
Source: global traffic	DNS traffic detected: DNS query: vma.mts.ru
Source: global traffic	DNS traffic detected: DNS query: rtb.segmel.io
Source: global traffic	DNS traffic detected: DNS query: sync.opendsp.ru
Source: global traffic	DNS traffic detected: DNS query: s.uuidksinc.net
Source: global traffic	DNS traffic detected: DNS query: cm.a.mts.ru
Source: global traffic	DNS traffic detected: DNS query: match.new-programmatic.com
Source: global traffic	DNS traffic detected: DNS query: rtb.dynotech.io
Source: global traffic	DNS traffic detected: DNS query: 2348964281726872543783.cm.a.mts.ru
Source: global traffic	DNS traffic detected: DNS query: sync.dmp.otm-r.com
Source: global traffic	DNS traffic detected: DNS query: sync.programmatica.com
Source: global traffic	DNS traffic detected: DNS query: sape-sync.rutarget.ru
Source: global traffic	DNS traffic detected: DNS query: match.qtarget.tech
Source: global traffic	DNS traffic detected: DNS query: sync.upravel.com
Source: global traffic	DNS traffic detected: DNS query: ads.alfasense.net
Source: global traffic	DNS traffic detected: DNS query: dmp.sbermarketing.ru
Source: global traffic	DNS traffic detected: DNS query: sync.gonet-ads.com
Source: global traffic	DNS traffic detected: DNS query: solta-sync.rutarget.ru
Source: global traffic	DNS traffic detected: DNS query: 1a499899-1e99-4cfb-8b72-6faaa7f572f3.sync.upravel.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: t.me
Source: global traffic	DNS traffic detected: DNS query: oauth.tg.dev

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://xn--r1a.website/s/ogorodru

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 184

Chrome Cache Entry: 185

Chrome Cache Entry: 186

Chrome Cache Entry: 187

Chrome Cache Entry: 188

Chrome Cache Entry: 189

Chrome Cache Entry: 190

Chrome Cache Entry: 191

Chrome Cache Entry: 192

Chrome Cache Entry: 193

Chrome Cache Entry: 194

Chrome Cache Entry: 195

Chrome Cache Entry: 196

Chrome Cache Entry: 197

Chrome Cache Entry: 198

Chrome Cache Entry: 199

Chrome Cache Entry: 200

Chrome Cache Entry: 201

Chrome Cache Entry: 202

Chrome Cache Entry: 203

Chrome Cache Entry: 204

Chrome Cache Entry: 205

Chrome Cache Entry: 206

Chrome Cache Entry: 207

Chrome Cache Entry: 208

Chrome Cache Entry: 209

Chrome Cache Entry: 210

Chrome Cache Entry: 211

Windows Analysis Report
http://xn--r1a.website/s/ogorodru