Edit tour

Windows Analysis Report
http://distrosourcess5.sg-host.com/

Overview

General Information

Sample URL:	http://distrosourcess5.sg-host.com/
Analysis ID:	1521849
Tags:	openphish
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Multi AV Scanner detection for submitted file

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2308,i,5190452410969668684,16090227208378395955,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 420 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://distrosourcess5.sg-host.com/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://distrosourcess5.sg-host.com/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social usering

Multi AV Scanner detection for domain / URL

Source: distrosourcess5.sg-host.com

Virustotal: Detection: 12%

Perma Link

Multi AV Scanner detection for submitted file

Source: http://distrosourcess5.sg-host.com/

Virustotal: Detection: 12%

Perma Link

Source: https://apps.apple.com/us/app/telegram-messenger/id686449807	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/telegram-messenger/id686449807	HTTP Parser: No favicon
Source: https://apps.apple.com/us/app/telegram-messenger/id686449807	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49860 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

HTTP traffic: Redirect from: telegram.org to https://itunes.apple.com/app/telegram-messenger/id686449807

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199
Source: unknown	TCP traffic detected without corresponding DNS query: 40.113.103.199

Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: http://distrosourcess5.sg-host.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/bootstrap.min.css?3 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /css/telegram.css?241 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /js/main.js?47 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/400780400331/1/tuLhKJmWKdw.276665/463e789d166b4e3890 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/400780400436/1/AFpKVW0u5fw.267441/5fd61b6d2531113c45 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /js/tgsticker.js?31 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/twitter.png HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/css/telegram.css?241Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/SiteDesktop.jpg?2 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/css/telegram.css?241Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/SiteAndroid.jpg?2 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/css/telegram.css?241Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /js/main.js?47 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/SiteiOS.jpg?2 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/css/telegram.css?241Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/400780400331/1/tuLhKJmWKdw.276665/463e789d166b4e3890 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/SiteIconAndroid.svg HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/css/telegram.css?241Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/400780400436/1/AFpKVW0u5fw.267441/5fd61b6d2531113c45 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/SiteIconApple.svg HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/css/telegram.css?241Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/twitter.png HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /js/tgsticker-worker.js?14 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: workerReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /js/tgsticker.js?31 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/SiteAndroid.jpg?2 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/SiteIconAndroid.svg HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/SiteiOS.jpg?2 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/SiteDesktop.jpg?2 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/SiteIconApple.svg HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /js/rlottie-wasm.js HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /js/tgsticker-worker.js?14 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /js/pako-inflate.min.js HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /js/rlottie-wasm.wasm HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/t_logo_sprite.svg HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/t_main_Android_demo.mp4 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://telegram.org/Accept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /img/t_main_iOS_demo.mp4 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://telegram.org/Accept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /js/rlottie-wasm.js HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /js/pako-inflate.min.js HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/t_logo_sprite.svg HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /js/rlottie-wasm.wasm HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://telegram.org/js/tgsticker-worker.js?14Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/t_main_Android_demo.mp4 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://telegram.org/Accept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454Range: bytes=229376-250837If-Range: "5eb6fd6e-3d3d6"
Source: global traffic	HTTP traffic detected: GET /img/t_main_iOS_demo.mp4 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://telegram.org/Accept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454Range: bytes=229376-244747If-Range: "5eb6fd6e-3bc0c"
Source: global traffic	HTTP traffic detected: GET /file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /img/t_main_iOS_demo.mp4 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://telegram.org/Accept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454Range: bytes=48128-229375If-Range: "5eb6fd6e-3bc0c"
Source: global traffic	HTTP traffic detected: GET /img/t_main_Android_demo.mp4 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://telegram.org/Accept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454Range: bytes=48128-229375If-Range: "5eb6fd6e-3d3d6"
Source: global traffic	HTTP traffic detected: GET /file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8 HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db HTTP/1.1Host: telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET /dl?tme=3d3828bad0840b196d_3278058860628255688 HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: desktop.telegram.orgConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/bootstrap.min.css?3 HTTP/1.1Host: desktop.telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://desktop.telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
Source: global traffic	HTTP traffic detected: GET /css/telegram.css?241 HTTP/1.1Host: desktop.telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://desktop.telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
Source: global traffic	HTTP traffic detected: GET /js/main.js?47 HTTP/1.1Host: desktop.telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://desktop.telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
Source: global traffic	HTTP traffic detected: GET /js/main.js?47 HTTP/1.1Host: desktop.telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
Source: global traffic	HTTP traffic detected: GET /img/twitter.png HTTP/1.1Host: desktop.telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://desktop.telegram.org/css/telegram.css?241Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
Source: global traffic	HTTP traffic detected: GET /img/td_laptop.png HTTP/1.1Host: desktop.telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://desktop.telegram.org/css/telegram.css?241Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
Source: global traffic	HTTP traffic detected: GET /img/twitter.png HTTP/1.1Host: desktop.telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: desktop.telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://desktop.telegram.org/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
Source: global traffic	HTTP traffic detected: GET /img/td_laptop.png HTTP/1.1Host: desktop.telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: desktop.telegram.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
Source: global traffic	HTTP traffic detected: GET /dl/ios HTTP/1.1Host: telegram.orgConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: distrosourcess5.sg-host.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Telegram%20Join%20Group%20Chat_files/font-roboto.css HTTP/1.1Host: distrosourcess5.sg-host.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://distrosourcess5.sg-host.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Telegram%20Join%20Group%20Chat_files/bootstrap.min.css HTTP/1.1Host: distrosourcess5.sg-host.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://distrosourcess5.sg-host.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Telegram%20Join%20Group%20Chat_files/telegram.css HTTP/1.1Host: distrosourcess5.sg-host.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://distrosourcess5.sg-host.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Telegram%20Join%20Group%20Chat_files/tgwallpaper.min.js HTTP/1.1Host: distrosourcess5.sg-host.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://distrosourcess5.sg-host.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Telegram%20Join%20Group%20Chat_files/vKNb2iqPCJyxS0EJ_KL7rLK_M-JUdK6HRCFPjKRF8RNEh3lDB4CUe0jYawVy.jpg HTTP/1.1Host: distrosourcess5.sg-host.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://distrosourcess5.sg-host.com/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Telegram%20Join%20Group%20Chat_files/vKNb2iqPCJyxS0EJ_KL7rLK_M-JUdK6HRCFPjKRF8RNEh3lDB4CUe0jYawVy.jpg HTTP/1.1Host: distrosourcess5.sg-host.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /Telegram%20Join%20Group%20Chat_files/tgwallpaper.min.js HTTP/1.1Host: distrosourcess5.sg-host.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/tgme/pattern.svg?1 HTTP/1.1Host: distrosourcess5.sg-host.comConnection: keep-aliveOrigin: http://distrosourcess5.sg-host.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/telegram.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1Host: distrosourcess5.sg-host.comConnection: keep-aliveOrigin: http://distrosourcess5.sg-host.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/font-roboto.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1Host: distrosourcess5.sg-host.comConnection: keep-aliveOrigin: http://distrosourcess5.sg-host.comUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Referer: http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/font-roboto.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_292.2.dr	String found in binary or memory: "https://www.facebook.com/AppStore/" equals www.facebook.com (Facebook)
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: return a=n===l.CARD_DISPLAY_STYLES.appOfTheDay?_:n===l.CARD_DISPLAY_STYLES.gameOfTheDay?P:n===l.CARD_DISPLAY_STYLES.inAppPurchase?k:this.getTitleKey(e),this.i18n.t(a,{appName:r,storyTitle:i,_disableSafeString:!0})}getOGType(){return i.default.meta.og.type.story}getTwitterSite(){return this.appViewState.isMacAppStoreView?this.i18n.t("WEA.EditorialItemProductPages.Twitter.site.macOs",{_disableSafeString:!0}):super.getTwitterSite(...arguments)}getTwitterTitle(){return this.getOGTitle(...arguments)}getSchemaTags(e){const{product:t}=e.viewModel,r=E(t),[i]=r,n=(0,l.hasShelfDisplay)(i,"collectionLockup"),{lastPublishedDate:a}=t,o={"@type":"Organization",name:"Apple Inc",url:"http://www.apple.com",logo:{"@type":"ImageObject",url:"https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png"}},s=this.getOGImageTags(e).find((e=>"og:image"===e.name))\|\|{},p={"@context":"http://schema.org",name:this.getSeoTitle(e)??this.getTitle(e),description:this.getSeoDescription(e)??this.getDescription(e),image:s.content,author:o,publisher:o,headline:this.getOGTitle(e),dateModified:a,datePublished:a} equals www.twitter.com (Twitter)

Source: global traffic	DNS traffic detected: DNS query: distrosourcess5.sg-host.com
Source: global traffic	DNS traffic detected: DNS query: telegram.org
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: desktop.telegram.org
Source: global traffic	DNS traffic detected: DNS query: is1-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is2-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is5-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is4-ssl.mzstatic.com
Source: global traffic	DNS traffic detected: DNS query: is3-ssl.mzstatic.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 29 Sep 2024 02:41:45 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingX-Httpd-Modphp: 1Host-Header: 6b7412fb82ca5edfd0917e3957f05d89X-Proxy-Cache: EXPIREDX-Proxy-Cache-Info: 0 NC:000000 UP:Content-Encoding: gzipData Raw: 34 62 39 65 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 7d 5b 73 1c b7 9a e4 fb f9 15 bd 9c d8 38 7b e9 6e d5 ad eb a2 23 79 d7 e3 99 89 f3 40 cf ec 2d bc b1 7e 71 b4 c8 96 c8 3d 2d 52 26 29 c9 3e 13 f3 df 37 3f 7c 99 a8 2a 14 d9 0d 3b 66 f7 69 ed 10 9b ec 2c 7c 89 02 32 01 14 50 85 7a f3 6f fe ee 9f be fb 1f ff eb bf fc fd ea e6 e9 e3 f1 9b 3f bc b1 8f d5 71 7f f7 e1 ed c5 e1 ee c2 be 38 ec af bf f9 c3 0a ff bd f9 78 78 da af ae 6e f6 0f 8f 87 a7 b7 17 9f 9f de 6f fa 8b d5 ab 29 78 b7 ff 78 78 7b f1 e5 f6 f0 f5 d3 fd c3 d3 c5 ea ea fe ee e9 70 87 83 bf de 5e 3f dd bc bd 3e 7c b9 bd 3a 6c c2 1f eb d5 ed dd ed d3 ed fe b8 79 bc da 1f 0f 6f cb 6d 01 ba 91 e7 e6 e9 e9 d3 e6 f0 f3 e7 db 2f 6f 2f ae f6 57 37 87 8d 05 7b b8 3f 4e a2 de dd 6f 1e 9f ee 1f 0e eb 8f fb 5f 36 fb 0f 87 b7 c5 b3 f9 79 b8 7f 77 ff f4 38 4b 77 7b 77 7d f8 65 3c f8 e9 f6 e9 78 f8 a6 29 9a d5 66 f5 8f f7 4f ab f7 f7 9f ef ae df bc f2 af 3d 53 c7 db bb bf ac 6e 1e 0e ef df 5e 58 d6 1e 5f bf 7a f5 1e 19 7a dc 7e b8 bf ff 70 3c ec 3f dd 3e 6e af ee 3f be ba 7a 7c fc 4f ef f7 1f 6f 8f bf be fd a7 4f 87 bb ff f8 df f7 77 8f af 9b a2 58 77 45 f1 6f bb ef fe 9b e5 e5 5e 5f 5c ac 1e 0e c7 b7 17 8f 4f bf 1e 0f 8f 37 87 c3 93 95 78 f8 cb 8b e2 3f ac fe 39 b0 5b b1 bc bb ff 65 f3 78 fb d7 db bb 0f af f1 fb c3 f5 e1 61 83 af fe 14 f1 cd c7 fb bf da 37 a7 0f fa 7a 78 f7 97 db a7 cd d3 fe d3 e6 e6 f6 c3 cd 11 ff 9e 50 b2 c7 fb 87 d7 ab a7 07 e4 f5 d3 fe 01 35 e6 61 ff 25 04 7f 77 7f fd eb 24 1f 1f f7 0f 1f 6e ef 5e af 8a 91 fa d3 fe fa 3a e4 6b f2 dd cd c1 42 bf 5e 95 38 ed f1 c8 8d f8 0f bf 3c 59 46 0f 9b fd f5 ff fe fc 38 3b ce 59 b7 ef 91 4d 28 e5 30 a1 fe 74 ff 08 c9 dc 83 1c c5 b6 7f ba fd 72 18 23 df 7f 39 3c bc 3f de 7f 7d bd ba b9 bd be 3e dc 8d 88 89 23 48 0e 99 a9 9a e2 d3 a4 cc e2 b9 ac f6 9f 9f ee c7 24 3c a1 cd d3 fd a7 d7 ab 76 96 44 10 aa f1 e9 fe e3 4b e8 f1 f0 1e e7 54 3d 9b f2 c1 0b 66 04 79 c2 ef f6 57 7f f9 f0 60 ca db 7c 7d d8 7f 5a fd f3 ea 99 f3 5d 3d 7f f0 f6 ea 78 ff f9 7a f3 ee f8 19 e5 b5 9a 44 62 d5 fe cd bb e2 50 1c 86 3f bd 94 fc eb cd ed d3 0b 29 df bf 7f 1f 93 05 43 80 20 8a ee b9 1c 46 f0 c9 2a 79 0f 89 a1 c2 ae 20 aa c3 c3 58 c2 2a 79 2b 85 50 f8 10 8a 6a 86 a7 18 c8 36 9b 87 c3 87 cf c7 fd 03 58 cd 6f 1b f7 d6 eb d5 1f dd 49 7f 5c af be 7d 40 2b b2 5e 3d 42 bc 9b c7 c3 c3 6d 92 dd 8d eb 0c 21 3e d8 19 86 20 a6 bc d7 ab ba 05 e3 0a c6 3e 6c a4 d6 26 7c 35 cf 40 90 e9 e3 e1 e3 ed c7 c3 f5 ed e7 8f f3 18 a1 16 e7 31 aa de c2 ce 63 7c 0d 6e d8 dc dd 3f 7c dc 1f 15 c1 bf 7c bd 42 eb f0 c2 f1 ef ee 8f d7 e9 d1 68 47 d2 a3 1f 3f bf 5b d6 8c 7b 12 2d 82 eb 34 08 7f ac b8 79 59 5a 4b b5 b2 96 4a c5 b9 5a 4f 8b f3 6c 8d f2 64 0f 0f 0f f7 0f ab
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 29 Sep 2024 02:41:45 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingX-Httpd-Modphp: 1Host-Header: 6b7412fb82ca5edfd0917e3957f05d89X-Proxy-Cache: EXPIREDX-Proxy-Cache-Info: 0 NC:000000 UP:Content-Encoding: gzipData Raw: 34 62 39 65 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 7d 5b 73 1c b7 9a e4 fb f9 15 bd 9c d8 38 7b e9 6e d5 ad eb a2 23 79 d7 e3 99 89 f3 40 cf ec 2d bc b1 7e 71 b4 c8 96 c8 3d 2d 52 26 29 c9 3e 13 f3 df 37 3f 7c 99 a8 2a 14 d9 0d 3b 66 f7 69 ed 10 9b ec 2c 7c 89 02 32 01 14 50 85 7a f3 6f fe ee 9f be fb 1f ff eb bf fc fd ea e6 e9 e3 f1 9b 3f bc b1 8f d5 71 7f f7 e1 ed c5 e1 ee c2 be 38 ec af bf f9 c3 0a ff bd f9 78 78 da af ae 6e f6 0f 8f 87 a7 b7 17 9f 9f de 6f fa 8b d5 ab 29 78 b7 ff 78 78 7b f1 e5 f6 f0 f5 d3 fd c3 d3 c5 ea ea fe ee e9 70 87 83 bf de 5e 3f dd bc bd 3e 7c b9 bd 3a 6c c2 1f eb d5 ed dd ed d3 ed fe b8 79 bc da 1f 0f 6f cb 6d 01 ba 91 e7 e6 e9 e9 d3 e6 f0 f3 e7 db 2f 6f 2f ae f6 57 37 87 8d 05 7b b8 3f 4e a2 de dd 6f 1e 9f ee 1f 0e eb 8f fb 5f 36 fb 0f 87 b7 c5 b3 f9 79 b8 7f 77 ff f4 38 4b 77 7b 77 7d f8 65 3c f8 e9 f6 e9 78 f8 a6 29 9a d5 66 f5 8f f7 4f ab f7 f7 9f ef ae df bc f2 af 3d 53 c7 db bb bf ac 6e 1e 0e ef df 5e 58 d6 1e 5f bf 7a f5 1e 19 7a dc 7e b8 bf ff 70 3c ec 3f dd 3e 6e af ee 3f be ba 7a 7c fc 4f ef f7 1f 6f 8f bf be fd a7 4f 87 bb ff f8 df f7 77 8f af 9b a2 58 77 45 f1 6f bb ef fe 9b e5 e5 5e 5f 5c ac 1e 0e c7 b7 17 8f 4f bf 1e 0f 8f 37 87 c3 93 95 78 f8 cb 8b e2 3f ac fe 39 b0 5b b1 bc bb ff 65 f3 78 fb d7 db bb 0f af f1 fb c3 f5 e1 61 83 af fe 14 f1 cd c7 fb bf da 37 a7 0f fa 7a 78 f7 97 db a7 cd d3 fe d3 e6 e6 f6 c3 cd 11 ff 9e 50 b2 c7 fb 87 d7 ab a7 07 e4 f5 d3 fe 01 35 e6 61 ff 25 04 7f 77 7f fd eb 24 1f 1f f7 0f 1f 6e ef 5e af 8a 91 fa d3 fe fa 3a e4 6b f2 dd cd c1 42 bf 5e 95 38 ed f1 c8 8d f8 0f bf 3c 59 46 0f 9b fd f5 ff fe fc 38 3b ce 59 b7 ef 91 4d 28 e5 30 a1 fe 74 ff 08 c9 dc 83 1c c5 b6 7f ba fd 72 18 23 df 7f 39 3c bc 3f de 7f 7d bd ba b9 bd be 3e dc 8d 88 89 23 48 0e 99 a9 9a e2 d3 a4 cc e2 b9 ac f6 9f 9f ee c7 24 3c a1 cd d3 fd a7 d7 ab 76 96 44 10 aa f1 e9 fe e3 4b e8 f1 f0 1e e7 54 3d 9b f2 c1 0b 66 04 79 c2 ef f6 57 7f f9 f0 60 ca db 7c 7d d8 7f 5a fd f3 ea 99 f3 5d 3d 7f f0 f6 ea 78 ff f9 7a f3 ee f8 19 e5 b5 9a 44 62 d5 fe cd bb e2 50 1c 86 3f bd 94 fc eb cd ed d3 0b 29 df bf 7f 1f 93 05 43 80 20 8a ee b9 1c 46 f0 c9 2a 79 0f 89 a1 c2 ae 20 aa c3 c3 58 c2 2a 79 2b 85 50 f8 10 8a 6a 86 a7 18 c8 36 9b 87 c3 87 cf c7 fd 03 58 cd 6f 1b f7 d6 eb d5 1f dd 49 7f 5c af be 7d 40 2b b2 5e 3d 42 bc 9b c7 c3 c3 6d 92 dd 8d eb 0c 21 3e d8 19 86 20 a6 bc d7 ab ba 05 e3 0a c6 3e 6c a4 d6 26 7c 35 cf 40 90 e9 e3 e1 e3 ed c7 c3 f5 ed e7 8f f3 18 a1 16 e7 31 aa de c2 ce 63 7c 0d 6e d8 dc dd 3f 7c dc 1f 15 c1 bf 7c bd 42 eb f0 c2 f1 ef ee 8f d7 e9 d1 68 47 d2 a3 1f 3f bf 5b d6 8c 7b 12 2d 82 eb 34 08 7f ac b8 79 59 5a 4b b5 b2 96 4a c5 b9 5a 4f 8b f3 6c 8d f2 64 0f 0f 0f f7 0f ab
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Sun, 29 Sep 2024 02:41:45 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: keep-aliveVary: Accept-EncodingX-Httpd-Modphp: 1Host-Header: 6b7412fb82ca5edfd0917e3957f05d89X-Proxy-Cache: EXPIREDX-Proxy-Cache-Info: 0 NC:000000 UP:Content-Encoding: gzipData Raw: 34 62 39 65 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 7d 5b 73 1c b7 9a e4 fb f9 15 bd 9c d8 38 7b e9 6e d5 ad eb a2 23 79 d7 e3 99 89 f3 40 cf ec 2d bc b1 7e 71 b4 c8 96 c8 3d 2d 52 26 29 c9 3e 13 f3 df 37 3f 7c 99 a8 2a 14 d9 0d 3b 66 f7 69 ed 10 9b ec 2c 7c 89 02 32 01 14 50 85 7a f3 6f fe ee 9f be fb 1f ff eb bf fc fd ea e6 e9 e3 f1 9b 3f bc b1 8f d5 71 7f f7 e1 ed c5 e1 ee c2 be 38 ec af bf f9 c3 0a ff bd f9 78 78 da af ae 6e f6 0f 8f 87 a7 b7 17 9f 9f de 6f fa 8b d5 ab 29 78 b7 ff 78 78 7b f1 e5 f6 f0 f5 d3 fd c3 d3 c5 ea ea fe ee e9 70 87 83 bf de 5e 3f dd bc bd 3e 7c b9 bd 3a 6c c2 1f eb d5 ed dd ed d3 ed fe b8 79 bc da 1f 0f 6f cb 6d 01 ba 91 e7 e6 e9 e9 d3 e6 f0 f3 e7 db 2f 6f 2f ae f6 57 37 87 8d 05 7b b8 3f 4e a2 de dd 6f 1e 9f ee 1f 0e eb 8f fb 5f 36 fb 0f 87 b7 c5 b3 f9 79 b8 7f 77 ff f4 38 4b 77 7b 77 7d f8 65 3c f8 e9 f6 e9 78 f8 a6 29 9a d5 66 f5 8f f7 4f ab f7 f7 9f ef ae df bc f2 af 3d 53 c7 db bb bf ac 6e 1e 0e ef df 5e 58 d6 1e 5f bf 7a f5 1e 19 7a dc 7e b8 bf ff 70 3c ec 3f dd 3e 6e af ee 3f be ba 7a 7c fc 4f ef f7 1f 6f 8f bf be fd a7 4f 87 bb ff f8 df f7 77 8f af 9b a2 58 77 45 f1 6f bb ef fe 9b e5 e5 5e 5f 5c ac 1e 0e c7 b7 17 8f 4f bf 1e 0f 8f 37 87 c3 93 95 78 f8 cb 8b e2 3f ac fe 39 b0 5b b1 bc bb ff 65 f3 78 fb d7 db bb 0f af f1 fb c3 f5 e1 61 83 af fe 14 f1 cd c7 fb bf da 37 a7 0f fa 7a 78 f7 97 db a7 cd d3 fe d3 e6 e6 f6 c3 cd 11 ff 9e 50 b2 c7 fb 87 d7 ab a7 07 e4 f5 d3 fe 01 35 e6 61 ff 25 04 7f 77 7f fd eb 24 1f 1f f7 0f 1f 6e ef 5e af 8a 91 fa d3 fe fa 3a e4 6b f2 dd cd c1 42 bf 5e 95 38 ed f1 c8 8d f8 0f bf 3c 59 46 0f 9b fd f5 ff fe fc 38 3b ce 59 b7 ef 91 4d 28 e5 30 a1 fe 74 ff 08 c9 dc 83 1c c5 b6 7f ba fd 72 18 23 df 7f 39 3c bc 3f de 7f 7d bd ba b9 bd be 3e dc 8d 88 89 23 48 0e 99 a9 9a e2 d3 a4 cc e2 b9 ac f6 9f 9f ee c7 24 3c a1 cd d3 fd a7 d7 ab 76 96 44 10 aa f1 e9 fe e3 4b e8 f1 f0 1e e7 54 3d 9b f2 c1 0b 66 04 79 c2 ef f6 57 7f f9 f0 60 ca db 7c 7d d8 7f 5a fd f3 ea 99 f3 5d 3d 7f f0 f6 ea 78 ff f9 7a f3 ee f8 19 e5 b5 9a 44 62 d5 fe cd bb e2 50 1c 86 3f bd 94 fc eb cd ed d3 0b 29 df bf 7f 1f 93 05 43 80 20 8a ee b9 1c 46 f0 c9 2a 79 0f 89 a1 c2 ae 20 aa c3 c3 58 c2 2a 79 2b 85 50 f8 10 8a 6a 86 a7 18 c8 36 9b 87 c3 87 cf c7 fd 03 58 cd 6f 1b f7 d6 eb d5 1f dd 49 7f 5c af be 7d 40 2b b2 5e 3d 42 bc 9b c7 c3 c3 6d 92 dd 8d eb 0c 21 3e d8 19 86 20 a6 bc d7 ab ba 05 e3 0a c6 3e 6c a4 d6 26 7c 35 cf 40 90 e9 e3 e1 e3 ed c7 c3 f5 ed e7 8f f3 18 a1 16 e7 31 aa de c2 ce 63 7c 0d 6e d8 dc dd 3f 7c dc 1f 15 c1 bf 7c bd 42 eb f0 c2 f1 ef ee 8f d7 e9 d1 68 47 d2 a3 1f 3f bf 5b d6 8c 7b 12 2d 82 eb 34 08 7f ac b8 79 59 5a 4b b5 b2 96 4a c5 b9 5a 4f 8b f3 6c 8d f2 64 0f 0f 0f f7 0f ab

Source: chromecache_144.2.dr, chromecache_239.2.dr	String found in binary or memory: http://getbootstrap.com)
Source: chromecache_144.2.dr, chromecache_239.2.dr	String found in binary or memory: http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6)
Source: chromecache_185.2.dr, chromecache_192.2.dr	String found in binary or memory: http://git.io/yBU2rg
Source: chromecache_134.2.dr, chromecache_215.2.dr	String found in binary or memory: http://jedwatson.github.io/classnames
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: http://reportaproblem.apple.com
Source: chromecache_213.2.dr, chromecache_292.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: http://schema.org/ItemListOrderAscending
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: http://www.apple.com
Source: chromecache_292.2.dr	String found in binary or memory: http://www.apple.com/itunes/download/
Source: chromecache_221.2.dr, chromecache_183.2.dr	String found in binary or memory: http://www.videolan.org/x264.html
Source: chromecache_292.2.dr	String found in binary or memory: https://amp-api-edge.apps.apple.com
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://amp-api-search-edge.apps.apple.com/v1/catalog/$
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://amp-api.books.apple.com/
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://amp.apple.com
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://api.books.apple.com/
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://apps.apple.com
Source: chromecache_213.2.dr, chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/#organization
Source: chromecache_213.2.dr	String found in binary or memory: https://apps.apple.com/$
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/assets/images/knowledge-graph/apps.png
Source: chromecache_206.2.dr, chromecache_213.2.dr, chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/story/id1538632801
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://apps.apple.com/story/id1539235847
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://apps.apple.com/story/id1604959672
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/aka/id1476189685
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/aka/id1476189685"
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://apps.apple.com/us/app/apple-podcasts/id525463029
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/telegram-messenger/id686449807
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/tunduk/id1533035059
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/tunduk/id1533035059"
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/vidogram/id1528004676
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/vidogram/id1528004676"
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/vk-social-network-messenger/id564177498
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/vk-social-network-messenger/id564177498"
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/vpn-for-telegram/id6448276574
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/vpn-for-telegram/id6448276574"
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/x-for-telegram-messenger/id1621317550
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/app/x-for-telegram-messenger/id1621317550"
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/charts/iphone/social-networking-apps/6005
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/charts/iphone/social-networking-apps/6005"
Source: chromecache_142.2.dr, chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/developer/se-electronic-interoperability-center-tunduk/id1533035061
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/developer/telegram-fz-llc/id686450210
Source: chromecache_292.2.dr	String found in binary or memory: https://apps.apple.com/us/developer/telegram-fz-llc/id686450210"
Source: chromecache_261.2.dr, chromecache_184.2.dr	String found in binary or memory: https://buy.music.apple.com/account/v1/affiliation/association
Source: chromecache_261.2.dr, chromecache_184.2.dr	String found in binary or memory: https://buy.tv.apple.com/account/v1/affiliation/association
Source: chromecache_185.2.dr, chromecache_192.2.dr	String found in binary or memory: https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.
Source: chromecache_144.2.dr, chromecache_239.2.dr	String found in binary or memory: https://gist.github.com/92d2ac1b31978642b6b6
Source: chromecache_261.2.dr, chromecache_184.2.dr	String found in binary or memory: https://git.io/fjule
Source: chromecache_184.2.dr	String found in binary or memory: https://git.io/fxCyr
Source: chromecache_158.2.dr, chromecache_157.2.dr	String found in binary or memory: https://github.com/mapbox/mapbox-gl-js/issues/8771
Source: chromecache_144.2.dr, chromecache_239.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com
Source: chromecache_142.2.dr, chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features116/v4/ef/97/5a/ef975a6f-497b-9f7c-cca4-da1de9441ba
Source: chromecache_142.2.dr, chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features126/v4/38/29/cf/3829cf79-cba5-0276-2ad0-d9b4234e4fc
Source: chromecache_142.2.dr, chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Features126/v4/e5/77/19/e57719b9-42de-af25-7ccd-9be8a082ddc
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple122/v4/6c/b0/d4/6cb0d465-3bcb-0cb2-ba85-ebe2b931ad0c/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/95/c8/39/95c83924-7e67-afff-aa59-c913cf2495ec/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/9f/b1/e7/9fb1e7b9-6eb4-64eb-7064-57e6c4d80ce9/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/b1/0f/b8/b10fb881-6da6-a520-133a-3825da847a52/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/eb/4e/3e/eb4e3e2a-492e-36a8-3919-033f3cdec15d/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/eb/e3/19/ebe319f1-13a6-edb3-03be-d3a82e3a06e3/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/f7/2a/49/f72a49ab-3481-577a-135a-20cb2b7c8283/
Source: chromecache_142.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/06/16/ed/0616edda-b75c-bee5-37ef-484d695659d0/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/15/45/ec/1545ec6d-fe0e-cc44-3fc6-c8015ed6a0b3/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/29/5c/74/295c74dd-9f36-cf33-1999-f3514112471a/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/3a/e7/0b/3ae70be4-3e47-35bb-8674-cb45fe4a170b/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/62/aa/c5/62aac51f-fa4e-3439-079e-3bb218039381/
Source: chromecache_142.2.dr, chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/90/78/72/90787299-95c6-21ec-cc6d-294cf83523ba/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/90/cc/24/90cc240f-b047-3d7b-2333-04d61934f857/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/e1/be/21/e1be21a4-9059-f4fb-3231-ae194e127f20/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/f8/86/6c/f8866c74-f672-1857-c184-be4b591a037c/
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource211/v4/09/29/21/092921c1-9d19-44b6-d675-5873939
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource211/v4/16/16/92/161692e2-935e-4e71-d2e2-84019ce
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource221/v4/4a/c5/5e/4ac55ed5-327b-b58d-ad22-0fee90f
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource221/v4/c6/84/ef/c684ef91-10a5-be17-7a01-940a13c
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource221/v4/db/eb/88/dbeb886b-1cc6-8cc6-b0c6-401b357
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource221/v4/f0/a5/c4/f0a5c46d-4950-8cd2-5649-8d891c3
Source: chromecache_292.2.dr	String found in binary or memory: https://is1-ssl.mzstatic.com/image/thumb/PurpleSource221/v4/fa/8c/8e/fa8c8e88-f560-ab33-200b-4fa8b20
Source: chromecache_292.2.dr	String found in binary or memory: https://is2-ssl.mzstatic.com
Source: chromecache_292.2.dr	String found in binary or memory: https://is3-ssl.mzstatic.com
Source: chromecache_292.2.dr	String found in binary or memory: https://is4-ssl.mzstatic.com
Source: chromecache_292.2.dr	String found in binary or memory: https://is5-ssl.mzstatic.com
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://itunes.apple.com$
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewFeature?id=1476734846&mt=11
Source: chromecache_213.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewTop?cc=
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStore.woa/wa/viewTop?genreId=38&mt=11
Source: chromecache_261.2.dr, chromecache_184.2.dr	String found in binary or memory: https://itunes.apple.com/WebObjects/MZStoreServices.woa/wa/processRedirectUrl
Source: chromecache_292.2.dr	String found in binary or memory: https://itunes.apple.com/subscribe?app=music
Source: chromecache_292.2.dr	String found in binary or memory: https://itunes.apple.com/us/genre/id6005
Source: chromecache_292.2.dr	String found in binary or memory: https://itunes.apple.com/us/genre/id6005"
Source: chromecache_142.2.dr, chromecache_292.2.dr	String found in binary or memory: https://itunes.apple.com/us/genre/id6006
Source: chromecache_292.2.dr	String found in binary or memory: https://js-cdn.music.apple.com
Source: chromecache_288.2.dr, chromecache_179.2.dr, chromecache_159.2.dr, chromecache_151.2.dr, chromecache_278.2.dr, chromecache_294.2.dr, chromecache_145.2.dr, chromecache_193.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt
Source: chromecache_292.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/amp/musickit.js?t=1726695429822
Source: chromecache_292.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components/
Source: chromecache_292.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.esm.j
Source: chromecache_292.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.js?t=
Source: chromecache_261.2.dr, chromecache_184.2.dr	String found in binary or memory: https://js-cdn.music.apple.com/musickit/v2/media-api
Source: chromecache_142.2.dr	String found in binary or memory: https://landing.flycricket.io/vpn-for-telegram/2ded2097-c13a-4305-b49e-692419d5a041/?t=1695742611&_g
Source: chromecache_142.2.dr, chromecache_292.2.dr	String found in binary or memory: https://landing.flycricket.io/x-for-telegram-messenger/afcccc177623461da3c1a065ec1e0c62/
Source: chromecache_292.2.dr	String found in binary or memory: https://locate.apple.com/
Source: chromecache_142.2.dr, chromecache_292.2.dr	String found in binary or memory: https://m9c28cf49.app-ads-txt.com
Source: chromecache_222.2.dr, chromecache_165.2.dr	String found in binary or memory: https://osx.telegram.org/updates/site/artboard.png)
Source: chromecache_222.2.dr, chromecache_165.2.dr	String found in binary or memory: https://osx.telegram.org/updates/site/artboard_2x.png);
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://play.google.com/store/apps/details?id=com.apple.android.music&referrer=utm_source=$
Source: chromecache_134.2.dr, chromecache_215.2.dr	String found in binary or memory: https://preactjs.com
Source: chromecache_185.2.dr, chromecache_192.2.dr	String found in binary or memory: https://raw.github.com/emberjs/ember.js/master/LICENSE
Source: chromecache_292.2.dr	String found in binary or memory: https://schema.org
Source: chromecache_213.2.dr	String found in binary or memory: https://support.apple.com/
Source: chromecache_292.2.dr	String found in binary or memory: https://support.apple.com/?cid=gn-ols-home-hp-tab
Source: chromecache_292.2.dr	String found in binary or memory: https://support.apple.com/billing
Source: chromecache_251.2.dr, chromecache_285.2.dr, chromecache_149.2.dr, chromecache_173.2.dr	String found in binary or memory: https://telegram.org/
Source: chromecache_292.2.dr	String found in binary or memory: https://telegram.org/privacy
Source: chromecache_292.2.dr	String found in binary or memory: https://telegram.org/support
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://tv.apple.com/search?q=
Source: chromecache_292.2.dr	String found in binary or memory: https://twitter.com/AppStore
Source: chromecache_251.2.dr, chromecache_285.2.dr, chromecache_149.2.dr, chromecache_173.2.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: chromecache_142.2.dr, chromecache_292.2.dr	String found in binary or memory: https://vk.com
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/#organization
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://www.apple.com/ac/structured-data/images/knowledge_graph_logo.png
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/airpods/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.css
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/apple-arcade/
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://www.apple.com/apple-books/
Source: chromecache_206.2.dr, chromecache_213.2.dr, chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/apple-vision-pro/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/choose-country-region/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/entertainment/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/ios/app-store/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/ipad/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/iphone/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/itunes/download/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/legal/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/legal/internet-services/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/legal/internet-services/terms/site.html
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/legal/privacy/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/legal/privacy/data/en/app-store
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/mac/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/macos/mojave-preview/#mac-app-store
Source: chromecache_206.2.dr, chromecache_213.2.dr	String found in binary or memory: https://www.apple.com/osx/apps/app-store/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/privacy/use-of-cookies/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/retail/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/sitemap/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/tv-home/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/buy_accessories
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/help/sales_refunds
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/us/shop/goto/store
Source: chromecache_292.2.dr	String found in binary or memory: https://www.apple.com/watch/
Source: chromecache_292.2.dr	String found in binary or memory: https://www.freeprivacypolicy.com/live/530452e8-8148-4aab-b485-f730650e757a
Source: chromecache_142.2.dr	String found in binary or memory: https://www.freeprivacypolicy.com/live/82310f81-3533-410a-8aed-c228dc9b788e
Source: chromecache_142.2.dr, chromecache_292.2.dr	String found in binary or memory: https://www.freeprivacypolicy.com/live/9ecdd4dd-be41-4882-9ac9-d5cb28dda573
Source: chromecache_292.2.dr	String found in binary or memory: https://www.wikidata.org/wiki/Q368215
Source: chromecache_190.2.dr, chromecache_194.2.dr	String found in binary or memory: https://xp-qa.apple.com
Source: chromecache_190.2.dr, chromecache_292.2.dr, chromecache_194.2.dr	String found in binary or memory: https://xp.apple.com
Source: chromecache_207.2.dr, chromecache_298.2.dr	String found in binary or memory: https://xp.apple.com/config/1/report
Source: chromecache_261.2.dr, chromecache_184.2.dr	String found in binary or memory: https://xp.apple.com/register
Source: chromecache_207.2.dr, chromecache_196.2.dr, chromecache_201.2.dr, chromecache_211.2.dr, chromecache_181.2.dr, chromecache_298.2.dr	String found in binary or memory: https://xp.apple.com/report

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49762 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.113.103.199:443 -> 192.168.2.6:49860 version: TLS 1.2

Source: classification engine

Classification label: mal64.win@23/297@28/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2308,i,5190452410969668684,16090227208378395955,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://distrosourcess5.sg-host.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2308,i,5190452410969668684,16090227208378395955,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://distrosourcess5.sg-host.com/	12%	Virustotal		Browse
http://distrosourcess5.sg-host.com/	100%	SlashNext	Credential Stealing type: Phishing & Social usering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
bg.microsoft.map.fastly.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
distrosourcess5.sg-host.com	12%	Virustotal	Browse
is3-ssl.mzstatic.com	0%	Virustotal	Browse
is5-ssl.mzstatic.com	0%	Virustotal	Browse
is2-ssl.mzstatic.com	0%	Virustotal	Browse
is1-ssl.mzstatic.com	0%	Virustotal	Browse
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
desktop.telegram.org	0%	Virustotal	Browse
telegram.org	0%	Virustotal	Browse
is4-ssl.mzstatic.com	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://schema.org	0%	URL Reputation	safe
http://schema.org	0%	URL Reputation	safe
http://jedwatson.github.io/classnames	0%	URL Reputation	safe
https://osx.telegram.org/updates/site/artboard.png)	0%	Virustotal		Browse
https://is2-ssl.mzstatic.com	0%	Virustotal		Browse
https://is1-ssl.mzstatic.com/image/thumb/Features126/v4/e5/77/19/e57719b9-42de-af25-7ccd-9be8a082ddc	0%	Virustotal		Browse
https://is1-ssl.mzstatic.com/image/thumb/Features126/v4/38/29/cf/3829cf79-cba5-0276-2ad0-d9b4234e4fc	0%	Virustotal		Browse
https://telegram.org/file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805	0%	Virustotal		Browse
https://desktop.telegram.org/img/td_laptop.png	0%	Virustotal		Browse
https://telegram.org/privacy	0%	Virustotal		Browse
https://vk.com	1%	Virustotal		Browse
http://www.videolan.org/x264.html	0%	Virustotal		Browse
https://telegram.org/js/rlottie-wasm.js	0%	Virustotal		Browse
https://telegram.org/file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa	0%	Virustotal		Browse
https://telegram.org/file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b	0%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	0%, Virustotal, Browse	unknown
desktop.telegram.org	149.154.167.99	true	false	0%, Virustotal, Browse	unknown
distrosourcess5.sg-host.com	35.215.82.134	true	false	12%, Virustotal, Browse	unknown
telegram.org	149.154.167.99	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.184.196	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown
is2-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is3-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is1-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is5-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown
is4-ssl.mzstatic.com	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/tgwallpaper.min.js	true		unknown
https://telegram.org/file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e	false		unknown
https://telegram.org/file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db	false		unknown
https://telegram.org/file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805	false	0%, Virustotal, Browse	unknown
http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/font-roboto.css	true		unknown
https://telegram.org/js/main.js?47	false		unknown
https://desktop.telegram.org/img/td_laptop.png	false	0%, Virustotal, Browse	unknown
https://telegram.org/file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794	false		unknown
https://telegram.org/file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa	false	0%, Virustotal, Browse	unknown
https://telegram.org/js/rlottie-wasm.js	false	0%, Virustotal, Browse	unknown
https://desktop.telegram.org/css/telegram.css?241	false		unknown
https://telegram.org/file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b	false	0%, Virustotal, Browse	unknown
https://telegram.org/file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9	false		unknown
https://telegram.org/file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a	false		unknown
https://desktop.telegram.org/	false		unknown
http://distrosourcess5.sg-host.com/fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2	true		unknown
https://telegram.org/file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613	false		unknown
http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/bootstrap.min.css	true		unknown
https://telegram.org/img/SiteIconApple.svg	false		unknown
http://distrosourcess5.sg-host.com/	true		unknown
https://telegram.org/file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4	false		unknown
https://desktop.telegram.org/img/favicon.ico	false		unknown
https://desktop.telegram.org/img/twitter.png	false		unknown
http://distrosourcess5.sg-host.com/img/tgme/pattern.svg?1	true		unknown
https://telegram.org/img/favicon.ico	false		unknown
https://telegram.org/file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23	false		unknown
https://telegram.org/css/bootstrap.min.css?3	false		unknown
https://telegram.org/img/twitter.png	false		unknown
https://telegram.org/file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4	false		unknown
https://telegram.org/file/400780400436/1/AFpKVW0u5fw.267441/5fd61b6d2531113c45	false		unknown
https://telegram.org/img/t_main_Android_demo.mp4	false		unknown
https://telegram.org/js/rlottie-wasm.wasm	false		unknown
https://telegram.org/file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2	false		unknown
https://telegram.org/file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688	false		unknown
https://telegram.org/file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109	false		unknown
https://telegram.org/	false		unknown
https://telegram.org/img/t_logo_sprite.svg	false		unknown
https://telegram.org/img/SiteIconAndroid.svg	false		unknown
http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/telegram.css	true		unknown
https://desktop.telegram.org/js/main.js?47	false		unknown
https://telegram.org/dl?tme=3d3828bad0840b196d_3278058860628255688	false		unknown
https://telegram.org/js/tgsticker.js?31	false		unknown
https://desktop.telegram.org/css/bootstrap.min.css?3	false		unknown
http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/vKNb2iqPCJyxS0EJ_KL7rLK_M-JUdK6HRCFPjKRF8RNEh3lDB4CUe0jYawVy.jpg	true		unknown
https://telegram.org/img/SiteDesktop.jpg?2	false		unknown
https://telegram.org/img/t_main_iOS_demo.mp4	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://osx.telegram.org/updates/site/artboard.png)	chromecache_222.2.dr, chromecache_165.2.dr	false	0%, Virustotal, Browse	unknown
https://is2-ssl.mzstatic.com	chromecache_292.2.dr	false	0%, Virustotal, Browse	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/b1/0f/b8/b10fb881-6da6-a520-133a-3825da847a52/	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Features126/v4/e5/77/19/e57719b9-42de-af25-7ccd-9be8a082ddc	chromecache_142.2.dr, chromecache_292.2.dr	false	0%, Virustotal, Browse	unknown
https://is1-ssl.mzstatic.com/image/thumb/Features126/v4/38/29/cf/3829cf79-cba5-0276-2ad0-d9b4234e4fc	chromecache_142.2.dr, chromecache_292.2.dr	false	0%, Virustotal, Browse	unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/06/16/ed/0616edda-b75c-bee5-37ef-484d695659d0/	chromecache_142.2.dr	false		unknown
https://landing.flycricket.io/x-for-telegram-messenger/afcccc177623461da3c1a065ec1e0c62/	chromecache_142.2.dr, chromecache_292.2.dr	false		unknown
https://vk.com	chromecache_142.2.dr, chromecache_292.2.dr	false	1%, Virustotal, Browse	unknown
https://telegram.org/privacy	chromecache_292.2.dr	false	0%, Virustotal, Browse	unknown
http://www.videolan.org/x264.html	chromecache_221.2.dr, chromecache_183.2.dr	false	0%, Virustotal, Browse	unknown
http://getbootstrap.com)	chromecache_144.2.dr, chromecache_239.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/eb/4e/3e/eb4e3e2a-492e-36a8-3919-033f3cdec15d/	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/f7/2a/49/f72a49ab-3481-577a-135a-20cb2b7c8283/	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource221/v4/fa/8c/8e/fa8c8e88-f560-ab33-200b-4fa8b20	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple122/v4/6c/b0/d4/6cb0d465-3bcb-0cb2-ba85-ebe2b931ad0c/	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/f8/86/6c/f8866c74-f672-1857-c184-be4b591a037c/	chromecache_292.2.dr	false		unknown
https://git.io/fxCyr	chromecache_184.2.dr	false		unknown
https://git.io/fjule	chromecache_261.2.dr, chromecache_184.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/e1/be/21/e1be21a4-9059-f4fb-3231-ae194e127f20/	chromecache_292.2.dr	false		unknown
http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6)	chromecache_144.2.dr, chromecache_239.2.dr	false		unknown
https://m9c28cf49.app-ads-txt.com	chromecache_142.2.dr, chromecache_292.2.dr	false		unknown
https://schema.org	chromecache_292.2.dr	false	URL Reputation: safe	unknown
https://deprecations.emberjs.com/v1.x/#toc_binding-style-attributes.	chromecache_185.2.dr, chromecache_192.2.dr	false		unknown
https://landing.flycricket.io/vpn-for-telegram/2ded2097-c13a-4305-b49e-692419d5a041/?t=1695742611&_g	chromecache_142.2.dr	false		unknown
https://raw.github.com/emberjs/ember.js/master/LICENSE	chromecache_185.2.dr, chromecache_192.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource221/v4/4a/c5/5e/4ac55ed5-327b-b58d-ad22-0fee90f	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/eb/e3/19/ebe319f1-13a6-edb3-03be-d3a82e3a06e3/	chromecache_292.2.dr	false		unknown
https://www.freeprivacypolicy.com/live/9ecdd4dd-be41-4882-9ac9-d5cb28dda573	chromecache_142.2.dr, chromecache_292.2.dr	false		unknown
https://is5-ssl.mzstatic.com	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/90/cc/24/90cc240f-b047-3d7b-2333-04d61934f857/	chromecache_292.2.dr	false		unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_144.2.dr, chromecache_239.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Features116/v4/ef/97/5a/ef975a6f-497b-9f7c-cca4-da1de9441ba	chromecache_142.2.dr, chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/90/78/72/90787299-95c6-21ec-cc6d-294cf83523ba/	chromecache_142.2.dr, chromecache_292.2.dr	false		unknown
https://osx.telegram.org/updates/site/artboard_2x.png);	chromecache_222.2.dr, chromecache_165.2.dr	false		unknown
https://github.com/mapbox/mapbox-gl-js/issues/8771	chromecache_158.2.dr, chromecache_157.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource221/v4/db/eb/88/dbeb886b-1cc6-8cc6-b0c6-401b357	chromecache_292.2.dr	false		unknown
https://twitter.com/intent/tweet?text=	chromecache_251.2.dr, chromecache_285.2.dr, chromecache_149.2.dr, chromecache_173.2.dr	false		unknown
https://gist.github.com/92d2ac1b31978642b6b6	chromecache_144.2.dr, chromecache_239.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/95/c8/39/95c83924-7e67-afff-aa59-c913cf2495ec/	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com	chromecache_292.2.dr	false		unknown
https://www.wikidata.org/wiki/Q368215	chromecache_292.2.dr	false		unknown
http://schema.org	chromecache_213.2.dr, chromecache_292.2.dr	false	URL Reputation: safe	unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource211/v4/16/16/92/161692e2-935e-4e71-d2e2-84019ce	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource211/v4/09/29/21/092921c1-9d19-44b6-d675-5873939	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/PurpleSource221/v4/f0/a5/c4/f0a5c46d-4950-8cd2-5649-8d891c3	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/15/45/ec/1545ec6d-fe0e-cc44-3fc6-c8015ed6a0b3/	chromecache_292.2.dr	false		unknown
https://play.google.com/store/apps/details?id=com.apple.android.music&referrer=utm_source=$	chromecache_206.2.dr, chromecache_213.2.dr	false		unknown
https://is3-ssl.mzstatic.com	chromecache_292.2.dr	false		unknown
https://twitter.com/AppStore	chromecache_292.2.dr	false		unknown
http://jedwatson.github.io/classnames	chromecache_134.2.dr, chromecache_215.2.dr	false	URL Reputation: safe	unknown
https://www.freeprivacypolicy.com/live/82310f81-3533-410a-8aed-c228dc9b788e	chromecache_142.2.dr	false		unknown
https://telegram.org/support	chromecache_292.2.dr	false		unknown
https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/29/5c/74/295c74dd-9f36-cf33-1999-f3514112471a/	chromecache_292.2.dr	false		unknown
https://www.freeprivacypolicy.com/live/530452e8-8148-4aab-b485-f730650e757a	chromecache_292.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
149.154.167.99	desktop.telegram.org	United Kingdom	62041	TELEGRAMRU	false
35.215.82.134	distrosourcess5.sg-host.com	United States	19527	GOOGLE-2US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.6
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521849
Start date and time:	2024-09-29 04:40:46 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 51s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://distrosourcess5.sg-host.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.win@23/297@28/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: tg://join?invite=ygW5i5TULmM1YTgx Browse: https://telegram.org/ Browse: https://telegram.org/dl?tme=3d3828bad0840b196d_3278058860628255688 Browse: https://telegram.org/dl/ios

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.131, 142.250.186.142, 74.125.133.84, 34.104.35.123, 13.85.23.86, 192.229.221.95, 93.184.221.240, 13.85.23.206, 20.3.187.198, 142.250.184.195, 2.19.244.28, 2.19.224.19, 95.101.54.216, 2.16.202.121, 2.19.244.246, 104.119.109.252, 23.201.254.30, 2.23.196.201, 2.23.194.36, 142.250.184.206
Excluded domains from analysis (whitelisted): xp.itunes-apple.com.akadns.net, slscr.update.microsoft.com, clientservices.googleapis.com, e17437.dsct.akamaiedge.net, clients2.google.com, ocsp.digicert.com, itunes.apple.com.edgekey.net, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, apps-cdn.itunes-apple.com.akadns.net, fs.microsoft.com, e6858.dscx.akamaiedge.net, amp-api-edge-cdn-lb.itunes-apple.com.akadns.net, itunes-cdn.itunes-apple.com.akadns.net, edgedl.me.gvt1.com, www.apple.com.edgekey.net, a1437.dscq.akamai.net, itunes.apple.com, clients.l.google.com, www.apple.com.edgekey.net.globalredir.akadns.net, js-cdn.music.apple.com, amp-api-edge.apps.apple.com, www.apple.com, wu.azureedge.net, xp.apple.com, ocsp.edge.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, xp.apple.com.edgekey.net, js-cdn-music-lb.itunes-apple.com.akadns.net, glb.sls.prod.dcat.dsp.trafficmanager.net, clients1.goo
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://telegram.org/ Model: jbxai	{ "brand":["Telegram"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://desktop.telegram.org/ Model: jbxai	{ "brand":["Telegram Desktop"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Get Telegram for Windows x64", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://apps.apple.com/us/app/telegram-messenger/id686449807 Model: jbxai	{ "brand":["Apple", "Telegram"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: http://distrosourcess5.sg-host.com/ Model: jbxai	{ "brand":["Telegram"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"JOIN CHANNEL", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 118

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (821)
Category:	downloaded
Size (bytes):	7626
Entropy (8bit):	5.215559608926212
Encrypted:	false
SSDEEP:	192:OtQ0m8mBOZgS9tn0Ll9829FAeHlVPrMNW:OtFuSD4829FAeHzPAW
MD5:	33AF753815E0763128B33C38F393AF19
SHA1:	FD81C07EDD497B91F91629687D2AB6976F287E17
SHA-256:	A7A8465112A5F495E5C95139568A59BF35B3116624A5861B71472070520D699E
SHA-512:	D5981A0D80035A3E0B8EFBE12B90C5E82A53F8C2CBC100001D344DC645B07A76DB3B75D863A5BB733F54B9E13B4C0A515B63041F50DCFC9AC750C092C436DBF5
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.26.d8fd25d7ba389f9fe03e.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[26],{71026:function(e,t,n){n.r(t),n.d(t,{environment:function(){return a},eventRecorder:function(){return F},immediateEventRecorder:function(){return q},logger:function(){return D},network:function(){return E},setEventQueuePostIntervalEnabled:function(){return N}}).var s=n(76588),r=n(24178),u=n(32722),o=r.SC.attachDelegate,a={setDelegate:function(e){return o(this,e)},globalScope:function(){return window}},i={AJAX:"ajax",AJAX_SYNCHRONOUS:"ajaxSynchronous",IMAGE:"image",BEACON:"beacon"},v=r.vc.metricsDisabledOrDenylistedEvent,c=r.vc.removeDenylistedFields,l={},p=["dsId","consumerId"].function f(e,t,n){var s=null.return n&&!v.call(u.Z,n.eventType,t)&&(c.call(u.Z,n,t),m(t,n),e.apply(null,Array.prototype.slice.call(arguments,1)),s=n),s}function d(e,t){l[e]=l[e]\|\|{},l[e]=t}function Q(){l={}}function m(e,t){l[e]=l[e]\|\|{},l[e].anonymous&&p.forEach((function(e){delete t[e]}))}var y=r.SC.attachDel

Chrome Cache Entry: 119

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (878)
Category:	dropped
Size (bytes):	1441
Entropy (8bit):	4.923625217494772
Encrypted:	false
SSDEEP:	24:ildT+lZadfID4P9Gpl3fBzR1SQLA2RAMRMT6XFKg/7/GpSw8G9bFw4YZn:ild2ZbI9GpvRQQ82OUugFKg/7/Gpj8Gw
MD5:	188415311B33E9DFC79C3CC6147ED47D
SHA1:	486B072C15EA89B3D39F607F92327F1A338254B0
SHA-256:	8B3DA2AC016CE7C6F38F10052C50C7958935276BD5885009716FEC7B3D8ED681
SHA-512:	DD95C297899B58507824F3A3129E060BBA8A9F7D2045526DC66DAB584D19571069D84EB2591B7FBE71A0FBA96DD1BE1A32995184D37FCA9A1F699FC71739644B
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[356],{84356:function(t){var o="touch".function s(t,o){this._target=t\|\|document.body,this._attr=o\|\|"data-focus-method",this._focusMethod=this._lastFocusMethod=!1,this._onKeyDown=this._onKeyDown.bind(this),this._onMouseDown=this._onMouseDown.bind(this),this._onTouchStart=this._onTouchStart.bind(this),this._onFocus=this._onFocus.bind(this),this._onBlur=this._onBlur.bind(this),this._onWindowBlur=this._onWindowBlur.bind(this),this._bindEvents()}var n=s.prototype.n._bindEvents=function(){this._target.addEventListener("keydown",this._onKeyDown,!0),this._target.addEventListener("mousedown",this._onMouseDown,!0),this._target.addEventListener("touchstart",this._onTouchStart,!0),this._target.addEventListener("focus",this._onFocus,!0),this._target.addEventListener("blur",this._onBlur,!0),window.addEventListener("blur",this._onWindowBlur)},n._onKeyDown=function(t){this._focusMethod="key"},n._onMouseD

Chrome Cache Entry: 120

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 99196, version 1.0
Category:	downloaded
Size (bytes):	99196
Entropy (8bit):	7.997868398992993
Encrypted:	true
SSDEEP:	1536:SQIJfyDgC8VN2bW1ToDcINoJjl3ox2/OSTGaaLDg39z0mRGRBLfG:lgpEW1T+Hel402bxk3ymQP+
MD5:	474D73A771E0CC31B43849CD2BAD9CC4
SHA1:	1D973B9CD90543FA43E6E74F164149278B9331FD
SHA-256:	AE98C3B1ED18478144791BFA0C71056B422287CD41F9B7D35C99063B04BE58EB
SHA-512:	257279598503AA3203ADA4A1A29CFA550F0485D3F7231E815A3734405D6BA18472D3E3F248CABDF39A774BF9B752D83218244F578D2FECA2C33711AA53888C01
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v2/sf-pro-text_regular.woff2
Preview:	wOF2.......\|....../0...............................&..H.`H...>...,..c.6.$..$..(.. ?meta....@. 8.t[;5..Cng....5.P........-..3.j......1.c..6@..;.......FI}..#.........a.....{0.w.. .fd.i.K.+..p.cL.b]YJ.%..+...c.HF4.ett....=...N......."F......../p,1Z...V$...)^.M..-M%..y/\|.^I......;..>..%...Jl....4.L%....<.l.,.:..u.Wy......:W.F.....}j,. V......-.U.F...8Q..Z}^t{x7......j.]-..V.]..7.).....Zqt..kD...~.......dG.U..b.V1S..8......Q...D7.]....n.9b'....="........&...OtG..R......S._.D$.1d..&...9..=.l..yQ.._J.5.{.T.6TX...\..NX.....#.tqR8L.iDuRkW..2hUa)..7.+........Y...!.........z.J.5U6..C......R..;CN....=..\...j......o...[..P.....{@.L........Y....B..?..;.f..Y...j.]...`..$.iW0=.9Yue.xH7....5F.o6.._[......K.,...-..J[.f!w...VaT.r..\..^TXq....S..G..6...n]l..TA0..0A,D1....R.\|...S?..v...!1Z.lR.......5.LF.....H=..X......`$....`0....F]..m..1...i.S.x..Vc.v?..DQ_&..(.(.......3.........K....`.....E.......n.?..5L...5P.c.( .*..EAQ.....c.F.+.l.s.3..J.k:....+...}v..

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1670
Entropy (8bit):	7.799260886276612
Encrypted:	false
SSDEEP:	24:e84vGJJHmZ3VA257v0Mi0BrVPjvGkPsNYexfxvq8Ur4D9nb8SvMi2Ax7Su/LZC8s:e8tDmZ3VA2578MhB3CFQu8YEAxRQL
MD5:	CF755E44BEA679E8DFFD37C895FB631A
SHA1:	46BC753191AD17651A84D33AF6D01FCC7FFE3D5E
SHA-256:	2CFB8FCE91BD8B98C2F61323A1CE8493D78861CE2E443A30BC764C544D2F1346
SHA-512:	76A66C50A3FA849B0BAA168AF62CB29C3CF33A73C8574C693CBE1B21F7430E749651EB0C51D6AD09AED38F663938D8486A676EA1F0CF7C0873AF32C499571040
Malicious:	false
Reputation:	low
Preview:	RIFF~...WEBPVP8X..............VP8 .....".......>.F.I..!..U.<......cM.}VO..w...g.3..?..[.z......[.....O.._....W......?..U...;.7.3......Vk7.^.j.....{...bgm.d.+..,Z.xt.dC.....w.l.$.l.oS.>...?.......C..I\|..H...eK...C..[<.!h{..?Ct...g$...`..#.."....k...L.g...}'....?...........M..im..!..k...../.........pN.'S..s7.:b...x.m..BH./....<3N.{5SK.qf8...=8Y.8...U.....E..S....iHN..~.V...."..@..M...'..I.ni..J0q....0R...1i]....+.....RRRT.=...O_..H....8x/...!>.A.8..c.....Z.......:bw(e/.n..N-r...P....~.X.....E'Z.Y....=.=.M............r..B'.....5.Dt.....&S..x}s.U..w..m._+;{<7..,....s.....&dg.j...BD.L.\0.....2%...$.~.MLI[Z(..J..'./9.^..J....s...T$H....t./a.WE..!shw....bey=E.h..f.w.S..]R.p.....W.h<A[R.."!..\|.$....'....m.....t.5.. (V.}.zy....).>.k8......^K.u...7.9......B......!...-.@K.+..Z..f...}.U..1.n.6/b.n)...N#U...F.......g..m.K.......s..l..TK..n..+.. ..V...{..M....2z.....%.z.....R.........@.O.r.u.t..K_..x...7.,.^WH.....i.....1....jy.r..,.A.,?Ad!./S.

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	667
Entropy (8bit):	4.880039869120858
Encrypted:	false
SSDEEP:	12:t4ptE4pjNllHoqeyEllmjM1/dRs9ZqFmYdduNBnpIIcL2pFT57/+:t4ptE4pjNllHfeyElxdR2qUYdcHnuIcH
MD5:	F519029C9BC5F9130E7826C69B475D0B
SHA1:	56887B4254E867CD72A6B190F06BBFF4E7EEF50C
SHA-256:	8C3C3D6F22372EF7FE0767812F79CCB17B74B5A7D9B64121CEF0961BDE3ECD64
SHA-512:	F51153AD7A23F0E8B3E1DEDC2C59BA2C3B87BCD90597F42D7EFFABB7F0466A99366CE950E8D4DA27141A968BA07522609A6E246F913015F060F44ED48A51C5C5
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230.656 498.547"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M28.03.45h174.44c9.66 0 13.08.98 16.61 2.87 3.5 1.84 6.36 4.7 8.2 8.19 1.9 3.52 2.88 6.97 2.88 16.63v442.23c0 9.65-1 13.12-2.9 16.65a19.65 19.65 0 0 1-8.19 8.17c-3.53 1.89-6.94 2.86-16.6 2.86H28.02c-9.65 0-13.1-.99-16.63-2.88a19.68 19.68 0 0 1-8.18-8.2c-1.88-3.5-2.85-6.91-2.87-16.43V28.14c0-9.67 1-13.1 2.88-16.64a19.7 19.7 0 0 1 8.19-8.19C14.94 1.42 18.37.45 28.03.45z" clip-rule="evenodd" vector-effect="non-scaling-stroke"/></svg>.

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (878)
Category:	downloaded
Size (bytes):	1441
Entropy (8bit):	4.923625217494772
Encrypted:	false
SSDEEP:	24:ildT+lZadfID4P9Gpl3fBzR1SQLA2RAMRMT6XFKg/7/GpSw8G9bFw4YZn:ild2ZbI9GpvRQQ82OUugFKg/7/Gpj8Gw
MD5:	188415311B33E9DFC79C3CC6147ED47D
SHA1:	486B072C15EA89B3D39F607F92327F1A338254B0
SHA-256:	8B3DA2AC016CE7C6F38F10052C50C7958935276BD5885009716FEC7B3D8ED681
SHA-512:	DD95C297899B58507824F3A3129E060BBA8A9F7D2045526DC66DAB584D19571069D84EB2591B7FBE71A0FBA96DD1BE1A32995184D37FCA9A1F699FC71739644B
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.356.4d5c8581cf04321d0a9b.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[356],{84356:function(t){var o="touch".function s(t,o){this._target=t\|\|document.body,this._attr=o\|\|"data-focus-method",this._focusMethod=this._lastFocusMethod=!1,this._onKeyDown=this._onKeyDown.bind(this),this._onMouseDown=this._onMouseDown.bind(this),this._onTouchStart=this._onTouchStart.bind(this),this._onFocus=this._onFocus.bind(this),this._onBlur=this._onBlur.bind(this),this._onWindowBlur=this._onWindowBlur.bind(this),this._bindEvents()}var n=s.prototype.n._bindEvents=function(){this._target.addEventListener("keydown",this._onKeyDown,!0),this._target.addEventListener("mousedown",this._onMouseDown,!0),this._target.addEventListener("touchstart",this._onTouchStart,!0),this._target.addEventListener("focus",this._onFocus,!0),this._target.addEventListener("blur",this._onBlur,!0),window.addEventListener("blur",this._onWindowBlur)},n._onKeyDown=function(t){this._focusMethod="key"},n._onMouseD

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 442x270, components 3
Category:	dropped
Size (bytes):	31305
Entropy (8bit):	7.8603716620080535
Encrypted:	false
SSDEEP:	768:3OqzWWjlwuxS+TRqYXz7xlPcuYq8KkTwWq7Pku4kz2R:3nr5zdPn8QSkz2R
MD5:	89486A05599A1CFD549F8FB2D70E7D73
SHA1:	24867697525DF19B88E79D75FF32384EBA57B321
SHA-256:	5A2C666B6E4F30FF921353CD9A3ECCC09B9314C5C5AB11E1A3928936E497B2DC
SHA-512:	BF59EA2F4CDC21464BCE9ABA5401C5DF0522769F998B432DBC79E7863737B87521E0FAA7501DBCE72115B256A181B6DA2C4F2FDBCDFF3E1ABBD4F73AC3177714
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM........i...............................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?.....(...(...(...(.........I'..._......._.....9.-.Isv....m.7Www. ..@.(=...3.+.......\|3..<c..../...M.E.a..........t-;....T.[..\.......3..........X;.J..3.....3..j1>g_....).F..x.[6R...N..~.Cs....a..d......_......G...q.........\|S...;X..V..b;..

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 140502
Category:	dropped
Size (bytes):	12708
Entropy (8bit):	7.97880443442531
Encrypted:	false
SSDEEP:	192:5enfPdeBlrt5LecDLT68iTVs8XoTq8lUcnhJCSTyFWBvFvIzp8TgR3y1wHYG:4Xkzrt5LeCLSVtz8xC9FWxc8TiZHd
MD5:	22FC89B07D3463221776FE84924F0093
SHA1:	EC315241AF796928056AA2408759A5DD502A47ED
SHA-256:	E3327B49B4ABB4C0919AC93668E7AD15BBC6FBD3741FADB82A7DCB6D70175F15
SHA-512:	F612E6621D5B5FC2EBCE8E50A5C62050501D95444A3A70ABFAFB9C73FC5643B36124CD79A0041B54102FF2F1BD5556E62201230E9E0AE1368BA7C8D487F67C7A
Malicious:	false
Reputation:	low
Preview:	...........}[..G.._......{..`w..1.......y..kG..I.....}..".d.M6.-vw..l...........?>.}C........h..p..Ow.$;..............Hn..........k........w.......~._............'w......,....oo?i..._~.I\|........o~}..[..D...O..?.......o....\L.........(.....z.K.5`1..K{.#.f..vf..&<.l....G.M...0._.\|z...8...R6%.+...3...r..O../.H..,....wc....~.{.]...!W.k...U..O.j.....N....2.S{....NW..6..:.jn....?.k.9t...yX._.(....Y.m.>b......_..?.}.dR....".x8.pSm.o....5.TS).E.#V....C.E.L.ow.\|........?....+b@...............'.O7.......f....Fw...T............. ...T.}.yg.....k.w.b....?.^..f.L./.......?}...u{..>}........Bc........J.^p6......e.Q...(./.C..J..eit.\......,1U.1....J.c........UlH..>.k..{X.t.j .)d...C.T...vZ."..w..........?S...O....y`...b...`~9r.K%........./1....Y.6....Z...+.M..5......S.d.Y.l0.B..rhc..!QJ.x.s.1..0.......XL.Y\(U^..d.k...F".{.N..o..Y....nf..1e......~....g....b}uL.L.Q(0..\|.vZ.w.l..VIp..bD..D.8..r....pY.d.yW.I1.Crr....D>.16OW...C.L.F.%....(Q.......-o.:.

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15286
Entropy (8bit):	7.969171293122125
Encrypted:	false
SSDEEP:	384:LhEEnY6rtlrWDBX5s7eLvvRjx7HFYSTKavK4Pjwglq:NEEXrtlrWDHs7eLRt7Ha4vq
MD5:	5F245AC9016657DFAFCBDBF61B61E514
SHA1:	4033C942A333F667EF26C5D45ED5E233BD83B8B9
SHA-256:	006D88E7389F56F925CDAC325A2D6FC7956BBDCC30E46214BDD97B43274BD78E
SHA-512:	0BE5306B2867B719A1B6736784AB063A6186D7187BB5378FA225E4F6EEE5DB31E18A56FBF05F2874F02E52C028E74BFF6C3AB6854F9CDD821C80D7F8BC4BAA3F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............;kIDATx..w.]wu'.]...7..w.r........<.%a.!C....H.2.x..6.a&.T ..f.6....c[.%....9g....{.v..+....9{......w..[.X.eZ.eZ.eZ.eZ.eZ.eZ.eZ.eZ..@......nF.;5.[.f+......b8R..4.T...G...;..2...xZ.s..lCF?......,.U...jD..B.J.J2..Q..fB.....~.}.G.c.?...l>.Wo^... ....-N..k_.2..1.t.,...e@?I.......T.PrJE..O.....).h/8....}......S..5.\.i.^E..@...k....L..%(.>.......<...2..2]{.n.....u...\q.GA@.E$. ....D.Q...N...P.K..T....Q.}.......J:@.... Rb%...I@.v.S....-O..`"R....{..?.\|...3..]{.M........-#..t.....l..:G$..A. ...!..G....!.?....!B.G.F...a.!...2n..)A...D. c...c....... ..U.....G....x....w.'..oD.I...[........:.EQ...$..`&.a..z.HD. ....\|_...T(...!.0D.$....q-.n...s.RU%.M.1.CcC...,...,....".#.A. ..a.K.gV.o<..3.X.....]...&...e....6aEg.......A.....,.:.g..P=/@..X*.X. ...en.!.".. ..Q..2..e.c....m..q.:6.)....)/........hE..]...1...=8z.......>........;z`.ce.k.../.......c.....6fA._T..<...&.....V..r.I..N..rm.c.8d$..b.##c(...6.s

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (750)
Category:	dropped
Size (bytes):	2169
Entropy (8bit):	4.9548772147686115
Encrypted:	false
SSDEEP:	48:ildRbgqluYoCoLUmledemlxUlIUvfALSAl/lmmqlmWlfBlAlVlWlgwheAYf9hbF5:INx4gd/d4fTvsaMefp5oD
MD5:	89F8EE167E82FADB507197C109ED684B
SHA1:	F5A728E7805C71BAE1A8786921AB2735AB07C15E
SHA-256:	0B70D5380DCC5A0C4BDD30DE4D68C4B0F598EB4EA92BEEC1B6D5F0852BD96D22
SHA-512:	BC12D7CB827E364176A691C2ED5C73A481547C572A0C00E5FF6B8BD8E698AC7DA96F2D8DA08485F9363F98A1F21338E61A9E813A31DF0A2EB7E96D43A902E5CE
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[961],{54961:function(n,e,t){t.r(e),t.d(e,{cleanup:function(){return c},environment:function(){return o},eventQueue:function(){return i},eventRecorder:function(){return r},immediateEventRecorder:function(){return u}}).var i=t(71026),o={_document:function(){if("undefined"!=typeof document)return document.throw"metricskit-delegates-html.environment HTML delegate 'document' object not found"},_window:function(){if("undefined"!=typeof window)return window.throw"metricskit-delegates-html.environment HTML delegate 'window' object not found"},cookie:function(){return o._window().document.cookie},pageUrl:function(){return o._window().location.href},parentPageUrl:function(){var n,e=o._window(),t=e.parent.if(t!==e)try{n=t.location.href}catch(e){n=o._document().referrer}return n},pixelRatio:function(){return o._window().devicePixelRatio},screenHeight:function(){return o._window().screen.height},scre

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2778
Entropy (8bit):	7.894815435260341
Encrypted:	false
SSDEEP:	48:kqnNdKT0PL+NAVNh09ANPoDcXhC/dMf7Pcoc83W8Y+:kqNdTPL+NAfe9j+hcMzP9XU+
MD5:	EA7AC086B1218F3573A177B979679167
SHA1:	AAF6A137C9B7DBA87B8FA6E5539C6E26C1FBEF26
SHA-256:	6B2405CAA578B096B71F8B7BB31C698BD2CEB2E0BB23F3652C5506135F93F46C
SHA-512:	7A0DB033ADEBB404F4B65CD3BF6A17595E8F227E17C643DCDFFC23D4C355F7427ED01BE9CA1614043BB2A9429E2E603FDA05F5BD85EE090D85D956D4D30ECDD4
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8 P...p9.......>.F.H#"!.i.l4.D....6N........~t....q...+......3.3.....G...Z......z..y.:...f.....7._d{I..g.ar..s"..]......mC....H....`.q.....C4t..........}..S;......C..?...K..j....T.;....x......cz2.....mbv...O..))X....ce............H]..-.3..Q.#........_W>..zP..~......k2s8M."..@..v...6{#......U...>..)bv12i..O.'!.. ........`4. ._.(.so #.D.k.M2.m"t...=.z......as..uU........Q.l..j....k.h..\L.X......bP<6.}/."D...pB...$UG........#....(.@Jj.JBG......C.e... ...q.....Vd.A~.u'.O.\.e..b..~...e.r.c...N.P........n{Vj.n..A.Lm.7..%.H.?"~....b.(=..a.4&.H.......I..IF.q.P.....P..._.....i...H....D..h..4{.f...x..X,z..OYV/%g...\|.zn=..h.....F~.V..T*G=,.>.p.2.G...P..g..Z.s....ET.......6_.Z.h..;...$(..L....E.....[l.q{....K..>...3..n.o.-v.......tr.%.FM~zH/..ac^.-.^!'.%e&.K.....R,.Sx........m.`..R..K.[.<....}..&6.cH@...$.wX.......s.D.R..I`.\|.oPr...]..X.l:LM..'.[.....lG..]...P..u....=..d.GsP.6.u. .t....@m.<_X:...DSI.C....m....+.t..

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (579)
Category:	downloaded
Size (bytes):	17977
Entropy (8bit):	5.172440917667389
Encrypted:	false
SSDEEP:	384:xV1W44hioeBevmrjGRp1AFjga2dCjrI7KV0t:s44hioeBA7AFjgaU7KV0
MD5:	E62FEA2030907AF7E89AE14B53FFA550
SHA1:	7B4F41FC31DA2F829A183DFF72CDD708EA76665D
SHA-256:	F66B859A3A06C27EF58D1CC069E5BA8A9A47B3C7AEAF448EADF1F589582C360B
SHA-512:	1CDD5DCFCA7F6EFB33854F4ED6BA0D535CC0D444A78499240DAFBBCA2ABE9772E14A5D0E7A34CDE9A9716E068CE5FD6F5EB3271BC549BF17DE075F18E31661CA
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.359.1a547c0d896fa5233fdb.js
Preview:	/! For license information please see chunk.359.1a547c0d896fa5233fdb.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[359],{65359:function(t,e,n){t=n.nmd(t),function(e){"use strict".var n=function(){return(n=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function r(t){var e="function"==typeof Symbol&&Symbol.iterator,n=e&&t[e],r=0.if(n)return n.call(t).if(t&&"number"==typeof t.length)return{next:function(){return t&&r>=t.length&&(t=void 0),{value:t&&t[r++],done:!t}}}.throw new TypeError(e?"Object is not iterable.":"Symbol.iterator is not defined.")}function o(t){switch(Object.prototype.toString.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0.default:return s(t,Error)}}function i(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function a(t)

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1583
Entropy (8bit):	7.795445722993461
Encrypted:	false
SSDEEP:	24:+kTgV0lmQzusZvw6Xjb6LIfS63KNQZ5Wt0gRdYfw4uY0atrtB479djaKzbFetUgo:+Aga/znTeLIYYs0qN4uY0aaHzuUF
MD5:	DAEC7EF3FB160308D05DDD69A2B1DECE
SHA1:	EEACC969CD7CD563B194EFC3008008BA6904ABDD
SHA-256:	931BB77B0668427230D029C8ABE78E671B846399720E2351A3D5B4AA78487443
SHA-512:	34AAB376ABFC9CE5117416653466925E04B04771A7D2D6B75475EDC4A0967CAF4CEB822DB989C9C6AEEB10FFB89E18F6718B2C309EC14C64DF04735261280A69
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...\........X....IDATx...c.......qm.ym.m.m...&SO............;..N...=.,....g}....9.1...^18.38....18.s....n.[......Ik.V.zR..='.1..b..............gT...6..".....n].@&..Z...n..0...+.......s..O..6J..{,T{S......n{-.N3....1U.l.Kv....w...R..iTa...U.FI....d..............+.......D..fP.cd.pXK.....e...S.....IyP....q.F...}.[\.a-.O...o....r.UITze".Z.@%..S.eq..`.+....M......./7p..v,.4..,..B."...pD..q9$\|`.3.....d.p.....8...[NA.....P...~..............?}."......n....o.t.A..j.}p.5...4K]......}.../.. ..K...^.....x......._._.J....i7...`.;..R..........K..U.;.%......`.3...........Yw~H...R...,..5...#X....a.K}pl..[j.U.!.2.........w\|h.6..R.\|.on.3.9.y..{...&.....5.(..q.K...-.........R..2T7.......%8..m`.3......x..rT/.4..(N.}.P..BT.`..t ..8...f..!,u.1J5..R.M.)xJC.8.=e..B..`.+..........Vf.g.!,..{n.E..;3.3........V.....j.wp.xj..X..8..(}x+......vF/.B.....k....5I.,q...(JM....p..5....n.iGw.....:PF....&!..x..Q.v.]/,a.[....H.........}...wifJW.6Gt.[....

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	15132
Entropy (8bit):	7.984119472801533
Encrypted:	false
SSDEEP:	384:zYB1d3xTDBh5pAOPFqVI4MP3BEKdgxgmw:zYBvj6oqVIh3BYC
MD5:	562666202B48577FB503AFC9B23AEC49
SHA1:	D1176154791D82F981CB23351FCA51691168AD2A
SHA-256:	7932435617C301C4EAFB255B104C7FF4AC5D4712D68DB227CD9A7D07CF496FBA
SHA-512:	C072C3228C36E2A7C6C47B0D7461FB2AF65C78B626EC4830EDE3F9608B3D1A33824859E4D26E0CBB56C60C855D01A1C0CB3D1E447BBFF08ADC2103563E97955D
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/3a/e7/0b/3ae70be4-3e47-35bb-8674-cb45fe4a170b/pr_source.png/230x0w.webp
Preview:	RIFF.;..WEBPVP8X..............VP8 .:...........>.V.G....[fl..D.7`.....l.]....4..b~.._...G%....(...<{......W..C.x=d~......i.........O[.W.B./?f..~z......:E..........g..Y..wR..~I.W....;.e...w...w.x?.>...~..K..G.....E.....O.....H.C.!...=..Z~..:..8Y..e..G..(.n$.7`...^j...h.6.XR@:HE.gQD....~.)...y.~...\Q.._...Z._.a....:5..\jSA..6.p.@..E.)....w.....}..m......B.F....S...~A.cGj.....R.l.m..H.z..~.JW.A.qH..u...^.gA..`.!........ZGH.yC.HM..\|...c.@.?.-../.Z.S...(........]..Kz..1.Dp...]D!.........2.b-..8........R.2.....5..\v.3."f...........veu..sO.\.O...=.=....46....%e..]-.F...Q.........".....]o.KV.h.......O.. .u..,.O.;...w/.)..../Br7u..6. ......1i.F.kYs.e4T....8Un.w}..4.j.......u$.........Y......gF.......#.i...H..N..x.....p.)v......<...p..F3.X.8".....I.>..g.X..4....hS...\.-v.I.......q..OG...}{..9...&..N..+.6.&u.n.#..8.....Gq.u....0...u.=.GD<:.t7....a.....-...[9._]T...!.E....`...........e..1.....w.y%....0\..@%.j..}.i.J..:....?.y....\|....)......x.m.=L^....

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 140502
Category:	downloaded
Size (bytes):	12708
Entropy (8bit):	7.97880443442531
Encrypted:	false
SSDEEP:	192:5enfPdeBlrt5LecDLT68iTVs8XoTq8lUcnhJCSTyFWBvFvIzp8TgR3y1wHYG:4Xkzrt5LeCLSVtz8xC9FWxc8TiZHd
MD5:	22FC89B07D3463221776FE84924F0093
SHA1:	EC315241AF796928056AA2408759A5DD502A47ED
SHA-256:	E3327B49B4ABB4C0919AC93668E7AD15BBC6FBD3741FADB82A7DCB6D70175F15
SHA-512:	F612E6621D5B5FC2EBCE8E50A5C62050501D95444A3A70ABFAFB9C73FC5643B36124CD79A0041B54102FF2F1BD5556E62201230E9E0AE1368BA7C8D487F67C7A
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9
Preview:	...........}[..G.._......{..`w..1.......y..kG..I.....}..".d.M6.-vw..l...........?>.}C........h..p..Ow.$;..............Hn..........k........w.......~._............'w......,....oo?i..._~.I\|........o~}..[..D...O..?.......o....\L.........(.....z.K.5`1..K{.#.f..vf..&<.l....G.M...0._.\|z...8...R6%.+...3...r..O../.H..,....wc....~.{.]...!W.k...U..O.j.....N....2.S{....NW..6..:.jn....?.k.9t...yX._.(....Y.m.>b......_..?.}.dR....".x8.pSm.o....5.TS).E.#V....C.E.L.ow.\|........?....+b@...............'.O7.......f....Fw...T............. ...T.}.yg.....k.w.b....?.^..f.L./.......?}...u{..>}........Bc........J.^p6......e.Q...(./.C..J..eit.\......,1U.1....J.c........UlH..>.k..{X.t.j .)d...C.T...vZ."..w..........?S...O....y`...b...`~9r.K%........./1....Y.6....Z...+.M..5......S.d.Y.l0.B..rhc..!QJ.x.s.1..0.......XL.Y\(U^..d.k...F".{.N..o..Y....nf..1e......~....g....b}uL.L.Q(0..\|.vZ.w.l..VIp..bD..D.8..r....pY.d.yW.I1.Crr....D>.16OW...C.L.F.%....(Q.......-o.:.

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 200401
Category:	dropped
Size (bytes):	17388
Entropy (8bit):	7.987580630113294
Encrypted:	false
SSDEEP:	384:2crXYDzpzm5z0t0TJpNuYLv8V7xAA13zWHzj:2CUzpNS9pLvgAA13sH
MD5:	88C7CE379C5D6A55E0133A0B85FEAB54
SHA1:	AF1723D1CBFC88AC39B878645E82B1675D760F05
SHA-256:	38A05617438DED40DB7FAE3F70EFE9CD3ADFD0A14C0EC4AF08F1D73019A10663
SHA-512:	3877047FE6EA70C3371F55A922C85449B6CC958CF2D341E4058B4ECEC3A53BA2F65776EE44B4C36A4F8CD7029F3670D282B99C803A0625B8C158C36BDFA64220
Malicious:	false
Reputation:	low
Preview:	...........}Y..G.._..9..}..E.....=.v?.. ..eZ..K......9....A..z).I2..'.............<\|.`[.......r.y....W..G.G.z...T../...>...a.......7...[..?..z.../..w.~...<...Oo.}...?...>...o?. ..........z./..~..w..?..~..?o......u../...O..#...-...........z..6...4..G..._.~..o.........d.....\|k.od../.......Z......OvR.&..<5L.<..l>zee.#...../<...~..i0..x...h....w...8\|........xb....\.L.m.65..%)l..qPR..2.Rt...J.V.ZC<...m.l.....~t...N.Akn._.:..t>.B..t'C..R.1F:e..G........w..\|\.smu+.l..g.w......K..br....f..[.......o..Mf..i.#....6>;.M]...\.h.#..MqB...,.;.f......c...H.....<t.. .s..}...1%6 m~.........w..4.m\|.X.;<.........Ov..}..._}.....9.sg..h.tv..:v#.7.r.0=.f..I...xv...c~...a.t.?.4K.d+.\|2....{.9.h.<..._^I:n.........x.8.?.....9:..N)'.q.6...N>=K...W..~}..@g_..>..>...ex.#..j..].....}...G<.o.....>........\|...O.....\|..f..:T..4r....T...R/....J...JA...AeY..........~Wf.3.VW.......J.....`>....w.J.i....N.0.p,n.IG$..I;..3L..s....`R....0iw.&..4kJe.L._....v...[@.P.

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	157537
Entropy (8bit):	5.450896766346486
Encrypted:	false
SSDEEP:	1536:VcQ2UlYdxMXwcK2Bg6mqBhHPVy/ynVmXeXWH2H3i47UW4nb00pqpIReMaahQYg5U:f1mhfaahWIhsMkVT+BTtdOaBrdD
MD5:	E8E8B7A18F4EBDA24A25F702B22FA5C1
SHA1:	45DF73C1E3A0A3221A36654FCC46250E31D44C3C
SHA-256:	B740DD04F5C2A05AC983F4716999989B7A05B48C7E4717F77729B3DF19E97E3C
SHA-512:	57098BD96ADF38227E5B3C05CB1C715A9207F0BD4B198E3CF2B2A654D020BA3E0D65D04614F041E4291C86D928AB290619319C8C27F54D4563CBE71779568030
Malicious:	false
Reputation:	low
Preview:	(function(mt){typeof define=="function"&&define.amd?define(mt):mt()})(function(){"use strict";function mt(e,t){return t.forEach(function(s){s&&typeof s!="string"&&!Array.isArray(s)&&Object.keys(s).forEach(function(n){if(n!=="default"&&!(n in e)){var a=Object.getOwnPropertyDescriptor(s,n);Object.defineProperty(e,n,a.get?a:{enumerable:!0,get:function(){return s[n]}})}})}),Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}var Ye,M,ss,ns,Je,is,as,dt={},os=[],Pn=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|itera/i;function we(e,t){for(var s in t)e[s]=t[s];return e}function rs(e){var t=e.parentNode;t&&t.removeChild(e)}function Xe(e,t,s){var n,a,i,l={};for(i in t)i=="key"?n=t[i]:i=="ref"?a=t[i]:l[i]=t[i];if(arguments.length>2&&(l.children=arguments.length>3?Ye.call(arguments,2):s),typeof e=="function"&&e.defaultProps!=null)for(i in e.defaultProps)l[i]===void 0&&(l[i]=e.defaultProps[i]);return et(e,l,n,a,null)}function et(e,t,s,n,a){var i={type:e,props:

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15286
Entropy (8bit):	7.969171293122125
Encrypted:	false
SSDEEP:	384:LhEEnY6rtlrWDBX5s7eLvvRjx7HFYSTKavK4Pjwglq:NEEXrtlrWDHs7eLRt7Ha4vq
MD5:	5F245AC9016657DFAFCBDBF61B61E514
SHA1:	4033C942A333F667EF26C5D45ED5E233BD83B8B9
SHA-256:	006D88E7389F56F925CDAC325A2D6FC7956BBDCC30E46214BDD97B43274BD78E
SHA-512:	0BE5306B2867B719A1B6736784AB063A6186D7187BB5378FA225E4F6EEE5DB31E18A56FBF05F2874F02E52C028E74BFF6C3AB6854F9CDD821C80D7F8BC4BAA3F
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa
Preview:	.PNG........IHDR...............g-....bKGD............;kIDATx..w.]wu'.]...7..w.r........<.%a.!C....H.2.x..6.a&.T ..f.6....c[.%....9g....{.v..+....9{......w..[.X.eZ.eZ.eZ.eZ.eZ.eZ.eZ.eZ..@......nF.;5.[.f+......b8R..4.T...G...;..2...xZ.s..lCF?......,.U...jD..B.J.J2..Q..fB.....~.}.G.c.?...l>.Wo^... ....-N..k_.2..1.t.,...e@?I.......T.PrJE..O.....).h/8....}......S..5.\.i.^E..@...k....L..%(.>.......<...2..2]{.n.....u...\q.GA@.E$. ....D.Q...N...P.K..T....Q.}.......J:@.... Rb%...I@.v.S....-O..`"R....{..?.\|...3..]{.M........-#..t.....l..:G$..A. ...!..G....!.?....!B.G.F...a.!...2n..)A...D. c...c....... ..U.....G....x....w.'..oD.I...[........:.EQ...$..`&.a..z.HD. ....\|_...T(...!.0D.$....q-.n...s.RU%.M.1.CcC...,...,....".#.A. ..a.K.gV.o<..3.X.....]...&...e....6aEg.......A.....,.:.g..P=/@..X*.X. ...en.!.".. ..Q..2..e.c....m..q.:6.)....)/........hE..]...1...=8z.......>........;z`.ce.k.../.......c.....6fA._T..<...&.....V..r.I..N..rm.c.8d$..b.##c(...6.s

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 84899
Category:	downloaded
Size (bytes):	10147
Entropy (8bit):	7.978558662114035
Encrypted:	false
SSDEEP:	192:lpDRXgHvBXf1MMxURXLOq7Xq3y8CVUUkeJGyCgBikBflL+ubMrThh4c:TVef15xURXyqzky8stJG8bRENhL
MD5:	4C55012442A6CC9653DCADBBB528CD22
SHA1:	AE83B62952FF7E4428C85793289D7423ECE52F05
SHA-256:	CF2D5FBEE6986544DA6202828C01898BCB8E8DEBC50611E0C7433E8066834C61
SHA-512:	99FBF683182B1BFA806374068A6BC857419BE0BFE8D582056D8F709A0FA6B0B9E5EB285661C419246C20C66B0E1A8DEB7E026B3FF5D137D0FB4DCAC608880E09
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23
Preview:	...........]Y..G..+F?..y.~[....4.`.'C.d.mi.: i.k....."...b.]$..\30.,......q..n>....[...........47?...6.....o..[.......[.Ms....5~.L......._....?=....../^...>....#&..?7......=S.....o....z.B ........?.<..O.....}.....^..+~....\|y.?......w...'........57.W.[o..6.C....C..u.w.qQ.9.F=.o.A..U.b......8K..N...Tj8Q7/..Xwb..O...?@.... ..Go.....vuc3.+...9....%...;.....7....o..._....t......=.z.05.%.LlI?\|.:.6L.n[k.}3t.."...Z.6)]&IG...qz.Y....X..t..'.c.$_.~..o.....-..*.....w..<!.........I.U14&.6.]........7...`.>.r\|S...>....G.m...A..>....O6Z.fc".....u..o.~~..........o4.z.......?...6.........-...>..I.....?...............^.~?.\|.G..P@s.~..L.....}x..H.....o>.....OOw.K.+.X..-.{,...&k.........r..O.w=_:.>...{R..1.6..r.}y"8.Wo........v..}..Z..;...7$..#.z./J.e...........lc.ksr...0.&Zr.o..._.....Rk..;;.M...>...{.........#GW.wt=no.. G.6..l#..Z.lRX...g.}H.\..\|.W...x....o.=.......ck...\|.uk.N.m'o.../.2.3.>....9...c\I...X....,.e..U).=..A....c....0\|"....Q.... .M`.^=Z..l.3(....

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2736
Entropy (8bit):	7.888672904591039
Encrypted:	false
SSDEEP:	48:BK1HWnHDzfSaW74XQ5rNEl7f7XFAURjnLavPno/oBVH6+4:BKGHDzS50XQVKl7j1bLano/orU
MD5:	61D430EFC5C9393A5075374CAA663D7B
SHA1:	F07F2510BDDDA140BD690269CA5D40EE48749BA0
SHA-256:	70E50F9547C2472C5403F4C514E075D6FF1DA93DD55773B7029CB4D53ACBE83D
SHA-512:	07D9ABEC9C9033061936BD3FFADE82C35AE900CF7E311E2C2AF98C920EACB34FFDAF5B5C4AB3F7E38F1151C6475E70D00C3DE6E2C8A0BF26C827D9C2764EFD02
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/95/c8/39/95c83924-7e67-afff-aa59-c913cf2495ec/AppIcon-0-0-1x_U007epad-0-0-0-0-0-0-85-220.png/146x0w.webp
Preview:	RIFF....WEBPVP8X..............VP8 &...P/.......>.T.H."...=.D....i..?...~........T.9m.B..[>.?WzSy......Y...+.WQw..K7....g[C..{...^W(......C......6.....t.N.;m.H.YzC-C.......vF?......d1..}.....V.6.%D..F.=D...=.H..=....>.w~p............o.EG..K.....3...\|...-...C. ...%E.u3...iX.N-..^0....<<.Nn..;..3....X....5......jV......jp..r.^........\|w.k.an.sk5%...b..~.].{....<'.U....x.G...W...r.C?0...........q.&.c....9.t.l.hdR......q.K.P......)c...9Js%.2..Z....Vl.X.$Yrbo..k<&..OV..p.'3K..%..\A..p}. ....1.xL.6...c..L..C.`.s..+.T.VW.....w..x..@....?{\|.\-2...]...B......ad..]........tZ....M`....D9T\kd.j.".w...?G...~..Z./......k.V,.`..}9.s.N...Q..ok......~....J.t........5...!U....F...]J_.}..@..s.X....ZF.:...K..#.x......s.l.7.8^...7......,/.7XQ...W>.Oq....L.7...x.}..+,..\|)...9..g,{.TV.Y.1)y.b:.M...~.....4../..p.....S.......A`..mJo...@......k...../..L.Bu.k.=)..2.....Q.f..l....."1.f.....!..O...@h(..U..xb.X..$W.....Q!.d..%Cr..,.L>..*.......~.....

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3003)
Category:	downloaded
Size (bytes):	18440
Entropy (8bit):	5.255534167782927
Encrypted:	false
SSDEEP:	384:kz8E0CXVpU4y7FeTEkrHfcBkoNiIvYcaSRCF+q4nAHY+6dDlqW1hCSallZsWY:kz8E0CXVpU4y7ZkrHfcBkSiIvYc/Re+J
MD5:	5F765A4A59A407D5DAA33CC0B48F2A35
SHA1:	44E29FDCCC78BAD49465D30F2AD9D5DE816AE150
SHA-256:	5C98E1CF88ADBADBE52321041E084AA2D5BC4DAAFFBF8EC6C45A438E8D393202
SHA-512:	ABD01A44A94A0BE2B000DB5BB60A439AFDA8948B32B3F0685AC9AFE175EC9E3701C3747457BE42032C1EA0707AF02109D46187FCA39F2815BD8AEDBBD365F38C
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.934.167974858ffab5c06580.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[934],{7934:function(e,t,r){r.r(t),r.d(t,{default:function(){return W}}).var n,o,a=r(32722),i=r(24178).function s(){return o\|\|(o=["app","appVersion","hardwareFamily","hardwareModel","os","osBuildNumber","osLanguages","osVersion","resourceRevNum","screenHeight","screenWidth","userAgent"].concat(["delegateApp","hardwareBrand","storeFrontCountryCode","storeFrontHeader"])),o}var p,c=i.SC.attachDelegate,u=i.Z_.cryptoRandomBase62String,l=i.Z_.exceptionString.function m(e){this.setDelegate({topic:e}),p\|\|(p=!0,s().forEach((function(e){m.prototype[e]=function(t){return t&&t.hasOwnProperty(e)?t[e]:this.environment()[e]()}})))}m._className="eventHandlers.base",m.prototype.setDelegate=function(e){return c(this,e)},m.prototype.topic=function(){throw l(m._className,"topic")},m.prototype.environment=function(){throw l(m._className,"environment")},m.prototype.eventRecorder=function(){throw l(m._className

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with CRLF, LF line terminators
Category:	downloaded
Size (bytes):	35798
Entropy (8bit):	5.362239652266183
Encrypted:	false
SSDEEP:	768:xLV9hhNz5ouQq7vDsCYDHlo+yg2GsGsgo4ST5dX4+eT7Fi8mR5lfKGiLHCWtvdTZ:e
MD5:	3AB3496A7BFE9321B3FA0E2FC8668B14
SHA1:	EC704CA797F15BCDC6DE9AF8AB9F8311EB82B2A4
SHA-256:	E321803AB120C94CFFB459955214D4F783D14653749A9D9E01D5E81C5358C8D4
SHA-512:	1DDAFCEB91F8AF68ADDE9686537147615BD504D38FE24FAC13007DA412A58686D633A09A2E629B79297A826524D10374058E1A1178684C45D43795A62992E63A
Malicious:	false
Reputation:	low
URL:	"https://www.apple.com/wss/fonts?families=SF+Pro,v2\|SF+Pro+Icons,v1\|SF+Pro+Rounded,v1\|New+York+Small,v1\|New+York+Medium,v1"
Preview:	@font-face {...font-family:'SF Pro Display';...font-style:normal;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.ttf") format("truetype");.../* (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display';...font-style:italic;...font-weight:100;...src:local('.'), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.woff2") format("woff2"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.woff") format("woff"), url("/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight-italic.ttf") format("truetype");.../ (C) 2015 Apple Inc. All rights reserved. /..}..@font-face {...font-family:'SF Pro Display 100';...src:url('/wss/fonts/SF-Pro-Display/v2/sf-pro-display_ultralight.eot');.../ (C) 2015 Apple Inc. All righ

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 107832, version 1.0
Category:	downloaded
Size (bytes):	107832
Entropy (8bit):	7.998208221352974
Encrypted:	true
SSDEEP:	1536:rbxyXX3FkzPtA4ze42dWs8sIQ6Y3SQnCvy7gALT4I073hT8k32wl0JvGdUB4x:rS1kUx8siYiZv+n4Ie82jBdUB4x
MD5:	2D753DE71684CC6C73161B6FE0C5A11C
SHA1:	B9B14B843008B6C9E8D6E933DDF52587CE0E32D7
SHA-256:	DC0663A7522F9A0A447DCA9A60A80275EA5906DDE2159B24CEA94A96D81DEE0C
SHA-512:	ED6FA0618E66A26107FCD828CDAE61C623C0BA6A0EF3BF6F49C1382ECB6A327D20A73A1F072E9BE6C2074DF6390D4DB17AD747FF7E7D64F66E1C25515DDD1E56
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_bold.woff2
Preview:	wOF2.......8......}................................`..H.`H...X...(....6.$..$..(.. ?meta....@. 8.t[.{.......}......R.Ju.1.u..WP...D:....:.v..{d..J:#.....T.nC@g.4.Q...........,?..{?...$.. V\.V@[.BH..2.b.!.U....9.....L....i6..9.\dYR8.......;un.5...(.."...b......pK....%9.gR..Aa.=......y._&.z.s..LnU...!_HJ..'[....x..Z.....to!.>.....c.J.....O....D..wz.K....Q)Gec..[.. ..#:..T....^6..\..ap0W./..n.(...e....^r(......~i!..\....7d..Q.x...%...RQ...]....]`...N0......G.W.Z[B...Q..8..[k...u..I..+6X...IHL.V/.o.y........s..::.9......._(-"~..Uw.Y.Q.^5...oH.O.=.F...>.W....{..~SX..d..T.k ..^..a.u..&...wH...>....xp.B./T..........K..w5.7......IX.....V.%.J.......!Y..y]...-..w..N..Z..;<p,....q..8G..}.g..].CrP..TK..QL...h.Lno..5%......4A A.-t....~...O.z+.K..?.".....qn......O...}o.]@..B.....sz.^.....#..`...C.{.....D....1=.c.,.X.......hn.H.VR..2A:..c..V."..a..F..*..E,T..(..y...?s...y.V...Q.!q(H.B..ZT..jc.~...:@u..=...D..d,.L..............O................

Chrome Cache Entry: 141

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 2979
Category:	downloaded
Size (bytes):	1521
Entropy (8bit):	7.869533935472937
Encrypted:	false
SSDEEP:	24:XNYO+fGvuqeErDHqlaxe5mCucAX+QYP5vwK19cnQmbQ8rCog4IY7TVhs7NOookQ1:XNt+BerfxymCrK+TNwKOSlGVhawooDfJ
MD5:	9E8C00568FA549AEBB47100255D258AD
SHA1:	1F544022455F8B176CF0936E77D2D2A2E15F75A7
SHA-256:	4C115EF36E48C9AC331CDF8DEDC8956E0C28BB7079B909AAF0555F1B6DAA5179
SHA-512:	082F9458EEEC9FC83E0C7FC81FD898DA11545B9D2D465AC25B0EDBD763D07A375BF49BB1D234C44AD2C1EE41F916C34B286A45ADEA7B189CFAD9500A34E7A5FF
Malicious:	false
Reputation:	low
URL:	http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/tgwallpaper.min.js
Preview:	..........}V.s.8..+-w..0..$.(.4M.i......l....0...~....z3...~+...2...2M.r.r1XdQ1.d.x.M....7....P..v4."Y..F.......b...'.A....z=.@.;.H8At...E.D...Y......X..3..o..I......q..:.8..........Y............bM.%k4:...M..T.M...-..neM.z"G.`.5.R.....BO.....&Zj.Z7+k...9.......u.[]`t..w.wK-!..s&..H.N>.,><../..p..N.sN.K..u..IoA.X....v..B...y\|d..-...FcI.s..b...F<w..?....l.Np.B`.kJ.?z.Q..=H'8.4....(.c.p)^.!O..a.I.`u.p./X.k9g........e...V.s.,J..o.B.K....3..G.>..%Q...\.B..P...d..}......<...gpr.9..3.2v......n..Z$f.%h.,..1.......M...Y^..9...@.e.m.t....2....h2.....9....r....9.m....J..@...+...>._....b.......^._.b\N7...6v.~..{..5o..)...An..`..\.By.......j.....F...b..M.W....,.U...\|...a...Eqxg....:.o..q.WZ.4.tp...Z..Nn.S..MV....h1VYa'r~.......~w...t'$...}..>......Bi.wI....p......H..Jd.4.J. Q&z..=.............&oblq....?...:....n..-.u.6wO.{.........c..=.S.9.KC....q.....=.x...#\|..M.7..."\|..-........M.6A..4@.&p...%.f'}.VPI.d.].....+.M_3~..f.jW..;.E..r.....

Chrome Cache Entry: 142

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65428), with no line terminators
Category:	downloaded
Size (bytes):	254982
Entropy (8bit):	5.609031666548789
Encrypted:	false
SSDEEP:	3072:7e4OFCEzEwoEHeZi1fivlPqPsw5Prq9Ay+T8EBWBbGi0e1tjn7MqvHkaFBjZWd:U3TRsw5Prhy+T8EYpj0e1tXMqt9s
MD5:	052D0B2ED0D6485AA3EA9846FD731F67
SHA1:	48EBE01DD5EE0A7B9C987AACE7DBADE5398161BA
SHA-256:	D5E70F36B55A5313A5E503828888A2AE6C545AB4B3EB795F3A8FFB0C659A0CF1
SHA-512:	5D7DC9077000516DCB4E316AC3295ADA0FC3DE857E89B56735877AF2FB4EB97C0DE6DD8266598C1B97517E200A8DE4A39DC73B69F04F1537A597F667193BF07D
Malicious:	false
Reputation:	low
URL:	https://amp-api-edge.apps.apple.com/v1/catalog/us/apps/686449807?l=en-us&platform=web&additionalPlatforms=appletv%2Cipad%2Ciphone%2Cmac%2CrealityDevice&extend=customPromotionalText%2CcustomScreenshotsByType%2CcustomVideoPreviewsByType%2Cdescription%2CdeveloperInfo%2CdistributionKind%2CeditorialVideo%2CfileSizeByDevice%2CmessagesScreenshots%2Cprivacy%2CprivacyPolicyUrl%2CrequirementsByDeviceFamily%2CsellerInfo%2CsupportURLForLanguage%2CversionHistory%2CwebsiteUrl%2CvideoPreviewsByType&include=app-events%2Cgenres%2Cdeveloper%2Creviews%2Cmerchandised-in-apps%2Ccustomers-also-bought-apps%2Cdeveloper-other-apps%2Ctop-in-apps%2Crelated-editorial-items&limit%5Bmerchandised-in-apps%5D=20&omit%5Bresource%5D=autos&meta=robots&sparseLimit%5Bapps%3Arelated-editorial-items%5D=20&sparseLimit%5Bapps%3Acustomers-also-bought-apps%5D=20&sparseLimit%5Bapps%3Adeveloper-other-apps%5D=20
Preview:	{"data":[{"id":"686449807","type":"apps","href":"/v1/catalog/us/apps/686449807?l=en-US","attributes":{"distributionKind":"APP_STORE","supportsArcade":false,"familyShareEnabledDate":"0001-04-23T00:00:00Z","isFirstPartyHideableApp":false,"privacy":{"privacyTypes":[{"privacyType":"Data Linked to You","identifier":"DATA_LINKED_TO_YOU","description":"The following data may be collected and linked to your identity:","dataCategories":[{"dataCategory":"Purchases","identifier":"PURCHASES"},{"dataCategory":"Financial Info","identifier":"FINANCIAL_INFO"},{"dataCategory":"Location","identifier":"LOCATION"},{"dataCategory":"Contact Info","identifier":"CONTACT_INFO"},{"dataCategory":"Contacts","identifier":"CONTACTS"},{"dataCategory":"User Content","identifier":"USER_CONTENT"},{"dataCategory":"Identifiers","identifier":"IDENTIFIERS"}]}]},"contentRatingsBySystem":{"appsApple":{"name":"17+","value":600,"rank":4,"advisories":["Unrestricted Web Access"]}},"deviceFamilies":["iphone","ipad","ipod"],"chart

Chrome Cache Entry: 143

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	11234
Entropy (8bit):	7.9791374671658994
Encrypted:	false
SSDEEP:	192:gVjehewURUK8NHkM0YKAHE1nsh8KN010pvHwNJ1Cs5kGUCwwzmLM69WAhP1H:gpbwkUtFkM0TAk1nsh8KNEyv8XCs54wS
MD5:	672123E831A5CF8FF55A14C61B176627
SHA1:	27A061E36A415F1332AA105CE06C6E166B63BE25
SHA-256:	7CE3A62DBBA1FC658B52CB69FF64CD8957917DF707EDBF464AD6142C459C8004
SHA-512:	201860C92BC8355D9D681EBB38B4D8F77848EFECE406A3BC230DDB218A74F0FC0944E1460253DD526F26F8A4AEC00D64D35A218F6C10228001DA31BC42067C75
Malicious:	false
Reputation:	low
Preview:	RIFF.+..WEBPVP8X..............VP8 X+..p........>.N.I$"#..V........@M-h......Pf.{......V...~......8..}O.e.A.....g.....W..@?......\....c./......._....G.O......y.~.8./.{..)./..]}.^.......~.(.......G.?............/......)~^?..g.K..`...........%.t.<......B.......7.f.>.O.....= ..s.;N.R..lXD.,..TJ.m.uM\A..1^.e...E.2.y.....M...RQ"&....G..K.b..7]jNIF}....T.7......._UN.\B...U.1S....G[...A.._..k...>P..'...j+..90.V.dz.p......r..{........\c...d.m.n..j..)`..o?.qp8..J.j.9.>.M.i~G..6.2L.4.4<G.c..Q.hj.:.&......D'xw....3.kd...$....9.9.3.Z8.8...>.+.K.#.r3":h8.....J........x4=.a....N.9.....fI.A.w...4..X.5.j.yCq......1!.E.3..]........<...?j.Z.(....k)W....&;..%.A.yR.....y,J1.4.=L..#.3...`..VQ.].#g.^NNp`c.....<4h...G7.z.Ms.I...u.0..A}..H..F...3.2ed...@.dn."..1........zH...v2z."...\|...h.Q.\).B.@.>.....[7d).C>{P..._X.>MTW~..vYY.......W."5......^L...JiX...]K..n"...,.q..i..I...+.f.=}G.YdU.N.>.....q.&.....cS....H._....2}nN..c...>...sN..a.j...{..j...ADk.--.

Chrome Cache Entry: 144

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42164)
Category:	downloaded
Size (bytes):	42523
Entropy (8bit):	5.082709528800747
Encrypted:	false
SSDEEP:	384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH
MD5:	C2656E265EF58A9CC9F4B70B15DA5FB9
SHA1:	85C5EBDB89D4574D72688C2650D4B84B9B09770A
SHA-256:	F1D083FFAA644C708F11DB29707AA57C19246E6D32643B03FEE3F82C17B224B3
SHA-512:	6417AADEBEEF4EE35381BFC7034148D57FD061D84DE9974D798468C6426C24A6BD1C9913CF517ACCF3E349FA06CBDD546D2883EA8391C595285FE0C6127E26E8
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/css/bootstrap.min.css?3
Preview:	/!. Bootstrap v3.2.0 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /../!. * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6). * Config saved to config.json and https://gist.github.com/92d2ac1b31978642b6b6. //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{fo

Chrome Cache Entry: 145

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12513)
Category:	downloaded
Size (bytes):	13517
Entropy (8bit):	5.314863543101727
Encrypted:	false
SSDEEP:	384:8nlFipHnQ5/BRZJ/bzwT62waHKsR5ssRaREW+ou:8lF2HQ5JRjbQw9sRasROEWY
MD5:	24F387A60FE0B05A15426D721C397D47
SHA1:	012EB578C3C097193F20F123732AC646D2800096
SHA-256:	6AD8C8A703856136FEA1D1911FE8C0E09BCE87EDE20F4C8B98AB8F8961462738
SHA-512:	787E1A2BCCBCD973135E53B53FA5BC89E59AC277D95F30B0595B225667B1F0DEB6616914915200ABB6E522DDEA144E2EEF140876CA502D1317E13E86E63DA9A1
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//p-1ec6e574.js
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const e="musickit-components";let t,n,l,s=!1,o=!1,i=!1,r=!1,c=null,f=!1;const a="undefined"!=typeof window?window:{},u=a.document\|\|{head:{}},d={t:0,l:"",jmp:e=>e(),raf:e=>requestAnimationFrame(e),ael:(e,t,n,l)=>e.addEventListener(t,n,l),rel:(e,t,n,l)=>e.removeEventListener(t,n,l),ce:(e,t)=>new CustomEvent(e,t)},p=e=>Promise.resolve(e),$=(()=>{try{return new CSSStyleSheet,"function"==typeof(new CSSStyleSheet).replaceSync}catch(e){}return!1})(),m=(e,t,n)

Chrome Cache Entry: 146

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format, TrueType, length 10380, version 1.0
Category:	downloaded
Size (bytes):	10380
Entropy (8bit):	7.960698675136466
Encrypted:	false
SSDEEP:	192:wTBTIh6auIWVQOv4Rh3hOpcN+Ho5E9Qdyi1vBH5eITpvRCobJNblSq/:wFW6aQwRFU4cwNdyifTH3Jd
MD5:	9CACA193FE7BFF016EF17E26937711D9
SHA1:	121E523FE8F27D18017C2F7A056F2F14BF43BFC9
SHA-256:	3B7D2B4C5417A697678081ED3B344955F0B25E694171178B0C01E029B4A18E8B
SHA-512:	280F17FBEFA9682CECCDAAEB9D4CB5B283F22F3B403FC03420FF3BB51084F8820AE726DD6D3F3308D0EB2939E1A067C28F6F466AD5E7C736A79FEC85AADD2E31
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Icons/v1/SFProIcons_regular.woff
Preview:	wOFF......(.................................GSUB.......;...T .%zOS/2...D...D...V..pWcmap...........p..$.glyf...t...O...l...^head......./...6...Chhea...........$....hmtx.......S....64..loca...d..........Xmaxp...<....... ...:name...\.........S\.post..&8...Q....Ajkx.c`d``.b0`.c`rq..a..I,.c.b`a...<2.1'3=.......i. f....&;.H.x.c`d?.8........L..F9..\|.!.I........+.HsMapP...M.....y... 9.'..;x....R.W.......{.AH.&(.%&&&j..{A..QI.$.\..+.r5.....=]....Y..+..8.Pl...-..h.....i.;.......J..y.......sft.M..f..e.k[.....`......mh'...G..~..5..'..7o.g...nr.........Xc..l..#..l..3vx..^..O../..+..M?];.t..g.>.....1....1.o....9.a.9...\|.\|..G9..\|.<.=.....%Nr.e..4_..g...8....9.s..Y.".....r...`...?S..>z...^.......7..=..N..%..Jk8..f8#..pZ(...P:...t..D.........'.4Jo8s..p.(...R......I....2..+e$.\.h8..p.)..\S&...L..N....r .....&P..w.r8......Q{@..].......>.fx.P[x.P{x.PG..Pgx.QW...;...'...7.../...?..h ..h0..h(..h8..h$..h4..h,..h<..h"..h2..h..n.pk.#A=....lP..zv<.3.D.q.B.{.b...R....p3.S.B..B+A

Chrome Cache Entry: 147

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	40459
Entropy (8bit):	4.798286125995551
Encrypted:	false
SSDEEP:	768:a5p4kU2EQo46uWNYFJ1mv+ZNrMUVfL4k3pY7jVSHUo6eI:a5pQ+LPmL
MD5:	370ADA40BB8BF310DD575C8F8A362174
SHA1:	2A51CAE73AFEFE0B85A305F9A401AE8A851C0309
SHA-256:	81468C594E7DC48E359C19D663B543AE2F174185CAFE6C4E6441F931423E3E77
SHA-512:	F54422269807BCEBBB4CDC1050A49FF69E977845E907883B08F3F2CDF2FE5BCD64672715061066E9ED17B3955BFDF0B99348604CB36D4C1150AB683A1FD076E3
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/flyouts?locale=en_US
Preview:	[{"id":"3d39a8ff","name":"apple","analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"8543e00d","name":"store","baseGroups":[{"id":"e6569ea0","title":"Quick Links","analyticsAttributes":[{"name":"data-analytics-region","value":"quick links - store"}],"baseLinks":[{"analyticsAttributes":[{"name":"data-analytics-title","value":"find a store"}],"text":"Find a Store","url":"/retail/","ariaLabel":"","id":"a45bd4b8"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"order status"}],"text":"Order Status","url":"/us/shop/goto/order/list","ariaLabel":"","id":"a361d2b7"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"apple trade in"}],"text":"Apple Trade In","url":"/us/shop/goto/trade_in","ariaLabel":"","id":"ca9b9af6"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"financing"}],"text":"Financing","url":"/us/shop/goto/payment_plan","ariaLabel":"","id":"db0704e3"},{"analyticsAttributes":[{"name":"data-analytics-title"

Chrome Cache Entry: 148

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 442x270, components 3
Category:	downloaded
Size (bytes):	31305
Entropy (8bit):	7.8603716620080535
Encrypted:	false
SSDEEP:	768:3OqzWWjlwuxS+TRqYXz7xlPcuYq8KkTwWq7Pku4kz2R:3nr5zdPn8QSkz2R
MD5:	89486A05599A1CFD549F8FB2D70E7D73
SHA1:	24867697525DF19B88E79D75FF32384EBA57B321
SHA-256:	5A2C666B6E4F30FF921353CD9A3ECCC09B9314C5C5AB11E1A3928936E497B2DC
SHA-512:	BF59EA2F4CDC21464BCE9ABA5401C5DF0522769F998B432DBC79E7863737B87521E0FAA7501DBCE72115B256A181B6DA2C4F2FDBCDFF3E1ABBD4F73AC3177714
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/SiteiOS.jpg?2
Preview:	......JFIF.....H.H.....@Exif..MM........i...............................................8Photoshop 3.0.8BIM........8BIM.%..................B~..........."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()*56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?.....(...(...(...(.........I'..._......._.....9.-.Isv....m.7Www. ..@.(=...3.+.......\|3..<c..../...M.E.a..........t-;....T.[..\.......3..........X;.J..3.....3..j1>g_....).F..x.[6R...N..~.Cs....a..d......_......G...q.........\|S...;X..V..b;..

Chrome Cache Entry: 149

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21478
Entropy (8bit):	4.9401794405194135
Encrypted:	false
SSDEEP:	384:FCxaBo7s5dibe4UbBHasovLi1xPSoGBejIfD5FQhPOwIc:FCxko7UALi1xdGFTcIc
MD5:	4C9BA6B680FC51B6E5BD4217A1550C88
SHA1:	3FA0E7D643CC1E3008E0FFEBA46A1E3682E2EAF7
SHA-256:	51C4D88FD78F3B8EFB16F845E75BE7F1BB288FDF2FD39D033868A0346DB7FADB
SHA-512:	42706B3E53134B3EA0FCE3A5775D8929634EAB202856794D6E5E71FFA44B83487AA992D3D933FBE2BD5B2CF084F20206EE13BA904A713114E566DA6474A8C3D1
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/js/main.js?47
Preview:	var startTime = +(new Date());.function dT() {. return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';.}..var jsonpCallbacks = [];.function twitterCustomShareInit () {. var btns = document.querySelectorAll. ? document.querySelectorAll('.tl_twitter_share_btn'). : [document.getElementById('tl_twitter_share_btn')];.. if (!btns.length) {. return;. }. var head = document.getElementsByTagName('head')[0], i, script;. for (i = 0; i < btns.length; i++) {. (function (btn) {. var status = btn.getAttribute('data-text'),. url = btn.getAttribute('data-url') \|\| location.toString() \|\| 'https://telegram.org/',. via = btn.getAttribute('data-via'),. urlEncoded = encodeURIComponent(url),. popupUrl = 'https://twitter.com/intent/tweet?text=' + encodeURIComponent(status) + '&url=' + urlEncoded + '&via=' + encodeURIComponent(via);.. btn.setAttribute('href', popupUrl);. btn.href = popupUrl;.. btn.addEventListe

Chrome Cache Entry: 150

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	11343
Entropy (8bit):	7.967755371327097
Encrypted:	false
SSDEEP:	192:5BkxH7mNBqw0b+7h5tyiS/5Z3LeiTLgrsPGLR66oy/PtnBpLghEr/RKlfPs9yMHk:5BGKrr0bkNyiqZ3LeiTLLm66NFBZgWru
MD5:	4E06D87C860BA8E8A804350F42632217
SHA1:	31D3F89AE95D6F25660020B21E49114AAECFDD59
SHA-256:	6B081CB199E67A43DDCD7DDAC0B528C93CC72BB82641937368A41B0AECE43125
SHA-512:	C28516686E07C341DBA58B28C8185AC31FF479D7B4F8D081CB50B395C6678E353B8D0D00E3B21185DBCB6484F81A354170D403B8B6F6E7EFE8D73017D1D681ED
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............,.IDATx..w\|.....<ef.Q.Y...b....Z.f....K..f.lX..C.....n ..-,..w.)K.).B.i......E.mI...O9..cF3.Y.%[......h.).~........J(...J(...J(...J(...J(...J(.......M....y..bb........H.(...."......G>l......+`.1....D0.Q.R.K.,".....B;.7I.Y"<g...}.{[.S.`.pnc.$.NV....Q.O....Az.....vv.x..:74.Q2>..s.x.^._U.<C._).."k{_.Q......8l\..yD.b...A..A1.....(J ...B...^....y@..8...: ...x.@>..mv]....B.f...........q".G...P-...P=.~G.'......t@.>.t..<x..{.\|.&....Z..7C...8.JWA.!"2F..a....f.dN.p.1.: @.t..~..H...>.~d....e..C.gR...-0.7...Ih...k..=.....-....9..D..wmS.u_..g..z'.w[.2U.zx$..Bs..r..`L.t.[`/...... ...^..t....&}H....GhEU..z.].u..#N{...O..V..Z....3A.Mp.1..N.f.%....... ...}..{....;&\|~..E.@RF..6.^d]............\|5._...5...Y.I...%.+....?..A...0....mB.>O.-...."T..{%].....7.qN...#":..}...Z0.[S..i.........F-`4....31....'!......iz..)]....A..3...*.XW....p..{}.iBtG0....KL.J.d........a...@.. .z.5.)A.. =...~..G...].F......O._..v]...'..../Q..A....8

Chrome Cache Entry: 151

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65005)
Category:	downloaded
Size (bytes):	696227
Entropy (8bit):	5.38605387106501
Encrypted:	false
SSDEEP:	6144:MGryUmPKObVMvcDMbtZNNVJKEq5f+dtaL6rHYGd/0GOCl/FQ1:TryUmiObivKMJZNTJKjp+dtaLq/FQ1
MD5:	90ED61CCFDBF59C72D9D5422BEA4C15D
SHA1:	DEC09B632108E19481F94F9CBD378E7AEB11452F
SHA-256:	6604C5A7BFA2E3F142248368D7C69135A8191D03C72D1024807150C32F4E8E55
SHA-512:	E99CFB370A8AF78ADA7252C5C28756731BBCDB28B71C7B671473C461BCF76A6147111D585A89631CEE3A0F693D45F7A9D3DC7462790EF8048631D96C457694D3
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/amp/musickit.js?t=1726695429822
Preview:	/*. IMPORTANT NOTE:. . This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. . ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. /..!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((e="undefined"!=typeof globalThis?globalThis:e\|\|self).MusicKit={})}(this,(function(e){"use strict";var n=void 0!==typeof self?self:this;function formatArtworkURL(e,n,d){return n=n\|\|e.height\|\|100,d=d\|\|e.width\|\|100,window.devicePixelRatio>=1.5&&(d=2,n*=2),e.url.replace("{h}",""+n).replace("{w}",""+d).replace("{f}","jpeg")}const

Chrome Cache Entry: 152

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	588
Entropy (8bit):	4.891214981444774
Encrypted:	false
SSDEEP:	12:tc9ptxMwllHVjfiva4/ZPdtIdLbPYovbIdMP1g1IdO2d4IdOPizL:tc9ptxMwllHVLT4/ZP0xPYSsKP1gC42V
MD5:	EC0707C56BC834ADF5DD504C555D4982
SHA1:	B04EB2CC743F5E5E2BC4B351099BE50020EAA53C
SHA-256:	4E1DB999FEC000326552BE3E141AF46AEC9B23664ECF9B41E831089E5DF0E4FC
SHA-512:	D27F3CBB4FEFE2A3C538EF94EA5CC568423BD98AE3361B45F7E47EAC98D318DB741D08344B5EE64DC492989486C62925847043E72AC4CDE54C96B279F4536BE6
Malicious:	false
Reputation:	low
Preview:	<svg viewBox="0 0 125 23" xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" fill-rule="evenodd" stroke-linejoin="round" stroke-miterlimit="1.41" clip-rule="evenodd"><path fill="#8e8e93" d="M113.5 0L110 9h-8l6.63 4.88-2.62 9.12 7.5-6 7.5 6-2.63-9.13L125.01 9h-8l-3.5-9zM88 0l-3.5 9h-8l6.62 4.88L80.5 23l7.5-6 7.5 6-2.63-9.13L99.5 9h-8L88 0zM62.49 0l-3.5 9h-8l6.62 4.88L55 23l7.5-6 7.5 6-2.63-9.13L74 9h-8l-3.5-9zM36.97 0l-3.5 9h-8l6.63 4.88L29.47 23l7.5-6 7.5 6-2.62-9.13L48.47 9h-8l-3.5-9zM11.46 0l-3.5 9h-8l6.63 4.88L3.96 23l7.5-6 7.5 6-2.62-9.13L22.96 9h-8l-3.5-9z"/></svg>.

Chrome Cache Entry: 153

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	16465
Entropy (8bit):	7.966528714713492
Encrypted:	false
SSDEEP:	384:4/zugvMc/z6Gaq5iFvJBOqikYcWOFKOX7AtgqHJVw:4qW6UgvJHikXW27X7kJm
MD5:	77FFE8B3DFF795EA0734BF4B35A94357
SHA1:	2D545FFB0877993DD227D528638A336CD3B9E32C
SHA-256:	AD37907E335E7C5D2692B682401F4520753AB539FADEDF74962C6A004B3A179F
SHA-512:	FB4692716BADCB1FCE73ADDB8ECBD16C7158A8D0618B3BF3B1833661A3813D48500F8C96972C9CBC2F5EE9DBEC1CE6F0450A6445A3CA9635FE2B3ADA9A50B206
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b
Preview:	.PNG........IHDR...............g-....bKGD............@.IDATx..w.]e.?.Yk.....Lz2i.BH .D. ( M...(\.]..X....\|.._..]....i.P..d2....Z.?N.3%.L2C...<.9g....y....^.JU.R..T.U.JU.........,Z..g..p......6...c5.>....U.V..$..".#P...4/...J/.}...+Ihn.\U....J/..w.BlZ_(.....O}....,t..'H...@.o....].`..H./.}......~.ML..e..Z.R....hV.....A...8..>..c>)-.h...bDdb.p.......T.%Ou.'.'......to...G.D.h........VQ../..y..g..8.4.S..i.,&.q m!I$....OwG..~.....w-.....Dd.....Lb.!c.Wa1.......X...<".O.}..W.{<q~........]...+_P.&/.~....._...k........nR.g...`.F d....aH(d.M...".....9.r..P...$.}..`.Z.q...c..L..C...:.8...bz8..$..CB.=]......#^.F8...0Q.Jcs.455r.\|@w.%..!..k"..:..c[7..Y.=.t-)/1..(T......._U.....h.Gc_..L$......k..\..../..Hi.~U..P.\....,..#.3...UU\|.01..M..h$.h$...z.=..r_.{..}..o.]...*.[...l...=w..}U.....c.!.7.D.v...OI...}.k..........t..O..qRl...60.Q.$f.-.B..C!........Q.&...G.].I;........&...uXS..!DW.=v/.O..).5.o}.3./...~L.......e.:.5.0T....!.H....2..d..89...N..\G..^..

Chrome Cache Entry: 154

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (64931), with no line terminators
Category:	downloaded
Size (bytes):	1026854
Entropy (8bit):	5.432328737065219
Encrypted:	false
SSDEEP:	3072:Ot0Ebp2itYQmgTWjEjd8KFIVChBVbIjvOmCC/fwUEsyt4WKNDWheDQ:jitYQmgTjaWKNDWhl
MD5:	E9A842DD9CAE1CD67C519821313E0F30
SHA1:	ED37B1FF89B7DF2D7D8A9DB458481219A5867516
SHA-256:	1A10C0BA8A34CD552FD7D187FFAFC9392B89FA7C75BF19C26A3CB9C5AE6D9F47
SHA-512:	999DF388461F6033040E65C80D4499F162300C6184EA75373049E7D4A9EAC8611391459FE98EFB32E91FDA33A3A5F79FEE2B48A3C42F65C449B0924C17EF64EB
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/web-experience-app-real-e9a842dd9cae1cd67c519821313e0f30.css
Preview:	@charset "UTF-8";#localnav-viewport-emitter{overflow:hidden;position:absolute;top:0;left:0;width:0;height:0;visibility:hidden;z-index:-1}#localnav-viewport-emitter::before{content:"ac-localnav:large"}@media only screen and (max-width:1023px){#localnav-viewport-emitter::before{content:"ac-localnav:medium"}}@media only screen and (max-width:767px){#localnav-viewport-emitter::before{content:"ac-localnav:small"}}.localnav{position:relative;top:0;left:0;width:100%;height:52px;min-width:1024px;z-index:9997}@media only screen and (max-width:1044px){.localnav{min-width:320px}}.localnav.localnav-stacked{height:66px}@media only screen and (max-width:767px){.localnav{height:48px}.localnav.localnav-stacked{height:63px}}.localnav-overlap .localnav{margin-bottom:-52px}.localnav.localnav-stacked .localnav-overlap .localnav{margin-bottom:-66px}@media only screen and (max-width:767px){.localnav-overlap .localnav{margin-bottom:-48px}.localnav.localnav-stacked .localnav-overlap .localnav{margin-bottom:-6

Chrome Cache Entry: 155

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1272
Entropy (8bit):	6.759893244400297
Encrypted:	false
SSDEEP:	24:ay1he91Wwjx82lY2T3ouVMgK5iyJ3V6pKzLXGLfarUZdR+p0tN:awqQNn2xCJ3xKjZD+p0z
MD5:	1ED9BF7633F4F449C8D2DF94EA0EB35F
SHA1:	2902BA9C2B127C74C2550298A0578D7D8DA941C2
SHA-256:	E7D23B06A4FFD600558E5443D1E32DAAAF13A27CF7BB8B7CC163A92B4054AAF2
SHA-512:	51DD36178DD85F062FEE20903A4F0981CA34EB24A7E7245191EF43D493CD47F756389E548A731109F1C0463BA3BD1D3D4F7C4C623639B9514EB2FB9619124F07
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/img/twitter.png
Preview:	.PNG........IHDR.............2......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BD511DF2556611E48F9585596B882309" xmpMM:DocumentID="xmp.did:BD511DF3556611E48F9585596B882309"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BD511DF0556611E48F9585596B882309" stRef:documentID="xmp.did:BD511DF1556611E48F9585596B882309"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.."...lIDATx..O(.a....19P....up...r...XI.M.."G.*)g.....f..p.h.....Rh/.. ..O=S.3..z..........5.it....L2+...i6g..

Chrome Cache Entry: 156

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	486
Entropy (8bit):	4.569126658730454
Encrypted:	false
SSDEEP:	12:t4ptE4LAlQDZ1ciCfOSiTTU5EMqYnleVFy5Ze2iygTion:t4ptE4LAK5TSiTTU5EMqYw4ipiC
MD5:	C88356640B7A7AEDB98664CB26145A83
SHA1:	291E5386811A83C4E699E7588E27DA45CF1484CC
SHA-256:	07CD66F2F02F1E3B00A09591E700832257CEE244EBDC98F27EDA09FD2D33447F
SHA-512:	0BA9153BAC6F7305EC44D5EA89F40122691E18AA9C19B2181C865C30262A4EB86E013FF469545F573079EDF41457E0A83E6B72CE6ABAC89BA1C06BC0E01FF7A7
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/masks/iphone-6-5-mask-c88356640b7a7aedb98664cb26145a83.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230 497.776"><path d="M27.78 0h174.44c9.66 0 13.16 1 16.7 2.9a19.7 19.7 0 0 1 8.18 8.18c1.9 3.54 2.9 7.04 2.9 16.7V470c0 9.66-1 13.16-2.9 16.7a19.7 19.7 0 0 1-8.18 8.18c-3.53 1.89-7.04 2.9-16.7 2.9H27.78c-9.66 0-13.16-1.01-16.7-2.9a19.7 19.7 0 0 1-8.18-8.19C1 483.16 0 479.66 0 470V27.78c0-9.66 1-13.16 2.9-16.7a19.7 19.7 0 0 1 8.18-8.18C14.61 1 18.12 0 27.78 0z" fill-rule="nonzero"/></svg>.

Chrome Cache Entry: 157

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	dropped
Size (bytes):	5937
Entropy (8bit):	4.980950854185178
Encrypted:	false
SSDEEP:	96:vYYD4PDKthWNRm/Qr7JTdAvAjDIRHO9slZe2gLaFB6ASqJlias7:vPMuhWNRmor7JT+vAjcRISSLa36ASqJ0
MD5:	A3EECFB5CD60979B65AF8EF49BB66045
SHA1:	D4C4EAAB526E88C2EB58339A28207DBA967BE384
SHA-256:	B508251F81DF8FDA1990736E14135063E5421F6C424734C90B263D8BDFC944E9
SHA-512:	993C542FD86ADAC3C737DEA3C19E2CF1A12DD128E69550E7DB8933E3062E778668988BA496BF88B29E0D3DDA303B5BB1F80ABA11D6116A77653D30183F04AE54
Malicious:	false
Reputation:	low
Preview:	importScripts('rlottie-wasm.js');.importScripts('pako-inflate.min.js');..function RLottieItem(reqId, jsString, width, height, fps) {. this.stringOnWasmHeap = null;. this.handle = null;. this.frameCount = 0;.. this.reqId = reqId;. this.width = width;. this.height = height;. this.fps = Math.max(1, Math.min(60, fps \|\| 60));.. this.dead = false;.. this.init(jsString, width, height);.. reply('loaded', this.reqId, this.frameCount, this.fps);.}..RLottieItem.prototype.init = function(jsString) {. try {. this.handle = RLottieWorker.Api.init();.. this.stringOnWasmHeap = allocate(intArrayFromString(jsString), 'i8', 0);.. this.frameCount = RLottieWorker.Api.loadFromData(this.handle, this.stringOnWasmHeap);.. RLottieWorker.Api.resize(this.handle, this.width, this.height);. } catch(e) {. console.error('init RLottieItem error:', e);. }.};..RLottieItem.prototype.render = function(frameNo, clamped) {. if (this.dead) return;.. var realFrameNo = frameNo;. if (frameNo < 0) {

Chrome Cache Entry: 158

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Java source, ASCII text
Category:	downloaded
Size (bytes):	5937
Entropy (8bit):	4.980950854185178
Encrypted:	false
SSDEEP:	96:vYYD4PDKthWNRm/Qr7JTdAvAjDIRHO9slZe2gLaFB6ASqJlias7:vPMuhWNRmor7JT+vAjcRISSLa36ASqJ0
MD5:	A3EECFB5CD60979B65AF8EF49BB66045
SHA1:	D4C4EAAB526E88C2EB58339A28207DBA967BE384
SHA-256:	B508251F81DF8FDA1990736E14135063E5421F6C424734C90B263D8BDFC944E9
SHA-512:	993C542FD86ADAC3C737DEA3C19E2CF1A12DD128E69550E7DB8933E3062E778668988BA496BF88B29E0D3DDA303B5BB1F80ABA11D6116A77653D30183F04AE54
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/tgsticker-worker.js?14
Preview:	importScripts('rlottie-wasm.js');.importScripts('pako-inflate.min.js');..function RLottieItem(reqId, jsString, width, height, fps) {. this.stringOnWasmHeap = null;. this.handle = null;. this.frameCount = 0;.. this.reqId = reqId;. this.width = width;. this.height = height;. this.fps = Math.max(1, Math.min(60, fps \|\| 60));.. this.dead = false;.. this.init(jsString, width, height);.. reply('loaded', this.reqId, this.frameCount, this.fps);.}..RLottieItem.prototype.init = function(jsString) {. try {. this.handle = RLottieWorker.Api.init();.. this.stringOnWasmHeap = allocate(intArrayFromString(jsString), 'i8', 0);.. this.frameCount = RLottieWorker.Api.loadFromData(this.handle, this.stringOnWasmHeap);.. RLottieWorker.Api.resize(this.handle, this.width, this.height);. } catch(e) {. console.error('init RLottieItem error:', e);. }.};..RLottieItem.prototype.render = function(frameNo, clamped) {. if (this.dead) return;.. var realFrameNo = frameNo;. if (frameNo < 0) {

Chrome Cache Entry: 159

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9869)
Category:	dropped
Size (bytes):	10413
Entropy (8bit):	5.257533978847801
Encrypted:	false
SSDEEP:	192:8nla2OCNzv/zCPfx1WY6Q8X4tYPNF9cxi3/lpemo+AW4mr+oaq5:8nl3OCRvbIfxkgUPRcxw/lpemoPW4mrb
MD5:	1B5686244F6C6516B3C0CB73B85DEB30
SHA1:	207E5F9CC6C80B1B84C18CDFA732A5C3CC43AE2B
SHA-256:	3A91FF301DBC45B9035E65C7CACB68C5C06105196AB82BDE6AD6970348F2D819
SHA-512:	73AC415260CAA2291E3F2A24393B226E1275A1981775E3AA4183B2ECC941872AEB3F1024756479FD56E26F3E27976607E576A835864892F547E17DA17A3B6A32
Malicious:	false
Reputation:	low
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.import{d as e,N as a,w as i,p as t,b as o}from"./p-1ec6e574.js";import{g as l}from"./p-42d04e97.js";(()=>{const o=Array.from(e.querySelectorAll("script")).find((e=>new RegExp(`/${a}(\\.esm)?\\.js($\|\\?\|#)`).test(e.src)\|\|e.getAttribute("data-stencil-namespace")===a)),l={};return"onbeforeload"in o&&!history.scrollRestoration?{then(){}}:(l.resourcesUrl=new URL(".",new URL(o.getAttribute("data-resources-url")\|\|o.src,i.location.href)).href,t(l))})().then((e

Chrome Cache Entry: 160

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	667
Entropy (8bit):	4.880039869120858
Encrypted:	false
SSDEEP:	12:t4ptE4pjNllHoqeyEllmjM1/dRs9ZqFmYdduNBnpIIcL2pFT57/+:t4ptE4pjNllHfeyElxdR2qUYdcHnuIcH
MD5:	F519029C9BC5F9130E7826C69B475D0B
SHA1:	56887B4254E867CD72A6B190F06BBFF4E7EEF50C
SHA-256:	8C3C3D6F22372EF7FE0767812F79CCB17B74B5A7D9B64121CEF0961BDE3ECD64
SHA-512:	F51153AD7A23F0E8B3E1DEDC2C59BA2C3B87BCD90597F42D7EFFABB7F0466A99366CE950E8D4DA27141A968BA07522609A6E246F913015F060F44ED48A51C5C5
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/masks/iphone-6-5-mask-border-f519029c9bc5f9130e7826c69b475d0b.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230.656 498.547"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M28.03.45h174.44c9.66 0 13.08.98 16.61 2.87 3.5 1.84 6.36 4.7 8.2 8.19 1.9 3.52 2.88 6.97 2.88 16.63v442.23c0 9.65-1 13.12-2.9 16.65a19.65 19.65 0 0 1-8.19 8.17c-3.53 1.89-6.94 2.86-16.6 2.86H28.02c-9.65 0-13.1-.99-16.63-2.88a19.68 19.68 0 0 1-8.18-8.2c-1.88-3.5-2.85-6.91-2.87-16.43V28.14c0-9.67 1-13.1 2.88-16.64a19.7 19.7 0 0 1 8.19-8.19C14.94 1.42 18.37.45 28.03.45z" clip-rule="evenodd" vector-effect="non-scaling-stroke"/></svg>.

Chrome Cache Entry: 161

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3
Category:	dropped
Size (bytes):	14190
Entropy (8bit):	7.895063441340627
Encrypted:	false
SSDEEP:	192:6+TGH2xmIFVV/HYfnbPveAaqMtig/ezKu16GOXlwU1UcvjQavQ7FP2h+/5JhkTIi:hRRzvKbXeAzg/ywz1UcvbvQ7khqJjS
MD5:	AAAD0FAB841CF5399948EDA6CA02EA34
SHA1:	13ADE1423D67331C63F27212295772EA5CE2B106
SHA-256:	5D7BE9FFD1F216CC8E8168B8D9FC76660835B21F36089162744BA296C4159D41
SHA-512:	3CEA471BB11C10D7D9402B043800E5EF4C02831C5470DE98DAF73A08D0BB95810C8D35D233B3639C286ACC0CD44414FE11E05958B13FD97BC2A54513542BA01B
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................@.@.."..........................................J.........................!1..AQ.."a2q...3..#BR...b.$r....S...&46Dcd.......................................<........................1..!.AQ."aq.......Br23.....#$CDR..............?...R.H.T.R..*T..J. )R.H.T.X..uJ..XP....^`.Lh%..]..EnbL.

Chrome Cache Entry: 162

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	19325
Entropy (8bit):	7.97541212859293
Encrypted:	false
SSDEEP:	384:/fkqoRm5m06jc+ejLD9xyVF1gX+Bq3lCTiqvfKs90HmFOGJaIv5Se4:/cqo25lu1RBJmYtiH8OERvK
MD5:	DA1FF638A4141EED84327E20F936496F
SHA1:	91E5410531539B53C3AEFCC5774413E8A665A57A
SHA-256:	B66DE388C12D6611870503C34C5DB37FE079313C4292177435FD8DC7ED6CBE67
SHA-512:	75B6243FEB853275A9E4AA1C36591CBDC3439CD27489CD5833F8670E072ACECC59888699BEBD3FFE5F8D1851608394D3255EAAA863DB438511CB4798F99D334A
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805
Preview:	.PNG........IHDR...............g-....bKGD............K2IDATx..}w\|\...3...U.."....c..0...LH.7..........$..I.P....p...{..-....w..c.-..r........ig.....0}....v.<,.;l...M..v.W2#:......,.+".C.\|..'....".......x...3.......<P.].....p.a",.....:...P&@).#.:...".........=:\|.'O.._....').?.t.@......+..Y..}/.Z...q.._#Rg..V.v...?{.WO.0#zu... x.@#..w.i3...q.....0.D4AD~.....:!.O..w.-..?..&,..8.3Z..y......O.[D..Ci._r.i..s..'`.F..........g..."3.u.[.F.Rc.Q.".....fK^.b...8..g....k.....3"r.....x.b...........`..9....]...M!\|.HU.z.....sV....w.x..y...~....3.<.....fk.......M.................V....??th(.\|..E.2.OD.$.v...r....~A.t./.J..Ep..3f.y.m........`.f..&...'_.r...."..n..Q.....Q~....D.qm.....c.......jh....M.x.\|[.......0..Y..}..C..s...}.Z. x......(.....EP...l....#..w......M.=....xw).._..6.i}p.ub...?........4........v7.}.P.?..`y....9.\p.../....3f<...u..ya=......'~.....~.kG.*....[.....w.........C_...k6..-.>]..<.\|.,.&B.=..k.@....O..@...;.y.....8..?..\|.}r..F>.........$._..%

Chrome Cache Entry: 163

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	16465
Entropy (8bit):	7.966528714713492
Encrypted:	false
SSDEEP:	384:4/zugvMc/z6Gaq5iFvJBOqikYcWOFKOX7AtgqHJVw:4qW6UgvJHikXW27X7kJm
MD5:	77FFE8B3DFF795EA0734BF4B35A94357
SHA1:	2D545FFB0877993DD227D528638A336CD3B9E32C
SHA-256:	AD37907E335E7C5D2692B682401F4520753AB539FADEDF74962C6A004B3A179F
SHA-512:	FB4692716BADCB1FCE73ADDB8ECBD16C7158A8D0618B3BF3B1833661A3813D48500F8C96972C9CBC2F5EE9DBEC1CE6F0450A6445A3CA9635FE2B3ADA9A50B206
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............@.IDATx..w.]e.?.Yk.....Lz2i.BH .D. ( M...(\.]..X....\|.._..]....i.P..d2....Z.?N.3%.L2C...<.9g....y....^.JU.R..T.U.JU.........,Z..g..p......6...c5.>....U.V..$..".#P...4/...J/.}...+Ihn.\U....J/..w.BlZ_(.....O}....,t..'H...@.o....].`..H./.}......~.ML..e..Z.R....hV.....A...8..>..c>)-.h...bDdb.p.......T.%Ou.'.'......to...G.D.h........VQ../..y..g..8.4.S..i.,&.q m!I$....OwG..~.....w-.....Dd.....Lb.!c.Wa1.......X...<".O.}..W.{<q~........]...+_P.&/.~....._...k........nR.g...`.F d....aH(d.M...".....9.r..P...$.}..`.Z.q...c..L..C...:.8...bz8..$..CB.=]......#^.F8...0Q.Jcs.455r.\|@w.%..!..k"..:..c[7..Y.=.t-)/1..(T......._U.....h.Gc_..L$......k..\..../..Hi.~U..P.\....,..#.3...UU\|.01..M..h$.h$...z.=..r_.{..}..o.]...*.[...l...=w..}U.....c.!.7.D.v...OI...}.k..........t..O..qRl...60.Q.$f.-.B..C!........Q.&...G.].I;........&...uXS..!DW.=v/.O..).5.o}.3./...~L.......e.:.5.0T....!.H....2..d..89...N..\G..^..

Chrome Cache Entry: 164

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	15740
Entropy (8bit):	7.954978172464159
Encrypted:	false
SSDEEP:	384:AwIpVA9llRR/+5BrSOxNbCGcIvTeSEHIGbi24fe:8Vul+5BrPtIIvTeSEHRiV2
MD5:	4E59E61B2A0205E09DAFAD24DA174530
SHA1:	0DC2ADBA2FBE4F1CD195364EF4F1AB4DC1641993
SHA-256:	269F20EB63DB3ECE8035886EBC69112EF94339DA867D47F815237800555E508A
SHA-512:	8EE876A60C4D511BEB1229678E34D5F91C34DD8EDA4CF792DC521DB76CB8338480B3C265181B3AFB7446D3992E243D590A09494CB8E10FC4268022181BABDA28
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............=1IDATx..}w..gy..yf....^/:.n..,7..Tc0..d..P...........@0n. ....\(.Lq.......-..u....3.<.?fwg...k...\|.s...3..w..>...y.....=...`..\..t.J.....q..tL...S0^2N....z..\|L.L......Y. 4?'...N..).$bW$..<...h...k..d...I..L...)...tR.(..i..SJ.!:.<.'...0...w....!.....S.)bU.2I..................c....o....m....X......t.@u ...,..D..........=....V...l.I....y...........3.:.....=.:\|..F..h....#"(.....O@....I.{c~.~....\|..>t....x3...8...-..(.... ....`C.&A.@.....p.4&...Z.$...z?..9..x.<..\.=..#..6..... ...S."...@...F.X."........@..E>...j!...>oVN..S......+..@f...F..>..g.....9......\|&....a.+r<3,.$.....p.`.}_Q..b..;.E.VW....@ 8...s..6.\|...(.IW.Lv.....+....-H.n....<.g3..Kup.= ....G...zE...T..q...L....@ 4.<...]..A.hZ;.9....Qlo..M@(....t..z..N.G.{.......W?<...D....q=.....a.W6......T7....W......W.t...@.wU@....St.......@U..m......w.Gv...'........<.g...e=...p)..e....'.....B.;...X....o....4pD1p..l..a.s.8..@v.;........../..[.....?._...

Chrome Cache Entry: 165

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1267)
Category:	downloaded
Size (bytes):	115228
Entropy (8bit):	5.153170283271925
Encrypted:	false
SSDEEP:	1536:xylcfDxYzbJ3iw93BC2WXdm791WoDYzghw4uJuhwNpfewltog69FjxWDpfxV685u:xylc7xYzwwyrXkC0YzPvL5u
MD5:	CC407E432532261714CA106E967BED72
SHA1:	6D93BAF813EA6291DA475634726D3D7B3FE415C2
SHA-256:	F5F739B99351C1D64B3B890E80E78A9267E9AD2EFE8116999EAD3749D849E131
SHA-512:	7C9D63D818843E406D31D3BEB7A9CF4A58F503346DDDA554E55B3C8FC1D940CC0707C44E2C42F1B79B3B9795DF036D68FCAAF855E205D06436A5793125AC02BC
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/css/telegram.css?241
Preview:	body {. font: 12px/18px "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, Verdana, sans-serif;. /-webkit-font-smoothing: antialiased;/.}.html.native_fonts body {. font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";.}.html.lang_rtl {. direction: rtl;.}..body,.html.theme_dark body.bg_light {. --text-color: #000;. --second-text-color: #7d7f81;. --accent-btn-color: #2481cc;. --accent-color-hover: #1a8ad5;. --body-bg: #fff;. --box-bg: #fff;. --box-bg-blured: rgba(255, 255, 255, .84);. --tme-logo-color: #363b40;. --accent-link-color: #2481cc;.. --icon-verified: url('data:image/svg+xml,%3Csvg%20fill%3D%22none%22%20height%3D%2226%22%20viewBox%3D%220%200%2026%2026%22%20width%3D%2226%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cpath%20d%3D%22m6%206h12v12h-12z%22%20fill%3D%22%23fff%22%2F%3E%3Cpath%20clip-rule%3D%22evenodd%22%20d%3D%22m14.38%201.51%201.82%

Chrome Cache Entry: 167

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	15132
Entropy (8bit):	7.984119472801533
Encrypted:	false
SSDEEP:	384:zYB1d3xTDBh5pAOPFqVI4MP3BEKdgxgmw:zYBvj6oqVIh3BYC
MD5:	562666202B48577FB503AFC9B23AEC49
SHA1:	D1176154791D82F981CB23351FCA51691168AD2A
SHA-256:	7932435617C301C4EAFB255B104C7FF4AC5D4712D68DB227CD9A7D07CF496FBA
SHA-512:	C072C3228C36E2A7C6C47B0D7461FB2AF65C78B626EC4830EDE3F9608B3D1A33824859E4D26E0CBB56C60C855D01A1C0CB3D1E447BBFF08ADC2103563E97955D
Malicious:	false
Reputation:	low
Preview:	RIFF.;..WEBPVP8X..............VP8 .:...........>.V.G....[fl..D.7`.....l.]....4..b~.._...G%....(...<{......W..C.x=d~......i.........O[.W.B./?f..~z......:E..........g..Y..wR..~I.W....;.e...w...w.x?.>...~..K..G.....E.....O.....H.C.!...=..Z~..:..8Y..e..G..(.n$.7`...^j...h.6.XR@:HE.gQD....~.)...y.~...\Q.._...Z._.a....:5..\jSA..6.p.@..E.)....w.....}..m......B.F....S...~A.cGj.....R.l.m..H.z..~.JW.A.qH..u...^.gA..`.!........ZGH.yC.HM..\|...c.@.?.-../.Z.S...(........]..Kz..1.Dp...]D!.........2.b-..8........R.2.....5..\v.3."f...........veu..sO.\.O...=.=....46....%e..]-.F...Q.........".....]o.KV.h.......O.. .u..,.O.;...w/.)..../Br7u..6. ......1i.F.kYs.e4T....8Un.w}..4.j.......u$.........Y......gF.......#.i...H..N..x.....p.)v......<...p..F3.X.8".....I.>..g.X..4....hS...\.-v.I.......q..OG...}{..9...&..N..+.6.&u.n.#..8.....Gq.u....0...u.=.GD<:.t7....a.....-...[9._]T...!.E....`...........e..1.....w.y%....0\..@%.j..}.i.J..:....?.y....\|....)......x.m.=L^....

Chrome Cache Entry: 168

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 114867
Category:	downloaded
Size (bytes):	29044
Entropy (8bit):	7.992214707858881
Encrypted:	true
SSDEEP:	768:3cC6chVcTvJXBX109nVsPzru/yfu048lYoiP:MC6bhXBlsVs9koYoiP
MD5:	EC07EC9529F1E042A96E04F891D81A3D
SHA1:	F987EE512DC69721A8F2994DF82B6362F0DC5786
SHA-256:	D98F9835F3E5F050B96608928FD8FB2BAD0C2085342C7EA246277BDA6BFFF371
SHA-512:	D79D501E4CEAA15E0C02951453CA657CCA0CB5B11372EE2602105BA6DDE0032611643B014F919D0FC09DADEDC60C4E761EEC76E4BACDBF9709E586D3DF1F0675
Malicious:	false
Reputation:	low
URL:	http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/telegram.css
Preview:	............w#.?.{.....-...P8.f$......x.c.....".7.p...~.}?q.UY.HIsx-.I.....22.j.....................a.\.:......{..z...z9.../.....w..]._.gg........v(Y...........z....U...l.....Eg....lW/~.....^...V..l.\|W_R.]......-W..:...~U....}}w..j.\..n6..........M....c......7......5..F;_oV.m..w.?-i..L...>.]mV/.i..f...~.h],..\|../:xDe^.X.d......\.oy.......v.U.b_...s........`t.Y/....zR...\|^..W.....L..<z.....w55^.&..P..\|......5.\Q\m.g..W..m...n.fo...Y...N..J....Xmn6..jT].t8...{o..xAi..`......v...b..],.f7...../...>....O....j.I..O...f].....Vy...w....{y.C!.G/...z\...q%...........O........c..l..7h.m}...?.~...gh..[H.;.et[....../.y.?.W@>?.&j`.Z...U-.....f....x9.V.tPv.%...`..?.Vc..2........m...e.G...(;..t.....w..;.L...~./=P_...z.F....i.x>..>...rU.s...a.B.,....?\...^....P..4>.P.S..-.FT'8z(...%..pWI.."=..)T.a...5$..0...t.O`..jB@Z..B*...1>L......7.'....B.....l5..~..i..oDO......\|...W.%.`n.u..&..C$.....P&_Q...8:.2<.Q......<#./.z..U]B.........h.=.@....=B..[....v.4.1O#

Chrome Cache Entry: 169

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
Category:	dropped
Size (bytes):	12014
Entropy (8bit):	5.8597190788401115
Encrypted:	false
SSDEEP:	192:L7xWVSgHQUkVbBQZf8POXQu2jMLlZYrZ7667V776+:L7xWVSgiV27QfjMLcrj
MD5:	87052396F5FFD63B642D1BAB54E7EDB7
SHA1:	F3E75DDE1FAD3A5FE639E3D0C04122FCFAB918E2
SHA-256:	EA54FEA4CE7FCA6339E5B437CA43CBD46C84AA46477BE66436608B5FB0A9E02C
SHA-512:	84F96774BF4E8CE6BDFFC68AB6ADFBAA7508BD8E9A3372A33C0032FB519BF51A6AFB34CD70CE8A84C32A1F4BEC2442B87CB5CBEE86EDD468D510E502705D4788
Malicious:	false
Reputation:	low
Preview:	......00..........6... ......................h....)..(...0...`................................r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..v..v..u..v..v..u..u..u..v..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..v..u..v..u..u..u..v..u..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..u..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..}..}..}..}..}..}..}..}..}..}..}..}..}..}.

Chrome Cache Entry: 170

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (821)
Category:	dropped
Size (bytes):	7626
Entropy (8bit):	5.215559608926212
Encrypted:	false
SSDEEP:	192:OtQ0m8mBOZgS9tn0Ll9829FAeHlVPrMNW:OtFuSD4829FAeHzPAW
MD5:	33AF753815E0763128B33C38F393AF19
SHA1:	FD81C07EDD497B91F91629687D2AB6976F287E17
SHA-256:	A7A8465112A5F495E5C95139568A59BF35B3116624A5861B71472070520D699E
SHA-512:	D5981A0D80035A3E0B8EFBE12B90C5E82A53F8C2CBC100001D344DC645B07A76DB3B75D863A5BB733F54B9E13B4C0A515B63041F50DCFC9AC750C092C436DBF5
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[26],{71026:function(e,t,n){n.r(t),n.d(t,{environment:function(){return a},eventRecorder:function(){return F},immediateEventRecorder:function(){return q},logger:function(){return D},network:function(){return E},setEventQueuePostIntervalEnabled:function(){return N}}).var s=n(76588),r=n(24178),u=n(32722),o=r.SC.attachDelegate,a={setDelegate:function(e){return o(this,e)},globalScope:function(){return window}},i={AJAX:"ajax",AJAX_SYNCHRONOUS:"ajaxSynchronous",IMAGE:"image",BEACON:"beacon"},v=r.vc.metricsDisabledOrDenylistedEvent,c=r.vc.removeDenylistedFields,l={},p=["dsId","consumerId"].function f(e,t,n){var s=null.return n&&!v.call(u.Z,n.eventType,t)&&(c.call(u.Z,n,t),m(t,n),e.apply(null,Array.prototype.slice.call(arguments,1)),s=n),s}function d(e,t){l[e]=l[e]\|\|{},l[e]=t}function Q(){l={}}function m(e,t){l[e]=l[e]\|\|{},l[e].anonymous&&p.forEach((function(e){delete t[e]}))}var y=r.SC.attachDel

Chrome Cache Entry: 171

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 246409
Category:	dropped
Size (bytes):	21801
Entropy (8bit):	7.986820094004987
Encrypted:	false
SSDEEP:	384:+cw4aeILQZCjjOsGrggZg/3nccbQ+u19W9S0rJUrqbza3KUvKiIpe16S5:+cwRpLQZC/OsZz/32+N9S2uaO3KwIpi5
MD5:	EDE943D9BF34428EF8FB13948912141D
SHA1:	F06BD9FE51BF32FBEFA0ACEFBDDAA464F6A64F13
SHA-256:	1782968F6F9EB42BC5689B3A2956CE8C45672E126427B870EB5E2FFC415CBC0D
SHA-512:	97EA17771436E6B2E0DD0F0E91165AF119CFFB1286EFD9093648F8D5B741E0FC5627A0A98F390D89737999121DB93F15613E7D67D9F88826EA462748DACDFF2E
Malicious:	false
Reputation:	low
Preview:	...........k.#.6.W..\,dF..u...............[:.....>.B.....EV.E6.L..{.U.........>..._......<\|...0.......fx.....'.c3...._.K.....??.Ko........Oo.......{y../.........~.+...........?..........o._.:.w..........~.w?...._{../?...!......N...........k..O...K....?~f.1...U<.i{.9'W1.2..u..v.%......{..et%.v..."........>\..R?.....d..C.}M.._Y~._.........@..=..2G....RF.o.......I.koc..H..Lco]I...u.....-.U.{......M~L>..3.i...C8...C....~z...@<..g......B)7~..a...;E...[3Z^..?U..[...A~......X.?3..S....n...?c.h..2.Oi...{.F ...Yr.........W....l.......b....]6..?..r..[.&......>.?.)..h....$.y..)..cJ2+~..7.4:.'x+.....2).?.........OC.nt....}.......k..vM...X.X...nM...i..[...3B-.#Y7..X3%..\|.-.eX.%!...g.~....T.z..>uc.........uq.`ad.$.S.)r\|.,L..1..^..'...6....w..h...J.#.....w.._X.o..eNz........:._.~..+.D...b.{......e... ...$p...dM.'e.g..d....&..E..}3...#5...J.+....>...W..=Z^y..{4}K....9../.8x.w.............~.S/..?...O2.:...\...*....<.M...ff..E.<.N.....G...&>yL..

Chrome Cache Entry: 172

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	366
Entropy (8bit):	4.978776395938356
Encrypted:	false
SSDEEP:	6:tI9mc4sl3UE7wRtG2VEWhGWLYayuRt+wyo6YmBQWLvQVHwB5JbHdGoQgQSx:t41MfYWcWjyuf+wyoNMQ/wB5Gg9
MD5:	BC4F4BFDD931E007AB096DD1C209C689
SHA1:	9D97DA68C8FE7482E604148596EF8A97792AC08A
SHA-256:	03B3A7317370504145583EB221372D6C19C060F84F10CF391459E7441E95C381
SHA-512:	371F30F422B303D4A45136181372C7E95D3EFCEFCCFB13B7D3640EDE79802C840437AE14D3154750095F69748D87F6520265F01025B32D8E39C3CAFE4EC6D8F2
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 13 28">. <path fill="#FF9500" d="M6.496.173L4.521 5.251H.007l3.738 2.751-1.481 5.149 4.232-3.386 4.232 3.386-1.482-5.149 3.739-2.751H8.471z"/>. <path fill="#BFBFBF" d="M6.5 14.35l-1.978 5.087H0l3.745 2.755-1.484 5.158L6.5 23.959l4.239 3.391-1.484-5.158L13 19.437H8.478z" transform="translate(0 -.15)" />.</svg>.

Chrome Cache Entry: 173

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	21478
Entropy (8bit):	4.9401794405194135
Encrypted:	false
SSDEEP:	384:FCxaBo7s5dibe4UbBHasovLi1xPSoGBejIfD5FQhPOwIc:FCxko7UALi1xdGFTcIc
MD5:	4C9BA6B680FC51B6E5BD4217A1550C88
SHA1:	3FA0E7D643CC1E3008E0FFEBA46A1E3682E2EAF7
SHA-256:	51C4D88FD78F3B8EFB16F845E75BE7F1BB288FDF2FD39D033868A0346DB7FADB
SHA-512:	42706B3E53134B3EA0FCE3A5775D8929634EAB202856794D6E5E71FFA44B83487AA992D3D933FBE2BD5B2CF084F20206EE13BA904A713114E566DA6474A8C3D1
Malicious:	false
Reputation:	low
Preview:	var startTime = +(new Date());.function dT() {. return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';.}..var jsonpCallbacks = [];.function twitterCustomShareInit () {. var btns = document.querySelectorAll. ? document.querySelectorAll('.tl_twitter_share_btn'). : [document.getElementById('tl_twitter_share_btn')];.. if (!btns.length) {. return;. }. var head = document.getElementsByTagName('head')[0], i, script;. for (i = 0; i < btns.length; i++) {. (function (btn) {. var status = btn.getAttribute('data-text'),. url = btn.getAttribute('data-url') \|\| location.toString() \|\| 'https://telegram.org/',. via = btn.getAttribute('data-via'),. urlEncoded = encodeURIComponent(url),. popupUrl = 'https://twitter.com/intent/tweet?text=' + encodeURIComponent(status) + '&url=' + urlEncoded + '&via=' + encodeURIComponent(via);.. btn.setAttribute('href', popupUrl);. btn.href = popupUrl;.. btn.addEventListe

Chrome Cache Entry: 174

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1280
Entropy (8bit):	7.691497721916488
Encrypted:	false
SSDEEP:	24:uymLOuiM4oRG1ZjZwPbPZI03UjfAQ85CII1oIU0BKH4GkQ4e+bXlwDCl:uFOuiMpG1zwPb6bAqt1oIUs+0X3l
MD5:	D1B03F3C1409C3765D8F00F712F53A05
SHA1:	8FBC7FA67B59CF54F926A5196A1599326A6C2D91
SHA-256:	81B4249EC407585D3FB8BFE37EF017771C28F14AE8487A798AC05CD35EBC19E9
SHA-512:	4DED803D4983AB047B34646B3011B3FB1B4353274D6F6E388B2DC5EB48C3BB04E79A1FF5F6EB0F3963A6704143E22335BCE1B1953957BBD3D6C59485F046A7E6
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/15/45/ec/1545ec6d-fe0e-cc44-3fc6-c8015ed6a0b3/AppIcon-0-0-1x_U007emarketing-0-7-0-sRGB-85-220.png/146x0w.webp
Preview:	RIFF....WEBPVP8X..............VP8 v............>.H.I#""..\.4.D........./.E...}....O......{...W...W...H.0....>.....?....L.........L.....W.u...........2..G.@I\"..3.8l....l....ou!..F..d....C@u.l...l!Fr..I .A.[...Tb.$.\|.S._..7.H.'MQ..rB..\|A...u.n.^.T.U.../;.,No......X.........JXh..@...3.P8P....9..7#..&......a....Sj.f.!..7wQ2....}B..)v..N..)..<...3.I..@.d..p{....lv.w..!a.....S...K'...K...3.END.l.hVW.).8..:e.K...!..r9.kS.G1T.h...dy..:H.>...l].P...$_.#yYM.(.A.h......j....u....X1p!../.s.M.J..Hdd.j](..E...0.j....{.z%..m..~".......9.c,.....X{.........,l....n.m..w.h#.@...rh...[.O.7.....n.:.&z......}.{..........H..jO.R..y.v....,Qw.!.P.@..f."....8..g%....../l......JUx=H3G.t#Qt.u]\..`K./H..3....n9.t..../.].~./Z......f=Y...aR..Q....X.S.S..A.6...2.iCS/"Q..*t.....]..gfex.uI..Y..d..O...C.5.....G....=/.].Pq...g.FQ..\|.K..{6t..:.........u.67..S..#.4X..W.V.l..'...\|D.!......QQ1y.i.#...4...V.wYX8.2.Uh$....+...2D.;@.s.\|.H`C.!.'q...T.m.u....LJ..]..Fj'.T....K..AA.X.

Chrome Cache Entry: 175

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (750)
Category:	downloaded
Size (bytes):	2169
Entropy (8bit):	4.9548772147686115
Encrypted:	false
SSDEEP:	48:ildRbgqluYoCoLUmledemlxUlIUvfALSAl/lmmqlmWlfBlAlVlWlgwheAYf9hbF5:INx4gd/d4fTvsaMefp5oD
MD5:	89F8EE167E82FADB507197C109ED684B
SHA1:	F5A728E7805C71BAE1A8786921AB2735AB07C15E
SHA-256:	0B70D5380DCC5A0C4BDD30DE4D68C4B0F598EB4EA92BEEC1B6D5F0852BD96D22
SHA-512:	BC12D7CB827E364176A691C2ED5C73A481547C572A0C00E5FF6B8BD8E698AC7DA96F2D8DA08485F9363F98A1F21338E61A9E813A31DF0A2EB7E96D43A902E5CE
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.961.e281a7b797aa9204873b.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[961],{54961:function(n,e,t){t.r(e),t.d(e,{cleanup:function(){return c},environment:function(){return o},eventQueue:function(){return i},eventRecorder:function(){return r},immediateEventRecorder:function(){return u}}).var i=t(71026),o={_document:function(){if("undefined"!=typeof document)return document.throw"metricskit-delegates-html.environment HTML delegate 'document' object not found"},_window:function(){if("undefined"!=typeof window)return window.throw"metricskit-delegates-html.environment HTML delegate 'window' object not found"},cookie:function(){return o._window().document.cookie},pageUrl:function(){return o._window().location.href},parentPageUrl:function(){var n,e=o._window(),t=e.parent.if(t!==e)try{n=t.location.href}catch(e){n=o._document().referrer}return n},pixelRatio:function(){return o._window().devicePixelRatio},screenHeight:function(){return o._window().screen.height},scre

Chrome Cache Entry: 176

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	1189
Entropy (8bit):	4.4877009445301965
Encrypted:	false
SSDEEP:	24:t4pt6kwjNllHfeyQTGWug+7V1AUczWf66yad1VDheBK8bwoN5L+:o0k+8TOg2Pf6y1ZhkrwoNV+
MD5:	61226AFCAE6A8F2B3D2755728DAAF4F2
SHA1:	8489CAF428F9F579A8B31AEAD973F6C361711414
SHA-256:	47EAAEA809BFE2FD94F78F3C94372B6328F37748BC0EEDFD1B2AB937027962CB
SHA-512:	C1F23A9E1555C1BDB558781327EE018F2825C2C2238945866351DA248CD39FF9102D729078A47040BB00516CFADFD2B5EF2C88B661A76563A65553B7C7421FC4
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/masks/icon-app-mask-border-61226afcae6a8f2b3d2755728daaf4f2.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" viewBox="0 0 230.5 230.5" version="1.1"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M158.22 230H72.28l-8.22-.01a320 320 0 0 1-6.93-.11c-5.05-.06-10.09-.5-15.07-1.32a50.83 50.83 0 0 1-14.33-4.73 48.2 48.2 0 0 1-21.07-21.06 50.85 50.85 0 0 1-4.72-14.34 100.68 100.68 0 0 1-1.33-15.07c-.06-2.31-.1-4.62-.1-6.93-.02-2.74-.02-5.48-.02-8.22V72.29c0-2.75 0-5.48.02-8.23a320 320 0 0 1 .1-6.93c.06-5.05.5-10.08 1.33-15.06a50.74 50.74 0 0 1 4.72-14.34A48.2 48.2 0 0 1 27.74 6.66a51.02 51.02 0 0 1 14.33-4.73C47.05 1.12 52.09.67 57.14.61a320 320 0 0 1 6.93-.1L72.3.5h85.92l8.23.01a320 320 0 0 1 6.92.1c5.06.07 10.1.5 15.08 1.33 4.98.85 9.81 2.45 14.33 4.72a48.19 48.19 0 0 1 21.07 21.07 50.9 50.9 0 0 1 4.72 14.34c.82 4.98 1.27 10.02 1.33 15.07a320 320 0 0 1 .1 6.92l.01 3.48v94.09l-.01 4.8c-.01 2.3-.05 4.62-.1 6.93-.07 5.05-.5 10.08-1.33 15.07a50.68 50.68 0 0 1-4.7

Chrome Cache Entry: 177

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 144400
Category:	dropped
Size (bytes):	17422
Entropy (8bit):	7.9862827586756735
Encrypted:	false
SSDEEP:	384:2e0AYD0jWxy8M4gQBv+fImQpItUdkIUqi1nSs2quA2KtyfYoC/LA:R09DLhfBG7QpIemIUJ1nXznyujA
MD5:	86D83D04E8CBDCED71F34637C23C1EB6
SHA1:	2AE58F60868535644CEB753735DB7191D65A6723
SHA-256:	91286A9F171E3435452F7FC0523F2FC626A142C1EB3F29BDC38B74335E229CCE
SHA-512:	09C8395CCA30E5F3A1A3C35F63C91C57878BB70D35A00863A98DF4BBAB2BEBC3B78B4BA6E58521B4812E40770FCC4FFDCE173C2F6D95D96EE26589AFCF25CDC8
Malicious:	false
Reputation:	low
Preview:	...........}m..Gr._1...... 7X.H.d./. .k..].2$..:......{8$.<$gH.#..{D.g.........>....[......C.Co....><\|.M...o.....e........./.._..C/../....._....z....g~......_}........}x.W.....o/......?....7..(...........}.........._?=\|.x...........^..y.....d...,....N...........F.....Q./.y........W....`..?..9...+.U.(?\|...\|<.7.....>..=..s..U.\5\|...u.......K..=6eC...x!...=....T,.._.v.....1L6.S.._..f\r.@..y...Wo?..H..i...TKoK.6\|.I.L..#.&..fjK..u.l{"/..wI.x..O....g.....s9k.....1v..c.......<3>.<&..^4......C(....Ko..\|0.._..w.....>....#...Q..`p..j....<.......92...=...K2.?.x.....x...z.?...o.....^..T.,..X..1.S.....bHI...p.T...w..lB..8...Y...oK.y..:P.@a;WK}..s.T......l.)...\.....g.G..}.u%.O.$:.........uD....).v..t....3...$.Y...,./.t.....^.2.K.....1..[...m......'.ing..vN.4~..{../1a....dq..>....KO%v.g[..n.v...3....{.'(.Uz$...Y..@z....G3.YNu.c.....e....h......%B.......m..q@.<..J.Xft.s..1.P9...S...\|b.......X.t..Rc.f...J ..[W:&~9.*.&..4..;...?.D.vK6=..P.

Chrome Cache Entry: 178

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (847)
Category:	dropped
Size (bytes):	13822
Entropy (8bit):	5.308557467153006
Encrypted:	false
SSDEEP:	192:YPNfrSf3gy1fQx56zKsvEsSDIiFtTislPchPTwFlOvHChmC82YFK:YPNzSf3g6zKIHqtpRKEuvHTC82Yg
MD5:	2A92CDD99A42BFCD7DAB16887539E231
SHA1:	310E2855E334F6F49937490D621710021B15066B
SHA-256:	F20C946DA61069DF3F4DC8097FB617DB50F266D25D53758D91FCCBD8341C533C
SHA-512:	7DBD1CA6AF6E7AA86F408C6E3D5D35AA49AD39908D8AB10AEF4CF8C806AF27889DA43D8AEDDEE030E6351DF1D81442B431C6AF206A4DF6E9BFB043892850EF49
Malicious:	false
Reputation:	low
Preview:	/! For license information please see chunk.15.097368f212a6a942763f.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[15],{21015:function(e,t,n){"use strict".e.exports={canvasAvailable:n(1892),continuousScrollEventsAvailable:n(93117),cookiesAvailable:n(2022),cssLinearGradientAvailable:n(83353),cssPropertyAvailable:n(15871),cssViewportUnitsAvailable:n(77499),elementAttributeAvailable:n(13462),eventTypeAvailable:n(70683),isDesktop:n(13459),isHandheld:n(30677),isRetina:n(25152),isTablet:n(53489),localStorageAvailable:n(83574),mediaElementsAvailable:n(58093),mediaQueriesAvailable:n(28342),prefersReducedMotion:n(54719),sessionStorageAvailable:n(63160),svgAvailable:n(91676),threeDTransformsAvailable:n(78795),touchAvailable:n(50012),webGLAvailable:n(72810)}},1892:function(e,t,n){"use strict".var r=n(93796),i=n(6379),o=function(){var e=r.getDocument().createElement("canvas").return!("function"!=typeof e.getContext\|\|!e.getContext("2d"))}.e

Chrome Cache Entry: 179

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65005)
Category:	dropped
Size (bytes):	696227
Entropy (8bit):	5.38605387106501
Encrypted:	false
SSDEEP:	6144:MGryUmPKObVMvcDMbtZNNVJKEq5f+dtaL6rHYGd/0GOCl/FQ1:TryUmiObivKMJZNTJKjp+dtaLq/FQ1
MD5:	90ED61CCFDBF59C72D9D5422BEA4C15D
SHA1:	DEC09B632108E19481F94F9CBD378E7AEB11452F
SHA-256:	6604C5A7BFA2E3F142248368D7C69135A8191D03C72D1024807150C32F4E8E55
SHA-512:	E99CFB370A8AF78ADA7252C5C28756731BBCDB28B71C7B671473C461BCF76A6147111D585A89631CEE3A0F693D45F7A9D3DC7462790EF8048631D96C457694D3
Malicious:	false
Reputation:	low
Preview:	/*. IMPORTANT NOTE:. . This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. . ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. /..!function(e,n){"object"==typeof exports&&"undefined"!=typeof module?n(exports):"function"==typeof define&&define.amd?define(["exports"],n):n((e="undefined"!=typeof globalThis?globalThis:e\|\|self).MusicKit={})}(this,(function(e){"use strict";var n=void 0!==typeof self?self:this;function formatArtworkURL(e,n,d){return n=n\|\|e.height\|\|100,d=d\|\|e.width\|\|100,window.devicePixelRatio>=1.5&&(d=2,n*=2),e.url.replace("{h}",""+n).replace("{w}",""+d).replace("{f}","jpeg")}const

Chrome Cache Entry: 180

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	100601
Entropy (8bit):	5.405523706724719
Encrypted:	false
SSDEEP:	1536:yWbjzXwlvEwbDey5wOl3vkiXo3pJR/wxQGlImvDshx:yW2vVbDeyCOl6J3GumvDs
MD5:	9B31C5083355B2AAAAAEC512F3A0021D
SHA1:	395C9925E89A0AE66F0E016AE664C0AABFD64865
SHA-256:	59DF8CAEC8E28F1DD238C2F59FDB02854B51DA69B0BC1A18271C502A9A166295
SHA-512:	2B1C65386A00FE87D1B74D319DBD9F421A5873E5C1B32E0FEC801A03444ACCE9C35D2F4AC3C6DEF701C885347F750408DE8E948ABC28DBE306C76C088E9694B8
Malicious:	false
Reputation:	low
Preview:	var Module=typeof Module!=="undefined"?Module:{};var moduleOverrides={};var key;for(key in Module){if(Module.hasOwnProperty(key)){moduleOverrides[key]=Module[key]}}var arguments_=[];var thisProgram="./this.program";var quit_=function(status,toThrow){throw toThrow};var ENVIRONMENT_IS_WEB=false;var ENVIRONMENT_IS_WORKER=false;var ENVIRONMENT_IS_NODE=false;var ENVIRONMENT_HAS_NODE=false;var ENVIRONMENT_IS_SHELL=false;ENVIRONMENT_IS_WEB=typeof window==="object";ENVIRONMENT_IS_WORKER=typeof importScripts==="function";ENVIRONMENT_HAS_NODE=typeof process==="object"&&typeof process.versions==="object"&&typeof process.versions.node==="string";ENVIRONMENT_IS_NODE=ENVIRONMENT_HAS_NODE&&!ENVIRONMENT_IS_WEB&&!ENVIRONMENT_IS_WORKER;ENVIRONMENT_IS_SHELL=!ENVIRONMENT_IS_WEB&&!ENVIRONMENT_IS_NODE&&!ENVIRONMENT_IS_WORKER;var scriptDirectory="";function locateFile(path){if(Module["locateFile"]){return Module["locateFile"](path,scriptDirectory)}return scriptDirectory+path}var read_,readAsync,readBinary,se

Chrome Cache Entry: 181

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	1386
Entropy (8bit):	4.8492224043496055
Encrypted:	false
SSDEEP:	24:Yorj8jYfQypuazl92Qypua5HR9Iszb9mPuazEBb9mPuaSlSfvBLRKkfkMqVlM:Y4XzZzlkZTyszbgzEBbg+SJRKtpM
MD5:	662EA2BBC39B50BCDCBE04DC2CD7A087
SHA1:	4705F797D3E54D7953493DEBA121A8B4C397060F
SHA-256:	BFA43BCF43FA6CED5E1AF0BA042098DA244E4441A9C1D53E4B7B0DBFE764B1C6
SHA-512:	7E9903DE3548135C5C17813B2438D337BB565CEA17E6C3A5A4D7FF4B3A197A67B9FA6A16296A13174C5FA0D2E77EFBEC019E816541E074ACDB764F88EC685028
Malicious:	false
Reputation:	low
Preview:	{"blacklistedFields":[],"constraints":{"profiles":{"AMPWeb":{"precedenceOrderedRules":[{"filters":{"nonEmptyFields":["isSignedIn"]},"fieldConstraints":{"clientId":{"generateValue":true,"namespace":"AMPWeb_isSignedOut","expirationPeriod":86400000}}},{"filters":{"valueMatches":{"isSignedIn":[true]}},"fieldConstraints":{"clientId":{"fieldType":"id","generateValue":true,"namespace":"AMPWeb_isSignedIn","expirationPeriod":15552000000}}}]}}},"treatmentProfiles":{"AMPWeb":{"treatments":[{"filters":{"isSignedIn":{"nonEmpty":true}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedOut","lifespan":86400000}}},{"filters":{"isSignedIn":{"valueMatches":[true]}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedIn","lifespan":15552000000}}}]}},"compoundSeparator":"_","fieldsMap":{"cookies":["itcCt","itscc"],"custom":{"impressions":["id","adamId","link.type","station-

Chrome Cache Entry: 182

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 24 bits/pixel, 32x32, 24 bits/pixel
Category:	downloaded
Size (bytes):	12014
Entropy (8bit):	5.8597190788401115
Encrypted:	false
SSDEEP:	192:L7xWVSgHQUkVbBQZf8POXQu2jMLlZYrZ7667V776+:L7xWVSgiV27QfjMLcrj
MD5:	87052396F5FFD63B642D1BAB54E7EDB7
SHA1:	F3E75DDE1FAD3A5FE639E3D0C04122FCFAB918E2
SHA-256:	EA54FEA4CE7FCA6339E5B437CA43CBD46C84AA46477BE66436608B5FB0A9E02C
SHA-512:	84F96774BF4E8CE6BDFFC68AB6ADFBAA7508BD8E9A3372A33C0032FB519BF51A6AFB34CD70CE8A84C32A1F4BEC2442B87CB5CBEE86EDD468D510E502705D4788
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/favicon.ico
Preview:	......00..........6... ......................h....)..(...0...`................................r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..r..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..t..v..v..u..v..v..u..u..u..v..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..v..u..v..u..u..u..v..u..u..v..v..v..u..v..v..u..u..u..v..u..u..v..v..u..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..w..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..y..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..{..}..}..}..}..}..}..}..}..}..}..}..}..}..}.

Chrome Cache Entry: 183

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	244748
Entropy (8bit):	7.995691927196956
Encrypted:	true
SSDEEP:	6144:0j5FgtXKqm3eK60anWDVUK0u4a45U00kYUUe2F1IU77a:wyBKqSe6anW2K0Na45ULjUUeuL7G
MD5:	91DAA37E09DF8B688F7832E7D6D80AA6
SHA1:	FC59E29275E98DD5DCE1EFC9B982EC1BA5AD4276
SHA-256:	EAF99FDDDBAB6953D53DF2A7E81B5275E90E221E0A7EBD3D99F42CF4B6ABA6D2
SHA-512:	96944B45CDAECBB55CF9869004D3644DAFFC9198B9A7033F581B0C2BE769ACA586944F9BE48C68278DF9F0159EB0B248D1A4C5122283E392827FF7D8304E2378
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/t_main_iOS_demo.mp4:2f81cf52c161d1:0
Preview:	... ftypmp42....isomiso2avc1mp41....free....mdat...q....m.E...H..,. .#..x264 - core 157 r2935 545de2f - H.264/MPEG-4 AVC codec - Copyleft 2003-2018 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3:0x113 me=hex subme=6 psy=1 psy_rd=1.00:0.00 mixed_ref=0 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=0 chroma_qp_offset=-2 threads=7 lookahead_threads=1 sliced_threads=0 nr=0 decimate=0 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=0 weightp=1 keyint=12 keyint_min=1 scenecut=40 intra_refresh=0 rc_lookahead=12 rc=crf mbtree=1 crf=20.0 qcomp=0.80 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:0.50....4.e...)..D....M.....B~.li..f.&r...N....oZZ@.]B...a..iO.d....A..._.......T...D...f..}.....p5..&.}.lI..)o..\|.."!G/....~.Q.`....)V"a..U......SK...=.Lp.d.n/l!.....&...o.....kz....#..1.p.k...A?....N.I.....^..=@..*8....?..D.....~.....3...}L.....j..yEU[l......z0.........lu.Ild....O.SF...G.B.9..S..^k...5h...3..KB.

Chrome Cache Entry: 184

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1328)
Category:	dropped
Size (bytes):	349993
Entropy (8bit):	5.357908617608227
Encrypted:	false
SSDEEP:	3072:IaurdhEIEvAr/1G93xWLF+cqt6UqZSebMIzb7CnBWQahL:Ifr/1G93xWJnH7EWQ8L
MD5:	E3898CF886FE061B936CBEA3F51E872D
SHA1:	31D6E7833F1FFC22993E1B8B1A3C56C9A19EA89A
SHA-256:	2C30DDD4EA9E0B822C9A01C8E83DAEEE51AE059665BD4507CD382017E8E8B1B3
SHA-512:	E18A69D9F735007B8B4B5042A02378B78972A71AF54543B44449B07BCA2A8E806945824749EE217B35DEC00B31BA759D69652AD0317210C29C17DA812D233780
Malicious:	false
Reputation:	low
Preview:	/! For license information please see chunk.739.25e60d65f7e9bdd75f12.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[739],{2353:function(e,t,r){"use strict".r.r(t),r.d(t,{KNOWN_CAMPAIGN_AND_AFFILIATE_QUERY_PARAMS:function(){return n},KNOWN_MARKETING_QUERY_PARAMS:function(){return a},METRICS_REGISTER_ENDPOINT:function(){return o},MUSIC_AFFILIATIONS_ENDPOINT:function(){return u},PROCESS_REDIRECT_URL_ENDPOINT:function(){return i},TV_AFFILIATIONS_ENDPOINT:function(){return s},default:function(){return f},handleCampaignAndAffiliateUrls:function(){return c}}).var n=["affC","adId","advp","at","ct","itsct","itscg","itscc","itcCt","its_qt","ls","partnerId","pt","qtkid","uo"],a=["mttn3pid","mttnagencyid","mttncc","mttnmyad","mttnmyadg","mttnmycmp","mttnmykw","mttnmypla","mttnmypub","mttnmysite","mttnpid","mttnrefid","mttnsiteid","mttnsub1","mttnsub2","mttnsub3","mttnsubad","mttnsubadgp","mttnsubcmp","mttnsubkw","mttnsubpid","mttnsubplmnt"

Chrome Cache Entry: 185

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1015)
Category:	dropped
Size (bytes):	994627
Entropy (8bit):	5.471886698451695
Encrypted:	false
SSDEEP:	12288:qBoMXaFHzsbqCI4/LdRb8uCjZqXVUBkxd:qW2/LEtgUCxd
MD5:	AEF9FA34A5CA723671AB2D0AB1876E84
SHA1:	ABBCDBB2BA05ADF02C01145282F4465CF5B1BB4F
SHA-256:	48804C8E534CE15D25417DAC18E4744E82AEA8C7EA4D7BD55522A395D16BE1E6
SHA-512:	3C79D9179B86DE0077CBD3114A1352466579D40EB372278CC9648F511C66D3C4F252C813A1638181D1DBFE107C5E38ACD76C3B26872C547E415A8546277F91A2
Malicious:	false
Reputation:	low
Preview:	window.EmberENV=function(e,t){for(var r in t)e[r]=t[r].return e}(window.EmberENV\|\|{},{FEATURES:{},EXTEND_PROTOTYPES:{Date:!1},_APPLICATION_TEMPLATE_WRAPPER:!1,_DEFAULT_ASYNC_OBSERVERS:!0,_JQUERY_INTEGRATION:!1,_TEMPLATE_ONLY_GLIMMER_COMPONENTS:!0}).var loader,define,requireModule,require,requirejs,runningTests=!1;(function(e){"use strict".function t(){var e=Object.create(null).return e.__=void 0,delete e.__,e}var r={loader:loader,define:define,requireModule:requireModule,require:require,requirejs:requirejs}.requirejs=require=requireModule=function(e){for(var t=[],r=c(e,"(require)",t),n=t.length-1;n>=0;n--)t[n].exports().return r.module.exports},loader={noConflict:function(t){var n,i.for(n in t)t.hasOwnProperty(n)&&r.hasOwnProperty(n)&&(i=t[n],e[i]=e[n],e[n]=r[n])},makeDefaultExport:!0}.var n=t(),i=(t(),0).function o(e){throw new Error("an unsupported module was defined, expected `define(id, deps, module)` instead got: `"+e+"` arguments to define`")}var a=["require","exports","module"].

Chrome Cache Entry: 186

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	1670
Entropy (8bit):	7.799260886276612
Encrypted:	false
SSDEEP:	24:e84vGJJHmZ3VA257v0Mi0BrVPjvGkPsNYexfxvq8Ur4D9nb8SvMi2Ax7Su/LZC8s:e8tDmZ3VA2578MhB3CFQu8YEAxRQL
MD5:	CF755E44BEA679E8DFFD37C895FB631A
SHA1:	46BC753191AD17651A84D33AF6D01FCC7FFE3D5E
SHA-256:	2CFB8FCE91BD8B98C2F61323A1CE8493D78861CE2E443A30BC764C544D2F1346
SHA-512:	76A66C50A3FA849B0BAA168AF62CB29C3CF33A73C8574C693CBE1B21F7430E749651EB0C51D6AD09AED38F663938D8486A676EA1F0CF7C0873AF32C499571040
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/29/5c/74/295c74dd-9f36-cf33-1999-f3514112471a/AppIcon-0-0-1x_U007epad-0-0-0-85-220.png/146x0w.webp
Preview:	RIFF~...WEBPVP8X..............VP8 .....".......>.F.I..!..U.<......cM.}VO..w...g.3..?..[.z......[.....O.._....W......?..U...;.7.3......Vk7.^.j.....{...bgm.d.+..,Z.xt.dC.....w.l.$.l.oS.>...?.......C..I\|..H...eK...C..[<.!h{..?Ct...g$...`..#.."....k...L.g...}'....?...........M..im..!..k...../.........pN.'S..s7.:b...x.m..BH./....<3N.{5SK.qf8...=8Y.8...U.....E..S....iHN..~.V...."..@..M...'..I.ni..J0q....0R...1i]....+.....RRRT.=...O_..H....8x/...!>.A.8..c.....Z.......:bw(e/.n..N-r...P....~.X.....E'Z.Y....=.=.M............r..B'.....5.Dt.....&S..x}s.U..w..m._+;{<7..,....s.....&dg.j...BD.L.\0.....2%...$.~.MLI[Z(..J..'./9.^..J....s...T$H....t./a.WE..!shw....bey=E.h..f.w.S..]R.p.....W.h<A[R.."!..\|.$....'....m.....t.5.. (V.}.zy....).>.k8......^K.u...7.9......B......!...-.@K.+..Z..f...}.U..1.n.6/b.n)...N#U...F.......g..m.K.......s..l..TK..n..+.. ..V...{..M....2z.....%.z.....R.........@.O.r.u.t..K_..x...7.,.^WH.....i.....1....jy.r..,.A.,?Ad!./S.

Chrome Cache Entry: 187

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3003)
Category:	dropped
Size (bytes):	18440
Entropy (8bit):	5.255534167782927
Encrypted:	false
SSDEEP:	384:kz8E0CXVpU4y7FeTEkrHfcBkoNiIvYcaSRCF+q4nAHY+6dDlqW1hCSallZsWY:kz8E0CXVpU4y7ZkrHfcBkSiIvYc/Re+J
MD5:	5F765A4A59A407D5DAA33CC0B48F2A35
SHA1:	44E29FDCCC78BAD49465D30F2AD9D5DE816AE150
SHA-256:	5C98E1CF88ADBADBE52321041E084AA2D5BC4DAAFFBF8EC6C45A438E8D393202
SHA-512:	ABD01A44A94A0BE2B000DB5BB60A439AFDA8948B32B3F0685AC9AFE175EC9E3701C3747457BE42032C1EA0707AF02109D46187FCA39F2815BD8AEDBBD365F38C
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[934],{7934:function(e,t,r){r.r(t),r.d(t,{default:function(){return W}}).var n,o,a=r(32722),i=r(24178).function s(){return o\|\|(o=["app","appVersion","hardwareFamily","hardwareModel","os","osBuildNumber","osLanguages","osVersion","resourceRevNum","screenHeight","screenWidth","userAgent"].concat(["delegateApp","hardwareBrand","storeFrontCountryCode","storeFrontHeader"])),o}var p,c=i.SC.attachDelegate,u=i.Z_.cryptoRandomBase62String,l=i.Z_.exceptionString.function m(e){this.setDelegate({topic:e}),p\|\|(p=!0,s().forEach((function(e){m.prototype[e]=function(t){return t&&t.hasOwnProperty(e)?t[e]:this.environment()[e]()}})))}m._className="eventHandlers.base",m.prototype.setDelegate=function(e){return c(this,e)},m.prototype.topic=function(){throw l(m._className,"topic")},m.prototype.environment=function(){throw l(m._className,"environment")},m.prototype.eventRecorder=function(){throw l(m._className

Chrome Cache Entry: 188

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2234
Entropy (8bit):	7.8380121664973235
Encrypted:	false
SSDEEP:	48:gyvUAf8XkB1r3049l8T4P3lBiflcSow/9RfhL9bZ9NY:gyvUBXq1r30ilSlDf59bZ9C
MD5:	448C395B96EA9F0D530657000824CD94
SHA1:	9BCB8065A090E403D8DD1AA0BA92A9B674E399C5
SHA-256:	576038FD2A0FBFE5DAAAFB219133B14E8393D0D7CB9A4C9376B570506920633A
SHA-512:	35441D8CA2D42D3620D4BF747B3E5BC6B1621AF7001AB94AC5A2F39A82E3B84ED3B30E69BD0CE13F5A3ACDE03AD42C90B27751206C8CF14BAEE62F9C91513370
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8 0....'.......>.R.I$"..Z..D.D.7n..l........W..W.........;>.<.?].A....i...o...O;.d.@../..p..=.....@..G...7..h.e..L...da..A..9..d.\e{~.C......Rj.s_...xI.......l.X..IX.v...D...A....s;%U=.)....V..A.e.".w:..l....Ss....fx....L..kt....K;E.k(..;.Z...i........q7...0m......V..=o}.7.T..?E},.g.X.-=F.GZ..[.~".l..;.....Q....Q.@......W:nE....q^..:C...O..f..Y.......Ox.M..:vV.E..N..............e8..l..u.X......... Po...V.(...{...3.".).!s6m9.......=~.d.,..u.q.v.WjG.G...-..E2d0\.J7?.}z.?.a......=mF.AMH...........".S.5w.H...p(;.7x.(........7.q;U.QQ....(.S...=r....yti~..........b.6..R}.~.x...)..l.O_.U&1..(.OJ+.i....dg....j+.}S..Al.Q...C.a{........F...W1...........ihgZ..m.>.z.l.i.@.s.S...F.z..[...\|,....ZYf..O{...6;.....b..#u..8Gz...IZ.T.....o.......:..h..]....\|X.#2T...L8.6j@.....z...Y..z0...#.&;....Y....%..#...Y.......*...0QN8.%.W...fGr......&.n.)6..&.....@+..bhzc.f..Mr..d..g_.....'P.she.....i.8.......t.....u[Y.d..v6x.).T0f..

Chrome Cache Entry: 189

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	100601
Entropy (8bit):	5.405523706724719
Encrypted:	false
SSDEEP:	1536:yWbjzXwlvEwbDey5wOl3vkiXo3pJR/wxQGlImvDshx:yW2vVbDeyCOl6J3GumvDs
MD5:	9B31C5083355B2AAAAAEC512F3A0021D
SHA1:	395C9925E89A0AE66F0E016AE664C0AABFD64865
SHA-256:	59DF8CAEC8E28F1DD238C2F59FDB02854B51DA69B0BC1A18271C502A9A166295
SHA-512:	2B1C65386A00FE87D1B74D319DBD9F421A5873E5C1B32E0FEC801A03444ACCE9C35D2F4AC3C6DEF701C885347F750408DE8E948ABC28DBE306C76C088E9694B8
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/rlottie-wasm.js
Preview:	var Module=typeof Module!=="undefined"?Module:{};var moduleOverrides={};var key;for(key in Module){if(Module.hasOwnProperty(key)){moduleOverrides[key]=Module[key]}}var arguments_=[];var thisProgram="./this.program";var quit_=function(status,toThrow){throw toThrow};var ENVIRONMENT_IS_WEB=false;var ENVIRONMENT_IS_WORKER=false;var ENVIRONMENT_IS_NODE=false;var ENVIRONMENT_HAS_NODE=false;var ENVIRONMENT_IS_SHELL=false;ENVIRONMENT_IS_WEB=typeof window==="object";ENVIRONMENT_IS_WORKER=typeof importScripts==="function";ENVIRONMENT_HAS_NODE=typeof process==="object"&&typeof process.versions==="object"&&typeof process.versions.node==="string";ENVIRONMENT_IS_NODE=ENVIRONMENT_HAS_NODE&&!ENVIRONMENT_IS_WEB&&!ENVIRONMENT_IS_WORKER;ENVIRONMENT_IS_SHELL=!ENVIRONMENT_IS_WEB&&!ENVIRONMENT_IS_NODE&&!ENVIRONMENT_IS_WORKER;var scriptDirectory="";function locateFile(path){if(Module["locateFile"]){return Module["locateFile"](path,scriptDirectory)}return scriptDirectory+path}var read_,readAsync,readBinary,se

Chrome Cache Entry: 190

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1283)
Category:	downloaded
Size (bytes):	62120
Entropy (8bit):	5.200233203039825
Encrypted:	false
SSDEEP:	768:rPksmcJcApCeZygCoEOuTudKEEB8xAnpFyS5eCyDvmojEWCykh5kNbeAFjg5gvC8:rPksrJCeZygColbQJL5/U
MD5:	3EA70AE6D554F9FC0FFB8CB0281EC0A6
SHA1:	58D41E45856B15260F69F19200B6DE7FDCBC82E6
SHA-256:	A5B0CC4EF0FF84660C52A703030A8F948CC8702EF6B0535CC31FF8611823DBB9
SHA-512:	00E5EA6FF4C91E1419C4F7FE95815E67C11EDE4849810C2F3371E694622084D439F0E73C855101CB0A1A5B516A8821DE3B2EB1AEB450325F8A38E3EF3B9CC19B
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.171.ce33468efea141bac957.js
Preview:	/! For license information please see chunk.171.ce33468efea141bac957.js.LICENSE.txt /."use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[171],{70171:function(t,e,n){function r(t,e){(null==e\|\|e>t.length)&&(e=t.length).for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n].return r}n.r(e),t=n.hmd(t).var o=function(t,e){return(o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)}.function i(t,e){function n(){this.constructor=t}o(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var a,s,c=function(){return(c=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function u(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator].if(!n)return t.var r,o,i=n.call(t),a=[].try{for(;(void 0===e\|\|e-- >0

Chrome Cache Entry: 191

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 840 x 487, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	189734
Entropy (8bit):	7.995418777360924
Encrypted:	true
SSDEEP:	3072:qKCCO9mMyY1K6SCUQB4AxtinSEItHFDukVnxJQTu6r6R7NApp4rFDwGIQ:nzOkMy97CRR3Ljn5n2uYgGkKQ
MD5:	40D4266E5AADC87CCEEC1AB420DC2692
SHA1:	266C56990A106B6E9EFB0F9EF2A1A752AA6FA0FC
SHA-256:	3A1D4890B3E91A01C20C65B75F1AE028E3C445CAD1FD2D249DD0868876DFE4B4
SHA-512:	7DE32DEFDD87034F29930A7A32915100C2A109A80C79EED4C0A5F3127D1101FE0BF59B41CB4C5807F6FEA29A7721EBE74C55A8A4942C4EF67EDC40B860F46277
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/img/td_laptop.png
Preview:	.PNG........IHDR...H..........2}.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx....%gu...p.9..{.hF......H..D2\..?0.m.`..y...6.e..}..#...X.....X...H..@.......S....V.L+.hF...R.P......$......x-M/..r.NK..ko)..(..(O...)....v......x.v.S....).H..t-M/....Q.EQ.EQ...h..M.HB.....F.S.J..L..4.H.UQ.EQ.E9.../h......M... =I...\|).I..(..(..t.i..\|.7.....Nq..T...7.EQ.EQ....hz9...v....C.]A...)...(..(...!\|......O..yb.h.....#EQ.EQ....+)_....Q.....+..+s..EQ.EQ...$....}.{wiW<~........EQ.EQ.#....h7.@:\.W.@Q.EQ.E9.y..W^y.v...C..d....'.EQ.EQ.....]...P.2.3EQ.EQ..(......5...P.EQ.EQ..V^y.'k7.@:...].(..(......I1...P.EQ.EQ.~U...j....(..(.QDY.@...(..(..(..$EQ.EQ.EQ..H..(..(..(O..v..I.D;AQ.EQ.EQ....IQ.EQ.EQ.E...(..(..(..$EQ.EQ.EQ..H..(..(..(.B.4.!.J%.[.N;BQ.EQ...e...h6.....f...i..5o.....^.q.C.G1:A.R.F.Q...(..(.R.q.....c..d...^..uX4{_....]....AP..d.,.{..vI$.(..(..,C,E.M..^..d?1....~....EQ.EQ.EQ..H..(..(..(..EQ.EQ.EQ.Es.......G..EQ.EQ..7...$EQ.EQ.EQ..H..(..(..(*..EQ.EQ.EQT )..(..

Chrome Cache Entry: 192

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1015)
Category:	downloaded
Size (bytes):	994627
Entropy (8bit):	5.471886698451695
Encrypted:	false
SSDEEP:	12288:qBoMXaFHzsbqCI4/LdRb8uCjZqXVUBkxd:qW2/LEtgUCxd
MD5:	AEF9FA34A5CA723671AB2D0AB1876E84
SHA1:	ABBCDBB2BA05ADF02C01145282F4465CF5B1BB4F
SHA-256:	48804C8E534CE15D25417DAC18E4744E82AEA8C7EA4D7BD55522A395D16BE1E6
SHA-512:	3C79D9179B86DE0077CBD3114A1352466579D40EB372278CC9648F511C66D3C4F252C813A1638181D1DBFE107C5E38ACD76C3B26872C547E415A8546277F91A2
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/vendor-11edb3a2e705756f06f5029174864bda.js
Preview:	window.EmberENV=function(e,t){for(var r in t)e[r]=t[r].return e}(window.EmberENV\|\|{},{FEATURES:{},EXTEND_PROTOTYPES:{Date:!1},_APPLICATION_TEMPLATE_WRAPPER:!1,_DEFAULT_ASYNC_OBSERVERS:!0,_JQUERY_INTEGRATION:!1,_TEMPLATE_ONLY_GLIMMER_COMPONENTS:!0}).var loader,define,requireModule,require,requirejs,runningTests=!1;(function(e){"use strict".function t(){var e=Object.create(null).return e.__=void 0,delete e.__,e}var r={loader:loader,define:define,requireModule:requireModule,require:require,requirejs:requirejs}.requirejs=require=requireModule=function(e){for(var t=[],r=c(e,"(require)",t),n=t.length-1;n>=0;n--)t[n].exports().return r.module.exports},loader={noConflict:function(t){var n,i.for(n in t)t.hasOwnProperty(n)&&r.hasOwnProperty(n)&&(i=t[n],e[i]=e[n],e[n]=r[n])},makeDefaultExport:!0}.var n=t(),i=(t(),0).function o(e){throw new Error("an unsupported module was defined, expected `define(id, deps, module)` instead got: `"+e+"` arguments to define`")}var a=["require","exports","module"].

Chrome Cache Entry: 193

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	625
Entropy (8bit):	4.952963038414406
Encrypted:	false
SSDEEP:	12:UXv7Fc4DpWNRKL+BK/sgl9hrIYerznR3zueIDRTLG9fkVlF38LG0DAvYodXotHNu:u6oTTlrIYevhTuKtLG0MAodXcNu
MD5:	2DFF575911FD65E601AC64F87F07D5D1
SHA1:	AE28A08E8E333C9234AD0D024D0865E5E36C5B2C
SHA-256:	7DF89772DEFA309D97987A7D985ED3F0DA91D81180FE69BB11DA8A8B181B418D
SHA-512:	3E6530272A6497738135CE998D2221588C487A27F20BD3745224F3FA43FDBFF8A2C8DDD42709B01B1CBF8FCE8EB6DC1EC9FADFE5FCF1AAEF0DE5B18CAAA6CBD7
Malicious:	false
Reputation:	low
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const n=function(){window.MusicKitComponents={version:"2350.1.0"}};export{n as g}

Chrome Cache Entry: 194

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1283)
Category:	dropped
Size (bytes):	62120
Entropy (8bit):	5.200233203039825
Encrypted:	false
SSDEEP:	768:rPksmcJcApCeZygCoEOuTudKEEB8xAnpFyS5eCyDvmojEWCykh5kNbeAFjg5gvC8:rPksrJCeZygColbQJL5/U
MD5:	3EA70AE6D554F9FC0FFB8CB0281EC0A6
SHA1:	58D41E45856B15260F69F19200B6DE7FDCBC82E6
SHA-256:	A5B0CC4EF0FF84660C52A703030A8F948CC8702EF6B0535CC31FF8611823DBB9
SHA-512:	00E5EA6FF4C91E1419C4F7FE95815E67C11EDE4849810C2F3371E694622084D439F0E73C855101CB0A1A5B516A8821DE3B2EB1AEB450325F8A38E3EF3B9CC19B
Malicious:	false
Reputation:	low
Preview:	/! For license information please see chunk.171.ce33468efea141bac957.js.LICENSE.txt /."use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[171],{70171:function(t,e,n){function r(t,e){(null==e\|\|e>t.length)&&(e=t.length).for(var n=0,r=new Array(e);n<e;n++)r[n]=t[n].return r}n.r(e),t=n.hmd(t).var o=function(t,e){return(o=Object.setPrototypeOf\|\|{__proto__:[]}instanceof Array&&function(t,e){t.__proto__=e}\|\|function(t,e){for(var n in e)e.hasOwnProperty(n)&&(t[n]=e[n])})(t,e)}.function i(t,e){function n(){this.constructor=t}o(t,e),t.prototype=null===e?Object.create(e):(n.prototype=e.prototype,new n)}var a,s,c=function(){return(c=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function u(t,e){var n="function"==typeof Symbol&&t[Symbol.iterator].if(!n)return t.var r,o,i=n.call(t),a=[].try{for(;(void 0===e\|\|e-- >0

Chrome Cache Entry: 195

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (579)
Category:	dropped
Size (bytes):	17977
Entropy (8bit):	5.172440917667389
Encrypted:	false
SSDEEP:	384:xV1W44hioeBevmrjGRp1AFjga2dCjrI7KV0t:s44hioeBA7AFjgaU7KV0
MD5:	E62FEA2030907AF7E89AE14B53FFA550
SHA1:	7B4F41FC31DA2F829A183DFF72CDD708EA76665D
SHA-256:	F66B859A3A06C27EF58D1CC069E5BA8A9A47B3C7AEAF448EADF1F589582C360B
SHA-512:	1CDD5DCFCA7F6EFB33854F4ED6BA0D535CC0D444A78499240DAFBBCA2ABE9772E14A5D0E7A34CDE9A9716E068CE5FD6F5EB3271BC549BF17DE075F18E31661CA
Malicious:	false
Reputation:	low
Preview:	/! For license information please see chunk.359.1a547c0d896fa5233fdb.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[359],{65359:function(t,e,n){t=n.nmd(t),function(e){"use strict".var n=function(){return(n=Object.assign\|\|function(t){for(var e,n=1,r=arguments.length;n<r;n++)for(var o in e=arguments[n])Object.prototype.hasOwnProperty.call(e,o)&&(t[o]=e[o]).return t}).apply(this,arguments)}.function r(t){var e="function"==typeof Symbol&&Symbol.iterator,n=e&&t[e],r=0.if(n)return n.call(t).if(t&&"number"==typeof t.length)return{next:function(){return t&&r>=t.length&&(t=void 0),{value:t&&t[r++],done:!t}}}.throw new TypeError(e?"Object is not iterable.":"Symbol.iterator is not defined.")}function o(t){switch(Object.prototype.toString.call(t)){case"[object Error]":case"[object Exception]":case"[object DOMException]":return!0.default:return s(t,Error)}}function i(t){return null===t\|\|"object"!=typeof t&&"function"!=typeof t}function a(t)

Chrome Cache Entry: 196

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	733
Entropy (8bit):	4.7574006224426535
Encrypted:	false
SSDEEP:	12:YGKzFDsip968DDp8MIfE1lI11I1581f58zrF8qWKxk8IV5wDKOBuGpQJNGzF/BQU:YdxDsinqMIqlI3I1y1fyzr+jcdD9J+Sn
MD5:	CC64BFA00B4B3FF916A983A0C27DEA58
SHA1:	62452E81D49DF7E3EDAE74AE32A3E9A613DCFE86
SHA-256:	67CB92C8D3E193BCAC15DEBC8CC34C5D2CE531C9A13D037EBFECDC662679215A
SHA-512:	C6D1D59F4D354EF39AA6D59002D23AB6AEA977CC3B68FE9A6D0821FC0C6EE279390A35B8DB2E7E8D39C913694811CEF04763452D8075C63722700E2B5120F3EC
Malicious:	false
Reputation:	low
Preview:	{"compoundSeparator":"_","fieldsMap":{"loadUrl":{"timestampFields":{"fetchStartTime":["fetchStart"],"domainLookupStartTime":["domainLookupStart"],"domainLookupEndTime":["domainLookupEnd"],"connectionStartTime":["connectStart"],"connectionEndTime":["connectEnd"],"secureConnectionStartTime":["secureConnectionStart"],"requestStartTime":["requestStart"],"responseStartTime":["responseStart"],"responseEndTime":["responseEnd"]},"otherFields":{"requestUrl":["name"],"transferSize":["transferSize"]}}},"metricsUrl":"https://xp.apple.com/report","performance":{"samplingPercentage":0.25,"samplingPercentageUsers":0.25,"sessionDuration":60000,"samplingPercentageUsersPageRender":0.25,"sessionDurationPageRender":60000},"postFrequency":5000}

Chrome Cache Entry: 197

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3174
Entropy (8bit):	7.914371951671992
Encrypted:	false
SSDEEP:	96:YaQzwrCbt+aDT0qAWp2kgD+BCHC6U6q0gPgH0DqQf:+ziMDIqAG2RDp5kYEqo
MD5:	F40FAB1C2BF9570884064FF8416DE6E7
SHA1:	67B2753D3DA21427070B1E214CA75FC75D4C4C10
SHA-256:	95418A77A49C4050417F75DD3FF6F5917BF5AA2DC4D3B0F62275CC6A5F5D5A9C
SHA-512:	F40BBF3C28FE9CEA77608D187974372FBFC0A0DC6D50EC3AF297EE7A4FB8EEF08AF073CE5FD746DDB1DF88B78D5D555218AFD520E3C63A001F1A6E7DEE1484D9
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/f8/86/6c/f8866c74-f672-1857-c184-be4b591a037c/AppIcon-0-0-1x_U007emarketing-0-7-0-85-220.png/146x0w.webp
Preview:	RIFF^...WEBPVP8X..............VP8 .....4.......>.\.G..!..]HL....kNA.5..a.a.4g.....v.O1.o^...z..G.H...U....D.%...6k~....."...r.7.Y...........t.N_..fC......$....Iq..(g_c..)...u#.q..l.yV..,+...J...p4.....y....J........6.. ..M....r9=UQ..z..u[d....dF..&2./.+........&w.4'3..[T.u.n."..3.a@./...,......"......H1dM$$f~a..)..^....H.<.L.YFGa......A..Ra...7p.U.N.A.3.....=.#+.':..<$qW.2U...Y.Z-1...'2...<.\.p!.......Aog..P..Cd...<.`.5..g.em3.O.pX]?..C.o.:ii..).....XA..m.M`...4d.I{.s..J;s..u....2...u......-.y]...9I...."........B..-..'.8U.j^.O:.c..ns.`."$..z..Y.:..@..=k....-.O.=.B..+.J........./.f... ..z...0.}..!....-._I..K..0P.n...Q#7<.y.f.tS.....'..,../s.A....frk.q..lM)....3d.7..AZ...,$\9.R..\......n...D.f.S.3........A ...B.Ib..E%..\c.......b..x.>.a..7..6.!qE.#....ke..6.n......6..q`....y......]_~............<..YR Fjpg...a...J..@.E...\|...........ER....\|...C....n30..M.....{...Q}b.....$....*V1.....d.~...g\|...!.....p...9......z.:......._.5u....[m..}.:....U~(BMVh

Chrome Cache Entry: 198

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 163075
Category:	downloaded
Size (bytes):	14496
Entropy (8bit):	7.979392745644631
Encrypted:	false
SSDEEP:	384:U7IOQ8j3z6r6a06gUOJd34frJzgQpsWZBJn9H6+6:gIOzGlrOr34zPpsWt9H6+6
MD5:	78D3BCD9609C319C6AB7FC403D7F0180
SHA1:	49D91136FA50933FF1B9E52E23F214E578DC93EB
SHA-256:	7987BBA1A813626330B373BA05D4644D665378BB8F6A782D2297C101AEED1161
SHA-512:	4C0B0130E2E11A603EB307827C272C50DE058430977EC7123828BEB147CFD12D56872DAA1076184906DDDAE12CAEEB5BFD21663DB057C88E749808E607A34749
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4
Preview:	...........}Y..F.._....}.[..g....h....A....q..$u{....=...If....,)..&.8q".....>....+.....;'..w..O...{...+.xK../..}.n.~i?.{C...J.....}...o...=...+~...........5]....w/$............b0>.q..m...//..?y...(z......}....m......Wz......K~..n...V7Zk..m..?.\|=.g..7H....\|.}.k...o..........~~O....g.[.........\|.....Mx..;.S....W.1\|U..y.....a.#p..e..".D../.k....O\|.L..9..qA.!.........H..x........07.T...oK.Sj<3e..$F..i,.....#].....b...A.~..k^....]....(4.C..q.g..Q....8z.....F...%z.FL._...X-<_.(........e..Z\..p...h.^..S...H.L\(m..q..I..\Qd.37.%4.qU..s.].....o.4.=T8-..\|1L.31A.4.q.o..?"B..h'b<w_.(<. .....>.._..[.)..-.....F%a....=.pO..n.%.P....>.H.9..YI......Th{+.....i"d...(b..W....9%..+..rPe.p..I..H....e....F.._......R...VB.(....Iu.UX..".C-...7..!.C...!.H.."0c.d....D.%....}zM&........!.0.L..B. ..........h...^.{....hH.a.0...4".*.....mh%T.e...v.m~..;Fa.@R.@..7.....H.H.......7......Q`.Ra......0..fc.!.E..:mh..=g.\.".....D,..G.-..+..NB..Z...I....).N...l

Chrome Cache Entry: 199

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	9802
Entropy (8bit):	7.977037516330821
Encrypted:	false
SSDEEP:	192:Q1VgBheMOUFDwTP23lmOKGXn9NS/AmN1y4Jq/weAEyvXzeQ+CkjvxBc3nfGhDxcy:QPgyrODb3bKMn9NS/A21BwAgQ+C4c3fi
MD5:	4F532FCF84EB18031D87EE17DE49C0B4
SHA1:	F75A0C9B678DBD36D741CB97E1D062135CB920CB
SHA-256:	629679442962DC714E8DD732C30FCFCE9032D46EC9C56D21570FA965D050E27A
SHA-512:	1C50C065FF4EDEB1FC9FD2B15E43DABF50FE3CE2C5D6E47D569D9A4489A5DBC1B0D1DBA4462F0C374658542A5168046F8E6725CDDE729C00467E254E66E2EAAD
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/f7/2a/49/f72a49ab-3481-577a-135a-20cb2b7c8283/pr_source.png/230x0w.webp
Preview:	RIFFB&..WEBPVP8X..............VP8 .%..0........>.N.I."(...;......-.%k.....^..~`.ar.~~......./..\|....o..`?..=...x..^.?e.f...................g.......O.?.}0=@?..2.3.?.^#.D..}.c........m@.q...c...'.._.z......o...\|b...[._.../........n.#....B__{...zu{....]..l..wlS......2\.....Q;..\|.-...f..f..h...y.OR..."...J...n....=.....Q......}..._.'bw..).;.Qb-E..o.;.J...h=.A.2..l.....~.=}.8..w...V.qob...8....7:.9...oGZ..F..[..~l.:......O./..W.=uLp.4.....t....9ehJ....y8.I...^..8.<.y...C.G=}P....tet]~B.E..U.N.).{.j........$..{.q.4.N...............3.^8&..g....p.C[q..J....#.2FLAXZ.XI...D&2F...'.4,...0...,..z...$...ho.i.....2....\|.h...7.i..RP....@.'qS...t...^....;..a..*..9.e.O<.7..!.`e.......~M5UP.}..m..vO?...0....VL?...-.(.........x...0.....j.}..m......&\....3F}c/[..h.{'...M.{.....{.].].3.#.D.Hya<R.~L....S\....7>......{A?..#.....KJ...._SR-...`.!CGk.K.k.4,.....>...:KwZ...DT.'7.b&.os,......k......_..H'...Vc.W.?F...^W..D...J[d.".l..$b..i.!...O.z..$...........D..e..

Chrome Cache Entry: 200

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3175)
Category:	downloaded
Size (bytes):	45694
Entropy (8bit):	5.118242929635633
Encrypted:	false
SSDEEP:	768:tpi7T07ytsSwuLFB3t8KbX3zrcW3HsBtuv3BtlK7vKH5v9u8kEFsW1:tpK1L5bTIByv9u1EFd
MD5:	8B2EA74C2950F702116F9B02ABC52BCB
SHA1:	AD7455A6E9F0D7E73BA4B80422EF805FC66F7879
SHA-256:	FFEA291B7D7F014FDC619350CAC7B5CECF876DD20EFB498EF0D915FE3AC4BA17
SHA-512:	942397EE9B53797364C02D073689CD3FC049E2EA7AF9D89F19608A61EBB76DA8A554D124F8BE99CECE74EB540806C9BBC383DAC238448D07A42DFC4D421B89A3
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.990.023f8bfb4104e9778375.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[990],{67990:function(e,t,n){n.r(t),n.d(t,{ClickstreamProcessor:function(){return we}}).var r=n(24178),i=n(32722),o=n(76588),s=function(){}.s.prototype.setDelegate=function(e){return r.SC.attachDelegate(this,e)},s.prototype.localStorageObject=r.tO.localStorageObject,s.prototype.sessionStorageObject=r.tO.sessionStorageObject.var a=function(){this.environment=new s,this.logger=(0,o.RG)("mt-client-constraints")},c={nonEmpty:function(e,t){return!!r.SC.isObject(t)&&t.hasOwnProperty(e)&&r.SC.isDefinedNonNullNonEmpty(t[e])},valueMatches:function(e,t,n){if(!r.SC.isObject(t))return!1.var i=t[e].return t.hasOwnProperty(e)&&n.indexOf(i)>-1}},p="overrideFieldValue",u=function(){}.u.prototype.constrainedValue=function(e,t,n){var r=e&&e.hasOwnProperty(n)?e[n]:null.return this.applyConstraintRules(r,t)},u.prototype.applyConstraintRules=function(e,t){var n=e.return t&&t.blacklisted?n=null:t&&t.hasOwnProp

Chrome Cache Entry: 201

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	1386
Entropy (8bit):	4.8492224043496055
Encrypted:	false
SSDEEP:	24:Yorj8jYfQypuazl92Qypua5HR9Iszb9mPuazEBb9mPuaSlSfvBLRKkfkMqVlM:Y4XzZzlkZTyszbgzEBbg+SJRKtpM
MD5:	662EA2BBC39B50BCDCBE04DC2CD7A087
SHA1:	4705F797D3E54D7953493DEBA121A8B4C397060F
SHA-256:	BFA43BCF43FA6CED5E1AF0BA042098DA244E4441A9C1D53E4B7B0DBFE764B1C6
SHA-512:	7E9903DE3548135C5C17813B2438D337BB565CEA17E6C3A5A4D7FF4B3A197A67B9FA6A16296A13174C5FA0D2E77EFBEC019E816541E074ACDB764F88EC685028
Malicious:	false
Reputation:	low
URL:	https://xp.apple.com/config/1/report/xp_amp_web_exp
Preview:	{"blacklistedFields":[],"constraints":{"profiles":{"AMPWeb":{"precedenceOrderedRules":[{"filters":{"nonEmptyFields":["isSignedIn"]},"fieldConstraints":{"clientId":{"generateValue":true,"namespace":"AMPWeb_isSignedOut","expirationPeriod":86400000}}},{"filters":{"valueMatches":{"isSignedIn":[true]}},"fieldConstraints":{"clientId":{"fieldType":"id","generateValue":true,"namespace":"AMPWeb_isSignedIn","expirationPeriod":15552000000}}}]}}},"treatmentProfiles":{"AMPWeb":{"treatments":[{"filters":{"isSignedIn":{"nonEmpty":true}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedOut","lifespan":86400000}}},{"filters":{"isSignedIn":{"valueMatches":[true]}},"fieldActions":{"clientId":{"treatmentType":"idGenerator","storageKeyPrefix":"mtClientId","namespace":"AMPWeb_isSignedIn","lifespan":15552000000}}}]}},"compoundSeparator":"_","fieldsMap":{"cookies":["itcCt","itscc"],"custom":{"impressions":["id","adamId","link.type","station-

Chrome Cache Entry: 202

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 163075
Category:	dropped
Size (bytes):	14496
Entropy (8bit):	7.979392745644631
Encrypted:	false
SSDEEP:	384:U7IOQ8j3z6r6a06gUOJd34frJzgQpsWZBJn9H6+6:gIOzGlrOr34zPpsWt9H6+6
MD5:	78D3BCD9609C319C6AB7FC403D7F0180
SHA1:	49D91136FA50933FF1B9E52E23F214E578DC93EB
SHA-256:	7987BBA1A813626330B373BA05D4644D665378BB8F6A782D2297C101AEED1161
SHA-512:	4C0B0130E2E11A603EB307827C272C50DE058430977EC7123828BEB147CFD12D56872DAA1076184906DDDAE12CAEEB5BFD21663DB057C88E749808E607A34749
Malicious:	false
Reputation:	low
Preview:	...........}Y..F.._....}.[..g....h....A....q..$u{....=...If....,)..&.8q".....>....+.....;'..w..O...{...+.xK../..}.n.~i?.{C...J.....}...o...=...+~...........5]....w/$............b0>.q..m...//..?y...(z......}....m......Wz......K~..n...V7Zk..m..?.\|=.g..7H....\|.}.k...o..........~~O....g.[.........\|.....Mx..;.S....W.1\|U..y.....a.#p..e..".D../.k....O\|.L..9..qA.!.........H..x........07.T...oK.Sj<3e..$F..i,.....#].....b...A.~..k^....]....(4.C..q.g..Q....8z.....F...%z.FL._...X-<_.(........e..Z\..p...h.^..S...H.L\(m..q..I..\Qd.37.%4.qU..s.].....o.4.=T8-..\|1L.31A.4.q.o..?"B..h'b<w_.(<. .....>.._..[.)..-.....F%a....=.pO..n.%.P....>.H.9..YI......Th{+.....i"d...(b..W....9%..+..rPe.p..I..H....e....F.._......R...VB.(....Iu.UX..".C-...7..!.C...!.H.."0c.d....D.%....}zM&........!.0.L..B. ..........h...^.{....hH.a.0...4".*.....mh%T.e...v.m~..;Fa.@R.@..7.....H.H.......7......Q`.Ra......0..fc.!.E..:mh..=g.\.".....D,..G.-..+..NB..Z...I....).N...l

Chrome Cache Entry: 203

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	999
Entropy (8bit):	4.203023852517381
Encrypted:	false
SSDEEP:	24:t9X8HzSYvdzSYvileIHlx2lxHv3IMyIC7BN9CSq/8+U00hPMCrz6f4RME:fKB5BigIHT2THv3IpIA9CVnUtMQse
MD5:	4ADC034F937B41471DAAEA71E64A727D
SHA1:	6B5C52D2A35704410262B70296A14D6A4331929D
SHA-256:	3399887FAC9F9B581A8C81860C56FCA807C0ED6876307A12C54E0161AA4721DB
SHA-512:	C6E865D3F4A6E33BD3E2F6FD0D157482C0D849820886E3D7761ADD57A4DF4AB3FE8D2F51847B4808803668309BBB9D5818B68F1E847EDC1EEEB3A7641249A302
Malicious:	false
Reputation:	low
Preview:	<svg height="27" viewBox="0 0 22 27" width="22" xmlns="http://www.w3.org/2000/svg"><path d="m19.35 11c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm-16.7 0c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm13.35 0c.55 0 1 .95 1 1.5v7c0 .83-.67 1.5-1.5 1.5h-.5v3c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5v-3h-2v3c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5v-3h-.5c-.83 0-1.5-.67-1.5-1.5v-7c0-.55.45-1.5 1-1.5zm-.55-9.54c.28.2.37.57.2.87l-.03.06-1.2 1.68c1.56 1.02 2.58 3.2 2.58 5.05 0 .31-.31.73-1.13.72h-9.85c-.68-.24-1.02-.48-1.02-.72 0-1.84 1-4 2.54-5.02l-1.22-1.71c-.22-.3-.14-.72.16-.93.29-.19.68-.14.9.11l.04.06 1.32 1.85c.7-.26 1.46-.41 2.26-.41.78 0 1.52.14 2.2.39l1.31-1.83c.21-.3.63-.38.94-.17zm-6.9 4.54c-.46 0-.82.36-.82.8 0 .43.36.79.82.79.45 0 .81-.36.81-.79 0-.44-.36-.8-.81-.8zm4.9 0c-.45 0-.81.36-.81.8 0 .43.36.79.81.79.46 0 .82-.36.82-.79 0-.44-.36-.8-.82-.8z" fill="#1086d7" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 204

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	17975
Entropy (8bit):	7.968991791805153
Encrypted:	false
SSDEEP:	384:/QJwEzZkYmHWlAk99RDXjovjCKGzsawRB8icBLu5+r0lKOqke:I1V9mIAedXUvjCKGzHwNx5Vlc
MD5:	1D581B72D19BC828654229A0773A5300
SHA1:	FF517C8BB4B37351FF3DD72F7EC66FC584E90D5C
SHA-256:	D2B3858E94ED122782DE9028F668334438649E46E5D2C6D761E3359C8E3DE200
SHA-512:	1B98B05C5F720C34D470AF9606013E8DFEF2C88225AB39DDE906E4BEC48F84851BFA9C68BD99AEBAFEFAC35C8F99861A58A40DEB5C26CB74A5A19374FE7AEDEF
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2
Preview:	.PNG........IHDR...............g-....bKGD............E.IDATx..}w..gu.s...~....+i%.-.W...1%`....\|......2...LBOH.I>z...!`..+6.MV......e..u.t.Z.J......{w........=.Xh.m.-......B[h..F.C0u.....n.a...9.@X....@.Db.....q?.s..\................n..DT{..RU........D[ ..x.& ......F.6.\..W..E :.h_SU...&....g........^!...P..W)....!"..#..i2..1<..7....^? ..I)..."5.U....W..q..BT..%.^.......33.e`~..o ".tj3@..e..\|S....hZf.~...:8.v."!O.8V<.V..5...X<8bcpX.g_.... `...@.._.6/..8o..~/......uLuLC.Kk-kr.C5D0...R.....\|8.....u..7K.Y.....!Lvn...HpT.QU.t.R.^G.s_..y...\|.I.H..C.\.DM.._.!9.D........}9..O...l..`d........D.......L.E.UU..2...`$z.a...........,.....'...,.q"...3N.........b.M.........".-1%.S.m6%S.H.i0d\|P@D\C.........GIM...0._oR}."...k'.,...7...e~..>_N.....r.a`.aps.Q.>.0..se.g..D...Lj..D.&.=..71.j...DR.H..).q...=7..x.. ....q..".......2...F...l....@....Y.2..$.>O......<!f^. %"..dD.a~;T_...[..n......N..........J;..3..2.1A.......e.&.[.{b...'.......T7.~f^n.\|.a \.4".!.of...$......

Chrome Cache Entry: 205

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1583
Entropy (8bit):	7.795445722993461
Encrypted:	false
SSDEEP:	24:+kTgV0lmQzusZvw6Xjb6LIfS63KNQZ5Wt0gRdYfw4uY0atrtB479djaKzbFetUgo:+Aga/znTeLIYYs0qN4uY0aaHzuUF
MD5:	DAEC7EF3FB160308D05DDD69A2B1DECE
SHA1:	EEACC969CD7CD563B194EFC3008008BA6904ABDD
SHA-256:	931BB77B0668427230D029C8ABE78E671B846399720E2351A3D5B4AA78487443
SHA-512:	34AAB376ABFC9CE5117416653466925E04B04771A7D2D6B75475EDC4A0967CAF4CEB822DB989C9C6AEEB10FFB89E18F6718B2C309EC14C64DF04735261280A69
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/supports/supports-Wallet@2x-daec7ef3fb160308d05ddd69a2b1dece.png
Preview:	.PNG........IHDR...\...\........X....IDATx...c.......qm.ym.m.m...&SO............;..N...=.,....g}....9.1...^18.38....18.s....n.[......Ik.V.zR..='.1..b..............gT...6..".....n].@&..Z...n..0...+.......s..O..6J..{,T{S......n{-.N3....1U.l.Kv....w...R..iTa...U.FI....d..............+.......D..fP.cd.pXK.....e...S.....IyP....q.F...}.[\.a-.O...o....r.UITze".Z.@%..S.eq..`.+....M......./7p..v,.4..,..B."...pD..q9$\|`.3.....d.p.....8...[NA.....P...~..............?}."......n....o.t.A..j.}p.5...4K]......}.../.. ..K...^.....x......._._.J....i7...`.;..R..........K..U.;.%......`.3...........Yw~H...R...,..5...#X....a.K}pl..[j.U.!.2.........w\|h.6..R.\|.on.3.9.y..{...&.....5.(..q.K...-.........R..2T7.......%8..m`.3......x..rT/.4..(N.}.P..BT.`..t ..8...f..!,u.1J5..R.M.)xJC.8.=e..B..`.+..........Vf.g.!,..{n.E..;3.3........V.....j.wp.xj..X..8..(}x+......vF/.B.....k....5I.,q...(JM....p..5....n.iGw.....:PF....&!..x..Q.v.]/,a.[....H.........}...wifJW.6Gt.[....

Chrome Cache Entry: 206

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3857)
Category:	downloaded
Size (bytes):	1160544
Entropy (8bit):	5.44525335877561
Encrypted:	false
SSDEEP:	12288:7IcMsN8pGT4l9C8OGMVi7Bv01hCAURju5p9NI:pUlT3v01Qg96
MD5:	56D26A46D0406F26005B8F47282EE333
SHA1:	69438EBE096B22A729813A305B578D0A58507384
SHA-256:	B5D9652D1696ADD89336DCCC3A72768A9E09D64D1186A82F2F8C38AFE117E4EF
SHA-512:	9BFA2CF2EDA8AE9BF95EDB16CB8E076CC18693AC25727871B3ECF1C6B22268C6745BB49A49BA66236CB9224BF6CC3DABE38229A703602A3CA62DEFE1552737F3
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/web-experience-app-ef5f5b62ff48eb6b3d594ccbde0b4496.modern.js
Preview:	/! See /acknowledgements.txt for open-source licenses /."use strict".define("web-experience-app/app",["exports","@ember/application","@ember/debug","@amp/web-apps-featurekit","web-experience-app/resolver","ember-load-initializers","web-experience-app/config/environment","web-experience-app/utils/config","web-experience-app/utils/consts"],(function(e,t,r,i,n,a,o,l,s){function p(e,t,r){var i.return(t="symbol"==typeof(i=function(e,t){if("object"!=typeof e\|\|!e)return e.var r=e[Symbol.toPrimitive].if(void 0!==r){var i=r.call(e,t\|\|"default").if("object"!=typeof i)return i.throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(t,"string"))?i:String(i))in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,"undefined"==typeof global&&"undefined"!=typeof window&&(window.global=window).class c extends t.default{constructor(...e){super(...e)

Chrome Cache Entry: 207

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	dropped
Size (bytes):	9946
Entropy (8bit):	5.303383252274076
Encrypted:	false
SSDEEP:	192:NdbWsWxwiKpBpVyPPjg9bt9MVzclvs4oRL19n3kufDi/9secuFjel:LbWsWx3KDXR9THl1iL1l3kufG/9sebjS
MD5:	9BB28E4E947B15C91F9178EFF5B23264
SHA1:	87F5AC3AE29A7455DD00F79435B1D91F664F0395
SHA-256:	9FEC8921027F561C8BD0FDF17C244E35F26ABA8E336571597FCCCD9D42D7A0CA
SHA-512:	4566D611CDC37D0F4C34D36ABA45AF69036C4A9E155FAAEC80D70B20C24555A319C8227377D9AA7E7EF02077C2E83C050DB8BACCDBF48417D8772F64818AA7A5
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[722],{32722:function(e,t,i){var n=i(24178),r=i(76588),o=n.SC.attachDelegate,s={setDelegate:function(e){return o(this,e)},localStorageObject:n.tO.localStorageObject,sessionStorageObject:n.tO.sessionStorageObject},a=n.SC.attachDelegate,c={setDelegate:function(e){return a(this,e)},makeAjaxRequest:n.L5.makeAjaxRequest},l=n.SC.attachDelegate,u=n.SC.hasAnyKeys,p=n.SC.isArray,h=n.tO.saveObjectToStorage,d=n.tO.objectFromStorage,g=n.P0.exponentialBackoff,f=n.EE.valueForKeyPath,S="noTopicConfig",v={blacklistedFields:["capacitySystem","capacitySystemAvailable","capacityDisk","capacityData","capacityDataAvailable"],compoundSeparator:"_",configBaseUrl:"https://xp.apple.com/config/1/report",constraints:{profiles:{AMPWeb:{precedenceOrderedRules:[{filters:"any",fieldConstraints:{clientId:{generateValue:!0,namespace:"AMPWeb_isSignedOut",expirationPeriod:864e5}}},{filters:{valueMatches:{isSignedIn:[!0]}},

Chrome Cache Entry: 208

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	588
Entropy (8bit):	4.891214981444774
Encrypted:	false
SSDEEP:	12:tc9ptxMwllHVjfiva4/ZPdtIdLbPYovbIdMP1g1IdO2d4IdOPizL:tc9ptxMwllHVLT4/ZP0xPYSsKP1gC42V
MD5:	EC0707C56BC834ADF5DD504C555D4982
SHA1:	B04EB2CC743F5E5E2BC4B351099BE50020EAA53C
SHA-256:	4E1DB999FEC000326552BE3E141AF46AEC9B23664ECF9B41E831089E5DF0E4FC
SHA-512:	D27F3CBB4FEFE2A3C538EF94EA5CC568423BD98AE3361B45F7E47EAC98D318DB741D08344B5EE64DC492989486C62925847043E72AC4CDE54C96B279F4536BE6
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/five-star-rating-gray-ec0707c56bc834adf5dd504c555d4982.svg
Preview:	<svg viewBox="0 0 125 23" xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" fill-rule="evenodd" stroke-linejoin="round" stroke-miterlimit="1.41" clip-rule="evenodd"><path fill="#8e8e93" d="M113.5 0L110 9h-8l6.63 4.88-2.62 9.12 7.5-6 7.5 6-2.63-9.13L125.01 9h-8l-3.5-9zM88 0l-3.5 9h-8l6.62 4.88L80.5 23l7.5-6 7.5 6-2.63-9.13L99.5 9h-8L88 0zM62.49 0l-3.5 9h-8l6.62 4.88L55 23l7.5-6 7.5 6-2.63-9.13L74 9h-8l-3.5-9zM36.97 0l-3.5 9h-8l6.63 4.88L29.47 23l7.5-6 7.5 6-2.62-9.13L48.47 9h-8l-3.5-9zM11.46 0l-3.5 9h-8l6.63 4.88L3.96 23l7.5-6 7.5 6-2.62-9.13L22.96 9h-8l-3.5-9z"/></svg>.

Chrome Cache Entry: 209

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	40459
Entropy (8bit):	4.798286125995551
Encrypted:	false
SSDEEP:	768:a5p4kU2EQo46uWNYFJ1mv+ZNrMUVfL4k3pY7jVSHUo6eI:a5pQ+LPmL
MD5:	370ADA40BB8BF310DD575C8F8A362174
SHA1:	2A51CAE73AFEFE0B85A305F9A401AE8A851C0309
SHA-256:	81468C594E7DC48E359C19D663B543AE2F174185CAFE6C4E6441F931423E3E77
SHA-512:	F54422269807BCEBBB4CDC1050A49FF69E977845E907883B08F3F2CDF2FE5BCD64672715061066E9ED17B3955BFDF0B99348604CB36D4C1150AB683A1FD076E3
Malicious:	false
Reputation:	low
Preview:	[{"id":"3d39a8ff","name":"apple","analyticsAttributes":[{"name":"data-analytics-title","value":"apple home"}]},{"id":"8543e00d","name":"store","baseGroups":[{"id":"e6569ea0","title":"Quick Links","analyticsAttributes":[{"name":"data-analytics-region","value":"quick links - store"}],"baseLinks":[{"analyticsAttributes":[{"name":"data-analytics-title","value":"find a store"}],"text":"Find a Store","url":"/retail/","ariaLabel":"","id":"a45bd4b8"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"order status"}],"text":"Order Status","url":"/us/shop/goto/order/list","ariaLabel":"","id":"a361d2b7"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"apple trade in"}],"text":"Apple Trade In","url":"/us/shop/goto/trade_in","ariaLabel":"","id":"ca9b9af6"},{"analyticsAttributes":[{"name":"data-analytics-title","value":"financing"}],"text":"Financing","url":"/us/shop/goto/payment_plan","ariaLabel":"","id":"db0704e3"},{"analyticsAttributes":[{"name":"data-analytics-title"

Chrome Cache Entry: 210

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1272
Entropy (8bit):	6.759893244400297
Encrypted:	false
SSDEEP:	24:ay1he91Wwjx82lY2T3ouVMgK5iyJ3V6pKzLXGLfarUZdR+p0tN:awqQNn2xCJ3xKjZD+p0z
MD5:	1ED9BF7633F4F449C8D2DF94EA0EB35F
SHA1:	2902BA9C2B127C74C2550298A0578D7D8DA941C2
SHA-256:	E7D23B06A4FFD600558E5443D1E32DAAAF13A27CF7BB8B7CC163A92B4054AAF2
SHA-512:	51DD36178DD85F062FEE20903A4F0981CA34EB24A7E7245191EF43D493CD47F756389E548A731109F1C0463BA3BD1D3D4F7C4C623639B9514EB2FB9619124F07
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/twitter.png
Preview:	.PNG........IHDR.............2......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BD511DF2556611E48F9585596B882309" xmpMM:DocumentID="xmp.did:BD511DF3556611E48F9585596B882309"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BD511DF0556611E48F9585596B882309" stRef:documentID="xmp.did:BD511DF1556611E48F9585596B882309"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.."...lIDATx..O(.a....19P....up...r...XI.M.."G.*)g.....f..p.h.....Rh/.. ..O=S.3..z..........5.it....L2+...i6g..

Chrome Cache Entry: 211

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	733
Entropy (8bit):	4.7574006224426535
Encrypted:	false
SSDEEP:	12:YGKzFDsip968DDp8MIfE1lI11I1581f58zrF8qWKxk8IV5wDKOBuGpQJNGzF/BQU:YdxDsinqMIqlI3I1y1fyzr+jcdD9J+Sn
MD5:	CC64BFA00B4B3FF916A983A0C27DEA58
SHA1:	62452E81D49DF7E3EDAE74AE32A3E9A613DCFE86
SHA-256:	67CB92C8D3E193BCAC15DEBC8CC34C5D2CE531C9A13D037EBFECDC662679215A
SHA-512:	C6D1D59F4D354EF39AA6D59002D23AB6AEA977CC3B68FE9A6D0821FC0C6EE279390A35B8DB2E7E8D39C913694811CEF04763452D8075C63722700E2B5120F3EC
Malicious:	false
Reputation:	low
URL:	https://xp.apple.com/config/1/report/xp_amp_appstore_perf
Preview:	{"compoundSeparator":"_","fieldsMap":{"loadUrl":{"timestampFields":{"fetchStartTime":["fetchStart"],"domainLookupStartTime":["domainLookupStart"],"domainLookupEndTime":["domainLookupEnd"],"connectionStartTime":["connectStart"],"connectionEndTime":["connectEnd"],"secureConnectionStartTime":["secureConnectionStart"],"requestStartTime":["requestStart"],"responseStartTime":["responseStart"],"responseEndTime":["responseEnd"]},"otherFields":{"requestUrl":["name"],"transferSize":["transferSize"]}}},"metricsUrl":"https://xp.apple.com/report","performance":{"samplingPercentage":0.25,"samplingPercentageUsers":0.25,"sessionDuration":60000,"samplingPercentageUsersPageRender":0.25,"sessionDurationPageRender":60000},"postFrequency":5000}

Chrome Cache Entry: 212

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 200401
Category:	downloaded
Size (bytes):	17388
Entropy (8bit):	7.987580630113294
Encrypted:	false
SSDEEP:	384:2crXYDzpzm5z0t0TJpNuYLv8V7xAA13zWHzj:2CUzpNS9pLvgAA13sH
MD5:	88C7CE379C5D6A55E0133A0B85FEAB54
SHA1:	AF1723D1CBFC88AC39B878645E82B1675D760F05
SHA-256:	38A05617438DED40DB7FAE3F70EFE9CD3ADFD0A14C0EC4AF08F1D73019A10663
SHA-512:	3877047FE6EA70C3371F55A922C85449B6CC958CF2D341E4058B4ECEC3A53BA2F65776EE44B4C36A4F8CD7029F3670D282B99C803A0625B8C158C36BDFA64220
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee
Preview:	...........}Y..G.._..9..}..E.....=.v?.. ..eZ..K......9....A..z).I2..'.............<\|.`[.......r.y....W..G.G.z...T../...>...a.......7...[..?..z.../..w.~...<...Oo.}...?...>...o?. ..........z./..~..w..?..~..?o......u../...O..#...-...........z..6...4..G..._.~..o.........d.....\|k.od../.......Z......OvR.&..<5L.<..l>zee.#...../<...~..i0..x...h....w...8\|........xb....\.L.m.65..%)l..qPR..2.Rt...J.V.ZC<...m.l.....~t...N.Akn._.:..t>.B..t'C..R.1F:e..G........w..\|\.smu+.l..g.w......K..br....f..[.......o..Mf..i.#....6>;.M]...\.h.#..MqB...,.;.f......c...H.....<t.. .s..}...1%6 m~.........w..4.m\|.X.;<.........Ov..}..._}.....9.sg..h.tv..:v#.7.r.0=.f..I...xv...c~...a.t.?.4K.d+.\|2....{.9.h.<..._^I:n.........x.8.?.....9:..N)'.q.6...N>=K...W..~}..@g_..>..>...ex.#..j..].....}...G<.o.....>........\|...O.....\|..f..:T..4r....T...R/....J...JA...AeY..........~Wf.3.VW.......J.....`>....w.J.i....N.0.p,n.IG$..I;..3L..s....`R....0iw.&..4kJe.L._....v...[@.P.

Chrome Cache Entry: 213

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (3857)
Category:	dropped
Size (bytes):	1160544
Entropy (8bit):	5.44525335877561
Encrypted:	false
SSDEEP:	12288:7IcMsN8pGT4l9C8OGMVi7Bv01hCAURju5p9NI:pUlT3v01Qg96
MD5:	56D26A46D0406F26005B8F47282EE333
SHA1:	69438EBE096B22A729813A305B578D0A58507384
SHA-256:	B5D9652D1696ADD89336DCCC3A72768A9E09D64D1186A82F2F8C38AFE117E4EF
SHA-512:	9BFA2CF2EDA8AE9BF95EDB16CB8E076CC18693AC25727871B3ECF1C6B22268C6745BB49A49BA66236CB9224BF6CC3DABE38229A703602A3CA62DEFE1552737F3
Malicious:	false
Reputation:	low
Preview:	/! See /acknowledgements.txt for open-source licenses /."use strict".define("web-experience-app/app",["exports","@ember/application","@ember/debug","@amp/web-apps-featurekit","web-experience-app/resolver","ember-load-initializers","web-experience-app/config/environment","web-experience-app/utils/config","web-experience-app/utils/consts"],(function(e,t,r,i,n,a,o,l,s){function p(e,t,r){var i.return(t="symbol"==typeof(i=function(e,t){if("object"!=typeof e\|\|!e)return e.var r=e[Symbol.toPrimitive].if(void 0!==r){var i=r.call(e,t\|\|"default").if("object"!=typeof i)return i.throw new TypeError("@@toPrimitive must return a primitive value.")}return("string"===t?String:Number)(e)}(t,"string"))?i:String(i))in e?Object.defineProperty(e,t,{value:r,enumerable:!0,configurable:!0,writable:!0}):e[t]=r,e}Object.defineProperty(e,"__esModule",{value:!0}),e.default=void 0,"undefined"==typeof global&&"undefined"!=typeof window&&(window.global=window).class c extends t.default{constructor(...e){super(...e)

Chrome Cache Entry: 214

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	366
Entropy (8bit):	4.978776395938356
Encrypted:	false
SSDEEP:	6:tI9mc4sl3UE7wRtG2VEWhGWLYayuRt+wyo6YmBQWLvQVHwB5JbHdGoQgQSx:t41MfYWcWjyuf+wyoNMQ/wB5Gg9
MD5:	BC4F4BFDD931E007AB096DD1C209C689
SHA1:	9D97DA68C8FE7482E604148596EF8A97792AC08A
SHA-256:	03B3A7317370504145583EB221372D6C19C060F84F10CF391459E7441E95C381
SHA-512:	371F30F422B303D4A45136181372C7E95D3EFCEFCCFB13B7D3640EDE79802C840437AE14D3154750095F69748D87F6520265F01025B32D8E39C3CAFE4EC6D8F2
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/stars-lg-bc4f4bfdd931e007ab096dd1c209c689.svg
Preview:	<svg xmlns="http://www.w3.org/2000/svg" viewBox="0 0 13 28">. <path fill="#FF9500" d="M6.496.173L4.521 5.251H.007l3.738 2.751-1.481 5.149 4.232-3.386 4.232 3.386-1.482-5.149 3.739-2.751H8.471z"/>. <path fill="#BFBFBF" d="M6.5 14.35l-1.978 5.087H0l3.745 2.755-1.484 5.158L6.5 23.959l4.239 3.391-1.484-5.158L13 19.437H8.478z" transform="translate(0 -.15)" />.</svg>.

Chrome Cache Entry: 215

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	157537
Entropy (8bit):	5.450896766346486
Encrypted:	false
SSDEEP:	1536:VcQ2UlYdxMXwcK2Bg6mqBhHPVy/ynVmXeXWH2H3i47UW4nb00pqpIReMaahQYg5U:f1mhfaahWIhsMkVT+BTtdOaBrdD
MD5:	E8E8B7A18F4EBDA24A25F702B22FA5C1
SHA1:	45DF73C1E3A0A3221A36654FCC46250E31D44C3C
SHA-256:	B740DD04F5C2A05AC983F4716999989B7A05B48C7E4717F77729B3DF19E97E3C
SHA-512:	57098BD96ADF38227E5B3C05CB1C715A9207F0BD4B198E3CF2B2A654D020BA3E0D65D04614F041E4291C86D928AB290619319C8C27F54D4563CBE71779568030
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.umd.js
Preview:	(function(mt){typeof define=="function"&&define.amd?define(mt):mt()})(function(){"use strict";function mt(e,t){return t.forEach(function(s){s&&typeof s!="string"&&!Array.isArray(s)&&Object.keys(s).forEach(function(n){if(n!=="default"&&!(n in e)){var a=Object.getOwnPropertyDescriptor(s,n);Object.defineProperty(e,n,a.get?a:{enumerable:!0,get:function(){return s[n]}})}})}),Object.freeze(Object.defineProperty(e,Symbol.toStringTag,{value:"Module"}))}var Ye,M,ss,ns,Je,is,as,dt={},os=[],Pn=/acit\|ex(?:s\|g\|n\|p\|$)\|rph\|grid\|ows\|mnc\|ntw\|ine[ch]\|zoo\|^ord\|itera/i;function we(e,t){for(var s in t)e[s]=t[s];return e}function rs(e){var t=e.parentNode;t&&t.removeChild(e)}function Xe(e,t,s){var n,a,i,l={};for(i in t)i=="key"?n=t[i]:i=="ref"?a=t[i]:l[i]=t[i];if(arguments.length>2&&(l.children=arguments.length>3?Ye.call(arguments,2):s),typeof e=="function"&&e.defaultProps!=null)for(i in e.defaultProps)l[i]===void 0&&(l[i]=e.defaultProps[i]);return et(e,l,n,a,null)}function et(e,t,s,n,a){var i={type:e,props:

Chrome Cache Entry: 216

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	9802
Entropy (8bit):	7.977037516330821
Encrypted:	false
SSDEEP:	192:Q1VgBheMOUFDwTP23lmOKGXn9NS/AmN1y4Jq/weAEyvXzeQ+CkjvxBc3nfGhDxcy:QPgyrODb3bKMn9NS/A21BwAgQ+C4c3fi
MD5:	4F532FCF84EB18031D87EE17DE49C0B4
SHA1:	F75A0C9B678DBD36D741CB97E1D062135CB920CB
SHA-256:	629679442962DC714E8DD732C30FCFCE9032D46EC9C56D21570FA965D050E27A
SHA-512:	1C50C065FF4EDEB1FC9FD2B15E43DABF50FE3CE2C5D6E47D569D9A4489A5DBC1B0D1DBA4462F0C374658542A5168046F8E6725CDDE729C00467E254E66E2EAAD
Malicious:	false
Reputation:	low
Preview:	RIFFB&..WEBPVP8X..............VP8 .%..0........>.N.I."(...;......-.%k.....^..~`.ar.~~......./..\|....o..`?..=...x..^.?e.f...................g.......O.?.}0=@?..2.3.?.^#.D..}.c........m@.q...c...'.._.z......o...\|b...[._.../........n.#....B__{...zu{....]..l..wlS......2\.....Q;..\|.-...f..f..h...y.OR..."...J...n....=.....Q......}..._.'bw..).;.Qb-E..o.;.J...h=.A.2..l.....~.=}.8..w...V.qob...8....7:.9...oGZ..F..[..~l.:......O./..W.=uLp.4.....t....9ehJ....y8.I...^..8.<.y...C.G=}P....tet]~B.E..U.N.).{.j........$..{.q.4.N...............3.^8&..g....p.C[q..J....#.2FLAXZ.XI...D&2F...'.4,...0...,..z...$...ho.i.....2....\|.h...7.i..RP....@.'qS...t...^....;..a..*..9.e.O<.7..!.`e.......~M5UP.}..m..vO?...0....VL?...-.(.........x...0.....j.}..m......&\....3F}c/[..h.{'...M.{.....{.].].3.#.D.Hya<R.~L....S\....7>......{A?..#.....KJ...._SR-...`.!CGk.K.k.4,.....>...:KwZ...DT.'7.b&.os,......k......_..H'...Vc.W.?F...^W..D...J[d.".l..$b..i.!...O.z..$...........D..e..

Chrome Cache Entry: 217

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	4.980767694952946
Encrypted:	false
SSDEEP:	96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR
MD5:	5791D664309E275F4569D2F993C44782
SHA1:	A68F363153614A09F10AE2892C134B9C4B001D4B
SHA-256:	4FF54BC38C267DC3A8C95F6ED4590336BAAEC70433EF15D027DDCA608C391E78
SHA-512:	93502A68F14FD4F87E0AA2CAD92A5657A8587E6ACB1C108CCD8CEB5E52776E77DF867962C51E1290316BB78027DA636F38C065294871B4400FBBC4DEDF622EE1
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................".."6."o."..".."..".."..".."..".."..".."o."6.#......................................................................................................................#..#(."s."..".."..".."..".."..".."..".."..".."..".."..".."s.#(.#..................................................................................................#..#-.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#-.#......................................................................................#..#}.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#}.#..............................................................................#:.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..

Chrome Cache Entry: 218

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	2736
Entropy (8bit):	7.888672904591039
Encrypted:	false
SSDEEP:	48:BK1HWnHDzfSaW74XQ5rNEl7f7XFAURjnLavPno/oBVH6+4:BKGHDzS50XQVKl7j1bLano/orU
MD5:	61D430EFC5C9393A5075374CAA663D7B
SHA1:	F07F2510BDDDA140BD690269CA5D40EE48749BA0
SHA-256:	70E50F9547C2472C5403F4C514E075D6FF1DA93DD55773B7029CB4D53ACBE83D
SHA-512:	07D9ABEC9C9033061936BD3FFADE82C35AE900CF7E311E2C2AF98C920EACB34FFDAF5B5C4AB3F7E38F1151C6475E70D00C3DE6E2C8A0BF26C827D9C2764EFD02
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8 &...P/.......>.T.H."...=.D....i..?...~........T.9m.B..[>.?WzSy......Y...+.WQw..K7....g[C..{...^W(......C......6.....t.N.;m.H.YzC-C.......vF?......d1..}.....V.6.%D..F.=D...=.H..=....>.w~p............o.EG..K.....3...\|...-...C. ...%E.u3...iX.N-..^0....<<.Nn..;..3....X....5......jV......jp..r.^........\|w.k.an.sk5%...b..~.].{....<'.U....x.G...W...r.C?0...........q.&.c....9.t.l.hdR......q.K.P......)c...9Js%.2..Z....Vl.X.$Yrbo..k<&..OV..p.'3K..%..\A..p}. ....1.xL.6...c..L..C.`.s..+.T.VW.....w..x..@....?{\|.\-2...]...B......ad..]........tZ....M`....D9T\kd.j.".w...?G...~..Z./......k.V,.`..}9.s.N...Q..ok......~....J.t........5...!U....F...]J_.}..@..s.X....ZF.:...K..#.x......s.l.7.8^...7......,/.7XQ...W>.Oq....L.7...x.}..+,..\|)...9..g,{.TV.Y.1)y.b:.M...~.....4../..p.....S.......A`..mJo...@......k...../..L.Bu.k.=)..2.....Q.f..l....."1.f.....!..O...@h(..U..xb.X..$W.....Q!.d..%Cr..,.L>..*.......~.....

Chrome Cache Entry: 219

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebAssembly (wasm) binary module version 0x1 (MVP)
Category:	downloaded
Size (bytes):	390408
Entropy (8bit):	5.640205401698211
Encrypted:	false
SSDEEP:	6144:y+3z9vKn2z9vyj+9R08Wcdmwdq6O2IQMKzoWVl7cunjfHjr5sP17RhnFJ/W:yMzZdR08a6O2IQMKzoWVl7cqjfHjr5sE
MD5:	E725DC036AD50BA694C90EE1F72C4B5B
SHA1:	09F0EDED8AA4CEB9AB1B326F5265DCBE9FC0B8E8
SHA-256:	F50ED354FD14CCE39533AF5FC58C0E4387A326748114C57A2CE3C98611DA673B
SHA-512:	17D8775ABB9180793C44278C36C7F5B9CC0609AE75CE0696763B6A5DE8A81D27A656B6B3B1665DDC2C7FE9CF3816E509DEF22EF71119CE0DE6F9D404041D86C3
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/rlottie-wasm.wasm
Preview:	.asm.......Y`...`....`.\|\|.\|`.....`.....`..........`......`........`....`......`........`.......`.........`.......`....}.`....}..`....}`...~...`..\|......`..~..~`..`...........`.....\|..`......\|..`.....~..`...`.\|..`..\|..`...}`.}}}}.}`...}}.`..}..`..}.}`..}...`...}.`..}}.`.}..`..}.`..}}..`..}...`.}}..`....}}.`.....}}..`..}}}}}}.`...}}...`.}.}`..}}...`.}.....`..\|\|\|\|.`...}..`...}}..`..}}}}}..`..}}}..`..}..`.....}}}}}.`.}.~`...~..`.~~.~`..}}}}.`.}}}.}`.}}.}`..}}.}`..}}}.}`...}.}`..}}}.`.....}`..~.`.\|..\|`...\|`......~`....~.~`.~....`.~...`.....\|`.......\|`........\|`....~`.\|.}`.}...`.}..}`...~.`.............`...............`.........`..............`............`.................`..........`.\|.\|...(.env.b...env.c...env.d...env.e...env.f...env.g...env.h...env.i...env.j...env.k...env.l...env.m...asm2wasm.f64-rem...env.n...env.o...env.p...env.q...env.r...env.s...env.t...env.u...env.v...env.w...env.x...env.y...env.z...env.A...env.B...env.C...env.D...env.E...env.F...env.G...env.H...env.__table_base....

Chrome Cache Entry: 220

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	12690
Entropy (8bit):	7.965297749406023
Encrypted:	false
SSDEEP:	192:qU6SieKSVdeYciqBy/VHaqqtsNEQ8bwRP46NLvDMm5GebYlttyr:qz9e7e3iq+HlHs0qaRkJAr
MD5:	9C2A194EE50807AE9342B60634BE2445
SHA1:	553DFD2BA2A5E11468A3B57ABA897995F2F4D676
SHA-256:	EC1788BCDD05595BBCD16E5C7C13BCE6481B620EBBC4200B2E6598C02C82AA78
SHA-512:	27018DB71B0A93E3E68E42E0F9DC8528F7C807571C5ED1C1330BB5FAC68A1685869BF04043167F885EA413AE6B0ED029CDEDCE64B1354C0DF367603ED0BAA67A
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613
Preview:	.PNG........IHDR...............g-....bKGD............1GIDATx..}yxde............44I.........0:0.. :...#8.\|...-. ..(2.3...:.\|.@...f.Ng.S.]....J-.:.T.n.<O=.T......g....T.Y$.0....m..r..../X. .....T..)-.dHD.!..T..\|.....M.JR.#...h..4.V..,....AU.U...f.@.B......\.Y....p8......q...S=.Y...MJgc...7T......X..%..I..).!.:. .G..n..VT.DJKTQ...U..0..2@}.\....@.%.$..b....D...G./.f..G.....F.....`=.Q:..,..J.G.-,h.y..0. .2...$6.A"<.....}e.v....f.:.......t."....z7.U..uU..<../.. ]..{...u....5...-[.X..$8.WVy.......QhB.3!..d.. ..j.%.U..@B.Q.y..U5..o....m..$..9.........p".}GI.../S.'..~...B..E.........4)CM]...Sh....=....} .......sy>7l..h....<...tI..c-.m5.\.........!\c...P.1i.Mx,......z@...@t.......k._.......E"...:MMM...2\|.o).r..?9......i.......TbL..Q. \|... ..g.z..p..(.`d0S....XnC.E....A..Dd..a.]..\..m.....W.......yr..7..[.r......t..U...&.....9.*./{....[W...8...U...@...........+...E.......R.{...;..U.a..e.\|g..(......^.fQ.....r,.^h..MP.1.'V)$..i..L.<..D...>.......q..."

Chrome Cache Entry: 221

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ISO Media, MP4 v2 [ISO 14496-14]
Category:	downloaded
Size (bytes):	250838
Entropy (8bit):	7.993335443845641
Encrypted:	true
SSDEEP:	6144:XdGaIZbpxUi1c9H9ItxUbrHXBpmSr0t7ZsbAx4UMgHZ:QaItmh9ItGbrRASr2J5
MD5:	36BEBC24F7516D37CBFBB4EE2AEDF6F6
SHA1:	C40BB63CBE7C48F67FAF8DB89240FD60F912E1CE
SHA-256:	03B2AE439D25E00E297B01942883F4EF8A6A5C87E01DD0FAEC6F1EEF24B92816
SHA-512:	3D2864B0559642B0928F6A131B4E718D001CB6FA805FAA4BCFE275FD051AD9F34D3434433F9819D31AEC495FB8DAF42F662250B304883C4BD8EAF4EA729ABBF2
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/t_main_Android_demo.mp4:2f81cf52c0d585:0
Preview:	... ftypmp42....isomiso2avc1mp41....free...}mdat...q....m.E...H..,. .#..x264 - core 157 r2935 545de2f - H.264/MPEG-4 AVC codec - Copyleft 2003-2018 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3:0x113 me=hex subme=6 psy=1 psy_rd=1.00:0.00 mixed_ref=0 me_range=16 chroma_me=1 trellis=1 8x8dct=1 cqm=0 deadzone=21,11 fast_pskip=0 chroma_qp_offset=-2 threads=7 lookahead_threads=1 sliced_threads=0 nr=0 decimate=0 interlaced=0 bluray_compat=0 constrained_intra=0 bframes=0 weightp=1 keyint=12 keyint_min=1 scenecut=40 intra_refresh=0 rc_lookahead=12 rc=crf mbtree=1 crf=20.0 qcomp=0.80 qpmin=0 qpmax=69 qpstep=4 ip_ratio=1.40 aq=1:0.50....$>e...)..DV.O......(..e.dfA.2.g..w..A.f`......I.r.,.... .`).......}....>......K...ka.5L........sw..$._?.V...T2.....dk'..#/.U......Q.`BO..Z..KA.;._`z.PG%6..4N..g.......,......>I.d.[....e.3d-..4.E7.$C...'...`....I..\|..T..r.#M...i...S.NS.....k./af.;`.......d.\|.......3.:..^.d...]A...d}.k.l.{...~..t.........;

Chrome Cache Entry: 222

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1267)
Category:	downloaded
Size (bytes):	115228
Entropy (8bit):	5.153170283271925
Encrypted:	false
SSDEEP:	1536:xylcfDxYzbJ3iw93BC2WXdm791WoDYzghw4uJuhwNpfewltog69FjxWDpfxV685u:xylc7xYzwwyrXkC0YzPvL5u
MD5:	CC407E432532261714CA106E967BED72
SHA1:	6D93BAF813EA6291DA475634726D3D7B3FE415C2
SHA-256:	F5F739B99351C1D64B3B890E80E78A9267E9AD2EFE8116999EAD3749D849E131
SHA-512:	7C9D63D818843E406D31D3BEB7A9CF4A58F503346DDDA554E55B3C8FC1D940CC0707C44E2C42F1B79B3B9795DF036D68FCAAF855E205D06436A5793125AC02BC
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/telegram.css?241
Preview:	body {. font: 12px/18px "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, Verdana, sans-serif;. /-webkit-font-smoothing: antialiased;/.}.html.native_fonts body {. font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica, Arial, sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol";.}.html.lang_rtl {. direction: rtl;.}..body,.html.theme_dark body.bg_light {. --text-color: #000;. --second-text-color: #7d7f81;. --accent-btn-color: #2481cc;. --accent-color-hover: #1a8ad5;. --body-bg: #fff;. --box-bg: #fff;. --box-bg-blured: rgba(255, 255, 255, .84);. --tme-logo-color: #363b40;. --accent-link-color: #2481cc;.. --icon-verified: url('data:image/svg+xml,%3Csvg%20fill%3D%22none%22%20height%3D%2226%22%20viewBox%3D%220%200%2026%2026%22%20width%3D%2226%22%20xmlns%3D%22http%3A%2F%2Fwww.w3.org%2F2000%2Fsvg%22%3E%3Cpath%20d%3D%22m6%206h12v12h-12z%22%20fill%3D%22%23fff%22%2F%3E%3Cpath%20clip-rule%3D%22evenodd%22%20d%3D%22m14.38%201.51%201.82%

Chrome Cache Entry: 223

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1272
Entropy (8bit):	6.759893244400297
Encrypted:	false
SSDEEP:	24:ay1he91Wwjx82lY2T3ouVMgK5iyJ3V6pKzLXGLfarUZdR+p0tN:awqQNn2xCJ3xKjZD+p0z
MD5:	1ED9BF7633F4F449C8D2DF94EA0EB35F
SHA1:	2902BA9C2B127C74C2550298A0578D7D8DA941C2
SHA-256:	E7D23B06A4FFD600558E5443D1E32DAAAF13A27CF7BB8B7CC163A92B4054AAF2
SHA-512:	51DD36178DD85F062FEE20903A4F0981CA34EB24A7E7245191EF43D493CD47F756389E548A731109F1C0463BA3BD1D3D4F7C4C623639B9514EB2FB9619124F07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............2......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BD511DF2556611E48F9585596B882309" xmpMM:DocumentID="xmp.did:BD511DF3556611E48F9585596B882309"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BD511DF0556611E48F9585596B882309" stRef:documentID="xmp.did:BD511DF1556611E48F9585596B882309"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.."...lIDATx..O(.a....19P....up...r...XI.M.."G.*)g.....f..p.h.....Rh/.. ..O=S.3..z..........5.it....L2+...i6g..

Chrome Cache Entry: 224

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1566)
Category:	downloaded
Size (bytes):	41276
Entropy (8bit):	5.2368089739293495
Encrypted:	false
SSDEEP:	768:EkxiX+skUbNIvnXh5hC+gSyJNbX+V4N8zuZYJOKLNWDjqcR5cXcpcO0cDcIvScTu:lskUbNIvnX7hC+MNhZYVNWDjRE3
MD5:	CF98EF659A7C40F16FB89858EE051693
SHA1:	F223F862E3DC2347DEC54A932E35C5BC5F794C8D
SHA-256:	D1DAC8F97C25357AE55BB0FF7EFAB6349022317CFBC549BB2057C15ED2DD337D
SHA-512:	58043EF2BA149E03964670CA8A2FB8039691129058FB95D29851F84E7D65F66270B5ECBED675D56E871D6722B959FF3AA7ED2672E1E3E89B6F071A90B120C7E4
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.706.4a437bd91dd079e92306.js
Preview:	(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[706],{43862:function(t){"use strict".t.exports=Object.freeze({ELEMENT:1,TEXT:3,COMMENT:8,DOCUMENT:9,DOCUMENT_TYPE:10,DOCUMENT_FRAGMENT:11})},96339:function(t,e,i){"use strict".var n=i(38694).t.exports=function(t,e){return n.insertNode(t,"insertBefore"),n.childNode(e,"insertBefore"),n.hasParentNode(e,"insertBefore"),e.parentNode.insertBefore(t,e)}},38694:function(t,e,i){"use strict".var n=i(37844),s=i(43862),r=s.COMMENT,a=s.DOCUMENT_FRAGMENT,o=s.ELEMENT,h=s.TEXT,c=[o,h,r,a],u=[o,h,r],l=[o,a].t.exports={parentNode:function(t,e,i){if(i=i\|\|"target",t&&!n(t,l))throw new TypeError(e+": "+i+" must be an Element, or Document Fragment")},childNode:function(t,e,i){if(i=i\|\|"target",t&&!n(t,u))throw new TypeError(e+": "+i+" must be an Element, TextNode, or Comment")},insertNode:function(t,e,i){if(i=i\|\|"node",t&&!n(t,c))throw new TypeError(e+": "+i+" must be an Element, TextNode, Comment, or Document Fragment")},

Chrome Cache Entry: 225

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	30567
Entropy (8bit):	7.982782008745682
Encrypted:	false
SSDEEP:	768:pYweyGgLyxCaJ1leoVAqIuOlHPUfFbqqxViqR58IWE1:pX2eaLzOlvEAqxhR1
MD5:	0C6C45EE2597151FA5E955D11D2D38FE
SHA1:	771AA6BBE2765CD2D6F754E14D5E12FFC476E939
SHA-256:	889DDFB8550BAC935B0A02E52BEF9D0950F0734D7A70661A0930A3D8E6A2F372
SHA-512:	BB4808E6B52F06991E9FBEB6E6E0D64B0AFB4E87076A9CAD8543494605CD2D0DC2F1D0007BF8C588C5E7682A87EA63F83BCC6F9C847DD60B3E3024CB39BBBD85
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...@...@............bKGD............w.IDATx..wXTg...P.h...%F..d...F,.F,....)3........H."...b..M.b......{. .\|..?d.........y..Y......y.s..............................................................................qjeg!.l.Jf...,..+M...F......u.o.....S"""zo$1.......YH..[Ji]ag!.mk!Yik).%.....;).......,.....[Ji...Y0..?.-.O.....+.".&...;!...m.,..T S..V.l\a..b.. .i....t......>.....YH.U...:....r....Br....\|.DDD.Jv}..v.......B...... l-.T.\|ek.0.\|.DDDo...[....d.z....^M.m_.7.`.. .......Y.;..ZH..,$J..'...p..L..!..>x"F9..C.G...Tg...z.}M.."".:...y....iv..G.......\..@6..Q.....+G..X.z.c..h...C..y.......r.B"......>...p.P.e...3\|.MGl`.#.."xZ...C..'......\|3DDD..A..?...l.P..W..$.)....>..c..`..T....,iD.%"".......v..h;.I...>.(........4#* ...C...hk..F.-""..Sy[.......:....l.).u.o._8dc\|0y.Tx..!.#.1........O...p.^.Y.@`@.5"".jI....4N.........=F...............p.x.2..$.)`.......}..'....Q..g!iog!9..?>--..LF....\|.Q.<l*.-..^....i.V.....j....F.o....J..pi.......

Chrome Cache Entry: 226

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 42523
Category:	downloaded
Size (bytes):	10134
Entropy (8bit):	7.976388421800206
Encrypted:	false
SSDEEP:	192:F1fFWjFZo5Ks2TKYcAuPK2rQLr9jDRkPbqBB8AAXsI3COmr+YwtBmAAv9BjaYlyD:F10m5KbcAui2ULr9j1i2BXAXs/OHAPj4
MD5:	B0C73D441A3B83F81A5F35B7C0CF5D8C
SHA1:	30A012166C4464CE32AFB219DBB89C9DF0827CD6
SHA-256:	E54416E51B9C67A893BEB1C230441AD6815D47B9E66A2E83D703829AA91C04CF
SHA-512:	E42053B9D35B180D8D1F8A09AEE00AD96F0207EEDD233B6C832B4ACE76C04854B3EC53FA723D8E7D3B493D2C6BCAADADE4C8D4E65049748A84BBF37CF1BAEE0C
Malicious:	false
Reputation:	low
URL:	http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/bootstrap.min.css
Preview:	...........}i.#.q.w..rw(4=C.y.....w..U../......EV..$.&.}.[.o.<...E.=..O.!q$.B".H......e?f....C..w..`<.f?..f7}...l.Z7X.w...z.}_=..l<.....M..U..^...b...\-..,..(.._..W.z@.U.:...........~....7..@...~.......!...w..$L.....A..j..5..`......W......m...T.....8_........x~7.."...);._`....5~....f...AL....R....?...M.......Y=....K..v.7.5....-.]5....6.e.....\|{...}...7.~S~k..............r..j..y]\|.....j;...}S-.e/?TE.+.&......wMUo..q_.... .U..P{..}}..6y..m./.C..... .....n....T..O.....".~....~..C...X...v]m.>u.})..\|...=m...Pb-..n.. .f_....9..z[.V%.'..qU.E...k....A.S.<.....m1...=..}.mN.4.Z..G....y............Y............t.....,N...z..b.....uq.[.<4...j...i5.B..t\nf...}..'...".v.......O......4K..5a.0...p.4.;.....3.2h.....m./.=@q'..RS..... p ..1.U.'......d4..{F&....)......8..o..o.........~C..)>E..H.h.Q..v........A.?....w.7...H.z[...e/s.g4....i~....j.;6.z..*...V}k@a.g.D.]..l..T..$....Ku...RG`..4.I..`...........\|..\|..o>1vR..l.2....g5..nW..r.@f......+`.^...

Chrome Cache Entry: 227

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	999
Entropy (8bit):	4.203023852517381
Encrypted:	false
SSDEEP:	24:t9X8HzSYvdzSYvileIHlx2lxHv3IMyIC7BN9CSq/8+U00hPMCrz6f4RME:fKB5BigIHT2THv3IpIA9CVnUtMQse
MD5:	4ADC034F937B41471DAAEA71E64A727D
SHA1:	6B5C52D2A35704410262B70296A14D6A4331929D
SHA-256:	3399887FAC9F9B581A8C81860C56FCA807C0ED6876307A12C54E0161AA4721DB
SHA-512:	C6E865D3F4A6E33BD3E2F6FD0D157482C0D849820886E3D7761ADD57A4DF4AB3FE8D2F51847B4808803668309BBB9D5818B68F1E847EDC1EEEB3A7641249A302
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/SiteIconAndroid.svg
Preview:	<svg height="27" viewBox="0 0 22 27" width="22" xmlns="http://www.w3.org/2000/svg"><path d="m19.35 11c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm-16.7 0c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm13.35 0c.55 0 1 .95 1 1.5v7c0 .83-.67 1.5-1.5 1.5h-.5v3c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5v-3h-2v3c0 .83-.67 1.5-1.5 1.5s-1.5-.67-1.5-1.5v-3h-.5c-.83 0-1.5-.67-1.5-1.5v-7c0-.55.45-1.5 1-1.5zm-.55-9.54c.28.2.37.57.2.87l-.03.06-1.2 1.68c1.56 1.02 2.58 3.2 2.58 5.05 0 .31-.31.73-1.13.72h-9.85c-.68-.24-1.02-.48-1.02-.72 0-1.84 1-4 2.54-5.02l-1.22-1.71c-.22-.3-.14-.72.16-.93.29-.19.68-.14.9.11l.04.06 1.32 1.85c.7-.26 1.46-.41 2.26-.41.78 0 1.52.14 2.2.39l1.31-1.83c.21-.3.63-.38.94-.17zm-6.9 4.54c-.46 0-.82.36-.82.8 0 .43.36.79.82.79.45 0 .81-.36.81-.79 0-.44-.36-.8-.81-.8zm4.9 0c-.45 0-.81.36-.81.8 0 .43.36.79.81.79.46 0 .82-.36.82-.79 0-.44-.36-.8-.82-.8z" fill="#1086d7" fill-rule="evenodd"/></svg>

Chrome Cache Entry: 228

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 131568
Category:	downloaded
Size (bytes):	12545
Entropy (8bit):	7.9793641338070485
Encrypted:	false
SSDEEP:	192:jLtIfnlwvz7lLADyZc8lcXDtUGy392BtB3u41k74kfRRoaZGGW5BO+r1RyaGBw3s:ft6nlwbDZeDtdyOZuAeRuaZGGkrJM4dy
MD5:	6FFE0373E13C95E1253EE372A3D7FEDB
SHA1:	BB6C4764E927A8ED8CBF14BABEA3E28FF1F07D4B
SHA-256:	1F0B318040B210A65B48D386D9680B29212DA0D01DEE9CC9F56D485334BDC11A
SHA-512:	0027C6A1E23A389699C385A2646ED2BFDCDEC4406CDE2C0E0155906296B44827D114B1F4B62FC08BD519B3F2973A23538C485C3ECC62675E537AE81C4E460B17
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db
Preview:	...........}]...._1.U(.w.. 8."..\..d...;.O.....l.._.V..%.4.Q.G.w>fFj...b.X."....~.......\|s.WF....7.....p...z.(....\|..t7.......^..o..../~....W.^..^~...3....n..;7?.......}....B..7....\|.[^.q.O..~...W...;...._.[...O..[....s..?^......:.J.w.......#..S...._..H.5\|..\`..d....,......'>}.w<.....t[4.+.... ..f/..Ji.=.....^..u..{.m.0.._'...PW..^...i.0V........Q!.U.W..0]'.........B...~...O.\|...?..L..._..7.. ......kR....d......<.........].....I....Y.:..b....._{.;]^.Y..A;O...g@..<.vrlO...q..3n.&.1;q...3....L..K._=v...#..3..7C.{Ku.._&.;.. ..Tw.z.^.[.[X.P..8.<.8R.yKO....i.B\|..xF.G..+..zEv..u.....w....K./k.&.}.....pl........[.'7./.b@..k0".dD.......ibDx?.w.~.^c.L.M~.Xq.@.9...4fP......\e.R.w...=....@J..u..L....G...#.y.Q....s..cS.....Y'0./......\|..S#...pF...V.3R..RH.R.......9...O......9..'M...V.....o/?..Nn..7.~d;.....(f.\...Mo....W..E...X..V.c\..6.2).LG,..J9vY%+/......m..N+...OM.}..*.XV.......'."......3..of+....)....Cy..._).5.A...l.{<.-.l.),@9.

Chrome Cache Entry: 229

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 108468, version 1.0
Category:	downloaded
Size (bytes):	108468
Entropy (8bit):	7.997835393798081
Encrypted:	true
SSDEEP:	3072:pWhXrpbCa6gSWYdNt9aYKHEX2a2k+kgylVi5nh9B:QhXYaGNR5ynyl49B
MD5:	5011345B7AEB8F847CAEF745BB1B464E
SHA1:	B37CE84520A2B9607E19BC0FC9CC7B841BC1C831
SHA-256:	27464F709D857A113F9AC53FA038A3F61FD0059F9EF4BD48A58C41EDBFCDD996
SHA-512:	BA5775614D07C16CB98625833EB3B3D381BD14278AEEA16A9F114FCCE1FD903F7264C76C135F069BCDA4E3936A64A10F103F32F62B0A4AD50CF6F209CF3ECAE8
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v2/sf-pro-text_bold.woff2
Preview:	wOF2..............y....Q...........................$..H.`H...>...4..c.6.$..$..(.. ?meta....(. 8.t[.x.F.m.n..I.....[G4..&.{.3............x.....+..8.vY.I...........y....;f..;.K..(.D.(...r..Z2..VTk.R6.......09..9.&.i.URN....f..n.@+..&[."...."ke.5L..r.E.....fd.\|..nJt)..2.....u..`.k....:3mb...OZQ.Gs..~..bv.......?..,.....R%..j)._....b#.v..#1./.....t.+v..O..5.xe..Na.......y3.?v...R}.kO...[.le...(.>........F...2.3f.9a......)%d.s.2....9.....7..f....H...+aC..F..c..R.?..L.?.f1...uT.-..z.....\e.Q.c.q.W3$..b.P?F.]......&....TM...+Q.;..4i.DJ!)V..AQ..~?....N.xS...V!.A.`..0....[.."...&...g...V%U2.\|..B..T.....i..!....g.~..oe)'.....F94....Y....x.9./&.m..h.7..W..\M4.n...7Q..`Z..t.....n..`...B.{qu<.;.......L..]...(..8....u.......v.A. ..Iz...qr!7......o......A.....<..........."....=...N?...". D.-4H....!..'..7;.w7.8x{..Rq.yH...qT....."..... ..8.?.TK......>.T...Rb...J).Ak.....vB.sw.....V.8.!dMR.2.....R..........,k..Dp"8Q...%.bk..v.../R.M.9.IO..I..

Chrome Cache Entry: 230

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2234
Entropy (8bit):	7.8380121664973235
Encrypted:	false
SSDEEP:	48:gyvUAf8XkB1r3049l8T4P3lBiflcSow/9RfhL9bZ9NY:gyvUBXq1r30ilSlDf59bZ9C
MD5:	448C395B96EA9F0D530657000824CD94
SHA1:	9BCB8065A090E403D8DD1AA0BA92A9B674E399C5
SHA-256:	576038FD2A0FBFE5DAAAFB219133B14E8393D0D7CB9A4C9376B570506920633A
SHA-512:	35441D8CA2D42D3620D4BF747B3E5BC6B1621AF7001AB94AC5A2F39A82E3B84ED3B30E69BD0CE13F5A3ACDE03AD42C90B27751206C8CF14BAEE62F9C91513370
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple122/v4/6c/b0/d4/6cb0d465-3bcb-0cb2-ba85-ebe2b931ad0c/AppIconLLC-1x_U007emarketing-0-7-0-0-85-220.png/146x0w.webp
Preview:	RIFF....WEBPVP8X..............VP8 0....'.......>.R.I$"..Z..D.D.7n..l........W..W.........;>.<.?].A....i...o...O;.d.@../..p..=.....@..G...7..h.e..L...da..A..9..d.\e{~.C......Rj.s_...xI.......l.X..IX.v...D...A....s;%U=.)....V..A.e.".w:..l....Ss....fx....L..kt....K;E.k(..;.Z...i........q7...0m......V..=o}.7.T..?E},.g.X.-=F.GZ..[.~".l..;.....Q....Q.@......W:nE....q^..:C...O..f..Y.......Ox.M..:vV.E..N..............e8..l..u.X......... Po...V.(...{...3.".).!s6m9.......=~.d.,..u.q.v.WjG.G...-..E2d0\.J7?.}z.?.a......=mF.AMH...........".S.5w.H...p(;.7x.(........7.q;U.QQ....(.S...=r....yti~..........b.6..R}.~.x...)..l.O_.U&1..(.OJ+.i....dg....j+.}S..Al.Q...C.a{........F...W1...........ihgZ..m.>.z.l.i.@.s.S...F.z..[...\|,....ZYf..O{...6;.....b..#u..8Gz...IZ.T.....o.......:..h..]....\|X.#2T...L8.6j@.....z...Y..z0...#.&;....Y....%..#...Y.......*...0QN8.%.W...fGr......&.n.)6..&.....@+..bhzc.f..Mr..d..g_.....'P.she.....i.8.......t.....u[Y.d..v6x.).T0f..

Chrome Cache Entry: 231

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3174
Entropy (8bit):	7.914371951671992
Encrypted:	false
SSDEEP:	96:YaQzwrCbt+aDT0qAWp2kgD+BCHC6U6q0gPgH0DqQf:+ziMDIqAG2RDp5kYEqo
MD5:	F40FAB1C2BF9570884064FF8416DE6E7
SHA1:	67B2753D3DA21427070B1E214CA75FC75D4C4C10
SHA-256:	95418A77A49C4050417F75DD3FF6F5917BF5AA2DC4D3B0F62275CC6A5F5D5A9C
SHA-512:	F40BBF3C28FE9CEA77608D187974372FBFC0A0DC6D50EC3AF297EE7A4FB8EEF08AF073CE5FD746DDB1DF88B78D5D555218AFD520E3C63A001F1A6E7DEE1484D9
Malicious:	false
Reputation:	low
Preview:	RIFF^...WEBPVP8X..............VP8 .....4.......>.\.G..!..]HL....kNA.5..a.a.4g.....v.O1.o^...z..G.H...U....D.%...6k~....."...r.7.Y...........t.N_..fC......$....Iq..(g_c..)...u#.q..l.yV..,+...J...p4.....y....J........6.. ..M....r9=UQ..z..u[d....dF..&2./.+........&w.4'3..[T.u.n."..3.a@./...,......"......H1dM$$f~a..)..^....H.<.L.YFGa......A..Ra...7p.U.N.A.3.....=.#+.':..<$qW.2U...Y.Z-1...'2...<.\.p!.......Aog..P..Cd...<.`.5..g.em3.O.pX]?..C.o.:ii..).....XA..m.M`...4d.I{.s..J;s..u....2...u......-.y]...9I...."........B..-..'.8U.j^.O:.c..ns.`."$..z..Y.:..@..=k....-.O.=.B..+.J........./.f... ..z...0.}..!....-._I..K..0P.n...Q#7<.y.f.tS.....'..,../s.A....frk.q..lM)....3d.7..AZ...,$\9.R..\......n...D.f.S.3........A ...B.Ib..E%..\c.......b..x.>.a..7..6.!qE.#....ke..6.n......6..q`....y......]_~............<..YR Fjpg...a...J..@.E...\|...........ER....\|...C....n30..M.....{...Q}b.....$....*V1.....d.~...g\|...!.....p...9......z.:......._.5u....[m..}.:....U~(BMVh

Chrome Cache Entry: 232

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (664)
Category:	downloaded
Size (bytes):	14214
Entropy (8bit):	5.423098025111413
Encrypted:	false
SSDEEP:	192:5Ou495s6yYMkJqYWJ+Jaucgd/ix0BSc1e6t44KfKb6m3PbBISj:5BVuqYWJ+Jauld/g0BS56t4IuoPlISj
MD5:	853877426A53490ADEDBCB2E1CE9624E
SHA1:	BA2E275A1C0148B2F12CA53F17746BB920B7D555
SHA-256:	F3163FB2E48B27F81ECCDB331EEBD4F05AEAF9AF7253765323A35E869D8E5D6B
SHA-512:	12368317D1C18BD215ACB20B1D4EB859C72A7DA8FBD8299348E2D5A462EBE57BC015748330C4C1E07FF5404CEBE61B1A228145F9748D92C12DD2B00346AC910E
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.572.93058cb1137c31242bbc.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[572],{24178:function(e,t,n){n.d(t,{BU:function(){return J},EE:function(){return q},GP:function(){return H},L5:function(){return Z},P0:function(){return R},Qk:function(){return B},SC:function(){return O},Z_:function(){return X},tO:function(){return ce},vc:function(){return k},wr:function(){return oe}}).var r={setDelegate:!0}.function o(e){return void 0!==e}function i(e){return o(e)&&null!==e}function a(e){return d(e)&&0===e.length}function u(e){return v(e)&&0===e.length}function s(e){return p(e)&&0===Object.keys(e).length}function l(e){return"function"==typeof e}function c(e){return"number"==typeof e}function f(e){return c(e)&&e%1==0}function d(e){return"string"==typeof e\|\|e instanceof String}function v(e){return!!e&&e.constructor===Array}function p(e){return!!e&&e.constructor===Object}function h(e){return p(e)&&l(e.__lookupGetter__)&&l(e.__lookupSetter__)&&l(e.__defineGetter__)&&l(e.__de

Chrome Cache Entry: 233

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 84899
Category:	dropped
Size (bytes):	10147
Entropy (8bit):	7.978558662114035
Encrypted:	false
SSDEEP:	192:lpDRXgHvBXf1MMxURXLOq7Xq3y8CVUUkeJGyCgBikBflL+ubMrThh4c:TVef15xURXyqzky8stJG8bRENhL
MD5:	4C55012442A6CC9653DCADBBB528CD22
SHA1:	AE83B62952FF7E4428C85793289D7423ECE52F05
SHA-256:	CF2D5FBEE6986544DA6202828C01898BCB8E8DEBC50611E0C7433E8066834C61
SHA-512:	99FBF683182B1BFA806374068A6BC857419BE0BFE8D582056D8F709A0FA6B0B9E5EB285661C419246C20C66B0E1A8DEB7E026B3FF5D137D0FB4DCAC608880E09
Malicious:	false
Reputation:	low
Preview:	...........]Y..G..+F?..y.~[....4.`.'C.d.mi.: i.k....."...b.]$..\30.,......q..n>....[...........47?...6.....o..[.......[.Ms....5~.L......._....?=....../^...>....#&..?7......=S.....o....z.B ........?.<..O.....}.....^..+~....\|y.?......w...'........57.W.[o..6.C....C..u.w.qQ.9.F=.o.A..U.b......8K..N...Tj8Q7/..Xwb..O...?@.... ..Go.....vuc3.+...9....%...;.....7....o..._....t......=.z.05.%.LlI?\|.:.6L.n[k.}3t.."...Z.6)]&IG...qz.Y....X..t..'.c.$_.~..o.....-..*.....w..<!.........I.U14&.6.]........7...`.>.r\|S...>....G.m...A..>....O6Z.fc".....u..o.~~..........o4.z.......?...6.........-...>..I.....?...............^.~?.\|.G..P@s.~..L.....}x..H.....o>.....OOw.K.+.X..-.{,...&k.........r..O.w=_:.>...{R..1.6..r.}y"8.Wo........v..}..Z..;...7$..#.z./J.e...........lc.ksr...0.&Zr.o..._.....Rk..;;.M...>...{.........#GW.wt=no.. G.6..l#..Z.lRX...g.}H.\..\|.W...x....o.=.......ck...\|.uk.N.m'o.../.2.3.>....9...c\I...X....,.e..U).=..A....c....0\|"....Q.... .M`.^=Z..l.3(....

Chrome Cache Entry: 234

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3079)
Category:	dropped
Size (bytes):	7366
Entropy (8bit):	5.321790025737973
Encrypted:	false
SSDEEP:	192:Goi9TDfbkVomRHx+tvD1btkzPRfk+sGQFvMmqJw:ygVtW71bG1fk+sG6vNT
MD5:	5EA6E5C1344F9A72501CABA99893015A
SHA1:	B4349BDFF54B80FED5EA1D1E7BBD62661E8ACC9D
SHA-256:	7ED8D119427D4C430921861A2E4887F5224A8BB23A00EEFB525FC7E747C8E82E
SHA-512:	50C49A0018B906FCE975ACFDB11FCA7E290C7C57E02AF7770543F44F5050FE678C63FA6EB499CE4C95AC096C13D18C66195DE026060170B057A2DA37920E2B02
Malicious:	false
Reputation:	low
Preview:	var __ember_auto_import__.!function(){var e,n,t,r,o,i={90933:function(e,n,t){e.exports=function(){var e=_eai_d,n=_eai_r.function r(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?n("_eai_dyn_"+e):n("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return n("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@amp/affiliate-util",[],(function(){return r(t(2353))})),e("@amp/foundation/-internals/network",[],(function(){return r(t(73624))})),e("@amp/foundation/-internals/storage",[],(function(){return r(t(92141))})),e("@amp/media-api-config-amp-books-realm",[],(function(){return r(t(52215))})),e("@amp/media-api-config-amp-podcasts-realm",[],(function(){return r(t(61384))})),e("@amp/media-api-config-apps-realm",[],(function(){return r(t(61069))})),e("@amp/media-api-legacy",[],(function(){return r(t(89176))})),e("@amp/web-app-components/custom-elements/locale

Chrome Cache Entry: 235

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	4036
Entropy (8bit):	7.932027659931484
Encrypted:	false
SSDEEP:	96:8xdmsJJ/f3SbRi7NCxsfyFelHFF0/T4YK7oYHR5NZbIEcY95Skbvntn:amsJJ33SbR3q4oFF0/efRqkXtn
MD5:	24823D6579E391ABE63D240AF5ED42D2
SHA1:	5B05564537D70A2127B5E72E66DE228172BF00CC
SHA-256:	6DAEB4535066B284D629A830DEDF04773F43EF8B5A1BD2D538B800F94D61DA5D
SHA-512:	9B5B9FCCCC410FD068B5FF8088C1A27DFF700146C4425461B5095A0B364C9FEFE2BC9131114C5FEE4549AF3C15FE61BC3E9EEBFBE5F7197B902830E7CFE5EA55
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\...\......1"j....PLTEGpL...[....}......N.j.....p..t..u..g....e......i....k.e..Y...m...._..b..x..c..t...r...U.}.\|....!JL.AO$i.%d.%WW.v.#p.59a.~.33X!R. J.+Z.(^...."KU.@x+9V>QoH_{.y."=T3^..K....4l.1MO4.............+C]L~.3S....:@g.T.3^b0x.AE.E9.Dg....Rdo&`[.o.Lqx1Md,..XE.RS.-..BAm.....V=.......B[.8O..]...j8J.Tq.......U.....e..k.H...........EQ.HLv...2ma@x.KU..y.TX......"<.9gp~...../N.\|..et.Qt.&;m".wI..e..a2./@....\|.^e{/ExTc.pc.`..9.....o]P..2..p..^..\....r..1vj.{abR.L).>..........P.......S..Z..w..2F^r..p.u....9.vp..J.....:g.5T...w...........c..dc......B..&..7..)..%..w.L..&r.-..Eet!}a.ql.s.P..,.c#}.%..R..7..Gls.5>G....3..4..Cy.).[B\P0SU&.i,e.G....O..D..).]%_.c..Z..b..Y.jQg.=..IdIJQ.E..>~.a..B..FrD9JvH`.6..Fgr9p{Otawl.Lus4.\|h.O/.~D.M\Z.Mq\Yi\|...S.l[v.w.V.f...."tRNS.R..t.J..(.P..p...+...........<O.....TIDATx^..W..`..q... A......?B...{/....9I.5S0........$O...i...2.4M....V4U>...G.Ai.jJ..r.0<....;:./.G.....4.(........Pz .$.r&....).U.!...

Chrome Cache Entry: 236

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	443
Entropy (8bit):	4.445437815127597
Encrypted:	false
SSDEEP:	6:twoMTqNzdI9mc4slma6UnaLUsvL9F7JLRMcBvxLU2dTkT30lI9P54AJex0JbrKDm:t9XMIX2A3vLv7JLBBJV/sPpJeWJafS/
MD5:	008103375773357B988BF6B4E7DFF3F3
SHA1:	908CA865AC3A7F6B57DC7D5DB70A429CFF959E98
SHA-256:	A5C59C1B52F5DD4D1C06A628F27079F4481D0EE7B40BCCD1CD91FF963E2D674F
SHA-512:	38838694555700DB092B3ACD3EA9DB83EDF59DF7867BC952FB29218B840629ECD7882DA1F67BBE59A61BC0635223D75F2B3C72EBC7C870EBEB1EED57F9CECC1B
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/SiteIconApple.svg
Preview:	<svg height="27" viewBox="0 0 21 27" width="21" xmlns="http://www.w3.org/2000/svg"><path d="m17.49 25.5c-1.35 1.31-2.84 1.1-4.26.49-1.51-.63-2.89-.67-4.49 0-1.98.85-3.04.6-4.23-.49-6.76-6.93-5.76-17.48 1.91-17.88 1.87.1 3.17 1.03 4.27 1.11 1.63-.33 3.19-1.28 4.93-1.16 2.1.17 3.66 1 4.71 2.48-4.31 2.58-3.29 8.24.67 9.83-.79 2.08-1.81 4.12-3.51 5.64zm-7.16-18.82c-.23-3.51 2.6-6.4 5.85-6.68.44 4.05-3.66 7.08-5.85 6.68z" fill="#1086d7"/></svg>

Chrome Cache Entry: 237

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	4.980767694952946
Encrypted:	false
SSDEEP:	96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR
MD5:	5791D664309E275F4569D2F993C44782
SHA1:	A68F363153614A09F10AE2892C134B9C4B001D4B
SHA-256:	4FF54BC38C267DC3A8C95F6ED4590336BAAEC70433EF15D027DDCA608C391E78
SHA-512:	93502A68F14FD4F87E0AA2CAD92A5657A8587E6ACB1C108CCD8CEB5E52776E77DF867962C51E1290316BB78027DA636F38C065294871B4400FBBC4DEDF622EE1
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................".."6."o."..".."..".."..".."..".."..".."o."6.#......................................................................................................................#..#(."s."..".."..".."..".."..".."..".."..".."..".."..".."s.#(.#..................................................................................................#..#-.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#-.#......................................................................................#..#}.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#}.#..............................................................................#:.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..

Chrome Cache Entry: 238

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.11 (Macintosh), datetime=2024:08:13 14:47:32], progressive, precision 8, 600x378, components 3
Category:	downloaded
Size (bytes):	267441
Entropy (8bit):	7.517922094204864
Encrypted:	false
SSDEEP:	6144:JRbRgCZgQnFhzFx1f54Qd1c6uRgKzO27Dahl:hFB1f5lSVu
MD5:	8A8A62973B2EC0DECA1F66218DD051A4
SHA1:	9C4CD9C48726D8348BB30291C4C5D8BE4FF48D0D
SHA-256:	3F831EE741D3D5A23A7E1A95065284AD2736AB85BB12ED85B13E5CFE579855C2
SHA-512:	0AD95B73EBB844F32A8899A770709451B9955D8FF491BE3E143C276B6698B338D91FCF0E0FAA51D921AC1A6D5A0E16D0969AE932B1ECDE147539961D744FF857
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/400780400436/1/AFpKVW0u5fw.267441/5fd61b6d2531113c45
Preview:	....&.Exif..MM..............................b...........j.(...........1....."...r.2...........i....................'.......'.Adobe Photoshop 25.11 (Macintosh).2024:08:13 14:47:32..........................X...........z..............................."............(.....................2..........%........H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................e...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..BCAq0........a..r.\;4.@.../..60....G>.}.3.s..V.K[f.h3.......b..1-.Z....-...?.>.o...sY[l....k.$..............fR~..>...p.mo.e.G.._..^..S..%...n.t.d}..

Chrome Cache Entry: 239

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (42164)
Category:	downloaded
Size (bytes):	42523
Entropy (8bit):	5.082709528800747
Encrypted:	false
SSDEEP:	384:6RvBBVkrJxvcwYBUQ7X85AUfvDUNeFUBOgBmjeYP4PSvSdlb1bGjpXJNNRyIrOM:2k0p38OBmjeYP4xb1bG/bRyIH
MD5:	C2656E265EF58A9CC9F4B70B15DA5FB9
SHA1:	85C5EBDB89D4574D72688C2650D4B84B9B09770A
SHA-256:	F1D083FFAA644C708F11DB29707AA57C19246E6D32643B03FEE3F82C17B224B3
SHA-512:	6417AADEBEEF4EE35381BFC7034148D57FD061D84DE9974D798468C6426C24A6BD1C9913CF517ACCF3E349FA06CBDD546D2883EA8391C595285FE0C6127E26E8
Malicious:	false
Reputation:	low
URL:	https://telegram.org/css/bootstrap.min.css?3
Preview:	/!. Bootstrap v3.2.0 (http://getbootstrap.com). * Copyright 2011-2014 Twitter, Inc.. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE). /../!. * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?id=92d2ac1b31978642b6b6). * Config saved to config.json and https://gist.github.com/92d2ac1b31978642b6b6. //! normalize.css v3.0.1 \| MIT License \| git.io/normalize */html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,nav,section,summary{display:block}audio,canvas,progress,video{display:inline-block;vertical-align:baseline}audio:not([controls]){display:none;height:0}[hidden],template{display:none}a{background:transparent}a:active,a:hover{outline:0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}h1{font-size:2em;margin:0.67em 0}mark{background:#ff0;color:#000}small{font-size:80%}sub,sup{fo

Chrome Cache Entry: 240

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (847)
Category:	downloaded
Size (bytes):	13822
Entropy (8bit):	5.308557467153006
Encrypted:	false
SSDEEP:	192:YPNfrSf3gy1fQx56zKsvEsSDIiFtTislPchPTwFlOvHChmC82YFK:YPNzSf3g6zKIHqtpRKEuvHTC82Yg
MD5:	2A92CDD99A42BFCD7DAB16887539E231
SHA1:	310E2855E334F6F49937490D621710021B15066B
SHA-256:	F20C946DA61069DF3F4DC8097FB617DB50F266D25D53758D91FCCBD8341C533C
SHA-512:	7DBD1CA6AF6E7AA86F408C6E3D5D35AA49AD39908D8AB10AEF4CF8C806AF27889DA43D8AEDDEE030E6351DF1D81442B431C6AF206A4DF6E9BFB043892850EF49
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.15.097368f212a6a942763f.js
Preview:	/! For license information please see chunk.15.097368f212a6a942763f.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[15],{21015:function(e,t,n){"use strict".e.exports={canvasAvailable:n(1892),continuousScrollEventsAvailable:n(93117),cookiesAvailable:n(2022),cssLinearGradientAvailable:n(83353),cssPropertyAvailable:n(15871),cssViewportUnitsAvailable:n(77499),elementAttributeAvailable:n(13462),eventTypeAvailable:n(70683),isDesktop:n(13459),isHandheld:n(30677),isRetina:n(25152),isTablet:n(53489),localStorageAvailable:n(83574),mediaElementsAvailable:n(58093),mediaQueriesAvailable:n(28342),prefersReducedMotion:n(54719),sessionStorageAvailable:n(63160),svgAvailable:n(91676),threeDTransformsAvailable:n(78795),touchAvailable:n(50012),webGLAvailable:n(72810)}},1892:function(e,t,n){"use strict".var r=n(93796),i=n(6379),o=function(){var e=r.getDocument().createElement("canvas").return!("function"!=typeof e.getContext\|\|!e.getContext("2d"))}.e

Chrome Cache Entry: 241

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 144400
Category:	downloaded
Size (bytes):	17422
Entropy (8bit):	7.9862827586756735
Encrypted:	false
SSDEEP:	384:2e0AYD0jWxy8M4gQBv+fImQpItUdkIUqi1nSs2quA2KtyfYoC/LA:R09DLhfBG7QpIemIUJ1nXznyujA
MD5:	86D83D04E8CBDCED71F34637C23C1EB6
SHA1:	2AE58F60868535644CEB753735DB7191D65A6723
SHA-256:	91286A9F171E3435452F7FC0523F2FC626A142C1EB3F29BDC38B74335E229CCE
SHA-512:	09C8395CCA30E5F3A1A3C35F63C91C57878BB70D35A00863A98DF4BBAB2BEBC3B78B4BA6E58521B4812E40770FCC4FFDCE173C2F6D95D96EE26589AFCF25CDC8
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e
Preview:	...........}m..Gr._1...... 7X.H.d./. .k..].2$..:......{8$.<$gH.#..{D.g.........>....[......C.Co....><\|.M...o.....e........./.._..C/../....._....z....g~......_}........}x.W.....o/......?....7..(...........}.........._?=\|.x...........^..y.....d...,....N...........F.....Q./.y........W....`..?..9...+.U.(?\|...\|<.7.....>..=..s..U.\5\|...u.......K..=6eC...x!...=....T,.._.v.....1L6.S.._..f\r.@..y...Wo?..H..i...TKoK.6\|.I.L..#.&..fjK..u.l{"/..wI.x..O....g.....s9k.....1v..c.......<3>.<&..^4......C(....Ko..\|0.._..w.....>....#...Q..`p..j....<.......92...=...K2.?.x.....x...z.?...o.....^..T.,..X..1.S.....bHI...p.T...w..lB..8...Y...oK.y..:P.@a;WK}..s.T......l.)...\.....g.G..}.u%.O.$:.........uD....).v..t....3...$.Y...,./.t.....^.2.K.....1..[...m......'.ing..vN.4~..{../1a....dq..>....KO%v.g[..n.v...3....{.'(.Uz$...Y..@z....G3.YNu.c.....e....h......%B.......m..q@.<..J.Xft.s..1.P9...S...\|b.......X.t..Rc.f...J ..[W:&~9.*.&..4..;...?.D.vK6=..P.

Chrome Cache Entry: 242

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 290x270, components 3
Category:	downloaded
Size (bytes):	21090
Entropy (8bit):	7.878614475283644
Encrypted:	false
SSDEEP:	384:3j0OJMdamjE0cVsRQK80uxr+IsTJo7qvrgAK56GEUUW5tXnwu:34fHEGupslo7q8AK56U5tXwu
MD5:	F5EB8DCF9B18F19053034101E920574E
SHA1:	9513C6C5E39669AD27132D470008955DBAAE61F0
SHA-256:	15A94720D72ED1727FB281ED4AF914E17CD8166BB18F5A8484F32F9FAFF4F365
SHA-512:	950178CC71BD88274F49E6248A078F4F0FAA95E7188C2E69E2EDC62D874CABF5EDDA83DECE9FEE9C657B05CF52760E513F5161B34BF5FE8232923E008DCA34C3
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/SiteAndroid.jpg?2
Preview:	......JFIF.....H.H.....@Exif..MM........i..........................."...................8Photoshop 3.0.8BIM........8BIM.%..................B~........".."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?.....(...(...(....O....e...[..0.x.Z..i).......rT.........N.....).\.._Q...u...K._..TnC[.(24~.#.{.Z.....?...Nl....7Z5..o..l..k=2.<.{,.Q....J..h....Z<q.[.UT.&.P0@P.0...n........D.='....k.%.G..}u.........o.[..-....7..._..x.F.e.h..7....fVQ..gl{.x

Chrome Cache Entry: 243

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 109728, version 1.0
Category:	downloaded
Size (bytes):	109728
Entropy (8bit):	7.997823232989331
Encrypted:	true
SSDEEP:	1536:7t3W6oY1OkObRhMyHpX5Rg3hEGawMCrv7m75sxECTMQ9vZE6LV9bkMReEU7KsKcr:7tG6oocR2YL23hkgfmdsZhZRlReIsQW
MD5:	D1883D2801247347DA20FDE4DC14631F
SHA1:	C26710335E7339541609B6B491C6726834C2C275
SHA-256:	26B85AE5213566F5E191AA4FBA212EE1DBFA010D5E31E0512A98D3699861C15B
SHA-512:	712391093BC4BEE069B057FA0197EAB3CD30F41317A69827F7432A601C76FEFF2D307EA8D1A61D5EAEE0667A17FBFD8F6F8BC3B0CCFA7BAB3335ECFE064ED0A3
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Text/v2/sf-pro-text_semibold.woff2
Preview:	wOF2..............nx...=...........................,..H.`H...>...d....6.$..$..(.. ?meta....H. 8.t[zx.A[.m;_.vqXTA}..d......h../.j.1..)Do..\A...-.t.M.B..rr..........u2.u...I...@lVH.Z......c.!WU.h.....i..w......i.....Do..pFe0...A...M-..E.=!......y.43......./i..Z.+m{n.].f3Sz....a.N..NF.E..\|y...q...n.;jl.9...N.......XVK..S.*\|.=.<..e..M.".....j.5.....?~..F.,.W......\|z.W_.t\|.9.!'t....M3.pH8.&...{.~....TR#....=Zt....:...~.H....p.W/j:.A.....n..G.P....:.I...G.qukm+cx..7..S.l;!=....J.?.....0.X.......27.`...)b...D...H)F...s1.e.7._....R....s7.0j.L8.+..0.......,:W.~..9"....fxR9.TgqyR...c.Xe.iQ5....o...k....._.-.3.).X../.0.(.m.?.F...).]=..\|iB...jL.....j.V...@..eY.....+K.....#.....l.......?$F)T.Zbg0.\.F.z.G..../....&....@.xt....4.By...zI3.~;0..mOD..j..:..E.._.\|^N.D.d,_-..cc...OdO.J....m4DHS.I.......?'v...R..hm.U.%.J.......?......J.......nfm...M{nn...9..;c.r.>w.qr...:c.si..P.Jk..Eh._.6..;..'3....i..N.d8.[.&.....VT{^..!1...$..K.=..o........#.d...\|.Dy..P..E8...

Chrome Cache Entry: 244

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1566)
Category:	dropped
Size (bytes):	41276
Entropy (8bit):	5.2368089739293495
Encrypted:	false
SSDEEP:	768:EkxiX+skUbNIvnXh5hC+gSyJNbX+V4N8zuZYJOKLNWDjqcR5cXcpcO0cDcIvScTu:lskUbNIvnX7hC+MNhZYVNWDjRE3
MD5:	CF98EF659A7C40F16FB89858EE051693
SHA1:	F223F862E3DC2347DEC54A932E35C5BC5F794C8D
SHA-256:	D1DAC8F97C25357AE55BB0FF7EFAB6349022317CFBC549BB2057C15ED2DD337D
SHA-512:	58043EF2BA149E03964670CA8A2FB8039691129058FB95D29851F84E7D65F66270B5ECBED675D56E871D6722B959FF3AA7ED2672E1E3E89B6F071A90B120C7E4
Malicious:	false
Reputation:	low
Preview:	(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[706],{43862:function(t){"use strict".t.exports=Object.freeze({ELEMENT:1,TEXT:3,COMMENT:8,DOCUMENT:9,DOCUMENT_TYPE:10,DOCUMENT_FRAGMENT:11})},96339:function(t,e,i){"use strict".var n=i(38694).t.exports=function(t,e){return n.insertNode(t,"insertBefore"),n.childNode(e,"insertBefore"),n.hasParentNode(e,"insertBefore"),e.parentNode.insertBefore(t,e)}},38694:function(t,e,i){"use strict".var n=i(37844),s=i(43862),r=s.COMMENT,a=s.DOCUMENT_FRAGMENT,o=s.ELEMENT,h=s.TEXT,c=[o,h,r,a],u=[o,h,r],l=[o,a].t.exports={parentNode:function(t,e,i){if(i=i\|\|"target",t&&!n(t,l))throw new TypeError(e+": "+i+" must be an Element, or Document Fragment")},childNode:function(t,e,i){if(i=i\|\|"target",t&&!n(t,u))throw new TypeError(e+": "+i+" must be an Element, TextNode, or Comment")},insertNode:function(t,e,i){if(i=i\|\|"node",t&&!n(t,c))throw new TypeError(e+": "+i+" must be an Element, TextNode, Comment, or Document Fragment")},

Chrome Cache Entry: 245

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.11 (Macintosh), datetime=2024:08:13 14:47:32], progressive, precision 8, 600x378, components 3
Category:	dropped
Size (bytes):	267441
Entropy (8bit):	7.517922094204864
Encrypted:	false
SSDEEP:	6144:JRbRgCZgQnFhzFx1f54Qd1c6uRgKzO27Dahl:hFB1f5lSVu
MD5:	8A8A62973B2EC0DECA1F66218DD051A4
SHA1:	9C4CD9C48726D8348BB30291C4C5D8BE4FF48D0D
SHA-256:	3F831EE741D3D5A23A7E1A95065284AD2736AB85BB12ED85B13E5CFE579855C2
SHA-512:	0AD95B73EBB844F32A8899A770709451B9955D8FF491BE3E143C276B6698B338D91FCF0E0FAA51D921AC1A6D5A0E16D0969AE932B1ECDE147539961D744FF857
Malicious:	false
Reputation:	low
Preview:	....&.Exif..MM..............................b...........j.(...........1....."...r.2...........i....................'.......'.Adobe Photoshop 25.11 (Macintosh).2024:08:13 14:47:32..........................X...........z..............................."............(.....................2..........%........H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................e...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..BCAq0........a..r.\;4.@.../..60....G>.}.3.s..V.K[f.h3.......b..1-.Z....-...?.>.o...sY[l....k.$..............fR~..>...p.mo.e.G.._..^..S..%...n.t.d}..

Chrome Cache Entry: 246

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	15740
Entropy (8bit):	7.954978172464159
Encrypted:	false
SSDEEP:	384:AwIpVA9llRR/+5BrSOxNbCGcIvTeSEHIGbi24fe:8Vul+5BrPtIIvTeSEHRiV2
MD5:	4E59E61B2A0205E09DAFAD24DA174530
SHA1:	0DC2ADBA2FBE4F1CD195364EF4F1AB4DC1641993
SHA-256:	269F20EB63DB3ECE8035886EBC69112EF94339DA867D47F815237800555E508A
SHA-512:	8EE876A60C4D511BEB1229678E34D5F91C34DD8EDA4CF792DC521DB76CB8338480B3C265181B3AFB7446D3992E243D590A09494CB8E10FC4268022181BABDA28
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4
Preview:	.PNG........IHDR...............g-....bKGD............=1IDATx..}w..gy..yf....^/:.n..,7..Tc0..d..P...........@0n. ....\(.Lq.......-..u....3.<.?fwg...k...\|.s...3..w..>...y.....=...`..\..t.J.....q..tL...S0^2N....z..\|L.L......Y. 4?'...N..).$bW$..<...h...k..d...I..L...)...tR.(..i..SJ.!:.<.'...0...w....!.....S.)bU.2I..................c....o....m....X......t.@u ...,..D..........=....V...l.I....y...........3.:.....=.:\|..F..h....#"(.....O@....I.{c~.~....\|..>t....x3...8...-..(.... ....`C.&A.@.....p.4&...Z.$...z?..9..x.<..\.=..#..6..... ...S."...@...F.X."........@..E>...j!...>oVN..S......+..@f...F..>..g.....9......\|&....a.+r<3,.$.....p.`.}_Q..b..;.E.VW....@ 8...s..6.\|...(.IW.Lv.....+....-H.n....<.g3..Kup.= ....G...zE...T..q...L....@ 4.<...]..A.hZ;.9....Qlo..M@(....t..z..N.G.{.......W?<...D....q=.....a.W6......T7....W......W.t...@.wU@....St.......@U..m......w.Gv...'........<.g...e=...p)..e....'.....B.;...X....o....4pD1p..l..a.s.8..@v.;........../..[.....?._...

Chrome Cache Entry: 247

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	19325
Entropy (8bit):	7.97541212859293
Encrypted:	false
SSDEEP:	384:/fkqoRm5m06jc+ejLD9xyVF1gX+Bq3lCTiqvfKs90HmFOGJaIv5Se4:/cqo25lu1RBJmYtiH8OERvK
MD5:	DA1FF638A4141EED84327E20F936496F
SHA1:	91E5410531539B53C3AEFCC5774413E8A665A57A
SHA-256:	B66DE388C12D6611870503C34C5DB37FE079313C4292177435FD8DC7ED6CBE67
SHA-512:	75B6243FEB853275A9E4AA1C36591CBDC3439CD27489CD5833F8670E072ACECC59888699BEBD3FFE5F8D1851608394D3255EAAA863DB438511CB4798F99D334A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............K2IDATx..}w\|\...3...U.."....c..0...LH.7..........$..I.P....p...{..-....w..c.-..r........ig.....0}....v.<,.;l...M..v.W2#:......,.+".C.\|..'....".......x...3.......<P.].....p.a",.....:...P&@).#.:...".........=:\|.'O.._....').?.t.@......+..Y..}/.Z...q.._#Rg..V.v...?{.WO.0#zu... x.@#..w.i3...q.....0.D4AD~.....:!.O..w.-..?..&,..8.3Z..y......O.[D..Ci._r.i..s..'`.F..........g..."3.u.[.F.Rc.Q.".....fK^.b...8..g....k.....3"r.....x.b...........`..9....]...M!\|.HU.z.....sV....w.x..y...~....3.<.....fk.......M.................V....??th(.\|..E.2.OD.$.v...r....~A.t./.J..Ep..3f.y.m........`.f..&...'_.r...."..n..Q.....Q~....D.qm.....c.......jh....M.x.\|[.......0..Y..}..C..s...}.Z. x......(.....EP...l....#..w......M.=....xw).._..6.i}p.ub...?........4........v7.}.P.?..`y....9.\p.../....3f<...u..ya=......'~.....~.kG.*....[.....w.........C_...k6..-.>]..<.\|.,.&B.=..k.@....O..@...;.y.....8..?..\|.}r..F>.........$._..%

Chrome Cache Entry: 248

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	4.980767694952946
Encrypted:	false
SSDEEP:	96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR
MD5:	5791D664309E275F4569D2F993C44782
SHA1:	A68F363153614A09F10AE2892C134B9C4B001D4B
SHA-256:	4FF54BC38C267DC3A8C95F6ED4590336BAAEC70433EF15D027DDCA608C391E78
SHA-512:	93502A68F14FD4F87E0AA2CAD92A5657A8587E6ACB1C108CCD8CEB5E52776E77DF867962C51E1290316BB78027DA636F38C065294871B4400FBBC4DEDF622EE1
Malicious:	false
Reputation:	low
URL:	https://desktop.telegram.org/img/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................".."6."o."..".."..".."..".."..".."..".."o."6.#......................................................................................................................#..#(."s."..".."..".."..".."..".."..".."..".."..".."..".."s.#(.#..................................................................................................#..#-.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#-.#......................................................................................#..#}.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#}.#..............................................................................#:.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..

Chrome Cache Entry: 249

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 102073
Category:	downloaded
Size (bytes):	10959
Entropy (8bit):	7.979994782862011
Encrypted:	false
SSDEEP:	192:Sq3PR72ctqmVQvWnigEmVxdobM5cFOvCZbZ9gAJxhJuKwi6Sy18YapNjagcvb1CG:Sq3PR7jtmAHB5eOvubZ9bNDgvapdBcpr
MD5:	FCF0262BEB96C58FD7AEB5C0BB8FC4AF
SHA1:	22C51ED3EB77FC79AC3FE8131F8CB08C9AFD532E
SHA-256:	E81EA8894A34C2673DC7E7AFA5055EDED2622F15DAB8F452EA79C240C6969F3F
SHA-512:	11422AFA3F696C703AD2B0CBDF00F2B5C099FB40BE43C82EE17686383AB5AD194AC6EFCDF4DBC65BCFC3B7C3E62AD6811A6834386B7D01D9E89791C051DED060
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8
Preview:	...........}......D..#.w..b.b.,.#p.'q6N..>'....~U..VK.3...sq.i.".E.X.....>.}k....}{.TP.......Qww?.~.-...1......`lw........Z............'}.............^uw.^.y....5....7<.?.....D.oL.^>~..G..}..^....g<....V.9........i\|....'...h...~....Ez.F.....h.V....\|,....M.T..3....4.x..X...kz....,o_.~/..6.~.@......7A.....n@..)#..Q!D.........w...>..(.n.m...+. ..,KgB"l[.a.J9......ULD.I.76...y.......x..........[...}...;...u......uV.R.o..FeM.)o..{...h...k..y....gB(.Yl.}w=.Y\|/}.....s..6...P.MCz..!.w...;.......YL.g..Y...j..K3...^..94.[..+..Y......+..W.3:..Dz`i..^K.xja.2..X.xt..Q6.w......U.>LV)R..(c..8.{z@c`.j.\ ....F.....U.!@.hH.....X..id'.h...&..}T>......./.k......{....g..\=.1$7A.......z.T.f.}OD...?.......=!.&. ...:7.0=.....Z...~}.....*...#.............[L..O-."M<M...". 8.8...onV%Y.C.n....X...a_...;g.k.Z#..B3.aw....wD..G,...#..n';...V.....?..;.......O....W~......;....O..f..^.>.2.+..<...+.}.....G.......o..\|...._.G.......S..f.J.I.+7I...Ga.-.\|...E.0.Y

Chrome Cache Entry: 250

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3079)
Category:	downloaded
Size (bytes):	7366
Entropy (8bit):	5.321790025737973
Encrypted:	false
SSDEEP:	192:Goi9TDfbkVomRHx+tvD1btkzPRfk+sGQFvMmqJw:ygVtW71bG1fk+sG6vNT
MD5:	5EA6E5C1344F9A72501CABA99893015A
SHA1:	B4349BDFF54B80FED5EA1D1E7BBD62661E8ACC9D
SHA-256:	7ED8D119427D4C430921861A2E4887F5224A8BB23A00EEFB525FC7E747C8E82E
SHA-512:	50C49A0018B906FCE975ACFDB11FCA7E290C7C57E02AF7770543F44F5050FE678C63FA6EB499CE4C95AC096C13D18C66195DE026060170B057A2DA37920E2B02
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.143.9c5eed88d9a0818b4f5b.js
Preview:	var __ember_auto_import__.!function(){var e,n,t,r,o,i={90933:function(e,n,t){e.exports=function(){var e=_eai_d,n=_eai_r.function r(e){return e&&e.__esModule?e:Object.assign({default:e},e)}window.emberAutoImportDynamic=function(e){return 1===arguments.length?n("_eai_dyn_"+e):n("_eai_dynt_"+e)(Array.prototype.slice.call(arguments,1))},window.emberAutoImportSync=function(e){return n("_eai_sync_"+e)(Array.prototype.slice.call(arguments,1))},e("@amp/affiliate-util",[],(function(){return r(t(2353))})),e("@amp/foundation/-internals/network",[],(function(){return r(t(73624))})),e("@amp/foundation/-internals/storage",[],(function(){return r(t(92141))})),e("@amp/media-api-config-amp-books-realm",[],(function(){return r(t(52215))})),e("@amp/media-api-config-amp-podcasts-realm",[],(function(){return r(t(61384))})),e("@amp/media-api-config-apps-realm",[],(function(){return r(t(61069))})),e("@amp/media-api-legacy",[],(function(){return r(t(89176))})),e("@amp/web-app-components/custom-elements/locale

Chrome Cache Entry: 251

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	21478
Entropy (8bit):	4.9401794405194135
Encrypted:	false
SSDEEP:	384:FCxaBo7s5dibe4UbBHasovLi1xPSoGBejIfD5FQhPOwIc:FCxko7UALi1xdGFTcIc
MD5:	4C9BA6B680FC51B6E5BD4217A1550C88
SHA1:	3FA0E7D643CC1E3008E0FFEBA46A1E3682E2EAF7
SHA-256:	51C4D88FD78F3B8EFB16F845E75BE7F1BB288FDF2FD39D033868A0346DB7FADB
SHA-512:	42706B3E53134B3EA0FCE3A5775D8929634EAB202856794D6E5E71FFA44B83487AA992D3D933FBE2BD5B2CF084F20206EE13BA904A713114E566DA6474A8C3D1
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/main.js?47
Preview:	var startTime = +(new Date());.function dT() {. return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';.}..var jsonpCallbacks = [];.function twitterCustomShareInit () {. var btns = document.querySelectorAll. ? document.querySelectorAll('.tl_twitter_share_btn'). : [document.getElementById('tl_twitter_share_btn')];.. if (!btns.length) {. return;. }. var head = document.getElementsByTagName('head')[0], i, script;. for (i = 0; i < btns.length; i++) {. (function (btn) {. var status = btn.getAttribute('data-text'),. url = btn.getAttribute('data-url') \|\| location.toString() \|\| 'https://telegram.org/',. via = btn.getAttribute('data-via'),. urlEncoded = encodeURIComponent(url),. popupUrl = 'https://twitter.com/intent/tweet?text=' + encodeURIComponent(status) + '&url=' + urlEncoded + '&via=' + encodeURIComponent(via);.. btn.setAttribute('href', popupUrl);. btn.href = popupUrl;.. btn.addEventListe

Chrome Cache Entry: 252

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (664)
Category:	dropped
Size (bytes):	14214
Entropy (8bit):	5.423098025111413
Encrypted:	false
SSDEEP:	192:5Ou495s6yYMkJqYWJ+Jaucgd/ix0BSc1e6t44KfKb6m3PbBISj:5BVuqYWJ+Jauld/g0BS56t4IuoPlISj
MD5:	853877426A53490ADEDBCB2E1CE9624E
SHA1:	BA2E275A1C0148B2F12CA53F17746BB920B7D555
SHA-256:	F3163FB2E48B27F81ECCDB331EEBD4F05AEAF9AF7253765323A35E869D8E5D6B
SHA-512:	12368317D1C18BD215ACB20B1D4EB859C72A7DA8FBD8299348E2D5A462EBE57BC015748330C4C1E07FF5404CEBE61B1A228145F9748D92C12DD2B00346AC910E
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[572],{24178:function(e,t,n){n.d(t,{BU:function(){return J},EE:function(){return q},GP:function(){return H},L5:function(){return Z},P0:function(){return R},Qk:function(){return B},SC:function(){return O},Z_:function(){return X},tO:function(){return ce},vc:function(){return k},wr:function(){return oe}}).var r={setDelegate:!0}.function o(e){return void 0!==e}function i(e){return o(e)&&null!==e}function a(e){return d(e)&&0===e.length}function u(e){return v(e)&&0===e.length}function s(e){return p(e)&&0===Object.keys(e).length}function l(e){return"function"==typeof e}function c(e){return"number"==typeof e}function f(e){return c(e)&&e%1==0}function d(e){return"string"==typeof e\|\|e instanceof String}function v(e){return!!e&&e.constructor===Array}function p(e){return!!e&&e.constructor===Object}function h(e){return p(e)&&l(e.__lookupGetter__)&&l(e.__lookupSetter__)&&l(e.__defineGetter__)&&l(e.__de

Chrome Cache Entry: 253

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	WebAssembly (wasm) binary module version 0x1 (MVP)
Category:	dropped
Size (bytes):	390408
Entropy (8bit):	5.640205401698211
Encrypted:	false
SSDEEP:	6144:y+3z9vKn2z9vyj+9R08Wcdmwdq6O2IQMKzoWVl7cunjfHjr5sP17RhnFJ/W:yMzZdR08a6O2IQMKzoWVl7cqjfHjr5sE
MD5:	E725DC036AD50BA694C90EE1F72C4B5B
SHA1:	09F0EDED8AA4CEB9AB1B326F5265DCBE9FC0B8E8
SHA-256:	F50ED354FD14CCE39533AF5FC58C0E4387A326748114C57A2CE3C98611DA673B
SHA-512:	17D8775ABB9180793C44278C36C7F5B9CC0609AE75CE0696763B6A5DE8A81D27A656B6B3B1665DDC2C7FE9CF3816E509DEF22EF71119CE0DE6F9D404041D86C3
Malicious:	false
Reputation:	low
Preview:	.asm.......Y`...`....`.\|\|.\|`.....`.....`..........`......`........`....`......`........`.......`.........`.......`....}.`....}..`....}`...~...`..\|......`..~..~`..`...........`.....\|..`......\|..`.....~..`...`.\|..`..\|..`...}`.}}}}.}`...}}.`..}..`..}.}`..}...`...}.`..}}.`.}..`..}.`..}}..`..}...`.}}..`....}}.`.....}}..`..}}}}}}.`...}}...`.}.}`..}}...`.}.....`..\|\|\|\|.`...}..`...}}..`..}}}}}..`..}}}..`..}..`.....}}}}}.`.}.~`...~..`.~~.~`..}}}}.`.}}}.}`.}}.}`..}}.}`..}}}.}`...}.}`..}}}.`.....}`..~.`.\|..\|`...\|`......~`....~.~`.~....`.~...`.....\|`.......\|`........\|`....~`.\|.}`.}...`.}..}`...~.`.............`...............`.........`..............`............`.................`..........`.\|.\|...(.env.b...env.c...env.d...env.e...env.f...env.g...env.h...env.i...env.j...env.k...env.l...env.m...asm2wasm.f64-rem...env.n...env.o...env.p...env.q...env.r...env.s...env.t...env.u...env.v...env.w...env.x...env.y...env.z...env.A...env.B...env.C...env.D...env.E...env.F...env.G...env.H...env.__table_base....

Chrome Cache Entry: 254

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	11846
Entropy (8bit):	7.9788987039811206
Encrypted:	false
SSDEEP:	192:RC7BYWTKLuFWSamfKm4M/HMfJFXEebSccbCgtL4LrN8HOKQ4lhwzHBylSh06AzXf:RIB1qyWSamfKm44MfecICg2rNcO74kTy
MD5:	54E6A21BF33DCE1280CD96CCA52A9938
SHA1:	7FB13060775AC2DAE5E9C9A20446D1B9371F099E
SHA-256:	0E261B545D27D4B9446DE9B1B3170DBB0627C023924F816D3A43BC6EC8A6B7AA
SHA-512:	17FD437724F77D3F83DDBF267B8E17A4EBEDE5995ED2FA06B29969CB6A933D191183DBA6EFAA165B3DB7E71D5A9D142CD1CA92F9F9D013BA82E1232811BC1D3F
Malicious:	false
Reputation:	low
Preview:	RIFF>...WEBPVP8X..............VP8 .-...........>.R.I$"..i.0....73.],..NQ...s.:7.O....~.........A...s.o....../...1...?..r...j...1.k.....7.......O....n>..9.S.......<O.w.}.r..^.....o......o.#.O...;../._q. ...>..........?....2_........}...........>....+....O...v..V.Ic..&de%.....L.Q:.g.+.5j.....m~..=.a2k..E.0........S.l..R..v.(U4.Ah.,..i`...#.. .......l...r?,..,.T@l.q.3/......9.....2...O...+........xNbx.F......e7S.....6.WL#.F.:P........<.Pvo.w.C.c.9....%1.m..7..-{........;.......`......7O,.$6.....,L.\..C3;....1...P.........l.SI....~.k+c.)...5.G/...!.H..@...z...R1.B.....c,.....W...H...l..r...c;.v.........o....W..k....$..V:....6.E6"Q@ U.Z.......~".[yQ....:1IXjNl\|6y..../...W.jb..G96..j ..n.r....nH.E?e...b.j.........;J...............j..Kz.j}......a....2K......_..g..S...^.V.p...i...!....66.P.../ .q.k;.C.......i`_...l /L.=.h.{.{2.\31T.:...2X6!h....Kg..+...h&...5.\|..>.XE..9&F.[.......O.6 ......6..4.....R.7.J.Gv+.Wip.45S......p.0.U.....W..l;j.C.r.X.5...

Chrome Cache Entry: 255

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	11343
Entropy (8bit):	7.967755371327097
Encrypted:	false
SSDEEP:	192:5BkxH7mNBqw0b+7h5tyiS/5Z3LeiTLgrsPGLR66oy/PtnBpLghEr/RKlfPs9yMHk:5BGKrr0bkNyiqZ3LeiTLLm66NFBZgWru
MD5:	4E06D87C860BA8E8A804350F42632217
SHA1:	31D3F89AE95D6F25660020B21E49114AAECFDD59
SHA-256:	6B081CB199E67A43DDCD7DDAC0B528C93CC72BB82641937368A41B0AECE43125
SHA-512:	C28516686E07C341DBA58B28C8185AC31FF479D7B4F8D081CB50B395C6678E353B8D0D00E3B21185DBCB6484F81A354170D403B8B6F6E7EFE8D73017D1D681ED
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688
Preview:	.PNG........IHDR...............g-....bKGD............,.IDATx..w\|.....<ef.Q.Y...b....Z.f....K..f.lX..C.....n ..-,..w.)K.).B.i......E.mI...O9..cF3.Y.%[......h.).~........J(...J(...J(...J(...J(...J(.......M....y..bb........H.(...."......G>l......+`.1....D0.Q.R.K.,".....B;.7I.Y"<g...}.{[.S.`.pnc.$.NV....Q.O....Az.....vv.x..:74.Q2>..s.x.^._U.<C._).."k{_.Q......8l\..yD.b...A..A1.....(J ...B...^....y@..8...: ...x.@>..mv]....B.f...........q".G...P-...P=.~G.'......t@.>.t..<x..{.\|.&....Z..7C...8.JWA.!"2F..a....f.dN.p.1.: @.t..~..H...>.~d....e..C.gR...-0.7...Ih...k..=.....-....9..D..wmS.u_..g..z'.w[.2U.zx$..Bs..r..`L.t.[`/...... ...^..t....&}H....GhEU..z.].u..#N{...O..V..Z....3A.Mp.1..N.f.%....... ...}..{....;&\|~..E.@RF..6.^d]............\|5._...5...Y.I...%.+....?..A...0....mB.>O.-...."T..{%].....7.qN...#":..}...Z0.[S..i.........F-`4....31....'!......iz..)]....A..3...*.XW....p..{}.iBtG0....KL.J.d........a...@.. .z.5.)A.. =...~..G...].F......O._..v]...'..../Q..A....8

Chrome Cache Entry: 256

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10204), with no line terminators
Category:	downloaded
Size (bytes):	10204
Entropy (8bit):	5.282533445396263
Encrypted:	false
SSDEEP:	192:U38kcmi3U2hQctc1cJcpcZrEccxNsMlcTctcIceCgycLcvXRkEsYNtGr:U38ZZU2hxtc1cJcpclEHllcTctcIc3gP
MD5:	97E3F38781BA136C719D08CA0EC5162F
SHA1:	5604E5C9095068500FD764E4E7608CD489D272CC
SHA-256:	9DC2DC3E987AC76A2AE4DCC3A4DE7BF5D09DEACD4780C9F8BA7EC263380809CF
SHA-512:	0716DD98795D9184A7A1508B87F9D17FAE217CC0364D42D075AF5D4C6BC1FD37E6FC07C4F6798D96AF028608075666D133C15977F38F8748421586BB9833E507
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/global-elements/2426.0.0/en_US/ac-global-footer.97e3f38781ba136c719d08ca0ec5162f.js
Preview:	!function t(e,i,n){function s(o,r){if(!i[o]){if(!e[o]){var l="function"==typeof require&&require;if(!r&&l)return l(o,!0);if(a)return a(o,!0);var c=new Error("Cannot find module '"+o+"'");throw c.code="MODULE_NOT_FOUND",c}var h=i[o]={exports:{}};e[o][0].call(h.exports,(function(t){return s(e[o][1][t]\|\|t)}),h,h.exports,t,e,i,n)}return i[o].exports}for(var a="function"==typeof require&&require,o=0;o<n.length;o++)s(n[o]);return s}({1:[function(t,e,i){"use strict";e.exports={EventEmitterMicro:t(2)}},{2:2}],2:[function(t,e,i){"use strict";function n(){this._events={}}let s=n.prototype;s.on=function(t,e){return this._events[t]=this._events[t]\|\|[],this._events[t].unshift(e),e},s.once=function(t,e){let i=this;return this.on(t,(function n(s){i.off(t,n),void 0!==s?e(s):e()}))},s.off=function(t,e){if(!this.has(t))return;if(1===arguments.length)return this._events[t]=null,void delete this._events[t];let i=this._events[t].indexOf(e);-1!==i&&this._events[t].splice(i,1)},s.trigger=function(t,e){if(thi

Chrome Cache Entry: 257

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 6166
Category:	downloaded
Size (bytes):	666
Entropy (8bit):	7.701291372245517
Encrypted:	false
SSDEEP:	12:XOG9cwCZy1g1haY5rxccYyKNkS9Q4A0W4jd6bmsKdsnXU0AfoG:XO2cwCZy1shJ6ceNkS9BA0W4gbAd2kZ9
MD5:	C85C4C993F7C21F4356F74EDCEA79D89
SHA1:	3D342626602CA1B1F40D941E095D9D47D5956DC3
SHA-256:	556ED4F6FE878A3E5C5E1073AC10B977A3CCB6C169053298BA40FC30F4B794AE
SHA-512:	8D02A1A469EC0A5330EE75836B6BD7A09694B33DD3DB68AF79A0DAEA0F76B1E70D3265FFEC085F2BF6AA49111DDF82024662A8A6387BE9EAE85C61FFCA8F5636
Malicious:	false
Reputation:	low
URL:	http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/font-roboto.css
Preview:	...........Ms.@.......%H2...0...4..3q...C.q....^..v;...fHra..]..H+.:5..:/.\|afO.qj.>...1.."3~...U..M..UuS5..\|..ivE61.^..a.1.Ww....s...H...cz/f7.bbl..dxvf..l,u.5K>...{..)..b...l.u......c.\.......9..Z..-.Eu..uZ......v.....,0.......-.i.&M..#pm0..".)6....~..?....YwE4.. .}e..H......P.P.Bt[ .:..8h....I`.../......^......y..:.d.4..l(...0.1..V#..F.. _..B.......$,B..0...... ..P.M^..\|..&(...).#..X.X.L..d...Q&"0.8e...8cH..q.....G.i.C.I...={.GV....@Q.....htT4R.2.0...x.8..Q.8..U(.SE....D.7.LM...P..:b=i..9m.O5..A.t..._E....et....K.../......S.v...J..s4.....:{......F..}..N.w]..%7.........f..OOCp=/^uC...+j.4R.uC....7...}...N.o.!....5......f....

Chrome Cache Entry: 258

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	downloaded
Size (bytes):	196938
Entropy (8bit):	5.135396650531942
Encrypted:	false
SSDEEP:	1536:+jNyqUXiJc25xwftWJc6qdcLwQnQoAkSWZmT6ocTzVqJlO4QA3chodGWXTDvFz8L:cUXiuatrXojm
MD5:	00457FBC4A59737B8E35F6AB9FA9CB0C
SHA1:	18E6E6066B28939E219A4CF8E45F07CF25C601F8
SHA-256:	F5EC5CFEFC085F50D63BC1E671B579DE23B1F9C0999A60DE6853552910730A31
SHA-512:	79B47CE7F6F45B4A80E2B808AA26072E627AA84A50C70E2E9E58E6DB31713CCF28AD79E45B15AB81DC4B74FFB2D4854D22E182C1EF1D666C65A9AABB9B0AC81E
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/api-www/global-elements/global-header/v1/assets/globalheader.css
Preview:	@charset "UTF-8";#globalheader{all:unset}#globalheader html{-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}#globalheader body{margin:0;padding:0}#globalheader ul,#globalheader ol,#globalheader li,#globalheader dl,#globalheader dt,#globalheader dd,#globalheader h1,#globalheader h2,#globalheader h3,#globalheader h4,#globalheader h5,#globalheader h6,#globalheader hgroup,#globalheader p,#globalheader blockquote,#globalheader figure,#globalheader form,#globalheader fieldset,#globalheader input,#globalheader legend,#globalheader pre,#globalheader abbr,#globalheader button{margin:0;padding:0}#globalheader pre,#globalheader code,#globalheader address,#globalheader caption,#globalheader th,#globalheader figcaption{font-size:1em;font-weight:400;font-style:normal}#globalheader fieldset,#globalheader iframe{border:0}#globalheader caption,#globalheader th{text-align:left}#globalheader table{border-collapse:collapse;border-spacing:0}#globalheader main,#globalheader summary,#globalheader det

Chrome Cache Entry: 259

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.11 (Macintosh), datetime=2024:09:04 22:08:57], progressive, precision 8, 600x385, components 3
Category:	downloaded
Size (bytes):	276665
Entropy (8bit):	7.54245280986215
Encrypted:	false
SSDEEP:	3072:JA1Cg0ZZaQnCvhgJl40dUwf3gHxPqOgFbMVMZFt6bU3pp0jLe121KwUs:cCZgQnyVrRPmBNZ6w0jWw7
MD5:	E7EB98CEF7E27808F88898AEFDE0735E
SHA1:	9A9DF686523FFA88CD6603D9BB5DB73F21C3F861
SHA-256:	5812CE975502296BA898F6D143A2C21B51A072CE31D0670BC803740D9955C550
SHA-512:	5C02C2476DA2813B3A4C03EF5CF5AFB6294A688DB6A74FADCBBA3C9D6B8D3D6C022736A08CC9A488472160EB70301C1A1CC6EA887DB006C16FB1A9087E0BDC6E
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/400780400331/1/tuLhKJmWKdw.276665/463e789d166b4e3890
Preview:	....#.Exif..MM..............................b...........j.(...........1....."...r.2...........i....................'.......'.Adobe Photoshop 25.11 (Macintosh).2024:09:04 22:08:57..........................X..........................................."............(.....................2.........."w.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................g...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..;,el/......X...Y+.6.K~...n...W[.V7..}l..t....ey.6=/.g...]/...]........{..a<S.......)T}G....s.8d (X./m..?i...=?^q.@tI.eo..kh.....E..m...l.~.......7X..?.

Chrome Cache Entry: 260

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1246x260, components 3
Category:	dropped
Size (bytes):	97628
Entropy (8bit):	7.832669342660093
Encrypted:	false
SSDEEP:	1536:wWwDHWi7zklwIPwEwRtQ8sRPavxidW48fk9wQKq6eT83XpkIZetZa4wMM:/E2iXpaO8dCvYYbowQKqxQ3XpLZCZa4Q
MD5:	FA44F18971E0750249CBCF34F66AE11A
SHA1:	0B4017CAD011B2EF346094E1C37ABB912FA9B7D7
SHA-256:	9D47030D555E1765171C05B57ED755744D6051364674EFBD99A98DF9EC7FA9CD
SHA-512:	48B1E112AD8975E2BD255000675C6C73356F2A0F5241D93278A6843C6FECA92BF4038D3396132180E8F9F09BDF220BB569275B61570B1BC7BC641ED4D52B9D4E
Malicious:	false
Reputation:	low
Preview:	......Exif..II*.................Ducky.......d.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmpMM:InstanceID="xmp.iid:41DF7D7881CA11E991809FEABB4E64F3" xmpMM:DocumentID="xmp.did:41DF7D7981CA11E991809FEABB4E64F3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:41DF7D7681CA11E991809FEABB4E64F3" stRef:documentID="xmp.did:41DF7D7781CA11E991809FEABB4E64F3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 261

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (1328)
Category:	downloaded
Size (bytes):	349993
Entropy (8bit):	5.357908617608227
Encrypted:	false
SSDEEP:	3072:IaurdhEIEvAr/1G93xWLF+cqt6UqZSebMIzb7CnBWQahL:Ifr/1G93xWJnH7EWQ8L
MD5:	E3898CF886FE061B936CBEA3F51E872D
SHA1:	31D6E7833F1FFC22993E1B8B1A3C56C9A19EA89A
SHA-256:	2C30DDD4EA9E0B822C9A01C8E83DAEEE51AE059665BD4507CD382017E8E8B1B3
SHA-512:	E18A69D9F735007B8B4B5042A02378B78972A71AF54543B44449B07BCA2A8E806945824749EE217B35DEC00B31BA759D69652AD0317210C29C17DA812D233780
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.739.25e60d65f7e9bdd75f12.js
Preview:	/! For license information please see chunk.739.25e60d65f7e9bdd75f12.js.LICENSE.txt /.(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[739],{2353:function(e,t,r){"use strict".r.r(t),r.d(t,{KNOWN_CAMPAIGN_AND_AFFILIATE_QUERY_PARAMS:function(){return n},KNOWN_MARKETING_QUERY_PARAMS:function(){return a},METRICS_REGISTER_ENDPOINT:function(){return o},MUSIC_AFFILIATIONS_ENDPOINT:function(){return u},PROCESS_REDIRECT_URL_ENDPOINT:function(){return i},TV_AFFILIATIONS_ENDPOINT:function(){return s},default:function(){return f},handleCampaignAndAffiliateUrls:function(){return c}}).var n=["affC","adId","advp","at","ct","itsct","itscg","itscc","itcCt","its_qt","ls","partnerId","pt","qtkid","uo"],a=["mttn3pid","mttnagencyid","mttncc","mttnmyad","mttnmyadg","mttnmycmp","mttnmykw","mttnmypla","mttnmypub","mttnmysite","mttnpid","mttnrefid","mttnsiteid","mttnsub1","mttnsub2","mttnsub3","mttnsubad","mttnsubadgp","mttnsubcmp","mttnsubkw","mttnsubpid","mttnsubplmnt"

Chrome Cache Entry: 262

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	13579
Entropy (8bit):	7.963684155389635
Encrypted:	false
SSDEEP:	384:YJIBYQNLDhKyY9tWkQqHAKSTSMk8IduPQDvrz:YJIKYlYnWk/VS5k8Su4Dv/
MD5:	EB46CED34F8CD5637A3CA911BD12F300
SHA1:	A26B44E6E634E4D670A38549033D3539A981E415
SHA-256:	DF53D5B90C9E669236F8593B7FC941A6DA753EE8EEC79A64C6955A4A67DCB45F
SHA-512:	8E015B01A7BC62637CAF4C7138D256105FC77B227E0108224917B55AE813D7B1B2381371E0EF0B76A27FA9A0D7D2B02A96B0981B7183E433D3FB07A029488C33
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............4.IDATx..]y..u...WU.=}...$.L..EB.H.DtQ.APP.....Z.$...UD...$.....j$..\."...p%...3..gz.............$...g....~.~..~..~@.JT....D%Q..4....1.{.%u.O....B.Z.J..FI).r#f............5.W...T.3.0.@G.Q........(=K.G.>.....(q.....]..M..D8.D5..h.(.. .?=.....8].`.z]..(........3.D.6l.4\6.eb...B.!...q=..>{..;J.;...z...k..+..=".....W.[W_.//.q .@ ......,u.X........P[{.D."./P....}..~....#..^..R.\|......`#6~.8k.Q\VV...b.....r.D.....^i...6oF.....w..^t..W.^...D._.d.m.A"..e.Qr..I..c.0.>..).j...@..>t.............?.^..""..@.R.....O.........<..Z...~@... .7+..dyQV=.....r.....J....j...=...J.<.m>.3p/....Y_..3g...../...".kC...$...0....G.5uT[.....p..._.s..X..}....S...S.KD..9.5r.=s.L.......'IH.I.Q.X/..=.. ...{.....UT_U..[[`.vF......x~...m,....s..)"........"9...;y..I.(..a.....qDvn..{..I....N.....}......T...1.3...\|..N..$....;o.....3g..S.<Z..UG..<..x.....i.....b.PJD..j.j......i...2!_M.=..xxH?...g.0.1.c.]c.8Io{.....I..

Chrome Cache Entry: 263

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1246x260, components 3
Category:	downloaded
Size (bytes):	97628
Entropy (8bit):	7.832669342660093
Encrypted:	false
SSDEEP:	1536:wWwDHWi7zklwIPwEwRtQ8sRPavxidW48fk9wQKq6eT83XpkIZetZa4wMM:/E2iXpaO8dCvYYbowQKqxQ3XpLZCZa4Q
MD5:	FA44F18971E0750249CBCF34F66AE11A
SHA1:	0B4017CAD011B2EF346094E1C37ABB912FA9B7D7
SHA-256:	9D47030D555E1765171C05B57ED755744D6051364674EFBD99A98DF9EC7FA9CD
SHA-512:	48B1E112AD8975E2BD255000675C6C73356F2A0F5241D93278A6843C6FECA92BF4038D3396132180E8F9F09BDF220BB569275B61570B1BC7BC641ED4D52B9D4E
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/SiteDesktop.jpg?2
Preview:	......Exif..II*.................Ducky.......d.....1http://ns.adobe.com/xap/1.0/.<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CC 2019 (Macintosh)" xmpMM:InstanceID="xmp.iid:41DF7D7881CA11E991809FEABB4E64F3" xmpMM:DocumentID="xmp.did:41DF7D7981CA11E991809FEABB4E64F3"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:41DF7D7681CA11E991809FEABB4E64F3" stRef:documentID="xmp.did:41DF7D7781CA11E991809FEABB4E64F3"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>....Adobe.d...........................................................................................................................

Chrome Cache Entry: 264

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22681)
Category:	downloaded
Size (bytes):	22682
Entropy (8bit):	5.562019061368948
Encrypted:	false
SSDEEP:	384:1nx7is2gm0cNqoi+Ho9Jzb1g06AcnsQGb5:ZngP09Jzq06ASsX1
MD5:	8E548B1AD991B0CD636A7E4939E3C420
SHA1:	FFACC63C9B5D77B0597F9C054CA349312626A5FE
SHA-256:	2CA27E9A8DAE569CDEAC42752ED1AED1AFEFF7F19282D3CC12C0AAA54A08BC04
SHA-512:	5EAE750BDF8C8D073A9930518D7A5406E2335946F124DA9AF0ACF1A9C35ED2171C5BF7511BDF647A7037FF3557D83EC6E2FE7DCFC9C30F18C13D34C051335158
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/pako-inflate.min.js
Preview:	!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).pako=e()}}(function(){return function r(o,s,f){function l(t,e){if(!s[t]){if(!o[t]){var i="function"==typeof require&&require;if(!e&&i)return i(t,!0);if(d)return d(t,!0);var n=new Error("Cannot find module '"+t+"'");throw n.code="MODULE_NOT_FOUND",n}var a=s[t]={exports:{}};o[t][0].call(a.exports,function(e){return l(o[t][1][e]\|\|e)},a,a.exports,r,o,s,f)}return s[t].exports}for(var d="function"==typeof require&&require,e=0;e<f.length;e++)l(f[e]);return l}({1:[function(e,t,i){"use strict";var n="undefined"!=typeof Uint8Array&&"undefined"!=typeof Uint16Array&&"undefined"!=typeof Int32Array;i.assign=function(e){for(var t,i,n=Array.prototype.slice.call(arguments,1);n.length;){var a=n.shift();if(a){if("object"!=typeof a)throw new TypeError(a

Chrome Cache Entry: 265

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (22681)
Category:	dropped
Size (bytes):	22682
Entropy (8bit):	5.562019061368948
Encrypted:	false
SSDEEP:	384:1nx7is2gm0cNqoi+Ho9Jzb1g06AcnsQGb5:ZngP09Jzq06ASsX1
MD5:	8E548B1AD991B0CD636A7E4939E3C420
SHA1:	FFACC63C9B5D77B0597F9C054CA349312626A5FE
SHA-256:	2CA27E9A8DAE569CDEAC42752ED1AED1AFEFF7F19282D3CC12C0AAA54A08BC04
SHA-512:	5EAE750BDF8C8D073A9930518D7A5406E2335946F124DA9AF0ACF1A9C35ED2171C5BF7511BDF647A7037FF3557D83EC6E2FE7DCFC9C30F18C13D34C051335158
Malicious:	false
Reputation:	low
Preview:	!function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this).pako=e()}}(function(){return function r(o,s,f){function l(t,e){if(!s[t]){if(!o[t]){var i="function"==typeof require&&require;if(!e&&i)return i(t,!0);if(d)return d(t,!0);var n=new Error("Cannot find module '"+t+"'");throw n.code="MODULE_NOT_FOUND",n}var a=s[t]={exports:{}};o[t][0].call(a.exports,function(e){return l(o[t][1][e]\|\|e)},a,a.exports,r,o,s,f)}return s[t].exports}for(var d="function"==typeof require&&require,e=0;e<f.length;e++)l(f[e]);return l}({1:[function(e,t,i){"use strict";var n="undefined"!=typeof Uint8Array&&"undefined"!=typeof Uint16Array&&"undefined"!=typeof Int32Array;i.assign=function(e){for(var t,i,n=Array.prototype.slice.call(arguments,1);n.length;){var a=n.shift();if(a){if("object"!=typeof a)throw new TypeError(a

Chrome Cache Entry: 266

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	1280
Entropy (8bit):	7.691497721916488
Encrypted:	false
SSDEEP:	24:uymLOuiM4oRG1ZjZwPbPZI03UjfAQ85CII1oIU0BKH4GkQ4e+bXlwDCl:uFOuiMpG1zwPb6bAqt1oIUs+0X3l
MD5:	D1B03F3C1409C3765D8F00F712F53A05
SHA1:	8FBC7FA67B59CF54F926A5196A1599326A6C2D91
SHA-256:	81B4249EC407585D3FB8BFE37EF017771C28F14AE8487A798AC05CD35EBC19E9
SHA-512:	4DED803D4983AB047B34646B3011B3FB1B4353274D6F6E388B2DC5EB48C3BB04E79A1FF5F6EB0F3963A6704143E22335BCE1B1953957BBD3D6C59485F046A7E6
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8 v............>.H.I#""..\.4.D........./.E...}....O......{...W...W...H.0....>.....?....L.........L.....W.u...........2..G.@I\"..3.8l....l....ou!..F..d....C@u.l...l!Fr..I .A.[...Tb.$.\|.S._..7.H.'MQ..rB..\|A...u.n.^.T.U.../;.,No......X.........JXh..@...3.P8P....9..7#..&......a....Sj.f.!..7wQ2....}B..)v..N..)..<...3.I..@.d..p{....lv.w..!a.....S...K'...K...3.END.l.hVW.).8..:e.K...!..r9.kS.G1T.h...dy..:H.>...l].P...$_.#yYM.(.A.h......j....u....X1p!../.s.M.J..Hdd.j](..E...0.j....{.z%..m..~".......9.c,.....X{.........,l....n.m..w.h#.@...rh...[.O.7.....n.:.&z......}.{..........H..jO.R..y.v....,Qw.!.P.@..f."....8..g%....../l......JUx=H3G.t#Qt.u]\..`K./H..3....n9.t..../.].~./Z......f=Y...aR..Q....X.S.S..A.6...2.iCS/"Q..*t.....]..gfex.uI..Y..d..O...C.5.....G....=/.].Pq...g.FQ..\|.K..{6t..:.........u.67..S..#.4X..W.V.l..'...\|D.!......QQ1y.i.#...4...V.wYX8.2.Uh$....+...2D.;@.s.\|.H`C.!.'q...T.m.u....LJ..]..Fj'.T....K..AA.X.

Chrome Cache Entry: 267

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	15086
Entropy (8bit):	4.980767694952946
Encrypted:	false
SSDEEP:	96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR
MD5:	5791D664309E275F4569D2F993C44782
SHA1:	A68F363153614A09F10AE2892C134B9C4B001D4B
SHA-256:	4FF54BC38C267DC3A8C95F6ED4590336BAAEC70433EF15D027DDCA608C391E78
SHA-512:	93502A68F14FD4F87E0AA2CAD92A5657A8587E6ACB1C108CCD8CEB5E52776E77DF867962C51E1290316BB78027DA636F38C065294871B4400FBBC4DEDF622EE1
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/favicon.ico
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................".."6."o."..".."..".."..".."..".."..".."o."6.#......................................................................................................................#..#(."s."..".."..".."..".."..".."..".."..".."..".."..".."s.#(.#..................................................................................................#..#-.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#-.#......................................................................................#..#}.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#}.#..............................................................................#:.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..

Chrome Cache Entry: 268

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 109628, version 1.0
Category:	downloaded
Size (bytes):	109628
Entropy (8bit):	7.997834372736158
Encrypted:	true
SSDEEP:	3072:I/PVzzcH7zULTR9S41qKYgEtXD/PhU/ffXEMY96gYGWPrInVe:+PlLd9N1qjxhYcZW84
MD5:	67A9B38ABD1F9F80D5ED943760F1C1E6
SHA1:	9C646D28E62FCF3C4A1ECF7043632FAE3DEA6270
SHA-256:	8D73261B2DB18AF30E93ACBC8E8591E0784706FC283C37C465F92012256757D2
SHA-512:	A479BB307B03F74202B24E95D85085E8855C48713E443F5EAE0CABD077D45282F8765BCD6D36733AC336504E1AE1B1C3CA3BB41A428F8A240EE7E7B91FAB39B8
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_semibold.woff2
Preview:	wOF2.......<......xd..................................H.`H...X...4....6.$..$..(.. ?meta.#..`. 8.t[.w...O.....m...ElU6......#..@dc..~.....1D'I@=h...3.m...................w'.H....^....P.P. .("...Y.K..4...i..R..Y.WH1..27..b..J.N.....C.C..'.h...{.f.8.2K9...[&...i/>b_8@..yX..q..=Qw=.......\Li.t..Q.....`Ov1.i.y............q..4#.(a.7...A8n.\|b...{o...Q.0}w.CL..ft...M.b...p...(.s....19...L....l...k.KJ6n...7....FZt....\|oc.n=l......5~!p.1...SOX.+.dn....Be.s..}.T..'.......4y2....,u..+U..]..~~.$..O...z....r.dEg.......<..yN%Q%8}...a.qu..]M...zcGwY...q.!#..,..4......n.X.W..B..s...i...B.`.DD"..b........c1....24w..\G.p....~.4.....M.^x.W.......[.CbS..b4.Q.c..N.."..._....t.-...F...q 'W.O..I......MjBX......?.nF......Ih.y..b.P.S..A..H..l.v}d.m..~...7.<.?..../...,$.).m&.."Tw....?.v..m..k>;v.Hf...c..."k......$;....Z...../{.........K.~."cXa..aQf.6[.U....>...d...P....j.diUI.'1...{.w6w.%.P..U....m.X..).%..K.......Z.Pr.2."...66`#kd.....U...E{.U}..^{..._..;..W).

Chrome Cache Entry: 269

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 110206
Category:	downloaded
Size (bytes):	10926
Entropy (8bit):	7.978728085656948
Encrypted:	false
SSDEEP:	192:XcJNlWhhfMnbMeB0p0mehV3hNeWulfLYCC2Ock2/C89U0hTCKoNvKdkTHR:XcJNc70npzvnmWgfL22Ob2/t9U0hPesm
MD5:	BF88A2E44AE44DE60408010047AA2534
SHA1:	644FBA3DBB11BFACCA45F72D098CD16EE3679F58
SHA-256:	3B2E89FEC8654E1F8D5B45B794F310F9F287E0E9B249B0E3279016E5D5873409
SHA-512:	CE8A43E9CF244FE819E0C2969E6B008C85F990D7B5CC96918A7B04FAE59CF96072C9B12DEF3FEC6DB644556F3DE0E0855FD034B8455F90F9E52395A4824C5AB9
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a
Preview:	...........}Y..H.._).3I.}...f...`...O.. .T%M...BC.}.3w'..FdD.#.P.A...........o_o~....o~.....Mw.....n.}...>>.....7?[...........!..................~.......7.._.y......./..x...7_.R.....o...lr.?Q._...T..7_..e.....G_.....n.....~OO...S\|....E-...n._.V.6...%W...7.k.....w...w.\..Z.....E....U.S..!;A.......l.~...Fw..\|.~W..Tr...^.5).95.).^.!..[.e..5]/.a..!J....aS..b.....M........S..c...0q..z...Ct.S...J.4._......n.s.....U...Q..9.V....-...'~.\.=U...W.vW...y..B.4....#>...w...O..}..M....7.}....[....(...oo....w..W.4U....x...X.t.....[~._..uk..29....i-.\]............./........'I..K....._....K}....;.....\|Bc...ou...T.M....W......o_>..fO.._i{..H...F,Y.5Q..N$!_...w1..#.....=......3.........eZm...=....N../wnq....._........\|..\|..3.J~..n.I.;..J^.e.sq...S..?p"..p.~~....o<...o1T..+.i.2.:jD=.A...?X..h....)t.h..D.....B0..P)...S..e.N.He.....C..t7....0?.m.........H7..y.k.;c...x.......Ek.&.h7-.T...S.~.K$.2z.......z."<.5B..Z..T.....z..@8.J.p.yUC......y...c.L@$/3

Chrome Cache Entry: 270

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 131568
Category:	dropped
Size (bytes):	12545
Entropy (8bit):	7.9793641338070485
Encrypted:	false
SSDEEP:	192:jLtIfnlwvz7lLADyZc8lcXDtUGy392BtB3u41k74kfRRoaZGGW5BO+r1RyaGBw3s:ft6nlwbDZeDtdyOZuAeRuaZGGkrJM4dy
MD5:	6FFE0373E13C95E1253EE372A3D7FEDB
SHA1:	BB6C4764E927A8ED8CBF14BABEA3E28FF1F07D4B
SHA-256:	1F0B318040B210A65B48D386D9680B29212DA0D01DEE9CC9F56D485334BDC11A
SHA-512:	0027C6A1E23A389699C385A2646ED2BFDCDEC4406CDE2C0E0155906296B44827D114B1F4B62FC08BD519B3F2973A23538C485C3ECC62675E537AE81C4E460B17
Malicious:	false
Reputation:	low
Preview:	...........}]...._1.U(.w.. 8."..\..d...;.O.....l.._.V..%.4.Q.G.w>fFj...b.X."....~.......\|s.WF....7.....p...z.(....\|..t7.......^..o..../~....W.^..^~...3....n..;7?.......}....B..7....\|.[^.q.O..~...W...;...._.[...O..[....s..?^......:.J.w.......#..S...._..H.5\|..\`..d....,......'>}.w<.....t[4.+.... ..f/..Ji.=.....^..u..{.m.0.._'...PW..^...i.0V........Q!.U.W..0]'.........B...~...O.\|...?..L..._..7.. ......kR....d......<.........].....I....Y.:..b....._{.;]^.Y..A;O...g@..<.vrlO...q..3n.&.1;q...3....L..K._=v...#..3..7C.{Ku.._&.;.. ..Tw.z.^.[.[X.P..8.<.8R.yKO....i.B\|..xF.G..+..zEv..u.....w....K./k.&.}.....pl........[.'7./.b@..k0".dD.......ibDx?.w.~.^c.L.M~.Xq.@.9...4fP......\e.R.w...=....@J..u..L....G...#.y.Q....s..cS.....Y'0./......\|..S#...pF...V.3R..RH.R.......9...O......9..'M...V.....o/?..Nn..7.~d;.....(f.\...Mo....W..E...X..V.c\..6.2).LG,..J9vY%+/......m..N+...OM.}..*.XV.......'."......3..of+....)....Cy..._).5.A...l.{<.-.l.),@9.

Chrome Cache Entry: 271

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11846
Entropy (8bit):	7.9788987039811206
Encrypted:	false
SSDEEP:	192:RC7BYWTKLuFWSamfKm4M/HMfJFXEebSccbCgtL4LrN8HOKQ4lhwzHBylSh06AzXf:RIB1qyWSamfKm44MfecICg2rNcO74kTy
MD5:	54E6A21BF33DCE1280CD96CCA52A9938
SHA1:	7FB13060775AC2DAE5E9C9A20446D1B9371F099E
SHA-256:	0E261B545D27D4B9446DE9B1B3170DBB0627C023924F816D3A43BC6EC8A6B7AA
SHA-512:	17FD437724F77D3F83DDBF267B8E17A4EBEDE5995ED2FA06B29969CB6A933D191183DBA6EFAA165B3DB7E71D5A9D142CD1CA92F9F9D013BA82E1232811BC1D3F
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/62/aa/c5/62aac51f-fa4e-3439-079e-3bb218039381/pr_source.png/230x0w.webp
Preview:	RIFF>...WEBPVP8X..............VP8 .-...........>.R.I$"..i.0....73.],..NQ...s.:7.O....~.........A...s.o....../...1...?..r...j...1.k.....7.......O....n>..9.S.......<O.w.}.r..^.....o......o.#.O...;../._q. ...>..........?....2_........}...........>....+....O...v..V.Ic..&de%.....L.Q:.g.+.5j.....m~..=.a2k..E.0........S.l..R..v.(U4.Ah.,..i`...#.. .......l...r?,..,.T@l.q.3/......9.....2...O...+........xNbx.F......e7S.....6.WL#.F.:P........<.Pvo.w.C.c.9....%1.m..7..-{........;.......`......7O,.$6.....,L.\..C3;....1...P.........l.SI....~.k+c.)...5.G/...!.H..@...z...R1.B.....c,.....W...H...l..r...c;.v.........o....W..k....$..V:....6.E6"Q@ U.Z.......~".[yQ....:1IXjNl\|6y..../...W.jb..G96..j ..n.r....nH.E?e...b.j.........;J...............j..Kz.j}......a....2K......_..g..S...^.V.p...i...!....66.P.../ .q.k;.C.......i`_...l /L.=.h.{.{2.\31T.:...2X6!h....Kg..+...h&...5.\|..>.XE..9&F.[.......O.6 ......6..4.....R.7.J.Gv+.Wip.45S......p.0.U.....W..l;j.C.r.X.5...

Chrome Cache Entry: 272

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	23116
Entropy (8bit):	4.416888886221028
Encrypted:	false
SSDEEP:	384:wWjhl+ZZx0roaRvQgeMr2VxtaA93S/JKhV3PXASow7/XP5oP5VP5uP5sP5H6NC7E:wQhl2cfvrSxtaCDPaw756TUGLfY
MD5:	E75F7F8AC71782DDA40464528A4F619B
SHA1:	1294A00A625B50FF7C3EB3119A71D49399C9AC29
SHA-256:	832FBEFD7A4FE8F651058597D9F1910883D1CBD56D0CEB343E7D6170AEECF982
SHA-512:	AF128E227ED56355357FA0D3D46C9701E3B10F076F3515D84907ACE6BBF282177A74EF577A0AC48E4E4CC1FE0DFE3D14368F7DB08797AACC767E8841032C4E31
Malicious:	false
Reputation:	low
URL:	https://telegram.org/img/t_logo_sprite.svg
Preview:	<svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGradient><linearGradient id="b" gradientUnits="userSpaceOnUse" x1="1080" x2="1080" xlink:href="#a" y1="31.7861" y2="112.214"/><linearGradient id="c" gradientUnits="userSpaceOnUse" x1="1224" x2="1224" xlink:href="#a" y1="24.856" y2="119.144"/><linearGradient id="d" gradientUnits="userSpaceOnUse" x1="1368" x2="1368" xlink:href="#a" y1="19.1113" y2="124.889"/><linearGradient id="e" gradientUnits="userSpaceOnUse" x1="1512" x2="1512" xlink:href="#a" y1="14.4526" y2="129.547"/><linearGradient id="f" gradientUnits="userSpaceOnUse" x1="1656" x2="1656" xlink:href="#a" y1="10.7817" y2="133.218"/><linearGradient id="g" gradientUnits="userSpaceOnUse" x1="1800" x2="1800" xlink:href="#a" y1="8" y2="136"/><linearGradient id="h" gradientUnits="userSpace

Chrome Cache Entry: 273

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 110206
Category:	dropped
Size (bytes):	10926
Entropy (8bit):	7.978728085656948
Encrypted:	false
SSDEEP:	192:XcJNlWhhfMnbMeB0p0mehV3hNeWulfLYCC2Ock2/C89U0hTCKoNvKdkTHR:XcJNc70npzvnmWgfL22Ob2/t9U0hPesm
MD5:	BF88A2E44AE44DE60408010047AA2534
SHA1:	644FBA3DBB11BFACCA45F72D098CD16EE3679F58
SHA-256:	3B2E89FEC8654E1F8D5B45B794F310F9F287E0E9B249B0E3279016E5D5873409
SHA-512:	CE8A43E9CF244FE819E0C2969E6B008C85F990D7B5CC96918A7B04FAE59CF96072C9B12DEF3FEC6DB644556F3DE0E0855FD034B8455F90F9E52395A4824C5AB9
Malicious:	false
Reputation:	low
Preview:	...........}Y..H.._).3I.}...f...`...O.. .T%M...BC.}.3w'..FdD.#.P.A...........o_o~....o~.....Mw.....n.}...>>.....7?[...........!..................~.......7.._.y......./..x...7_.R.....o...lr.?Q._...T..7_..e.....G_.....n.....~OO...S\|....E-...n._.V.6...%W...7.k.....w...w.\..Z.....E....U.S..!;A.......l.~...Fw..\|.~W..Tr...^.5).95.).^.!..[.e..5]/.a..!J....aS..b.....M........S..c...0q..z...Ct.S...J.4._......n.s.....U...Q..9.V....-...'~.\.=U...W.vW...y..B.4....#>...w...O..}..M....7.}....[....(...oo....w..W.4U....x...X.t.....[~._..uk..29....i-.\]............./........'I..K....._....K}....;.....\|Bc...ou...T.M....W......o_>..fO.._i{..H...F,Y.5Q..N$!_...w1..#.....=......3.........eZm...=....N../wnq....._........\|..\|..3.J~..n.I.;..J^.e.sq...S..?p"..p.~~....o<...o1T..+.i.2.:jD=.A...?X..h....)t.h..D.....B0..P)...S..e.N.He.....C..t7....0?.m.........H7..y.k.;c...x.......Ek.&.h7-.T...S.~.K$.2z.......z."<.5B..Z..T.....z..@8.J.p.yUC......y...c.L@$/3

Chrome Cache Entry: 274

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 246409
Category:	downloaded
Size (bytes):	21801
Entropy (8bit):	7.986820094004987
Encrypted:	false
SSDEEP:	384:+cw4aeILQZCjjOsGrggZg/3nccbQ+u19W9S0rJUrqbza3KUvKiIpe16S5:+cwRpLQZC/OsZz/32+N9S2uaO3KwIpi5
MD5:	EDE943D9BF34428EF8FB13948912141D
SHA1:	F06BD9FE51BF32FBEFA0ACEFBDDAA464F6A64F13
SHA-256:	1782968F6F9EB42BC5689B3A2956CE8C45672E126427B870EB5E2FFC415CBC0D
SHA-512:	97EA17771436E6B2E0DD0F0E91165AF119CFFB1286EFD9093648F8D5B741E0FC5627A0A98F390D89737999121DB93F15613E7D67D9F88826EA462748DACDFF2E
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794
Preview:	...........k.#.6.W..\,dF..u...............[:.....>.B.....EV.E6.L..{.U.........>..._......<\|...0.......fx.....'.c3...._.K.....??.Ko........Oo.......{y../.........~.+...........?..........o._.:.w..........~.w?...._{../?...!......N...........k..O...K....?~f.1...U<.i{.9'W1.2..u..v.%......{..et%.v..."........>\..R?.....d..C.}M.._Y~._.........@..=..2G....RF.o.......I.koc..H..Lco]I...u.....-.U.{......M~L>..3.i...C8...C....~z...@<..g......B)7~..a...;E...[3Z^..?U..[...A~......X.?3..S....n...?c.h..2.Oi...{.F ...Yr.........W....l.......b....]6..?..r..[.&......>.?.)..h....$.y..)..cJ2+~..7.4:.'x+.....2).?.........OC.nt....}.......k..vM...X.X...nM...i..[...3B-.#Y7..X3%..\|.-.eX.%!...g.~....T.z..>uc.........uq.`ad.$.S.)r\|.,L..1..^..'...6....w..h...J.#.....w.._X.o..eNz........:._.~..+.D...b.{......e... ...$p...dM.'e.g..d....&..E..}3...#5...J.+....>...W..=Z^y..{4}K....9../.8x.w.............~.S/..?...O2.:...\...*....<.M...ff..E.<.N.....G...&>yL..

Chrome Cache Entry: 275

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	3248
Entropy (8bit):	7.908362407256193
Encrypted:	false
SSDEEP:	96:2AWyDy7HFn82WbxTk5qmMByeB0gS9cyIUc:Fy7Ht82WbKLGBhS9cz
MD5:	06DF856EF7C998E1D0E6FED8DF104E7F
SHA1:	0875308EEB17A13560722A44A366D77D6D0CB4B2
SHA-256:	25644DC73E68AF820F7B035AD61BCE446CC1BF615498F36EC356CFE5FB8F39E0
SHA-512:	CDDD23C5BD94AB3CAFF0B2CCB02978A93AC43EAF0B5DF386100FB2EC18FA353FC8C34F0D9054224DD67A46A8A293F94EE22C7DD509360E7847255C0E0FBCF396
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/9f/b1/e7/9fb1e7b9-6eb4-64eb-7064-57e6c4d80ce9/AppIconLLC-0-0-1x_U007emarketing-0-7-0-0-85-220.png/146x0w.webp
Preview:	RIFF....WEBPVP8X..............VP8 &....4.......>.T.G$......L.D." .8._a.v.>sW6.A.O..R....{...~..............o.?....k...]^.....zZ.......m..y....hF.x=.....{...\|.cN`..R...W..x..&...$...P&.^A..W..G.!B......\.....aQ?'.............k.........$. .#....$...b.d.?.!.K.=..A...G.e...ec..........Q.l....e:!.C.lp.asn.aeQl.8.....@.+.y.......b.D....CI..]..%I;.....+.,..$..l...2..D.I..?..a.M.......u.0.P.(.1k...>.v2V...A=....p..4I-...zS.,.X.I.l.[..XI..Z..1]..n{u .d.rc].......Z.z..e.......F...~Uh.~..+....C..2.,MP.!.x6.9.b9o...RX.:....2_..\|.....Ss(...(.....Q85.A...`..8..en.Rh1......&...<..7m..]M..M..Y.n+[...%r.F'.o.gF.q..@........l1..-..(..us....M.E.'@.....s.+..$.....l@..]......./0..[0P.p1....d..Q.Vg.3..,n4..L...;S..I...\B.....5.h?..d...".x.P...`.-.?..n.=..:.W...E..._N.....!.x....e...Sj.P[7n..~0...[.S..Ly[o..^Us..CD..6....E.u........C..#.!qs.C...wZ....A.......w...........OX^...\|y..v..U..L3L...k...c.P^O.....s.<}s.x...... .....J....4.V...`.....G4Hsuc...L.'K..U%4-.

Chrome Cache Entry: 276

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, aspect ratio, density 72x72, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=1], baseline, precision 8, 290x270, components 3
Category:	dropped
Size (bytes):	21090
Entropy (8bit):	7.878614475283644
Encrypted:	false
SSDEEP:	384:3j0OJMdamjE0cVsRQK80uxr+IsTJo7qvrgAK56GEUUW5tXnwu:34fHEGupslo7q8AK56U5tXwu
MD5:	F5EB8DCF9B18F19053034101E920574E
SHA1:	9513C6C5E39669AD27132D470008955DBAAE61F0
SHA-256:	15A94720D72ED1727FB281ED4AF914E17CD8166BB18F5A8484F32F9FAFF4F365
SHA-512:	950178CC71BD88274F49E6248A078F4F0FAA95E7188C2E69E2EDC62D874CABF5EDDA83DECE9FEE9C657B05CF52760E513F5161B34BF5FE8232923E008DCA34C3
Malicious:	false
Reputation:	low
Preview:	......JFIF.....H.H.....@Exif..MM........i..........................."...................8Photoshop 3.0.8BIM........8BIM.%..................B~........".."............................................................}........!1A..Qa."q.2....#B...R..$3br........%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz..............................................................................................................................w.......!1..AQ.aq."2...B.....#3R..br...$4.%.....&'()56789:CDEFGHIJSTUVWXYZcdefghijstuvwxyz...........................................................................C....................................................................C...................................................................................?.....(...(...(....O....e...[..0.x.Z..i).......rT.........N.....).\.._Q...u...K._..TnC[.(24~.#.{.Z.....?...Nl....7Z5..o..l..k=2.<.{,.Q....J..h....Z<q.[.UT.&.P0@P.0...n........D.='....k.%.G..}u.........o.[..-....7..._..x.F.e.h..7....fVQ..gl{.x

Chrome Cache Entry: 277

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1189
Entropy (8bit):	4.4877009445301965
Encrypted:	false
SSDEEP:	24:t4pt6kwjNllHfeyQTGWug+7V1AUczWf66yad1VDheBK8bwoN5L+:o0k+8TOg2Pf6y1ZhkrwoNV+
MD5:	61226AFCAE6A8F2B3D2755728DAAF4F2
SHA1:	8489CAF428F9F579A8B31AEAD973F6C361711414
SHA-256:	47EAAEA809BFE2FD94F78F3C94372B6328F37748BC0EEDFD1B2AB937027962CB
SHA-512:	C1F23A9E1555C1BDB558781327EE018F2825C2C2238945866351DA248CD39FF9102D729078A47040BB00516CFADFD2B5EF2C88B661A76563A65553B7C7421FC4
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" viewBox="0 0 230.5 230.5" version="1.1"><path fill="none" stroke="#000" stroke-linejoin="round" stroke-miterlimit="1.41" stroke-opacity=".1" stroke-width="1" d="M158.22 230H72.28l-8.22-.01a320 320 0 0 1-6.93-.11c-5.05-.06-10.09-.5-15.07-1.32a50.83 50.83 0 0 1-14.33-4.73 48.2 48.2 0 0 1-21.07-21.06 50.85 50.85 0 0 1-4.72-14.34 100.68 100.68 0 0 1-1.33-15.07c-.06-2.31-.1-4.62-.1-6.93-.02-2.74-.02-5.48-.02-8.22V72.29c0-2.75 0-5.48.02-8.23a320 320 0 0 1 .1-6.93c.06-5.05.5-10.08 1.33-15.06a50.74 50.74 0 0 1 4.72-14.34A48.2 48.2 0 0 1 27.74 6.66a51.02 51.02 0 0 1 14.33-4.73C47.05 1.12 52.09.67 57.14.61a320 320 0 0 1 6.93-.1L72.3.5h85.92l8.23.01a320 320 0 0 1 6.92.1c5.06.07 10.1.5 15.08 1.33 4.98.85 9.81 2.45 14.33 4.72a48.19 48.19 0 0 1 21.07 21.07 50.9 50.9 0 0 1 4.72 14.34c.82 4.98 1.27 10.02 1.33 15.07a320 320 0 0 1 .1 6.92l.01 3.48v94.09l-.01 4.8c-.01 2.3-.05 4.62-.1 6.93-.07 5.05-.5 10.08-1.33 15.07a50.68 50.68 0 0 1-4.7

Chrome Cache Entry: 278

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (12513)
Category:	dropped
Size (bytes):	13517
Entropy (8bit):	5.314863543101727
Encrypted:	false
SSDEEP:	384:8nlFipHnQ5/BRZJ/bzwT62waHKsR5ssRaREW+ou:8lF2HQ5JRjbQw9sRasROEWY
MD5:	24F387A60FE0B05A15426D721C397D47
SHA1:	012EB578C3C097193F20F123732AC646D2800096
SHA-256:	6AD8C8A703856136FEA1D1911FE8C0E09BCE87EDE20F4C8B98AB8F8961462738
SHA-512:	787E1A2BCCBCD973135E53B53FA5BC89E59AC277D95F30B0595B225667B1F0DEB6616914915200ABB6E522DDEA144E2EEF140876CA502D1317E13E86E63DA9A1
Malicious:	false
Reputation:	low
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const e="musickit-components";let t,n,l,s=!1,o=!1,i=!1,r=!1,c=null,f=!1;const a="undefined"!=typeof window?window:{},u=a.document\|\|{head:{}},d={t:0,l:"",jmp:e=>e(),raf:e=>requestAnimationFrame(e),ael:(e,t,n,l)=>e.addEventListener(t,n,l),rel:(e,t,n,l)=>e.removeEventListener(t,n,l),ce:(e,t)=>new CustomEvent(e,t)},p=e=>Promise.resolve(e),$=(()=>{try{return new CSSStyleSheet,"function"==typeof(new CSSStyleSheet).replaceSync}catch(e){}return!1})(),m=(e,t,n)

Chrome Cache Entry: 279

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	443
Entropy (8bit):	4.445437815127597
Encrypted:	false
SSDEEP:	6:twoMTqNzdI9mc4slma6UnaLUsvL9F7JLRMcBvxLU2dTkT30lI9P54AJex0JbrKDm:t9XMIX2A3vLv7JLBBJV/sPpJeWJafS/
MD5:	008103375773357B988BF6B4E7DFF3F3
SHA1:	908CA865AC3A7F6B57DC7D5DB70A429CFF959E98
SHA-256:	A5C59C1B52F5DD4D1C06A628F27079F4481D0EE7B40BCCD1CD91FF963E2D674F
SHA-512:	38838694555700DB092B3ACD3EA9DB83EDF59DF7867BC952FB29218B840629ECD7882DA1F67BBE59A61BC0635223D75F2B3C72EBC7C870EBEB1EED57F9CECC1B
Malicious:	false
Reputation:	low
Preview:	<svg height="27" viewBox="0 0 21 27" width="21" xmlns="http://www.w3.org/2000/svg"><path d="m17.49 25.5c-1.35 1.31-2.84 1.1-4.26.49-1.51-.63-2.89-.67-4.49 0-1.98.85-3.04.6-4.23-.49-6.76-6.93-5.76-17.48 1.91-17.88 1.87.1 3.17 1.03 4.27 1.11 1.63-.33 3.19-1.28 4.93-1.16 2.1.17 3.66 1 4.71 2.48-4.31 2.58-3.29 8.24.67 9.83-.79 2.08-1.81 4.12-3.51 5.64zm-7.16-18.82c-.23-3.51 2.6-6.4 5.85-6.68.44 4.05-3.66 7.08-5.85 6.68z" fill="#1086d7"/></svg>

Chrome Cache Entry: 280

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	24604
Entropy (8bit):	4.7347320559530335
Encrypted:	false
SSDEEP:	192:HahNCO9aaOWUbiYyai2kWYipNtUxSi0EBh718jpwyYqaiEjKsnGLUtGrNixayyai:ni1ZGArKPINofFnuefd
MD5:	1400A5F5BB460526B907B489C84AC96A
SHA1:	1CDB62D2B39EFF966E96A476F72704BC86591036
SHA-256:	42D42F23D7276824168808093BE0F20E3E53673718C79349CC22DA88F58D3E23
SHA-512:	DBB06FC723613A892AC5466D4592839B93CD9504B68E7FAFA17827D46404CD7A662D5DF04FAAC08C30C3052958335458301FE9C5B26B1CADDD8DA914DB11CEC3
Malicious:	false
Reputation:	low
Preview:	var RLottie = (function () {. var rlottie = {}, apiInitStarted = false, apiInited = false, initCallbacks = [];. var deviceRatio = window.devicePixelRatio \|\| 1;.. var startTime = +(new Date());. function dT() {. return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';. }.. rlottie.Api = {};. rlottie.players = Object.create(null);;. rlottie.WORKERS_LIMIT = 4;.. var reqId = 0;. var mainLoopAf = false;. var mainLoopTo = false;. var mainLoopInited = false;. var checkViewportDate = false;. var lastRenderDate = false;.. var userAgent = window.navigator.userAgent;. var isSafari = !!window.safari \|\|. !!(userAgent && (/\b(iPad\|iPhone\|iPod)\b/.test(userAgent) \|\| (!!userAgent.match('Safari') && !userAgent.match('Chrome'))));. var isRAF = isSafari;. rlottie.isSafari = isSafari;.. function wasmIsSupported() {. try {. if (typeof WebAssembly === 'object' &&. typeof WebAssembly.instantiate === 'function') {. const module = new WebAssembly.

Chrome Cache Entry: 281

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	2778
Entropy (8bit):	7.894815435260341
Encrypted:	false
SSDEEP:	48:kqnNdKT0PL+NAVNh09ANPoDcXhC/dMf7Pcoc83W8Y+:kqNdTPL+NAfe9j+hcMzP9XU+
MD5:	EA7AC086B1218F3573A177B979679167
SHA1:	AAF6A137C9B7DBA87B8FA6E5539C6E26C1FBEF26
SHA-256:	6B2405CAA578B096B71F8B7BB31C698BD2CEB2E0BB23F3652C5506135F93F46C
SHA-512:	7A0DB033ADEBB404F4B65CD3BF6A17595E8F227E17C643DCDFFC23D4C355F7427ED01BE9CA1614043BB2A9429E2E603FDA05F5BD85EE090D85D956D4D30ECDD4
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple211/v4/eb/4e/3e/eb4e3e2a-492e-36a8-3919-033f3cdec15d/AppIconLLC-0-0-1x_U007emarketing-0-7-0-0-85-220.png/230x0w.webp
Preview:	RIFF....WEBPVP8X..............VP8 P...p9.......>.F.H#"!.i.l4.D....6N........~t....q...+......3.3.....G...Z......z..y.:...f.....7._d{I..g.ar..s"..]......mC....H....`.q.....C4t..........}..S;......C..?...K..j....T.;....x......cz2.....mbv...O..))X....ce............H]..-.3..Q.#........_W>..zP..~......k2s8M."..@..v...6{#......U...>..)bv12i..O.'!.. ........`4. ._.(.so #.D.k.M2.m"t...=.z......as..uU........Q.l..j....k.h..\L.X......bP<6.}/."D...pB...$UG........#....(.@Jj.JBG......C.e... ...q.....Vd.A~.u'.O.\.e..b..~...e.r.c...N.P........n{Vj.n..A.Lm.7..%.H.?"~....b.(=..a.4&.H.......I..IF.q.P.....P..._.....i...H....D..h..4{.f...x..X,z..OYV/%g...\|.zn=..h.....F~.V..T*G=,.>.p.2.G...P..g..Z.s....ET.......6_.Z.h..;...$(..L....E.....[l.q{....K..>...3..n.o.-v.......tr.%.FM~zH/..ac^.-.^!'.%e&.K.....R,.Sx........m.`..R..K.[.<....}..&6.cH@...$.wX.......s.D.R..I`.\|.oPr...]..X.l:LM..'.[.....lG..]...P..u....=..d.GsP.6.u. .t....@m.<_X:...DSI.C....m....+.t..

Chrome Cache Entry: 282

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	12690
Entropy (8bit):	7.965297749406023
Encrypted:	false
SSDEEP:	192:qU6SieKSVdeYciqBy/VHaqqtsNEQ8bwRP46NLvDMm5GebYlttyr:qz9e7e3iq+HlHs0qaRkJAr
MD5:	9C2A194EE50807AE9342B60634BE2445
SHA1:	553DFD2BA2A5E11468A3B57ABA897995F2F4D676
SHA-256:	EC1788BCDD05595BBCD16E5C7C13BCE6481B620EBBC4200B2E6598C02C82AA78
SHA-512:	27018DB71B0A93E3E68E42E0F9DC8528F7C807571C5ED1C1330BB5FAC68A1685869BF04043167F885EA413AE6B0ED029CDEDCE64B1354C0DF367603ED0BAA67A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............1GIDATx..}yxde............44I.........0:0.. :...#8.\|...-. ..(2.3...:.\|.@...f.Ng.S.]....J-.:.T.n.<O=.T......g....T.Y$.0....m..r..../X. .....T..)-.dHD.!..T..\|.....M.JR.#...h..4.V..,....AU.U...f.@.B......\.Y....p8......q...S=.Y...MJgc...7T......X..%..I..).!.:. .G..n..VT.DJKTQ...U..0..2@}.\....@.%.$..b....D...G./.f..G.....F.....`=.Q:..,..J.G.-,h.y..0. .2...$6.A"<.....}e.v....f.:.......t."....z7.U..uU..<../.. ]..{...u....5...-[.X..$8.WVy.......QhB.3!..d.. ..j.%.U..@B.Q.y..U5..o....m..$..9.........p".}GI.../S.'..~...B..E.........4)CM]...Sh....=....} .......sy>7l..h....<...tI..c-.m5.\.........!\c...P.1i.Mx,......z@...@t.......k._.......E"...:MMM...2\|.o).r..?9......i.......TbL..Q. \|... ..g.z..p..(.`d0S....XnC.E....A..Dd..a.]..\..m.....W.......yr..7..[.r......t..U...&.....9.*./{....[W...8...U...@...........+...E.......R.{...;..U.a..e.\|g..(......^.fQ.....r,.^h..MP.1.'V)$..i..L.<..D...>.......q..."

Chrome Cache Entry: 283

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (54502), with no line terminators
Category:	downloaded
Size (bytes):	54685
Entropy (8bit):	4.949096357757183
Encrypted:	false
SSDEEP:	1536:OS7p4X4HeZvR3b8uuXTxXhfdjiXcOEvezvee/5NVwA1NAGBAf5TTCE6/iSphWhOb:OS7p4X4HeZvR3b8uuXTxXhfdjiXcOEvM
MD5:	89780A9D2EEDFF61551113850A3547EF
SHA1:	6365051BAD2052F07E30706797A161704731F33B
SHA-256:	590B2F2F1C0CAFB359841C32F78516FD3352C9DE82B0E2F1A0132BE6DCF035E6
SHA-512:	10B39022616F57E3FD8371FCC0D2ACE5F55552FD6938719BAE712E48710564A4D7025BA9AEF362F5366D4D2CCF069C1CF45B06F34A2FFA4D9F996D94C8230FA1
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/global-elements/2426.0.0/en_US/ac-global-footer.89780a9d2eedff61551113850a3547ef.css
Preview:	@font-face{font-family:"Apple Legacy Chevron";font-style:normal;font-weight:100;src:local("\f8ff"),url("../assets/ac-footer/legacy/appleicons_ultralight.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_ultralight.ttf") format("truetype")}@font-face{font-family:"Apple Icons 100";src:url("../assets/ac-footer/legacy/appleicons_ultralight.eot")}@font-face{font-family:"Apple Legacy Chevron";font-style:normal;font-weight:200;src:local("\f8ff"),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 200";src:url("../assets/ac-footer/legacy/appleicons_thin.eot")}@font-face{font-family:"Apple Legacy Chevron";font-style:normal;font-weight:300;src:local("\f8ff"),url("../assets/ac-footer/legacy/appleicons_thin.woff") format("woff"),url("../assets/ac-footer/legacy/appleicons_thin.ttf") format("truetype")}@font-face{font-family:"Apple Icons 300";src:url("../asset

Chrome Cache Entry: 284

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 11224
Category:	downloaded
Size (bytes):	4488
Entropy (8bit):	7.948204628146541
Encrypted:	false
SSDEEP:	96:AaY1LVyN2DgHxCGXJLpO2yUzQl781OI3rWFdVhNqy0C3:AaMpc28IGXDIJ81Lr8dLNqy0+
MD5:	CFFB4482E95350D375E47BC65B1E0DBA
SHA1:	A1C216EB594BF655508DC0E8D96542031DDBE02D
SHA-256:	6A5C8D2680A0B2CA5030E327545935546FA845B2061577A75ECB82C78D6FA267
SHA-512:	76949AE04DC4790DC143F7C583AA8CF77699AC03B6B9EA1112BD3A1B8D80405B912D333C56A8A7D9A3EFF613229DF56BC543CEFDAF95DBE665F2C6D11F2E70BD
Malicious:	false
Reputation:	low
URL:	http://distrosourcess5.sg-host.com/
Preview:	...........Zks.6......D...."A.$]+..v...n.4q.3.J.$..........)S~.mwv..v....}.{.\p..........V......./..aY.;.4..(,N:..q..Y\..]..."Y.;.<..2..y.a./,...Q....aQ.U...K......P3.YT..X.Ti..0N.I....<.."_...4..{zB.R...~g...Z..&Q5.G.2....%YR%aj..0...i..GE2..U...d.=M.(?5.a.....E.>y.;....7...4.yY...2.....7.H.I2>.~...v.smm...A8...y.... M....j.nX.[_.a5...w..{...On..~\|;{g..N.:.m>. o.[....Um33/&..?\|.6....o~.....fk\|9/......\|....2.Nq>.rv...K."..l.._.I..%.L{q.D2..-..t.(.M.1."..I...o..y..`..../......^.......c.F..a...../.....N..B.\|.......xw~.....O.....\|.\|......w..A.1z.g^V..<....0.X\..?{=Z.....s...._9.3.x..".;N2../......txq...w.......A\|.~.../.;..../.....\|.......log.X...3~.}.....s~..i.<.t....[^....I...s:..4:K...0..l....E.N....W....yY.{'o.v&...o/.w............w...4z.E.......^..mqv...>O.......I..(bZ~j..%Q...Yk.......c...$.E.(.=.G...f.{\.=.i.=...."#..#.:M...2B.:....8L.G.V[..G...a..[I^nQN-....I.Z,})D.[.M o-.%4.e.8......E..XM....}..dKh...oD;d....h.O...[..0.hw.N...pt....

Chrome Cache Entry: 285

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	21478
Entropy (8bit):	4.9401794405194135
Encrypted:	false
SSDEEP:	384:FCxaBo7s5dibe4UbBHasovLi1xPSoGBejIfD5FQhPOwIc:FCxko7UALi1xdGFTcIc
MD5:	4C9BA6B680FC51B6E5BD4217A1550C88
SHA1:	3FA0E7D643CC1E3008E0FFEBA46A1E3682E2EAF7
SHA-256:	51C4D88FD78F3B8EFB16F845E75BE7F1BB288FDF2FD39D033868A0346DB7FADB
SHA-512:	42706B3E53134B3EA0FCE3A5775D8929634EAB202856794D6E5E71FFA44B83487AA992D3D933FBE2BD5B2CF084F20206EE13BA904A713114E566DA6474A8C3D1
Malicious:	false
Reputation:	low
Preview:	var startTime = +(new Date());.function dT() {. return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';.}..var jsonpCallbacks = [];.function twitterCustomShareInit () {. var btns = document.querySelectorAll. ? document.querySelectorAll('.tl_twitter_share_btn'). : [document.getElementById('tl_twitter_share_btn')];.. if (!btns.length) {. return;. }. var head = document.getElementsByTagName('head')[0], i, script;. for (i = 0; i < btns.length; i++) {. (function (btn) {. var status = btn.getAttribute('data-text'),. url = btn.getAttribute('data-url') \|\| location.toString() \|\| 'https://telegram.org/',. via = btn.getAttribute('data-via'),. urlEncoded = encodeURIComponent(url),. popupUrl = 'https://twitter.com/intent/tweet?text=' + encodeURIComponent(status) + '&url=' + urlEncoded + '&via=' + encodeURIComponent(via);.. btn.setAttribute('href', popupUrl);. btn.href = popupUrl;.. btn.addEventListe

Chrome Cache Entry: 286

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	13579
Entropy (8bit):	7.963684155389635
Encrypted:	false
SSDEEP:	384:YJIBYQNLDhKyY9tWkQqHAKSTSMk8IduPQDvrz:YJIKYlYnWk/VS5k8Su4Dv/
MD5:	EB46CED34F8CD5637A3CA911BD12F300
SHA1:	A26B44E6E634E4D670A38549033D3539A981E415
SHA-256:	DF53D5B90C9E669236F8593B7FC941A6DA753EE8EEC79A64C6955A4A67DCB45F
SHA-512:	8E015B01A7BC62637CAF4C7138D256105FC77B227E0108224917B55AE813D7B1B2381371E0EF0B76A27FA9A0D7D2B02A96B0981B7183E433D3FB07A029488C33
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109
Preview:	.PNG........IHDR...............g-....bKGD............4.IDATx..]y..u...WU.=}...$.L..EB.H.DtQ.APP.....Z.$...UD...$.....j$..\."...p%...3..gz.............$...g....~.~..~..~@.JT....D%Q..4....1.{.%u.O....B.Z.J..FI).r#f............5.W...T.3.0.@G.Q........(=K.G.>.....(q.....]..M..D8.D5..h.(.. .?=.....8].`.z]..(........3.D.6l.4\6.eb...B.!...q=..>{..;J.;...z...k..+..=".....W.[W_.//.q .@ ......,u.X........P[{.D."./P....}..~....#..^..R.\|......`#6~.8k.Q\VV...b.....r.D.....^i...6oF.....w..^t..W.^...D._.d.m.A"..e.Qr..I..c.0.>..).j...@..>t.............?.^..""..@.R.....O.........<..Z...~@... .7+..dyQV=.....r.....J....j...=...J.<.m>.3p/....Y_..3g...../...".kC...$...0....G.5uT[.....p..._.s..X..}....S...S.KD..9.5r.=s.L.......'IH.I.Q.X/..=.. ...{.....UT_U..[[`.vF......x~...m,....s..)"........"9...;y..I.(..a.....qDvn..{..I....N.....}......T...1.3...\|..N..$....;o.....3g..S.<Z..UG..<..x.....i.....b.PJD..j.j......i...2!_M.=..xxH?...g.0.1.c.]c.8Io{.....I..

Chrome Cache Entry: 287

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 840 x 487, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	189734
Entropy (8bit):	7.995418777360924
Encrypted:	true
SSDEEP:	3072:qKCCO9mMyY1K6SCUQB4AxtinSEItHFDukVnxJQTu6r6R7NApp4rFDwGIQ:nzOkMy97CRR3Ljn5n2uYgGkKQ
MD5:	40D4266E5AADC87CCEEC1AB420DC2692
SHA1:	266C56990A106B6E9EFB0F9EF2A1A752AA6FA0FC
SHA-256:	3A1D4890B3E91A01C20C65B75F1AE028E3C445CAD1FD2D249DD0868876DFE4B4
SHA-512:	7DE32DEFDD87034F29930A7A32915100C2A109A80C79EED4C0A5F3127D1101FE0BF59B41CB4C5807F6FEA29A7721EBE74C55A8A4942C4EF67EDC40B860F46277
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...H..........2}.....tEXtSoftware.Adobe ImageReadyq.e<....IDATx....%gu...p.9..{.hF......H..D2\..?0.m.`..y...6.e..}..#...X.....X...H..@.......S....V.L+.hF...R.P......$......x-M/..r.NK..ko)..(..(O...)....v......x.v.S....).H..t-M/....Q.EQ.EQ...h..M.HB.....F.S.J..L..4.H.UQ.EQ.E9.../h......M... =I...\|).I..(..(..t.i..\|.7.....Nq..T...7.EQ.EQ....hz9...v....C.]A...)...(..(...!\|......O..yb.h.....#EQ.EQ....+)_....Q.....+..+s..EQ.EQ...$....}.{wiW<~........EQ.EQ.#....h7.@:\.W.@Q.EQ.E9.y..W^y.v...C..d....'.EQ.EQ.....]...P.2.3EQ.EQ..(......5...P.EQ.EQ..V^y.'k7.@:...].(..(......I1...P.EQ.EQ.~U...j....(..(.QDY.@...(..(..(..$EQ.EQ.EQ..H..(..(..(O..v..I.D;AQ.EQ.EQ....IQ.EQ.EQ.E...(..(..(..$EQ.EQ.EQ..H..(..(..(.B.4.!.J%.[.N;BQ.EQ...e...h6.....f...i..5o.....^.q.C.G1:A.R.F.Q...(..(.R.q.....c..d...^..uX4{_....]....AP..d.,.{..vI$.(..(..,C,E.M..^..d?1....~....EQ.EQ.EQ..H..(..(..(..EQ.EQ.EQ.Es.......G..EQ.EQ..7...$EQ.EQ.EQ..H..(..(..(*..EQ.EQ.EQT )..(..

Chrome Cache Entry: 288

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (9869)
Category:	downloaded
Size (bytes):	10413
Entropy (8bit):	5.257533978847801
Encrypted:	false
SSDEEP:	192:8nla2OCNzv/zCPfx1WY6Q8X4tYPNF9cxi3/lpemo+AW4mr+oaq5:8nl3OCRvbIfxkgUPRcxw/lpemoPW4mrb
MD5:	1B5686244F6C6516B3C0CB73B85DEB30
SHA1:	207E5F9CC6C80B1B84C18CDFA732A5C3CC43AE2B
SHA-256:	3A91FF301DBC45B9035E65C7CACB68C5C06105196AB82BDE6AD6970348F2D819
SHA-512:	73AC415260CAA2291E3F2A24393B226E1275A1981775E3AA4183B2ECC941872AEB3F1024756479FD56E26F3E27976607E576A835864892F547E17DA17A3B6A32
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//musickit-components.esm.js?t=1726695429822
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.import{d as e,N as a,w as i,p as t,b as o}from"./p-1ec6e574.js";import{g as l}from"./p-42d04e97.js";(()=>{const o=Array.from(e.querySelectorAll("script")).find((e=>new RegExp(`/${a}(\\.esm)?\\.js($\|\\?\|#)`).test(e.src)\|\|e.getAttribute("data-stencil-namespace")===a)),l={};return"onbeforeload"in o&&!history.scrollRestoration?{then(){}}:(l.resourcesUrl=new URL(".",new URL(o.getAttribute("data-resources-url")\|\|o.src,i.location.href)).href,t(l))})().then((e

Chrome Cache Entry: 289

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	486
Entropy (8bit):	4.569126658730454
Encrypted:	false
SSDEEP:	12:t4ptE4LAlQDZ1ciCfOSiTTU5EMqYnleVFy5Ze2iygTion:t4ptE4LAK5TSiTTU5EMqYw4ipiC
MD5:	C88356640B7A7AEDB98664CB26145A83
SHA1:	291E5386811A83C4E699E7588E27DA45CF1484CC
SHA-256:	07CD66F2F02F1E3B00A09591E700832257CEE244EBDC98F27EDA09FD2D33447F
SHA-512:	0BA9153BAC6F7305EC44D5EA89F40122691E18AA9C19B2181C865C30262A4EB86E013FF469545F573079EDF41457E0A83E6B72CE6ABAC89BA1C06BC0E01FF7A7
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="100%" height="100%" version="1.1" viewBox="0 0 230 497.776"><path d="M27.78 0h174.44c9.66 0 13.16 1 16.7 2.9a19.7 19.7 0 0 1 8.18 8.18c1.9 3.54 2.9 7.04 2.9 16.7V470c0 9.66-1 13.16-2.9 16.7a19.7 19.7 0 0 1-8.18 8.18c-3.53 1.89-7.04 2.9-16.7 2.9H27.78c-9.66 0-13.16-1.01-16.7-2.9a19.7 19.7 0 0 1-8.18-8.19C1 483.16 0 479.66 0 470V27.78c0-9.66 1-13.16 2.9-16.7a19.7 19.7 0 0 1 8.18-8.18C14.61 1 18.12 0 27.78 0z" fill-rule="nonzero"/></svg>.

Chrome Cache Entry: 290

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	24604
Entropy (8bit):	4.7347320559530335
Encrypted:	false
SSDEEP:	192:HahNCO9aaOWUbiYyai2kWYipNtUxSi0EBh718jpwyYqaiEjKsnGLUtGrNixayyai:ni1ZGArKPINofFnuefd
MD5:	1400A5F5BB460526B907B489C84AC96A
SHA1:	1CDB62D2B39EFF966E96A476F72704BC86591036
SHA-256:	42D42F23D7276824168808093BE0F20E3E53673718C79349CC22DA88F58D3E23
SHA-512:	DBB06FC723613A892AC5466D4592839B93CD9504B68E7FAFA17827D46404CD7A662D5DF04FAAC08C30C3052958335458301FE9C5B26B1CADDD8DA914DB11CEC3
Malicious:	false
Reputation:	low
URL:	https://telegram.org/js/tgsticker.js?31
Preview:	var RLottie = (function () {. var rlottie = {}, apiInitStarted = false, apiInited = false, initCallbacks = [];. var deviceRatio = window.devicePixelRatio \|\| 1;.. var startTime = +(new Date());. function dT() {. return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';. }.. rlottie.Api = {};. rlottie.players = Object.create(null);;. rlottie.WORKERS_LIMIT = 4;.. var reqId = 0;. var mainLoopAf = false;. var mainLoopTo = false;. var mainLoopInited = false;. var checkViewportDate = false;. var lastRenderDate = false;.. var userAgent = window.navigator.userAgent;. var isSafari = !!window.safari \|\|. !!(userAgent && (/\b(iPad\|iPhone\|iPod)\b/.test(userAgent) \|\| (!!userAgent.match('Safari') && !userAgent.match('Chrome'))));. var isRAF = isSafari;. rlottie.isSafari = isSafari;.. function wasmIsSupported() {. try {. if (typeof WebAssembly === 'object' &&. typeof WebAssembly.instantiate === 'function') {. const module = new WebAssembly.

Chrome Cache Entry: 291

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	dropped
Size (bytes):	3248
Entropy (8bit):	7.908362407256193
Encrypted:	false
SSDEEP:	96:2AWyDy7HFn82WbxTk5qmMByeB0gS9cyIUc:Fy7Ht82WbKLGBhS9cz
MD5:	06DF856EF7C998E1D0E6FED8DF104E7F
SHA1:	0875308EEB17A13560722A44A366D77D6D0CB4B2
SHA-256:	25644DC73E68AF820F7B035AD61BCE446CC1BF615498F36EC356CFE5FB8F39E0
SHA-512:	CDDD23C5BD94AB3CAFF0B2CCB02978A93AC43EAF0B5DF386100FB2EC18FA353FC8C34F0D9054224DD67A46A8A293F94EE22C7DD509360E7847255C0E0FBCF396
Malicious:	false
Reputation:	low
Preview:	RIFF....WEBPVP8X..............VP8 &....4.......>.T.G$......L.D." .8._a.v.>sW6.A.O..R....{...~..............o.?....k...]^.....zZ.......m..y....hF.x=.....{...\|.cN`..R...W..x..&...$...P&.^A..W..G.!B......\.....aQ?'.............k.........$. .#....$...b.d.?.!.K.=..A...G.e...ec..........Q.l....e:!.C.lp.asn.aeQl.8.....@.+.y.......b.D....CI..]..%I;.....+.,..$..l...2..D.I..?..a.M.......u.0.P.(.1k...>.v2V...A=....p..4I-...zS.,.X.I.l.[..XI..Z..1]..n{u .d.rc].......Z.z..e.......F...~Uh.~..+....C..2.,MP.!.x6.9.b9o...RX.:....2_..\|.....Ss(...(.....Q85.A...`..8..en.Rh1......&...<..7m..]M..M..Y.n+[...%r.F'.o.gF.q..@........l1..-..(..us....M.E.'@.....s.+..$.....l@..]......./0..[0P.p1....d..Q.Vg.3..,n4..L...;S..I...\B.....5.h?..d...".x.P...`.-.?..n.=..:.W...E..._N.....!.x....e...Sj.P[7n..~0...[.S..Ly[o..^Us..CD..6....E.u........C..#.!qs.C...wZ....A.......w...........OX^...\|y..v..U..L3L...k...c.P^O.....s.<}s.x...... .....J....4.V...`.....G4Hsuc...L.'K..U%4-.

Chrome Cache Entry: 292

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (13533)
Category:	downloaded
Size (bytes):	615756
Entropy (8bit):	5.616325641144748
Encrypted:	false
SSDEEP:	6144:6jpvj8zjmZiQjpCEVZHasaQQeU1PhrXeRzjn:2pnsQjMEVZHaiQeU1PhLeRzj
MD5:	359F49AF57AC9B84EE95F65B3ABE964A
SHA1:	89F6BAD4CBC2A433D98CB0CC9BDE9CBCBED37A97
SHA-256:	9A454035F3D45E90B48B6A3A76C50E17924BE13FBA7684A7C8B5E7EF08183E32
SHA-512:	7138C1B88D6613AE7CCBF3827F1C93D32D250746DED0C78D41B820D39B645C2554788FD2717DDD6019DECFF37B9EC01D48C263E0B6937339512EFC8444B88ACD
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/us/app/telegram-messenger/id686449807
Preview:	<!DOCTYPE html><html dir="ltr" lang="en-US"><head>. <meta charset="utf-8">. <meta http-equiv="X-UA-Compatible" content="IE=edge">. <meta name="viewport" content="width=device-width, initial-scale=1, viewport-fit=cover">. <meta name="applicable-device" content="pc,mobile">.. <script id="perfkit">window.initialPageRequestTime = +new Date();</script>. <link rel="preconnect" href="https://amp-api-edge.apps.apple.com" crossorigin="">.<link rel="preconnect" href="https://is1-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is2-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is3-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is4-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://is5-ssl.mzstatic.com" crossorigin="">.<link rel="preconnect" href="https://xp.apple.com" crossorigin="">.<link rel="preconnect" href="https://js-cdn.music.apple.com" crossorigin="">.<link rel="preconnect" href="

Chrome Cache Entry: 293

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 320 x 320, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	30567
Entropy (8bit):	7.982782008745682
Encrypted:	false
SSDEEP:	768:pYweyGgLyxCaJ1leoVAqIuOlHPUfFbqqxViqR58IWE1:pX2eaLzOlvEAqxhR1
MD5:	0C6C45EE2597151FA5E955D11D2D38FE
SHA1:	771AA6BBE2765CD2D6F754E14D5E12FFC476E939
SHA-256:	889DDFB8550BAC935B0A02E52BEF9D0950F0734D7A70661A0930A3D8E6A2F372
SHA-512:	BB4808E6B52F06991E9FBEB6E6E0D64B0AFB4E87076A9CAD8543494605CD2D0DC2F1D0007BF8C588C5E7682A87EA63F83BCC6F9C847DD60B3E3024CB39BBBD85
Malicious:	false
Reputation:	low
URL:	https://telegram.org/file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b
Preview:	.PNG........IHDR...@...@............bKGD............w.IDATx..wXTg...P.h...%F..d...F,.F,....)3........H."...b..M.b......{. .\|..?d.........y..Y......y.s..............................................................................qjeg!.l.Jf...,..+M...F......u.o.....S"""zo$1.......YH..[Ji]ag!.mk!Yik).%.....;).......,.....[Ji...Y0..?.-.O.....+.".&...;!...m.,..T S..V.l\a..b.. .i....t......>.....YH.U...:....r....Br....\|.DDD.Jv}..v.......B...... l-.T.\|ek.0.\|.DDDo...[....d.z....^M.m_.7.`.. .......Y.;..ZH..,$J..'...p..L..!..>x"F9..C.G...Tg...z.}M.."".:...y....iv..G.......\..@6..Q.....+G..X.z.c..h...C..y.......r.B"......>...p.P.e...3\|.MGl`.#.."xZ...C..'......\|3DDD..A..?...l.P..W..$.)....>..c..`..T....,iD.%"".......v..h;.I...>.(........4#* ...C...hk..F.-""..Sy[.......:....l.).u.o._8dc\|0y.Tx..!.#.1........O...p.^.Y.@`@.5"".jI....4N.........=F...............p.x.2..$.)`.......}..'....Q..g!iog!9..?>--..LF....\|.Q.<l*.-..^....i.V.....j....F.o....J..pi.......

Chrome Cache Entry: 294

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	625
Entropy (8bit):	4.952963038414406
Encrypted:	false
SSDEEP:	12:UXv7Fc4DpWNRKL+BK/sgl9hrIYerznR3zueIDRTLG9fkVlF38LG0DAvYodXotHNu:u6oTTlrIYevhTuKtLG0MAodXcNu
MD5:	2DFF575911FD65E601AC64F87F07D5D1
SHA1:	AE28A08E8E333C9234AD0D024D0865E5E36C5B2C
SHA-256:	7DF89772DEFA309D97987A7D985ED3F0DA91D81180FE69BB11DA8A8B181B418D
SHA-512:	3E6530272A6497738135CE998D2221588C487A27F20BD3745224F3FA43FDBFF8A2C8DDD42709B01B1CBF8FCE8EB6DC1EC9FADFE5FCF1AAEF0DE5B18CAAA6CBD7
Malicious:	false
Reputation:	low
URL:	https://js-cdn.music.apple.com/musickit/v2/components/musickit-components//p-42d04e97.js
Preview:	/!. IMPORTANT NOTE:. * . * This file is licensed only for the use of Apple developers in providing MusicKit Web Services,. * and is subject to the Apple Media Services Terms and Conditions and the Apple Developer Program. * License Agreement. You may not copy, modify, re-host, or create derivative works of this file or the. * accompanying Documentation, or any part thereof, including any updates, without Apple's written consent.. * . * ACKNOWLEDGEMENTS:. * https://js-cdn.music.apple.com/musickit/v1/acknowledgements.txt. */.const n=function(){window.MusicKitComponents={version:"2350.1.0"}};export{n as g}

Chrome Cache Entry: 295

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 102073
Category:	dropped
Size (bytes):	10959
Entropy (8bit):	7.979994782862011
Encrypted:	false
SSDEEP:	192:Sq3PR72ctqmVQvWnigEmVxdobM5cFOvCZbZ9gAJxhJuKwi6Sy18YapNjagcvb1CG:Sq3PR7jtmAHB5eOvubZ9bNDgvapdBcpr
MD5:	FCF0262BEB96C58FD7AEB5C0BB8FC4AF
SHA1:	22C51ED3EB77FC79AC3FE8131F8CB08C9AFD532E
SHA-256:	E81EA8894A34C2673DC7E7AFA5055EDED2622F15DAB8F452EA79C240C6969F3F
SHA-512:	11422AFA3F696C703AD2B0CBDF00F2B5C099FB40BE43C82EE17686383AB5AD194AC6EFCDF4DBC65BCFC3B7C3E62AD6811A6834386B7D01D9E89791C051DED060
Malicious:	false
Reputation:	low
Preview:	...........}......D..#.w..b.b.,.#p.'q6N..>'....~U..VK.3...sq.i.".E.X.....>.}k....}{.TP.......Qww?.~.-...1......`lw........Z............'}.............^uw.^.y....5....7<.?.....D.oL.^>~..G..}..^....g<....V.9........i\|....'...h...~....Ez.F.....h.V....\|,....M.T..3....4.x..X...kz....,o_.~/..6.~.@......7A.....n@..)#..Q!D.........w...>..(.n.m...+. ..,KgB"l[.a.J9......ULD.I.76...y.......x..........[...}...;...u......uV.R.o..FeM.)o..{...h...k..y....gB(.Yl.}w=.Y\|/}.....s..6...P.MCz..!.w...;.......YL.g..Y...j..K3...^..94.[..+..Y......+..W.3:..Dz`i..^K.xja.2..X.xt..Q6.w......U.>LV)R..(c..8.{z@c`.j.\ ....F.....U.!@.hH.....X..id'.h...&..}T>......./.k......{....g..\=.1$7A.......z.T.f.}OD...?.......=!.&. ...:7.0=.....Z...~}.....*...#.............[L..O-."M<M...". 8.8...onV%Y.C.n....X...a_...;g.k.Z#..B3.aw....wD..G,...#..n';...V.....?..;.......O....W~......;....O..f..^.>.2.+..<...+.}.....G.......o..\|...._.G.......S..f.J.I.+7I...Ga.-.\|...E.0.Y

Chrome Cache Entry: 296

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 21 x 17, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1272
Entropy (8bit):	6.759893244400297
Encrypted:	false
SSDEEP:	24:ay1he91Wwjx82lY2T3ouVMgK5iyJ3V6pKzLXGLfarUZdR+p0tN:awqQNn2xCJ3xKjZD+p0z
MD5:	1ED9BF7633F4F449C8D2DF94EA0EB35F
SHA1:	2902BA9C2B127C74C2550298A0578D7D8DA941C2
SHA-256:	E7D23B06A4FFD600558E5443D1E32DAAAF13A27CF7BB8B7CC163A92B4054AAF2
SHA-512:	51DD36178DD85F062FEE20903A4F0981CA34EB24A7E7245191EF43D493CD47F756389E548A731109F1C0463BA3BD1D3D4F7C4C623639B9514EB2FB9619124F07
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............2......tEXtSoftware.Adobe ImageReadyq.e<..."iTXtXML:com.adobe.xmp.....<?xpacket begin="." id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27 "> <rdf:RDF xmlns:rdf="http://www.w3.org/1999/02/22-rdf-syntax-ns#"> <rdf:Description rdf:about="" xmlns:xmp="http://ns.adobe.com/xap/1.0/" xmlns:xmpMM="http://ns.adobe.com/xap/1.0/mm/" xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop CS6 (Windows)" xmpMM:InstanceID="xmp.iid:BD511DF2556611E48F9585596B882309" xmpMM:DocumentID="xmp.did:BD511DF3556611E48F9585596B882309"> <xmpMM:DerivedFrom stRef:instanceID="xmp.iid:BD511DF0556611E48F9585596B882309" stRef:documentID="xmp.did:BD511DF1556611E48F9585596B882309"/> </rdf:Description> </rdf:RDF> </x:xmpmeta> <?xpacket end="r"?>.."...lIDATx..O(.a....19P....up...r...XI.M.."G.*)g.....f..p.h.....Rh/.. ..O=S.3..z..........5.it....L2+...i6g..

Chrome Cache Entry: 297

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 160 x 160, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	17975
Entropy (8bit):	7.968991791805153
Encrypted:	false
SSDEEP:	384:/QJwEzZkYmHWlAk99RDXjovjCKGzsawRB8icBLu5+r0lKOqke:I1V9mIAedXUvjCKGzHwNx5Vlc
MD5:	1D581B72D19BC828654229A0773A5300
SHA1:	FF517C8BB4B37351FF3DD72F7EC66FC584E90D5C
SHA-256:	D2B3858E94ED122782DE9028F668334438649E46E5D2C6D761E3359C8E3DE200
SHA-512:	1B98B05C5F720C34D470AF9606013E8DFEF2C88225AB39DDE906E4BEC48F84851BFA9C68BD99AEBAFEFAC35C8F99861A58A40DEB5C26CB74A5A19374FE7AEDEF
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............g-....bKGD............E.IDATx..}w..gu.s...~....+i%.-.W...1%`....\|......2...LBOH.I>z...!`..+6.MV......e..u.t.Z.J......{w........=.Xh.m.-......B[h..F.C0u.....n.a...9.@X....@.Db.....q?.s..\................n..DT{..RU........D[ ..x.& ......F.6.\..W..E :.h_SU...&....g........^!...P..W)....!"..#..i2..1<..7....^? ..I)..."5.U....W..q..BT..%.^.......33.e`~..o ".tj3@..e..\|S....hZf.~...:8.v."!O.8V<.V..5...X<8bcpX.g_.... `...@.._.6/..8o..~/......uLuLC.Kk-kr.C5D0...R.....\|8.....u..7K.Y.....!Lvn...HpT.QU.t.R.^G.s_..y...\|.I.H..C.\.DM.._.!9.D........}9..O...l..`d........D.......L.E.UU..2...`$z.a...........,.....'...,.q"...3N.........b.M.........".-1%.S.m6%S.H.i0d\|P@D\C.........GIM...0._oR}."...k'.,...7...e~..>_N.....r.a`.aps.Q.>.0..se.g..D...Lj..D.&.=..71.j...DR.H..).q...=7..x.. ....q..".......2...F...l....@....Y.2..$.>O......<!f^. %"..dD.a~;T_...[..n......N..........J;..3..2.1A.......e.&.[.{b...'.......T7.~f^n.\|.a \.4".!.of...$......

Chrome Cache Entry: 298

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (2634)
Category:	downloaded
Size (bytes):	9946
Entropy (8bit):	5.303383252274076
Encrypted:	false
SSDEEP:	192:NdbWsWxwiKpBpVyPPjg9bt9MVzclvs4oRL19n3kufDi/9secuFjel:LbWsWx3KDXR9THl1iL1l3kufG/9sebjS
MD5:	9BB28E4E947B15C91F9178EFF5B23264
SHA1:	87F5AC3AE29A7455DD00F79435B1D91F664F0395
SHA-256:	9FEC8921027F561C8BD0FDF17C244E35F26ABA8E336571597FCCCD9D42D7A0CA
SHA-512:	4566D611CDC37D0F4C34D36ABA45AF69036C4A9E155FAAEC80D70B20C24555A319C8227377D9AA7E7EF02077C2E83C050DB8BACCDBF48417D8772F64818AA7A5
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/chunk.722.c70bd733e7b77d8198f0.js
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[722],{32722:function(e,t,i){var n=i(24178),r=i(76588),o=n.SC.attachDelegate,s={setDelegate:function(e){return o(this,e)},localStorageObject:n.tO.localStorageObject,sessionStorageObject:n.tO.sessionStorageObject},a=n.SC.attachDelegate,c={setDelegate:function(e){return a(this,e)},makeAjaxRequest:n.L5.makeAjaxRequest},l=n.SC.attachDelegate,u=n.SC.hasAnyKeys,p=n.SC.isArray,h=n.tO.saveObjectToStorage,d=n.tO.objectFromStorage,g=n.P0.exponentialBackoff,f=n.EE.valueForKeyPath,S="noTopicConfig",v={blacklistedFields:["capacitySystem","capacitySystemAvailable","capacityDisk","capacityData","capacityDataAvailable"],compoundSeparator:"_",configBaseUrl:"https://xp.apple.com/config/1/report",constraints:{profiles:{AMPWeb:{precedenceOrderedRules:[{filters:"any",fieldConstraints:{clientId:{generateValue:!0,namespace:"AMPWeb_isSignedOut",expirationPeriod:864e5}}},{filters:{valueMatches:{isSignedIn:[!0]}},

Chrome Cache Entry: 299

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (10204), with no line terminators
Category:	dropped
Size (bytes):	10204
Entropy (8bit):	5.282533445396263
Encrypted:	false
SSDEEP:	192:U38kcmi3U2hQctc1cJcpcZrEccxNsMlcTctcIceCgycLcvXRkEsYNtGr:U38ZZU2hxtc1cJcpclEHllcTctcIc3gP
MD5:	97E3F38781BA136C719D08CA0EC5162F
SHA1:	5604E5C9095068500FD764E4E7608CD489D272CC
SHA-256:	9DC2DC3E987AC76A2AE4DCC3A4DE7BF5D09DEACD4780C9F8BA7EC263380809CF
SHA-512:	0716DD98795D9184A7A1508B87F9D17FAE217CC0364D42D075AF5D4C6BC1FD37E6FC07C4F6798D96AF028608075666D133C15977F38F8748421586BB9833E507
Malicious:	false
Reputation:	low
Preview:	!function t(e,i,n){function s(o,r){if(!i[o]){if(!e[o]){var l="function"==typeof require&&require;if(!r&&l)return l(o,!0);if(a)return a(o,!0);var c=new Error("Cannot find module '"+o+"'");throw c.code="MODULE_NOT_FOUND",c}var h=i[o]={exports:{}};e[o][0].call(h.exports,(function(t){return s(e[o][1][t]\|\|t)}),h,h.exports,t,e,i,n)}return i[o].exports}for(var a="function"==typeof require&&require,o=0;o<n.length;o++)s(n[o]);return s}({1:[function(t,e,i){"use strict";e.exports={EventEmitterMicro:t(2)}},{2:2}],2:[function(t,e,i){"use strict";function n(){this._events={}}let s=n.prototype;s.on=function(t,e){return this._events[t]=this._events[t]\|\|[],this._events[t].unshift(e),e},s.once=function(t,e){let i=this;return this.on(t,(function n(s){i.off(t,n),void 0!==s?e(s):e()}))},s.off=function(t,e){if(!this.has(t))return;if(1===arguments.length)return this._events[t]=null,void delete this._events[t];let i=this._events[t].indexOf(e);-1!==i&&this._events[t].splice(i,1)},s.trigger=function(t,e){if(thi

Chrome Cache Entry: 300

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 320x320, components 3
Category:	downloaded
Size (bytes):	14190
Entropy (8bit):	7.895063441340627
Encrypted:	false
SSDEEP:	192:6+TGH2xmIFVV/HYfnbPveAaqMtig/ezKu16GOXlwU1UcvjQavQ7FP2h+/5JhkTIi:hRRzvKbXeAzg/ywz1UcvbvQ7khqJjS
MD5:	AAAD0FAB841CF5399948EDA6CA02EA34
SHA1:	13ADE1423D67331C63F27212295772EA5CE2B106
SHA-256:	5D7BE9FFD1F216CC8E8168B8D9FC76660835B21F36089162744BA296C4159D41
SHA-512:	3CEA471BB11C10D7D9402B043800E5EF4C02831C5470DE98DAF73A08D0BB95810C8D35D233B3639C286ACC0CD44414FE11E05958B13FD97BC2A54513542BA01B
Malicious:	false
Reputation:	low
URL:	http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/vKNb2iqPCJyxS0EJ_KL7rLK_M-JUdK6HRCFPjKRF8RNEh3lDB4CUe0jYawVy.jpg
Preview:	......JFIF.....H.H.....(ICC_PROFILE............0..mntrRGB XYZ ............acsp.......................................-....................................................desc.......trXYZ...d....gXYZ...x....bXYZ........rTRC.......(gTRC.......(bTRC.......(wtpt........cprt.......<mluc............enUS...X.....s.R.G.B................................................................................XYZ ......o...8.....XYZ ......b.........XYZ ......$.........para..........ff......Y.......[........XYZ ...............-mluc............enUS... .....G.o.o.g.l.e. .I.n.c... .2.0.1.6...C....................................................................C.......................................................................@.@.."..........................................J.........................!1..AQ.."a2q...3..#BR...b.$r....S...&46Dcd.......................................<........................1..!.AQ."aq.......Br23.....#$CDR..............?...R.H.T.R..*T..J. )R.H.T.X..uJ..XP....^`.Lh%..]..EnbL.

Chrome Cache Entry: 301

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 92 x 92, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	4036
Entropy (8bit):	7.932027659931484
Encrypted:	false
SSDEEP:	96:8xdmsJJ/f3SbRi7NCxsfyFelHFF0/T4YK7oYHR5NZbIEcY95Skbvntn:amsJJ33SbR3q4oFF0/efRqkXtn
MD5:	24823D6579E391ABE63D240AF5ED42D2
SHA1:	5B05564537D70A2127B5E72E66DE228172BF00CC
SHA-256:	6DAEB4535066B284D629A830DEDF04773F43EF8B5A1BD2D538B800F94D61DA5D
SHA-512:	9B5B9FCCCC410FD068B5FF8088C1A27DFF700146C4425461B5095A0B364C9FEFE2BC9131114C5FEE4549AF3C15FE61BC3E9EEBFBE5F7197B902830E7CFE5EA55
Malicious:	false
Reputation:	low
URL:	https://apps.apple.com/assets/images/supports/supports-Siri@2x-24823d6579e391abe63d240af5ed42d2.png
Preview:	.PNG........IHDR...\...\......1"j....PLTEGpL...[....}......N.j.....p..t..u..g....e......i....k.e..Y...m...._..b..x..c..t...r...U.}.\|....!JL.AO$i.%d.%WW.v.#p.59a.~.33X!R. J.+Z.(^...."KU.@x+9V>QoH_{.y."=T3^..K....4l.1MO4.............+C]L~.3S....:@g.T.3^b0x.AE.E9.Dg....Rdo&`[.o.Lqx1Md,..XE.RS.-..BAm.....V=.......B[.8O..]...j8J.Tq.......U.....e..k.H...........EQ.HLv...2ma@x.KU..y.TX......"<.9gp~...../N.\|..et.Qt.&;m".wI..e..a2./@....\|.^e{/ExTc.pc.`..9.....o]P..2..p..^..\....r..1vj.{abR.L).>..........P.......S..Z..w..2F^r..p.u....9.vp..J.....:g.5T...w...........c..dc......B..&..7..)..%..w.L..&r.-..Eet!}a.ql.s.P..,.c#}.%..R..7..Gls.5>G....3..4..Cy.).[B\P0SU&.i,e.G....O..D..).]%_.c..Z..b..Y.jQg.=..IdIJQ.E..>~.a..B..FrD9JvH`.6..Fgr9p{Otawl.Lus4.\|h.O/.~D.M\Z.Mq\Yi\|...S.l[v.w.V.f...."tRNS.R..t.J..(.P..p...+...........<O.....TIDATx^..W..`..q... A......?B...{/....9I.5S0........$O...i...2.4M....V4U>...G.Ai.jJ..r.0<....;:./.G.....4.(........Pz .$.r&....).U.!...

Chrome Cache Entry: 302

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	23116
Entropy (8bit):	4.416888886221028
Encrypted:	false
SSDEEP:	384:wWjhl+ZZx0roaRvQgeMr2VxtaA93S/JKhV3PXASow7/XP5oP5VP5uP5sP5H6NC7E:wQhl2cfvrSxtaCDPaw756TUGLfY
MD5:	E75F7F8AC71782DDA40464528A4F619B
SHA1:	1294A00A625B50FF7C3EB3119A71D49399C9AC29
SHA-256:	832FBEFD7A4FE8F651058597D9F1910883D1CBD56D0CEB343E7D6170AEECF982
SHA-512:	AF128E227ED56355357FA0D3D46C9701E3B10F076F3515D84907ACE6BBF282177A74EF577A0AC48E4E4CC1FE0DFE3D14368F7DB08797AACC767E8841032C4E31
Malicious:	false
Reputation:	low
Preview:	<svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGradient><linearGradient id="b" gradientUnits="userSpaceOnUse" x1="1080" x2="1080" xlink:href="#a" y1="31.7861" y2="112.214"/><linearGradient id="c" gradientUnits="userSpaceOnUse" x1="1224" x2="1224" xlink:href="#a" y1="24.856" y2="119.144"/><linearGradient id="d" gradientUnits="userSpaceOnUse" x1="1368" x2="1368" xlink:href="#a" y1="19.1113" y2="124.889"/><linearGradient id="e" gradientUnits="userSpaceOnUse" x1="1512" x2="1512" xlink:href="#a" y1="14.4526" y2="129.547"/><linearGradient id="f" gradientUnits="userSpaceOnUse" x1="1656" x2="1656" xlink:href="#a" y1="10.7817" y2="133.218"/><linearGradient id="g" gradientUnits="userSpaceOnUse" x1="1800" x2="1800" xlink:href="#a" y1="8" y2="136"/><linearGradient id="h" gradientUnits="userSpace

Chrome Cache Entry: 303

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 97812, version 1.0
Category:	downloaded
Size (bytes):	97812
Entropy (8bit):	7.9978966269531435
Encrypted:	true
SSDEEP:	1536:MxlNoV+iuaRqgnUJ9gPxMZXFwme9Xvaw8aeyH17mP4bTJagZcXU4N/42Y/4g2H4O:MLNoVXuaogUQyZVPeB0yHB9bhoU4NrYc
MD5:	FCF85E1007388C2707C982FB27D09163
SHA1:	1329D694C10F4F8DC05AEF70257E93D0481ECCB5
SHA-256:	878C9752B9A516DDE472D30E4E5C57172B2E766CF21F336DF168E2302382CA0E
SHA-512:	B1ED620469C913144DEB20BA1984DAC483112554ACE2320ACFA0F17CD529D3A0CA2F9B06AE0F7F819136842C798F05DECB16A2DCA77D126428FB0FEA9401344E
Malicious:	false
Reputation:	low
URL:	https://www.apple.com/wss/fonts/SF-Pro-Display/v2/sf-pro-display_regular.woff2
Preview:	wOF2......~....... ...}............................$..H.`H...X...`....6.$..$..(.. ?meta....X. 8.t[.,.......?...t.!.......F..R.~..CL-8..C.F4..UW..3.m..u..1..[9...........\|y...o.......b.Z.....D..1.EL%E..".....iS.Rb].y..j...YBX..R05%3%..$..ZF..Ok7.~......lSR......6.e.....yz...F<..FU....Q..H.)....p".m.+..".~..Y.......@#.........tQ.y~..q92.c..GO.`..x..p.\|RD....7.....T.......b.+u\@.W:....T.u.... .AB.$>. E1.A......?.,.!m..).~e......gd.....v.4..i......<......^e.3.R.J.V4;_..{....tV..Q.._.l....E..,F..\.b.. ..............{..(......C.".......z{...g...F...h+A^...<..\..c..MP.J*..... ....Q+v.5.9E\.q...h..D..%"...p......}Z._..#..8A..w....5[.<\|@v&..1C...m3?w...n...r\|0d{....d./...[.-A.Crre .Ds.T....F.5U.Ly....#rs..?...7%@......a2.B.b7L.....>.=.. ...~..2..o........mo. \C@5W.6....6.i....w...@s.ww+.F..D..h..0....k..........H...l......AR...l.X...n..d....1`T..b`$`...........i....?@s..#. .A0..c..e...6j.....="[T.B.......W?.......}...7.,...5...n..6...Z..

Chrome Cache Entry: 304

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max speed, from Unix, original size modulo 2^32 2979
Category:	dropped
Size (bytes):	1521
Entropy (8bit):	7.869533935472937
Encrypted:	false
SSDEEP:	24:XNYO+fGvuqeErDHqlaxe5mCucAX+QYP5vwK19cnQmbQ8rCog4IY7TVhs7NOookQ1:XNt+BerfxymCrK+TNwKOSlGVhawooDfJ
MD5:	9E8C00568FA549AEBB47100255D258AD
SHA1:	1F544022455F8B176CF0936E77D2D2A2E15F75A7
SHA-256:	4C115EF36E48C9AC331CDF8DEDC8956E0C28BB7079B909AAF0555F1B6DAA5179
SHA-512:	082F9458EEEC9FC83E0C7FC81FD898DA11545B9D2D465AC25B0EDBD763D07A375BF49BB1D234C44AD2C1EE41F916C34B286A45ADEA7B189CFAD9500A34E7A5FF
Malicious:	false
Reputation:	low
Preview:	..........}V.s.8..+-w..0..$.(.4M.i......l....0...~....z3...~+...2...2M.r.r1XdQ1.d.x.M....7....P..v4."Y..F.......b...'.A....z=.@.;.H8At...E.D...Y......X..3..o..I......q..:.8..........Y............bM.%k4:...M..T.M...-..neM.z"G.`.5.R.....BO.....&Zj.Z7+k...9.......u.[]`t..w.wK-!..s&..H.N>.,><../..p..N.sN.K..u..IoA.X....v..B...y\|d..-...FcI.s..b...F<w..?....l.Np.B`.kJ.?z.Q..=H'8.4....(.c.p)^.!O..a.I.`u.p./X.k9g........e...V.s.,J..o.B.K....3..G.>..%Q...\.B..P...d..}......<...gpr.9..3.2v......n..Z$f.%h.,..1.......M...Y^..9...@.e.m.t....2....h2.....9....r....9.m....J..@...+...>._....b.......^._.b\N7...6v.~..{..5o..)...An..`..\.By.......j.....F...b..M.W....,.U...\|...a...Eqxg....:.o..q.WZ.4.tp...Z..Nn.S..MV....h1VYa'r~.......~w...t'$...}..>......Bi.wI....p......H..Jd.4.J. Q&z..=.............&oblq....?...:....n..-.u.6wO.{.........c..=.S.9.KC....q.....=.x...#\|..M.7..."\|..-........M.6A..4@.&p...%.f'}.VPI.d.].....+.M_3~..f.jW..;.E..r.....

Chrome Cache Entry: 305

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image
Category:	downloaded
Size (bytes):	11234
Entropy (8bit):	7.9791374671658994
Encrypted:	false
SSDEEP:	192:gVjehewURUK8NHkM0YKAHE1nsh8KN010pvHwNJ1Cs5kGUCwwzmLM69WAhP1H:gpbwkUtFkM0TAk1nsh8KNEyv8XCs54wS
MD5:	672123E831A5CF8FF55A14C61B176627
SHA1:	27A061E36A415F1332AA105CE06C6E166B63BE25
SHA-256:	7CE3A62DBBA1FC658B52CB69FF64CD8957917DF707EDBF464AD6142C459C8004
SHA-512:	201860C92BC8355D9D681EBB38B4D8F77848EFECE406A3BC230DDB218A74F0FC0944E1460253DD526F26F8A4AEC00D64D35A218F6C10228001DA31BC42067C75
Malicious:	false
Reputation:	low
URL:	https://is1-ssl.mzstatic.com/image/thumb/Purple221/v4/e1/be/21/e1be21a4-9059-f4fb-3231-ae194e127f20/pr_source.png/230x0w.webp
Preview:	RIFF.+..WEBPVP8X..............VP8 X+..p........>.N.I$"#..V........@M-h......Pf.{......V...~......8..}O.e.A.....g.....W..@?......\....c./......._....G.O......y.~.8./.{..)./..]}.^.......~.(.......G.?............/......)~^?..g.K..`...........%.t.<......B.......7.f.>.O.....= ..s.;N.R..lXD.,..TJ.m.uM\A..1^.e...E.2.y.....M...RQ"&....G..K.b..7]jNIF}....T.7......._UN.\B...U.1S....G[...A.._..k...>P..'...j+..90.V.dz.p......r..{........\c...d.m.n..j..)`..o?.qp8..J.j.9.>.M.i~G..6.2L.4.4<G.c..Q.hj.:.&......D'xw....3.kd...$....9.9.3.Z8.8...>.+.K.#.r3":h8.....J........x4=.a....N.9.....fI.A.w...4..X.5.j.yCq......1!.E.3..]........<...?j.Z.(....k)W....&;..%.A.yR.....y,J1.4.=L..#.3...`..VQ.].#g.^NNp`c.....<4h...G7.z.Ms.I...u.0..A}..H..F...3.2ed...@.dn."..1........zH...v2z."...\|...h.Q.\).B.@.>.....[7d).C>{P..._X.>MTW~..vYY.......W."5......^L...JiX...]K..n"...,.q..i..I...+.f.=}G.YdU.N.>.....q.&.....cS....H._....2}nN..c...>...sN..a.j...{..j...ADk.--.

Chrome Cache Entry: 306

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (3175)
Category:	dropped
Size (bytes):	45694
Entropy (8bit):	5.118242929635633
Encrypted:	false
SSDEEP:	768:tpi7T07ytsSwuLFB3t8KbX3zrcW3HsBtuv3BtlK7vKH5v9u8kEFsW1:tpK1L5bTIByv9u1EFd
MD5:	8B2EA74C2950F702116F9B02ABC52BCB
SHA1:	AD7455A6E9F0D7E73BA4B80422EF805FC66F7879
SHA-256:	FFEA291B7D7F014FDC619350CAC7B5CECF876DD20EFB498EF0D915FE3AC4BA17
SHA-512:	942397EE9B53797364C02D073689CD3FC049E2EA7AF9D89F19608A61EBB76DA8A554D124F8BE99CECE74EB540806C9BBC383DAC238448D07A42DFC4D421B89A3
Malicious:	false
Reputation:	low
Preview:	"use strict";(self.webpackChunk_ember_auto_import_=self.webpackChunk_ember_auto_import_\|\|[]).push([[990],{67990:function(e,t,n){n.r(t),n.d(t,{ClickstreamProcessor:function(){return we}}).var r=n(24178),i=n(32722),o=n(76588),s=function(){}.s.prototype.setDelegate=function(e){return r.SC.attachDelegate(this,e)},s.prototype.localStorageObject=r.tO.localStorageObject,s.prototype.sessionStorageObject=r.tO.sessionStorageObject.var a=function(){this.environment=new s,this.logger=(0,o.RG)("mt-client-constraints")},c={nonEmpty:function(e,t){return!!r.SC.isObject(t)&&t.hasOwnProperty(e)&&r.SC.isDefinedNonNullNonEmpty(t[e])},valueMatches:function(e,t,n){if(!r.SC.isObject(t))return!1.var i=t[e].return t.hasOwnProperty(e)&&n.indexOf(i)>-1}},p="overrideFieldValue",u=function(){}.u.prototype.constrainedValue=function(e,t,n){var r=e&&e.hasOwnProperty(n)?e[n]:null.return this.applyConstraintRules(r,t)},u.prototype.applyConstraintRules=function(e,t){var n=e.return t&&t.blacklisted?n=null:t&&t.hasOwnProp

Chrome Cache Entry: 307

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 3 icons, 48x48, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	15086
Entropy (8bit):	4.980767694952946
Encrypted:	false
SSDEEP:	96:jJkRRRRRRRRRRRRRRRRRRRRRRRRRRRRutRRRRRRRRRRRRRRRRRRRRRRRRRRRRRRC:jJ/1MJNF6m9XC801f6x7QJGp18G2QR
MD5:	5791D664309E275F4569D2F993C44782
SHA1:	A68F363153614A09F10AE2892C134B9C4B001D4B
SHA-256:	4FF54BC38C267DC3A8C95F6ED4590336BAAEC70433EF15D027DDCA608C391E78
SHA-512:	93502A68F14FD4F87E0AA2CAD92A5657A8587E6ACB1C108CCD8CEB5E52776E77DF867962C51E1290316BB78027DA636F38C065294871B4400FBBC4DEDF622EE1
Malicious:	false
Reputation:	low
Preview:	......00.... ..%..6... .... ......%........ .h....6..(...0...`..... ......$...................................................................................".."6."o."..".."..".."..".."..".."..".."o."6.#......................................................................................................................#..#(."s."..".."..".."..".."..".."..".."..".."..".."..".."s.#(.#..................................................................................................#..#-.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#-.#......................................................................................#..#}.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#}.#..............................................................................#:.#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..#..

Chrome Cache Entry: 308

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 25.11 (Macintosh), datetime=2024:09:04 22:08:57], progressive, precision 8, 600x385, components 3
Category:	dropped
Size (bytes):	276665
Entropy (8bit):	7.54245280986215
Encrypted:	false
SSDEEP:	3072:JA1Cg0ZZaQnCvhgJl40dUwf3gHxPqOgFbMVMZFt6bU3pp0jLe121KwUs:cCZgQnyVrRPmBNZ6w0jWw7
MD5:	E7EB98CEF7E27808F88898AEFDE0735E
SHA1:	9A9DF686523FFA88CD6603D9BB5DB73F21C3F861
SHA-256:	5812CE975502296BA898F6D143A2C21B51A072CE31D0670BC803740D9955C550
SHA-512:	5C02C2476DA2813B3A4C03EF5CF5AFB6294A688DB6A74FADCBBA3C9D6B8D3D6C022736A08CC9A488472160EB70301C1A1CC6EA887DB006C16FB1A9087E0BDC6E
Malicious:	false
Reputation:	low
Preview:	....#.Exif..MM..............................b...........j.(...........1....."...r.2...........i....................'.......'.Adobe Photoshop 25.11 (Macintosh).2024:09:04 22:08:57..........................X..........................................."............(.....................2.........."w.......H.......H..........Adobe_CM......Adobe.d.................................................................................................................................................g...."................?..........................................................................3......!.1.AQa."q.2.....B#$.R.b34r..C.%.S...cs5....&D.TdE.t6..U.e...u..F'...............Vfv........7GWgw........................5.....!1..AQaq"..2.....B#.R..3$b.r..CS.cs4.%......&5..D.T..dEU6te....u..F...............Vfv........'7GWgw.................?..;,el/......X...Y+.6.K~...n...W[.V7..}l..t....ey.6=/.g...]/...]........{..a<S.......)T}G....s.8d (X./m..?i...=?^q.@tI.eo..kh.....E..m...l.~.......7X..?.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 04:41:34.276803970 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 04:41:34.276803970 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 04:41:34.589226961 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 04:41:42.777261972 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:42.777307034 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:42.777379036 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:42.778011084 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:42.778026104 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:43.560909033 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:43.560980082 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:43.565820932 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:43.565833092 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:43.566082001 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:43.567790031 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:43.567877054 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:43.567882061 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:43.568031073 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:43.615400076 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:43.737617016 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:43.737699032 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:43.737755060 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:43.737984896 CEST	49710	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:43.738003016 CEST	443	49710	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:43.884068966 CEST	49673	443	192.168.2.6	173.222.162.64
Sep 29, 2024 04:41:43.935787916 CEST	49716	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:43.936237097 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:43.940612078 CEST	80	49716	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:43.940722942 CEST	49716	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:43.940859079 CEST	49716	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:43.941087008 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:43.941181898 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:43.945585012 CEST	80	49716	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:43.962501049 CEST	49674	443	192.168.2.6	173.222.162.64
Sep 29, 2024 04:41:44.203875065 CEST	49672	443	192.168.2.6	173.222.162.64
Sep 29, 2024 04:41:44.533557892 CEST	80	49716	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.533571005 CEST	80	49716	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.533588886 CEST	80	49716	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.533600092 CEST	80	49716	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.533622026 CEST	49716	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.533663988 CEST	49716	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.573796988 CEST	49716	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.578200102 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.578634024 CEST	80	49716	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.579443932 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.583029985 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.584250927 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.584355116 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.584837914 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.589601994 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.594763041 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.599935055 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.600011110 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.600178003 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.605710030 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.732079029 CEST	80	49716	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.737267971 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.737279892 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.737309933 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.737323046 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.737333059 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.737364054 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.737386942 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.737397909 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.737410069 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.737425089 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.737451077 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.737456083 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.749900103 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.754636049 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.778501987 CEST	49716	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.909076929 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.909120083 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.909131050 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.909142017 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.909152985 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.909192085 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.909231901 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.909425020 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.909435987 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.909461975 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.909470081 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.909472942 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.909486055 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.909498930 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.909516096 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.910221100 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.910248995 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.910257101 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.910310030 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.993585110 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.998464108 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:44.998563051 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:44.998733997 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.003777027 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.179461002 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.179478884 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.179560900 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.184375048 CEST	49724	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.188431025 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.188450098 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.188467026 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.188479900 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.188524008 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.188519955 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.188536882 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.188595057 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.188595057 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.188597918 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.188611031 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.188622952 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.188656092 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.189074039 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.189127922 CEST	80	49724	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.189167976 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.189204931 CEST	49724	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.189531088 CEST	49724	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.193511963 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.193523884 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.193533897 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.193586111 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.194233894 CEST	80	49724	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.245583057 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.279124022 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.279143095 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.279155016 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.279194117 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.279206991 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.279239893 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.279275894 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.279565096 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.279576063 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.279587984 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.279598951 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.279608965 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.279613018 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.279640913 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.279669046 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.280334949 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.280347109 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.280359030 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.280391932 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.330291033 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.370677948 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.375557899 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.572133064 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.572154999 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.572165966 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.572184086 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.572195053 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.572205067 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.572216034 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.572227001 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.572230101 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.572237015 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.572248936 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.572329998 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.572330952 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.572330952 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.577119112 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.577131033 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.577141047 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.577193975 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.599164009 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.599178076 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.599251986 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.599261999 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.599257946 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.599287987 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.599298954 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.599343061 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.599344015 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.599834919 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.599845886 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.599854946 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.599909067 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.600188971 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.600238085 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.600240946 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.600251913 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.600290060 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.600294113 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.600303888 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.600353003 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.601070881 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.601092100 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.601102114 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.601124048 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.601140022 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.601170063 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.659430027 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.702929020 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.740322113 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.740885973 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.745277882 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.745678902 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.767550945 CEST	80	49724	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.767576933 CEST	80	49724	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.767651081 CEST	49724	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.844487906 CEST	443	49705	173.222.162.64	192.168.2.6
Sep 29, 2024 04:41:45.844573021 CEST	49705	443	192.168.2.6	173.222.162.64
Sep 29, 2024 04:41:45.902168036 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.902184010 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.902214050 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.902225018 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.902235985 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.902242899 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.902245998 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.902252913 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.902271986 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.902290106 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.902318001 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.902981997 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.903003931 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.903013945 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.903043032 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.903043985 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.903081894 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.903727055 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.903773069 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.903783083 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.903809071 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.903820038 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.903830051 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.903825998 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.903912067 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.903912067 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.904213905 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.904267073 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.904278040 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.904308081 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.904329062 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.904340029 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.904350042 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.904376984 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.904762030 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.907114029 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.955194950 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.966223001 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.966238022 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.966447115 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.969877005 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.969887972 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.969904900 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.969916105 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.969926119 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.969933033 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.969980955 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.989006042 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.989017963 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.989027977 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.989084005 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:45.989130974 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:41:45.989550114 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:41:46.340913057 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:46.340950966 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:46.341046095 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:46.341603041 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:46.341612101 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:46.962531090 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:47.015680075 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:47.091391087 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:47.091406107 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:47.092680931 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:47.092698097 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:47.092741013 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:47.185764074 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:47.391335964 CEST	49726	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:47.391364098 CEST	443	49726	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:47.391459942 CEST	49726	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:47.395407915 CEST	49726	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:47.395426035 CEST	443	49726	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:47.949594975 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:47.949876070 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:47.949882984 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:47.949973106 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:47.959624052 CEST	49727	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:41:47.959697962 CEST	443	49727	142.250.184.196	192.168.2.6
Sep 29, 2024 04:41:47.959778070 CEST	49727	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:41:47.960041046 CEST	49727	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:41:47.960077047 CEST	443	49727	142.250.184.196	192.168.2.6
Sep 29, 2024 04:41:48.045551062 CEST	443	49726	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:48.045644045 CEST	49726	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:48.115911961 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:48.115931034 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.152573109 CEST	49726	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:48.152599096 CEST	443	49726	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:48.153620005 CEST	443	49726	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:48.203363895 CEST	49726	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:48.204077005 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.204134941 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.204155922 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:48.204164028 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.204195023 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.204224110 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:48.204262972 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.204282999 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.204304934 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.204329967 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:48.204340935 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.204350948 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:48.204472065 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.204519987 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:48.321742058 CEST	49725	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:48.321779966 CEST	443	49725	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.608588934 CEST	49726	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:48.640727997 CEST	443	49727	142.250.184.196	192.168.2.6
Sep 29, 2024 04:41:48.646682024 CEST	49727	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:41:48.646749020 CEST	443	49727	142.250.184.196	192.168.2.6
Sep 29, 2024 04:41:48.648336887 CEST	443	49727	142.250.184.196	192.168.2.6
Sep 29, 2024 04:41:48.648416042 CEST	49727	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:41:48.649964094 CEST	49727	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:41:48.650054932 CEST	443	49727	142.250.184.196	192.168.2.6
Sep 29, 2024 04:41:48.655400991 CEST	443	49726	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:48.689512968 CEST	49727	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:41:48.689532042 CEST	443	49727	142.250.184.196	192.168.2.6
Sep 29, 2024 04:41:48.747798920 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:48.747855902 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.748111963 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:48.748523951 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:48.748545885 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:48.794506073 CEST	443	49726	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:48.794598103 CEST	443	49726	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:48.794895887 CEST	49726	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:48.831227064 CEST	49726	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:48.831263065 CEST	443	49726	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:48.850023985 CEST	49727	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:41:48.941519976 CEST	49729	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:48.941570044 CEST	443	49729	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:48.941682100 CEST	49729	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:48.942310095 CEST	49729	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:48.942321062 CEST	443	49729	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:49.358423948 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.399200916 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.399249077 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.404599905 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.404670954 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.578232050 CEST	443	49729	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:49.578346014 CEST	49729	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:49.679141045 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.679337978 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.679573059 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.679600954 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.696116924 CEST	49729	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:49.696137905 CEST	443	49729	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:49.696599007 CEST	443	49729	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:49.698980093 CEST	49729	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:49.739402056 CEST	443	49729	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:49.807921886 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.883943081 CEST	443	49729	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:49.884021997 CEST	443	49729	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:49.884143114 CEST	49729	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:49.894396067 CEST	49729	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:49.894396067 CEST	49729	443	192.168.2.6	184.28.90.27
Sep 29, 2024 04:41:49.894423962 CEST	443	49729	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:49.894433975 CEST	443	49729	184.28.90.27	192.168.2.6
Sep 29, 2024 04:41:49.927345991 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.927483082 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.927505016 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.927541018 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.927544117 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.927586079 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.927607059 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.927613020 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.927633047 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.927655935 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.927670956 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.927684069 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.927700996 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.927710056 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.927896023 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.927948952 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.928224087 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.928246021 CEST	443	49728	149.154.167.99	192.168.2.6
Sep 29, 2024 04:41:49.928256989 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:49.928287029 CEST	49728	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:41:52.710235119 CEST	49730	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:52.710297108 CEST	443	49730	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:52.710356951 CEST	49730	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:52.711038113 CEST	49730	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:52.711050034 CEST	443	49730	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:53.503170013 CEST	443	49730	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:53.503256083 CEST	49730	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:53.505487919 CEST	49730	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:53.505494118 CEST	443	49730	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:53.505711079 CEST	443	49730	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:53.507919073 CEST	49730	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:53.507982969 CEST	49730	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:53.507986069 CEST	443	49730	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:53.508197069 CEST	49730	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:53.551394939 CEST	443	49730	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:53.682466030 CEST	443	49730	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:53.682554960 CEST	443	49730	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:53.682670116 CEST	49730	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:53.708929062 CEST	49730	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:41:53.708950043 CEST	443	49730	40.113.103.199	192.168.2.6
Sep 29, 2024 04:41:58.529027939 CEST	443	49727	142.250.184.196	192.168.2.6
Sep 29, 2024 04:41:58.529299974 CEST	443	49727	142.250.184.196	192.168.2.6
Sep 29, 2024 04:41:58.529401064 CEST	49727	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:41:59.156676054 CEST	49727	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:41:59.156779051 CEST	443	49727	142.250.184.196	192.168.2.6
Sep 29, 2024 04:42:09.504508972 CEST	49735	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:09.504575014 CEST	443	49735	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:09.504810095 CEST	49735	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:09.505424976 CEST	49735	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:09.505443096 CEST	443	49735	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:10.306977034 CEST	443	49735	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:10.307085991 CEST	49735	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:10.317445040 CEST	49735	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:10.317466021 CEST	443	49735	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:10.318264961 CEST	443	49735	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:10.321537018 CEST	49735	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:10.321769953 CEST	49735	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:10.321775913 CEST	443	49735	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:10.325222969 CEST	49735	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:10.367413044 CEST	443	49735	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:10.498317957 CEST	443	49735	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:10.498583078 CEST	443	49735	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:10.498658895 CEST	49735	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:10.498796940 CEST	49735	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:10.498823881 CEST	443	49735	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:27.125574112 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.125669003 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.125752926 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.126172066 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.126209974 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.126301050 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.126691103 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.126723051 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.126966953 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.126981020 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.748011112 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.748311043 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.748322964 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.748928070 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.749092102 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.749113083 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.749273062 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.749329090 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.749713898 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.749771118 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.749842882 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.749850035 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.750581980 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.750643015 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.750916004 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.751000881 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.798254967 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.798265934 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:27.798285961 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:27.846252918 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.041618109 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.041642904 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.041656017 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.041721106 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.041735888 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.041778088 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.041788101 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.041799068 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.041824102 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.080434084 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.080501080 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.080523968 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.080594063 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.109886885 CEST	49737	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.109906912 CEST	443	49737	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.142786026 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.143994093 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.144025087 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.144377947 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.144448042 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.144520998 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.144609928 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.144833088 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.144877911 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.144972086 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.145277023 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.145344973 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.145473003 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.145484924 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.145508051 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.145658970 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.145688057 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.145797014 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.145812035 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.145932913 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.145962954 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.187406063 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.391598940 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.391635895 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.391647100 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.391680956 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.391691923 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.391702890 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.391767025 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.391820908 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.391850948 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.391875982 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.402293921 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.402304888 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.402331114 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.402384043 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.402446985 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.402482986 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.402507067 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.469058990 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.469094038 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.469136000 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.469161987 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.469183922 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.469202042 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.469224930 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.474514961 CEST	49736	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.474539995 CEST	443	49736	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.750750065 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.751036882 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.751097918 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.751543999 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.751882076 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.751972914 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.752022982 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.752063990 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.752279043 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.752285004 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.752314091 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.752476931 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.752500057 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.753422022 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.753479958 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.753648043 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.753705025 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.753798008 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.753861904 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.754089117 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.754167080 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.754201889 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.754216909 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.754290104 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.754298925 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.783056021 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.783294916 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.783307076 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.783669949 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.784003973 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.784065008 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.784189939 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.792957067 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.793008089 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:28.808753967 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.808809042 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:28.831393003 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.041842937 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.041873932 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.041882038 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.041912079 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.041929007 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.041934967 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.041968107 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.041999102 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.042016029 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.042047024 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.054553986 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054579973 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054588079 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054598093 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054641962 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054656982 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054666042 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054673910 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054701090 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.054713011 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054744959 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054747105 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054758072 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054775953 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.054790020 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.054790020 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.054821014 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.054821014 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.054848909 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.054878950 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.078645945 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.078671932 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.078691006 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.078788996 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.078805923 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.078826904 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.078903913 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.085745096 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.085829020 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.085839987 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.085971117 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.085993052 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.086038113 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.086060047 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.086060047 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.086072922 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.087595940 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.087800026 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.087820053 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.087851048 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.087866068 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.087891102 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.087908030 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.095510006 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.095545053 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.095590115 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.095602036 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.095645905 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.095664024 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.119151115 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.119177103 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.119256973 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.119266987 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.119309902 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.119329929 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.150321007 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.150343895 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.150445938 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.150445938 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.150456905 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.152277946 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.152302027 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.152364016 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.152364016 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.152373075 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.153050900 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.172014952 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.172039032 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.172214985 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.172241926 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.172286034 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.173116922 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.173135042 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.173165083 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.173172951 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.173186064 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.173207998 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.174112082 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.174128056 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.174180984 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.174189091 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.175826073 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.175848961 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.175875902 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.175887108 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.175920963 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.175940037 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.175945044 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.175961018 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.176000118 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.181415081 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.181438923 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.181489944 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.181502104 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.181538105 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.181560040 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.182673931 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.182693958 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.182749987 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.182758093 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.182779074 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.182797909 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.184298038 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.184315920 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.184392929 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.184401035 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.184437990 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.215106010 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.215131998 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.215313911 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.215313911 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.215323925 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.217036963 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.242486954 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.242538929 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.242683887 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.242683887 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.242698908 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.243628025 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.243649006 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.243721008 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.243721008 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.243726969 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.244636059 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.244652033 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.244745016 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.244751930 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.244797945 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.263309002 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.263326883 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.263403893 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.263411999 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.263432026 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.265177965 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.268311977 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.268337965 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.268404007 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.268412113 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.268441916 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.268460989 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.269241095 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.269267082 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.269298077 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.269304037 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.269330025 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.269346952 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.270129919 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.270148039 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.270180941 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.270188093 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.270215034 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.270235062 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.271042109 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.271061897 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.271135092 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.271142006 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.271163940 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.271186113 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.271980047 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.271997929 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.272051096 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.272058010 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.272078037 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.272095919 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.272239923 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.272253990 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.272288084 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.272294044 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.272320986 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.272336006 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.287795067 CEST	49740	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.287830114 CEST	443	49740	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.293622971 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.296535969 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.296569109 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.296689987 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.297394037 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.297434092 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.297614098 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.297749996 CEST	49744	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.297782898 CEST	443	49744	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.297842026 CEST	49744	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.298132896 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.298150063 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.298340082 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.298360109 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.298718929 CEST	49739	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.298744917 CEST	443	49739	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.299581051 CEST	49744	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.299597979 CEST	443	49744	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.301914930 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.301958084 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.301984072 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.301991940 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.302031040 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.306938887 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.307028055 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.307431936 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.307684898 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.307719946 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.311192036 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.311214924 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.311542034 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.311829090 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.311856031 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.334855080 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.334872961 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.334922075 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.334934950 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.334980965 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.334980965 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.335688114 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.335704088 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.335788012 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.335793972 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.335828066 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.335956097 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.336476088 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.336493015 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.336584091 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.336590052 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.336639881 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.337423086 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.337441921 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.337508917 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.337515116 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.337563038 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.337673903 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.337934971 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.337951899 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.337995052 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.338000059 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.338030100 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.338077068 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.338733912 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.338751078 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.338797092 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.338802099 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.338895082 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.355043888 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.355067968 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.355107069 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.355115891 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.355145931 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.355168104 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.355504990 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.355521917 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.355557919 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.355595112 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.355601072 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.355633020 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.355705976 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.355725050 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.355808020 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.355808020 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.355829000 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.356015921 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.356064081 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.356066942 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.356075048 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.356121063 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.356122971 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.356154919 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.367733002 CEST	49741	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.367748976 CEST	443	49741	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.385828972 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.385874987 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.385986090 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.387867928 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.387881994 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.390691042 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.390714884 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.390769005 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.391128063 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.391135931 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.426970005 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.426989079 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.427068949 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.427084923 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.427154064 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.427375078 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.427397966 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.427433968 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.427438974 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.427479029 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.427479029 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.427558899 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.427630901 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.427634001 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.427642107 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.427699089 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.428003073 CEST	49738	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.428014994 CEST	443	49738	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.432220936 CEST	49749	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.432266951 CEST	443	49749	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.432343960 CEST	49749	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.432636976 CEST	49749	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.432651997 CEST	443	49749	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.433157921 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.433166027 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.433232069 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.433608055 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.433617115 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.745454073 CEST	49716	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:29.750648022 CEST	80	49716	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:29.903151035 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.903429985 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.903487921 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.903875113 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.904194117 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.904290915 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.904393911 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.906369925 CEST	443	49744	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.906534910 CEST	49744	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.906548023 CEST	443	49744	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.907604933 CEST	443	49744	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.907660961 CEST	49744	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.908071995 CEST	49744	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.908147097 CEST	443	49744	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.908226013 CEST	49744	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.908236980 CEST	443	49744	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.911101103 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.911289930 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.911322117 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.911690950 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.911978960 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.912044048 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.912070036 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.915719032 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.915909052 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.915961981 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.917047977 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.917112112 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.917841911 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.917922974 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.918031931 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.918050051 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.924384117 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.924582958 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.924599886 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.925075054 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.925374985 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.925463915 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.925489902 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.948240995 CEST	49744	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.951411009 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.955425978 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.963581085 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.963586092 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.967442989 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.979155064 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.993499994 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.993701935 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.993710041 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.994765043 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.994812012 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.995650053 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.995714903 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.995927095 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.995933056 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.998205900 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.998437881 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.998445034 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.998931885 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:29.999237061 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.999345064 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:29.999381065 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.040710926 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.040714025 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.061018944 CEST	443	49749	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.061342001 CEST	49749	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.061359882 CEST	443	49749	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.062799931 CEST	443	49749	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.062850952 CEST	49749	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.063551903 CEST	49749	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.063631058 CEST	443	49749	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.063695908 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.063780069 CEST	49749	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.063786983 CEST	443	49749	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.064131975 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.064136982 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.065393925 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.065463066 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.066133022 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.066200018 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.066534042 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.066540956 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.104768038 CEST	49749	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.119900942 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.153748035 CEST	443	49744	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.153829098 CEST	443	49744	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.153873920 CEST	49744	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.155287981 CEST	49744	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.155308008 CEST	443	49744	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.155752897 CEST	49751	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.155785084 CEST	443	49751	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.155860901 CEST	49751	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.157207966 CEST	49751	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.157223940 CEST	443	49751	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.174083948 CEST	49752	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.174154043 CEST	443	49752	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.174226999 CEST	49752	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.174423933 CEST	49752	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.174455881 CEST	443	49752	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.202353954 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.202374935 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.202392101 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.202438116 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.202467918 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.202486992 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.202519894 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.215311050 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.215336084 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.215342999 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.215368986 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.215382099 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.215398073 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.215399981 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.215416908 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.215437889 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.215461016 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.235979080 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.236013889 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.236023903 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.236041069 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.236049891 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.236057997 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.236074924 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.236151934 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.236186981 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.236210108 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.243139982 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.243206024 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.243211985 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.243257999 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.243577003 CEST	49743	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.243593931 CEST	443	49743	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.244316101 CEST	49753	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.244342089 CEST	443	49753	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.244394064 CEST	49753	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.246587038 CEST	49753	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.246603012 CEST	443	49753	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.251781940 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.251804113 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.251811981 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.251822948 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.251846075 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.251862049 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.251893044 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.251921892 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.251948118 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.259918928 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.259938002 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.259989977 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.260030031 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.260061979 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.261838913 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.261864901 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.261900902 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.261917114 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.261945963 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.265738964 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.265811920 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.265820980 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.265875101 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.266685009 CEST	49746	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.266715050 CEST	443	49746	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.272347927 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.272365093 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.272419930 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.272700071 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.272711992 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.294682026 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.294744015 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.294751883 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.294797897 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.296664953 CEST	49745	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.296684027 CEST	443	49745	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.297236919 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.297277927 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.297343016 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.299137115 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.299166918 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.302212000 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.302232027 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.302241087 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.302253962 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.302274942 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.302274942 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.302288055 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.302309036 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.302335024 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.302903891 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.302922010 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.302930117 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.302949905 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.302969933 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.303039074 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.303039074 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.303039074 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.303049088 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.303086996 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.314559937 CEST	443	49749	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.314754963 CEST	443	49749	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.314817905 CEST	49749	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.315682888 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.317866087 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.317894936 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.317945957 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.318564892 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.318578959 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.320112944 CEST	49749	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.320183992 CEST	443	49749	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.320528030 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.320607901 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.320672989 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.326860905 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.326891899 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.341887951 CEST	49758	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.341938972 CEST	443	49758	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.341996908 CEST	49758	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.342339039 CEST	49758	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.342363119 CEST	443	49758	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.343976974 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.344007015 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.344039917 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.344044924 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.344074011 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.344089985 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.344111919 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.344146013 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.344602108 CEST	49747	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.344615936 CEST	443	49747	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.345014095 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.345032930 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.345081091 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.346621037 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.346643925 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.346679926 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.346685886 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.346715927 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.346920967 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.346940041 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.346956015 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.346968889 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.346971035 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.346976042 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.347008944 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.347960949 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.347995043 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.348031998 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.348074913 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.348104954 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.348124981 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.348942995 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.348958969 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.349004030 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.349016905 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.349045992 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.349436998 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.349948883 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.349998951 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.350014925 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.350043058 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.350043058 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.350116968 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.357027054 CEST	49742	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.357052088 CEST	443	49742	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.361016989 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.361037970 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.361294031 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.365021944 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.365036964 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.366619110 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.366668940 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.366689920 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.366731882 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.366750002 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.366758108 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.366758108 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.366767883 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.366781950 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.366796970 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.366801977 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.366830111 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.367012024 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.393038988 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.414104939 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.414150953 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.414207935 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.414246082 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.414280891 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.416057110 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.416105986 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.416152000 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.416167974 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.416203976 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.431121111 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.431143045 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.431567907 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.431576014 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.431973934 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.432893038 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.432909012 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.433128119 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.433131933 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.433270931 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.434840918 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.434855938 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.435055017 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.435060024 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.435139894 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.459132910 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.498506069 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.498528004 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.498837948 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.498845100 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.498999119 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.503540039 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.503562927 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.503668070 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.503668070 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.503690958 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.504034042 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.504565001 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.504579067 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.504707098 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.504722118 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.504982948 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.505635977 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.505650997 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.505726099 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.505754948 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.506395102 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.507217884 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.507231951 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.507350922 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.507364988 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.509104013 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.518460035 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.518482924 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.518618107 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.518618107 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.518625021 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.518868923 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.519556046 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.519570112 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.519630909 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.519634962 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.519665003 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.519706964 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.520432949 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.520450115 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.520534039 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.520534039 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.520539999 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.520827055 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.521220922 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.521236897 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.521325111 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.521325111 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.521330118 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.521426916 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.522861958 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.522878885 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.523123026 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.523128033 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.523361921 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.523794889 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.523812056 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.523922920 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.523929119 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.524183035 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.524759054 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.524772882 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.524950027 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.524954081 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.525024891 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.594122887 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.594141006 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.594248056 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.594275951 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.594383955 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.594897985 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.594912052 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.594969988 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.594975948 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.595062971 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.595546961 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.595561981 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.595804930 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.595813036 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.595896959 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.595917940 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.595932961 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.595977068 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.595985889 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.596038103 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.596059084 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.596477032 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.596498013 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.596569061 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.596569061 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.596577883 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.596646070 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.597379923 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.597395897 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.597532988 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.597541094 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.597830057 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.598308086 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.598321915 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.598438978 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.598444939 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.598503113 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.599172115 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.599186897 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.599268913 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.599276066 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.599775076 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.605922937 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.605952024 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.606055021 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.606055021 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.606061935 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.606415033 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.606431007 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.606501102 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.606501102 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.606512070 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.606923103 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.607120991 CEST	49748	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.607135057 CEST	443	49748	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.609028101 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.609097958 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.609249115 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.609412909 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.609436989 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.615545034 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:30.620301962 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:30.661699057 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:30.666496038 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:30.670149088 CEST	49762	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:30.670186996 CEST	443	49762	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:30.670736074 CEST	49762	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:30.671113968 CEST	49762	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:30.671130896 CEST	443	49762	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:30.675136089 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.675184965 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.675240040 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.675260067 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.675273895 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.675748110 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.684871912 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.684915066 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.684957027 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.684982061 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.685020924 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.685028076 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.685153961 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.685159922 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.685184002 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.685218096 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.685297966 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.685606956 CEST	49750	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.685620070 CEST	443	49750	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.687417984 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.687444925 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.687927961 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.688117027 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.688133955 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.780242920 CEST	49724	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:30.782812119 CEST	443	49751	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.783144951 CEST	49751	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.783154964 CEST	443	49751	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.783513069 CEST	443	49751	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.783813000 CEST	49751	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.783879042 CEST	443	49751	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.784133911 CEST	49751	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.784991026 CEST	80	49724	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:30.787905931 CEST	443	49752	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.788120985 CEST	49752	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.788156033 CEST	443	49752	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.788568020 CEST	443	49752	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.789009094 CEST	49752	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.789009094 CEST	49752	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.789077997 CEST	443	49752	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.827414036 CEST	443	49751	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.841984034 CEST	49752	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.852449894 CEST	443	49753	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.852703094 CEST	49753	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.852731943 CEST	443	49753	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.853082895 CEST	443	49753	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.854212046 CEST	49753	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.854279995 CEST	443	49753	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.854430914 CEST	49753	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.874821901 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.875049114 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.875060081 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.875446081 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.875853062 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.875853062 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.875922918 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.899400949 CEST	443	49753	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.909499884 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.909837008 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.909864902 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.910972118 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.911201000 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.911484003 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.911484003 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.911514997 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.911570072 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.920589924 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.942759991 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.943032026 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.943070889 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.943928003 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.944124937 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.944137096 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.944138050 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.944286108 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.944495916 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.944570065 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.944606066 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.945811033 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.945911884 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.946258068 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.946259022 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.946340084 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.952240944 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.952269077 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.954901934 CEST	443	49758	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.955132961 CEST	49758	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.955166101 CEST	443	49758	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.958715916 CEST	443	49758	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.958838940 CEST	49758	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.959084988 CEST	49758	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.959167957 CEST	443	49758	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.959196091 CEST	49758	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.961622953 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.961843014 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.961853027 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.962904930 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.963191986 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.963407040 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.963473082 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.963574886 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.963582039 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.979638100 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.979907990 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.979916096 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.980931044 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.981021881 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.981389999 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.981389999 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.981401920 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.981451035 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.983279943 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:30.988131046 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:30.991405010 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.999289989 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.999295950 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.999295950 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:30.999300003 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.999308109 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.999325991 CEST	49758	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:30.999331951 CEST	443	49758	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:30.999336958 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.004441977 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:31.015499115 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.030724049 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.030730963 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.033346891 CEST	443	49751	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.033427000 CEST	443	49751	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.034724951 CEST	49751	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.034928083 CEST	49751	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.034945011 CEST	443	49751	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.037019014 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.037051916 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.040633917 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.040664911 CEST	49758	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.040664911 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.040951967 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.041348934 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.041373014 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.047015905 CEST	443	49752	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.047102928 CEST	443	49752	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.048350096 CEST	49752	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.048623085 CEST	49765	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.048630953 CEST	49752	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.048641920 CEST	443	49752	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.048669100 CEST	443	49765	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.048829079 CEST	49765	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.051707983 CEST	49765	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.051727057 CEST	443	49765	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.072869062 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.115477085 CEST	443	49753	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.115499020 CEST	443	49753	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.115549088 CEST	443	49753	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.115583897 CEST	49753	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.115781069 CEST	49753	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.117016077 CEST	49753	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.117031097 CEST	443	49753	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.120023966 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.120042086 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.120177031 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.121016026 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.121028900 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.124779940 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.124830961 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.124979019 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.125113010 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.125144958 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.186094999 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.186120987 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.186130047 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.186156988 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.186187029 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.186203003 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.186237097 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.186255932 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.186269045 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.186383963 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.192586899 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.192612886 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.192620039 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.192635059 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.192641020 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.192676067 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.192708015 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.192728996 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.192734957 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.192819118 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.197027922 CEST	49755	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.197046995 CEST	443	49755	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.197613001 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.197637081 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.197644949 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.197674990 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.197695017 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.197706938 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.197706938 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.197727919 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.197740078 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.197756052 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.197788954 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.198746920 CEST	49757	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.198760033 CEST	443	49757	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.201569080 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.201600075 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.201742887 CEST	443	49758	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.201760054 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.201910973 CEST	443	49758	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.201930046 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.201941967 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.202294111 CEST	49758	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.202589035 CEST	49758	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.202593088 CEST	443	49758	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.202792883 CEST	49769	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.202821016 CEST	443	49769	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.203485012 CEST	49769	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.203593016 CEST	49769	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.203605890 CEST	443	49769	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.216542006 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.217374086 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.217384100 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.218746901 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.219038010 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.219532967 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.219628096 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.219702005 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.220078945 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.220150948 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.220179081 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.221199036 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.221421957 CEST	49754	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.221435070 CEST	443	49754	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.221798897 CEST	49770	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.221812963 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.222145081 CEST	49770	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.222621918 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.222645998 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.222654104 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.222686052 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.222697020 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.222708941 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.222712994 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.222724915 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.222738028 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.222769976 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.222769976 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.222779036 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.222789049 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.222841024 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.222841024 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.222918987 CEST	49770	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.222930908 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.229017973 CEST	49759	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.229027987 CEST	443	49759	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.230916977 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.230947971 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.231240034 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.231372118 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.231389999 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.233881950 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.233906984 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.233916998 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.233958960 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.233992100 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.233993053 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.234019995 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.234046936 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.234046936 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.234060049 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.234082937 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.234102964 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.234102964 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.234111071 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.234122038 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.234586000 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.235927105 CEST	49760	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.235939026 CEST	443	49760	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.240624905 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.240659952 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.240777969 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.241445065 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.241461992 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.250330925 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.250364065 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.250375032 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.250402927 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.250407934 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.250416040 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.250418901 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.250433922 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.250437975 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.250459909 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.250467062 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.250484943 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.261535883 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.261581898 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.284063101 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.284128904 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.284153938 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.284230947 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.284430981 CEST	49756	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.284440994 CEST	443	49756	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.285026073 CEST	49773	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.285098076 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.285404921 CEST	49773	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.285813093 CEST	49773	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.285847902 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.301700115 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.301949024 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.301974058 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.305995941 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.306148052 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.306602001 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.306777000 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.306792974 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.308439016 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.347417116 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.354175091 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.354183912 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.400490046 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.459903955 CEST	443	49762	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:31.459976912 CEST	49762	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:31.465749979 CEST	49762	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:31.465769053 CEST	443	49762	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:31.466111898 CEST	443	49762	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:31.467545033 CEST	49762	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:31.467731953 CEST	49762	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:31.467740059 CEST	443	49762	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:31.467966080 CEST	49762	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:31.511217117 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.511234999 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.511241913 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.511265993 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.511277914 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.511291027 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.511324883 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.511352062 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.511468887 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.515402079 CEST	443	49762	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:31.552494049 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.552504063 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.552534103 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.552580118 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.552587032 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.552638054 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.553492069 CEST	49761	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.553504944 CEST	443	49761	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.554053068 CEST	49774	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.554106951 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.554250002 CEST	49774	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.554910898 CEST	49774	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.554944038 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.589354992 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.589391947 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.589404106 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.589413881 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.589442968 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.589449883 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.589469910 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.589483976 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.589492083 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.589524031 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.632759094 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.636322975 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.636332035 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.636353970 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.636359930 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.636430025 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.636440039 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.636487007 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.638156891 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.638164997 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.638185978 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.638210058 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.638216019 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.638222933 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.638233900 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.638262987 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.643949032 CEST	443	49762	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:31.644031048 CEST	443	49762	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:31.644098043 CEST	49762	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:31.664912939 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.684210062 CEST	443	49765	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.684425116 CEST	49762	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:31.684456110 CEST	443	49762	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:31.700802088 CEST	49765	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.700825930 CEST	443	49765	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.701234102 CEST	443	49765	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.703857899 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.703881979 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.704345942 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.704479933 CEST	49765	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.704550028 CEST	443	49765	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.707804918 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.707885027 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.707957983 CEST	49765	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.708010912 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.722446918 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.723341942 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.723359108 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.723438978 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.723448038 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.723486900 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.724276066 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.724291086 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.724340916 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.724349022 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.724389076 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.726145029 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.726170063 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.726207972 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.726213932 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.726242065 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.726244926 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.726263046 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.726286888 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.727010965 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.727022886 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.727365971 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.733947992 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.734016895 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.737168074 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.738045931 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.750757933 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.750788927 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.751872063 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.751940966 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.754080057 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.754152060 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.754235983 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.754254103 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.755399942 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.755402088 CEST	443	49765	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.783405066 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.808031082 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.810632944 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.816281080 CEST	443	49769	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.828370094 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.838715076 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.846054077 CEST	49770	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.846071005 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.846307993 CEST	49769	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.846318007 CEST	443	49769	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.846483946 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.846493959 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.846647978 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.846661091 CEST	443	49769	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.846683025 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.846689939 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.847563028 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.847640038 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.847768068 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.847855091 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.848022938 CEST	49769	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.848086119 CEST	443	49769	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.848846912 CEST	49770	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.848937988 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.849453926 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.849548101 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.849848986 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.849905014 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.850204945 CEST	49769	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.850492001 CEST	49770	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.850553989 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.850560904 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.850632906 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.850639105 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.865191936 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.871735096 CEST	49763	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.871746063 CEST	443	49763	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.873481989 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.873523951 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.873723030 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.875241041 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.875364065 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.875396013 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.875642061 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.875653982 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.876691103 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.876774073 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.878834963 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.878915071 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.879092932 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.879103899 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.890954971 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.890955925 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.891424894 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.895401955 CEST	443	49769	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.921164036 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.921380043 CEST	49773	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.921412945 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.921762943 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.922080994 CEST	49773	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.922148943 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.922261000 CEST	49773	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.931133032 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.936714888 CEST	443	49765	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.936911106 CEST	443	49765	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.936979055 CEST	49765	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.962980032 CEST	49765	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.963006973 CEST	443	49765	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.963439941 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.967406034 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.967428923 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.967437029 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.967466116 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.967478037 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.967490911 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.967494965 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.967521906 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.967556000 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.967582941 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.996036053 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.996068001 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.996074915 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.996088028 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.996093988 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.996099949 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.996125937 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.996151924 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.996192932 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:31.996206045 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.996243000 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:31.996243000 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.001794100 CEST	49767	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.001849890 CEST	443	49767	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.010277987 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.010313034 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.010390043 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.011285067 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.011300087 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.024136066 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.024157047 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.024219036 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.024250984 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.024307966 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.025753975 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.025773048 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.025787115 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.025824070 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.025837898 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.025859118 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.025882959 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.026746035 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.026761055 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.026804924 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.026822090 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.026850939 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.026937962 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.027158976 CEST	49777	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.027201891 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.027281046 CEST	49777	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.027578115 CEST	49777	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.027606010 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.065999031 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.066060066 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.066076040 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.066088915 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.066122055 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.066143036 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.066688061 CEST	49766	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.066705942 CEST	443	49766	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.067214012 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.067238092 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.067248106 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.067265987 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.067271948 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.067276001 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.067302942 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.067315102 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.067323923 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.067351103 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.067363977 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.071741104 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.071770906 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.071839094 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.072777987 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.072798967 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.074275017 CEST	49768	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.074292898 CEST	443	49768	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.087192059 CEST	443	49769	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.087217093 CEST	443	49769	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.087272882 CEST	443	49769	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.087290049 CEST	49769	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.087332964 CEST	49769	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.087826014 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.087857008 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.088090897 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.088500977 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.088516951 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.091547966 CEST	49769	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.091562033 CEST	443	49769	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.092355013 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.092390060 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.092430115 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.092458010 CEST	49770	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.092477083 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.092493057 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.092497110 CEST	49770	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.092542887 CEST	49770	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.095335960 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.095369101 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.095463037 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.097155094 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.097166061 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.100613117 CEST	49770	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.100622892 CEST	443	49770	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.100975990 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.101001024 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.101079941 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.102485895 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.102502108 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.114444971 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.114470959 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.114536047 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.114571095 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.114587069 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.115334988 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.115775108 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.115792036 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.115850925 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.115859985 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.115906000 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.116808891 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.116826057 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.116873026 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.116880894 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.116895914 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.116961002 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.116971970 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.117005110 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.118473053 CEST	49764	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.118493080 CEST	443	49764	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.118997097 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.119029999 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.119038105 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.119091034 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.119108915 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.119119883 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.119131088 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.119173050 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.119173050 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.170376062 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.170398951 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.170500040 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.170854092 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.170866966 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.171619892 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.171665907 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.171716928 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.171928883 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.171941996 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.172416925 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.172449112 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.172457933 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.172494888 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.172511101 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.172516108 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.172527075 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.172553062 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.172566891 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.172575951 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.172593117 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.174876928 CEST	49771	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.174895048 CEST	443	49771	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.181690931 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.181715965 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.181730986 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.181804895 CEST	49773	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.181854010 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.181915998 CEST	49773	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.185513020 CEST	49773	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.185540915 CEST	443	49773	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.187750101 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.187813044 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.187817097 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.187861919 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.189064980 CEST	49772	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.189080000 CEST	443	49772	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.189219952 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.190877914 CEST	49774	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.190896988 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.191338062 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.191672087 CEST	49774	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.191756964 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.192050934 CEST	49774	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.195141077 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.195183992 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.195250988 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.195545912 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.195573092 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.235438108 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.458530903 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.458554983 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.458578110 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.458617926 CEST	49774	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.458652020 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.458677053 CEST	49774	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.458678007 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.458704948 CEST	49774	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.458722115 CEST	49774	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.459678888 CEST	49774	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.459702969 CEST	443	49774	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.460151911 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.460191011 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.460248947 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.460711956 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.460726023 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.508801937 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.509161949 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.509191990 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.509664059 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.510931015 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.511034966 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.511501074 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.559403896 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.638596058 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.638868093 CEST	49777	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.638931036 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.639472008 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.639777899 CEST	49777	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.639782906 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.639889002 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.639934063 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.639957905 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.640079975 CEST	49777	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.640435934 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.640738010 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.640814066 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.641098976 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.676906109 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.677192926 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.677215099 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.677552938 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.678244114 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.678311110 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.678577900 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.687405109 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.687406063 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.700057983 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.700268984 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.700280905 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.701323986 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.701391935 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.701864004 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.701917887 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.702121973 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.702127934 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.704447985 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.704869986 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.704890966 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.705419064 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.706693888 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.706768990 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.707043886 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.713120937 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.713884115 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.713896990 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.715229988 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.715305090 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.715570927 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.715631008 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.715692997 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.715699911 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.719405890 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.751241922 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.751404047 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.766521931 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.777594090 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.777651072 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.777694941 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.777720928 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.777749062 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.777760983 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.777782917 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.777858019 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.777904034 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.777915001 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.777955055 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.778014898 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.778067112 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.779530048 CEST	49775	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.779550076 CEST	443	49775	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.779980898 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.780013084 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.780107975 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.780514956 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.780530930 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.782974958 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.783375025 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.783387899 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.784394026 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.784466028 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.784960032 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.785022974 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.785171032 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.785177946 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.805044889 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.805414915 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.805453062 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.806375027 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.806453943 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.810709953 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.810825109 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.810910940 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.810926914 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.824187040 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.824409962 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.824444056 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.824806929 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.825156927 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.825231075 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.825301886 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.825438023 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.856049061 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.867444992 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.871339083 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.892080069 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.892138958 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.892185926 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.892209053 CEST	49777	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.892221928 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.892244101 CEST	49777	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.892263889 CEST	49777	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.892324924 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.892378092 CEST	49777	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.893690109 CEST	49777	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.893699884 CEST	443	49777	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.940435886 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.940496922 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.940537930 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.940568924 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.940592051 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.940613031 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.940628052 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.974432945 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.974456072 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.974509001 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.974524975 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.974560976 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.974589109 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.974608898 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.991111040 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.991183996 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.991197109 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.991249084 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.991276026 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.991316080 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.991585016 CEST	49776	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.991592884 CEST	443	49776	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.996814966 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.996901989 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:32.997004032 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.997262955 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:32.997283936 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.004209995 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.004235029 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.004242897 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.004256964 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.004277945 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.004287004 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.004295111 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.004323959 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.004343987 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.010555029 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.010586023 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.010603905 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.010649920 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.010719061 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.010751009 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.010785103 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.014879942 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.014895916 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.014936924 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.014942884 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.014974117 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.014996052 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.016721010 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.016736984 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.016793013 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.016798973 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.016855001 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.037610054 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.037679911 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.037681103 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.037720919 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.038103104 CEST	49779	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.038110018 CEST	443	49779	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.057488918 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.057519913 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.057547092 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.057555914 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.057579994 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.057580948 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.057591915 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.057616949 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.057883024 CEST	49780	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.057895899 CEST	443	49780	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.058223963 CEST	49789	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.058248043 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.058300018 CEST	49789	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.060123920 CEST	49789	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.060139894 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.065783978 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.065987110 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.066010952 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.066987991 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.067039013 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.067356110 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.067425966 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.067459106 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.074470997 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.074490070 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.074497938 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.074511051 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.074532986 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.074547052 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.074561119 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.074575901 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.074605942 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.101598978 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.101622105 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.101676941 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.101686954 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.101855040 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.102895975 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.102915049 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.102967024 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.102972031 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.103025913 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.103940964 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.103955984 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.104034901 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.104041100 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.104159117 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.105700016 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.105715990 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.105753899 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.105758905 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.105788946 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.105811119 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.110251904 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.110280991 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.110287905 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.110301971 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.110328913 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.110347033 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.110375881 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.110402107 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.110424995 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.115406990 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.119941950 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.119960070 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.120673895 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.120697975 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.120733976 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.120744944 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.120774984 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.120796919 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.123440027 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.123462915 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.123472929 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.123476982 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.123483896 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.123491049 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.123526096 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.123533964 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.123532057 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.123542070 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.123573065 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.123583078 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.123599052 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.123600006 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.123632908 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.126369953 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.126414061 CEST	443	49782	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.126580000 CEST	49782	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.129364967 CEST	49790	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.129395962 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.129528999 CEST	49790	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.129769087 CEST	49790	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.129785061 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.147845030 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.147871017 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.147917032 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.147936106 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.147963047 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.147983074 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.150091887 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.150110006 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.150156975 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.150170088 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.150196075 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.150213003 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.152558088 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.152595043 CEST	443	49783	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.152735949 CEST	49783	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.155988932 CEST	49791	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.156075001 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.156156063 CEST	49791	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.156403065 CEST	49791	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.156434059 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.165313005 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.165333033 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.165388107 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.165431023 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.165489912 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.165518999 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.165733099 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.167748928 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.167763948 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.167854071 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.167871952 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.168037891 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.187576056 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.187603951 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.187669992 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.187675953 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.187731028 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.188544989 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.188560963 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.188610077 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.188616037 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.189043045 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.190054893 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.190076113 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.190110922 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.190115929 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.190131903 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.190151930 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.191013098 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.191028118 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.191076040 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.191081047 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.191179991 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.192053080 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.192068100 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.192106962 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.192111969 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.192147970 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.192162037 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.193651915 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.193666935 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.193726063 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.193731070 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.193768024 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.194633961 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.194648027 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.194709063 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.194715023 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.194788933 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.249228001 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.249254942 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.249262094 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.249308109 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.249320984 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.249353886 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.249361038 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.249367952 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.249382973 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.249411106 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.250278950 CEST	49781	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.250296116 CEST	443	49781	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.255218029 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.255240917 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.255326033 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.255400896 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.255634069 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.256690025 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.256705046 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.256768942 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.256787062 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.256864071 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.257735014 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.257750034 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.257824898 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.257833958 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.258034945 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.258488894 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.258579969 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.258605957 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.258619070 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.260296106 CEST	49784	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.260310888 CEST	443	49784	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.265327930 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.265346050 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.265399933 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.265408039 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.265459061 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.274437904 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.274455070 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.274513006 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.274518967 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.274607897 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.274822950 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.274838924 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.274893999 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.274899006 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.274964094 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.275194883 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.275212049 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.275254011 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.275259018 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.275285006 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.275302887 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.275571108 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.275593042 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.275635958 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.275640011 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.275685072 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.279212952 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.279228926 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.279294014 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.279304981 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.279356003 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.279630899 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.279644966 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.279685020 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.279696941 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.279727936 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.279751062 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.279983997 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.279999018 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.280042887 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.280055046 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.280082941 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.280114889 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.322649002 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.322670937 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.322678089 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.322721004 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.322736979 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.322757006 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.322786093 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.322818995 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.322835922 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.322837114 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.322837114 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.322837114 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.322861910 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.322880983 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.326498032 CEST	49785	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.326520920 CEST	443	49785	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.352480888 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.352502108 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.352564096 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.352576971 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.352606058 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.352627039 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.361663103 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.361732960 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.361735106 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.361757994 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.361794949 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.361819983 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.362015963 CEST	49778	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.362057924 CEST	443	49778	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.366653919 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.366681099 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.366786957 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.366976976 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.366991043 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.386102915 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.386677980 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.386703968 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.387128115 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.387438059 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.387520075 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.387568951 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.435403109 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.465873957 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.465931892 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.465996027 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.466358900 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.466367006 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.466418028 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.466763020 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.466794014 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.466886044 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.467159033 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.467217922 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.467277050 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.468075037 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.468091011 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.468549013 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.468549967 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.468564034 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.468570948 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.468750000 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.468786955 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.606040001 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.606331110 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.606369972 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.607522964 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.607880116 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.607949018 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.608091116 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.651422024 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.682708979 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.682790041 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.682831049 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.682861090 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.682893038 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.682909012 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.682949066 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.721942902 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.722022057 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.722049952 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.722111940 CEST	443	49786	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.722179890 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.722179890 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.722204924 CEST	49786	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.727905989 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.728776932 CEST	49789	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.728785038 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.729088068 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.729566097 CEST	49789	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.729618073 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.729825974 CEST	49789	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.742861032 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.743065119 CEST	49790	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.743072987 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.743978977 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.744076014 CEST	49790	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.744462013 CEST	49790	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.744512081 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.744716883 CEST	49790	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.744723082 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.761051893 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.761264086 CEST	49791	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.761327982 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.761637926 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.761908054 CEST	49791	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.761972904 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.761997938 CEST	49791	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.775403023 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.790445089 CEST	49790	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.802258968 CEST	49791	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.802321911 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.900799990 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.900845051 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.900870085 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.900918007 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.900933981 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.900969982 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.900984049 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.937397957 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.937489986 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.937503099 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.937531948 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.937545061 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.937575102 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.944962025 CEST	49788	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.944988012 CEST	443	49788	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.980122089 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.980148077 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.980165005 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.980279922 CEST	49789	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.980293989 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.980365038 CEST	49789	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.995706081 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.996843100 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:33.996856928 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:33.997356892 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.000003099 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.000025988 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.000032902 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.000051022 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.000098944 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.000127077 CEST	49790	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.000149965 CEST	49790	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.000663996 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.000834942 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.001276970 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.014848948 CEST	49790	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.014864922 CEST	443	49790	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.015281916 CEST	49797	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.015336990 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.015410900 CEST	49797	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.015811920 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.015913010 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.015934944 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.016004086 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.016024113 CEST	49791	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.016098976 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.016136885 CEST	49791	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.016259909 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.016318083 CEST	49791	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.043406010 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.068902969 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.069000006 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.069005966 CEST	49789	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.069163084 CEST	49789	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.071263075 CEST	49797	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.071293116 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.077155113 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.081201077 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.087754965 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.095056057 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.095087051 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.095323086 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.095330954 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.096009970 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.096035004 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.096261024 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.096328020 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.096471071 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.096527100 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.096704006 CEST	49789	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.096723080 CEST	443	49789	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.097537994 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.097609997 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.098195076 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.098288059 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.098995924 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.143912077 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.144113064 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.144144058 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.176734924 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.176893950 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.178752899 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.178987980 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.179364920 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.179375887 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.179768085 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.179811001 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.179831982 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.179857016 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.179879904 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.180685997 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.180742979 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.227415085 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.230669022 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.235610962 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.295751095 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.295787096 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.295806885 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.295928955 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.295958042 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.296009064 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.345231056 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.345267057 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.345309973 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.345324993 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.345360994 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.345387936 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.347053051 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.347088099 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.347125053 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.347131968 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.347158909 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.347172022 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.359287977 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.359317064 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.359327078 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.359345913 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.359353065 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.359359980 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.359381914 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.359426975 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.359456062 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.359464884 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.359477997 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.360523939 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.360548019 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.360555887 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.360589027 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.360610962 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.360651970 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.360676050 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.360713959 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.360713959 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.360713959 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.360721111 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.360728025 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.360768080 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.360775948 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.360795021 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.360814095 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.360837936 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.361237049 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.361258984 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.361267090 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.361283064 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.361289978 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.361291885 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.361315966 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.361341953 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.361362934 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.361366987 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.361408949 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.410233021 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.416094065 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.416270018 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.419727087 CEST	49791	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.419763088 CEST	443	49791	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.420289993 CEST	49798	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.420335054 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.420433044 CEST	49798	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.434840918 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.434879065 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.434905052 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.434917927 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.434958935 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.435462952 CEST	49798	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.435484886 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.436230898 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.436259985 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.436311007 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.436317921 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.436350107 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.436367989 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.437153101 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.437164068 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.438034058 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.438057899 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.438092947 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.438100100 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.438134909 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.438148022 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.441179991 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.443149090 CEST	49796	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.443186998 CEST	443	49796	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.443224907 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.443237066 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.443295956 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.443305016 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.443346977 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.443619013 CEST	49799	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.443670988 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.443752050 CEST	49799	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.444977999 CEST	49794	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.444994926 CEST	443	49794	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.445506096 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.445533991 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.445632935 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.446839094 CEST	49799	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.446870089 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.447340012 CEST	49793	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.447345018 CEST	443	49793	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.447933912 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.447963953 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.448087931 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.449006081 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.449023008 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.450829983 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.450844049 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.476783991 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.476823092 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.476855993 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.476871967 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.476902008 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.476914883 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.490231037 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.525814056 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.525844097 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.525898933 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.525916100 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.525943995 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.525964975 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.526676893 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.526700974 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.526737928 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.526743889 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.526770115 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.526791096 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.527631044 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.527651072 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.527681112 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.527687073 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.527717113 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.527729988 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.528534889 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.528556108 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.528588057 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.528594971 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.528614044 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.528630018 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.529396057 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.529416084 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.529472113 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.529479027 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.529506922 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.529522896 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.529697895 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.529716969 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.529747963 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.529753923 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.529813051 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.567666054 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.567691088 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.567735910 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.567749977 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.567780972 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.567796946 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.616131067 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.616154909 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.616235018 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.616241932 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.616287947 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.616444111 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.616475105 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.616501093 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.616506100 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.616518974 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.616539001 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.617055893 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.617074966 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.617109060 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.617115021 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.617140055 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.617151976 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.617475033 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.617502928 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.617539883 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.617546082 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.617573023 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.617584944 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.621061087 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.621083975 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.621119976 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.621126890 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.621165037 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.621599913 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.621622086 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.621653080 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.621658087 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.621679068 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.621691942 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.622042894 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.622064114 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.622100115 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.622107029 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.622128963 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.622140884 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.622684002 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.680110931 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.680612087 CEST	49797	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.680634022 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.680965900 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.681312084 CEST	49797	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.681370020 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.681442976 CEST	49797	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.696239948 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.696261883 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.696268082 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.696285009 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.696290970 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.696294069 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.696315050 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.696341991 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.696357012 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.696363926 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.696389914 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.696687937 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.696736097 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.700069904 CEST	49795	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.700089931 CEST	443	49795	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.706665039 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.706697941 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.706753969 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.706769943 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.706801891 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.706809998 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.707145929 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.707173109 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.707217932 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.707223892 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.707250118 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.707262993 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.707299948 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.707348108 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.707351923 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.707362890 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.707401991 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.707425117 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.707551003 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.723407984 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.730227947 CEST	49797	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.733711958 CEST	49792	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.733724117 CEST	443	49792	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.812082052 CEST	49803	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.812109947 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.812248945 CEST	49803	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.812525034 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.812603951 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.812716961 CEST	49803	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.812732935 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.812741041 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.812875032 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.812908888 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.815234900 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.815262079 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.815376997 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.815728903 CEST	49806	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.815747023 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.815823078 CEST	49806	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.816065073 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.816085100 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.816274881 CEST	49806	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.816298008 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.818730116 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.818754911 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.818820953 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.818967104 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.818991899 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.824275970 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.824309111 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.824594021 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.824862003 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.824872971 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.952356100 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.952382088 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.952390909 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.952426910 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.952447891 CEST	49797	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.952456951 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:34.952497005 CEST	49797	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.953973055 CEST	49797	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:34.953984976 CEST	443	49797	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.053102016 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.053375006 CEST	49799	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.053406000 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.053750038 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.054064989 CEST	49799	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.054126024 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.054208040 CEST	49799	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.071886063 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.072094917 CEST	49798	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.072118044 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.072495937 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.072906971 CEST	49798	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.072979927 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.073040962 CEST	49798	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.079049110 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.079257965 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.079267979 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.079606056 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.079941034 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.079993010 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.080015898 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.095412970 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.112744093 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.112967014 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.112992048 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.114046097 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.114108086 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.114649057 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.114715099 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.114803076 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.114813089 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.115400076 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.123402119 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.123698950 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.155822039 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.334204912 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.334237099 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.334297895 CEST	49799	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.334306955 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.334321976 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.334333897 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.334367037 CEST	49799	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.334389925 CEST	49799	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.335813046 CEST	49799	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.335825920 CEST	443	49799	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.385330915 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.385354042 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.385384083 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.385406971 CEST	49798	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.385437965 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.385457039 CEST	49798	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.385457039 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.385481119 CEST	49798	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.385500908 CEST	49798	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.387526035 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.387550116 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.387557030 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.387568951 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.387625933 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.387633085 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.387670040 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.387716055 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.388556957 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.388583899 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.388591051 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.388621092 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.388653040 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.388669968 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.388691902 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.388705969 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.388715982 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.388716936 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.388736010 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.388746023 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.389448881 CEST	49798	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.389467955 CEST	443	49798	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.420974016 CEST	49801	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.420993090 CEST	443	49801	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.423408985 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.423502922 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.423526049 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.423546076 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.426882029 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.427124023 CEST	49806	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.427170992 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.428294897 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.428373098 CEST	49806	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.430114031 CEST	49806	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.430216074 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.430387974 CEST	49806	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.430402994 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.431225061 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.431380987 CEST	49803	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.431396961 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.431864023 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.432476044 CEST	49803	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.432580948 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.432749987 CEST	49803	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.432984114 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.433011055 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.433238029 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.433249950 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.433686972 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.433702946 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.434731007 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.435044050 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.435138941 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.435156107 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.435214996 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.435230017 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.435539961 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.435621977 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.435972929 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.435985088 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.437752962 CEST	49800	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.437768936 CEST	443	49800	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.448533058 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.448560953 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.448728085 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.448909998 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.448920965 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.449783087 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.449790001 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.449852943 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.450045109 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.450050116 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.452243090 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.452433109 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.452445984 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.453440905 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.453519106 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.453890085 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.453949928 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.454049110 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.454056025 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.459954977 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.460165977 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.460180998 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.461179972 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.461247921 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.461572886 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.461630106 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.461700916 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.461708069 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.479401112 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.480468988 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.480468988 CEST	49806	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.480474949 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.497781992 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.499830008 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.499876022 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.499950886 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.500149012 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.500163078 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.506134987 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.680809975 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.680830956 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.680838108 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.680871010 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.680888891 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.680897951 CEST	49806	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.680947065 CEST	49806	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.682545900 CEST	49806	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.682565928 CEST	443	49806	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.683032036 CEST	49812	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.683078051 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.683140993 CEST	49812	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.684139013 CEST	49812	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.684153080 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.685930014 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.685987949 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.686011076 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.686049938 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.686053991 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.686078072 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.686080933 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.686103106 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.686105013 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.686126947 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.686270952 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.686326027 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.687206984 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.687228918 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.687278986 CEST	49803	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.687288046 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.687318087 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.687335968 CEST	49803	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.687374115 CEST	49803	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.687776089 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.687788010 CEST	443	49804	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.687797070 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.687827110 CEST	49804	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.688148022 CEST	49813	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.688186884 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.688260078 CEST	49813	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.689719915 CEST	49813	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.689733028 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.691607952 CEST	49803	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.691622972 CEST	443	49803	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.691868067 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.691884041 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.691951990 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.692397118 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.692409039 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.729444027 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.729485989 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.729496956 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.729513884 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.729542971 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.729546070 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.729561090 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.729593992 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.729620934 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.729626894 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.729640961 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.729684114 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.731976032 CEST	49805	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.731987953 CEST	443	49805	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.749627113 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.749710083 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.749731064 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.749766111 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.749773979 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.749804020 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.749808073 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.749821901 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.749826908 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.749847889 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.749866962 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.766887903 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.766916037 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.766923904 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.766936064 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.766961098 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.766979933 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.766994953 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.767004013 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.767024040 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.767030954 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.767061949 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.778048992 CEST	49808	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.778075933 CEST	443	49808	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.801058054 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.801131010 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.801167011 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.801218987 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:35.801359892 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.801760912 CEST	49807	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:35.801773071 CEST	443	49807	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.063880920 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.064120054 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.064148903 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.064623117 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.064985991 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.065085888 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.065114975 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.085338116 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.085558891 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.085604906 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.085989952 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.086400032 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.086488962 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.086525917 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.107403040 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.120074034 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.125058889 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.125274897 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.125298977 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.126313925 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.126374960 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.126652002 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.126705885 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.126780987 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.126785994 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.127409935 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.136194944 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.167469978 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.292954922 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.293361902 CEST	49812	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.293387890 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.294631958 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.295088053 CEST	49812	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.295336962 CEST	49812	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.295527935 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.297291994 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.297522068 CEST	49813	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.297544956 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.297877073 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.298345089 CEST	49813	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.298422098 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.298465967 CEST	49813	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.304064035 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.304294109 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.304308891 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.305315018 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.305373907 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.305768967 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.305843115 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.305887938 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.314490080 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.314527988 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.314538002 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.314563990 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.314575911 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.314584017 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.314585924 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.314610004 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.314639091 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.314645052 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.314661026 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.314685106 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.316643000 CEST	49809	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.316663027 CEST	443	49809	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.339436054 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.350375891 CEST	49812	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.350667953 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.350677013 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.396145105 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.396167040 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.396173954 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.396188021 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.396222115 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.396243095 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.396255970 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.396286011 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.396306992 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.397247076 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.420528889 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.420553923 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.420561075 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.420572042 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.420593977 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.420614958 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.420633078 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.420664072 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.420685053 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.433720112 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.433753014 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.433794975 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.433805943 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.433835983 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.433845997 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.436412096 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.436424971 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.436461926 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.436470985 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.436497927 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.436517000 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.468295097 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.468317986 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.468385935 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.468406916 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.468436003 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.468460083 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.497935057 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.497958899 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.498013973 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.498023987 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.498064041 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.524823904 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.524851084 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.524890900 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.524914026 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.524940968 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.524960041 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.525598049 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.525613070 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.525664091 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.525671959 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.525698900 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.525712967 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.527327061 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.527343035 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.527417898 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.527426004 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.527529955 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.529027939 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.529045105 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.529078960 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.529086113 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.529114008 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.529129982 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.553945065 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.553970098 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.554018021 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.554020882 CEST	49813	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.554043055 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.554059982 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.554064989 CEST	49813	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.554104090 CEST	49813	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.555124044 CEST	49813	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.555145025 CEST	443	49813	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.558429003 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.558454990 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.558528900 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.558547020 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.558583021 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.559583902 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.559601068 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.559663057 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.559668064 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.559701920 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.560951948 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.560973883 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.560981035 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.560997963 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561007023 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561019897 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561033964 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.561048985 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561072111 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561072111 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.561086893 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.561109066 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.561352015 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561366081 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561414003 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.561418056 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561451912 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.561635971 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561659098 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561666965 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561682940 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561691046 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561702967 CEST	49812	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.561726093 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561739922 CEST	49812	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.561739922 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.561779022 CEST	49812	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.564208984 CEST	49814	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.564224005 CEST	443	49814	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.567409039 CEST	49812	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.567421913 CEST	443	49812	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.588526011 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.588538885 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.588592052 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.588596106 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.588629961 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.617702961 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.617724895 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.617918015 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.617944002 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.617985964 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.618184090 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.618202925 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.618228912 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.618236065 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.618262053 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.618279934 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.618743896 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.618757963 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.618791103 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.618797064 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.618828058 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.618845940 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.619666100 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.619679928 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.619721889 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.619730949 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.619739056 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.619765043 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.619822979 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.619859934 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.648801088 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.648828030 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.648902893 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.648929119 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.648947954 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.649018049 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.649633884 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.649647951 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.649699926 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.649705887 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.649744034 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.650298119 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.650312901 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.650376081 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.650382042 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.650430918 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.651271105 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.651287079 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.651326895 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.651335001 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.651340008 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.651374102 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.651413918 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.651456118 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.787511110 CEST	49810	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.787585974 CEST	443	49810	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:36.882463932 CEST	49811	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:36.882498026 CEST	443	49811	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.114798069 CEST	49815	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.114836931 CEST	443	49815	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.114907026 CEST	49815	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.115854979 CEST	49816	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.115906000 CEST	443	49816	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.115972996 CEST	49816	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.123558998 CEST	49816	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.123569965 CEST	443	49816	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.123930931 CEST	49815	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.123945951 CEST	443	49815	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.732580900 CEST	443	49816	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.732850075 CEST	49816	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.732908010 CEST	443	49816	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.733313084 CEST	443	49816	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.733726025 CEST	49816	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.733813047 CEST	443	49816	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.733942032 CEST	49816	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.736816883 CEST	443	49815	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.737023115 CEST	49815	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.737045050 CEST	443	49815	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.737561941 CEST	443	49815	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.737864971 CEST	49815	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.737971067 CEST	443	49815	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.779424906 CEST	443	49816	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.782176018 CEST	49815	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.993599892 CEST	443	49816	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.993678093 CEST	443	49816	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:37.993746042 CEST	49816	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.995425940 CEST	49816	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:37.995448112 CEST	443	49816	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.018002033 CEST	49817	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.018040895 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.018129110 CEST	49817	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.018414021 CEST	49817	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.018426895 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.626004934 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.630152941 CEST	49817	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.630176067 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.631206036 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.631289005 CEST	49817	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.633310080 CEST	49817	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.633383036 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.633511066 CEST	49817	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.633518934 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.685929060 CEST	49817	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.879267931 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.879292965 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.879302025 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.879363060 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.879358053 CEST	49817	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.879404068 CEST	49817	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.880678892 CEST	49817	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.880702972 CEST	443	49817	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.899655104 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.899714947 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.899786949 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.900018930 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.900036097 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.900619030 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.900723934 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.900871992 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.901084900 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.901113987 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.901592970 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.901683092 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:38.901765108 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.901993036 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:38.902021885 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.505975008 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.507910013 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.507945061 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.508323908 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.510333061 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.510409117 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.510760069 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.513329983 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.513717890 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.513744116 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.514090061 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.514837980 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.514904022 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.515342951 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.524712086 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.524986982 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.525010109 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.525966883 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.526036978 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.528768063 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.528847933 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.529263020 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.529277086 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.555408001 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.555413961 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.575371981 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.807832003 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.807862043 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.807884932 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.807919979 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.807950974 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.807971001 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.807993889 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.809462070 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.809485912 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.809506893 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.809537888 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.809566975 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.809583902 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.809607029 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.827188969 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.827220917 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.827244043 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.827260017 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.827271938 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.827295065 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.827318907 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.827332973 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.827347040 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.827363968 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.843461037 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.843480110 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.843559980 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.843571901 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.843614101 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.845185995 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.845226049 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.845251083 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.845258951 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.845274925 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.845294952 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.845320940 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.845489979 CEST	49819	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.845505953 CEST	443	49819	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.851999044 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.852015018 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.852066040 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.852091074 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.852139950 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.865973949 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.866040945 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.866054058 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.866070986 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.866113901 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.866476059 CEST	49820	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.866491079 CEST	443	49820	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.886930943 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.886951923 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.886991024 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.887015104 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.887036085 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.887052059 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.889753103 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.889781952 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.889939070 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.890274048 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.890285969 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.939424038 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.939440012 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.939512968 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.939544916 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.939583063 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.940912962 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.940926075 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.941004992 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.941023111 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.941056967 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.942616940 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.942631960 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.942701101 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.942711115 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.942744970 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.975395918 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.975411892 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.975440025 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.975472927 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.975502014 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.975517988 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.975519896 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:39.975554943 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.976422071 CEST	49818	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:39.976438046 CEST	443	49818	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.131860971 CEST	49822	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.131905079 CEST	443	49822	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.131987095 CEST	49822	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.132671118 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.132726908 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.132791996 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.133394003 CEST	49822	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.133410931 CEST	443	49822	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.136647940 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.136678934 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.516155005 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.516510010 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.516550064 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.517612934 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.517705917 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.518079042 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.518140078 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.518250942 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.518259048 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.565665007 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.741177082 CEST	443	49822	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.741476059 CEST	49822	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.741491079 CEST	443	49822	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.741830111 CEST	443	49822	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.742157936 CEST	49822	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.742223024 CEST	443	49822	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.742300034 CEST	49822	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.760114908 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.760358095 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.760387897 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.760756016 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.761132002 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.761207104 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.761266947 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.787400961 CEST	443	49822	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.807408094 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.822313070 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.822336912 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.822344065 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.822356939 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.822381973 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.822402000 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.822412014 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.822459936 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.822459936 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.858756065 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.858820915 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.858831882 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.858864069 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.858923912 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.859424114 CEST	49821	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.859440088 CEST	443	49821	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.995440006 CEST	443	49822	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.995537043 CEST	443	49822	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:40.995604992 CEST	49822	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.996645927 CEST	49822	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:40.996663094 CEST	443	49822	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.019253969 CEST	49824	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.019308090 CEST	443	49824	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.019507885 CEST	49824	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.020024061 CEST	49824	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.020040989 CEST	443	49824	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.066318035 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.066346884 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.066400051 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.066426992 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.066452026 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.066484928 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.066498995 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.112063885 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.112092972 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.112145901 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.112174034 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.112200022 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.115138054 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.115166903 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.115231037 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.115251064 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.115267992 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.165829897 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.202534914 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.202560902 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.202605009 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.202631950 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.202657938 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.202675104 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.203417063 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.203438044 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.203495026 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.203505993 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.203531981 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.203547955 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.205202103 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.205225945 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.205265045 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.205279112 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.205315113 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.205327034 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.206123114 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.206139088 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.206212997 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.206223011 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.206264019 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.293411970 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.293445110 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.293493986 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.293521881 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.293553114 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.293562889 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.293849945 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.293869972 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.293936968 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.293948889 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.294100046 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.294790030 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.294806957 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.294868946 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.294881105 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.294919014 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.295763969 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.295779943 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.295818090 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.295829058 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.295855045 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.295871973 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.296556950 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.296603918 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.296629906 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.296639919 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.296658039 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.296674967 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.296710968 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.297544956 CEST	49823	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.297566891 CEST	443	49823	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.338820934 CEST	49825	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.338870049 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.339030981 CEST	49825	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.339790106 CEST	49825	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.339804888 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.345266104 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.345298052 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.345398903 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.345793962 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.345808029 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.659394979 CEST	443	49824	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.664777994 CEST	49824	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.664803028 CEST	443	49824	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.665199041 CEST	443	49824	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.665894032 CEST	49824	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.665957928 CEST	443	49824	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.666405916 CEST	49824	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.707402945 CEST	443	49824	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.913125038 CEST	443	49824	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.913208008 CEST	443	49824	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.913296938 CEST	49824	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.959536076 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.959877968 CEST	49825	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.959886074 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.960243940 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.961051941 CEST	49825	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.961159945 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.961374998 CEST	49825	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.963840961 CEST	49824	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:41.963876963 CEST	443	49824	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:41.977907896 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.006228924 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.006242037 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.006831884 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.007287025 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.007359982 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.007395983 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.007766008 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.055408001 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.245832920 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.245856047 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.245872974 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.245946884 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.245969057 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.246011972 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.262466908 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.262495995 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.262517929 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.262584925 CEST	49825	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.262603998 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.262614965 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.262644053 CEST	49825	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.295281887 CEST	49825	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.295310974 CEST	443	49825	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.337585926 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.337613106 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.337649107 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.337662935 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.337702036 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.339418888 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.339438915 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.339493036 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.339503050 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.339543104 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.429192066 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.429219007 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.429284096 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.429296017 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.429337978 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.430064917 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.430088043 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.430126905 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.430130959 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.430166006 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.430183887 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.431037903 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.431056023 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.431093931 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.431098938 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.431130886 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.431149006 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.432709932 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.432733059 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.432775021 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.432780027 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.432820082 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.432837963 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.521652937 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.521683931 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.521718979 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.521733999 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.521789074 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.522145033 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.522161961 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.522217035 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.522222996 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.522277117 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.522877932 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.522901058 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.522933960 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.522941113 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.522967100 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.522984982 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.523637056 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.523655891 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.523689985 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.523695946 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.523726940 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.524363041 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.524405956 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.524424076 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.524430037 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.524458885 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.524461031 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.524494886 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.524658918 CEST	49826	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.524676085 CEST	443	49826	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.835088015 CEST	49828	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.835151911 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:42.835227966 CEST	49828	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.835738897 CEST	49828	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:42.835755110 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:43.444200039 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:43.454494953 CEST	49828	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:43.454533100 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:43.454889059 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:43.455491066 CEST	49828	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:43.455554962 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:43.456156969 CEST	49828	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:43.503398895 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:43.695123911 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:43.695153952 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:43.695168018 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:43.695211887 CEST	49828	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:43.695250988 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:43.695281029 CEST	49828	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:43.695286036 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:43.695307016 CEST	49828	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:43.695323944 CEST	49828	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:43.696499109 CEST	49828	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:43.696520090 CEST	443	49828	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:48.010199070 CEST	49829	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:42:48.010252953 CEST	443	49829	142.250.184.196	192.168.2.6
Sep 29, 2024 04:42:48.010318041 CEST	49829	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:42:48.010605097 CEST	49829	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:42:48.010617018 CEST	443	49829	142.250.184.196	192.168.2.6
Sep 29, 2024 04:42:48.658519030 CEST	443	49829	142.250.184.196	192.168.2.6
Sep 29, 2024 04:42:48.658967018 CEST	49829	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:42:48.659007072 CEST	443	49829	142.250.184.196	192.168.2.6
Sep 29, 2024 04:42:48.659316063 CEST	443	49829	142.250.184.196	192.168.2.6
Sep 29, 2024 04:42:48.660022020 CEST	49829	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:42:48.660103083 CEST	443	49829	142.250.184.196	192.168.2.6
Sep 29, 2024 04:42:48.713015079 CEST	49829	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:42:49.731600046 CEST	80	49716	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:49.731658936 CEST	49716	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:50.571943998 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:50.572020054 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:50.599548101 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:50.599766016 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:50.767750978 CEST	80	49724	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:50.767817974 CEST	49724	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:50.901493073 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:50.901545048 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:50.902414083 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:50.902592897 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:51.332113981 CEST	49724	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:51.332180977 CEST	49722	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:51.332196951 CEST	49716	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:51.332223892 CEST	49718	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:51.332268000 CEST	49719	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:51.332273960 CEST	49717	80	192.168.2.6	35.215.82.134
Sep 29, 2024 04:42:51.336978912 CEST	80	49724	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:51.336994886 CEST	80	49716	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:51.337021112 CEST	80	49722	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:51.337030888 CEST	80	49718	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:51.337039948 CEST	80	49719	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:51.337049007 CEST	80	49717	35.215.82.134	192.168.2.6
Sep 29, 2024 04:42:51.369618893 CEST	49830	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:51.369683981 CEST	443	49830	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:51.369851112 CEST	49830	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:51.389343023 CEST	49830	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:51.389379978 CEST	443	49830	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:51.411701918 CEST	49815	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:51.455410004 CEST	443	49815	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:51.591461897 CEST	443	49815	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:51.591685057 CEST	443	49815	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:51.591761112 CEST	49815	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:51.593884945 CEST	49815	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:51.593902111 CEST	443	49815	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:52.002985954 CEST	443	49830	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:52.019361019 CEST	49830	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:52.019416094 CEST	443	49830	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:52.019866943 CEST	443	49830	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:52.020538092 CEST	49830	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:52.020615101 CEST	443	49830	149.154.167.99	192.168.2.6
Sep 29, 2024 04:42:52.073159933 CEST	49830	443	192.168.2.6	149.154.167.99
Sep 29, 2024 04:42:57.782618999 CEST	49860	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:57.782707930 CEST	443	49860	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:57.782783031 CEST	49860	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:57.783484936 CEST	49860	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:57.783515930 CEST	443	49860	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:58.580655098 CEST	443	49829	142.250.184.196	192.168.2.6
Sep 29, 2024 04:42:58.580713034 CEST	443	49829	142.250.184.196	192.168.2.6
Sep 29, 2024 04:42:58.580853939 CEST	49829	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:42:58.687074900 CEST	49829	443	192.168.2.6	142.250.184.196
Sep 29, 2024 04:42:58.687098026 CEST	443	49829	142.250.184.196	192.168.2.6
Sep 29, 2024 04:42:58.756222963 CEST	443	49860	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:58.756294966 CEST	49860	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:58.761533976 CEST	49860	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:58.761543036 CEST	443	49860	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:58.761816025 CEST	443	49860	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:58.763991117 CEST	49860	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:58.764085054 CEST	49860	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:58.764091015 CEST	443	49860	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:58.764303923 CEST	49860	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:58.811393023 CEST	443	49860	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:58.933460951 CEST	443	49860	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:58.933600903 CEST	443	49860	40.113.103.199	192.168.2.6
Sep 29, 2024 04:42:58.933653116 CEST	49860	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:58.933938026 CEST	49860	443	192.168.2.6	40.113.103.199
Sep 29, 2024 04:42:58.933954954 CEST	443	49860	40.113.103.199	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 04:41:42.821036100 CEST	53	64005	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:42.830981016 CEST	53	57059	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:43.863224983 CEST	53	61102	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:43.908068895 CEST	50820	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:41:43.908555984 CEST	54809	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:41:43.931601048 CEST	53	50820	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:43.935254097 CEST	53	54809	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:44.943532944 CEST	64331	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:41:44.943671942 CEST	51118	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:41:44.974368095 CEST	53	51118	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:44.992945910 CEST	53	64331	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:46.312294006 CEST	51806	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:41:46.314100981 CEST	57206	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:41:46.319880009 CEST	53	51806	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:46.320693016 CEST	53	57206	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:47.951265097 CEST	58628	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:41:47.951611042 CEST	51136	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:41:47.957750082 CEST	53	58628	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:47.957957029 CEST	53	51136	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:48.736198902 CEST	54329	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:41:48.736690998 CEST	50401	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:41:48.742785931 CEST	53	54329	1.1.1.1	192.168.2.6
Sep 29, 2024 04:41:48.743550062 CEST	53	50401	1.1.1.1	192.168.2.6
Sep 29, 2024 04:42:02.896378994 CEST	53	64252	1.1.1.1	192.168.2.6
Sep 29, 2024 04:42:21.783205986 CEST	53	59324	1.1.1.1	192.168.2.6
Sep 29, 2024 04:42:27.098670959 CEST	60657	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:27.099323034 CEST	55812	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:27.105302095 CEST	53	60657	1.1.1.1	192.168.2.6
Sep 29, 2024 04:42:27.106359959 CEST	53	55812	1.1.1.1	192.168.2.6
Sep 29, 2024 04:42:37.996294022 CEST	65529	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:37.996535063 CEST	51703	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:38.003293037 CEST	53	65529	1.1.1.1	192.168.2.6
Sep 29, 2024 04:42:38.017532110 CEST	53	51703	1.1.1.1	192.168.2.6
Sep 29, 2024 04:42:39.873446941 CEST	57400	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:39.873667955 CEST	62622	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:39.880413055 CEST	53	57400	1.1.1.1	192.168.2.6
Sep 29, 2024 04:42:39.894637108 CEST	53	62622	1.1.1.1	192.168.2.6
Sep 29, 2024 04:42:42.730175018 CEST	53	63192	1.1.1.1	192.168.2.6
Sep 29, 2024 04:42:44.246562004 CEST	53	62021	1.1.1.1	192.168.2.6
Sep 29, 2024 04:42:55.426400900 CEST	52567	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:55.426625967 CEST	61770	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:55.427068949 CEST	55088	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:55.427529097 CEST	58953	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:55.443681002 CEST	63536	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:55.443999052 CEST	51817	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:55.446219921 CEST	59133	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:55.446355104 CEST	58947	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:55.449384928 CEST	54339	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:55.449810028 CEST	59918	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:58.331074953 CEST	54913	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:42:58.331233025 CEST	57900	53	192.168.2.6	1.1.1.1
Sep 29, 2024 04:43:10.866926908 CEST	53	55683	1.1.1.1	192.168.2.6

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 29, 2024 04:42:39.894697905 CEST	192.168.2.6	1.1.1.1	c23b	(Port unreachable)	Destination Unreachable
Sep 29, 2024 04:42:55.462934017 CEST	192.168.2.6	1.1.1.1	c2ae	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 04:41:43.908068895 CEST	192.168.2.6	1.1.1.1	0x5cd1	Standard query (0)	distrosourcess5.sg-host.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:41:43.908555984 CEST	192.168.2.6	1.1.1.1	0x1fc2	Standard query (0)	distrosourcess5.sg-host.com	65	IN (0x0001)	false
Sep 29, 2024 04:41:44.943532944 CEST	192.168.2.6	1.1.1.1	0xd621	Standard query (0)	distrosourcess5.sg-host.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:41:44.943671942 CEST	192.168.2.6	1.1.1.1	0x1e21	Standard query (0)	distrosourcess5.sg-host.com	65	IN (0x0001)	false
Sep 29, 2024 04:41:46.312294006 CEST	192.168.2.6	1.1.1.1	0xade6	Standard query (0)	telegram.org	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:41:46.314100981 CEST	192.168.2.6	1.1.1.1	0x67fb	Standard query (0)	telegram.org	65	IN (0x0001)	false
Sep 29, 2024 04:41:47.951265097 CEST	192.168.2.6	1.1.1.1	0x2a76	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:41:47.951611042 CEST	192.168.2.6	1.1.1.1	0xc76a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 04:41:48.736198902 CEST	192.168.2.6	1.1.1.1	0x4e41	Standard query (0)	telegram.org	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:41:48.736690998 CEST	192.168.2.6	1.1.1.1	0xa7ae	Standard query (0)	telegram.org	65	IN (0x0001)	false
Sep 29, 2024 04:42:27.098670959 CEST	192.168.2.6	1.1.1.1	0x3a89	Standard query (0)	telegram.org	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:27.099323034 CEST	192.168.2.6	1.1.1.1	0x2133	Standard query (0)	telegram.org	65	IN (0x0001)	false
Sep 29, 2024 04:42:37.996294022 CEST	192.168.2.6	1.1.1.1	0x567e	Standard query (0)	desktop.telegram.org	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:37.996535063 CEST	192.168.2.6	1.1.1.1	0x844c	Standard query (0)	desktop.telegram.org	65	IN (0x0001)	false
Sep 29, 2024 04:42:39.873446941 CEST	192.168.2.6	1.1.1.1	0x4ef6	Standard query (0)	desktop.telegram.org	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:39.873667955 CEST	192.168.2.6	1.1.1.1	0x4738	Standard query (0)	desktop.telegram.org	65	IN (0x0001)	false
Sep 29, 2024 04:42:55.426400900 CEST	192.168.2.6	1.1.1.1	0xf455	Standard query (0)	is1-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:55.426625967 CEST	192.168.2.6	1.1.1.1	0xad10	Standard query (0)	is1-ssl.mzstatic.com	65	IN (0x0001)	false
Sep 29, 2024 04:42:55.427068949 CEST	192.168.2.6	1.1.1.1	0x5348	Standard query (0)	is2-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:55.427529097 CEST	192.168.2.6	1.1.1.1	0xfc49	Standard query (0)	is2-ssl.mzstatic.com	65	IN (0x0001)	false
Sep 29, 2024 04:42:55.443681002 CEST	192.168.2.6	1.1.1.1	0x668d	Standard query (0)	is5-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:55.443999052 CEST	192.168.2.6	1.1.1.1	0x56a1	Standard query (0)	is5-ssl.mzstatic.com	65	IN (0x0001)	false
Sep 29, 2024 04:42:55.446219921 CEST	192.168.2.6	1.1.1.1	0x2432	Standard query (0)	is4-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:55.446355104 CEST	192.168.2.6	1.1.1.1	0x1127	Standard query (0)	is4-ssl.mzstatic.com	65	IN (0x0001)	false
Sep 29, 2024 04:42:55.449384928 CEST	192.168.2.6	1.1.1.1	0xd8d1	Standard query (0)	is3-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:55.449810028 CEST	192.168.2.6	1.1.1.1	0x9fc1	Standard query (0)	is3-ssl.mzstatic.com	65	IN (0x0001)	false
Sep 29, 2024 04:42:58.331074953 CEST	192.168.2.6	1.1.1.1	0x33d0	Standard query (0)	is1-ssl.mzstatic.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:58.331233025 CEST	192.168.2.6	1.1.1.1	0x8a52	Standard query (0)	is1-ssl.mzstatic.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 04:41:43.931601048 CEST	1.1.1.1	192.168.2.6	0x5cd1	No error (0)	distrosourcess5.sg-host.com		35.215.82.134	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:41:44.992945910 CEST	1.1.1.1	192.168.2.6	0xd621	No error (0)	distrosourcess5.sg-host.com		35.215.82.134	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:41:46.319880009 CEST	1.1.1.1	192.168.2.6	0xade6	No error (0)	telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:41:47.957750082 CEST	1.1.1.1	192.168.2.6	0x2a76	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:41:47.957957029 CEST	1.1.1.1	192.168.2.6	0xc76a	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 04:41:48.742785931 CEST	1.1.1.1	192.168.2.6	0x4e41	No error (0)	telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:41:55.247612953 CEST	1.1.1.1	192.168.2.6	0xa77d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:41:55.247612953 CEST	1.1.1.1	192.168.2.6	0xa77d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:27.105302095 CEST	1.1.1.1	192.168.2.6	0x3a89	No error (0)	telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:36.907951117 CEST	1.1.1.1	192.168.2.6	0x248b	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:36.907951117 CEST	1.1.1.1	192.168.2.6	0x248b	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:38.003293037 CEST	1.1.1.1	192.168.2.6	0x567e	No error (0)	desktop.telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:39.880413055 CEST	1.1.1.1	192.168.2.6	0x4ef6	No error (0)	desktop.telegram.org		149.154.167.99	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:55.432950974 CEST	1.1.1.1	192.168.2.6	0xad10	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:55.433180094 CEST	1.1.1.1	192.168.2.6	0xf455	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:55.434022903 CEST	1.1.1.1	192.168.2.6	0x5348	No error (0)	is2-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:55.434483051 CEST	1.1.1.1	192.168.2.6	0xfc49	No error (0)	is2-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:55.451076031 CEST	1.1.1.1	192.168.2.6	0x56a1	No error (0)	is5-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:55.451550961 CEST	1.1.1.1	192.168.2.6	0x668d	No error (0)	is5-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:55.453218937 CEST	1.1.1.1	192.168.2.6	0x2432	No error (0)	is4-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:55.456839085 CEST	1.1.1.1	192.168.2.6	0x9fc1	No error (0)	is3-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:55.457631111 CEST	1.1.1.1	192.168.2.6	0xd8d1	No error (0)	is3-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:55.462783098 CEST	1.1.1.1	192.168.2.6	0x1127	No error (0)	is4-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:58.337907076 CEST	1.1.1.1	192.168.2.6	0x33d0	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:58.338004112 CEST	1.1.1.1	192.168.2.6	0x8a52	No error (0)	is1-ssl.mzstatic.com	is-ssl.mzstatic.com.itunes-apple.com.akadns.net		CNAME (Canonical name)	IN (0x0001)	false

HTTP Request Dependency Graph

distrosourcess5.sg-host.com

telegram.org

fs.microsoft.com

https:

desktop.telegram.org

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49716	35.215.82.134	80	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 04:41:43.940859079 CEST	442	OUT	GET / HTTP/1.1 Host: distrosourcess5.sg-host.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 04:41:44.533557892 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 02:41:44 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding Last-Modified: Sat, 09 Mar 2024 21:27:31 GMT ETag: W/"2bd8-61340f9e1edf7" X-Httpd-Modphp: 1 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache: HIT Content-Encoding: gzip Data Raw: 31 31 38 38 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 5a 6b 73 db 36 16 fd 9e 99 fc 07 44 99 8d e5 d9 90 22 41 10 24 5d 2b dd c4 76 d2 cd cb 6e ea 34 71 a7 33 1a 4a a4 24 da 14 a9 90 94 fc c8 e6 bf ef b9 00 29 53 7e c5 6d 77 76 f6 c3 76 a6 0e 84 c7 7d 9e 7b 01 5c 70 fb d1 ee fe ce e1 d1 c1 1e 9b 56 b3 f4 d9 c3 07 db f4 2f 1b a5 61 59 f6 3b d5 34 9e c5 83 28 2c 4e 3a cf b6 a7 71 18 d1 84 59 5c 85 98 5d cd 8d f8 cb 22 59 f6 3b a3 3c ab e2 ac 32 aa f3 79 dc 61 f5 2f 2c 8e cf aa 1e 51 fb 81 8d a6 61 51 c6 55 ff e3 e1 4b c3 ef 80 08 c3 7f 9a 50 33 d4 59 54 e3 d6 58 95 54 69 fc ec 30 4e e3 49 11 ce b6 d8 eb 3c c9 d8 ab 22 5f cc d9 ce 34 ac b6 7b 7a 42 9b 52 16 ce e2 7e 67 99 c4 a7 f3 bc a8 5a 82 9c 26 51 35 ed 47 f1 32 19 c5 86 fa f1 94 25 59 52 25 61 6a 94 a3 30 8d fb b6 69 ad a4 2a 47 45 32 af 9e 55 c5 f9 d7 64 dc 3d 4d b2 28 3f 35 e7 61 01 0d 1f f5 b3 45 9a 3e 79 a2 3b 1f f5 d7 06 37 bf ae fd 34 e7 79 59 bd 8b cb 32 9c c4 dd d7 bf ec bf 37 cb aa 48 b2 49 32 3e ef 7e 8d 97 a0 76 08 73 6d 6d 9c c6 c3 41 38 [TRUNCATED] Data Ascii: 1188Zks6D"A$]+vn4q3J$)S~mwvv}{\pV/aY;4(,N:qY\]"Y;<2ya/,QaQUKP3YTXTi0NI<"_4{zBR~gZ&Q5G2%YR%aj0i*GE2Ud=M(?5aE>y;74yY27HI2>~vsmmA8y MjnX[_a5w{On~\|;{gN:m> o[Um33/&?\|6o~fk\|9/\|2Nq>rvK"l_I%L{qD2-t(M1"Ioy`/^cFa/NB\|xw~O\|\|wA1zg^V<0X\?{=Zs_93x";N2/txqwA\|~/;/\|logX3~}s~i<t[^Is:4:K0lENWyY{'ov&o/ww4zE^mqv>OI(bZ~j%QYkc$E(=Gf{\=i="
Sep 29, 2024 04:41:44.533571005 CEST	1236	IN	Data Raw: 23 01 ae 23 ab 3a 4d aa 2a 2e fe 32 42 1b 3a ff 87 e9 ff 38 4c 1b 47 11 56 5b 88 fb 47 1b a7 d7 61 12 a6 5b 49 5e 6e 51 4e 2d ab bc 88 07 49 d4 5a 2c 7d 29 44 e0 5b de 4d 20 6f 2d bd 25 34 18 65 f4 38 9b c4 c5 1d eb 17 45 da e2 58 4d 90 98 8f b1 Data Ascii: ##:M.2B:8LGV[Ga[I^nQN-IZ,})D[M o-%4e8EXM}dKhoD;dhO[0hwNpt\7iM(,(YX_]}{duHd>6lu=~`^-u2kk"<<[1sW
Sep 29, 2024 04:41:44.533588886 CEST	1236	IN	Data Raw: c2 a4 be 84 02 dc 74 1d ee 59 3e 0d 3a 50 cc b1 3d 78 c9 82 3b b8 f2 83 e3 70 db 0d 88 a7 e7 59 0e 54 27 72 1e 4c e3 80 17 b7 61 bd 80 c8 82 17 0c ef 05 d2 81 c6 44 94 ac e3 07 30 8f b0 04 a6 40 59 47 4a 2b 80 df 3d 68 0a 8d c0 c5 81 5c d0 84 fa Data Ascii: tY>:P=x;pYT'rLaD0@YGJ+=h\@.1x#@CN>a`\D H7v@ aa:7ypNAt"*K<HIFhkz.d@@7"<s/28)8 #\|@
Sep 29, 2024 04:41:44.533600092 CEST	1150	IN	Data Raw: 3a 0f 0a 58 88 72 20 c0 5c 77 12 9e 41 02 22 52 63 95 e5 5c 15 bf dc 06 67 6a 22 ca 04 47 2e c6 01 9c 90 26 91 f3 5c 00 90 52 05 96 20 6c 14 59 3a f0 92 db 81 4c 72 33 da 2a d6 69 0e b2 0e c2 9a 74 80 c4 d0 c1 51 76 d0 f0 a7 bb 00 65 61 32 05 ed Data Ascii: :Xr \wA"Rc\gj"G.&\R lY:Lr3itQvea27\|m,t-R1#(N`.C7\SqyKYlru3k]p\|u(uU{\kspCn%J`Xw9J}'rpKd4nbI\\5V_74YQ[
Sep 29, 2024 04:41:44.573796988 CEST	393	OUT	GET /Telegram%20Join%20Group%20Chat_files/font-roboto.css HTTP/1.1 Host: distrosourcess5.sg-host.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://distrosourcess5.sg-host.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 04:41:44.732079029 CEST	1089	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 02:41:44 GMT Content-Type: text/css Last-Modified: Sat, 09 Mar 2024 21:27:24 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"65ecd43c-1816" Expires: Mon, 29 Sep 2025 02:41:44 GMT Cache-Control: max-age=31536000 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1 Content-Encoding: gzip Data Raw: 32 39 61 0d 0a 1f 8b 08 00 00 00 00 00 04 03 e5 96 4d 73 9b 40 0c 86 ef fe 15 dc 9c a6 25 48 32 1f c6 b9 14 30 f4 e0 c9 34 cd d4 93 33 71 b0 c3 14 43 8a 71 12 b7 d3 ff 5e ed 2e 76 3b bd 99 d9 66 48 72 61 e7 dd 5d 16 f4 48 2b c9 3a 35 16 bb 3a 2f 8a 7c 61 66 4f 8d 71 6a 0d 3e 2e ab b2 31 97 e9 22 33 7e 0e 0c a3 55 eb bc d8 4d 8c e1 55 75 53 35 d5 f0 7c bf b0 69 76 45 36 31 ca aa 5e a7 c5 61 f6 31 cb 57 77 cd c4 b0 01 0e 73 b7 f9 e6 be 48 f9 8c cd 63 7a 2f 66 37 f5 62 62 6c eb e2 64 78 76 66 89 af 6c 2c 75 ba 35 4b 3e af a3 f2 7b bc f5 29 a9 f1 62 eb d1 d3 6c f6 75 8e b3 87 f2 c7 d9 63 b5 5c d2 f0 1d ff 17 7f b2 39 19 b6 5a 9c b8 2d f3 45 75 9b 99 75 5a ae f8 a7 e6 ef c1 76 c1 04 87 92 0f 2c 30 1a 83 c9 8f b1 10 04 a1 2d c7 69 0c 26 4d 13 b9 23 70 6d 30 03 d7 97 22 89 29 36 f9 91 9c 0f 7e 0d ac 3f 98 fa 89 c8 59 77 45 34 02 14 20 80 7d 65 82 ed 48 db c1 f6 85 f0 db 95 50 88 50 0a 42 74 5b 20 ab 3a cb be f5 38 68 ba 12 c1 84 49 60 92 ec 1d 2f ed ec a7 d7 ed eb ce 5e f7 d8 a7 a3 83 8d 0f 79 d6 94 e9 3a [TRUNCATED] Data Ascii: 29aMs@%H2043qCq^.v;fHra]H+:5:/\|afOqj>.1"3~UMUuS5\|ivE61^a1WwsHcz/f7bbldxvfl,u5K>{)bluc\9Z-EuuZv,0-i&M#pm0")6~?YwE4 }eHPPBt[ :8hI`/^y:d4l(01V#F _B$,B0 PM^\|&()#XXLdQ&"08e8cHq.GiCI={GV@QhtT4R20x8Q8U(SED7LMP:b=i9mO5At._EetK/SvJs4:{F}Nw]%7fOOCp=/^uC+j4RuC7}No!5f0
Sep 29, 2024 04:42:29.745454073 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49717	35.215.82.134	80	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 04:41:44.578200102 CEST	395	OUT	GET /Telegram%20Join%20Group%20Chat_files/bootstrap.min.css HTTP/1.1 Host: distrosourcess5.sg-host.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://distrosourcess5.sg-host.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 04:41:44.737267971 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 02:41:44 GMT Content-Type: text/css Last-Modified: Sat, 09 Mar 2024 21:27:25 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"65ecd43d-a61b" Expires: Mon, 29 Sep 2025 02:41:44 GMT Cache-Control: max-age=31536000 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1 Content-Encoding: gzip Data Raw: 32 37 39 36 0d 0a 1f 8b 08 00 00 00 00 00 04 03 bd 7d 69 b3 23 b9 71 e0 77 fd 8a 72 77 28 34 3d 43 b2 79 bc 93 0c f5 ae 77 d6 e1 55 84 e4 2f 96 1d 8e e8 e9 0f 45 56 f1 b1 dc 24 8b 26 8b 7d cc 5b ee 6f df 3c 81 04 0a 45 f2 3d 8d 1c 4f ea 21 71 24 f2 42 22 91 48 80 ef 7f fc 87 df 65 3f 66 ff ab ae 9b 43 b3 cf 77 d9 97 c9 60 3c 18 66 3f ac 9a 66 37 7d ff fe a9 6c e6 5a 37 58 d4 9b 77 d8 fa e7 7a f7 7d 5f 3d ad 9a 6c 3c 1c 8d fa f0 cf 4d f6 d7 af 55 d3 94 fb 5e f6 a7 ed 62 80 8d fe 5c 2d ca ed a1 2c b2 e3 b6 28 f7 d9 5f fe f4 57 06 7a 40 a8 55 b3 3a ce 11 de fb e6 eb fc f0 de 0d f1 7e be ae e7 ef 37 f9 01 40 bd ff f3 9f 7e fe a7 7f f9 d7 7f c2 21 df ff ee 77 ef 7f 24 4c ff b9 dc 96 fb bc 41 b8 87 6a fb 94 35 ab d2 60 ff f3 f1 d0 d4 9b ea 57 18 b0 8b 82 f7 0b 6d f3 fe 7f 54 c5 1f 1f c7 c5 38 5f 8c e6 93 d1 e3 fd c3 dd cd 78 7e 37 bf 13 22 b7 cb ea 29 3b e4 5f 60 ac a6 ce 16 35 7e 1f fc e7 a1 de 66 f9 b6 c8 90 41 4c cb a1 19 18 82 52 00 91 02 c0 3f db d6 fb 4d be 06 f4 06 8b c3 01 59 3d 1c 8c b2 ff 4b bc [TRUNCATED] Data Ascii: 2796}i#qwrw(4=CywU/EV$&}[o<E=O!q$B"He?fCw`<f?f7}lZ7Xwz}_=l<MU^b\-,(_Wz@U:~7@~!w$LAj5`WmT8_x~7");_`5~fALR?MY=Kv75-]56e\|{}7~S~krjy]\|j;}S-e/?TE+&wMUoq_ UP{}}6ym/C .nTO"~~CXv]m>u})\|=mPb-n f_9z[V%'qUEkAS<m1=}mN4ZGyYt,Nzbuq[.<4ji5Bt\nf}'"vO4K5a0p4;32hm/=@q'RS p 1U'd4{F&.)8oo~C
Sep 29, 2024 04:41:44.737279892 CEST	1236	IN	Data Raw: 8d 86 29 3e 45 19 83 48 b0 68 d6 51 ac d4 9c 76 fb d2 8f 94 1f 9b fa b4 a8 41 a1 3f cf 0b d0 b8 b2 77 c8 37 c2 0d 99 48 9b 7a 5b 83 c8 17 65 2f 73 1f 67 34 d3 88 89 80 d6 69 7e 04 1a b7 bd 6a bb 3b 36 bd 7a d7 b0 ce 83 2a 82 b2 83 56 7d 6b 40 61 Data Ascii: )>EHhQvA?w7Hz[e/sg4i~j;6z*V}k@agD]lT$KuRG`4I`.\|\|o>1vRl2g5nWr@f+`^S8O=3+\|NEF:M$e_m`3~r-]^({J+\\|e
Sep 29, 2024 04:41:44.737309933 CEST	1236	IN	Data Raw: 80 f1 b1 f3 70 d2 9a 87 37 a7 ff b9 29 8b 2a cf 7e d8 80 39 67 4b 76 7f f7 b0 fb f6 ee 99 07 30 d0 a0 f4 c4 5b e4 1e 33 d2 e0 fe 38 fa fd 69 51 41 64 80 db d3 ae 5c b6 1c 60 6a 3e f7 06 f8 af d9 7a 3b af 63 b1 7c 28 27 ce 42 0e 60 d7 7e 1a 90 7f Data Ascii: p7)~9gKv0[38iQAd\`j>z;c\|('B`~.8rf"f%RjK4_!u~`/`c~vBBx@iPmj"?A`Gt?#inRhw7t
Sep 29, 2024 04:41:44.737323046 CEST	672	IN	Data Raw: f1 70 9f 0f 90 f5 90 17 1f 9a 3d 7c e8 69 11 1e e8 47 45 68 81 a2 22 d7 b1 68 77 f4 45 ae a3 57 7f d4 9f b4 a7 15 1f 18 83 bb a6 4c 4d 05 23 89 6a 4b 41 1c 98 66 7a 15 84 50 8f 13 db b8 c7 42 b4 64 27 fc a4 fc 98 2e ab bd 7a 0b 86 37 a0 22 74 6a Data Ascii: p=\|iGEh"hwEWLM#jKAfzPBd'.z7"tj{aGv0kwydU'o)J'dY>L>XJ>.[@[*gl79Nu 80a#Msh8\|"Qs0iT)M{,T'xICu3QvAnmV
Sep 29, 2024 04:41:44.737333059 CEST	1236	IN	Data Raw: ae 68 a6 6c 12 8d f0 3e 57 7a bd 11 88 1d 3a 13 8c 97 56 9b 65 be 1c 2f f0 00 0c b7 9f d0 44 b7 92 c5 80 0f 3b 52 5a 13 d5 38 19 b7 fa 38 68 ab 4e 68 ad 1a 07 ad 55 a3 f2 e5 e1 53 fa d2 ae 51 e9 b6 6b 62 68 5e 23 d4 9c 68 1f 5f 13 43 4b aa 0a 9f Data Ascii: hl>Wz:Ve/D;RZ88hNhUSQkbh^#h_CKuC)[G&vs,e~Q;Ii{&,i=!3M)52>"yPAgr9`Ek0)Bf9UUgvMH6
Sep 29, 2024 04:41:44.737386942 CEST	1236	IN	Data Raw: 1b 06 4b 9a c0 11 63 0d d6 f3 4c 2d 64 11 2b 78 8e 5f a8 b7 2b e9 a7 b0 d5 26 d9 e2 92 c2 60 4c c2 35 17 90 9d 85 fa 68 81 16 83 89 8b 83 c2 c4 84 f1 0c b5 dc ba ed ed 25 ee 56 7c 60 bd 99 0a d9 78 b2 b1 71 b8 e8 56 86 a0 a3 99 d3 dc 2f 5a 8b dc Data Ascii: KcL-d+x_+&`L5h%V\|`xqV/ZBPE-@t1X48Rl[K+nb-^RGH,,pJob bbW)Mx`UL(Z)s[#P,~Y_Y A#WXBwX1hbY:M9)
Sep 29, 2024 04:41:44.737397909 CEST	1236	IN	Data Raw: 0f 79 38 f3 5d cc 12 8c 23 bc 15 0e 43 f1 7b 19 60 e3 57 a9 d3 10 1b da 6a 27 59 60 36 90 bd de ab 4f 1b 05 04 12 16 9a 6a 9b a8 61 85 26 25 89 5e 71 54 4f 7b 7c 87 7f 29 bd e1 6b 67 11 d5 7a ff 29 ef 75 55 a4 b1 71 fd 64 8e 49 50 05 95 33 89 9d Data Ascii: y8]#C{`Wj'Y`6Oja&%^qTO{\|)kgz)uUqdIP3<~4)F@g>qU2^4>;I[tvmRZ cU1'v+>/d%<3R~@lY!b$775 :B\|Ss7&U-'
Sep 29, 2024 04:41:44.737410069 CEST	1236	IN	Data Raw: b6 82 7e cb 08 2e 68 6e 8b 03 bc f0 56 fa 4d fb 6f 89 ce 78 08 c3 c2 14 c2 f0 04 fc 74 1e bc 29 a4 12 e0 68 0f a4 a1 6b 4d 7f b9 3e 56 45 77 bd ab 51 85 ea ee ab 2d d4 89 e1 59 19 1c ec 91 4c ba ce f5 78 06 38 cc dc c8 ff fd 38 eb 91 00 27 e0 e3 Data Ascii: ~.hnVMoxt)hkM>VEwQ-YLx88'Q(gMs1<[1hlb0xN)*-;jPhItKNw3He2h\9Qv8+.anUOJxRh0!ObB6NLXS?,"
Sep 29, 2024 04:41:44.737456083 CEST	1234	IN	Data Raw: aa 89 ed 18 6d 6d dd b5 e8 a2 2b 74 11 aa 36 ea e2 84 ab 0f c8 bc 34 e4 47 e5 cf 27 81 9b 7a 48 05 34 38 30 81 6e a8 0e eb aa f5 06 38 21 95 7c 2b a6 13 78 40 07 be b2 ac 1e 41 b5 85 bd 31 fc 3c 6f db 2d 1a 8f e1 f7 b4 38 94 a1 46 e9 61 08 7f 71 Data Ascii: mm+t64G'zH480n8!\|+x@A1<o-8FaqOH6XnLQIw1,: @-)Ap8A,Q[^DC_2G'4TA=.?tjA1j?h4N$6Cr:
Sep 29, 2024 04:41:44.749900103 CEST	488	OUT	GET /Telegram%20Join%20Group%20Chat_files/vKNb2iqPCJyxS0EJ_KL7rLK_M-JUdK6HRCFPjKRF8RNEh3lDB4CUe0jYawVy.jpg HTTP/1.1 Host: distrosourcess5.sg-host.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://distrosourcess5.sg-host.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 04:41:44.909076929 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 02:41:44 GMT Content-Type: image/jpeg Content-Length: 14190 Last-Modified: Sat, 09 Mar 2024 21:27:27 GMT Connection: keep-alive ETag: "65ecd43f-376e" Expires: Mon, 29 Sep 2025 02:41:44 GMT Cache-Control: max-age=31536000 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 74 70 74 00 00 01 c8 00 00 00 14 63 70 72 74 00 00 01 dc 00 00 00 3c 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 58 00 00 00 1c 00 73 00 52 00 47 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: JFIFHH(ICC_PROFILE0mntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(wtptcprt<mlucenUSXsRGBXYZ o8XYZ bXYZ $paraffY[XYZ -mlucenUS Google Inc. 2016CC@@"J!1AQ"a2q3#BRb$rS&46Dcd
Sep 29, 2024 04:41:44.909120083 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 02 03 04 07 01 05 06 08 09 ff c4 00 3c 11 00 02 01 03 02 03 03 0a 03 05 09 00 00 00 00 00 00 01 02 03 04 11 05 31 06 12 21 07 41 51 13 22 61 71 81 91 a1 b1 c1 d1 14 42 72 32 33 82 e1 f0 15 16 23 24 43 44 52 92 a2 ff da 00 0c 03 Data Ascii: <1!AQ"aqBr23#$CDR?RHTRTJ )RHTXuJXP^`Lh%]EnbL<:s\~qT"]#yrwJ7\gUy=/Us BdTkH\{)`e]J@RJ
Sep 29, 2024 04:41:44.909131050 CEST	1236	IN	Data Raw: ed 07 a2 98 70 3d 57 86 9f 87 77 e2 09 5b 30 3f 04 e0 17 1c b1 b2 fc 72 19 6b 93 f3 55 f5 5d 6f 20 72 b2 c6 e9 e7 7a 9b 0a 75 4f c5 a3 1d af 29 3e db 36 bc ee 60 83 aa 03 97 9f 7f d5 4f 9c 81 b4 95 c7 b2 a8 70 df 54 7e 77 74 32 80 70 3c 48 d4 82 Data Ascii: p=Ww[0?rkU]o rzuO)>6`OpT~wt2p<HDTI\|dx5E@:tjH85;C5@Tvr k&I>LJYZL )H]/ 0{ @dAqBUD!AuBOe:w
Sep 29, 2024 04:41:45.740885973 CEST	467	OUT	GET /fonts/Roboto/KFOmCnqEu92Fr1Mu4mxKKTU1Kg.woff2 HTTP/1.1 Host: distrosourcess5.sg-host.com Connection: keep-alive Origin: http://distrosourcess5.sg-host.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/font-roboto.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 04:41:45.903727055 CEST	1236	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 29 Sep 2024 02:41:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Httpd-Modphp: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: EXPIRED X-Proxy-Cache-Info: 0 NC:000000 UP: Content-Encoding: gzip Data Raw: 34 62 39 65 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 7d 5b 73 1c b7 9a e4 fb f9 15 bd 9c d8 38 7b e9 6e d5 ad eb a2 23 79 d7 e3 99 89 f3 40 cf ec 2d bc b1 7e 71 b4 c8 96 c8 3d 2d 52 26 29 c9 3e 13 f3 df 37 3f 7c 99 a8 2a 14 d9 0d 3b 66 f7 69 ed 10 9b ec 2c 7c 89 02 32 01 14 50 85 7a f3 6f fe ee 9f be fb 1f ff eb bf fc fd ea e6 e9 e3 f1 9b 3f bc b1 8f d5 71 7f f7 e1 ed c5 e1 ee c2 be 38 ec af bf f9 c3 0a ff bd f9 78 78 da af ae 6e f6 0f 8f 87 a7 b7 17 9f 9f de 6f fa 8b d5 ab 29 78 b7 ff 78 78 7b f1 e5 f6 f0 f5 d3 fd c3 d3 c5 ea ea fe ee e9 70 87 83 bf de 5e 3f dd bc bd 3e 7c b9 bd 3a 6c c2 1f eb d5 ed dd ed d3 ed fe b8 79 bc da 1f 0f 6f cb 6d 01 ba 91 e7 e6 e9 e9 d3 e6 f0 f3 e7 db 2f 6f 2f ae f6 57 37 87 8d 05 7b b8 3f 4e a2 de dd 6f 1e 9f ee 1f 0e eb 8f fb 5f 36 fb 0f 87 b7 c5 b3 f9 79 b8 7f 77 ff f4 38 4b 77 7b 77 7d f8 65 3c f8 e9 f6 e9 78 f8 a6 29 9a d5 66 f5 8f f7 4f ab f7 f7 9f ef ae df bc f2 af 3d 53 c7 db bb bf ac 6e 1e 0e ef df 5e 58 d6 1e 5f bf 7a f5 1e 19 7a dc 7e b8 bf ff 70 3c ec 3f dd 3e [TRUNCATED] Data Ascii: 4b9e}[s8{n#y@-~q=-R&)>7?\|;fi,\|2Pzo?q8xxno)xxx{p^?>\|:lyom/o/W7{?No_6yw8Kw{w}e<x)fO=Sn^X_zz~p<?>n?z\|OoOwXwEo^_\O7x?9[exa7zxP5a%w$n^:kB^8<YF8;YM(0tr#9<?}>#H$<vDKT=fyW`\|}Z]=xzDbP?)C Fy X*y+Pj6XoI\}@+^=Bm!> >l&\|5@1c\|n?\|\|BhG?[{-4yYZKJZOldrlOTXUu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49718	35.215.82.134	80	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 04:41:44.584837914 CEST	390	OUT	GET /Telegram%20Join%20Group%20Chat_files/telegram.css HTTP/1.1 Host: distrosourcess5.sg-host.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://distrosourcess5.sg-host.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 04:41:45.188431025 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 02:41:45 GMT Content-Type: text/css Last-Modified: Sat, 09 Mar 2024 21:27:27 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"65ecd43f-1c0b3" Expires: Mon, 29 Sep 2025 02:41:45 GMT Cache-Control: max-age=31536000 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1 Content-Encoding: gzip Data Raw: 37 31 37 34 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed bd f9 77 23 c7 91 3f f8 7b ff 15 98 ee a7 d7 2d 99 05 a2 50 38 e9 91 66 24 d9 f2 1c 92 e7 f0 78 be 63 ef ee e3 03 81 22 09 37 08 70 00 b0 d9 ad 7e da bf 7d 3f 71 e5 55 59 00 48 49 73 78 2d aa 49 a0 2a 8f c8 c8 c8 b8 32 32 f2 6a b3 f8 d0 f9 f8 a2 d3 b9 de ac f7 17 9d b2 7f ff fe bc 9c dc bf ef bc fc f6 61 be 5c cc 3a bf d9 ce d6 8b fa e5 99 7b f0 bb d9 7a d7 f9 fd 7a 39 df f0 e3 2f b7 cb d9 ea ac f3 77 f5 ea 5d bd 5f ce 67 67 9d 7f af b7 8b d9 1a 1f 76 28 59 ec ea ed f2 fa 97 e8 e0 fc b3 e2 b1 be 7a bb dc 17 d4 55 b1 bb db 6c f6 b7 cb f5 cd 45 67 b6 de a3 8d e5 6c 57 2f 7e f9 d9 f9 8b 1f 5e dc ee ef 56 dd f5 6c bf 7c 57 5f 52 e1 5d e7 2a 04 b3 b8 9e dd 2d 57 1f 2e 3a c5 ec fe 7e 55 17 bb 0f bb 7d 7d 77 d6 f9 6a b5 5c bf fd 6e 36 ff 1d 7f ff 06 15 01 f5 ef ea 9b 4d dd f9 fd df 63 04 ff ba b9 da ec 37 11 ac 0a bd 87 14 35 be a4 46 3b 5f 6f 56 9b 6d e7 d7 77 9b 3f 2d 69 f0 d6 4c e6 c9 ef 3e dc 5d 6d 56 2f 7f 69 80 af 66 eb 9b cb ed 7e c5 68 5d 2c b7 f5 [TRUNCATED] Data Ascii: 7174w#?{-P8f$xc"7p~}?qUYHIsx-I22ja\:{zz9/w]_ggv(YzUlEglW/~^Vl\|W_R]-W.:~U}}wj\n6Mc75F;_oVmw?-iL>]mV/if~h],\|/:xDe^Xd\oyvUb_s`tY/zR\|^WL<zw55^&P\|5\Q\mgWmnfoYNJXmn6jT]t8.{oxAi`.vb],f7/>OjIOf]Vyw{yC!G/z\.q%Ocl7hm}?~gh[H;et[/y?W@>?&j`ZU-fx9VtPv%`?Vc2meG(;tw;.L~/=P_zFix>>rUsaB,?\^P4>PS-FT'8z(
Sep 29, 2024 04:41:45.188450098 CEST	1236	IN	Data Raw: fb 25 fe f2 70 57 49 97 0c 22 3d 1b a0 29 54 1d 61 98 15 b5 35 24 10 b9 30 ff 9a 13 74 f2 4f 60 c3 d3 6a 42 40 5a 87 86 42 2a 8e ca e3 31 3e 4c 07 f8 05 ec 15 0c 37 f0 27 c0 f5 08 ba 42 a0 a2 01 0d a9 6c 35 11 d8 a8 7e 1f dd 8d 69 a4 f4 6f 44 4f Data Ascii: %pWI"=)Ta5$0tO`jB@ZB1>L7'Bl5~ioDO\|W%`nu&C$P&_Q8:2<Q<#/zU]Bh=@=B[v41O#]TW4.JrG/)0[`E~@!BO8`
Sep 29, 2024 04:41:45.188467026 CEST	448	IN	Data Raw: 75 c1 d8 a2 1d c9 0a 89 d4 3d b4 46 d5 e1 bd 20 df d8 aa 80 9b eb 06 b4 75 b7 5c 2c 44 67 00 f4 40 4a 71 0f 2b 62 27 e2 1a 3c 82 71 d4 8e 91 8b 0e 39 e8 ca b1 b4 9d ac 7b c1 09 63 da b1 1c d6 67 65 0e 5d 1f 81 26 ec 71 63 13 f7 ea ba 77 3d ba 9e Data Ascii: u=F u\,Dg@Jq+b'<q9{cge]&qcw=1x*YO\`~R" xrFiYO'$7\|L9i;DN.tZ@=K5@w#.%P!A U;x]VXbbNe[<JM$>VEjz6
Sep 29, 2024 04:41:45.188479900 CEST	1236	IN	Data Raw: 00 e1 50 b1 18 a9 c9 20 db 5b 3f 88 9b f6 6a 01 50 0d 1c 19 2a 54 dd 14 5c 78 9f 87 13 f3 3f 64 67 76 23 fb 29 d6 88 94 26 43 86 d6 51 0e 8f a8 e0 cc df b8 96 56 3a 4e 82 b0 9e f3 64 d6 4a 37 2d 35 42 b4 a8 45 1e 30 7f de c7 88 d4 12 21 72 d2 48 Data Ascii: P [?jP*T\x?dgv#)&CQV:NdJ7-5BE0!rHFY_JibPWB6Y?@,Rb["?RlxJZn\|W['+Obk2-~\|=K\T5m}a!@G^qPSkrlz"iX
Sep 29, 2024 04:41:45.188524008 CEST	1236	IN	Data Raw: 31 ac a9 72 3a 41 64 68 09 9b 0a 44 26 3b 51 cc 88 f6 90 e8 9b 64 69 a5 ca 58 d8 11 c5 7e ea ce 0d 3d b6 f5 69 9b 37 ed 5c c7 cc 13 63 3b 8a cb 58 8d 14 3b cb 69 91 2c f8 b5 60 83 f1 d0 ae 08 0a 64 c9 c5 a8 5d 98 6d 30 c6 48 dd 4f 7a f3 0b 81 04 Data Ascii: 1r:AdhD&;QdiX~=i7\c;X;i,`d]m0HOz<y@)#?.T"Cq3T@H 1KPNz@;WF;]vU k\"}<o6{mn"%rc\|IvoNJ$dxl
Sep 29, 2024 04:41:45.188536882 CEST	1236	IN	Data Raw: bd d0 18 fa 8f 84 13 e7 c3 71 bd 4c a7 93 7a cc 1b e5 9e bf b8 ea 77 9b ab a5 9a 15 b9 61 45 6b a4 ec b5 cb 22 27 88 5c cb c0 b8 6c ef e6 db 6d 25 07 b3 f9 41 b0 62 f3 eb 84 0a 9f ea 8f d4 04 b5 a7 a2 4f c3 90 4f 34 03 b2 96 45 0b 0e 09 aa 49 cf Data Ascii: qLzwaEk"'\lm%AbOO4EIb^{LkTU;C e'^W9uC+=Z#= z!YB3v5^Y&_t'&{9Wij6i+UrwoAseshsw+i{
Sep 29, 2024 04:41:45.188597918 CEST	1236	IN	Data Raw: 23 70 c6 e2 86 03 19 c2 21 84 73 9c 5a 60 c4 e4 d5 42 b2 02 1c ff 88 f7 48 94 65 aa 2e 6e d2 ca d8 b6 3e b6 68 0e 1c 9f d1 34 77 e6 eb d0 e0 c4 4c 16 b3 30 67 9d b9 23 62 58 9d 99 a8 de cf 13 32 d7 1d 69 a8 aa 60 cb e3 3f 96 fc 2e 6f 19 6f 2c 73 Data Ascii: #p!sZ`BHe.n>h4wL0g#bX2i`?.oo,sWFS0k0M;VKBcoW5<DD\|H4=0Z 3Cr\|WG\N_hmkj4xw7F[Bd$&>.)\|yE1rwyRcZ9lR%bH
Sep 29, 2024 04:41:45.188611031 CEST	1236	IN	Data Raw: c6 c1 1d 80 60 10 10 fb d8 7a 35 30 1a 99 1a 0d e9 85 10 94 9a 0c 69 f9 82 5a aa dc b1 c8 06 6b 4b 73 ec 47 bc 71 6a 9b 75 8e cc d0 8d 58 29 b1 0f 9a 02 f3 41 7e 72 02 08 b8 d2 4e 81 d5 87 bb 75 a0 2f 38 ee 5f dc ed 70 89 47 fd 1e 61 09 84 6f ff Data Ascii: `z50iZkKsGqjuX)A~rNu/8_pGao\oF07{a,gZWm5GP]s,Ch,AU)HSktq85<H3gl#sRir(8")TifvQ'CG/yU
Sep 29, 2024 04:41:45.188622952 CEST	1000	IN	Data Raw: 6a ca bb 4d 78 02 b1 32 11 3e 54 98 7f 95 7b 0a 9a 30 19 72 e4 36 11 94 8c 8c cd ef 36 6b 44 03 9f 7d 57 23 73 cb d9 d7 9b 35 ee 00 98 ed ce 5e 7e 8d 9c 7d 4b 28 69 bf ad 1f 5f 9e dd 6d 10 3f 40 b9 b1 b3 ac 4c 88 d8 23 cf 61 b0 29 09 20 74 1c 8e Data Ascii: jMx2>T{0r66kD}W#s5^~}K(i_m?@L#a) tSK-xM-=[FrY<'y)h25*]ms]<Fr>t9o pN4G.Nz9P9~_X V>scz] mit&;2\|\_/Q
Sep 29, 2024 04:41:45.189074039 CEST	1236	IN	Data Raw: 09 74 65 f2 7f f1 34 0c fe f1 c3 55 ff 7c f4 e1 0f fd 78 1a 7e ff af 37 ff fc fd e8 1f 77 e3 c7 7f f9 2f 9d 86 eb 45 fb 34 d4 03 9d 06 b8 80 67 f0 ab 20 1c e2 a6 60 63 64 86 0b 23 99 c4 d9 0c d3 e8 88 f0 78 65 52 fc 0b 44 a5 ce 16 5f ec b7 f8 40 Data Ascii: te4U\|x~7w/E4g `cd#xeRD_@kAxM^9kibH?,F=S\,7_p)72`.4Mc~f9\|Alp5._86dp2w>]wj881k
Sep 29, 2024 04:41:45.193511963 CEST	1236	IN	Data Raw: 5f fc f5 fd 0c 66 de e2 f3 d7 df 4d a0 05 0c be 2e fb dd 3e 7d 80 72 d0 1d 75 aa ee 44 3e e8 1f 7e 2b bf e8 b5 3e 75 a5 b8 9e 35 c0 ed 71 0b f4 9e 5e f1 ef 3f 7e 37 ed 8e aa 4e 59 76 cb 6f 47 dd 6a cc 9f be 1e 75 c7 78 56 61 4b ae 33 a6 ce 07 5c Data Ascii: _fM.>}ruD>~+>u5q^?~7NYvoGjuxVaK3\\#0Q&[<u-@9wpiIuFeg[awO,>6Klq4ZP~O@pPQjkp+-u77wS*
Sep 29, 2024 04:41:45.370677948 CEST	502	OUT	GET /img/tgme/pattern.svg?1 HTTP/1.1 Host: distrosourcess5.sg-host.com Connection: keep-alive Origin: http://distrosourcess5.sg-host.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/telegram.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 04:41:45.599164009 CEST	1236	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 29 Sep 2024 02:41:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Httpd-Modphp: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: EXPIRED X-Proxy-Cache-Info: 0 NC:000000 UP: Content-Encoding: gzip Data Raw: 34 62 39 65 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 7d 5b 73 1c b7 9a e4 fb f9 15 bd 9c d8 38 7b e9 6e d5 ad eb a2 23 79 d7 e3 99 89 f3 40 cf ec 2d bc b1 7e 71 b4 c8 96 c8 3d 2d 52 26 29 c9 3e 13 f3 df 37 3f 7c 99 a8 2a 14 d9 0d 3b 66 f7 69 ed 10 9b ec 2c 7c 89 02 32 01 14 50 85 7a f3 6f fe ee 9f be fb 1f ff eb bf fc fd ea e6 e9 e3 f1 9b 3f bc b1 8f d5 71 7f f7 e1 ed c5 e1 ee c2 be 38 ec af bf f9 c3 0a ff bd f9 78 78 da af ae 6e f6 0f 8f 87 a7 b7 17 9f 9f de 6f fa 8b d5 ab 29 78 b7 ff 78 78 7b f1 e5 f6 f0 f5 d3 fd c3 d3 c5 ea ea fe ee e9 70 87 83 bf de 5e 3f dd bc bd 3e 7c b9 bd 3a 6c c2 1f eb d5 ed dd ed d3 ed fe b8 79 bc da 1f 0f 6f cb 6d 01 ba 91 e7 e6 e9 e9 d3 e6 f0 f3 e7 db 2f 6f 2f ae f6 57 37 87 8d 05 7b b8 3f 4e a2 de dd 6f 1e 9f ee 1f 0e eb 8f fb 5f 36 fb 0f 87 b7 c5 b3 f9 79 b8 7f 77 ff f4 38 4b 77 7b 77 7d f8 65 3c f8 e9 f6 e9 78 f8 a6 29 9a d5 66 f5 8f f7 4f ab f7 f7 9f ef ae df bc f2 af 3d 53 c7 db bb bf ac 6e 1e 0e ef df 5e 58 d6 1e 5f bf 7a f5 1e 19 7a dc 7e b8 bf ff 70 3c ec 3f dd 3e [TRUNCATED] Data Ascii: 4b9e}[s8{n#y@-~q=-R&)>7?\|;fi,\|2Pzo?q8xxno)xxx{p^?>\|:lyom/o/W7{?No_6yw8Kw{w}e<x)fO=Sn^X_zz~p<?>n?z\|OoOwXwEo^_\O7x?9[exa7zxP5a%w$n^:kB^8<YF8;YM(0tr#9<?}>#H$<vDKT=fyW`\|}Z]=xzDbP?)C Fy X*y+Pj6XoI\}@+^=Bm!> >l&\|5@1c\|n?\|\|BhG?[{-4yYZKJZOldrlOTXUu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49719	35.215.82.134	80	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 04:41:44.600178003 CEST	381	OUT	GET /Telegram%20Join%20Group%20Chat_files/tgwallpaper.min.js HTTP/1.1 Host: distrosourcess5.sg-host.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://distrosourcess5.sg-host.com/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 04:41:45.179461002 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 02:41:45 GMT Content-Type: application/javascript Last-Modified: Sat, 09 Mar 2024 21:27:27 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"65ecd43f-ba3" Expires: Mon, 29 Sep 2025 02:41:45 GMT Cache-Control: max-age=31536000 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1 Content-Encoding: gzip Data Raw: 35 66 31 0d 0a 1f 8b 08 00 00 00 00 00 04 03 7d 56 0b 73 da 38 10 fe 2b 2d 77 ed c8 b6 30 b6 c1 24 e0 28 9d 34 4d da b4 69 fa 98 9b b9 b9 e1 b8 8e 6c 0b cc c4 18 30 e6 d5 84 ff 7e df ca e6 91 f6 7a 33 a0 d5 ee 7e 2b c9 d2 be 96 32 7f f6 c7 9f 32 4d a7 72 aa 72 31 58 64 51 31 9a 64 cc 78 d8 4d 9f ad 99 04 37 c9 d9 12 d8 50 f4 fa 76 34 c9 22 59 b0 b7 46 e0 9c c9 c0 08 ed e9 62 9e b0 d0 9e 27 a3 41 c1 0c 83 cb 7a 3d 90 40 06 3b b3 48 38 41 74 16 da a9 ca 86 45 12 44 96 f0 0c 59 99 f5 a2 be 11 e4 aa 58 e4 d9 33 b9 dd 6f fb 9a 49 1e 1a 0f e1 0b d1 71 02 da 3a 12 38 c9 8b a9 11 8c 06 0c 0a 12 c5 10 59 96 16 96 0b f4 1e d6 dd a8 e7 f4 ed b5 c5 62 4d eb 25 6b 34 3a 8e 19 f2 4d a9 dd 54 da 4d a9 dd 94 da 2d d7 d6 6e 65 4d 14 7a 22 47 d6 60 b5 35 d1 52 fb d4 da ab ac 89 42 4f e4 c8 1a ac b6 26 5a 6a 9f 5a 37 2b 6b a2 d0 13 39 b2 06 ab ad 89 96 da 9d 75 7f 5b 5d 60 74 b8 c0 77 bb 77 4b 2d 21 83 8e 73 26 d2 c0 48 eb b8 4e 3e b4 2c 3e 3c 17 d3 97 2f d9 b0 2e 70 a5 f4 4e 81 73 4e 00 4b 03 ea 75 ee 9c 0f 49 6f 41 [TRUNCATED] Data Ascii: 5f1}Vs8+-w0$(4Mil0~z3~+22Mrr1XdQ1dxM7Pv4"YFb'Az=@;H8AtEDYX3oIq:8YbM%k4:MTM-neMz"G`5RBO&ZjZ7+k9u[]`twwK-!s&HN>,></.pNsNKuIoAXvBy\|d-FcIsbF<w?lNpB`kJ?zQ=H'84(cp)^!OaI`up/Xk9geVs,JoBK3G>%Q\BPd}<gpr932vnZ$f%h,1MY^9@emt2h29r9mJ@+>_b^_b\N76v~{5o)An`\ByjFbMW,U\|aEqxg:oq.WZ4tpZNnSMVh1VYa'r~~wt'$}>BiwI
Sep 29, 2024 04:41:45.179478884 CEST	721	IN	Data Raw: ff ab 70 af 9a 0d d7 e7 17 48 bd fc 4a 64 8b 34 e5 9f 4a b2 20 51 26 7a 0e b7 3d 1f fe c0 ed 13 9f bb dc c5 cc e3 1e c6 26 6f 62 6c 71 9f b7 f9 09 3f e5 1d ee 3a dc 05 c2 e3 6e 93 bb 2d 8e 75 dd 36 77 4f b8 7b 8a 9f 0d d9 a9 0d fe d4 06 b2 63 03 Data Ascii: pHJd4J Q&z=&oblq?:n-u6wO{c=S9KCq=x#\|M7"\|-M6A4@&p%f'}VPId]+M_3~fjW;ErUkSJ{.(]Q#7"UqQ(\(
Sep 29, 2024 04:41:45.740322113 CEST	471	OUT	GET /fonts/Roboto/KFOlCnqEu92Fr1MmWUlfBBc4AMP6lQ.woff2 HTTP/1.1 Host: distrosourcess5.sg-host.com Connection: keep-alive Origin: http://distrosourcess5.sg-host.com User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Referer: http://distrosourcess5.sg-host.com/Telegram%20Join%20Group%20Chat_files/font-roboto.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 04:41:45.902168036 CEST	1236	IN	HTTP/1.1 404 Not Found Server: nginx Date: Sun, 29 Sep 2024 02:41:45 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding X-Httpd-Modphp: 1 Host-Header: 6b7412fb82ca5edfd0917e3957f05d89 X-Proxy-Cache: EXPIRED X-Proxy-Cache-Info: 0 NC:000000 UP: Content-Encoding: gzip Data Raw: 34 62 39 65 0d 0a 1f 8b 08 00 00 00 00 00 04 03 ed 7d 5b 73 1c b7 9a e4 fb f9 15 bd 9c d8 38 7b e9 6e d5 ad eb a2 23 79 d7 e3 99 89 f3 40 cf ec 2d bc b1 7e 71 b4 c8 96 c8 3d 2d 52 26 29 c9 3e 13 f3 df 37 3f 7c 99 a8 2a 14 d9 0d 3b 66 f7 69 ed 10 9b ec 2c 7c 89 02 32 01 14 50 85 7a f3 6f fe ee 9f be fb 1f ff eb bf fc fd ea e6 e9 e3 f1 9b 3f bc b1 8f d5 71 7f f7 e1 ed c5 e1 ee c2 be 38 ec af bf f9 c3 0a ff bd f9 78 78 da af ae 6e f6 0f 8f 87 a7 b7 17 9f 9f de 6f fa 8b d5 ab 29 78 b7 ff 78 78 7b f1 e5 f6 f0 f5 d3 fd c3 d3 c5 ea ea fe ee e9 70 87 83 bf de 5e 3f dd bc bd 3e 7c b9 bd 3a 6c c2 1f eb d5 ed dd ed d3 ed fe b8 79 bc da 1f 0f 6f cb 6d 01 ba 91 e7 e6 e9 e9 d3 e6 f0 f3 e7 db 2f 6f 2f ae f6 57 37 87 8d 05 7b b8 3f 4e a2 de dd 6f 1e 9f ee 1f 0e eb 8f fb 5f 36 fb 0f 87 b7 c5 b3 f9 79 b8 7f 77 ff f4 38 4b 77 7b 77 7d f8 65 3c f8 e9 f6 e9 78 f8 a6 29 9a d5 66 f5 8f f7 4f ab f7 f7 9f ef ae df bc f2 af 3d 53 c7 db bb bf ac 6e 1e 0e ef df 5e 58 d6 1e 5f bf 7a f5 1e 19 7a dc 7e b8 bf ff 70 3c ec 3f dd 3e [TRUNCATED] Data Ascii: 4b9e}[s8{n#y@-~q=-R&)>7?\|;fi,\|2Pzo?q8xxno)xxx{p^?>\|:lyom/o/W7{?No_6yw8Kw{w}e<x)fO=Sn^X_zz~p<?>n?z\|OoOwXwEo^_\O7x?9[exa7zxP5a%w$n^:kB^8<YF8;YM(0tr#9<?}>#H$<vDKT=fyW`\|}Z]=xzDbP?)C Fy X*y+Pj6XoI\}@+^=Bm!> >l&\|5@1c\|n?\|\|BhG?[{-4yYZKJZOldrlOTXUu
Sep 29, 2024 04:41:45.902184010 CEST	1236	IN	Data Raw: 6c 36 ef 3e fc f4 d3 95 f9 f7 59 ab ef df 3d de 1f 3f 3f 4d ac ee e6 9a b4 35 74 d4 e4 1b fa 7d 98 b6 3d 92 5c 31 31 fb 34 e3 10 ca cd fe d3 01 79 31 2f 3d ae 1e bf 7c 98 64 e8 fa f6 f1 d3 71 ff 2b da de e3 fd d5 5f 5c c8 4c 8d 1c a2 e9 bc 7a da Data Ascii: l6>Y=??M5t}=\114y1/=\|dq+_\Lz7Oqtuy>y4"zz9o\|@ss{59r3`'9;_=^= M>'tduwwl'*k%a7y7rr}eu{=
Sep 29, 2024 04:41:45.902214050 CEST	448	IN	Data Raw: 6a a8 af 70 a2 45 5f 99 ff a1 f8 96 bf 54 4d b3 ef d6 9d 57 69 50 1a 04 8a fe 00 d9 28 d0 4f a3 35 46 1f 19 4a c5 9a c2 49 2e ec 54 0a 74 09 38 a4 a9 f6 68 7b ba 1e bf db cf 50 a8 a6 b6 1e 4d 4e dd e3 a4 bb 6d 07 bf 21 17 68 23 63 11 43 a0 a8 26 Data Ascii: jpE_TMWiP(O5FJI.Tt8h{PMNm!h#cC&cUAfZ'aEnk"TY~;hzk;kn*VFHlcG\~^~8dQAceE!Vdg,<@>b<6_%~]8U@;8AhoY
Sep 29, 2024 04:41:45.902225018 CEST	1236	IN	Data Raw: 0c 71 30 80 c0 a8 21 1a 74 bd db 3c d7 5e fb 61 27 4b 6b 87 fe 1b f6 a8 ab 02 a5 45 a7 59 eb a0 5a b2 da 47 db 60 83 49 b4 0d c1 bf d6 84 85 3c 87 41 43 9d 95 e3 53 0e 1d 0a 74 b0 76 42 56 b6 28 9e 06 e3 87 0a 39 aa 83 52 ad 7d 1e 3a 96 cb 06 0d Data Ascii: q0!t<^a'KkEYZG`I<ACStvBV(9R}:CrpP[\|x&e[sgD.4Ek#8%*B]7g;Ye1H)OB\(!XLv,Z/{7E>Rw:Um.\mF5@%;Z
Sep 29, 2024 04:41:45.902235985 CEST	1236	IN	Data Raw: a6 36 b5 7a 81 81 8e 08 56 5a bf 58 d8 60 10 8d a5 5d a9 da 1c 30 62 0d f8 69 5d 0a a6 42 fd a7 77 29 36 3b 83 2a a9 9b 16 9d 83 5d 36 4f fa 86 17 86 4d 7e d8 c9 42 b3 43 30 34 0a 7c a1 0b b3 d1 81 fd 8f a6 0d 57 ce 28 81 dd ce 32 db b7 c8 6c 3d Data Ascii: 6zVZX`]0bi]Bw)6;*]6OM~BC04\|W(2l=Xl<QefJ]Y8C.a)L[;hw?:g6;iCtFy[5acd^<E\|:1ULU%I0A&{Ma,2ZfQb6eicXTC
Sep 29, 2024 04:41:45.902245998 CEST	1236	IN	Data Raw: 85 4b 1e a2 4b 71 4f 7f 56 fc 0a 27 79 88 4e d5 2f 5c f2 10 5d 8a 67 ca 83 e1 24 0f b2 49 00 42 29 0f 72 a5 68 9e 3c 42 e2 96 8d 85 2a 41 62 21 2f f5 40 5a f4 30 76 a5 8b 59 32 54 20 53 9e 2d 3f 9b 53 9c b4 1d 36 c5 3d d8 5c 87 cf 6d d8 0d b5 06 Data Ascii: KKqOV'yN/\]g$IB)rh<B*Ab!/@Z0vY2T S-?S6=\mK@=3`M\BOB~mbC\Sd!.U}I%&HZ'HI($Pdw1&8p)+km~#;[M'MN.\]gB$]gRJ<m0A&@
Sep 29, 2024 04:41:45.902252913 CEST	1236	IN	Data Raw: 36 49 24 5d 07 a5 6b b2 cc c1 4c 59 7b 24 a9 9a 34 d2 2d f3 40 51 93 66 0e 66 6a da 23 49 d2 a4 91 68 09 52 d1 a4 49 c0 3c 41 7b 24 e9 99 34 92 2c 41 97 33 59 12 2c 4f cd 1e 48 62 26 0b f5 4a 8c 5a 26 cb 1c 7b 5e ca c9 dd b7 5a 78 a5 ca b4 2a eb Data Ascii: 6I$]kLY{$4-@Qffj#IhRI<A{$4,A3Y,OHb&JZ&{^ZxJL3C-DyRS,jMLP^)AXYS,NLTUDDYS(ND.Dy-Kv\RvCIvJv$JL1dG&K6Uf$;2IXB);S$;2I
Sep 29, 2024 04:41:45.902271986 CEST	696	IN	Data Raw: e7 94 a0 79 2a 20 93 fa 64 27 52 a7 eb 3c 54 01 69 12 2c 4b 05 24 51 77 ec 24 ec 70 9d 03 cb 23 e1 69 0a 3f 95 39 94 a5 02 6c e1 d5 db 86 09 1c a8 a1 99 1f da b1 ab 15 aa 76 12 7b 99 d9 9d 5b d4 88 d0 bc 7e 58 47 53 05 62 62 3d 0b a5 0a 6a 32 25 Data Ascii: y* d'R<Ti,K$Qw$p#i?9lv{[~XGSbb=j2%hY(U ScQ$bM4n @PpD?j&H4XYsD:V$D3Xa+Lh`^{$=YX1jK3$wu7vb1VPV<vr*
Sep 29, 2024 04:41:45.902981997 CEST	1236	IN	Data Raw: 93 41 3c 9c 3a 88 74 ac eb 88 53 0a 91 2e c5 f3 c4 10 c3 51 0d 91 8e 35 1e 71 0a 22 d2 a5 78 9e 24 14 8e 9a 10 1b 6b 3e a2 2e 0b 71 a5 68 96 30 14 8b ca 10 93 0b 20 82 2e 0e 11 25 60 9e 3c 4a bb 61 17 a6 67 03 81 d9 42 cc 34 8f 8b 37 78 e0 c8 71 Data Ascii: A<:tS.Q5q"x$k>.qh0 .%`<JagB47xq}\|gCKS<DP8Ct~R<S'yMJy+EXG`3aJQwNO@xX%CLl6T'-=y6*_l\|I<dKaOd%8UI'
Sep 29, 2024 04:41:45.903003931 CEST	1236	IN	Data Raw: f6 ba 3d cc 49 86 6b 55 6c c3 82 7d c7 81 e0 b5 e5 d5 e4 15 8a 2f f4 b8 9a 18 95 8a 91 25 9b eb a6 50 39 31 8a c1 41 d8 0d 8e b3 a6 09 98 a7 62 86 92 8a c9 23 9d 12 95 8a 49 94 a0 99 2a 66 2c a9 98 4c d2 a9 f2 41 15 93 29 41 33 55 cc 58 52 31 99 Data Ascii: =IkUl}/%P91Ab#If,LA)A3UXR1ST1R4O%IB&QbH(o<=6jq1eC[Tw$bMKNbU'L'Xz8E3R)iRH4HM-$RIN4HH%D)K{<v,$

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49722	35.215.82.134	80	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 04:41:44.998733997 CEST	381	OUT	GET /Telegram%20Join%20Group%20Chat_files/vKNb2iqPCJyxS0EJ_KL7rLK_M-JUdK6HRCFPjKRF8RNEh3lDB4CUe0jYawVy.jpg HTTP/1.1 Host: distrosourcess5.sg-host.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 04:41:45.572133064 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 02:41:45 GMT Content-Type: image/jpeg Content-Length: 14190 Last-Modified: Sat, 09 Mar 2024 21:27:27 GMT Connection: keep-alive ETag: "65ecd43f-376e" Expires: Mon, 29 Sep 2025 02:41:45 GMT Cache-Control: max-age=31536000 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1 Accept-Ranges: bytes Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 02 28 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 02 18 00 00 00 00 04 30 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 00 00 00 00 00 00 00 00 00 00 00 00 61 63 73 70 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 f6 d6 00 01 00 00 00 00 d3 2d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 09 64 65 73 63 00 00 00 f0 00 00 00 74 72 58 59 5a 00 00 01 64 00 00 00 14 67 58 59 5a 00 00 01 78 00 00 00 14 62 58 59 5a 00 00 01 8c 00 00 00 14 72 54 52 43 00 00 01 a0 00 00 00 28 67 54 52 43 00 00 01 a0 00 00 00 28 62 54 52 43 00 00 01 a0 00 00 00 28 77 74 70 74 00 00 01 c8 00 00 00 14 63 70 72 74 00 00 01 dc 00 00 00 3c 6d 6c 75 63 00 00 00 00 00 00 00 01 00 00 00 0c 65 6e 55 53 00 00 00 58 00 00 00 1c 00 73 00 52 00 47 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [TRUNCATED] Data Ascii: JFIFHH(ICC_PROFILE0mntrRGB XYZ acsp-desctrXYZdgXYZxbXYZrTRC(gTRC(bTRC(wtptcprt<mlucenUSXsRGBXYZ o8XYZ bXYZ $paraffY[XYZ -mlucenUS Google Inc. 2016CC@@"J!1AQ"a2q3#BRb$rS&46Dcd
Sep 29, 2024 04:41:45.572154999 CEST	1236	IN	Data Raw: 00 00 00 00 00 00 02 03 04 07 01 05 06 08 09 ff c4 00 3c 11 00 02 01 03 02 03 03 0a 03 05 09 00 00 00 00 00 00 01 02 03 04 11 05 31 06 12 21 07 41 51 13 22 61 71 81 91 a1 b1 c1 d1 14 42 72 32 33 82 e1 f0 15 16 23 24 43 44 52 92 a2 ff da 00 0c 03 Data Ascii: <1!AQ"aqBr23#$CDR?RHTRTJ )RHTXuJXP^`Lh%]EnbL<:s\~qT"]#yrwJ7\gUy=/Us BdTkH\{)`e]J@RJ
Sep 29, 2024 04:41:45.572165966 CEST	448	IN	Data Raw: ed 07 a2 98 70 3d 57 86 9f 87 77 e2 09 5b 30 3f 04 e0 17 1c b1 b2 fc 72 19 6b 93 f3 55 f5 5d 6f 20 72 b2 c6 e9 e7 7a 9b 0a 75 4f c5 a3 1d af 29 3e db 36 bc ee 60 83 aa 03 97 9f 7f d5 4f 9c 81 b4 95 c7 b2 a8 70 df 54 7e 77 74 32 80 70 3c 48 d4 82 Data Ascii: p=Ww[0?rkU]o rzuO)>6`OpT~wt2p<HDTI\|dx5E@:tjH85;C5@Tvr k&I>LJYZL )H]/ 0{ @dAqBUD!AuBOe:w
Sep 29, 2024 04:41:45.572184086 CEST	1236	IN	Data Raw: 5c dd d4 3f 03 24 c3 69 53 1f c3 4d 8d 0d 63 5b d1 ad 0b 7c 3c 1d 70 f2 c6 8e 1e 71 ec 50 d2 a7 52 a7 ac 9a 8e 1a 04 07 48 78 90 c3 2d 32 4e 50 ca d9 2e d1 ad a7 73 55 9f b4 dc b4 68 43 40 81 3f 55 ae 79 4a c0 dd df 56 79 13 ca 17 66 f8 99 cd ac Data Ascii: \?$iSMc[\|<pqPRHx-2NP.sUhC@?UyJVyf/=QV2VoUsmCVVPe~/gj%FMS$Vu{\AiO\|fw&<; Tf>i_erz^^V
Sep 29, 2024 04:41:45.572195053 CEST	1236	IN	Data Raw: e2 2e 19 5a 2d 38 d5 a5 37 38 b7 87 94 96 3c 36 f1 ea 6d e5 0a d2 e1 26 17 26 d7 e9 20 ac 52 de bc 81 af 45 ce d0 ad 2d 8d d7 6c 6b c3 97 0f 07 72 67 a2 20 71 81 d9 20 1e 1c 7b 14 66 be 0c 20 1d 0e d0 0e 88 8d 74 25 1a f9 db 64 66 9d 3d 90 0e 35 Data Ascii: .Z-878<6m&& RE-lkrg q {f t%df=5t(wHV:v:@>B8=LxwaA9HN$0:0P8J]"GU7:PtrO#nsODtY{9 v@qk'rITOtZh4"IQ&:.z"(
Sep 29, 2024 04:41:45.572205067 CEST	1236	IN	Data Raw: b0 1d c1 7f 31 fd 18 b0 6f 2a f9 2b 4a 93 5d d1 7f 23 d4 f0 d5 92 d4 b8 86 ce d1 ac a9 d5 82 7e ae 64 df c1 33 cc 26 82 18 01 33 a6 e7 75 9a e5 06 87 62 cc ea 39 96 12 4f a0 ce e7 aa ce b2 60 e6 c4 19 03 67 2d 15 49 66 aa 3f 56 f5 0f 36 ce 5e a3 Data Ascii: 1o*+J]#~d3&3ub9O`g-If?V6^jpgx4Npcl<do][ZY:kiNW4Ly)Syk>L"BS&ex}o#A9DE=(Nc\|=ZaiMUm/{]^1"b6;ft)
Sep 29, 2024 04:41:45.572216034 CEST	1236	IN	Data Raw: d3 34 28 63 18 d5 3a 36 f5 1f a0 75 2b 76 1e 77 fc 83 9e e1 3f e5 2b 53 31 bb ea 78 b7 13 73 3e 33 4b 5a 37 d8 ad c5 cd 33 dd af aa e7 37 f4 21 7a 2f c6 2c c3 97 f8 19 e1 66 d7 87 19 44 36 d7 16 b8 c3 5d 85 e1 74 1a e0 ea 96 b6 c4 16 5c 5d 3c 8d Data Ascii: 4(c:6u+vw?+S1xs>3KZ737!z/,fD6]t\]<s^n"^X^-QVFw#.8RO$x&a`Nk:WG79e/iho>".[+\]+x<$,
Sep 29, 2024 04:41:45.572227001 CEST	1236	IN	Data Raw: ca 65 fb 04 ab 88 03 55 c1 34 80 bb 54 bb f7 03 aa 39 30 12 ae 32 f9 ec b8 6c b1 2c 82 71 d1 2e e3 bc f6 45 79 4b bd db 83 ba a9 b2 e4 b0 05 e5 74 67 88 8b 1f db bc 29 66 12 1b cc eb 5a 94 2e 07 b7 2d 40 09 fb 38 ae f3 22 42 c2 78 81 84 ff 00 8d Data Ascii: eU4T902l,q.EyKtg)fZ.-@8"BxW6anmjC?xvXk-Bs,<v3Kw]Z\|"Gbla8+6Nl*mqIz6ro,Svl'M?po8}k[\[
Sep 29, 2024 04:41:45.572237015 CEST	1236	IN	Data Raw: 7d 66 4f 85 66 7b db 12 da 35 c9 ba b5 e8 d7 19 2d f9 15 dc fc 3b c3 e8 e7 fe 2d 65 5c b9 60 ef 32 ae 2b 8b 5b d9 ba 9f f1 34 54 a8 d6 b8 c7 b3 49 3f 45 ae 12 7b ae 7f 2b 66 8c 7f 26 67 fc 2b 34 65 8c 52 b6 0d 8f 61 b7 0d b8 b2 bc b7 70 0f a4 f1 Data Ascii: }fOf{5-;-e\`2+[4TI?E{+f&g+4eRapABkYRFx7oixco?voNNreV/kYdL\|L6?E4@[Qt.4+:x\Z-ks7h'dt~$i} go*cIu
Sep 29, 2024 04:41:45.572248936 CEST	1236	IN	Data Raw: a6 8c 1a b4 df 95 78 35 fa d6 87 3b c7 55 9c 61 18 61 aa e6 c3 67 55 c2 e1 76 9c f5 58 23 75 dd b9 5b 06 f3 2a 30 b9 ba 69 3a 2e 87 51 bb 54 60 fa 9b 47 86 f4 77 71 38 e5 1c 8e 01 96 da f1 4d cf a7 01 6f 1f 0f 72 f1 a7 c1 ac 1e 93 69 c0 2d 7b b4 Data Ascii: x5;UaagUvX#u[0i:.QT`Gwq8Mori-{V5q0gZt"q_{Z)avyn-R. \|LjZ}_e{x3.F9kh@\}IO-~V/+gsUcM&.g._G$.2M*;gs
Sep 29, 2024 04:41:45.577119112 CEST	1236	IN	Data Raw: 39 e7 20 50 c3 70 ab db 93 8f e1 55 85 12 3f 74 da de ba 92 7f 84 75 88 d5 68 ce 7d 7d a3 ed ee ed 5d 6a ea bb 86 bf 98 40 3d 08 5e 82 f1 03 26 dd 1e 16 33 32 86 8f d9 1d 89 ba cb 94 33 a8 a7 cf 3f d4 2d 1c ce 58 25 6a b7 0f a7 46 91 75 67 bb 95 Data Ascii: 9 PpU?tuh}}]j@=^&323?-X%jFugR`jU#nj7R(e?5.thp9XA--,^;lMh8&(XsyEe>Yh[KTijjj9R&??x>D[FE8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49724	35.215.82.134	80	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 29, 2024 04:41:45.189531088 CEST	335	OUT	GET /Telegram%20Join%20Group%20Chat_files/tgwallpaper.min.js HTTP/1.1 Host: distrosourcess5.sg-host.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 29, 2024 04:41:45.767550945 CEST	1236	IN	HTTP/1.1 200 OK Server: nginx Date: Sun, 29 Sep 2024 02:41:45 GMT Content-Type: application/javascript Last-Modified: Sat, 09 Mar 2024 21:27:27 GMT Transfer-Encoding: chunked Connection: keep-alive Vary: Accept-Encoding ETag: W/"65ecd43f-ba3" Expires: Mon, 29 Sep 2025 02:41:45 GMT Cache-Control: max-age=31536000 Host-Header: 8441280b0c35cbc1147f8ba998a563a7 X-Proxy-Cache-Info: DT:1 Content-Encoding: gzip Data Raw: 35 66 31 0d 0a 1f 8b 08 00 00 00 00 00 04 03 7d 56 0b 73 da 38 10 fe 2b 2d 77 ed c8 b6 30 b6 c1 24 e0 28 9d 34 4d da b4 69 fa 98 9b b9 b9 e1 b8 8e 6c 0b cc c4 18 30 e6 d5 84 ff 7e df ca e6 91 f6 7a 33 a0 d5 ee 7e 2b c9 d2 be 96 32 7f f6 c7 9f 32 4d a7 72 aa 72 31 58 64 51 31 9a 64 cc 78 d8 4d 9f ad 99 04 37 c9 d9 12 d8 50 f4 fa 76 34 c9 22 59 b0 b7 46 e0 9c c9 c0 08 ed e9 62 9e b0 d0 9e 27 a3 41 c1 0c 83 cb 7a 3d 90 40 06 3b b3 48 38 41 74 16 da a9 ca 86 45 12 44 96 f0 0c 59 99 f5 a2 be 11 e4 aa 58 e4 d9 33 b9 dd 6f fb 9a 49 1e 1a 0f e1 0b d1 71 02 da 3a 12 38 c9 8b a9 11 8c 06 0c 0a 12 c5 10 59 96 16 96 0b f4 1e d6 dd a8 e7 f4 ed b5 c5 62 4d eb 25 6b 34 3a 8e 19 f2 4d a9 dd 54 da 4d a9 dd 94 da 2d d7 d6 6e 65 4d 14 7a 22 47 d6 60 b5 35 d1 52 fb d4 da ab ac 89 42 4f e4 c8 1a ac b6 26 5a 6a 9f 5a 37 2b 6b a2 d0 13 39 b2 06 ab ad 89 96 da 9d 75 7f 5b 5d 60 74 b8 c0 77 bb 77 4b 2d 21 83 8e 73 26 d2 c0 48 eb b8 4e 3e b4 2c 3e 3c 17 d3 97 2f d9 b0 2e 70 a5 f4 4e 81 73 4e 00 4b 03 ea 75 ee 9c 0f 49 6f 41 [TRUNCATED] Data Ascii: 5f1}Vs8+-w0$(4Mil0~z3~+22Mrr1XdQ1dxM7Pv4"YFb'Az=@;H8AtEDYX3oIq:8YbM%k4:MTM-neMz"G`5RBO&ZjZ7+k9u[]`twwK-!s&HN>,></.pNsNKuIoAXvBy\|d-FcIsbF<w?lNpB`kJ?zQ=H'84(cp)^!OaI`up/Xk9geVs,JoBK3G>%Q\BPd}<gpr932vnZ$f%h,1MY^9@emt2h29r9mJ@+>_b^_b\N76v~{5o)An`\ByjFbMW,U\|aEqxg:oq.WZ4tpZNnSMVh1VYa'r~~wt'$}>BiwI
Sep 29, 2024 04:41:45.767576933 CEST	721	IN	Data Raw: ff ab 70 af 9a 0d d7 e7 17 48 bd fc 4a 64 8b 34 e5 9f 4a b2 20 51 26 7a 0e b7 3d 1f fe c0 ed 13 9f bb dc c5 cc e3 1e c6 26 6f 62 6c 71 9f b7 f9 09 3f e5 1d ee 3a dc 05 c2 e3 6e 93 bb 2d 8e 75 dd 36 77 4f b8 7b 8a 9f 0d d9 a9 0d fe d4 06 b2 63 03 Data Ascii: pHJd4J Q&z=&oblq?:n-u6wO{c=S9KCq=x#\|M7"\|-M6A4@&p%f'}VPId]+M_3~fjW;ErUkSJ{.(]Q#7"UqQ(\(
Sep 29, 2024 04:42:30.780242920 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.6	49710	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:41:43 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 30 61 66 55 6f 34 31 74 71 55 2b 6a 2f 41 53 69 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 36 33 30 65 37 35 30 65 62 30 30 33 65 38 65 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: 0afUo41tqU+j/ASi.1Context: 7630e750eb003e8e
2024-09-29 02:41:43 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 02:41:43 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 30 61 66 55 6f 34 31 74 71 55 2b 6a 2f 41 53 69 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 36 33 30 65 37 35 30 65 62 30 30 33 65 38 65 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: 0afUo41tqU+j/ASi.2Context: 7630e750eb003e8e<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJW
2024-09-29 02:41:43 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 30 61 66 55 6f 34 31 74 71 55 2b 6a 2f 41 53 69 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 37 36 33 30 65 37 35 30 65 62 30 30 33 65 38 65 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: 0afUo41tqU+j/ASi.3Context: 7630e750eb003e8e<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 02:41:43 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 02:41:43 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6a 78 34 4b 69 33 63 43 78 55 43 41 49 37 77 52 6e 31 52 41 46 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: jx4Ki3cCxUCAI7wRn1RAFA.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49725	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:41:47 UTC	597	OUT	GET /img/favicon.ico HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: http://distrosourcess5.sg-host.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:41:48 UTC	383	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:41:48 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT Connection: close ETag: "62616083-3aee" Expires: Sun, 06 Oct 2024 02:41:48 GMT Cache-Control: max-age=604800 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:41:48 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 9e 22 0d d9 9e 22 36 d9 9e 22 6f d9 9e 22 a4 d9 9e 22 cd d9 9e 22 e7 d9 9e 22 f7 d9 9e 22 fe d9 9e 22 fe d9 9e 22 f7 d9 9e 22 e7 d9 9e 22 cd d9 9e 22 a4 d9 9e 22 6f d9 9e 22 36 da 9e 23 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $""6"o"""""""""""o"6#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49726	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:41:48 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 02:41:48 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=136994 Date: Sun, 29 Sep 2024 02:41:48 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49728	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:41:49 UTC	351	OUT	GET /img/favicon.ico HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:41:49 UTC	383	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:41:49 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT Connection: close ETag: "62616083-3aee" Expires: Sun, 06 Oct 2024 02:41:49 GMT Cache-Control: max-age=604800 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:41:49 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 9e 22 0d d9 9e 22 36 d9 9e 22 6f d9 9e 22 a4 d9 9e 22 cd d9 9e 22 e7 d9 9e 22 f7 d9 9e 22 fe d9 9e 22 fe d9 9e 22 f7 d9 9e 22 e7 d9 9e 22 cd d9 9e 22 a4 d9 9e 22 6f d9 9e 22 36 da 9e 23 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $""6"o"""""""""""o"6#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49729	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:41:49 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 02:41:49 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=137023 Date: Sun, 29 Sep 2024 02:41:49 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 02:41:49 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port
5	192.168.2.6	49730	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:41:53 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 47 31 49 62 6b 69 6f 5a 69 45 57 42 30 56 73 6a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 34 30 32 63 62 63 35 38 36 30 32 35 32 61 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: G1IbkioZiEWB0Vsj.1Context: 4402cbc5860252ab
2024-09-29 02:41:53 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 02:41:53 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 47 31 49 62 6b 69 6f 5a 69 45 57 42 30 56 73 6a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 34 30 32 63 62 63 35 38 36 30 32 35 32 61 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: G1IbkioZiEWB0Vsj.2Context: 4402cbc5860252ab<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJW
2024-09-29 02:41:53 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 47 31 49 62 6b 69 6f 5a 69 45 57 42 30 56 73 6a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 34 34 30 32 63 62 63 35 38 36 30 32 35 32 61 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: G1IbkioZiEWB0Vsj.3Context: 4402cbc5860252ab<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 02:41:53 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 02:41:53 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 44 57 69 32 57 42 39 6b 59 30 75 32 61 79 5a 34 4a 30 70 62 73 77 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: DWi2WB9kY0u2ayZ4J0pbsw.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port
6	192.168.2.6	49735	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:10 UTC	70	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 34 0d 0a 4d 53 2d 43 56 3a 20 44 50 4f 65 66 34 4f 6a 42 6b 53 7a 52 79 69 73 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 64 38 63 64 39 36 61 38 39 36 32 37 62 0d 0a 0d 0a Data Ascii: CNT 1 CON 304MS-CV: DPOef4OjBkSzRyis.1Context: 69d8cd96a89627b
2024-09-29 02:42:10 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 02:42:10 UTC	1083	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 30 0d 0a 4d 53 2d 43 56 3a 20 44 50 4f 65 66 34 4f 6a 42 6b 53 7a 52 79 69 73 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 64 38 63 64 39 36 61 38 39 36 32 37 62 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 6f Data Ascii: ATH 2 CON\DEVICE 1060MS-CV: DPOef4OjBkSzRyis.2Context: 69d8cd96a89627b<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJWo
2024-09-29 02:42:10 UTC	217	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 36 0d 0a 4d 53 2d 43 56 3a 20 44 50 4f 65 66 34 4f 6a 42 6b 53 7a 52 79 69 73 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 39 64 38 63 64 39 36 61 38 39 36 32 37 62 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 196MS-CV: DPOef4OjBkSzRyis.3Context: 69d8cd96a89627b<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 02:42:10 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 02:42:10 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 70 53 2b 37 75 6f 38 6a 77 6b 2b 67 2f 74 5a 51 35 52 45 32 37 41 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: pS+7uo8jwk+g/tZQ5RE27A.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49737	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:27 UTC	635	OUT	GET / HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:28 UTC	447	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:27 GMT Content-Type: text/html; charset=utf-8 Content-Length: 19623 Connection: close Set-Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454; expires=Sun, 29 Sep 2024 13:49:07 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:28 UTC	15937	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 20 4d 65 73 73 65 6e 67 65 72 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 54 65 6c 65 67 72 61 6d 20 e2 80 93 20 61 20 6e 65 77 20 65 72 61 20 6f 66 20 6d 65 73 73 61 67 69 6e 67 Data Ascii: <!DOCTYPE html><html class=""> <head> <meta charset="utf-8"> <title>Telegram Messenger</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta property="og:title" content="Telegram a new era of messaging
2024-09-29 02:42:28 UTC	3686	IN	Data Raw: 69 76 20 63 6c 61 73 73 3d 22 74 6c 5f 6d 61 69 6e 5f 63 61 72 64 5f 6c 65 61 64 22 3e 3c 62 3e 54 65 6c 65 67 72 61 6d 3c 2f 62 3e 20 6b 65 65 70 73 20 79 6f 75 72 20 6d 65 73 73 61 67 65 73 20 73 61 66 65 20 66 72 6f 6d 20 68 61 63 6b 65 72 20 61 74 74 61 63 6b 73 2e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6c 5f 6d 61 69 6e 5f 63 61 72 64 5f 63 65 6c 6c 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 6c 5f 6d 61 69 6e 5f 63 61 72 64 5f 77 72 61 70 22 3e 0a 20 20 20 20 20 20 20 20 3c 70 69 63 74 75 72 65 20 63 6c 61 73 73 3d 22 64 65 76 5f 70 61 67 65 5f 74 67 73 74 69 63 6b 65 72 20 74 6c 5f 6d 61 69 6e 5f 63 61 72 64 5f 61 6e 69 Data Ascii: iv class="tl_main_card_lead"><b>Telegram</b> keeps your messages safe from hacker attacks.</div> </div> </div> <div class="tl_main_card_cell"> <div class="tl_main_card_wrap"> <picture class="dev_page_tgsticker tl_main_card_ani

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49736	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:28 UTC	604	OUT	GET /css/bootstrap.min.css?3 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:28 UTC	379	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:28 GMT Content-Type: text/css Content-Length: 42523 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-a61b" Expires: Thu, 03 Oct 2024 02:42:28 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:28 UTC	16005	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 32 2e 30 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 0a 2f 2a 21 0a 20 2a 20 47 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 42 6f 6f 74 73 74 72 61 70 20 43 75 73 74 6f 6d 69 7a 65 72 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 63 75 73 74 6f 6d 69 7a 65 2f 3f 69 Data Ascii: /! Bootstrap v3.2.0 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?i
2024-09-29 02:42:28 UTC	16384	IN	Data Raw: 6c 6f 72 3a 23 37 37 37 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 72 65 61 64 6f 6e 6c 79 5d 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 6f 70 61 63 69 74 79 3a 31 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 Data Ascii: lor:#777}.form-control::-webkit-input-placeholder{color:#777}.form-control[disabled],.form-control[readonly],fieldset[disabled] .form-control{cursor:not-allowed;background-color:#eee;opacity:1}textarea.form-control{height:auto}input[type="search"]{-webkit
2024-09-29 02:42:28 UTC	10134	IN	Data Raw: 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 7b 74 6f 70 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 30 29 7b 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e Data Ascii: t:0}.navbar-form .radio input[type="radio"],.navbar-form .checkbox input[type="checkbox"]{position:relative;margin-left:0}.navbar-form .has-feedback .form-control-feedback{top:0}}@media (max-width:0){.navbar-form .form-group{margin-bottom:5px}}@media (min

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49739	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:28 UTC	601	OUT	GET /css/telegram.css?241 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:29 UTC	381	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:28 GMT Content-Type: text/css Content-Length: 115228 Last-Modified: Mon, 23 Sep 2024 17:55:39 GMT Connection: close ETag: "66f1ab9b-1c21c" Expires: Thu, 03 Oct 2024 02:42:28 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:29 UTC	16003	IN	Data Raw: 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 3a 20 31 32 70 78 2f 31 38 70 78 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 22 4c 75 63 69 64 61 20 53 61 6e 73 20 55 6e 69 63 6f 64 65 22 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2f 2a 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 2a 2f 0a 7d 0a 68 74 6d 6c 2e 6e 61 74 69 76 65 5f 66 6f 6e 74 73 20 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 Data Ascii: body { font: 12px/18px "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, Verdana, sans-serif; /-webkit-font-smoothing: antialiased;/}html.native_fonts body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica,
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 20 61 75 74 6f 3b 0a 7d 0a 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 6c 69 6e 6b 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 36 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 34 30 70 78 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 61 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b Data Ascii: auto;}.tl_main_download_link { text-align: center; display: inline-block; height: 300px; padding-top: 262px; padding-bottom: 20px; margin: 40px 0; font-size: 15px; max-width: 100%; position: relative;}a.tl_main_download_link:hover {
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 6e 74 65 6e 74 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 64 72 61 67 3a 20 6e 6f 6e 65 3b 0a 20 20 75 73 65 72 2d 64 72 61 67 3a 20 6e 6f 6e 65 3b 0a 20 20 63 75 72 73 6f 72 3a 20 74 65 78 74 3b 0a 7d 0a 2e 64 65 76 5f 70 61 67 65 5f 62 72 65 61 64 5f 63 72 75 6d 62 73 20 2e 62 72 65 61 64 63 72 75 6d 62 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 74 69 74 6c 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 0a 2e 64 65 76 5f 70 61 67 65 5f 68 65 61 64 20 2e 64 65 76 5f 70 61 67 65 5f 68 65 61 64 5f 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 Data Ascii: ntent img.emoji { -webkit-user-drag: none; user-drag: none; cursor: text;}.dev_page_bread_crumbs .breadcrumb { margin-bottom: 10px; border-radius: 0;}#dev_page_title { position: static;}.dev_page_head .dev_page_head_logo { margin-left
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 65 78 74 66 69 65 6c 64 2d 69 74 65 6d 20 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 36 29 3b 0a 7d 0a 2e 74 65 78 74 66 69 65 6c 64 2d 69 74 65 6d 20 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 36 29 3b 0a 7d 0a 2e 74 65 78 74 66 69 65 6c 64 2d 69 74 65 6d 2d 65 72 72 6f 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 34 35 61 35 38 3b 0a 20 20 70 Data Ascii: extfield-item input.form-control:focus::-moz-placeholder { color: #ccc; color: rgba(0,0,0,.26);}.textfield-item input.form-control:focus:-ms-input-placeholder { color: #ccc; color: rgba(0,0,0,.26);}.textfield-item-error { color: #d45a58; p
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 32 37 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 35 70 78 3b 0a 7d 0a 2e 62 6c 6f 67 5f 6d 65 64 69 75 6d 5f 69 6d 61 67 65 5f 77 72 61 70 2c 0a 2e 62 6c 6f 67 5f 6d 65 64 69 75 6d 5f 69 6d 61 67 65 5f 77 72 61 70 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0a 7d 0a 0a 2e 62 6c 6f 67 5f 77 69 64 65 5f 69 6d 61 67 65 5f 77 72 61 70 2c 0a 2e 62 6c 6f 67 5f 77 69 64 65 5f 69 6d 61 67 65 5f 77 72 61 70 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 20 70 2c 0a 23 64 65 76 5f 70 61 67 65 5f Data Ascii: img { width: 275px; padding: 10px 5px;}.blog_medium_image_wrap,.blog_medium_image_wrap img { width: 400px;}.blog_wide_image_wrap,.blog_wide_image_wrap img { width: 100%; max-width: auto;}#dev_page_content .blog_image_wrap p,#dev_page_
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 75 6e 64 3a 20 23 35 64 63 33 39 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 32 70 78 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 33 70 78 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 34 32 70 78 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0a 7d 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 5f 6e 65 77 Data Ascii: und: #5dc390; border-radius: 22px; overflow: hidden; display: inline-block; padding: 13px 24px; height: 42px; text-transform: uppercase; vertical-align: top;}a.tgme_action_button:hover,a.tgme_action_button:active,a.tgme_action_button_new
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 68 6f 77 5f 61 6c 6c 5f 70 6c 61 74 66 6f 72 6d 73 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 74 64 5f 61 6c 6c 5f 73 68 6f 77 6e 20 73 70 61 6e 2e 74 64 5f 62 74 6e 5f 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 7d 0a 2e 74 64 5f 61 6c 6c 5f 73 68 6f 77 6e 20 64 69 76 2e 74 64 5f 62 74 6e 5f 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 74 64 5f 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 7b 0a 20 20 77 69 64 74 68 3a 20 34 32 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 7d 0a 2e 74 64 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: how_all_platforms { display: none;}.td_all_shown span.td_btn_hidden { display: inline;}.td_all_shown div.td_btn_hidden { display: block;}.td_content_wrap { width: 420px; margin: 0 auto; font-size: 16px;}.td_content_title { font-size:
2024-09-29 02:42:29 UTC	921	IN	Data Raw: 20 7d 0a 20 20 2e 62 6c 6f 67 5f 32 69 6d 61 67 65 73 5f 77 72 61 70 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 2c 0a 20 20 2e 62 6c 6f 67 5f 33 69 6d 61 67 65 73 5f 77 72 61 70 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 30 20 32 30 70 78 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 33 34 30 70 78 29 20 7b 0a 20 20 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 69 6d 61 67 65 5f 5f 61 6e 64 72 6f 69 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 2d 31 30 39 70 78 20 30 20 30 20 2d 31 30 31 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 39 36 70 78 20 31 Data Ascii: } .blog_2images_wrap .blog_image_wrap, .blog_3images_wrap .blog_image_wrap { float: none; margin: 20px 0 20px; }}@media (max-width: 340px) { .tl_main_download_image__android { margin: -109px 0 0 -101px; background-size: 196px 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49740	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:28 UTC	580	OUT	GET /js/main.js?47 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:29 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:28 GMT Content-Type: application/javascript Content-Length: 21478 Last-Modified: Sat, 10 Dec 2022 23:01:54 GMT Connection: close ETag: "63950fe2-53e6" Expires: Thu, 03 Oct 2024 02:42:28 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:29 UTC	15991	IN	Data Raw: 76 61 72 20 73 74 61 72 74 54 69 6d 65 20 3d 20 2b 28 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 64 54 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 27 5b 27 20 2b 20 28 28 2b 28 6e 65 77 20 44 61 74 65 28 29 29 20 2d 20 73 74 61 72 74 54 69 6d 65 29 2f 20 31 30 30 30 2e 30 29 20 2b 20 27 5d 20 27 3b 0a 7d 0a 0a 76 61 72 20 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 73 20 3d 20 5b 5d 3b 0a 66 75 6e 63 74 69 6f 6e 20 74 77 69 74 74 65 72 43 75 73 74 6f 6d 53 68 61 72 65 49 6e 69 74 20 28 29 20 7b 0a 20 20 76 61 72 20 62 74 6e 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c Data Ascii: var startTime = +(new Date());function dT() { return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';}var jsonpCallbacks = [];function twitterCustomShareInit () { var btns = document.querySelectorAll ? document.querySelectorAll
2024-09-29 02:42:29 UTC	5487	IN	Data Raw: 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 58 20 3d 20 65 2e 63 6c 69 65 6e 74 58 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 59 20 3d 20 65 2e 63 6c 69 65 6e 74 59 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 58 20 3d 20 28 63 6c 69 65 6e 74 58 20 2d 20 72 65 63 74 2e 6c 65 66 74 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 57 69 64 74 68 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 59 20 3d 20 28 63 6c 69 65 6e 74 59 20 2d 20 72 65 63 74 2e 74 6f 70 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 Data Ascii: } else { var clientX = e.clientX; var clientY = e.clientY; } var rippleX = (clientX - rect.left) - rippleMask.offsetWidth / 2; var rippleY = (clientY - rect.top) - rippleMask.offsetHeight / 2; var ripple

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.6	49741	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:28 UTC	684	OUT	GET /file/400780400331/1/tuLhKJmWKdw.276665/463e789d166b4e3890 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:29 UTC	350	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:28 GMT Content-Type: image/jpeg Content-Length: 276665 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:28 GMT ETag: "f0a6e0a1f277b5e2f9596d20e90845f7e8d726ff" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:29 UTC	16034	IN	Data Raw: ff d8 ff e1 23 b1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 94 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 39 3a 30 34 20 32 32 3a 30 38 3a 35 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 58 a0 03 00 04 00 00 00 01 00 00 01 81 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: #ExifMM*bj(1"r2i''Adobe Photoshop 25.11 (Macintosh)2024:09:04 22:08:57X"
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 81 57 c1 21 c3 46 5b ee ff 00 ff d2 f4 4e bb 53 ec c1 f6 58 ea 8e e6 82 41 11 05 c3 73 bd df e8 db fa 46 2c 5e ab 5f a3 d4 1f 57 a8 fb 7d 2e 99 02 cb 0e e7 b8 fa 8e d6 d7 7e 73 bd 8b 53 af dc f6 53 b5 9c 90 09 fb f6 ff 00 9d b9 cb 03 22 cc 8b 72 6c 75 de cb 7e c5 b2 d1 3b 8c 87 bc bf dc ed ed fa 5e df cf ff 00 ad a4 26 04 ab b8 5b 28 4a 62 86 80 1d 49 34 3c 1d ea 6e 7d 58 55 b6 b0 d7 bc 34 7b 5c 48 da 04 b5 8e b4 8d df 4e 7d 8c 63 3d 5b ff 00 c1 ac ee 9b d4 7a 83 f3 ae 65 b7 5d 65 75 59 7c b5 f5 b0 31 a2 bb 59 5f b1 d5 ed 7d ac a5 a7 f4 9f e8 54 f1 c5 94 35 b6 33 47 17 6d ae 46 9f 41 bb 9d ee fa 5b df 67 e9 5f fc 85 85 8d 92 fa 33 33 72 2e 73 81 ac e4 58 f9 24 57 b8 5b 0e da e8 d9 e9 fa 9f 4f 67 f8 4f 4f d4 55 f2 e5 22 42 85 51 74 39 58 c0 62 c8 2b 8b d2 Data Ascii: W!F[NSXAsF,^_W}.~sSS"rlu~;^&[(JbI4<n}XU4{\HN}c=[ze]euY\|1Y_}T53GmFA[g_33r.sX$W[OgOOU"BQt9Xb+
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 45 39 37 31 37 43 34 43 44 37 30 41 33 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 45 35 39 41 30 39 35 33 34 30 36 34 34 36 33 34 33 31 42 43 36 43 32 42 30 32 35 31 46 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 46 46 36 30 39 46 31 36 30 42 32 42 37 39 41 41 45 35 34 30 30 32 37 32 42 33 33 32 46 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 31 31 41 36 41 34 36 35 45 39 43 39 39 35 35 30 46 41 41 46 45 38 42 32 37 42 36 46 32 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 31 34 39 36 37 42 38 38 33 31 46 31 33 43 45 42 39 44 46 44 38 43 30 37 31 33 45 30 33 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 31 35 35 33 32 44 34 39 43 35 36 32 37 36 43 41 32 34 41 37 43 Data Ascii: E9717C4CD70A3A9</rdf:li> <rdf:li>6E59A09534064463431BC6C2B0251FAE</rdf:li> <rdf:li>6FF609F160B2B79AAE5400272B332F00</rdf:li> <rdf:li>711A6A465E9C99550FAAFE8B27B6F2A8</rdf:li> <rdf:li>714967B8831F13CEB9DFD8C0713E0380</rdf:li> <rdf:li>715532D49C56276CA24A7C
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 64 38 66 33 65 64 35 2d 35 63 66 61 2d 31 31 37 62 2d 62 64 62 30 2d 66 33 35 36 38 33 30 63 39 34 63 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 64 61 31 38 65 64 36 2d 65 30 38 65 2d 31 31 37 61 2d 62 33 30 63 2d 66 35 61 35 62 30 63 61 66 63 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 64 65 62 33 35 37 39 2d 32 63 36 31 2d 31 31 37 62 2d 61 37 34 30 2d 61 31 62 64 64 34 63 33 38 65 39 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 Data Ascii: i> <rdf:li>adobe:docid:photoshop:2d8f3ed5-5cfa-117b-bdb0-f356830c94c5</rdf:li> <rdf:li>adobe:docid:photoshop:2da18ed6-e08e-117a-b30c-f5a5b0cafc48</rdf:li> <rdf:li>adobe:docid:photoshop:2deb3579-2c61-117b-a740-a1bdd4c38e99</rdf:li> <rdf:li>adobe:docid:phot
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 62 32 2d 34 34 34 65 2d 39 64 62 32 2d 65 36 30 35 61 39 38 61 32 31 33 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 33 38 36 33 62 62 63 2d 39 30 35 64 2d 31 65 34 38 2d 61 35 33 30 2d 31 31 62 31 62 32 65 61 32 31 37 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 33 63 38 34 33 34 63 2d 61 36 35 39 2d 31 31 37 61 2d 39 66 62 63 2d 39 62 62 64 66 35 37 39 32 35 37 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 33 65 61 38 39 39 37 2d 37 30 35 35 2d 31 31 65 37 2d 61 39 66 35 2d 66 38 36 37 62 62 39 39 30 33 37 66 3c 2f Data Ascii: b2-444e-9db2-e605a98a213f</rdf:li> <rdf:li>adobe:docid:photoshop:83863bbc-905d-1e48-a530-11b1b2ea217b</rdf:li> <rdf:li>adobe:docid:photoshop:83c8434c-a659-117a-9fbc-9bbdf579257d</rdf:li> <rdf:li>adobe:docid:photoshop:83ea8997-7055-11e7-a9f5-f867bb99037f</
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 36 34 39 37 62 37 35 2d 33 31 65 37 2d 37 61 34 39 2d 61 34 36 35 2d 63 63 61 63 31 65 36 66 62 39 39 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 36 38 37 33 65 34 39 2d 61 64 61 65 2d 38 31 34 64 2d 61 63 39 37 2d 30 62 34 62 36 61 31 61 37 64 35 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 36 63 33 38 33 61 39 2d 31 31 38 61 2d 31 31 37 62 2d 61 61 64 63 2d 63 34 39 33 39 66 62 37 30 31 66 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 36 65 63 64 64 Data Ascii: dobe:docid:photoshop:d6497b75-31e7-7a49-a465-ccac1e6fb991</rdf:li> <rdf:li>adobe:docid:photoshop:d6873e49-adae-814d-ac97-0b4b6a1a7d57</rdf:li> <rdf:li>adobe:docid:photoshop:d6c383a9-118a-117b-aadc-c4939fb701f1</rdf:li> <rdf:li>adobe:docid:photoshop:d6ecdd
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 46 36 32 38 36 36 41 37 44 45 44 33 46 35 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 38 36 46 44 30 33 33 46 33 33 35 39 36 45 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 61 31 31 31 36 33 2d 30 30 34 39 2d 30 39 34 30 2d 38 65 66 63 2d 64 34 66 38 61 37 35 34 61 37 61 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 41 42 46 44 42 45 32 32 36 38 31 31 41 34 38 36 41 42 34 36 41 43 43 43 39 32 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 33 46 42 39 38 41 42 32 31 36 38 31 31 Data Ascii: id:04801174072068118F62866A7DED3F50</rdf:li> <rdf:li>xmp.did:0580117407206811886FD033F33596E3</rdf:li> <rdf:li>xmp.did:05a11163-0049-0940-8efc-d4f8a754a7a2</rdf:li> <rdf:li>xmp.did:0680ABFDBE226811A486AB46ACCC9222</rdf:li> <rdf:li>xmp.did:0683FB98AB216811
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 69 64 3a 42 37 38 33 41 35 38 37 30 46 34 32 31 31 45 34 38 36 43 46 45 46 45 44 36 37 34 46 37 32 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 39 37 37 39 38 31 30 43 33 43 43 45 33 31 31 41 34 41 32 42 42 32 36 37 46 35 45 38 33 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 39 45 41 42 32 31 36 39 39 32 32 31 31 45 33 39 41 34 33 39 35 32 33 34 30 32 35 45 44 39 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 41 42 32 31 36 36 41 32 37 43 42 45 33 31 31 39 39 32 30 45 43 32 41 34 32 30 37 44 35 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 41 43 39 38 38 34 41 45 45 32 30 36 38 31 31 41 32 44 46 Data Ascii: id:B783A5870F4211E486CFEFED674F7215</rdf:li> <rdf:li>xmp.did:B9779810C3CCE311A4A2BB267F5E83B8</rdf:li> <rdf:li>xmp.did:B9EAB216992211E39A4395234025ED93</rdf:li> <rdf:li>xmp.did:BAB2166A27CBE3119920EC2A4207D5A5</rdf:li> <rdf:li>xmp.did:BAC9884AEE206811A2DF
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 6b d1 e8 5a e7 45 6c 1e 7b d0 a4 7e 1c d4 90 6e b8 23 a8 af 65 05 f1 b9 3d 13 9b e7 5a 41 c5 bb ad 34 a7 75 07 80 e4 4d 82 bc 70 25 b2 a1 cc 90 c2 69 fe 23 51 e5 f2 b1 54 fe 8e f9 22 4a 8d 2e d3 f3 ae 85 1b 1f 05 26 00 3b 01 dd e9 71 7d 8a bd 21 f8 9b d1 96 27 ce 7d 65 92 4b 92 67 a4 b9 ee 17 c5 72 e5 b7 1a 4c 7b 10 3f a4 3c fb 68 ec 40 ed b8 b1 d7 48 29 69 ad b3 dd f0 e3 00 02 ae ef 68 6c 6a 1c 2d 32 aa db 90 4a f6 c3 fd 5e de 0d 4e 78 66 1a 53 9c 6f 31 f7 a8 36 d9 0c eb 1d 7a 3d 30 4d ca 8e 2c ad 6e 69 36 25 1b c6 38 4c c9 75 18 73 12 4d 96 c5 77 83 1e ec 39 85 45 41 b4 48 68 45 b2 b2 4e 9e 74 e8 e2 97 e2 ce 5a 65 9f 48 05 18 10 d0 f4 0f 64 32 d1 97 6c 4b 37 48 bb 8f f4 64 fc e0 b4 eb e8 2e 7f 1b 59 2b 11 36 d5 c5 2d c6 48 e4 15 12 37 86 c7 1d f9 b1 42 Data Ascii: kZEl{~n#e=ZA4uMp%i#QT"J.&;q}!'}eKgrL{?<h@H)ihlj-2J^NxfSo16z=0M,ni6%8LusMw9EAHhENtZeHd2lK7Hd.Y+6-H7B
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 2c d0 cb 03 95 dc 67 9e 79 e0 2e 55 9a a2 82 6b 72 e4 85 20 1c 98 15 b8 b1 67 af 15 56 57 4f 17 91 d4 70 7a 91 8e 56 b9 63 fb a4 59 41 4f 09 d2 d2 eb 12 b5 f5 c4 36 99 b6 47 c7 73 03 16 38 32 28 23 8d 11 31 f1 b6 44 2d a2 41 95 b5 ca 53 dd 49 13 16 1f 40 18 49 ae 52 3e 6a 4b 8c 86 27 b7 d6 8d fa 2e 4f 26 4d 33 93 12 54 6e 31 88 e4 91 15 ab af b5 7d f2 0f e2 a9 16 32 89 93 ac 20 a3 92 b3 5d 09 c5 1b 59 1b 99 2d 73 51 a3 f9 8b 22 31 55 43 29 58 b5 f6 f1 c4 3c f2 f9 4f 20 cb 1e 46 d5 45 81 5e d6 9e 52 ce ef 0c a7 a4 53 9d 5f 54 2c 2f 2d 3e fc 24 8d bb d2 00 b3 42 3a a8 76 39 9d 62 12 28 dd 77 4e c5 ae d5 2b c7 58 82 46 b9 b1 aa a8 55 cd 81 65 29 55 7e 42 f0 84 2e 39 91 97 19 21 48 32 be 14 76 1d 4e 39 69 61 a0 d3 c8 b3 75 a5 63 b1 9d 55 03 d6 b3 ab 02 1d f5 Data Ascii: ,gy.Ukr gVWOpzVcYAO6Gs82(#1D-ASI@IR>jK'.O&M3Tn1}2 ]Y-sQ"1UC)X<O FE^RS_T,/->$B:v9b(wN+XFUe)U~B.9!H2vN9iaucU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.6	49738	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:28 UTC	684	OUT	GET /file/400780400436/1/AFpKVW0u5fw.267441/5fd61b6d2531113c45 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:29 UTC	350	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:28 GMT Content-Type: image/jpeg Content-Length: 267441 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:28 GMT ETag: "34e400e6b9f6e9997090b1fcc01ff3a9da071d51" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:29 UTC	16034	IN	Data Raw: ff d8 ff e1 26 d0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 94 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 38 3a 31 33 20 31 34 3a 34 37 3a 33 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 58 a0 03 00 04 00 00 00 01 00 00 01 7a 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: &ExifMM*bj(1"r2i''Adobe Photoshop 25.11 (Macintosh)2024:08:13 14:47:32Xz"
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: af 63 62 66 5a fc 4c f6 3e dc 56 34 b9 82 b2 03 d9 bc 96 b9 f3 ff 00 7c 73 2d f7 ab b5 74 97 d0 dd de 8d d6 f4 bb cb d9 5b 1e ff 00 44 7b 83 b6 6e b7 e9 6e a7 db eb 55 fe 15 37 27 09 31 c4 78 84 21 18 55 42 1f ae 11 e3 fe 8f ee e5 fd 5f fd 4f d1 93 83 fd 5a ff 00 77 d0 65 3a 37 c5 44 13 e8 ed 29 42 3e ae 18 fe f3 9d 6d 7d 63 a7 e2 d5 9d 91 96 cc 87 3a bb 70 e8 a5 cf 17 58 c6 58 d2 5e fd b7 31 ff 00 ab 7b be 9e ff 00 fc 0d 66 64 59 8a fe 9b 83 8d 4d 7b 72 31 cd e6 fb 23 e9 07 bc 3a 9d 8e fa 4e 6d 75 b5 6b 66 31 bd 29 ad fb 35 cd a0 5f 53 f1 2f d8 f3 61 b6 b7 7f 3c d8 da f6 57 bf db fa 3a be 82 cb 36 82 2a a6 c2 ff 00 4a bf 6d 21 f2 19 58 71 dc ed 9b ff 00 9b 63 ac 77 a8 fd a8 fb 43 88 11 1e 01 19 19 47 87 d2 64 3f 59 1a c9 c1 f3 c7 f5 bf fa 91 8b ef 22 51 Data Ascii: cbfZL>V4\|s-t[D{nnU7'1x!UB_OZwe:7D)B>m}c:pXX^1{fdYM{r1#:Nmukf1)5_S/a<W:6*Jm!XqcwCGd?Y"Q
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 69 3e 34 38 35 42 42 42 44 35 35 31 37 39 39 38 30 43 43 38 41 46 45 39 46 39 39 35 32 34 39 32 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 39 36 42 42 34 44 36 41 34 44 43 46 44 33 32 45 33 33 38 31 42 46 31 39 32 43 46 37 45 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 39 39 39 35 38 36 43 37 39 36 37 44 34 45 45 35 36 39 30 46 39 33 34 33 44 30 35 44 35 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 46 34 31 36 34 39 35 30 44 46 38 36 38 36 33 34 39 41 30 32 34 30 33 44 36 30 33 39 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 33 36 36 31 41 37 36 37 42 45 31 39 39 44 36 44 44 45 35 32 32 46 41 45 36 44 32 32 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 45 36 Data Ascii: i>485BBBD55179980CC8AFE9F995249273</rdf:li> <rdf:li>496BB4D6A4DCFD32E3381BF192CF7E2D</rdf:li> <rdf:li>4999586C7967D4EE5690F9343D05D5C5</rdf:li> <rdf:li>4AF4164950DF8686349A02403D603915</rdf:li> <rdf:li>4D3661A767BE199D6DDE522FAE6D2234</rdf:li> <rdf:li>4E6
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 6f 73 68 6f 70 3a 32 31 37 32 32 37 35 38 2d 63 66 37 63 2d 31 31 37 61 2d 61 36 33 61 2d 62 64 31 30 38 34 34 64 34 31 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 31 38 31 35 32 35 65 2d 38 64 39 39 2d 31 31 37 61 2d 39 65 33 32 2d 66 33 36 65 32 36 33 61 36 33 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 31 61 31 31 33 61 34 2d 65 37 66 35 2d 66 37 34 30 2d 38 33 32 32 2d 63 66 36 61 63 63 37 62 39 35 30 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 32 34 32 61 37 38 62 2d 61 35 30 30 2d 30 37 34 32 2d 62 30 Data Ascii: oshop:21722758-cf7c-117a-a63a-bd10844d4190</rdf:li> <rdf:li>adobe:docid:photoshop:2181525e-8d99-117a-9e32-f36e263a6341</rdf:li> <rdf:li>adobe:docid:photoshop:21a113a4-e7f5-f740-8322-cf6acc7b9501</rdf:li> <rdf:li>adobe:docid:photoshop:2242a78b-a500-0742-b0
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 61 35 33 61 64 66 37 2d 39 63 66 38 2d 31 31 37 61 2d 62 63 37 36 2d 65 32 63 33 31 63 39 37 61 30 64 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 61 35 61 34 66 38 32 2d 36 36 33 32 2d 31 31 65 37 2d 38 37 32 62 2d 62 32 39 30 35 39 35 38 34 63 63 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 62 30 39 36 62 63 61 2d 38 32 31 30 2d 31 31 37 62 2d 61 35 36 63 2d 39 39 30 37 31 65 62 66 32 31 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 Data Ascii: rdf:li> <rdf:li>adobe:docid:photoshop:7a53adf7-9cf8-117a-bc76-e2c31c97a0df</rdf:li> <rdf:li>adobe:docid:photoshop:7a5a4f82-6632-11e7-872b-b29059584cc8</rdf:li> <rdf:li>adobe:docid:photoshop:7b096bca-8210-117b-a56c-99071ebf2144</rdf:li> <rdf:li>adobe:docid
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 34 31 2d 31 63 61 61 2d 31 31 37 63 2d 62 39 39 32 2d 63 35 61 32 32 32 34 37 30 66 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 65 35 38 33 32 64 35 2d 65 61 36 63 2d 30 61 34 33 2d 39 32 65 66 2d 32 38 64 33 64 63 32 66 62 66 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 65 62 31 36 31 38 36 2d 61 33 37 37 2d 31 31 37 62 2d 61 35 62 62 2d 66 37 35 37 35 66 36 33 31 32 64 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 66 38 38 34 32 33 61 2d 33 38 35 36 2d 30 31 34 36 2d 38 36 64 36 2d 30 64 63 61 36 63 36 65 31 Data Ascii: 41-1caa-117c-b992-c5a222470f65</rdf:li> <rdf:li>adobe:docid:photoshop:ce5832d5-ea6c-0a43-92ef-28d3dc2fbf89</rdf:li> <rdf:li>adobe:docid:photoshop:ceb16186-a377-117b-a5bb-f7575f6312db</rdf:li> <rdf:li>adobe:docid:photoshop:cf88423a-3856-0146-86d6-0dca6c6e1
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 35 34 41 30 43 46 36 44 38 42 39 45 32 31 31 38 38 39 35 42 33 35 43 42 31 39 33 33 34 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 36 35 36 30 30 31 39 43 34 46 46 45 31 31 31 39 30 39 30 45 32 30 41 36 39 33 33 42 44 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 36 46 32 33 35 37 45 45 34 43 42 45 31 31 31 41 35 45 30 41 34 30 42 31 42 37 36 36 44 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 39 46 36 44 33 41 33 45 39 32 45 44 46 31 31 39 41 35 34 38 32 30 30 45 37 46 34 44 39 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 42 38 36 37 34 36 38 30 43 33 Data Ascii: C</rdf:li> <rdf:li>uuid:E54A0CF6D8B9E2118895B35CB19334F9</rdf:li> <rdf:li>uuid:E6560019C4FFE1119090E20A6933BDDE</rdf:li> <rdf:li>uuid:E6F2357EE4CBE111A5E0A40B1B766D63</rdf:li> <rdf:li>uuid:E9F6D3A3E92EDF119A548200E7F4D9B0</rdf:li> <rdf:li>uuid:EB8674680C3
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 45 42 33 36 36 36 32 31 36 32 30 36 38 31 31 42 36 34 32 43 41 45 31 32 35 30 32 31 30 45 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 61 30 33 63 36 61 36 2d 32 35 38 64 2d 34 37 36 33 2d 38 35 63 63 2d 35 63 38 63 39 31 61 66 35 32 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 61 35 66 64 64 36 64 2d 62 33 31 30 2d 30 37 34 64 2d 38 31 38 32 2d 63 38 33 32 32 62 63 31 31 37 38 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 61 37 30 64 33 64 61 2d 30 65 30 30 2d 62 30 34 64 2d 61 33 64 34 2d 38 37 66 35 35 61 31 31 31 31 33 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 Data Ascii: rdf:li> <rdf:li>xmp.did:9EB3666216206811B642CAE1250210E3</rdf:li> <rdf:li>xmp.did:9a03c6a6-258d-4763-85cc-5c8c91af5270</rdf:li> <rdf:li>xmp.did:9a5fdd6d-b310-074d-8182-c8322bc1178a</rdf:li> <rdf:li>xmp.did:9a70d3da-0e00-b04d-a3d4-87f55a11113d</rdf:li> <rd
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: d3 d7 5b 8e db 37 c8 3a 77 d7 2a 74 35 e5 d6 e6 cd 8c e4 5b 39 ce 48 00 04 bd 5c 40 bb 69 c6 ee f7 e7 3b f1 29 48 78 a4 98 5d ed d6 f3 7d 35 ba 23 9f e4 7f a9 05 0a 6d f3 73 6c 86 df a3 5e 5c 7a b0 fa e7 97 d4 bd 24 4e 71 70 9b 94 d1 30 16 8c b3 e5 3a 5b 3f f2 e7 a2 d3 bf bf 3c c1 b4 b8 c1 cb 40 d8 49 62 85 90 b9 09 d8 6f a1 99 1c b9 b7 33 91 83 91 96 31 24 3e e0 bf aa 66 f9 89 7c ef 3c 77 9e 39 d3 f8 36 f5 6f 1f 07 10 bd 35 ec 3c 99 5f 1a e1 c6 4b 9f 54 ca 7a bd 5e d7 7a 3d ab f3 af 1a 16 51 3f 20 a6 57 b7 5e 7f 78 e0 3d d8 90 c6 ac 1c 8f c6 67 c6 82 f9 15 7d 89 c1 17 dd bd 32 37 03 a4 80 00 c1 c9 ea b5 69 a7 e8 6d 4f 43 83 15 e4 f7 46 3c b1 61 94 fc 4d c3 b6 7f 59 62 61 3d 28 5c 9a 76 37 ae 33 e2 ee 77 80 5e 53 3c e2 3c e5 96 f7 19 3d 63 39 5e 7d 3c c7 Data Ascii: [7:w*t5[9H\@i;)Hx]}5#msl^\z$Nqp0:[?<@Ibo31$>f\|<w96o5<_KTz^z=Q? W^x=g}27imOCF<aMYba=(\v73w^S<<=c9^}<
2024-09-29 02:42:29 UTC	16384	IN	Data Raw: 29 74 e3 8f 17 04 fe 55 bf a7 d1 71 1a 43 b8 c0 68 71 a1 69 d1 ef 17 01 88 1e 0b 58 d1 e3 9b 8b 5a 54 8d fa 7d 15 73 9c 61 1c 35 29 be 45 7e 50 56 86 4e 5f c0 1c 19 a9 88 bc e3 1c cf 0e 71 15 79 c8 9f d7 8f 72 22 f3 91 3f a6 47 fb 6a ab cf 2b 8b 91 1f ca 39 de 28 ae 55 73 5e ad c4 94 b8 b2 5c b8 e7 aa e7 39 cf dd 57 11 71 1c 89 8e fb a0 86 83 62 23 79 4e 71 55 7e 89 fa bb ef 91 fe eb cb 98 af 66 50 d4 c3 74 6d 9e b0 50 8e 51 3d c8 91 57 18 26 a2 89 ac 6a 35 aa b9 f1 bb 38 54 c6 3b 06 65 46 bd f9 ae d1 bc 10 2d 4d 5a 17 1d 04 85 67 eb 12 58 e4 27 d1 71 43 22 b6 3b 21 ab c8 de 1a 8d 88 05 4f 91 11 1e aa 8b 02 2c 73 e3 63 b9 a9 73 12 34 64 e7 1e 6f 35 57 27 0a 44 54 57 a6 7c 9f 70 c8 20 1d ca bb e8 8f 45 54 5e 31 1e d5 5e 73 9c 86 bf bf 1d c7 3c a6 46 2b 5a Data Ascii: )tUqChqiXZT}sa5)E~PVN_qyr"?Gj+9(Us^\9Wqb#yNqU~fPtmPQ=W&j58T;eF-MZgX'qC";!O,scs4do5W'DTW\|p ET^1^s<F+Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.6	49743	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:29 UTC	585	OUT	GET /js/tgsticker.js?31 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:30 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:30 GMT Content-Type: application/javascript Content-Length: 24604 Last-Modified: Wed, 29 Mar 2023 11:31:32 GMT Connection: close ETag: "64242194-601c" Expires: Thu, 03 Oct 2024 02:42:30 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:30 UTC	15991	IN	Data Raw: 76 61 72 20 52 4c 6f 74 74 69 65 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 76 61 72 20 72 6c 6f 74 74 69 65 20 3d 20 7b 7d 2c 20 61 70 69 49 6e 69 74 53 74 61 72 74 65 64 20 3d 20 66 61 6c 73 65 2c 20 61 70 69 49 6e 69 74 65 64 20 3d 20 66 61 6c 73 65 2c 20 69 6e 69 74 43 61 6c 6c 62 61 63 6b 73 20 3d 20 5b 5d 3b 0a 20 20 76 61 72 20 64 65 76 69 63 65 52 61 74 69 6f 20 3d 20 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 20 7c 7c 20 31 3b 0a 0a 20 20 76 61 72 20 73 74 61 72 74 54 69 6d 65 20 3d 20 2b 28 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 54 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 27 5b 27 20 2b 20 28 28 2b 28 6e 65 77 20 44 61 74 65 28 29 29 20 2d 20 73 74 61 72 74 54 Data Ascii: var RLottie = (function () { var rlottie = {}, apiInitStarted = false, apiInited = false, initCallbacks = []; var deviceRatio = window.devicePixelRatio \|\| 1; var startTime = +(new Date()); function dT() { return '[' + ((+(new Date()) - startT
2024-09-29 02:42:30 UTC	8613	IN	Data Raw: 65 72 2e 73 65 6e 64 51 75 65 72 79 28 27 72 65 6e 64 65 72 46 72 61 6d 65 27 2c 20 69 74 65 6d 2e 72 65 71 49 64 2c 20 72 65 61 6c 46 72 61 6d 65 4e 6f 2c 20 69 74 65 6d 2e 63 6c 61 6d 70 65 64 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 69 74 65 6d 2e 77 6f 72 6b 65 72 2e 73 65 6e 64 51 75 65 72 79 28 27 72 65 6e 64 65 72 46 72 61 6d 65 27 2c 20 69 74 65 6d 2e 72 65 71 49 64 2c 20 72 65 61 6c 46 72 61 6d 65 4e 6f 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 64 54 28 29 2c 20 27 5b 27 2b 74 68 69 73 2e 70 6c 61 79 65 72 49 64 2b 27 2e 27 2b 69 74 65 6d 2e 72 65 71 49 64 2b 27 5d 27 2c 20 27 72 65 71 75 65 73 74 20 66 72 61 6d 65 23 27 2b 66 72 61 6d 65 4e 6f 2b 27 20 28 Data Ascii: er.sendQuery('renderFrame', item.reqId, realFrameNo, item.clamped); } else { item.worker.sendQuery('renderFrame', item.reqId, realFrameNo); } // console.log(dT(), '['+this.playerId+'.'+item.reqId+']', 'request frame#'+frameNo+' (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.6	49744	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:29 UTC	662	OUT	GET /img/twitter.png HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?241 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:30 UTC	337	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:30 GMT Content-Type: image/png Content-Length: 1272 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-4f8" Expires: Thu, 03 Oct 2024 02:42:30 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:30 UTC	1272	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 11 08 06 00 00 00 32 86 e7 80 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.6	49742	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:29 UTC	668	OUT	GET /img/SiteDesktop.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?241 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:30 UTC	341	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:30 GMT Content-Type: image/jpeg Content-Length: 97628 Last-Modified: Tue, 11 Jun 2019 13:49:53 GMT Connection: close ETag: "5cffb181-17d5c" Expires: Thu, 03 Oct 2024 02:42:30 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:30 UTC	16043	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyd1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xm
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: d9 39 25 8c aa 28 9b 10 55 48 99 53 2a b2 c3 2a 44 c7 b2 49 52 a0 c5 8a f9 3b 35 e6 db 5c 66 1e 85 61 0d 04 ca d0 4b 71 2c 92 14 83 42 d0 46 3a 5d 31 f2 95 dc 9d b9 e7 1e 7a e6 6d a9 71 77 5d d3 b6 bb 4d 27 16 f1 7d 9e 97 45 25 4c 53 39 3d 55 f3 a4 33 97 16 9b f7 6c 34 f4 e3 c0 ee f7 bd e3 ec d6 4a 54 ec ae d6 18 55 b8 ba e0 d1 3f c0 e1 47 61 8b b3 cd e0 6c dc 7b 07 2c c9 a8 0f 61 11 e3 b2 c4 fa 66 a2 47 71 a7 ed d3 64 6a 7d 36 2a b2 7a 4a bb a4 9a db 69 0a 49 12 96 7c cb 54 4d 52 ce 98 ae 5b 7a 3c 73 7d d3 b7 db ef 94 6a a7 c4 f0 8f 02 a3 8a 8f 0e 2f 16 ea e8 b6 2d 86 8f 7b 58 76 ee ad 76 59 3e f9 5c a5 be e1 ce 8e df 0c 71 9a 9b 6d 4d cb 8b 05 54 95 15 5b ab 77 16 23 b8 75 7b cf 49 80 ee 35 09 f9 24 94 c8 91 11 75 71 9e 90 96 c9 29 41 3c eb 26 85 ba 48 Data Ascii: 9%(UHS*DIR;5\faKq,BF:]1zmqw]M'}E%LS9=U3l4JTU?Gal{,afGqdj}6zJiI\|TMR[z<s}j/-{XvvY>\qmMT[w#u{I5$uq)A<&H
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 11 a1 a4 87 b7 65 f9 b6 7a 86 94 f3 f9 9b 6e 37 63 b2 de 29 d3 72 8e 09 62 a8 fa 2b 86 ea 9c a6 5a f6 59 dc 9a ba a9 71 2a 27 bd ee 72 6e 95 aa e9 65 05 bb dd 39 65 7b 5d 5b 88 4d 7a 75 2e 48 9c 9a 6d bd 5b 12 31 87 64 ca ae 7e 6d 74 b2 6d 05 16 43 ec 30 6a 4c 86 1e 42 b4 5f 22 8b 52 22 2e dd 30 e9 bc cb 63 52 77 e1 38 ce 16 ec b8 ba cd 25 44 d6 29 d1 ee 6b ac da 65 21 dc e6 64 94 b8 a3 25 5c 5d 5e 18 55 e0 b6 f4 a5 e5 2d 0b b5 f3 ea 5e 7e b2 d2 33 91 2c 60 bc e4 59 91 5d fe b8 c3 cc ab 91 4d 2b 8a 8b 54 69 a7 03 32 f3 70 1d 46 46 fd 9c ce 52 17 f2 f2 e2 b3 35 54 fa 55 5e 24 d5 b3 a4 cd 5c 66 b8 dc c7 71 f5 72 9f a7 49 54 a2 3f 7e 0c 73 23 32 e1 c0 7b 1e 9d 04 f2 16 1b db dd 43 f3 51 c2 e6 ee 45 66 6e f4 f1 cb e7 64 e3 d5 87 e9 6a 92 f2 99 eb ae a7 ef 79 Data Ascii: ezn7c)rb+ZYq*'rne9e{][Mzu.Hm[1d~mtmC0jLB_"R".0cRw8%D)ke!d%\]^U-^~3,`Y]M+Ti2pFFR5TU^$\fqrIT?~s#2{CQEfndjy
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: f2 b2 bf 92 51 b9 7a 0b 8b ba ed 29 cd 71 28 b5 6d d1 a9 4e 8d cd 45 d1 70 c5 e3 56 91 e9 6f e2 c7 cc da d5 6e 37 5c 5b 5f bb 5b a1 8b 6d 54 3d d6 e9 7a 56 df c4 b7 c8 72 aa 2c 5e 4b ab 9d 97 ca ab ba 7b 1f 93 7b 3e ba 2d 85 85 34 7b 14 be 6d a1 66 ae 53 25 19 72 6a 64 d5 ed dc 96 46 dc 63 16 da bb 2a d3 1d d4 dd b8 bb 4e b9 08 e6 24 e4 d2 ac 16 dc 37 f5 9d ed 74 6b d1 9e dc 74 c5 bd 58 be f0 ee 27 58 7d 1f d9 54 6c fe 1b 92 e1 d8 6b 5b 69 b9 54 55 56 b9 a4 4b d5 5a 1c 8c bf 72 d7 92 e4 c9 af aa 76 b6 aa c1 d4 f8 3a e3 7d b5 bc 49 51 af 44 19 af 9b 79 7b cf f1 27 b7 a1 fa 36 1b a5 7e ca fc 68 fa 57 b4 f1 07 77 bc a7 5b 91 64 f0 ea ae 37 09 50 22 6e 3e 77 73 55 37 1c dc 9b 9a ea 27 1a 9d 9e 5f da c3 9d 45 4a cb 89 ae 80 d4 c8 13 49 69 7d af a6 1b aa ef 92 Data Ascii: Qz)q(mNEpVon7\[_[mT=zVr,^K{{>-4{mfS%rjdFc*N$7tktX'X}Tlk[iTUVKZrv:}IQDy{'6~hWw[d7P"n>wsU7'_EJIi}
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: cc 8b 3e b9 a9 63 1f 91 6f cd 5f 02 34 4c 76 2a 94 b8 b8 f5 45 4c 18 4c d6 54 d2 c7 71 c5 2c 99 61 b4 f3 38 b5 ad 66 a5 ad 4a 3c cf 50 af e2 fa fe 83 14 72 ca 38 45 e1 e4 2d 5d ce ed e4 59 0c 76 62 5e 4f b4 b4 89 1d d6 5e 62 34 a9 6d a9 86 9e 61 a9 2c 30 f2 1b 43 08 49 3a d3 33 1d 4a 55 da 49 71 45 e5 14 f8 f5 f5 7d 7f 41 5f 87 eb 20 6a 77 09 ba 97 df 7c a8 6b 6c fb f8 6f c3 36 6e 18 6e 7c 76 89 fe 5f cf 31 db 51 20 d9 98 d7 2f a0 e1 1e a9 23 3f 38 7c 72 fa be bf a0 77 0f a4 aa 71 4c 2f 33 ea 3b 39 2a 1c 2e 8a 92 b6 69 45 39 af 47 88 d3 b0 2a 20 32 47 1a 1a 54 d4 58 8d 4b 90 a7 65 3e 68 4a 19 69 0e 2d c7 16 67 c0 b5 d2 66 9f a7 e7 39 83 35 f0 d9 45 08 a8 41 ca 52 93 a4 62 b6 55 ba 74 e0 92 44 5c ee 7b 2f a4 58 ef ef f1 cb 8a 4a 2a 31 55 72 78 ba 2f 32 ae Data Ascii: >co_4LvELLTq,a8fJ<Pr8E-]Yvb^O^b4ma,0CI:3JUIqE}A_ jw\|klo6nn\|v_1Q /#?8\|rwqL/3;9.iE9G* 2GTXKe>hJi-gf95EARbUtD\{/XJ*1Urx/2
2024-09-29 02:42:30 UTC	16049	IN	Data Raw: 4a 54 a3 c0 7a 7f d5 27 f4 1f 05 b7 14 8f 4f 9b ba bd be e0 c4 fc 03 e4 fa 55 66 75 3a 7f 49 67 fd 9c ce bf e6 4b e3 93 74 fb ab 94 ff 00 f7 5d 43 ff 00 13 21 8b db 6b d5 29 99 99 60 1d 3f 9a 35 3d 3f c1 6d c5 25 19 11 6b a6 bf ae a1 f1 f9 82 34 bc 09 e5 18 ff 00 da 75 1f f4 96 7f d9 cc df fd c8 3c 72 5e f6 95 ca 9f fb ae a1 ff 00 89 93 ea ef 6d 47 52 52 d4 84 bb 82 ec 41 73 68 5a 37 8d 67 e4 7c 4f 43 32 35 6e 72 f8 24 88 cc c4 5b be 07 72 bc 2b c1 98 d4 3c f3 b3 ff 00 50 4c ca 7f cc 67 c6 cb d7 54 2e e9 7c aa 97 56 5b 3f f8 75 2d c5 c7 81 ed 70 ea 02 c8 9a 3f 82 5b 27 a7 a0 e2 79 31 dc e1 27 de b7 ca a7 12 7c fb 90 64 49 49 2b 5d 7f 14 73 d9 9f 09 79 7f 2f 5f d2 e7 b0 7f 5e df 9b fc 89 e8 3a 6f ef d9 e2 e6 79 c5 fd df cb 4e 12 8e ec be 75 3a af 79 63 a8 Data Ascii: JTz'OUfu:IgKt]C!k)`?5=?m%k4u<r^mGRRAshZ7g\|OC25nr$[r+<PLgT.\|V[?u-p?['y1'\|dII+]sy/_^:oyNu:yc

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.6	49745	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:29 UTC	668	OUT	GET /img/SiteAndroid.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?241 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:30 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:30 GMT Content-Type: image/jpeg Content-Length: 21090 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-5262" Expires: Thu, 03 Oct 2024 02:42:30 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:30 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 01 22 a0 03 00 04 00 00 00 01 00 00 01 0e 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 0e 01 22 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i"8Photoshop 3.08BIM8BIM%B~""}!1AQa"q2#BR$3br
2024-09-29 02:42:30 UTC	5046	IN	Data Raw: 25 51 c0 91 02 be 38 2c 46 05 4c 70 95 2a 51 e4 9c ae ff 00 af f2 35 af c0 d9 f6 73 92 d2 8d 6a ae a6 22 94 dc 94 6a 49 eb 09 25 1b 73 7b d6 69 c5 b5 7f 3d af 73 cc 7e 0f 5d f8 96 7f d9 f3 51 83 c4 17 53 cf a3 5a f8 9e d2 db c2 eb 29 3e 5a 32 59 ea 12 ea 9f 67 1f f3 cf 33 42 66 23 8f 31 90 13 90 05 7d f7 ff 00 04 de b5 d4 af 3f 63 cf 1b c7 a5 17 13 a7 8c a7 98 88 fe f9 8a 2b 7d 39 e5 0b ea 4c 6a d8 1d eb e4 2f 16 f8 9b 5e f1 04 71 dd eb 33 ad cb 5b 5b fd 8a d2 de 08 21 b4 b3 b1 b6 63 b9 a3 b6 b5 b7 48 e1 85 0b 72 db 57 2c 70 58 9c 0a fb fb fe 09 17 c7 ec ed e2 5c ff 00 d0 e5 79 ff 00 a4 56 35 ec 65 6e 58 35 19 ee e2 d3 fb ba 1f cc 5e 38 70 66 2b 2a a3 83 cb 31 93 51 a9 56 15 64 f9 6e d4 39 9a 8a 49 e9 76 ad 76 f4 f7 9b f5 3e 2c fd b6 fe 2a e9 f6 3e 19 d5 Data Ascii: %Q8,FLpQ5sj"jI%s{i=s~]QSZ)>Z2Yg3Bf#1}?c+}9Lj/^q3[[!cHrW,pX\yV5enX5^8pf+1QVdn9Ivv>,*>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.6	49746	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:29 UTC	407	OUT	GET /js/main.js?47 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:30 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:30 GMT Content-Type: application/javascript Content-Length: 21478 Last-Modified: Sat, 10 Dec 2022 23:01:54 GMT Connection: close ETag: "63950fe2-53e6" Expires: Thu, 03 Oct 2024 02:42:30 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:30 UTC	15991	IN	Data Raw: 76 61 72 20 73 74 61 72 74 54 69 6d 65 20 3d 20 2b 28 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 64 54 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 27 5b 27 20 2b 20 28 28 2b 28 6e 65 77 20 44 61 74 65 28 29 29 20 2d 20 73 74 61 72 74 54 69 6d 65 29 2f 20 31 30 30 30 2e 30 29 20 2b 20 27 5d 20 27 3b 0a 7d 0a 0a 76 61 72 20 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 73 20 3d 20 5b 5d 3b 0a 66 75 6e 63 74 69 6f 6e 20 74 77 69 74 74 65 72 43 75 73 74 6f 6d 53 68 61 72 65 49 6e 69 74 20 28 29 20 7b 0a 20 20 76 61 72 20 62 74 6e 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c Data Ascii: var startTime = +(new Date());function dT() { return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';}var jsonpCallbacks = [];function twitterCustomShareInit () { var btns = document.querySelectorAll ? document.querySelectorAll
2024-09-29 02:42:30 UTC	5487	IN	Data Raw: 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 58 20 3d 20 65 2e 63 6c 69 65 6e 74 58 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 59 20 3d 20 65 2e 63 6c 69 65 6e 74 59 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 58 20 3d 20 28 63 6c 69 65 6e 74 58 20 2d 20 72 65 63 74 2e 6c 65 66 74 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 57 69 64 74 68 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 59 20 3d 20 28 63 6c 69 65 6e 74 59 20 2d 20 72 65 63 74 2e 74 6f 70 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 Data Ascii: } else { var clientX = e.clientX; var clientY = e.clientY; } var rippleX = (clientX - rect.left) - rippleMask.offsetWidth / 2; var rippleY = (clientY - rect.top) - rippleMask.offsetHeight / 2; var ripple

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.6	49747	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:29 UTC	664	OUT	GET /img/SiteiOS.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?241 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:30 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:30 GMT Content-Type: image/jpeg Content-Length: 31305 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-7a49" Expires: Thu, 03 Oct 2024 02:42:30 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:30 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 01 ba a0 03 00 04 00 00 00 01 00 00 01 0e 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 0e 01 ba 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#BR$3br
2024-09-29 02:42:30 UTC	15261	IN	Data Raw: 4e fb e1 71 14 d9 5c 64 aa 09 0e 3a 66 b0 fc 41 f1 97 4c b3 f0 cc da ff 00 82 34 9b ff 00 1b 5c da 4f 14 77 7a 3e 94 a2 3d 52 da 29 32 5a 49 2d 6e 3c b9 54 20 fe 12 a0 9c 8c 71 cd 7e 85 5d 1b 54 8f f7 e0 00 78 18 1f 37 e1 5f 31 7c 45 f8 3f f0 db e2 86 b6 fa 8a 5e 1d 2f c6 1a 7a af 91 ab e9 17 4b 1e a7 6b b3 ee 79 8a ac 77 20 ee b2 2e 08 e3 a5 55 1c 6c 6b a7 19 fb bd 9a d7 f0 ff 00 87 f4 3c 49 52 a7 34 e5 4d 72 fe 5f 8f f9 9f 9d 69 e2 27 f8 b3 e2 bb 3f 14 69 8b 71 1d ce bd ae c3 6d a2 9b 85 68 ae ec 2d 2d 24 5d e4 21 39 84 a4 70 cb 24 80 75 62 43 67 a5 7e 80 ea 64 7f 67 de 11 c0 30 4d ff 00 a0 1a f9 27 e1 2f c2 1f 12 f8 1f e3 36 a3 a6 78 cb 52 59 a5 f0 76 98 13 4b 10 64 2e a7 0e ae f2 16 d4 25 04 61 48 f2 8c 45 01 f9 64 dc 7a 15 cf d6 5a 83 6e d3 6f 07 fd Data Ascii: Nq\d:fAL4\Owz>=R)2ZI-n<T q~]Tx7_1\|E?^/zKkyw .Ulk<IR4Mr_i'?iqmh--$]!9p$ubCg~dg0M'/6xRYvKd.%aHEdzZno

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.6	49748	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:29 UTC	451	OUT	GET /file/400780400331/1/tuLhKJmWKdw.276665/463e789d166b4e3890 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:30 UTC	350	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:30 GMT Content-Type: image/jpeg Content-Length: 276665 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:30 GMT ETag: "f0a6e0a1f277b5e2f9596d20e90845f7e8d726ff" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:30 UTC	16034	IN	Data Raw: ff d8 ff e1 23 b1 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 94 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 39 3a 30 34 20 32 32 3a 30 38 3a 35 37 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 58 a0 03 00 04 00 00 00 01 00 00 01 81 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: #ExifMM*bj(1"r2i''Adobe Photoshop 25.11 (Macintosh)2024:09:04 22:08:57X"
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 81 57 c1 21 c3 46 5b ee ff 00 ff d2 f4 4e bb 53 ec c1 f6 58 ea 8e e6 82 41 11 05 c3 73 bd df e8 db fa 46 2c 5e ab 5f a3 d4 1f 57 a8 fb 7d 2e 99 02 cb 0e e7 b8 fa 8e d6 d7 7e 73 bd 8b 53 af dc f6 53 b5 9c 90 09 fb f6 ff 00 9d b9 cb 03 22 cc 8b 72 6c 75 de cb 7e c5 b2 d1 3b 8c 87 bc bf dc ed ed fa 5e df cf ff 00 ad a4 26 04 ab b8 5b 28 4a 62 86 80 1d 49 34 3c 1d ea 6e 7d 58 55 b6 b0 d7 bc 34 7b 5c 48 da 04 b5 8e b4 8d df 4e 7d 8c 63 3d 5b ff 00 c1 ac ee 9b d4 7a 83 f3 ae 65 b7 5d 65 75 59 7c b5 f5 b0 31 a2 bb 59 5f b1 d5 ed 7d ac a5 a7 f4 9f e8 54 f1 c5 94 35 b6 33 47 17 6d ae 46 9f 41 bb 9d ee fa 5b df 67 e9 5f fc 85 85 8d 92 fa 33 33 72 2e 73 81 ac e4 58 f9 24 57 b8 5b 0e da e8 d9 e9 fa 9f 4f 67 f8 4f 4f d4 55 f2 e5 22 42 85 51 74 39 58 c0 62 c8 2b 8b d2 Data Ascii: W!F[NSXAsF,^_W}.~sSS"rlu~;^&[(JbI4<n}XU4{\HN}c=[ze]euY\|1Y_}T53GmFA[g_33r.sX$W[OgOOU"BQt9Xb+
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 45 39 37 31 37 43 34 43 44 37 30 41 33 41 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 45 35 39 41 30 39 35 33 34 30 36 34 34 36 33 34 33 31 42 43 36 43 32 42 30 32 35 31 46 41 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 36 46 46 36 30 39 46 31 36 30 42 32 42 37 39 41 41 45 35 34 30 30 32 37 32 42 33 33 32 46 30 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 31 31 41 36 41 34 36 35 45 39 43 39 39 35 35 30 46 41 41 46 45 38 42 32 37 42 36 46 32 41 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 31 34 39 36 37 42 38 38 33 31 46 31 33 43 45 42 39 44 46 44 38 43 30 37 31 33 45 30 33 38 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 37 31 35 35 33 32 44 34 39 43 35 36 32 37 36 43 41 32 34 41 37 43 Data Ascii: E9717C4CD70A3A9</rdf:li> <rdf:li>6E59A09534064463431BC6C2B0251FAE</rdf:li> <rdf:li>6FF609F160B2B79AAE5400272B332F00</rdf:li> <rdf:li>711A6A465E9C99550FAAFE8B27B6F2A8</rdf:li> <rdf:li>714967B8831F13CEB9DFD8C0713E0380</rdf:li> <rdf:li>715532D49C56276CA24A7C
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 64 38 66 33 65 64 35 2d 35 63 66 61 2d 31 31 37 62 2d 62 64 62 30 2d 66 33 35 36 38 33 30 63 39 34 63 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 64 61 31 38 65 64 36 2d 65 30 38 65 2d 31 31 37 61 2d 62 33 30 63 2d 66 35 61 35 62 30 63 61 66 63 34 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 64 65 62 33 35 37 39 2d 32 63 36 31 2d 31 31 37 62 2d 61 37 34 30 2d 61 31 62 64 64 34 63 33 38 65 39 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 Data Ascii: i> <rdf:li>adobe:docid:photoshop:2d8f3ed5-5cfa-117b-bdb0-f356830c94c5</rdf:li> <rdf:li>adobe:docid:photoshop:2da18ed6-e08e-117a-b30c-f5a5b0cafc48</rdf:li> <rdf:li>adobe:docid:photoshop:2deb3579-2c61-117b-a740-a1bdd4c38e99</rdf:li> <rdf:li>adobe:docid:phot
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 62 32 2d 34 34 34 65 2d 39 64 62 32 2d 65 36 30 35 61 39 38 61 32 31 33 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 33 38 36 33 62 62 63 2d 39 30 35 64 2d 31 65 34 38 2d 61 35 33 30 2d 31 31 62 31 62 32 65 61 32 31 37 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 33 63 38 34 33 34 63 2d 61 36 35 39 2d 31 31 37 61 2d 39 66 62 63 2d 39 62 62 64 66 35 37 39 32 35 37 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 38 33 65 61 38 39 39 37 2d 37 30 35 35 2d 31 31 65 37 2d 61 39 66 35 2d 66 38 36 37 62 62 39 39 30 33 37 66 3c 2f Data Ascii: b2-444e-9db2-e605a98a213f</rdf:li> <rdf:li>adobe:docid:photoshop:83863bbc-905d-1e48-a530-11b1b2ea217b</rdf:li> <rdf:li>adobe:docid:photoshop:83c8434c-a659-117a-9fbc-9bbdf579257d</rdf:li> <rdf:li>adobe:docid:photoshop:83ea8997-7055-11e7-a9f5-f867bb99037f</
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 36 34 39 37 62 37 35 2d 33 31 65 37 2d 37 61 34 39 2d 61 34 36 35 2d 63 63 61 63 31 65 36 66 62 39 39 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 36 38 37 33 65 34 39 2d 61 64 61 65 2d 38 31 34 64 2d 61 63 39 37 2d 30 62 34 62 36 61 31 61 37 64 35 37 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 36 63 33 38 33 61 39 2d 31 31 38 61 2d 31 31 37 62 2d 61 61 64 63 2d 63 34 39 33 39 66 62 37 30 31 66 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 64 36 65 63 64 64 Data Ascii: dobe:docid:photoshop:d6497b75-31e7-7a49-a465-ccac1e6fb991</rdf:li> <rdf:li>adobe:docid:photoshop:d6873e49-adae-814d-ac97-0b4b6a1a7d57</rdf:li> <rdf:li>adobe:docid:photoshop:d6c383a9-118a-117b-aadc-c4939fb701f1</rdf:li> <rdf:li>adobe:docid:photoshop:d6ecdd
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 69 64 3a 30 34 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 46 36 32 38 36 36 41 37 44 45 44 33 46 35 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 38 30 31 31 37 34 30 37 32 30 36 38 31 31 38 38 36 46 44 30 33 33 46 33 33 35 39 36 45 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 35 61 31 31 31 36 33 2d 30 30 34 39 2d 30 39 34 30 2d 38 65 66 63 2d 64 34 66 38 61 37 35 34 61 37 61 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 30 41 42 46 44 42 45 32 32 36 38 31 31 41 34 38 36 41 42 34 36 41 43 43 43 39 32 32 32 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 30 36 38 33 46 42 39 38 41 42 32 31 36 38 31 31 Data Ascii: id:04801174072068118F62866A7DED3F50</rdf:li> <rdf:li>xmp.did:0580117407206811886FD033F33596E3</rdf:li> <rdf:li>xmp.did:05a11163-0049-0940-8efc-d4f8a754a7a2</rdf:li> <rdf:li>xmp.did:0680ABFDBE226811A486AB46ACCC9222</rdf:li> <rdf:li>xmp.did:0683FB98AB216811
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 69 64 3a 42 37 38 33 41 35 38 37 30 46 34 32 31 31 45 34 38 36 43 46 45 46 45 44 36 37 34 46 37 32 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 39 37 37 39 38 31 30 43 33 43 43 45 33 31 31 41 34 41 32 42 42 32 36 37 46 35 45 38 33 42 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 39 45 41 42 32 31 36 39 39 32 32 31 31 45 33 39 41 34 33 39 35 32 33 34 30 32 35 45 44 39 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 41 42 32 31 36 36 41 32 37 43 42 45 33 31 31 39 39 32 30 45 43 32 41 34 32 30 37 44 35 41 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 42 41 43 39 38 38 34 41 45 45 32 30 36 38 31 31 41 32 44 46 Data Ascii: id:B783A5870F4211E486CFEFED674F7215</rdf:li> <rdf:li>xmp.did:B9779810C3CCE311A4A2BB267F5E83B8</rdf:li> <rdf:li>xmp.did:B9EAB216992211E39A4395234025ED93</rdf:li> <rdf:li>xmp.did:BAB2166A27CBE3119920EC2A4207D5A5</rdf:li> <rdf:li>xmp.did:BAC9884AEE206811A2DF
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 6b d1 e8 5a e7 45 6c 1e 7b d0 a4 7e 1c d4 90 6e b8 23 a8 af 65 05 f1 b9 3d 13 9b e7 5a 41 c5 bb ad 34 a7 75 07 80 e4 4d 82 bc 70 25 b2 a1 cc 90 c2 69 fe 23 51 e5 f2 b1 54 fe 8e f9 22 4a 8d 2e d3 f3 ae 85 1b 1f 05 26 00 3b 01 dd e9 71 7d 8a bd 21 f8 9b d1 96 27 ce 7d 65 92 4b 92 67 a4 b9 ee 17 c5 72 e5 b7 1a 4c 7b 10 3f a4 3c fb 68 ec 40 ed b8 b1 d7 48 29 69 ad b3 dd f0 e3 00 02 ae ef 68 6c 6a 1c 2d 32 aa db 90 4a f6 c3 fd 5e de 0d 4e 78 66 1a 53 9c 6f 31 f7 a8 36 d9 0c eb 1d 7a 3d 30 4d ca 8e 2c ad 6e 69 36 25 1b c6 38 4c c9 75 18 73 12 4d 96 c5 77 83 1e ec 39 85 45 41 b4 48 68 45 b2 b2 4e 9e 74 e8 e2 97 e2 ce 5a 65 9f 48 05 18 10 d0 f4 0f 64 32 d1 97 6c 4b 37 48 bb 8f f4 64 fc e0 b4 eb e8 2e 7f 1b 59 2b 11 36 d5 c5 2d c6 48 e4 15 12 37 86 c7 1d f9 b1 42 Data Ascii: kZEl{~n#e=ZA4uMp%i#QT"J.&;q}!'}eKgrL{?<h@H)ihlj-2J^NxfSo16z=0M,ni6%8LusMw9EAHhENtZeHd2lK7Hd.Y+6-H7B
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 2c d0 cb 03 95 dc 67 9e 79 e0 2e 55 9a a2 82 6b 72 e4 85 20 1c 98 15 b8 b1 67 af 15 56 57 4f 17 91 d4 70 7a 91 8e 56 b9 63 fb a4 59 41 4f 09 d2 d2 eb 12 b5 f5 c4 36 99 b6 47 c7 73 03 16 38 32 28 23 8d 11 31 f1 b6 44 2d a2 41 95 b5 ca 53 dd 49 13 16 1f 40 18 49 ae 52 3e 6a 4b 8c 86 27 b7 d6 8d fa 2e 4f 26 4d 33 93 12 54 6e 31 88 e4 91 15 ab af b5 7d f2 0f e2 a9 16 32 89 93 ac 20 a3 92 b3 5d 09 c5 1b 59 1b 99 2d 73 51 a3 f9 8b 22 31 55 43 29 58 b5 f6 f1 c4 3c f2 f9 4f 20 cb 1e 46 d5 45 81 5e d6 9e 52 ce ef 0c a7 a4 53 9d 5f 54 2c 2f 2d 3e fc 24 8d bb d2 00 b3 42 3a a8 76 39 9d 62 12 28 dd 77 4e c5 ae d5 2b c7 58 82 46 b9 b1 aa a8 55 cd 81 65 29 55 7e 42 f0 84 2e 39 91 97 19 21 48 32 be 14 76 1d 4e 39 69 61 a0 d3 c8 b3 75 a5 63 b1 9d 55 03 d6 b3 ab 02 1d f5 Data Ascii: ,gy.Ukr gVWOpzVcYAO6Gs82(#1D-ASI@IR>jK'.O&M3Tn1}2 ]Y-sQ"1UC)X<O FE^RS_T,/->$B:v9b(wN+XFUe)U~B.9!H2vN9iaucU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.6	49749	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	670	OUT	GET /img/SiteIconAndroid.svg HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?241 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:30 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:30 GMT Content-Type: image/svg+xml Content-Length: 999 Last-Modified: Mon, 18 Apr 2022 20:19:52 GMT Connection: close ETag: "625dc7e8-3e7" Expires: Thu, 03 Oct 2024 02:42:30 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:30 UTC	999	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 32 37 22 20 77 69 64 74 68 3d 22 32 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 39 2e 33 35 20 31 31 63 2e 37 35 20 30 20 31 2e 33 35 2e 36 37 20 31 2e 33 35 20 31 2e 35 76 36 63 30 20 2e 38 33 2d 2e 36 20 31 2e 35 2d 31 2e 33 35 20 31 2e 35 73 2d 31 2e 33 35 2d 2e 36 37 2d 31 2e 33 35 2d 31 2e 35 76 2d 36 63 30 2d 2e 38 33 2e 36 2d 31 2e 35 20 31 2e 33 35 2d 31 2e 35 7a 6d 2d 31 36 2e 37 20 30 63 2e 37 35 20 30 20 31 2e 33 35 2e 36 37 20 31 2e 33 35 20 31 2e 35 76 36 63 30 20 2e 38 33 2d 2e 36 20 31 2e 35 2d 31 2e 33 35 20 31 2e 35 73 2d 31 2e 33 35 2d 2e Data Ascii: <svg height="27" viewBox="0 0 22 27" width="22" xmlns="http://www.w3.org/2000/svg"><path d="m19.35 11c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm-16.7 0c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.6	49750	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	451	OUT	GET /file/400780400436/1/AFpKVW0u5fw.267441/5fd61b6d2531113c45 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:30 UTC	350	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:30 GMT Content-Type: image/jpeg Content-Length: 267441 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:30 GMT ETag: "34e400e6b9f6e9997090b1fcc01ff3a9da071d51" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:30 UTC	16034	IN	Data Raw: ff d8 ff e1 26 d0 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 07 01 12 00 03 00 00 00 01 00 01 00 00 01 1a 00 05 00 00 00 01 00 00 00 62 01 1b 00 05 00 00 00 01 00 00 00 6a 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 22 00 00 00 72 01 32 00 02 00 00 00 14 00 00 00 94 87 69 00 04 00 00 00 01 00 00 00 a8 00 00 00 d4 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 35 2e 31 31 20 28 4d 61 63 69 6e 74 6f 73 68 29 00 32 30 32 34 3a 30 38 3a 31 33 20 31 34 3a 34 37 3a 33 32 00 00 03 a0 01 00 03 00 00 00 01 ff ff 00 00 a0 02 00 04 00 00 00 01 00 00 02 58 a0 03 00 04 00 00 00 01 00 00 01 7a 00 00 00 00 00 00 00 06 01 03 00 03 00 00 00 01 00 06 00 00 01 1a 00 05 00 00 00 01 00 00 01 22 01 1b 00 05 00 Data Ascii: &ExifMM*bj(1"r2i''Adobe Photoshop 25.11 (Macintosh)2024:08:13 14:47:32Xz"
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: af 63 62 66 5a fc 4c f6 3e dc 56 34 b9 82 b2 03 d9 bc 96 b9 f3 ff 00 7c 73 2d f7 ab b5 74 97 d0 dd de 8d d6 f4 bb cb d9 5b 1e ff 00 44 7b 83 b6 6e b7 e9 6e a7 db eb 55 fe 15 37 27 09 31 c4 78 84 21 18 55 42 1f ae 11 e3 fe 8f ee e5 fd 5f fd 4f d1 93 83 fd 5a ff 00 77 d0 65 3a 37 c5 44 13 e8 ed 29 42 3e ae 18 fe f3 9d 6d 7d 63 a7 e2 d5 9d 91 96 cc 87 3a bb 70 e8 a5 cf 17 58 c6 58 d2 5e fd b7 31 ff 00 ab 7b be 9e ff 00 fc 0d 66 64 59 8a fe 9b 83 8d 4d 7b 72 31 cd e6 fb 23 e9 07 bc 3a 9d 8e fa 4e 6d 75 b5 6b 66 31 bd 29 ad fb 35 cd a0 5f 53 f1 2f d8 f3 61 b6 b7 7f 3c d8 da f6 57 bf db fa 3a be 82 cb 36 82 2a a6 c2 ff 00 4a bf 6d 21 f2 19 58 71 dc ed 9b ff 00 9b 63 ac 77 a8 fd a8 fb 43 88 11 1e 01 19 19 47 87 d2 64 3f 59 1a c9 c1 f3 c7 f5 bf fa 91 8b ef 22 51 Data Ascii: cbfZL>V4\|s-t[D{nnU7'1x!UB_OZwe:7D)B>m}c:pXX^1{fdYM{r1#:Nmukf1)5_S/a<W:6*Jm!XqcwCGd?Y"Q
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 69 3e 34 38 35 42 42 42 44 35 35 31 37 39 39 38 30 43 43 38 41 46 45 39 46 39 39 35 32 34 39 32 37 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 39 36 42 42 34 44 36 41 34 44 43 46 44 33 32 45 33 33 38 31 42 46 31 39 32 43 46 37 45 32 44 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 39 39 39 35 38 36 43 37 39 36 37 44 34 45 45 35 36 39 30 46 39 33 34 33 44 30 35 44 35 43 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 41 46 34 31 36 34 39 35 30 44 46 38 36 38 36 33 34 39 41 30 32 34 30 33 44 36 30 33 39 31 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 44 33 36 36 31 41 37 36 37 42 45 31 39 39 44 36 44 44 45 35 32 32 46 41 45 36 44 32 32 33 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 34 45 36 Data Ascii: i>485BBBD55179980CC8AFE9F995249273</rdf:li> <rdf:li>496BB4D6A4DCFD32E3381BF192CF7E2D</rdf:li> <rdf:li>4999586C7967D4EE5690F9343D05D5C5</rdf:li> <rdf:li>4AF4164950DF8686349A02403D603915</rdf:li> <rdf:li>4D3661A767BE199D6DDE522FAE6D2234</rdf:li> <rdf:li>4E6
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 6f 73 68 6f 70 3a 32 31 37 32 32 37 35 38 2d 63 66 37 63 2d 31 31 37 61 2d 61 36 33 61 2d 62 64 31 30 38 34 34 64 34 31 39 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 31 38 31 35 32 35 65 2d 38 64 39 39 2d 31 31 37 61 2d 39 65 33 32 2d 66 33 36 65 32 36 33 61 36 33 34 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 31 61 31 31 33 61 34 2d 65 37 66 35 2d 66 37 34 30 2d 38 33 32 32 2d 63 66 36 61 63 63 37 62 39 35 30 31 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 32 32 34 32 61 37 38 62 2d 61 35 30 30 2d 30 37 34 32 2d 62 30 Data Ascii: oshop:21722758-cf7c-117a-a63a-bd10844d4190</rdf:li> <rdf:li>adobe:docid:photoshop:2181525e-8d99-117a-9e32-f36e263a6341</rdf:li> <rdf:li>adobe:docid:photoshop:21a113a4-e7f5-f740-8322-cf6acc7b9501</rdf:li> <rdf:li>adobe:docid:photoshop:2242a78b-a500-0742-b0
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 61 35 33 61 64 66 37 2d 39 63 66 38 2d 31 31 37 61 2d 62 63 37 36 2d 65 32 63 33 31 63 39 37 61 30 64 66 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 61 35 61 34 66 38 32 2d 36 36 33 32 2d 31 31 65 37 2d 38 37 32 62 2d 62 32 39 30 35 39 35 38 34 63 63 38 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 37 62 30 39 36 62 63 61 2d 38 32 31 30 2d 31 31 37 62 2d 61 35 36 63 2d 39 39 30 37 31 65 62 66 32 31 34 34 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 Data Ascii: rdf:li> <rdf:li>adobe:docid:photoshop:7a53adf7-9cf8-117a-bc76-e2c31c97a0df</rdf:li> <rdf:li>adobe:docid:photoshop:7a5a4f82-6632-11e7-872b-b29059584cc8</rdf:li> <rdf:li>adobe:docid:photoshop:7b096bca-8210-117b-a56c-99071ebf2144</rdf:li> <rdf:li>adobe:docid
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 34 31 2d 31 63 61 61 2d 31 31 37 63 2d 62 39 39 32 2d 63 35 61 32 32 32 34 37 30 66 36 35 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 65 35 38 33 32 64 35 2d 65 61 36 63 2d 30 61 34 33 2d 39 32 65 66 2d 32 38 64 33 64 63 32 66 62 66 38 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 65 62 31 36 31 38 36 2d 61 33 37 37 2d 31 31 37 62 2d 61 35 62 62 2d 66 37 35 37 35 66 36 33 31 32 64 62 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 61 64 6f 62 65 3a 64 6f 63 69 64 3a 70 68 6f 74 6f 73 68 6f 70 3a 63 66 38 38 34 32 33 61 2d 33 38 35 36 2d 30 31 34 36 2d 38 36 64 36 2d 30 64 63 61 36 63 36 65 31 Data Ascii: 41-1caa-117c-b992-c5a222470f65</rdf:li> <rdf:li>adobe:docid:photoshop:ce5832d5-ea6c-0a43-92ef-28d3dc2fbf89</rdf:li> <rdf:li>adobe:docid:photoshop:ceb16186-a377-117b-a5bb-f7575f6312db</rdf:li> <rdf:li>adobe:docid:photoshop:cf88423a-3856-0146-86d6-0dca6c6e1
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 43 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 35 34 41 30 43 46 36 44 38 42 39 45 32 31 31 38 38 39 35 42 33 35 43 42 31 39 33 33 34 46 39 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 36 35 36 30 30 31 39 43 34 46 46 45 31 31 31 39 30 39 30 45 32 30 41 36 39 33 33 42 44 44 45 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 36 46 32 33 35 37 45 45 34 43 42 45 31 31 31 41 35 45 30 41 34 30 42 31 42 37 36 36 44 36 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 39 46 36 44 33 41 33 45 39 32 45 44 46 31 31 39 41 35 34 38 32 30 30 45 37 46 34 44 39 42 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 75 75 69 64 3a 45 42 38 36 37 34 36 38 30 43 33 Data Ascii: C</rdf:li> <rdf:li>uuid:E54A0CF6D8B9E2118895B35CB19334F9</rdf:li> <rdf:li>uuid:E6560019C4FFE1119090E20A6933BDDE</rdf:li> <rdf:li>uuid:E6F2357EE4CBE111A5E0A40B1B766D63</rdf:li> <rdf:li>uuid:E9F6D3A3E92EDF119A548200E7F4D9B0</rdf:li> <rdf:li>uuid:EB8674680C3
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 45 42 33 36 36 36 32 31 36 32 30 36 38 31 31 42 36 34 32 43 41 45 31 32 35 30 32 31 30 45 33 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 61 30 33 63 36 61 36 2d 32 35 38 64 2d 34 37 36 33 2d 38 35 63 63 2d 35 63 38 63 39 31 61 66 35 32 37 30 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 61 35 66 64 64 36 64 2d 62 33 31 30 2d 30 37 34 64 2d 38 31 38 32 2d 63 38 33 32 32 62 63 31 31 37 38 61 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 66 3a 6c 69 3e 78 6d 70 2e 64 69 64 3a 39 61 37 30 64 33 64 61 2d 30 65 30 30 2d 62 30 34 64 2d 61 33 64 34 2d 38 37 66 35 35 61 31 31 31 31 33 64 3c 2f 72 64 66 3a 6c 69 3e 20 3c 72 64 Data Ascii: rdf:li> <rdf:li>xmp.did:9EB3666216206811B642CAE1250210E3</rdf:li> <rdf:li>xmp.did:9a03c6a6-258d-4763-85cc-5c8c91af5270</rdf:li> <rdf:li>xmp.did:9a5fdd6d-b310-074d-8182-c8322bc1178a</rdf:li> <rdf:li>xmp.did:9a70d3da-0e00-b04d-a3d4-87f55a11113d</rdf:li> <rd
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: d3 d7 5b 8e db 37 c8 3a 77 d7 2a 74 35 e5 d6 e6 cd 8c e4 5b 39 ce 48 00 04 bd 5c 40 bb 69 c6 ee f7 e7 3b f1 29 48 78 a4 98 5d ed d6 f3 7d 35 ba 23 9f e4 7f a9 05 0a 6d f3 73 6c 86 df a3 5e 5c 7a b0 fa e7 97 d4 bd 24 4e 71 70 9b 94 d1 30 16 8c b3 e5 3a 5b 3f f2 e7 a2 d3 bf bf 3c c1 b4 b8 c1 cb 40 d8 49 62 85 90 b9 09 d8 6f a1 99 1c b9 b7 33 91 83 91 96 31 24 3e e0 bf aa 66 f9 89 7c ef 3c 77 9e 39 d3 f8 36 f5 6f 1f 07 10 bd 35 ec 3c 99 5f 1a e1 c6 4b 9f 54 ca 7a bd 5e d7 7a 3d ab f3 af 1a 16 51 3f 20 a6 57 b7 5e 7f 78 e0 3d d8 90 c6 ac 1c 8f c6 67 c6 82 f9 15 7d 89 c1 17 dd bd 32 37 03 a4 80 00 c1 c9 ea b5 69 a7 e8 6d 4f 43 83 15 e4 f7 46 3c b1 61 94 fc 4d c3 b6 7f 59 62 61 3d 28 5c 9a 76 37 ae 33 e2 ee 77 80 5e 53 3c e2 3c e5 96 f7 19 3d 63 39 5e 7d 3c c7 Data Ascii: [7:w*t5[9H\@i;)Hx]}5#msl^\z$Nqp0:[?<@Ibo31$>f\|<w96o5<_KTz^z=Q? W^x=g}27imOCF<aMYba=(\v73w^S<<=c9^}<
2024-09-29 02:42:30 UTC	16384	IN	Data Raw: 29 74 e3 8f 17 04 fe 55 bf a7 d1 71 1a 43 b8 c0 68 71 a1 69 d1 ef 17 01 88 1e 0b 58 d1 e3 9b 8b 5a 54 8d fa 7d 15 73 9c 61 1c 35 29 be 45 7e 50 56 86 4e 5f c0 1c 19 a9 88 bc e3 1c cf 0e 71 15 79 c8 9f d7 8f 72 22 f3 91 3f a6 47 fb 6a ab cf 2b 8b 91 1f ca 39 de 28 ae 55 73 5e ad c4 94 b8 b2 5c b8 e7 aa e7 39 cf dd 57 11 71 1c 89 8e fb a0 86 83 62 23 79 4e 71 55 7e 89 fa bb ef 91 fe eb cb 98 af 66 50 d4 c3 74 6d 9e b0 50 8e 51 3d c8 91 57 18 26 a2 89 ac 6a 35 aa b9 f1 bb 38 54 c6 3b 06 65 46 bd f9 ae d1 bc 10 2d 4d 5a 17 1d 04 85 67 eb 12 58 e4 27 d1 71 43 22 b6 3b 21 ab c8 de 1a 8d 88 05 4f 91 11 1e aa 8b 02 2c 73 e3 63 b9 a9 73 12 34 64 e7 1e 6f 35 57 27 0a 44 54 57 a6 7c 9f 70 c8 20 1d ca bb e8 8f 45 54 5e 31 1e d5 5e 73 9c 86 bf bf 1d c7 3c a6 46 2b 5a Data Ascii: )tUqChqiXZT}sa5)E~PVN_qyr"?Gj+9(Us^\9Wqb#yNqU~fPtmPQ=W&j58T;eF-MZgX'qC";!O,scs4do5W'DTW\|p ET^1^s<F+Z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.6	49751	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	668	OUT	GET /img/SiteIconApple.svg HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/css/telegram.css?241 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:30 GMT Content-Type: image/svg+xml Content-Length: 443 Last-Modified: Mon, 18 Apr 2022 20:19:52 GMT Connection: close ETag: "625dc7e8-1bb" Expires: Thu, 03 Oct 2024 02:42:30 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:31 UTC	443	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 37 22 20 77 69 64 74 68 3d 22 32 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 37 2e 34 39 20 32 35 2e 35 63 2d 31 2e 33 35 20 31 2e 33 31 2d 32 2e 38 34 20 31 2e 31 2d 34 2e 32 36 2e 34 39 2d 31 2e 35 31 2d 2e 36 33 2d 32 2e 38 39 2d 2e 36 37 2d 34 2e 34 39 20 30 2d 31 2e 39 38 2e 38 35 2d 33 2e 30 34 2e 36 2d 34 2e 32 33 2d 2e 34 39 2d 36 2e 37 36 2d 36 2e 39 33 2d 35 2e 37 36 2d 31 37 2e 34 38 20 31 2e 39 31 2d 31 37 2e 38 38 20 31 2e 38 37 2e 31 20 33 2e 31 37 20 31 2e 30 33 20 34 2e 32 37 20 31 2e 31 31 20 31 2e 36 33 2d 2e 33 33 20 33 2e 31 39 2d 31 Data Ascii: <svg height="27" viewBox="0 0 21 27" width="21" xmlns="http://www.w3.org/2000/svg"><path d="m17.49 25.5c-1.35 1.31-2.84 1.1-4.26.49-1.51-.63-2.89-.67-4.49 0-1.98.85-3.04.6-4.23-.49-6.76-6.93-5.76-17.48 1.91-17.88 1.87.1 3.17 1.03 4.27 1.11 1.63-.33 3.19-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.6	49752	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	409	OUT	GET /img/twitter.png HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	337	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:30 GMT Content-Type: image/png Content-Length: 1272 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-4f8" Expires: Thu, 03 Oct 2024 02:42:30 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:31 UTC	1272	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 11 08 06 00 00 00 32 86 e7 80 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.6	49753	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	596	OUT	GET /js/tgsticker-worker.js?14 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: worker Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	392	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: application/javascript Content-Length: 5937 Last-Modified: Wed, 29 Jun 2022 21:52:44 GMT Connection: close ETag: "62bcc9ac-1731" Expires: Thu, 03 Oct 2024 02:42:31 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:31 UTC	5937	IN	Data Raw: 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 72 6c 6f 74 74 69 65 2d 77 61 73 6d 2e 6a 73 27 29 3b 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 70 61 6b 6f 2d 69 6e 66 6c 61 74 65 2e 6d 69 6e 2e 6a 73 27 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 52 4c 6f 74 74 69 65 49 74 65 6d 28 72 65 71 49 64 2c 20 6a 73 53 74 72 69 6e 67 2c 20 77 69 64 74 68 2c 20 68 65 69 67 68 74 2c 20 66 70 73 29 20 7b 0a 20 20 74 68 69 73 2e 73 74 72 69 6e 67 4f 6e 57 61 73 6d 48 65 61 70 20 3d 20 6e 75 6c 6c 3b 0a 20 20 74 68 69 73 2e 68 61 6e 64 6c 65 20 3d 20 6e 75 6c 6c 3b 0a 20 20 74 68 69 73 2e 66 72 61 6d 65 43 6f 75 6e 74 20 3d 20 30 3b 0a 0a 20 20 74 68 69 73 2e 72 65 71 49 64 20 3d 20 72 65 71 49 64 3b 0a 20 20 74 68 69 73 2e 77 69 64 74 68 20 3d 20 77 69 64 74 68 3b 0a Data Ascii: importScripts('rlottie-wasm.js');importScripts('pako-inflate.min.js');function RLottieItem(reqId, jsString, width, height, fps) { this.stringOnWasmHeap = null; this.handle = null; this.frameCount = 0; this.reqId = reqId; this.width = width;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.6	49754	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	412	OUT	GET /js/tgsticker.js?31 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: application/javascript Content-Length: 24604 Last-Modified: Wed, 29 Mar 2023 11:31:32 GMT Connection: close ETag: "64242194-601c" Expires: Thu, 03 Oct 2024 02:42:31 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:31 UTC	15991	IN	Data Raw: 76 61 72 20 52 4c 6f 74 74 69 65 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 76 61 72 20 72 6c 6f 74 74 69 65 20 3d 20 7b 7d 2c 20 61 70 69 49 6e 69 74 53 74 61 72 74 65 64 20 3d 20 66 61 6c 73 65 2c 20 61 70 69 49 6e 69 74 65 64 20 3d 20 66 61 6c 73 65 2c 20 69 6e 69 74 43 61 6c 6c 62 61 63 6b 73 20 3d 20 5b 5d 3b 0a 20 20 76 61 72 20 64 65 76 69 63 65 52 61 74 69 6f 20 3d 20 77 69 6e 64 6f 77 2e 64 65 76 69 63 65 50 69 78 65 6c 52 61 74 69 6f 20 7c 7c 20 31 3b 0a 0a 20 20 76 61 72 20 73 74 61 72 74 54 69 6d 65 20 3d 20 2b 28 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 20 20 66 75 6e 63 74 69 6f 6e 20 64 54 28 29 20 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 27 5b 27 20 2b 20 28 28 2b 28 6e 65 77 20 44 61 74 65 28 29 29 20 2d 20 73 74 61 72 74 54 Data Ascii: var RLottie = (function () { var rlottie = {}, apiInitStarted = false, apiInited = false, initCallbacks = []; var deviceRatio = window.devicePixelRatio \|\| 1; var startTime = +(new Date()); function dT() { return '[' + ((+(new Date()) - startT
2024-09-29 02:42:31 UTC	8613	IN	Data Raw: 65 72 2e 73 65 6e 64 51 75 65 72 79 28 27 72 65 6e 64 65 72 46 72 61 6d 65 27 2c 20 69 74 65 6d 2e 72 65 71 49 64 2c 20 72 65 61 6c 46 72 61 6d 65 4e 6f 2c 20 69 74 65 6d 2e 63 6c 61 6d 70 65 64 29 3b 0a 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 69 74 65 6d 2e 77 6f 72 6b 65 72 2e 73 65 6e 64 51 75 65 72 79 28 27 72 65 6e 64 65 72 46 72 61 6d 65 27 2c 20 69 74 65 6d 2e 72 65 71 49 64 2c 20 72 65 61 6c 46 72 61 6d 65 4e 6f 29 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 2f 2f 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 64 54 28 29 2c 20 27 5b 27 2b 74 68 69 73 2e 70 6c 61 79 65 72 49 64 2b 27 2e 27 2b 69 74 65 6d 2e 72 65 71 49 64 2b 27 5d 27 2c 20 27 72 65 71 75 65 73 74 20 66 72 61 6d 65 23 27 2b 66 72 61 6d 65 4e 6f 2b 27 20 28 Data Ascii: er.sendQuery('renderFrame', item.reqId, realFrameNo, item.clamped); } else { item.worker.sendQuery('renderFrame', item.reqId, realFrameNo); } // console.log(dT(), '['+this.playerId+'.'+item.reqId+']', 'request frame#'+frameNo+' (

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.6	49755	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	684	OUT	GET /file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/png Content-Length: 11343 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:31 GMT ETag: "183936b397813281d8de1b217deb5c565bde1c5b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:31 UTC	11343	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 2c 04 49 44 41 54 78 da ed 9d 77 7c 9c d5 95 f7 7f e7 3c 65 66 a4 51 1f 59 ee 0d 9b 62 03 a1 9b 1a 5a c8 66 97 00 a9 ec 4b 08 ec 66 df 6c 58 08 01 43 b2 c9 92 bc 9b c0 6e 20 d9 bc 09 2d 2c 81 dd 77 b3 29 4b 0a 29 18 42 09 69 84 00 a1 f7 8e c1 45 96 6d 49 a3 ae a9 4f 39 e7 fd 63 46 33 cf a8 59 b6 25 5b 92 9f f3 f9 e8 a3 d1 68 e6 29 f7 7e 9f d3 ee b9 f7 02 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 ca 14 08 85 4d 00 e8 f5 89 79 2e c9 62 62 aa 82 af 06 0c c3 84 af 06 48 0d 28 f9 aa 92 b4 22 d2 01 bf af 9d 2e 47 3e 6c b1 10 c0 9d 87 ec 2b 60 a7 31 Data Ascii: PNGIHDRg-bKGD,IDATxw\|<efQYbZfKflXCn -,w)K)BiEmIO9cF3Y%[h)~J(J(J(J(J(J(My.bbH(".G>l+`1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.6	49757	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	684	OUT	GET /file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/png Content-Length: 15286 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:31 GMT ETag: "93939a07f86b42b04b779841ba81a1ef4ba2d929" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:31 UTC	15286	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 3b 6b 49 44 41 54 78 da ed bd 77 bc 5d 77 75 27 fa 5d eb b7 cb a9 b7 37 e9 ea aa 77 d9 72 af d8 98 19 c0 98 1a 08 a1 3c 08 25 61 02 21 43 06 cc e4 91 f2 48 1c 32 04 78 84 c4 36 e3 84 97 61 26 81 54 20 9d 84 66 c7 36 c6 06 db 10 63 5b ee 92 25 ab 97 db eb 39 67 b7 b5 de 1f 7b 9f 76 bb a4 2b e9 ea ea ae 8f f4 39 7b 9f b3 ef 2e bf df 77 af f6 5b 05 58 a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 b3 40 b4 d4 1e e8 86 1b 2e 6e 46 a8 3b 35 0c 5b 15 66 2b 19 cd 92 ea 88 10 0d b1 62 38 52 1d 0c 34 18 54 95 81 a3 47 f7 f5 1f 3b 86 c2 32 0c 96 01 78 5a b4 73 e7 ce 6c 43 46 3f 08 Data Ascii: PNGIHDRg-bKGD;kIDATxw]wu']7wr<%a!CH2x6a&T f6c[%9g{v+9{.w[XeZeZeZeZeZeZeZeZ@.nF;5[f+b8R4TG;2xZslCF?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.6	49756	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	415	OUT	GET /img/SiteAndroid.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/jpeg Content-Length: 21090 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-5262" Expires: Thu, 03 Oct 2024 02:42:31 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:31 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 01 22 a0 03 00 04 00 00 00 01 00 00 01 0e 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 0e 01 22 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i"8Photoshop 3.08BIM8BIM%B~""}!1AQa"q2#BR$3br
2024-09-29 02:42:31 UTC	5046	IN	Data Raw: 25 51 c0 91 02 be 38 2c 46 05 4c 70 95 2a 51 e4 9c ae ff 00 af f2 35 af c0 d9 f6 73 92 d2 8d 6a ae a6 22 94 dc 94 6a 49 eb 09 25 1b 73 7b d6 69 c5 b5 7f 3d af 73 cc 7e 0f 5d f8 96 7f d9 f3 51 83 c4 17 53 cf a3 5a f8 9e d2 db c2 eb 29 3e 5a 32 59 ea 12 ea 9f 67 1f f3 cf 33 42 66 23 8f 31 90 13 90 05 7d f7 ff 00 04 de b5 d4 af 3f 63 cf 1b c7 a5 17 13 a7 8c a7 98 88 fe f9 8a 2b 7d 39 e5 0b ea 4c 6a d8 1d eb e4 2f 16 f8 9b 5e f1 04 71 dd eb 33 ad cb 5b 5b fd 8a d2 de 08 21 b4 b3 b1 b6 63 b9 a3 b6 b5 b7 48 e1 85 0b 72 db 57 2c 70 58 9c 0a fb fb fe 09 17 c7 ec ed e2 5c ff 00 d0 e5 79 ff 00 a4 56 35 ec 65 6e 58 35 19 ee e2 d3 fb ba 1f cc 5e 38 70 66 2b 2a a3 83 cb 31 93 51 a9 56 15 64 f9 6e d4 39 9a 8a 49 e9 76 ad 76 f4 f7 9b f5 3e 2c fd b6 fe 2a e9 f6 3e 19 d5 Data Ascii: %Q8,FLpQ5sj"jI%s{i=s~]QSZ)>Z2Yg3Bf#1}?c+}9Lj/^q3[[!cHrW,pX\yV5enX5^8pf+1QVdn9Ivv>,*>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
29	192.168.2.6	49758	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	417	OUT	GET /img/SiteIconAndroid.svg HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/svg+xml Content-Length: 999 Last-Modified: Mon, 18 Apr 2022 20:19:52 GMT Connection: close ETag: "625dc7e8-3e7" Expires: Thu, 03 Oct 2024 02:42:31 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:31 UTC	999	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 32 20 32 37 22 20 77 69 64 74 68 3d 22 32 32 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 39 2e 33 35 20 31 31 63 2e 37 35 20 30 20 31 2e 33 35 2e 36 37 20 31 2e 33 35 20 31 2e 35 76 36 63 30 20 2e 38 33 2d 2e 36 20 31 2e 35 2d 31 2e 33 35 20 31 2e 35 73 2d 31 2e 33 35 2d 2e 36 37 2d 31 2e 33 35 2d 31 2e 35 76 2d 36 63 30 2d 2e 38 33 2e 36 2d 31 2e 35 20 31 2e 33 35 2d 31 2e 35 7a 6d 2d 31 36 2e 37 20 30 63 2e 37 35 20 30 20 31 2e 33 35 2e 36 37 20 31 2e 33 35 20 31 2e 35 76 36 63 30 20 2e 38 33 2d 2e 36 20 31 2e 35 2d 31 2e 33 35 20 31 2e 35 73 2d 31 2e 33 35 2d 2e Data Ascii: <svg height="27" viewBox="0 0 22 27" width="22" xmlns="http://www.w3.org/2000/svg"><path d="m19.35 11c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.67-1.35-1.5v-6c0-.83.6-1.5 1.35-1.5zm-16.7 0c.75 0 1.35.67 1.35 1.5v6c0 .83-.6 1.5-1.35 1.5s-1.35-.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
30	192.168.2.6	49759	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	684	OUT	GET /file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/png Content-Length: 16465 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:31 GMT ETag: "ad24af7a174e71673b28f7e827a85934048a9cd7" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:31 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 40 06 49 44 41 54 78 da ed bd 77 98 5d 65 b5 3f fe 59 6b 97 d3 cf f4 99 4c 7a 32 69 04 42 48 20 04 44 9a 20 28 20 4d 01 bd a8 28 2a 5c b1 5d c4 de b8 58 2e 96 8b c8 b5 7c af bd 5f 10 7f 2a 5d 11 10 95 8e 69 b4 50 d2 eb 64 32 fd f4 b3 cb 5a bf 3f 4e 99 33 25 c9 4c 32 43 02 9c f5 3c fb 39 67 9f b3 cf bb f7 79 df cf bb fa bb 5e a0 4a 55 aa 52 95 aa 54 a5 2a 55 a9 4a 55 aa d2 ab 9e 2e fd 08 e2 ef fb 2c 5a 0e 85 67 e1 ea 70 bc b6 e8 83 d7 19 a7 36 b5 c6 b7 c5 63 35 db 3e fa d5 f0 15 55 00 56 e9 e5 24 0a 04 22 df 23 50 08 00 d8 34 2f af 02 b0 4a 2f 1b 7d f4 ab a1 2b 49 68 6e e9 5c 55 1e aa 02 b0 4a 2f 0b Data Ascii: PNGIHDRg-bKGD@IDATxw]e?YkLz2iBH D ( M(\]X.\|_]iPd2Z?N3%L2C<9gy^JURT*UJU.,Zgp6c5>UV$"#P4/J/}+Ihn\UJ/
2024-09-29 02:42:31 UTC	429	IN	Data Raw: bf 68 3d 5c 9c 03 42 2b 04 49 08 1e c0 f9 f4 e2 b8 3f e9 ad 5a 83 30 e6 40 31 17 8a 56 00 4d 20 34 11 d0 04 a0 19 85 d7 26 02 e2 23 33 ae 32 f0 3c 00 36 14 36 d1 f0 1d 8a b4 b0 65 42 1f 80 4e 00 bb 01 74 2a d0 09 45 27 18 9d 50 6c 07 b0 0e 51 ac 1f 77 77 c7 ad 6a 20 88 a5 00 4e 04 c3 82 60 2d 4c fc 15 67 8d 77 99 f7 57 13 00 07 77 60 14 01 9c 02 c2 3c 14 7c 8c 02 c6 5a b8 78 7c 68 42 eb 84 d1 b5 ca 38 1c 01 58 08 80 11 00 15 0f 94 5f 4d 78 70 40 70 00 e4 21 c5 c3 47 1e 4d c8 e3 14 e4 41 f4 f2 88 fc 7b 74 2a 7c 1c 07 2d ef 98 e9 00 78 0a 39 3c 8c 8b c9 c7 6b 80 26 3e 4c 71 9b 2e 04 63 39 80 86 e2 27 49 30 5e 82 8b f5 b8 80 b6 bd 26 7c 2f b7 aa 81 00 66 81 30 17 8c 39 d0 22 e7 15 6c 03 e1 71 9c 4b 5b 5f ab 6e 29 3a 08 83 11 42 a4 28 4a 05 53 51 b1 e3 7a 11 Data Ascii: h=\B+I?Z0@1VM 4&#32<66eBNtE'PlQwwj N`-LgwWw`<\|Zx\|hB8X_Mxp@p!GMA{t\|-x9<k&>Lq.c9'I0^&\|/f09"lqK[_n):B(JSQz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
31	192.168.2.6	49760	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:30 UTC	684	OUT	GET /file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/png Content-Length: 17975 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:31 GMT ETag: "fa9a38332023332be262ffbb44b3d98e6ed68a45" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:31 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 45 ec 49 44 41 54 78 da ed 7d 77 9c 1d 67 75 f6 73 ce cc dc 7e ef f6 be aa 2b 69 25 cb b2 2d b9 57 8c 8d 8c 31 25 60 1b db b4 00 09 7c e4 0b 04 ec 00 c1 32 04 e3 d0 4c 42 4f 48 02 49 3e 7a 89 83 03 21 60 1b e3 82 2b 36 ee 4d 56 b1 b4 ea db db ed 65 e6 9c ef 8f b9 75 8b 74 b5 5a ed 4a f6 be bf df fd dd 7b 77 e7 ce cc fb be cf 9c f2 bc e7 3d 07 58 68 0b 6d a1 2d b4 85 b6 d0 16 da 42 5b 68 af b4 46 0b 43 30 75 db 04 b4 08 d0 6e 02 61 07 88 80 39 cc 40 58 80 10 00 1b 40 8c 44 62 04 c4 08 88 e5 80 71 3f d0 73 13 90 5c 18 bd 05 00 1e 0e d0 9a 00 9c 0b e6 13 a0 da 0d a2 6e 00 dd 44 54 7b b8 e7 52 55 01 b0 Data Ascii: PNGIHDRg-bKGDEIDATx}wgus~+i%-W1%`\|2LBOHI>z!`+6MVeutZJ{w=Xhm-B[hFC0una9@X@Dbq?s\nDT{RU
2024-09-29 02:42:31 UTC	1939	IN	Data Raw: 9b fa 6e 83 ec 8c 9a 55 67 c8 9a 12 74 49 1b 34 6e 03 51 1b 34 21 57 b3 41 22 9b 4e 4f e0 86 33 92 f0 18 53 03 41 15 c2 8d d7 01 8d 1f 9e 3d a0 24 1e 12 d9 ff 97 20 8d 1e b3 99 ba 9c ad 19 d1 1e a7 10 f5 dc eb 91 c1 2e fa e8 dc d4 90 9b f5 04 95 37 dd 96 8c 7f fa 75 c1 38 40 97 01 80 46 45 a9 c6 50 0a 1e 3c f3 7c 56 a1 77 ed 71 63 82 28 29 84 a4 2d 30 48 61 90 62 62 41 41 55 41 56 14 09 5b 69 2c a7 34 94 51 1a c8 80 c7 6c a6 8c 10 95 3d 58 0c 91 f7 9c 90 d2 5b de 30 86 37 af c8 b1 c1 d3 3f 74 44 20 a4 1e 21 cd bc 24 14 bc 40 c1 47 14 53 26 18 f9 7f 2a bd 7f 0d 42 fa 98 05 9f 26 44 9c 67 73 28 8e 99 ea 5f 9b 1f 4d fe f1 b8 95 80 79 49 42 d9 af 37 3d 42 44 67 00 80 32 c4 58 ef 01 37 4d 9f 65 c0 76 54 2e ff 4d 2d 6e eb 99 2c f9 dc 6d 95 f9 0a 06 5a 00 cb c1 Data Ascii: nUgtI4nQ4!WA"NO3SA=$ .7u8@FEP<\|Vwqc()-0HabbAAUAV[i,4Ql=X[07?tD !$@GS&*B&Dgs(_MyIB7=BDg2X7MevT.M-n,mZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
32	192.168.2.6	49761	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	411	OUT	GET /img/SiteiOS.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/jpeg Content-Length: 31305 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-7a49" Expires: Thu, 03 Oct 2024 02:42:31 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:31 UTC	16044	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 48 00 48 00 00 ff e1 00 40 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 87 69 00 04 00 00 00 01 00 00 00 1a 00 00 00 00 00 02 a0 02 00 04 00 00 00 01 00 00 01 ba a0 03 00 04 00 00 00 01 00 00 01 0e 00 00 00 00 ff ed 00 38 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 00 38 42 49 4d 04 25 00 00 00 00 00 10 d4 1d 8c d9 8f 00 b2 04 e9 80 09 98 ec f8 42 7e ff c0 00 11 08 01 0e 01 ba 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 23 42 b1 c1 15 52 d1 f0 24 33 62 72 82 09 Data Ascii: JFIFHH@ExifMM*i8Photoshop 3.08BIM8BIM%B~"}!1AQa"q2#BR$3br
2024-09-29 02:42:31 UTC	15261	IN	Data Raw: 4e fb e1 71 14 d9 5c 64 aa 09 0e 3a 66 b0 fc 41 f1 97 4c b3 f0 cc da ff 00 82 34 9b ff 00 1b 5c da 4f 14 77 7a 3e 94 a2 3d 52 da 29 32 5a 49 2d 6e 3c b9 54 20 fe 12 a0 9c 8c 71 cd 7e 85 5d 1b 54 8f f7 e0 00 78 18 1f 37 e1 5f 31 7c 45 f8 3f f0 db e2 86 b6 fa 8a 5e 1d 2f c6 1a 7a af 91 ab e9 17 4b 1e a7 6b b3 ee 79 8a ac 77 20 ee b2 2e 08 e3 a5 55 1c 6c 6b a7 19 fb bd 9a d7 f0 ff 00 87 f4 3c 49 52 a7 34 e5 4d 72 fe 5f 8f f9 9f 9d 69 e2 27 f8 b3 e2 bb 3f 14 69 8b 71 1d ce bd ae c3 6d a2 9b 85 68 ae ec 2d 2d 24 5d e4 21 39 84 a4 70 cb 24 80 75 62 43 67 a5 7e 80 ea 64 7f 67 de 11 c0 30 4d ff 00 a0 1a f9 27 e1 2f c2 1f 12 f8 1f e3 36 a3 a6 78 cb 52 59 a5 f0 76 98 13 4b 10 64 2e a7 0e ae f2 16 d4 25 04 61 48 f2 8c 45 01 f9 64 dc 7a 15 cf d6 5a 83 6e d3 6f 07 fd Data Ascii: Nq\d:fAL4\Owz>=R)2ZI-n<T q~]Tx7_1\|E?^/zKkyw .Ulk<IR4Mr_i'?iqmh--$]!9p$ubCg~dg0M'/6xRYvKd.%aHEdzZno

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
33	192.168.2.6	49763	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	415	OUT	GET /img/SiteDesktop.jpg?2 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	341	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/jpeg Content-Length: 97628 Last-Modified: Tue, 11 Jun 2019 13:49:53 GMT Connection: close ETag: "5cffb181-17d5c" Expires: Thu, 03 Oct 2024 02:42:31 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:31 UTC	16043	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 64 00 00 ff e1 03 31 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 36 2d 63 31 34 35 20 37 39 2e 31 36 33 34 39 39 2c 20 32 30 31 38 2f 30 38 2f 31 33 2d 31 36 3a 34 30 3a 32 32 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Duckyd1http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.6-c145 79.163499, 2018/08/13-16:40:22 "> <rdf:RDF xm
2024-09-29 02:42:31 UTC	16384	IN	Data Raw: d9 39 25 8c aa 28 9b 10 55 48 99 53 2a b2 c3 2a 44 c7 b2 49 52 a0 c5 8a f9 3b 35 e6 db 5c 66 1e 85 61 0d 04 ca d0 4b 71 2c 92 14 83 42 d0 46 3a 5d 31 f2 95 dc 9d b9 e7 1e 7a e6 6d a9 71 77 5d d3 b6 bb 4d 27 16 f1 7d 9e 97 45 25 4c 53 39 3d 55 f3 a4 33 97 16 9b f7 6c 34 f4 e3 c0 ee f7 bd e3 ec d6 4a 54 ec ae d6 18 55 b8 ba e0 d1 3f c0 e1 47 61 8b b3 cd e0 6c dc 7b 07 2c c9 a8 0f 61 11 e3 b2 c4 fa 66 a2 47 71 a7 ed d3 64 6a 7d 36 2a b2 7a 4a bb a4 9a db 69 0a 49 12 96 7c cb 54 4d 52 ce 98 ae 5b 7a 3c 73 7d d3 b7 db ef 94 6a a7 c4 f0 8f 02 a3 8a 8f 0e 2f 16 ea e8 b6 2d 86 8f 7b 58 76 ee ad 76 59 3e f9 5c a5 be e1 ce 8e df 0c 71 9a 9b 6d 4d cb 8b 05 54 95 15 5b ab 77 16 23 b8 75 7b cf 49 80 ee 35 09 f9 24 94 c8 91 11 75 71 9e 90 96 c9 29 41 3c eb 26 85 ba 48 Data Ascii: 9%(UHS*DIR;5\faKq,BF:]1zmqw]M'}E%LS9=U3l4JTU?Gal{,afGqdj}6zJiI\|TMR[z<s}j/-{XvvY>\qmMT[w#u{I5$uq)A<&H
2024-09-29 02:42:31 UTC	16384	IN	Data Raw: 11 a1 a4 87 b7 65 f9 b6 7a 86 94 f3 f9 9b 6e 37 63 b2 de 29 d3 72 8e 09 62 a8 fa 2b 86 ea 9c a6 5a f6 59 dc 9a ba a9 71 2a 27 bd ee 72 6e 95 aa e9 65 05 bb dd 39 65 7b 5d 5b 88 4d 7a 75 2e 48 9c 9a 6d bd 5b 12 31 87 64 ca ae 7e 6d 74 b2 6d 05 16 43 ec 30 6a 4c 86 1e 42 b4 5f 22 8b 52 22 2e dd 30 e9 bc cb 63 52 77 e1 38 ce 16 ec b8 ba cd 25 44 d6 29 d1 ee 6b ac da 65 21 dc e6 64 94 b8 a3 25 5c 5d 5e 18 55 e0 b6 f4 a5 e5 2d 0b b5 f3 ea 5e 7e b2 d2 33 91 2c 60 bc e4 59 91 5d fe b8 c3 cc ab 91 4d 2b 8a 8b 54 69 a7 03 32 f3 70 1d 46 46 fd 9c ce 52 17 f2 f2 e2 b3 35 54 fa 55 5e 24 d5 b3 a4 cd 5c 66 b8 dc c7 71 f5 72 9f a7 49 54 a2 3f 7e 0c 73 23 32 e1 c0 7b 1e 9d 04 f2 16 1b db dd 43 f3 51 c2 e6 ee 45 66 6e f4 f1 cb e7 64 e3 d5 87 e9 6a 92 f2 99 eb ae a7 ef 79 Data Ascii: ezn7c)rb+ZYq*'rne9e{][Mzu.Hm[1d~mtmC0jLB_"R".0cRw8%D)ke!d%\]^U-^~3,`Y]M+Ti2pFFR5TU^$\fqrIT?~s#2{CQEfndjy
2024-09-29 02:42:31 UTC	16384	IN	Data Raw: f2 b2 bf 92 51 b9 7a 0b 8b ba ed 29 cd 71 28 b5 6d d1 a9 4e 8d cd 45 d1 70 c5 e3 56 91 e9 6f e2 c7 cc da d5 6e 37 5c 5b 5f bb 5b a1 8b 6d 54 3d d6 e9 7a 56 df c4 b7 c8 72 aa 2c 5e 4b ab 9d 97 ca ab ba 7b 1f 93 7b 3e ba 2d 85 85 34 7b 14 be 6d a1 66 ae 53 25 19 72 6a 64 d5 ed dc 96 46 dc 63 16 da bb 2a d3 1d d4 dd b8 bb 4e b9 08 e6 24 e4 d2 ac 16 dc 37 f5 9d ed 74 6b d1 9e dc 74 c5 bd 58 be f0 ee 27 58 7d 1f d9 54 6c fe 1b 92 e1 d8 6b 5b 69 b9 54 55 56 b9 a4 4b d5 5a 1c 8c bf 72 d7 92 e4 c9 af aa 76 b6 aa c1 d4 f8 3a e3 7d b5 bc 49 51 af 44 19 af 9b 79 7b cf f1 27 b7 a1 fa 36 1b a5 7e ca fc 68 fa 57 b4 f1 07 77 bc a7 5b 91 64 f0 ea ae 37 09 50 22 6e 3e 77 73 55 37 1c dc 9b 9a ea 27 1a 9d 9e 5f da c3 9d 45 4a cb 89 ae 80 d4 c8 13 49 69 7d af a6 1b aa ef 92 Data Ascii: Qz)q(mNEpVon7\[_[mT=zVr,^K{{>-4{mfS%rjdFc*N$7tktX'X}Tlk[iTUVKZrv:}IQDy{'6~hWw[d7P"n>wsU7'_EJIi}
2024-09-29 02:42:31 UTC	16384	IN	Data Raw: cc 8b 3e b9 a9 63 1f 91 6f cd 5f 02 34 4c 76 2a 94 b8 b8 f5 45 4c 18 4c d6 54 d2 c7 71 c5 2c 99 61 b4 f3 38 b5 ad 66 a5 ad 4a 3c cf 50 af e2 fa fe 83 14 72 ca 38 45 e1 e4 2d 5d ce ed e4 59 0c 76 62 5e 4f b4 b4 89 1d d6 5e 62 34 a9 6d a9 86 9e 61 a9 2c 30 f2 1b 43 08 49 3a d3 33 1d 4a 55 da 49 71 45 e5 14 f8 f5 f5 7d 7f 41 5f 87 eb 20 6a 77 09 ba 97 df 7c a8 6b 6c fb f8 6f c3 36 6e 18 6e 7c 76 89 fe 5f cf 31 db 51 20 d9 98 d7 2f a0 e1 1e a9 23 3f 38 7c 72 fa be bf a0 77 0f a4 aa 71 4c 2f 33 ea 3b 39 2a 1c 2e 8a 92 b6 69 45 39 af 47 88 d3 b0 2a 20 32 47 1a 1a 54 d4 58 8d 4b 90 a7 65 3e 68 4a 19 69 0e 2d c7 16 67 c0 b5 d2 66 9f a7 e7 39 83 35 f0 d9 45 08 a8 41 ca 52 93 a4 62 b6 55 ba 74 e0 92 44 5c ee 7b 2f a4 58 ef ef f1 cb 8a 4a 2a 31 55 72 78 ba 2f 32 ae Data Ascii: >co_4LvELLTq,a8fJ<Pr8E-]Yvb^O^b4ma,0CI:3JUIqE}A_ jw\|klo6nn\|v_1Q /#?8\|rwqL/3;9.iE9G* 2GTXKe>hJi-gf95EARbUtD\{/XJ*1Urx/2
2024-09-29 02:42:31 UTC	16049	IN	Data Raw: 4a 54 a3 c0 7a 7f d5 27 f4 1f 05 b7 14 8f 4f 9b ba bd be e0 c4 fc 03 e4 fa 55 66 75 3a 7f 49 67 fd 9c ce bf e6 4b e3 93 74 fb ab 94 ff 00 f7 5d 43 ff 00 13 21 8b db 6b d5 29 99 99 60 1d 3f 9a 35 3d 3f c1 6d c5 25 19 11 6b a6 bf ae a1 f1 f9 82 34 bc 09 e5 18 ff 00 da 75 1f f4 96 7f d9 cc df fd c8 3c 72 5e f6 95 ca 9f fb ae a1 ff 00 89 93 ea ef 6d 47 52 52 d4 84 bb 82 ec 41 73 68 5a 37 8d 67 e4 7c 4f 43 32 35 6e 72 f8 24 88 cc c4 5b be 07 72 bc 2b c1 98 d4 3c f3 b3 ff 00 50 4c ca 7f cc 67 c6 cb d7 54 2e e9 7c aa 97 56 5b 3f f8 75 2d c5 c7 81 ed 70 ea 02 c8 9a 3f 82 5b 27 a7 a0 e2 79 31 dc e1 27 de b7 ca a7 12 7c fb 90 64 49 49 2b 5d 7f 14 73 d9 9f 09 79 7f 2f 5f d2 e7 b0 7f 5e df 9b fc 89 e8 3a 6f ef d9 e2 e6 79 c5 fd df cb 4e 12 8e ec be 75 3a af 79 63 a8 Data Ascii: JTz'OUfu:IgKt]C!k)`?5=?m%k4u<r^mGRRAshZ7g\|OC25nr$[r+<PLgT.\|V[?u-p?['y1'\|dII+]sy/_^:oyNu:yc

Session ID	Source IP	Source Port	Destination IP	Destination Port
34	192.168.2.6	49762	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 44 4c 31 64 6b 65 59 5a 7a 30 75 49 4e 6b 6d 7a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 35 63 37 37 65 30 61 31 61 34 39 32 36 64 66 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: DL1dkeYZz0uINkmz.1Context: 65c77e0a1a4926df
2024-09-29 02:42:31 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 02:42:31 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 44 4c 31 64 6b 65 59 5a 7a 30 75 49 4e 6b 6d 7a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 35 63 37 37 65 30 61 31 61 34 39 32 36 64 66 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: DL1dkeYZz0uINkmz.2Context: 65c77e0a1a4926df<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJW
2024-09-29 02:42:31 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 44 4c 31 64 6b 65 59 5a 7a 30 75 49 4e 6b 6d 7a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 35 63 37 37 65 30 61 31 61 34 39 32 36 64 66 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: DL1dkeYZz0uINkmz.3Context: 65c77e0a1a4926df<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 02:42:31 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 02:42:31 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 6d 6e 4d 6b 38 73 4b 4e 54 30 2b 6e 77 56 4b 4a 6b 36 4a 31 74 67 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: mnMk8sKNT0+nwVKJk6J1tg.0Payload parsing failed.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
35	192.168.2.6	49765	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	415	OUT	GET /img/SiteIconApple.svg HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	340	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/svg+xml Content-Length: 443 Last-Modified: Mon, 18 Apr 2022 20:19:52 GMT Connection: close ETag: "625dc7e8-1bb" Expires: Thu, 03 Oct 2024 02:42:31 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:31 UTC	443	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 32 37 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 31 20 32 37 22 20 77 69 64 74 68 3d 22 32 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 70 61 74 68 20 64 3d 22 6d 31 37 2e 34 39 20 32 35 2e 35 63 2d 31 2e 33 35 20 31 2e 33 31 2d 32 2e 38 34 20 31 2e 31 2d 34 2e 32 36 2e 34 39 2d 31 2e 35 31 2d 2e 36 33 2d 32 2e 38 39 2d 2e 36 37 2d 34 2e 34 39 20 30 2d 31 2e 39 38 2e 38 35 2d 33 2e 30 34 2e 36 2d 34 2e 32 33 2d 2e 34 39 2d 36 2e 37 36 2d 36 2e 39 33 2d 35 2e 37 36 2d 31 37 2e 34 38 20 31 2e 39 31 2d 31 37 2e 38 38 20 31 2e 38 37 2e 31 20 33 2e 31 37 20 31 2e 30 33 20 34 2e 32 37 20 31 2e 31 31 20 31 2e 36 33 2d 2e 33 33 20 33 2e 31 39 2d 31 Data Ascii: <svg height="27" viewBox="0 0 21 27" width="21" xmlns="http://www.w3.org/2000/svg"><path d="m17.49 25.5c-1.35 1.31-2.84 1.1-4.26.49-1.51-.63-2.89-.67-4.49 0-1.98.85-3.04.6-4.23-.49-6.76-6.93-5.76-17.48 1.91-17.88 1.87.1 3.17 1.03 4.27 1.11 1.63-.33 3.19-1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
36	192.168.2.6	49764	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	480	OUT	GET /js/rlottie-wasm.js HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	395	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: application/javascript Content-Length: 100601 Last-Modified: Tue, 14 Jul 2020 22:03:36 GMT Connection: close ETag: "5f0e2bb8-188f9" Expires: Thu, 03 Oct 2024 02:42:31 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:31 UTC	15989	IN	Data Raw: 76 61 72 20 4d 6f 64 75 6c 65 3d 74 79 70 65 6f 66 20 4d 6f 64 75 6c 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 4d 6f 64 75 6c 65 3a 7b 7d 3b 76 61 72 20 6d 6f 64 75 6c 65 4f 76 65 72 72 69 64 65 73 3d 7b 7d 3b 76 61 72 20 6b 65 79 3b 66 6f 72 28 6b 65 79 20 69 6e 20 4d 6f 64 75 6c 65 29 7b 69 66 28 4d 6f 64 75 6c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6b 65 79 29 29 7b 6d 6f 64 75 6c 65 4f 76 65 72 72 69 64 65 73 5b 6b 65 79 5d 3d 4d 6f 64 75 6c 65 5b 6b 65 79 5d 7d 7d 76 61 72 20 61 72 67 75 6d 65 6e 74 73 5f 3d 5b 5d 3b 76 61 72 20 74 68 69 73 50 72 6f 67 72 61 6d 3d 22 2e 2f 74 68 69 73 2e 70 72 6f 67 72 61 6d 22 3b 76 61 72 20 71 75 69 74 5f 3d 66 75 6e 63 74 69 6f 6e 28 73 74 61 74 75 73 2c 74 6f 54 68 72 6f 77 29 7b 74 68 72 6f 77 Data Ascii: var Module=typeof Module!=="undefined"?Module:{};var moduleOverrides={};var key;for(key in Module){if(Module.hasOwnProperty(key)){moduleOverrides[key]=Module[key]}}var arguments_=[];var thisProgram="./this.program";var quit_=function(status,toThrow){throw
2024-09-29 02:42:32 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 64 65 6d 61 6e 67 6c 65 41 6c 6c 28 74 65 78 74 29 7b 76 61 72 20 72 65 67 65 78 3d 2f 5c 62 5f 5f 5a 5b 5c 77 5c 64 5f 5d 2b 2f 67 3b 72 65 74 75 72 6e 20 74 65 78 74 2e 72 65 70 6c 61 63 65 28 72 65 67 65 78 2c 66 75 6e 63 74 69 6f 6e 28 78 29 7b 76 61 72 20 79 3d 64 65 6d 61 6e 67 6c 65 28 78 29 3b 72 65 74 75 72 6e 20 78 3d 3d 3d 79 3f 78 3a 79 2b 22 20 5b 22 2b 78 2b 22 5d 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 73 53 74 61 63 6b 54 72 61 63 65 28 29 7b 76 61 72 20 65 72 72 3d 6e 65 77 20 45 72 72 6f 72 3b 69 66 28 21 65 72 72 2e 73 74 61 63 6b 29 7b 74 72 79 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 30 29 7d 63 61 74 63 68 28 65 29 7b 65 72 72 3d 65 7d 69 66 28 21 65 72 72 2e 73 74 61 63 6b 29 7b 72 65 74 75 72 6e 22 Data Ascii: nction demangleAll(text){var regex=/\b__Z[\w\d_]+/g;return text.replace(regex,function(x){var y=demangle(x);return x===y?x:y+" ["+x+"]"})}function jsStackTrace(){var err=new Error;if(!err.stack){try{throw new Error(0)}catch(e){err=e}if(!err.stack){return"
2024-09-29 02:42:32 UTC	16384	IN	Data Raw: 61 6c 6c 62 61 63 6b 28 6e 75 6c 6c 2c 7b 74 69 6d 65 73 74 61 6d 70 3a 73 74 61 74 2e 6d 74 69 6d 65 2c 6d 6f 64 65 3a 73 74 61 74 2e 6d 6f 64 65 7d 29 7d 65 6c 73 65 20 69 66 28 46 53 2e 69 73 46 69 6c 65 28 73 74 61 74 2e 6d 6f 64 65 29 29 7b 6e 6f 64 65 2e 63 6f 6e 74 65 6e 74 73 3d 4d 45 4d 46 53 2e 67 65 74 46 69 6c 65 44 61 74 61 41 73 54 79 70 65 64 41 72 72 61 79 28 6e 6f 64 65 29 3b 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 6e 75 6c 6c 2c 7b 74 69 6d 65 73 74 61 6d 70 3a 73 74 61 74 2e 6d 74 69 6d 65 2c 6d 6f 64 65 3a 73 74 61 74 2e 6d 6f 64 65 2c 63 6f 6e 74 65 6e 74 73 3a 6e 6f 64 65 2e 63 6f 6e 74 65 6e 74 73 7d 29 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 6e 65 77 20 45 72 72 6f 72 28 22 6e 6f 64 65 20 74 79 70 Data Ascii: allback(null,{timestamp:stat.mtime,mode:stat.mode})}else if(FS.isFile(stat.mode)){node.contents=MEMFS.getFileDataAsTypedArray(node);return callback(null,{timestamp:stat.mtime,mode:stat.mode,contents:node.contents})}else{return callback(new Error("node typ
2024-09-29 02:42:32 UTC	16384	IN	Data Raw: 64 29 7b 66 64 5f 73 74 61 72 74 3d 66 64 5f 73 74 61 72 74 7c 7c 30 3b 66 64 5f 65 6e 64 3d 66 64 5f 65 6e 64 7c 7c 46 53 2e 4d 41 58 5f 4f 50 45 4e 5f 46 44 53 3b 66 6f 72 28 76 61 72 20 66 64 3d 66 64 5f 73 74 61 72 74 3b 66 64 3c 3d 66 64 5f 65 6e 64 3b 66 64 2b 2b 29 7b 69 66 28 21 46 53 2e 73 74 72 65 61 6d 73 5b 66 64 5d 29 7b 72 65 74 75 72 6e 20 66 64 7d 7d 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 32 34 29 7d 2c 67 65 74 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 66 64 29 7b 72 65 74 75 72 6e 20 46 53 2e 73 74 72 65 61 6d 73 5b 66 64 5d 7d 2c 63 72 65 61 74 65 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 73 74 72 65 61 6d 2c 66 64 5f 73 74 61 72 74 2c 66 64 5f 65 6e 64 29 7b 69 66 28 21 46 53 2e 46 53 53 74 Data Ascii: d){fd_start=fd_start\|\|0;fd_end=fd_end\|\|FS.MAX_OPEN_FDS;for(var fd=fd_start;fd<=fd_end;fd++){if(!FS.streams[fd]){return fd}}throw new FS.ErrnoError(24)},getStream:function(fd){return FS.streams[fd]},createStream:function(stream,fd_start,fd_end){if(!FS.FSSt
2024-09-29 02:42:32 UTC	16384	IN	Data Raw: 6f 6c 6c 6f 77 3a 74 72 75 65 7d 29 3b 69 66 28 6c 6f 6f 6b 75 70 2e 6e 6f 64 65 3d 3d 3d 6e 75 6c 6c 29 7b 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 32 29 7d 69 66 28 21 46 53 2e 69 73 44 69 72 28 6c 6f 6f 6b 75 70 2e 6e 6f 64 65 2e 6d 6f 64 65 29 29 7b 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 32 30 29 7d 76 61 72 20 65 72 72 3d 46 53 2e 6e 6f 64 65 50 65 72 6d 69 73 73 69 6f 6e 73 28 6c 6f 6f 6b 75 70 2e 6e 6f 64 65 2c 22 78 22 29 3b 69 66 28 65 72 72 29 7b 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 65 72 72 29 7d 46 53 2e 63 75 72 72 65 6e 74 50 61 74 68 3d 6c 6f 6f 6b 75 70 2e 70 61 74 68 7d 2c 63 72 65 61 74 65 44 65 66 61 75 6c 74 44 69 72 65 63 74 6f 72 69 65 Data Ascii: ollow:true});if(lookup.node===null){throw new FS.ErrnoError(2)}if(!FS.isDir(lookup.node.mode)){throw new FS.ErrnoError(20)}var err=FS.nodePermissions(lookup.node,"x");if(err){throw new FS.ErrnoError(err)}FS.currentPath=lookup.path},createDefaultDirectorie
2024-09-29 02:42:32 UTC	16384	IN	Data Raw: 73 65 20 34 39 31 35 32 3a 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 2d 32 32 7d 46 53 2e 6d 6b 6e 6f 64 28 70 61 74 68 2c 6d 6f 64 65 2c 64 65 76 29 3b 72 65 74 75 72 6e 20 30 7d 2c 64 6f 52 65 61 64 6c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 70 61 74 68 2c 62 75 66 2c 62 75 66 73 69 7a 65 29 7b 69 66 28 62 75 66 73 69 7a 65 3c 3d 30 29 72 65 74 75 72 6e 2d 32 32 3b 76 61 72 20 72 65 74 3d 46 53 2e 72 65 61 64 6c 69 6e 6b 28 70 61 74 68 29 3b 76 61 72 20 6c 65 6e 3d 4d 61 74 68 2e 6d 69 6e 28 62 75 66 73 69 7a 65 2c 6c 65 6e 67 74 68 42 79 74 65 73 55 54 46 38 28 72 65 74 29 29 3b 76 61 72 20 65 6e 64 43 68 61 72 3d 48 45 41 50 38 5b 62 75 66 2b 6c 65 6e 5d 3b 73 74 72 69 6e 67 54 6f 55 54 46 38 28 72 65 74 2c 62 75 66 2c 62 75 66 73 69 Data Ascii: se 49152:break;default:return-22}FS.mknod(path,mode,dev);return 0},doReadlink:function(path,buf,bufsize){if(bufsize<=0)return-22;var ret=FS.readlink(path);var len=Math.min(bufsize,lengthBytesUTF8(ret));var endChar=HEAP8[buf+len];stringToUTF8(ret,buf,bufsi
2024-09-29 02:42:32 UTC	2692	IN	Data Raw: 3d 4d 6f 64 75 6c 65 5b 22 5f 5f 5f 65 72 72 6e 6f 5f 6c 6f 63 61 74 69 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 6f 64 75 6c 65 5b 22 61 73 6d 22 5d 5b 22 4a 22 5d 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 76 61 72 20 5f 66 72 65 65 3d 4d 6f 64 75 6c 65 5b 22 5f 66 72 65 65 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 6f 64 75 6c 65 5b 22 61 73 6d 22 5d 5b 22 4b 22 5d 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 76 61 72 20 5f 6c 6f 74 74 69 65 5f 62 75 66 66 65 72 3d 4d 6f 64 75 6c 65 5b 22 5f 6c 6f 74 74 69 65 5f 62 75 66 66 65 72 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 6f 64 75 6c 65 5b 22 61 73 6d 22 5d 5b 22 4c 22 5d Data Ascii: =Module["___errno_location"]=function(){return Module["asm"]["J"].apply(null,arguments)};var _free=Module["_free"]=function(){return Module["asm"]["K"].apply(null,arguments)};var _lottie_buffer=Module["_lottie_buffer"]=function(){return Module["asm"]["L"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
37	192.168.2.6	49766	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	688	OUT	GET /file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/png Content-Length: 30567 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:31 GMT ETag: "a30234722b2883f211eb0bad5c73c2ef2fe73a53" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:32 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 40 08 06 00 00 00 cd 90 a5 aa 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 77 1c 49 44 41 54 78 da ed 9d 77 58 54 67 f6 c7 07 50 93 68 12 a3 82 25 46 d3 8c d9 64 f3 db ec 46 2c 8c 46 2c a0 cc 1d 14 29 33 14 15 1b 16 ec 08 0c 88 48 94 22 8a c0 d0 bb 62 c5 2e 4d b1 62 8b bd 80 8a 9a 18 7b ef bd 20 cc 7c b9 bf 3f 64 c6 81 b9 f7 ce 1d 9a a8 ef f7 79 ce b3 bb 59 18 ee cc dc fb c9 79 df 73 de ef 11 08 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 ea a1 06 f4 71 6a 65 67 21 a5 6c fb 4a 66 da f5 95 2c b4 eb 2b 4d b4 Data Ascii: PNGIHDR@@bKGDwIDATxwXTgPh%FdF,F,)3H"b.Mb{ \|?dyYysqjeg!lJf,+M
2024-09-29 02:42:32 UTC	14531	IN	Data Raw: af 2f 90 69 da 18 29 3f 19 31 5e 43 f8 2f 4d 60 6e c5 be f4 ed 27 95 62 56 6c ac ba d5 25 be 26 ce f2 d6 40 24 65 65 55 c8 fe 42 92 92 68 eb d7 a0 d2 7a 0f 7d ec ec 5e 9f 50 79 0d 37 44 2e 5b 86 c4 cc 4c a4 6d d8 80 b4 8d 1b 69 55 a4 6e d8 80 c4 cc 4c 44 ad 5c 89 79 0b 17 56 80 a5 7f 54 14 46 7a 79 f1 2a 4c f4 77 74 44 6d 5b 71 f5 73 74 d4 79 1d dd 28 6a 2c 21 c1 87 ba 04 8e 34 91 b1 cd 03 a1 8f 75 a8 71 08 5e 74 ff 0c 4c 56 56 8f 07 99 e0 b9 63 5b ec ef f5 05 d2 7e 6e 50 25 10 d6 66 d8 f5 ee 0a ae 2a a7 2c 2c 4c fd 30 d7 c5 e9 0e 5e 4b df 9c 1c 46 5b 2c b6 fd 3f db 91 23 11 92 9c 4c 87 a6 a6 22 61 dd ba 0a d0 63 8b d4 0d 1b 10 b1 74 69 05 08 aa c2 6b ee 5c d8 8e 1c c9 fa b9 d9 bb b9 d5 fa 69 92 59 b1 b1 3a cf 16 0b 29 4a 29 14 89 ec 09 0d 3e 40 29 22 4d Data Ascii: /i)?1^C/M`n'bVl%&@$eeUBhz}^Py7D.[LmiUnLD\yVTFzyLwtDm[qsty(j,!4uq^tLVVc[~nP%f,,L0^KF[,?#L"actik\iY:)J)>@)"M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
38	192.168.2.6	49767	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	684	OUT	GET /file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:31 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/png Content-Length: 12690 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:31 GMT ETag: "9b666309f437dfb32688ee016a9904703de41927" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:31 UTC	12690	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 31 47 49 44 41 54 78 da ed 7d 79 78 64 65 95 f7 ef 9c bb d4 92 a4 b2 a7 93 de d2 fb 06 34 34 49 b3 b4 03 8c 8a b8 a0 a0 e8 30 3a 30 8e cb 20 3a a2 ac a2 23 38 c8 7c fa b9 01 2d 82 20 cc a8 c3 28 32 ea a0 33 9f 82 82 3a 82 7c 80 40 9a e6 eb 86 66 e9 bd 9b 4e 67 df 53 cb 5d ce f9 fe a8 4a 2d d9 3a e9 54 96 6e ea 3c 4f 3d a9 54 dd ba f7 bd ef fb bb 67 7f cf 01 0a 54 a0 59 24 a3 30 05 05 9a 0c 6d dc b8 b1 72 fe fc f9 b7 2f 58 b0 20 d4 dc dc fc d2 54 cf c7 85 29 2d d0 64 48 44 2e 21 a2 cb 54 f5 ee 7c 9c af 00 c0 02 4d 96 4a 52 7f 23 05 00 16 68 c6 89 88 34 f5 56 0b 00 2c d0 8c 93 aa fe 41 55 07 55 f5 ff Data Ascii: PNGIHDRg-bKGD1GIDATx}yxde44I0:0 :#8\|- (23:\|@fNgS]J-:Tn<O=TgTY$0mr/X T)-dHD.!T\|MJR#h4V,AUU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
39	192.168.2.6	49769	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	419	OUT	GET /js/tgsticker-worker.js?14 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	392	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: application/javascript Content-Length: 5937 Last-Modified: Wed, 29 Jun 2022 21:52:44 GMT Connection: close ETag: "62bcc9ac-1731" Expires: Thu, 03 Oct 2024 02:42:32 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:32 UTC	5937	IN	Data Raw: 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 72 6c 6f 74 74 69 65 2d 77 61 73 6d 2e 6a 73 27 29 3b 0a 69 6d 70 6f 72 74 53 63 72 69 70 74 73 28 27 70 61 6b 6f 2d 69 6e 66 6c 61 74 65 2e 6d 69 6e 2e 6a 73 27 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 52 4c 6f 74 74 69 65 49 74 65 6d 28 72 65 71 49 64 2c 20 6a 73 53 74 72 69 6e 67 2c 20 77 69 64 74 68 2c 20 68 65 69 67 68 74 2c 20 66 70 73 29 20 7b 0a 20 20 74 68 69 73 2e 73 74 72 69 6e 67 4f 6e 57 61 73 6d 48 65 61 70 20 3d 20 6e 75 6c 6c 3b 0a 20 20 74 68 69 73 2e 68 61 6e 64 6c 65 20 3d 20 6e 75 6c 6c 3b 0a 20 20 74 68 69 73 2e 66 72 61 6d 65 43 6f 75 6e 74 20 3d 20 30 3b 0a 0a 20 20 74 68 69 73 2e 72 65 71 49 64 20 3d 20 72 65 71 49 64 3b 0a 20 20 74 68 69 73 2e 77 69 64 74 68 20 3d 20 77 69 64 74 68 3b 0a Data Ascii: importScripts('rlottie-wasm.js');importScripts('pako-inflate.min.js');function RLottieItem(reqId, jsString, width, height, fps) { this.stringOnWasmHeap = null; this.handle = null; this.frameCount = 0; this.reqId = reqId; this.width = width;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
40	192.168.2.6	49770	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	451	OUT	GET /file/464001897/3/f0Go0rLpEwk.11343.png/dd4eeb46cc5efc0688 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: image/png Content-Length: 11343 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:31 GMT ETag: "183936b397813281d8de1b217deb5c565bde1c5b" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:32 UTC	11343	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 2c 04 49 44 41 54 78 da ed 9d 77 7c 9c d5 95 f7 7f e7 3c 65 66 a4 51 1f 59 ee 0d 9b 62 03 a1 9b 1a 5a c8 66 97 00 a9 ec 4b 08 ec 66 df 6c 58 08 01 43 b2 c9 92 bc 9b c0 6e 20 d9 bc 09 2d 2c 81 dd 77 b3 29 4b 0a 29 18 42 09 69 84 00 a1 f7 8e c1 45 96 6d 49 a3 ae a9 4f 39 e7 fd 63 46 33 cf a8 59 b6 25 5b 92 9f f3 f9 e8 a3 d1 68 e6 29 f7 7e 9f d3 ee b9 f7 02 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 4a 28 a1 84 12 ca 14 08 85 4d 00 e8 f5 89 79 2e c9 62 62 aa 82 af 06 0c c3 84 af 06 48 0d 28 f9 aa 92 b4 22 d2 01 bf af 9d 2e 47 3e 6c b1 10 c0 9d 87 ec 2b 60 a7 31 Data Ascii: PNGIHDRg-bKGD,IDATxw\|<efQYbZfKflXCn -,w)K)BiEmIO9cF3Y%[h)~J(J(J(J(J(J(My.bbH(".G>l+`1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
41	192.168.2.6	49771	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	684	OUT	GET /file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: image/png Content-Length: 15740 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:32 GMT ETag: "9663b372030cf4b80b2b7ab98f8e689847388957" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:32 UTC	15740	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 3d 31 49 44 41 54 78 da ed 7d 77 9c 1c 67 79 ff f7 79 66 b6 dd ee de 5e 2f 3a f5 6e c9 b2 b1 2c 37 c0 c6 54 63 30 01 13 64 1b 9b 50 c2 07 1c 08 e0 1a 02 84 e0 98 84 40 30 6e 10 20 0e e4 87 09 01 5c 28 06 4c 71 c0 80 83 8d 1b 2e b2 2d c9 92 d5 75 d2 9d ae 97 ed 33 f3 3c bf 3f 66 77 67 f6 9a ee a4 6b e2 ee f9 7c ee 73 bb b3 bb 33 ef bc ef 77 9e f6 3e 05 98 a7 79 9a a7 13 85 f8 3d 00 dd 01 60 c9 fc 5c cc d3 74 d3 4a 80 1d 90 a1 80 71 cf fc 74 4c 0e 99 f3 53 30 5e 32 4e 03 81 dd d7 7a fa fc 7c 4c 92 4c 99 9f 82 f1 92 ae f6 bd 59 0a 20 34 3f 27 f3 00 9c 4e 00 ae 29 bd 24 62 57 24 cf d3 3c 00 a7 8d 68 f5 Data Ascii: PNGIHDRg-bKGD=1IDATx}wgyyf^/:n,7Tc0dP@0n \(Lq.-u3<?fwgk\|s3w>y=`\tJqtLS0^2Nz\|LLY 4?'N)$bW$<h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
42	192.168.2.6	49768	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	684	OUT	GET /file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:31 GMT Content-Type: image/png Content-Length: 13579 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:31 GMT ETag: "67176c69aa11e9f08d30f489308dc74d85e92ef0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:32 UTC	13579	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 34 c0 49 44 41 54 78 da ed 5d 79 9c 1c 75 95 ff be 57 55 dd 3d 7d cc d9 93 99 24 93 4c ae c9 45 42 0e 48 08 44 74 51 01 41 50 50 c4 03 0f dc f5 5a ae 24 a0 10 dd 55 44 8e 04 85 24 88 ac 0b cb ae ba 2a 6a 24 9c ba 5c 02 22 b7 06 84 70 25 90 93 1c 33 93 b9 67 7a fa aa aa f7 f6 8f be 93 10 13 98 99 f4 24 fd f2 c9 67 ba aa ab ab 7e f5 7e df df bb 7e ef f7 7e 40 89 4a 54 a2 12 95 a8 44 25 2a 51 89 8e 34 a2 12 0b fe 31 dd 7b ed 25 75 00 4f 12 a2 0a 80 42 ca 5a ae 4a 1e 90 46 49 29 02 72 23 2a 66 bb cb e6 9b e7 2e bd be a7 c4 b1 12 00 df 35 e9 95 57 f2 bd be c8 fb 54 dd 33 84 30 9f 40 47 11 51 f8 80 7f af Data Ascii: PNGIHDRg-bKGD4IDATx]yuWU=}$LEBHDtQAPPZ$UD$j$\"p%3gz$g~~~~@JTD%Q41{%uOBZJFI)r#*f.5WT30@GQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
43	192.168.2.6	49772	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	684	OUT	GET /file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: image/png Content-Length: 19325 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:32 GMT ETag: "2690d1e344526d5a2fb08060299f2697537643ae" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:32 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 4b 32 49 44 41 54 78 da ed 7d 77 7c 5c d5 d1 f6 33 e7 de ed ab 55 ef 92 e5 22 b9 f7 02 18 63 9b 16 30 a1 17 d3 4c 48 f2 91 90 37 94 10 12 de 90 ce 9b 84 90 90 84 84 24 90 02 49 80 50 13 08 bd 13 70 a5 b9 80 7b 97 bb 2d c9 b2 fa f6 bd 77 e6 fb 63 a5 2d d2 ae b4 72 c7 f6 f0 e3 e7 d5 ad e7 9e f3 9c 69 67 ce 0c e1 04 1d 30 7d f0 c1 07 8e 76 a0 3c 2c a2 3b 6c b6 ba cf 4d 9e dc 76 a2 57 32 23 3a d1 05 fd a7 d7 17 2c 18 2b 22 17 43 e1 7c 11 0c 27 a2 ec c4 f3 22 e2 03 b0 0d 84 b7 c0 78 e9 fc 19 33 16 11 11 9f e8 b9 13 00 3c 50 e0 5d c1 90 9f 11 d1 70 11 61 22 2c 11 91 a5 00 ea 84 b4 3a 12 09 13 50 26 40 29 Data Ascii: PNGIHDRg-bKGDK2IDATx}w\|\3U"c0LH7$IPp{-wc-rig0}v<,;lMvW2#:,+"C\|'"x3<P]pa",:P&@)
2024-09-29 02:42:32 UTC	3289	IN	Data Raw: 95 cf 1d 68 e7 b3 ab ec 3c 28 c1 1d 91 8a 1a 03 ac 1e 5b d5 91 d1 e7 e5 bb 2c aa 26 3f 2e c1 56 35 f8 b1 d7 db ff 78 b0 50 c4 34 32 b9 6e 59 7d 08 bb d2 24 b5 ac ce b5 20 bb 33 f5 07 11 94 f1 fe 63 9d fd 9b ad d4 94 cb f1 c2 26 1f ea 7c ac da c2 8c 9b 26 78 50 93 9b 5c 78 91 88 66 c1 8a 43 e2 9e 39 72 21 f9 84 26 11 0c b2 12 68 7b 4b 80 76 b4 92 f2 86 84 13 43 9e c8 95 e0 d1 0f 68 bc 64 a1 e2 3d de f8 0e ff c9 e5 6e 38 d2 e8 7e 9b 9b 23 fc ee f6 40 ca 9d 64 1e 2b f1 17 46 bb 31 a9 a4 a7 85 bb a7 c3 e0 37 6b fd 58 b8 3b 75 e8 ff 92 fa b0 fa 78 77 90 4f 2e ef db 28 98 54 ee c2 8e b6 10 47 fd 78 a4 e6 6d 69 e3 f3 87 e5 b2 cb d6 77 66 fc 66 5f 84 17 6e ef 40 53 c0 d4 87 15 d8 78 5a 95 27 ed 3d 11 43 f8 f9 0d be b4 cf 3a 67 50 f2 e6 2e fe e0 09 60 d6 1d 0c 8b Data Ascii: h<([,&?.V5xP42nY}$ 3c&\|&xP\xfC9r!&h{KvChd=n8~#@d+F17kX;uxwO.(TGxmiwff_n@SxZ'=C:gP.`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
44	192.168.2.6	49773	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:31 UTC	451	OUT	GET /file/464001737/4/Fn57W9l3xI0.15286.png/d4b936ecc2c939f4fa HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: image/png Content-Length: 15286 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:32 GMT ETag: "93939a07f86b42b04b779841ba81a1ef4ba2d929" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:32 UTC	15286	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 3b 6b 49 44 41 54 78 da ed bd 77 bc 5d 77 75 27 fa 5d eb b7 cb a9 b7 37 e9 ea aa 77 d9 72 af d8 98 19 c0 98 1a 08 a1 3c 08 25 61 02 21 43 06 cc e4 91 f2 48 1c 32 04 78 84 c4 36 e3 84 97 61 26 81 54 20 9d 84 66 c7 36 c6 06 db 10 63 5b ee 92 25 ab 97 db eb 39 67 b7 b5 de 1f 7b 9f 76 bb a4 2b e9 ea ea ae 8f f4 39 7b 9f b3 ef 2e bf df 77 af f6 5b 05 58 a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 65 5a a6 b3 40 b4 d4 1e e8 86 1b 2e 6e 46 a8 3b 35 0c 5b 15 66 2b 19 cd 92 ea 88 10 0d b1 62 38 52 1d 0c 34 18 54 95 81 a3 47 f7 f5 1f 3b 86 c2 32 0c 96 01 78 5a b4 73 e7 ce 6c 43 46 3f 08 Data Ascii: PNGIHDRg-bKGD;kIDATxw]wu']7wr<%a!CH2x6a&T f6c[%9g{v+9{.w[XeZeZeZeZeZeZeZeZ@.nF;5[f+b8R4TG;2xZslCF?

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
45	192.168.2.6	49774	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:32 UTC	451	OUT	GET /file/464001560/2/n7EACfx4FPY.16465.png/7318c11715aa2ec45b HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: image/png Content-Length: 16465 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:32 GMT ETag: "ad24af7a174e71673b28f7e827a85934048a9cd7" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:32 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 40 06 49 44 41 54 78 da ed bd 77 98 5d 65 b5 3f fe 59 6b 97 d3 cf f4 99 4c 7a 32 69 04 42 48 20 04 44 9a 20 28 20 4d 01 bd a8 28 2a 5c b1 5d c4 de b8 58 2e 96 8b c8 b5 7c af bd 5f 10 7f 2a 5d 11 10 95 8e 69 b4 50 d2 eb 64 32 fd f4 b3 cb 5a bf 3f 4e 99 33 25 c9 4c 32 43 02 9c f5 3c fb 39 67 9f b3 cf bb f7 79 df cf bb fa bb 5e a0 4a 55 aa 52 95 aa 54 a5 2a 55 a9 4a 55 aa d2 ab 9e 2e fd 08 e2 ef fb 2c 5a 0e 85 67 e1 ea 70 bc b6 e8 83 d7 19 a7 36 b5 c6 b7 c5 63 35 db 3e fa d5 f0 15 55 00 56 e9 e5 24 0a 04 22 df 23 50 08 00 d8 34 2f af 02 b0 4a 2f 1b 7d f4 ab a1 2b 49 68 6e e9 5c 55 1e aa 02 b0 4a 2f 0b Data Ascii: PNGIHDRg-bKGD@IDATxw]e?YkLz2iBH D ( M(\]X.\|_]iPd2Z?N3%L2C<9gy^JURT*UJU.,Zgp6c5>UV$"#P4/J/}+Ihn\UJ/
2024-09-29 02:42:32 UTC	429	IN	Data Raw: bf 68 3d 5c 9c 03 42 2b 04 49 08 1e c0 f9 f4 e2 b8 3f e9 ad 5a 83 30 e6 40 31 17 8a 56 00 4d 20 34 11 d0 04 a0 19 85 d7 26 02 e2 23 33 ae 32 f0 3c 00 36 14 36 d1 f0 1d 8a b4 b0 65 42 1f 80 4e 00 bb 01 74 2a d0 09 45 27 18 9d 50 6c 07 b0 0e 51 ac 1f 77 77 c7 ad 6a 20 88 a5 00 4e 04 c3 82 60 2d 4c fc 15 67 8d 77 99 f7 57 13 00 07 77 60 14 01 9c 02 c2 3c 14 7c 8c 02 c6 5a b8 78 7c 68 42 eb 84 d1 b5 ca 38 1c 01 58 08 80 11 00 15 0f 94 5f 4d 78 70 40 70 00 e4 21 c5 c3 47 1e 4d c8 e3 14 e4 41 f4 f2 88 fc 7b 74 2a 7c 1c 07 2d ef 98 e9 00 78 0a 39 3c 8c 8b c9 c7 6b 80 26 3e 4c 71 9b 2e 04 63 39 80 86 e2 27 49 30 5e 82 8b f5 b8 80 b6 bd 26 7c 2f b7 aa 81 00 66 81 30 17 8c 39 d0 22 e7 15 6c 03 e1 71 9c 4b 5b 5f ab 6e 29 3a 08 83 11 42 a4 28 4a 05 53 51 b1 e3 7a 11 Data Ascii: h=\B+I?Z0@1VM 4&#32<66eBNtE'PlQwwj N`-LgwWw`<\|Zx\|hB8X_Mxp@p!GMA{t\|-x9<k&>Lq.c9'I0^&\|/f09"lqK[_n):B(JSQz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
46	192.168.2.6	49775	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:32 UTC	451	OUT	GET /file/464001132/3/-1qvqKPZsQQ.17975.png/7d57d7159cf4fbe9b2 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: image/png Content-Length: 17975 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:32 GMT ETag: "fa9a38332023332be262ffbb44b3d98e6ed68a45" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:32 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 45 ec 49 44 41 54 78 da ed 7d 77 9c 1d 67 75 f6 73 ce cc dc 7e ef f6 be aa 2b 69 25 cb b2 2d b9 57 8c 8d 8c 31 25 60 1b db b4 00 09 7c e4 0b 04 ec 00 c1 32 04 e3 d0 4c 42 4f 48 02 49 3e 7a 89 83 03 21 60 1b e3 82 2b 36 ee 4d 56 b1 b4 ea db db ed 65 e6 9c ef 8f b9 75 8b 74 b5 5a ed 4a f6 be bf df fd dd 7b 77 e7 ce cc fb be cf 9c f2 bc e7 3d 07 58 68 0b 6d a1 2d b4 85 b6 d0 16 da 42 5b 68 af b4 46 0b 43 30 75 db 04 b4 08 d0 6e 02 61 07 88 80 39 cc 40 58 80 10 00 1b 40 8c 44 62 04 c4 08 88 e5 80 71 3f d0 73 13 90 5c 18 bd 05 00 1e 0e d0 9a 00 9c 0b e6 13 a0 da 0d a2 6e 00 dd 44 54 7b b8 e7 52 55 01 b0 Data Ascii: PNGIHDRg-bKGDEIDATx}wgus~+i%-W1%`\|2LBOHI>z!`+6MVeutZJ{w=Xhm-B[hFC0una9@X@Dbq?s\nDT{RU
2024-09-29 02:42:32 UTC	1939	IN	Data Raw: 9b fa 6e 83 ec 8c 9a 55 67 c8 9a 12 74 49 1b 34 6e 03 51 1b 34 21 57 b3 41 22 9b 4e 4f e0 86 33 92 f0 18 53 03 41 15 c2 8d d7 01 8d 1f 9e 3d a0 24 1e 12 d9 ff 97 20 8d 1e b3 99 ba 9c ad 19 d1 1e a7 10 f5 dc eb 91 c1 2e fa e8 dc d4 90 9b f5 04 95 37 dd 96 8c 7f fa 75 c1 38 40 97 01 80 46 45 a9 c6 50 0a 1e 3c f3 7c 56 a1 77 ed 71 63 82 28 29 84 a4 2d 30 48 61 90 62 62 41 41 55 41 56 14 09 5b 69 2c a7 34 94 51 1a c8 80 c7 6c a6 8c 10 95 3d 58 0c 91 f7 9c 90 d2 5b de 30 86 37 af c8 b1 c1 d3 3f 74 44 20 a4 1e 21 cd bc 24 14 bc 40 c1 47 14 53 26 18 f9 7f 2a bd 7f 0d 42 fa 98 05 9f 26 44 9c 67 73 28 8e 99 ea 5f 9b 1f 4d fe f1 b8 95 80 79 49 42 d9 af 37 3d 42 44 67 00 80 32 c4 58 ef 01 37 4d 9f 65 c0 76 54 2e ff 4d 2d 6e eb 99 2c f9 dc 6d 95 f9 0a 06 5a 00 cb c1 Data Ascii: nUgtI4nQ4!WA"NO3SA=$ .7u8@FEP<\|Vwqc()-0HabbAAUAV[i,4Ql=X[07?tD !$@GS&*B&Dgs(_MyIB7=BDg2X7MevT.M-n,mZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
47	192.168.2.6	49777	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:32 UTC	451	OUT	GET /file/464001880/3/xOpm7ohoHQ0.12690.png/feb1e161b1d3608613 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: image/png Content-Length: 12690 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:32 GMT ETag: "9b666309f437dfb32688ee016a9904703de41927" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:32 UTC	12690	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 31 47 49 44 41 54 78 da ed 7d 79 78 64 65 95 f7 ef 9c bb d4 92 a4 b2 a7 93 de d2 fb 06 34 34 49 b3 b4 03 8c 8a b8 a0 a0 e8 30 3a 30 8e cb 20 3a a2 ac a2 23 38 c8 7c fa b9 01 2d 82 20 cc a8 c3 28 32 ea a0 33 9f 82 82 3a 82 7c 80 40 9a e6 eb 86 66 e9 bd 9b 4e 67 df 53 cb 5d ce f9 fe a8 4a 2d d9 3a e9 54 96 6e ea 3c 4f 3d a9 54 dd ba f7 bd ef fb bb 67 7f cf 01 0a 54 a0 59 24 a3 30 05 05 9a 0c 6d dc b8 b1 72 fe fc f9 b7 2f 58 b0 20 d4 dc dc fc d2 54 cf c7 85 29 2d d0 64 48 44 2e 21 a2 cb 54 f5 ee 7c 9c af 00 c0 02 4d 96 4a 52 7f 23 05 00 16 68 c6 89 88 34 f5 56 0b 00 2c d0 8c 93 aa fe 41 55 07 55 f5 ff Data Ascii: PNGIHDRg-bKGD1GIDATx}yxde44I0:0 :#8\|- (23:\|@fNgS]J-:Tn<O=TgTY$0mr/X T)-dHD.!T\|MJR#h4V,AUU

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
48	192.168.2.6	49776	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:32 UTC	484	OUT	GET /js/pako-inflate.min.js HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: application/javascript Content-Length: 22682 Last-Modified: Fri, 04 Oct 2019 11:37:17 GMT Connection: close ETag: "5d972eed-589a" Expires: Thu, 03 Oct 2024 02:42:32 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:32 UTC	15991	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3b 65 6c 73 65 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 Data Ascii: !function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this
2024-09-29 02:42:32 UTC	6691	IN	Data Raw: 67 74 68 26 26 28 69 2e 6d 6f 64 65 3d 32 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 36 3a 69 66 28 30 3d 3d 3d 66 29 62 72 65 61 6b 20 65 3b 61 5b 6f 2b 2b 5d 3d 69 2e 6c 65 6e 67 74 68 2c 66 2d 2d 2c 69 2e 6d 6f 64 65 3d 32 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 37 3a 69 66 28 69 2e 77 72 61 70 29 7b 66 6f 72 28 3b 64 3c 33 32 3b 29 7b 69 66 28 30 3d 3d 3d 73 29 62 72 65 61 6b 20 65 3b 73 2d 2d 2c 6c 7c 3d 6e 5b 72 2b 2b 5d 3c 3c 64 2c 64 2b 3d 38 7d 69 66 28 75 2d 3d 66 2c 65 2e 74 6f 74 61 6c 5f 6f 75 74 2b 3d 75 2c 69 2e 74 6f 74 61 6c 2b 3d 75 2c 75 26 26 28 65 2e 61 64 6c 65 72 3d 69 2e 63 68 65 63 6b 3d 69 2e 66 6c 61 67 73 3f 4e 28 69 2e 63 68 65 63 6b 2c 61 2c 75 2c 6f 2d 75 29 3a 52 28 69 2e 63 68 65 63 6b 2c 61 2c 75 2c 6f 2d 75 29 29 2c Data Ascii: gth&&(i.mode=21);break;case 26:if(0===f)break e;a[o++]=i.length,f--,i.mode=21;break;case 27:if(i.wrap){for(;d<32;){if(0===s)break e;s--,l\|=n[r++]<<d,d+=8}if(u-=f,e.total_out+=u,i.total+=u,u&&(e.adler=i.check=i.flags?N(i.check,a,u,o-u):R(i.check,a,u,o-u)),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
49	192.168.2.6	49778	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:32 UTC	478	OUT	GET /js/rlottie-wasm.wasm HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:32 UTC	389	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: application/wasm Content-Length: 390408 Last-Modified: Tue, 14 Jul 2020 22:03:36 GMT Connection: close ETag: "5f0e2bb8-5f508" Expires: Thu, 03 Oct 2024 02:42:32 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:32 UTC	15995	IN	Data Raw: 00 61 73 6d 01 00 00 00 01 a9 05 59 60 01 7f 00 60 01 7f 01 7f 60 02 7c 7c 01 7c 60 03 7f 7f 7f 00 60 02 7f 7f 01 7f 60 07 7f 7f 7f 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7f 00 60 06 7f 7f 7f 7f 7f 7f 00 60 02 7f 7f 00 60 03 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7f 00 60 06 7f 7f 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7d 00 60 05 7f 7f 7f 7d 7f 00 60 02 7f 7f 01 7d 60 05 7f 7f 7e 7f 7f 00 60 06 7f 7c 7f 7f 7f 7f 01 7f 60 03 7f 7e 7f 01 7e 60 00 00 60 08 7f 7f 7f 7f 7f 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7c 01 7f 60 06 7f 7f 7f 7f 7f 7c 01 7f 60 05 7f 7f 7f 7f 7e 01 7f 60 00 01 7f 60 01 7c 01 7f 60 02 7f 7c 01 7f 60 01 7f 01 7d 60 04 7d 7d 7d 7d 01 7d 60 04 7f 7f 7d 7d 00 60 03 7f 7d 7f 00 60 02 7f 7d 01 7d 60 04 7f 7d 7f 7f Data Ascii: asmY```\|\|\|````````````}`}`}`~`\|`~~```\|`\|`~``\|`\|`}`}}}}}`}}`}`}}`}
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 00 0c 01 0b 0b 0b 03 40 20 00 20 04 48 04 40 20 00 20 03 3a 00 00 20 00 41 01 6a 21 00 0c 01 0b 0b 20 04 20 02 6b 0b 87 01 01 02 7f 20 00 20 00 28 02 04 41 01 6a 36 02 04 41 bc ab 04 28 02 00 41 b8 ab 04 28 02 00 22 02 6b 41 02 75 20 01 4d 04 7f 20 01 41 01 6a 10 d3 0a 41 b8 ab 04 28 02 00 05 20 02 0b 20 01 41 02 74 6a 28 02 00 22 02 04 40 20 02 20 02 28 02 04 22 03 41 7f 6a 36 02 04 20 03 45 04 40 20 02 20 02 28 02 00 28 02 08 41 ff 01 71 41 96 02 6a 11 00 00 0b 0b 41 b8 ab 04 28 02 00 20 01 41 02 74 6a 20 00 36 02 00 0b 03 00 01 0b 16 00 20 00 41 00 36 02 00 20 00 20 00 28 02 00 41 01 72 36 02 00 0b 0d 00 20 00 2c 00 00 41 00 47 41 01 73 0b 09 00 20 00 10 48 10 fd 02 0b 2c 00 20 00 28 02 18 41 09 46 04 40 20 00 10 9d 01 1a 05 20 00 41 01 36 02 18 41 c4 Data Ascii: @ H@ : Aj! k (Aj6A(A("kAu M AjA( Atj("@ ("Aj6 E@ ((AqAjA( Atj 6 A6 (Ar6 ,AGAs H, (AF@ A6A
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 10 40 22 01 41 ff 01 71 41 ff 01 46 0d 00 20 01 0b 05 41 7f 0b 05 20 02 41 7f 3a 00 00 20 01 0b 0b 52 00 20 00 20 01 2a 02 00 38 02 00 20 00 20 01 2a 02 04 38 02 04 20 00 20 02 2a 02 00 38 02 08 20 00 20 02 2a 02 04 38 02 0c 20 00 20 03 2a 02 00 38 02 10 20 00 20 03 2a 02 04 38 02 14 20 00 20 04 2a 02 00 38 02 18 20 00 20 04 2a 02 04 38 02 1c 0b 1e 00 20 00 28 02 00 20 00 28 02 08 48 04 7f 20 00 28 02 04 20 00 28 02 0c 4e 05 41 01 0b 0b 20 01 01 7f 20 00 41 80 10 6a 21 01 03 40 20 00 10 f6 03 20 00 41 08 6a 22 00 20 01 47 0d 00 0b 0b 26 00 20 00 28 02 04 20 02 20 00 41 1c 6a 22 00 28 02 04 6a 10 ea 09 20 01 41 02 74 6a 20 00 28 02 00 41 02 74 6a 0b 50 01 03 7f 23 07 21 03 23 07 41 20 6a 24 07 20 03 21 02 20 00 28 02 08 20 00 28 02 00 22 04 6b 41 03 75 20 Data Ascii: @"AqAF A A: R 8 8 8 8 8 8 8 8 ( (H ( (NA Aj!@ Aj" G& ( Aj"(j Atj (AtjP#!#A j$ ! ( ("kAu
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 01 05 20 03 20 04 41 10 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 12 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 16 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 1c 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 02 7f 20 03 20 04 41 1e 6a 22 01 10 2c 22 02 20 01 49 04 40 41 01 21 02 20 03 21 00 20 01 0c 01 0b 20 03 20 01 20 02 6c 46 04 40 41 09 21 02 20 01 0c 01 0b 20 03 20 04 41 24 6a 22 01 10 2c 22 02 20 01 49 04 Data Ascii: Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," I@A! ! lF@A! A$j"," I
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 01 28 02 00 1a 0b 0b 20 03 24 07 20 00 0b 8c 07 02 05 7f 12 7d 23 07 21 05 23 07 41 30 6a 24 07 20 05 41 28 6a 21 06 20 05 22 03 41 29 6a 22 07 20 02 10 a3 01 22 04 3a 00 00 20 04 41 ff 01 71 04 40 20 06 20 01 10 a3 01 22 04 3a 00 00 20 04 41 ff 01 71 04 40 20 03 10 6d 02 40 02 40 02 40 02 40 02 40 20 06 20 07 10 f3 05 2c 00 00 22 04 41 01 6b 0e 10 01 02 04 03 04 04 04 03 04 04 04 04 04 04 04 00 04 0b 20 02 2a 02 04 21 12 20 02 2a 02 10 21 13 20 02 2a 02 1c 21 14 20 02 2a 02 08 21 15 20 02 2a 02 14 21 16 20 02 2a 02 20 21 17 20 01 2a 02 0c 21 18 20 01 2a 02 10 21 19 20 01 2a 02 14 21 0a 20 01 2a 02 18 21 0b 20 01 2a 02 1c 21 0c 20 01 2a 02 20 21 0d 20 03 20 01 2a 02 00 22 10 20 02 2a 02 00 22 11 94 20 01 2a 02 04 22 0e 20 02 2a 02 0c 22 0f 94 92 20 01 2a Data Ascii: ( $ }#!#A0j$ A(j! "A)j" ": Aq@ ": Aq@ m@@@@@ ,"Ak ! ! ! ! ! ! ! ! ! ! ! ! " " " " *
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 02 08 46 04 40 20 02 20 04 10 b9 03 20 02 28 02 00 21 00 05 20 01 20 04 28 02 00 36 02 00 20 02 20 03 41 04 6a 36 02 04 0b 20 05 41 7f 6a 41 02 74 20 00 6a 20 05 41 7e 6a 41 02 74 20 00 6a 28 02 00 36 02 00 0b 0b 20 07 24 07 0b 81 04 02 0d 7f 01 7d 23 07 21 04 23 07 41 e0 00 6a 24 07 20 04 41 18 6a 21 05 20 00 10 6d 20 04 41 08 6a 22 07 10 52 02 40 02 40 20 01 28 02 34 22 06 45 0d 00 20 06 2c 00 28 45 0d 00 20 07 20 06 41 18 6a 20 02 10 4d 10 bd 03 20 07 20 01 28 02 34 41 20 6a 20 02 10 4d 10 bc 03 0c 01 0b 20 05 20 01 41 14 6a 20 02 10 6b 20 07 20 05 29 03 00 37 03 00 0b 20 03 04 7d 20 02 21 03 20 01 41 14 6a 22 06 10 76 04 7d 43 00 00 00 00 05 20 06 28 02 00 20 03 10 d4 08 0b 05 43 00 00 00 00 0b 21 11 20 04 41 d0 00 6a 21 08 20 04 41 30 6a 21 06 20 04 Data Ascii: F@ (! (6 Aj6 AjAt j A~jAt j(6 $}#!#Aj$ Aj! m Aj"R@@ (4"E ,(E Aj M (4A j M Aj k )7 } ! Aj"v}C ( C! Aj! A0j!
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 40 02 40 02 40 02 40 20 01 20 08 10 e7 09 0e 02 00 01 02 0b 20 06 20 01 20 08 29 03 00 20 02 10 dc 03 20 06 28 02 00 21 01 20 06 28 02 04 21 02 20 06 41 00 36 02 00 20 06 41 00 36 02 04 20 05 41 00 36 02 00 20 00 20 01 36 02 00 20 05 41 00 36 02 04 20 00 20 02 36 02 04 20 05 10 29 20 06 10 29 0c 02 0b 20 01 20 08 10 db 03 22 09 28 02 10 22 03 41 88 20 6a 28 02 00 21 0a 20 03 41 84 20 6a 28 02 00 22 07 21 04 20 0a 20 07 6b 20 02 28 02 10 20 02 28 02 0c 22 07 6b 46 04 40 02 40 20 04 20 0a 47 04 40 20 04 21 03 20 07 21 04 03 40 20 03 2a 02 00 20 04 2a 02 00 5c 0d 02 20 03 41 04 6a 20 04 41 04 6a 10 c8 05 45 0d 02 20 04 41 08 6a 21 04 20 03 41 08 6a 22 03 20 0a 47 0d 00 0b 20 09 28 02 10 21 03 0b 20 05 20 03 36 02 00 20 05 20 09 28 02 14 22 01 36 02 04 20 01 Data Ascii: @@@@ ) (! (! A6 A6 A6 6 A6 6 ) ) "("A j(! A j("! k ( ("kF@@ G@ ! !@ * *\ Aj AjE Aj! Aj" G (! 6 ("6
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 05 01 00 03 02 04 06 0b 20 14 41 03 47 04 40 20 00 28 02 00 22 03 28 02 0c 22 04 20 03 28 02 10 46 04 7f 20 03 20 03 28 02 00 28 02 24 41 3f 71 41 02 6a 11 01 00 05 20 04 2c 00 00 10 26 0b 22 03 41 ff 01 71 41 18 74 41 18 75 41 7f 4c 0d 07 20 07 28 02 08 20 03 41 18 74 41 18 75 41 01 74 6a 2e 01 00 41 80 c0 00 71 45 0d 07 20 12 20 00 28 02 00 22 03 28 02 0c 22 04 20 03 28 02 10 46 04 7f 20 03 20 03 28 02 00 28 02 28 41 3f 71 41 02 6a 11 01 00 05 20 03 20 04 41 01 6a 36 02 0c 20 04 2c 00 00 10 26 0b 41 ff 01 71 10 cd 01 0c 05 0b 0c 05 0b 20 14 41 03 47 0d 03 0c 04 0b 20 0e 28 02 04 20 0e 2c 00 0b 22 03 41 ff 01 71 20 03 41 00 48 1b 22 0c 41 00 20 0f 28 02 04 20 0f 2c 00 0b 22 03 41 ff 01 71 20 03 41 00 48 1b 22 0b 6b 47 04 40 20 00 28 02 00 22 03 28 02 0c Data Ascii: AG@ ("(" (F (($A?qAj ,&"AqAtAuAL ( AtAuAtj.AqE ("(" (F (((A?qAj Aj6 ,&Aq AG ( ,"Aq AH"A ( ,"Aq AH"kG@ ("(
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 40 20 00 28 02 00 22 02 2c 00 00 20 01 41 0a 6c 41 50 6a 6a 21 01 20 00 20 02 41 01 6a 36 02 00 20 02 2c 00 01 10 a6 01 0d 00 0b 0b 20 01 0b 7b 01 02 7f 23 07 21 04 23 07 41 10 6a 24 07 20 04 21 03 02 40 02 40 20 01 2c 00 22 45 0d 00 20 01 2c 00 23 45 0d 00 20 00 20 02 10 7d 0c 01 0b 20 02 10 8b 02 45 04 40 20 01 2c 00 22 45 04 40 20 01 2c 00 23 04 40 20 00 20 02 10 7d 05 20 03 10 64 20 01 20 02 20 03 10 f3 06 20 00 20 03 10 99 01 20 03 10 4b 0b 0c 02 0b 0b 20 00 41 00 36 02 00 20 00 10 64 0b 20 04 24 07 0b 0b 00 20 00 20 01 20 02 10 e5 0c 0b 16 00 20 00 20 01 20 02 42 80 80 80 80 80 80 80 80 80 7f 10 8b 04 0b 8f 01 01 02 7f 20 00 20 00 2c 00 4a 22 01 20 01 41 ff 01 6a 72 3a 00 4a 20 00 28 02 14 20 00 28 02 1c 4b 04 40 20 00 28 02 24 21 01 20 00 41 00 41 Data Ascii: @ (", AlAPjj! Aj6 , {#!#Aj$ !@@ ,"E ,#E } E@ ,"E@ ,#@ } d K A6 d $ B ,J" Ajr:J ( (K@ ($! AA
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 3f 0b 20 00 10 2b 0d 06 20 00 20 01 20 02 10 e7 01 20 00 10 2b 45 0d 01 0c 06 0b 0b 0c 01 0b 41 af f2 03 41 f4 f1 03 41 c8 06 41 8f f5 03 10 00 0b 20 02 10 9a 03 45 04 40 20 00 10 2b 04 40 41 af f2 03 41 f4 f1 03 41 c4 06 41 8f f5 03 10 00 05 20 00 41 10 20 01 10 4c 10 3f 20 00 10 2b 1a 0b 0b 0b 0b 0b 0b ed 03 01 02 7f 20 01 10 66 41 ff 01 71 41 fb 00 47 04 40 41 9a f5 03 41 f4 f1 03 41 e3 05 41 ab f5 03 10 00 0b 20 01 10 4a 1a 02 40 02 40 02 40 20 02 10 b1 04 0d 00 20 00 10 2b 04 40 41 af f2 03 41 f4 f1 03 41 e7 05 41 ab f5 03 10 00 05 20 00 41 10 20 01 10 4c 10 3f 20 00 10 2b 45 0d 01 0b 0c 01 0b 20 01 10 a9 01 20 00 10 2b 45 04 40 20 01 41 fd 00 10 73 04 40 20 02 10 9b 03 0d 02 20 00 10 2b 45 0d 03 41 af f2 03 41 f4 f1 03 41 ee 05 41 ab f5 03 10 00 0b Data Ascii: ? + +EAAAA E@ +@AAAA A L? + fAqAG@AAAA J@@@ +@AAAA A L? +E +E@ As@ +EAAAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
50	192.168.2.6	49779	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:32 UTC	648	OUT	GET /img/t_logo_sprite.svg HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:33 UTC	343	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: image/svg+xml Content-Length: 23116 Last-Modified: Tue, 19 Apr 2022 11:15:29 GMT Connection: close ETag: "625e99d1-5a4c" Expires: Thu, 03 Oct 2024 02:42:32 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:33 UTC	16041	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 68 65 69 67 68 74 3d 22 31 34 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 36 34 20 31 34 34 22 20 77 69 64 74 68 3d 22 34 34 36 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 61 22 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 61 61 62 65 65 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 32 39 65 64 39 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 Data Ascii: <svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGr
2024-09-29 02:42:33 UTC	7075	IN	Data Raw: 33 38 2d 31 38 2e 37 39 38 73 31 38 2e 38 2d 32 38 2e 33 36 38 31 20 31 38 2e 38 2d 34 35 2e 33 38 33 31 2d 36 2e 37 37 2d 33 33 2e 33 35 31 31 2d 31 38 2e 38 2d 34 35 2e 33 38 33 63 2d 31 32 2e 30 33 2d 31 32 2e 30 33 32 2d 32 38 2e 33 37 2d 31 38 2e 37 39 38 30 35 2d 34 35 2e 33 38 2d 31 38 2e 37 39 38 30 35 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 72 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 33 33 34 38 2e 37 34 20 37 31 2e 34 35 36 34 63 31 38 2e 37 31 2d 38 2e 31 35 31 20 33 31 2e 31 38 2d 31 33 2e 35 32 35 31 20 33 37 2e 34 33 2d 31 36 2e 31 32 31 35 20 31 37 2e 38 32 2d 37 2e 34 31 33 39 20 32 31 2e 35 32 2d 38 2e 37 30 31 35 20 32 33 2e 39 34 2d 38 2e 37 34 34 36 2e 35 33 2d 2e 30 30 39 31 20 31 2e 37 31 2e 31 32 32 33 20 32 2e 34 38 2e 37 34 37 Data Ascii: 38-18.798s18.8-28.3681 18.8-45.3831-6.77-33.3511-18.8-45.383c-12.03-12.032-28.37-18.79805-45.38-18.79805z" fill="url(#r)"/><path d="m3348.74 71.4564c18.71-8.151 31.18-13.5251 37.43-16.1215 17.82-7.4139 21.52-8.7015 23.94-8.7446.53-.0091 1.71.1223 2.48.747

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
51	192.168.2.6	49780	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:32 UTC	455	OUT	GET /file/464001828/11e9a/1yY7a721t4o.30567.png/e113973dae2bee508b HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:33 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: image/png Content-Length: 30567 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:32 GMT ETag: "a30234722b2883f211eb0bad5c73c2ef2fe73a53" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:33 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 40 00 00 01 40 08 06 00 00 00 cd 90 a5 aa 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 77 1c 49 44 41 54 78 da ed 9d 77 58 54 67 f6 c7 07 50 93 68 12 a3 82 25 46 d3 8c d9 64 f3 db ec 46 2c 8c 46 2c a0 cc 1d 14 29 33 14 15 1b 16 ec 08 0c 88 48 94 22 8a c0 d0 bb 62 c5 2e 4d b1 62 8b bd 80 8a 9a 18 7b ef bd 20 cc 7c b9 bf 3f 64 c6 81 b9 f7 ce 1d 9a a8 ef f7 79 ce b3 bb 59 18 ee cc dc fb c9 79 df 73 de ef 11 08 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 88 ea a1 06 f4 71 6a 65 67 21 a5 6c fb 4a 66 da f5 95 2c b4 eb 2b 4d b4 Data Ascii: PNGIHDR@@bKGDwIDATxwXTgPh%FdF,F,)3H"b.Mb{ \|?dyYysqjeg!lJf,+M
2024-09-29 02:42:33 UTC	14531	IN	Data Raw: af 2f 90 69 da 18 29 3f 19 31 5e 43 f8 2f 4d 60 6e c5 be f4 ed 27 95 62 56 6c ac ba d5 25 be 26 ce f2 d6 40 24 65 65 55 c8 fe 42 92 92 68 eb d7 a0 d2 7a 0f 7d ec ec 5e 9f 50 79 0d 37 44 2e 5b 86 c4 cc 4c a4 6d d8 80 b4 8d 1b 69 55 a4 6e d8 80 c4 cc 4c 44 ad 5c 89 79 0b 17 56 80 a5 7f 54 14 46 7a 79 f1 2a 4c f4 77 74 44 6d 5b 71 f5 73 74 d4 79 1d dd 28 6a 2c 21 c1 87 ba 04 8e 34 91 b1 cd 03 a1 8f 75 a8 71 08 5e 74 ff 0c 4c 56 56 8f 07 99 e0 b9 63 5b ec ef f5 05 d2 7e 6e 50 25 10 d6 66 d8 f5 ee 0a ae 2a a7 2c 2c 4c fd 30 d7 c5 e9 0e 5e 4b df 9c 1c 46 5b 2c b6 fd 3f db 91 23 11 92 9c 4c 87 a6 a6 22 61 dd ba 0a d0 63 8b d4 0d 1b 10 b1 74 69 05 08 aa c2 6b ee 5c d8 8e 1c c9 fa b9 d9 bb b9 d5 fa 69 92 59 b1 b1 3a cf 16 0b 29 4a 29 14 89 ec 09 0d 3e 40 29 22 4d Data Ascii: /i)?1^C/M`n'bVl%&@$eeUBhz}^Py7D.[LmiUnLD\yVTFzyLwtDm[qsty(j,!4uq^tLVVc[~nP%f,,L0^KF[,?#L"actik\iY:)J)>@)"M

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
52	192.168.2.6	49781	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:32 UTC	451	OUT	GET /file/464001402/5/eOMSj3GzJXo.13579.png/f3cec6c451d023c109 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:33 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:33 GMT Content-Type: image/png Content-Length: 13579 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:33 GMT ETag: "67176c69aa11e9f08d30f489308dc74d85e92ef0" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:33 UTC	13579	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 34 c0 49 44 41 54 78 da ed 5d 79 9c 1c 75 95 ff be 57 55 dd 3d 7d cc d9 93 99 24 93 4c ae c9 45 42 0e 48 08 44 74 51 01 41 50 50 c4 03 0f dc f5 5a ae 24 a0 10 dd 55 44 8e 04 85 24 88 ac 0b cb ae ba 2a 6a 24 9c ba 5c 02 22 b7 06 84 70 25 90 93 1c 33 93 b9 67 7a fa aa aa f7 f6 8f be 93 10 13 98 99 f4 24 fd f2 c9 67 ba aa ab ab 7e f5 7e df df bb 7e ef f7 7e 40 89 4a 54 a2 12 95 a8 44 25 2a 51 89 8e 34 a2 12 0b fe 31 dd 7b ed 25 75 00 4f 12 a2 0a 80 42 ca 5a ae 4a 1e 90 46 49 29 02 72 23 2a 66 bb cb e6 9b e7 2e bd be a7 c4 b1 12 00 df 35 e9 95 57 f2 bd be c8 fb 54 dd 33 84 30 9f 40 47 11 51 f8 80 7f af Data Ascii: PNGIHDRg-bKGD4IDATx]yuWU=}$LEBHDtQAPPZ$UD$j$\"p%3gz$g~~~~@JTD%Q41{%uOBZJFI)r#*f.5WT30@GQ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
53	192.168.2.6	49782	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:32 UTC	612	OUT	GET /img/t_main_Android_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454 Range: bytes=0-
2024-09-29 02:42:33 UTC	370	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: video/mp4 Content-Length: 250838 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3d3d6" Expires: Thu, 03 Oct 2024 02:42:32 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 0-250837/250838
2024-09-29 02:42:33 UTC	16014	IN	Data Raw: 00 00 00 20 66 74 79 70 6d 70 34 32 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 03 cd 7d 6d 64 61 74 00 00 02 71 06 05 ff ff 6d dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 35 37 20 72 32 39 33 35 20 35 34 35 64 65 32 66 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 31 38 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 31 20 64 65 62 6c 6f 63 6b 3d 31 3a 2d 32 3a 2d 32 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d Data Ascii: ftypmp42isomiso2avc1mp41free}mdatqmEH, #x264 - core 157 r2935 545de2f - H.264/MPEG-4 AVC codec - Copyleft 2003-2018 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3:0x113 me=hex subm
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 39 25 0c 3c c4 ac 51 38 a5 10 bc 48 22 72 28 1e 7d 3c f1 07 5a 28 5b b2 47 e7 65 9b 8e dc 64 d2 58 d3 72 f2 31 9f 99 82 5d 14 22 ff 20 e8 f4 5e ab fd 6c 77 30 4b 66 99 62 c0 37 38 81 16 63 69 40 2c 81 51 53 51 c6 a8 f5 85 2b 04 b1 18 f1 a0 ea d1 08 cb ff 13 64 f7 48 3c d6 12 53 0b ac 62 06 fc 7f d0 2b 1c 87 0c 58 e8 c2 1c d0 7c 3c 99 53 f4 8c 7d 1a fb a3 20 f4 62 97 42 96 d1 c3 7c 60 1b d2 0d 33 c1 b6 6f f3 3a c6 91 12 b9 33 3b 23 0a 38 95 a9 09 d4 af 0e fd e7 ef a5 0f 5a da 86 d1 f2 85 5b 2d e1 b1 66 54 42 3f 87 2e 77 39 c0 f5 08 27 61 c3 34 3e 68 b2 ed 31 37 8c 26 6e 1a 9b 52 e9 35 e4 85 9a 4c f1 a6 0f d5 7a 26 6e d5 1a 34 8d ce 04 ce 56 32 cd 45 92 74 3d e4 7c 8f 4f fa 75 fc da 29 20 3c 60 06 df 47 52 dc 10 63 99 50 01 a8 d2 55 94 f9 5c b9 3e 52 e8 2c Data Ascii: 9%<Q8H"r(}<Z([GedXr1]" ^lw0Kfb78ci@,QSQ+dH<Sb+X\|<S} bB\|`3o:3;#8Z[-fTB?.w9'a4>h17&nR5Lz&n4V2Et=\|Ou) <`GRcPU\>R,
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: b4 ea 2d 01 72 1e 82 84 b0 22 52 ee a3 a8 b6 32 4a 70 00 02 49 aa db 14 c7 e5 ab 03 aa d4 ba 30 a3 a4 8e 1a 92 af 9a 45 de fd 54 a5 4c 53 18 a5 9f d9 2f b3 da c2 6b 8c 8d ea d8 5f ab 4a 14 54 b0 42 4c a3 29 2a e9 1f 2a cf 66 d1 4d 3e 40 13 72 a3 4b 04 9a db e1 78 c6 ec 7e c5 69 b1 62 ab 58 bd 1f ac 33 e9 f6 45 4f 28 75 c8 f4 eb 60 69 d5 ea b8 62 ef 01 8b bb 99 4e 55 98 38 40 4b 02 d6 7d ad 94 8f fa 91 67 9b ef 99 cd c6 ed 00 5f 38 b8 0c af ed 00 6d 30 b4 ae b1 53 ea ca f8 f1 72 39 ae b1 c2 ea 86 4e 0d 4d 05 f1 a7 e7 da c7 15 d4 2c f1 e8 6b 86 12 7d 63 b1 12 73 3d 33 af d6 d0 89 c6 4b d7 c3 3a 19 a7 5e 20 55 50 e7 8f c5 37 da 08 5e 68 cf e6 9d 21 e7 7b d7 01 ed d4 bb a5 b6 fd b4 f4 84 aa 29 1c 20 0c 98 e0 9a 07 f8 ba 63 06 ab 3f 25 3f 58 91 6c 6d 05 57 d2 Data Ascii: -r"R2JpI0ETLS/k_JTBL)**fM>@rKx~ibX3EO(u`ibNU8@K}g_8m0Sr9NM,k}cs=3K:^ UP7^h!{) c?%?XlmW

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
54	192.168.2.6	49783	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:32 UTC	608	OUT	GET /img/t_main_iOS_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454 Range: bytes=0-
2024-09-29 02:42:33 UTC	370	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: video/mp4 Content-Length: 244748 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3bc0c" Expires: Thu, 03 Oct 2024 02:42:32 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 0-244747/244748
2024-09-29 02:42:33 UTC	16014	IN	Data Raw: 00 00 00 20 66 74 79 70 6d 70 34 32 00 00 02 00 69 73 6f 6d 69 73 6f 32 61 76 63 31 6d 70 34 31 00 00 00 08 66 72 65 65 00 03 b6 b5 6d 64 61 74 00 00 02 71 06 05 ff ff 6d dc 45 e9 bd e6 d9 48 b7 96 2c d8 20 d9 23 ee ef 78 32 36 34 20 2d 20 63 6f 72 65 20 31 35 37 20 72 32 39 33 35 20 35 34 35 64 65 32 66 20 2d 20 48 2e 32 36 34 2f 4d 50 45 47 2d 34 20 41 56 43 20 63 6f 64 65 63 20 2d 20 43 6f 70 79 6c 65 66 74 20 32 30 30 33 2d 32 30 31 38 20 2d 20 68 74 74 70 3a 2f 2f 77 77 77 2e 76 69 64 65 6f 6c 61 6e 2e 6f 72 67 2f 78 32 36 34 2e 68 74 6d 6c 20 2d 20 6f 70 74 69 6f 6e 73 3a 20 63 61 62 61 63 3d 31 20 72 65 66 3d 31 20 64 65 62 6c 6f 63 6b 3d 31 3a 2d 32 3a 2d 32 20 61 6e 61 6c 79 73 65 3d 30 78 33 3a 30 78 31 31 33 20 6d 65 3d 68 65 78 20 73 75 62 6d Data Ascii: ftypmp42isomiso2avc1mp41freemdatqmEH, #x264 - core 157 r2935 545de2f - H.264/MPEG-4 AVC codec - Copyleft 2003-2018 - http://www.videolan.org/x264.html - options: cabac=1 ref=1 deblock=1:-2:-2 analyse=0x3:0x113 me=hex subm
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 54 99 12 eb 48 8d 74 68 1f 55 2a 62 ef 3f b3 d7 6b 74 84 ab a5 aa 93 b0 d5 de 26 05 56 48 5a fb d9 2a b2 e5 4c 24 ed 71 02 c8 e4 23 e9 7e a3 1a 8b 01 d1 6d 09 c2 38 6b ec aa e5 85 e4 63 74 b8 26 ff 2f cc 2e 2b 0e ee 98 86 d7 56 60 38 9e 4b be b8 a5 df f5 d5 74 d8 a6 54 71 ea 54 43 df 0c 29 3e b0 ab 4b cc 36 d6 4b 4e e7 65 e1 2a ab 8b c7 df b8 ac ed 89 db 0e 7a 38 ac 1e 14 e4 9b f3 86 14 d6 53 96 0f 47 8b 71 76 5b 91 7d 32 09 77 7c 34 02 61 9b a2 ed 5e 23 2b 55 d1 96 f5 50 ff e4 0c c1 aa 22 f9 cb bc 0b c0 1b ed b9 43 1e b4 fb 2c 77 fd 6c ad 5d dd c9 f3 3d d5 fc d1 dd 48 29 57 47 86 76 f4 db 53 72 4a fd e0 6f ff 3b 14 66 e1 95 b3 cd 3b 75 28 7b 93 79 cd 16 fc 84 34 e4 f7 1f 5a 65 59 e5 af 4f f6 64 56 ef 53 f0 0d 63 80 f6 59 4e 4f 27 64 ee 53 79 e1 0e d6 c7 Data Ascii: THthUb?kt&VHZL$q#~m8kct&/.+V`8KtTqTC)>K6KNe*z8SGqv[}2w\|4a^#+UP"C,wl]=H)WGvSrJo;f;u({y4ZeYOdVScYNO'dSy
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: b7 7e 1c 1a 98 a3 68 da 74 7c 8f 94 2e 81 27 4c 94 6a 42 19 6c 82 2f df c8 fc 1b 7e 58 be e7 af 1c d3 62 18 52 f5 1c 4b 3a a0 4b 29 b5 ec 0f a2 ed 2f 05 ca 2c dc 19 1c c5 ad bb e0 a4 4c 88 e6 2d fe 07 c6 37 be e5 05 9b cb c0 33 d2 d7 f2 59 b6 17 3d 0b f7 b8 90 c7 e7 22 78 04 ec 33 4b 6f c1 3b ed d5 cf 94 e8 27 50 b6 58 42 c8 dc fc ea e2 13 fb 21 1e a6 9a 52 48 73 eb d1 50 d7 32 1e 6d f2 b3 76 e6 e6 9d 26 27 c6 4e f0 68 71 58 bf 9e 31 ca 7d c5 fd 88 59 3e 4b 82 2a 35 a9 d4 18 f5 ad 8d c9 ce f3 f9 54 40 ed 9f 80 aa 23 8f 10 9d 59 fa 05 b7 57 66 e3 12 e1 90 2e 28 ef 03 88 e3 ed da b9 7f 19 23 50 54 f7 ba 29 24 5e ab 0b 21 b0 de 45 13 c3 cc 5d cc 95 d1 68 1e 49 76 22 1c 5c 52 99 1d bb b6 93 96 b5 74 13 e6 5c 9e 32 c7 d2 67 9d f3 d4 45 d2 9b 02 c3 09 0d e1 d6 Data Ascii: ~ht\|.'LjBl/~XbRK:K)/,L-73Y="x3Ko;'PXB!RHsP2mv&'NhqX1}Y>K*5T@#YWf.(#PT)$^!E]hIv"\Rt\2gE

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
55	192.168.2.6	49784	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:32 UTC	412	OUT	GET /js/rlottie-wasm.js HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:33 UTC	395	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:32 GMT Content-Type: application/javascript Content-Length: 100601 Last-Modified: Tue, 14 Jul 2020 22:03:36 GMT Connection: close ETag: "5f0e2bb8-188f9" Expires: Thu, 03 Oct 2024 02:42:32 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:33 UTC	15989	IN	Data Raw: 76 61 72 20 4d 6f 64 75 6c 65 3d 74 79 70 65 6f 66 20 4d 6f 64 75 6c 65 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 3f 4d 6f 64 75 6c 65 3a 7b 7d 3b 76 61 72 20 6d 6f 64 75 6c 65 4f 76 65 72 72 69 64 65 73 3d 7b 7d 3b 76 61 72 20 6b 65 79 3b 66 6f 72 28 6b 65 79 20 69 6e 20 4d 6f 64 75 6c 65 29 7b 69 66 28 4d 6f 64 75 6c 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 6b 65 79 29 29 7b 6d 6f 64 75 6c 65 4f 76 65 72 72 69 64 65 73 5b 6b 65 79 5d 3d 4d 6f 64 75 6c 65 5b 6b 65 79 5d 7d 7d 76 61 72 20 61 72 67 75 6d 65 6e 74 73 5f 3d 5b 5d 3b 76 61 72 20 74 68 69 73 50 72 6f 67 72 61 6d 3d 22 2e 2f 74 68 69 73 2e 70 72 6f 67 72 61 6d 22 3b 76 61 72 20 71 75 69 74 5f 3d 66 75 6e 63 74 69 6f 6e 28 73 74 61 74 75 73 2c 74 6f 54 68 72 6f 77 29 7b 74 68 72 6f 77 Data Ascii: var Module=typeof Module!=="undefined"?Module:{};var moduleOverrides={};var key;for(key in Module){if(Module.hasOwnProperty(key)){moduleOverrides[key]=Module[key]}}var arguments_=[];var thisProgram="./this.program";var quit_=function(status,toThrow){throw
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 6e 63 74 69 6f 6e 20 64 65 6d 61 6e 67 6c 65 41 6c 6c 28 74 65 78 74 29 7b 76 61 72 20 72 65 67 65 78 3d 2f 5c 62 5f 5f 5a 5b 5c 77 5c 64 5f 5d 2b 2f 67 3b 72 65 74 75 72 6e 20 74 65 78 74 2e 72 65 70 6c 61 63 65 28 72 65 67 65 78 2c 66 75 6e 63 74 69 6f 6e 28 78 29 7b 76 61 72 20 79 3d 64 65 6d 61 6e 67 6c 65 28 78 29 3b 72 65 74 75 72 6e 20 78 3d 3d 3d 79 3f 78 3a 79 2b 22 20 5b 22 2b 78 2b 22 5d 22 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 6a 73 53 74 61 63 6b 54 72 61 63 65 28 29 7b 76 61 72 20 65 72 72 3d 6e 65 77 20 45 72 72 6f 72 3b 69 66 28 21 65 72 72 2e 73 74 61 63 6b 29 7b 74 72 79 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 30 29 7d 63 61 74 63 68 28 65 29 7b 65 72 72 3d 65 7d 69 66 28 21 65 72 72 2e 73 74 61 63 6b 29 7b 72 65 74 75 72 6e 22 Data Ascii: nction demangleAll(text){var regex=/\b__Z[\w\d_]+/g;return text.replace(regex,function(x){var y=demangle(x);return x===y?x:y+" ["+x+"]"})}function jsStackTrace(){var err=new Error;if(!err.stack){try{throw new Error(0)}catch(e){err=e}if(!err.stack){return"
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 61 6c 6c 62 61 63 6b 28 6e 75 6c 6c 2c 7b 74 69 6d 65 73 74 61 6d 70 3a 73 74 61 74 2e 6d 74 69 6d 65 2c 6d 6f 64 65 3a 73 74 61 74 2e 6d 6f 64 65 7d 29 7d 65 6c 73 65 20 69 66 28 46 53 2e 69 73 46 69 6c 65 28 73 74 61 74 2e 6d 6f 64 65 29 29 7b 6e 6f 64 65 2e 63 6f 6e 74 65 6e 74 73 3d 4d 45 4d 46 53 2e 67 65 74 46 69 6c 65 44 61 74 61 41 73 54 79 70 65 64 41 72 72 61 79 28 6e 6f 64 65 29 3b 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 6e 75 6c 6c 2c 7b 74 69 6d 65 73 74 61 6d 70 3a 73 74 61 74 2e 6d 74 69 6d 65 2c 6d 6f 64 65 3a 73 74 61 74 2e 6d 6f 64 65 2c 63 6f 6e 74 65 6e 74 73 3a 6e 6f 64 65 2e 63 6f 6e 74 65 6e 74 73 7d 29 7d 65 6c 73 65 7b 72 65 74 75 72 6e 20 63 61 6c 6c 62 61 63 6b 28 6e 65 77 20 45 72 72 6f 72 28 22 6e 6f 64 65 20 74 79 70 Data Ascii: allback(null,{timestamp:stat.mtime,mode:stat.mode})}else if(FS.isFile(stat.mode)){node.contents=MEMFS.getFileDataAsTypedArray(node);return callback(null,{timestamp:stat.mtime,mode:stat.mode,contents:node.contents})}else{return callback(new Error("node typ
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 64 29 7b 66 64 5f 73 74 61 72 74 3d 66 64 5f 73 74 61 72 74 7c 7c 30 3b 66 64 5f 65 6e 64 3d 66 64 5f 65 6e 64 7c 7c 46 53 2e 4d 41 58 5f 4f 50 45 4e 5f 46 44 53 3b 66 6f 72 28 76 61 72 20 66 64 3d 66 64 5f 73 74 61 72 74 3b 66 64 3c 3d 66 64 5f 65 6e 64 3b 66 64 2b 2b 29 7b 69 66 28 21 46 53 2e 73 74 72 65 61 6d 73 5b 66 64 5d 29 7b 72 65 74 75 72 6e 20 66 64 7d 7d 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 32 34 29 7d 2c 67 65 74 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 66 64 29 7b 72 65 74 75 72 6e 20 46 53 2e 73 74 72 65 61 6d 73 5b 66 64 5d 7d 2c 63 72 65 61 74 65 53 74 72 65 61 6d 3a 66 75 6e 63 74 69 6f 6e 28 73 74 72 65 61 6d 2c 66 64 5f 73 74 61 72 74 2c 66 64 5f 65 6e 64 29 7b 69 66 28 21 46 53 2e 46 53 53 74 Data Ascii: d){fd_start=fd_start\|\|0;fd_end=fd_end\|\|FS.MAX_OPEN_FDS;for(var fd=fd_start;fd<=fd_end;fd++){if(!FS.streams[fd]){return fd}}throw new FS.ErrnoError(24)},getStream:function(fd){return FS.streams[fd]},createStream:function(stream,fd_start,fd_end){if(!FS.FSSt
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 6f 6c 6c 6f 77 3a 74 72 75 65 7d 29 3b 69 66 28 6c 6f 6f 6b 75 70 2e 6e 6f 64 65 3d 3d 3d 6e 75 6c 6c 29 7b 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 32 29 7d 69 66 28 21 46 53 2e 69 73 44 69 72 28 6c 6f 6f 6b 75 70 2e 6e 6f 64 65 2e 6d 6f 64 65 29 29 7b 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 32 30 29 7d 76 61 72 20 65 72 72 3d 46 53 2e 6e 6f 64 65 50 65 72 6d 69 73 73 69 6f 6e 73 28 6c 6f 6f 6b 75 70 2e 6e 6f 64 65 2c 22 78 22 29 3b 69 66 28 65 72 72 29 7b 74 68 72 6f 77 20 6e 65 77 20 46 53 2e 45 72 72 6e 6f 45 72 72 6f 72 28 65 72 72 29 7d 46 53 2e 63 75 72 72 65 6e 74 50 61 74 68 3d 6c 6f 6f 6b 75 70 2e 70 61 74 68 7d 2c 63 72 65 61 74 65 44 65 66 61 75 6c 74 44 69 72 65 63 74 6f 72 69 65 Data Ascii: ollow:true});if(lookup.node===null){throw new FS.ErrnoError(2)}if(!FS.isDir(lookup.node.mode)){throw new FS.ErrnoError(20)}var err=FS.nodePermissions(lookup.node,"x");if(err){throw new FS.ErrnoError(err)}FS.currentPath=lookup.path},createDefaultDirectorie
2024-09-29 02:42:33 UTC	16384	IN	Data Raw: 73 65 20 34 39 31 35 32 3a 62 72 65 61 6b 3b 64 65 66 61 75 6c 74 3a 72 65 74 75 72 6e 2d 32 32 7d 46 53 2e 6d 6b 6e 6f 64 28 70 61 74 68 2c 6d 6f 64 65 2c 64 65 76 29 3b 72 65 74 75 72 6e 20 30 7d 2c 64 6f 52 65 61 64 6c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 70 61 74 68 2c 62 75 66 2c 62 75 66 73 69 7a 65 29 7b 69 66 28 62 75 66 73 69 7a 65 3c 3d 30 29 72 65 74 75 72 6e 2d 32 32 3b 76 61 72 20 72 65 74 3d 46 53 2e 72 65 61 64 6c 69 6e 6b 28 70 61 74 68 29 3b 76 61 72 20 6c 65 6e 3d 4d 61 74 68 2e 6d 69 6e 28 62 75 66 73 69 7a 65 2c 6c 65 6e 67 74 68 42 79 74 65 73 55 54 46 38 28 72 65 74 29 29 3b 76 61 72 20 65 6e 64 43 68 61 72 3d 48 45 41 50 38 5b 62 75 66 2b 6c 65 6e 5d 3b 73 74 72 69 6e 67 54 6f 55 54 46 38 28 72 65 74 2c 62 75 66 2c 62 75 66 73 69 Data Ascii: se 49152:break;default:return-22}FS.mknod(path,mode,dev);return 0},doReadlink:function(path,buf,bufsize){if(bufsize<=0)return-22;var ret=FS.readlink(path);var len=Math.min(bufsize,lengthBytesUTF8(ret));var endChar=HEAP8[buf+len];stringToUTF8(ret,buf,bufsi
2024-09-29 02:42:33 UTC	2692	IN	Data Raw: 3d 4d 6f 64 75 6c 65 5b 22 5f 5f 5f 65 72 72 6e 6f 5f 6c 6f 63 61 74 69 6f 6e 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 6f 64 75 6c 65 5b 22 61 73 6d 22 5d 5b 22 4a 22 5d 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 76 61 72 20 5f 66 72 65 65 3d 4d 6f 64 75 6c 65 5b 22 5f 66 72 65 65 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 6f 64 75 6c 65 5b 22 61 73 6d 22 5d 5b 22 4b 22 5d 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 72 67 75 6d 65 6e 74 73 29 7d 3b 76 61 72 20 5f 6c 6f 74 74 69 65 5f 62 75 66 66 65 72 3d 4d 6f 64 75 6c 65 5b 22 5f 6c 6f 74 74 69 65 5f 62 75 66 66 65 72 22 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 4d 6f 64 75 6c 65 5b 22 61 73 6d 22 5d 5b 22 4c 22 5d Data Ascii: =Module["___errno_location"]=function(){return Module["asm"]["J"].apply(null,arguments)};var _free=Module["_free"]=function(){return Module["asm"]["K"].apply(null,arguments)};var _lottie_buffer=Module["_lottie_buffer"]=function(){return Module["asm"]["L"]

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
56	192.168.2.6	49785	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:33 UTC	451	OUT	GET /file/464001453/3/mNzXWC3RX0c.15740.png/9ce5fa5f3fb74460b4 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:33 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:33 GMT Content-Type: image/png Content-Length: 15740 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:33 GMT ETag: "9663b372030cf4b80b2b7ab98f8e689847388957" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:33 UTC	15740	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 3d 31 49 44 41 54 78 da ed 7d 77 9c 1c 67 79 ff f7 79 66 b6 dd ee de 5e 2f 3a f5 6e c9 b2 b1 2c 37 c0 c6 54 63 30 01 13 64 1b 9b 50 c2 07 1c 08 e0 1a 02 84 e0 98 84 40 30 6e 10 20 0e e4 87 09 01 5c 28 06 4c 71 c0 80 83 8d 1b 2e b2 2d c9 92 d5 75 d2 9d ae 97 ed 33 f3 3c bf 3f 66 77 67 f6 9a ee a4 6b e2 ee f9 7c ee 73 bb b3 bb 33 ef bc ef 77 9e f6 3e 05 98 a7 79 9a a7 13 85 f8 3d 00 dd 01 60 c9 fc 5c cc d3 74 d3 4a 80 1d 90 a1 80 71 cf fc 74 4c 0e 99 f3 53 30 5e 32 4e 03 81 dd d7 7a fa fc 7c 4c 92 4c 99 9f 82 f1 92 ae f6 bd 59 0a 20 34 3f 27 f3 00 9c 4e 00 ae 29 bd 24 62 57 24 cf d3 3c 00 a7 8d 68 f5 Data Ascii: PNGIHDRg-bKGD=1IDATx}wgyyf^/:n,7Tc0dP@0n \(Lq.-u3<?fwgk\|s3w>y=`\tJqtLS0^2Nz\|LLY 4?'N)$bW$<h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
57	192.168.2.6	49786	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:33 UTC	451	OUT	GET /file/464001166/2/FzTl8_M5mQA.19325.png/b6c5dbc0e4f6553805 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:33 UTC	348	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:33 GMT Content-Type: image/png Content-Length: 19325 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:33 GMT ETag: "2690d1e344526d5a2fb08060299f2697537643ae" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:33 UTC	16036	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a0 00 00 00 a0 08 06 00 00 00 8b cf 67 2d 00 00 00 06 62 4b 47 44 00 ff 00 ff 00 ff a0 bd a7 93 00 00 4b 32 49 44 41 54 78 da ed 7d 77 7c 5c d5 d1 f6 33 e7 de ed ab 55 ef 92 e5 22 b9 f7 02 18 63 9b 16 30 a1 17 d3 4c 48 f2 91 90 37 94 10 12 de 90 ce 9b 84 90 90 84 84 24 90 02 49 80 50 13 08 bd 13 70 a5 b9 80 7b 97 bb 2d c9 b2 fa f6 bd 77 e6 fb 63 a5 2d d2 ae b4 72 c7 f6 f0 e3 e7 d5 ad e7 9e f3 9c 69 67 ce 0c e1 04 1d 30 7d f0 c1 07 8e 76 a0 3c 2c a2 3b 6c b6 ba cf 4d 9e dc 76 a2 57 32 23 3a d1 05 fd a7 d7 17 2c 18 2b 22 17 43 e1 7c 11 0c 27 a2 ec c4 f3 22 e2 03 b0 0d 84 b7 c0 78 e9 fc 19 33 16 11 11 9f e8 b9 13 00 3c 50 e0 5d c1 90 9f 11 d1 70 11 61 22 2c 11 91 a5 00 ea 84 b4 3a 12 09 13 50 26 40 29 Data Ascii: PNGIHDRg-bKGDK2IDATx}w\|\3U"c0LH7$IPp{-wc-rig0}v<,;lMvW2#:,+"C\|'"x3<P]pa",:P&@)
2024-09-29 02:42:33 UTC	3289	IN	Data Raw: 95 cf 1d 68 e7 b3 ab ec 3c 28 c1 1d 91 8a 1a 03 ac 1e 5b d5 91 d1 e7 e5 bb 2c aa 26 3f 2e c1 56 35 f8 b1 d7 db ff 78 b0 50 c4 34 32 b9 6e 59 7d 08 bb d2 24 b5 ac ce b5 20 bb 33 f5 07 11 94 f1 fe 63 9d fd 9b ad d4 94 cb f1 c2 26 1f ea 7c ac da c2 8c 9b 26 78 50 93 9b 5c 78 91 88 66 c1 8a 43 e2 9e 39 72 21 f9 84 26 11 0c b2 12 68 7b 4b 80 76 b4 92 f2 86 84 13 43 9e c8 95 e0 d1 0f 68 bc 64 a1 e2 3d de f8 0e ff c9 e5 6e 38 d2 e8 7e 9b 9b 23 fc ee f6 40 ca 9d 64 1e 2b f1 17 46 bb 31 a9 a4 a7 85 bb a7 c3 e0 37 6b fd 58 b8 3b 75 e8 ff 92 fa b0 fa 78 77 90 4f 2e ef db 28 98 54 ee c2 8e b6 10 47 fd 78 a4 e6 6d 69 e3 f3 87 e5 b2 cb d6 77 66 fc 66 5f 84 17 6e ef 40 53 c0 d4 87 15 d8 78 5a 95 27 ed 3d 11 43 f8 f9 0d be b4 cf 3a 67 50 f2 e6 2e fe e0 09 60 d6 1d 0c 8b Data Ascii: h<([,&?.V5xP42nY}$ 3c&\|&xP\xfC9r!&h{KvChd=n8~#@d+F17kX;uxwO.(TGxmiwff_n@SxZ'=C:gP.`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
58	192.168.2.6	49788	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:33 UTC	416	OUT	GET /js/pako-inflate.min.js HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:33 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:33 GMT Content-Type: application/javascript Content-Length: 22682 Last-Modified: Fri, 04 Oct 2019 11:37:17 GMT Connection: close ETag: "5d972eed-589a" Expires: Thu, 03 Oct 2024 02:42:33 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:33 UTC	15991	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 29 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 29 3b 65 6c 73 65 20 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 29 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3b 65 6c 73 65 7b 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 77 69 6e 64 6f 77 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 3f 67 6c 6f 62 61 6c 3a 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 Data Ascii: !function(e){if("object"==typeof exports&&"undefined"!=typeof module)module.exports=e();else if("function"==typeof define&&define.amd)define([],e);else{("undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:this
2024-09-29 02:42:33 UTC	6691	IN	Data Raw: 67 74 68 26 26 28 69 2e 6d 6f 64 65 3d 32 31 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 36 3a 69 66 28 30 3d 3d 3d 66 29 62 72 65 61 6b 20 65 3b 61 5b 6f 2b 2b 5d 3d 69 2e 6c 65 6e 67 74 68 2c 66 2d 2d 2c 69 2e 6d 6f 64 65 3d 32 31 3b 62 72 65 61 6b 3b 63 61 73 65 20 32 37 3a 69 66 28 69 2e 77 72 61 70 29 7b 66 6f 72 28 3b 64 3c 33 32 3b 29 7b 69 66 28 30 3d 3d 3d 73 29 62 72 65 61 6b 20 65 3b 73 2d 2d 2c 6c 7c 3d 6e 5b 72 2b 2b 5d 3c 3c 64 2c 64 2b 3d 38 7d 69 66 28 75 2d 3d 66 2c 65 2e 74 6f 74 61 6c 5f 6f 75 74 2b 3d 75 2c 69 2e 74 6f 74 61 6c 2b 3d 75 2c 75 26 26 28 65 2e 61 64 6c 65 72 3d 69 2e 63 68 65 63 6b 3d 69 2e 66 6c 61 67 73 3f 4e 28 69 2e 63 68 65 63 6b 2c 61 2c 75 2c 6f 2d 75 29 3a 52 28 69 2e 63 68 65 63 6b 2c 61 2c 75 2c 6f 2d 75 29 29 2c Data Ascii: gth&&(i.mode=21);break;case 26:if(0===f)break e;a[o++]=i.length,f--,i.mode=21;break;case 27:if(i.wrap){for(;d<32;){if(0===s)break e;s--,l\|=n[r++]<<d,d+=8}if(u-=f,e.total_out+=u,i.total+=u,u&&(e.adler=i.check=i.flags?N(i.check,a,u,o-u):R(i.check,a,u,o-u)),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
59	192.168.2.6	49789	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:33 UTC	415	OUT	GET /img/t_logo_sprite.svg HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:33 UTC	343	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:33 GMT Content-Type: image/svg+xml Content-Length: 23116 Last-Modified: Tue, 19 Apr 2022 11:15:29 GMT Connection: close ETag: "625e99d1-5a4c" Expires: Thu, 03 Oct 2024 02:42:33 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:33 UTC	16041	IN	Data Raw: 3c 73 76 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 68 65 69 67 68 74 3d 22 31 34 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 34 36 34 20 31 34 34 22 20 77 69 64 74 68 3d 22 34 34 36 34 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 61 22 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 61 61 62 65 65 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 31 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 32 32 39 65 64 39 22 2f 3e 3c 2f 6c 69 6e 65 61 72 47 72 Data Ascii: <svg fill="none" height="144" viewBox="0 0 4464 144" width="4464" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a"><stop offset="0" stop-color="#2aabee"/><stop offset="1" stop-color="#229ed9"/></linearGr
2024-09-29 02:42:34 UTC	7075	IN	Data Raw: 33 38 2d 31 38 2e 37 39 38 73 31 38 2e 38 2d 32 38 2e 33 36 38 31 20 31 38 2e 38 2d 34 35 2e 33 38 33 31 2d 36 2e 37 37 2d 33 33 2e 33 35 31 31 2d 31 38 2e 38 2d 34 35 2e 33 38 33 63 2d 31 32 2e 30 33 2d 31 32 2e 30 33 32 2d 32 38 2e 33 37 2d 31 38 2e 37 39 38 30 35 2d 34 35 2e 33 38 2d 31 38 2e 37 39 38 30 35 7a 22 20 66 69 6c 6c 3d 22 75 72 6c 28 23 72 29 22 2f 3e 3c 70 61 74 68 20 64 3d 22 6d 33 33 34 38 2e 37 34 20 37 31 2e 34 35 36 34 63 31 38 2e 37 31 2d 38 2e 31 35 31 20 33 31 2e 31 38 2d 31 33 2e 35 32 35 31 20 33 37 2e 34 33 2d 31 36 2e 31 32 31 35 20 31 37 2e 38 32 2d 37 2e 34 31 33 39 20 32 31 2e 35 32 2d 38 2e 37 30 31 35 20 32 33 2e 39 34 2d 38 2e 37 34 34 36 2e 35 33 2d 2e 30 30 39 31 20 31 2e 37 31 2e 31 32 32 33 20 32 2e 34 38 2e 37 34 37 Data Ascii: 38-18.798s18.8-28.3681 18.8-45.3831-6.77-33.3511-18.8-45.383c-12.03-12.032-28.37-18.79805-45.38-18.79805z" fill="url(#r)"/><path d="m3348.74 71.4564c18.71-8.151 31.18-13.5251 37.43-16.1215 17.82-7.4139 21.52-8.7015 23.94-8.7446.53-.0091 1.71.1223 2.48.747

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
60	192.168.2.6	49790	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:33 UTC	511	OUT	GET /file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:33 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:33 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10147 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:33 GMT ETag: "19a8c01d40babdc6b063746c48554639d0ecd1a3" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:33 UTC	10147	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 5d 59 8f 1b 47 92 fe 2b 46 3f 17 0b 79 1f 7e 5b 0c b0 8b 01 34 f6 60 8e 27 43 10 64 ab 6d 69 dd 3a 20 69 c6 6b 0c f4 df f7 fb 22 b3 8a c5 62 91 5d 24 8b ea 96 5c 33 30 d5 2c 92 99 91 91 91 91 71 c7 7f 6e 3e fe f2 e1 e6 5b dd dc fc fb e6 db 1b df fa d6 dc 34 37 3f bf bf f9 36 a8 e6 e6 d5 bb 9b 6f f1 cf 5b fc a3 13 fe f8 ed e6 5b af 4d 73 f3 b2 fe fb e6 35 7e f4 4c a9 fc ec ef 7f fe cb 5f 9f b9 0f b7 3f 3d fb fe 9f ff c0 08 2f 5e bc 90 9f 3e ff f0 e1 f6 23 26 f8 e1 3f 37 af f0 e4 e6 a7 b7 af df 3d 53 f8 c2 dd f3 df 6f df 97 0f ba ef be 7a f3 42 20 f9 f8 fb cd b7 b6 0e fe dd 3f 9f 3c f9 e6 4f df 7f f7 8f bf 7d ff 04 bf fa f0 5e be f1 2b 7e f8 9f 9b b7 7c 79 2e 3f fd 15 af 9f 9a 9b 77 f5 89 96 27 9c 93 0f fe 0f 1f b6 c1 35 37 Data Ascii: ]YG+F?y~[4`'Cdmi: ik"b]$\30,qn>[47?6o[[Ms5~L_?=/^>#&?7=SozB ?<O}^+~\|y.?w'57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
61	192.168.2.6	49791	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:33 UTC	515	OUT	GET /file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:34 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:33 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12708 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:33 GMT ETag: "5efa4caf73d09bf388e257a35d778134a66d2692" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:34 UTC	12708	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 5b 8f 1b 47 b2 e6 5f 11 fa b9 98 c8 c8 7b fa f5 60 77 b1 80 31 1e cc 05 e7 c1 10 0c 79 ac 19 6b 47 b2 0c 49 b3 b3 c6 c0 ff 7d e3 8b c8 22 8b 64 91 4d 36 8b 2d 76 77 ce c0 6c b1 b2 98 97 c8 88 c8 88 c8 b8 fc e7 ee cb 3f 3e df 7d 43 c3 dd ff bd fb e6 2e 9a 68 dc dd 70 f7 f7 4f 77 df 24 3b dc bd fb f5 ee 1b fe f3 91 ff 90 e3 7f fc fb ee 9b 48 6e b8 fb b9 fd fd e5 03 ff e8 07 6b fd 0f 7f fc ee bf ff f4 c3 77 7f fd 0b ff f8 a7 9f 7e 92 5f bd f9 fc f9 ed 17 ee fb fb ff dc bd e3 27 77 7f fb f8 e1 d7 1f 2c bf f0 fe cd 6f 6f 3f 69 c3 f8 ee bb 5f 7e 92 49 7c f9 ed ee 9b d0 fa fd f3 cf 6f 7e 7d fb ea 5b bc fc 2a 44 fe dd e7 4f f2 ce 3f f9 a7 ff b9 fb 15 1f 6f e4 c7 ff e4 ae 5c 4c 03 fe b3 af 7f ff 9d 87 fe 28 0d 9f d1 03 06 7a ad Data Ascii: }[G_{`w1ykGI}"dM6-vwl?>}C.hpOw$;Hnkw~_'w,oo?i_~I\|o~}[*DO?o\L(z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
62	192.168.2.6	49792	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:33 UTC	414	OUT	GET /js/rlottie-wasm.wasm HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:34 UTC	389	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:34 GMT Content-Type: application/wasm Content-Length: 390408 Last-Modified: Tue, 14 Jul 2020 22:03:36 GMT Connection: close ETag: "5f0e2bb8-5f508" Expires: Thu, 03 Oct 2024 02:42:34 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:34 UTC	15995	IN	Data Raw: 00 61 73 6d 01 00 00 00 01 a9 05 59 60 01 7f 00 60 01 7f 01 7f 60 02 7c 7c 01 7c 60 03 7f 7f 7f 00 60 02 7f 7f 01 7f 60 07 7f 7f 7f 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7f 00 60 06 7f 7f 7f 7f 7f 7f 00 60 02 7f 7f 00 60 03 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7f 00 60 06 7f 7f 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7f 01 7f 60 04 7f 7f 7f 7d 00 60 05 7f 7f 7f 7d 7f 00 60 02 7f 7f 01 7d 60 05 7f 7f 7e 7f 7f 00 60 06 7f 7c 7f 7f 7f 7f 01 7f 60 03 7f 7e 7f 01 7e 60 00 00 60 08 7f 7f 7f 7f 7f 7f 7f 7f 01 7f 60 05 7f 7f 7f 7f 7c 01 7f 60 06 7f 7f 7f 7f 7f 7c 01 7f 60 05 7f 7f 7f 7f 7e 01 7f 60 00 01 7f 60 01 7c 01 7f 60 02 7f 7c 01 7f 60 01 7f 01 7d 60 04 7d 7d 7d 7d 01 7d 60 04 7f 7f 7d 7d 00 60 03 7f 7d 7f 00 60 02 7f 7d 01 7d 60 04 7f 7d 7f 7f Data Ascii: asmY```\|\|\|````````````}`}`}`~`\|`~~```\|`\|`~``\|`\|`}`}}}}}`}}`}`}}`}
2024-09-29 02:42:34 UTC	16384	IN	Data Raw: 00 0c 01 0b 0b 0b 03 40 20 00 20 04 48 04 40 20 00 20 03 3a 00 00 20 00 41 01 6a 21 00 0c 01 0b 0b 20 04 20 02 6b 0b 87 01 01 02 7f 20 00 20 00 28 02 04 41 01 6a 36 02 04 41 bc ab 04 28 02 00 41 b8 ab 04 28 02 00 22 02 6b 41 02 75 20 01 4d 04 7f 20 01 41 01 6a 10 d3 0a 41 b8 ab 04 28 02 00 05 20 02 0b 20 01 41 02 74 6a 28 02 00 22 02 04 40 20 02 20 02 28 02 04 22 03 41 7f 6a 36 02 04 20 03 45 04 40 20 02 20 02 28 02 00 28 02 08 41 ff 01 71 41 96 02 6a 11 00 00 0b 0b 41 b8 ab 04 28 02 00 20 01 41 02 74 6a 20 00 36 02 00 0b 03 00 01 0b 16 00 20 00 41 00 36 02 00 20 00 20 00 28 02 00 41 01 72 36 02 00 0b 0d 00 20 00 2c 00 00 41 00 47 41 01 73 0b 09 00 20 00 10 48 10 fd 02 0b 2c 00 20 00 28 02 18 41 09 46 04 40 20 00 10 9d 01 1a 05 20 00 41 01 36 02 18 41 c4 Data Ascii: @ H@ : Aj! k (Aj6A(A("kAu M AjA( Atj("@ ("Aj6 E@ ((AqAjA( Atj 6 A6 (Ar6 ,AGAs H, (AF@ A6A
2024-09-29 02:42:34 UTC	16384	IN	Data Raw: 10 40 22 01 41 ff 01 71 41 ff 01 46 0d 00 20 01 0b 05 41 7f 0b 05 20 02 41 7f 3a 00 00 20 01 0b 0b 52 00 20 00 20 01 2a 02 00 38 02 00 20 00 20 01 2a 02 04 38 02 04 20 00 20 02 2a 02 00 38 02 08 20 00 20 02 2a 02 04 38 02 0c 20 00 20 03 2a 02 00 38 02 10 20 00 20 03 2a 02 04 38 02 14 20 00 20 04 2a 02 00 38 02 18 20 00 20 04 2a 02 04 38 02 1c 0b 1e 00 20 00 28 02 00 20 00 28 02 08 48 04 7f 20 00 28 02 04 20 00 28 02 0c 4e 05 41 01 0b 0b 20 01 01 7f 20 00 41 80 10 6a 21 01 03 40 20 00 10 f6 03 20 00 41 08 6a 22 00 20 01 47 0d 00 0b 0b 26 00 20 00 28 02 04 20 02 20 00 41 1c 6a 22 00 28 02 04 6a 10 ea 09 20 01 41 02 74 6a 20 00 28 02 00 41 02 74 6a 0b 50 01 03 7f 23 07 21 03 23 07 41 20 6a 24 07 20 03 21 02 20 00 28 02 08 20 00 28 02 00 22 04 6b 41 03 75 20 Data Ascii: @"AqAF A A: R 8 8 8 8 8 8 8 8 ( (H ( (NA Aj!@ Aj" G& ( Aj"(j Atj (AtjP#!#A j$ ! ( ("kAu
2024-09-29 02:42:34 UTC	16384	IN	Data Raw: 01 05 20 03 20 04 41 10 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 12 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 16 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 20 03 20 04 41 1c 6a 22 01 10 2c 22 02 20 01 49 04 7f 41 01 21 02 20 03 21 00 20 01 05 20 03 20 01 20 02 6c 46 04 7f 41 09 21 02 20 01 05 02 7f 20 03 20 04 41 1e 6a 22 01 10 2c 22 02 20 01 49 04 40 41 01 21 02 20 03 21 00 20 01 0c 01 0b 20 03 20 01 20 02 6c 46 04 40 41 09 21 02 20 01 0c 01 0b 20 03 20 04 41 24 6a 22 01 10 2c 22 02 20 01 49 04 Data Ascii: Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," IA! ! lFA! Aj"," I@A! ! lF@A! A$j"," I
2024-09-29 02:42:34 UTC	16384	IN	Data Raw: 01 28 02 00 1a 0b 0b 20 03 24 07 20 00 0b 8c 07 02 05 7f 12 7d 23 07 21 05 23 07 41 30 6a 24 07 20 05 41 28 6a 21 06 20 05 22 03 41 29 6a 22 07 20 02 10 a3 01 22 04 3a 00 00 20 04 41 ff 01 71 04 40 20 06 20 01 10 a3 01 22 04 3a 00 00 20 04 41 ff 01 71 04 40 20 03 10 6d 02 40 02 40 02 40 02 40 02 40 20 06 20 07 10 f3 05 2c 00 00 22 04 41 01 6b 0e 10 01 02 04 03 04 04 04 03 04 04 04 04 04 04 04 00 04 0b 20 02 2a 02 04 21 12 20 02 2a 02 10 21 13 20 02 2a 02 1c 21 14 20 02 2a 02 08 21 15 20 02 2a 02 14 21 16 20 02 2a 02 20 21 17 20 01 2a 02 0c 21 18 20 01 2a 02 10 21 19 20 01 2a 02 14 21 0a 20 01 2a 02 18 21 0b 20 01 2a 02 1c 21 0c 20 01 2a 02 20 21 0d 20 03 20 01 2a 02 00 22 10 20 02 2a 02 00 22 11 94 20 01 2a 02 04 22 0e 20 02 2a 02 0c 22 0f 94 92 20 01 2a Data Ascii: ( $ }#!#A0j$ A(j! "A)j" ": Aq@ ": Aq@ m@@@@@ ,"Ak ! ! ! ! ! ! ! ! ! ! ! ! " " " " *
2024-09-29 02:42:34 UTC	16384	IN	Data Raw: 02 08 46 04 40 20 02 20 04 10 b9 03 20 02 28 02 00 21 00 05 20 01 20 04 28 02 00 36 02 00 20 02 20 03 41 04 6a 36 02 04 0b 20 05 41 7f 6a 41 02 74 20 00 6a 20 05 41 7e 6a 41 02 74 20 00 6a 28 02 00 36 02 00 0b 0b 20 07 24 07 0b 81 04 02 0d 7f 01 7d 23 07 21 04 23 07 41 e0 00 6a 24 07 20 04 41 18 6a 21 05 20 00 10 6d 20 04 41 08 6a 22 07 10 52 02 40 02 40 20 01 28 02 34 22 06 45 0d 00 20 06 2c 00 28 45 0d 00 20 07 20 06 41 18 6a 20 02 10 4d 10 bd 03 20 07 20 01 28 02 34 41 20 6a 20 02 10 4d 10 bc 03 0c 01 0b 20 05 20 01 41 14 6a 20 02 10 6b 20 07 20 05 29 03 00 37 03 00 0b 20 03 04 7d 20 02 21 03 20 01 41 14 6a 22 06 10 76 04 7d 43 00 00 00 00 05 20 06 28 02 00 20 03 10 d4 08 0b 05 43 00 00 00 00 0b 21 11 20 04 41 d0 00 6a 21 08 20 04 41 30 6a 21 06 20 04 Data Ascii: F@ (! (6 Aj6 AjAt j A~jAt j(6 $}#!#Aj$ Aj! m Aj"R@@ (4"E ,(E Aj M (4A j M Aj k )7 } ! Aj"v}C ( C! Aj! A0j!
2024-09-29 02:42:34 UTC	16384	IN	Data Raw: 40 02 40 02 40 02 40 20 01 20 08 10 e7 09 0e 02 00 01 02 0b 20 06 20 01 20 08 29 03 00 20 02 10 dc 03 20 06 28 02 00 21 01 20 06 28 02 04 21 02 20 06 41 00 36 02 00 20 06 41 00 36 02 04 20 05 41 00 36 02 00 20 00 20 01 36 02 00 20 05 41 00 36 02 04 20 00 20 02 36 02 04 20 05 10 29 20 06 10 29 0c 02 0b 20 01 20 08 10 db 03 22 09 28 02 10 22 03 41 88 20 6a 28 02 00 21 0a 20 03 41 84 20 6a 28 02 00 22 07 21 04 20 0a 20 07 6b 20 02 28 02 10 20 02 28 02 0c 22 07 6b 46 04 40 02 40 20 04 20 0a 47 04 40 20 04 21 03 20 07 21 04 03 40 20 03 2a 02 00 20 04 2a 02 00 5c 0d 02 20 03 41 04 6a 20 04 41 04 6a 10 c8 05 45 0d 02 20 04 41 08 6a 21 04 20 03 41 08 6a 22 03 20 0a 47 0d 00 0b 20 09 28 02 10 21 03 0b 20 05 20 03 36 02 00 20 05 20 09 28 02 14 22 01 36 02 04 20 01 Data Ascii: @@@@ ) (! (! A6 A6 A6 6 A6 6 ) ) "("A j(! A j("! k ( ("kF@@ G@ ! !@ * *\ Aj AjE Aj! Aj" G (! 6 ("6
2024-09-29 02:42:34 UTC	16384	IN	Data Raw: 05 01 00 03 02 04 06 0b 20 14 41 03 47 04 40 20 00 28 02 00 22 03 28 02 0c 22 04 20 03 28 02 10 46 04 7f 20 03 20 03 28 02 00 28 02 24 41 3f 71 41 02 6a 11 01 00 05 20 04 2c 00 00 10 26 0b 22 03 41 ff 01 71 41 18 74 41 18 75 41 7f 4c 0d 07 20 07 28 02 08 20 03 41 18 74 41 18 75 41 01 74 6a 2e 01 00 41 80 c0 00 71 45 0d 07 20 12 20 00 28 02 00 22 03 28 02 0c 22 04 20 03 28 02 10 46 04 7f 20 03 20 03 28 02 00 28 02 28 41 3f 71 41 02 6a 11 01 00 05 20 03 20 04 41 01 6a 36 02 0c 20 04 2c 00 00 10 26 0b 41 ff 01 71 10 cd 01 0c 05 0b 0c 05 0b 20 14 41 03 47 0d 03 0c 04 0b 20 0e 28 02 04 20 0e 2c 00 0b 22 03 41 ff 01 71 20 03 41 00 48 1b 22 0c 41 00 20 0f 28 02 04 20 0f 2c 00 0b 22 03 41 ff 01 71 20 03 41 00 48 1b 22 0b 6b 47 04 40 20 00 28 02 00 22 03 28 02 0c Data Ascii: AG@ ("(" (F (($A?qAj ,&"AqAtAuAL ( AtAuAtj.AqE ("(" (F (((A?qAj Aj6 ,&Aq AG ( ,"Aq AH"A ( ,"Aq AH"kG@ ("(
2024-09-29 02:42:34 UTC	16384	IN	Data Raw: 40 20 00 28 02 00 22 02 2c 00 00 20 01 41 0a 6c 41 50 6a 6a 21 01 20 00 20 02 41 01 6a 36 02 00 20 02 2c 00 01 10 a6 01 0d 00 0b 0b 20 01 0b 7b 01 02 7f 23 07 21 04 23 07 41 10 6a 24 07 20 04 21 03 02 40 02 40 20 01 2c 00 22 45 0d 00 20 01 2c 00 23 45 0d 00 20 00 20 02 10 7d 0c 01 0b 20 02 10 8b 02 45 04 40 20 01 2c 00 22 45 04 40 20 01 2c 00 23 04 40 20 00 20 02 10 7d 05 20 03 10 64 20 01 20 02 20 03 10 f3 06 20 00 20 03 10 99 01 20 03 10 4b 0b 0c 02 0b 0b 20 00 41 00 36 02 00 20 00 10 64 0b 20 04 24 07 0b 0b 00 20 00 20 01 20 02 10 e5 0c 0b 16 00 20 00 20 01 20 02 42 80 80 80 80 80 80 80 80 80 7f 10 8b 04 0b 8f 01 01 02 7f 20 00 20 00 2c 00 4a 22 01 20 01 41 ff 01 6a 72 3a 00 4a 20 00 28 02 14 20 00 28 02 1c 4b 04 40 20 00 28 02 24 21 01 20 00 41 00 41 Data Ascii: @ (", AlAPjj! Aj6 , {#!#Aj$ !@@ ,"E ,#E } E@ ,"E@ ,#@ } d K A6 d $ B ,J" Ajr:J ( (K@ ($! AA
2024-09-29 02:42:34 UTC	16384	IN	Data Raw: 3f 0b 20 00 10 2b 0d 06 20 00 20 01 20 02 10 e7 01 20 00 10 2b 45 0d 01 0c 06 0b 0b 0c 01 0b 41 af f2 03 41 f4 f1 03 41 c8 06 41 8f f5 03 10 00 0b 20 02 10 9a 03 45 04 40 20 00 10 2b 04 40 41 af f2 03 41 f4 f1 03 41 c4 06 41 8f f5 03 10 00 05 20 00 41 10 20 01 10 4c 10 3f 20 00 10 2b 1a 0b 0b 0b 0b 0b 0b ed 03 01 02 7f 20 01 10 66 41 ff 01 71 41 fb 00 47 04 40 41 9a f5 03 41 f4 f1 03 41 e3 05 41 ab f5 03 10 00 0b 20 01 10 4a 1a 02 40 02 40 02 40 20 02 10 b1 04 0d 00 20 00 10 2b 04 40 41 af f2 03 41 f4 f1 03 41 e7 05 41 ab f5 03 10 00 05 20 00 41 10 20 01 10 4c 10 3f 20 00 10 2b 45 0d 01 0b 0c 01 0b 20 01 10 a9 01 20 00 10 2b 45 04 40 20 01 41 fd 00 10 73 04 40 20 02 10 9b 03 0d 02 20 00 10 2b 45 0d 03 41 af f2 03 41 f4 f1 03 41 ee 05 41 ab f5 03 10 00 0b Data Ascii: ? + +EAAAA E@ +@AAAA A L? + fAqAG@AAAA J@@@ +@AAAA A L? +E +E@ As@ +EAAAA

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
63	192.168.2.6	49793	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:34 UTC	511	OUT	GET /file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:34 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:34 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 21801 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:34 GMT ETag: "659450b658f9d14c28dc526221f345cf9958a64f" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:34 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed bd 6b 8f 23 c7 91 36 fa 57 84 fe 5c 2c 64 46 de f5 75 b1 e7 e0 00 82 bd b0 bd c0 0b 08 83 c1 c8 1a 5b 3a 9e f1 08 92 bc 3e c2 42 ff fd c4 13 91 45 56 91 45 36 d9 4c f6 b0 7b d2 8b 55 0f eb 92 15 19 99 19 f7 cb ff 3e fc fa f7 5f 1e be b6 c3 c3 ff 3c 7c fd 10 c6 30 d2 c3 f0 f0 b7 9f 1f be 8e 66 78 f8 f1 a7 87 af f9 cf 27 fe 63 33 ff e3 df 0f 5f 07 4b c3 c3 0f f5 ef 3f 3f f2 4b 6f 8d a1 b7 ff f9 7f fe eb 4f 6f ff f8 df 7f e1 97 bf ff fe 7b 79 eb dd 2f bf bc ff 95 c7 fe f6 7f 1f 7e e4 2b 0f 7f fd f4 f1 a7 b7 86 1f f8 f0 ee b7 f7 3f eb 8d e9 d9 1f ff f9 bd 00 f1 eb 6f 0f 5f bb 3a ee 77 9f be ff ed ed 87 1f ff f9 fe 17 7e e7 a7 77 3f bf ff e7 af 0f 5f 7b fe ea 2f 3f cb b3 ff e0 21 fe f7 e1 13 fe f3 4e 06 f9 07 ff f7 f7 e1 e1 e7 Data Ascii: k#6W\,dFu[:>BEVE6L{U>_<\|0fx'c3_K??KoOo{y/~+?o_:w~w?_{/?!N
2024-09-29 02:42:34 UTC	5780	IN	Data Raw: ba 59 3c 25 ba 4a a5 21 fb b1 20 24 fe 92 78 ca 3d f0 ee 27 f3 12 16 9b e0 2d 6a f9 1a 35 17 f1 da d0 c0 53 34 30 df 87 b1 78 34 18 f1 92 df 45 61 f4 21 69 37 17 c4 ea 41 6d 1a a3 cf 93 dd 9d 19 c1 26 8e de 4b ce 1d cc 4b 19 66 79 43 6e 16 d9 e6 c5 82 e5 4c cd 1e 24 5b 60 3e d2 30 3f a4 1a 4a 7a 21 8d 5e a3 e8 66 5f 84 b9 28 48 2a 42 89 53 44 1d be 68 c7 22 c1 16 fc 6e 29 0e 51 73 c5 ed 52 dd a2 a6 e6 c1 d4 24 3d da 52 e2 2f 24 58 99 34 33 0f 55 b6 0a 8a 1e b3 de 28 f3 47 b5 7e cd 7b cb 45 82 41 e0 3f c8 05 76 32 32 72 21 d8 31 5b d8 05 78 24 01 24 90 b8 b5 44 d1 6a dd 3c 48 aa 34 97 84 f5 89 25 49 f3 1c 87 8f 8f 41 e2 f6 b6 eb 43 71 6f 7d 18 5c a6 af c8 6e d1 56 73 8c f3 48 58 1e 92 85 dd 68 cf 03 f4 b0 33 69 b6 3c 11 d5 fe 53 0d 3c a4 31 15 79 c7 b8 b4 Data Ascii: Y<%J! $x='-j5S40x4Ea!i7Am&KKfyCnL$[`>0?Jz!^f_(H*BSDh"n)QsR$=R/$X43U(G~{EA?v22r!1[x$$Dj<H4%IACqo}\nVsHXh3i<S<1y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
64	192.168.2.6	49794	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:34 UTC	511	OUT	GET /file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:34 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:34 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 17422 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:34 GMT ETag: "8c3dca30247141a56bd9786fc869d92e887e1bdd" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:34 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 6d af 1b 47 72 ee 5f 31 ce e7 e1 a0 ab df db df 82 20 37 58 c0 48 82 64 93 2f 86 20 c8 6b d9 d6 5d c9 32 24 ed e6 3a 81 ff fb ad a7 aa 7b 38 24 87 3c 24 67 48 9d 23 8d 17 7b 44 0e 67 a6 bb ab ab eb fd e5 7f 1f 3e fd fc f1 e1 5b ea 1e fe fe f0 ed 43 e8 43 6f 1f ba 87 9f 3e 3c 7c 1b 4d f7 f0 e6 b7 87 6f f9 9f f7 fc 0f 65 fe f0 df 0f df 06 b2 dd c3 2f f5 df 5f df f1 43 2f 8d 09 2f ff ed df ff f4 5f ff f0 e7 7f 7a f9 af ff f9 67 7e fe c7 1f 7f 94 07 5f 7d fc f8 fa 13 bf fe fb ff 7d 78 c3 57 1e fe f2 fe dd 6f 2f 0d df f0 f6 d5 ef af 3f e8 0f ed de 37 bf fe 28 f3 f8 f4 fb c3 b7 be be fa dd fb bf 7d fa e5 1b c7 0f fc f6 ea c3 eb 5f 3f 3d 7c eb 78 d4 8f 1f e4 c6 bf f2 f3 ff fb f0 1e 7f 5e e9 05 79 1f df 84 a9 e1 e5 64 cc 0b 99 Data Ascii: }mGr_1 7XHd/ k]2$:{8$<$gH#{Dg>[CCo><\|Moe/_C//_zg~_}}xWo/?7(}_?=\|x^yd
2024-09-29 02:42:34 UTC	1401	IN	Data Raw: 57 ed be 1c 06 f9 ea dd b6 30 fc 9f 3f bc 79 f7 0d 24 d4 8f 73 a5 7e 3a 94 fa e9 02 a9 7f 43 28 30 8c f2 49 b9 2f 9e 6e 20 fc ab 79 2e f7 3e d8 66 56 89 1a c1 98 18 b4 b0 62 b8 de 6f 83 44 61 5a 83 dd 26 a9 dd 46 e4 7e e9 40 dd e7 50 60 b7 31 71 54 b8 18 36 ba dc f9 de 15 31 e7 c0 f8 e2 51 c7 d8 7b f9 4e 84 4e cb 5d 48 ac 54 2c a1 24 b0 0e 93 b3 75 81 75 0e 92 16 0d c5 6d ff 83 61 4f 7e 48 d1 27 13 57 5d e2 29 e8 12 8b 48 54 4b 08 54 76 09 79 ca 2d 21 ac fa bc c0 4c e2 12 ea 55 5a 42 bd ca 4b a8 57 65 09 f5 6a 61 2d 60 19 ce bb 0c df 5d 86 ed 2e 63 ad 3b e4 b9 66 59 2d 60 19 d1 67 19 c9 c7 2e 22 f8 b8 65 a4 4b 9f 97 98 4c 5c 46 3d 4a 8b a8 47 79 19 f5 a8 2c a2 1e 2d 2e bd cf 7d 8f 5b 04 c6 03 15 99 3b 9d b0 0c 94 e3 1e 94 c7 a4 a4 84 bb 4a ef 76 4f 7a 7f Data Ascii: W0?y$s~:C(0I/n y.>fVboDaZ&F~@P`1qT61Q{NN]HT,$uumaO~H'W])HTKTvy-!LUZBKWeja-`].c;fY-`g."eKL\F=JGy,-.}[;JvOz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
65	192.168.2.6	49796	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:34 UTC	511	OUT	GET /file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:34 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:34 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 14496 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:34 GMT ETag: "bf069c5896b831434feb0a676d5c8a00925c46e2" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:34 UTC	14496	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f dc 46 b6 e6 5f 11 ea 99 19 88 7d f1 5b 8f a7 67 fa 02 82 dc 68 bb 1f 2e 0c 41 90 ad b2 ad 71 c9 12 24 75 7b 8c 86 ff fb 3d df 09 92 49 66 92 cc 85 91 a9 2c 29 da ad ca 2a 26 c9 38 71 22 e2 ec cb 7f ee 3e fe fc e1 ee 2b d5 dc fd fb ee ab 3b 27 9c d0 77 cd dd 4f ef ef be f2 b2 b9 7b fd ee ee 2b fa 78 4b 1f 2a d2 2f bf df 7d e5 94 6e ee 7e 69 3f 7f 7b 43 0f bd 90 4a be f8 f6 bf 9f 7d fd e2 d9 8b 6f fe f9 1d 3d fe ea d5 2b 7e ee e5 87 0f f7 1f e9 ed df ff e7 ee 35 5d b9 fb f1 ed 9b 77 2f 24 dd f0 f0 f2 8f fb f7 f9 8b ee de d7 bf bd 62 30 3e fe 71 f7 95 6d df fc ed 2f 2f df dd 3f 79 8a 9b 9f 28 7a ec dd cb f7 f7 bf 7d bc fb ca d0 6d f9 ee 0f ef f9 e3 57 7a d7 7f ee de e1 c7 4b 7e db af f4 6e a5 8d d0 56 37 5a 6b 11 9d Data Ascii: }YF_}[gh.Aq$u{=If,)&8q">+;'wO{+xK/}n~i?{CJ}o=+~5]w/$b0>qm//?y(z}mWzK~nV7Zk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
66	192.168.2.6	49795	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:34 UTC	511	OUT	GET /file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:34 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:34 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 17388 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:34 GMT ETag: "a10271ce8b0db840e55148a1a269601ebdc195ff" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:34 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f 1b 47 b6 e6 5f 11 ea 39 99 88 7d f1 db 45 e3 de c1 00 82 3d e8 76 3f 19 86 20 b7 e5 65 5a b2 04 4b f7 f6 18 0d ff f7 39 df 89 c8 95 c9 e4 92 41 16 ab 2a 7a 29 91 49 32 d6 13 27 be b3 ff fb e1 cb cf 9f 1f be 92 cd c3 ff 3c 7c f5 60 5b db aa 87 e6 e1 a7 df 1f be 72 a2 79 f8 f5 d3 c3 57 f4 cf 47 fa 47 06 7a f1 af 87 af ac 54 cd c3 2f f9 df df 3e d0 8f de 08 61 de fc d7 7f fc ed db 37 df fc fd 5b fa f1 8f 3f fe c8 bf 7a fb f9 f3 bb 2f d4 f6 77 ff 7e f8 95 9e 3c fc e3 e3 87 4f 6f 04 7d e1 fd db 3f de fd 9e 3e e8 be fb eb 6f 3f f2 20 be fc f1 f0 95 c9 ed fe ed 97 b7 9f de bd 7a 8d 2f bf d2 96 7e f7 f9 77 fe ce 3f e9 a7 ff 7e f8 84 3f 6f f9 c7 ff a4 a6 94 75 0d fe 2f be ff f3 4f ea fa 23 7f f0 19 2d a0 a3 ef f7 a7 f2 f9 Data Ascii: }YG_9}E=v? eZK9A*z)I2'<\|`[ryWGGzT/>a7[?z/w~<Oo}?>o? z/~w?~?ou/O#-
2024-09-29 02:42:34 UTC	1367	IN	Data Raw: 11 dc 57 57 72 8c a6 9b 37 21 4d b7 2d 2d 3d a4 e3 ac f7 d9 d6 12 dd 70 5d 43 1b c7 c4 a1 8f be c8 a0 c0 db 0a 0d 0a 18 a2 cc 4a 49 68 85 0a 8d 0a f5 5f 67 4b c5 6a 4e 33 6a fe 88 23 fa 09 a0 6a 84 31 32 d9 29 18 a6 11 da 19 c7 65 2d 45 e3 b1 de 63 6f f4 fc 60 3e 30 fc 9e 0e 3a fb a1 1e 10 8f f8 ca f1 b8 0a 63 e4 17 37 4d f3 dd 4d 14 25 0e dc d5 b3 53 8f 0e 0f 3a 53 57 ef 70 74 30 6e 33 c3 31 d1 cf a6 38 a6 8b f1 60 ae 2b 0f 9f 45 ee 9d 12 14 8c a9 af 95 c8 6f 38 d0 6a 78 98 9e f5 75 16 f7 3e 69 16 db e8 c3 ee 50 74 dc a6 f8 61 1b f2 77 f2 93 5d 7e b4 49 3a 1a cd 0c f5 6f a7 93 03 4c ec 2b 39 f2 1b 96 1a 86 87 be 8b 11 e4 c9 ed 7f d2 2c b6 31 9e 9c 22 61 d0 27 87 73 7a d1 4d b0 7b ba eb 1f 17 9a a4 d4 08 8a 7c 32 b3 1c 1f 84 7b a5 b8 0d f5 c2 49 de 84 da Data Ascii: WWr7!M--=p]CJIh_gKjN3j#j12)e-Eco`>0:c7MM%S:SWpt0n318`+Eo8jxu>iPtaw]~I:oL+9,1"a'szM{\|2{I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
67	192.168.2.6	49797	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:34 UTC	511	OUT	GET /file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:34 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:34 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10959 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:34 GMT ETag: "5c58efa7837b68ba6221da9224af8d45435b55a1" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:34 UTC	10959	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d dd 8f dc b6 b2 e7 bf 12 cc b3 44 f0 fb 23 ef 77 f7 e5 62 f7 62 cf be 2c 02 23 70 8e 27 71 36 4e 1c d8 3e 27 1b 04 f9 df b7 7e 55 94 c4 56 4b dd 33 d3 ea 9e b1 ad 73 71 e3 69 89 22 8b 45 b2 58 df f5 d7 dd a7 9f 3e de 7d 6b ba bb 7f df 7d 7b 17 54 50 f6 ae bb fb f1 c3 dd b7 51 77 77 3f ff 7e f7 2d fd f3 9e fe 31 99 fe f8 e3 ee db 60 6c 77 f7 b6 fe fb db af f4 d1 f7 5a a7 ef ff e7 7f fd c7 ff f8 fe ff fc 27 7d fb e6 cd 1b fe e8 f5 c7 8f f7 9f a8 eb ef 5e 75 77 ef 5e ff 79 ff 01 7f ff 35 be fe f9 b7 37 3c ec a7 3f ef be f5 b5 a7 ff 44 b3 6f 4c a1 5e 3e 7e e0 b7 bf d0 47 7f dd 7d c0 7f 5e cb 03 ee e4 67 3c f8 7f f4 a7 56 d9 39 1a e0 cf f1 ef bf 09 dc e9 ad 89 69 7c 8b bf e9 ed 27 1e 1e c0 68 fa f9 17 7e f3 dc f0 c4 45 7a 86 Data Ascii: }D#wbb,#p'q6N>'~UVK3sqi"EX>}k}{TPQww?~-1`lwZ'}^uw^y57<?DoL^>~G}^g<V9i\|'h~Ez

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
68	192.168.2.6	49799	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:35 UTC	511	OUT	GET /file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:35 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10926 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:35 GMT ETag: "bfd4d42dd14ef70d0233bb51ae6d69b50d877b15" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:35 UTC	10926	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f dc 48 92 e6 5f 29 e4 33 49 f8 7d d4 e3 2e 66 06 03 cc 60 16 db d3 4f 85 84 20 b5 54 25 4d e9 82 a4 ea de 42 43 ff 7d ed 33 77 27 9d 0c 46 64 44 06 23 f2 90 97 50 19 41 d2 c3 dd e9 87 b9 1d 9f 99 fd f3 e6 db 6f 5f 6f 7e 96 dd cd df 6f 7e be b1 83 1d d4 4d 77 f3 eb 97 9b 9f 9d e8 6e de 7d be f9 99 3e 3e d1 87 0c f4 e5 1f 37 3f 5b a9 ba 9b b7 f9 f3 e3 07 fa d1 0b 21 dc 8b bf fc cb ff fe eb ff fd 97 17 ff f5 d7 ff a6 9f bf 7e fd 9a 7f f7 f2 eb d7 37 df a8 f6 5f fe 79 f3 8e ee dc fc ed d3 87 cf 2f 04 15 78 ff f2 cf 37 5f d2 83 52 f6 dd c7 d7 dc 8d 6f 7f de fc 6c 72 cd 3f 51 d1 af 5f f8 f6 ef 54 fa 9f 37 5f f0 e7 65 ba 91 aa c5 8d ff 47 5f c5 10 b4 be ed 6e fe 1c bf 7f a7 7e 4f 4f a5 f3 e3 53 7c a7 a7 df a8 1e 45 2d a3 Data Ascii: }YH_)3I}.f`O T%MBC}3w'FdD#PAo_o~o~Mwn}>>7?[!~7_y/x7_Rolr?Q_T7_eG_n~OOS\|E-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
69	192.168.2.6	49798	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:35 UTC	511	OUT	GET /file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://telegram.org/js/tgsticker-worker.js?14 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:35 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12545 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:35 GMT ETag: "b7ec796537cf35a32fadf36637c066e16a679383" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:35 UTC	12545	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 5d 8f 1b c7 ae ed 5f 31 e6 b9 55 28 d6 77 e5 ed 20 38 e7 22 80 91 5c ec 9d fd 64 18 86 13 3b 89 4f ec d8 b0 9d 9d 1b 6c f8 bf 5f 2e 56 b5 ba 25 b5 34 9a 51 a9 47 1a 77 3e 66 46 6a a9 bb c8 62 b1 58 e4 22 f9 9f 9b cf bf 7e ba f9 86 ba 9b 7f df 7c 73 e3 95 57 46 99 9b ee e6 97 8f 37 df 04 dd dd bc f9 70 f3 0d ff 7a cf bf 28 f1 1f 7f dd 7c e3 c9 74 37 bf d5 df 7f bc e3 af bd d0 9a 5e fc f3 87 6f bf fb af a7 2f 7e f8 d7 8f fc f5 57 af 5e c9 f7 5e 7e fa f4 fa 33 df ff d9 7f 6e de f0 3b 37 3f bf 7f f7 e1 85 e6 0f bc 7d f9 f7 eb 8f e5 42 ff d9 37 7f bc 92 81 7c fe 5b 5e ca 9d 71 e3 4f ef 7f 7e f3 f2 ed 8b 57 7f fe fc 3b 7f f1 e3 eb 5f be 5b df 89 f8 8d 4f 1f e5 5b bf f3 cd fe 73 f3 01 3f 5e ca f7 7f e7 9b 1b 1f 3a e3 bd 4a d1 Data Ascii: }]_1U(w 8"\d;Ol_.V%4QGw>fFjbX"~\|sWF7pz(\|t7^o/~W^^~3n;7?}B7\|[^qO~W;_[O[s?^:J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
70	192.168.2.6	49800	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:35 UTC	651	OUT	GET /img/t_main_Android_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454 Range: bytes=229376-250837 If-Range: "5eb6fd6e-3d3d6"
2024-09-29 02:42:35 UTC	374	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:35 GMT Content-Type: video/mp4 Content-Length: 21462 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3d3d6" Expires: Thu, 03 Oct 2024 02:42:35 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 229376-250837/250838
2024-09-29 02:42:35 UTC	16010	IN	Data Raw: 2e b3 fa 37 61 a8 17 9e 99 cb 56 3e ec 50 c8 0b 95 5a 22 06 c6 94 44 4e 59 73 40 6a d0 80 71 0a 34 76 23 37 a9 d1 1f 8b 26 bf 97 43 f6 9a 80 8e 7c d5 27 66 ed 8b 9f 02 6a b6 e3 8d 5b 64 b2 9e 8b 12 02 ef 1c a1 4d 15 d3 e0 72 30 be 0b 1b 68 f2 a5 fb 92 89 e8 7e a1 ef 89 77 b6 4f c3 03 1c 17 2a 6c 5e d0 bc e8 e8 c6 82 a5 c5 07 c2 c4 79 92 43 0b c9 de f1 cc 72 be f5 b4 ec d7 2d 3b 60 c5 02 d2 3c 40 4f 03 99 ff e0 d0 60 04 2a 1d 4e 26 6c 6c 6a 70 0b 2e 98 2e bf ee 9a eb 2d bc d1 bf 35 e0 65 d8 a5 51 31 a9 c4 24 4c 0a 4d 54 de 02 a2 c1 b5 da 8c 61 1d b7 27 45 fe 6d e7 ad d7 4a ad 30 e2 57 0b b5 51 41 70 b3 d1 03 ec a4 4a 71 84 9c 57 9e fd 4f 83 24 84 52 00 00 03 37 41 9a 86 22 25 2f 00 01 ac 65 7d 88 30 9f b5 b1 6b 19 65 ed 8a c1 da b9 4c 67 99 49 7f 66 4b 6d Data Ascii: .7aV>PZ"DNYs@jq4v#7&C\|'fj[dMr0h~wOl^yCr-;`<@O`N&lljp..-5eQ1$LMTa'EmJ0WQApJqWO$R7A"%/e}0keLgIfKm
2024-09-29 02:42:35 UTC	5452	IN	Data Raw: 90 60 b7 fd 79 c3 9f 26 fc 1e 1a 8e a9 b0 5a 01 95 d4 a9 81 a2 97 22 4b 26 08 9c 27 01 fe 01 1d c1 18 8f 1f 50 e4 c5 65 5f 27 d6 8e 1d 4c 4a 1e ff 16 33 f9 c2 a7 84 cf 12 e2 09 1f 99 d0 f8 31 c9 06 48 e8 b7 fc a4 fc 7f 34 de 44 00 03 51 0d 69 55 ce db ac 1b 23 87 b6 e6 4b b3 7f 4a 72 f0 a3 c5 7a 1e c8 91 df 3c bf 04 29 58 b8 13 3b bf 06 58 96 7c b6 9b 5c 65 6e 20 45 5a 8e 87 c2 7b a8 fa 4f 42 76 a0 89 3e 37 37 d6 94 9a 28 c9 f8 50 17 f2 9a 9f c5 a2 f1 93 20 0f 28 f5 2b 46 47 24 32 e7 4f 8a e4 94 23 8a 80 9d 22 f0 64 14 fa 8b d8 70 a3 4e 5a 35 f5 60 2a 06 0a 41 fb 58 e9 93 6d 73 34 ae f8 20 00 00 03 5b 41 9a 46 22 25 2f 00 01 ac 65 7d 88 30 9f b5 b1 39 02 20 ec e6 2b 24 74 be df 66 20 fb 50 85 0d 6a 43 f8 73 81 85 2b 81 61 a2 bb 67 bf 2f 94 fe 74 62 58 0b Data Ascii: `y&Z"K&'Pe_'LJ31H4DQiU#KJrz<)X;X\|\en EZ{OBv>77(P (+FG$2O#"dpNZ5`*AXms4 [AF"%/e}09 +$tf PjCs+ag/tbX

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
71	192.168.2.6	49801	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:35 UTC	647	OUT	GET /img/t_main_iOS_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454 Range: bytes=229376-244747 If-Range: "5eb6fd6e-3bc0c"
2024-09-29 02:42:35 UTC	374	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:35 GMT Content-Type: video/mp4 Content-Length: 15372 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3bc0c" Expires: Thu, 03 Oct 2024 02:42:35 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 229376-244747/244748
2024-09-29 02:42:35 UTC	15372	IN	Data Raw: a5 44 d7 5c b2 d5 3f 76 36 35 89 da 64 a4 5b fa c3 b4 be c7 c4 22 dd c7 56 9c 09 f9 9b 28 fe 3b 3a 86 87 ef 13 b5 ea ca 12 89 33 00 32 6e b6 8e 14 53 9b 96 30 d1 0c 7c 3d df 6d 25 f0 2b 8f 59 4a 8e f2 23 8b 7a 60 fb 72 ca 26 ec 69 a0 24 94 f6 62 c4 50 65 e6 f4 d1 e0 f5 62 27 8a 3d 39 4e bb c6 dc 07 5f cf d0 32 ba 0a d3 2d 2b cd bf ec 69 8a 11 e3 45 05 11 65 e0 4c 48 85 99 80 90 69 ac f2 78 87 20 df 42 48 e8 4b 1b 71 4f d7 e6 85 5f 3f 71 fd 92 49 de 55 0f 16 6c d2 f4 a0 4a cb b5 b7 e9 a1 fa b5 70 d2 ed 5c 98 6d 4a ce 79 db 9e 2d a5 e7 86 54 af b7 6d 3b ff ca 24 43 67 20 65 de ca 9f d1 d7 2b ce dd c3 ee c2 bb 61 7f 31 fa 3f 2d 4f 4f d3 db b8 51 25 51 45 83 2e 18 f3 86 93 0c 03 14 03 d2 8c ed 57 f9 9a 87 d0 b3 21 6c 85 e2 8a b5 3f 26 c5 8e cc dd 52 e2 be cb Data Ascii: D\?v65d["V(;:32nS0\|=m%+YJ#z`r&i$bPeb'=9N_2-+iEeLHix BHKqO_?qIUlJp\mJy-Tm;$Cg e+a1?-OOQ%QE.W!l?&R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
72	192.168.2.6	49806	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:35 UTC	447	OUT	GET /file/464001484/1/bzi7gr7XRGU.10147/815df2ef527132dd23 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:35 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10147 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:35 GMT ETag: "19a8c01d40babdc6b063746c48554639d0ecd1a3" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:35 UTC	10147	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 5d 59 8f 1b 47 92 fe 2b 46 3f 17 0b 79 1f 7e 5b 0c b0 8b 01 34 f6 60 8e 27 43 10 64 ab 6d 69 dd 3a 20 69 c6 6b 0c f4 df f7 fb 22 b3 8a c5 62 91 5d 24 8b ea 96 5c 33 30 d5 2c 92 99 91 91 91 91 71 c7 7f 6e 3e fe f2 e1 e6 5b dd dc fc fb e6 db 1b df fa d6 dc 34 37 3f bf bf f9 36 a8 e6 e6 d5 bb 9b 6f f1 cf 5b fc a3 13 fe f8 ed e6 5b af 4d 73 f3 b2 fe fb e6 35 7e f4 4c a9 fc ec ef 7f fe cb 5f 9f b9 0f b7 3f 3d fb fe 9f ff c0 08 2f 5e bc 90 9f 3e ff f0 e1 f6 23 26 f8 e1 3f 37 af f0 e4 e6 a7 b7 af df 3d 53 f8 c2 dd f3 df 6f df 97 0f ba ef be 7a f3 42 20 f9 f8 fb cd b7 b6 0e fe dd 3f 9f 3c f9 e6 4f df 7f f7 8f bf 7d ff 04 bf fa f0 5e be f1 2b 7e f8 9f 9b b7 7c 79 2e 3f fd 15 af 9f 9a 9b 77 f5 89 96 27 9c 93 0f fe 0f 1f b6 c1 35 37 Data Ascii: ]YG+F?y~[4`'Cdmi: ik"b]$\30,qn>[47?6o[[Ms5~L_?=/^>#&?7=SozB ?<O}^+~\|y.?w'57

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
73	192.168.2.6	49803	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:35 UTC	451	OUT	GET /file/464001828/11e99/2FUYW30UXAI.12708/7604effa1e02ddf7f9 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:35 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12708 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:35 GMT ETag: "5efa4caf73d09bf388e257a35d778134a66d2692" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:35 UTC	12708	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 5b 8f 1b 47 b2 e6 5f 11 fa b9 98 c8 c8 7b fa f5 60 77 b1 80 31 1e cc 05 e7 c1 10 0c 79 ac 19 6b 47 b2 0c 49 b3 b3 c6 c0 ff 7d e3 8b c8 22 8b 64 91 4d 36 8b 2d 76 77 ce c0 6c b1 b2 98 97 c8 88 c8 88 c8 b8 fc e7 ee cb 3f 3e df 7d 43 c3 dd ff bd fb e6 2e 9a 68 dc dd 70 f7 f7 4f 77 df 24 3b dc bd fb f5 ee 1b fe f3 91 ff 90 e3 7f fc fb ee 9b 48 6e b8 fb b9 fd fd e5 03 ff e8 07 6b fd 0f 7f fc ee bf ff f4 c3 77 7f fd 0b ff f8 a7 9f 7e 92 5f bd f9 fc f9 ed 17 ee fb fb ff dc bd e3 27 77 7f fb f8 e1 d7 1f 2c bf f0 fe cd 6f 6f 3f 69 c3 f8 ee bb 5f 7e 92 49 7c f9 ed ee 9b d0 fa fd f3 cf 6f 7e 7d fb ea 5b bc fc 2a 44 fe dd e7 4f f2 ce 3f f9 a7 ff b9 fb 15 1f 6f e4 c7 ff e4 ae 5c 4c 03 fe b3 af 7f ff 9d 87 fe 28 0d 9f d1 03 06 7a ad Data Ascii: }[G_{`w1ykGI}"dM6-vwl?>}C.hpOw$;Hnkw~_'w,oo?i_~I\|o~}[*DO?o\L(z

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
74	192.168.2.6	49804	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:35 UTC	447	OUT	GET /file/464001560/1/zLlKYgeDLoA.14496/62085b07461f2d87e4 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:35 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 14496 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:35 GMT ETag: "bf069c5896b831434feb0a676d5c8a00925c46e2" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:35 UTC	14496	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f dc 46 b6 e6 5f 11 ea 99 19 88 7d f1 5b 8f a7 67 fa 02 82 dc 68 bb 1f 2e 0c 41 90 ad b2 ad 71 c9 12 24 75 7b 8c 86 ff fb 3d df 09 92 49 66 92 cc 85 91 a9 2c 29 da ad ca 2a 26 c9 38 71 22 e2 ec cb 7f ee 3e fe fc e1 ee 2b d5 dc fd fb ee ab 3b 27 9c d0 77 cd dd 4f ef ef be f2 b2 b9 7b fd ee ee 2b fa 78 4b 1f 2a d2 2f bf df 7d e5 94 6e ee 7e 69 3f 7f 7b 43 0f bd 90 4a be f8 f6 bf 9f 7d fd e2 d9 8b 6f fe f9 1d 3d fe ea d5 2b 7e ee e5 87 0f f7 1f e9 ed df ff e7 ee 35 5d b9 fb f1 ed 9b 77 2f 24 dd f0 f0 f2 8f fb f7 f9 8b ee de d7 bf bd 62 30 3e fe 71 f7 95 6d df fc ed 2f 2f df dd 3f 79 8a 9b 9f 28 7a ec dd cb f7 f7 bf 7d bc fb ca d0 6d f9 ee 0f ef f9 e3 57 7a d7 7f ee de e1 c7 4b 7e db af f4 6e a5 8d d0 56 37 5a 6b 11 9d Data Ascii: }YF_}[gh.Aq$u{=If,)&8q">+;'wO{+xK/}n~i?{CJ}o=+~5]w/$b0>qm//?y(z}mWzK~nV7Zk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
75	192.168.2.6	49805	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:35 UTC	447	OUT	GET /file/464001418/1/fabnJFzygPY.17422/bc9dec9fd8bd26e00e HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:35 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 17422 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:35 GMT ETag: "8c3dca30247141a56bd9786fc869d92e887e1bdd" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:35 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 6d af 1b 47 72 ee 5f 31 ce e7 e1 a0 ab df db df 82 20 37 58 c0 48 82 64 93 2f 86 20 c8 6b d9 d6 5d c9 32 24 ed e6 3a 81 ff fb ad a7 aa 7b 38 24 87 3c 24 67 48 9d 23 8d 17 7b 44 0e 67 a6 bb ab ab eb fd e5 7f 1f 3e fd fc f1 e1 5b ea 1e fe fe f0 ed 43 e8 43 6f 1f ba 87 9f 3e 3c 7c 1b 4d f7 f0 e6 b7 87 6f f9 9f f7 fc 0f 65 fe f0 df 0f df 06 b2 dd c3 2f f5 df 5f df f1 43 2f 8d 09 2f ff ed df ff f4 5f ff f0 e7 7f 7a f9 af ff f9 67 7e fe c7 1f 7f 94 07 5f 7d fc f8 fa 13 bf fe fb ff 7d 78 c3 57 1e fe f2 fe dd 6f 2f 0d df f0 f6 d5 ef af 3f e8 0f ed de 37 bf fe 28 f3 f8 f4 fb c3 b7 be be fa dd fb bf 7d fa e5 1b c7 0f fc f6 ea c3 eb 5f 3f 3d 7c eb 78 d4 8f 1f e4 c6 bf f2 f3 ff fb f0 1e 7f 5e e9 05 79 1f df 84 a9 e1 e5 64 cc 0b 99 Data Ascii: }mGr_1 7XHd/ k]2$:{8$<$gH#{Dg>[CCo><\|Moe/_C//_zg~_}}xWo/?7(}_?=\|x^yd
2024-09-29 02:42:35 UTC	1401	IN	Data Raw: 57 ed be 1c 06 f9 ea dd b6 30 fc 9f 3f bc 79 f7 0d 24 d4 8f 73 a5 7e 3a 94 fa e9 02 a9 7f 43 28 30 8c f2 49 b9 2f 9e 6e 20 fc ab 79 2e f7 3e d8 66 56 89 1a c1 98 18 b4 b0 62 b8 de 6f 83 44 61 5a 83 dd 26 a9 dd 46 e4 7e e9 40 dd e7 50 60 b7 31 71 54 b8 18 36 ba dc f9 de 15 31 e7 c0 f8 e2 51 c7 d8 7b f9 4e 84 4e cb 5d 48 ac 54 2c a1 24 b0 0e 93 b3 75 81 75 0e 92 16 0d c5 6d ff 83 61 4f 7e 48 d1 27 13 57 5d e2 29 e8 12 8b 48 54 4b 08 54 76 09 79 ca 2d 21 ac fa bc c0 4c e2 12 ea 55 5a 42 bd ca 4b a8 57 65 09 f5 6a 61 2d 60 19 ce bb 0c df 5d 86 ed 2e 63 ad 3b e4 b9 66 59 2d 60 19 d1 67 19 c9 c7 2e 22 f8 b8 65 a4 4b 9f 97 98 4c 5c 46 3d 4a 8b a8 47 79 19 f5 a8 2c a2 1e 2d 2e bd cf 7d 8f 5b 04 c6 03 15 99 3b 9d b0 0c 94 e3 1e 94 c7 a4 a4 84 bb 4a ef 76 4f 7a 7f Data Ascii: W0?y$s~:C(0I/n y.>fVboDaZ&F~@P`1qT61Q{NN]HT,$uumaO~H'W])HTKTvy-!LUZBKWeja-`].c;fY-`g."eKL\F=JGy,-.}[;JvOz

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
76	192.168.2.6	49807	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:35 UTC	447	OUT	GET /file/464001166/1/01aTJ2ISKeU.21801/24028c7b6d07639794 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:35 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 21801 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:35 GMT ETag: "659450b658f9d14c28dc526221f345cf9958a64f" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:35 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed bd 6b 8f 23 c7 91 36 fa 57 84 fe 5c 2c 64 46 de f5 75 b1 e7 e0 00 82 bd b0 bd c0 0b 08 83 c1 c8 1a 5b 3a 9e f1 08 92 bc 3e c2 42 ff fd c4 13 91 45 56 91 45 36 d9 4c f6 b0 7b d2 8b 55 0f eb 92 15 19 99 19 f7 cb ff 3e fc fa f7 5f 1e be b6 c3 c3 ff 3c 7c fd 10 c6 30 d2 c3 f0 f0 b7 9f 1f be 8e 66 78 f8 f1 a7 87 af f9 cf 27 fe 63 33 ff e3 df 0f 5f 07 4b c3 c3 0f f5 ef 3f 3f f2 4b 6f 8d a1 b7 ff f9 7f fe eb 4f 6f ff f8 df 7f e1 97 bf ff fe 7b 79 eb dd 2f bf bc ff 95 c7 fe f6 7f 1f 7e e4 2b 0f 7f fd f4 f1 a7 b7 86 1f f8 f0 ee b7 f7 3f eb 8d e9 d9 1f ff f9 bd 00 f1 eb 6f 0f 5f bb 3a ee 77 9f be ff ed ed 87 1f ff f9 fe 17 7e e7 a7 77 3f bf ff e7 af 0f 5f 7b fe ea 2f 3f cb b3 ff e0 21 fe f7 e1 13 fe f3 4e 06 f9 07 ff f7 f7 e1 e1 e7 Data Ascii: k#6W\,dFu[:>BEVE6L{U>_<\|0fx'c3_K??KoOo{y/~+?o_:w~w?_{/?!N
2024-09-29 02:42:35 UTC	5780	IN	Data Raw: ba 59 3c 25 ba 4a a5 21 fb b1 20 24 fe 92 78 ca 3d f0 ee 27 f3 12 16 9b e0 2d 6a f9 1a 35 17 f1 da d0 c0 53 34 30 df 87 b1 78 34 18 f1 92 df 45 61 f4 21 69 37 17 c4 ea 41 6d 1a a3 cf 93 dd 9d 19 c1 26 8e de 4b ce 1d cc 4b 19 66 79 43 6e 16 d9 e6 c5 82 e5 4c cd 1e 24 5b 60 3e d2 30 3f a4 1a 4a 7a 21 8d 5e a3 e8 66 5f 84 b9 28 48 2a 42 89 53 44 1d be 68 c7 22 c1 16 fc 6e 29 0e 51 73 c5 ed 52 dd a2 a6 e6 c1 d4 24 3d da 52 e2 2f 24 58 99 34 33 0f 55 b6 0a 8a 1e b3 de 28 f3 47 b5 7e cd 7b cb 45 82 41 e0 3f c8 05 76 32 32 72 21 d8 31 5b d8 05 78 24 01 24 90 b8 b5 44 d1 6a dd 3c 48 aa 34 97 84 f5 89 25 49 f3 1c 87 8f 8f 41 e2 f6 b6 eb 43 71 6f 7d 18 5c a6 af c8 6e d1 56 73 8c f3 48 58 1e 92 85 dd 68 cf 03 f4 b0 33 69 b6 3c 11 d5 fe 53 0d 3c a4 31 15 79 c7 b8 b4 Data Ascii: Y<%J! $x='-j5S40x4Ea!i7Am&KKfyCnL$[`>0?Jz!^f_(H*BSDh"n)QsR$=R/$X43U(G~{EA?v22r!1[x$$Dj<H4%IACqo}\nVsHXh3i<S<1y

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
77	192.168.2.6	49808	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:35 UTC	447	OUT	GET /file/464001493/2/hV6uPcaHk_E.17388/dcccb066a7b4fe44ee HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:35 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:35 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 17388 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:35 GMT ETag: "a10271ce8b0db840e55148a1a269601ebdc195ff" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:35 UTC	16021	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f 1b 47 b6 e6 5f 11 ea 39 99 88 7d f1 db 45 e3 de c1 00 82 3d e8 76 3f 19 86 20 b7 e5 65 5a b2 04 4b f7 f6 18 0d ff f7 39 df 89 c8 95 c9 e4 92 41 16 ab 2a 7a 29 91 49 32 d6 13 27 be b3 ff fb e1 cb cf 9f 1f be 92 cd c3 ff 3c 7c f5 60 5b db aa 87 e6 e1 a7 df 1f be 72 a2 79 f8 f5 d3 c3 57 f4 cf 47 fa 47 06 7a f1 af 87 af ac 54 cd c3 2f f9 df df 3e d0 8f de 08 61 de fc d7 7f fc ed db 37 df fc fd 5b fa f1 8f 3f fe c8 bf 7a fb f9 f3 bb 2f d4 f6 77 ff 7e f8 95 9e 3c fc e3 e3 87 4f 6f 04 7d e1 fd db 3f de fd 9e 3e e8 be fb eb 6f 3f f2 20 be fc f1 f0 95 c9 ed fe ed 97 b7 9f de bd 7a 8d 2f bf d2 96 7e f7 f9 77 fe ce 3f e9 a7 ff 7e f8 84 3f 6f f9 c7 ff a4 a6 94 75 0d fe 2f be ff f3 4f ea fa 23 7f f0 19 2d a0 a3 ef f7 a7 f2 f9 Data Ascii: }YG_9}E=v? eZK9A*z)I2'<\|`[ryWGGzT/>a7[?z/w~<Oo}?>o? z/~w?~?ou/O#-
2024-09-29 02:42:35 UTC	1367	IN	Data Raw: 11 dc 57 57 72 8c a6 9b 37 21 4d b7 2d 2d 3d a4 e3 ac f7 d9 d6 12 dd 70 5d 43 1b c7 c4 a1 8f be c8 a0 c0 db 0a 0d 0a 18 a2 cc 4a 49 68 85 0a 8d 0a f5 5f 67 4b c5 6a 4e 33 6a fe 88 23 fa 09 a0 6a 84 31 32 d9 29 18 a6 11 da 19 c7 65 2d 45 e3 b1 de 63 6f f4 fc 60 3e 30 fc 9e 0e 3a fb a1 1e 10 8f f8 ca f1 b8 0a 63 e4 17 37 4d f3 dd 4d 14 25 0e dc d5 b3 53 8f 0e 0f 3a 53 57 ef 70 74 30 6e 33 c3 31 d1 cf a6 38 a6 8b f1 60 ae 2b 0f 9f 45 ee 9d 12 14 8c a9 af 95 c8 6f 38 d0 6a 78 98 9e f5 75 16 f7 3e 69 16 db e8 c3 ee 50 74 dc a6 f8 61 1b f2 77 f2 93 5d 7e b4 49 3a 1a cd 0c f5 6f a7 93 03 4c ec 2b 39 f2 1b 96 1a 86 87 be 8b 11 e4 c9 ed 7f d2 2c b6 31 9e 9c 22 61 d0 27 87 73 7a d1 4d b0 7b ba eb 1f 17 9a a4 d4 08 8a 7c 32 b3 1c 1f 84 7b a5 b8 0d f5 c2 49 de 84 da Data Ascii: WWr7!M--=p]CJIh_gKjN3j#j12)e-Eco`>0:c7MM%S:SWpt0n318`+Eo8jxu>iPtaw]~I:oL+9,1"a'szM{\|2{I

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
78	192.168.2.6	49809	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:36 UTC	642	OUT	GET /img/favicon.ico HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:36 UTC	383	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:36 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT Connection: close ETag: "62616083-3aee" Expires: Sun, 06 Oct 2024 02:42:36 GMT Cache-Control: max-age=604800 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:36 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 9e 22 0d d9 9e 22 36 d9 9e 22 6f d9 9e 22 a4 d9 9e 22 cd d9 9e 22 e7 d9 9e 22 f7 d9 9e 22 fe d9 9e 22 fe d9 9e 22 f7 d9 9e 22 e7 d9 9e 22 cd d9 9e 22 a4 d9 9e 22 6f d9 9e 22 36 da 9e 23 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $""6"o"""""""""""o"6#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
79	192.168.2.6	49810	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:36 UTC	646	OUT	GET /img/t_main_iOS_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454 Range: bytes=48128-229375 If-Range: "5eb6fd6e-3bc0c"
2024-09-29 02:42:36 UTC	374	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:36 GMT Content-Type: video/mp4 Content-Length: 181248 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3bc0c" Expires: Thu, 03 Oct 2024 02:42:36 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 48128-229375/244748
2024-09-29 02:42:36 UTC	16010	IN	Data Raw: 6b b6 13 e9 e6 b8 6a 89 86 95 bf ad e1 d1 7d c1 6e 57 e1 3b 70 15 45 e1 c7 14 44 c6 d9 81 6c df 3c f8 00 e8 c9 ce 87 99 85 73 52 e2 f4 8e 42 46 f8 8c 4d b9 b9 d4 7d 77 f5 65 3f f3 a6 c1 55 7f aa ee f0 10 4c d7 c3 20 dd 4b de f7 47 0c 22 51 91 6e c0 a6 49 a7 22 69 28 b8 31 e6 3c 5d f5 dc b5 9f 05 28 99 49 76 98 3c 41 f8 3d da 10 dc 84 ea 99 63 5c 89 e3 0f 07 d7 b5 82 17 c5 b7 3d ad 92 ce 65 5f 90 af 0a 7e 8e 8f 59 e1 50 6e b4 89 c1 3c ff 70 a1 6f bb 48 e9 be 47 a1 e8 08 d6 25 82 a7 36 ee 20 73 02 c5 dc 42 0d 72 1e ca 0d 86 4e 0c 2e b8 3f 0a e2 71 c9 79 49 e0 fe b1 8b 5e 1e 10 0e f8 bb 93 55 20 1a 82 24 a5 ff 74 df 32 3b db 6a 6d 20 5c 9b 33 3a 91 fe 7b fd 61 56 8e 9f 37 f3 b9 88 4b 95 f1 3f 59 53 e6 a9 ec 7c 29 39 c9 16 6c 74 ab 72 ee 4d 12 51 34 d2 28 db Data Ascii: kj}nW;pEDl<sRBFM}we?UL KG"QnI"i(1<](Iv<A=c\=e_~YPn<poHG%6 sBrN.?qyI^U $t2;jm \3:{aV7K?YS\|)9ltrMQ4(
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 78 64 b6 09 40 85 46 1d b0 78 f6 fc 95 55 47 dc 1f 6a e1 b3 8f 42 bb 61 7b 89 75 db 5d 3c 2b 9c c6 00 85 87 cb 3c 44 8b 6e 95 63 6d 02 b2 e8 a8 f9 75 ca 97 d7 ef f5 a0 01 1e 07 d2 53 ac d8 d6 09 e4 7c 4d 13 ef 5c 64 22 8a 47 bc ed 12 e7 36 ac 36 be c6 bf 26 40 81 53 24 74 68 fd bf 0d 87 dc 6f 05 bf fd 99 e7 a9 d0 9a cc a3 7e 3a a5 5f 7f 82 78 77 d3 f6 55 e3 b6 82 ef d2 19 11 a6 e4 98 ff 75 64 9e f0 3e 28 f9 13 ae 74 df 34 6f e7 bc 14 e1 8f 92 d0 2a 3a f5 c6 0f 5f ae 85 d8 bc 94 04 a7 aa bd da 0c b8 4f 98 a8 f9 f1 21 d9 e9 3e 19 8a 06 21 57 c6 8b d6 fb db 17 8e ca c5 4b 0f 00 00 02 e2 41 9a 66 22 25 2f 00 04 e8 13 47 91 ee 6c a2 48 bd 2b fd fc 6e d8 89 a0 54 01 17 4b 9b c3 54 cd c9 e5 97 d1 3e 05 e6 a3 c8 b0 15 59 4b 4a 21 a9 cf 5e a3 66 e5 be 90 77 d7 76 Data Ascii: xd@FxUGjBa{u]<+<DncmuS\|M\d"G66&@S$tho~:_xwUud>(t4o*:_O!>!WKAf"%/GlH+nTKT>YKJ!^fwv
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 18 c1 f3 ac 19 c2 60 5b 05 b3 eb 5f 80 6b 02 36 4a 7e 5b d4 4c 6e 36 e4 05 9f 81 39 89 ab 11 3c da e7 c8 e8 ff 72 64 cd 33 b3 05 f5 8f 4e bd 50 c8 a3 90 68 b6 7f 9c 29 a8 39 4c 5a 0b 31 6b a2 67 5e a6 e7 c7 b0 d0 1d 1a 86 fd 27 dd ed db e3 65 2d ae 05 a1 1b be bc 9d 6e 4f fd 34 a2 89 88 42 10 aa f3 49 bf f2 92 50 52 b8 c7 0f ef 8b 7b 43 04 33 13 d3 4e f6 3b ea 54 c8 92 2f 7e 1b 9a e3 56 75 f9 f6 3f 4f f3 4e 34 5d ba 54 f6 9c c2 fd 4b 5a 33 c4 38 af d7 03 d6 f9 1c 97 67 47 e6 71 3d 6d 6b e1 7d 71 b9 40 4b f7 ba 0e 46 69 9f dc 04 e4 de 9e b5 ce 38 96 6e cc 4b 03 13 f2 0e 6a b1 c7 bb 6a e4 11 3e a1 85 3d 0b 2d fd ce d2 1b 02 61 47 ae 4c fb 7a da 52 1b 5a 23 ab 2a e6 00 b1 52 cb 7b ce a9 c4 23 85 99 f8 f1 a0 9c 16 60 93 b6 bd a6 5f a2 05 8f f8 2e c5 03 43 c2 Data Ascii: `[_k6J~[Ln69<rd3NPh)9LZ1kg^'e-nO4BIPR{C3N;T/~Vu?ON4]TKZ38gGq=mk}q@KFi8nKjj>=-aGLzRZ#*R{#`_.C
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: a8 03 50 bd b4 50 0d 5c de 98 ea 3a 4a e0 fc cd 37 29 1f 5e bc bd 65 c6 02 b5 82 0d bd 25 cc 00 84 60 11 88 21 9f 5f 1e 92 53 b6 31 30 47 e1 d4 64 c2 9d 88 90 96 58 e8 6c 7b f6 34 9f 11 66 37 76 1c d9 70 f4 18 ab ad 82 04 9a 96 91 fe 73 3a 65 dd 07 64 4e a6 d8 d4 cd 37 de a0 dd 41 b9 fc 5d a9 aa 64 cd 9f ed d9 31 1e 4a 7c 85 f8 51 dc 03 f8 63 d4 cb 3c 0b df 9f 1c 5e 91 77 6b 30 c7 4a 89 fd 0e da fb 72 96 e8 59 45 ba 82 95 d0 bc 45 2f 63 a8 b7 a6 46 c3 02 c3 e7 89 ae 10 3e 6e 60 b7 b7 da f7 e4 bf ea 36 f6 43 77 42 14 b2 2d 34 e2 95 ff 44 88 27 4b cf ef df 3d d6 9e b8 40 fd 2c 1c b4 5a c9 a7 11 9b 26 f8 16 31 73 c6 62 07 4d 1b b2 80 01 25 1d 93 32 28 c2 2e ae ec b0 ae 41 4b b8 31 76 7b 50 5d 80 02 8b da 4a 50 b4 7d d5 c1 dd dc ea 24 95 ad a4 fc 4a 86 3a 91 Data Ascii: PP\:J7)^e%`!_S10GdXl{4f7vps:edN7A]d1J\|Qc<^wk0JrYEE/cF>n`6CwB-4D'K=@,Z&1sbM%2(.AK1v{P]JP}$J:
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 39 2e d3 8f b6 38 dd 10 c7 b8 6f e3 a8 67 dd 26 87 3e d5 b9 fa e6 f5 7d 0a 8a 6f 2e 61 8a 5b b6 c2 24 7e 41 15 b5 b8 48 a4 f8 a4 3e 90 b1 66 a0 3f 06 60 5f 12 91 1a f3 a3 ad ed 11 ca 9e af 4d c3 fc 12 a8 5a 38 5f db c6 c3 c8 9b 76 9a 94 e6 b9 8d 9e 8c 6d ba 30 5e 71 ec 7c c1 4c 5f c0 00 00 02 ef 41 9a 46 22 25 2f 00 0a 18 16 98 ee 72 10 8f 6d 7d 60 2c e5 77 ca 31 c7 82 48 d3 12 cc 1b 00 db 9e c4 79 49 77 62 a4 1f d5 fa 1d 50 33 23 7d b5 ed 91 b6 d3 b7 b8 32 a1 fb 56 b6 7b 24 d7 fa 3a 9e 32 a2 39 54 31 3d b4 22 53 66 0a 55 81 04 1f 7e 18 6e 8e 6b 8f 2a b0 b8 c5 86 b1 a3 81 67 81 2d 9d e8 aa c2 d6 8f ea db 41 99 38 c8 f7 0a cf 0f b3 d7 d6 d7 72 79 7b 6f 28 b8 77 86 01 43 a8 10 94 f6 4d 77 51 4b 00 10 22 a2 b3 bc 4e 31 5f 7e 23 92 c2 8f 11 bb 85 a5 19 9e a9 Data Ascii: 9.8og&>}o.a[$~AH>f?`_MZ8_vm0^q\|L_AF"%/rm}`,w1HyIwbP3#}2V{$:29T1="SfU~nk*g-A8ry{o(wCMwQK"N1_~#
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 18 0e f6 2b e1 41 9d ed 6c 96 b9 97 45 18 63 28 68 31 b6 2b 8b 7e 53 43 26 04 0d 81 28 b3 7a 9a eb fe 32 b3 c9 2c 49 b4 c5 77 71 69 63 f0 4a 34 e3 a7 e7 bd bd 4e 65 f9 e7 77 88 92 f1 73 f3 ce a8 9b 18 ad 7e 23 71 76 54 35 c8 ab 4e f6 15 ed fe 7a 11 82 4b 2c 56 61 2b c5 bd 18 17 bd b6 78 ca 72 7b 3f 58 3d c3 e5 c9 1c 1d bc ce ff a7 fd fe b6 de 0c 14 76 6e 05 12 4a 8c a5 e7 66 b3 b2 d4 dd 50 a3 20 16 3f 67 48 15 83 21 f1 8f c5 6b fc 5c 6d 86 60 4a 40 fc fd 91 d8 fa b2 2e f4 0f 30 9f 66 62 77 04 20 6e 73 e4 d9 46 f0 ec d6 83 5c e8 55 80 55 75 cf f2 3e 46 1e 57 8f 48 aa c5 b9 23 5a df 2c 9e c3 23 22 27 d4 93 88 7f dc 68 50 fd c0 28 6d b8 ac ce 92 1c a7 19 63 5c 4e ac 06 04 a9 ae a2 3d d8 36 74 43 fe 48 59 e5 e5 41 c3 0c 53 1f 26 ed ce b1 74 7c db 53 c6 6f fd Data Ascii: +AlEc(h1+~SC&(z2,IwqicJ4News~#qvT5NzK,Va+xr{?X=vnJfP ?gH!k\m`J@.0fbw nsF\UUu>FWH#Z,#"'hP(mc\N=6tCHYAS&t\|So
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 32 13 81 4f 4e 44 08 e1 1d db 81 26 94 b9 18 ba 45 66 9e 73 75 b7 48 ad ce e0 e1 58 3b 20 de 0f a0 13 c8 77 63 14 ec 0e fa a7 d6 08 b5 42 a8 f9 4f 51 fe 6c 35 62 51 01 16 14 f7 24 19 ea 6e e5 72 5f 9f 26 dc d8 7d e9 36 5a 4e 37 93 74 1b 2a df 18 ff 97 ce d7 75 0d 4d 11 91 d1 5c 67 6c 24 cb c9 10 2a 88 32 11 b4 5b 54 4d c2 6f 0a ed 73 38 e2 ad a7 2e 22 bd 22 c4 e4 7f 7d c4 ff 72 97 29 2f 8c 0b 68 80 c3 91 01 dd 7f 82 f8 05 fc f9 97 ff 18 0c 37 74 30 cc d9 9b 52 42 00 5d ff 36 0f fc b0 23 01 55 08 26 a6 34 b7 b4 bf b7 d6 15 23 06 c8 23 52 3c 34 f1 83 50 44 5a 30 58 a8 78 93 f6 06 bc 85 ad a6 df 2e 56 16 bc 78 5a 8d 6d 84 0c 7d 97 22 b6 6c 18 bb 4a 06 1c 55 88 2a e6 2b ab 26 0b 40 dd 1d b1 06 49 40 fd ee 71 23 f1 3a 4f cb 84 4f 29 e8 30 75 7d 3a a9 da 64 51 Data Ascii: 2OND&EfsuHX; wcBOQl5bQ$nr_&}6ZN7tuM\gl$2[TMos8.""}r)/h7t0RB]6#U&4##R<4PDZ0Xx.VxZm}"lJU*+&@I@q#:OO)0u}:dQ
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 9a 86 22 25 2f 00 0b 7c 83 6c df 3e be cf bc 72 6c 9a e4 10 28 d4 c6 47 5a c2 4b 4d 25 2a f3 ad 60 ae 09 86 8e e6 b9 03 0d 78 73 24 30 8f 19 d9 26 fc e2 89 fc 13 e4 c9 38 a5 fe b7 0b 71 de 9e 7b 20 3b 1f 25 ec f2 d4 54 4a 43 18 04 9e 80 ba aa 9f cf 66 71 46 b8 8e 29 8b 52 75 8c 2b c3 b2 a5 63 87 1a c5 39 05 4f a2 82 6f 9a 9a bf 5d d0 52 64 62 53 e0 7e c5 6c fc e6 4a e2 62 51 fa ef 8f f5 f3 c5 fe ce d7 52 ee c0 42 92 04 d3 c4 1b 24 8c be 3d 9d f6 7a 53 35 c9 58 e0 66 97 d0 78 42 05 80 97 c0 f9 9c f8 75 51 08 95 3a d2 f4 d0 41 12 b6 f3 1b 99 88 e4 e8 f1 0c 46 b8 2b 37 a6 98 4f b0 2b 4b 37 5e 96 7e e4 77 59 95 bb da 4a 24 58 e0 cd 7f 33 3b 0a 92 e6 50 78 24 1a f3 ac 2c 78 6c 7e 93 29 34 83 98 df d6 3c bb 6f 06 02 6e a1 79 3b a0 19 cd 8c 5e 88 f1 e2 26 fd 67 Data Ascii: "%/\|l>rl(GZKM%*`xs$0&8q{ ;%TJCfqF)Ru+c9Oo]RdbS~lJbQRB$=zS5XfxBuQ:AF+7O+K7^~wYJ$X3;Px$,xl~)4<ony;^&g
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 68 43 bb cc 37 96 79 a0 cb 34 52 13 e4 7f 91 73 3f 44 96 61 89 32 af 3d 2e 02 d2 f9 64 eb 9c 75 da 11 9d 0d 86 ae b5 c6 e8 50 f2 f1 56 53 c7 e5 09 99 11 4b e6 47 4e e4 87 78 b0 de b5 e4 9a ed 2c 6e 9a 9a c4 25 94 d0 05 4c f2 60 ee c4 b2 47 b9 f2 41 bb ae 0d c8 67 10 8b e1 5b f4 b5 b4 9c 85 be 45 45 65 8d 63 03 fa 18 78 50 6f b1 52 b8 83 31 2a a5 d0 d8 54 c1 9b 5b 53 53 3b 38 84 c6 87 10 25 72 98 76 a4 79 ee 5f 83 9a ad 50 3c 80 f2 3b b8 79 a9 4c e2 85 55 89 9f f8 b3 49 43 fc 8e bc 2b 34 41 41 d3 75 12 3c 49 16 ed 51 ec a0 dd f9 f5 7a 0a 77 94 dd 6c ec 03 d2 45 a1 a6 49 6a 38 d4 06 b1 25 77 57 a8 52 c2 a9 1d 78 b2 7d d7 da 26 6d f3 58 5b cb be f0 fa 9c 72 de 8c ea ca 55 da b0 d6 a2 7f 45 2d 3f e6 5a 1a cb d7 c4 97 3e 28 3e 94 e8 e4 42 75 bf 20 8d a1 8e d9 Data Ascii: hC7y4Rs?Da2=.duPVSKGNx,n%L`GAg[EEecxPoR1*T[SS;8%rvy_P<;yLUIC+4AAu<IQzwlEIj8%wWRx}&mX[rUE-?Z>(>Bu
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: ec ea 64 51 1f fb 1e 7e 0d 85 bb 2a 3e 19 9c 2f a4 73 06 a2 d2 3f c0 aa 95 9e 2d 85 5b 83 5f 78 69 78 31 38 38 db d8 ed f6 80 68 3d b2 e2 df 4f d7 af 3a 4f b7 3d 09 12 9b 33 bf 63 4f 04 25 38 36 4a 99 0b 36 fd 7d 6f 1e cf cf 1f 9c ec 90 30 9c 45 0e 23 3e 68 ef a5 7f c9 bc 79 62 4b b5 a8 4b 15 20 04 53 08 4a 36 11 83 17 9e 8d 19 a9 ac e9 70 86 e1 ef b4 c9 15 fa 89 25 e0 7c e2 98 27 9c 95 1f 0f 06 77 89 eb 3e a3 8d 7d e6 a1 05 0b 31 be dc a2 ab 9d 62 31 33 fb b2 3e 02 0a 38 94 2e 38 5b 49 9a 5d 33 41 d8 f8 71 14 ba c3 15 e0 92 b2 64 d9 c9 7b 20 e1 3e 35 ee f7 06 da 0a e0 bf d3 0e 59 e2 46 68 af 4b 68 f2 44 72 d7 14 c5 fc 21 32 ed 5b b0 c3 c7 95 14 29 00 c8 7b 38 6c 9d ef 97 fc 8d bb cc 04 7c 09 49 b9 6b 57 0e 90 19 c0 5b df 1e 21 a3 d4 45 d4 36 7c 89 68 0d Data Ascii: dQ~*>/s?-[_xix188h=O:O=3cO%86J6}o0E#>hybKK SJ6p%\|'w>}1b13>8.8[I]3Aqd{ >5YFhKhDr!2[){8l\|IkW[!E6\|h

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
80	192.168.2.6	49811	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:36 UTC	650	OUT	GET /img/t_main_Android_demo.mp4 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: video Referer: https://telegram.org/ Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454 Range: bytes=48128-229375 If-Range: "5eb6fd6e-3d3d6"
2024-09-29 02:42:36 UTC	374	IN	HTTP/1.1 206 Partial Content Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:36 GMT Content-Type: video/mp4 Content-Length: 181248 Last-Modified: Sat, 09 May 2020 18:58:54 GMT Connection: close ETag: "5eb6fd6e-3d3d6" Expires: Thu, 03 Oct 2024 02:42:36 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Content-Range: bytes 48128-229375/250838
2024-09-29 02:42:36 UTC	16010	IN	Data Raw: 87 f0 d0 61 37 04 b7 2d ca 12 8a fe ba bf cc 52 bb 03 d1 a0 73 48 18 5d a1 41 fd e5 c5 c4 c1 95 61 6a ce 90 fc 96 92 0c 64 24 b8 3c f5 f0 63 11 d7 af 96 1a 05 1b 0a 53 ec 9c 8e eb ad 98 8b 45 54 eb 4c b1 0d c0 e9 b5 cd fb 47 1c 6c 5d e4 49 75 3a 84 16 79 ed f8 c3 1d 7a 56 b2 dc e5 b5 94 c9 e4 1a 45 48 ae cd 27 a5 46 2a 73 a4 d7 fa 56 d4 99 0a 93 0e d5 01 64 17 a5 a0 f0 7d 0e 6b 81 a8 07 5f 9d c9 e7 6f 26 0b 8d c4 bd 54 fe 16 d8 d4 db 9e 89 0e 53 f3 ae 21 cc 07 2d e0 27 98 5a 48 0d d7 10 47 a4 cc 99 81 09 95 41 db d6 28 ca 29 2c f3 8c 19 1e 17 ab 3b bb a1 55 ec b6 fa 3c 93 32 ba a7 3c 90 70 bc ff c9 19 ff a4 b0 cd 8d eb 61 9f c2 a3 59 ee e4 59 a8 4e 10 2c 5d 74 d8 34 74 9b 3a dc 5c 28 1e ac 71 85 8c fb 8b 3c 87 8e de c6 52 aa d3 b2 82 fe 40 d3 73 ad fd 0f Data Ascii: a7-RsH]Aajd$<cSETLGl]Iu:yzVEH'F*sVd}k_o&TS!-'ZHGA(),;U<2<paYYN,]t4t:\(q<R@s
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 35 90 76 a1 d8 5f 2f 5e 38 3f e7 60 da 02 7d 32 73 d1 b9 a3 6b 62 f3 93 45 68 c5 39 51 fa eb aa 07 e6 7f 37 d9 b9 11 68 74 69 08 5a 30 7c 22 1c 5d 6b 8e 92 31 28 57 a2 0e 04 3d 54 27 13 e6 2b 3a 06 e4 d6 69 85 c5 29 e2 23 d0 3a ed d0 5a 25 69 b2 2d 26 f4 2f 07 f0 20 b6 ab f1 1b fb 0d f3 cc 08 5d a7 c2 be 8e 65 df e5 38 07 e2 06 52 93 b9 96 3e 0e d7 76 37 93 2b c1 38 d9 f5 e5 e9 d6 d6 57 c4 42 61 ee 3d 44 75 be e3 44 ea b4 28 31 18 cc 04 30 8e 90 91 9d 74 a7 e8 fc 17 8d fe 41 93 14 ba 62 15 33 b4 97 8e 8e e3 6f 43 6d 98 94 5e 69 07 34 a2 0b 6e 67 67 7a 36 36 12 05 fc f0 c8 e7 24 27 27 8b f0 1b f1 87 e8 53 2f a0 1c ee 44 f6 3d d5 0b 9c 53 d7 91 e4 8e a4 b6 82 d1 d5 b6 21 d1 34 63 5e 36 d5 9e 51 69 62 df 3a 24 4d f5 29 8b 50 c0 19 0f 62 aa f5 04 ae e8 27 86 Data Ascii: 5v_/^8?`}2skbEh9Q7htiZ0\|"]k1(W=T'+:i)#:Z%i-&/ ]e8R>v7+8WBa=DuD(10tAb3oCm^i4nggz66$''S/D=S!4c^6Qib:$M)Pb'
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 89 42 ef e1 4e da 90 f3 32 ff da 57 50 cf c8 3b 53 36 9b d4 e5 12 b0 77 4e 34 40 3b 1c f0 26 8f e2 91 f9 20 2c 8f d7 1c 23 29 ea f0 11 14 46 b6 37 65 f7 cf fd f4 50 11 55 89 3d 6c 35 00 00 01 ab 41 9b 06 22 25 2f 00 04 87 50 cf a3 6b 45 47 14 42 4e 25 61 b5 22 b4 82 a9 1d 4d c2 b3 94 6b c9 e2 26 fb ad 87 b5 21 8a 21 99 fb 77 8a 4e 53 4c 1a 6e 84 4c 50 c0 5a fe 2f e2 42 78 95 1d 40 a7 0c c6 a8 d4 e7 e7 8c 9d 49 ae 4b a7 b4 8b e9 e4 42 b1 2a b2 bc 5c c6 90 4d c9 12 c1 9b e0 2c 66 a1 61 52 ad b8 a3 16 74 8e 44 46 25 92 33 3e 3a da 37 2b da 06 ab ec 9e f4 49 c5 03 6d cd 77 d3 19 57 fa 4f 47 fc 84 e3 ad ef 74 a9 23 30 8a 82 cb 2c a5 f6 86 ca 6e 6d b1 9f cb 3e 62 ee 81 f7 eb d6 24 26 47 95 bf 5b a2 4e 70 0c 77 ce fb 74 c7 3e ca ae 5c 42 9a a6 76 ba 71 ba c5 67 Data Ascii: BN2WP;S6wN4@;& ,#)F7ePU=l5A"%/PkEGBN%a"Mk&!!wNSLnLPZ/Bx@IKB*\M,faRtDF%3>:7+ImwWOGt#0,nm>b$&G[Npwt>\Bvqg
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 40 a8 e5 c4 fc d3 8a 92 1c 23 d4 8f 65 c1 7e 4c 58 dd 53 a5 8c 57 5e b5 3c 8a 72 b9 fc ee 05 36 7a d9 b8 49 28 33 df ee 9b 24 00 00 01 b7 41 9a c6 22 25 2f 00 04 87 c1 21 b0 30 e2 a0 9f 67 bd 21 44 4e ee fc dd 72 df 9c 11 ae bf 3c 3b aa 2d df 06 a0 c4 e6 85 33 61 28 e3 cd 29 c9 9f 91 24 a6 13 2e 05 7f a5 3b d7 5c 6f 2f b3 a1 93 00 9d 71 1d 80 1c ff 72 a5 ae 2e b9 84 d6 65 05 ff 45 9b 4e 1e 41 03 6d d0 11 26 f6 dc 9b a9 7c 1e 42 0d 54 dc 68 4d 86 49 17 c6 5e 2d f0 46 f3 4d b9 89 4a c8 8e dc 0c a0 a9 e8 c0 f9 5a 79 08 d5 a6 a7 8f a5 25 21 e2 37 7d 19 b8 0d 45 62 50 c6 12 5d 6f 3e 35 35 99 bd 34 bc 8f 1c 5b dd 13 16 7e 8f 33 cf fc d4 0a 22 ca df aa 35 11 b5 1e 6c 88 a1 f1 9c 05 89 7d 23 99 38 2a d3 2b dd ab 7f e8 04 92 dc 29 ca 8d db a8 a5 98 8c 09 08 c3 d0 Data Ascii: @#e~LXSW^<r6zI(3$A"%/!0g!DNr<;-3a()$.;\o/qr.eENAm&\|BThMI^-FMJZy%!7}EbP]o>554[~3"5l}#8*+)
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 4e 56 80 e2 3e 90 ed 3e 93 2d e5 13 f7 9a 5f 3f 16 b3 46 3b 62 bc 0e c4 22 dd 1f 4a e9 0f 83 c8 bb 88 3d d2 de c0 a7 08 c1 5a c9 9d 77 b2 45 ed 24 b3 a8 be 14 68 d3 b2 a8 6b ea 2d 99 71 0c 82 99 8d 7b a0 86 d1 51 fc fd 80 03 54 f6 5f 97 82 1e 52 85 f8 09 e8 58 ef 49 35 ce 7f a5 9b 6b 0d d0 75 da 37 23 a7 c5 aa bc 90 0c 9e 83 1e 13 b1 99 30 2d 35 61 df 8e dc 9c 2e f1 6b 59 43 4f 2c cd ef 20 93 2f 57 59 ef b3 bc 34 4f 42 83 b4 c0 fb a5 b3 a6 6c f0 de af 21 bc 7e be c8 7e 33 2b b1 36 5e 32 fc ac 0d 10 5d 97 01 77 74 a1 a3 4b e4 bb c1 9e b3 95 ab 38 d6 eb 7b a6 fc 86 07 a9 a4 33 0c 93 c1 c0 48 5b c7 82 f3 e9 9a d6 58 8f ad b3 a9 46 c2 5d 14 47 30 7e 80 00 00 01 9f 41 9a 86 22 25 2f 00 03 2c fe 9b f5 66 42 16 0d b8 d8 f5 94 50 1f 0b 8e 19 d1 8f 1d b0 20 02 9b Data Ascii: NV>>-_?F;b"J=ZwE$hk-q{QT_RXI5ku7#0-5a.kYCO, /WY4OBl!~~3+6^2]wtK8{3H[XF]G0~A"%/,fBP
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 97 49 dc dd 82 e0 09 d6 fd 4e e0 c4 a4 0f 08 50 91 de 5f 10 76 f8 3b 0f 4a a5 61 5c f6 03 a3 7d ab d0 00 00 01 32 41 9a 66 22 25 2f 00 01 ad 72 33 af 0a 8d 47 cf 77 dc 71 2d 39 73 44 eb bb 2e 78 21 06 5e 93 ef 99 43 66 26 dd da c4 0a c4 58 a8 11 12 23 bc 95 5c e0 42 ce e5 7c 7c 13 31 74 2a d9 79 b7 b2 c4 5f 69 27 9d 01 54 e6 3a 44 76 fa d9 29 8e ae 35 12 d3 22 47 cb c0 3f a4 eb 81 e4 91 b4 c0 01 d6 77 c0 71 92 07 7a d7 5f 4c 8b 59 37 19 32 8b c1 c7 41 76 9f ee 7c 32 2d 53 96 61 8f db 84 8e e9 b6 16 c3 cb c7 ac 88 5f b9 14 1c 85 5a 39 9c e3 7f d9 e9 ad 75 af 61 64 b3 b9 00 b0 6f 75 17 55 1f 74 91 da ae 43 8e d9 69 f0 b2 52 61 66 89 17 c4 1d 70 03 01 bf 65 0a f8 b9 ae c1 1c 22 c3 00 60 9f 0d 0b 1c 5c f6 a6 50 13 b3 db e1 a5 0a 7f bc ff 1f 79 a0 71 28 4d e1 Data Ascii: INP_v;Ja\}2Af"%/r3Gwq-9sD.x!^Cf&X#\B\|\|1t*y_i'T:Dv)5"G?wqz_LY72Av\|2-Sa_Z9uadouUtCiRafpe"`\Pyq(M
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 57 64 64 ec 27 cd 35 06 63 fc df 9b 59 d4 aa a2 9f ec e2 42 fc a3 42 56 a0 05 05 cb cf 18 53 43 13 3d 66 ab 8f 15 a8 70 22 80 13 bd 41 74 4d e8 61 d0 50 96 e6 d2 97 a8 29 bc 58 62 21 52 80 00 98 5c b2 c2 21 64 1a ab 07 95 92 33 24 cf 11 01 f9 27 8a f0 4d 27 13 51 2e 32 1c 6e 37 9d 48 d3 3a 15 a9 05 a2 1d f8 84 31 79 cb b8 ad 12 65 43 5c bd de c5 ab 9e 7e 4f d9 bf f9 bb c7 93 07 fa 6d 82 b6 21 4a 20 db 21 71 98 ed 15 4d f6 e0 81 95 69 fc cd 11 6c 47 08 aa 21 fb 3d 2d 5a a8 61 a6 9d f1 4f 9f 24 c8 7c 04 b0 ea 1b c0 e5 f2 fa 38 60 98 90 64 63 48 0a 84 d6 73 81 d2 34 3d 73 80 ca ef 86 36 94 cf 57 48 76 2a 87 84 d4 55 99 bd d7 4f 16 05 8a ad 72 bc e5 6d bf b9 2d a4 f8 dd a4 ee 19 e3 f3 cf 65 f0 45 bc 34 73 ee f3 6f cf 59 fe f4 14 ab 9e 6e a5 a2 b9 1d ed d6 c8 Data Ascii: Wdd'5cYBBVSC=fp"AtMaP)Xb!R\!d3$'M'Q.2n7H:1yeC\~Om!J !qMilG!=-ZaO$\|8`dcHs4=s6WHv*UOrm-eE4soYn
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 3e 5f c4 e7 1e b5 0f 73 6d 37 fd 2b 10 47 57 95 7e f1 a4 37 64 bc 85 a2 63 fe 04 d7 f5 ed 43 46 2a a0 ab f9 31 32 da 82 4c 05 8e 02 b1 66 59 0e 73 72 ed b3 fb 05 9f c3 1e 4d 9d 20 6a 37 c5 3d ed 3b 36 70 b9 89 5e f7 4b 94 8d 80 09 27 ea 58 f5 c9 38 c2 a9 14 74 0b c0 99 62 8c 08 8e 7b 68 1a 6c 4e a5 78 85 78 96 30 37 61 60 e9 76 75 d7 84 19 51 5a 43 81 c8 c1 5a 97 63 bf c0 52 a2 05 36 5e 8e fd 4f b6 b7 b0 ea 7b 4d 0c 36 ce 86 f0 44 6e 9c 92 bc d6 08 c6 81 c6 22 94 85 e3 7c 65 e8 31 3a 5d 9e 09 d4 41 d4 33 0b 66 60 ae 6b 5f 04 99 1a f3 58 83 a6 cc 44 1f 2e cf 1c 07 16 df 00 00 02 64 41 9b 06 22 25 2f 00 06 96 83 17 69 11 5f 50 20 28 47 49 dd 05 ed 87 c8 28 25 32 cb 0f 08 4a 09 4c 5a c3 e4 19 96 90 c9 10 a4 b2 e7 1e 53 d2 12 9a c8 38 ab 24 b5 dd cb 85 87 9d Data Ascii: >_sm7+GW~7dcCF*12LfYsrM j7=;6p^K'X8tb{hlNxx07a`vuQZCZcR6^O{M6Dn"\|e1:]A3f`k_XD.dA"%/i_P (GI(%2JLZS8$
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: ba fa 27 ea 67 ee 5a 20 84 98 bc f4 b2 31 cf eb dc cb 4b 11 00 56 7f d6 41 89 6d 1c 6b c4 43 21 7e ef 16 95 48 16 ad e7 8e 6c 7c 1a 0a 9d 69 ac fa 1f 8f c7 85 5c 61 1a 69 e6 d0 42 42 eb c5 5f c1 25 00 07 9e 22 cc c5 48 41 9b 3a c9 ed 30 b5 fd a9 7b f7 ad 13 f5 bd 80 28 0b 41 c2 54 ef 62 90 2a e9 d3 e1 3d 3f b5 09 8d f2 d3 03 e6 a0 b7 a3 6c bd c9 c1 eb 7a 91 da b9 73 02 28 dd 31 16 98 82 f3 3b 7a b0 ce c3 be 86 54 97 27 7d c7 cf 72 d5 a4 0c c7 85 fa 0f 07 68 60 d9 80 a5 4e 07 bf d7 7a 12 e5 f6 5e ec 85 12 f5 f5 03 ec 6c fd 32 b6 dc db 67 2a 1c 4f d8 db 4d 76 53 e6 c2 cd 07 e7 52 a0 6e 08 76 cf d2 4e 69 f4 00 80 5d a7 2f ed 28 a6 fb e7 0b 96 7b ac 1d 46 45 88 c5 bc 66 f6 9e 03 50 69 61 7d b0 58 4d 13 32 bb 7d 5f 66 7c 8e e7 28 3b fa 0a 36 e3 2a 3b 29 39 ed Data Ascii: 'gZ 1KVAmkC!~Hl\|i\aiBB_%"HA:0{(ATb=?lzs(1;zT'}rh`Nz^l2gOMvSRnvNi]/({FEfPia}XM2}_f\|(;6*;)9
2024-09-29 02:42:36 UTC	16384	IN	Data Raw: 53 17 59 64 89 f2 29 66 cc 4b 87 4b 0e e8 c1 3d 87 e7 f6 e9 c6 82 8c 19 9d c6 41 76 6c 11 b0 4f f5 15 2d f9 51 c3 bb d0 31 de c3 9c 52 67 d0 27 c7 da 95 aa 07 7d 7a b6 75 63 12 e7 45 b7 57 c1 57 cb ff 02 28 40 9b 83 44 9c f9 15 6f 67 ce 26 ea 73 31 c3 4b f7 3f 03 0e 46 2b d6 43 d9 a3 3c 9e a8 3f 54 13 c0 f1 35 03 af b6 85 a5 d0 5a d9 22 63 bb 80 e6 34 86 75 6f de ab c5 fa 43 3f f6 73 9c f6 8a a7 c3 08 d4 df c6 39 b7 20 e4 07 91 eb bd db e6 42 45 00 0a dd b7 aa 2f 9b 86 d9 9c 3f 56 6a 99 7e 3c cb 0d 1a b2 f2 75 db a9 88 ea de c0 f9 a8 87 e6 6b 7e 56 8e 51 87 45 9d ff ea 2b 7f a5 12 63 a0 1e 1f d0 9d dc 8a dd 66 5c e2 b1 50 2d be 8d a6 ac 23 18 fa 58 5f 77 38 bc 62 44 f9 f3 1c 63 12 5b e6 bd 16 4d 96 bc c4 31 db 98 ba bc 19 3f 97 ed 9f 35 06 c7 2a 71 05 69 Data Ascii: SYd)fKK=AvlO-Q1Rg'}zucEWW(@Dog&s1K?F+C<?T5Z"c4uoC?s9 BE/?Vj~<uk~VQE+cf\P-#X_w8bDc[M1?5*qi

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
81	192.168.2.6	49812	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:36 UTC	447	OUT	GET /file/464001880/2/VGTLBN3QuYM.10959/8940838e7dddc787d8 HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:36 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:36 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10959 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:36 GMT ETag: "5c58efa7837b68ba6221da9224af8d45435b55a1" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:36 UTC	10959	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d dd 8f dc b6 b2 e7 bf 12 cc b3 44 f0 fb 23 ef 77 f7 e5 62 f7 62 cf be 2c 02 23 70 8e 27 71 36 4e 1c d8 3e 27 1b 04 f9 df b7 7e 55 94 c4 56 4b dd 33 d3 ea 9e b1 ad 73 71 e3 69 89 22 8b 45 b2 58 df f5 d7 dd a7 9f 3e de 7d 6b ba bb 7f df 7d 7b 17 54 50 f6 ae bb fb f1 c3 dd b7 51 77 77 3f ff 7e f7 2d fd f3 9e fe 31 99 fe f8 e3 ee db 60 6c 77 f7 b6 fe fb db af f4 d1 f7 5a a7 ef ff e7 7f fd c7 ff f8 fe ff fc 27 7d fb e6 cd 1b fe e8 f5 c7 8f f7 9f a8 eb ef 5e 75 77 ef 5e ff 79 ff 01 7f ff 35 be fe f9 b7 37 3c ec a7 3f ef be f5 b5 a7 ff 44 b3 6f 4c a1 5e 3e 7e e0 b7 bf d0 47 7f dd 7d c0 7f 5e cb 03 ee e4 67 3c f8 7f f4 a7 56 d9 39 1a e0 cf f1 ef bf 09 dc e9 ad 89 69 7c 8b bf e9 ed 27 1e 1e c0 68 fa f9 17 7e f3 dc f0 c4 45 7a 86 Data Ascii: }D#wbb,#p'q6N>'~UVK3sqi"EX>}k}{TPQww?~-1`lwZ'}^uw^y57<?DoL^>~G}^g<V9i\|'h~Ez

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
82	192.168.2.6	49813	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:36 UTC	447	OUT	GET /file/464001453/2/eW_MzRhUGoM.10926/fe1f3bc3dd08367c0a HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:36 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:36 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 10926 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:36 GMT ETag: "bfd4d42dd14ef70d0233bb51ae6d69b50d877b15" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:36 UTC	10926	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 59 8f dc 48 92 e6 5f 29 e4 33 49 f8 7d d4 e3 2e 66 06 03 cc 60 16 db d3 4f 85 84 20 b5 54 25 4d e9 82 a4 ea de 42 43 ff 7d ed 33 77 27 9d 0c 46 64 44 06 23 f2 90 97 50 19 41 d2 c3 dd e9 87 b9 1d 9f 99 fd f3 e6 db 6f 5f 6f 7e 96 dd cd df 6f 7e be b1 83 1d d4 4d 77 f3 eb 97 9b 9f 9d e8 6e de 7d be f9 99 3e 3e d1 87 0c f4 e5 1f 37 3f 5b a9 ba 9b b7 f9 f3 e3 07 fa d1 0b 21 dc 8b bf fc cb ff fe eb ff fd 97 17 ff f5 d7 ff a6 9f bf 7e fd 9a 7f f7 f2 eb d7 37 df a8 f6 5f fe 79 f3 8e ee dc fc ed d3 87 cf 2f 04 15 78 ff f2 cf 37 5f d2 83 52 f6 dd c7 d7 dc 8d 6f 7f de fc 6c 72 cd 3f 51 d1 af 5f f8 f6 ef 54 fa 9f 37 5f f0 e7 65 ba 91 aa c5 8d ff 47 5f c5 10 b4 be ed 6e fe 1c bf 7f a7 7e 4f 4f a5 f3 e3 53 7c a7 a7 df a8 1e 45 2d a3 Data Ascii: }YH_)3I}.f`O T%MBC}3w'FdD#PAo_o~o~Mwn}>>7?[!~7_y/x7_Rolr?Q_T7_eG_n~OOS\|E-

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
83	192.168.2.6	49814	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:36 UTC	447	OUT	GET /file/464001812/2/kLAK2TPyvUU.12545/f68c1caf735a2ea3db HTTP/1.1 Host: telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:36 UTC	363	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:36 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 12545 Connection: close Cache-Control: max-age=2592000, public Expires: Tue, 29 Oct 2024 02:42:36 GMT ETag: "b7ec796537cf35a32fadf36637c066e16a679383" Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:36 UTC	12545	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 ed 7d 5d 8f 1b c7 ae ed 5f 31 e6 b9 55 28 d6 77 e5 ed 20 38 e7 22 80 91 5c ec 9d fd 64 18 86 13 3b 89 4f ec d8 b0 9d 9d 1b 6c f8 bf 5f 2e 56 b5 ba 25 b5 34 9a 51 a9 47 1a 77 3e 66 46 6a a9 bb c8 62 b1 58 e4 22 f9 9f 9b cf bf 7e ba f9 86 ba 9b 7f df 7c 73 e3 95 57 46 99 9b ee e6 97 8f 37 df 04 dd dd bc f9 70 f3 0d ff 7a cf bf 28 f1 1f 7f dd 7c e3 c9 74 37 bf d5 df 7f bc e3 af bd d0 9a 5e fc f3 87 6f bf fb af a7 2f 7e f8 d7 8f fc f5 57 af 5e c9 f7 5e 7e fa f4 fa 33 df ff d9 7f 6e de f0 3b 37 3f bf 7f f7 e1 85 e6 0f bc 7d f9 f7 eb 8f e5 42 ff d9 37 7f bc 92 81 7c fe 5b 5e ca 9d 71 e3 4f ef 7f 7e f3 f2 ed 8b 57 7f fe fc 3b 7f f1 e3 eb 5f be 5b df 89 f8 8d 4f 1f e5 5b bf f3 cd fe 73 f3 01 3f 5e ca f7 7f e7 9b 1b 1f 3a e3 bd 4a d1 Data Ascii: }]_1U(w 8"\d;Ol_.V%4QGw>fFjbX"~\|sWF7pz(\|t7^o/~W^^~3n;7?}B7\|[^qO~W;_[O[s?^:J

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
84	192.168.2.6	49816	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:37 UTC	738	OUT	GET /dl?tme=3d3828bad0840b196d_3278058860628255688 HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:37 UTC	310	IN	HTTP/1.1 302 Found Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:37 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Pragma: no-cache Cache-control: no-store Location: //desktop.telegram.org/ Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
85	192.168.2.6	49817	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:38 UTC	643	OUT	GET / HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:38 UTC	446	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:38 GMT Content-Type: text/html; charset=utf-8 Content-Length: 6031 Connection: close Set-Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236; expires=Sun, 29 Sep 2024 13:49:18 GMT; path=/; samesite=None; secure; HttpOnly Pragma: no-cache Cache-control: no-store X-Frame-Options: SAMEORIGIN Strict-Transport-Security: max-age=31536000; includeSubDomains; preload
2024-09-29 02:42:38 UTC	6031	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 54 65 6c 65 67 72 61 6d 20 44 65 73 6b 74 6f 70 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 6f 67 3a 74 69 74 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 54 65 6c 65 67 72 61 6d 20 44 65 73 6b 74 6f 70 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 Data Ascii: <!DOCTYPE html><html class=""> <head> <meta charset="utf-8"> <title>Telegram Desktop</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <meta property="og:title" content="Telegram Desktop"> <meta property

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
86	192.168.2.6	49819	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:39 UTC	620	OUT	GET /css/bootstrap.min.css?3 HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://desktop.telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
2024-09-29 02:42:39 UTC	379	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:39 GMT Content-Type: text/css Content-Length: 42523 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-a61b" Expires: Thu, 03 Oct 2024 02:42:39 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:39 UTC	16005	IN	Data Raw: 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 33 2e 32 2e 30 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 34 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 0a 0a 2f 2a 21 0a 20 2a 20 47 65 6e 65 72 61 74 65 64 20 75 73 69 6e 67 20 74 68 65 20 42 6f 6f 74 73 74 72 61 70 20 43 75 73 74 6f 6d 69 7a 65 72 20 28 68 74 74 70 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 63 75 73 74 6f 6d 69 7a 65 2f 3f 69 Data Ascii: /! Bootstrap v3.2.0 (http://getbootstrap.com) * Copyright 2011-2014 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) //! * Generated using the Bootstrap Customizer (http://getbootstrap.com/customize/?i
2024-09-29 02:42:39 UTC	16384	IN	Data Raw: 6c 6f 72 3a 23 37 37 37 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 3a 2d 77 65 62 6b 69 74 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 7b 63 6f 6c 6f 72 3a 23 37 37 37 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 64 69 73 61 62 6c 65 64 5d 2c 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 5b 72 65 61 64 6f 6e 6c 79 5d 2c 66 69 65 6c 64 73 65 74 5b 64 69 73 61 62 6c 65 64 5d 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 63 75 72 73 6f 72 3a 6e 6f 74 2d 61 6c 6c 6f 77 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 65 65 65 3b 6f 70 61 63 69 74 79 3a 31 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 68 65 69 67 68 74 3a 61 75 74 6f 7d 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 7b 2d 77 65 62 6b 69 74 Data Ascii: lor:#777}.form-control::-webkit-input-placeholder{color:#777}.form-control[disabled],.form-control[readonly],fieldset[disabled] .form-control{cursor:not-allowed;background-color:#eee;opacity:1}textarea.form-control{height:auto}input[type="search"]{-webkit
2024-09-29 02:42:39 UTC	10134	IN	Data Raw: 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 68 61 73 2d 66 65 65 64 62 61 63 6b 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 66 65 65 64 62 61 63 6b 7b 74 6f 70 3a 30 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 30 29 7b 2e 6e 61 76 62 61 72 2d 66 6f 72 6d 20 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 35 70 78 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e Data Ascii: t:0}.navbar-form .radio input[type="radio"],.navbar-form .checkbox input[type="checkbox"]{position:relative;margin-left:0}.navbar-form .has-feedback .form-control-feedback{top:0}}@media (max-width:0){.navbar-form .form-group{margin-bottom:5px}}@media (min

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
87	192.168.2.6	49818	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:39 UTC	617	OUT	GET /css/telegram.css?241 HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://desktop.telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
2024-09-29 02:42:39 UTC	381	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:39 GMT Content-Type: text/css Content-Length: 115228 Last-Modified: Mon, 23 Sep 2024 17:55:39 GMT Connection: close ETag: "66f1ab9b-1c21c" Expires: Thu, 03 Oct 2024 02:42:39 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:39 UTC	16003	IN	Data Raw: 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 3a 20 31 32 70 78 2f 31 38 70 78 20 22 4c 75 63 69 64 61 20 47 72 61 6e 64 65 22 2c 20 22 4c 75 63 69 64 61 20 53 61 6e 73 20 55 6e 69 63 6f 64 65 22 2c 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 56 65 72 64 61 6e 61 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 2f 2a 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 2a 2f 0a 7d 0a 68 74 6d 6c 2e 6e 61 74 69 76 65 5f 66 6f 6e 74 73 20 62 6f 64 79 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 20 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 20 22 53 65 67 6f 65 20 55 49 22 2c 20 52 6f 62 6f 74 6f 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 Data Ascii: body { font: 12px/18px "Lucida Grande", "Lucida Sans Unicode", Arial, Helvetica, Verdana, sans-serif; /-webkit-font-smoothing: antialiased;/}html.native_fonts body { font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, Helvetica,
2024-09-29 02:42:39 UTC	16384	IN	Data Raw: 20 61 75 74 6f 3b 0a 7d 0a 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 6c 69 6e 6b 20 7b 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 68 65 69 67 68 74 3a 20 33 30 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 36 32 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 34 30 70 78 20 30 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 35 70 78 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 61 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 6c 69 6e 6b 3a 68 6f 76 65 72 20 7b Data Ascii: auto;}.tl_main_download_link { text-align: center; display: inline-block; height: 300px; padding-top: 262px; padding-bottom: 20px; margin: 40px 0; font-size: 15px; max-width: 100%; position: relative;}a.tl_main_download_link:hover {
2024-09-29 02:42:39 UTC	16384	IN	Data Raw: 6e 74 65 6e 74 20 69 6d 67 2e 65 6d 6f 6a 69 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 75 73 65 72 2d 64 72 61 67 3a 20 6e 6f 6e 65 3b 0a 20 20 75 73 65 72 2d 64 72 61 67 3a 20 6e 6f 6e 65 3b 0a 20 20 63 75 72 73 6f 72 3a 20 74 65 78 74 3b 0a 7d 0a 2e 64 65 76 5f 70 61 67 65 5f 62 72 65 61 64 5f 63 72 75 6d 62 73 20 2e 62 72 65 61 64 63 72 75 6d 62 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 74 69 74 6c 65 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 73 74 61 74 69 63 3b 0a 7d 0a 0a 2e 64 65 76 5f 70 61 67 65 5f 68 65 61 64 20 2e 64 65 76 5f 70 61 67 65 5f 68 65 61 64 5f 6c 6f 67 6f 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 Data Ascii: ntent img.emoji { -webkit-user-drag: none; user-drag: none; cursor: text;}.dev_page_bread_crumbs .breadcrumb { margin-bottom: 10px; border-radius: 0;}#dev_page_title { position: static;}.dev_page_head .dev_page_head_logo { margin-left
2024-09-29 02:42:39 UTC	16384	IN	Data Raw: 65 78 74 66 69 65 6c 64 2d 69 74 65 6d 20 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 3a 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 36 29 3b 0a 7d 0a 2e 74 65 78 74 66 69 65 6c 64 2d 69 74 65 6d 20 69 6e 70 75 74 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 3a 2d 6d 73 2d 69 6e 70 75 74 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 63 63 63 3b 0a 20 20 63 6f 6c 6f 72 3a 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 36 29 3b 0a 7d 0a 2e 74 65 78 74 66 69 65 6c 64 2d 69 74 65 6d 2d 65 72 72 6f 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 64 34 35 61 35 38 3b 0a 20 20 70 Data Ascii: extfield-item input.form-control:focus::-moz-placeholder { color: #ccc; color: rgba(0,0,0,.26);}.textfield-item input.form-control:focus:-ms-input-placeholder { color: #ccc; color: rgba(0,0,0,.26);}.textfield-item-error { color: #d45a58; p
2024-09-29 02:42:39 UTC	16384	IN	Data Raw: 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 32 37 35 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 35 70 78 3b 0a 7d 0a 2e 62 6c 6f 67 5f 6d 65 64 69 75 6d 5f 69 6d 61 67 65 5f 77 72 61 70 2c 0a 2e 62 6c 6f 67 5f 6d 65 64 69 75 6d 5f 69 6d 61 67 65 5f 77 72 61 70 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 34 30 30 70 78 3b 0a 7d 0a 0a 2e 62 6c 6f 67 5f 77 69 64 65 5f 69 6d 61 67 65 5f 77 72 61 70 2c 0a 2e 62 6c 6f 67 5f 77 69 64 65 5f 69 6d 61 67 65 5f 77 72 61 70 20 69 6d 67 20 7b 0a 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 61 75 74 6f 3b 0a 7d 0a 23 64 65 76 5f 70 61 67 65 5f 63 6f 6e 74 65 6e 74 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 20 70 2c 0a 23 64 65 76 5f 70 61 67 65 5f Data Ascii: img { width: 275px; padding: 10px 5px;}.blog_medium_image_wrap,.blog_medium_image_wrap img { width: 400px;}.blog_wide_image_wrap,.blog_wide_image_wrap img { width: 100%; max-width: auto;}#dev_page_content .blog_image_wrap p,#dev_page_
2024-09-29 02:42:39 UTC	16384	IN	Data Raw: 75 6e 64 3a 20 23 35 64 63 33 39 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 32 32 70 78 3b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 33 70 78 20 32 34 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 34 32 70 78 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0a 7d 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 3a 68 6f 76 65 72 2c 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 3a 61 63 74 69 76 65 2c 0a 61 2e 74 67 6d 65 5f 61 63 74 69 6f 6e 5f 62 75 74 74 6f 6e 5f 6e 65 77 Data Ascii: und: #5dc390; border-radius: 22px; overflow: hidden; display: inline-block; padding: 13px 24px; height: 42px; text-transform: uppercase; vertical-align: top;}a.tgme_action_button:hover,a.tgme_action_button:active,a.tgme_action_button_new
2024-09-29 02:42:39 UTC	16384	IN	Data Raw: 68 6f 77 5f 61 6c 6c 5f 70 6c 61 74 66 6f 72 6d 73 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 74 64 5f 61 6c 6c 5f 73 68 6f 77 6e 20 73 70 61 6e 2e 74 64 5f 62 74 6e 5f 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 3b 0a 7d 0a 2e 74 64 5f 61 6c 6c 5f 73 68 6f 77 6e 20 64 69 76 2e 74 64 5f 62 74 6e 5f 68 69 64 64 65 6e 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 2e 74 64 5f 63 6f 6e 74 65 6e 74 5f 77 72 61 70 20 7b 0a 20 20 77 69 64 74 68 3a 20 34 32 30 70 78 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 61 75 74 6f 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 36 70 78 3b 0a 7d 0a 2e 74 64 5f 63 6f 6e 74 65 6e 74 5f 74 69 74 6c 65 20 7b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: how_all_platforms { display: none;}.td_all_shown span.td_btn_hidden { display: inline;}.td_all_shown div.td_btn_hidden { display: block;}.td_content_wrap { width: 420px; margin: 0 auto; font-size: 16px;}.td_content_title { font-size:
2024-09-29 02:42:39 UTC	921	IN	Data Raw: 20 7d 0a 20 20 2e 62 6c 6f 67 5f 32 69 6d 61 67 65 73 5f 77 72 61 70 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 2c 0a 20 20 2e 62 6c 6f 67 5f 33 69 6d 61 67 65 73 5f 77 72 61 70 20 2e 62 6c 6f 67 5f 69 6d 61 67 65 5f 77 72 61 70 20 7b 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 30 20 32 30 70 78 3b 0a 20 20 7d 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 33 34 30 70 78 29 20 7b 0a 20 20 2e 74 6c 5f 6d 61 69 6e 5f 64 6f 77 6e 6c 6f 61 64 5f 69 6d 61 67 65 5f 5f 61 6e 64 72 6f 69 64 20 7b 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 2d 31 30 39 70 78 20 30 20 30 20 2d 31 30 31 70 78 3b 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 20 31 39 36 70 78 20 31 Data Ascii: } .blog_2images_wrap .blog_image_wrap, .blog_3images_wrap .blog_image_wrap { float: none; margin: 20px 0 20px; }}@media (max-width: 340px) { .tl_main_download_image__android { margin: -109px 0 0 -101px; background-size: 196px 1

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
88	192.168.2.6	49820	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:39 UTC	596	OUT	GET /js/main.js?47 HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://desktop.telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
2024-09-29 02:42:39 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:39 GMT Content-Type: application/javascript Content-Length: 21478 Last-Modified: Sat, 10 Dec 2022 23:01:54 GMT Connection: close ETag: "63950fe2-53e6" Expires: Thu, 03 Oct 2024 02:42:39 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:39 UTC	15991	IN	Data Raw: 76 61 72 20 73 74 61 72 74 54 69 6d 65 20 3d 20 2b 28 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 64 54 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 27 5b 27 20 2b 20 28 28 2b 28 6e 65 77 20 44 61 74 65 28 29 29 20 2d 20 73 74 61 72 74 54 69 6d 65 29 2f 20 31 30 30 30 2e 30 29 20 2b 20 27 5d 20 27 3b 0a 7d 0a 0a 76 61 72 20 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 73 20 3d 20 5b 5d 3b 0a 66 75 6e 63 74 69 6f 6e 20 74 77 69 74 74 65 72 43 75 73 74 6f 6d 53 68 61 72 65 49 6e 69 74 20 28 29 20 7b 0a 20 20 76 61 72 20 62 74 6e 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c Data Ascii: var startTime = +(new Date());function dT() { return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';}var jsonpCallbacks = [];function twitterCustomShareInit () { var btns = document.querySelectorAll ? document.querySelectorAll
2024-09-29 02:42:39 UTC	5487	IN	Data Raw: 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 58 20 3d 20 65 2e 63 6c 69 65 6e 74 58 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 59 20 3d 20 65 2e 63 6c 69 65 6e 74 59 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 58 20 3d 20 28 63 6c 69 65 6e 74 58 20 2d 20 72 65 63 74 2e 6c 65 66 74 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 57 69 64 74 68 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 59 20 3d 20 28 63 6c 69 65 6e 74 59 20 2d 20 72 65 63 74 2e 74 6f 70 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 Data Ascii: } else { var clientX = e.clientX; var clientY = e.clientY; } var rippleX = (clientX - rect.left) - rippleMask.offsetWidth / 2; var rippleY = (clientY - rect.top) - rippleMask.offsetHeight / 2; var ripple

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
89	192.168.2.6	49821	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:40 UTC	415	OUT	GET /js/main.js?47 HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
2024-09-29 02:42:40 UTC	393	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:40 GMT Content-Type: application/javascript Content-Length: 21478 Last-Modified: Sat, 10 Dec 2022 23:01:54 GMT Connection: close ETag: "63950fe2-53e6" Expires: Thu, 03 Oct 2024 02:42:40 GMT Cache-Control: max-age=345600 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:40 UTC	15991	IN	Data Raw: 76 61 72 20 73 74 61 72 74 54 69 6d 65 20 3d 20 2b 28 6e 65 77 20 44 61 74 65 28 29 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 64 54 28 29 20 7b 0a 20 20 72 65 74 75 72 6e 20 27 5b 27 20 2b 20 28 28 2b 28 6e 65 77 20 44 61 74 65 28 29 29 20 2d 20 73 74 61 72 74 54 69 6d 65 29 2f 20 31 30 30 30 2e 30 29 20 2b 20 27 5d 20 27 3b 0a 7d 0a 0a 76 61 72 20 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 73 20 3d 20 5b 5d 3b 0a 66 75 6e 63 74 69 6f 6e 20 74 77 69 74 74 65 72 43 75 73 74 6f 6d 53 68 61 72 65 49 6e 69 74 20 28 29 20 7b 0a 20 20 76 61 72 20 62 74 6e 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c Data Ascii: var startTime = +(new Date());function dT() { return '[' + ((+(new Date()) - startTime)/ 1000.0) + '] ';}var jsonpCallbacks = [];function twitterCustomShareInit () { var btns = document.querySelectorAll ? document.querySelectorAll
2024-09-29 02:42:40 UTC	5487	IN	Data Raw: 7d 20 65 6c 73 65 20 7b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 58 20 3d 20 65 2e 63 6c 69 65 6e 74 58 3b 0a 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 6c 69 65 6e 74 59 20 3d 20 65 2e 63 6c 69 65 6e 74 59 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 58 20 3d 20 28 63 6c 69 65 6e 74 58 20 2d 20 72 65 63 74 2e 6c 65 66 74 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 57 69 64 74 68 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 59 20 3d 20 28 63 6c 69 65 6e 74 59 20 2d 20 72 65 63 74 2e 74 6f 70 29 20 2d 20 72 69 70 70 6c 65 4d 61 73 6b 2e 6f 66 66 73 65 74 48 65 69 67 68 74 20 2f 20 32 3b 0a 20 20 20 20 20 20 20 20 76 61 72 20 72 69 70 70 6c 65 Data Ascii: } else { var clientX = e.clientX; var clientY = e.clientY; } var rippleX = (clientX - rect.left) - rippleMask.offsetWidth / 2; var rippleY = (clientY - rect.top) - rippleMask.offsetHeight / 2; var ripple

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
90	192.168.2.6	49822	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:40 UTC	678	OUT	GET /img/twitter.png HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://desktop.telegram.org/css/telegram.css?241 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
2024-09-29 02:42:40 UTC	337	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:40 GMT Content-Type: image/png Content-Length: 1272 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-4f8" Expires: Thu, 03 Oct 2024 02:42:40 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:40 UTC	1272	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 11 08 06 00 00 00 32 86 e7 80 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
91	192.168.2.6	49823	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:40 UTC	680	OUT	GET /img/td_laptop.png HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://desktop.telegram.org/css/telegram.css?241 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
2024-09-29 02:42:41 UTC	341	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:40 GMT Content-Type: image/png Content-Length: 189734 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-2e526" Expires: Thu, 03 Oct 2024 02:42:40 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:41 UTC	16043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 48 00 00 01 e7 08 06 00 00 00 82 32 7d c9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 02 e4 c8 49 44 41 54 78 da ec bd 07 94 25 67 75 ef fb af 70 f2 39 9d a7 7b f2 68 46 a3 9c 03 92 10 0a 48 02 91 44 32 5c 1b 1b 3f 30 ef 82 6d e2 ba 60 cc 03 79 f9 1a 03 36 b6 65 bc 8c 7d b1 cd 23 18 1e 0b 58 80 01 03 b6 11 58 02 84 04 48 02 84 40 12 ca d2 e4 d4 f1 e4 53 f9 ed bd bf aa ee 9e 56 f7 4c 2b cc 68 46 b3 7f a3 52 9f 50 e1 ab af c2 d9 ff da e1 b3 92 24 81 f2 c4 b9 ea aa ab 16 fb 78 2d 4d 2f a3 e9 72 9a 4e 4b df f7 6b 6f 29 8a a2 28 8a a2 28 4f 00 8f a6 29 9a 1e a0 e9 76 9a fe 9b a6 ef dd 78 e3 8d 91 76 cd 53 8f a5 02 e9 29 15 48 97 d0 74 Data Ascii: PNGIHDRH2}tEXtSoftwareAdobe ImageReadyqe<IDATx%gup9{hFHD2\?0m`y6e}#XXH@SVL+hFRP$x-M/rNKko)((O)vxvS)Ht
2024-09-29 02:42:41 UTC	16384	IN	Data Raw: 6c a5 f9 de 94 a5 aa d2 2d 66 84 3f 46 a4 1d 24 e7 67 6e de a5 43 e5 16 0b 01 5c 4e 71 86 a5 4a 80 2f fc cc fc b5 16 f5 a8 cd 2f 6b ae 12 43 51 81 a4 1c f1 dc 76 f3 cd f8 b7 2f 7e 01 b5 d1 95 68 93 c1 39 38 38 20 37 2f 16 3f ec 91 b9 ec f2 cb 51 ae 96 71 f5 f3 af 16 c1 c4 9f 9b a7 43 b6 fc 48 f1 cd 8e c5 00 8b 06 fe 6e b6 8c af 78 97 5c 09 87 fb ca 57 be 22 1e 98 03 31 31 31 81 0b 2e b8 00 27 9c 70 82 78 0f d8 58 66 f1 c1 1e 05 16 32 99 f0 98 4f e6 59 60 83 9b b7 ff 8b 5f fc 42 8c 07 36 9c b9 b2 d4 1d 77 dc 81 1f ff f8 c7 22 8a b8 9d bc 0e f6 4a 5c 76 d9 65 12 ba c7 cb b3 b0 61 8f 14 7b 96 b2 1b 3d 0b bb cf 7f fe f3 f8 dc e7 3e 87 b7 bc e5 2d b8 ee ba eb 44 10 5d 75 d5 55 62 ac b3 07 88 ab f6 f1 36 59 fc f0 7e 5f 7a e9 a5 e2 5d 9a 0f 6f 8f 45 00 17 ae b8 Data Ascii: l-f?F$gnC\NqJ//kCQv/~h988 7/?QqCHnx\W"111.'pxXf2OY`_B6w"J\vea{=>-D]uUb6Y~_z]oE
2024-09-29 02:42:41 UTC	16384	IN	Data Raw: e6 07 11 2e 52 e1 90 96 06 05 3b 25 22 00 9a c1 4a d5 29 b7 05 c2 e4 22 9d af c8 11 eb d8 48 44 61 21 b4 c1 2c 24 a2 a9 23 00 c3 88 49 a6 95 6f 43 30 19 f3 b1 20 00 47 5d 4e 82 da 17 17 78 22 25 0c 42 d9 1d d4 6d 84 56 87 2c 16 13 53 9b fa d6 42 c0 ae ed 4c bd f7 49 b2 eb 59 af 25 19 27 28 f6 f9 44 2b 47 21 88 c9 a8 57 2b 73 0c 41 e8 bc 85 92 76 93 81 52 87 4a 10 05 28 31 10 60 84 53 84 b2 9b b1 62 08 45 65 8d 72 45 54 21 80 41 69 28 00 29 72 82 0d 18 f7 16 03 87 b1 6a 91 ca 48 eb 8b ac 11 b4 57 47 ab 56 47 a9 5a 06 03 27 15 41 d4 06 38 88 13 0b 60 90 9d c7 e7 11 3e 53 c5 91 11 01 9b b8 bf 61 99 e2 68 59 8e 39 a9 35 49 c1 f7 87 01 93 cd fa b2 ac 09 d8 28 80 a3 28 50 3d cc 46 24 f2 d4 56 bd 4e 4e 61 dc e6 f3 15 d1 3a ee 43 b1 36 47 6b b9 8f 6b a6 4a 0c 98 Data Ascii: .R;%"J)"HDa!,$#IoC0 G]Nx"%BmV,SBLIY%'(D+G!W+sAvRJ(1`SbEerET!Ai()rjHWGVGZ'A8`>SahY95I((P=F$VNNa:C6GkkJ
2024-09-29 02:42:41 UTC	16384	IN	Data Raw: e5 f5 a6 cf bf fd 99 6e f2 4f 1e 7d f4 d1 0f 85 48 3e f4 20 fd 8c d2 d9 73 b8 5f ab f4 2d 26 6f f2 b7 75 5c 88 97 4c ef 43 53 29 87 92 b0 6a 4d 97 d7 9f 85 b7 ed 55 36 ad 5c ea b7 76 5e 8a a2 bc 01 26 ca 4e dd 3e 52 17 ef 1b 5a c6 67 f6 ce e2 e7 37 a6 d1 2c 41 fa 7f db d5 82 4e 49 1e 7a e4 eb 1f 1e 98 c2 8b d6 37 f0 6f 27 e7 f2 92 f0 c4 71 6c 26 8f fe 96 18 3e 29 7f 6b 96 60 be 28 f7 e5 e5 5b 1b f1 a6 0b 5b f1 a8 24 1b 9b 5a a2 f8 1f df 1f c5 2f ef 6a c6 15 7d 29 e4 24 61 49 4a 80 bf 41 92 99 3f 7a 51 27 9e 9c c8 4b 12 53 c6 67 1e 9f 65 0e d8 dd 10 c5 27 6e ee 93 df e7 d0 2f c9 53 b6 e4 62 46 02 7e 7a 30 bd ff ce 71 5e 47 72 01 ac 6f 8a e2 a3 f7 4e e2 f8 5c 81 bd 28 2f 1e 68 c0 af 5d dc 8a 41 49 30 68 47 fe df 63 33 d8 26 c9 c9 84 24 36 2d b2 5f 13 b2 0d Data Ascii: nO}H> s_-&ou\LCS)jMU6\v^&N>RZg7,ANIz7o'ql&>)k`([[$Z/j})$aIJA?zQ'KSge'n/SbF~z0q^GroN\(/h]AI0hGc3&$6-_
2024-09-29 02:42:41 UTC	16384	IN	Data Raw: 93 95 64 f0 74 66 0a ad 89 06 06 fa ad 89 34 87 c5 11 29 22 22 41 f9 36 2d f1 94 fc 6d 89 e5 a6 b3 b2 af d4 06 d5 5a 32 22 10 b3 b9 65 a4 63 71 56 96 24 90 df 28 09 f5 8c 6c 8b 08 0c c9 8d c7 23 2a 8f ad 1c 71 38 27 2a 25 d7 a5 b0 c0 86 a8 cb 39 42 d4 16 79 99 e8 b7 a4 fe 8d 3d 3f 8e cd ef d5 f2 11 5e 2e 6e 47 78 3c d3 48 20 21 c9 46 63 34 c1 5e 14 37 aa 8e 4d 70 f9 60 5b 2c 33 4e 79 4a 0b e3 92 58 a6 25 b1 c8 ca 7e 29 79 7a ca f1 21 a5 38 e3 91 f1 da 22 82 13 29 7b db a6 df 68 4c c8 5b 15 e3 6d 27 b9 0f 0d d4 87 88 f2 de 9d ca 4c f0 38 d1 58 b6 c8 ed 2c 15 72 bc 0e b5 41 e3 4a e3 4b 63 d3 24 b7 45 24 8a 88 31 ad 4f 02 13 6d 72 bc 52 3c 5e 51 ef 6c 08 8e 57 22 a2 3c e6 94 17 d8 24 b7 cd 5e 2b 41 21 85 8b 28 f0 f1 75 91 d2 6d d1 76 28 c4 91 c6 80 be 27 af Data Ascii: dtf4)""A6-mZ2"ecqV$(l#q8'%9By=?^.nGx<H !Fc4^7Mp`[,3NyJX%~)yz!8"){hL[m'L8X,rAJKc$E$1OmrR<^QlW"<$^+A!(umv('
2024-09-29 02:42:41 UTC	16384	IN	Data Raw: 9d ef fd 08 83 47 8e f2 9c d1 c3 fb c7 f0 86 b6 33 f1 ea 17 5c 80 2d 67 1c 43 39 2c 61 d3 19 cb 50 9f a8 61 c3 ca b5 38 30 34 89 91 e3 87 d0 b9 a0 86 81 fe 83 e8 5a b4 19 ab d6 ad 47 b9 5c c2 54 65 0c 95 4a 0d a3 03 fd e8 cd bb 3b b7 39 62 01 cf 68 fb 75 06 c2 a5 d2 a4 66 ac 4f c2 be f9 e4 04 fe ea f6 61 2e 3e ef 2c cd 3e 65 ae 18 08 14 4b 02 8f 0e d6 f0 b6 1b 06 f1 c1 cb e7 71 ea 5d 6e b9 cd 0e 1e 19 41 54 19 6b ad 19 93 52 25 0d d3 9a 3f 8e 85 07 a0 60 23 32 81 5f 6b 82 86 94 bc e6 51 85 34 9b b6 bf 8e 34 91 97 88 01 83 6d 61 9c ae 7b 82 ae 95 71 91 20 78 3a 43 7e 4b 1d 4b 5e 02 60 92 f2 a2 0c 75 b6 0d 54 c4 cd a2 43 26 45 ce 41 01 9d 1e 26 92 1e 74 20 50 b8 ad 33 12 53 f7 8a 90 c1 8b 23 35 30 6d 66 66 38 68 86 bc 16 12 b2 a5 3a 48 8a 2c 85 81 d1 75 d2 Data Ascii: G3\-gC9,aPa804ZG\TeJ;9bhufOa.>,>eKq]nATkR%?`#2_kQ44ma{q x:C~KK^`uTC&EA&t P3S#50mff8h:H,u
2024-09-29 02:42:41 UTC	16384	IN	Data Raw: 97 32 96 60 57 54 ac 3b d4 0a a3 dc 43 7c 3e 21 1c b5 2e 51 bc 64 82 ee 5a a8 dd 89 02 0c e4 0b 50 36 5c 28 04 57 93 08 33 a0 25 68 6b 46 84 cf 35 cd bd 11 7c e3 41 1b 78 ce 72 67 04 4a bc df 30 e4 b9 62 74 e3 04 10 d2 78 24 0b e9 bb 85 5a d0 c8 b3 95 e5 37 32 89 9c 0e bd e5 e4 bf 2d 42 58 7a ff 88 66 1c cb 34 db 71 7d 33 0e 90 e2 e5 ff 48 a9 6e 2c 65 56 a1 70 63 1d be fa e6 5b 54 d6 78 e1 72 d8 51 1f f2 62 c3 86 4d f0 79 7d 70 d0 3c 47 6c 31 35 b1 9d 76 98 cc ec 81 4e 5d a2 a6 bf f6 2a fe 71 e3 4d 58 f3 eb 4a cc 7b f8 7b 94 dc 5e 8a db a7 3f 08 d1 2f 23 20 05 91 2f 17 a2 8f dc 13 0e c1 7e c0 36 bc f0 c2 0b 18 37 6e 1c 73 93 a2 4a 2f 05 33 14 88 cc 9c 39 13 9f 7e fa 29 8b 35 a2 d6 a5 fb ee bb 4f 01 75 e4 77 aa 04 9f 7b ee b9 ec 33 55 92 29 81 02 75 7d 53 Data Ascii: 2`WT;C\|>!.QdZP6\(W3%hkF5\|AxrgJ0btx$Z72-BXzf4q}3Hn,eVpc[TxrQbMy}p<Gl15vN]*qMXJ{{^?/# /~67nsJ/39~)5Ouw{3U)u}S
2024-09-29 02:42:41 UTC	16384	IN	Data Raw: db f6 88 09 ab 1f 59 3c 77 9c 75 6c e7 41 ba 99 e6 41 ba a8 5b 7c a2 c4 4b bc 90 f2 eb ca 39 58 bd 75 21 51 76 9d 40 14 25 b5 a8 28 ce cc 3a 21 b2 e4 8f 6a 3c 0e 83 53 32 df 0f e6 f1 47 90 c4 66 0a b9 ac 9a 85 38 63 93 59 e6 6c 52 d4 6e 24 88 3a 44 10 14 4e 3c 51 44 54 1c 8d a8 26 30 e2 c0 49 8f 3f 12 34 aa 6b 41 56 94 78 18 40 91 8c 18 ab 4c 0c 2e 6a c6 12 a7 85 03 89 da ae 28 53 ee b9 5b 8c 68 a0 10 57 ea 50 76 a9 69 ee 33 01 a6 66 4a 50 2c 1b 9d 1c 53 8f 24 46 83 37 49 8a a6 bb 6e 29 a1 6d 34 00 92 b9 25 4d e9 9b c8 40 4d 18 1d da e6 12 25 fa ec 03 e6 41 a2 6c 5e 5b d6 6f 80 07 76 b4 6b 9d 84 84 b4 54 38 2c 40 f1 fe 6a b4 4e 4f 42 75 4d 23 52 52 5c a8 ad f3 a1 6d 9b 0c d4 56 54 a1 ae b2 98 28 b2 6f 62 cc d4 71 a8 d8 be 04 93 5e 5b 48 14 cc 07 b0 6f d7 Data Ascii: Y<wulAA[\|K9Xu!Qv@%(:!j<S2Gf8cYlRn$:DN<QDT&0I?4kAVx@L.j(S[hWPvi3fJP,S$F7In)m4%M@M%Al^[ovkT8,@jNOBuM#RR\mVT(obq^[Ho
2024-09-29 02:42:41 UTC	16384	IN	Data Raw: ba 11 24 67 d5 1f 41 66 5a 1a 97 02 f7 b3 fb de 1f 8c 20 37 33 87 39 c6 41 b4 cb 83 a9 6d 91 5a 61 a0 c1 87 57 9e 7e 14 07 9a b3 f0 d0 dd bf 02 6b 01 94 a9 52 55 57 83 f4 cc 2c ce 3e 10 0b d8 d0 54 c7 fc 6e 37 bc 0c ac 45 d8 3b 20 de 13 a5 af 8d 0d 8d 7c 9d ac e4 54 b6 55 04 35 f5 f5 48 65 cf 42 1b 31 9c 66 79 77 3a df cc 99 6e 6a f1 21 2b 2b 9b ee 0c f8 d8 33 dd e5 76 5a 8e c7 17 e3 ea f1 10 cb d9 fb de c0 e0 fc 69 e8 e9 cd e4 21 8c 0b 0f fe 17 29 29 bd 31 3a b7 07 1b 73 07 3f 47 74 6e b7 9e 5c 89 d5 d5 65 b8 b2 cf a5 d8 57 b3 0a 5b 1b 4e a2 13 7b 8e 1d 63 ef ef ef 95 ce 42 12 03 db d1 48 0b 9e df f1 12 3b 47 79 c8 f1 e4 62 72 d7 f1 d8 5a b9 02 3e b8 71 bc f9 38 f2 93 32 11 94 6d 68 f2 d7 62 42 f1 34 e4 52 dd 40 53 ce 21 85 cd 3d bd ef 59 9c 5f 78 2e f2 Data Ascii: $gAfZ 739AmZaW~kRUW,>Tn7E; \|TU5HeB1fyw:nj!++3vZi!))1:s?Gtn\eW[N{cBH;GybrZ>q82mhbB4R@S!=Y_x.
2024-09-29 02:42:41 UTC	16384	IN	Data Raw: c8 44 21 cd b1 4d 62 3b 3f 86 3d 03 0b 49 df 2c d3 68 58 d4 83 38 0b ed e5 be c2 c2 95 31 c4 cd c5 40 10 6f 11 4b a7 53 66 7f b9 a3 46 bf e3 f8 81 93 30 88 cd 18 c4 59 13 13 51 83 15 ab 5e 26 32 d2 c3 85 6b 89 b3 f0 50 ed 0f 19 09 63 ce b3 2e 05 53 ed b9 7d 1e 71 30 88 61 39 e3 9a ac b1 31 0c 2b 1a c5 c9 10 64 a9 b6 52 5f 64 a5 be c1 24 8b e0 7d 65 a5 30 3a eb aa cc 5a 33 01 52 04 e1 83 89 9f c2 22 c2 24 1d 57 5b db ca d0 6c 90 60 b6 df de b6 a1 9c 3f b3 ad ba a3 86 cc ac 23 b2 98 d9 61 11 6e 18 d2 39 d4 1d e9 47 8e 28 03 e0 a8 cb 3a 58 0d 86 35 86 ca ba 2e 91 5a 67 ce fa eb ce 6d 58 ce b9 f4 4a a5 03 cf 3a 23 ec a8 df 92 ed 22 22 c3 80 5d c9 61 62 3b fe 86 64 17 a4 c0 27 24 49 32 e8 8b d5 d8 35 85 99 24 6b 98 3b bc 32 22 a2 0b c2 0d 2b 9d ce 63 52 8d 9b Data Ascii: D!Mb;?=I,hX81@oKSfF0YQ^&2kPc.S}q0a91+dR_d$}e0:Z3R"$W[l`?#an9G(:X5.ZgmXJ:#""]ab;d'$I25$k;2"+cR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
92	192.168.2.6	49824	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:41 UTC	417	OUT	GET /img/twitter.png HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
2024-09-29 02:42:41 UTC	337	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:41 GMT Content-Type: image/png Content-Length: 1272 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-4f8" Expires: Thu, 03 Oct 2024 02:42:41 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:41 UTC	1272	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 15 00 00 00 11 08 06 00 00 00 32 86 e7 80 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR2tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
93	192.168.2.6	49825	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:41 UTC	658	OUT	GET /img/favicon.ico HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://desktop.telegram.org/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
2024-09-29 02:42:42 UTC	383	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:42 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT Connection: close ETag: "62616083-3aee" Expires: Sun, 06 Oct 2024 02:42:42 GMT Cache-Control: max-age=604800 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:42 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 9e 22 0d d9 9e 22 36 d9 9e 22 6f d9 9e 22 a4 d9 9e 22 cd d9 9e 22 e7 d9 9e 22 f7 d9 9e 22 fe d9 9e 22 fe d9 9e 22 f7 d9 9e 22 e7 d9 9e 22 cd d9 9e 22 a4 d9 9e 22 6f d9 9e 22 36 da 9e 23 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $""6"o"""""""""""o"6#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
94	192.168.2.6	49826	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:42 UTC	419	OUT	GET /img/td_laptop.png HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
2024-09-29 02:42:42 UTC	341	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:42 GMT Content-Type: image/png Content-Length: 189734 Last-Modified: Fri, 10 Nov 2017 17:54:14 GMT Connection: close ETag: "5a05e7c6-2e526" Expires: Thu, 03 Oct 2024 02:42:42 GMT Cache-Control: max-age=345600 Access-Control-Allow-Origin: * Accept-Ranges: bytes
2024-09-29 02:42:42 UTC	16043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 48 00 00 01 e7 08 06 00 00 00 82 32 7d c9 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 02 e4 c8 49 44 41 54 78 da ec bd 07 94 25 67 75 ef fb af 70 f2 39 9d a7 7b f2 68 46 a3 9c 03 92 10 0a 48 02 91 44 32 5c 1b 1b 3f 30 ef 82 6d e2 ba 60 cc 03 79 f9 1a 03 36 b6 65 bc 8c 7d b1 cd 23 18 1e 0b 58 80 01 03 b6 11 58 02 84 04 48 02 84 40 12 ca d2 e4 d4 f1 e4 53 f9 ed bd bf aa ee 9e 56 f7 4c 2b cc 68 46 b3 7f a3 52 9f 50 e1 ab af c2 d9 ff da e1 b3 92 24 81 f2 c4 b9 ea aa ab 16 fb 78 2d 4d 2f a3 e9 72 9a 4e 4b df f7 6b 6f 29 8a a2 28 8a a2 28 4f 00 8f a6 29 9a 1e a0 e9 76 9a fe 9b a6 ef dd 78 e3 8d 91 76 cd 53 8f a5 02 e9 29 15 48 97 d0 74 Data Ascii: PNGIHDRH2}tEXtSoftwareAdobe ImageReadyqe<IDATx%gup9{hFHD2\?0m`y6e}#XXH@SVL+hFRP$x-M/rNKko)((O)vxvS)Ht
2024-09-29 02:42:42 UTC	16384	IN	Data Raw: 6c a5 f9 de 94 a5 aa d2 2d 66 84 3f 46 a4 1d 24 e7 67 6e de a5 43 e5 16 0b 01 5c 4e 71 86 a5 4a 80 2f fc cc fc b5 16 f5 a8 cd 2f 6b ae 12 43 51 81 a4 1c f1 dc 76 f3 cd f8 b7 2f 7e 01 b5 d1 95 68 93 c1 39 38 38 20 37 2f 16 3f ec 91 b9 ec f2 cb 51 ae 96 71 f5 f3 af 16 c1 c4 9f 9b a7 43 b6 fc 48 f1 cd 8e c5 00 8b 06 fe 6e b6 8c af 78 97 5c 09 87 fb ca 57 be 22 1e 98 03 31 31 31 81 0b 2e b8 00 27 9c 70 82 78 0f d8 58 66 f1 c1 1e 05 16 32 99 f0 98 4f e6 59 60 83 9b b7 ff 8b 5f fc 42 8c 07 36 9c b9 b2 d4 1d 77 dc 81 1f ff f8 c7 22 8a b8 9d bc 0e f6 4a 5c 76 d9 65 12 ba c7 cb b3 b0 61 8f 14 7b 96 b2 1b 3d 0b bb cf 7f fe f3 f8 dc e7 3e 87 b7 bc e5 2d b8 ee ba eb 44 10 5d 75 d5 55 62 ac b3 07 88 ab f6 f1 36 59 fc f0 7e 5f 7a e9 a5 e2 5d 9a 0f 6f 8f 45 00 17 ae b8 Data Ascii: l-f?F$gnC\NqJ//kCQv/~h988 7/?QqCHnx\W"111.'pxXf2OY`_B6w"J\vea{=>-D]uUb6Y~_z]oE
2024-09-29 02:42:42 UTC	16384	IN	Data Raw: e6 07 11 2e 52 e1 90 96 06 05 3b 25 22 00 9a c1 4a d5 29 b7 05 c2 e4 22 9d af c8 11 eb d8 48 44 61 21 b4 c1 2c 24 a2 a9 23 00 c3 88 49 a6 95 6f 43 30 19 f3 b1 20 00 47 5d 4e 82 da 17 17 78 22 25 0c 42 d9 1d d4 6d 84 56 87 2c 16 13 53 9b fa d6 42 c0 ae ed 4c bd f7 49 b2 eb 59 af 25 19 27 28 f6 f9 44 2b 47 21 88 c9 a8 57 2b 73 0c 41 e8 bc 85 92 76 93 81 52 87 4a 10 05 28 31 10 60 84 53 84 b2 9b b1 62 08 45 65 8d 72 45 54 21 80 41 69 28 00 29 72 82 0d 18 f7 16 03 87 b1 6a 91 ca 48 eb 8b ac 11 b4 57 47 ab 56 47 a9 5a 06 03 27 15 41 d4 06 38 88 13 0b 60 90 9d c7 e7 11 3e 53 c5 91 11 01 9b b8 bf 61 99 e2 68 59 8e 39 a9 35 49 c1 f7 87 01 93 cd fa b2 ac 09 d8 28 80 a3 28 50 3d cc 46 24 f2 d4 56 bd 4e 4e 61 dc e6 f3 15 d1 3a ee 43 b1 36 47 6b b9 8f 6b a6 4a 0c 98 Data Ascii: .R;%"J)"HDa!,$#IoC0 G]Nx"%BmV,SBLIY%'(D+G!W+sAvRJ(1`SbEerET!Ai()rjHWGVGZ'A8`>SahY95I((P=F$VNNa:C6GkkJ
2024-09-29 02:42:42 UTC	16384	IN	Data Raw: e5 f5 a6 cf bf fd 99 6e f2 4f 1e 7d f4 d1 0f 85 48 3e f4 20 fd 8c d2 d9 73 b8 5f ab f4 2d 26 6f f2 b7 75 5c 88 97 4c ef 43 53 29 87 92 b0 6a 4d 97 d7 9f 85 b7 ed 55 36 ad 5c ea b7 76 5e 8a a2 bc 01 26 ca 4e dd 3e 52 17 ef 1b 5a c6 67 f6 ce e2 e7 37 a6 d1 2c 41 fa 7f db d5 82 4e 49 1e 7a e4 eb 1f 1e 98 c2 8b d6 37 f0 6f 27 e7 f2 92 f0 c4 71 6c 26 8f fe 96 18 3e 29 7f 6b 96 60 be 28 f7 e5 e5 5b 1b f1 a6 0b 5b f1 a8 24 1b 9b 5a a2 f8 1f df 1f c5 2f ef 6a c6 15 7d 29 e4 24 61 49 4a 80 bf 41 92 99 3f 7a 51 27 9e 9c c8 4b 12 53 c6 67 1e 9f 65 0e d8 dd 10 c5 27 6e ee 93 df e7 d0 2f c9 53 b6 e4 62 46 02 7e 7a 30 bd ff ce 71 5e 47 72 01 ac 6f 8a e2 a3 f7 4e e2 f8 5c 81 bd 28 2f 1e 68 c0 af 5d dc 8a 41 49 30 68 47 fe df 63 33 d8 26 c9 c9 84 24 36 2d b2 5f 13 b2 0d Data Ascii: nO}H> s_-&ou\LCS)jMU6\v^&N>RZg7,ANIz7o'ql&>)k`([[$Z/j})$aIJA?zQ'KSge'n/SbF~z0q^GroN\(/h]AI0hGc3&$6-_
2024-09-29 02:42:42 UTC	16384	IN	Data Raw: 93 95 64 f0 74 66 0a ad 89 06 06 fa ad 89 34 87 c5 11 29 22 22 41 f9 36 2d f1 94 fc 6d 89 e5 a6 b3 b2 af d4 06 d5 5a 32 22 10 b3 b9 65 a4 63 71 56 96 24 90 df 28 09 f5 8c 6c 8b 08 0c c9 8d c7 23 2a 8f ad 1c 71 38 27 2a 25 d7 a5 b0 c0 86 a8 cb 39 42 d4 16 79 99 e8 b7 a4 fe 8d 3d 3f 8e cd ef d5 f2 11 5e 2e 6e 47 78 3c d3 48 20 21 c9 46 63 34 c1 5e 14 37 aa 8e 4d 70 f9 60 5b 2c 33 4e 79 4a 0b e3 92 58 a6 25 b1 c8 ca 7e 29 79 7a ca f1 21 a5 38 e3 91 f1 da 22 82 13 29 7b db a6 df 68 4c c8 5b 15 e3 6d 27 b9 0f 0d d4 87 88 f2 de 9d ca 4c f0 38 d1 58 b6 c8 ed 2c 15 72 bc 0e b5 41 e3 4a e3 4b 63 d3 24 b7 45 24 8a 88 31 ad 4f 02 13 6d 72 bc 52 3c 5e 51 ef 6c 08 8e 57 22 a2 3c e6 94 17 d8 24 b7 cd 5e 2b 41 21 85 8b 28 f0 f1 75 91 d2 6d d1 76 28 c4 91 c6 80 be 27 af Data Ascii: dtf4)""A6-mZ2"ecqV$(l#q8'%9By=?^.nGx<H !Fc4^7Mp`[,3NyJX%~)yz!8"){hL[m'L8X,rAJKc$E$1OmrR<^QlW"<$^+A!(umv('
2024-09-29 02:42:42 UTC	16384	IN	Data Raw: 9d ef fd 08 83 47 8e f2 9c d1 c3 fb c7 f0 86 b6 33 f1 ea 17 5c 80 2d 67 1c 43 39 2c 61 d3 19 cb 50 9f a8 61 c3 ca b5 38 30 34 89 91 e3 87 d0 b9 a0 86 81 fe 83 e8 5a b4 19 ab d6 ad 47 b9 5c c2 54 65 0c 95 4a 0d a3 03 fd e8 cd bb 3b b7 39 62 01 cf 68 fb 75 06 c2 a5 d2 a4 66 ac 4f c2 be f9 e4 04 fe ea f6 61 2e 3e ef 2c cd 3e 65 ae 18 08 14 4b 02 8f 0e d6 f0 b6 1b 06 f1 c1 cb e7 71 ea 5d 6e b9 cd 0e 1e 19 41 54 19 6b ad 19 93 52 25 0d d3 9a 3f 8e 85 07 a0 60 23 32 81 5f 6b 82 86 94 bc e6 51 85 34 9b b6 bf 8e 34 91 97 88 01 83 6d 61 9c ae 7b 82 ae 95 71 91 20 78 3a 43 7e 4b 1d 4b 5e 02 60 92 f2 a2 0c 75 b6 0d 54 c4 cd a2 43 26 45 ce 41 01 9d 1e 26 92 1e 74 20 50 b8 ad 33 12 53 f7 8a 90 c1 8b 23 35 30 6d 66 66 38 68 86 bc 16 12 b2 a5 3a 48 8a 2c 85 81 d1 75 d2 Data Ascii: G3\-gC9,aPa804ZG\TeJ;9bhufOa.>,>eKq]nATkR%?`#2_kQ44ma{q x:C~KK^`uTC&EA&t P3S#50mff8h:H,u
2024-09-29 02:42:42 UTC	16384	IN	Data Raw: 97 32 96 60 57 54 ac 3b d4 0a a3 dc 43 7c 3e 21 1c b5 2e 51 bc 64 82 ee 5a a8 dd 89 02 0c e4 0b 50 36 5c 28 04 57 93 08 33 a0 25 68 6b 46 84 cf 35 cd bd 11 7c e3 41 1b 78 ce 72 67 04 4a bc df 30 e4 b9 62 74 e3 04 10 d2 78 24 0b e9 bb 85 5a d0 c8 b3 95 e5 37 32 89 9c 0e bd e5 e4 bf 2d 42 58 7a ff 88 66 1c cb 34 db 71 7d 33 0e 90 e2 e5 ff 48 a9 6e 2c 65 56 a1 70 63 1d be fa e6 5b 54 d6 78 e1 72 d8 51 1f f2 62 c3 86 4d f0 79 7d 70 d0 3c 47 6c 31 35 b1 9d 76 98 cc ec 81 4e 5d a2 a6 bf f6 2a fe 71 e3 4d 58 f3 eb 4a cc 7b f8 7b 94 dc 5e 8a db a7 3f 08 d1 2f 23 20 05 91 2f 17 a2 8f dc 13 0e c1 7e c0 36 bc f0 c2 0b 18 37 6e 1c 73 93 a2 4a 2f 05 33 14 88 cc 9c 39 13 9f 7e fa 29 8b 35 a2 d6 a5 fb ee bb 4f 01 75 e4 77 aa 04 9f 7b ee b9 ec 33 55 92 29 81 02 75 7d 53 Data Ascii: 2`WT;C\|>!.QdZP6\(W3%hkF5\|AxrgJ0btx$Z72-BXzf4q}3Hn,eVpc[TxrQbMy}p<Gl15vN]*qMXJ{{^?/# /~67nsJ/39~)5Ouw{3U)u}S
2024-09-29 02:42:42 UTC	16384	IN	Data Raw: db f6 88 09 ab 1f 59 3c 77 9c 75 6c e7 41 ba 99 e6 41 ba a8 5b 7c a2 c4 4b bc 90 f2 eb ca 39 58 bd 75 21 51 76 9d 40 14 25 b5 a8 28 ce cc 3a 21 b2 e4 8f 6a 3c 0e 83 53 32 df 0f e6 f1 47 90 c4 66 0a b9 ac 9a 85 38 63 93 59 e6 6c 52 d4 6e 24 88 3a 44 10 14 4e 3c 51 44 54 1c 8d a8 26 30 e2 c0 49 8f 3f 12 34 aa 6b 41 56 94 78 18 40 91 8c 18 ab 4c 0c 2e 6a c6 12 a7 85 03 89 da ae 28 53 ee b9 5b 8c 68 a0 10 57 ea 50 76 a9 69 ee 33 01 a6 66 4a 50 2c 1b 9d 1c 53 8f 24 46 83 37 49 8a a6 bb 6e 29 a1 6d 34 00 92 b9 25 4d e9 9b c8 40 4d 18 1d da e6 12 25 fa ec 03 e6 41 a2 6c 5e 5b d6 6f 80 07 76 b4 6b 9d 84 84 b4 54 38 2c 40 f1 fe 6a b4 4e 4f 42 75 4d 23 52 52 5c a8 ad f3 a1 6d 9b 0c d4 56 54 a1 ae b2 98 28 b2 6f 62 cc d4 71 a8 d8 be 04 93 5e 5b 48 14 cc 07 b0 6f d7 Data Ascii: Y<wulAA[\|K9Xu!Qv@%(:!j<S2Gf8cYlRn$:DN<QDT&0I?4kAVx@L.j(S[hWPvi3fJP,S$F7In)m4%M@M%Al^[ovkT8,@jNOBuM#RR\mVT(obq^[Ho
2024-09-29 02:42:42 UTC	16384	IN	Data Raw: ba 11 24 67 d5 1f 41 66 5a 1a 97 02 f7 b3 fb de 1f 8c 20 37 33 87 39 c6 41 b4 cb 83 a9 6d 91 5a 61 a0 c1 87 57 9e 7e 14 07 9a b3 f0 d0 dd bf 02 6b 01 94 a9 52 55 57 83 f4 cc 2c ce 3e 10 0b d8 d0 54 c7 fc 6e 37 bc 0c ac 45 d8 3b 20 de 13 a5 af 8d 0d 8d 7c 9d ac e4 54 b6 55 04 35 f5 f5 48 65 cf 42 1b 31 9c 66 79 77 3a df cc 99 6e 6a f1 21 2b 2b 9b ee 0c f8 d8 33 dd e5 76 5a 8e c7 17 e3 ea f1 10 cb d9 fb de c0 e0 fc 69 e8 e9 cd e4 21 8c 0b 0f fe 17 29 29 bd 31 3a b7 07 1b 73 07 3f 47 74 6e b7 9e 5c 89 d5 d5 65 b8 b2 cf a5 d8 57 b3 0a 5b 1b 4e a2 13 7b 8e 1d 63 ef ef ef 95 ce 42 12 03 db d1 48 0b 9e df f1 12 3b 47 79 c8 f1 e4 62 72 d7 f1 d8 5a b9 02 3e b8 71 bc f9 38 f2 93 32 11 94 6d 68 f2 d7 62 42 f1 34 e4 52 dd 40 53 ce 21 85 cd 3d bd ef 59 9c 5f 78 2e f2 Data Ascii: $gAfZ 739AmZaW~kRUW,>Tn7E; \|TU5HeB1fyw:nj!++3vZi!))1:s?Gtn\eW[N{cBH;GybrZ>q82mhbB4R@S!=Y_x.
2024-09-29 02:42:42 UTC	16384	IN	Data Raw: c8 44 21 cd b1 4d 62 3b 3f 86 3d 03 0b 49 df 2c d3 68 58 d4 83 38 0b ed e5 be c2 c2 95 31 c4 cd c5 40 10 6f 11 4b a7 53 66 7f b9 a3 46 bf e3 f8 81 93 30 88 cd 18 c4 59 13 13 51 83 15 ab 5e 26 32 d2 c3 85 6b 89 b3 f0 50 ed 0f 19 09 63 ce b3 2e 05 53 ed b9 7d 1e 71 30 88 61 39 e3 9a ac b1 31 0c 2b 1a c5 c9 10 64 a9 b6 52 5f 64 a5 be c1 24 8b e0 7d 65 a5 30 3a eb aa cc 5a 33 01 52 04 e1 83 89 9f c2 22 c2 24 1d 57 5b db ca d0 6c 90 60 b6 df de b6 a1 9c 3f b3 ad ba a3 86 cc ac 23 b2 98 d9 61 11 6e 18 d2 39 d4 1d e9 47 8e 28 03 e0 a8 cb 3a 58 0d 86 35 86 ca ba 2e 91 5a 67 ce fa eb ce 6d 58 ce b9 f4 4a a5 03 cf 3a 23 ec a8 df 92 ed 22 22 c3 80 5d c9 61 62 3b fe 86 64 17 a4 c0 27 24 49 32 e8 8b d5 d8 35 85 99 24 6b 98 3b bc 32 22 a2 0b c2 0d 2b 9d ce 63 52 8d 9b Data Ascii: D!Mb;?=I,hX81@oKSfF0YQ^&2kPc.S}q0a91+dR_d$}e0:Z3R"$W[l`?#an9G(:X5.ZgmXJ:#""]ab;d'$I25$k;2"+cR

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
95	192.168.2.6	49828	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:43 UTC	417	OUT	GET /img/favicon.ico HTTP/1.1 Host: desktop.telegram.org Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=766c346bbeb12ea2e2_5837296247655499236
2024-09-29 02:42:43 UTC	383	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:43 GMT Content-Type: image/x-icon Content-Length: 15086 Last-Modified: Thu, 21 Apr 2022 13:47:47 GMT Connection: close ETag: "62616083-3aee" Expires: Sun, 06 Oct 2024 02:42:43 GMT Cache-Control: max-age=604800 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Accept-Ranges: bytes
2024-09-29 02:42:43 UTC	15086	IN	Data Raw: 00 00 01 00 03 00 30 30 00 00 01 00 20 00 a8 25 00 00 36 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 de 25 00 00 10 10 00 00 01 00 20 00 68 04 00 00 86 36 00 00 28 00 00 00 30 00 00 00 60 00 00 00 01 00 20 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 da 9e 22 0d d9 9e 22 36 d9 9e 22 6f d9 9e 22 a4 d9 9e 22 cd d9 9e 22 e7 d9 9e 22 f7 d9 9e 22 fe d9 9e 22 fe d9 9e 22 f7 d9 9e 22 e7 d9 9e 22 cd d9 9e 22 a4 d9 9e 22 6f d9 9e 22 36 da 9e 23 0d 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: 00 %6 % h6(0` $""6"o"""""""""""o"6#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
96	192.168.2.6	49815	149.154.167.99	443	5504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:51 UTC	699	OUT	GET /dl/ios HTTP/1.1 Host: telegram.org Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: stel_ssid=441cadde235ffdea6d_9597416750795031454
2024-09-29 02:42:51 UTC	346	IN	HTTP/1.1 302 Found Server: nginx/1.18.0 Date: Sun, 29 Sep 2024 02:42:51 GMT Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Pragma: no-cache Cache-control: no-store Location: https://itunes.apple.com/app/telegram-messenger/id686449807 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload

Session ID	Source IP	Source Port	Destination IP	Destination Port
97	192.168.2.6	49860	40.113.103.199	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:58 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 79 71 62 62 39 45 71 4c 2b 45 69 35 4d 70 77 47 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 30 64 63 64 65 65 35 36 35 61 34 66 35 65 34 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: yqbb9EqL+Ei5MpwG.1Context: 60dcdee565a4f5e4
2024-09-29 02:42:58 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-29 02:42:58 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 79 71 62 62 39 45 71 4c 2b 45 69 35 4d 70 77 47 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 30 64 63 64 65 65 35 36 35 61 34 66 35 65 34 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 61 58 45 6e 39 66 4d 54 56 31 48 4f 6b 36 78 5a 54 34 63 69 4f 74 44 64 41 52 42 4d 77 35 50 31 67 42 55 46 44 32 42 72 39 67 64 6b 6b 33 4f 44 32 67 4f 59 6b 6c 36 6d 70 4d 58 6e 57 54 70 45 39 73 4d 73 4d 74 57 39 53 54 67 76 76 2b 42 39 55 4c 55 66 45 37 76 34 41 67 31 39 6d 78 6a 2b 70 4d 43 70 69 67 69 4e 45 63 67 4a 57 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: yqbb9EqL+Ei5MpwG.2Context: 60dcdee565a4f5e4<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAaXEn9fMTV1HOk6xZT4ciOtDdARBMw5P1gBUFD2Br9gdkk3OD2gOYkl6mpMXnWTpE9sMsMtW9STgvv+B9ULUfE7v4Ag19mxj+pMCpigiNEcgJW
2024-09-29 02:42:58 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 79 71 62 62 39 45 71 4c 2b 45 69 35 4d 70 77 47 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 36 30 64 63 64 65 65 35 36 35 61 34 66 35 65 34 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: yqbb9EqL+Ei5MpwG.3Context: 60dcdee565a4f5e4<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-29 02:42:58 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-29 02:42:58 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 52 76 74 62 46 33 79 73 64 6b 36 6f 6f 67 69 35 56 75 32 48 65 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: RvtbF3ysdk6oogi5Vu2HeQ.0Payload parsing failed.

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2324, Parent PID: 5976

General

Target ID:	0
Start time:	22:41:35
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5504, Parent PID: 2324

General

Target ID:	2
Start time:	22:41:40
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2308,i,5190452410969668684,16090227208378395955,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 420, Parent PID: 5976

General

Target ID:	3
Start time:	22:41:42
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://distrosourcess5.sg-host.com/"
Imagebase:	0x7ff684c40000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://distrosourcess5.sg-host.com/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Windows Analysis Report
http://distrosourcess5.sg-host.com/